@tearleads/client-sdk 0.1.41 → 0.1.43

package/internal/validators/schema.js

@@ -131,6 +131,26 @@ maxItems) {
         type: "array",
     });
 }
+/**
+ * Validates a plain-object map's values without rebuilding it, like
+ * arraySchema. Callers read entries with Object.entries or Object.hasOwn so a
+ * wire key such as "__proto__" is only ever an own data property.
+ */
+export function plainRecordSchema(valueSchema) {
+    const viewSchema = z.record(z.string(), valueSchema);
+    const runtimeSchema = registerJsonSchemaView(z.custom(isPlainObject), viewSchema).superRefine((value, context) => {
+        for (const [key, entry] of Object.entries(value)) {
+            const result = valueSchema.safeParse(entry);
+            if (result.success) {
+                continue;
+            }
+            for (const issue of result.error.issues) {
+                context.addIssue({ ...issue, path: [key, ...issue.path] });
+            }
+        }
+    });
+    return registerJsonSchemaView(runtimeSchema, viewSchema);
+}
 export function nonEmptyArraySchema(itemSchema) {
     return registerJsonSchemaView(arraySchema(itemSchema).refine((values) => values.length > 0), z.array(itemSchema).min(1));
 }

package/internal/validators/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9D,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAC5C,MAAM,YAAY,GAChB,4FAA4F,CAAC;AAE/F,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAC7D,CAAC,CAAC,MAAM,CAAS,iBAAiB,CAAC,EACnC;IACE,SAAS,EAAE,iBAAiB;IAC5B,SAAS,EAAE,iBAAiB;IAC5B,OAAO,EAAE,qBAAqB;IAC9B,IAAI,EAAE,QAAQ;CACf,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CACpE,CAAC,CAAC,MAAM,CAAS,wBAAwB,CAAC,EAC1C;IACE,SAAS,EAAE,yBAAyB;IACpC,SAAS,EAAE,yBAAyB;IACpC,OAAO,EAAE,qBAAqB;IAC9B,IAAI,EAAE,QAAQ;CACf,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,0BAA0B,CAC1D,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,KAAK,CAAC,CAC9D,EACD;IACE,OAAO,EAAE,eAAe,CAAC,MAAM;IAC/B,IAAI,EAAE,QAAQ;CACf,CACF,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG,0BAA0B,CACxD,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,EAC/C;IACE,OAAO,EAAE,YAAY;IACrB,IAAI,EAAE,QAAQ;CACf,CACF,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,OAAO,0BAA0B,CAC/B,CAAC,CAAC,MAAM,CAAW,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EACjE;QACE,KAAK,EAAE;YACL,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,SAAS;SAChB;QACD,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,OAAO;KACd,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,sBAAsB,CACrD,CAAC,CAAC,MAAM,CAA0B,aAAa,CAAC,EAChD,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAClB,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAC7D,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAC9C;IACE,gBAAgB,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,SAAS;IACzB,IAAI,EAAE,SAAS;CAChB,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAChE,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CACrE,EACD;IACE,OAAO,EAAE,MAAM,CAAC,SAAS;IACzB,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,SAAS;CAChB,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CACpE,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CACzE,EACD;IACE,OAAO,EAAE,MAAM,CAAC,gBAAgB;IAChC,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,SAAS;CAChB,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,0BAA0B,CACzD,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CACpE,EACD;IACE,OAAO,EAAE,MAAM,CAAC,gBAAgB;IAChC,OAAO,EAAE,MAAM,CAAC,gBAAgB;IAChC,IAAI,EAAE,SAAS;CAChB,CACF,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,OAAe;IAC1D,OAAO,0BAA0B,CAC/B,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACvB,KAAK,GAAG,CAAC;QACT,KAAK,IAAI,OAAO,CACnB,EACD;QACE,OAAO;QACP,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,SAAS;KAChB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CACzD,CAAC,CAAC,MAAM,CAAU,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,EACjD,CAAC,CAAC,OAAO,EAAE,CACZ,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEtD,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,OAAO,0BAA0B,CAC/B,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,CAClE,EACD;QACE,SAAS;QACT,IAAI,EAAE,QAAQ;KACf,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,SAAiB;IAC3D,OAAO,0BAA0B,CAC/B,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,SAAS,CAC5B,EACD;QACE,SAAS;QACT,SAAS,EAAE,CAAC;QACZ,IAAI,EAAE,QAAQ;KACf,CACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,UAAsB;AACtB,qEAAqE;AACrE,QAAiB;IAEjB,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,sBAAsB,CAC1C,CAAC,CAAC,MAAM,CAAyB,KAAK,CAAC,OAAO,CAAC,EAC/C,UAAU,CACX,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YACvD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,iBAAiB,QAAQ,QAAQ;aAC3C,CAAC,CAAC;YACH,wEAAwE;YACxE,sEAAsE;YACtE,uDAAuD;YACvD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO;YACT,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,sBAAsB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IACD,uEAAuE;IACvE,sEAAsE;IACtE,0EAA0E;IAC1E,OAAO,0BAA0B,CAAC,aAAa,EAAE;QAC/C,uEAAuE;QACvE,wEAAwE;QACxE,0CAA0C;QAC1C,KAAK,EAAE,YAAY,CAAC,UAAU,CAAC;QAC/B,QAAQ;QACR,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,UAAsB;IAEtB,OAAO,sBAAsB,CAC3B,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAC7D,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,UAAsB,EACtB,QAAgB;IAEhB,OAAO,0BAA0B,CAC/B,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EACvE;QACE,KAAK,EAAE,YAAY,CAAC,UAAU,CAAC;QAC/B,QAAQ;QACR,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,OAAO;KACd,CACF,CAAC;AACJ,CAAC;AAWD,MAAM,UAAU,gBAAgB,CAC9B,KAAoB;IAEpB,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAEzC,MAAM,aAAa,GAAG,sBAAsB,CAC1C,CAAC,CAAC,MAAM,CAA0B,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAClE,WAAW,CACZ,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,sBAAsB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;AAC5D,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { isPlainObject } from \"./isPlainObject\";\nimport {\n  registerJsonSchemaFragment,\n  registerJsonSchemaView,\n  toJsonSchema,\n} from \"./jsonSchema\";\nimport {\n  AUTH_CHALLENGE_HEX_LENGTH,\n  isAuthChallengeHexString,\n  isByteArrayOfLength,\n  isSha256HexString,\n  SHA256_HEX_LENGTH,\n} from \"./util/protocol\";\nimport { isUuidV4String, UUID_V4_PATTERN } from \"./util/uuid\";\n\nconst LOWERCASE_HEX_PATTERN = \"^[0-9a-f]+$\";\nconst UUID_PATTERN =\n  \"^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$\";\n\nexport const sha256HexStringSchema = registerJsonSchemaFragment(\n  z.custom<string>(isSha256HexString),\n  {\n    maxLength: SHA256_HEX_LENGTH,\n    minLength: SHA256_HEX_LENGTH,\n    pattern: LOWERCASE_HEX_PATTERN,\n    type: \"string\",\n  },\n);\n\nexport const authChallengeHexStringSchema = registerJsonSchemaFragment(\n  z.custom<string>(isAuthChallengeHexString),\n  {\n    maxLength: AUTH_CHALLENGE_HEX_LENGTH,\n    minLength: AUTH_CHALLENGE_HEX_LENGTH,\n    pattern: LOWERCASE_HEX_PATTERN,\n    type: \"string\",\n  },\n);\n\nexport const uuidV4StringSchema = registerJsonSchemaFragment(\n  z.custom<string>(\n    (value) => typeof value === \"string\" && isUuidV4String(value),\n  ),\n  {\n    pattern: UUID_V4_PATTERN.source,\n    type: \"string\",\n  },\n);\n\n/** Accepts RFC 4122 UUID versions 1-5, matching the API route UUID contract. */\nexport const uuidStringSchema = registerJsonSchemaFragment(\n  z.string().regex(new RegExp(UUID_PATTERN, \"u\")),\n  {\n    pattern: UUID_PATTERN,\n    type: \"string\",\n  },\n);\n\nexport function fixedLengthByteArraySchema(length: number) {\n  return registerJsonSchemaFragment(\n    z.custom<number[]>((value) => isByteArrayOfLength(value, length)),\n    {\n      items: {\n        maximum: 255,\n        minimum: 0,\n        type: \"integer\",\n      },\n      maxItems: length,\n      minItems: length,\n      type: \"array\",\n    },\n  );\n}\n\nexport const plainObjectSchema = registerJsonSchemaView(\n  z.custom<Record<string, unknown>>(isPlainObject),\n  z.looseObject({}),\n);\n\nexport const positiveIntegerSchema = registerJsonSchemaFragment(\n  z.number().positive().refine(Number.isInteger),\n  {\n    exclusiveMinimum: 0,\n    maximum: Number.MAX_VALUE,\n    type: \"integer\",\n  },\n);\n\nexport const nonNegativeIntegerSchema = registerJsonSchemaFragment(\n  z.custom<number>(\n    (value) =>\n      typeof value === \"number\" && Number.isInteger(value) && value >= 0,\n  ),\n  {\n    maximum: Number.MAX_VALUE,\n    minimum: 0,\n    type: \"integer\",\n  },\n);\n\nexport const safeNonNegativeIntegerSchema = registerJsonSchemaFragment(\n  z.custom<number>(\n    (value) =>\n      typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0,\n  ),\n  {\n    maximum: Number.MAX_SAFE_INTEGER,\n    minimum: 0,\n    type: \"integer\",\n  },\n);\n\nexport const safeIntegerSchema = registerJsonSchemaFragment(\n  z.custom<number>(\n    (value) => typeof value === \"number\" && Number.isSafeInteger(value),\n  ),\n  {\n    maximum: Number.MAX_SAFE_INTEGER,\n    minimum: Number.MIN_SAFE_INTEGER,\n    type: \"integer\",\n  },\n);\n\nexport function boundedPositiveIntegerSchema(maximum: number) {\n  return registerJsonSchemaFragment(\n    z.custom<number>(\n      (value) =>\n        typeof value === \"number\" &&\n        Number.isInteger(value) &&\n        value > 0 &&\n        value <= maximum,\n    ),\n    {\n      maximum,\n      minimum: 1,\n      type: \"integer\",\n    },\n  );\n}\n\nexport const requiredUnknownSchema = registerJsonSchemaView(\n  z.custom<unknown>((value) => value !== undefined),\n  z.unknown(),\n);\n\nexport const nonEmptyStringSchema = z.string().min(1);\n\nexport function boundedStringSchema(maxLength: number) {\n  return registerJsonSchemaFragment(\n    z.custom<string>(\n      (value) => typeof value === \"string\" && value.length <= maxLength,\n    ),\n    {\n      maxLength,\n      type: \"string\",\n    },\n  );\n}\n\nexport function boundedNonEmptyStringSchema(maxLength: number) {\n  return registerJsonSchemaFragment(\n    z.custom<string>(\n      (value) =>\n        typeof value === \"string\" &&\n        value.length > 0 &&\n        value.length <= maxLength,\n    ),\n    {\n      maxLength,\n      minLength: 1,\n      type: \"string\",\n    },\n  );\n}\n\n/**\n * Validates array items without rebuilding the array. This preserves signed\n * input identity and the runtime contract's treatment of sparse array holes.\n */\nexport function arraySchema<ItemSchema extends z.ZodType>(\n  itemSchema: ItemSchema,\n  /** Optional item ceiling, reflected in the generated JSON Schema. */\n  maxItems?: number,\n) {\n  const viewSchema = z.array(itemSchema);\n  const runtimeSchema = registerJsonSchemaView(\n    z.custom<z.output<ItemSchema>[]>(Array.isArray),\n    viewSchema,\n  ).superRefine((values, context) => {\n    if (maxItems !== undefined && values.length > maxItems) {\n      context.addIssue({\n        code: \"custom\",\n        continue: false,\n        message: `array exceeds ${maxItems} items`,\n      });\n      // The cardinality error already makes the value invalid. Stop here so a\n      // small request body containing a very large array cannot force us to\n      // parse every item and allocate an issue for each one.\n      return;\n    }\n    values.forEach((value, index) => {\n      const result = itemSchema.safeParse(value);\n      if (result.success) {\n        return;\n      }\n\n      for (const issue of result.error.issues) {\n        context.addIssue({ ...issue, path: [index, ...issue.path] });\n      }\n    });\n  });\n\n  if (maxItems === undefined) {\n    return registerJsonSchemaView(runtimeSchema, viewSchema);\n  }\n  // The projector rejects checks on a registered view, so the advertised\n  // ceiling is attached as an explicit fragment instead — the generated\n  // OpenAPI carries maxItems, and the runtime refinement above enforces it.\n  return registerJsonSchemaFragment(runtimeSchema, {\n    // Project the item through this package's own projector so the emitted\n    // item schema — and the types generated from it — stay identical to the\n    // unbounded case; only maxItems is added.\n    items: toJsonSchema(itemSchema),\n    maxItems,\n    type: \"array\",\n  });\n}\n\nexport function nonEmptyArraySchema<ItemSchema extends z.ZodType>(\n  itemSchema: ItemSchema,\n) {\n  return registerJsonSchemaView(\n    arraySchema(itemSchema).refine((values) => values.length > 0),\n    z.array(itemSchema).min(1),\n  );\n}\n\nexport function boundedNonEmptyArraySchema<ItemSchema extends z.ZodType>(\n  itemSchema: ItemSchema,\n  maxItems: number,\n) {\n  return registerJsonSchemaFragment(\n    arraySchema(itemSchema, maxItems).refine((values) => values.length > 0),\n    {\n      items: toJsonSchema(itemSchema),\n      maxItems,\n      minItems: 1,\n      type: \"array\",\n    },\n  );\n}\n\n/**\n * Validates a shaped plain object without returning Zod's reconstructed\n * loose-object output. Extension keys, prototypes, and signed input identity\n * remain untouched. A separate structural view describes the JSON wire shape\n * for OpenAPI without changing the value returned by runtime validation.\n */\nexport function loosePlainObject<Shape extends z.ZodRawShape>(\n  shape: Shape,\n): z.ZodType<z.output<z.ZodObject<Shape>>, z.input<z.ZodObject<Shape>>>;\nexport function loosePlainObject(\n  shape: z.ZodRawShape,\n): z.ZodType<Record<string, unknown>> {\n  const shapeSchema = z.looseObject(shape);\n\n  const runtimeSchema = registerJsonSchemaView(\n    z.custom<Record<string, unknown>>((value) => isPlainObject(value)),\n    shapeSchema,\n  ).superRefine((value, context) => {\n    const result = shapeSchema.safeParse(value);\n    if (result.success) {\n      return;\n    }\n\n    for (const issue of result.error.issues) {\n      context.addIssue({ ...issue });\n    }\n  });\n\n  return registerJsonSchemaView(runtimeSchema, shapeSchema);\n}\n"]}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9D,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAC5C,MAAM,YAAY,GAChB,4FAA4F,CAAC;AAE/F,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAC7D,CAAC,CAAC,MAAM,CAAS,iBAAiB,CAAC,EACnC;IACE,SAAS,EAAE,iBAAiB;IAC5B,SAAS,EAAE,iBAAiB;IAC5B,OAAO,EAAE,qBAAqB;IAC9B,IAAI,EAAE,QAAQ;CACf,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CACpE,CAAC,CAAC,MAAM,CAAS,wBAAwB,CAAC,EAC1C;IACE,SAAS,EAAE,yBAAyB;IACpC,SAAS,EAAE,yBAAyB;IACpC,OAAO,EAAE,qBAAqB;IAC9B,IAAI,EAAE,QAAQ;CACf,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,0BAA0B,CAC1D,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,KAAK,CAAC,CAC9D,EACD;IACE,OAAO,EAAE,eAAe,CAAC,MAAM;IAC/B,IAAI,EAAE,QAAQ;CACf,CACF,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG,0BAA0B,CACxD,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,EAC/C;IACE,OAAO,EAAE,YAAY;IACrB,IAAI,EAAE,QAAQ;CACf,CACF,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,OAAO,0BAA0B,CAC/B,CAAC,CAAC,MAAM,CAAW,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EACjE;QACE,KAAK,EAAE;YACL,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,SAAS;SAChB;QACD,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,OAAO;KACd,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,sBAAsB,CACrD,CAAC,CAAC,MAAM,CAA0B,aAAa,CAAC,EAChD,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAClB,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAC7D,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAC9C;IACE,gBAAgB,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,SAAS;IACzB,IAAI,EAAE,SAAS;CAChB,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAChE,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CACrE,EACD;IACE,OAAO,EAAE,MAAM,CAAC,SAAS;IACzB,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,SAAS;CAChB,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CACpE,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CACzE,EACD;IACE,OAAO,EAAE,MAAM,CAAC,gBAAgB;IAChC,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,SAAS;CAChB,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,0BAA0B,CACzD,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CACpE,EACD;IACE,OAAO,EAAE,MAAM,CAAC,gBAAgB;IAChC,OAAO,EAAE,MAAM,CAAC,gBAAgB;IAChC,IAAI,EAAE,SAAS;CAChB,CACF,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,OAAe;IAC1D,OAAO,0BAA0B,CAC/B,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACvB,KAAK,GAAG,CAAC;QACT,KAAK,IAAI,OAAO,CACnB,EACD;QACE,OAAO;QACP,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,SAAS;KAChB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CACzD,CAAC,CAAC,MAAM,CAAU,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,EACjD,CAAC,CAAC,OAAO,EAAE,CACZ,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEtD,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,OAAO,0BAA0B,CAC/B,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,CAClE,EACD;QACE,SAAS;QACT,IAAI,EAAE,QAAQ;KACf,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,SAAiB;IAC3D,OAAO,0BAA0B,CAC/B,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,SAAS,CAC5B,EACD;QACE,SAAS;QACT,SAAS,EAAE,CAAC;QACZ,IAAI,EAAE,QAAQ;KACf,CACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,UAAsB;AACtB,qEAAqE;AACrE,QAAiB;IAEjB,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,sBAAsB,CAC1C,CAAC,CAAC,MAAM,CAAyB,KAAK,CAAC,OAAO,CAAC,EAC/C,UAAU,CACX,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YACvD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,iBAAiB,QAAQ,QAAQ;aAC3C,CAAC,CAAC;YACH,wEAAwE;YACxE,sEAAsE;YACtE,uDAAuD;YACvD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO;YACT,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,sBAAsB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IACD,uEAAuE;IACvE,sEAAsE;IACtE,0EAA0E;IAC1E,OAAO,0BAA0B,CAAC,aAAa,EAAE;QAC/C,uEAAuE;QACvE,wEAAwE;QACxE,0CAA0C;QAC1C,KAAK,EAAE,YAAY,CAAC,UAAU,CAAC;QAC/B,QAAQ;QACR,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,WAAwB;IAExB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,sBAAsB,CAC1C,CAAC,CAAC,MAAM,CAAwC,aAAa,CAAC,EAC9D,UAAU,CACX,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,sBAAsB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,UAAsB;IAEtB,OAAO,sBAAsB,CAC3B,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAC7D,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,UAAsB,EACtB,QAAgB;IAEhB,OAAO,0BAA0B,CAC/B,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EACvE;QACE,KAAK,EAAE,YAAY,CAAC,UAAU,CAAC;QAC/B,QAAQ;QACR,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,OAAO;KACd,CACF,CAAC;AACJ,CAAC;AAWD,MAAM,UAAU,gBAAgB,CAC9B,KAAoB;IAEpB,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAEzC,MAAM,aAAa,GAAG,sBAAsB,CAC1C,CAAC,CAAC,MAAM,CAA0B,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAClE,WAAW,CACZ,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,sBAAsB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;AAC5D,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { isPlainObject } from \"./isPlainObject\";\nimport {\n  registerJsonSchemaFragment,\n  registerJsonSchemaView,\n  toJsonSchema,\n} from \"./jsonSchema\";\nimport {\n  AUTH_CHALLENGE_HEX_LENGTH,\n  isAuthChallengeHexString,\n  isByteArrayOfLength,\n  isSha256HexString,\n  SHA256_HEX_LENGTH,\n} from \"./util/protocol\";\nimport { isUuidV4String, UUID_V4_PATTERN } from \"./util/uuid\";\n\nconst LOWERCASE_HEX_PATTERN = \"^[0-9a-f]+$\";\nconst UUID_PATTERN =\n  \"^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$\";\n\nexport const sha256HexStringSchema = registerJsonSchemaFragment(\n  z.custom<string>(isSha256HexString),\n  {\n    maxLength: SHA256_HEX_LENGTH,\n    minLength: SHA256_HEX_LENGTH,\n    pattern: LOWERCASE_HEX_PATTERN,\n    type: \"string\",\n  },\n);\n\nexport const authChallengeHexStringSchema = registerJsonSchemaFragment(\n  z.custom<string>(isAuthChallengeHexString),\n  {\n    maxLength: AUTH_CHALLENGE_HEX_LENGTH,\n    minLength: AUTH_CHALLENGE_HEX_LENGTH,\n    pattern: LOWERCASE_HEX_PATTERN,\n    type: \"string\",\n  },\n);\n\nexport const uuidV4StringSchema = registerJsonSchemaFragment(\n  z.custom<string>(\n    (value) => typeof value === \"string\" && isUuidV4String(value),\n  ),\n  {\n    pattern: UUID_V4_PATTERN.source,\n    type: \"string\",\n  },\n);\n\n/** Accepts RFC 4122 UUID versions 1-5, matching the API route UUID contract. */\nexport const uuidStringSchema = registerJsonSchemaFragment(\n  z.string().regex(new RegExp(UUID_PATTERN, \"u\")),\n  {\n    pattern: UUID_PATTERN,\n    type: \"string\",\n  },\n);\n\nexport function fixedLengthByteArraySchema(length: number) {\n  return registerJsonSchemaFragment(\n    z.custom<number[]>((value) => isByteArrayOfLength(value, length)),\n    {\n      items: {\n        maximum: 255,\n        minimum: 0,\n        type: \"integer\",\n      },\n      maxItems: length,\n      minItems: length,\n      type: \"array\",\n    },\n  );\n}\n\nexport const plainObjectSchema = registerJsonSchemaView(\n  z.custom<Record<string, unknown>>(isPlainObject),\n  z.looseObject({}),\n);\n\nexport const positiveIntegerSchema = registerJsonSchemaFragment(\n  z.number().positive().refine(Number.isInteger),\n  {\n    exclusiveMinimum: 0,\n    maximum: Number.MAX_VALUE,\n    type: \"integer\",\n  },\n);\n\nexport const nonNegativeIntegerSchema = registerJsonSchemaFragment(\n  z.custom<number>(\n    (value) =>\n      typeof value === \"number\" && Number.isInteger(value) && value >= 0,\n  ),\n  {\n    maximum: Number.MAX_VALUE,\n    minimum: 0,\n    type: \"integer\",\n  },\n);\n\nexport const safeNonNegativeIntegerSchema = registerJsonSchemaFragment(\n  z.custom<number>(\n    (value) =>\n      typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0,\n  ),\n  {\n    maximum: Number.MAX_SAFE_INTEGER,\n    minimum: 0,\n    type: \"integer\",\n  },\n);\n\nexport const safeIntegerSchema = registerJsonSchemaFragment(\n  z.custom<number>(\n    (value) => typeof value === \"number\" && Number.isSafeInteger(value),\n  ),\n  {\n    maximum: Number.MAX_SAFE_INTEGER,\n    minimum: Number.MIN_SAFE_INTEGER,\n    type: \"integer\",\n  },\n);\n\nexport function boundedPositiveIntegerSchema(maximum: number) {\n  return registerJsonSchemaFragment(\n    z.custom<number>(\n      (value) =>\n        typeof value === \"number\" &&\n        Number.isInteger(value) &&\n        value > 0 &&\n        value <= maximum,\n    ),\n    {\n      maximum,\n      minimum: 1,\n      type: \"integer\",\n    },\n  );\n}\n\nexport const requiredUnknownSchema = registerJsonSchemaView(\n  z.custom<unknown>((value) => value !== undefined),\n  z.unknown(),\n);\n\nexport const nonEmptyStringSchema = z.string().min(1);\n\nexport function boundedStringSchema(maxLength: number) {\n  return registerJsonSchemaFragment(\n    z.custom<string>(\n      (value) => typeof value === \"string\" && value.length <= maxLength,\n    ),\n    {\n      maxLength,\n      type: \"string\",\n    },\n  );\n}\n\nexport function boundedNonEmptyStringSchema(maxLength: number) {\n  return registerJsonSchemaFragment(\n    z.custom<string>(\n      (value) =>\n        typeof value === \"string\" &&\n        value.length > 0 &&\n        value.length <= maxLength,\n    ),\n    {\n      maxLength,\n      minLength: 1,\n      type: \"string\",\n    },\n  );\n}\n\n/**\n * Validates array items without rebuilding the array. This preserves signed\n * input identity and the runtime contract's treatment of sparse array holes.\n */\nexport function arraySchema<ItemSchema extends z.ZodType>(\n  itemSchema: ItemSchema,\n  /** Optional item ceiling, reflected in the generated JSON Schema. */\n  maxItems?: number,\n) {\n  const viewSchema = z.array(itemSchema);\n  const runtimeSchema = registerJsonSchemaView(\n    z.custom<z.output<ItemSchema>[]>(Array.isArray),\n    viewSchema,\n  ).superRefine((values, context) => {\n    if (maxItems !== undefined && values.length > maxItems) {\n      context.addIssue({\n        code: \"custom\",\n        continue: false,\n        message: `array exceeds ${maxItems} items`,\n      });\n      // The cardinality error already makes the value invalid. Stop here so a\n      // small request body containing a very large array cannot force us to\n      // parse every item and allocate an issue for each one.\n      return;\n    }\n    values.forEach((value, index) => {\n      const result = itemSchema.safeParse(value);\n      if (result.success) {\n        return;\n      }\n\n      for (const issue of result.error.issues) {\n        context.addIssue({ ...issue, path: [index, ...issue.path] });\n      }\n    });\n  });\n\n  if (maxItems === undefined) {\n    return registerJsonSchemaView(runtimeSchema, viewSchema);\n  }\n  // The projector rejects checks on a registered view, so the advertised\n  // ceiling is attached as an explicit fragment instead — the generated\n  // OpenAPI carries maxItems, and the runtime refinement above enforces it.\n  return registerJsonSchemaFragment(runtimeSchema, {\n    // Project the item through this package's own projector so the emitted\n    // item schema — and the types generated from it — stay identical to the\n    // unbounded case; only maxItems is added.\n    items: toJsonSchema(itemSchema),\n    maxItems,\n    type: \"array\",\n  });\n}\n\n/**\n * Validates a plain-object map's values without rebuilding it, like\n * arraySchema. Callers read entries with Object.entries or Object.hasOwn so a\n * wire key such as \"__proto__\" is only ever an own data property.\n */\nexport function plainRecordSchema<ValueSchema extends z.ZodType>(\n  valueSchema: ValueSchema,\n) {\n  const viewSchema = z.record(z.string(), valueSchema);\n  const runtimeSchema = registerJsonSchemaView(\n    z.custom<Record<string, z.output<ValueSchema>>>(isPlainObject),\n    viewSchema,\n  ).superRefine((value, context) => {\n    for (const [key, entry] of Object.entries(value)) {\n      const result = valueSchema.safeParse(entry);\n      if (result.success) {\n        continue;\n      }\n      for (const issue of result.error.issues) {\n        context.addIssue({ ...issue, path: [key, ...issue.path] });\n      }\n    }\n  });\n\n  return registerJsonSchemaView(runtimeSchema, viewSchema);\n}\n\nexport function nonEmptyArraySchema<ItemSchema extends z.ZodType>(\n  itemSchema: ItemSchema,\n) {\n  return registerJsonSchemaView(\n    arraySchema(itemSchema).refine((values) => values.length > 0),\n    z.array(itemSchema).min(1),\n  );\n}\n\nexport function boundedNonEmptyArraySchema<ItemSchema extends z.ZodType>(\n  itemSchema: ItemSchema,\n  maxItems: number,\n) {\n  return registerJsonSchemaFragment(\n    arraySchema(itemSchema, maxItems).refine((values) => values.length > 0),\n    {\n      items: toJsonSchema(itemSchema),\n      maxItems,\n      minItems: 1,\n      type: \"array\",\n    },\n  );\n}\n\n/**\n * Validates a shaped plain object without returning Zod's reconstructed\n * loose-object output. Extension keys, prototypes, and signed input identity\n * remain untouched. A separate structural view describes the JSON wire shape\n * for OpenAPI without changing the value returned by runtime validation.\n */\nexport function loosePlainObject<Shape extends z.ZodRawShape>(\n  shape: Shape,\n): z.ZodType<z.output<z.ZodObject<Shape>>, z.input<z.ZodObject<Shape>>>;\nexport function loosePlainObject(\n  shape: z.ZodRawShape,\n): z.ZodType<Record<string, unknown>> {\n  const shapeSchema = z.looseObject(shape);\n\n  const runtimeSchema = registerJsonSchemaView(\n    z.custom<Record<string, unknown>>((value) => isPlainObject(value)),\n    shapeSchema,\n  ).superRefine((value, context) => {\n    const result = shapeSchema.safeParse(value);\n    if (result.success) {\n      return;\n    }\n\n    for (const issue of result.error.issues) {\n      context.addIssue({ ...issue });\n    }\n  });\n\n  return registerJsonSchemaView(runtimeSchema, shapeSchema);\n}\n"]}

package/internal/validators/util/blob.d.ts

@@ -3,3 +3,10 @@
  * HTTP bridge buffers for direct uploads, and API buffers for non-signing stores.
  */
 export declare const MAX_MULTIPART_BLOB_PART_BYTES: number;
+/**
+ * Parts a stage initiation may describe and receive upload sources for in its
+ * own response: the SDK's upload concurrency, so every part it starts first
+ * needs no separate authorization request. Later parts and retries authorize
+ * one at a time, just before they are sent.
+ */
+export declare const MAX_INITIATE_PART_UPLOADS = 4;

package/internal/validators/util/blob.js

@@ -3,4 +3,11 @@
  * HTTP bridge buffers for direct uploads, and API buffers for non-signing stores.
  */
 export const MAX_MULTIPART_BLOB_PART_BYTES = 32 * 1024 * 1024;
+/**
+ * Parts a stage initiation may describe and receive upload sources for in its
+ * own response: the SDK's upload concurrency, so every part it starts first
+ * needs no separate authorization request. Later parts and retries authorize
+ * one at a time, just before they are sent.
+ */
+export const MAX_INITIATE_PART_UPLOADS = 4;
 //# sourceMappingURL=blob.js.map

package/internal/validators/util/blob.js.map

@@ -1 +1 @@
-{"version":3,"file":"blob.js","sourceRoot":"","sources":["blob.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC","sourcesContent":["/**\n * Protocol ceiling for a multipart blob part. Bounds client hashing and native\n * HTTP bridge buffers for direct uploads, and API buffers for non-signing stores.\n */\nexport const MAX_MULTIPART_BLOB_PART_BYTES = 32 * 1024 * 1024;\n"]}
+{"version":3,"file":"blob.js","sourceRoot":"","sources":["blob.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC","sourcesContent":["/**\n * Protocol ceiling for a multipart blob part. Bounds client hashing and native\n * HTTP bridge buffers for direct uploads, and API buffers for non-signing stores.\n */\nexport const MAX_MULTIPART_BLOB_PART_BYTES = 32 * 1024 * 1024;\n\n/**\n * Parts a stage initiation may describe and receive upload sources for in its\n * own response: the SDK's upload concurrency, so every part it starts first\n * needs no separate authorization request. Later parts and retries authorize\n * one at a time, just before they are sent.\n */\nexport const MAX_INITIATE_PART_UPLOADS = 4;\n"]}

package/internal/validators/util/blobTransferSchemas.d.ts

@@ -0,0 +1,41 @@
+import { z } from "zod";
+export declare const signedBlobUrlSchema: z.ZodCustom<string, string>;
+export declare const signedBlobUrlExpirySchema: z.ZodCustom<string, string>;
+export declare const blobPartContentMd5Schema: z.ZodCustom<string, string>;
+/** S3/R2 multipart part numbers run from 1 through 10,000. */
+export declare const MAX_MULTIPART_BLOB_PART_NUMBER = 10000;
+/**
+ * One encrypted part as the client will send it: its number, exact length, and
+ * the transport Content-MD5 a signed upload URL binds.
+ */
+export declare const MultipartBlobPartDescriptorSchema: z.ZodObject<{
+    byteLength: z.ZodCustom<number, number>;
+    contentMd5: z.ZodCustom<string, string>;
+    partNumber: z.ZodCustom<number, number>;
+}, z.core.$strict>;
+export type MultipartBlobPartDescriptor = z.infer<typeof MultipartBlobPartDescriptorSchema>;
+/**
+ * Where a part's bytes go: the API byte route for stores that cannot sign, or
+ * a short-lived URL that signs exactly one part of one upload.
+ */
+export declare const MultipartBlobPartUploadSourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"api">;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"signed-url">;
+    url: z.ZodCustom<string, string>;
+    expiresAt: z.ZodCustom<string, string>;
+}, z.core.$strict>], "kind">;
+export type MultipartBlobPartUploadSource = z.infer<typeof MultipartBlobPartUploadSourceSchema>;
+export declare const MultipartBlobPartUploadSchema: z.ZodObject<{
+    byteLength: z.ZodCustom<number, number>;
+    contentMd5: z.ZodCustom<string, string>;
+    partNumber: z.ZodCustom<number, number>;
+    source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"api">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"signed-url">;
+        url: z.ZodCustom<string, string>;
+        expiresAt: z.ZodCustom<string, string>;
+    }, z.core.$strict>], "kind">;
+}, z.core.$strict>;
+export type MultipartBlobPartUpload = z.infer<typeof MultipartBlobPartUploadSchema>;

package/internal/validators/util/blobTransferSchemas.js

@@ -0,0 +1,39 @@
+import { z } from "zod";
+import { registerJsonSchemaFragment } from "../jsonSchema.js";
+import { boundedPositiveIntegerSchema } from "../schema.js";
+import { MAX_MULTIPART_BLOB_PART_BYTES } from "./blob.js";
+function stringSchemaFragment(schema) {
+    const { $schema: _dialect, ...fragment } = z.toJSONSchema(schema);
+    return registerJsonSchemaFragment(z.custom((value) => schema.safeParse(value).success), fragment);
+}
+export const signedBlobUrlSchema = stringSchemaFragment(z.url().regex(/^https?:\/\//u));
+export const signedBlobUrlExpirySchema = stringSchemaFragment(z.iso.datetime());
+// R2 transport checksum; assembled SHA-256 remains the application authority.
+export const blobPartContentMd5Schema = stringSchemaFragment(z.string().regex(/^[A-Za-z0-9+/]{21}[AQgw]==$/u));
+/** S3/R2 multipart part numbers run from 1 through 10,000. */
+export const MAX_MULTIPART_BLOB_PART_NUMBER = 10_000;
+/**
+ * One encrypted part as the client will send it: its number, exact length, and
+ * the transport Content-MD5 a signed upload URL binds.
+ */
+export const MultipartBlobPartDescriptorSchema = z.strictObject({
+    byteLength: boundedPositiveIntegerSchema(MAX_MULTIPART_BLOB_PART_BYTES),
+    contentMd5: blobPartContentMd5Schema,
+    partNumber: boundedPositiveIntegerSchema(MAX_MULTIPART_BLOB_PART_NUMBER),
+});
+/**
+ * Where a part's bytes go: the API byte route for stores that cannot sign, or
+ * a short-lived URL that signs exactly one part of one upload.
+ */
+export const MultipartBlobPartUploadSourceSchema = z.discriminatedUnion("kind", [
+    z.strictObject({ kind: z.literal("api") }),
+    z.strictObject({
+        kind: z.literal("signed-url"),
+        url: signedBlobUrlSchema,
+        expiresAt: signedBlobUrlExpirySchema,
+    }),
+]);
+export const MultipartBlobPartUploadSchema = MultipartBlobPartDescriptorSchema.extend({
+    source: MultipartBlobPartUploadSourceSchema,
+});
+//# sourceMappingURL=blobTransferSchemas.js.map

package/internal/validators/util/blobTransferSchemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blobTransferSchemas.js","sourceRoot":"","sources":["blobTransferSchemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AAEvD,SAAS,oBAAoB,CAAC,MAAyB;IACrD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,0BAA0B,CAC/B,CAAC,CAAC,MAAM,CAAS,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAC5D,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CACrD,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAC/B,CAAC;AACF,MAAM,CAAC,MAAM,yBAAyB,GAAG,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEhF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,wBAAwB,GAAG,oBAAoB,CAC1D,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC,CACjD,CAAC;AAEF,8DAA8D;AAC9D,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAErD;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9D,UAAU,EAAE,4BAA4B,CAAC,6BAA6B,CAAC;IACvE,UAAU,EAAE,wBAAwB;IACpC,UAAU,EAAE,4BAA4B,CAAC,8BAA8B,CAAC;CACzE,CAAC,CAAC;AAMH;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,kBAAkB,CACrE,MAAM,EACN;IACE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1C,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC7B,GAAG,EAAE,mBAAmB;QACxB,SAAS,EAAE,yBAAyB;KACrC,CAAC;CACH,CACF,CAAC;AAMF,MAAM,CAAC,MAAM,6BAA6B,GACxC,iCAAiC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,mCAAmC;CAC5C,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaFragment } from \"../jsonSchema\";\nimport { boundedPositiveIntegerSchema } from \"../schema\";\nimport { MAX_MULTIPART_BLOB_PART_BYTES } from \"./blob\";\n\nfunction stringSchemaFragment(schema: z.ZodType<string>) {\n  const { $schema: _dialect, ...fragment } = z.toJSONSchema(schema);\n  return registerJsonSchemaFragment(\n    z.custom<string>((value) => schema.safeParse(value).success),\n    fragment,\n  );\n}\n\nexport const signedBlobUrlSchema = stringSchemaFragment(\n  z.url().regex(/^https?:\\/\\//u),\n);\nexport const signedBlobUrlExpirySchema = stringSchemaFragment(z.iso.datetime());\n\n// R2 transport checksum; assembled SHA-256 remains the application authority.\nexport const blobPartContentMd5Schema = stringSchemaFragment(\n  z.string().regex(/^[A-Za-z0-9+/]{21}[AQgw]==$/u),\n);\n\n/** S3/R2 multipart part numbers run from 1 through 10,000. */\nexport const MAX_MULTIPART_BLOB_PART_NUMBER = 10_000;\n\n/**\n * One encrypted part as the client will send it: its number, exact length, and\n * the transport Content-MD5 a signed upload URL binds.\n */\nexport const MultipartBlobPartDescriptorSchema = z.strictObject({\n  byteLength: boundedPositiveIntegerSchema(MAX_MULTIPART_BLOB_PART_BYTES),\n  contentMd5: blobPartContentMd5Schema,\n  partNumber: boundedPositiveIntegerSchema(MAX_MULTIPART_BLOB_PART_NUMBER),\n});\n\nexport type MultipartBlobPartDescriptor = z.infer<\n  typeof MultipartBlobPartDescriptorSchema\n>;\n\n/**\n * Where a part's bytes go: the API byte route for stores that cannot sign, or\n * a short-lived URL that signs exactly one part of one upload.\n */\nexport const MultipartBlobPartUploadSourceSchema = z.discriminatedUnion(\n  \"kind\",\n  [\n    z.strictObject({ kind: z.literal(\"api\") }),\n    z.strictObject({\n      kind: z.literal(\"signed-url\"),\n      url: signedBlobUrlSchema,\n      expiresAt: signedBlobUrlExpirySchema,\n    }),\n  ],\n);\n\nexport type MultipartBlobPartUploadSource = z.infer<\n  typeof MultipartBlobPartUploadSourceSchema\n>;\n\nexport const MultipartBlobPartUploadSchema =\n  MultipartBlobPartDescriptorSchema.extend({\n    source: MultipartBlobPartUploadSourceSchema,\n  });\n\nexport type MultipartBlobPartUpload = z.infer<\n  typeof MultipartBlobPartUploadSchema\n>;\n"]}

package/internal/validators/util/containerLimits.d.ts

@@ -1,2 +1,9 @@
 /** Maximum number of containers in a root-to-leaf path, including both ends. */
 export declare const MAX_CONTAINER_PATH_LENGTH = 100;
+/**
+ * Maximum number of stored manifests one container mutation may cite as the
+ * mutated container's history. Inline bundles (8-14 KiB each) fit about this
+ * many under the 32 MiB request ceiling; a reference is ~150 bytes, so the
+ * bound keeps that capacity instead of letting a small body cite ~50x more.
+ */
+export declare const MAX_CONTAINER_MANIFEST_HISTORY_REFS = 4096;

package/internal/validators/util/containerLimits.js

@@ -1,3 +1,10 @@
 /** Maximum number of containers in a root-to-leaf path, including both ends. */
 export const MAX_CONTAINER_PATH_LENGTH = 100;
+/**
+ * Maximum number of stored manifests one container mutation may cite as the
+ * mutated container's history. Inline bundles (8-14 KiB each) fit about this
+ * many under the 32 MiB request ceiling; a reference is ~150 bytes, so the
+ * bound keeps that capacity instead of letting a small body cite ~50x more.
+ */
+export const MAX_CONTAINER_MANIFEST_HISTORY_REFS = 4096;
 //# sourceMappingURL=containerLimits.js.map

package/internal/validators/util/containerLimits.js.map

@@ -1 +1 @@
-{"version":3,"file":"containerLimits.js","sourceRoot":"","sources":["containerLimits.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC","sourcesContent":["/** Maximum number of containers in a root-to-leaf path, including both ends. */\nexport const MAX_CONTAINER_PATH_LENGTH = 100;\n"]}
+{"version":3,"file":"containerLimits.js","sourceRoot":"","sources":["containerLimits.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,IAAI,CAAC","sourcesContent":["/** Maximum number of containers in a root-to-leaf path, including both ends. */\nexport const MAX_CONTAINER_PATH_LENGTH = 100;\n\n/**\n * Maximum number of stored manifests one container mutation may cite as the\n * mutated container's history. Inline bundles (8-14 KiB each) fit about this\n * many under the 32 MiB request ceiling; a reference is ~150 bytes, so the\n * bound keeps that capacity instead of letting a small body cite ~50x more.\n */\nexport const MAX_CONTAINER_MANIFEST_HISTORY_REFS = 4096;\n"]}

package/internal/validators/util/index.d.ts

@@ -1,12 +1,13 @@
 export { type AccessEventBundleWireResponse, AccessEventBundleWireResponseSchema, type AccessManifestBundleWire, type AccessManifestBundleWireResponse, AccessManifestBundleWireResponseSchema, AccessManifestBundleWireSchema, isAccessEventBundleWireResponse, isAccessManifestBundleWire, isAccessManifestBundleWireArray, isAccessManifestBundleWireResponse, isOptionalAccessManifestBundleWireArray, } from "./accessManifestBundle.js";
-export { MAX_MULTIPART_BLOB_PART_BYTES } from "./blob.js";
+export { MAX_INITIATE_PART_UPLOADS, MAX_MULTIPART_BLOB_PART_BYTES, } from "./blob.js";
+export { blobPartContentMd5Schema, MAX_MULTIPART_BLOB_PART_NUMBER, type MultipartBlobPartDescriptor, MultipartBlobPartDescriptorSchema, type MultipartBlobPartUpload, MultipartBlobPartUploadSchema, type MultipartBlobPartUploadSource, MultipartBlobPartUploadSourceSchema, signedBlobUrlExpirySchema, signedBlobUrlSchema, } from "./blobTransferSchemas.js";
 export { CONTAINER_KEK_LOG_PAGE_LIMIT, CONTAINER_KEK_LOG_PRINCIPAL_SCOPE_LIMIT, CONTAINER_KEK_WRAPS_PER_EPOCH_LIMIT, ContainerKekKeyringWireRecordSchema, isContainerKekKeyringWireRecord, MAX_CONTAINER_KEY_EPOCH, MAX_INLINE_CONTAINER_REKEYS, MAX_ROTATION_CONTAINER_REKEYS, MAX_SEALED_CONTAINER_KEK_KEYRING_BASE64_LENGTH, SEALED_CONTAINER_KEK_KEYRING_AEAD_OVERHEAD_BYTES, SEALED_CONTAINER_KEK_KEYRING_ENTRY_BYTES, SEALED_CONTAINER_KEK_KEYRING_HEADER_BYTES, sealedContainerKekKeyringBytes, } from "./containerKekKeyringWire.js";
 export { MAX_CONTAINER_PATH_LENGTH } from "./containerLimits.js";
 export { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS, MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS, MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS, MAX_DOCUMENT_SYNC_OUTGOING_UPDATES, MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH, MAX_DOCUMENT_SYNC_REQUEST_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_ENVELOPE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES, MAX_DOCUMENT_SYNC_RESPONSE_UPDATE_PAGE_BYTES, } from "./documentSyncLimits.js";
 export { isSerializedKeyEnvelope, isSerializedKeyEnvelopeArray, type SerializedKeyEnvelope, } from "./keyEnvelope.js";
+export { KNOWN_MANIFEST_HINT_LIMIT, KnownManifestsHeadersSchema, parseKnownManifestHints, } from "./knownManifestWire.js";
 export { isOrganizationReplacementAuthorization, type OrganizationReplacementAuthorization, OrganizationReplacementAuthorizationSchema, } from "./organizationReplacement.js";
 export { PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT, PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT, } from "./principalHistoryWire.js";
-export { PROJECTION_HISTORY_HINT_CHARACTERS, ProjectionHistoryHeadersSchema, type ProjectionHistoryPrefix, ProjectionHistoryPrefixesSchema, parseProjectionHistoryHints, } from "./projectionHistoryWire.js";
 export { hasArrayProperty, hasBooleanProperty, hasNonEmptyStringProperty, hasNullableNumberProperty, hasNullableStringProperty, hasNumberProperty, hasObjectProperty, hasOptionalStringProperty, hasPositiveIntegerProperty, hasPropertyValue, hasStringProperty, isNonEmptyStringArray, isOptionalRecordArray, isOptionalRecordArrayArray, isRecordArray, isRecordArrayArray, isStringArray, } from "./properties.js";
 export { AUTH_CHALLENGE_HEX_LENGTH, isAuthChallengeHexString, isByteArray, isByteArrayOfLength, isSha256HexString, ML_DSA87_PUBLIC_KEY_BYTES, ML_DSA87_SIGNATURE_BYTES, ML_KEM1024_PUBLIC_KEY_BYTES, SHA256_HEX_LENGTH, } from "./protocol.js";
 export { CANONICAL_SIGNED_AT_PATTERN, isCanonicalSignedAt, MAX_SIGNED_AT_YEAR, MIN_SIGNED_AT_YEAR, SIGNED_AT_CONTRACT, } from "./signedAt.js";

package/internal/validators/util/index.js

@@ -1,12 +1,13 @@
 export { AccessEventBundleWireResponseSchema, AccessManifestBundleWireResponseSchema, AccessManifestBundleWireSchema, isAccessEventBundleWireResponse, isAccessManifestBundleWire, isAccessManifestBundleWireArray, isAccessManifestBundleWireResponse, isOptionalAccessManifestBundleWireArray, } from "./accessManifestBundle.js";
-export { MAX_MULTIPART_BLOB_PART_BYTES } from "./blob.js";
+export { MAX_INITIATE_PART_UPLOADS, MAX_MULTIPART_BLOB_PART_BYTES, } from "./blob.js";
+export { blobPartContentMd5Schema, MAX_MULTIPART_BLOB_PART_NUMBER, MultipartBlobPartDescriptorSchema, MultipartBlobPartUploadSchema, MultipartBlobPartUploadSourceSchema, signedBlobUrlExpirySchema, signedBlobUrlSchema, } from "./blobTransferSchemas.js";
 export { CONTAINER_KEK_LOG_PAGE_LIMIT, CONTAINER_KEK_LOG_PRINCIPAL_SCOPE_LIMIT, CONTAINER_KEK_WRAPS_PER_EPOCH_LIMIT, ContainerKekKeyringWireRecordSchema, isContainerKekKeyringWireRecord, MAX_CONTAINER_KEY_EPOCH, MAX_INLINE_CONTAINER_REKEYS, MAX_ROTATION_CONTAINER_REKEYS, MAX_SEALED_CONTAINER_KEK_KEYRING_BASE64_LENGTH, SEALED_CONTAINER_KEK_KEYRING_AEAD_OVERHEAD_BYTES, SEALED_CONTAINER_KEK_KEYRING_ENTRY_BYTES, SEALED_CONTAINER_KEK_KEYRING_HEADER_BYTES, sealedContainerKekKeyringBytes, } from "./containerKekKeyringWire.js";
 export { MAX_CONTAINER_PATH_LENGTH } from "./containerLimits.js";
 export { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS, MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS, MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS, MAX_DOCUMENT_SYNC_OUTGOING_UPDATES, MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH, MAX_DOCUMENT_SYNC_REQUEST_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_ENVELOPE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES, MAX_DOCUMENT_SYNC_RESPONSE_UPDATE_PAGE_BYTES, } from "./documentSyncLimits.js";
 export { isSerializedKeyEnvelope, isSerializedKeyEnvelopeArray, } from "./keyEnvelope.js";
+export { KNOWN_MANIFEST_HINT_LIMIT, KnownManifestsHeadersSchema, parseKnownManifestHints, } from "./knownManifestWire.js";
 export { isOrganizationReplacementAuthorization, OrganizationReplacementAuthorizationSchema, } from "./organizationReplacement.js";
 export { PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT, PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT, } from "./principalHistoryWire.js";
-export { PROJECTION_HISTORY_HINT_CHARACTERS, ProjectionHistoryHeadersSchema, ProjectionHistoryPrefixesSchema, parseProjectionHistoryHints, } from "./projectionHistoryWire.js";
 export { hasArrayProperty, hasBooleanProperty, hasNonEmptyStringProperty, hasNullableNumberProperty, hasNullableStringProperty, hasNumberProperty, hasObjectProperty, hasOptionalStringProperty, hasPositiveIntegerProperty, hasPropertyValue, hasStringProperty, isNonEmptyStringArray, isOptionalRecordArray, isOptionalRecordArrayArray, isRecordArray, isRecordArrayArray, isStringArray, } from "./properties.js";
 export { AUTH_CHALLENGE_HEX_LENGTH, isAuthChallengeHexString, isByteArray, isByteArrayOfLength, isSha256HexString, ML_DSA87_PUBLIC_KEY_BYTES, ML_DSA87_SIGNATURE_BYTES, ML_KEM1024_PUBLIC_KEY_BYTES, SHA256_HEX_LENGTH, } from "./protocol.js";
 export { CANONICAL_SIGNED_AT_PATTERN, isCanonicalSignedAt, MAX_SIGNED_AT_YEAR, MIN_SIGNED_AT_YEAR, SIGNED_AT_CONTRACT, } from "./signedAt.js";

package/internal/validators/util/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,mCAAmC,EAGnC,sCAAsC,EACtC,8BAA8B,EAC9B,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,kCAAkC,EAClC,uCAAuC,GACxC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AACvD,OAAO,EACL,4BAA4B,EAC5B,uCAAuC,EACvC,mCAAmC,EACnC,mCAAmC,EACnC,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,8CAA8C,EAC9C,gDAAgD,EAChD,wCAAwC,EACxC,yCAAyC,EACzC,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EACL,yCAAyC,EACzC,qCAAqC,EACrC,qCAAqC,EACrC,kCAAkC,EAClC,oCAAoC,EACpC,+BAA+B,EAC/B,yCAAyC,EACzC,qCAAqC,EACrC,uCAAuC,EACvC,4CAA4C,GAC7C,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,EACvB,4BAA4B,GAE7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sCAAsC,EAEtC,0CAA0C,GAC3C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kCAAkC,EAClC,8BAA8B,EAE9B,+BAA+B,EAC/B,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,0BAA0B,EAC1B,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,aAAa,EACb,kBAAkB,EAClB,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC","sourcesContent":["export {\n  type AccessEventBundleWireResponse,\n  AccessEventBundleWireResponseSchema,\n  type AccessManifestBundleWire,\n  type AccessManifestBundleWireResponse,\n  AccessManifestBundleWireResponseSchema,\n  AccessManifestBundleWireSchema,\n  isAccessEventBundleWireResponse,\n  isAccessManifestBundleWire,\n  isAccessManifestBundleWireArray,\n  isAccessManifestBundleWireResponse,\n  isOptionalAccessManifestBundleWireArray,\n} from \"./accessManifestBundle\";\nexport { MAX_MULTIPART_BLOB_PART_BYTES } from \"./blob\";\nexport {\n  CONTAINER_KEK_LOG_PAGE_LIMIT,\n  CONTAINER_KEK_LOG_PRINCIPAL_SCOPE_LIMIT,\n  CONTAINER_KEK_WRAPS_PER_EPOCH_LIMIT,\n  ContainerKekKeyringWireRecordSchema,\n  isContainerKekKeyringWireRecord,\n  MAX_CONTAINER_KEY_EPOCH,\n  MAX_INLINE_CONTAINER_REKEYS,\n  MAX_ROTATION_CONTAINER_REKEYS,\n  MAX_SEALED_CONTAINER_KEK_KEYRING_BASE64_LENGTH,\n  SEALED_CONTAINER_KEK_KEYRING_AEAD_OVERHEAD_BYTES,\n  SEALED_CONTAINER_KEK_KEYRING_ENTRY_BYTES,\n  SEALED_CONTAINER_KEK_KEYRING_HEADER_BYTES,\n  sealedContainerKekKeyringBytes,\n} from \"./containerKekKeyringWire\";\nexport { MAX_CONTAINER_PATH_LENGTH } from \"./containerLimits\";\nexport {\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS,\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n  MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n  MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n  MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n  MAX_DOCUMENT_SYNC_REQUEST_BYTES,\n  MAX_DOCUMENT_SYNC_RESPONSE_ENVELOPE_BYTES,\n  MAX_DOCUMENT_SYNC_RESPONSE_PAGE_BYTES,\n  MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES,\n  MAX_DOCUMENT_SYNC_RESPONSE_UPDATE_PAGE_BYTES,\n} from \"./documentSyncLimits\";\nexport {\n  isSerializedKeyEnvelope,\n  isSerializedKeyEnvelopeArray,\n  type SerializedKeyEnvelope,\n} from \"./keyEnvelope\";\nexport {\n  isOrganizationReplacementAuthorization,\n  type OrganizationReplacementAuthorization,\n  OrganizationReplacementAuthorizationSchema,\n} from \"./organizationReplacement\";\nexport {\n  PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT,\n  PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT,\n} from \"./principalHistoryWire\";\nexport {\n  PROJECTION_HISTORY_HINT_CHARACTERS,\n  ProjectionHistoryHeadersSchema,\n  type ProjectionHistoryPrefix,\n  ProjectionHistoryPrefixesSchema,\n  parseProjectionHistoryHints,\n} from \"./projectionHistoryWire\";\nexport {\n  hasArrayProperty,\n  hasBooleanProperty,\n  hasNonEmptyStringProperty,\n  hasNullableNumberProperty,\n  hasNullableStringProperty,\n  hasNumberProperty,\n  hasObjectProperty,\n  hasOptionalStringProperty,\n  hasPositiveIntegerProperty,\n  hasPropertyValue,\n  hasStringProperty,\n  isNonEmptyStringArray,\n  isOptionalRecordArray,\n  isOptionalRecordArrayArray,\n  isRecordArray,\n  isRecordArrayArray,\n  isStringArray,\n} from \"./properties\";\nexport {\n  AUTH_CHALLENGE_HEX_LENGTH,\n  isAuthChallengeHexString,\n  isByteArray,\n  isByteArrayOfLength,\n  isSha256HexString,\n  ML_DSA87_PUBLIC_KEY_BYTES,\n  ML_DSA87_SIGNATURE_BYTES,\n  ML_KEM1024_PUBLIC_KEY_BYTES,\n  SHA256_HEX_LENGTH,\n} from \"./protocol\";\nexport {\n  CANONICAL_SIGNED_AT_PATTERN,\n  isCanonicalSignedAt,\n  MAX_SIGNED_AT_YEAR,\n  MIN_SIGNED_AT_YEAR,\n  SIGNED_AT_CONTRACT,\n} from \"./signedAt\";\nexport { isUuidV4String } from \"./uuid\";\nexport { isWalLsnString, parseWalLsn } from \"./walLsn\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,mCAAmC,EAGnC,sCAAsC,EACtC,8BAA8B,EAC9B,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,kCAAkC,EAClC,uCAAuC,GACxC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAE9B,iCAAiC,EAEjC,6BAA6B,EAE7B,mCAAmC,EACnC,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,4BAA4B,EAC5B,uCAAuC,EACvC,mCAAmC,EACnC,mCAAmC,EACnC,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,8CAA8C,EAC9C,gDAAgD,EAChD,wCAAwC,EACxC,yCAAyC,EACzC,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EACL,yCAAyC,EACzC,qCAAqC,EACrC,qCAAqC,EACrC,kCAAkC,EAClC,oCAAoC,EACpC,+BAA+B,EAC/B,yCAAyC,EACzC,qCAAqC,EACrC,uCAAuC,EACvC,4CAA4C,GAC7C,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,EACvB,4BAA4B,GAE7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sCAAsC,EAEtC,0CAA0C,GAC3C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,0BAA0B,EAC1B,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,aAAa,EACb,kBAAkB,EAClB,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC","sourcesContent":["export {\n  type AccessEventBundleWireResponse,\n  AccessEventBundleWireResponseSchema,\n  type AccessManifestBundleWire,\n  type AccessManifestBundleWireResponse,\n  AccessManifestBundleWireResponseSchema,\n  AccessManifestBundleWireSchema,\n  isAccessEventBundleWireResponse,\n  isAccessManifestBundleWire,\n  isAccessManifestBundleWireArray,\n  isAccessManifestBundleWireResponse,\n  isOptionalAccessManifestBundleWireArray,\n} from \"./accessManifestBundle\";\nexport {\n  MAX_INITIATE_PART_UPLOADS,\n  MAX_MULTIPART_BLOB_PART_BYTES,\n} from \"./blob\";\nexport {\n  blobPartContentMd5Schema,\n  MAX_MULTIPART_BLOB_PART_NUMBER,\n  type MultipartBlobPartDescriptor,\n  MultipartBlobPartDescriptorSchema,\n  type MultipartBlobPartUpload,\n  MultipartBlobPartUploadSchema,\n  type MultipartBlobPartUploadSource,\n  MultipartBlobPartUploadSourceSchema,\n  signedBlobUrlExpirySchema,\n  signedBlobUrlSchema,\n} from \"./blobTransferSchemas\";\nexport {\n  CONTAINER_KEK_LOG_PAGE_LIMIT,\n  CONTAINER_KEK_LOG_PRINCIPAL_SCOPE_LIMIT,\n  CONTAINER_KEK_WRAPS_PER_EPOCH_LIMIT,\n  ContainerKekKeyringWireRecordSchema,\n  isContainerKekKeyringWireRecord,\n  MAX_CONTAINER_KEY_EPOCH,\n  MAX_INLINE_CONTAINER_REKEYS,\n  MAX_ROTATION_CONTAINER_REKEYS,\n  MAX_SEALED_CONTAINER_KEK_KEYRING_BASE64_LENGTH,\n  SEALED_CONTAINER_KEK_KEYRING_AEAD_OVERHEAD_BYTES,\n  SEALED_CONTAINER_KEK_KEYRING_ENTRY_BYTES,\n  SEALED_CONTAINER_KEK_KEYRING_HEADER_BYTES,\n  sealedContainerKekKeyringBytes,\n} from \"./containerKekKeyringWire\";\nexport { MAX_CONTAINER_PATH_LENGTH } from \"./containerLimits\";\nexport {\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS,\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n  MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n  MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n  MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n  MAX_DOCUMENT_SYNC_REQUEST_BYTES,\n  MAX_DOCUMENT_SYNC_RESPONSE_ENVELOPE_BYTES,\n  MAX_DOCUMENT_SYNC_RESPONSE_PAGE_BYTES,\n  MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES,\n  MAX_DOCUMENT_SYNC_RESPONSE_UPDATE_PAGE_BYTES,\n} from \"./documentSyncLimits\";\nexport {\n  isSerializedKeyEnvelope,\n  isSerializedKeyEnvelopeArray,\n  type SerializedKeyEnvelope,\n} from \"./keyEnvelope\";\nexport {\n  KNOWN_MANIFEST_HINT_LIMIT,\n  KnownManifestsHeadersSchema,\n  parseKnownManifestHints,\n} from \"./knownManifestWire\";\nexport {\n  isOrganizationReplacementAuthorization,\n  type OrganizationReplacementAuthorization,\n  OrganizationReplacementAuthorizationSchema,\n} from \"./organizationReplacement\";\nexport {\n  PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT,\n  PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT,\n} from \"./principalHistoryWire\";\nexport {\n  hasArrayProperty,\n  hasBooleanProperty,\n  hasNonEmptyStringProperty,\n  hasNullableNumberProperty,\n  hasNullableStringProperty,\n  hasNumberProperty,\n  hasObjectProperty,\n  hasOptionalStringProperty,\n  hasPositiveIntegerProperty,\n  hasPropertyValue,\n  hasStringProperty,\n  isNonEmptyStringArray,\n  isOptionalRecordArray,\n  isOptionalRecordArrayArray,\n  isRecordArray,\n  isRecordArrayArray,\n  isStringArray,\n} from \"./properties\";\nexport {\n  AUTH_CHALLENGE_HEX_LENGTH,\n  isAuthChallengeHexString,\n  isByteArray,\n  isByteArrayOfLength,\n  isSha256HexString,\n  ML_DSA87_PUBLIC_KEY_BYTES,\n  ML_DSA87_SIGNATURE_BYTES,\n  ML_KEM1024_PUBLIC_KEY_BYTES,\n  SHA256_HEX_LENGTH,\n} from \"./protocol\";\nexport {\n  CANONICAL_SIGNED_AT_PATTERN,\n  isCanonicalSignedAt,\n  MAX_SIGNED_AT_YEAR,\n  MIN_SIGNED_AT_YEAR,\n  SIGNED_AT_CONTRACT,\n} from \"./signedAt\";\nexport { isUuidV4String } from \"./uuid\";\nexport { isWalLsnString, parseWalLsn } from \"./walLsn\";\n"]}

package/internal/validators/util/knownManifestWire.d.ts

@@ -0,0 +1,11 @@
+import { z } from "zod";
+/**
+ * Hints bound the omission a request can ask for, never the history a reader
+ * receives: an uncited manifest always travels.
+ */
+export declare const KNOWN_MANIFEST_HINT_LIMIT = 48;
+/** Null unless the header is 1–48 unique lowercase SHA-256 manifest hashes. */
+export declare function parseKnownManifestHints(value: string): string[] | null;
+export declare const KnownManifestsHeadersSchema: z.ZodObject<{
+    "x-known-manifests": z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;

package/internal/validators/util/knownManifestWire.js

@@ -0,0 +1,28 @@
+import { z } from "zod";
+import { registerJsonSchemaFragment, registerJsonSchemaRuntimeRefinements, } from "../jsonSchema.js";
+import { knownManifestsHeaderRefinement } from "../knownManifestsRefinements.js";
+import { isSha256HexString, SHA256_HEX_LENGTH } from "./protocol.js";
+/**
+ * Hints bound the omission a request can ask for, never the history a reader
+ * receives: an uncited manifest always travels.
+ */
+export const KNOWN_MANIFEST_HINT_LIMIT = 48;
+const KNOWN_MANIFEST_HINT_CHARACTERS = KNOWN_MANIFEST_HINT_LIMIT * (SHA256_HEX_LENGTH + 1) - 1;
+/** Null unless the header is 1–48 unique lowercase SHA-256 manifest hashes. */
+export function parseKnownManifestHints(value) {
+    const hashes = value.split(",");
+    return hashes.length <= KNOWN_MANIFEST_HINT_LIMIT &&
+        new Set(hashes).size === hashes.length &&
+        hashes.every(isSha256HexString)
+        ? hashes
+        : null;
+}
+const hintHeader = registerJsonSchemaFragment(z.string().max(KNOWN_MANIFEST_HINT_CHARACTERS), {
+    type: "string",
+    maxLength: KNOWN_MANIFEST_HINT_CHARACTERS,
+    description: `Comma-separated manifest hashes whose verified bundles the device already holds; at most ${KNOWN_MANIFEST_HINT_LIMIT}, unique`,
+});
+export const KnownManifestsHeadersSchema = z.object({
+    "x-known-manifests": registerJsonSchemaRuntimeRefinements(hintHeader.refine((value) => parseKnownManifestHints(value) !== null), [knownManifestsHeaderRefinement]).optional(),
+});
+//# sourceMappingURL=knownManifestWire.js.map

package/internal/validators/util/knownManifestWire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knownManifestWire.js","sourceRoot":"","sources":["knownManifestWire.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,0BAA0B,EAC1B,oCAAoC,GACrC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAElE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C,MAAM,8BAA8B,GAClC,yBAAyB,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;AAE1D,+EAA+E;AAC/E,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC,MAAM,IAAI,yBAAyB;QAC/C,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QACtC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC/B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,GAAG,0BAA0B,CAC3C,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAC9C;IACE,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,8BAA8B;IACzC,WAAW,EAAE,4FAA4F,yBAAyB,UAAU;CAC7I,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,mBAAmB,EAAE,oCAAoC,CACvD,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,EACrE,CAAC,8BAA8B,CAAC,CACjC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport {\n  registerJsonSchemaFragment,\n  registerJsonSchemaRuntimeRefinements,\n} from \"../jsonSchema\";\nimport { knownManifestsHeaderRefinement } from \"../knownManifestsRefinements\";\nimport { isSha256HexString, SHA256_HEX_LENGTH } from \"./protocol\";\n\n/**\n * Hints bound the omission a request can ask for, never the history a reader\n * receives: an uncited manifest always travels.\n */\nexport const KNOWN_MANIFEST_HINT_LIMIT = 48;\nconst KNOWN_MANIFEST_HINT_CHARACTERS =\n  KNOWN_MANIFEST_HINT_LIMIT * (SHA256_HEX_LENGTH + 1) - 1;\n\n/** Null unless the header is 1–48 unique lowercase SHA-256 manifest hashes. */\nexport function parseKnownManifestHints(value: string): string[] | null {\n  const hashes = value.split(\",\");\n  return hashes.length <= KNOWN_MANIFEST_HINT_LIMIT &&\n    new Set(hashes).size === hashes.length &&\n    hashes.every(isSha256HexString)\n    ? hashes\n    : null;\n}\n\nconst hintHeader = registerJsonSchemaFragment(\n  z.string().max(KNOWN_MANIFEST_HINT_CHARACTERS),\n  {\n    type: \"string\",\n    maxLength: KNOWN_MANIFEST_HINT_CHARACTERS,\n    description: `Comma-separated manifest hashes whose verified bundles the device already holds; at most ${KNOWN_MANIFEST_HINT_LIMIT}, unique`,\n  },\n);\n\nexport const KnownManifestsHeadersSchema = z.object({\n  \"x-known-manifests\": registerJsonSchemaRuntimeRefinements(\n    hintHeader.refine((value) => parseKnownManifestHints(value) !== null),\n    [knownManifestsHeaderRefinement],\n  ).optional(),\n});\n"]}

package/internal/validators/writerProjectionRefinements.js

@@ -2,9 +2,14 @@ export const containerWriterProjectionPathKekCountRefinement = {
     description: "containerKeks must contain exactly one entry for every manifest in path",
     id: "response.container-writer-projection-path-kek-count",
 };
+export const writerProjectionManifestBundlesRefinement = {
+    description: "every cited manifest hash names one bundles entry, every bundles key equals its bundle's manifestHash, and every bundle is cited",
+    id: "response.writer-projection-manifest-bundles",
+};
 export const writerProjectionResponseRuntimeRefinements = [
     containerWriterProjectionPathKekCountRefinement,
     organizationProvisioningContainerKeyringRefinement,
+    writerProjectionManifestBundlesRefinement,
 ];
 import { organizationProvisioningContainerKeyringRefinement } from "./organizationProvisioningRefinements.js";
 //# sourceMappingURL=writerProjectionRefinements.js.map

package/internal/validators/writerProjectionRefinements.js.map

@@ -1 +1 @@
-{"version":3,"file":"writerProjectionRefinements.js","sourceRoot":"","sources":["writerProjectionRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,+CAA+C,GAAG;IAC7D,WAAW,EACT,yEAAyE;IAC3E,EAAE,EAAE,qDAAqD;CACjD,CAAC;AAEX,MAAM,CAAC,MAAM,0CAA0C,GAAG;IACxD,+CAA+C;IAC/C,kDAAkD;CAC1C,CAAC;AAEX,OAAO,EAAE,kDAAkD,EAAE,MAAM,uCAAuC,CAAC","sourcesContent":["export const containerWriterProjectionPathKekCountRefinement = {\n  description:\n    \"containerKeks must contain exactly one entry for every manifest in path\",\n  id: \"response.container-writer-projection-path-kek-count\",\n} as const;\n\nexport const writerProjectionResponseRuntimeRefinements = [\n  containerWriterProjectionPathKekCountRefinement,\n  organizationProvisioningContainerKeyringRefinement,\n] as const;\n\nimport { organizationProvisioningContainerKeyringRefinement } from \"./organizationProvisioningRefinements\";\n"]}
+{"version":3,"file":"writerProjectionRefinements.js","sourceRoot":"","sources":["writerProjectionRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,+CAA+C,GAAG;IAC7D,WAAW,EACT,yEAAyE;IAC3E,EAAE,EAAE,qDAAqD;CACjD,CAAC;AAEX,MAAM,CAAC,MAAM,yCAAyC,GAAG;IACvD,WAAW,EACT,kIAAkI;IACpI,EAAE,EAAE,6CAA6C;CACzC,CAAC;AAEX,MAAM,CAAC,MAAM,0CAA0C,GAAG;IACxD,+CAA+C;IAC/C,kDAAkD;IAClD,yCAAyC;CACjC,CAAC;AAEX,OAAO,EAAE,kDAAkD,EAAE,MAAM,uCAAuC,CAAC","sourcesContent":["export const containerWriterProjectionPathKekCountRefinement = {\n  description:\n    \"containerKeks must contain exactly one entry for every manifest in path\",\n  id: \"response.container-writer-projection-path-kek-count\",\n} as const;\n\nexport const writerProjectionManifestBundlesRefinement = {\n  description:\n    \"every cited manifest hash names one bundles entry, every bundles key equals its bundle's manifestHash, and every bundle is cited\",\n  id: \"response.writer-projection-manifest-bundles\",\n} as const;\n\nexport const writerProjectionResponseRuntimeRefinements = [\n  containerWriterProjectionPathKekCountRefinement,\n  organizationProvisioningContainerKeyringRefinement,\n  writerProjectionManifestBundlesRefinement,\n] as const;\n\nimport { organizationProvisioningContainerKeyringRefinement } from \"./organizationProvisioningRefinements\";\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tearleads/client-sdk",
-  "version": "0.1.41",
+  "version": "0.1.43",
   "description": "React-free Tearleads client runtime: local SQLite persistence, keys, sync, encrypted blobs, and domain workflows.",
   "license": "UNLICENSED",
   "repository": {

package/workflows/blobs/multipartFirstParts.js

@@ -0,0 +1,82 @@
+import { describeMultipartBlobPart } from "../../internal/api-client/index.js";
+import { bytesToHex } from "../../internal/crypto/index.js";
+import { MAX_INITIATE_PART_UPLOADS, } from "../../internal/validators/util/index.js";
+import { acquireBlobTransferPermit, tryAcquireBlobTransferPermit, } from "../../data/blobs/transferPool.js";
+/** Return the pool slots of first parts no upload consumed. */
+export function releasePreparedParts(prepared) {
+    for (const part of prepared.values()) {
+        part.permit.release();
+    }
+    prepared.clear();
+}
+/**
+ * One permit is awaited; more are taken only if free right now. Two uploads
+ * each waiting for a second slot while holding a first could otherwise
+ * deadlock the pool, since a held slot frees only when its part uploads.
+ */
+async function acquireFirstPartPermits(client, limit) {
+    const permits = [await acquireBlobTransferPermit(client)];
+    while (permits.length < limit) {
+        const permit = tryAcquireBlobTransferPermit(client);
+        if (!permit)
+            break;
+        permits.push(permit);
+    }
+    return permits;
+}
+export async function sha256BytesHex(bytes) {
+    return bytesToHex(new Uint8Array(await crypto.subtle.digest("SHA-256", bytes)));
+}
+export async function prepareFirstMultipartParts(client, encryption, concurrency) {
+    const permits = await acquireFirstPartPermits(client, Math.min(encryption.partCount, concurrency, MAX_INITIATE_PART_UPLOADS));
+    const descriptors = [];
+    const prepared = new Map();
+    try {
+        for (const [partIndex, permit] of permits.entries()) {
+            const bytes = await encryption.encryptPart(partIndex);
+            if (bytes.byteLength !== encryption.getPartByteLength(partIndex)) {
+                throw new Error(`Encrypted blob part ${partIndex + 1} byte length mismatch: expected ${encryption.getPartByteLength(partIndex).toLocaleString()}, received ${bytes.byteLength.toLocaleString()}.`);
+            }
+            const sha256 = await sha256BytesHex(bytes);
+            prepared.set(partIndex, { bytes, permit, sha256 });
+            descriptors.push(describeMultipartBlobPart(partIndex + 1, bytes));
+        }
+    }
+    catch (error) {
+        for (const permit of permits)
+            permit.release();
+        throw error;
+    }
+    return { descriptors, prepared };
+}
+/**
+ * The initiation must return exactly one source per described part, for that
+ * part's number, length, and checksum, and every source of one stage must use
+ * the same transport.
+ */
+export function readIssuedPartSources(descriptors, stage) {
+    const issued = new Map();
+    const kinds = new Set(stage.partUploads.map((upload) => upload.source.kind));
+    const matches = stage.partUploads.length === descriptors.length &&
+        kinds.size === 1 &&
+        descriptors.every((descriptor, index) => {
+            const upload = stage.partUploads[index];
+            return (upload?.partNumber === descriptor.partNumber &&
+                upload.byteLength === descriptor.byteLength &&
+                upload.contentMd5 === descriptor.contentMd5);
+        });
+    if (!matches) {
+        throw new Error("Multipart blob stage initiation part uploads do not match its request.");
+    }
+    for (const upload of stage.partUploads) {
+        issued.set(upload.partNumber, upload.source);
+    }
+    return { apiTransport: kinds.has("api"), issued };
+}
+/** Use each issued source once; retries and later parts authorize anew. */
+export function takePartSource(sources, partNumber) {
+    const issued = sources.issued.get(partNumber);
+    sources.issued.delete(partNumber);
+    return issued ?? (sources.apiTransport ? { kind: "api" } : undefined);
+}
+//# sourceMappingURL=multipartFirstParts.js.map

package/workflows/blobs/multipartFirstParts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipartFirstParts.js","sourceRoot":"","sources":["multipartFirstParts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,OAAO,EACL,yBAAyB,GAG1B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,yBAAyB,EAEzB,4BAA4B,GAC7B,MAAM,+BAA+B,CAAC;AA2BvC,+DAA+D;AAC/D,MAAM,UAAU,oBAAoB,CAClC,QAAwC;IAExC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IACD,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,uBAAuB,CACpC,MAAc,EACd,KAAa;IAEb,MAAM,OAAO,GAAG,CAAC,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,OAAO,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM;YAAE,MAAM;QACnB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAgB;IACnD,OAAO,UAAU,CACf,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAc,EACd,UAA8B,EAC9B,WAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAC3C,MAAM,EACN,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,EAAE,yBAAyB,CAAC,CACvE,CAAC;IACF,MAAM,WAAW,GAAkC,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IACtD,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,KAAK,CACb,uBAAuB,SAAS,GAAG,CAAC,mCAAmC,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,cAAc,KAAK,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,CAClL,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;YAC3C,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACnD,WAAW,CAAC,IAAI,CAAC,yBAAyB,CAAC,SAAS,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAmD,EACnD,KAA8D;IAE9D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyC,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7E,MAAM,OAAO,GACX,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QAC/C,KAAK,CAAC,IAAI,KAAK,CAAC;QAChB,WAAW,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;YACtC,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxC,OAAO,CACL,MAAM,EAAE,UAAU,KAAK,UAAU,CAAC,UAAU;gBAC5C,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU;gBAC3C,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU,CAC5C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAC5B,OAA6B,EAC7B,UAAkB;IAElB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAClC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import { describeMultipartBlobPart } from \"@tearleads/api-client\";\nimport { bytesToHex } from \"@tearleads/crypto\";\nimport type { InitiateMultipartBlobStageResponse } from \"@tearleads/validators/response\";\nimport {\n  MAX_INITIATE_PART_UPLOADS,\n  type MultipartBlobPartDescriptor,\n  type MultipartBlobPartUploadSource,\n} from \"@tearleads/validators/util\";\nimport type { BlobBytes } from \"../../data/blobContracts\";\nimport {\n  acquireBlobTransferPermit,\n  type BlobTransferPermit,\n  tryAcquireBlobTransferPermit,\n} from \"../../data/blobs/transferPool\";\nimport type { BlobEncryptionPlan } from \"../../data/documents/blob/shared/crypto\";\n\nexport interface PreparedMultipartPart {\n  readonly bytes: BlobBytes;\n  readonly sha256: string;\n}\n\n/**\n * A first part's bytes and the transfer-pool permit that pays for them: the\n * bytes exist before their upload can start, so they hold a slot of the\n * client's byte-I/O bound until the upload that sends them releases it.\n */\nexport interface PreparedFirstPart extends PreparedMultipartPart {\n  readonly permit: BlobTransferPermit;\n}\n\n/**\n * The parts a new stage's upload starts with, encrypted once up front: their\n * descriptors ride on the stage initiation, and their bytes are handed to the\n * upload workers instead of being encrypted a second time.\n */\nexport interface MultipartFirstParts {\n  readonly descriptors: readonly MultipartBlobPartDescriptor[];\n  readonly prepared: Map<number, PreparedFirstPart>;\n}\n\n/** Return the pool slots of first parts no upload consumed. */\nexport function releasePreparedParts(\n  prepared: Map<number, PreparedFirstPart>,\n): void {\n  for (const part of prepared.values()) {\n    part.permit.release();\n  }\n  prepared.clear();\n}\n\n/**\n * One permit is awaited; more are taken only if free right now. Two uploads\n * each waiting for a second slot while holding a first could otherwise\n * deadlock the pool, since a held slot frees only when its part uploads.\n */\nasync function acquireFirstPartPermits(\n  client: object,\n  limit: number,\n): Promise<BlobTransferPermit[]> {\n  const permits = [await acquireBlobTransferPermit(client)];\n  while (permits.length < limit) {\n    const permit = tryAcquireBlobTransferPermit(client);\n    if (!permit) break;\n    permits.push(permit);\n  }\n  return permits;\n}\n\n/**\n * Where each part's bytes go. Sources the stage initiation issued are used\n * once; a store that cannot sign (`api`) needs no per-part authorization at\n * all, and a part with no source authorizes just before it is sent.\n */\nexport interface MultipartPartSources {\n  readonly apiTransport: boolean;\n  readonly issued: Map<number, MultipartBlobPartUploadSource>;\n}\n\nexport async function sha256BytesHex(bytes: BlobBytes): Promise<string> {\n  return bytesToHex(\n    new Uint8Array(await crypto.subtle.digest(\"SHA-256\", bytes)),\n  );\n}\n\nexport async function prepareFirstMultipartParts(\n  client: object,\n  encryption: BlobEncryptionPlan,\n  concurrency: number,\n): Promise<MultipartFirstParts> {\n  const permits = await acquireFirstPartPermits(\n    client,\n    Math.min(encryption.partCount, concurrency, MAX_INITIATE_PART_UPLOADS),\n  );\n  const descriptors: MultipartBlobPartDescriptor[] = [];\n  const prepared = new Map<number, PreparedFirstPart>();\n  try {\n    for (const [partIndex, permit] of permits.entries()) {\n      const bytes = await encryption.encryptPart(partIndex);\n      if (bytes.byteLength !== encryption.getPartByteLength(partIndex)) {\n        throw new Error(\n          `Encrypted blob part ${partIndex + 1} byte length mismatch: expected ${encryption.getPartByteLength(partIndex).toLocaleString()}, received ${bytes.byteLength.toLocaleString()}.`,\n        );\n      }\n      const sha256 = await sha256BytesHex(bytes);\n      prepared.set(partIndex, { bytes, permit, sha256 });\n      descriptors.push(describeMultipartBlobPart(partIndex + 1, bytes));\n    }\n  } catch (error) {\n    for (const permit of permits) permit.release();\n    throw error;\n  }\n  return { descriptors, prepared };\n}\n\n/**\n * The initiation must return exactly one source per described part, for that\n * part's number, length, and checksum, and every source of one stage must use\n * the same transport.\n */\nexport function readIssuedPartSources(\n  descriptors: readonly MultipartBlobPartDescriptor[],\n  stage: Pick<InitiateMultipartBlobStageResponse, \"partUploads\">,\n): MultipartPartSources {\n  const issued = new Map<number, MultipartBlobPartUploadSource>();\n  const kinds = new Set(stage.partUploads.map((upload) => upload.source.kind));\n  const matches =\n    stage.partUploads.length === descriptors.length &&\n    kinds.size === 1 &&\n    descriptors.every((descriptor, index) => {\n      const upload = stage.partUploads[index];\n      return (\n        upload?.partNumber === descriptor.partNumber &&\n        upload.byteLength === descriptor.byteLength &&\n        upload.contentMd5 === descriptor.contentMd5\n      );\n    });\n  if (!matches) {\n    throw new Error(\n      \"Multipart blob stage initiation part uploads do not match its request.\",\n    );\n  }\n  for (const upload of stage.partUploads) {\n    issued.set(upload.partNumber, upload.source);\n  }\n  return { apiTransport: kinds.has(\"api\"), issued };\n}\n\n/** Use each issued source once; retries and later parts authorize anew. */\nexport function takePartSource(\n  sources: MultipartPartSources,\n  partNumber: number,\n): MultipartBlobPartUploadSource | undefined {\n  const issued = sources.issued.get(partNumber);\n  sources.issued.delete(partNumber);\n  return issued ?? (sources.apiTransport ? { kind: \"api\" } : undefined);\n}\n"]}

package/workflows/blobs/multipartStageResolution.js

@@ -0,0 +1,83 @@
+import { prepareFirstMultipartParts, readIssuedPartSources, releasePreparedParts, } from "./multipartFirstParts.js";
+import { assertMultipartStageReplaceable, multipartApiFailureMessage, } from "./multipartStageFailures.js";
+function isMultipartStageStatus(stage) {
+    return "completed" in stage && typeof stage.completed === "boolean";
+}
+async function resumeMultipartStage(input, resumeStageId) {
+    const resumed = await input.apiClient.getMultipartBlobStage(resumeStageId);
+    if (!resumed) {
+        await assertMultipartStageReplaceable({
+            apiClient: input.apiClient,
+            onStageUnavailable: input.onStageUnavailable,
+            stageId: resumeStageId,
+        });
+        return null;
+    }
+    if (resumed.stageId !== resumeStageId) {
+        throw new Error(`Multipart blob resume response does not match stage ${resumeStageId}.`);
+    }
+    // A successful lookup is authoritative: a metadata mismatch indicates
+    // inconsistent persisted state or a bad server response, not proof that
+    // the existing stage is safe to abandon.
+    if (resumed.organizationId !== input.organizationId ||
+        resumed.byteLength !== input.encryption.byteLength ||
+        resumed.sha256 !== input.encryption.sha256) {
+        throw new Error(`Multipart blob resume stage ${resumeStageId} does not match the requested organization or bytes.`);
+    }
+    return resumed;
+}
+async function initiateWithFirstParts(input, firstParts) {
+    const { byteLength, sha256 } = input.encryption;
+    const stage = await input.apiClient.initiateMultipartBlobStage({
+        organizationId: input.organizationId,
+        byteLength,
+        firstParts: [...firstParts.descriptors],
+        sha256,
+    });
+    if (!stage) {
+        throw new Error(multipartApiFailureMessage({
+            apiClient: input.apiClient,
+            fallback: `Multipart blob stage initiation failed for ${byteLength.toLocaleString()} bytes.`,
+            request: { method: "POST", path: "/blobs/stages/multipart" },
+        }));
+    }
+    if (stage.organizationId !== input.organizationId ||
+        stage.byteLength !== byteLength ||
+        stage.sha256 !== sha256) {
+        throw new Error("Multipart blob stage initiation response does not match its request.");
+    }
+    return {
+        prepared: firstParts.prepared,
+        sources: readIssuedPartSources(firstParts.descriptors, stage),
+        status: isMultipartStageStatus(stage)
+            ? stage
+            : { ...stage, completed: false },
+    };
+}
+// A new stage carries the parts the upload starts with, so their upload
+// sources come back with the stage instead of one authorization each. Their
+// bytes hold transfer-pool slots until uploaded, or until initiation fails.
+async function initiateMultipartStage(input) {
+    const firstParts = await prepareFirstMultipartParts(input.apiClient, input.encryption, input.concurrency);
+    try {
+        return await initiateWithFirstParts(input, firstParts);
+    }
+    catch (error) {
+        releasePreparedParts(firstParts.prepared);
+        throw error;
+    }
+}
+export async function resolveMultipartStage(input) {
+    const resumeStageId = input.multipart.resumeStageId;
+    const resumed = resumeStageId
+        ? await resumeMultipartStage(input, resumeStageId)
+        : null;
+    return resumed
+        ? {
+            prepared: new Map(),
+            sources: { apiTransport: false, issued: new Map() },
+            status: resumed,
+        }
+        : initiateMultipartStage(input);
+}
+//# sourceMappingURL=multipartStageResolution.js.map