@tearleads/client-sdk 0.1.41 → 0.1.42

package/data/sqlite/verifiedManifestBundleSchema.d.ts

@@ -0,0 +1,174 @@
+import { type SqlTableSchema } from "./sqlTableSchema.js";
+/**
+ * Access-manifest bundles this device verified inside a writer projection,
+ * keyed by manifest hash. A later projection read cites them so the API can
+ * omit their bytes; the client refills each omission from this row and
+ * verifies the rebuilt projection from scratch. Rows are neither trust nor
+ * checkpoint state: a missing, evicted, or damaged row only costs bytes.
+ *
+ * Columns:
+ * - `manifestHash`: Manifest hash; equals the stored bundle's `manifestHash`.
+ * - `organizationId`, `objectKind`, `objectId`, `epoch`: The verified
+ *   manifest's object, used to cite the lineage relevant to a request.
+ * - `bundleJson`: The exact verified bundle as JSON.
+ * - `bundleDigest`: SHA-256 hex of `bundleJson`; a mismatch drops the row.
+ * - `verifiedAt`: Latest local verification time; oldest rows evict first.
+ */
+export declare const verifiedAccessManifestBundles: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "verified_access_manifest_bundles";
+    schema: undefined;
+    columns: {
+        manifestHash: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "manifest_hash";
+            tableName: "verified_access_manifest_bundles";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        organizationId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "organization_id";
+            tableName: "verified_access_manifest_bundles";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        objectKind: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "object_kind";
+            tableName: "verified_access_manifest_bundles";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        objectId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "object_id";
+            tableName: "verified_access_manifest_bundles";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        epoch: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "epoch";
+            tableName: "verified_access_manifest_bundles";
+            dataType: "number";
+            columnType: "SQLiteInteger";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        bundleJson: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "bundle_json";
+            tableName: "verified_access_manifest_bundles";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        bundleDigest: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "bundle_digest";
+            tableName: "verified_access_manifest_bundles";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        verifiedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "verified_at";
+            tableName: "verified_access_manifest_bundles";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+    };
+    dialect: "sqlite";
+}>;
+export declare const verifiedManifestBundleTables: ReadonlyArray<SqlTableSchema>;

package/data/sqlite/verifiedManifestBundleSchema.js

@@ -0,0 +1,36 @@
+import { desc } from "drizzle-orm";
+import { index, integer, sqliteTable, text } from "drizzle-orm/sqlite-core";
+import { defineSqlTableSchema } from "./sqlTableSchema.js";
+/**
+ * Access-manifest bundles this device verified inside a writer projection,
+ * keyed by manifest hash. A later projection read cites them so the API can
+ * omit their bytes; the client refills each omission from this row and
+ * verifies the rebuilt projection from scratch. Rows are neither trust nor
+ * checkpoint state: a missing, evicted, or damaged row only costs bytes.
+ *
+ * Columns:
+ * - `manifestHash`: Manifest hash; equals the stored bundle's `manifestHash`.
+ * - `organizationId`, `objectKind`, `objectId`, `epoch`: The verified
+ *   manifest's object, used to cite the lineage relevant to a request.
+ * - `bundleJson`: The exact verified bundle as JSON.
+ * - `bundleDigest`: SHA-256 hex of `bundleJson`; a mismatch drops the row.
+ * - `verifiedAt`: Latest local verification time; oldest rows evict first.
+ */
+export const verifiedAccessManifestBundles = sqliteTable("verified_access_manifest_bundles", {
+    manifestHash: text("manifest_hash").primaryKey(),
+    organizationId: text("organization_id").notNull(),
+    objectKind: text("object_kind").notNull(),
+    objectId: text("object_id").notNull(),
+    epoch: integer("epoch").notNull(),
+    bundleJson: text("bundle_json").notNull(),
+    bundleDigest: text("bundle_digest").notNull(),
+    verifiedAt: text("verified_at").notNull(),
+}, (table) => [
+    index("verified_access_manifest_bundles_object_idx").on(table.objectKind, table.objectId, desc(table.epoch)),
+    index("verified_access_manifest_bundles_verified_at_idx").on(table.verifiedAt),
+    index("verified_access_manifest_bundles_organization_idx").on(table.organizationId),
+]);
+export const verifiedManifestBundleTables = [
+    defineSqlTableSchema(verifiedAccessManifestBundles),
+];
+//# sourceMappingURL=verifiedManifestBundleSchema.js.map

package/data/sqlite/verifiedManifestBundleSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedManifestBundleSchema.js","sourceRoot":"","sources":["verifiedManifestBundleSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAuB,MAAM,kBAAkB,CAAC;AAE7E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,WAAW,CACtD,kCAAkC,EAClC;IACE,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,UAAU,EAAE;IAChD,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IACjC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;CAC1C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,6CAA6C,CAAC,CAAC,EAAE,CACrD,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,QAAQ,EACd,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAClB;IACD,KAAK,CAAC,kDAAkD,CAAC,CAAC,EAAE,CAC1D,KAAK,CAAC,UAAU,CACjB;IACD,KAAK,CAAC,mDAAmD,CAAC,CAAC,EAAE,CAC3D,KAAK,CAAC,cAAc,CACrB;CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAkC;IACzE,oBAAoB,CAAC,6BAA6B,CAAC;CACpD,CAAC","sourcesContent":["import { desc } from \"drizzle-orm\";\nimport { index, integer, sqliteTable, text } from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema, type SqlTableSchema } from \"./sqlTableSchema\";\n\n/**\n * Access-manifest bundles this device verified inside a writer projection,\n * keyed by manifest hash. A later projection read cites them so the API can\n * omit their bytes; the client refills each omission from this row and\n * verifies the rebuilt projection from scratch. Rows are neither trust nor\n * checkpoint state: a missing, evicted, or damaged row only costs bytes.\n *\n * Columns:\n * - `manifestHash`: Manifest hash; equals the stored bundle's `manifestHash`.\n * - `organizationId`, `objectKind`, `objectId`, `epoch`: The verified\n *   manifest's object, used to cite the lineage relevant to a request.\n * - `bundleJson`: The exact verified bundle as JSON.\n * - `bundleDigest`: SHA-256 hex of `bundleJson`; a mismatch drops the row.\n * - `verifiedAt`: Latest local verification time; oldest rows evict first.\n */\nexport const verifiedAccessManifestBundles = sqliteTable(\n  \"verified_access_manifest_bundles\",\n  {\n    manifestHash: text(\"manifest_hash\").primaryKey(),\n    organizationId: text(\"organization_id\").notNull(),\n    objectKind: text(\"object_kind\").notNull(),\n    objectId: text(\"object_id\").notNull(),\n    epoch: integer(\"epoch\").notNull(),\n    bundleJson: text(\"bundle_json\").notNull(),\n    bundleDigest: text(\"bundle_digest\").notNull(),\n    verifiedAt: text(\"verified_at\").notNull(),\n  },\n  (table) => [\n    index(\"verified_access_manifest_bundles_object_idx\").on(\n      table.objectKind,\n      table.objectId,\n      desc(table.epoch),\n    ),\n    index(\"verified_access_manifest_bundles_verified_at_idx\").on(\n      table.verifiedAt,\n    ),\n    index(\"verified_access_manifest_bundles_organization_idx\").on(\n      table.organizationId,\n    ),\n  ],\n);\n\nexport const verifiedManifestBundleTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(verifiedAccessManifestBundles),\n];\n"]}

package/internal/api-client/ApiClient.d.ts

@@ -10,11 +10,12 @@ import { type UploadMultipartBlobPartBytesRequest } from "./routes/blobs/get.js"
 import { type ContainerKekLogOptions } from "./routes/containers/reads.js";
 import { type DocumentPurgeProofOptions } from "./routes/documents/mutations.js";
 import type { HttpMethod, ListContainerDocumentsOptions, ListDocumentEditAttributionRangesOptions, RequestResult, RequestResultOptions } from "./types.js";
+import type { VerifiedManifestCitations } from "./verifiedManifestCitations.js";
 type ExpiredHandler = () => boolean | Promise<boolean>;
 type PaymentRequiredHandler = (organizationId: string | null) => void;
 export declare class ApiClient {
     private readonly requestRuntime;
-    private readonly projectionHistory;
+    private verifiedManifestCitations;
     private readonly containerDocumentListRequestsByKey;
     private readonly containerParentLaneRequestsByKey;
     private readonly containerWriterProjectionRequestsByContainerId;
@@ -59,6 +60,8 @@ export declare class ApiClient {
     setOnApiVersion(handler: ((version: number) => void) | null): void;
     setOnSessionExpired(handler: ExpiredHandler | null): void;
     setOnPaymentRequired(handler: PaymentRequiredHandler | null): void;
+    /** Verified bundles to cite on projection reads, scoped by their owner. */
+    setVerifiedManifestCitations(source: VerifiedManifestCitations | null): void;
     setAuthToken(token: string | null): void;
     getAuthToken(): string | null;
     getRequestFailure(input: {
@@ -2572,11 +2575,6 @@ export declare class ApiClient {
             manifestHash: string;
             state: Record<string, unknown>;
         }[];
-        historyPrefixes?: {
-            key: string;
-            count: number;
-            digest: string;
-        }[] | undefined;
     } | null>;
     getContainerReplacementAuthorizationsResult(containerId: string, replacesOrganizationId: string): Promise<RequestResult<{
         authorizations: {
@@ -3405,11 +3403,6 @@ export declare class ApiClient {
             manifestHash: string;
             state: Record<string, unknown>;
         }[];
-        historyPrefixes?: {
-            key: string;
-            count: number;
-            digest: string;
-        }[] | undefined;
         contentKeyBundleStale?: true | undefined;
     } | null>;
     getDocumentEditAttribution(documentId: string, requestKey?: string): Promise<{

package/internal/api-client/ApiClient.js

@@ -6,7 +6,6 @@ import { getDocumentPurgeProof as readPurgeProof, purgeDocument as submitDocumen
 import { createOperationTransport, } from "./operationTransportFactory.js";
 import { getOrganizationPolicyHistoryResult as organizationHistory } from "./organizationPolicyHistory.js";
 import { PrincipalPolicyRequests } from "./principalPolicyRequests.js";
-import { ProjectionHistoryTransport } from "./projectionHistoryTransport.js";
 import { bindPrototypeMethods, cachedRequest, dedupedRequest, evictWriterProjectionIfSyncChanged, listContainerDocumentsRequestKey, listContainerParentLanesRequestKey, } from "./requestInternals.js";
 import { destroySession as authDestroySession, listSessions as authListSessions, logout as authLogout, userIdentity as authUserIdentity, } from "./routes/auth/session.js";
 import { bindBlobAttachment as blobAttachmentBind, detachBlobAttachment as blobAttachmentDetach, } from "./routes/blobs/attachments.js";
@@ -37,7 +36,7 @@ const CONTAINER_ROTATIONS = {
 };
 export class ApiClient {
     requestRuntime;
-    projectionHistory = new ProjectionHistoryTransport();
+    verifiedManifestCitations = null;
     containerDocumentListRequestsByKey = new Map();
     containerParentLaneRequestsByKey = new Map();
     containerWriterProjectionRequestsByContainerId = new CitingProjectionCache();
@@ -57,15 +56,14 @@ export class ApiClient {
         bindPrototypeMethods(this, ApiClient.prototype);
         this.requestRuntime = new ApiRequestRuntime(baseUrl, instrumentation);
         this.principalPolicyRequests = new PrincipalPolicyRequests(this.requestRuntime, this.principalPolicyRequestsByKey, this.clearWriterProjectionCaches);
-        const projectionRequests = writerProjectionRequests(this.requestRuntime);
-        this.request = this.projectionHistory.wrapRequest(projectionRequests.request);
-        this.requestResult = this.projectionHistory.wrapRequestResult(projectionRequests.requestResult);
+        const projectionRequests = writerProjectionRequests(this.requestRuntime, () => this.verifiedManifestCitations);
+        this.request = projectionRequests.request;
+        this.requestResult = projectionRequests.requestResult;
         this.transport = createOperationTransport(this.requestRuntime.responseRequest);
         this.documentAttributionRequests = new DocumentAttributionRequests(this.transport);
         this.webSocketTickets = new WebSocketTickets(this.transport, () => this.getAuthToken());
     }
     clearAuthScopedCaches() {
-        this.projectionHistory.clear();
         this.containerDocumentListRequestsByKey.clear();
         this.containerParentLaneRequestsByKey.clear();
         this.documentAttachmentListRequestsByDocumentId.clear();
@@ -183,6 +181,10 @@ export class ApiClient {
     setOnPaymentRequired(handler) {
         this.requestRuntime.setOnPaymentRequired(handler);
     }
+    /** Verified bundles to cite on projection reads, scoped by their owner. */
+    setVerifiedManifestCitations(source) {
+        this.verifiedManifestCitations = source;
+    }
     setAuthToken(token) {
         if (this.requestRuntime.setAuthToken(token)) {
             this.clearAuthScopedCaches();