@tearleads/client-sdk 0.1.42 → 0.1.44

package/internal/validators/request/document.js.map

@@ -1 +1 @@
-{"version":3,"file":"document.js","sourceRoot":"","sources":["document.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,oCAAoC,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,yCAAyC,EACzC,qCAAqC,EACrC,2BAA2B,GAC5B,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EACL,2BAA2B,EAE3B,oCAAoC,EAEpC,qCAAqC,EACrC,4BAA4B,EAE5B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,oCAAoC,EACpC,0BAA0B,EAE1B,qCAAqC,EAErC,sCAAsC,EAEtC,4BAA4B,EAE5B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,4BAA4B,EAAE,oCAAoC,CAAC,QAAQ,EAAE;IAC7E,IAAI,EAAE,qBAAqB;IAC3B,eAAe,EAAE,WAAW,CAC1B,8BAA8B,EAC9B,2BAA2B,CAC5B,CAAC,QAAQ,EAAE;IACZ,gBAAgB,EAAE,qCAAqC;IACvD,KAAK,EAAE,iBAAiB;IACxB,oBAAoB,EAAE,oBAAoB;IAC1C,QAAQ,EAAE,iBAAiB;IAC3B,gBAAgB,EAAE,8BAA8B,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtE,uBAAuB,EAAE,2BAA2B,CAAC,QAAQ,EAAE;CACxC,CAAC;AAE1B,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CACzD,0BAA0B,CAC3B,CAAC;AAIF,yEAAyE;AACzE,6EAA6E;AAC7E,oEAAoE;AACpE,MAAM,CAAC,MAAM,oCAAoC,GAC/C,oCAAoC,CAClC,gBAAgB,CAAC;IACf,4BAA4B,EAAE,oCAAoC;IAClE,IAAI,EAAE,qBAAqB;IAC3B,eAAe,EAAE,WAAW,CAC1B,8BAA8B,EAC9B,2BAA2B,CAC5B,CAAC,QAAQ,EAAE;IACZ,gBAAgB,EAAE,qCAAqC;IACvD,KAAK,EAAE,iBAAiB;IACxB,oBAAoB,EAAE,oBAAoB;IAC1C,QAAQ,EAAE,iBAAiB;IAC3B,gBAAgB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACzD,sEAAsE;IACtE,+EAA+E;IAC/E,uBAAuB,EAAE,2BAA2B;CACrD,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;IAClC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC;QACpD,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAC/C,CAAC;QACD,OAAO;IACT,CAAC;IACD,mEAAmE;IACnE,yEAAyE;IACzE,oEAAoE;IACpE,IACE,OAAO,CAAC,4BAA4B,CAAC,MAAM;QACzC,qCAAqC;QACvC,OAAO,CAAC,uBAAuB,CAAC,MAAM,GAAG,yBAAyB;QAClE,OAAO,CAAC,4BAA4B,CAAC,IAAI,CACvC,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,yBAAyB,CAClE,EACD,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,eAAe,GAAG,OAAO,CAAC,4BAA4B,CAAC,MAAM,CACjE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EACpC,OAAO,CAAC,uBAAuB,CAAC,MAAM,CACvC,CAAC;IACF,IAAI,eAAe,GAAG,yCAAyC,EAAE,CAAC;QAChE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,6BAA6B,CAAC,WAAW;YAClD,IAAI,EAAE,CAAC,8BAA8B,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,EACF,CAAC,6BAA6B,CAAC,CAChC,CAAC;AAMJ,MAAM,CAAC,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;IACzD,4BAA4B,EAAE,2BAA2B;IACzD,IAAI,EAAE,qBAAqB;IAC3B,KAAK,EAAE,iBAAiB;CACzB,CAAC,CAAC;AAIH,MAAM,UAAU,gCAAgC,CAC9C,KAAc;IAEd,OAAO,oCAAoC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAc;IAEd,OAAO,qCAAqC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAc;IAEd,OAAO,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAc;IAEd,OAAO,oCAAoC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc;IAEd,OAAO,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc;IAEd,OAAO,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC5D,CAAC","sourcesContent":["import type { z } from \"zod\";\nimport { documentLinkSetPathRefinement } from \"../documentSyncRefinements\";\nimport { registerJsonSchemaRuntimeRefinements } from \"../jsonSchema\";\nimport {\n  arraySchema,\n  loosePlainObject,\n  nonEmptyStringSchema,\n  plainObjectSchema,\n  requiredUnknownSchema,\n} from \"../schema\";\nimport {\n  AccessManifestBundleWireSchema,\n  MAX_CONTAINER_PATH_LENGTH,\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS,\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n  MAX_INLINE_CONTAINER_REKEYS,\n} from \"../util\";\nimport { ContainerMutationRequestSchema } from \"./container\";\nimport {\n  ContainerManifestPathSchema,\n  type ContainerManifestRef,\n  ContainerManifestRefArrayArraySchema,\n  type DocumentContentKeyBundleRequest,\n  DocumentContentKeyBundleRequestSchema,\n  DocumentOutgoingUpdateSchema,\n  type DocumentSyncRequest,\n  DocumentSyncRequestSchema,\n} from \"./documentSyncSchema\";\n\nexport {\n  type ContainerManifestRef,\n  ContainerManifestRefArrayArraySchema,\n  ContainerManifestRefSchema,\n  type DocumentContentKeyBundleRequest,\n  DocumentContentKeyBundleRequestSchema,\n  type DocumentContentKeyTargetEnvelope,\n  DocumentContentKeyTargetEnvelopeSchema,\n  type DocumentOutgoingUpdate,\n  DocumentOutgoingUpdateSchema,\n  type DocumentSyncRequest,\n  DocumentSyncRequestSchema,\n} from \"./documentSyncSchema\";\n\nexport const documentCreateRequestShape = {\n  authorizingContainerPathRefs: ContainerManifestRefArrayArraySchema.optional(),\n  body: requiredUnknownSchema,\n  containerRekeys: arraySchema(\n    ContainerMutationRequestSchema,\n    MAX_INLINE_CONTAINER_REKEYS,\n  ).optional(),\n  contentKeyBundle: DocumentContentKeyBundleRequestSchema,\n  event: plainObjectSchema,\n  expectedManifestHash: nonEmptyStringSchema,\n  manifest: plainObjectSchema,\n  previousManifest: AccessManifestBundleWireSchema.nullable().optional(),\n  targetContainerPathRefs: ContainerManifestPathSchema.optional(),\n} satisfies z.ZodRawShape;\n\nexport const DocumentCreateRequestSchema = loosePlainObject(\n  documentCreateRequestShape,\n);\n\nexport type DocumentCreateRequest = z.infer<typeof DocumentCreateRequestSchema>;\n\n// The prior link-set manifest is the document's current head. The server\n// resolves it from its own store, while the signed event's previous manifest\n// hash pins freshness, so the writer does not echo the bundle back.\nexport const DocumentLinkSetMutationRequestSchema =\n  registerJsonSchemaRuntimeRefinements(\n    loosePlainObject({\n      authorizingContainerPathRefs: ContainerManifestRefArrayArraySchema,\n      body: requiredUnknownSchema,\n      containerRekeys: arraySchema(\n        ContainerMutationRequestSchema,\n        MAX_INLINE_CONTAINER_REKEYS,\n      ).optional(),\n      contentKeyBundle: DocumentContentKeyBundleRequestSchema,\n      event: plainObjectSchema,\n      expectedManifestHash: nonEmptyStringSchema,\n      manifest: plainObjectSchema,\n      rotationBaseline: DocumentOutgoingUpdateSchema.optional(),\n      // A container path (root→leaf chain) must carry at least one manifest\n      // reference; an empty path authorizes nothing and is never legitimately built.\n      targetContainerPathRefs: ContainerManifestPathSchema,\n    }).superRefine((request, context) => {\n      if (\n        !Array.isArray(request.authorizingContainerPathRefs) ||\n        !Array.isArray(request.targetContainerPathRefs)\n      ) {\n        return;\n      }\n      // The nested schemas have already reported their shape/cardinality\n      // errors. Keep this aggregate refinement bounded and never dereference a\n      // malformed path after those continuable issues have been replayed.\n      if (\n        request.authorizingContainerPathRefs.length >\n          MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS ||\n        request.targetContainerPathRefs.length > MAX_CONTAINER_PATH_LENGTH ||\n        request.authorizingContainerPathRefs.some(\n          (path) =>\n            !Array.isArray(path) || path.length > MAX_CONTAINER_PATH_LENGTH,\n        )\n      ) {\n        return;\n      }\n      const totalReferences = request.authorizingContainerPathRefs.reduce(\n        (total, path) => total + path.length,\n        request.targetContainerPathRefs.length,\n      );\n      if (totalReferences > MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS) {\n        context.addIssue({\n          code: \"custom\",\n          message: documentLinkSetPathRefinement.description,\n          path: [\"authorizingContainerPathRefs\"],\n        });\n      }\n    }),\n    [documentLinkSetPathRefinement],\n  );\n\nexport type DocumentLinkSetMutationRequest = z.infer<\n  typeof DocumentLinkSetMutationRequestSchema\n>;\n\nexport const DocumentPurgeRequestSchema = loosePlainObject({\n  authorizingContainerPathRefs: ContainerManifestPathSchema,\n  body: requiredUnknownSchema,\n  event: plainObjectSchema,\n});\n\nexport type DocumentPurgeRequest = z.infer<typeof DocumentPurgeRequestSchema>;\n\nexport function isContainerManifestRefArrayArray(\n  value: unknown,\n): value is ContainerManifestRef[][] {\n  return ContainerManifestRefArrayArraySchema.safeParse(value).success;\n}\n\nexport function isDocumentContentKeyBundleRequest(\n  value: unknown,\n): value is DocumentContentKeyBundleRequest {\n  return DocumentContentKeyBundleRequestSchema.safeParse(value).success;\n}\n\nexport function isDocumentCreateRequest(\n  value: unknown,\n): value is DocumentCreateRequest {\n  return DocumentCreateRequestSchema.safeParse(value).success;\n}\n\nexport function isDocumentLinkSetMutationRequest(\n  value: unknown,\n): value is DocumentLinkSetMutationRequest {\n  return DocumentLinkSetMutationRequestSchema.safeParse(value).success;\n}\n\nexport function isDocumentPurgeRequest(\n  value: unknown,\n): value is DocumentPurgeRequest {\n  return DocumentPurgeRequestSchema.safeParse(value).success;\n}\n\nexport function isDocumentSyncRequest(\n  value: unknown,\n): value is DocumentSyncRequest {\n  return DocumentSyncRequestSchema.safeParse(value).success;\n}\n"]}
+{"version":3,"file":"document.js","sourceRoot":"","sources":["document.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,oCAAoC,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,yCAAyC,EACzC,qCAAqC,EACrC,2BAA2B,GAC5B,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EACL,2BAA2B,EAE3B,oCAAoC,EAEpC,qCAAqC,EACrC,4BAA4B,EAE5B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,oCAAoC,EACpC,0BAA0B,EAE1B,qCAAqC,EAErC,sCAAsC,EAEtC,4BAA4B,EAE5B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,4BAA4B,EAAE,oCAAoC,CAAC,QAAQ,EAAE;IAC7E,IAAI,EAAE,qBAAqB;IAC3B,eAAe,EAAE,WAAW,CAC1B,8BAA8B,EAC9B,2BAA2B,CAC5B,CAAC,QAAQ,EAAE;IACZ,gBAAgB,EAAE,qCAAqC;IACvD,KAAK,EAAE,iBAAiB;IACxB,oBAAoB,EAAE,oBAAoB;IAC1C,QAAQ,EAAE,iBAAiB;IAC3B,uBAAuB,EAAE,2BAA2B,CAAC,QAAQ,EAAE;CACxC,CAAC;AAE1B,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CACzD,0BAA0B,CAC3B,CAAC;AAIF,yEAAyE;AACzE,6EAA6E;AAC7E,oEAAoE;AACpE,MAAM,CAAC,MAAM,oCAAoC,GAC/C,oCAAoC,CAClC,gBAAgB,CAAC;IACf,4BAA4B,EAAE,oCAAoC;IAClE,IAAI,EAAE,qBAAqB;IAC3B,eAAe,EAAE,WAAW,CAC1B,8BAA8B,EAC9B,2BAA2B,CAC5B,CAAC,QAAQ,EAAE;IACZ,gBAAgB,EAAE,qCAAqC;IACvD,KAAK,EAAE,iBAAiB;IACxB,oBAAoB,EAAE,oBAAoB;IAC1C,QAAQ,EAAE,iBAAiB;IAC3B,gBAAgB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACzD,sEAAsE;IACtE,+EAA+E;IAC/E,uBAAuB,EAAE,2BAA2B;CACrD,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;IAClC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC;QACpD,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAC/C,CAAC;QACD,OAAO;IACT,CAAC;IACD,mEAAmE;IACnE,yEAAyE;IACzE,oEAAoE;IACpE,IACE,OAAO,CAAC,4BAA4B,CAAC,MAAM;QACzC,qCAAqC;QACvC,OAAO,CAAC,uBAAuB,CAAC,MAAM,GAAG,yBAAyB;QAClE,OAAO,CAAC,4BAA4B,CAAC,IAAI,CACvC,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,yBAAyB,CAClE,EACD,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,eAAe,GAAG,OAAO,CAAC,4BAA4B,CAAC,MAAM,CACjE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EACpC,OAAO,CAAC,uBAAuB,CAAC,MAAM,CACvC,CAAC;IACF,IAAI,eAAe,GAAG,yCAAyC,EAAE,CAAC;QAChE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,6BAA6B,CAAC,WAAW;YAClD,IAAI,EAAE,CAAC,8BAA8B,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,EACF,CAAC,6BAA6B,CAAC,CAChC,CAAC;AAMJ,MAAM,CAAC,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;IACzD,4BAA4B,EAAE,2BAA2B;IACzD,IAAI,EAAE,qBAAqB;IAC3B,KAAK,EAAE,iBAAiB;CACzB,CAAC,CAAC;AAIH,MAAM,UAAU,gCAAgC,CAC9C,KAAc;IAEd,OAAO,oCAAoC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAc;IAEd,OAAO,qCAAqC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAc;IAEd,OAAO,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAc;IAEd,OAAO,oCAAoC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc;IAEd,OAAO,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc;IAEd,OAAO,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC5D,CAAC","sourcesContent":["import type { z } from \"zod\";\nimport { documentLinkSetPathRefinement } from \"../documentSyncRefinements\";\nimport { registerJsonSchemaRuntimeRefinements } from \"../jsonSchema\";\nimport {\n  arraySchema,\n  loosePlainObject,\n  nonEmptyStringSchema,\n  plainObjectSchema,\n  requiredUnknownSchema,\n} from \"../schema\";\nimport {\n  MAX_CONTAINER_PATH_LENGTH,\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS,\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n  MAX_INLINE_CONTAINER_REKEYS,\n} from \"../util\";\nimport { ContainerMutationRequestSchema } from \"./container\";\nimport {\n  ContainerManifestPathSchema,\n  type ContainerManifestRef,\n  ContainerManifestRefArrayArraySchema,\n  type DocumentContentKeyBundleRequest,\n  DocumentContentKeyBundleRequestSchema,\n  DocumentOutgoingUpdateSchema,\n  type DocumentSyncRequest,\n  DocumentSyncRequestSchema,\n} from \"./documentSyncSchema\";\n\nexport {\n  type ContainerManifestRef,\n  ContainerManifestRefArrayArraySchema,\n  ContainerManifestRefSchema,\n  type DocumentContentKeyBundleRequest,\n  DocumentContentKeyBundleRequestSchema,\n  type DocumentContentKeyTargetEnvelope,\n  DocumentContentKeyTargetEnvelopeSchema,\n  type DocumentOutgoingUpdate,\n  DocumentOutgoingUpdateSchema,\n  type DocumentSyncRequest,\n  DocumentSyncRequestSchema,\n} from \"./documentSyncSchema\";\n\nexport const documentCreateRequestShape = {\n  authorizingContainerPathRefs: ContainerManifestRefArrayArraySchema.optional(),\n  body: requiredUnknownSchema,\n  containerRekeys: arraySchema(\n    ContainerMutationRequestSchema,\n    MAX_INLINE_CONTAINER_REKEYS,\n  ).optional(),\n  contentKeyBundle: DocumentContentKeyBundleRequestSchema,\n  event: plainObjectSchema,\n  expectedManifestHash: nonEmptyStringSchema,\n  manifest: plainObjectSchema,\n  targetContainerPathRefs: ContainerManifestPathSchema.optional(),\n} satisfies z.ZodRawShape;\n\nexport const DocumentCreateRequestSchema = loosePlainObject(\n  documentCreateRequestShape,\n);\n\nexport type DocumentCreateRequest = z.infer<typeof DocumentCreateRequestSchema>;\n\n// The prior link-set manifest is the document's current head. The server\n// resolves it from its own store, while the signed event's previous manifest\n// hash pins freshness, so the writer does not echo the bundle back.\nexport const DocumentLinkSetMutationRequestSchema =\n  registerJsonSchemaRuntimeRefinements(\n    loosePlainObject({\n      authorizingContainerPathRefs: ContainerManifestRefArrayArraySchema,\n      body: requiredUnknownSchema,\n      containerRekeys: arraySchema(\n        ContainerMutationRequestSchema,\n        MAX_INLINE_CONTAINER_REKEYS,\n      ).optional(),\n      contentKeyBundle: DocumentContentKeyBundleRequestSchema,\n      event: plainObjectSchema,\n      expectedManifestHash: nonEmptyStringSchema,\n      manifest: plainObjectSchema,\n      rotationBaseline: DocumentOutgoingUpdateSchema.optional(),\n      // A container path (root→leaf chain) must carry at least one manifest\n      // reference; an empty path authorizes nothing and is never legitimately built.\n      targetContainerPathRefs: ContainerManifestPathSchema,\n    }).superRefine((request, context) => {\n      if (\n        !Array.isArray(request.authorizingContainerPathRefs) ||\n        !Array.isArray(request.targetContainerPathRefs)\n      ) {\n        return;\n      }\n      // The nested schemas have already reported their shape/cardinality\n      // errors. Keep this aggregate refinement bounded and never dereference a\n      // malformed path after those continuable issues have been replayed.\n      if (\n        request.authorizingContainerPathRefs.length >\n          MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS ||\n        request.targetContainerPathRefs.length > MAX_CONTAINER_PATH_LENGTH ||\n        request.authorizingContainerPathRefs.some(\n          (path) =>\n            !Array.isArray(path) || path.length > MAX_CONTAINER_PATH_LENGTH,\n        )\n      ) {\n        return;\n      }\n      const totalReferences = request.authorizingContainerPathRefs.reduce(\n        (total, path) => total + path.length,\n        request.targetContainerPathRefs.length,\n      );\n      if (totalReferences > MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS) {\n        context.addIssue({\n          code: \"custom\",\n          message: documentLinkSetPathRefinement.description,\n          path: [\"authorizingContainerPathRefs\"],\n        });\n      }\n    }),\n    [documentLinkSetPathRefinement],\n  );\n\nexport type DocumentLinkSetMutationRequest = z.infer<\n  typeof DocumentLinkSetMutationRequestSchema\n>;\n\nexport const DocumentPurgeRequestSchema = loosePlainObject({\n  authorizingContainerPathRefs: ContainerManifestPathSchema,\n  body: requiredUnknownSchema,\n  event: plainObjectSchema,\n});\n\nexport type DocumentPurgeRequest = z.infer<typeof DocumentPurgeRequestSchema>;\n\nexport function isContainerManifestRefArrayArray(\n  value: unknown,\n): value is ContainerManifestRef[][] {\n  return ContainerManifestRefArrayArraySchema.safeParse(value).success;\n}\n\nexport function isDocumentContentKeyBundleRequest(\n  value: unknown,\n): value is DocumentContentKeyBundleRequest {\n  return DocumentContentKeyBundleRequestSchema.safeParse(value).success;\n}\n\nexport function isDocumentCreateRequest(\n  value: unknown,\n): value is DocumentCreateRequest {\n  return DocumentCreateRequestSchema.safeParse(value).success;\n}\n\nexport function isDocumentLinkSetMutationRequest(\n  value: unknown,\n): value is DocumentLinkSetMutationRequest {\n  return DocumentLinkSetMutationRequestSchema.safeParse(value).success;\n}\n\nexport function isDocumentPurgeRequest(\n  value: unknown,\n): value is DocumentPurgeRequest {\n  return DocumentPurgeRequestSchema.safeParse(value).success;\n}\n\nexport function isDocumentSyncRequest(\n  value: unknown,\n): value is DocumentSyncRequest {\n  return DocumentSyncRequestSchema.safeParse(value).success;\n}\n"]}

package/internal/validators/request/documentSyncSchema.d.ts

@@ -1,33 +1,6 @@
 import { z } from "zod";
-/**
- * A reference to a container access manifest the server already stores, in lieu
- * of re-embedding the full signed manifest bundle. The server resolves the full
- * manifest from its own store by `manifestHash` and pins it to the container's
- * current head, so the reference carries the same authority as the full bundle
- * without the multi-KB signature. `containerId` is advisory: the server keys the
- * head lookup off the resolved bundle's own containerId and rejects a mismatch.
- */
-export declare const ContainerManifestRefSchema: z.ZodType<{
-    containerId: string;
-    manifestHash: string;
-}, {
-    containerId: string;
-    manifestHash: string;
-}, z.core.$ZodTypeInternals<{
-    containerId: string;
-    manifestHash: string;
-}, {
-    containerId: string;
-    manifestHash: string;
-}>>;
-export type ContainerManifestRef = z.infer<typeof ContainerManifestRefSchema>;
-export declare const ContainerManifestPathSchema: z.ZodCustom<{
-    containerId: string;
-    manifestHash: string;
-}[], {
-    containerId: string;
-    manifestHash: string;
-}[]>;
+import { ContainerManifestPathSchema, type ContainerManifestRef, ContainerManifestRefSchema } from "./containerManifestRef.js";
+export { ContainerManifestPathSchema, type ContainerManifestRef, ContainerManifestRefSchema, };
 export declare const ContainerManifestRefArrayArraySchema: z.ZodCustom<{
     containerId: string;
     manifestHash: string;
@@ -188,36 +161,26 @@ export declare const DocumentSyncRequestSchema: z.ZodType<{
         predecessorBridge: Record<string, unknown> | null;
         principalPolicies: Record<string, unknown>[];
         wraps: Record<string, unknown>[];
-        containerManifestHistory?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        containerManifestHistoryRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
-        destinationParentContainerPath?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        destinationParentContainerPathRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
-        parentContainerPath?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        parentContainerPathRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
         parentKekState?: Record<string, unknown> | null | undefined;
-        previousContainerPath?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        previousContainerPathRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
-        previousManifest?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        previousManifestRef?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         } | null | undefined;
         userRecipientKeys?: Record<string, unknown>[] | undefined;
     }[] | undefined;
@@ -269,36 +232,26 @@ export declare const DocumentSyncRequestSchema: z.ZodType<{
         predecessorBridge: Record<string, unknown> | null;
         principalPolicies: Record<string, unknown>[];
         wraps: Record<string, unknown>[];
-        containerManifestHistory?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        containerManifestHistoryRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
-        destinationParentContainerPath?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        destinationParentContainerPathRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
-        parentContainerPath?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        parentContainerPathRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
         parentKekState?: Record<string, unknown> | null | undefined;
-        previousContainerPath?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        previousContainerPathRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
-        previousManifest?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        previousManifestRef?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         } | null | undefined;
         userRecipientKeys?: Record<string, unknown>[] | undefined;
     }[] | undefined;
@@ -350,36 +303,26 @@ export declare const DocumentSyncRequestSchema: z.ZodType<{
         predecessorBridge: Record<string, unknown> | null;
         principalPolicies: Record<string, unknown>[];
         wraps: Record<string, unknown>[];
-        containerManifestHistory?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        containerManifestHistoryRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
-        destinationParentContainerPath?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        destinationParentContainerPathRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
-        parentContainerPath?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        parentContainerPathRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
         parentKekState?: Record<string, unknown> | null | undefined;
-        previousContainerPath?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        previousContainerPathRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
-        previousManifest?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        previousManifestRef?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         } | null | undefined;
         userRecipientKeys?: Record<string, unknown>[] | undefined;
     }[] | undefined;
@@ -431,36 +374,26 @@ export declare const DocumentSyncRequestSchema: z.ZodType<{
         predecessorBridge: Record<string, unknown> | null;
         principalPolicies: Record<string, unknown>[];
         wraps: Record<string, unknown>[];
-        containerManifestHistory?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        containerManifestHistoryRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
-        destinationParentContainerPath?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        destinationParentContainerPathRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
-        parentContainerPath?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        parentContainerPathRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
         parentKekState?: Record<string, unknown> | null | undefined;
-        previousContainerPath?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        previousContainerPathRefs?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         }[] | undefined;
-        previousManifest?: {
-            event: Record<string, unknown>;
-            manifest: Record<string, unknown>;
+        previousManifestRef?: {
+            containerId: string;
             manifestHash: string;
-            state: Record<string, unknown>;
         } | null | undefined;
         userRecipientKeys?: Record<string, unknown>[] | undefined;
     }[] | undefined;

package/internal/validators/request/documentSyncSchema.js

@@ -4,28 +4,15 @@ import { documentSyncRequestEnvelopeRefinements, documentSyncRequestPullRefineme
 import { classifyDocumentSyncRequestMode } from "../documentSyncRequestMode.js";
 import { isPlainObject } from "../isPlainObject.js";
 import { registerJsonSchemaFragment, registerJsonSchemaRuntimeRefinements, registerJsonSchemaView, } from "../jsonSchema.js";
-import { arraySchema, boundedNonEmptyArraySchema, boundedNonEmptyStringSchema, boundedStringSchema, loosePlainObject, nonEmptyStringSchema, plainObjectSchema, positiveIntegerSchema, requiredUnknownSchema, sha256HexStringSchema, } from "../schema.js";
-import { AccessManifestBundleWireSchema } from "../util/accessManifestBundle.js";
+import { arraySchema, boundedNonEmptyStringSchema, boundedStringSchema, loosePlainObject, nonEmptyStringSchema, plainObjectSchema, positiveIntegerSchema, requiredUnknownSchema, sha256HexStringSchema, } from "../schema.js";
 import { MAX_INLINE_CONTAINER_REKEYS } from "../util/containerKekKeyringWire.js";
-import { MAX_CONTAINER_PATH_LENGTH } from "../util/containerLimits.js";
 import { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS, MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS, MAX_DOCUMENT_SYNC_OUTGOING_UPDATES, MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH, MAX_DOCUMENT_SYNC_REQUEST_BYTES, } from "../util/documentSyncLimits.js";
 import { isUuidV4String, UUID_V4_PATTERN } from "../util/uuid.js";
 import { isWalLsnString, WAL_LSN_PATTERN } from "../util/walLsn.js";
 import { ContainerMutationRequestSchema, } from "./container.js";
+import { ContainerManifestPathSchema, ContainerManifestRefListSchema, ContainerManifestRefSchema, OptionalContainerManifestPathSchema, } from "./containerManifestRef.js";
 import { ContentKeyWrappedKeySchema, contentKeyWrappingMetadataSchema, } from "./contentKeyEnvelopeSchema.js";
-/**
- * A reference to a container access manifest the server already stores, in lieu
- * of re-embedding the full signed manifest bundle. The server resolves the full
- * manifest from its own store by `manifestHash` and pins it to the container's
- * current head, so the reference carries the same authority as the full bundle
- * without the multi-KB signature. `containerId` is advisory: the server keys the
- * head lookup off the resolved bundle's own containerId and rejects a mismatch.
- */
-export const ContainerManifestRefSchema = loosePlainObject({
-    containerId: nonEmptyStringSchema,
-    manifestHash: nonEmptyStringSchema,
-});
-export const ContainerManifestPathSchema = boundedNonEmptyArraySchema(ContainerManifestRefSchema, MAX_CONTAINER_PATH_LENGTH);
+export { ContainerManifestPathSchema, ContainerManifestRefSchema, };
 export const ContainerManifestRefArrayArraySchema = arraySchema(ContainerManifestPathSchema, MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS);
 export const DocumentContentKeyTargetEnvelopeSchema = loosePlainObject({
     containerId: nonEmptyStringSchema,
@@ -80,22 +67,18 @@ const DocumentSyncOutgoingUpdateSchema = createDocumentOutgoingUpdateSchema(boun
 // schema used by newer operations.
 const DocumentSyncContainerMutationRequestSchema = registerJsonSchemaView(z.custom((value) => ContainerMutationRequestSchema.safeParse(value).success), z.looseObject({
     body: requiredUnknownSchema,
-    containerManifestHistory: z
-        .array(AccessManifestBundleWireSchema)
-        .optional(),
-    destinationParentContainerPath: z
-        .array(AccessManifestBundleWireSchema)
-        .optional(),
+    containerManifestHistoryRefs: ContainerManifestRefListSchema.optional(),
+    destinationParentContainerPathRefs: OptionalContainerManifestPathSchema.optional(),
     event: plainObjectSchema,
     expectedManifestHash: nonEmptyStringSchema,
     keyEpoch: plainObjectSchema,
     keyring: plainObjectSchema.nullable(),
     manifest: plainObjectSchema,
-    parentContainerPath: z.array(AccessManifestBundleWireSchema).optional(),
+    parentContainerPathRefs: OptionalContainerManifestPathSchema.optional(),
     parentKekState: plainObjectSchema.nullable().optional(),
     predecessorBridge: plainObjectSchema.nullable(),
-    previousContainerPath: z.array(AccessManifestBundleWireSchema).optional(),
-    previousManifest: AccessManifestBundleWireSchema.nullable().optional(),
+    previousContainerPathRefs: OptionalContainerManifestPathSchema.optional(),
+    previousManifestRef: ContainerManifestRefSchema.nullable().optional(),
     principalPolicies: z.array(plainObjectSchema),
     userRecipientKeys: z.array(plainObjectSchema).optional(),
     wraps: z.array(plainObjectSchema),

package/internal/validators/request/documentSyncSchema.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentSyncSchema.js","sourceRoot":"","sources":["documentSyncSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oCAAoC,EACpC,gDAAgD,EAChD,sCAAsC,EACtC,8CAA8C,GAC/C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sCAAsC,EACtC,kCAAkC,EAClC,qCAAqC,GACtC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,0BAA0B,EAC1B,oCAAoC,EACpC,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,EACX,0BAA0B,EAC1B,2BAA2B,EAC3B,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EACL,qCAAqC,EACrC,qCAAqC,EACrC,kCAAkC,EAClC,oCAAoC,EACpC,+BAA+B,GAChC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAEL,8BAA8B,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;IACzD,WAAW,EAAE,oBAAoB;IACjC,YAAY,EAAE,oBAAoB;CACnC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CACnE,0BAA0B,EAC1B,yBAAyB,CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG,WAAW,CAC7D,2BAA2B,EAC3B,qCAAqC,CACtC,CAAC;AAEF,MAAM,CAAC,MAAM,sCAAsC,GAAG,gBAAgB,CAAC;IACrE,WAAW,EAAE,oBAAoB;IACjC,iBAAiB,EAAE,qBAAqB;IACxC,mBAAmB,EAAE,oBAAoB;IACzC,qBAAqB,EAAE,oBAAoB;IAC3C,UAAU,EAAE,0BAA0B;IACtC,gBAAgB,EAAE,gCAAgC,CAAC,UAAU,CAAC;CAC/D,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,eAAe,EAAE,qBAAqB;IACtC,mBAAmB,EAAE,oBAAoB;IACzC,UAAU,EAAE,oBAAoB;IAChC,OAAO,EAAE,WAAW,CAClB,sCAAsC,EACtC,qCAAqC,CACtC;CACF,CAAC,CAAC;AAMH,SAAS,kCAAkC,CACzC,mBAAsC,EACtC,mBAAsC;IAEtC,OAAO,oCAAoC,CACzC,gBAAgB,CAAC;QACf,cAAc,EAAE,CAAC;aACd,OAAO,CAAC,sCAAsC,CAAC;aAC/C,QAAQ,EAAE;QACb,qBAAqB,EAAE,CAAC;aACrB,OAAO,CAAC,8CAA8C,CAAC;aACvD,QAAQ,EAAE;QACb,aAAa,EAAE,mBAAmB;QAClC,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE;YAChE,OAAO,EAAE,eAAe,CAAC,MAAM;YAC/B,IAAI,EAAE,QAAQ;SACf,CAAC;QACF,uBAAuB,EAAE,mBAAmB;QAC5C,yBAAyB,EAAE,mBAAmB;QAC9C,aAAa,EAAE,oBAAoB;QACnC,mBAAmB,EAAE,mBAAmB,CAAC,QAAQ,EAAE;QACnD,WAAW,EAAE,iBAAiB;KAC/B,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QACjC,IAAI,oCAAoC,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/D,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,gDAAgD;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,EACF,CAAC,qCAAqC,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,sDAAsD;AACtD,MAAM,CAAC,MAAM,4BAA4B,GAAG,kCAAkC,CAC5E,oBAAoB,EACpB,oBAAoB,CACrB,CAAC;AAEF,MAAM,gCAAgC,GAAG,kCAAkC,CACzE,2BAA2B,CAAC,+BAA+B,CAAC,EAC5D,2BAA2B,CAAC,+BAA+B,CAAC,CAC7D,CAAC;AAMF,0EAA0E;AAC1E,4EAA4E;AAC5E,gFAAgF;AAChF,mCAAmC;AACnC,MAAM,0CAA0C,GAAG,sBAAsB,CACvE,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CACnE,EACD,CAAC,CAAC,WAAW,CAAC;IACZ,IAAI,EAAE,qBAAqB;IAC3B,wBAAwB,EAAE,CAAC;SACxB,KAAK,CAAC,8BAA8B,CAAC;SACrC,QAAQ,EAAE;IACb,8BAA8B,EAAE,CAAC;SAC9B,KAAK,CAAC,8BAA8B,CAAC;SACrC,QAAQ,EAAE;IACb,KAAK,EAAE,iBAAiB;IACxB,oBAAoB,EAAE,oBAAoB;IAC1C,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,iBAAiB;IAC3B,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,QAAQ,EAAE;IACvE,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC/C,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,QAAQ,EAAE;IACzE,gBAAgB,EAAE,8BAA8B,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtE,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC7C,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IACxD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;CAClC,CAAC,CACH,CAAC;AAEF,MAAM,YAAY,GAAG,0BAA0B,CAC7C,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,EACjC,EAAE,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CACpD,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,oCAAoC,CAC3E,gBAAgB,CAAC;IACf,4BAA4B,EAC1B,oCAAoC,CAAC,QAAQ,EAAE;IACjD,sEAAsE;IACtE,gDAAgD;IAChD,eAAe,EAAE,WAAW,CAC1B,0CAA0C,EAC1C,2BAA2B,CAC5B,CAAC,QAAQ,EAAE;IACZ,gBAAgB,EAAE,qCAAqC,CAAC,QAAQ,EAAE;IAClE,eAAe,EAAE,qBAAqB;IACtC,2BAA2B,EAAE,oBAAoB;IACjD,kBAAkB,EAAE,oBAAoB;IACxC,WAAW,EAAE,CAAC;SACX,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,mHAAmH,CACpH;SACA,QAAQ,EAAE;IACb,mBAAmB,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACrD,kBAAkB,EAAE,mBAAmB,CACrC,+BAA+B,CAChC,CAAC,QAAQ,EAAE;IACZ,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,eAAe,EAAE,WAAW,CAC1B,gCAAgC,EAChC,kCAAkC,CACnC;IACD,UAAU,EAAE,2BAA2B,CACrC,oCAAoC,CACrC,CAAC,QAAQ,EAAE;IACZ,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACxC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5C,OAAO;IACT,CAAC;IACD,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,kCAAkC,EAAE,CAAC;QACxE,OAAO;IACT,CAAC;IACD,IACE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC;QACnD,OAAO,CAAC,4BAA4B,CAAC,MAAM;YACzC,qCAAqC,EACvC,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,IACE,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAC1C,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS,CAAC,EAC3C,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,wDAAwD;YACjE,IAAI,EAAE,CAAC,qBAAqB,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,CAAC,UAAU,KAAK,SAAS;QAChC,CAAC,kBAAkB;YACjB,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;YAC1C,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACtC,OAAO,CAAC,4BAA4B,KAAK,SAAS,CAAC,EACrD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,mCAAmC;YAC5C,IAAI,EAAE,CAAC,YAAY,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,CAAC,WAAW,KAAK,KAAK;QAC7B,CAAC,kBAAkB;YACjB,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;YAC1C,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACtC,OAAO,CAAC,4BAA4B,KAAK,SAAS,CAAC,EACrD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,qCAAqC;YAC9C,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;QACzE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,yDAAyD;YAClE,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,+BAA+B,CAAC;QAClD,mCAAmC,EACjC,OAAO,CAAC,4BAA4B,KAAK,SAAS;QACpD,kBAAkB,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAC9D,kBAAkB;KACnB,CAAC,CAAC;IAEH,IAAI,WAAW,KAAK,sCAAsC,EAAE,CAAC;QAC3D,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EACL,+DAA+D;YACjE,IAAI,EAAE,CAAC,8BAA8B,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,WAAW,KAAK,8BAA8B,EAAE,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,6CAA6C;YACtD,IAAI,EAAE,CAAC,iBAAiB,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IACE,IAAI,GAAG,CACL,OAAO,CAAC,eAAe;SACpB,MAAM,CAAC,aAAa,CAAC;SACrB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAC9C,CAAC,IAAI,KAAK,OAAO,CAAC,eAAe,CAAC,MAAM,EACzC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,oCAAoC;YAC7C,IAAI,EAAE,CAAC,iBAAiB,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,EACF;IACE,GAAG,sCAAsC;IACzC,GAAG,kCAAkC;CACtC,CACF,CAAC","sourcesContent":["import { z } from \"zod\";\nimport {\n  classifyDocumentSyncCheckpointFields,\n  DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE,\n  DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND,\n  DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND,\n} from \"../documentSyncCheckpoint\";\nimport {\n  documentSyncRequestEnvelopeRefinements,\n  documentSyncRequestPullRefinements,\n  documentSyncRequestRotationRefinement,\n} from \"../documentSyncRefinements\";\nimport { classifyDocumentSyncRequestMode } from \"../documentSyncRequestMode\";\nimport { isPlainObject } from \"../isPlainObject\";\nimport {\n  registerJsonSchemaFragment,\n  registerJsonSchemaRuntimeRefinements,\n  registerJsonSchemaView,\n} from \"../jsonSchema\";\nimport {\n  arraySchema,\n  boundedNonEmptyArraySchema,\n  boundedNonEmptyStringSchema,\n  boundedStringSchema,\n  loosePlainObject,\n  nonEmptyStringSchema,\n  plainObjectSchema,\n  positiveIntegerSchema,\n  requiredUnknownSchema,\n  sha256HexStringSchema,\n} from \"../schema\";\nimport { AccessManifestBundleWireSchema } from \"../util/accessManifestBundle\";\nimport { MAX_INLINE_CONTAINER_REKEYS } from \"../util/containerKekKeyringWire\";\nimport { MAX_CONTAINER_PATH_LENGTH } from \"../util/containerLimits\";\nimport {\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n  MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n  MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n  MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n  MAX_DOCUMENT_SYNC_REQUEST_BYTES,\n} from \"../util/documentSyncLimits\";\nimport { isUuidV4String, UUID_V4_PATTERN } from \"../util/uuid\";\nimport { isWalLsnString, WAL_LSN_PATTERN } from \"../util/walLsn\";\nimport {\n  type ContainerMutationRequest,\n  ContainerMutationRequestSchema,\n} from \"./container\";\nimport {\n  ContentKeyWrappedKeySchema,\n  contentKeyWrappingMetadataSchema,\n} from \"./contentKeyEnvelopeSchema\";\n\n/**\n * A reference to a container access manifest the server already stores, in lieu\n * of re-embedding the full signed manifest bundle. The server resolves the full\n * manifest from its own store by `manifestHash` and pins it to the container's\n * current head, so the reference carries the same authority as the full bundle\n * without the multi-KB signature. `containerId` is advisory: the server keys the\n * head lookup off the resolved bundle's own containerId and rejects a mismatch.\n */\nexport const ContainerManifestRefSchema = loosePlainObject({\n  containerId: nonEmptyStringSchema,\n  manifestHash: nonEmptyStringSchema,\n});\n\nexport type ContainerManifestRef = z.infer<typeof ContainerManifestRefSchema>;\n\nexport const ContainerManifestPathSchema = boundedNonEmptyArraySchema(\n  ContainerManifestRefSchema,\n  MAX_CONTAINER_PATH_LENGTH,\n);\n\nexport const ContainerManifestRefArrayArraySchema = arraySchema(\n  ContainerManifestPathSchema,\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n);\n\nexport const DocumentContentKeyTargetEnvelopeSchema = loosePlainObject({\n  containerId: nonEmptyStringSchema,\n  containerKeyEpoch: positiveIntegerSchema,\n  containerKeyEpochId: nonEmptyStringSchema,\n  containerManifestHash: nonEmptyStringSchema,\n  wrappedKey: ContentKeyWrappedKeySchema,\n  wrappingMetadata: contentKeyWrappingMetadataSchema(\"document\"),\n});\n\nexport type DocumentContentKeyTargetEnvelope = z.infer<\n  typeof DocumentContentKeyTargetEnvelopeSchema\n>;\n\nexport const DocumentContentKeyBundleRequestSchema = loosePlainObject({\n  contentKeyEpoch: positiveIntegerSchema,\n  linkSetManifestHash: nonEmptyStringSchema,\n  targetHash: nonEmptyStringSchema,\n  targets: arraySchema(\n    DocumentContentKeyTargetEnvelopeSchema,\n    MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n  ),\n});\n\nexport type DocumentContentKeyBundleRequest = z.infer<\n  typeof DocumentContentKeyBundleRequestSchema\n>;\n\nfunction createDocumentOutgoingUpdateSchema(\n  encryptedDataSchema: z.ZodType<string>,\n  versionVectorSchema: z.ZodType<string>,\n) {\n  return registerJsonSchemaRuntimeRefinements(\n    loosePlainObject({\n      checkpointKind: z\n        .literal(DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND)\n        .optional(),\n      checkpointPayloadKind: z\n        .literal(DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND)\n        .optional(),\n      encryptedData: encryptedDataSchema,\n      id: registerJsonSchemaFragment(z.string().refine(isUuidV4String), {\n        pattern: UUID_V4_PATTERN.source,\n        type: \"string\",\n      }),\n      partialEndVersionVector: versionVectorSchema,\n      partialStartVersionVector: versionVectorSchema,\n      plaintextHash: nonEmptyStringSchema,\n      sourceVersionVector: versionVectorSchema.optional(),\n      writeHeader: plainObjectSchema,\n    }).superRefine((update, context) => {\n      if (classifyDocumentSyncCheckpointFields(update) === \"invalid\") {\n        context.addIssue({\n          code: \"custom\",\n          message: DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE,\n        });\n      }\n    }),\n    [documentSyncRequestRotationRefinement],\n  );\n}\n\n// Link-set rotations may carry a full-history baseline that is larger than a\n// single sync request. Their route has its own ingress policy, so keep the\n// shared update contract unbounded and apply the sync-specific ceiling only\n// where an update is embedded in DocumentSyncRequest.\nexport const DocumentOutgoingUpdateSchema = createDocumentOutgoingUpdateSchema(\n  nonEmptyStringSchema,\n  nonEmptyStringSchema,\n);\n\nconst DocumentSyncOutgoingUpdateSchema = createDocumentOutgoingUpdateSchema(\n  boundedNonEmptyStringSchema(MAX_DOCUMENT_SYNC_REQUEST_BYTES),\n  boundedNonEmptyStringSchema(MAX_DOCUMENT_SYNC_REQUEST_BYTES),\n);\n\nexport type DocumentOutgoingUpdate = z.infer<\n  typeof DocumentOutgoingUpdateSchema\n>;\n\n// Document sync published container keyrings as opaque records before the\n// canonical container-mutation schema described their fields. Keep that one\n// existing OpenAPI view stable while runtime validation delegates to the shared\n// schema used by newer operations.\nconst DocumentSyncContainerMutationRequestSchema = registerJsonSchemaView(\n  z.custom<ContainerMutationRequest>(\n    (value) => ContainerMutationRequestSchema.safeParse(value).success,\n  ),\n  z.looseObject({\n    body: requiredUnknownSchema,\n    containerManifestHistory: z\n      .array(AccessManifestBundleWireSchema)\n      .optional(),\n    destinationParentContainerPath: z\n      .array(AccessManifestBundleWireSchema)\n      .optional(),\n    event: plainObjectSchema,\n    expectedManifestHash: nonEmptyStringSchema,\n    keyEpoch: plainObjectSchema,\n    keyring: plainObjectSchema.nullable(),\n    manifest: plainObjectSchema,\n    parentContainerPath: z.array(AccessManifestBundleWireSchema).optional(),\n    parentKekState: plainObjectSchema.nullable().optional(),\n    predecessorBridge: plainObjectSchema.nullable(),\n    previousContainerPath: z.array(AccessManifestBundleWireSchema).optional(),\n    previousManifest: AccessManifestBundleWireSchema.nullable().optional(),\n    principalPolicies: z.array(plainObjectSchema),\n    userRecipientKeys: z.array(plainObjectSchema).optional(),\n    wraps: z.array(plainObjectSchema),\n  }),\n);\n\nconst WalLsnSchema = registerJsonSchemaFragment(\n  z.string().refine(isWalLsnString),\n  { pattern: WAL_LSN_PATTERN.source, type: \"string\" },\n);\n\nexport const DocumentSyncRequestSchema = registerJsonSchemaRuntimeRefinements(\n  loosePlainObject({\n    authorizingContainerPathRefs:\n      ContainerManifestRefArrayArraySchema.optional(),\n    // Each rotation carries a keyring sized by its epoch, so the batch is\n    // bounded here as well as in the runtime guard.\n    containerRekeys: arraySchema(\n      DocumentSyncContainerMutationRequestSchema,\n      MAX_INLINE_CONTAINER_REKEYS,\n    ).optional(),\n    contentKeyBundle: DocumentContentKeyBundleRequestSchema.optional(),\n    contentKeyEpoch: positiveIntegerSchema,\n    expectedLinkSetManifestHash: nonEmptyStringSchema,\n    expectedTargetHash: nonEmptyStringSchema,\n    historyMode: z\n      .literal(\"raw\")\n      .describe(\n        \"Explicit read-only recovery mode that bypasses rotation-baseline redirection and returns retained missing history\",\n      )\n      .optional(),\n    inlineRekeyCommitId: sha256HexStringSchema.optional(),\n    localVersionVector: boundedStringSchema(\n      MAX_DOCUMENT_SYNC_REQUEST_BYTES,\n    ).nullable(),\n    minLsn: WalLsnSchema.optional(),\n    outgoingUpdates: arraySchema(\n      DocumentSyncOutgoingUpdateSchema,\n      MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n    ),\n    pullCursor: boundedNonEmptyStringSchema(\n      MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n    ).optional(),\n    supportsPullPagination: z.literal(true),\n  }).superRefine((request, context) => {\n    if (!Array.isArray(request.outgoingUpdates)) {\n      return;\n    }\n    // The field schemas have already recorded their cardinality errors. Do\n    // not let the cross-field checks below rescan attacker-sized arrays after\n    // those bounded schemas deliberately stopped before item validation.\n    if (request.outgoingUpdates.length > MAX_DOCUMENT_SYNC_OUTGOING_UPDATES) {\n      return;\n    }\n    if (\n      Array.isArray(request.authorizingContainerPathRefs) &&\n      request.authorizingContainerPathRefs.length >\n        MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS\n    ) {\n      return;\n    }\n\n    const hasOutgoingUpdates = request.outgoingUpdates.length > 0;\n    if (\n      (request.containerRekeys?.length ?? 0) > 0 !==\n      (request.inlineRekeyCommitId !== undefined)\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"inline rekey commit id must accompany container rekeys\",\n        path: [\"inlineRekeyCommitId\"],\n      });\n    }\n    if (\n      request.pullCursor !== undefined &&\n      (hasOutgoingUpdates ||\n        (request.containerRekeys?.length ?? 0) > 0 ||\n        request.contentKeyBundle !== undefined ||\n        request.authorizingContainerPathRefs !== undefined)\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"continued pulls must be read-only\",\n        path: [\"pullCursor\"],\n      });\n    }\n    if (\n      request.historyMode === \"raw\" &&\n      (hasOutgoingUpdates ||\n        (request.containerRekeys?.length ?? 0) > 0 ||\n        request.contentKeyBundle !== undefined ||\n        request.authorizingContainerPathRefs !== undefined)\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"raw-history pulls must be read-only\",\n        path: [\"historyMode\"],\n      });\n    }\n    if (request.historyMode === \"raw\" && request.localVersionVector !== null) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"raw-history pulls must start from a null version vector\",\n        path: [\"localVersionVector\"],\n      });\n    }\n    const requestMode = classifyDocumentSyncRequestMode({\n      authorizingContainerPathRefsPresent:\n        request.authorizingContainerPathRefs !== undefined,\n      hasContainerRekeys: (request.containerRekeys?.length ?? 0) > 0,\n      hasOutgoingUpdates,\n    });\n\n    if (requestMode === \"invalid-authorizing-path-refs-absent\") {\n      context.addIssue({\n        code: \"custom\",\n        message:\n          \"authorizing container paths are required for outgoing updates\",\n        path: [\"authorizingContainerPathRefs\"],\n      });\n    }\n\n    if (requestMode === \"invalid-rekeys-without-write\") {\n      context.addIssue({\n        code: \"custom\",\n        message: \"container rekeys require an outgoing update\",\n        path: [\"containerRekeys\"],\n      });\n    }\n\n    if (\n      new Set(\n        request.outgoingUpdates\n          .filter(isPlainObject)\n          .map((update) => Reflect.get(update, \"id\")),\n      ).size !== request.outgoingUpdates.length\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"outgoing update ids must be unique\",\n        path: [\"outgoingUpdates\"],\n      });\n    }\n  }),\n  [\n    ...documentSyncRequestEnvelopeRefinements,\n    ...documentSyncRequestPullRefinements,\n  ],\n);\n\nexport type DocumentSyncRequest = z.infer<typeof DocumentSyncRequestSchema>;\n"]}
+{"version":3,"file":"documentSyncSchema.js","sourceRoot":"","sources":["documentSyncSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oCAAoC,EACpC,gDAAgD,EAChD,sCAAsC,EACtC,8CAA8C,GAC/C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sCAAsC,EACtC,kCAAkC,EAClC,qCAAqC,GACtC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,0BAA0B,EAC1B,oCAAoC,EACpC,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,EACX,2BAA2B,EAC3B,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EACL,qCAAqC,EACrC,qCAAqC,EACrC,kCAAkC,EAClC,oCAAoC,EACpC,+BAA+B,GAChC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAEL,8BAA8B,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,2BAA2B,EAE3B,8BAA8B,EAC9B,0BAA0B,EAC1B,mCAAmC,GACpC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,2BAA2B,EAE3B,0BAA0B,GAC3B,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG,WAAW,CAC7D,2BAA2B,EAC3B,qCAAqC,CACtC,CAAC;AAEF,MAAM,CAAC,MAAM,sCAAsC,GAAG,gBAAgB,CAAC;IACrE,WAAW,EAAE,oBAAoB;IACjC,iBAAiB,EAAE,qBAAqB;IACxC,mBAAmB,EAAE,oBAAoB;IACzC,qBAAqB,EAAE,oBAAoB;IAC3C,UAAU,EAAE,0BAA0B;IACtC,gBAAgB,EAAE,gCAAgC,CAAC,UAAU,CAAC;CAC/D,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,eAAe,EAAE,qBAAqB;IACtC,mBAAmB,EAAE,oBAAoB;IACzC,UAAU,EAAE,oBAAoB;IAChC,OAAO,EAAE,WAAW,CAClB,sCAAsC,EACtC,qCAAqC,CACtC;CACF,CAAC,CAAC;AAMH,SAAS,kCAAkC,CACzC,mBAAsC,EACtC,mBAAsC;IAEtC,OAAO,oCAAoC,CACzC,gBAAgB,CAAC;QACf,cAAc,EAAE,CAAC;aACd,OAAO,CAAC,sCAAsC,CAAC;aAC/C,QAAQ,EAAE;QACb,qBAAqB,EAAE,CAAC;aACrB,OAAO,CAAC,8CAA8C,CAAC;aACvD,QAAQ,EAAE;QACb,aAAa,EAAE,mBAAmB;QAClC,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE;YAChE,OAAO,EAAE,eAAe,CAAC,MAAM;YAC/B,IAAI,EAAE,QAAQ;SACf,CAAC;QACF,uBAAuB,EAAE,mBAAmB;QAC5C,yBAAyB,EAAE,mBAAmB;QAC9C,aAAa,EAAE,oBAAoB;QACnC,mBAAmB,EAAE,mBAAmB,CAAC,QAAQ,EAAE;QACnD,WAAW,EAAE,iBAAiB;KAC/B,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QACjC,IAAI,oCAAoC,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/D,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,gDAAgD;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,EACF,CAAC,qCAAqC,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,sDAAsD;AACtD,MAAM,CAAC,MAAM,4BAA4B,GAAG,kCAAkC,CAC5E,oBAAoB,EACpB,oBAAoB,CACrB,CAAC;AAEF,MAAM,gCAAgC,GAAG,kCAAkC,CACzE,2BAA2B,CAAC,+BAA+B,CAAC,EAC5D,2BAA2B,CAAC,+BAA+B,CAAC,CAC7D,CAAC;AAMF,0EAA0E;AAC1E,4EAA4E;AAC5E,gFAAgF;AAChF,mCAAmC;AACnC,MAAM,0CAA0C,GAAG,sBAAsB,CACvE,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CACnE,EACD,CAAC,CAAC,WAAW,CAAC;IACZ,IAAI,EAAE,qBAAqB;IAC3B,4BAA4B,EAAE,8BAA8B,CAAC,QAAQ,EAAE;IACvE,kCAAkC,EAChC,mCAAmC,CAAC,QAAQ,EAAE;IAChD,KAAK,EAAE,iBAAiB;IACxB,oBAAoB,EAAE,oBAAoB;IAC1C,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,iBAAiB;IAC3B,uBAAuB,EAAE,mCAAmC,CAAC,QAAQ,EAAE;IACvE,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC/C,yBAAyB,EAAE,mCAAmC,CAAC,QAAQ,EAAE;IACzE,mBAAmB,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrE,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC7C,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IACxD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;CAClC,CAAC,CACH,CAAC;AAEF,MAAM,YAAY,GAAG,0BAA0B,CAC7C,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,EACjC,EAAE,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CACpD,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,oCAAoC,CAC3E,gBAAgB,CAAC;IACf,4BAA4B,EAC1B,oCAAoC,CAAC,QAAQ,EAAE;IACjD,sEAAsE;IACtE,gDAAgD;IAChD,eAAe,EAAE,WAAW,CAC1B,0CAA0C,EAC1C,2BAA2B,CAC5B,CAAC,QAAQ,EAAE;IACZ,gBAAgB,EAAE,qCAAqC,CAAC,QAAQ,EAAE;IAClE,eAAe,EAAE,qBAAqB;IACtC,2BAA2B,EAAE,oBAAoB;IACjD,kBAAkB,EAAE,oBAAoB;IACxC,WAAW,EAAE,CAAC;SACX,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,mHAAmH,CACpH;SACA,QAAQ,EAAE;IACb,mBAAmB,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACrD,kBAAkB,EAAE,mBAAmB,CACrC,+BAA+B,CAChC,CAAC,QAAQ,EAAE;IACZ,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,eAAe,EAAE,WAAW,CAC1B,gCAAgC,EAChC,kCAAkC,CACnC;IACD,UAAU,EAAE,2BAA2B,CACrC,oCAAoC,CACrC,CAAC,QAAQ,EAAE;IACZ,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACxC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5C,OAAO;IACT,CAAC;IACD,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,kCAAkC,EAAE,CAAC;QACxE,OAAO;IACT,CAAC;IACD,IACE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC;QACnD,OAAO,CAAC,4BAA4B,CAAC,MAAM;YACzC,qCAAqC,EACvC,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,IACE,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAC1C,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS,CAAC,EAC3C,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,wDAAwD;YACjE,IAAI,EAAE,CAAC,qBAAqB,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,CAAC,UAAU,KAAK,SAAS;QAChC,CAAC,kBAAkB;YACjB,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;YAC1C,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACtC,OAAO,CAAC,4BAA4B,KAAK,SAAS,CAAC,EACrD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,mCAAmC;YAC5C,IAAI,EAAE,CAAC,YAAY,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,CAAC,WAAW,KAAK,KAAK;QAC7B,CAAC,kBAAkB;YACjB,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;YAC1C,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACtC,OAAO,CAAC,4BAA4B,KAAK,SAAS,CAAC,EACrD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,qCAAqC;YAC9C,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;QACzE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,yDAAyD;YAClE,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,+BAA+B,CAAC;QAClD,mCAAmC,EACjC,OAAO,CAAC,4BAA4B,KAAK,SAAS;QACpD,kBAAkB,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAC9D,kBAAkB;KACnB,CAAC,CAAC;IAEH,IAAI,WAAW,KAAK,sCAAsC,EAAE,CAAC;QAC3D,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EACL,+DAA+D;YACjE,IAAI,EAAE,CAAC,8BAA8B,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,WAAW,KAAK,8BAA8B,EAAE,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,6CAA6C;YACtD,IAAI,EAAE,CAAC,iBAAiB,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IACE,IAAI,GAAG,CACL,OAAO,CAAC,eAAe;SACpB,MAAM,CAAC,aAAa,CAAC;SACrB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAC9C,CAAC,IAAI,KAAK,OAAO,CAAC,eAAe,CAAC,MAAM,EACzC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,oCAAoC;YAC7C,IAAI,EAAE,CAAC,iBAAiB,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,EACF;IACE,GAAG,sCAAsC;IACzC,GAAG,kCAAkC;CACtC,CACF,CAAC","sourcesContent":["import { z } from \"zod\";\nimport {\n  classifyDocumentSyncCheckpointFields,\n  DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE,\n  DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND,\n  DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND,\n} from \"../documentSyncCheckpoint\";\nimport {\n  documentSyncRequestEnvelopeRefinements,\n  documentSyncRequestPullRefinements,\n  documentSyncRequestRotationRefinement,\n} from \"../documentSyncRefinements\";\nimport { classifyDocumentSyncRequestMode } from \"../documentSyncRequestMode\";\nimport { isPlainObject } from \"../isPlainObject\";\nimport {\n  registerJsonSchemaFragment,\n  registerJsonSchemaRuntimeRefinements,\n  registerJsonSchemaView,\n} from \"../jsonSchema\";\nimport {\n  arraySchema,\n  boundedNonEmptyStringSchema,\n  boundedStringSchema,\n  loosePlainObject,\n  nonEmptyStringSchema,\n  plainObjectSchema,\n  positiveIntegerSchema,\n  requiredUnknownSchema,\n  sha256HexStringSchema,\n} from \"../schema\";\nimport { MAX_INLINE_CONTAINER_REKEYS } from \"../util/containerKekKeyringWire\";\nimport {\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n  MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n  MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n  MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n  MAX_DOCUMENT_SYNC_REQUEST_BYTES,\n} from \"../util/documentSyncLimits\";\nimport { isUuidV4String, UUID_V4_PATTERN } from \"../util/uuid\";\nimport { isWalLsnString, WAL_LSN_PATTERN } from \"../util/walLsn\";\nimport {\n  type ContainerMutationRequest,\n  ContainerMutationRequestSchema,\n} from \"./container\";\nimport {\n  ContainerManifestPathSchema,\n  type ContainerManifestRef,\n  ContainerManifestRefListSchema,\n  ContainerManifestRefSchema,\n  OptionalContainerManifestPathSchema,\n} from \"./containerManifestRef\";\nimport {\n  ContentKeyWrappedKeySchema,\n  contentKeyWrappingMetadataSchema,\n} from \"./contentKeyEnvelopeSchema\";\n\nexport {\n  ContainerManifestPathSchema,\n  type ContainerManifestRef,\n  ContainerManifestRefSchema,\n};\n\nexport const ContainerManifestRefArrayArraySchema = arraySchema(\n  ContainerManifestPathSchema,\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n);\n\nexport const DocumentContentKeyTargetEnvelopeSchema = loosePlainObject({\n  containerId: nonEmptyStringSchema,\n  containerKeyEpoch: positiveIntegerSchema,\n  containerKeyEpochId: nonEmptyStringSchema,\n  containerManifestHash: nonEmptyStringSchema,\n  wrappedKey: ContentKeyWrappedKeySchema,\n  wrappingMetadata: contentKeyWrappingMetadataSchema(\"document\"),\n});\n\nexport type DocumentContentKeyTargetEnvelope = z.infer<\n  typeof DocumentContentKeyTargetEnvelopeSchema\n>;\n\nexport const DocumentContentKeyBundleRequestSchema = loosePlainObject({\n  contentKeyEpoch: positiveIntegerSchema,\n  linkSetManifestHash: nonEmptyStringSchema,\n  targetHash: nonEmptyStringSchema,\n  targets: arraySchema(\n    DocumentContentKeyTargetEnvelopeSchema,\n    MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n  ),\n});\n\nexport type DocumentContentKeyBundleRequest = z.infer<\n  typeof DocumentContentKeyBundleRequestSchema\n>;\n\nfunction createDocumentOutgoingUpdateSchema(\n  encryptedDataSchema: z.ZodType<string>,\n  versionVectorSchema: z.ZodType<string>,\n) {\n  return registerJsonSchemaRuntimeRefinements(\n    loosePlainObject({\n      checkpointKind: z\n        .literal(DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND)\n        .optional(),\n      checkpointPayloadKind: z\n        .literal(DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND)\n        .optional(),\n      encryptedData: encryptedDataSchema,\n      id: registerJsonSchemaFragment(z.string().refine(isUuidV4String), {\n        pattern: UUID_V4_PATTERN.source,\n        type: \"string\",\n      }),\n      partialEndVersionVector: versionVectorSchema,\n      partialStartVersionVector: versionVectorSchema,\n      plaintextHash: nonEmptyStringSchema,\n      sourceVersionVector: versionVectorSchema.optional(),\n      writeHeader: plainObjectSchema,\n    }).superRefine((update, context) => {\n      if (classifyDocumentSyncCheckpointFields(update) === \"invalid\") {\n        context.addIssue({\n          code: \"custom\",\n          message: DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE,\n        });\n      }\n    }),\n    [documentSyncRequestRotationRefinement],\n  );\n}\n\n// Link-set rotations may carry a full-history baseline that is larger than a\n// single sync request. Their route has its own ingress policy, so keep the\n// shared update contract unbounded and apply the sync-specific ceiling only\n// where an update is embedded in DocumentSyncRequest.\nexport const DocumentOutgoingUpdateSchema = createDocumentOutgoingUpdateSchema(\n  nonEmptyStringSchema,\n  nonEmptyStringSchema,\n);\n\nconst DocumentSyncOutgoingUpdateSchema = createDocumentOutgoingUpdateSchema(\n  boundedNonEmptyStringSchema(MAX_DOCUMENT_SYNC_REQUEST_BYTES),\n  boundedNonEmptyStringSchema(MAX_DOCUMENT_SYNC_REQUEST_BYTES),\n);\n\nexport type DocumentOutgoingUpdate = z.infer<\n  typeof DocumentOutgoingUpdateSchema\n>;\n\n// Document sync published container keyrings as opaque records before the\n// canonical container-mutation schema described their fields. Keep that one\n// existing OpenAPI view stable while runtime validation delegates to the shared\n// schema used by newer operations.\nconst DocumentSyncContainerMutationRequestSchema = registerJsonSchemaView(\n  z.custom<ContainerMutationRequest>(\n    (value) => ContainerMutationRequestSchema.safeParse(value).success,\n  ),\n  z.looseObject({\n    body: requiredUnknownSchema,\n    containerManifestHistoryRefs: ContainerManifestRefListSchema.optional(),\n    destinationParentContainerPathRefs:\n      OptionalContainerManifestPathSchema.optional(),\n    event: plainObjectSchema,\n    expectedManifestHash: nonEmptyStringSchema,\n    keyEpoch: plainObjectSchema,\n    keyring: plainObjectSchema.nullable(),\n    manifest: plainObjectSchema,\n    parentContainerPathRefs: OptionalContainerManifestPathSchema.optional(),\n    parentKekState: plainObjectSchema.nullable().optional(),\n    predecessorBridge: plainObjectSchema.nullable(),\n    previousContainerPathRefs: OptionalContainerManifestPathSchema.optional(),\n    previousManifestRef: ContainerManifestRefSchema.nullable().optional(),\n    principalPolicies: z.array(plainObjectSchema),\n    userRecipientKeys: z.array(plainObjectSchema).optional(),\n    wraps: z.array(plainObjectSchema),\n  }),\n);\n\nconst WalLsnSchema = registerJsonSchemaFragment(\n  z.string().refine(isWalLsnString),\n  { pattern: WAL_LSN_PATTERN.source, type: \"string\" },\n);\n\nexport const DocumentSyncRequestSchema = registerJsonSchemaRuntimeRefinements(\n  loosePlainObject({\n    authorizingContainerPathRefs:\n      ContainerManifestRefArrayArraySchema.optional(),\n    // Each rotation carries a keyring sized by its epoch, so the batch is\n    // bounded here as well as in the runtime guard.\n    containerRekeys: arraySchema(\n      DocumentSyncContainerMutationRequestSchema,\n      MAX_INLINE_CONTAINER_REKEYS,\n    ).optional(),\n    contentKeyBundle: DocumentContentKeyBundleRequestSchema.optional(),\n    contentKeyEpoch: positiveIntegerSchema,\n    expectedLinkSetManifestHash: nonEmptyStringSchema,\n    expectedTargetHash: nonEmptyStringSchema,\n    historyMode: z\n      .literal(\"raw\")\n      .describe(\n        \"Explicit read-only recovery mode that bypasses rotation-baseline redirection and returns retained missing history\",\n      )\n      .optional(),\n    inlineRekeyCommitId: sha256HexStringSchema.optional(),\n    localVersionVector: boundedStringSchema(\n      MAX_DOCUMENT_SYNC_REQUEST_BYTES,\n    ).nullable(),\n    minLsn: WalLsnSchema.optional(),\n    outgoingUpdates: arraySchema(\n      DocumentSyncOutgoingUpdateSchema,\n      MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n    ),\n    pullCursor: boundedNonEmptyStringSchema(\n      MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n    ).optional(),\n    supportsPullPagination: z.literal(true),\n  }).superRefine((request, context) => {\n    if (!Array.isArray(request.outgoingUpdates)) {\n      return;\n    }\n    // The field schemas have already recorded their cardinality errors. Do\n    // not let the cross-field checks below rescan attacker-sized arrays after\n    // those bounded schemas deliberately stopped before item validation.\n    if (request.outgoingUpdates.length > MAX_DOCUMENT_SYNC_OUTGOING_UPDATES) {\n      return;\n    }\n    if (\n      Array.isArray(request.authorizingContainerPathRefs) &&\n      request.authorizingContainerPathRefs.length >\n        MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS\n    ) {\n      return;\n    }\n\n    const hasOutgoingUpdates = request.outgoingUpdates.length > 0;\n    if (\n      (request.containerRekeys?.length ?? 0) > 0 !==\n      (request.inlineRekeyCommitId !== undefined)\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"inline rekey commit id must accompany container rekeys\",\n        path: [\"inlineRekeyCommitId\"],\n      });\n    }\n    if (\n      request.pullCursor !== undefined &&\n      (hasOutgoingUpdates ||\n        (request.containerRekeys?.length ?? 0) > 0 ||\n        request.contentKeyBundle !== undefined ||\n        request.authorizingContainerPathRefs !== undefined)\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"continued pulls must be read-only\",\n        path: [\"pullCursor\"],\n      });\n    }\n    if (\n      request.historyMode === \"raw\" &&\n      (hasOutgoingUpdates ||\n        (request.containerRekeys?.length ?? 0) > 0 ||\n        request.contentKeyBundle !== undefined ||\n        request.authorizingContainerPathRefs !== undefined)\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"raw-history pulls must be read-only\",\n        path: [\"historyMode\"],\n      });\n    }\n    if (request.historyMode === \"raw\" && request.localVersionVector !== null) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"raw-history pulls must start from a null version vector\",\n        path: [\"localVersionVector\"],\n      });\n    }\n    const requestMode = classifyDocumentSyncRequestMode({\n      authorizingContainerPathRefsPresent:\n        request.authorizingContainerPathRefs !== undefined,\n      hasContainerRekeys: (request.containerRekeys?.length ?? 0) > 0,\n      hasOutgoingUpdates,\n    });\n\n    if (requestMode === \"invalid-authorizing-path-refs-absent\") {\n      context.addIssue({\n        code: \"custom\",\n        message:\n          \"authorizing container paths are required for outgoing updates\",\n        path: [\"authorizingContainerPathRefs\"],\n      });\n    }\n\n    if (requestMode === \"invalid-rekeys-without-write\") {\n      context.addIssue({\n        code: \"custom\",\n        message: \"container rekeys require an outgoing update\",\n        path: [\"containerRekeys\"],\n      });\n    }\n\n    if (\n      new Set(\n        request.outgoingUpdates\n          .filter(isPlainObject)\n          .map((update) => Reflect.get(update, \"id\")),\n      ).size !== request.outgoingUpdates.length\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"outgoing update ids must be unique\",\n        path: [\"outgoingUpdates\"],\n      });\n    }\n  }),\n  [\n    ...documentSyncRequestEnvelopeRefinements,\n    ...documentSyncRequestPullRefinements,\n  ],\n);\n\nexport type DocumentSyncRequest = z.infer<typeof DocumentSyncRequestSchema>;\n"]}

package/internal/validators/request/index.d.ts

@@ -1,7 +1,8 @@
 export type { AccessManifestBundleWire } from "../util/accessManifestBundle.js";
 export { type ChallengeRequest, ChallengeRequestSchema, isChallengeRequest, isVerifyRequest, type VerifyRequest, VerifyRequestSchema, } from "./auth/index.js";
-export { type BlobAttachmentBindRequest, BlobAttachmentBindRequestSchema, type BlobAttachmentDetachRequest, BlobAttachmentDetachRequestSchema, type BlobContentKeyBundleRequest, BlobContentKeyBundleRequestSchema, type BlobContentKeyTargetEnvelopeRequest, BlobContentKeyTargetEnvelopeRequestSchema, type BlobStagedBlobRequest, BlobStagedBlobRequestSchema, type CompleteMultipartBlobStageRequest, CompleteMultipartBlobStageRequestSchema, type InitiateMultipartBlobStageRequest, InitiateMultipartBlobStageRequestSchema, isBlobAttachmentBindRequest, isBlobAttachmentDetachRequest, isCompleteMultipartBlobStageRequest, isInitiateMultipartBlobStageRequest, type MultipartBlobPartCommitRequest, MultipartBlobPartCommitRequestSchema, } from "./blob.js";
+export { type BlobAttachmentBindRequest, BlobAttachmentBindRequestSchema, type BlobAttachmentDetachRequest, BlobAttachmentDetachRequestSchema, type BlobContentKeyBundleRequest, BlobContentKeyBundleRequestSchema, type BlobContentKeyTargetEnvelopeRequest, BlobContentKeyTargetEnvelopeRequestSchema, type BlobStagedBlobRequest, BlobStagedBlobRequestSchema, type InitiateMultipartBlobStageRequest, InitiateMultipartBlobStageRequestSchema, isBlobAttachmentBindRequest, isBlobAttachmentDetachRequest, isInitiateMultipartBlobStageRequest, } from "./blob.js";
 export { type ContainerMutationRequest, ContainerMutationRequestSchema, type ContainerReciteRequest, ContainerReciteRequestSchema, type ContainerRotationRequest, ContainerRotationRequestSchema, isContainerMutationRequest, isContainerReciteRequest, isContainerRotationRequest, } from "./container.js";
+export { DEFAULT_CONTAINER_DOCUMENT_LANE_PAGE_LIMIT, isListContainerDocumentLanesRequest, type ListContainerDocumentLanesRequest, ListContainerDocumentLanesRequestSchema, MAX_CONTAINER_DOCUMENT_LANE_PAGE_TOTAL, MAX_CONTAINER_DOCUMENT_LANES, } from "./containerDocumentLanes.js";
 export { type ContainerCreateWithMetadataDocumentRequest, ContainerCreateWithMetadataDocumentRequestSchema, isContainerCreateWithMetadataDocumentRequest, } from "./containerMetadata.js";
 export { isListContainerParentLanesRequest, type ListContainerParentLanesRequest, ListContainerParentLanesRequestSchema, } from "./containerParentLanes.js";
 export { type ContainerManifestRef, ContainerManifestRefArrayArraySchema, ContainerManifestRefSchema, type DocumentContentKeyBundleRequest, DocumentContentKeyBundleRequestSchema, type DocumentContentKeyTargetEnvelope, DocumentContentKeyTargetEnvelopeSchema, type DocumentCreateRequest, DocumentCreateRequestSchema, type DocumentLinkSetMutationRequest, DocumentLinkSetMutationRequestSchema, type DocumentOutgoingUpdate, DocumentOutgoingUpdateSchema, type DocumentPurgeRequest, DocumentPurgeRequestSchema, type DocumentSyncRequest, DocumentSyncRequestSchema, isContainerManifestRefArrayArray, isDocumentContentKeyBundleRequest, isDocumentCreateRequest, isDocumentLinkSetMutationRequest, isDocumentPurgeRequest, isDocumentSyncRequest, } from "./document.js";

package/internal/validators/request/index.js

@@ -1,6 +1,7 @@
 export { ChallengeRequestSchema, isChallengeRequest, isVerifyRequest, VerifyRequestSchema, } from "./auth/index.js";
-export { BlobAttachmentBindRequestSchema, BlobAttachmentDetachRequestSchema, BlobContentKeyBundleRequestSchema, BlobContentKeyTargetEnvelopeRequestSchema, BlobStagedBlobRequestSchema, CompleteMultipartBlobStageRequestSchema, InitiateMultipartBlobStageRequestSchema, isBlobAttachmentBindRequest, isBlobAttachmentDetachRequest, isCompleteMultipartBlobStageRequest, isInitiateMultipartBlobStageRequest, MultipartBlobPartCommitRequestSchema, } from "./blob.js";
+export { BlobAttachmentBindRequestSchema, BlobAttachmentDetachRequestSchema, BlobContentKeyBundleRequestSchema, BlobContentKeyTargetEnvelopeRequestSchema, BlobStagedBlobRequestSchema, InitiateMultipartBlobStageRequestSchema, isBlobAttachmentBindRequest, isBlobAttachmentDetachRequest, isInitiateMultipartBlobStageRequest, } from "./blob.js";
 export { ContainerMutationRequestSchema, ContainerReciteRequestSchema, ContainerRotationRequestSchema, isContainerMutationRequest, isContainerReciteRequest, isContainerRotationRequest, } from "./container.js";
+export { DEFAULT_CONTAINER_DOCUMENT_LANE_PAGE_LIMIT, isListContainerDocumentLanesRequest, ListContainerDocumentLanesRequestSchema, MAX_CONTAINER_DOCUMENT_LANE_PAGE_TOTAL, MAX_CONTAINER_DOCUMENT_LANES, } from "./containerDocumentLanes.js";
 export { ContainerCreateWithMetadataDocumentRequestSchema, isContainerCreateWithMetadataDocumentRequest, } from "./containerMetadata.js";
 export { isListContainerParentLanesRequest, ListContainerParentLanesRequestSchema, } from "./containerParentLanes.js";
 export { ContainerManifestRefArrayArraySchema, ContainerManifestRefSchema, DocumentContentKeyBundleRequestSchema, DocumentContentKeyTargetEnvelopeSchema, DocumentCreateRequestSchema, DocumentLinkSetMutationRequestSchema, DocumentOutgoingUpdateSchema, DocumentPurgeRequestSchema, DocumentSyncRequestSchema, isContainerManifestRefArrayArray, isDocumentContentKeyBundleRequest, isDocumentCreateRequest, isDocumentLinkSetMutationRequest, isDocumentPurgeRequest, isDocumentSyncRequest, } from "./document.js";

package/internal/validators/request/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,EAEf,mBAAmB,GACpB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAEL,+BAA+B,EAE/B,iCAAiC,EAEjC,iCAAiC,EAEjC,yCAAyC,EAEzC,2BAA2B,EAE3B,uCAAuC,EAEvC,uCAAuC,EACvC,2BAA2B,EAC3B,6BAA6B,EAC7B,mCAAmC,EACnC,mCAAmC,EAEnC,oCAAoC,GACrC,MAAM,QAAQ,CAAC;AAChB,OAAO,EAEL,8BAA8B,EAE9B,4BAA4B,EAE5B,8BAA8B,EAC9B,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,gDAAgD,EAChD,4CAA4C,GAC7C,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iCAAiC,EAEjC,qCAAqC,GACtC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,oCAAoC,EACpC,0BAA0B,EAE1B,qCAAqC,EAErC,sCAAsC,EAEtC,2BAA2B,EAE3B,oCAAoC,EAEpC,4BAA4B,EAE5B,0BAA0B,EAE1B,yBAAyB,EACzB,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,gCAAgC,EAChC,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,oCAAoC,EAEpC,8CAA8C,EAE9C,oCAAoC,EACpC,gCAAgC,EAChC,0CAA0C,EAC1C,gCAAgC,EAChC,kCAAkC,EAClC,sCAAsC,EAEtC,gCAAgC,EAEhC,sCAAsC,EAEtC,0CAA0C,GAC3C,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,+BAA+B,EAC/B,2BAA2B,EAC3B,iCAAiC,EACjC,4BAA4B,EAC5B,mCAAmC,EAEnC,qCAAqC,EAErC,gCAAgC,EAEhC,uCAAuC,GACxC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,0CAA0C,EAC1C,sCAAsC,EACtC,oCAAoC,EACpC,2BAA2B,EAE3B,wCAAwC,EAExC,oCAAoC,EAMpC,+BAA+B,GAChC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EAErB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gCAAgC,EAChC,0BAA0B,EAE1B,oCAAoC,EAEpC,mCAAmC,EAEnC,oCAAoC,EAEpC,4BAA4B,EAE5B,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,wBAAwB,EAExB,4BAA4B,GAC7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EAEtB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC","sourcesContent":["export type { AccessManifestBundleWire } from \"../util/accessManifestBundle\";\nexport {\n  type ChallengeRequest,\n  ChallengeRequestSchema,\n  isChallengeRequest,\n  isVerifyRequest,\n  type VerifyRequest,\n  VerifyRequestSchema,\n} from \"./auth\";\nexport {\n  type BlobAttachmentBindRequest,\n  BlobAttachmentBindRequestSchema,\n  type BlobAttachmentDetachRequest,\n  BlobAttachmentDetachRequestSchema,\n  type BlobContentKeyBundleRequest,\n  BlobContentKeyBundleRequestSchema,\n  type BlobContentKeyTargetEnvelopeRequest,\n  BlobContentKeyTargetEnvelopeRequestSchema,\n  type BlobStagedBlobRequest,\n  BlobStagedBlobRequestSchema,\n  type CompleteMultipartBlobStageRequest,\n  CompleteMultipartBlobStageRequestSchema,\n  type InitiateMultipartBlobStageRequest,\n  InitiateMultipartBlobStageRequestSchema,\n  isBlobAttachmentBindRequest,\n  isBlobAttachmentDetachRequest,\n  isCompleteMultipartBlobStageRequest,\n  isInitiateMultipartBlobStageRequest,\n  type MultipartBlobPartCommitRequest,\n  MultipartBlobPartCommitRequestSchema,\n} from \"./blob\";\nexport {\n  type ContainerMutationRequest,\n  ContainerMutationRequestSchema,\n  type ContainerReciteRequest,\n  ContainerReciteRequestSchema,\n  type ContainerRotationRequest,\n  ContainerRotationRequestSchema,\n  isContainerMutationRequest,\n  isContainerReciteRequest,\n  isContainerRotationRequest,\n} from \"./container\";\nexport {\n  type ContainerCreateWithMetadataDocumentRequest,\n  ContainerCreateWithMetadataDocumentRequestSchema,\n  isContainerCreateWithMetadataDocumentRequest,\n} from \"./containerMetadata\";\nexport {\n  isListContainerParentLanesRequest,\n  type ListContainerParentLanesRequest,\n  ListContainerParentLanesRequestSchema,\n} from \"./containerParentLanes\";\nexport {\n  type ContainerManifestRef,\n  ContainerManifestRefArrayArraySchema,\n  ContainerManifestRefSchema,\n  type DocumentContentKeyBundleRequest,\n  DocumentContentKeyBundleRequestSchema,\n  type DocumentContentKeyTargetEnvelope,\n  DocumentContentKeyTargetEnvelopeSchema,\n  type DocumentCreateRequest,\n  DocumentCreateRequestSchema,\n  type DocumentLinkSetMutationRequest,\n  DocumentLinkSetMutationRequestSchema,\n  type DocumentOutgoingUpdate,\n  DocumentOutgoingUpdateSchema,\n  type DocumentPurgeRequest,\n  DocumentPurgeRequestSchema,\n  type DocumentSyncRequest,\n  DocumentSyncRequestSchema,\n  isContainerManifestRefArrayArray,\n  isDocumentContentKeyBundleRequest,\n  isDocumentCreateRequest,\n  isDocumentLinkSetMutationRequest,\n  isDocumentPurgeRequest,\n  isDocumentSyncRequest,\n} from \"./document\";\nexport {\n  type CreateOrganizationGroupRequest,\n  CreateOrganizationGroupRequestSchema,\n  type CreateOrganizationGroupWithPolicyRequest,\n  CreateOrganizationGroupWithPolicyRequestSchema,\n  type DeleteOrganizationGroupRequest,\n  DeleteOrganizationGroupRequestSchema,\n  isCreateOrganizationGroupRequest,\n  isCreateOrganizationGroupWithPolicyRequest,\n  isDeleteOrganizationGroupRequest,\n  isUpdateOrganizationProfileRequest,\n  isUpdateOrganizationRosterEntryRequest,\n  type OrganizationReadModelQuery,\n  OrganizationReadModelQuerySchema,\n  type UpdateOrganizationProfileRequest,\n  UpdateOrganizationProfileRequestSchema,\n  type UpdateOrganizationRosterEntryRequest,\n  UpdateOrganizationRosterEntryRequestSchema,\n} from \"./organization\";\nexport {\n  type CreateOrganizationRequest,\n  CreateOrganizationRequestSchema,\n  isCreateOrganizationRequest,\n  isOrganizationProvisioningRequest,\n  isProvisionedDocumentRequest,\n  isProvisionedSystemContainerRequest,\n  type OrganizationProvisioningRequest,\n  OrganizationProvisioningRequestSchema,\n  type ProvisionedDocumentRequest,\n  ProvisionedDocumentRequestSchema,\n  type ProvisionedSystemContainerRequest,\n  ProvisionedSystemContainerRequestSchema,\n} from \"./organizationProvisioning\";\nexport {\n  type CommitOrganizationGroupPolicyRequest,\n  CommitOrganizationGroupPolicyRequestSchema,\n  isCommitOrganizationGroupPolicyRequest,\n  isOrganizationPrincipalPolicyRequest,\n  isPutPrincipalPolicyRequest,\n  type OrganizationPrincipalPolicyRequest,\n  OrganizationPrincipalPolicyRequestSchema,\n  type PrincipalContainerGrantRequest,\n  PrincipalContainerGrantRequestSchema,\n  type PrincipalMemberEnvelopeRequest,\n  type PrincipalProjectionMemberRequest,\n  type PrincipalStateEncryptedPayloadRequest,\n  type PrincipalStateRequest,\n  type PutPrincipalPolicyRequest,\n  PutPrincipalPolicyRequestSchema,\n} from \"./principal\";\nexport {\n  isRegistrationRequest,\n  type RegistrationRequest,\n  RegistrationRequestSchema,\n} from \"./registration\";\nexport {\n  isRevenueCatTransferWebhookEvent,\n  isRevenueCatWebhookRequest,\n  type RevenueCatIncomingWebhookEvent,\n  RevenueCatIncomingWebhookEventSchema,\n  type RevenueCatSubscriberAttribute,\n  RevenueCatSubscriberAttributeSchema,\n  type RevenueCatTransferWebhookEvent,\n  RevenueCatTransferWebhookEventSchema,\n  type RevenueCatWebhookEvent,\n  RevenueCatWebhookEventSchema,\n  type RevenueCatWebhookRequest,\n  RevenueCatWebhookRequestSchema,\n} from \"./revenuecatWebhook\";\nexport {\n  isStripeReturnUrlRequest,\n  type StripeReturnUrlRequest,\n  StripeReturnUrlRequestSchema,\n} from \"./stripeCheckout\";\nexport {\n  isStripeWebhookRequest,\n  type StripeWebhookRequest,\n  StripeWebhookRequestSchema,\n} from \"./stripeWebhook\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,EAEf,mBAAmB,GACpB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAEL,+BAA+B,EAE/B,iCAAiC,EAEjC,iCAAiC,EAEjC,yCAAyC,EAEzC,2BAA2B,EAE3B,uCAAuC,EACvC,2BAA2B,EAC3B,6BAA6B,EAC7B,mCAAmC,GACpC,MAAM,QAAQ,CAAC;AAChB,OAAO,EAEL,8BAA8B,EAE9B,4BAA4B,EAE5B,8BAA8B,EAC9B,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0CAA0C,EAC1C,mCAAmC,EAEnC,uCAAuC,EACvC,sCAAsC,EACtC,4BAA4B,GAC7B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,gDAAgD,EAChD,4CAA4C,GAC7C,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iCAAiC,EAEjC,qCAAqC,GACtC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,oCAAoC,EACpC,0BAA0B,EAE1B,qCAAqC,EAErC,sCAAsC,EAEtC,2BAA2B,EAE3B,oCAAoC,EAEpC,4BAA4B,EAE5B,0BAA0B,EAE1B,yBAAyB,EACzB,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,gCAAgC,EAChC,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,oCAAoC,EAEpC,8CAA8C,EAE9C,oCAAoC,EACpC,gCAAgC,EAChC,0CAA0C,EAC1C,gCAAgC,EAChC,kCAAkC,EAClC,sCAAsC,EAEtC,gCAAgC,EAEhC,sCAAsC,EAEtC,0CAA0C,GAC3C,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,+BAA+B,EAC/B,2BAA2B,EAC3B,iCAAiC,EACjC,4BAA4B,EAC5B,mCAAmC,EAEnC,qCAAqC,EAErC,gCAAgC,EAEhC,uCAAuC,GACxC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,0CAA0C,EAC1C,sCAAsC,EACtC,oCAAoC,EACpC,2BAA2B,EAE3B,wCAAwC,EAExC,oCAAoC,EAMpC,+BAA+B,GAChC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EAErB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gCAAgC,EAChC,0BAA0B,EAE1B,oCAAoC,EAEpC,mCAAmC,EAEnC,oCAAoC,EAEpC,4BAA4B,EAE5B,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,wBAAwB,EAExB,4BAA4B,GAC7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EAEtB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC","sourcesContent":["export type { AccessManifestBundleWire } from \"../util/accessManifestBundle\";\nexport {\n  type ChallengeRequest,\n  ChallengeRequestSchema,\n  isChallengeRequest,\n  isVerifyRequest,\n  type VerifyRequest,\n  VerifyRequestSchema,\n} from \"./auth\";\nexport {\n  type BlobAttachmentBindRequest,\n  BlobAttachmentBindRequestSchema,\n  type BlobAttachmentDetachRequest,\n  BlobAttachmentDetachRequestSchema,\n  type BlobContentKeyBundleRequest,\n  BlobContentKeyBundleRequestSchema,\n  type BlobContentKeyTargetEnvelopeRequest,\n  BlobContentKeyTargetEnvelopeRequestSchema,\n  type BlobStagedBlobRequest,\n  BlobStagedBlobRequestSchema,\n  type InitiateMultipartBlobStageRequest,\n  InitiateMultipartBlobStageRequestSchema,\n  isBlobAttachmentBindRequest,\n  isBlobAttachmentDetachRequest,\n  isInitiateMultipartBlobStageRequest,\n} from \"./blob\";\nexport {\n  type ContainerMutationRequest,\n  ContainerMutationRequestSchema,\n  type ContainerReciteRequest,\n  ContainerReciteRequestSchema,\n  type ContainerRotationRequest,\n  ContainerRotationRequestSchema,\n  isContainerMutationRequest,\n  isContainerReciteRequest,\n  isContainerRotationRequest,\n} from \"./container\";\nexport {\n  DEFAULT_CONTAINER_DOCUMENT_LANE_PAGE_LIMIT,\n  isListContainerDocumentLanesRequest,\n  type ListContainerDocumentLanesRequest,\n  ListContainerDocumentLanesRequestSchema,\n  MAX_CONTAINER_DOCUMENT_LANE_PAGE_TOTAL,\n  MAX_CONTAINER_DOCUMENT_LANES,\n} from \"./containerDocumentLanes\";\nexport {\n  type ContainerCreateWithMetadataDocumentRequest,\n  ContainerCreateWithMetadataDocumentRequestSchema,\n  isContainerCreateWithMetadataDocumentRequest,\n} from \"./containerMetadata\";\nexport {\n  isListContainerParentLanesRequest,\n  type ListContainerParentLanesRequest,\n  ListContainerParentLanesRequestSchema,\n} from \"./containerParentLanes\";\nexport {\n  type ContainerManifestRef,\n  ContainerManifestRefArrayArraySchema,\n  ContainerManifestRefSchema,\n  type DocumentContentKeyBundleRequest,\n  DocumentContentKeyBundleRequestSchema,\n  type DocumentContentKeyTargetEnvelope,\n  DocumentContentKeyTargetEnvelopeSchema,\n  type DocumentCreateRequest,\n  DocumentCreateRequestSchema,\n  type DocumentLinkSetMutationRequest,\n  DocumentLinkSetMutationRequestSchema,\n  type DocumentOutgoingUpdate,\n  DocumentOutgoingUpdateSchema,\n  type DocumentPurgeRequest,\n  DocumentPurgeRequestSchema,\n  type DocumentSyncRequest,\n  DocumentSyncRequestSchema,\n  isContainerManifestRefArrayArray,\n  isDocumentContentKeyBundleRequest,\n  isDocumentCreateRequest,\n  isDocumentLinkSetMutationRequest,\n  isDocumentPurgeRequest,\n  isDocumentSyncRequest,\n} from \"./document\";\nexport {\n  type CreateOrganizationGroupRequest,\n  CreateOrganizationGroupRequestSchema,\n  type CreateOrganizationGroupWithPolicyRequest,\n  CreateOrganizationGroupWithPolicyRequestSchema,\n  type DeleteOrganizationGroupRequest,\n  DeleteOrganizationGroupRequestSchema,\n  isCreateOrganizationGroupRequest,\n  isCreateOrganizationGroupWithPolicyRequest,\n  isDeleteOrganizationGroupRequest,\n  isUpdateOrganizationProfileRequest,\n  isUpdateOrganizationRosterEntryRequest,\n  type OrganizationReadModelQuery,\n  OrganizationReadModelQuerySchema,\n  type UpdateOrganizationProfileRequest,\n  UpdateOrganizationProfileRequestSchema,\n  type UpdateOrganizationRosterEntryRequest,\n  UpdateOrganizationRosterEntryRequestSchema,\n} from \"./organization\";\nexport {\n  type CreateOrganizationRequest,\n  CreateOrganizationRequestSchema,\n  isCreateOrganizationRequest,\n  isOrganizationProvisioningRequest,\n  isProvisionedDocumentRequest,\n  isProvisionedSystemContainerRequest,\n  type OrganizationProvisioningRequest,\n  OrganizationProvisioningRequestSchema,\n  type ProvisionedDocumentRequest,\n  ProvisionedDocumentRequestSchema,\n  type ProvisionedSystemContainerRequest,\n  ProvisionedSystemContainerRequestSchema,\n} from \"./organizationProvisioning\";\nexport {\n  type CommitOrganizationGroupPolicyRequest,\n  CommitOrganizationGroupPolicyRequestSchema,\n  isCommitOrganizationGroupPolicyRequest,\n  isOrganizationPrincipalPolicyRequest,\n  isPutPrincipalPolicyRequest,\n  type OrganizationPrincipalPolicyRequest,\n  OrganizationPrincipalPolicyRequestSchema,\n  type PrincipalContainerGrantRequest,\n  PrincipalContainerGrantRequestSchema,\n  type PrincipalMemberEnvelopeRequest,\n  type PrincipalProjectionMemberRequest,\n  type PrincipalStateEncryptedPayloadRequest,\n  type PrincipalStateRequest,\n  type PutPrincipalPolicyRequest,\n  PutPrincipalPolicyRequestSchema,\n} from \"./principal\";\nexport {\n  isRegistrationRequest,\n  type RegistrationRequest,\n  RegistrationRequestSchema,\n} from \"./registration\";\nexport {\n  isRevenueCatTransferWebhookEvent,\n  isRevenueCatWebhookRequest,\n  type RevenueCatIncomingWebhookEvent,\n  RevenueCatIncomingWebhookEventSchema,\n  type RevenueCatSubscriberAttribute,\n  RevenueCatSubscriberAttributeSchema,\n  type RevenueCatTransferWebhookEvent,\n  RevenueCatTransferWebhookEventSchema,\n  type RevenueCatWebhookEvent,\n  RevenueCatWebhookEventSchema,\n  type RevenueCatWebhookRequest,\n  RevenueCatWebhookRequestSchema,\n} from \"./revenuecatWebhook\";\nexport {\n  isStripeReturnUrlRequest,\n  type StripeReturnUrlRequest,\n  StripeReturnUrlRequestSchema,\n} from \"./stripeCheckout\";\nexport {\n  isStripeWebhookRequest,\n  type StripeWebhookRequest,\n  StripeWebhookRequestSchema,\n} from \"./stripeWebhook\";\n"]}