@tearleads/client-sdk 0.1.41 → 0.1.43

package/internal/api-client/verifiedManifestCitations.js

@@ -0,0 +1,60 @@
+import { isAccessManifestBundleWireResponse, } from "../validators/response/index.js";
+import { isSha256HexString, KNOWN_MANIFEST_HINT_LIMIT, } from "../validators/util/index.js";
+/** Citation only saves bytes: a source slower than this sends the read uncited. */
+export const MANIFEST_CITATION_DEADLINE_MS = 250;
+/**
+ * The source's answer, or nothing once the deadline passes, the caller
+ * aborts, or the source throws or rejects. A late answer is discarded: it can
+ * never reach a request that was already sent.
+ */
+function boundedCitation(source, target, signal) {
+    return new Promise((resolve) => {
+        let settled = false;
+        const finish = (bundles) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            signal?.removeEventListener("abort", abandon);
+            resolve(bundles);
+        };
+        const abandon = () => finish([]);
+        const timer = setTimeout(abandon, MANIFEST_CITATION_DEADLINE_MS);
+        if (signal?.aborted)
+            return abandon();
+        signal?.addEventListener("abort", abandon, { once: true });
+        try {
+            source.cite(target).then(finish, abandon);
+        }
+        catch {
+            abandon();
+        }
+    });
+}
+/**
+ * The bytes one request cites, copied so a later eviction or mutation of the
+ * source cannot change what fills its omissions. Citing only saves bytes, so
+ * it never blocks or fails a read: a slow, failing, or abandoned source
+ * yields no hints.
+ */
+export async function heldManifestCitations(source, target, signal) {
+    const held = new Map();
+    if (!source)
+        return held;
+    for (const bundle of await boundedCitation(source, target, signal)) {
+        if (held.size >= KNOWN_MANIFEST_HINT_LIMIT)
+            break;
+        if (!isAccessManifestBundleWireResponse(bundle) ||
+            !isSha256HexString(bundle.manifestHash) ||
+            held.has(bundle.manifestHash))
+            continue;
+        try {
+            held.set(bundle.manifestHash, structuredClone(bundle));
+        }
+        catch {
+            // An uncloneable entry is skipped; its manifest simply travels.
+        }
+    }
+    return held;
+}
+//# sourceMappingURL=verifiedManifestCitations.js.map

package/internal/api-client/verifiedManifestCitations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedManifestCitations.js","sourceRoot":"","sources":["verifiedManifestCitations.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,kCAAkC,GACnC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AAEpC,mFAAmF;AACnF,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAmBjD;;;;GAIG;AACH,SAAS,eAAe,CACtB,MAAiC,EACjC,MAA8B,EAC9B,MAA+B;IAE/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,OAA2B,EAAE,EAAE;YAC7C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QACjE,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,OAAO,EAAE,CAAC;QACtC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAwC,EACxC,MAA8B,EAC9B,MAAgC;IAEhC,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4C,CAAC;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,KAAK,MAAM,MAAM,IAAI,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACnE,IAAI,IAAI,CAAC,IAAI,IAAI,yBAAyB;YAAE,MAAM;QAClD,IACE,CAAC,kCAAkC,CAAC,MAAM,CAAC;YAC3C,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;YAE7B,SAAS;QACX,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import {\n  type AccessManifestBundleWireResponse,\n  isAccessManifestBundleWireResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  isSha256HexString,\n  KNOWN_MANIFEST_HINT_LIMIT,\n} from \"@tearleads/validators/util\";\n\n/** Citation only saves bytes: a source slower than this sends the read uncited. */\nexport const MANIFEST_CITATION_DEADLINE_MS = 250;\n\nexport interface WriterProjectionTarget {\n  readonly kind: \"container\" | \"document\";\n  readonly id: string;\n}\n\n/**\n * Verified access-manifest bundles a device durably holds that a writer\n * projection of `target` may cite, most useful first. This is never trust\n * input: the exact cited bytes only fill the response's omitted positions,\n * and the caller verifies the rebuilt projection exactly as a full one.\n */\nexport interface VerifiedManifestCitations {\n  cite(\n    target: WriterProjectionTarget,\n  ): Promise<readonly AccessManifestBundleWireResponse[]>;\n}\n\n/**\n * The source's answer, or nothing once the deadline passes, the caller\n * aborts, or the source throws or rejects. A late answer is discarded: it can\n * never reach a request that was already sent.\n */\nfunction boundedCitation(\n  source: VerifiedManifestCitations,\n  target: WriterProjectionTarget,\n  signal: AbortSignal | undefined,\n): Promise<readonly unknown[]> {\n  return new Promise((resolve) => {\n    let settled = false;\n    const finish = (bundles: readonly unknown[]) => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      signal?.removeEventListener(\"abort\", abandon);\n      resolve(bundles);\n    };\n    const abandon = () => finish([]);\n    const timer = setTimeout(abandon, MANIFEST_CITATION_DEADLINE_MS);\n    if (signal?.aborted) return abandon();\n    signal?.addEventListener(\"abort\", abandon, { once: true });\n    try {\n      source.cite(target).then(finish, abandon);\n    } catch {\n      abandon();\n    }\n  });\n}\n\n/**\n * The bytes one request cites, copied so a later eviction or mutation of the\n * source cannot change what fills its omissions. Citing only saves bytes, so\n * it never blocks or fails a read: a slow, failing, or abandoned source\n * yields no hints.\n */\nexport async function heldManifestCitations(\n  source: VerifiedManifestCitations | null,\n  target: WriterProjectionTarget,\n  signal?: AbortSignal | undefined,\n): Promise<Map<string, AccessManifestBundleWireResponse>> {\n  const held = new Map<string, AccessManifestBundleWireResponse>();\n  if (!source) return held;\n  for (const bundle of await boundedCitation(source, target, signal)) {\n    if (held.size >= KNOWN_MANIFEST_HINT_LIMIT) break;\n    if (\n      !isAccessManifestBundleWireResponse(bundle) ||\n      !isSha256HexString(bundle.manifestHash) ||\n      held.has(bundle.manifestHash)\n    )\n      continue;\n    try {\n      held.set(bundle.manifestHash, structuredClone(bundle));\n    } catch {\n      // An uncloneable entry is skipped; its manifest simply travels.\n    }\n  }\n  return held;\n}\n"]}

package/internal/api-client/writerProjectionRequests.js

@@ -1,20 +1,81 @@
 import { getContainerWriterProjectionOperation, getDocumentWriterProjectionOperation, } from "../validators/operation/index.js";
+import { decodeContainerWriterProjection, decodeDocumentWriterProjection, } from "../validators/response/index.js";
 import { principalHistoryRequest } from "./principalHistoryRequest.js";
-/** Preparation and body deadlines sit inside projection-history negotiation. */
-export function writerProjectionRequests(runtime) {
+import { PrincipalHistoryRequestContext } from "./principalHistoryRequestContext.js";
+import { heldManifestCitations, } from "./verifiedManifestCitations.js";
+const PROJECTION_PATH = /^\/(?:containers|documents)\/([^/?#]+)\/writer-projection$/u;
+function projectionId(path) {
+    const encoded = PROJECTION_PATH.exec(path)?.[1];
+    if (encoded === undefined)
+        return null;
+    try {
+        return decodeURIComponent(encoded);
+    }
+    catch {
+        return null;
+    }
+}
+function writerProjectionKind(operationId) {
+    if (operationId === "containers.writerProjection.get")
+        return "container";
+    if (operationId === "documents.writerProjection.get")
+        return "document";
+    return null;
+}
+function readProjection(runtime, input, held, context) {
+    const container = input.kind === "container";
+    return principalHistoryRequest(runtime, {
+        path: input.path,
+        validator: input.validator,
+        decode: (value) => container
+            ? decodeContainerWriterProjection(value, held)
+            : decodeDocumentWriterProjection(value, held),
+        method: "GET",
+        context,
+        operation: container
+            ? getContainerWriterProjectionOperation
+            : getDocumentWriterProjectionOperation,
+    });
+}
+/**
+ * Preparation and body deadlines sit inside the projection read. The wire
+ * cites each manifest bundle by hash; decoding resolves every citation, from
+ * the response or from the exact bytes this request declared held, before any
+ * validator, cache, or verifier sees the projection. A response this device
+ * cannot rebuild fails closed into one complete, hint-free refetch.
+ */
+async function citedProjectionRead(runtime, citations, input, options) {
+    // Bind the identity before citations load: an account switch while they
+    // load, or before the refetch, must not carry one identity's hints or
+    // answer into another's session. Each request rechecks this context.
+    const context = new PrincipalHistoryRequestContext(runtime, "GET", input.path, options);
+    const id = projectionId(input.path);
+    // Caller-specific headers make a request its own; it cites nothing. The
+    // caller's abort also ends a citation wait.
+    const held = id === null || options.headers !== undefined
+        ? new Map()
+        : await heldManifestCitations(citations, { kind: input.kind, id }, options.signal);
+    if (held.size === 0)
+        return readProjection(runtime, input, held, context);
+    const hinted = await readProjection(runtime, input, held, context.derive({
+        ...options,
+        headers: { "x-known-manifests": [...held.keys()].join(",") },
+        reportErrors: false,
+    }));
+    if (hinted.ok)
+        return hinted;
+    if (hinted.kind !== "shape") {
+        if (options.reportErrors !== false)
+            hinted.report();
+        return hinted;
+    }
+    return readProjection(runtime, input, new Map(), context.derive(options));
+}
+export function writerProjectionRequests(runtime, citations) {
     const requestResult = (path, validator, method, body, options, operation) => {
-        if (method === "GET" &&
-            (operation.id === "containers.writerProjection.get" ||
-                operation.id === "documents.writerProjection.get"))
-            return principalHistoryRequest(runtime, {
-                path,
-                validator,
-                method,
-                options: options ?? {},
-                operation: operation.id === "containers.writerProjection.get"
-                    ? getContainerWriterProjectionOperation
-                    : getDocumentWriterProjectionOperation,
-            });
+        const kind = method === "GET" ? writerProjectionKind(operation.id) : null;
+        if (kind)
+            return citedProjectionRead(runtime, citations(), { kind, path, validator }, options ?? {});
         return runtime.requestResult(path, validator, method, body, options, operation);
     };
     const request = async (...args) => {

package/internal/api-client/writerProjectionRequests.js.map

@@ -1 +1 @@
-{"version":3,"file":"writerProjectionRequests.js","sourceRoot":"","sources":["writerProjectionRequests.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qCAAqC,EACrC,oCAAoC,GACrC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,gFAAgF;AAChF,MAAM,UAAU,wBAAwB,CAAC,OAA0B;IAIjE,MAAM,aAAa,GAA6B,CAC9C,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,EACT,EAAE;QACF,IACE,MAAM,KAAK,KAAK;YAChB,CAAC,SAAS,CAAC,EAAE,KAAK,iCAAiC;gBACjD,SAAS,CAAC,EAAE,KAAK,gCAAgC,CAAC;YAEpD,OAAO,uBAAuB,CAAC,OAAO,EAAE;gBACtC,IAAI;gBACJ,SAAS;gBACT,MAAM;gBACN,OAAO,EAAE,OAAO,IAAI,EAAE;gBACtB,SAAS,EACP,SAAS,CAAC,EAAE,KAAK,iCAAiC;oBAChD,CAAC,CAAC,qCAAqC;oBACvC,CAAC,CAAC,oCAAoC;aAC3C,CAAC,CAAC;QACL,OAAO,OAAO,CAAC,aAAa,CAC1B,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,CACV,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,OAAO,GAAuB,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AACpC,CAAC","sourcesContent":["import {\n  getContainerWriterProjectionOperation,\n  getDocumentWriterProjectionOperation,\n} from \"@tearleads/validators/operation\";\nimport type { ApiRequestRuntime } from \"./apiRequestRuntime\";\nimport { principalHistoryRequest } from \"./principalHistoryRequest\";\nimport type { OperationRequestFn, OperationRequestResultFn } from \"./types\";\n\n/** Preparation and body deadlines sit inside projection-history negotiation. */\nexport function writerProjectionRequests(runtime: ApiRequestRuntime): {\n  request: OperationRequestFn;\n  requestResult: OperationRequestResultFn;\n} {\n  const requestResult: OperationRequestResultFn = (\n    path,\n    validator,\n    method,\n    body,\n    options,\n    operation,\n  ) => {\n    if (\n      method === \"GET\" &&\n      (operation.id === \"containers.writerProjection.get\" ||\n        operation.id === \"documents.writerProjection.get\")\n    )\n      return principalHistoryRequest(runtime, {\n        path,\n        validator,\n        method,\n        options: options ?? {},\n        operation:\n          operation.id === \"containers.writerProjection.get\"\n            ? getContainerWriterProjectionOperation\n            : getDocumentWriterProjectionOperation,\n      });\n    return runtime.requestResult(\n      path,\n      validator,\n      method,\n      body,\n      options,\n      operation,\n    );\n  };\n  const request: OperationRequestFn = async (...args) => {\n    const result = await requestResult(...args);\n    return result.ok ? result.data : null;\n  };\n  return { request, requestResult };\n}\n"]}
+{"version":3,"file":"writerProjectionRequests.js","sourceRoot":"","sources":["writerProjectionRequests.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qCAAqC,EACrC,oCAAoC,GACrC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAEL,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAOlF,OAAO,EACL,qBAAqB,GAGtB,MAAM,6BAA6B,CAAC;AAIrC,MAAM,eAAe,GACnB,6DAA6D,CAAC;AAEhE,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,WAAmB;IAEnB,IAAI,WAAW,KAAK,iCAAiC;QAAE,OAAO,WAAW,CAAC;IAC1E,IAAI,WAAW,KAAK,gCAAgC;QAAE,OAAO,UAAU,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CACrB,OAA0B,EAC1B,KAIC,EACD,IAAiB,EACjB,OAAuC;IAEvC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;IAC7C,OAAO,uBAAuB,CAAC,OAAO,EAAE;QACtC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,SAAS;YACP,CAAC,CAAC,+BAA+B,CAAC,KAAK,EAAE,IAAI,CAAC;YAC9C,CAAC,CAAC,8BAA8B,CAAC,KAAK,EAAE,IAAI,CAAC;QACjD,MAAM,EAAE,KAAK;QACb,OAAO;QACP,SAAS,EAAE,SAAS;YAClB,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,oCAAoC;KACzC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,mBAAmB,CAChC,OAA0B,EAC1B,SAA2C,EAC3C,KAIC,EACD,OAA6B;IAE7B,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrE,MAAM,OAAO,GAAG,IAAI,8BAA8B,CAChD,OAAO,EACP,KAAK,EACL,KAAK,CAAC,IAAI,EACV,OAAO,CACR,CAAC;IACF,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,wEAAwE;IACxE,4CAA4C;IAC5C,MAAM,IAAI,GACR,EAAE,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QAC1C,CAAC,CAAC,IAAI,GAAG,EAA4C;QACrD,CAAC,CAAC,MAAM,qBAAqB,CACzB,SAAS,EACT,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,EACxB,OAAO,CAAC,MAAM,CACf,CAAC;IACR,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,OAAO,EACP,KAAK,EACL,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC;QACb,GAAG,OAAO;QACV,OAAO,EAAE,EAAE,mBAAmB,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC5D,YAAY,EAAE,KAAK;KACpB,CAAC,CACH,CAAC;IACF,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK;YAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAA0B,EAC1B,SAAiD;IAKjD,MAAM,aAAa,GAA6B,CAC9C,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,EACT,EAAE;QACF,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,IAAI,IAAI;YACN,OAAO,mBAAmB,CACxB,OAAO,EACP,SAAS,EAAE,EACX,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EACzB,OAAO,IAAI,EAAE,CACd,CAAC;QACJ,OAAO,OAAO,CAAC,aAAa,CAC1B,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,CACV,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,OAAO,GAAuB,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AACpC,CAAC","sourcesContent":["import {\n  getContainerWriterProjectionOperation,\n  getDocumentWriterProjectionOperation,\n} from \"@tearleads/validators/operation\";\nimport {\n  type AccessManifestBundleWireResponse,\n  decodeContainerWriterProjection,\n  decodeDocumentWriterProjection,\n} from \"@tearleads/validators/response\";\nimport type { ApiRequestRuntime } from \"./apiRequestRuntime\";\nimport { principalHistoryRequest } from \"./principalHistoryRequest\";\nimport { PrincipalHistoryRequestContext } from \"./principalHistoryRequestContext\";\nimport type {\n  OperationRequestFn,\n  OperationRequestResultFn,\n  RequestResult,\n  RequestResultOptions,\n} from \"./types\";\nimport {\n  heldManifestCitations,\n  type VerifiedManifestCitations,\n  type WriterProjectionTarget,\n} from \"./verifiedManifestCitations\";\n\ntype HeldBundles = ReadonlyMap<string, AccessManifestBundleWireResponse>;\n\nconst PROJECTION_PATH =\n  /^\\/(?:containers|documents)\\/([^/?#]+)\\/writer-projection$/u;\n\nfunction projectionId(path: string): string | null {\n  const encoded = PROJECTION_PATH.exec(path)?.[1];\n  if (encoded === undefined) return null;\n  try {\n    return decodeURIComponent(encoded);\n  } catch {\n    return null;\n  }\n}\n\nfunction writerProjectionKind(\n  operationId: string,\n): WriterProjectionTarget[\"kind\"] | null {\n  if (operationId === \"containers.writerProjection.get\") return \"container\";\n  if (operationId === \"documents.writerProjection.get\") return \"document\";\n  return null;\n}\n\nfunction readProjection<T>(\n  runtime: ApiRequestRuntime,\n  input: {\n    readonly kind: WriterProjectionTarget[\"kind\"];\n    readonly path: string;\n    readonly validator: (value: unknown) => value is T;\n  },\n  held: HeldBundles,\n  context: PrincipalHistoryRequestContext,\n): Promise<RequestResult<T>> {\n  const container = input.kind === \"container\";\n  return principalHistoryRequest(runtime, {\n    path: input.path,\n    validator: input.validator,\n    decode: (value) =>\n      container\n        ? decodeContainerWriterProjection(value, held)\n        : decodeDocumentWriterProjection(value, held),\n    method: \"GET\",\n    context,\n    operation: container\n      ? getContainerWriterProjectionOperation\n      : getDocumentWriterProjectionOperation,\n  });\n}\n\n/**\n * Preparation and body deadlines sit inside the projection read. The wire\n * cites each manifest bundle by hash; decoding resolves every citation, from\n * the response or from the exact bytes this request declared held, before any\n * validator, cache, or verifier sees the projection. A response this device\n * cannot rebuild fails closed into one complete, hint-free refetch.\n */\nasync function citedProjectionRead<T>(\n  runtime: ApiRequestRuntime,\n  citations: VerifiedManifestCitations | null,\n  input: {\n    readonly kind: WriterProjectionTarget[\"kind\"];\n    readonly path: string;\n    readonly validator: (value: unknown) => value is T;\n  },\n  options: RequestResultOptions,\n): Promise<RequestResult<T>> {\n  // Bind the identity before citations load: an account switch while they\n  // load, or before the refetch, must not carry one identity's hints or\n  // answer into another's session. Each request rechecks this context.\n  const context = new PrincipalHistoryRequestContext(\n    runtime,\n    \"GET\",\n    input.path,\n    options,\n  );\n  const id = projectionId(input.path);\n  // Caller-specific headers make a request its own; it cites nothing. The\n  // caller's abort also ends a citation wait.\n  const held =\n    id === null || options.headers !== undefined\n      ? new Map<string, AccessManifestBundleWireResponse>()\n      : await heldManifestCitations(\n          citations,\n          { kind: input.kind, id },\n          options.signal,\n        );\n  if (held.size === 0) return readProjection(runtime, input, held, context);\n  const hinted = await readProjection(\n    runtime,\n    input,\n    held,\n    context.derive({\n      ...options,\n      headers: { \"x-known-manifests\": [...held.keys()].join(\",\") },\n      reportErrors: false,\n    }),\n  );\n  if (hinted.ok) return hinted;\n  if (hinted.kind !== \"shape\") {\n    if (options.reportErrors !== false) hinted.report();\n    return hinted;\n  }\n  return readProjection(runtime, input, new Map(), context.derive(options));\n}\n\nexport function writerProjectionRequests(\n  runtime: ApiRequestRuntime,\n  citations: () => VerifiedManifestCitations | null,\n): {\n  request: OperationRequestFn;\n  requestResult: OperationRequestResultFn;\n} {\n  const requestResult: OperationRequestResultFn = (\n    path,\n    validator,\n    method,\n    body,\n    options,\n    operation,\n  ) => {\n    const kind = method === \"GET\" ? writerProjectionKind(operation.id) : null;\n    if (kind)\n      return citedProjectionRead(\n        runtime,\n        citations(),\n        { kind, path, validator },\n        options ?? {},\n      );\n    return runtime.requestResult(\n      path,\n      validator,\n      method,\n      body,\n      options,\n      operation,\n    );\n  };\n  const request: OperationRequestFn = async (...args) => {\n    const result = await requestResult(...args);\n    return result.ok ? result.data : null;\n  };\n  return { request, requestResult };\n}\n"]}

package/internal/crypto/index.d.ts

@@ -30,7 +30,6 @@ export { PrincipalPolicyValidationError, throwPrincipalPolicyValidationError, }
 export type { ManagedRecipientPrincipalType, PrincipalContainerGrant, PrincipalContainerGrantAccessLevel, PrincipalProjectionMember, PrincipalProjectionRole, PrincipalStateExternalAuthority, PrincipalStateHeaderInput, PrincipalStateMember, PrincipalStateMemberEnvelope, PrincipalStateMembershipMode, PrincipalStatePayloadCipherSuite, PrincipalStateSigningInput, SignedPrincipalState, UnsignedPrincipalState, } from "./principalState.js";
 export { buildPrincipalStateSigningInput, computePrincipalMembershipRoot, computePrincipalProjectionRoot, computePrincipalStateHash, computePrincipalStatePayloadCiphertextHash, derivePrincipalProjectionMembers, isManagedRecipientPrincipalType, isPrincipalProjectionRole, normalizePrincipalProjectionMembers, normalizePrincipalStateMembers, serializeUnsignedPrincipalState, signPrincipalState, } from "./principalState.js";
 export { verifySignedPrincipalState, verifySignedPrincipalStateResult, } from "./principalStateVerification.js";
-export { captureProjectionHistory, type HistoryProjection, omitProjectionHistory, type RetainedProjectionHistory, restoreProjectionHistory, } from "./projectionHistory.js";
 export type { SigningKeyPair } from "./signing/generateKeyPair.js";
 export { generateSigningKeyPair, generateSigningSeedAndKeyPair, ML_DSA87_PUBLIC_KEY_BYTES, ML_DSA87_SECRET_KEY_BYTES, ML_DSA87_SIGNATURE_BYTES, } from "./signing/generateKeyPair.js";
 export { sign } from "./signing/sign.js";

package/internal/crypto/index.js

@@ -22,7 +22,6 @@ export { computePrincipalMemberEnvelopesRoot, normalizePrincipalStateMemberEnvel
 export { PrincipalPolicyValidationError, throwPrincipalPolicyValidationError, } from "./principalPolicyValidationError.js";
 export { buildPrincipalStateSigningInput, computePrincipalMembershipRoot, computePrincipalProjectionRoot, computePrincipalStateHash, computePrincipalStatePayloadCiphertextHash, derivePrincipalProjectionMembers, isManagedRecipientPrincipalType, isPrincipalProjectionRole, normalizePrincipalProjectionMembers, normalizePrincipalStateMembers, serializeUnsignedPrincipalState, signPrincipalState, } from "./principalState.js";
 export { verifySignedPrincipalState, verifySignedPrincipalStateResult, } from "./principalStateVerification.js";
-export { captureProjectionHistory, omitProjectionHistory, restoreProjectionHistory, } from "./projectionHistory.js";
 export { generateSigningKeyPair, generateSigningSeedAndKeyPair, ML_DSA87_PUBLIC_KEY_BYTES, ML_DSA87_SECRET_KEY_BYTES, ML_DSA87_SIGNATURE_BYTES, } from "./signing/generateKeyPair.js";
 export { sign } from "./signing/sign.js";
 export { verify } from "./signing/verify.js";

package/internal/crypto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAKxD,OAAO,EACL,8BAA8B,EAC9B,mBAAmB,EACnB,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,EAC1B,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC9B,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAKrB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EAGpB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAC/C,OAAO,EACL,wBAAwB,EACxB,mCAAmC,EACnC,sCAAsC,EACtC,qCAAqC,EACrC,kCAAkC,EAClC,kCAAkC,EAClC,0BAA0B,EAE1B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAuI7B,OAAO,EACL,qCAAqC,EACrC,oCAAoC,EACpC,8BAA8B,EAC9B,qCAAqC,EACrC,2BAA2B,EAC3B,iCAAiC,EACjC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,gCAAgC,EAChC,+BAA+B,EAC/B,oCAAoC,EACpC,6BAA6B,EAC7B,+BAA+B,EAC/B,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,+BAA+B,EAC/B,8BAA8B,EAC9B,6BAA6B,EAC7B,wCAAwC,EACxC,sCAAsC,EACtC,4BAA4B,EAC5B,mCAAmC,EACnC,mCAAmC,EACnC,0CAA0C,EAC1C,wCAAwC,EACxC,yCAAyC,EACzC,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,sBAAsB,EACtB,mCAAmC,EACnC,gCAAgC,EAChC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,+BAA+B,EAC/B,oBAAoB,EACpB,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,EACnC,wBAAwB,EACxB,6BAA6B,EAC7B,kCAAkC,EAClC,6BAA6B,EAC7B,sCAAsC,EACtC,oCAAoC,EACpC,0CAA0C,EAC1C,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,8BAA8B,EAC9B,uBAAuB,EACvB,0BAA0B,EAC1B,mCAAmC,EACnC,6BAA6B,EAC7B,8BAA8B,EAC9B,mCAAmC,EACnC,mCAAmC,EACnC,2BAA2B,EAC3B,kCAAkC,EAClC,iCAAiC,EACjC,4BAA4B,EAC5B,sCAAsC,EACtC,gCAAgC,EAChC,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,uCAAuC,EACvC,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAC/B,mCAAmC,EACnC,wCAAwC,EACxC,6CAA6C,EAC7C,iCAAiC,EACjC,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,iDAAiD,EACjD,4BAA4B,EAC5B,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,4BAA4B,EAC5B,mCAAmC,EACnC,oBAAoB,EACpB,mCAAmC,EACnC,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,yCAAyC,EACzC,+BAA+B,EAC/B,4BAA4B,EAC5B,oCAAoC,EACpC,qCAAqC,EACrC,sCAAsC,EACtC,6BAA6B,EAC7B,uBAAuB,EACvB,gCAAgC,EAChC,kCAAkC,EAClC,gCAAgC,EAChC,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,2CAA2C,EAC3C,mCAAmC,EACnC,wCAAwC,EAExC,0CAA0C,GAC3C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mCAAmC,EACnC,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,8BAA8B,EAC9B,mCAAmC,GACpC,MAAM,kCAAkC,CAAC;AAiB1C,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,8BAA8B,EAC9B,yBAAyB,EACzB,0CAA0C,EAC1C,gCAAgC,EAChC,+BAA+B,EAC/B,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,+BAA+B,EAC/B,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,wBAAwB,EAExB,qBAAqB,EAErB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC","sourcesContent":["export { blobContentMetadataHash } from \"./blobContentMetadata\";\nexport { BlobEnvelopeError } from \"./blobEnvelopeError\";\nexport type {\n  BlobEnvelopeHeaderRecord,\n  BlobEnvelopeRecord,\n} from \"./blobEnvelopeReader\";\nexport {\n  MAX_BLOB_ENVELOPE_HEADER_BYTES,\n  parseBlobEnvelopeV2,\n  parseBlobEnvelopeV2Header,\n  readBlobEnvelopeHeaderByteLength,\n} from \"./blobEnvelopeReader\";\nexport type { BlobEnvelopeV2Header } from \"./blobEnvelopeV2\";\nexport {\n  BLOB_CHUNK_SIZE_BYTES,\n  BLOB_ENCRYPTED_BYTES_FORMAT,\n  BLOB_ENCRYPTED_BYTES_VERSION,\n  BLOB_ENVELOPE_MAGIC_BYTES,\n  BLOB_ENVELOPE_PREFIX_BYTES,\n  blobChunkPlaintextByteLength,\n  computeBlobChunkCount,\n  computeBlobEncryptedByteLength,\n  deriveBlobChunkIv,\n  encodeBlobEnvelopeV2Header,\n  joinBlobPartBytes,\n  MAX_BLOB_CHUNK_COUNT,\n  normalizeBlobChunkSize,\n} from \"./blobEnvelopeV2\";\nexport { compareCanonicalStrings } from \"./canonicalOrdering\";\nexport {\n  AUTH_CHALLENGE_BYTES,\n  AUTH_CHALLENGE_HEX_LENGTH,\n  authChallengeSigningBytes,\n  CHALLENGE_TTL_SECONDS,\n  canonicalAuthOrigin,\n  generateChallenge,\n} from \"./challenge\";\nexport type {\n  ContentKeyEnvelopeKind,\n  ContentKeyWrapBinding,\n} from \"./contentKeyEnvelope\";\nexport {\n  ContentKeyEnvelopeError,\n  decodeContentKeyEnvelope,\n  unwrapContentKey,\n  wrapContentKey,\n} from \"./contentKeyEnvelope\";\nexport { decryptAsRecipient } from \"./encapsulation/decryptAsRecipient\";\nexport { encryptForRecipients } from \"./encapsulation/encryptForRecipients\";\nexport type { EncapsulationKeyPair } from \"./encapsulation/generateKeyPair\";\nexport {\n  generateKemKeyPair,\n  generateKemSeedAndKeyPair,\n  ML_KEM1024_CIPHERTEXT_BYTES,\n  ML_KEM1024_PUBLIC_KEY_BYTES,\n  ML_KEM1024_SECRET_KEY_BYTES,\n  ML_KEM1024_SEED_BYTES,\n} from \"./encapsulation/generateKeyPair\";\nexport type { EncryptedEnvelope, RecipientEntry } from \"./encapsulation/types\";\nexport { unwrapDek } from \"./encapsulation/unwrapDek\";\nexport { wrapDekForRecipients } from \"./encapsulation/wrapDek\";\nexport { toFingerprint } from \"./fingerprint\";\nexport {\n  decryptGroupMetadata,\n  encodeBuiltinGroupMetadata,\n  encryptGroupMetadata,\n  type GroupMetadata,\n  type GroupMetadataKey,\n  readGroupMetadata,\n} from \"./groupMetadata\";\nexport { bytesToHex, hexToBytes } from \"./hex\";\nexport {\n  createIdentitySeedPhrase,\n  createIdentitySeedPhraseFromEntropy,\n  generateIdentityKeyPairsFromSeedPhrase,\n  IDENTITY_SEED_PHRASE_DERIVATION_SUITE,\n  IDENTITY_SEED_PHRASE_ENTROPY_BYTES,\n  IDENTITY_SEED_PHRASE_STRENGTH_BITS,\n  IDENTITY_SEED_PHRASE_WORDS,\n  type IdentitySeedPhraseKeyPairs,\n  normalizeIdentitySeedPhrase,\n  validateIdentitySeedPhrase,\n} from \"./identitySeedPhrase\";\nexport {\n  createIncrementalSha256,\n  type IncrementalSha256,\n} from \"./incrementalSha256\";\nexport type {\n  AccessEvent,\n  AccessEventType,\n  AccessManifest,\n  AccessManifestCheckpoint,\n  AccessManifestTransparencyLeaf,\n  AccessObjectKind,\n  AnyVerifiedAccessManifest,\n  AnyVerifiedPrincipalPolicy,\n  AttachmentAccessEventBody,\n  AttachmentBindAccessEventBody,\n  AttachmentDetachAccessEventBody,\n  BlobAccessManifest,\n  BlobContentKeyTarget,\n  ContainerAccessEventBody,\n  ContainerAccessKeyState,\n  ContainerAccessLevel,\n  ContainerAccessManifest,\n  ContainerAccessManifestState,\n  ContainerAccessStructural,\n  ContainerCreateAccessEventBody,\n  ContainerDirectGrant,\n  ContainerGrantAccessEventBody,\n  ContainerGrantPrincipalHead,\n  ContainerGrantSubjectType,\n  ContainerKekKeyring,\n  ContainerKekKeyringEntry,\n  ContainerKekPredecessorBridge,\n  ContainerKekRecipientTarget,\n  ContainerKekTarget,\n  ContainerKeyEpoch,\n  ContainerKeyWrap,\n  ContainerMoveAccessEventBody,\n  ContainerReciteAccessEventBody,\n  ContainerRekeyAccessEventBody,\n  ContainerRevokeAccessEventBody,\n  ContainerUserRecipientKey,\n  ContentObjectKind,\n  ContentRecordEncryptionSuite,\n  ContentRecordNonceDomain,\n  DeriveBlobKekTargetsInput,\n  DeriveContainerKekRecipientTargetsInput,\n  DeriveDocumentKekTargetsInput,\n  DocumentAccessEventBody,\n  DocumentContentKeyTarget,\n  DocumentContentRecordMetadataInput,\n  DocumentLinkAccessEventBody,\n  DocumentLinkSetManifestState,\n  DocumentLinkSetStructural,\n  DocumentPurgeAccessEventBody,\n  DocumentUnlinkAccessEventBody,\n  IdentityStateCheckpoint,\n  IdentityStateHead,\n  IdentityStateTransparencyLeaf,\n  KekRecipientKind,\n  KeyingCanonicalJson,\n  KeyingHashDomain,\n  KeyingLocalCheckpointStore,\n  KeyingVerificationCode,\n  KeyingVerificationResult,\n  ManagedPrincipalKind,\n  PrincipalHistoryIndexNode,\n  PrincipalPolicyAuthorization,\n  PrincipalPolicyBundle,\n  PrincipalPolicyCheckpoint,\n  PrincipalPolicyCurrent,\n  PrincipalPolicyExternalAuthority,\n  PrincipalPolicyExternalAuthorityState,\n  PrincipalPolicyHistoryInput,\n  PrincipalPolicyHistoryPage,\n  PrincipalPolicyHistoryProgressOptions,\n  PrincipalPolicyHistoryReferenceProof,\n  PrincipalPolicyHistoryVerifier,\n  PrincipalPolicyMemberEnvelopes,\n  PrincipalPolicyPayload,\n  PrincipalPolicySignedState,\n  PrincipalPolicySignerPublicKey,\n  PrincipalPolicySnapshot,\n  PrincipalPolicyStateChainEntry,\n  PrincipalPolicyTransitionMismatch,\n  PrincipalPolicyTransitionMismatchCode,\n  PrincipalPolicyTransparencyLeaf,\n  ReferencedPrincipalHead,\n  SignedTransparencyTreeHead,\n  TransparencyConsistencyProof,\n  TransparencyInclusionProof,\n  TransparencyLeaf,\n  TransparencyLeafKind,\n  TransparencyTreeCheckpoint,\n  UnsignedAccessEvent,\n  UnsignedTransparencyTreeHead,\n  UnsignedWriteHeader,\n  VerifiedAccessEvent,\n  VerifiedAccessManifest,\n  VerifiedAccessManifestCheckpointEvidence,\n  VerifiedAccessManifestSnapshot,\n  VerifiedAttachmentBinding,\n  VerifiedAttachmentDetach,\n  VerifiedBlobKekTargets,\n  VerifiedContainerAccessManifest,\n  VerifiedContainerKekState,\n  VerifiedContainerParentEdge,\n  VerifiedDocumentKekTargets,\n  VerifiedDocumentLinkSetManifest,\n  VerifiedDocumentLinkSetSnapshot,\n  VerifiedDocumentLinkSetStateEvidence,\n  VerifiedIdentityState,\n  VerifiedPrincipalPolicy,\n  VerifiedPrincipalPolicyCurrent,\n  VerifiedPrincipalPolicyHistory,\n  VerifiedPrincipalPolicySelection,\n  VerifiedPrincipalPolicySnapshot,\n  VerifiedTransparencyProof,\n  VerifiedTransparencyTreeHead,\n  VerifiedWriteHeader,\n  VerifyAccessEventInput,\n  VerifyAccessManifestInput,\n  VerifyAttachmentBindingEventInput,\n  VerifyAttachmentDetachEventInput,\n  VerifyContainerAccessManifestInput,\n  VerifyContainerKekStateInput,\n  VerifyContainerParentEdgeInput,\n  VerifyDocumentLinkSetManifestInput,\n  VerifyDocumentPurgeEventInput,\n  VerifyIdentityStateCheckpointInput,\n  VerifyPrincipalPolicyBundleInput,\n  VerifyPrincipalPolicySnapshotInput,\n  VerifySignedTransparencyTreeHeadInput,\n  VerifyTransparencyConsistencyProofInput,\n  VerifyTransparencyInclusionProofInput,\n  VerifyTransparencyProofInput,\n  VerifyWriteHeaderInput,\n  WriteHeader,\n} from \"./keying\";\nexport {\n  ACCESS_MANIFEST_VERIFICATION_REVISION,\n  accessManifestCheckpointFromManifest,\n  accessManifestTransparencyLeaf,\n  assertSealedContainerKekKeyringLength,\n  BLOB_CONTENT_KEY_WRAP_SUITE,\n  CONTAINER_KEK_KEYRING_ENTRY_BYTES,\n  CONTAINER_KEK_KEYRING_FORMAT_VERSION,\n  CONTAINER_KEK_KEYRING_HEADER_BYTES,\n  CONTAINER_KEK_KEYRING_SEAL_SUITE,\n  CONTAINER_KEK_MATERIAL_ID_PREFIX,\n  CONTAINER_KEK_PARENT_WRAP_SUITE,\n  CONTAINER_KEK_PREDECESSOR_WRAP_SUITE,\n  CONTAINER_KEK_USER_WRAP_SUITE,\n  CONTENT_RECORD_ENCRYPTION_SUITE,\n  computeAccessEventBodyHash,\n  computeAccessEventHash,\n  computeAccessManifestHash,\n  computeBlobAccessManifestHash,\n  computeBlobContentKeyTargetHash,\n  computeContainerAccessKeyTargetHash,\n  computeContainerAccessStructuralHash,\n  computeContainerDirectGrantRoot,\n  computeContainerKekKeyringHash,\n  computeContainerKekMaterialId,\n  computeContainerKekPredecessorBridgeHash,\n  computeContainerKekRecipientTargetHash,\n  computeContainerKeyEpochHash,\n  computeContentRecordNonceDomainHash,\n  computeDocumentContentKeyTargetHash,\n  computeDocumentContentRecordCiphertextHash,\n  computeDocumentContentRecordMetadataHash,\n  computeDocumentContentRecordPlaintextHash,\n  computeDocumentLinkSetGrantRoot,\n  computeDocumentLinkSetKeyTargetHash,\n  computeDocumentLinkSetStructuralHash,\n  computeKeyingDomainHash,\n  computeTransparencyLeafHash,\n  computeTransparencyMerkleRoot,\n  computeWriteHeaderHash,\n  createContainerKekPredecessorBridge,\n  createPrincipalHistoryIndexProof,\n  createPrincipalPolicyHistoryVerifier,\n  createTransparencyConsistencyProof,\n  createTransparencyInclusionProof,\n  DOCUMENT_CONTENT_KEY_WRAP_SUITE,\n  deriveBlobKekTargets,\n  deriveContainerAccessManifest,\n  deriveContainerKekRecipientTargets,\n  deriveContainerKekWrappingPublicKey,\n  deriveDocumentKekTargets,\n  deriveDocumentLinkSetManifest,\n  derivePrincipalRecipientKeyEpochId,\n  documentContentRecordMetadata,\n  expectedSealedContainerKekKeyringBytes,\n  getPrincipalPolicyTransitionMismatch,\n  getPrincipalPolicyTransitionMismatchReason,\n  identityStateTransparencyLeaf,\n  isContainerKekMaterialId,\n  isKeyingVerificationCode,\n  KEYING_VERIFICATION_CODES,\n  KeyingVerificationError,\n  MAX_CONTAINER_KEY_EPOCH,\n  MAX_CONTAINER_RECITATION_EPOCH,\n  makeVerifiedAccessEvent,\n  makeVerifiedBlobKekTargets,\n  makeVerifiedContainerAccessManifest,\n  makeVerifiedContainerKekState,\n  makeVerifiedDocumentKekTargets,\n  makeVerifiedDocumentLinkSetManifest,\n  makeVerifiedDocumentLinkSetSnapshot,\n  makeVerifiedPrincipalPolicy,\n  normalizeAttachmentAccessEventBody,\n  normalizeContainerAccessEventBody,\n  normalizeContainerKekKeyring,\n  normalizeContainerKekPredecessorBridge,\n  normalizeDocumentAccessEventBody,\n  normalizeDocumentPurgeAccessEventBody,\n  openContainerKekKeyring,\n  PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT,\n  PRINCIPAL_HISTORY_VERIFICATION_REVISION,\n  principalHistoryIndexLeaf,\n  principalPolicyMatchesReference,\n  principalPolicyTransparencyLeaf,\n  resolveContainerPathUserAccessLevel,\n  resolveContainerStatePathUserAccessLevel,\n  resolveHistoricalContainerPathUserAccessLevel,\n  resolvePrincipalHistoryIndexProof,\n  restorePrincipalPolicyHistoryVerifier,\n  sealContainerKekKeyring,\n  selectPrincipalPolicyAuthorization,\n  selectPrincipalPolicyCurrentPredecessorReferences,\n  serializeKeyingCanonicalJson,\n  signAccessEvent,\n  signTransparencyTreeHead,\n  signWriteHeader,\n  unwrapContainerKekParentWrap,\n  unwrapContainerKekPredecessorBridge,\n  verifyAccessManifest,\n  verifyAccessManifestLocalCheckpoint,\n  verifyAccessManifestSnapshot,\n  verifyAttachmentBindingEvent,\n  verifyAttachmentDetachEvent,\n  verifyContainerAccessManifest,\n  verifyContainerKekKeyringEntry,\n  verifyContainerKekState,\n  verifyContainerParentEdge,\n  verifyDocumentLinkSetManifest,\n  verifyDocumentLinkSetSnapshot,\n  verifyDocumentPurgeEvent,\n  verifyIdentityStateCheckpoint,\n  verifyPrincipalPolicyBundle,\n  verifyPrincipalPolicyBundleAgainstHistory,\n  verifyPrincipalPolicyCheckpoint,\n  verifyPrincipalPolicyCurrent,\n  verifyPrincipalPolicyCurrentMutation,\n  verifyPrincipalPolicyCurrentSuccessor,\n  verifyPrincipalPolicyHistoryReferences,\n  verifyPrincipalPolicySnapshot,\n  verifySignedAccessEvent,\n  verifySignedTransparencyTreeHead,\n  verifyTransparencyConsistencyProof,\n  verifyTransparencyInclusionProof,\n  verifyTransparencyProof,\n  verifyWriteHeader,\n} from \"./keying\";\nexport {\n  organizationReplacementAuthorizationPayload,\n  organizationReplacementSigningBytes,\n  signOrganizationReplacementAuthorization,\n  type VerifiedOrganizationReplacementAuthorization,\n  verifyOrganizationReplacementAuthorization,\n} from \"./organizationReplacement\";\nexport {\n  computePrincipalContainerGrantRoot,\n  normalizePrincipalContainerGrants,\n} from \"./principalContainerGrants\";\nexport {\n  computePrincipalMemberEnvelopesRoot,\n  normalizePrincipalStateMemberEnvelopes,\n  PrincipalMemberEnvelopeValidationError,\n} from \"./principalMemberEnvelopes\";\nexport type { PrincipalPolicyValidationErrorCode } from \"./principalPolicyValidationError\";\nexport {\n  PrincipalPolicyValidationError,\n  throwPrincipalPolicyValidationError,\n} from \"./principalPolicyValidationError\";\nexport type {\n  ManagedRecipientPrincipalType,\n  PrincipalContainerGrant,\n  PrincipalContainerGrantAccessLevel,\n  PrincipalProjectionMember,\n  PrincipalProjectionRole,\n  PrincipalStateExternalAuthority,\n  PrincipalStateHeaderInput,\n  PrincipalStateMember,\n  PrincipalStateMemberEnvelope,\n  PrincipalStateMembershipMode,\n  PrincipalStatePayloadCipherSuite,\n  PrincipalStateSigningInput,\n  SignedPrincipalState,\n  UnsignedPrincipalState,\n} from \"./principalState\";\nexport {\n  buildPrincipalStateSigningInput,\n  computePrincipalMembershipRoot,\n  computePrincipalProjectionRoot,\n  computePrincipalStateHash,\n  computePrincipalStatePayloadCiphertextHash,\n  derivePrincipalProjectionMembers,\n  isManagedRecipientPrincipalType,\n  isPrincipalProjectionRole,\n  normalizePrincipalProjectionMembers,\n  normalizePrincipalStateMembers,\n  serializeUnsignedPrincipalState,\n  signPrincipalState,\n} from \"./principalState\";\nexport {\n  verifySignedPrincipalState,\n  verifySignedPrincipalStateResult,\n} from \"./principalStateVerification\";\nexport {\n  captureProjectionHistory,\n  type HistoryProjection,\n  omitProjectionHistory,\n  type RetainedProjectionHistory,\n  restoreProjectionHistory,\n} from \"./projectionHistory\";\nexport type { SigningKeyPair } from \"./signing/generateKeyPair\";\nexport {\n  generateSigningKeyPair,\n  generateSigningSeedAndKeyPair,\n  ML_DSA87_PUBLIC_KEY_BYTES,\n  ML_DSA87_SECRET_KEY_BYTES,\n  ML_DSA87_SIGNATURE_BYTES,\n} from \"./signing/generateKeyPair\";\nexport { sign } from \"./signing/sign\";\nexport { verify } from \"./signing/verify\";\nexport type { SymmetricCiphertext } from \"./symmetric\";\nexport {\n  AES_256_KEY_BYTES,\n  AES_GCM_IV_BYTES,\n  AES_GCM_TAG_BYTES,\n  assertAesGcmIv,\n  createAesGcmIv,\n  decryptWithDek,\n  encryptWithDek,\n} from \"./symmetric\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAKxD,OAAO,EACL,8BAA8B,EAC9B,mBAAmB,EACnB,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,EAC1B,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC9B,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAKrB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EAGpB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAC/C,OAAO,EACL,wBAAwB,EACxB,mCAAmC,EACnC,sCAAsC,EACtC,qCAAqC,EACrC,kCAAkC,EAClC,kCAAkC,EAClC,0BAA0B,EAE1B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAuI7B,OAAO,EACL,qCAAqC,EACrC,oCAAoC,EACpC,8BAA8B,EAC9B,qCAAqC,EACrC,2BAA2B,EAC3B,iCAAiC,EACjC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,gCAAgC,EAChC,+BAA+B,EAC/B,oCAAoC,EACpC,6BAA6B,EAC7B,+BAA+B,EAC/B,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,+BAA+B,EAC/B,8BAA8B,EAC9B,6BAA6B,EAC7B,wCAAwC,EACxC,sCAAsC,EACtC,4BAA4B,EAC5B,mCAAmC,EACnC,mCAAmC,EACnC,0CAA0C,EAC1C,wCAAwC,EACxC,yCAAyC,EACzC,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,sBAAsB,EACtB,mCAAmC,EACnC,gCAAgC,EAChC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,+BAA+B,EAC/B,oBAAoB,EACpB,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,EACnC,wBAAwB,EACxB,6BAA6B,EAC7B,kCAAkC,EAClC,6BAA6B,EAC7B,sCAAsC,EACtC,oCAAoC,EACpC,0CAA0C,EAC1C,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,8BAA8B,EAC9B,uBAAuB,EACvB,0BAA0B,EAC1B,mCAAmC,EACnC,6BAA6B,EAC7B,8BAA8B,EAC9B,mCAAmC,EACnC,mCAAmC,EACnC,2BAA2B,EAC3B,kCAAkC,EAClC,iCAAiC,EACjC,4BAA4B,EAC5B,sCAAsC,EACtC,gCAAgC,EAChC,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,uCAAuC,EACvC,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAC/B,mCAAmC,EACnC,wCAAwC,EACxC,6CAA6C,EAC7C,iCAAiC,EACjC,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,iDAAiD,EACjD,4BAA4B,EAC5B,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,4BAA4B,EAC5B,mCAAmC,EACnC,oBAAoB,EACpB,mCAAmC,EACnC,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,yCAAyC,EACzC,+BAA+B,EAC/B,4BAA4B,EAC5B,oCAAoC,EACpC,qCAAqC,EACrC,sCAAsC,EACtC,6BAA6B,EAC7B,uBAAuB,EACvB,gCAAgC,EAChC,kCAAkC,EAClC,gCAAgC,EAChC,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,2CAA2C,EAC3C,mCAAmC,EACnC,wCAAwC,EAExC,0CAA0C,GAC3C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mCAAmC,EACnC,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,8BAA8B,EAC9B,mCAAmC,GACpC,MAAM,kCAAkC,CAAC;AAiB1C,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,8BAA8B,EAC9B,yBAAyB,EACzB,0CAA0C,EAC1C,gCAAgC,EAChC,+BAA+B,EAC/B,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,+BAA+B,EAC/B,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC","sourcesContent":["export { blobContentMetadataHash } from \"./blobContentMetadata\";\nexport { BlobEnvelopeError } from \"./blobEnvelopeError\";\nexport type {\n  BlobEnvelopeHeaderRecord,\n  BlobEnvelopeRecord,\n} from \"./blobEnvelopeReader\";\nexport {\n  MAX_BLOB_ENVELOPE_HEADER_BYTES,\n  parseBlobEnvelopeV2,\n  parseBlobEnvelopeV2Header,\n  readBlobEnvelopeHeaderByteLength,\n} from \"./blobEnvelopeReader\";\nexport type { BlobEnvelopeV2Header } from \"./blobEnvelopeV2\";\nexport {\n  BLOB_CHUNK_SIZE_BYTES,\n  BLOB_ENCRYPTED_BYTES_FORMAT,\n  BLOB_ENCRYPTED_BYTES_VERSION,\n  BLOB_ENVELOPE_MAGIC_BYTES,\n  BLOB_ENVELOPE_PREFIX_BYTES,\n  blobChunkPlaintextByteLength,\n  computeBlobChunkCount,\n  computeBlobEncryptedByteLength,\n  deriveBlobChunkIv,\n  encodeBlobEnvelopeV2Header,\n  joinBlobPartBytes,\n  MAX_BLOB_CHUNK_COUNT,\n  normalizeBlobChunkSize,\n} from \"./blobEnvelopeV2\";\nexport { compareCanonicalStrings } from \"./canonicalOrdering\";\nexport {\n  AUTH_CHALLENGE_BYTES,\n  AUTH_CHALLENGE_HEX_LENGTH,\n  authChallengeSigningBytes,\n  CHALLENGE_TTL_SECONDS,\n  canonicalAuthOrigin,\n  generateChallenge,\n} from \"./challenge\";\nexport type {\n  ContentKeyEnvelopeKind,\n  ContentKeyWrapBinding,\n} from \"./contentKeyEnvelope\";\nexport {\n  ContentKeyEnvelopeError,\n  decodeContentKeyEnvelope,\n  unwrapContentKey,\n  wrapContentKey,\n} from \"./contentKeyEnvelope\";\nexport { decryptAsRecipient } from \"./encapsulation/decryptAsRecipient\";\nexport { encryptForRecipients } from \"./encapsulation/encryptForRecipients\";\nexport type { EncapsulationKeyPair } from \"./encapsulation/generateKeyPair\";\nexport {\n  generateKemKeyPair,\n  generateKemSeedAndKeyPair,\n  ML_KEM1024_CIPHERTEXT_BYTES,\n  ML_KEM1024_PUBLIC_KEY_BYTES,\n  ML_KEM1024_SECRET_KEY_BYTES,\n  ML_KEM1024_SEED_BYTES,\n} from \"./encapsulation/generateKeyPair\";\nexport type { EncryptedEnvelope, RecipientEntry } from \"./encapsulation/types\";\nexport { unwrapDek } from \"./encapsulation/unwrapDek\";\nexport { wrapDekForRecipients } from \"./encapsulation/wrapDek\";\nexport { toFingerprint } from \"./fingerprint\";\nexport {\n  decryptGroupMetadata,\n  encodeBuiltinGroupMetadata,\n  encryptGroupMetadata,\n  type GroupMetadata,\n  type GroupMetadataKey,\n  readGroupMetadata,\n} from \"./groupMetadata\";\nexport { bytesToHex, hexToBytes } from \"./hex\";\nexport {\n  createIdentitySeedPhrase,\n  createIdentitySeedPhraseFromEntropy,\n  generateIdentityKeyPairsFromSeedPhrase,\n  IDENTITY_SEED_PHRASE_DERIVATION_SUITE,\n  IDENTITY_SEED_PHRASE_ENTROPY_BYTES,\n  IDENTITY_SEED_PHRASE_STRENGTH_BITS,\n  IDENTITY_SEED_PHRASE_WORDS,\n  type IdentitySeedPhraseKeyPairs,\n  normalizeIdentitySeedPhrase,\n  validateIdentitySeedPhrase,\n} from \"./identitySeedPhrase\";\nexport {\n  createIncrementalSha256,\n  type IncrementalSha256,\n} from \"./incrementalSha256\";\nexport type {\n  AccessEvent,\n  AccessEventType,\n  AccessManifest,\n  AccessManifestCheckpoint,\n  AccessManifestTransparencyLeaf,\n  AccessObjectKind,\n  AnyVerifiedAccessManifest,\n  AnyVerifiedPrincipalPolicy,\n  AttachmentAccessEventBody,\n  AttachmentBindAccessEventBody,\n  AttachmentDetachAccessEventBody,\n  BlobAccessManifest,\n  BlobContentKeyTarget,\n  ContainerAccessEventBody,\n  ContainerAccessKeyState,\n  ContainerAccessLevel,\n  ContainerAccessManifest,\n  ContainerAccessManifestState,\n  ContainerAccessStructural,\n  ContainerCreateAccessEventBody,\n  ContainerDirectGrant,\n  ContainerGrantAccessEventBody,\n  ContainerGrantPrincipalHead,\n  ContainerGrantSubjectType,\n  ContainerKekKeyring,\n  ContainerKekKeyringEntry,\n  ContainerKekPredecessorBridge,\n  ContainerKekRecipientTarget,\n  ContainerKekTarget,\n  ContainerKeyEpoch,\n  ContainerKeyWrap,\n  ContainerMoveAccessEventBody,\n  ContainerReciteAccessEventBody,\n  ContainerRekeyAccessEventBody,\n  ContainerRevokeAccessEventBody,\n  ContainerUserRecipientKey,\n  ContentObjectKind,\n  ContentRecordEncryptionSuite,\n  ContentRecordNonceDomain,\n  DeriveBlobKekTargetsInput,\n  DeriveContainerKekRecipientTargetsInput,\n  DeriveDocumentKekTargetsInput,\n  DocumentAccessEventBody,\n  DocumentContentKeyTarget,\n  DocumentContentRecordMetadataInput,\n  DocumentLinkAccessEventBody,\n  DocumentLinkSetManifestState,\n  DocumentLinkSetStructural,\n  DocumentPurgeAccessEventBody,\n  DocumentUnlinkAccessEventBody,\n  IdentityStateCheckpoint,\n  IdentityStateHead,\n  IdentityStateTransparencyLeaf,\n  KekRecipientKind,\n  KeyingCanonicalJson,\n  KeyingHashDomain,\n  KeyingLocalCheckpointStore,\n  KeyingVerificationCode,\n  KeyingVerificationResult,\n  ManagedPrincipalKind,\n  PrincipalHistoryIndexNode,\n  PrincipalPolicyAuthorization,\n  PrincipalPolicyBundle,\n  PrincipalPolicyCheckpoint,\n  PrincipalPolicyCurrent,\n  PrincipalPolicyExternalAuthority,\n  PrincipalPolicyExternalAuthorityState,\n  PrincipalPolicyHistoryInput,\n  PrincipalPolicyHistoryPage,\n  PrincipalPolicyHistoryProgressOptions,\n  PrincipalPolicyHistoryReferenceProof,\n  PrincipalPolicyHistoryVerifier,\n  PrincipalPolicyMemberEnvelopes,\n  PrincipalPolicyPayload,\n  PrincipalPolicySignedState,\n  PrincipalPolicySignerPublicKey,\n  PrincipalPolicySnapshot,\n  PrincipalPolicyStateChainEntry,\n  PrincipalPolicyTransitionMismatch,\n  PrincipalPolicyTransitionMismatchCode,\n  PrincipalPolicyTransparencyLeaf,\n  ReferencedPrincipalHead,\n  SignedTransparencyTreeHead,\n  TransparencyConsistencyProof,\n  TransparencyInclusionProof,\n  TransparencyLeaf,\n  TransparencyLeafKind,\n  TransparencyTreeCheckpoint,\n  UnsignedAccessEvent,\n  UnsignedTransparencyTreeHead,\n  UnsignedWriteHeader,\n  VerifiedAccessEvent,\n  VerifiedAccessManifest,\n  VerifiedAccessManifestCheckpointEvidence,\n  VerifiedAccessManifestSnapshot,\n  VerifiedAttachmentBinding,\n  VerifiedAttachmentDetach,\n  VerifiedBlobKekTargets,\n  VerifiedContainerAccessManifest,\n  VerifiedContainerKekState,\n  VerifiedContainerParentEdge,\n  VerifiedDocumentKekTargets,\n  VerifiedDocumentLinkSetManifest,\n  VerifiedDocumentLinkSetSnapshot,\n  VerifiedDocumentLinkSetStateEvidence,\n  VerifiedIdentityState,\n  VerifiedPrincipalPolicy,\n  VerifiedPrincipalPolicyCurrent,\n  VerifiedPrincipalPolicyHistory,\n  VerifiedPrincipalPolicySelection,\n  VerifiedPrincipalPolicySnapshot,\n  VerifiedTransparencyProof,\n  VerifiedTransparencyTreeHead,\n  VerifiedWriteHeader,\n  VerifyAccessEventInput,\n  VerifyAccessManifestInput,\n  VerifyAttachmentBindingEventInput,\n  VerifyAttachmentDetachEventInput,\n  VerifyContainerAccessManifestInput,\n  VerifyContainerKekStateInput,\n  VerifyContainerParentEdgeInput,\n  VerifyDocumentLinkSetManifestInput,\n  VerifyDocumentPurgeEventInput,\n  VerifyIdentityStateCheckpointInput,\n  VerifyPrincipalPolicyBundleInput,\n  VerifyPrincipalPolicySnapshotInput,\n  VerifySignedTransparencyTreeHeadInput,\n  VerifyTransparencyConsistencyProofInput,\n  VerifyTransparencyInclusionProofInput,\n  VerifyTransparencyProofInput,\n  VerifyWriteHeaderInput,\n  WriteHeader,\n} from \"./keying\";\nexport {\n  ACCESS_MANIFEST_VERIFICATION_REVISION,\n  accessManifestCheckpointFromManifest,\n  accessManifestTransparencyLeaf,\n  assertSealedContainerKekKeyringLength,\n  BLOB_CONTENT_KEY_WRAP_SUITE,\n  CONTAINER_KEK_KEYRING_ENTRY_BYTES,\n  CONTAINER_KEK_KEYRING_FORMAT_VERSION,\n  CONTAINER_KEK_KEYRING_HEADER_BYTES,\n  CONTAINER_KEK_KEYRING_SEAL_SUITE,\n  CONTAINER_KEK_MATERIAL_ID_PREFIX,\n  CONTAINER_KEK_PARENT_WRAP_SUITE,\n  CONTAINER_KEK_PREDECESSOR_WRAP_SUITE,\n  CONTAINER_KEK_USER_WRAP_SUITE,\n  CONTENT_RECORD_ENCRYPTION_SUITE,\n  computeAccessEventBodyHash,\n  computeAccessEventHash,\n  computeAccessManifestHash,\n  computeBlobAccessManifestHash,\n  computeBlobContentKeyTargetHash,\n  computeContainerAccessKeyTargetHash,\n  computeContainerAccessStructuralHash,\n  computeContainerDirectGrantRoot,\n  computeContainerKekKeyringHash,\n  computeContainerKekMaterialId,\n  computeContainerKekPredecessorBridgeHash,\n  computeContainerKekRecipientTargetHash,\n  computeContainerKeyEpochHash,\n  computeContentRecordNonceDomainHash,\n  computeDocumentContentKeyTargetHash,\n  computeDocumentContentRecordCiphertextHash,\n  computeDocumentContentRecordMetadataHash,\n  computeDocumentContentRecordPlaintextHash,\n  computeDocumentLinkSetGrantRoot,\n  computeDocumentLinkSetKeyTargetHash,\n  computeDocumentLinkSetStructuralHash,\n  computeKeyingDomainHash,\n  computeTransparencyLeafHash,\n  computeTransparencyMerkleRoot,\n  computeWriteHeaderHash,\n  createContainerKekPredecessorBridge,\n  createPrincipalHistoryIndexProof,\n  createPrincipalPolicyHistoryVerifier,\n  createTransparencyConsistencyProof,\n  createTransparencyInclusionProof,\n  DOCUMENT_CONTENT_KEY_WRAP_SUITE,\n  deriveBlobKekTargets,\n  deriveContainerAccessManifest,\n  deriveContainerKekRecipientTargets,\n  deriveContainerKekWrappingPublicKey,\n  deriveDocumentKekTargets,\n  deriveDocumentLinkSetManifest,\n  derivePrincipalRecipientKeyEpochId,\n  documentContentRecordMetadata,\n  expectedSealedContainerKekKeyringBytes,\n  getPrincipalPolicyTransitionMismatch,\n  getPrincipalPolicyTransitionMismatchReason,\n  identityStateTransparencyLeaf,\n  isContainerKekMaterialId,\n  isKeyingVerificationCode,\n  KEYING_VERIFICATION_CODES,\n  KeyingVerificationError,\n  MAX_CONTAINER_KEY_EPOCH,\n  MAX_CONTAINER_RECITATION_EPOCH,\n  makeVerifiedAccessEvent,\n  makeVerifiedBlobKekTargets,\n  makeVerifiedContainerAccessManifest,\n  makeVerifiedContainerKekState,\n  makeVerifiedDocumentKekTargets,\n  makeVerifiedDocumentLinkSetManifest,\n  makeVerifiedDocumentLinkSetSnapshot,\n  makeVerifiedPrincipalPolicy,\n  normalizeAttachmentAccessEventBody,\n  normalizeContainerAccessEventBody,\n  normalizeContainerKekKeyring,\n  normalizeContainerKekPredecessorBridge,\n  normalizeDocumentAccessEventBody,\n  normalizeDocumentPurgeAccessEventBody,\n  openContainerKekKeyring,\n  PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT,\n  PRINCIPAL_HISTORY_VERIFICATION_REVISION,\n  principalHistoryIndexLeaf,\n  principalPolicyMatchesReference,\n  principalPolicyTransparencyLeaf,\n  resolveContainerPathUserAccessLevel,\n  resolveContainerStatePathUserAccessLevel,\n  resolveHistoricalContainerPathUserAccessLevel,\n  resolvePrincipalHistoryIndexProof,\n  restorePrincipalPolicyHistoryVerifier,\n  sealContainerKekKeyring,\n  selectPrincipalPolicyAuthorization,\n  selectPrincipalPolicyCurrentPredecessorReferences,\n  serializeKeyingCanonicalJson,\n  signAccessEvent,\n  signTransparencyTreeHead,\n  signWriteHeader,\n  unwrapContainerKekParentWrap,\n  unwrapContainerKekPredecessorBridge,\n  verifyAccessManifest,\n  verifyAccessManifestLocalCheckpoint,\n  verifyAccessManifestSnapshot,\n  verifyAttachmentBindingEvent,\n  verifyAttachmentDetachEvent,\n  verifyContainerAccessManifest,\n  verifyContainerKekKeyringEntry,\n  verifyContainerKekState,\n  verifyContainerParentEdge,\n  verifyDocumentLinkSetManifest,\n  verifyDocumentLinkSetSnapshot,\n  verifyDocumentPurgeEvent,\n  verifyIdentityStateCheckpoint,\n  verifyPrincipalPolicyBundle,\n  verifyPrincipalPolicyBundleAgainstHistory,\n  verifyPrincipalPolicyCheckpoint,\n  verifyPrincipalPolicyCurrent,\n  verifyPrincipalPolicyCurrentMutation,\n  verifyPrincipalPolicyCurrentSuccessor,\n  verifyPrincipalPolicyHistoryReferences,\n  verifyPrincipalPolicySnapshot,\n  verifySignedAccessEvent,\n  verifySignedTransparencyTreeHead,\n  verifyTransparencyConsistencyProof,\n  verifyTransparencyInclusionProof,\n  verifyTransparencyProof,\n  verifyWriteHeader,\n} from \"./keying\";\nexport {\n  organizationReplacementAuthorizationPayload,\n  organizationReplacementSigningBytes,\n  signOrganizationReplacementAuthorization,\n  type VerifiedOrganizationReplacementAuthorization,\n  verifyOrganizationReplacementAuthorization,\n} from \"./organizationReplacement\";\nexport {\n  computePrincipalContainerGrantRoot,\n  normalizePrincipalContainerGrants,\n} from \"./principalContainerGrants\";\nexport {\n  computePrincipalMemberEnvelopesRoot,\n  normalizePrincipalStateMemberEnvelopes,\n  PrincipalMemberEnvelopeValidationError,\n} from \"./principalMemberEnvelopes\";\nexport type { PrincipalPolicyValidationErrorCode } from \"./principalPolicyValidationError\";\nexport {\n  PrincipalPolicyValidationError,\n  throwPrincipalPolicyValidationError,\n} from \"./principalPolicyValidationError\";\nexport type {\n  ManagedRecipientPrincipalType,\n  PrincipalContainerGrant,\n  PrincipalContainerGrantAccessLevel,\n  PrincipalProjectionMember,\n  PrincipalProjectionRole,\n  PrincipalStateExternalAuthority,\n  PrincipalStateHeaderInput,\n  PrincipalStateMember,\n  PrincipalStateMemberEnvelope,\n  PrincipalStateMembershipMode,\n  PrincipalStatePayloadCipherSuite,\n  PrincipalStateSigningInput,\n  SignedPrincipalState,\n  UnsignedPrincipalState,\n} from \"./principalState\";\nexport {\n  buildPrincipalStateSigningInput,\n  computePrincipalMembershipRoot,\n  computePrincipalProjectionRoot,\n  computePrincipalStateHash,\n  computePrincipalStatePayloadCiphertextHash,\n  derivePrincipalProjectionMembers,\n  isManagedRecipientPrincipalType,\n  isPrincipalProjectionRole,\n  normalizePrincipalProjectionMembers,\n  normalizePrincipalStateMembers,\n  serializeUnsignedPrincipalState,\n  signPrincipalState,\n} from \"./principalState\";\nexport {\n  verifySignedPrincipalState,\n  verifySignedPrincipalStateResult,\n} from \"./principalStateVerification\";\nexport type { SigningKeyPair } from \"./signing/generateKeyPair\";\nexport {\n  generateSigningKeyPair,\n  generateSigningSeedAndKeyPair,\n  ML_DSA87_PUBLIC_KEY_BYTES,\n  ML_DSA87_SECRET_KEY_BYTES,\n  ML_DSA87_SIGNATURE_BYTES,\n} from \"./signing/generateKeyPair\";\nexport { sign } from \"./signing/sign\";\nexport { verify } from \"./signing/verify\";\nexport type { SymmetricCiphertext } from \"./symmetric\";\nexport {\n  AES_256_KEY_BYTES,\n  AES_GCM_IV_BYTES,\n  AES_GCM_TAG_BYTES,\n  assertAesGcmIv,\n  createAesGcmIv,\n  decryptWithDek,\n  encryptWithDek,\n} from \"./symmetric\";\n"]}

package/internal/validators/knownManifestsRefinements.js

@@ -0,0 +1,5 @@
+export const knownManifestsHeaderRefinement = {
+    id: "request.known-manifest-hints",
+    description: "x-known-manifests must list at most 48 unique lowercase SHA-256 manifest hashes",
+};
+//# sourceMappingURL=knownManifestsRefinements.js.map

package/internal/validators/knownManifestsRefinements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knownManifestsRefinements.js","sourceRoot":"","sources":["knownManifestsRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,EAAE,EAAE,8BAA8B;IAClC,WAAW,EACT,iFAAiF;CAC3E,CAAC","sourcesContent":["export const knownManifestsHeaderRefinement = {\n  id: \"request.known-manifest-hints\",\n  description:\n    \"x-known-manifests must list at most 48 unique lowercase SHA-256 manifest hashes\",\n} as const;\n"]}