@tearleads/client-sdk 0.1.42 → 0.1.44

package/internal/api-client/routes/blobs/multipartUpload.js

@@ -1,7 +1,7 @@
 import { md5 } from "@noble/hashes/legacy.js";
 import { bytesToHex } from "../../../crypto/index.js";
 import { authorizeMultipartBlobPartUploadOperation, blobWireHeaderKeys, operationRequestPath, uploadMultipartBlobPartBytesOperation, } from "../../../validators/operation/index.js";
-import { MAX_MULTIPART_BLOB_PART_BYTES } from "../../../validators/util/index.js";
+import { MAX_MULTIPART_BLOB_PART_BYTES, } from "../../../validators/util/index.js";
 import { storageFetchOptions } from "./storageFetchOptions.js";
 function invalidPart(transport, path) {
     transport.reportFailure({
@@ -23,6 +23,21 @@ async function retryStorageStatus(status, attempt) {
     }
     return transient;
 }
+function contentMd5Base64(bytes) {
+    return btoa(String.fromCharCode(...md5(bytes)));
+}
+/**
+ * Describe an encrypted part the way a stage initiation lists the parts it
+ * will send first: number, exact length, and the Content-MD5 a signed upload
+ * URL binds.
+ */
+export function describeMultipartBlobPart(partNumber, encryptedBytes) {
+    return {
+        byteLength: encryptedBytes.byteLength,
+        contentMd5: contentMd5Base64(encryptedBytes),
+        partNumber,
+    };
+}
 async function preparePart(input) {
     // File snapshots mutable buffers and preserves ciphertext across Capacitor's
     // native HTTP bridge. Uint8Array is UTF-8 decoded there; a plain Blob becomes
@@ -42,64 +57,100 @@ async function preparePart(input) {
         input.sha256) {
         throw new TypeError("Multipart part SHA-256 does not match its bytes");
     }
-    const contentMd5 = btoa(String.fromCharCode(...md5(new Uint8Array(bytes))));
-    return { file, contentMd5 };
+    return { file, contentMd5: contentMd5Base64(new Uint8Array(bytes)) };
+}
+// Sign just in time for this part. The returned descriptor must name exactly
+// the part, upload, length, and checksum that were requested.
+async function authorizePart(context) {
+    const operation = authorizeMultipartBlobPartUploadOperation;
+    const { input, partNumber, stageId } = context;
+    const result = await context.transport.requestResult(operation, {
+        params: { stageId, partNumber },
+        body: {
+            byteLength: input.byteLength,
+            contentMd5: context.contentMd5,
+            uploadId: input.uploadId,
+        },
+    }, context.options);
+    if (!result.ok)
+        return null;
+    const descriptor = result.data;
+    if (descriptor.stageId !== stageId ||
+        descriptor.uploadId !== input.uploadId ||
+        descriptor.partNumber !== partNumber ||
+        descriptor.byteLength !== input.byteLength ||
+        descriptor.contentMd5 !== context.contentMd5) {
+        context.transport.reportFailure({
+            kind: "shape",
+            method: operation.method,
+            path: context.path,
+            status: 200,
+            statusText: "",
+            message: "Multipart upload descriptor does not match its part",
+        });
+        return null;
+    }
+    return descriptor.source;
+}
+// Parts can wait behind other transfers in the shared pool. An issued URL that
+// is about to lapse would only spend this part's retry on a certain 403, so
+// authorize afresh instead; a skewed clock errs toward authorizing.
+const ISSUED_URL_MIN_REMAINING_MS = 30_000;
+function isUsableIssuedSource(source) {
+    return (source !== undefined &&
+        (source.kind === "api" ||
+            Date.parse(source.expiresAt) - Date.now() > ISSUED_URL_MIN_REMAINING_MS));
+}
+// A capability path for memory/custom stores; S3/R2 never proxy parts.
+function uploadThroughApi(context, file) {
+    const { input } = context;
+    return context.transport.requestBinaryRequest(uploadMultipartBlobPartBytesOperation, {
+        params: { stageId: context.stageId, partNumber: context.partNumber },
+        body: input.encryptedBytes,
+        headers: {
+            [blobWireHeaderKeys.partByteLength]: input.byteLength.toString(),
+            [blobWireHeaderKeys.partSha256]: input.sha256,
+            [blobWireHeaderKeys.partUploadId]: input.uploadId,
+        },
+    }, { ...context.options, encodeBody: () => file });
 }
 export async function uploadMultipartBlobPartBytes(transport, stageId, partNumber, input, uploadFetch = (url, init) => fetch(url, init), options = {}) {
     if (options.signal?.aborted)
         return null;
-    const operation = authorizeMultipartBlobPartUploadOperation;
-    const params = { stageId, partNumber };
-    const path = operationRequestPath(operation, params);
+    const path = operationRequestPath(authorizeMultipartBlobPartUploadOperation, {
+        stageId,
+        partNumber,
+    });
     const prepared = await preparePart(input).catch(() => invalidPart(transport, path));
     if (!prepared)
         return null;
     const { file, contentMd5 } = prepared;
-    const body = {
-        byteLength: input.byteLength,
+    const context = {
         contentMd5,
-        uploadId: input.uploadId,
+        input,
+        options,
+        partNumber,
+        path,
+        stageId,
+        transport,
     };
     let status = null;
-    // Sign just in time for each part, not once for the entire file. A network
-    // failure may be an expired URL hidden by R2 CORS, or a lost success response;
-    // reauthorize once and send the same immutable bytes to the same part number.
+    // The first attempt uses the source the stage initiation issued, if any. A
+    // network failure may be an expired URL hidden by R2 CORS, or a lost success
+    // response; reauthorize once and send the same immutable bytes to the same
+    // part number.
     for (let attempt = 0; attempt < 2; attempt += 1) {
         if (options.signal?.aborted)
             return null;
-        const result = await transport.requestResult(operation, { params, body }, options);
-        if (!result.ok)
-            return null;
-        const descriptor = result.data;
-        if (descriptor.stageId !== stageId ||
-            descriptor.uploadId !== input.uploadId ||
-            descriptor.partNumber !== partNumber ||
-            descriptor.byteLength !== input.byteLength ||
-            descriptor.contentMd5 !== contentMd5) {
-            transport.reportFailure({
-                kind: "shape",
-                method: operation.method,
-                path,
-                status: 200,
-                statusText: "",
-                message: "Multipart upload descriptor does not match its part",
-            });
+        const source = attempt === 0 && isUsableIssuedSource(input.source)
+            ? input.source
+            : await authorizePart(context);
+        if (!source)
             return null;
-        }
-        if (descriptor.source.kind === "api") {
-            // A capability path for memory/custom stores; S3/R2 never proxy parts.
-            return transport.requestBinaryRequest(uploadMultipartBlobPartBytesOperation, {
-                params,
-                body: input.encryptedBytes,
-                headers: {
-                    [blobWireHeaderKeys.partByteLength]: input.byteLength.toString(),
-                    [blobWireHeaderKeys.partSha256]: input.sha256,
-                    [blobWireHeaderKeys.partUploadId]: input.uploadId,
-                },
-            }, { ...options, encodeBody: () => file });
-        }
+        if (source.kind === "api")
+            return uploadThroughApi(context, file);
         try {
-            const response = await uploadFetch(descriptor.source.url, {
+            const response = await uploadFetch(source.url, {
                 method: "PUT",
                 body: file,
                 headers: {

package/internal/api-client/routes/blobs/multipartUpload.js.map

@@ -1 +1 @@
-{"version":3,"file":"multipartUpload.js","sourceRoot":"","sources":["multipartUpload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,kBAAkB,EAClB,oBAAoB,EACpB,qCAAqC,GACtC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAI3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAI5D,SAAS,WAAW,CAAC,SAA6B,EAAE,IAAY;IAC9D,SAAS,CAAC,aAAa,CAAC;QACtB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,yCAAyC,CAAC,MAAM;QACxD,IAAI;QACJ,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,kEAAkE;KAC5E,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,OAAe;IAC/D,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,SAAS,GAAG,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;IACrE,IAAI,SAAS,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAA0C;IACnE,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,IAAI,GACR,KAAK,CAAC,cAAc,YAAY,IAAI;QAClC,CAAC,CAAC,KAAK,CAAC,cAAc;QACtB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,qBAAqB,EAAE;YACtD,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACT,IACE,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU;QAC9B,IAAI,CAAC,IAAI,GAAG,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,6BAA6B,EACzC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IACvC,IACE,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,EACZ,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,SAA6B,EAC7B,OAAe,EACf,UAAkB,EAClB,KAA0C,EAC1C,cAA2B,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAC1D,UAAgC,EAAE;IAElC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,SAAS,GAAG,yCAAyC,CAAC;IAC5D,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CACnD,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAC7B,CAAC;IACF,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;IACtC,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU;QACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;IACF,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,2EAA2E;IAC3E,+EAA+E;IAC/E,8EAA8E;IAC9E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,CAC1C,SAAS,EACT,EAAE,MAAM,EAAE,IAAI,EAAE,EAChB,OAAO,CACR,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,IACE,UAAU,CAAC,OAAO,KAAK,OAAO;YAC9B,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YACtC,UAAU,CAAC,UAAU,KAAK,UAAU;YACpC,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;YAC1C,UAAU,CAAC,UAAU,KAAK,UAAU,EACpC,CAAC;YACD,SAAS,CAAC,aAAa,CAAC;gBACtB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,IAAI;gBACJ,MAAM,EAAE,GAAG;gBACX,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrC,uEAAuE;YACvE,OAAO,SAAS,CAAC,oBAAoB,CACnC,qCAAqC,EACrC;gBACE,MAAM;gBACN,IAAI,EAAE,KAAK,CAAC,cAAc;gBAC1B,OAAO,EAAE;oBACP,CAAC,kBAAkB,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE;oBAChE,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM;oBAC7C,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,QAAQ;iBAClD;aACF,EACD,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CACvC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE;gBACxD,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACP,cAAc,EAAE,0BAA0B;oBAC1C,aAAa,EAAE,UAAU;iBAC1B;gBACD,GAAG,mBAAmB,CAAC,OAAO,CAAC;aAChC,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;YAClD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC3B,OAAO;oBACL,OAAO;oBACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE;iBACzD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAAE,MAAM;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;YAC5E,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAA6B,EAC7B,IAAY,EACZ,UAAkB,EAClB,MAAqB;IAErB,SAAS,CAAC,aAAa,CAAC;QACtB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,yCAAyC,CAAC,MAAM;QACxD,IAAI;QACJ,MAAM;QACN,UAAU,EAAE,EAAE;QACd,OAAO,EACL,MAAM,KAAK,GAAG;YACZ,CAAC,CAAC,kBAAkB,UAAU,gEAAgE;YAC9F,CAAC,CAAC,kBAAkB,UAAU,yBAAyB,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,GAAG,EAAE;KACxG,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { md5 } from \"@noble/hashes/legacy.js\";\nimport { bytesToHex } from \"@tearleads/crypto\";\nimport {\n  authorizeMultipartBlobPartUploadOperation,\n  blobWireHeaderKeys,\n  operationRequestPath,\n  uploadMultipartBlobPartBytesOperation,\n} from \"@tearleads/validators/operation\";\nimport type { UploadMultipartBlobPartResponse } from \"@tearleads/validators/response\";\nimport { MAX_MULTIPART_BLOB_PART_BYTES } from \"@tearleads/validators/util\";\nimport type { OperationTransport } from \"../../operationTransportFactory\";\nimport type { RequestResultOptions } from \"../../types\";\nimport type { UploadMultipartBlobPartBytesRequest } from \"./get\";\nimport { storageFetchOptions } from \"./storageFetchOptions\";\n\ntype UploadFetch = (url: string, init: RequestInit) => Promise<Response>;\n\nfunction invalidPart(transport: OperationTransport, path: string) {\n  transport.reportFailure({\n    kind: \"shape\",\n    method: authorizeMultipartBlobPartUploadOperation.method,\n    path,\n    status: null,\n    statusText: \"\",\n    message: \"Multipart part bytes do not match the declared length or SHA-256\",\n  });\n  return null;\n}\n\nasync function retryStorageStatus(status: number, attempt: number) {\n  if (status === 403) return true;\n  const transient = status === 429 || (status >= 500 && status <= 599);\n  if (transient && attempt === 0) {\n    await new Promise<void>((resolve) => setTimeout(resolve, 250));\n  }\n  return transient;\n}\n\nasync function preparePart(input: UploadMultipartBlobPartBytesRequest) {\n  // File snapshots mutable buffers and preserves ciphertext across Capacitor's\n  // native HTTP bridge. Uint8Array is UTF-8 decoded there; a plain Blob becomes\n  // JSON. File's base64 bridge path is byte-for-byte, including non-UTF-8 data.\n  const file =\n    input.encryptedBytes instanceof File\n      ? input.encryptedBytes\n      : new File([input.encryptedBytes], \"encrypted-blob-part\", {\n          type: \"application/octet-stream\",\n        });\n  if (\n    file.size !== input.byteLength ||\n    file.size < 1 ||\n    file.size > MAX_MULTIPART_BLOB_PART_BYTES\n  ) {\n    throw new TypeError(\"Invalid multipart part byte length\");\n  }\n  const bytes = await file.arrayBuffer();\n  if (\n    bytesToHex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", bytes))) !==\n    input.sha256\n  ) {\n    throw new TypeError(\"Multipart part SHA-256 does not match its bytes\");\n  }\n  const contentMd5 = btoa(String.fromCharCode(...md5(new Uint8Array(bytes))));\n  return { file, contentMd5 };\n}\n\nexport async function uploadMultipartBlobPartBytes(\n  transport: OperationTransport,\n  stageId: string,\n  partNumber: number,\n  input: UploadMultipartBlobPartBytesRequest,\n  uploadFetch: UploadFetch = (url, init) => fetch(url, init),\n  options: RequestResultOptions = {},\n): Promise<UploadMultipartBlobPartResponse | null> {\n  if (options.signal?.aborted) return null;\n  const operation = authorizeMultipartBlobPartUploadOperation;\n  const params = { stageId, partNumber };\n  const path = operationRequestPath(operation, params);\n  const prepared = await preparePart(input).catch(() =>\n    invalidPart(transport, path),\n  );\n  if (!prepared) return null;\n  const { file, contentMd5 } = prepared;\n  const body = {\n    byteLength: input.byteLength,\n    contentMd5,\n    uploadId: input.uploadId,\n  };\n  let status: number | null = null;\n  // Sign just in time for each part, not once for the entire file. A network\n  // failure may be an expired URL hidden by R2 CORS, or a lost success response;\n  // reauthorize once and send the same immutable bytes to the same part number.\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    if (options.signal?.aborted) return null;\n    const result = await transport.requestResult(\n      operation,\n      { params, body },\n      options,\n    );\n    if (!result.ok) return null;\n    const descriptor = result.data;\n    if (\n      descriptor.stageId !== stageId ||\n      descriptor.uploadId !== input.uploadId ||\n      descriptor.partNumber !== partNumber ||\n      descriptor.byteLength !== input.byteLength ||\n      descriptor.contentMd5 !== contentMd5\n    ) {\n      transport.reportFailure({\n        kind: \"shape\",\n        method: operation.method,\n        path,\n        status: 200,\n        statusText: \"\",\n        message: \"Multipart upload descriptor does not match its part\",\n      });\n      return null;\n    }\n    if (descriptor.source.kind === \"api\") {\n      // A capability path for memory/custom stores; S3/R2 never proxy parts.\n      return transport.requestBinaryRequest(\n        uploadMultipartBlobPartBytesOperation,\n        {\n          params,\n          body: input.encryptedBytes,\n          headers: {\n            [blobWireHeaderKeys.partByteLength]: input.byteLength.toString(),\n            [blobWireHeaderKeys.partSha256]: input.sha256,\n            [blobWireHeaderKeys.partUploadId]: input.uploadId,\n          },\n        },\n        { ...options, encodeBody: () => file },\n      );\n    }\n    try {\n      const response = await uploadFetch(descriptor.source.url, {\n        method: \"PUT\",\n        body: file,\n        headers: {\n          \"Content-Type\": \"application/octet-stream\",\n          \"Content-MD5\": contentMd5,\n        },\n        ...storageFetchOptions(options),\n      });\n      status = response.status;\n      const etag = response.headers.get(\"ETag\")?.trim();\n      await response.body?.cancel().catch(() => {});\n      if (status === 200 && etag) {\n        return {\n          stageId,\n          uploadId: input.uploadId,\n          part: { byteLength: input.byteLength, partNumber, etag },\n        };\n      }\n      if (!(await retryStorageStatus(status, attempt))) break;\n    } catch {\n      // Never expose a provider exception or body: it may contain the bearer URL.\n      status = null;\n    }\n  }\n  if (options.signal?.aborted) return null;\n  reportStorageFailure(transport, path, partNumber, status);\n  return null;\n}\n\nfunction reportStorageFailure(\n  transport: OperationTransport,\n  path: string,\n  partNumber: number,\n  status: number | null,\n) {\n  transport.reportFailure({\n    kind: \"storage\",\n    method: authorizeMultipartBlobPartUploadOperation.method,\n    path,\n    status,\n    statusText: \"\",\n    message:\n      status === 200\n        ? `Multipart part ${partNumber} storage response is missing ETag; check storage CORS exposure`\n        : `Multipart part ${partNumber} storage upload failed${status === null ? \"\" : ` (HTTP ${status})`}`,\n  });\n}\n"]}
+{"version":3,"file":"multipartUpload.js","sourceRoot":"","sources":["multipartUpload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,kBAAkB,EAClB,oBAAoB,EACpB,qCAAqC,GACtC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,6BAA6B,GAG9B,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAI5D,SAAS,WAAW,CAAC,SAA6B,EAAE,IAAY;IAC9D,SAAS,CAAC,aAAa,CAAC;QACtB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,yCAAyC,CAAC,MAAM;QACxD,IAAI;QACJ,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,kEAAkE;KAC5E,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,OAAe;IAC/D,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,SAAS,GAAG,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;IACrE,IAAI,SAAS,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAiB;IACzC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAAkB,EAClB,cAA0B;IAE1B,OAAO;QACL,UAAU,EAAE,cAAc,CAAC,UAAU;QACrC,UAAU,EAAE,gBAAgB,CAAC,cAAc,CAAC;QAC5C,UAAU;KACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAA0C;IACnE,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,IAAI,GACR,KAAK,CAAC,cAAc,YAAY,IAAI;QAClC,CAAC,CAAC,KAAK,CAAC,cAAc;QACtB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,qBAAqB,EAAE;YACtD,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACT,IACE,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU;QAC9B,IAAI,CAAC,IAAI,GAAG,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,6BAA6B,EACzC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IACvC,IACE,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,EACZ,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACvE,CAAC;AAYD,6EAA6E;AAC7E,8DAA8D;AAC9D,KAAK,UAAU,aAAa,CAC1B,OAA0B;IAE1B,MAAM,SAAS,GAAG,yCAAyC,CAAC;IAC5D,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAClD,SAAS,EACT;QACE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;QAC/B,IAAI,EAAE;YACJ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB;KACF,EACD,OAAO,CAAC,OAAO,CAChB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,IACE,UAAU,CAAC,OAAO,KAAK,OAAO;QAC9B,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QACtC,UAAU,CAAC,UAAU,KAAK,UAAU;QACpC,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QAC1C,UAAU,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAC5C,CAAC;QACD,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC;YAC9B,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,EAAE;YACd,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,4EAA4E;AAC5E,oEAAoE;AACpE,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAE3C,SAAS,oBAAoB,CAC3B,MAAiD;IAEjD,OAAO,CACL,MAAM,KAAK,SAAS;QACpB,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK;YACpB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,2BAA2B,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,SAAS,gBAAgB,CAAC,OAA0B,EAAE,IAAU;IAC9D,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1B,OAAO,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAC3C,qCAAqC,EACrC;QACE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;QACpE,IAAI,EAAE,KAAK,CAAC,cAAc;QAC1B,OAAO,EAAE;YACP,CAAC,kBAAkB,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE;YAChE,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM;YAC7C,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,QAAQ;SAClD;KACF,EACD,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAC/C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,SAA6B,EAC7B,OAAe,EACf,UAAkB,EAClB,KAA0C,EAC1C,cAA2B,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAC1D,UAAgC,EAAE;IAElC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,oBAAoB,CAAC,yCAAyC,EAAE;QAC3E,OAAO;QACP,UAAU;KACX,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CACnD,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAC7B,CAAC;IACF,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;IACtC,MAAM,OAAO,GAAsB;QACjC,UAAU;QACV,KAAK;QACL,OAAO;QACP,UAAU;QACV,IAAI;QACJ,OAAO;QACP,SAAS;KACV,CAAC;IACF,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,eAAe;IACf,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GACV,OAAO,KAAK,CAAC,IAAI,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC;YACjD,CAAC,CAAC,KAAK,CAAC,MAAM;YACd,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE;gBAC7C,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACP,cAAc,EAAE,0BAA0B;oBAC1C,aAAa,EAAE,UAAU;iBAC1B;gBACD,GAAG,mBAAmB,CAAC,OAAO,CAAC;aAChC,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;YAClD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC3B,OAAO;oBACL,OAAO;oBACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE;iBACzD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAAE,MAAM;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;YAC5E,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACzC,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAA6B,EAC7B,IAAY,EACZ,UAAkB,EAClB,MAAqB;IAErB,SAAS,CAAC,aAAa,CAAC;QACtB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,yCAAyC,CAAC,MAAM;QACxD,IAAI;QACJ,MAAM;QACN,UAAU,EAAE,EAAE;QACd,OAAO,EACL,MAAM,KAAK,GAAG;YACZ,CAAC,CAAC,kBAAkB,UAAU,gEAAgE;YAC9F,CAAC,CAAC,kBAAkB,UAAU,yBAAyB,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,GAAG,EAAE;KACxG,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { md5 } from \"@noble/hashes/legacy.js\";\nimport { bytesToHex } from \"@tearleads/crypto\";\nimport {\n  authorizeMultipartBlobPartUploadOperation,\n  blobWireHeaderKeys,\n  operationRequestPath,\n  uploadMultipartBlobPartBytesOperation,\n} from \"@tearleads/validators/operation\";\nimport type { UploadMultipartBlobPartResponse } from \"@tearleads/validators/response\";\nimport {\n  MAX_MULTIPART_BLOB_PART_BYTES,\n  type MultipartBlobPartDescriptor,\n  type MultipartBlobPartUploadSource,\n} from \"@tearleads/validators/util\";\nimport type { OperationTransport } from \"../../operationTransportFactory\";\nimport type { RequestResultOptions } from \"../../types\";\nimport type { UploadMultipartBlobPartBytesRequest } from \"./get\";\nimport { storageFetchOptions } from \"./storageFetchOptions\";\n\ntype UploadFetch = (url: string, init: RequestInit) => Promise<Response>;\n\nfunction invalidPart(transport: OperationTransport, path: string) {\n  transport.reportFailure({\n    kind: \"shape\",\n    method: authorizeMultipartBlobPartUploadOperation.method,\n    path,\n    status: null,\n    statusText: \"\",\n    message: \"Multipart part bytes do not match the declared length or SHA-256\",\n  });\n  return null;\n}\n\nasync function retryStorageStatus(status: number, attempt: number) {\n  if (status === 403) return true;\n  const transient = status === 429 || (status >= 500 && status <= 599);\n  if (transient && attempt === 0) {\n    await new Promise<void>((resolve) => setTimeout(resolve, 250));\n  }\n  return transient;\n}\n\nfunction contentMd5Base64(bytes: Uint8Array): string {\n  return btoa(String.fromCharCode(...md5(bytes)));\n}\n\n/**\n * Describe an encrypted part the way a stage initiation lists the parts it\n * will send first: number, exact length, and the Content-MD5 a signed upload\n * URL binds.\n */\nexport function describeMultipartBlobPart(\n  partNumber: number,\n  encryptedBytes: Uint8Array,\n): MultipartBlobPartDescriptor {\n  return {\n    byteLength: encryptedBytes.byteLength,\n    contentMd5: contentMd5Base64(encryptedBytes),\n    partNumber,\n  };\n}\n\nasync function preparePart(input: UploadMultipartBlobPartBytesRequest) {\n  // File snapshots mutable buffers and preserves ciphertext across Capacitor's\n  // native HTTP bridge. Uint8Array is UTF-8 decoded there; a plain Blob becomes\n  // JSON. File's base64 bridge path is byte-for-byte, including non-UTF-8 data.\n  const file =\n    input.encryptedBytes instanceof File\n      ? input.encryptedBytes\n      : new File([input.encryptedBytes], \"encrypted-blob-part\", {\n          type: \"application/octet-stream\",\n        });\n  if (\n    file.size !== input.byteLength ||\n    file.size < 1 ||\n    file.size > MAX_MULTIPART_BLOB_PART_BYTES\n  ) {\n    throw new TypeError(\"Invalid multipart part byte length\");\n  }\n  const bytes = await file.arrayBuffer();\n  if (\n    bytesToHex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", bytes))) !==\n    input.sha256\n  ) {\n    throw new TypeError(\"Multipart part SHA-256 does not match its bytes\");\n  }\n  return { file, contentMd5: contentMd5Base64(new Uint8Array(bytes)) };\n}\n\ninterface PartUploadContext {\n  readonly contentMd5: string;\n  readonly input: UploadMultipartBlobPartBytesRequest;\n  readonly options: RequestResultOptions;\n  readonly partNumber: number;\n  readonly path: string;\n  readonly stageId: string;\n  readonly transport: OperationTransport;\n}\n\n// Sign just in time for this part. The returned descriptor must name exactly\n// the part, upload, length, and checksum that were requested.\nasync function authorizePart(\n  context: PartUploadContext,\n): Promise<MultipartBlobPartUploadSource | null> {\n  const operation = authorizeMultipartBlobPartUploadOperation;\n  const { input, partNumber, stageId } = context;\n  const result = await context.transport.requestResult(\n    operation,\n    {\n      params: { stageId, partNumber },\n      body: {\n        byteLength: input.byteLength,\n        contentMd5: context.contentMd5,\n        uploadId: input.uploadId,\n      },\n    },\n    context.options,\n  );\n  if (!result.ok) return null;\n  const descriptor = result.data;\n  if (\n    descriptor.stageId !== stageId ||\n    descriptor.uploadId !== input.uploadId ||\n    descriptor.partNumber !== partNumber ||\n    descriptor.byteLength !== input.byteLength ||\n    descriptor.contentMd5 !== context.contentMd5\n  ) {\n    context.transport.reportFailure({\n      kind: \"shape\",\n      method: operation.method,\n      path: context.path,\n      status: 200,\n      statusText: \"\",\n      message: \"Multipart upload descriptor does not match its part\",\n    });\n    return null;\n  }\n  return descriptor.source;\n}\n\n// Parts can wait behind other transfers in the shared pool. An issued URL that\n// is about to lapse would only spend this part's retry on a certain 403, so\n// authorize afresh instead; a skewed clock errs toward authorizing.\nconst ISSUED_URL_MIN_REMAINING_MS = 30_000;\n\nfunction isUsableIssuedSource(\n  source: MultipartBlobPartUploadSource | undefined,\n): source is MultipartBlobPartUploadSource {\n  return (\n    source !== undefined &&\n    (source.kind === \"api\" ||\n      Date.parse(source.expiresAt) - Date.now() > ISSUED_URL_MIN_REMAINING_MS)\n  );\n}\n\n// A capability path for memory/custom stores; S3/R2 never proxy parts.\nfunction uploadThroughApi(context: PartUploadContext, file: File) {\n  const { input } = context;\n  return context.transport.requestBinaryRequest(\n    uploadMultipartBlobPartBytesOperation,\n    {\n      params: { stageId: context.stageId, partNumber: context.partNumber },\n      body: input.encryptedBytes,\n      headers: {\n        [blobWireHeaderKeys.partByteLength]: input.byteLength.toString(),\n        [blobWireHeaderKeys.partSha256]: input.sha256,\n        [blobWireHeaderKeys.partUploadId]: input.uploadId,\n      },\n    },\n    { ...context.options, encodeBody: () => file },\n  );\n}\n\nexport async function uploadMultipartBlobPartBytes(\n  transport: OperationTransport,\n  stageId: string,\n  partNumber: number,\n  input: UploadMultipartBlobPartBytesRequest,\n  uploadFetch: UploadFetch = (url, init) => fetch(url, init),\n  options: RequestResultOptions = {},\n): Promise<UploadMultipartBlobPartResponse | null> {\n  if (options.signal?.aborted) return null;\n  const path = operationRequestPath(authorizeMultipartBlobPartUploadOperation, {\n    stageId,\n    partNumber,\n  });\n  const prepared = await preparePart(input).catch(() =>\n    invalidPart(transport, path),\n  );\n  if (!prepared) return null;\n  const { file, contentMd5 } = prepared;\n  const context: PartUploadContext = {\n    contentMd5,\n    input,\n    options,\n    partNumber,\n    path,\n    stageId,\n    transport,\n  };\n  let status: number | null = null;\n  // The first attempt uses the source the stage initiation issued, if any. A\n  // network failure may be an expired URL hidden by R2 CORS, or a lost success\n  // response; reauthorize once and send the same immutable bytes to the same\n  // part number.\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    if (options.signal?.aborted) return null;\n    const source =\n      attempt === 0 && isUsableIssuedSource(input.source)\n        ? input.source\n        : await authorizePart(context);\n    if (!source) return null;\n    if (source.kind === \"api\") return uploadThroughApi(context, file);\n    try {\n      const response = await uploadFetch(source.url, {\n        method: \"PUT\",\n        body: file,\n        headers: {\n          \"Content-Type\": \"application/octet-stream\",\n          \"Content-MD5\": contentMd5,\n        },\n        ...storageFetchOptions(options),\n      });\n      status = response.status;\n      const etag = response.headers.get(\"ETag\")?.trim();\n      await response.body?.cancel().catch(() => {});\n      if (status === 200 && etag) {\n        return {\n          stageId,\n          uploadId: input.uploadId,\n          part: { byteLength: input.byteLength, partNumber, etag },\n        };\n      }\n      if (!(await retryStorageStatus(status, attempt))) break;\n    } catch {\n      // Never expose a provider exception or body: it may contain the bearer URL.\n      status = null;\n    }\n  }\n  if (options.signal?.aborted) return null;\n  reportStorageFailure(transport, path, partNumber, status);\n  return null;\n}\n\nfunction reportStorageFailure(\n  transport: OperationTransport,\n  path: string,\n  partNumber: number,\n  status: number | null,\n) {\n  transport.reportFailure({\n    kind: \"storage\",\n    method: authorizeMultipartBlobPartUploadOperation.method,\n    path,\n    status,\n    statusText: \"\",\n    message:\n      status === 200\n        ? `Multipart part ${partNumber} storage response is missing ETag; check storage CORS exposure`\n        : `Multipart part ${partNumber} storage upload failed${status === null ? \"\" : ` (HTTP ${status})`}`,\n  });\n}\n"]}

package/internal/api-client/routes/containers/reads.d.ts

@@ -1,6 +1,6 @@
-import type { ListContainerParentLanesRequest } from "../../../validators/request/index.js";
-import type { ListContainerParentLanesResponse } from "../../../validators/response/index.js";
-import type { ListContainerDocumentsOptions } from "../../types.js";
+import type { ListContainerDocumentLanesRequest, ListContainerParentLanesRequest } from "../../../validators/request/index.js";
+import { type ListContainerDocumentLanesResponse, type ListContainerParentLanesResponse } from "../../../validators/response/index.js";
+import type { RequestResult } from "../../types.js";
 export interface ContainerKekLogOptions {
     readonly afterKeyEpoch?: number;
     readonly keyringForEpoch?: number;
@@ -10,10 +10,16 @@ export declare const containerKekLog: {
     readonly method: "GET";
     readonly path: (containerId: string, options?: ContainerKekLogOptions) => string;
 };
-export declare const containerDocuments: {
-    readonly isResponse: typeof import("../../../validators/response/index.js").isListContainerDocumentsResponse;
-    readonly method: "GET";
-    readonly path: (containerId: string, options?: ListContainerDocumentsOptions) => string;
+export declare const containerDocumentLanes: {
+    readonly isResponseForRequest: (input: ListContainerDocumentLanesRequest, value: unknown) => value is ListContainerDocumentLanesResponse;
+    readonly method: "POST";
+    readonly path: string;
+    /**
+     * Identical concurrent batches share one silent fetch; each caller then
+     * applies its own reporting policy. A lane rejected for anything but a
+     * positive absence proof is reported like the failed request it replaces.
+     */
+    readonly settle: (result: RequestResult<ListContainerDocumentLanesResponse> | null, reportErrors: boolean, reportError: (message: string) => void) => ListContainerDocumentLanesResponse | null;
 };
 export declare const containerParentLanes: {
     readonly isResponseForRequest: (input: ListContainerParentLanesRequest, value: unknown) => value is ListContainerParentLanesResponse;

package/internal/api-client/routes/containers/reads.js

@@ -1,4 +1,5 @@
-import { getContainerKekLogOperation, isGetContainerKekLogOperationResponse, isListContainerDocumentsOperationResponse, isListContainerParentLanesOperationResponse, listContainerDocumentsOperation, listContainerParentLanesOperation, operationRequestPath, operationRequestPathWithQuery, } from "../../../validators/operation/index.js";
+import { getContainerKekLogOperation, isGetContainerKekLogOperationResponse, isListContainerDocumentLanesOperationResponse, isListContainerParentLanesOperationResponse, listContainerDocumentLanesOperation, listContainerParentLanesOperation, operationRequestPath, operationRequestPathWithQuery, } from "../../../validators/operation/index.js";
+import { CONTAINER_NOT_FOUND_ERROR_CODE, } from "../../../validators/response/index.js";
 export const containerKekLog = {
     isResponse: isGetContainerKekLogOperationResponse,
     method: getContainerKekLogOperation.method,
@@ -7,23 +8,43 @@ export const containerKekLog = {
         afterKeyEpoch: options.afterKeyEpoch,
     }),
 };
-export const containerDocuments = {
-    isResponse: isListContainerDocumentsOperationResponse,
-    method: listContainerDocumentsOperation.method,
-    path: (containerId, options) => operationRequestPathWithQuery(listContainerDocumentsOperation, { containerId }, {
-        watermarkUpdatedAt: options?.watermark?.updatedAt,
-        watermarkId: options?.watermark?.id,
-        limit: options?.limit,
-    }),
+function resultsMatchLanes(lanes, results) {
+    const expectedLaneIds = new Set(lanes.map((lane) => lane.laneId));
+    return (results.length === lanes.length &&
+        results.every((result) => expectedLaneIds.has(result.laneId)));
+}
+export const containerDocumentLanes = {
+    isResponseForRequest: (input, value) => isListContainerDocumentLanesOperationResponse(value) &&
+        resultsMatchLanes(input.lanes, value.results),
+    method: listContainerDocumentLanesOperation.method,
+    path: operationRequestPath(listContainerDocumentLanesOperation, {}),
+    /**
+     * Identical concurrent batches share one silent fetch; each caller then
+     * applies its own reporting policy. A lane rejected for anything but a
+     * positive absence proof is reported like the failed request it replaces.
+     */
+    settle: (result, reportErrors, reportError) => {
+        if (result?.ok !== true) {
+            if (reportErrors)
+                result?.report();
+            return null;
+        }
+        if (reportErrors) {
+            for (const lane of result.data.results) {
+                // Only the exact 404 + absence-code pair proves the container is gone.
+                if ("failure" in lane &&
+                    !(lane.failure.status === 404 &&
+                        lane.failure.code === CONTAINER_NOT_FOUND_ERROR_CODE))
+                    reportError(`${listContainerDocumentLanesOperation.method} ${listContainerDocumentLanesOperation.path}: ${lane.failure.status} ${lane.failure.error}`);
+            }
+        }
+        return result.data;
+    },
 };
 export const containerParentLanes = {
     isResponseForRequest: (input, value) => {
-        if (!isListContainerParentLanesOperationResponse(value)) {
-            return false;
-        }
-        const expectedLaneIds = new Set(input.lanes.map((lane) => lane.laneId));
-        return (value.results.length === input.lanes.length &&
-            value.results.every((result) => expectedLaneIds.has(result.laneId)));
+        return (isListContainerParentLanesOperationResponse(value) &&
+            resultsMatchLanes(input.lanes, value.results));
     },
     method: listContainerParentLanesOperation.method,
     path: operationRequestPath(listContainerParentLanesOperation, {}),

package/internal/api-client/routes/containers/reads.js.map

@@ -1 +1 @@
-{"version":3,"file":"reads.js","sourceRoot":"","sources":["reads.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,qCAAqC,EACrC,yCAAyC,EACzC,2CAA2C,EAC3C,+BAA+B,EAC/B,iCAAiC,EACjC,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AAUzC,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,qCAAqC;IACjD,MAAM,EAAE,2BAA2B,CAAC,MAAM;IAC1C,IAAI,EAAE,CAAC,WAAmB,EAAE,UAAkC,EAAE,EAAE,EAAE,CAClE,6BAA6B,CAC3B,2BAA2B,EAC3B,EAAE,WAAW,EAAE,EACf;QACE,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CACF;CACK,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,UAAU,EAAE,yCAAyC;IACrD,MAAM,EAAE,+BAA+B,CAAC,MAAM;IAC9C,IAAI,EAAE,CAAC,WAAmB,EAAE,OAAuC,EAAE,EAAE,CACrE,6BAA6B,CAC3B,+BAA+B,EAC/B,EAAE,WAAW,EAAE,EACf;QACE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;QACjD,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;QACnC,KAAK,EAAE,OAAO,EAAE,KAAK;KACtB,CACF;CACK,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,oBAAoB,EAAE,CACpB,KAAsC,EACtC,KAAc,EAC6B,EAAE;QAC7C,IAAI,CAAC,2CAA2C,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM;YAC3C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,iCAAiC,CAAC,MAAM;IAChD,IAAI,EAAE,oBAAoB,CAAC,iCAAiC,EAAE,EAAE,CAAC;CACzD,CAAC","sourcesContent":["import {\n  getContainerKekLogOperation,\n  isGetContainerKekLogOperationResponse,\n  isListContainerDocumentsOperationResponse,\n  isListContainerParentLanesOperationResponse,\n  listContainerDocumentsOperation,\n  listContainerParentLanesOperation,\n  operationRequestPath,\n  operationRequestPathWithQuery,\n} from \"@tearleads/validators/operation\";\nimport type { ListContainerParentLanesRequest } from \"@tearleads/validators/request\";\nimport type { ListContainerParentLanesResponse } from \"@tearleads/validators/response\";\nimport type { ListContainerDocumentsOptions } from \"../../types\";\n\nexport interface ContainerKekLogOptions {\n  readonly afterKeyEpoch?: number;\n  readonly keyringForEpoch?: number;\n}\n\nexport const containerKekLog = {\n  isResponse: isGetContainerKekLogOperationResponse,\n  method: getContainerKekLogOperation.method,\n  path: (containerId: string, options: ContainerKekLogOptions = {}) =>\n    operationRequestPathWithQuery(\n      getContainerKekLogOperation,\n      { containerId },\n      {\n        keyringForEpoch: options.keyringForEpoch,\n        afterKeyEpoch: options.afterKeyEpoch,\n      },\n    ),\n} as const;\n\nexport const containerDocuments = {\n  isResponse: isListContainerDocumentsOperationResponse,\n  method: listContainerDocumentsOperation.method,\n  path: (containerId: string, options?: ListContainerDocumentsOptions) =>\n    operationRequestPathWithQuery(\n      listContainerDocumentsOperation,\n      { containerId },\n      {\n        watermarkUpdatedAt: options?.watermark?.updatedAt,\n        watermarkId: options?.watermark?.id,\n        limit: options?.limit,\n      },\n    ),\n} as const;\n\nexport const containerParentLanes = {\n  isResponseForRequest: (\n    input: ListContainerParentLanesRequest,\n    value: unknown,\n  ): value is ListContainerParentLanesResponse => {\n    if (!isListContainerParentLanesOperationResponse(value)) {\n      return false;\n    }\n    const expectedLaneIds = new Set(input.lanes.map((lane) => lane.laneId));\n    return (\n      value.results.length === input.lanes.length &&\n      value.results.every((result) => expectedLaneIds.has(result.laneId))\n    );\n  },\n  method: listContainerParentLanesOperation.method,\n  path: operationRequestPath(listContainerParentLanesOperation, {}),\n} as const;\n"]}
+{"version":3,"file":"reads.js","sourceRoot":"","sources":["reads.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,qCAAqC,EACrC,6CAA6C,EAC7C,2CAA2C,EAC3C,mCAAmC,EACnC,iCAAiC,EACjC,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AAKzC,OAAO,EACL,8BAA8B,GAG/B,MAAM,gCAAgC,CAAC;AAQxC,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,qCAAqC;IACjD,MAAM,EAAE,2BAA2B,CAAC,MAAM;IAC1C,IAAI,EAAE,CAAC,WAAmB,EAAE,UAAkC,EAAE,EAAE,EAAE,CAClE,6BAA6B,CAC3B,2BAA2B,EAC3B,EAAE,WAAW,EAAE,EACf;QACE,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CACF;CACK,CAAC;AAEX,SAAS,iBAAiB,CACxB,KAAiD,EACjD,OAAmD;IAEnD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,OAAO,CACL,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC/B,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,oBAAoB,EAAE,CACpB,KAAwC,EACxC,KAAc,EAC+B,EAAE,CAC/C,6CAA6C,CAAC,KAAK,CAAC;QACpD,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;IAC/C,MAAM,EAAE,mCAAmC,CAAC,MAAM;IAClD,IAAI,EAAE,oBAAoB,CAAC,mCAAmC,EAAE,EAAE,CAAC;IACnE;;;;OAIG;IACH,MAAM,EAAE,CACN,MAAgE,EAChE,YAAqB,EACrB,WAAsC,EACK,EAAE;QAC7C,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,YAAY;gBAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACvC,uEAAuE;gBACvE,IACE,SAAS,IAAI,IAAI;oBACjB,CAAC,CACC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,GAAG;wBAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,8BAA8B,CACrD;oBAED,WAAW,CACT,GAAG,mCAAmC,CAAC,MAAM,IAAI,mCAAmC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAC1I,CAAC;YACN,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,oBAAoB,EAAE,CACpB,KAAsC,EACtC,KAAc,EAC6B,EAAE;QAC7C,OAAO,CACL,2CAA2C,CAAC,KAAK,CAAC;YAClD,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAC9C,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,iCAAiC,CAAC,MAAM;IAChD,IAAI,EAAE,oBAAoB,CAAC,iCAAiC,EAAE,EAAE,CAAC;CACzD,CAAC","sourcesContent":["import {\n  getContainerKekLogOperation,\n  isGetContainerKekLogOperationResponse,\n  isListContainerDocumentLanesOperationResponse,\n  isListContainerParentLanesOperationResponse,\n  listContainerDocumentLanesOperation,\n  listContainerParentLanesOperation,\n  operationRequestPath,\n  operationRequestPathWithQuery,\n} from \"@tearleads/validators/operation\";\nimport type {\n  ListContainerDocumentLanesRequest,\n  ListContainerParentLanesRequest,\n} from \"@tearleads/validators/request\";\nimport {\n  CONTAINER_NOT_FOUND_ERROR_CODE,\n  type ListContainerDocumentLanesResponse,\n  type ListContainerParentLanesResponse,\n} from \"@tearleads/validators/response\";\nimport type { RequestResult } from \"../../types\";\n\nexport interface ContainerKekLogOptions {\n  readonly afterKeyEpoch?: number;\n  readonly keyringForEpoch?: number;\n}\n\nexport const containerKekLog = {\n  isResponse: isGetContainerKekLogOperationResponse,\n  method: getContainerKekLogOperation.method,\n  path: (containerId: string, options: ContainerKekLogOptions = {}) =>\n    operationRequestPathWithQuery(\n      getContainerKekLogOperation,\n      { containerId },\n      {\n        keyringForEpoch: options.keyringForEpoch,\n        afterKeyEpoch: options.afterKeyEpoch,\n      },\n    ),\n} as const;\n\nfunction resultsMatchLanes(\n  lanes: ReadonlyArray<{ readonly laneId: string }>,\n  results: ReadonlyArray<{ readonly laneId: string }>,\n): boolean {\n  const expectedLaneIds = new Set(lanes.map((lane) => lane.laneId));\n  return (\n    results.length === lanes.length &&\n    results.every((result) => expectedLaneIds.has(result.laneId))\n  );\n}\n\nexport const containerDocumentLanes = {\n  isResponseForRequest: (\n    input: ListContainerDocumentLanesRequest,\n    value: unknown,\n  ): value is ListContainerDocumentLanesResponse =>\n    isListContainerDocumentLanesOperationResponse(value) &&\n    resultsMatchLanes(input.lanes, value.results),\n  method: listContainerDocumentLanesOperation.method,\n  path: operationRequestPath(listContainerDocumentLanesOperation, {}),\n  /**\n   * Identical concurrent batches share one silent fetch; each caller then\n   * applies its own reporting policy. A lane rejected for anything but a\n   * positive absence proof is reported like the failed request it replaces.\n   */\n  settle: (\n    result: RequestResult<ListContainerDocumentLanesResponse> | null,\n    reportErrors: boolean,\n    reportError: (message: string) => void,\n  ): ListContainerDocumentLanesResponse | null => {\n    if (result?.ok !== true) {\n      if (reportErrors) result?.report();\n      return null;\n    }\n    if (reportErrors) {\n      for (const lane of result.data.results) {\n        // Only the exact 404 + absence-code pair proves the container is gone.\n        if (\n          \"failure\" in lane &&\n          !(\n            lane.failure.status === 404 &&\n            lane.failure.code === CONTAINER_NOT_FOUND_ERROR_CODE\n          )\n        )\n          reportError(\n            `${listContainerDocumentLanesOperation.method} ${listContainerDocumentLanesOperation.path}: ${lane.failure.status} ${lane.failure.error}`,\n          );\n      }\n    }\n    return result.data;\n  },\n} as const;\n\nexport const containerParentLanes = {\n  isResponseForRequest: (\n    input: ListContainerParentLanesRequest,\n    value: unknown,\n  ): value is ListContainerParentLanesResponse => {\n    return (\n      isListContainerParentLanesOperationResponse(value) &&\n      resultsMatchLanes(input.lanes, value.results)\n    );\n  },\n  method: listContainerParentLanesOperation.method,\n  path: operationRequestPath(listContainerParentLanesOperation, {}),\n} as const;\n"]}

package/internal/api-client/types.d.ts

@@ -1,11 +1,7 @@
 import type { DocumentAttributionRangesQuery, HttpOperation, HttpOperationMethod } from "../validators/operation/index.js";
-import type { ReferencedPrincipalStateResponse, SyncWatermark } from "../validators/response/index.js";
+import type { ReferencedPrincipalStateResponse } from "../validators/response/index.js";
 export type HttpMethod = HttpOperationMethod;
 export type RequestBody = BodyInit;
-export interface ListContainerDocumentsOptions {
-    limit?: number;
-    watermark?: SyncWatermark | null;
-}
 export type ListDocumentEditAttributionRangesOptions = Omit<DocumentAttributionRangesQuery, "cursor"> & {
     cursor?: DocumentAttributionRangesQuery["cursor"] | null;
 };

package/internal/api-client/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  DocumentAttributionRangesQuery,\n  HttpOperation,\n  HttpOperationMethod,\n} from \"@tearleads/validators/operation\";\nimport type {\n  ReferencedPrincipalStateResponse,\n  SyncWatermark,\n} from \"@tearleads/validators/response\";\n\nexport type HttpMethod = HttpOperationMethod;\nexport type RequestBody = BodyInit;\n\nexport interface ListContainerDocumentsOptions {\n  limit?: number;\n  watermark?: SyncWatermark | null;\n}\n\nexport type ListDocumentEditAttributionRangesOptions = Omit<\n  DocumentAttributionRangesQuery,\n  \"cursor\"\n> & {\n  cursor?: DocumentAttributionRangesQuery[\"cursor\"] | null;\n};\n\nexport interface RequestResultOptions {\n  readonly signal?: AbortSignal | undefined;\n  /** Expected target for a declared 402; mismatched response identities fail closed. */\n  readonly expectedPaymentRequiredOrganizationId?: string | undefined;\n  readonly headers?: Record<string, string> | undefined;\n  readonly reportErrors?: boolean | undefined;\n  /** Called after this request or a concurrent request renews the same session. */\n  readonly onSessionRenewed?: (() => void) | undefined;\n  readonly retryOnSessionExpired?: boolean | \"renew-only\" | undefined;\n}\n\nexport type OperationRequestFn = <T>(\n  path: string,\n  validator: (value: unknown) => value is T,\n  method: HttpMethod,\n  body: RequestBody | undefined,\n  options: RequestResultOptions | undefined,\n  failureOperation: HttpOperation,\n) => Promise<T | null>;\n\nexport type OperationRequestResultFn = <T>(\n  path: string,\n  validator: (value: unknown) => value is T,\n  method: HttpMethod,\n  body: RequestBody | undefined,\n  options: RequestResultOptions | undefined,\n  failureOperation: HttpOperation,\n) => Promise<RequestResult<T>>;\n\nexport type RequestFailureKind =\n  | \"storage\"\n  | \"http\"\n  | \"network\"\n  | \"json\"\n  | \"shape\"\n  | \"cancelled\"\n  | \"outcome-unknown\";\n\nexport interface RequestFailure {\n  readonly code?: string | undefined;\n  readonly kind: RequestFailureKind;\n  readonly message: string;\n  readonly method: HttpMethod;\n  readonly ok: false;\n  readonly path: string;\n  readonly report: () => void;\n  readonly status: number | null;\n  readonly statusText: string;\n  readonly stalePrincipalHeads?: ReferencedPrincipalStateResponse[] | undefined;\n  /**\n   * With `container_descendant_rekeys_required`, the full owed set, parent-first;\n   * with `container_descendant_rekeys_inaccessible`, its unwritable subset.\n   * A hint, never authority; verify each container before signing for it.\n   */\n  readonly requiredContainerIds?: readonly string[] | undefined;\n}\n\nexport interface RequestSuccess<T> {\n  readonly data: T;\n  readonly ok: true;\n}\n\nexport type RequestResult<T> = RequestFailure | RequestSuccess<T>;\n\nexport interface ResponseRequestValidationFailureInput {\n  readonly code?: string | undefined;\n  readonly kind: RequestFailureKind;\n  readonly message: string;\n  readonly method: HttpMethod;\n  readonly options?: RequestResultOptions | undefined;\n  readonly path: string;\n  readonly status: number | null;\n  readonly statusText: string;\n}\n\nexport interface OperationResponseRequestFn {\n  (\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions | undefined,\n    additionalSuccessStatuses: readonly number[],\n    failureOperation: HttpOperation,\n  ): Promise<RequestResult<Response>>;\n  readonly reportFailure: (\n    input: ResponseRequestValidationFailureInput,\n  ) => RequestFailure;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  DocumentAttributionRangesQuery,\n  HttpOperation,\n  HttpOperationMethod,\n} from \"@tearleads/validators/operation\";\nimport type { ReferencedPrincipalStateResponse } from \"@tearleads/validators/response\";\n\nexport type HttpMethod = HttpOperationMethod;\nexport type RequestBody = BodyInit;\n\nexport type ListDocumentEditAttributionRangesOptions = Omit<\n  DocumentAttributionRangesQuery,\n  \"cursor\"\n> & {\n  cursor?: DocumentAttributionRangesQuery[\"cursor\"] | null;\n};\n\nexport interface RequestResultOptions {\n  readonly signal?: AbortSignal | undefined;\n  /** Expected target for a declared 402; mismatched response identities fail closed. */\n  readonly expectedPaymentRequiredOrganizationId?: string | undefined;\n  readonly headers?: Record<string, string> | undefined;\n  readonly reportErrors?: boolean | undefined;\n  /** Called after this request or a concurrent request renews the same session. */\n  readonly onSessionRenewed?: (() => void) | undefined;\n  readonly retryOnSessionExpired?: boolean | \"renew-only\" | undefined;\n}\n\nexport type OperationRequestFn = <T>(\n  path: string,\n  validator: (value: unknown) => value is T,\n  method: HttpMethod,\n  body: RequestBody | undefined,\n  options: RequestResultOptions | undefined,\n  failureOperation: HttpOperation,\n) => Promise<T | null>;\n\nexport type OperationRequestResultFn = <T>(\n  path: string,\n  validator: (value: unknown) => value is T,\n  method: HttpMethod,\n  body: RequestBody | undefined,\n  options: RequestResultOptions | undefined,\n  failureOperation: HttpOperation,\n) => Promise<RequestResult<T>>;\n\nexport type RequestFailureKind =\n  | \"storage\"\n  | \"http\"\n  | \"network\"\n  | \"json\"\n  | \"shape\"\n  | \"cancelled\"\n  | \"outcome-unknown\";\n\nexport interface RequestFailure {\n  readonly code?: string | undefined;\n  readonly kind: RequestFailureKind;\n  readonly message: string;\n  readonly method: HttpMethod;\n  readonly ok: false;\n  readonly path: string;\n  readonly report: () => void;\n  readonly status: number | null;\n  readonly statusText: string;\n  readonly stalePrincipalHeads?: ReferencedPrincipalStateResponse[] | undefined;\n  /**\n   * With `container_descendant_rekeys_required`, the full owed set, parent-first;\n   * with `container_descendant_rekeys_inaccessible`, its unwritable subset.\n   * A hint, never authority; verify each container before signing for it.\n   */\n  readonly requiredContainerIds?: readonly string[] | undefined;\n}\n\nexport interface RequestSuccess<T> {\n  readonly data: T;\n  readonly ok: true;\n}\n\nexport type RequestResult<T> = RequestFailure | RequestSuccess<T>;\n\nexport interface ResponseRequestValidationFailureInput {\n  readonly code?: string | undefined;\n  readonly kind: RequestFailureKind;\n  readonly message: string;\n  readonly method: HttpMethod;\n  readonly options?: RequestResultOptions | undefined;\n  readonly path: string;\n  readonly status: number | null;\n  readonly statusText: string;\n}\n\nexport interface OperationResponseRequestFn {\n  (\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions | undefined,\n    additionalSuccessStatuses: readonly number[],\n    failureOperation: HttpOperation,\n  ): Promise<RequestResult<Response>>;\n  readonly reportFailure: (\n    input: ResponseRequestValidationFailureInput,\n  ) => RequestFailure;\n}\n"]}

package/internal/validators/containerReadRefinements.js

@@ -2,9 +2,17 @@ export const containerKekLogSingleKeyringRefinement = {
     description: "a container KEK log page contains at most one sealed keyring",
     id: "response.container-kek-log-single-keyring",
 };
-const containerDocumentWatermarkRefinement = {
-    description: "container-document watermark fields must be supplied together with a parseable date",
-    id: "request.container-documents-watermark",
+export const containerDocumentLaneRequestUniqueIdsRefinement = {
+    description: "container document-lane request lane ids must be unique",
+    id: "request.container-document-lane-unique-ids",
+};
+export const containerDocumentLaneRequestPageTotalRefinement = {
+    description: "container document-lane request page limits must total at most 500",
+    id: "request.container-document-lane-page-total",
+};
+export const containerDocumentLaneResponseUniqueIdsRefinement = {
+    description: "container document-lane response lane ids must be unique",
+    id: "response.container-document-lane-unique-ids",
 };
 export const containerParentLaneRequestUniqueIdsRefinement = {
     description: "container parent-lane request lane ids must be unique",
@@ -21,8 +29,10 @@ export const containerParentLaneResponseUniqueIdsRefinement = {
 export const containerKekLogResponseRuntimeRefinements = [
     containerKekLogSingleKeyringRefinement,
 ];
-export const containerDocumentRuntimeRefinements = [
-    containerDocumentWatermarkRefinement,
+export const containerDocumentLaneRuntimeRefinements = [
+    containerDocumentLaneRequestUniqueIdsRefinement,
+    containerDocumentLaneRequestPageTotalRefinement,
+    containerDocumentLaneResponseUniqueIdsRefinement,
 ];
 export const containerParentLaneRuntimeRefinements = [
     containerParentLaneRequestUniqueIdsRefinement,

package/internal/validators/containerReadRefinements.js.map

@@ -1 +1 @@
-{"version":3,"file":"containerReadRefinements.js","sourceRoot":"","sources":["containerReadRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,WAAW,EAAE,8DAA8D;IAC3E,EAAE,EAAE,2CAA2C;CACvC,CAAC;AAEX,MAAM,oCAAoC,GAAG;IAC3C,WAAW,EACT,qFAAqF;IACvF,EAAE,EAAE,uCAAuC;CACnC,CAAC;AAEX,MAAM,CAAC,MAAM,6CAA6C,GAAG;IAC3D,WAAW,EAAE,uDAAuD;IACpE,EAAE,EAAE,0CAA0C;CACtC,CAAC;AAEX,MAAM,CAAC,MAAM,6CAA6C,GAAG;IAC3D,WAAW,EACT,kEAAkE;IACpE,EAAE,EAAE,0CAA0C;CACtC,CAAC;AAEX,MAAM,CAAC,MAAM,8CAA8C,GAAG;IAC5D,WAAW,EAAE,wDAAwD;IACrE,EAAE,EAAE,2CAA2C;CACvC,CAAC;AAEX,MAAM,CAAC,MAAM,yCAAyC,GAAG;IACvD,sCAAsC;CAC9B,CAAC;AAEX,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,oCAAoC;CAC5B,CAAC;AAEX,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,6CAA6C;IAC7C,6CAA6C;IAC7C,8CAA8C;CACtC,CAAC","sourcesContent":["export const containerKekLogSingleKeyringRefinement = {\n  description: \"a container KEK log page contains at most one sealed keyring\",\n  id: \"response.container-kek-log-single-keyring\",\n} as const;\n\nconst containerDocumentWatermarkRefinement = {\n  description:\n    \"container-document watermark fields must be supplied together with a parseable date\",\n  id: \"request.container-documents-watermark\",\n} as const;\n\nexport const containerParentLaneRequestUniqueIdsRefinement = {\n  description: \"container parent-lane request lane ids must be unique\",\n  id: \"request.container-parent-lane-unique-ids\",\n} as const;\n\nexport const containerParentLaneRequestPageTotalRefinement = {\n  description:\n    \"container parent-lane request page limits must total at most 500\",\n  id: \"request.container-parent-lane-page-total\",\n} as const;\n\nexport const containerParentLaneResponseUniqueIdsRefinement = {\n  description: \"container parent-lane response lane ids must be unique\",\n  id: \"response.container-parent-lane-unique-ids\",\n} as const;\n\nexport const containerKekLogResponseRuntimeRefinements = [\n  containerKekLogSingleKeyringRefinement,\n] as const;\n\nexport const containerDocumentRuntimeRefinements = [\n  containerDocumentWatermarkRefinement,\n] as const;\n\nexport const containerParentLaneRuntimeRefinements = [\n  containerParentLaneRequestUniqueIdsRefinement,\n  containerParentLaneRequestPageTotalRefinement,\n  containerParentLaneResponseUniqueIdsRefinement,\n] as const;\n"]}
+{"version":3,"file":"containerReadRefinements.js","sourceRoot":"","sources":["containerReadRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,WAAW,EAAE,8DAA8D;IAC3E,EAAE,EAAE,2CAA2C;CACvC,CAAC;AAEX,MAAM,CAAC,MAAM,+CAA+C,GAAG;IAC7D,WAAW,EAAE,yDAAyD;IACtE,EAAE,EAAE,4CAA4C;CACxC,CAAC;AAEX,MAAM,CAAC,MAAM,+CAA+C,GAAG;IAC7D,WAAW,EACT,oEAAoE;IACtE,EAAE,EAAE,4CAA4C;CACxC,CAAC;AAEX,MAAM,CAAC,MAAM,gDAAgD,GAAG;IAC9D,WAAW,EAAE,0DAA0D;IACvE,EAAE,EAAE,6CAA6C;CACzC,CAAC;AAEX,MAAM,CAAC,MAAM,6CAA6C,GAAG;IAC3D,WAAW,EAAE,uDAAuD;IACpE,EAAE,EAAE,0CAA0C;CACtC,CAAC;AAEX,MAAM,CAAC,MAAM,6CAA6C,GAAG;IAC3D,WAAW,EACT,kEAAkE;IACpE,EAAE,EAAE,0CAA0C;CACtC,CAAC;AAEX,MAAM,CAAC,MAAM,8CAA8C,GAAG;IAC5D,WAAW,EAAE,wDAAwD;IACrE,EAAE,EAAE,2CAA2C;CACvC,CAAC;AAEX,MAAM,CAAC,MAAM,yCAAyC,GAAG;IACvD,sCAAsC;CAC9B,CAAC;AAEX,MAAM,CAAC,MAAM,uCAAuC,GAAG;IACrD,+CAA+C;IAC/C,+CAA+C;IAC/C,gDAAgD;CACxC,CAAC;AAEX,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,6CAA6C;IAC7C,6CAA6C;IAC7C,8CAA8C;CACtC,CAAC","sourcesContent":["export const containerKekLogSingleKeyringRefinement = {\n  description: \"a container KEK log page contains at most one sealed keyring\",\n  id: \"response.container-kek-log-single-keyring\",\n} as const;\n\nexport const containerDocumentLaneRequestUniqueIdsRefinement = {\n  description: \"container document-lane request lane ids must be unique\",\n  id: \"request.container-document-lane-unique-ids\",\n} as const;\n\nexport const containerDocumentLaneRequestPageTotalRefinement = {\n  description:\n    \"container document-lane request page limits must total at most 500\",\n  id: \"request.container-document-lane-page-total\",\n} as const;\n\nexport const containerDocumentLaneResponseUniqueIdsRefinement = {\n  description: \"container document-lane response lane ids must be unique\",\n  id: \"response.container-document-lane-unique-ids\",\n} as const;\n\nexport const containerParentLaneRequestUniqueIdsRefinement = {\n  description: \"container parent-lane request lane ids must be unique\",\n  id: \"request.container-parent-lane-unique-ids\",\n} as const;\n\nexport const containerParentLaneRequestPageTotalRefinement = {\n  description:\n    \"container parent-lane request page limits must total at most 500\",\n  id: \"request.container-parent-lane-page-total\",\n} as const;\n\nexport const containerParentLaneResponseUniqueIdsRefinement = {\n  description: \"container parent-lane response lane ids must be unique\",\n  id: \"response.container-parent-lane-unique-ids\",\n} as const;\n\nexport const containerKekLogResponseRuntimeRefinements = [\n  containerKekLogSingleKeyringRefinement,\n] as const;\n\nexport const containerDocumentLaneRuntimeRefinements = [\n  containerDocumentLaneRequestUniqueIdsRefinement,\n  containerDocumentLaneRequestPageTotalRefinement,\n  containerDocumentLaneResponseUniqueIdsRefinement,\n] as const;\n\nexport const containerParentLaneRuntimeRefinements = [\n  containerParentLaneRequestUniqueIdsRefinement,\n  containerParentLaneRequestPageTotalRefinement,\n  containerParentLaneResponseUniqueIdsRefinement,\n] as const;\n"]}

package/internal/validators/containerReadSchemas.d.ts

@@ -0,0 +1,36 @@
+import { z } from "zod";
+/** Caller-chosen id that pairs one batched lane request with its result. */
+export declare const ContainerReadLaneIdSchema: z.ZodCustom<string, string>;
+/** Opaque `(updatedAt, id)` cursor returned by an earlier page of the lane. */
+export declare const ContainerReadLaneWatermarkSchema: z.ZodObject<{
+    id: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strict>;
+/**
+ * Containers one document-listing request may name. Each lane runs the same
+ * readable-container gate and access resolver as a single listing, so this
+ * bounds per-request server work; the page total bounds returned rows.
+ */
+export declare const MAX_CONTAINER_DOCUMENT_LANES = 32;
+/** Rows one batched lane request may ask for when it omits `limit`. */
+export declare const DEFAULT_CONTAINER_READ_LANE_PAGE_LIMIT = 100;
+/** Bound on the sum of every lane's page limit, the single-page maximum. */
+export declare const MAX_CONTAINER_READ_LANE_BATCH_PAGE_TOTAL = 500;
+interface ContainerReadLaneRequestShape {
+    readonly laneId: string;
+    readonly limit?: number | undefined;
+}
+/**
+ * Batched container reads pair results to requests by lane id and bound the
+ * rows one request may return to the single-page maximum.
+ */
+export declare function refineContainerReadLaneRequests(label: string): ({ lanes }: {
+    readonly lanes: ReadonlyArray<ContainerReadLaneRequestShape>;
+}, context: z.RefinementCtx) => void;
+/** Each requested lane id appears at most once among the results. */
+export declare function refineContainerReadLaneResults(label: string): ({ results, }: {
+    readonly results: ReadonlyArray<{
+        readonly laneId: string;
+    }>;
+}, context: z.RefinementCtx) => void;
+export {};

package/internal/validators/containerReadSchemas.js

@@ -1,4 +1,67 @@
 import { z } from "zod";
 import { registerJsonSchemaFragment } from "./jsonSchema.js";
-export const ContainerParentLaneIdSchema = registerJsonSchemaFragment(z.custom((value) => typeof value === "string" && value.length > 0 && value.length <= 64), { maxLength: 64, minLength: 1, type: "string" });
+/** Caller-chosen id that pairs one batched lane request with its result. */
+export const ContainerReadLaneIdSchema = registerJsonSchemaFragment(z.custom((value) => typeof value === "string" && value.length > 0 && value.length <= 64), { maxLength: 64, minLength: 1, type: "string" });
+/** Opaque `(updatedAt, id)` cursor returned by an earlier page of the lane. */
+export const ContainerReadLaneWatermarkSchema = z.strictObject({
+    id: z.string().min(1),
+    updatedAt: registerJsonSchemaFragment(z
+        .string()
+        .refine((value) => !Number.isNaN(new Date(value).getTime()), "Invalid watermark date"), { minLength: 1, type: "string" }),
+});
+/**
+ * Containers one document-listing request may name. Each lane runs the same
+ * readable-container gate and access resolver as a single listing, so this
+ * bounds per-request server work; the page total bounds returned rows.
+ */
+export const MAX_CONTAINER_DOCUMENT_LANES = 32;
+/** Rows one batched lane request may ask for when it omits `limit`. */
+export const DEFAULT_CONTAINER_READ_LANE_PAGE_LIMIT = 100;
+/** Bound on the sum of every lane's page limit, the single-page maximum. */
+export const MAX_CONTAINER_READ_LANE_BATCH_PAGE_TOTAL = 500;
+/**
+ * Batched container reads pair results to requests by lane id and bound the
+ * rows one request may return to the single-page maximum.
+ */
+export function refineContainerReadLaneRequests(label) {
+    return ({ lanes }, context) => {
+        const laneIds = new Set();
+        let requestedPageTotal = 0;
+        lanes.forEach((lane, index) => {
+            if (laneIds.has(lane.laneId)) {
+                context.addIssue({
+                    code: "custom",
+                    message: `${label} id is duplicated`,
+                    path: ["lanes", index, "laneId"],
+                });
+            }
+            laneIds.add(lane.laneId);
+            requestedPageTotal +=
+                lane.limit ?? DEFAULT_CONTAINER_READ_LANE_PAGE_LIMIT;
+        });
+        if (requestedPageTotal > MAX_CONTAINER_READ_LANE_BATCH_PAGE_TOTAL) {
+            context.addIssue({
+                code: "custom",
+                message: `${label} batch page total exceeds ${MAX_CONTAINER_READ_LANE_BATCH_PAGE_TOTAL}`,
+                path: ["lanes"],
+            });
+        }
+    };
+}
+/** Each requested lane id appears at most once among the results. */
+export function refineContainerReadLaneResults(label) {
+    return ({ results, }, context) => {
+        const laneIds = new Set();
+        results.forEach((result, index) => {
+            if (laneIds.has(result.laneId)) {
+                context.addIssue({
+                    code: "custom",
+                    message: `${label} result id is duplicated`,
+                    path: ["results", index, "laneId"],
+                });
+            }
+            laneIds.add(result.laneId);
+        });
+    };
+}
 //# sourceMappingURL=containerReadSchemas.js.map

package/internal/validators/containerReadSchemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"containerReadSchemas.js","sourceRoot":"","sources":["containerReadSchemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CACnE,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CACtE,EACD,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAChD,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaFragment } from \"./jsonSchema\";\n\nexport const ContainerParentLaneIdSchema = registerJsonSchemaFragment(\n  z.custom<string>(\n    (value) =>\n      typeof value === \"string\" && value.length > 0 && value.length <= 64,\n  ),\n  { maxLength: 64, minLength: 1, type: \"string\" },\n);\n"]}
+{"version":3,"file":"containerReadSchemas.js","sourceRoot":"","sources":["containerReadSchemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE1D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,yBAAyB,GAAG,0BAA0B,CACjE,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CACtE,EACD,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAChD,CAAC;AAEF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC7D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,0BAA0B,CACnC,CAAC;SACE,MAAM,EAAE;SACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,EACnD,wBAAwB,CACzB,EACH,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CACjC;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAE/C,uEAAuE;AACvE,MAAM,CAAC,MAAM,sCAAsC,GAAG,GAAG,CAAC;AAC1D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,wCAAwC,GAAG,GAAG,CAAC;AAO5D;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,KAAa;IAC3D,OAAO,CACL,EAAE,KAAK,EAAoE,EAC3E,OAAwB,EAClB,EAAE;QACR,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,kBAAkB,GAAG,CAAC,CAAC;QAE3B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,GAAG,KAAK,mBAAmB;oBACpC,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC;iBACjC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzB,kBAAkB;gBAChB,IAAI,CAAC,KAAK,IAAI,sCAAsC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,IAAI,kBAAkB,GAAG,wCAAwC,EAAE,CAAC;YAClE,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,GAAG,KAAK,6BAA6B,wCAAwC,EAAE;gBACxF,IAAI,EAAE,CAAC,OAAO,CAAC;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,OAAO,CACL,EACE,OAAO,GAC0D,EACnE,OAAwB,EAClB,EAAE;QACR,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YAChC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,GAAG,KAAK,0BAA0B;oBAC3C,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC;iBACnC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaFragment } from \"./jsonSchema\";\n\n/** Caller-chosen id that pairs one batched lane request with its result. */\nexport const ContainerReadLaneIdSchema = registerJsonSchemaFragment(\n  z.custom<string>(\n    (value) =>\n      typeof value === \"string\" && value.length > 0 && value.length <= 64,\n  ),\n  { maxLength: 64, minLength: 1, type: \"string\" },\n);\n\n/** Opaque `(updatedAt, id)` cursor returned by an earlier page of the lane. */\nexport const ContainerReadLaneWatermarkSchema = z.strictObject({\n  id: z.string().min(1),\n  updatedAt: registerJsonSchemaFragment(\n    z\n      .string()\n      .refine(\n        (value) => !Number.isNaN(new Date(value).getTime()),\n        \"Invalid watermark date\",\n      ),\n    { minLength: 1, type: \"string\" },\n  ),\n});\n\n/**\n * Containers one document-listing request may name. Each lane runs the same\n * readable-container gate and access resolver as a single listing, so this\n * bounds per-request server work; the page total bounds returned rows.\n */\nexport const MAX_CONTAINER_DOCUMENT_LANES = 32;\n\n/** Rows one batched lane request may ask for when it omits `limit`. */\nexport const DEFAULT_CONTAINER_READ_LANE_PAGE_LIMIT = 100;\n/** Bound on the sum of every lane's page limit, the single-page maximum. */\nexport const MAX_CONTAINER_READ_LANE_BATCH_PAGE_TOTAL = 500;\n\ninterface ContainerReadLaneRequestShape {\n  readonly laneId: string;\n  readonly limit?: number | undefined;\n}\n\n/**\n * Batched container reads pair results to requests by lane id and bound the\n * rows one request may return to the single-page maximum.\n */\nexport function refineContainerReadLaneRequests(label: string) {\n  return (\n    { lanes }: { readonly lanes: ReadonlyArray<ContainerReadLaneRequestShape> },\n    context: z.RefinementCtx,\n  ): void => {\n    const laneIds = new Set<string>();\n    let requestedPageTotal = 0;\n\n    lanes.forEach((lane, index) => {\n      if (laneIds.has(lane.laneId)) {\n        context.addIssue({\n          code: \"custom\",\n          message: `${label} id is duplicated`,\n          path: [\"lanes\", index, \"laneId\"],\n        });\n      }\n      laneIds.add(lane.laneId);\n      requestedPageTotal +=\n        lane.limit ?? DEFAULT_CONTAINER_READ_LANE_PAGE_LIMIT;\n    });\n\n    if (requestedPageTotal > MAX_CONTAINER_READ_LANE_BATCH_PAGE_TOTAL) {\n      context.addIssue({\n        code: \"custom\",\n        message: `${label} batch page total exceeds ${MAX_CONTAINER_READ_LANE_BATCH_PAGE_TOTAL}`,\n        path: [\"lanes\"],\n      });\n    }\n  };\n}\n\n/** Each requested lane id appears at most once among the results. */\nexport function refineContainerReadLaneResults(label: string) {\n  return (\n    {\n      results,\n    }: { readonly results: ReadonlyArray<{ readonly laneId: string }> },\n    context: z.RefinementCtx,\n  ): void => {\n    const laneIds = new Set<string>();\n    results.forEach((result, index) => {\n      if (laneIds.has(result.laneId)) {\n        context.addIssue({\n          code: \"custom\",\n          message: `${label} result id is duplicated`,\n          path: [\"results\", index, \"laneId\"],\n        });\n      }\n      laneIds.add(result.laneId);\n    });\n  };\n}\n"]}