@tearleads/client-sdk 0.1.41 → 0.1.42

package/internal/crypto/projectionHistory.js

@@ -1,90 +0,0 @@
-import { bytesToHex } from "./hex.js";
-import { createIncrementalSha256 } from "./incrementalSha256.js";
-import { projectionHistoryArrays, } from "./projectionHistorySlots.js";
-function historyDigest(key, values) {
-    const hash = createIncrementalSha256();
-    hash.update(new TextEncoder().encode(JSON.stringify(["tearleads.projection-history", key, values])));
-    return bytesToHex(hash.digest());
-}
-/** Byte commitments describe evidence, not an authorization or verification result. */
-export function captureProjectionHistory(projection) {
-    return projectionHistoryArrays(projection).flatMap((array) => array.chains.flatMap((chain) => {
-        if (chain.values.length === 0)
-            return [];
-        const values = structuredClone(chain.values);
-        return [
-            {
-                arrayKey: array.key,
-                values,
-                prefix: {
-                    key: chain.key,
-                    count: values.length,
-                    digest: historyDigest(chain.key, values),
-                },
-            },
-        ];
-    }));
-}
-/** Call only after normal server authorization and stored-evidence verification. */
-export function omitProjectionHistory(projection, hints) {
-    if (hints.length === 0)
-        return projection;
-    // Server loaders may share arrays and objects between paths. JSON wire
-    // locations are independent: trimming one must not change another slot.
-    const result = JSON.parse(JSON.stringify(projection));
-    const requested = new Map(hints.map((hint) => [hint.key, hint]));
-    const omitted = [];
-    for (const array of projectionHistoryArrays(result)) {
-        const removed = new Map();
-        for (const chain of array.chains) {
-            const hint = requested.get(chain.key);
-            if (!hint || hint.count > chain.values.length)
-                continue;
-            const prefix = chain.values.slice(0, hint.count);
-            if (historyDigest(chain.key, prefix) !== hint.digest)
-                continue;
-            for (const item of prefix)
-                removed.set(item, (removed.get(item) ?? 0) + 1);
-            omitted.push(hint);
-        }
-        const retained = array.values.filter((value) => {
-            const remaining = removed.get(value) ?? 0;
-            if (remaining === 0)
-                return true;
-            removed.set(value, remaining - 1);
-            return false;
-        });
-        array.values.length = 0;
-        for (const value of retained)
-            array.values.push(value);
-    }
-    if (omitted.length)
-        result.historyPrefixes = omitted;
-    return result;
-}
-/** Rebuild exact cached evidence before the caller performs all ordinary checks. */
-export function restoreProjectionHistory(projection, requested) {
-    const arrays = new Map(projectionHistoryArrays(projection).map((array) => [array.key, array]));
-    const available = new Map(requested.map((entry) => [entry.prefix.key, entry]));
-    for (const prefix of projection.historyPrefixes ?? []) {
-        const entry = available.get(prefix.key);
-        if (!entry ||
-            entry.prefix.count !== prefix.count ||
-            entry.prefix.digest !== prefix.digest)
-            return false;
-        const target = arrays.get(entry.arrayKey);
-        if (!target || historyDigest(prefix.key, entry.values) !== prefix.digest)
-            return false;
-        const suffix = target.values.slice();
-        target.values.length = 0;
-        for (const value of structuredClone(entry.values))
-            target.values.push(value);
-        for (const value of suffix)
-            target.values.push(value);
-        target.restoreOrder?.();
-        available.delete(prefix.key);
-    }
-    delete projection.historyPrefixes;
-    return true;
-}
-//# sourceMappingURL=projectionHistory.js.map

package/internal/crypto/projectionHistory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"projectionHistory.js","sourceRoot":"","sources":["projectionHistory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAEL,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AASlC,SAAS,aAAa,CAAC,GAAW,EAAE,MAA0B;IAC5D,MAAM,IAAI,GAAG,uBAAuB,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM,CACT,IAAI,WAAW,EAAE,CAAC,MAAM,CACtB,IAAI,CAAC,SAAS,CAAC,CAAC,8BAA8B,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAC9D,CACF,CAAC;IACF,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,wBAAwB,CACtC,UAA6B;IAE7B,OAAO,uBAAuB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3D,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7B,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO;YACL;gBACE,QAAQ,EAAE,KAAK,CAAC,GAAG;gBACnB,MAAM;gBACN,MAAM,EAAE;oBACN,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,KAAK,EAAE,MAAM,CAAC,MAAM;oBACpB,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;iBACzC;aACF;SACF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CACnC,UAAa,EACb,KAAyC;IAEzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IAC1C,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,MAAM,GAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM;gBAAE,SAAS;YACxD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM;gBAAE,SAAS;YAC/D,KAAK,MAAM,IAAI,IAAI,MAAM;gBACvB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,SAAS,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI,QAAQ;YAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC;IACrD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,wBAAwB,CACtC,UAA6B,EAC7B,SAA+C;IAE/C,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,uBAAuB,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CACvE,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CACpD,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxC,IACE,CAAC,KAAK;YACN,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;YACnC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAErC,OAAO,KAAK,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM;YACtE,OAAO,KAAK,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;QACxB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,UAAU,CAAC,eAAe,CAAC;IAClC,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { ProjectionHistoryPrefix } from \"@tearleads/validators/util\";\nimport { bytesToHex } from \"./hex\";\nimport { createIncrementalSha256 } from \"./incrementalSha256\";\nimport {\n  type HistoryProjection,\n  projectionHistoryArrays,\n} from \"./projectionHistorySlots\";\n\nexport type { HistoryProjection } from \"./projectionHistorySlots\";\nexport interface RetainedProjectionHistory {\n  readonly prefix: ProjectionHistoryPrefix;\n  readonly arrayKey: string;\n  readonly values: readonly unknown[];\n}\n\nfunction historyDigest(key: string, values: readonly unknown[]): string {\n  const hash = createIncrementalSha256();\n  hash.update(\n    new TextEncoder().encode(\n      JSON.stringify([\"tearleads.projection-history\", key, values]),\n    ),\n  );\n  return bytesToHex(hash.digest());\n}\n\n/** Byte commitments describe evidence, not an authorization or verification result. */\nexport function captureProjectionHistory(\n  projection: HistoryProjection,\n): RetainedProjectionHistory[] {\n  return projectionHistoryArrays(projection).flatMap((array) =>\n    array.chains.flatMap((chain) => {\n      if (chain.values.length === 0) return [];\n      const values = structuredClone(chain.values);\n      return [\n        {\n          arrayKey: array.key,\n          values,\n          prefix: {\n            key: chain.key,\n            count: values.length,\n            digest: historyDigest(chain.key, values),\n          },\n        },\n      ];\n    }),\n  );\n}\n\n/** Call only after normal server authorization and stored-evidence verification. */\nexport function omitProjectionHistory<T extends HistoryProjection>(\n  projection: T,\n  hints: readonly ProjectionHistoryPrefix[],\n): T {\n  if (hints.length === 0) return projection;\n  // Server loaders may share arrays and objects between paths. JSON wire\n  // locations are independent: trimming one must not change another slot.\n  const result: T = JSON.parse(JSON.stringify(projection));\n  const requested = new Map(hints.map((hint) => [hint.key, hint]));\n  const omitted: ProjectionHistoryPrefix[] = [];\n  for (const array of projectionHistoryArrays(result)) {\n    const removed = new Map<unknown, number>();\n    for (const chain of array.chains) {\n      const hint = requested.get(chain.key);\n      if (!hint || hint.count > chain.values.length) continue;\n      const prefix = chain.values.slice(0, hint.count);\n      if (historyDigest(chain.key, prefix) !== hint.digest) continue;\n      for (const item of prefix)\n        removed.set(item, (removed.get(item) ?? 0) + 1);\n      omitted.push(hint);\n    }\n    const retained = array.values.filter((value) => {\n      const remaining = removed.get(value) ?? 0;\n      if (remaining === 0) return true;\n      removed.set(value, remaining - 1);\n      return false;\n    });\n    array.values.length = 0;\n    for (const value of retained) array.values.push(value);\n  }\n  if (omitted.length) result.historyPrefixes = omitted;\n  return result;\n}\n\n/** Rebuild exact cached evidence before the caller performs all ordinary checks. */\nexport function restoreProjectionHistory(\n  projection: HistoryProjection,\n  requested: readonly RetainedProjectionHistory[],\n): boolean {\n  const arrays = new Map(\n    projectionHistoryArrays(projection).map((array) => [array.key, array]),\n  );\n  const available = new Map(\n    requested.map((entry) => [entry.prefix.key, entry]),\n  );\n  for (const prefix of projection.historyPrefixes ?? []) {\n    const entry = available.get(prefix.key);\n    if (\n      !entry ||\n      entry.prefix.count !== prefix.count ||\n      entry.prefix.digest !== prefix.digest\n    )\n      return false;\n    const target = arrays.get(entry.arrayKey);\n    if (!target || historyDigest(prefix.key, entry.values) !== prefix.digest)\n      return false;\n    const suffix = target.values.slice();\n    target.values.length = 0;\n    for (const value of structuredClone(entry.values))\n      target.values.push(value);\n    for (const value of suffix) target.values.push(value);\n    target.restoreOrder?.();\n    available.delete(prefix.key);\n  }\n  delete projection.historyPrefixes;\n  return true;\n}\n"]}

package/internal/crypto/projectionHistorySlots.d.ts

@@ -1,13 +0,0 @@
-import type { ContainerWriterProjectionResponse, DocumentWriterProjectionResponse } from "../validators/response/index.js";
-export type HistoryProjection = ContainerWriterProjectionResponse | DocumentWriterProjectionResponse;
-export interface ProjectionHistoryArray {
-    readonly key: string;
-    readonly values: unknown[];
-    readonly restoreOrder?: (() => void) | undefined;
-    readonly chains: readonly {
-        readonly key: string;
-        readonly values: unknown[];
-    }[];
-}
-/** Only these evidence arrays can be omitted. Current heads and keys always travel. */
-export declare function projectionHistoryArrays(projection: HistoryProjection): ProjectionHistoryArray[];

package/internal/crypto/projectionHistorySlots.js

@@ -1,81 +0,0 @@
-import { compareCanonicalStrings } from "./canonicalOrdering.js";
-function manifestEpoch(bundle) {
-    const epoch = Reflect.get(bundle.manifest, "epoch");
-    return typeof epoch === "number" && Number.isFinite(epoch) ? epoch : 0;
-}
-function isDocumentProjection(projection) {
-    return "documentId" in projection && "documentManifest" in projection;
-}
-function unambiguousArrays(arrays) {
-    const occurrences = new Map();
-    for (const array of arrays)
-        occurrences.set(array.key, (occurrences.get(array.key) ?? 0) + 1);
-    // Ambiguous locations cannot safely negotiate an omission. Deliver them full.
-    return arrays.filter((array) => occurrences.get(array.key) === 1);
-}
-function manifestHistoryArray(key, values, newestFirst) {
-    const groups = new Map();
-    for (const value of values) {
-        const chain = JSON.stringify([
-            key,
-            Reflect.get(value.manifest, "organizationId"),
-            Reflect.get(value.manifest, "objectKind"),
-            Reflect.get(value.manifest, "objectId"),
-        ]);
-        const entries = groups.get(chain) ?? [];
-        entries.push(value);
-        groups.set(chain, entries);
-    }
-    return {
-        key,
-        values,
-        restoreOrder: newestFirst
-            ? () => {
-                values.sort((a, b) => manifestEpoch(b) - manifestEpoch(a));
-            }
-            : undefined,
-        chains: [...groups].map(([chain, entries]) => ({
-            key: chain,
-            values: entries.sort((a, b) => manifestEpoch(a) - manifestEpoch(b) ||
-                compareCanonicalStrings(a.manifestHash, b.manifestHash)),
-        })),
-    };
-}
-/** Only these evidence arrays can be omitted. Current heads and keys always travel. */
-export function projectionHistoryArrays(projection) {
-    const arrays = [];
-    const identity = isDocumentProjection(projection)
-        ? [
-            "document",
-            Reflect.get(projection.documentManifest.manifest, "organizationId"),
-            projection.documentId,
-        ]
-        : ["container", projection.organizationId, projection.containerId];
-    const add = (name, values) => {
-        const key = JSON.stringify([...identity, name]);
-        arrays.push({ key, values, chains: [{ key, values }] });
-    };
-    const manifests = (name, values, newestFirst = false) => {
-        const key = JSON.stringify([...identity, name]);
-        arrays.push(manifestHistoryArray(key, values, newestFirst));
-    };
-    const path = (name, value) => {
-        for (const [index, kek] of value.containerKeks.entries())
-            manifests(`${name}:kek:${index}:${kek.containerId}`, kek.containerManifestHistory);
-    };
-    const evidence = projection.policyEvidence;
-    add("organizationPayloads", evidence.organizationPayloads);
-    if (!isDocumentProjection(projection))
-        path("container", projection);
-    else {
-        for (const [index, value] of projection.authorizingContainerPaths.entries())
-            path(`path:${index}:${value.containerId}`, value);
-        // A dependency path is ordered root-to-leaf, not an unordered history.
-        for (const [index, values,] of projection.documentManifestContainerPaths.entries())
-            add(`documentManifestContainerPaths:${index}`, values);
-        manifests("documentContainerManifestHistory", projection.documentContainerManifestHistory);
-        manifests("documentManifestHistory", projection.documentManifestHistory, true);
-    }
-    return unambiguousArrays(arrays);
-}
-//# sourceMappingURL=projectionHistorySlots.js.map

package/internal/crypto/projectionHistorySlots.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"projectionHistorySlots.js","sourceRoot":"","sources":["projectionHistorySlots.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAe9D,SAAS,aAAa,CAAC,MAAwC;IAC7D,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAA6B;IAE7B,OAAO,YAAY,IAAI,UAAU,IAAI,kBAAkB,IAAI,UAAU,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAgC;IAEhC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM;QACxB,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,8EAA8E;IAC9E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAW,EACX,MAA0C,EAC1C,WAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8C,CAAC;IACrE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,GAAG;YACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO;QACL,GAAG;QACH,MAAM;QACN,YAAY,EAAE,WAAW;YACvB,CAAC,CAAC,GAAG,EAAE;gBACH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC;YACH,CAAC,CAAC,SAAS;QACb,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,GAAG,EAAE,KAAK;YACV,MAAM,EAAE,OAAO,CAAC,IAAI,CAClB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC;gBACnC,uBAAuB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAC1D;SACF,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,uBAAuB,CACrC,UAA6B;IAE7B,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,UAAU,CAAC;QAC/C,CAAC,CAAC;YACE,UAAU;YACV,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YACnE,UAAU,CAAC,UAAU;SACtB;QACH,CAAC,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,MAAiB,EAAE,EAAE;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAChB,IAAY,EACZ,MAA0C,EAC1C,WAAW,GAAG,KAAK,EACnB,EAAE;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAkC,EAAE,EAAE;QAChE,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE;YACtD,SAAS,CACP,GAAG,IAAI,QAAQ,KAAK,IAAI,GAAG,CAAC,WAAW,EAAE,EACzC,GAAG,CAAC,wBAAwB,CAC7B,CAAC;IACN,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC;IAC3C,GAAG,CAAC,sBAAsB,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC3D,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;SAChE,CAAC;QACJ,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,yBAAyB,CAAC,OAAO,EAAE;YACzE,IAAI,CAAC,QAAQ,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;QACpD,uEAAuE;QACvE,KAAK,MAAM,CACT,KAAK,EACL,MAAM,EACP,IAAI,UAAU,CAAC,8BAA8B,CAAC,OAAO,EAAE;YACtD,GAAG,CAAC,kCAAkC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QACzD,SAAS,CACP,kCAAkC,EAClC,UAAU,CAAC,gCAAgC,CAC5C,CAAC;QACF,SAAS,CACP,yBAAyB,EACzB,UAAU,CAAC,uBAAuB,EAClC,IAAI,CACL,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC","sourcesContent":["import type {\n  AccessManifestBundleWireResponse,\n  ContainerKeyingPathResponse,\n  ContainerWriterProjectionResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport { compareCanonicalStrings } from \"./canonicalOrdering\";\n\nexport type HistoryProjection =\n  | ContainerWriterProjectionResponse\n  | DocumentWriterProjectionResponse;\nexport interface ProjectionHistoryArray {\n  readonly key: string;\n  readonly values: unknown[];\n  readonly restoreOrder?: (() => void) | undefined;\n  readonly chains: readonly {\n    readonly key: string;\n    readonly values: unknown[];\n  }[];\n}\n\nfunction manifestEpoch(bundle: AccessManifestBundleWireResponse): number {\n  const epoch: unknown = Reflect.get(bundle.manifest, \"epoch\");\n  return typeof epoch === \"number\" && Number.isFinite(epoch) ? epoch : 0;\n}\n\nfunction isDocumentProjection(\n  projection: HistoryProjection,\n): projection is DocumentWriterProjectionResponse {\n  return \"documentId\" in projection && \"documentManifest\" in projection;\n}\n\nfunction unambiguousArrays(\n  arrays: ProjectionHistoryArray[],\n): ProjectionHistoryArray[] {\n  const occurrences = new Map<string, number>();\n  for (const array of arrays)\n    occurrences.set(array.key, (occurrences.get(array.key) ?? 0) + 1);\n  // Ambiguous locations cannot safely negotiate an omission. Deliver them full.\n  return arrays.filter((array) => occurrences.get(array.key) === 1);\n}\n\nfunction manifestHistoryArray(\n  key: string,\n  values: AccessManifestBundleWireResponse[],\n  newestFirst: boolean,\n): ProjectionHistoryArray {\n  const groups = new Map<string, AccessManifestBundleWireResponse[]>();\n  for (const value of values) {\n    const chain = JSON.stringify([\n      key,\n      Reflect.get(value.manifest, \"organizationId\"),\n      Reflect.get(value.manifest, \"objectKind\"),\n      Reflect.get(value.manifest, \"objectId\"),\n    ]);\n    const entries = groups.get(chain) ?? [];\n    entries.push(value);\n    groups.set(chain, entries);\n  }\n  return {\n    key,\n    values,\n    restoreOrder: newestFirst\n      ? () => {\n          values.sort((a, b) => manifestEpoch(b) - manifestEpoch(a));\n        }\n      : undefined,\n    chains: [...groups].map(([chain, entries]) => ({\n      key: chain,\n      values: entries.sort(\n        (a, b) =>\n          manifestEpoch(a) - manifestEpoch(b) ||\n          compareCanonicalStrings(a.manifestHash, b.manifestHash),\n      ),\n    })),\n  };\n}\n\n/** Only these evidence arrays can be omitted. Current heads and keys always travel. */\nexport function projectionHistoryArrays(\n  projection: HistoryProjection,\n): ProjectionHistoryArray[] {\n  const arrays: ProjectionHistoryArray[] = [];\n  const identity = isDocumentProjection(projection)\n    ? [\n        \"document\",\n        Reflect.get(projection.documentManifest.manifest, \"organizationId\"),\n        projection.documentId,\n      ]\n    : [\"container\", projection.organizationId, projection.containerId];\n  const add = (name: string, values: unknown[]) => {\n    const key = JSON.stringify([...identity, name]);\n    arrays.push({ key, values, chains: [{ key, values }] });\n  };\n  const manifests = (\n    name: string,\n    values: AccessManifestBundleWireResponse[],\n    newestFirst = false,\n  ) => {\n    const key = JSON.stringify([...identity, name]);\n    arrays.push(manifestHistoryArray(key, values, newestFirst));\n  };\n  const path = (name: string, value: ContainerKeyingPathResponse) => {\n    for (const [index, kek] of value.containerKeks.entries())\n      manifests(\n        `${name}:kek:${index}:${kek.containerId}`,\n        kek.containerManifestHistory,\n      );\n  };\n  const evidence = projection.policyEvidence;\n  add(\"organizationPayloads\", evidence.organizationPayloads);\n  if (!isDocumentProjection(projection)) path(\"container\", projection);\n  else {\n    for (const [index, value] of projection.authorizingContainerPaths.entries())\n      path(`path:${index}:${value.containerId}`, value);\n    // A dependency path is ordered root-to-leaf, not an unordered history.\n    for (const [\n      index,\n      values,\n    ] of projection.documentManifestContainerPaths.entries())\n      add(`documentManifestContainerPaths:${index}`, values);\n    manifests(\n      \"documentContainerManifestHistory\",\n      projection.documentContainerManifestHistory,\n    );\n    manifests(\n      \"documentManifestHistory\",\n      projection.documentManifestHistory,\n      true,\n    );\n  }\n  return unambiguousArrays(arrays);\n}\n"]}

package/internal/validators/projectionHistoryRefinements.js

@@ -1,5 +0,0 @@
-export const projectionHistoryHeaderRefinement = {
-    id: "request.projection-history-prefixes",
-    description: "x-projection-history must decode to at most 32 prefixes with unique keys, positive safe integer counts, and lowercase SHA-256 digests",
-};
-//# sourceMappingURL=projectionHistoryRefinements.js.map

package/internal/validators/projectionHistoryRefinements.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"projectionHistoryRefinements.js","sourceRoot":"","sources":["projectionHistoryRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,EAAE,EAAE,qCAAqC;IACzC,WAAW,EACT,uIAAuI;CACjI,CAAC","sourcesContent":["export const projectionHistoryHeaderRefinement = {\n  id: \"request.projection-history-prefixes\",\n  description:\n    \"x-projection-history must decode to at most 32 prefixes with unique keys, positive safe integer counts, and lowercase SHA-256 digests\",\n} as const;\n"]}

package/internal/validators/util/projectionHistoryWire.d.ts

@@ -1,23 +0,0 @@
-import { z } from "zod";
-/** Request budgets restrict cache hints, never the history a reader can recover. */
-export declare const PROJECTION_HISTORY_HINT_CHARACTERS = 4096;
-declare const ProjectionHistoryPrefixSchema: z.ZodObject<{
-    key: z.ZodCustom<string, string>;
-    count: z.ZodCustom<number, number>;
-    digest: z.ZodCustom<string, string>;
-}, z.core.$strict>;
-export declare const ProjectionHistoryPrefixesSchema: z.ZodCustom<{
-    key: string;
-    count: number;
-    digest: string;
-}[], {
-    key: string;
-    count: number;
-    digest: string;
-}[]>;
-export type ProjectionHistoryPrefix = z.infer<typeof ProjectionHistoryPrefixSchema>;
-export declare function parseProjectionHistoryHints(value: string): ProjectionHistoryPrefix[] | null;
-export declare const ProjectionHistoryHeadersSchema: z.ZodObject<{
-    "x-projection-history": z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-export {};

package/internal/validators/util/projectionHistoryWire.js

@@ -1,33 +0,0 @@
-import { z } from "zod";
-import { registerJsonSchemaFragment, registerJsonSchemaRuntimeRefinements, } from "../jsonSchema.js";
-import { projectionHistoryHeaderRefinement } from "../projectionHistoryRefinements.js";
-import { arraySchema, boundedNonEmptyStringSchema, boundedPositiveIntegerSchema, sha256HexStringSchema, } from "../schema.js";
-/** Request budgets restrict cache hints, never the history a reader can recover. */
-export const PROJECTION_HISTORY_HINT_CHARACTERS = 4096;
-const ProjectionHistoryPrefixSchema = z.strictObject({
-    key: boundedNonEmptyStringSchema(512),
-    count: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),
-    digest: sha256HexStringSchema,
-});
-export const ProjectionHistoryPrefixesSchema = arraySchema(ProjectionHistoryPrefixSchema, 32);
-export function parseProjectionHistoryHints(value) {
-    try {
-        const parsed = ProjectionHistoryPrefixesSchema.safeParse(JSON.parse(decodeURIComponent(value)));
-        return parsed.success &&
-            new Set(parsed.data.map((item) => item.key)).size === parsed.data.length
-            ? parsed.data
-            : null;
-    }
-    catch {
-        return null;
-    }
-}
-const hintHeader = registerJsonSchemaFragment(z.string().max(PROJECTION_HISTORY_HINT_CHARACTERS), {
-    type: "string",
-    maxLength: PROJECTION_HISTORY_HINT_CHARACTERS,
-    description: "URI-encoded JSON array of exact device-verified history prefixes (key, count, digest); at most 32 unique keys",
-});
-export const ProjectionHistoryHeadersSchema = z.object({
-    "x-projection-history": registerJsonSchemaRuntimeRefinements(hintHeader.refine((value) => parseProjectionHistoryHints(value) !== null), [projectionHistoryHeaderRefinement]).optional(),
-});
-//# sourceMappingURL=projectionHistoryWire.js.map

package/internal/validators/util/projectionHistoryWire.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"projectionHistoryWire.js","sourceRoot":"","sources":["projectionHistoryWire.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,0BAA0B,EAC1B,oCAAoC,GACrC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,EACL,WAAW,EACX,2BAA2B,EAC3B,4BAA4B,EAC5B,qBAAqB,GACtB,MAAM,WAAW,CAAC;AAEnB,oFAAoF;AACpF,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;AACvD,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,GAAG,EAAE,2BAA2B,CAAC,GAAG,CAAC;IACrC,KAAK,EAAE,4BAA4B,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC5D,MAAM,EAAE,qBAAqB;CAC9B,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,WAAW,CACxD,6BAA6B,EAC7B,EAAE,CACH,CAAC;AAKF,MAAM,UAAU,2BAA2B,CACzC,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CACtD,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CACtC,CAAC;QACF,OAAO,MAAM,CAAC,OAAO;YACnB,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM;YACxE,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,0BAA0B,CAC3C,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,kCAAkC,CAAC,EAClD;IACE,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,kCAAkC;IAC7C,WAAW,EACT,+GAA+G;CAClH,CACF,CAAC;AACF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,sBAAsB,EAAE,oCAAoC,CAC1D,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,EACzE,CAAC,iCAAiC,CAAC,CACpC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport {\n  registerJsonSchemaFragment,\n  registerJsonSchemaRuntimeRefinements,\n} from \"../jsonSchema\";\nimport { projectionHistoryHeaderRefinement } from \"../projectionHistoryRefinements\";\nimport {\n  arraySchema,\n  boundedNonEmptyStringSchema,\n  boundedPositiveIntegerSchema,\n  sha256HexStringSchema,\n} from \"../schema\";\n\n/** Request budgets restrict cache hints, never the history a reader can recover. */\nexport const PROJECTION_HISTORY_HINT_CHARACTERS = 4096;\nconst ProjectionHistoryPrefixSchema = z.strictObject({\n  key: boundedNonEmptyStringSchema(512),\n  count: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),\n  digest: sha256HexStringSchema,\n});\nexport const ProjectionHistoryPrefixesSchema = arraySchema(\n  ProjectionHistoryPrefixSchema,\n  32,\n);\nexport type ProjectionHistoryPrefix = z.infer<\n  typeof ProjectionHistoryPrefixSchema\n>;\n\nexport function parseProjectionHistoryHints(\n  value: string,\n): ProjectionHistoryPrefix[] | null {\n  try {\n    const parsed = ProjectionHistoryPrefixesSchema.safeParse(\n      JSON.parse(decodeURIComponent(value)),\n    );\n    return parsed.success &&\n      new Set(parsed.data.map((item) => item.key)).size === parsed.data.length\n      ? parsed.data\n      : null;\n  } catch {\n    return null;\n  }\n}\n\nconst hintHeader = registerJsonSchemaFragment(\n  z.string().max(PROJECTION_HISTORY_HINT_CHARACTERS),\n  {\n    type: \"string\",\n    maxLength: PROJECTION_HISTORY_HINT_CHARACTERS,\n    description:\n      \"URI-encoded JSON array of exact device-verified history prefixes (key, count, digest); at most 32 unique keys\",\n  },\n);\nexport const ProjectionHistoryHeadersSchema = z.object({\n  \"x-projection-history\": registerJsonSchemaRuntimeRefinements(\n    hintHeader.refine((value) => parseProjectionHistoryHints(value) !== null),\n    [projectionHistoryHeaderRefinement],\n  ).optional(),\n});\n"]}