@tearleads/client-sdk 0.1.57 → 0.1.59

package/workflows/organizations/rosterProfileContainer.js

@@ -1,9 +1,9 @@
 import { bytesToBase64 } from "../../internal/encoding/index.js";
 import { createDocument, exportAllUpdates } from "../../internal/loro/index.js";
 export { deriveOrganizationMetadataContainerSystemSlot, deriveOrganizationRosterProfileContainerSystemSlot, } from "../../internal/validators/containerSystemSlot.js";
-import { getScopedPeerSeed } from "../../data/crdtPeerSeed.js";
 import { initializeStoredDocumentKind, writeStoredDocumentFields, } from "../../data/documents/documentKinds.js";
 import { DOCUMENTS_APP_KIND } from "../../data/persistence/documents/documentsPersistence.js";
+import { getScopedPeerSeed } from "../../data/sync/crdtPeerSeed.js";
 export const ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME = "Roster Profiles";
 export const ROSTER_PROFILE_DOCUMENT_KIND = "contact";
 // Dedicated container for org-wide public metadata (the organization display

package/workflows/organizations/rosterProfileContainer.js.map

@@ -1 +1 @@
-{"version":3,"file":"rosterProfileContainer.js","sourceRoot":"","sources":["rosterProfileContainer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnE,OAAO,EACL,6CAA6C,EAC7C,kDAAkD,GACnD,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAE3F,MAAM,CAAC,MAAM,0CAA0C,GAAG,iBAAiB,CAAC;AAC5E,MAAM,CAAC,MAAM,4BAA4B,GAAG,SAAS,CAAC;AAEtD,6EAA6E;AAC7E,gFAAgF;AAChF,4EAA4E;AAC5E,6CAA6C;AAC7C,MAAM,CAAC,MAAM,oCAAoC,GAAG,uBAAuB,CAAC;AAE5E,+EAA+E;AAC/E,2EAA2E;AAC3E,iCAAiC;AACjC,MAAM,CAAC,MAAM,oCAAoC,GAAG,KAAK,CAAC;AAE1D,MAAM,UAAU,+BAA+B,CAAC,KAG/C;IACC,OAAO,eAAe,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAI/C;IACC,OAAO;QACL,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAAC,KAK5D;IAIC,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC9E,4BAA4B,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAChE,yBAAyB,CAAC,GAAG,EAAE,4BAA4B,EAAE;QAC3D,GAAG,+BAA+B,CAAC,KAAK,CAAC;QACzC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE5C,OAAO;QACL,aAAa;QACb,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC;KACvC,CAAC;AACJ,CAAC","sourcesContent":["import { bytesToBase64 } from \"@tearleads/encoding\";\nimport { createDocument, exportAllUpdates } from \"@tearleads/loro\";\n\nexport {\n  deriveOrganizationMetadataContainerSystemSlot,\n  deriveOrganizationRosterProfileContainerSystemSlot,\n} from \"@tearleads/validators/containerSystemSlot\";\n\nimport { getScopedPeerSeed } from \"../../data/crdtPeerSeed\";\nimport {\n  initializeStoredDocumentKind,\n  writeStoredDocumentFields,\n} from \"../../data/documents/documentKinds\";\nimport { DOCUMENTS_APP_KIND } from \"../../data/persistence/documents/documentsPersistence\";\n\nexport const ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME = \"Roster Profiles\";\nexport const ROSTER_PROFILE_DOCUMENT_KIND = \"contact\";\n\n// Dedicated container for org-wide public metadata (the organization display\n// name today; logo/color later). Distinct from the Admins-scoped roster profile\n// container so it can be granted read to the reserved Members group without\n// exposing the founder's private roster PII.\nexport const ORGANIZATION_METADATA_CONTAINER_NAME = \"Organization Metadata\";\n\n// The self roster-profile nickname seeded at registration when the caller does\n// not override it. The demo host passes each pane's peer-labeled self name\n// instead (e.g. \"Peer 1 (You)\").\nexport const DEFAULT_ROSTER_PROFILE_SELF_NICKNAME = \"You\";\n\nexport function getRosterProfileDocumentLocalId(input: {\n  readonly organizationId: string;\n  readonly userId: string;\n}): string {\n  return `org-profile:${input.organizationId}:${input.userId}`;\n}\n\nexport function buildRosterProfileDocumentPatch(input: {\n  readonly encapsulationPublicKey: string;\n  readonly isSelf: boolean;\n  readonly userId: string;\n}): Record<string, string | undefined> {\n  return {\n    encapsulationPublicKey: input.encapsulationPublicKey,\n    isSelf: input.isSelf ? \"1\" : \"0\",\n    userId: input.userId,\n  };\n}\n\nexport async function createInitializedRosterProfileDocument(input: {\n  readonly encapsulationPublicKey: string;\n  readonly isSelf: boolean;\n  readonly nickname?: string | undefined;\n  readonly userId: string;\n}): Promise<{\n  readonly initialUpdate: Uint8Array;\n  readonly snapshot: string;\n}> {\n  const doc = await createDocument(await getScopedPeerSeed(DOCUMENTS_APP_KIND));\n  initializeStoredDocumentKind(doc, ROSTER_PROFILE_DOCUMENT_KIND);\n  writeStoredDocumentFields(doc, ROSTER_PROFILE_DOCUMENT_KIND, {\n    ...buildRosterProfileDocumentPatch(input),\n    ...(input.nickname ? { nickname: input.nickname } : {}),\n  });\n\n  const initialUpdate = exportAllUpdates(doc);\n\n  return {\n    initialUpdate,\n    snapshot: bytesToBase64(initialUpdate),\n  };\n}\n"]}
+{"version":3,"file":"rosterProfileContainer.js","sourceRoot":"","sources":["rosterProfileContainer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnE,OAAO,EACL,6CAA6C,EAC7C,kDAAkD,GACnD,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEjE,MAAM,CAAC,MAAM,0CAA0C,GAAG,iBAAiB,CAAC;AAC5E,MAAM,CAAC,MAAM,4BAA4B,GAAG,SAAS,CAAC;AAEtD,6EAA6E;AAC7E,gFAAgF;AAChF,4EAA4E;AAC5E,6CAA6C;AAC7C,MAAM,CAAC,MAAM,oCAAoC,GAAG,uBAAuB,CAAC;AAE5E,+EAA+E;AAC/E,2EAA2E;AAC3E,iCAAiC;AACjC,MAAM,CAAC,MAAM,oCAAoC,GAAG,KAAK,CAAC;AAE1D,MAAM,UAAU,+BAA+B,CAAC,KAG/C;IACC,OAAO,eAAe,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAI/C;IACC,OAAO;QACL,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAAC,KAK5D;IAIC,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC9E,4BAA4B,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAChE,yBAAyB,CAAC,GAAG,EAAE,4BAA4B,EAAE;QAC3D,GAAG,+BAA+B,CAAC,KAAK,CAAC;QACzC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE5C,OAAO;QACL,aAAa;QACb,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC;KACvC,CAAC;AACJ,CAAC","sourcesContent":["import { bytesToBase64 } from \"@tearleads/encoding\";\nimport { createDocument, exportAllUpdates } from \"@tearleads/loro\";\n\nexport {\n  deriveOrganizationMetadataContainerSystemSlot,\n  deriveOrganizationRosterProfileContainerSystemSlot,\n} from \"@tearleads/validators/containerSystemSlot\";\n\nimport {\n  initializeStoredDocumentKind,\n  writeStoredDocumentFields,\n} from \"../../data/documents/documentKinds\";\nimport { DOCUMENTS_APP_KIND } from \"../../data/persistence/documents/documentsPersistence\";\nimport { getScopedPeerSeed } from \"../../data/sync/crdtPeerSeed\";\n\nexport const ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME = \"Roster Profiles\";\nexport const ROSTER_PROFILE_DOCUMENT_KIND = \"contact\";\n\n// Dedicated container for org-wide public metadata (the organization display\n// name today; logo/color later). Distinct from the Admins-scoped roster profile\n// container so it can be granted read to the reserved Members group without\n// exposing the founder's private roster PII.\nexport const ORGANIZATION_METADATA_CONTAINER_NAME = \"Organization Metadata\";\n\n// The self roster-profile nickname seeded at registration when the caller does\n// not override it. The demo host passes each pane's peer-labeled self name\n// instead (e.g. \"Peer 1 (You)\").\nexport const DEFAULT_ROSTER_PROFILE_SELF_NICKNAME = \"You\";\n\nexport function getRosterProfileDocumentLocalId(input: {\n  readonly organizationId: string;\n  readonly userId: string;\n}): string {\n  return `org-profile:${input.organizationId}:${input.userId}`;\n}\n\nexport function buildRosterProfileDocumentPatch(input: {\n  readonly encapsulationPublicKey: string;\n  readonly isSelf: boolean;\n  readonly userId: string;\n}): Record<string, string | undefined> {\n  return {\n    encapsulationPublicKey: input.encapsulationPublicKey,\n    isSelf: input.isSelf ? \"1\" : \"0\",\n    userId: input.userId,\n  };\n}\n\nexport async function createInitializedRosterProfileDocument(input: {\n  readonly encapsulationPublicKey: string;\n  readonly isSelf: boolean;\n  readonly nickname?: string | undefined;\n  readonly userId: string;\n}): Promise<{\n  readonly initialUpdate: Uint8Array;\n  readonly snapshot: string;\n}> {\n  const doc = await createDocument(await getScopedPeerSeed(DOCUMENTS_APP_KIND));\n  initializeStoredDocumentKind(doc, ROSTER_PROFILE_DOCUMENT_KIND);\n  writeStoredDocumentFields(doc, ROSTER_PROFILE_DOCUMENT_KIND, {\n    ...buildRosterProfileDocumentPatch(input),\n    ...(input.nickname ? { nickname: input.nickname } : {}),\n  });\n\n  const initialUpdate = exportAllUpdates(doc);\n\n  return {\n    initialUpdate,\n    snapshot: bytesToBase64(initialUpdate),\n  };\n}\n"]}

package/workflows/organizations/runtimeCurrentGroupMutation.js

@@ -1,7 +1,7 @@
 import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
 import { scopedGroupHistoryProtection } from "../../data/principals/principalHistoryScopeProtection.js";
 import { principalPolicyReferenceFromBundle } from "../../data/principals/principalPolicyAdminSigners.js";
-import { captureAcknowledgedPrincipalPredecessor } from "./acknowledgedPrincipalPredecessor.js";
+import { captureAcknowledgedPrincipalPredecessor } from "../principals/acknowledgedPrincipalPredecessor.js";
 import { resolveCurrentGroupMutationReferences } from "./currentGroupMutationReferences.js";
 import { loadCurrentGroupPolicyMutationContext } from "./currentGroupPolicyMutationContext.js";
 import { createCurrentPrincipalMutationLease } from "./currentPrincipalMutationLease.js";

package/workflows/organizations/runtimeCurrentGroupMutation.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtimeCurrentGroupMutation.js","sourceRoot":"","sources":["runtimeCurrentGroupMutation.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AAEpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,uDAAuD,CAAC;AACrG,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AAGvG,OAAO,EAAE,uCAAuC,EAAE,MAAM,oCAAoC,CAAC;AAC7F,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AAEtF,OAAO,EAEL,mCAAmC,GACpC,MAAM,uCAAuC,CAAC;AA4C/C,sFAAsF;AACtF,MAAM,UAAU,iCAAiC,CAAC,OAAwB;IACxE,MAAM,KAAK,GAAG,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,KAAK,EACV,KAAoB,EACpB,IAAiE,EACrD,EAAE;QACd,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QACrB,OAAO,KAAK,CACV,KAAK,CAAC,YAAY,EAClB,KAAK,EAAE,EACL,UAAU,EACV,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,iBAAiB,GAClB,EAAE,EAAE;YACH,MAAM,SAAS,GAAG,KAAK,EACrB,OAAe,EAC8B,EAAE;gBAC/C,MAAM,OAAO,GAAG,MAAM,qCAAqC,CAAC;oBAC1D,GAAG,KAAK;oBACR,OAAO;oBACP,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;oBAC9B,oBAAoB;oBACpB,+BAA+B,EAAE,CAAC,cAAc,EAAE,EAAE,CAClD,OAAO,CAAC,SAAS,CAAC,+BAA+B,CAAC,cAAc,CAAC;oBACnE,YAAY;iBACb,CAAC,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,8BAA8B,CACpD,OAAO,EACP,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EACrB,OAAO,EACP,UAAU,EACV,aAAa,EACb,iBAAiB,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,CACvD,CAAC;gBACF,OAAO;oBACL,GAAG,OAAO;oBACV,GAAG,SAAS;oBACZ,SAAS;oBACT,+BAA+B,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,CACvD,qCAAqC,CAAC;wBACpC,OAAO;wBACP,WAAW,EAAE,OAAO,CAAC,qBAAqB;wBAC1C,UAAU;wBACV,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;wBAC1D,YAAY,EAAE,OAAO,CAAC,YAAY;qBACnC,CAAC;iBACL,CAAC;YACJ,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,mCAAmC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC1D,OAAO,MAAM,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,OAAwB,EACxB,KAAoB,EACpB,OAA+B,EAC/B,UAAiD,EACjD,aAAwC,EACxC,iBAAgE;IAEhE,MAAM,MAAM,GAAG;QACb,aAAa;QACb,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;KAC/D,CAAC;IACF,MAAM,aAAa,GAAkD;QACnE,GAAG,MAAM;QACT,YAAY,EAAE,kCAAkC,CAAC,OAAO,CAAC,aAAa,CAAC;QACvE,UAAU,EAAE,OAAO,CAAC,yBAAyB;YAC3C,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,4BAA4B,CAC1B,UAAU,EACV,KAAK,CAAC,cAAc,EACpB,OAAO,CAAC,YAAY,CACrB;QACL,mBAAmB,EAAE,OAAO,CAAC,yBAAyB;YACpD,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,UAAU;QACd,GAAG,CAAC,OAAO,CAAC,yBAAyB;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;KACtE,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,QAAuD,EAAE,EAAE,CAC1E,uCAAuC,CAAC;QACtC,GAAG,QAAQ;QACX,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;IACL,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GAAG,KAAK,EAC9B,OAA+B,EAChB,EAAE;QACjB,mCAAmC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,mCAAmC,CAAC;YACxC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE;gBACP,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;gBACnC;oBACE,QAAQ,EAAE,aAAa;oBACvB,WAAW,EAAE,gBAAgB;oBAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW;iBACvC;gBACD;oBACE,QAAQ,EAAE,iBAAiB;oBAC3B,WAAW,EAAE,oBAAoB;oBACjC,OAAO,EAAE,OAAO,CAAC,mBAAmB;oBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,kBAAkB;iBAC9C;aACF;YACD,WAAW,EAAE;gBACX,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAClD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW;oBAC5C,aAAa,EAAE,OAAgB;oBAC/B,YAAY,EAAE,KAAK,CAAC,mBAAmB,IAAI,EAAE;iBAC9C,CAAC,CAAC;gBACH;oBACE,WAAW,EAAE,KAAK,CAAC,OAAO;oBAC1B,aAAa,EAAE,OAAO;oBACtB,YAAY,EAAE,OAAO,CAAC,mBAAmB,IAAI,EAAE;iBAChD;aACF;YACD,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO;QACL,cAAc,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE;QAC1E,kBAAkB;KACnB,CAAC;AACJ,CAAC","sourcesContent":["import type { PrincipalPolicyHistoryProgressOptions } from \"@tearleads/crypto\";\nimport type { PutPrincipalPolicyRequest } from \"@tearleads/validators/request\";\nimport type { CommitOrganizationGroupPolicyResponse } from \"@tearleads/validators/response\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport type { CurrentPolicyReferenceResolver } from \"../../data/principals/currentPolicyReferenceResolver\";\nimport { scopedGroupHistoryProtection } from \"../../data/principals/principalHistoryScopeProtection\";\nimport { principalPolicyReferenceFromBundle } from \"../../data/principals/principalPolicyAdminSigners\";\nimport type { PrincipalPolicyPageReader } from \"../principals/principalPolicyHistoryReader\";\nimport type { PrincipalPolicyRecoveryRuntime } from \"../principals/runtimePolicyRecovery\";\nimport { captureAcknowledgedPrincipalPredecessor } from \"./acknowledgedPrincipalPredecessor\";\nimport { resolveCurrentGroupMutationReferences } from \"./currentGroupMutationReferences\";\nimport { loadCurrentGroupPolicyMutationContext } from \"./currentGroupPolicyMutationContext\";\nimport { createCurrentPrincipalMutationLease } from \"./currentPrincipalMutationLease\";\nimport type { PrincipalMutationRecoveryApi } from \"./principalMutationJournalManagement\";\nimport {\n  type AcknowledgedPrincipalCurrentInput,\n  retainAcknowledgedPrincipalCurrents,\n} from \"./retainAcknowledgedPrincipalCurrents\";\n\ntype MutationRuntime = PrincipalPolicyRecoveryRuntime & {\n  readonly apiClient: PrincipalPolicyRecoveryRuntime[\"apiClient\"] &\n    Pick<PrincipalMutationRecoveryApi, \"recoverPendingPrincipalMutation\">;\n};\n\ntype CurrentMutationContext = Awaited<\n  ReturnType<typeof loadCurrentGroupPolicyMutationContext>\n>;\n\nexport type RuntimeCurrentGroupMutationContext = CurrentMutationContext & {\n  readonly resolveAuthoredPolicyReferences: CurrentPolicyReferenceResolver;\n  readonly loadGroup: (\n    groupId: string,\n  ) => Promise<RuntimeCurrentGroupMutationContext>;\n  readonly groupRetention: Pick<\n    AcknowledgedPrincipalCurrentInput,\n    \"recovery\" | \"predecessor\"\n  >;\n  readonly retainAcknowledged: (\n    receipt: CurrentMutationReceipt,\n  ) => Promise<void>;\n};\n\ninterface CurrentMutationReceipt {\n  readonly additionalGroups?:\n    | readonly (AcknowledgedPrincipalCurrentInput & {\n        readonly retiredContainerIds?: readonly string[] | undefined;\n      })[]\n    | undefined;\n  readonly request: PutPrincipalPolicyRequest;\n  readonly organizationRequest: PutPrincipalPolicyRequest;\n  readonly response: CommitOrganizationGroupPolicyResponse;\n  readonly retiredContainerIds?: readonly string[] | undefined;\n}\n\ninterface MutationInput {\n  readonly groupId: string;\n  readonly organizationId: string;\n  readonly signerUserId: string;\n  readonly stillCurrent: () => boolean;\n}\n\n/** Keep private prefix custody inside the entire mutation and its acknowledgement. */\nexport function createRuntimeCurrentGroupMutation(runtime: MutationRuntime) {\n  const lease = createCurrentPrincipalMutationLease(runtime);\n  if (!lease) return undefined;\n  return async <T>(\n    input: MutationInput,\n    work: (context: RuntimeCurrentGroupMutationContext) => Promise<T>,\n  ): Promise<T> => {\n    input = { ...input };\n    return lease(\n      input.stillCurrent,\n      async ({\n        protection,\n        stillCurrent,\n        resolveCurrentPolicy,\n        historyReader,\n        directoryRecovery,\n      }) => {\n        const loadGroup = async (\n          groupId: string,\n        ): Promise<RuntimeCurrentGroupMutationContext> => {\n          const context = await loadCurrentGroupPolicyMutationContext({\n            ...input,\n            groupId,\n            execSql: runtime.infra.execSql,\n            resolveCurrentPolicy,\n            recoverPendingPrincipalMutation: (organizationId) =>\n              runtime.apiClient.recoverPendingPrincipalMutation(organizationId),\n            stillCurrent,\n          });\n          const retention = await createCurrentMutationRetention(\n            runtime,\n            { ...input, groupId },\n            context,\n            protection,\n            historyReader,\n            directoryRecovery(context.organizationCurrent.current),\n          );\n          return {\n            ...context,\n            ...retention,\n            loadGroup,\n            resolveAuthoredPolicyReferences: (current, references) =>\n              resolveCurrentGroupMutationReferences({\n                current,\n                predecessor: context.verifiedCurrentPolicy,\n                references,\n                readPredecessorReference: context.readPredecessorReference,\n                stillCurrent: context.stillCurrent,\n              }),\n          };\n        };\n        const context = await loadGroup(input.groupId);\n        const result = await work(context);\n        assertProjectionVerificationCurrent(context.stillCurrent);\n        return result;\n      },\n    );\n  };\n}\n\nasync function createCurrentMutationRetention(\n  runtime: MutationRuntime,\n  input: MutationInput,\n  context: CurrentMutationContext,\n  protection: PrincipalPolicyHistoryProgressOptions,\n  historyReader: PrincipalPolicyPageReader,\n  directoryRecovery: AcknowledgedPrincipalCurrentInput[\"recovery\"],\n) {\n  const common = {\n    historyReader,\n    resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,\n  };\n  const groupRecovery: AcknowledgedPrincipalCurrentInput[\"recovery\"] = {\n    ...common,\n    expectedHead: principalPolicyReferenceFromBundle(context.currentPolicy),\n    protection: context.isOrganizationAdminsGroup\n      ? protection\n      : scopedGroupHistoryProtection(\n          protection,\n          input.organizationId,\n          context.adminGroupId,\n        ),\n    historyVerification: context.isOrganizationAdminsGroup\n      ? \"direct-admins\"\n      : \"standard\",\n    ...(context.isOrganizationAdminsGroup\n      ? {}\n      : { loadExternalAuthority: async () => context.externalAuthority }),\n  };\n  const capture = (recovery: AcknowledgedPrincipalCurrentInput[\"recovery\"]) =>\n    captureAcknowledgedPrincipalPredecessor({\n      ...recovery,\n      execSql: runtime.infra.execSql,\n      organizationId: input.organizationId,\n      stillCurrent: context.stillCurrent,\n    });\n  const groupPredecessor = await capture(groupRecovery);\n  const directoryPredecessor = await capture(directoryRecovery);\n  const retainAcknowledged = async (\n    receipt: CurrentMutationReceipt,\n  ): Promise<void> => {\n    assertProjectionVerificationCurrent(context.stillCurrent);\n    await retainAcknowledgedPrincipalCurrents({\n      execSql: runtime.infra.execSql,\n      organizationId: input.organizationId,\n      entries: [\n        ...(receipt.additionalGroups ?? []),\n        {\n          recovery: groupRecovery,\n          predecessor: groupPredecessor,\n          request: receipt.request,\n          response: receipt.response.groupPolicy,\n        },\n        {\n          recovery: directoryRecovery,\n          predecessor: directoryPredecessor,\n          request: receipt.organizationRequest,\n          response: receipt.response.organizationPolicy,\n        },\n      ],\n      retirements: [\n        ...(receipt.additionalGroups ?? []).map((entry) => ({\n          principalId: entry.request.state.principalId,\n          principalType: \"group\" as const,\n          containerIds: entry.retiredContainerIds ?? [],\n        })),\n        {\n          principalId: input.groupId,\n          principalType: \"group\",\n          containerIds: receipt.retiredContainerIds ?? [],\n        },\n      ],\n      stillCurrent: context.stillCurrent,\n    });\n  };\n  return {\n    groupRetention: { recovery: groupRecovery, predecessor: groupPredecessor },\n    retainAcknowledged,\n  };\n}\n"]}
+{"version":3,"file":"runtimeCurrentGroupMutation.js","sourceRoot":"","sources":["runtimeCurrentGroupMutation.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AAEpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,uDAAuD,CAAC;AACrG,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AACvG,OAAO,EAAE,uCAAuC,EAAE,MAAM,gDAAgD,CAAC;AAGzG,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AAEtF,OAAO,EAEL,mCAAmC,GACpC,MAAM,uCAAuC,CAAC;AA4C/C,sFAAsF;AACtF,MAAM,UAAU,iCAAiC,CAAC,OAAwB;IACxE,MAAM,KAAK,GAAG,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,KAAK,EACV,KAAoB,EACpB,IAAiE,EACrD,EAAE;QACd,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QACrB,OAAO,KAAK,CACV,KAAK,CAAC,YAAY,EAClB,KAAK,EAAE,EACL,UAAU,EACV,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,iBAAiB,GAClB,EAAE,EAAE;YACH,MAAM,SAAS,GAAG,KAAK,EACrB,OAAe,EAC8B,EAAE;gBAC/C,MAAM,OAAO,GAAG,MAAM,qCAAqC,CAAC;oBAC1D,GAAG,KAAK;oBACR,OAAO;oBACP,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;oBAC9B,oBAAoB;oBACpB,+BAA+B,EAAE,CAAC,cAAc,EAAE,EAAE,CAClD,OAAO,CAAC,SAAS,CAAC,+BAA+B,CAAC,cAAc,CAAC;oBACnE,YAAY;iBACb,CAAC,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,8BAA8B,CACpD,OAAO,EACP,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EACrB,OAAO,EACP,UAAU,EACV,aAAa,EACb,iBAAiB,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,CACvD,CAAC;gBACF,OAAO;oBACL,GAAG,OAAO;oBACV,GAAG,SAAS;oBACZ,SAAS;oBACT,+BAA+B,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,CACvD,qCAAqC,CAAC;wBACpC,OAAO;wBACP,WAAW,EAAE,OAAO,CAAC,qBAAqB;wBAC1C,UAAU;wBACV,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;wBAC1D,YAAY,EAAE,OAAO,CAAC,YAAY;qBACnC,CAAC;iBACL,CAAC;YACJ,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,mCAAmC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC1D,OAAO,MAAM,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,OAAwB,EACxB,KAAoB,EACpB,OAA+B,EAC/B,UAAiD,EACjD,aAAwC,EACxC,iBAAgE;IAEhE,MAAM,MAAM,GAAG;QACb,aAAa;QACb,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;KAC/D,CAAC;IACF,MAAM,aAAa,GAAkD;QACnE,GAAG,MAAM;QACT,YAAY,EAAE,kCAAkC,CAAC,OAAO,CAAC,aAAa,CAAC;QACvE,UAAU,EAAE,OAAO,CAAC,yBAAyB;YAC3C,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,4BAA4B,CAC1B,UAAU,EACV,KAAK,CAAC,cAAc,EACpB,OAAO,CAAC,YAAY,CACrB;QACL,mBAAmB,EAAE,OAAO,CAAC,yBAAyB;YACpD,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,UAAU;QACd,GAAG,CAAC,OAAO,CAAC,yBAAyB;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;KACtE,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,QAAuD,EAAE,EAAE,CAC1E,uCAAuC,CAAC;QACtC,GAAG,QAAQ;QACX,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;IACL,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GAAG,KAAK,EAC9B,OAA+B,EAChB,EAAE;QACjB,mCAAmC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,mCAAmC,CAAC;YACxC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE;gBACP,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;gBACnC;oBACE,QAAQ,EAAE,aAAa;oBACvB,WAAW,EAAE,gBAAgB;oBAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW;iBACvC;gBACD;oBACE,QAAQ,EAAE,iBAAiB;oBAC3B,WAAW,EAAE,oBAAoB;oBACjC,OAAO,EAAE,OAAO,CAAC,mBAAmB;oBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,kBAAkB;iBAC9C;aACF;YACD,WAAW,EAAE;gBACX,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAClD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW;oBAC5C,aAAa,EAAE,OAAgB;oBAC/B,YAAY,EAAE,KAAK,CAAC,mBAAmB,IAAI,EAAE;iBAC9C,CAAC,CAAC;gBACH;oBACE,WAAW,EAAE,KAAK,CAAC,OAAO;oBAC1B,aAAa,EAAE,OAAO;oBACtB,YAAY,EAAE,OAAO,CAAC,mBAAmB,IAAI,EAAE;iBAChD;aACF;YACD,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO;QACL,cAAc,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE;QAC1E,kBAAkB;KACnB,CAAC;AACJ,CAAC","sourcesContent":["import type { PrincipalPolicyHistoryProgressOptions } from \"@tearleads/crypto\";\nimport type { PutPrincipalPolicyRequest } from \"@tearleads/validators/request\";\nimport type { CommitOrganizationGroupPolicyResponse } from \"@tearleads/validators/response\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport type { CurrentPolicyReferenceResolver } from \"../../data/principals/currentPolicyReferenceResolver\";\nimport { scopedGroupHistoryProtection } from \"../../data/principals/principalHistoryScopeProtection\";\nimport { principalPolicyReferenceFromBundle } from \"../../data/principals/principalPolicyAdminSigners\";\nimport { captureAcknowledgedPrincipalPredecessor } from \"../principals/acknowledgedPrincipalPredecessor\";\nimport type { PrincipalPolicyPageReader } from \"../principals/principalPolicyHistoryReader\";\nimport type { PrincipalPolicyRecoveryRuntime } from \"../principals/runtimePolicyRecovery\";\nimport { resolveCurrentGroupMutationReferences } from \"./currentGroupMutationReferences\";\nimport { loadCurrentGroupPolicyMutationContext } from \"./currentGroupPolicyMutationContext\";\nimport { createCurrentPrincipalMutationLease } from \"./currentPrincipalMutationLease\";\nimport type { PrincipalMutationRecoveryApi } from \"./principalMutationJournalManagement\";\nimport {\n  type AcknowledgedPrincipalCurrentInput,\n  retainAcknowledgedPrincipalCurrents,\n} from \"./retainAcknowledgedPrincipalCurrents\";\n\ntype MutationRuntime = PrincipalPolicyRecoveryRuntime & {\n  readonly apiClient: PrincipalPolicyRecoveryRuntime[\"apiClient\"] &\n    Pick<PrincipalMutationRecoveryApi, \"recoverPendingPrincipalMutation\">;\n};\n\ntype CurrentMutationContext = Awaited<\n  ReturnType<typeof loadCurrentGroupPolicyMutationContext>\n>;\n\nexport type RuntimeCurrentGroupMutationContext = CurrentMutationContext & {\n  readonly resolveAuthoredPolicyReferences: CurrentPolicyReferenceResolver;\n  readonly loadGroup: (\n    groupId: string,\n  ) => Promise<RuntimeCurrentGroupMutationContext>;\n  readonly groupRetention: Pick<\n    AcknowledgedPrincipalCurrentInput,\n    \"recovery\" | \"predecessor\"\n  >;\n  readonly retainAcknowledged: (\n    receipt: CurrentMutationReceipt,\n  ) => Promise<void>;\n};\n\ninterface CurrentMutationReceipt {\n  readonly additionalGroups?:\n    | readonly (AcknowledgedPrincipalCurrentInput & {\n        readonly retiredContainerIds?: readonly string[] | undefined;\n      })[]\n    | undefined;\n  readonly request: PutPrincipalPolicyRequest;\n  readonly organizationRequest: PutPrincipalPolicyRequest;\n  readonly response: CommitOrganizationGroupPolicyResponse;\n  readonly retiredContainerIds?: readonly string[] | undefined;\n}\n\ninterface MutationInput {\n  readonly groupId: string;\n  readonly organizationId: string;\n  readonly signerUserId: string;\n  readonly stillCurrent: () => boolean;\n}\n\n/** Keep private prefix custody inside the entire mutation and its acknowledgement. */\nexport function createRuntimeCurrentGroupMutation(runtime: MutationRuntime) {\n  const lease = createCurrentPrincipalMutationLease(runtime);\n  if (!lease) return undefined;\n  return async <T>(\n    input: MutationInput,\n    work: (context: RuntimeCurrentGroupMutationContext) => Promise<T>,\n  ): Promise<T> => {\n    input = { ...input };\n    return lease(\n      input.stillCurrent,\n      async ({\n        protection,\n        stillCurrent,\n        resolveCurrentPolicy,\n        historyReader,\n        directoryRecovery,\n      }) => {\n        const loadGroup = async (\n          groupId: string,\n        ): Promise<RuntimeCurrentGroupMutationContext> => {\n          const context = await loadCurrentGroupPolicyMutationContext({\n            ...input,\n            groupId,\n            execSql: runtime.infra.execSql,\n            resolveCurrentPolicy,\n            recoverPendingPrincipalMutation: (organizationId) =>\n              runtime.apiClient.recoverPendingPrincipalMutation(organizationId),\n            stillCurrent,\n          });\n          const retention = await createCurrentMutationRetention(\n            runtime,\n            { ...input, groupId },\n            context,\n            protection,\n            historyReader,\n            directoryRecovery(context.organizationCurrent.current),\n          );\n          return {\n            ...context,\n            ...retention,\n            loadGroup,\n            resolveAuthoredPolicyReferences: (current, references) =>\n              resolveCurrentGroupMutationReferences({\n                current,\n                predecessor: context.verifiedCurrentPolicy,\n                references,\n                readPredecessorReference: context.readPredecessorReference,\n                stillCurrent: context.stillCurrent,\n              }),\n          };\n        };\n        const context = await loadGroup(input.groupId);\n        const result = await work(context);\n        assertProjectionVerificationCurrent(context.stillCurrent);\n        return result;\n      },\n    );\n  };\n}\n\nasync function createCurrentMutationRetention(\n  runtime: MutationRuntime,\n  input: MutationInput,\n  context: CurrentMutationContext,\n  protection: PrincipalPolicyHistoryProgressOptions,\n  historyReader: PrincipalPolicyPageReader,\n  directoryRecovery: AcknowledgedPrincipalCurrentInput[\"recovery\"],\n) {\n  const common = {\n    historyReader,\n    resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,\n  };\n  const groupRecovery: AcknowledgedPrincipalCurrentInput[\"recovery\"] = {\n    ...common,\n    expectedHead: principalPolicyReferenceFromBundle(context.currentPolicy),\n    protection: context.isOrganizationAdminsGroup\n      ? protection\n      : scopedGroupHistoryProtection(\n          protection,\n          input.organizationId,\n          context.adminGroupId,\n        ),\n    historyVerification: context.isOrganizationAdminsGroup\n      ? \"direct-admins\"\n      : \"standard\",\n    ...(context.isOrganizationAdminsGroup\n      ? {}\n      : { loadExternalAuthority: async () => context.externalAuthority }),\n  };\n  const capture = (recovery: AcknowledgedPrincipalCurrentInput[\"recovery\"]) =>\n    captureAcknowledgedPrincipalPredecessor({\n      ...recovery,\n      execSql: runtime.infra.execSql,\n      organizationId: input.organizationId,\n      stillCurrent: context.stillCurrent,\n    });\n  const groupPredecessor = await capture(groupRecovery);\n  const directoryPredecessor = await capture(directoryRecovery);\n  const retainAcknowledged = async (\n    receipt: CurrentMutationReceipt,\n  ): Promise<void> => {\n    assertProjectionVerificationCurrent(context.stillCurrent);\n    await retainAcknowledgedPrincipalCurrents({\n      execSql: runtime.infra.execSql,\n      organizationId: input.organizationId,\n      entries: [\n        ...(receipt.additionalGroups ?? []),\n        {\n          recovery: groupRecovery,\n          predecessor: groupPredecessor,\n          request: receipt.request,\n          response: receipt.response.groupPolicy,\n        },\n        {\n          recovery: directoryRecovery,\n          predecessor: directoryPredecessor,\n          request: receipt.organizationRequest,\n          response: receipt.response.organizationPolicy,\n        },\n      ],\n      retirements: [\n        ...(receipt.additionalGroups ?? []).map((entry) => ({\n          principalId: entry.request.state.principalId,\n          principalType: \"group\" as const,\n          containerIds: entry.retiredContainerIds ?? [],\n        })),\n        {\n          principalId: input.groupId,\n          principalType: \"group\",\n          containerIds: receipt.retiredContainerIds ?? [],\n        },\n      ],\n      stillCurrent: context.stillCurrent,\n    });\n  };\n  return {\n    groupRetention: { recovery: groupRecovery, predecessor: groupPredecessor },\n    retainAcknowledged,\n  };\n}\n"]}

package/workflows/principals/acknowledgedPrincipalCurrents.d.ts

@@ -0,0 +1,33 @@
+import { type VerifiedPrincipalPolicyCurrent } from "../../internal/crypto/index.js";
+import type { PutPrincipalPolicyRequest } from "../../internal/validators/request/index.js";
+import type { PrincipalPolicyMutationResponse } from "../../internal/validators/response/index.js";
+import { type AcknowledgedPrincipalCurrentRetirement } from "../../data/persistence/principalCurrentAcknowledgementPersistence.js";
+import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
+import { type AcknowledgedPrincipalPredecessor } from "./acknowledgedPrincipalPredecessor.js";
+import type { PrincipalAcknowledgementChecks } from "./principalAcknowledgementChecks.js";
+import type { RecoverPrincipalPolicyHistoryOptions } from "./principalHistoryRecoveryTypes.js";
+export interface AcknowledgedPrincipalCurrentInput {
+    /** Capture before submitting the mutation; null only for a new group. */
+    readonly predecessor: AcknowledgedPrincipalPredecessor | null;
+    /** Only a newly authored group at version one; never skips a predecessor. */
+    readonly initialGroup?: boolean | undefined;
+    /** The same scoped protection and verification mode used to recover the predecessor. */
+    readonly recovery: Omit<RecoverPrincipalPolicyHistoryOptions, "execSql" | "organizationId" | "stillCurrent">;
+    readonly request: PutPrincipalPolicyRequest;
+    readonly response: PrincipalPolicyMutationResponse;
+}
+/** The acknowledged currents of one mutation, recorded together. */
+export interface AcknowledgedPrincipalCurrentBatch {
+    readonly execSql: ExecSql;
+    readonly organizationId: string;
+    readonly entries: readonly AcknowledgedPrincipalCurrentInput[];
+    readonly retirements?: readonly AcknowledgedPrincipalCurrentRetirement[] | undefined;
+    readonly stillCurrent: () => boolean;
+}
+/**
+ * Extend authenticated local progress and retain exact acknowledged artifacts
+ * atomically with pins, once `checks` accept each acknowledgement.
+ */
+export declare function recordAcknowledgedPrincipalCurrents(input: AcknowledgedPrincipalCurrentBatch & {
+    readonly checks: PrincipalAcknowledgementChecks;
+}): Promise<VerifiedPrincipalPolicyCurrent[]>;

package/workflows/principals/acknowledgedPrincipalCurrents.js

@@ -0,0 +1,140 @@
+import { KeyingVerificationError, } from "../../internal/crypto/index.js";
+import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
+import { PrincipalAcknowledgementChangedError, persistAcknowledgedPrincipalCurrents, } from "../../data/persistence/principalCurrentAcknowledgementPersistence.js";
+import { preparePrincipalHistoryEvidencePage } from "../../data/persistence/principalHistoryEvidencePersistence.js";
+import { ownPrincipalHistoryProtection } from "../../data/principals/principalHistoryProtection.js";
+import { restoreAcknowledgedPrincipalPredecessor, } from "./acknowledgedPrincipalPredecessor.js";
+import { prepareInitialGroupCurrentPublication } from "./initialPrincipalCurrentPublication.js";
+import { collectPrincipalPolicySignerPublicKeys } from "./policyVerification.js";
+import { sealPrincipalCurrentPublication, sealPrincipalCurrentStage, } from "./principalCurrentPublicationSeal.js";
+import { assertPrincipalHistoryVerificationMode, principalHistoryVerificationContext, } from "./principalHistoryRecoveryVerification.js";
+import { reconcileAcknowledgedPrincipalCurrent } from "./reconcileAcknowledgedPrincipalCurrent.js";
+async function preparePublication(options, request, response, predecessor, checks) {
+    options = {
+        ...options,
+        protection: {
+            ...options.protection,
+            context: principalHistoryVerificationContext(options),
+        },
+    };
+    const current = () => !options.signal?.aborted && options.stillCurrent();
+    assertProjectionVerificationCurrent(current);
+    const { scopeId, saved, artifacts, verifier, previous, predecessorIndexRootHash, } = await restoreAcknowledgedPrincipalPredecessor(options, predecessor);
+    const expectedHead = await checks.authoredHead(request);
+    checks.assertReceipt({ expectedHead, request, response });
+    const keys = await collectPrincipalPolicySignerPublicKeys({
+        bundle: { currentState: response.currentState, previousStates: [] },
+        resolveTrustedUserIdentity: options.resolveTrustedUserIdentity,
+    });
+    assertProjectionVerificationCurrent(current);
+    if ("error" in keys)
+        throw new KeyingVerificationError(keys.error === "not-found" ? "missing_dependency" : "signer_mismatch", "Acknowledged principal signer could not be authenticated");
+    const externalAuthority = await options.loadExternalAuthority?.(request.state.externalAuthority ? [request.state.externalAuthority] : []);
+    assertProjectionVerificationCurrent(current);
+    const policy = await checks.acknowledgeSuccessor({
+        verifiedCurrentPolicy: previous,
+        expectedHead,
+        request,
+        response: response.currentState,
+        signerPublicKeys: keys.signerPublicKeys,
+        externalAuthority,
+        stillCurrent: current,
+    });
+    const entry = {
+        state: response.currentState,
+        projection: response.currentProjection,
+        grants: response.currentGrants,
+    };
+    assertPrincipalHistoryVerificationMode(options, [entry]);
+    const predecessorStage = await sealPrincipalCurrentStage(options, previous.state, verifier, artifacts);
+    const appended = await verifier.append({
+        entries: [entry],
+        signerPublicKeys: keys.signerPublicKeys,
+        ...(externalAuthority ? { externalAuthority } : {}),
+    });
+    if (!appended.ok)
+        throw appended.error;
+    const sealed = await sealPrincipalCurrentPublication(options, scopeId, expectedHead, verifier, response);
+    assertProjectionVerificationCurrent(current);
+    return {
+        policy,
+        previousPrefixProgress: saved.progress,
+        predecessorStage,
+        predecessorIndexRootHash,
+        ...sealed,
+        evidence: await preparePrincipalHistoryEvidencePage({
+            indexRootHash: appended.value.indexRootHash,
+            scopeId,
+            organizationId: options.organizationId,
+            entries: [entry],
+            nodes: appended.value.indexNodes,
+        }),
+    };
+}
+/**
+ * Extend authenticated local progress and retain exact acknowledged artifacts
+ * atomically with pins, once `checks` accept each acknowledgement.
+ */
+export async function recordAcknowledgedPrincipalCurrents(input) {
+    const checks = input.checks;
+    const execSql = input.execSql;
+    const organizationId = input.organizationId;
+    const stillCurrent = input.stillCurrent;
+    const retirements = structuredClone(input.retirements ?? []);
+    const entries = [];
+    try {
+        assertProjectionVerificationCurrent(stillCurrent);
+        for (const entry of input.entries)
+            entries.push({
+                initialGroup: entry.initialGroup === true,
+                predecessor: structuredClone(entry.predecessor),
+                request: structuredClone(entry.request),
+                response: structuredClone(entry.response),
+                options: {
+                    ...entry.recovery,
+                    expectedHead: structuredClone(entry.recovery.expectedHead),
+                    protection: ownPrincipalHistoryProtection(entry.recovery.protection),
+                    execSql,
+                    organizationId,
+                    stillCurrent,
+                },
+            });
+        const publications = [];
+        for (const entry of entries)
+            publications.push(await (entry.initialGroup
+                ? prepareInitialGroupCurrentPublication
+                : preparePublication)(entry.options, entry.request, entry.response, entry.predecessor, checks));
+        checks.assertDirectoryBindings(organizationId, entries.map(({ response }) => response));
+        for (let attempt = 0;; attempt += 1) {
+            const reconciled = [];
+            for (const [index, publication] of publications.entries()) {
+                const entry = entries[index];
+                if (!entry)
+                    throw new Error("Missing acknowledgement entry");
+                reconciled.push(await reconcileAcknowledgedPrincipalCurrent(entry.options, publication));
+            }
+            try {
+                await persistAcknowledgedPrincipalCurrents({
+                    execSql,
+                    organizationId,
+                    entries: reconciled,
+                    retirements,
+                    stillCurrent: () => stillCurrent() &&
+                        entries.every((entry) => !entry.options.signal?.aborted),
+                });
+                break;
+            }
+            catch (error) {
+                if (!(error instanceof PrincipalAcknowledgementChangedError) ||
+                    attempt >= 7)
+                    throw error;
+            }
+        }
+        return publications.map(({ policy }) => policy);
+    }
+    finally {
+        for (const entry of entries)
+            entry.options.protection.localKey.fill(0);
+    }
+}
+//# sourceMappingURL=acknowledgedPrincipalCurrents.js.map

package/workflows/principals/acknowledgedPrincipalCurrents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acknowledgedPrincipalCurrents.js","sourceRoot":"","sources":["acknowledgedPrincipalCurrents.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAGL,oCAAoC,EACpC,oCAAoC,GACrC,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EAAE,mCAAmC,EAAE,MAAM,4DAA4D,CAAC;AACjH,OAAO,EAAE,6BAA6B,EAAE,MAAM,kDAAkD,CAAC;AAEjG,OAAO,EAEL,uCAAuC,GACxC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,qCAAqC,EAAE,MAAM,sCAAsC,CAAC;AAC7F,OAAO,EAAE,sCAAsC,EAAE,MAAM,sBAAsB,CAAC;AAE9E,OAAO,EACL,+BAA+B,EAC/B,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EACL,sCAAsC,EACtC,mCAAmC,GACpC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAC;AAgBhG,KAAK,UAAU,kBAAkB,CAC/B,OAA6C,EAC7C,OAAkC,EAClC,QAAyC,EACzC,WAAoD,EACpD,MAAsC;IAEtC,OAAO,GAAG;QACR,GAAG,OAAO;QACV,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,UAAU;YACrB,OAAO,EAAE,mCAAmC,CAAC,OAAO,CAAC;SACtD;KACF,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IACzE,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,EACJ,OAAO,EACP,KAAK,EACL,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,wBAAwB,GACzB,GAAG,MAAM,uCAAuC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,sCAAsC,CAAC;QACxD,MAAM,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,cAAc,EAAE,EAAE,EAAE;QACnE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;KAC/D,CAAC,CAAC;IACH,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,OAAO,IAAI,IAAI;QACjB,MAAM,IAAI,uBAAuB,CAC/B,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,EACrE,0DAA0D,CAC3D,CAAC;IACJ,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,qBAAqB,EAAE,CAC7D,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CACzE,CAAC;IACF,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC;QAC/C,qBAAqB,EAAE,QAAQ;QAC/B,YAAY;QACZ,OAAO;QACP,QAAQ,EAAE,QAAQ,CAAC,YAAY;QAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,iBAAiB;QACjB,YAAY,EAAE,OAAO;KACtB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG;QACZ,KAAK,EAAE,QAAQ,CAAC,YAAY;QAC5B,UAAU,EAAE,QAAQ,CAAC,iBAAiB;QACtC,MAAM,EAAE,QAAQ,CAAC,aAAa;KAC/B,CAAC;IACF,sCAAsC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,MAAM,gBAAgB,GAAG,MAAM,yBAAyB,CACtD,OAAO,EACP,QAAQ,CAAC,KAAK,EACd,QAAQ,EACR,SAAS,CACV,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACrC,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAClD,OAAO,EACP,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,QAAQ,CACT,CAAC;IACF,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO;QACL,MAAM;QACN,sBAAsB,EAAE,KAAK,CAAC,QAAQ;QACtC,gBAAgB;QAChB,wBAAwB;QACxB,GAAG,MAAM;QACT,QAAQ,EAAE,MAAM,mCAAmC,CAAC;YAClD,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;YAC3C,OAAO;YACP,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,OAAO,EAAE,CAAC,KAAK,CAAC;YAChB,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;SACjC,CAAC;KACH,CAAC;AACJ,CAAC;AAaD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,KAEC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IAC5C,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAMP,EAAE,CAAC;IACT,IAAI,CAAC;QACH,mCAAmC,CAAC,YAAY,CAAC,CAAC;QAClD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO;YAC/B,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,KAAK,CAAC,YAAY,KAAK,IAAI;gBACzC,WAAW,EAAE,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC/C,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;gBACvC,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACzC,OAAO,EAAE;oBACP,GAAG,KAAK,CAAC,QAAQ;oBACjB,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;oBAC1D,UAAU,EAAE,6BAA6B,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;oBACpE,OAAO;oBACP,cAAc;oBACd,YAAY;iBACb;aACF,CAAC,CAAC;QACL,MAAM,YAAY,GAA8C,EAAE,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,OAAO;YACzB,YAAY,CAAC,IAAI,CACf,MAAM,CAAC,KAAK,CAAC,YAAY;gBACvB,CAAC,CAAC,qCAAqC;gBACvC,CAAC,CAAC,kBAAkB,CAAC,CACrB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,WAAW,EACjB,MAAM,CACP,CACF,CAAC;QACJ,MAAM,CAAC,uBAAuB,CAC5B,cAAc,EACd,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CACxC,CAAC;QACF,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,EAAE,CAAC;YACtB,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBAC7D,UAAU,CAAC,IAAI,CACb,MAAM,qCAAqC,CACzC,KAAK,CAAC,OAAO,EACb,WAAW,CACZ,CACF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,oCAAoC,CAAC;oBACzC,OAAO;oBACP,cAAc;oBACd,OAAO,EAAE,UAAU;oBACnB,WAAW;oBACX,YAAY,EAAE,GAAG,EAAE,CACjB,YAAY,EAAE;wBACd,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;iBAC3D,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,CAAC,CAAC,KAAK,YAAY,oCAAoC,CAAC;oBACxD,OAAO,IAAI,CAAC;oBAEZ,MAAM,KAAK,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,KAAK,IAAI,OAAO;YAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;AACH,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type VerifiedPrincipalPolicyCurrent,\n} from \"@tearleads/crypto\";\nimport type { PutPrincipalPolicyRequest } from \"@tearleads/validators/request\";\nimport type { PrincipalPolicyMutationResponse } from \"@tearleads/validators/response\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport {\n  type AcknowledgedPrincipalCurrentPublication,\n  type AcknowledgedPrincipalCurrentRetirement,\n  PrincipalAcknowledgementChangedError,\n  persistAcknowledgedPrincipalCurrents,\n} from \"../../data/persistence/principalCurrentAcknowledgementPersistence\";\nimport { preparePrincipalHistoryEvidencePage } from \"../../data/persistence/principalHistoryEvidencePersistence\";\nimport { ownPrincipalHistoryProtection } from \"../../data/principals/principalHistoryProtection\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport {\n  type AcknowledgedPrincipalPredecessor,\n  restoreAcknowledgedPrincipalPredecessor,\n} from \"./acknowledgedPrincipalPredecessor\";\nimport { prepareInitialGroupCurrentPublication } from \"./initialPrincipalCurrentPublication\";\nimport { collectPrincipalPolicySignerPublicKeys } from \"./policyVerification\";\nimport type { PrincipalAcknowledgementChecks } from \"./principalAcknowledgementChecks\";\nimport {\n  sealPrincipalCurrentPublication,\n  sealPrincipalCurrentStage,\n} from \"./principalCurrentPublicationSeal\";\nimport type { RecoverPrincipalPolicyHistoryOptions } from \"./principalHistoryRecoveryTypes\";\nimport {\n  assertPrincipalHistoryVerificationMode,\n  principalHistoryVerificationContext,\n} from \"./principalHistoryRecoveryVerification\";\nimport { reconcileAcknowledgedPrincipalCurrent } from \"./reconcileAcknowledgedPrincipalCurrent\";\n\nexport interface AcknowledgedPrincipalCurrentInput {\n  /** Capture before submitting the mutation; null only for a new group. */\n  readonly predecessor: AcknowledgedPrincipalPredecessor | null;\n  /** Only a newly authored group at version one; never skips a predecessor. */\n  readonly initialGroup?: boolean | undefined;\n  /** The same scoped protection and verification mode used to recover the predecessor. */\n  readonly recovery: Omit<\n    RecoverPrincipalPolicyHistoryOptions,\n    \"execSql\" | \"organizationId\" | \"stillCurrent\"\n  >;\n  readonly request: PutPrincipalPolicyRequest;\n  readonly response: PrincipalPolicyMutationResponse;\n}\n\nasync function preparePublication(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  request: PutPrincipalPolicyRequest,\n  response: PrincipalPolicyMutationResponse,\n  predecessor: AcknowledgedPrincipalPredecessor | null,\n  checks: PrincipalAcknowledgementChecks,\n): Promise<AcknowledgedPrincipalCurrentPublication> {\n  options = {\n    ...options,\n    protection: {\n      ...options.protection,\n      context: principalHistoryVerificationContext(options),\n    },\n  };\n  const current = () => !options.signal?.aborted && options.stillCurrent();\n  assertProjectionVerificationCurrent(current);\n  const {\n    scopeId,\n    saved,\n    artifacts,\n    verifier,\n    previous,\n    predecessorIndexRootHash,\n  } = await restoreAcknowledgedPrincipalPredecessor(options, predecessor);\n  const expectedHead = await checks.authoredHead(request);\n  checks.assertReceipt({ expectedHead, request, response });\n  const keys = await collectPrincipalPolicySignerPublicKeys({\n    bundle: { currentState: response.currentState, previousStates: [] },\n    resolveTrustedUserIdentity: options.resolveTrustedUserIdentity,\n  });\n  assertProjectionVerificationCurrent(current);\n  if (\"error\" in keys)\n    throw new KeyingVerificationError(\n      keys.error === \"not-found\" ? \"missing_dependency\" : \"signer_mismatch\",\n      \"Acknowledged principal signer could not be authenticated\",\n    );\n  const externalAuthority = await options.loadExternalAuthority?.(\n    request.state.externalAuthority ? [request.state.externalAuthority] : [],\n  );\n  assertProjectionVerificationCurrent(current);\n  const policy = await checks.acknowledgeSuccessor({\n    verifiedCurrentPolicy: previous,\n    expectedHead,\n    request,\n    response: response.currentState,\n    signerPublicKeys: keys.signerPublicKeys,\n    externalAuthority,\n    stillCurrent: current,\n  });\n  const entry = {\n    state: response.currentState,\n    projection: response.currentProjection,\n    grants: response.currentGrants,\n  };\n  assertPrincipalHistoryVerificationMode(options, [entry]);\n  const predecessorStage = await sealPrincipalCurrentStage(\n    options,\n    previous.state,\n    verifier,\n    artifacts,\n  );\n  const appended = await verifier.append({\n    entries: [entry],\n    signerPublicKeys: keys.signerPublicKeys,\n    ...(externalAuthority ? { externalAuthority } : {}),\n  });\n  if (!appended.ok) throw appended.error;\n  const sealed = await sealPrincipalCurrentPublication(\n    options,\n    scopeId,\n    expectedHead,\n    verifier,\n    response,\n  );\n  assertProjectionVerificationCurrent(current);\n  return {\n    policy,\n    previousPrefixProgress: saved.progress,\n    predecessorStage,\n    predecessorIndexRootHash,\n    ...sealed,\n    evidence: await preparePrincipalHistoryEvidencePage({\n      indexRootHash: appended.value.indexRootHash,\n      scopeId,\n      organizationId: options.organizationId,\n      entries: [entry],\n      nodes: appended.value.indexNodes,\n    }),\n  };\n}\n\n/** The acknowledged currents of one mutation, recorded together. */\nexport interface AcknowledgedPrincipalCurrentBatch {\n  readonly execSql: ExecSql;\n  readonly organizationId: string;\n  readonly entries: readonly AcknowledgedPrincipalCurrentInput[];\n  readonly retirements?:\n    | readonly AcknowledgedPrincipalCurrentRetirement[]\n    | undefined;\n  readonly stillCurrent: () => boolean;\n}\n\n/**\n * Extend authenticated local progress and retain exact acknowledged artifacts\n * atomically with pins, once `checks` accept each acknowledgement.\n */\nexport async function recordAcknowledgedPrincipalCurrents(\n  input: AcknowledgedPrincipalCurrentBatch & {\n    readonly checks: PrincipalAcknowledgementChecks;\n  },\n): Promise<VerifiedPrincipalPolicyCurrent[]> {\n  const checks = input.checks;\n  const execSql = input.execSql;\n  const organizationId = input.organizationId;\n  const stillCurrent = input.stillCurrent;\n  const retirements = structuredClone(input.retirements ?? []);\n  const entries: {\n    initialGroup: boolean;\n    request: PutPrincipalPolicyRequest;\n    response: PrincipalPolicyMutationResponse;\n    options: RecoverPrincipalPolicyHistoryOptions;\n    predecessor: AcknowledgedPrincipalPredecessor | null;\n  }[] = [];\n  try {\n    assertProjectionVerificationCurrent(stillCurrent);\n    for (const entry of input.entries)\n      entries.push({\n        initialGroup: entry.initialGroup === true,\n        predecessor: structuredClone(entry.predecessor),\n        request: structuredClone(entry.request),\n        response: structuredClone(entry.response),\n        options: {\n          ...entry.recovery,\n          expectedHead: structuredClone(entry.recovery.expectedHead),\n          protection: ownPrincipalHistoryProtection(entry.recovery.protection),\n          execSql,\n          organizationId,\n          stillCurrent,\n        },\n      });\n    const publications: AcknowledgedPrincipalCurrentPublication[] = [];\n    for (const entry of entries)\n      publications.push(\n        await (entry.initialGroup\n          ? prepareInitialGroupCurrentPublication\n          : preparePublication)(\n          entry.options,\n          entry.request,\n          entry.response,\n          entry.predecessor,\n          checks,\n        ),\n      );\n    checks.assertDirectoryBindings(\n      organizationId,\n      entries.map(({ response }) => response),\n    );\n    for (let attempt = 0; ; attempt += 1) {\n      const reconciled = [];\n      for (const [index, publication] of publications.entries()) {\n        const entry = entries[index];\n        if (!entry) throw new Error(\"Missing acknowledgement entry\");\n        reconciled.push(\n          await reconcileAcknowledgedPrincipalCurrent(\n            entry.options,\n            publication,\n          ),\n        );\n      }\n      try {\n        await persistAcknowledgedPrincipalCurrents({\n          execSql,\n          organizationId,\n          entries: reconciled,\n          retirements,\n          stillCurrent: () =>\n            stillCurrent() &&\n            entries.every((entry) => !entry.options.signal?.aborted),\n        });\n        break;\n      } catch (error) {\n        if (\n          !(error instanceof PrincipalAcknowledgementChangedError) ||\n          attempt >= 7\n        )\n          throw error;\n      }\n    }\n    return publications.map(({ policy }) => policy);\n  } finally {\n    for (const entry of entries) entry.options.protection.localKey.fill(0);\n  }\n}\n"]}

package/workflows/{organizations → principals}/acknowledgedPrincipalPredecessor.d.ts

@@ -1,5 +1,5 @@
 import { type PrincipalHistoryPrefix } from "../../data/persistence/principalHistoryPrefixPersistence.js";
-import type { RecoverPrincipalPolicyHistoryOptions } from "../principals/principalHistoryRecoveryTypes.js";
+import type { RecoverPrincipalPolicyHistoryOptions } from "./principalHistoryRecoveryTypes.js";
 /** Sealed predecessor evidence, owned by a mutation before its request is sent. */
 export type AcknowledgedPrincipalPredecessor = Readonly<PrincipalHistoryPrefix>;
 /** Authenticate the entire prefix, including its scope and current artifacts. */

package/workflows/{organizations → principals}/acknowledgedPrincipalPredecessor.js

@@ -6,7 +6,7 @@ import { principalHistoryEvidenceScopeId, principalHistoryPrefixProtection, } fr
 import { ownPrincipalHistoryProtection } from "../../data/principals/principalHistoryProtection.js";
 import { parsePrincipalHistoryStageCurrent } from "../../data/principals/principalHistoryStageProtection.js";
 import { principalPolicyReferenceFromBundle } from "../../data/principals/principalPolicyAdminSigners.js";
-import { principalHistoryVerificationContext } from "../principals/principalHistoryRecoveryVerification.js";
+import { principalHistoryVerificationContext } from "./principalHistoryRecoveryVerification.js";
 /** Authenticate the entire prefix, including its scope and current artifacts. */
 export async function restoreAcknowledgedPrincipalPrefix(options, saved) {
     const scopeId = await principalHistoryEvidenceScopeId({

package/workflows/principals/acknowledgedPrincipalPredecessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acknowledgedPrincipalPredecessor.js","sourceRoot":"","sources":["acknowledgedPrincipalPredecessor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,qCAAqC,EACrC,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EACL,0BAA0B,GAE3B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,EACL,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,MAAM,kDAAkD,CAAC;AACjG,OAAO,EAAE,iCAAiC,EAAE,MAAM,uDAAuD,CAAC;AAC1G,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AAEvG,OAAO,EAAE,mCAAmC,EAAE,MAAM,wCAAwC,CAAC;AAK7F,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,OAA6C,EAC7C,KAA8C;IAE9C,MAAM,OAAO,GAAG,MAAM,+BAA+B,CAAC;QACpD,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,IAAI,EAAE,OAAO,CAAC,YAAY;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,IACE,CAAC,KAAK;QACN,KAAK,CAAC,OAAO,KAAK,OAAO;QACzB,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;QAE/C,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,+DAA+D,CAChE,CAAC;IACJ,MAAM,QAAQ,GAAG,MAAM,qCAAqC,CAC1D;QACE,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,WAAW;QAC7C,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,aAAa;KAClD,EACD,KAAK,CAAC,QAAQ,EACd,MAAM,gCAAgC,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAClE,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,iCAAiC,CAAC;QAClD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,OAAO,GAAG,CAAC;KAChC,CAAC,CAAC;IACH,IAAI,CAAC,SAAS;QACZ,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,kDAAkD,CACnD,CAAC;IACJ,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CACnC,kCAAkC,CAAC,SAAS,CAAC,CAC9C,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,KAAK,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC;QAClD,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,OAAO,CAAC,KAAK;KACvB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,OAAO;QACL,OAAO;QACP,KAAK;QACL,SAAS;QACT,QAAQ,EAAE,QAAQ,CAAC,KAAK;QACxB,QAAQ,EAAE,QAAQ,CAAC,KAAK;QACxB,OAAO,EAAE,OAAO,CAAC,KAAK;QACtB,wBAAwB,EAAE,OAAO,CAAC,KAAK,CAAC,aAAa;KACtD,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,KAA2C;IAE3C,MAAM,UAAU,GAAG,6BAA6B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG;QACd,GAAG,KAAK;QACR,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC;QACjD,UAAU,EAAE;YACV,GAAG,UAAU;YACb,OAAO,EAAE,mCAAmC,CAAC,KAAK,CAAC;SACpD;KACF,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IACzE,IAAI,CAAC;QACH,mCAAmC,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,+BAA+B,CAAC;YACpD,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,IAAI,EAAE,OAAO,CAAC,YAAY;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CACvD,OAAO,EACP,MAAM,0BAA0B,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAC3D,CAAC;QACF,mCAAmC,CAAC,OAAO,CAAC,CAAC;QAC7C,IACE,CAAC,6BAA6B,CAC5B,QAAQ,CAAC,QAAQ,CAAC,KAAK,EACvB,OAAO,CAAC,YAAY,CACrB;YAED,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;QACJ,OAAO,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;YAAS,CAAC;QACT,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,OAA6C,EAC7C,KAA8C;IAE9C,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1E,IACE,CAAC,6BAA6B,CAC5B,QAAQ,CAAC,QAAQ,CAAC,KAAK,EACvB,OAAO,CAAC,YAAY,CACrB;QAED,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,iEAAiE,CAClE,CAAC;IACJ,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  restorePrincipalPolicyHistoryVerifier,\n  verifyPrincipalPolicyCurrent,\n} from \"@tearleads/crypto\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport {\n  loadPrincipalHistoryPrefix,\n  type PrincipalHistoryPrefix,\n} from \"../../data/persistence/principalHistoryPrefixPersistence\";\nimport { principalHeadMatchesReference } from \"../../data/principals/organizationAuthorityDescriptor\";\nimport {\n  principalHistoryEvidenceScopeId,\n  principalHistoryPrefixProtection,\n} from \"../../data/principals/principalHistoryPrefixProtection\";\nimport { ownPrincipalHistoryProtection } from \"../../data/principals/principalHistoryProtection\";\nimport { parsePrincipalHistoryStageCurrent } from \"../../data/principals/principalHistoryStageProtection\";\nimport { principalPolicyReferenceFromBundle } from \"../../data/principals/principalPolicyAdminSigners\";\nimport type { RecoverPrincipalPolicyHistoryOptions } from \"./principalHistoryRecoveryTypes\";\nimport { principalHistoryVerificationContext } from \"./principalHistoryRecoveryVerification\";\n\n/** Sealed predecessor evidence, owned by a mutation before its request is sent. */\nexport type AcknowledgedPrincipalPredecessor = Readonly<PrincipalHistoryPrefix>;\n\n/** Authenticate the entire prefix, including its scope and current artifacts. */\nexport async function restoreAcknowledgedPrincipalPrefix(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  saved: AcknowledgedPrincipalPredecessor | null,\n) {\n  const scopeId = await principalHistoryEvidenceScopeId({\n    organizationId: options.organizationId,\n    head: options.expectedHead,\n    protection: options.protection,\n  });\n  if (\n    !saved ||\n    saved.scopeId !== scopeId ||\n    saved.organizationId !== options.organizationId\n  )\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      \"Acknowledgement requires its authenticated predecessor prefix\",\n    );\n  const restored = await restorePrincipalPolicyHistoryVerifier(\n    {\n      principalId: options.expectedHead.principalId,\n      principalType: options.expectedHead.principalType,\n    },\n    saved.progress,\n    await principalHistoryPrefixProtection(options.protection, saved),\n  );\n  if (!restored.ok) throw restored.error;\n  const artifacts = parsePrincipalHistoryStageCurrent({\n    currentJson: saved.currentJson,\n    afterVersion: saved.version - 1,\n  });\n  if (!artifacts)\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"Acknowledged predecessor artifacts are malformed\",\n    );\n  const history = restored.value.finish(\n    principalPolicyReferenceFromBundle(artifacts),\n  );\n  if (!history.ok) throw history.error;\n  const previous = await verifyPrincipalPolicyCurrent({\n    current: artifacts,\n    history: history.value,\n  });\n  if (!previous.ok) throw previous.error;\n  return {\n    scopeId,\n    saved,\n    artifacts,\n    verifier: restored.value,\n    previous: previous.value,\n    history: history.value,\n    predecessorIndexRootHash: history.value.indexRootHash,\n  };\n}\n\n/** Capture exact predecessor evidence while authoring, before HTTP can commit. */\nexport async function captureAcknowledgedPrincipalPredecessor(\n  input: RecoverPrincipalPolicyHistoryOptions,\n): Promise<AcknowledgedPrincipalPredecessor> {\n  const protection = ownPrincipalHistoryProtection(input.protection);\n  const options = {\n    ...input,\n    expectedHead: structuredClone(input.expectedHead),\n    protection: {\n      ...protection,\n      context: principalHistoryVerificationContext(input),\n    },\n  };\n  const current = () => !options.signal?.aborted && options.stillCurrent();\n  try {\n    assertProjectionVerificationCurrent(current);\n    const scopeId = await principalHistoryEvidenceScopeId({\n      organizationId: options.organizationId,\n      head: options.expectedHead,\n      protection: options.protection,\n    });\n    const restored = await restoreAcknowledgedPrincipalPrefix(\n      options,\n      await loadPrincipalHistoryPrefix(options.execSql, scopeId),\n    );\n    assertProjectionVerificationCurrent(current);\n    if (\n      !principalHeadMatchesReference(\n        restored.previous.state,\n        options.expectedHead,\n      )\n    )\n      throw new Error(\n        \"Principal policy changed before submission; retry the mutation\",\n      );\n    return structuredClone(restored.saved);\n  } finally {\n    protection.localKey.fill(0);\n  }\n}\n\nexport async function restoreAcknowledgedPrincipalPredecessor(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  saved: AcknowledgedPrincipalPredecessor | null,\n) {\n  const restored = await restoreAcknowledgedPrincipalPrefix(options, saved);\n  if (\n    !principalHeadMatchesReference(\n      restored.previous.state,\n      options.expectedHead,\n    )\n  )\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Acknowledgement predecessor does not match the authored request\",\n    );\n  return restored;\n}\n"]}

package/workflows/principals/index.d.ts

@@ -1,4 +1,5 @@
 export type { PrincipalHistoryProtectionLease } from "../../data/principals/principalHistoryProtection.js";
+export { type AcknowledgedPrincipalPredecessor, captureAcknowledgedPrincipalPredecessor, } from "./acknowledgedPrincipalPredecessor.js";
 export { type CachePrincipalPolicyBundlesOptions, type CacheReferencedPrincipalPoliciesOptions, cachePrincipalPolicyBundles, cacheReferencedPrincipalPolicies, } from "./policyCache.js";
 export { PrincipalPolicyHistoryReadError, type RecoveredPrincipalPolicyHistory, type RecoverPrincipalPolicyHistoryOptions, } from "./principalHistoryRecoveryTypes.js";
 export { recoverPrincipalPolicyHistory } from "./recoverPrincipalPolicyHistory.js";

package/workflows/principals/index.js

@@ -1,3 +1,4 @@
+export { captureAcknowledgedPrincipalPredecessor, } from "./acknowledgedPrincipalPredecessor.js";
 export { cachePrincipalPolicyBundles, cacheReferencedPrincipalPolicies, } from "./policyCache.js";
 export { PrincipalPolicyHistoryReadError, } from "./principalHistoryRecoveryTypes.js";
 export { recoverPrincipalPolicyHistory } from "./recoverPrincipalPolicyHistory.js";

package/workflows/principals/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,2BAA2B,EAC3B,gCAAgC,GACjC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,+BAA+B,GAGhC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAEL,8BAA8B,GAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAGL,mCAAmC,GACpC,MAAM,uCAAuC,CAAC","sourcesContent":["export type { PrincipalHistoryProtectionLease } from \"../../data/principals/principalHistoryProtection\";\nexport {\n  type CachePrincipalPolicyBundlesOptions,\n  type CacheReferencedPrincipalPoliciesOptions,\n  cachePrincipalPolicyBundles,\n  cacheReferencedPrincipalPolicies,\n} from \"./policyCache\";\nexport {\n  PrincipalPolicyHistoryReadError,\n  type RecoveredPrincipalPolicyHistory,\n  type RecoverPrincipalPolicyHistoryOptions,\n} from \"./principalHistoryRecoveryTypes\";\nexport { recoverPrincipalPolicyHistory } from \"./recoverPrincipalPolicyHistory\";\nexport {\n  type ProjectionPolicyHistoryRecoveryOptions,\n  recoverProjectionPolicyHistory,\n} from \"./recoverProjectionPolicyHistory\";\nexport {\n  type RecoveredScopedPrincipalPolicyHistory,\n  type RecoverScopedPrincipalPolicyHistoryOptions,\n  recoverScopedPrincipalPolicyHistory,\n} from \"./recoverScopedPrincipalPolicyHistory\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,uCAAuC,GACxC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAGL,2BAA2B,EAC3B,gCAAgC,GACjC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,+BAA+B,GAGhC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAEL,8BAA8B,GAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAGL,mCAAmC,GACpC,MAAM,uCAAuC,CAAC","sourcesContent":["export type { PrincipalHistoryProtectionLease } from \"../../data/principals/principalHistoryProtection\";\nexport {\n  type AcknowledgedPrincipalPredecessor,\n  captureAcknowledgedPrincipalPredecessor,\n} from \"./acknowledgedPrincipalPredecessor\";\nexport {\n  type CachePrincipalPolicyBundlesOptions,\n  type CacheReferencedPrincipalPoliciesOptions,\n  cachePrincipalPolicyBundles,\n  cacheReferencedPrincipalPolicies,\n} from \"./policyCache\";\nexport {\n  PrincipalPolicyHistoryReadError,\n  type RecoveredPrincipalPolicyHistory,\n  type RecoverPrincipalPolicyHistoryOptions,\n} from \"./principalHistoryRecoveryTypes\";\nexport { recoverPrincipalPolicyHistory } from \"./recoverPrincipalPolicyHistory\";\nexport {\n  type ProjectionPolicyHistoryRecoveryOptions,\n  recoverProjectionPolicyHistory,\n} from \"./recoverProjectionPolicyHistory\";\nexport {\n  type RecoveredScopedPrincipalPolicyHistory,\n  type RecoverScopedPrincipalPolicyHistoryOptions,\n  recoverScopedPrincipalPolicyHistory,\n} from \"./recoverScopedPrincipalPolicyHistory\";\n"]}

package/workflows/{organizations → principals}/initialPrincipalCurrentPublication.js

@@ -3,23 +3,21 @@ import { assertProjectionVerificationCurrent } from "../../data/keyingProjection
 import { preparePrincipalHistoryEvidencePage } from "../../data/persistence/principalHistoryEvidencePersistence.js";
 import { principalHeadMatchesReference } from "../../data/principals/organizationAuthorityDescriptor.js";
 import { principalHistoryEvidenceScopeId } from "../../data/principals/principalHistoryPrefixProtection.js";
-import { collectPrincipalPolicySignerPublicKeys } from "../principals/policyVerification.js";
-import { assertPrincipalHistoryVerificationMode, principalHistoryVerificationContext, } from "../principals/principalHistoryRecoveryVerification.js";
-import { groupPolicyMutationHead } from "./groupPolicyMutationHead.js";
+import { collectPrincipalPolicySignerPublicKeys } from "./policyVerification.js";
 import { sealPrincipalCurrentPublication } from "./principalCurrentPublicationSeal.js";
-import { assertPrincipalPolicyReceiptArtifacts } from "./principalPolicyReceiptArtifacts.js";
+import { assertPrincipalHistoryVerificationMode, principalHistoryVerificationContext, } from "./principalHistoryRecoveryVerification.js";
 /** Verify a newly authored group from genesis before its atomic directory publication. */
-export async function prepareInitialGroupCurrentPublication(input, request, response, predecessor) {
+export async function prepareInitialGroupCurrentPublication(input, request, response, predecessor, checks) {
     const current = () => !input.signal?.aborted && input.stillCurrent();
     assertProjectionVerificationCurrent(current);
-    const expectedHead = await groupPolicyMutationHead(request);
+    const expectedHead = await checks.authoredHead(request);
     if (predecessor !== null ||
         request.state.principalType !== "group" ||
         request.state.version !== 1 ||
         request.state.prevStateHash !== null ||
         !principalHeadMatchesReference(expectedHead, input.expectedHead))
         throw new KeyingVerificationError("object_mismatch", "Initial group publication must begin at its exact genesis");
-    assertPrincipalPolicyReceiptArtifacts({ expectedHead, request, response });
+    checks.assertReceipt({ expectedHead, request, response });
     const keys = await collectPrincipalPolicySignerPublicKeys({
         bundle: { currentState: response.currentState, previousStates: [] },
         resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,

package/workflows/principals/initialPrincipalCurrentPublication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialPrincipalCurrentPublication.js","sourceRoot":"","sources":["initialPrincipalCurrentPublication.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AAEpG,OAAO,EAAE,mCAAmC,EAAE,MAAM,4DAA4D,CAAC;AACjH,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,EAAE,+BAA+B,EAAE,MAAM,wDAAwD,CAAC;AAEzG,OAAO,EAAE,sCAAsC,EAAE,MAAM,sBAAsB,CAAC;AAE9E,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AAEpF,OAAO,EACL,sCAAsC,EACtC,mCAAmC,GACpC,MAAM,wCAAwC,CAAC;AAEhD,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,KAA2C,EAC3C,OAAkC,EAClC,QAAyC,EACzC,WAAoD,EACpD,MAAsC;IAEtC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;IACrE,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACxD,IACE,WAAW,KAAK,IAAI;QACpB,OAAO,CAAC,KAAK,CAAC,aAAa,KAAK,OAAO;QACvC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,aAAa,KAAK,IAAI;QACpC,CAAC,6BAA6B,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC;QAEhE,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,2DAA2D,CAC5D,CAAC;IACJ,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,sCAAsC,CAAC;QACxD,MAAM,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,cAAc,EAAE,EAAE,EAAE;QACnE,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;KAC7D,CAAC,CAAC;IACH,IAAI,OAAO,IAAI,IAAI;QACjB,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,iDAAiD,CAClD,CAAC;IACJ,MAAM,iBAAiB,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE,CAC3D,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CACzE,CAAC;IACF,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,oCAAoC,CAAC;QACpD,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,YAAY,CAAC,WAAW;KACtC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG;QACZ,KAAK,EAAE,QAAQ,CAAC,YAAY;QAC5B,UAAU,EAAE,QAAQ,CAAC,iBAAiB;QACtC,MAAM,EAAE,QAAQ,CAAC,aAAa;KAC/B,CAAC;IACF,sCAAsC,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACrC,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,KAAK,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC;QAChD,OAAO,EAAE,QAAQ;QACjB,OAAO,EAAE,OAAO,CAAC,KAAK;KACvB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG;QACd,GAAG,KAAK;QACR,UAAU,EAAE;YACV,GAAG,KAAK,CAAC,UAAU;YACnB,OAAO,EAAE,mCAAmC,CAAC,KAAK,CAAC;SACpD;KACF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,+BAA+B,CAAC;QACpD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAClD,OAAO,EACP,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,QAAQ,CACT,CAAC;IACF,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO;QACL,GAAG,MAAM;QACT,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,gBAAgB,EAAE,IAAI;QACtB,wBAAwB,EAAE,IAAI;QAC9B,sBAAsB,EAAE,IAAI;QAC5B,QAAQ,EAAE,MAAM,mCAAmC,CAAC;YAClD,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;YAC3C,OAAO;YACP,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE,CAAC,KAAK,CAAC;YAChB,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;SACjC,CAAC;KACH,CAAC;AACJ,CAAC","sourcesContent":["import {\n  createPrincipalPolicyHistoryVerifier,\n  KeyingVerificationError,\n  verifyPrincipalPolicyCurrent,\n} from \"@tearleads/crypto\";\nimport type { PutPrincipalPolicyRequest } from \"@tearleads/validators/request\";\nimport type { PrincipalPolicyMutationResponse } from \"@tearleads/validators/response\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport type { AcknowledgedPrincipalCurrentPublication } from \"../../data/persistence/principalCurrentAcknowledgementPersistence\";\nimport { preparePrincipalHistoryEvidencePage } from \"../../data/persistence/principalHistoryEvidencePersistence\";\nimport { principalHeadMatchesReference } from \"../../data/principals/organizationAuthorityDescriptor\";\nimport { principalHistoryEvidenceScopeId } from \"../../data/principals/principalHistoryPrefixProtection\";\nimport type { AcknowledgedPrincipalPredecessor } from \"./acknowledgedPrincipalPredecessor\";\nimport { collectPrincipalPolicySignerPublicKeys } from \"./policyVerification\";\nimport type { PrincipalAcknowledgementChecks } from \"./principalAcknowledgementChecks\";\nimport { sealPrincipalCurrentPublication } from \"./principalCurrentPublicationSeal\";\nimport type { RecoverPrincipalPolicyHistoryOptions } from \"./principalHistoryRecoveryTypes\";\nimport {\n  assertPrincipalHistoryVerificationMode,\n  principalHistoryVerificationContext,\n} from \"./principalHistoryRecoveryVerification\";\n\n/** Verify a newly authored group from genesis before its atomic directory publication. */\nexport async function prepareInitialGroupCurrentPublication(\n  input: RecoverPrincipalPolicyHistoryOptions,\n  request: PutPrincipalPolicyRequest,\n  response: PrincipalPolicyMutationResponse,\n  predecessor: AcknowledgedPrincipalPredecessor | null,\n  checks: PrincipalAcknowledgementChecks,\n): Promise<AcknowledgedPrincipalCurrentPublication> {\n  const current = () => !input.signal?.aborted && input.stillCurrent();\n  assertProjectionVerificationCurrent(current);\n  const expectedHead = await checks.authoredHead(request);\n  if (\n    predecessor !== null ||\n    request.state.principalType !== \"group\" ||\n    request.state.version !== 1 ||\n    request.state.prevStateHash !== null ||\n    !principalHeadMatchesReference(expectedHead, input.expectedHead)\n  )\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Initial group publication must begin at its exact genesis\",\n    );\n  checks.assertReceipt({ expectedHead, request, response });\n  const keys = await collectPrincipalPolicySignerPublicKeys({\n    bundle: { currentState: response.currentState, previousStates: [] },\n    resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n  });\n  if (\"error\" in keys)\n    throw new KeyingVerificationError(\n      \"signer_mismatch\",\n      \"Initial group signer could not be authenticated\",\n    );\n  const externalAuthority = await input.loadExternalAuthority?.(\n    request.state.externalAuthority ? [request.state.externalAuthority] : [],\n  );\n  assertProjectionVerificationCurrent(current);\n  const verifier = createPrincipalPolicyHistoryVerifier({\n    principalType: \"group\",\n    principalId: expectedHead.principalId,\n  });\n  const entry = {\n    state: response.currentState,\n    projection: response.currentProjection,\n    grants: response.currentGrants,\n  };\n  assertPrincipalHistoryVerificationMode(input, [entry]);\n  const appended = await verifier.append({\n    entries: [entry],\n    signerPublicKeys: keys.signerPublicKeys,\n    ...(externalAuthority ? { externalAuthority } : {}),\n  });\n  if (!appended.ok) throw appended.error;\n  const history = verifier.finish(expectedHead);\n  if (!history.ok) throw history.error;\n  const policy = await verifyPrincipalPolicyCurrent({\n    current: response,\n    history: history.value,\n  });\n  if (!policy.ok) throw policy.error;\n  const options = {\n    ...input,\n    protection: {\n      ...input.protection,\n      context: principalHistoryVerificationContext(input),\n    },\n  };\n  const scopeId = await principalHistoryEvidenceScopeId({\n    organizationId: input.organizationId,\n    head: expectedHead,\n    protection: options.protection,\n  });\n  const sealed = await sealPrincipalCurrentPublication(\n    options,\n    scopeId,\n    expectedHead,\n    verifier,\n    response,\n  );\n  assertProjectionVerificationCurrent(current);\n  return {\n    ...sealed,\n    policy: policy.value,\n    predecessorStage: null,\n    predecessorIndexRootHash: null,\n    previousPrefixProgress: null,\n    evidence: await preparePrincipalHistoryEvidencePage({\n      indexRootHash: appended.value.indexRootHash,\n      scopeId,\n      organizationId: input.organizationId,\n      entries: [entry],\n      nodes: appended.value.indexNodes,\n    }),\n  };\n}\n"]}

package/workflows/principals/policyCache.d.ts

@@ -1,5 +1,5 @@
 import type { PrincipalPolicyBundleResponse, ReferencedPrincipalStateResponse } from "../../internal/validators/response/index.js";
-import type { SecurityIncidentReporter } from "../../data/securityIncidents.js";
+import type { SecurityIncidentReporter } from "../../data/shared/securityIncidents.js";
 import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
 import type { TrustedUserIdentityResolver } from "../../data/trustedUserIdentity/index.js";
 import type { CurrentPrincipalPolicyReader } from "./currentPrincipalPolicyReader.js";

package/workflows/principals/policyCache.js

@@ -1,11 +1,11 @@
-import { errorMessage } from "../../data/errorMessage.js";
-import { isProjectionVerificationCancelledError } from "../../data/keyingProjectionVerification.js";
+import { isProjectionVerificationCancelledError } from "../../data/keyingProjectionVerification/index.js";
 import { reportAndRethrowKeyingVerificationError, rethrowKeyingVerificationError, } from "../../data/keyingProjectionVerification/error.js";
 import { dedupeReferencedPrincipalStates } from "../../data/keyingProjectionVerification/principalPolicyCache.js";
 import { loadPrincipalPolicyCheckpoint } from "../../data/persistence/keyingCheckpointPersistence.js";
 import { ensurePrincipalPolicyTables } from "../../data/persistence/principalPolicyPersistence.js";
 import { loadPrincipalPolicyBundleForReference } from "../../data/persistence/principalPolicyReferencePersistence.js";
 import { principalPolicyReferenceFromBundle } from "../../data/principals/principalPolicyAdminSigners.js";
+import { errorMessage } from "../../data/shared/errorMessage.js";
 import { externalAdminPolicyPersistenceEntries, loadOrganizationExternalAdminPolicy, } from "./externalAdminPolicy.js";
 import { persistPrincipalPolicyCacheEntries, retryPrincipalPolicyCacheAdvance, } from "./principalPolicyCacheAdvance.js";
 import { scopeReferencedPolicyForCache } from "./principalPolicyCacheScope.js";

package/workflows/principals/policyCache.js.map

@@ -1 +1 @@
-{"version":3,"file":"policyCache.js","sourceRoot":"","sources":["policyCache.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,sCAAsC,EAAE,MAAM,yCAAyC,CAAC;AACjG,OAAO,EACL,uCAAuC,EACvC,8BAA8B,GAC/B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,+BAA+B,EAAE,MAAM,8DAA8D,CAAC;AAC/G,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,qCAAqC,EAAE,MAAM,4DAA4D,CAAC;AACnH,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AAKvG,OAAO,EACL,qCAAqC,EACrC,mCAAmC,GAEpC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,kCAAkC,EAClC,gCAAgC,GACjC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAG7B,MAAM,oCAAoC,CAAC;AAkB5C,SAAS,yBAAyB,CAChC,SAA2C;IAE3C,OAAO,GAAG,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAqC;IAClE,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,aAAa,IAAI,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,4BAA4B,CACnC,OAAqD;IAErD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE5E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,IACE,CAAC,QAAQ;YACT,MAAM,CAAC,YAAY,CAAC,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,EAC3D,CAAC;YACD,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,OAAgB,EAChB,MAAoC,EACpC,SAA2C,EAC3C,0BAAuD,EACvD,GAA4C,EAC5C,uBAA0E,EAC1E,cAAsB,EACtB,YAAyC,EACzC,aAAoC,EACpC,KAAc;IAEd,MAAM,eAAe,GAAG,MAAM,6BAA6B,CACzD,OAAO,EACP,SAAS,CAAC,aAAa,EACvB,SAAS,CAAC,WAAW,CACtB,CAAC;IACF,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,YAAY,GAAG,KAAK;QACxB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,qCAAqC,CACzC,OAAO,EACP,SAAS,EACT,eAAe,CAChB,CAAC;IACN,IAAI,MAAM,GACR,YAAY;QACZ,CAAC,MAAM,MAAM,CAAC,yBAAyB,CACrC,SAAS,CAAC,aAAa,EACvB,SAAS,CAAC,WAAW,CACtB,CAAC,CAAC;IACL,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,EAAE,CACH,2CAA2C,yBAAyB,CAAC,SAAS,CAAC,EAAE,CAClF,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,UAAU,GAAG,MAAM,qCAAqC,CAAC;QAC3D,MAAM;QACN,uBAAuB;QACvB,eAAe;QACf,SAAS;QACT,0BAA0B;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,UAAU,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC;QACjD,MAAM;QACN,UAAU;QACV,eAAe,EAAE;YACf,uBAAuB;YACvB,eAAe;YACf,SAAS;YACT,0BAA0B;SAC3B;QACD,aAAa;QACb,cAAc;QACd,YAAY,EAAE,YAAY;YACxB,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,CAAC;YACxE,CAAC,CAAC,IAAI;KACT,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,EAAE,CACH,wEAAwE,yBAAyB,CAAC,SAAS,CAAC,EAAE,CAC/G,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACvB,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,MAAM,eAAe,GAAG,UAAU,CAAC,mBAAmB;QACpD,CAAC,CAAC,qCAAqC,CACnC,UAAU,CAAC,mBAAmB,CAC/B,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,cAAc,CACvE;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,gBAAgB,GAAG,SAAS;QAChC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,kCAAkC,CAAC;QACvC,OAAO,EAAE;YACP,GAAG,eAAe;YAClB,GAAG,gBAAgB;YACnB,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE;SACtC;QACD,OAAO;QACP,cAAc;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,YAAY;KACb,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KASzC;IACC,MAAM,SAAS,GAAG,kCAAkC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnE,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,eAAe,GAAG,MAAM,6BAA6B,CACzD,KAAK,CAAC,OAAO,EACb,SAAS,CAAC,aAAa,EACvB,SAAS,CAAC,WAAW,CACtB,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,qCAAqC,CAAC;QAC7D,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,eAAe;QACf,SAAS;QACT,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;KAC7D,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,UAAU,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,IAAI,SAAS,GAAmC,IAAI,CAAC;IACrD,IAAI,SAAS,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;QACxC,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,4BAA4B,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC;YACxE,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9C,IACE,CAAC,4BAA4B,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,EACtE,CAAC;YACD,KAAK,CAAC,GAAG,EAAE,CACT,qFAAqF,CACtF,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;SAAM,IAAI,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1D,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,eAAe,GAAG,UAAU,CAAC,mBAAmB;QACpD,CAAC,CAAC,qCAAqC,CACnC,UAAU,CAAC,mBAAmB,CAC/B,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,cAAc,CACvE;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,gBAAgB,GAAG,SAAS;QAChC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,kCAAkC,CAAC;QACvC,OAAO,EAAE;YACP,GAAG,eAAe;YAClB,GAAG,gBAAgB;YACnB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE;SACpD;QACD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAe,KAiBpD;IACC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,mBAAmB,GACrB,IAAI,CAAC;QACP,MAAM,uBAAuB,GAAG,GAAG,EAAE;YACnC,mBAAmB,KAAK,mCAAmC,CAAC;gBAC1D,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,cAAc,EAAE,KAAK,CAAC,cAAc;gBAEpC,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;gBAC5D,YAAY,EAAE,KAAK,CAAC,YAAY;aACjC,CAAC,CAAC;YACH,OAAO,mBAAmB,CAAC;QAC7B,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,IAAI,CAAC;gBACH,OAAO,MAAM,gCAAgC,CAAC,CAAC,KAAK,EAAE,EAAE;oBACtD,MAAM,eAAe,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;oBAC3D,IAAI,iBAAiB,GACnB,IAAI,CAAC;oBACP,OAAO,KAAK,CAAC,SAAS,CACpB,IAAI,EACJ,KAAK;wBACH,CAAC,CAAC,GAAG,EAAE,CACH,CAAC,iBAAiB;4BAChB,mCAAmC,CAAC,KAAK,CAAC,CAAC;wBACjD,CAAC,CAAC,uBAAuB,EAC3B,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,EACnD,KAAK,CACN,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,sCAAsC,CAAC,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAC;gBAC7D,MAAM,uCAAuC,CAC3C,KAAK,EACL,KAAK,CAAC,sBAAsB,EAC5B;oBACE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC7B,UAAU,EAAE,WAAW;oBACvB,SAAS,EAAE,wBAAwB;oBACnC,cAAc,EAAE,KAAK,CAAC,cAAc;iBACrC,CACF,CAAC;gBACF,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpC,KAAK,CAAC,GAAG,EAAE,CACT,2CAA2C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAC7E,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QACF,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,sCAAsC,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7D,0EAA0E;QAC1E,uCAAuC;QACvC,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,CAAC,GAAG,EAAE,CACT,uDAAuD,OAAO,EAAE,CACjE,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,EAC7C,mBAAmB,EACnB,OAAO,EACP,GAAG,EACH,cAAc,EACd,sBAAsB,EACtB,UAAU,EACV,0BAA0B,EAC1B,YAAY,GAC4B;IAGxC,OAAO,uBAAuB,CAAC;QAC7B,SAAS,EAAE,CAAC,SAAS,EAAE,uBAAuB,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,CACtE,8BAA8B,CAC5B,OAAO,EACP,mBAAmB,EACnB,SAAS,EACT,0BAA0B,EAC1B,GAAG,EACH,uBAAuB,EACvB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,KAAK,CACN;QACH,mBAAmB;QACnB,MAAM,EAAE,+BAA+B;QACvC,OAAO;QACP,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE,UAAU;QACjB,GAAG;QACH,cAAc;QAEd,sBAAsB;QACtB,0BAA0B;QAC1B,YAAY;KACb,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAA8C;IAE9C,MAAM,+BAA+B,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,EAChD,OAAO,EACP,mBAAmB,EACnB,OAAO,EACP,GAAG,EACH,cAAc,EACd,sBAAsB,EACtB,0BAA0B,EAC1B,YAAY,GACuB;IACnC,MAAM,uBAAuB,CAAC;QAC5B,SAAS,EAAE,CAAC,MAAM,EAAE,uBAAuB,EAAE,aAAa,EAAE,EAAE,CAC5D,0BAA0B,CAAC;YACzB,MAAM;YACN,OAAO;YACP,uBAAuB;YACvB,aAAa;YACb,GAAG;YACH,cAAc;YACd,0BAA0B;YAC1B,YAAY;SACb,CAAC;QACJ,mBAAmB;QACnB,MAAM,EAAE,4BAA4B;QACpC,OAAO;QACP,OAAO,EAAE,qBAAqB;QAC9B,KAAK,EAAE,OAAO;QACd,GAAG;QACH,cAAc;QAEd,sBAAsB;QACtB,0BAA0B;QAC1B,YAAY;KACb,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { VerifiedPrincipalPolicy } from \"@tearleads/crypto\";\nimport type {\n  PrincipalPolicyBundleResponse,\n  ReferencedPrincipalStateResponse,\n} from \"@tearleads/validators/response\";\nimport { errorMessage } from \"../../data/errorMessage\";\nimport { isProjectionVerificationCancelledError } from \"../../data/keyingProjectionVerification\";\nimport {\n  reportAndRethrowKeyingVerificationError,\n  rethrowKeyingVerificationError,\n} from \"../../data/keyingProjectionVerification/error\";\nimport { dedupeReferencedPrincipalStates } from \"../../data/keyingProjectionVerification/principalPolicyCache\";\nimport { loadPrincipalPolicyCheckpoint } from \"../../data/persistence/keyingCheckpointPersistence\";\nimport { ensurePrincipalPolicyTables } from \"../../data/persistence/principalPolicyPersistence\";\nimport { loadPrincipalPolicyBundleForReference } from \"../../data/persistence/principalPolicyReferencePersistence\";\nimport { principalPolicyReferenceFromBundle } from \"../../data/principals/principalPolicyAdminSigners\";\nimport type { SecurityIncidentReporter } from \"../../data/securityIncidents\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport type { TrustedUserIdentityResolver } from \"../../data/trustedUserIdentity\";\nimport type { CurrentPrincipalPolicyReader } from \"./currentPrincipalPolicyReader\";\nimport {\n  externalAdminPolicyPersistenceEntries,\n  loadOrganizationExternalAdminPolicy,\n  type VerifiedExternalAdminPolicy,\n} from \"./externalAdminPolicy\";\nimport {\n  persistPrincipalPolicyCacheEntries,\n  retryPrincipalPolicyCacheAdvance,\n} from \"./principalPolicyCacheAdvance\";\nimport { scopeReferencedPolicyForCache } from \"./principalPolicyCacheScope\";\nimport { validatePrincipalPolicyBundleForCache } from \"./principalPolicyCacheValidation\";\nimport {\n  createPolicyDirectoryLoader,\n  directoryBindsGroupReference,\n  type PolicyDirectoryLoader,\n  type VerifiedPolicyDirectory,\n} from \"./principalPolicyOrganizationScope\";\n\nexport interface CacheReferencedPrincipalPoliciesOptions {\n  currentPolicyReader: CurrentPrincipalPolicyReader;\n  execSql: ExecSql;\n  log?: (message: string) => void;\n  organizationId: string;\n  reportSecurityIncident: SecurityIncidentReporter;\n  references: ReadonlyArray<ReferencedPrincipalStateResponse> | undefined;\n  resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  stillCurrent?: (() => boolean) | undefined;\n}\n\nexport interface CachePrincipalPolicyBundlesOptions\n  extends Omit<CacheReferencedPrincipalPoliciesOptions, \"references\"> {\n  bundles: ReadonlyArray<PrincipalPolicyBundleResponse> | undefined;\n}\n\nfunction getReferencedPrincipalKey(\n  reference: ReferencedPrincipalStateResponse,\n): string {\n  return `${reference.principalType}:${reference.principalId}`;\n}\n\nfunction getBundlePrincipalKey(bundle: PrincipalPolicyBundleResponse): string {\n  return `${bundle.currentState.principalType}:${bundle.currentState.principalId}`;\n}\n\nfunction dedupePrincipalPolicyBundles(\n  bundles: ReadonlyArray<PrincipalPolicyBundleResponse>,\n): PrincipalPolicyBundleResponse[] {\n  const bundlesByPrincipal = new Map<string, PrincipalPolicyBundleResponse>();\n\n  for (const bundle of bundles) {\n    const key = getBundlePrincipalKey(bundle);\n    const previous = bundlesByPrincipal.get(key);\n    if (\n      !previous ||\n      bundle.currentState.version > previous.currentState.version\n    ) {\n      bundlesByPrincipal.set(key, bundle);\n    }\n  }\n\n  return Array.from(bundlesByPrincipal.values());\n}\n\nasync function cacheReferencedPrincipalPolicy(\n  execSql: ExecSql,\n  reader: CurrentPrincipalPolicyReader,\n  reference: ReferencedPrincipalStateResponse,\n  resolveTrustedUserIdentity: TrustedUserIdentityResolver,\n  log: ((message: string) => void) | undefined,\n  loadExternalAdminPolicy: () => Promise<VerifiedExternalAdminPolicy | null>,\n  organizationId: string,\n  stillCurrent: (() => boolean) | undefined,\n  loadDirectory: PolicyDirectoryLoader,\n  fresh: boolean,\n): Promise<VerifiedPrincipalPolicy[]> {\n  const localCheckpoint = await loadPrincipalPolicyCheckpoint(\n    execSql,\n    reference.principalType,\n    reference.principalId,\n  );\n  // Only null is a recoverable local miss. Integrity failures remain typed and\n  // must escape rather than being hidden by a canonical network retry.\n  const cachedBundle = fresh\n    ? null\n    : await loadPrincipalPolicyBundleForReference(\n        execSql,\n        reference,\n        localCheckpoint,\n      );\n  let bundle =\n    cachedBundle ??\n    (await reader.getCurrentPrincipalPolicy(\n      reference.principalType,\n      reference.principalId,\n    ));\n  if (!bundle) {\n    log?.(\n      `Principal policy cache: failed to fetch ${getReferencedPrincipalKey(reference)}`,\n    );\n    return [];\n  }\n\n  let validation = await validatePrincipalPolicyBundleForCache({\n    bundle,\n    loadExternalAdminPolicy,\n    localCheckpoint,\n    reference,\n    resolveTrustedUserIdentity,\n  });\n  if (!validation.ok) {\n    throw validation.error;\n  }\n\n  const scoped = await scopeReferencedPolicyForCache({\n    bundle,\n    validation,\n    validationInput: {\n      loadExternalAdminPolicy,\n      localCheckpoint,\n      reference,\n      resolveTrustedUserIdentity,\n    },\n    loadDirectory,\n    organizationId,\n    reloadBundle: cachedBundle\n      ? () => reader.getCurrentPrincipalPolicy(\"group\", reference.principalId)\n      : null,\n  });\n  if (!scoped) {\n    log?.(\n      `Principal policy cache: signed organization directory does not cover ${getReferencedPrincipalKey(reference)}`,\n    );\n    return [];\n  }\n  bundle = scoped.bundle;\n  validation = scoped.validation;\n  const directory = scoped.directory;\n  const externalEntries = validation.externalAdminPolicy\n    ? externalAdminPolicyPersistenceEntries(\n        validation.externalAdminPolicy,\n      ).filter(\n        (entry) => !directory || entry.policy.principalType !== \"organization\",\n      )\n    : [];\n  const directoryEntries = directory\n    ? [{ bundle: directory.bundle, policy: directory.policy }]\n    : [];\n  await persistPrincipalPolicyCacheEntries({\n    entries: [\n      ...externalEntries,\n      ...directoryEntries,\n      { bundle, policy: validation.policy },\n    ],\n    execSql,\n    organizationId,\n    updatedAt: new Date().toISOString(),\n    stillCurrent,\n  });\n  return [...externalEntries.map(({ policy }) => policy), validation.policy];\n}\n\nasync function cachePrincipalPolicyBundle(input: {\n  readonly bundle: PrincipalPolicyBundleResponse;\n  readonly execSql: ExecSql;\n  readonly loadExternalAdminPolicy: () => Promise<VerifiedExternalAdminPolicy | null>;\n  readonly log: ((message: string) => void) | undefined;\n  readonly loadDirectory: PolicyDirectoryLoader;\n  readonly organizationId: string;\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<VerifiedPrincipalPolicy[]> {\n  const reference = principalPolicyReferenceFromBundle(input.bundle);\n  // The API supplied this bundle after rejecting a write, but local storage is\n  // only updated after normal signature, signer, and checkpoint verification.\n  const localCheckpoint = await loadPrincipalPolicyCheckpoint(\n    input.execSql,\n    reference.principalType,\n    reference.principalId,\n  );\n  const validation = await validatePrincipalPolicyBundleForCache({\n    bundle: input.bundle,\n    loadExternalAdminPolicy: input.loadExternalAdminPolicy,\n    localCheckpoint,\n    reference,\n    resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n  });\n  if (!validation.ok) {\n    throw validation.error;\n  }\n\n  let directory: VerifiedPolicyDirectory | null = null;\n  if (reference.principalType === \"group\") {\n    directory = await input.loadDirectory(false);\n    if (!directoryBindsGroupReference(directory, validation.policy, reference))\n      directory = await input.loadDirectory(true);\n    if (\n      !directoryBindsGroupReference(directory, validation.policy, reference)\n    ) {\n      input.log?.(\n        \"Principal policy cache: signed organization directory does not cover supplied group\",\n      );\n      return [];\n    }\n  } else if (reference.principalId !== input.organizationId) {\n    return [];\n  }\n  const externalEntries = validation.externalAdminPolicy\n    ? externalAdminPolicyPersistenceEntries(\n        validation.externalAdminPolicy,\n      ).filter(\n        (entry) => !directory || entry.policy.principalType !== \"organization\",\n      )\n    : [];\n  const directoryEntries = directory\n    ? [{ bundle: directory.bundle, policy: directory.policy }]\n    : [];\n  await persistPrincipalPolicyCacheEntries({\n    entries: [\n      ...externalEntries,\n      ...directoryEntries,\n      { bundle: input.bundle, policy: validation.policy },\n    ],\n    execSql: input.execSql,\n    organizationId: input.organizationId,\n    updatedAt: new Date().toISOString(),\n    stillCurrent: input.stillCurrent,\n  });\n  return [...externalEntries.map(({ policy }) => policy), validation.policy];\n}\n\nasync function runPrincipalPolicyCache<Item, Result>(input: {\n  readonly cacheItem: (\n    item: Item,\n    loadExternalAdminPolicy: () => Promise<VerifiedExternalAdminPolicy | null>,\n    loadDirectory: PolicyDirectoryLoader,\n    fresh: boolean,\n  ) => Promise<readonly Result[]>;\n  readonly currentPolicyReader: CurrentPrincipalPolicyReader;\n  readonly dedupe: (items: ReadonlyArray<Item>) => Item[];\n  readonly execSql: ExecSql;\n  readonly itemKey: (item: Item) => string;\n  readonly items: ReadonlyArray<Item> | undefined;\n  readonly log: ((message: string) => void) | undefined;\n  readonly organizationId: string;\n  readonly reportSecurityIncident: SecurityIncidentReporter;\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<Result[]> {\n  if (!input.items || input.items.length === 0) {\n    return [];\n  }\n\n  try {\n    await ensurePrincipalPolicyTables(input.execSql);\n    const uniqueItems = input.dedupe(input.items);\n    const loadDirectory = createPolicyDirectoryLoader(input);\n    let externalAdminPolicy: Promise<VerifiedExternalAdminPolicy | null> | null =\n      null;\n    const loadExternalAdminPolicy = () => {\n      externalAdminPolicy ??= loadOrganizationExternalAdminPolicy({\n        currentPolicyReader: input.currentPolicyReader,\n        execSql: input.execSql,\n        organizationId: input.organizationId,\n\n        resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n        stillCurrent: input.stillCurrent,\n      });\n      return externalAdminPolicy;\n    };\n\n    const results = await Promise.all(\n      uniqueItems.map(async (item) => {\n        try {\n          return await retryPrincipalPolicyCacheAdvance((fresh) => {\n            const reloadDirectory = createPolicyDirectoryLoader(input);\n            let reloadedAuthority: Promise<VerifiedExternalAdminPolicy | null> | null =\n              null;\n            return input.cacheItem(\n              item,\n              fresh\n                ? () =>\n                    (reloadedAuthority ??=\n                      loadOrganizationExternalAdminPolicy(input))\n                : loadExternalAdminPolicy,\n              fresh ? () => reloadDirectory(true) : loadDirectory,\n              fresh,\n            );\n          });\n        } catch (error) {\n          if (isProjectionVerificationCancelledError(error)) return [];\n          await reportAndRethrowKeyingVerificationError(\n            error,\n            input.reportSecurityIncident,\n            {\n              objectId: input.itemKey(item),\n              objectKind: \"principal\",\n              operation: \"principal.policy.cache\",\n              organizationId: input.organizationId,\n            },\n          );\n          const message = errorMessage(error);\n          input.log?.(\n            `Principal policy cache: failed to store ${input.itemKey(item)}: ${message}`,\n          );\n          return [];\n        }\n      }),\n    );\n    return results.flat();\n  } catch (error) {\n    if (isProjectionVerificationCancelledError(error)) return [];\n    // Per-item verification failures were reported above before reaching this\n    // initialization/aggregation boundary.\n    rethrowKeyingVerificationError(error);\n    const message = errorMessage(error);\n    input.log?.(\n      `Principal policy cache: failed to initialize cache: ${message}`,\n    );\n    return [];\n  }\n}\n\nasync function loadReferencedPrincipalPolicies({\n  currentPolicyReader,\n  execSql,\n  log,\n  organizationId,\n  reportSecurityIncident,\n  references,\n  resolveTrustedUserIdentity,\n  stillCurrent,\n}: CacheReferencedPrincipalPoliciesOptions): Promise<\n  VerifiedPrincipalPolicy[]\n> {\n  return runPrincipalPolicyCache({\n    cacheItem: (reference, loadExternalAdminPolicy, loadDirectory, fresh) =>\n      cacheReferencedPrincipalPolicy(\n        execSql,\n        currentPolicyReader,\n        reference,\n        resolveTrustedUserIdentity,\n        log,\n        loadExternalAdminPolicy,\n        organizationId,\n        stillCurrent,\n        loadDirectory,\n        fresh,\n      ),\n    currentPolicyReader,\n    dedupe: dedupeReferencedPrincipalStates,\n    execSql,\n    itemKey: getReferencedPrincipalKey,\n    items: references,\n    log,\n    organizationId,\n\n    reportSecurityIncident,\n    resolveTrustedUserIdentity,\n    stillCurrent,\n  });\n}\n\nexport async function cacheReferencedPrincipalPolicies(\n  input: CacheReferencedPrincipalPoliciesOptions,\n): Promise<void> {\n  await loadReferencedPrincipalPolicies(input);\n}\n\nexport async function cachePrincipalPolicyBundles({\n  bundles,\n  currentPolicyReader,\n  execSql,\n  log,\n  organizationId,\n  reportSecurityIncident,\n  resolveTrustedUserIdentity,\n  stillCurrent,\n}: CachePrincipalPolicyBundlesOptions): Promise<void> {\n  await runPrincipalPolicyCache({\n    cacheItem: (bundle, loadExternalAdminPolicy, loadDirectory) =>\n      cachePrincipalPolicyBundle({\n        bundle,\n        execSql,\n        loadExternalAdminPolicy,\n        loadDirectory,\n        log,\n        organizationId,\n        resolveTrustedUserIdentity,\n        stillCurrent,\n      }),\n    currentPolicyReader,\n    dedupe: dedupePrincipalPolicyBundles,\n    execSql,\n    itemKey: getBundlePrincipalKey,\n    items: bundles,\n    log,\n    organizationId,\n\n    reportSecurityIncident,\n    resolveTrustedUserIdentity,\n    stillCurrent,\n  });\n}\n"]}
+{"version":3,"file":"policyCache.js","sourceRoot":"","sources":["policyCache.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sCAAsC,EAAE,MAAM,yCAAyC,CAAC;AACjG,OAAO,EACL,uCAAuC,EACvC,8BAA8B,GAC/B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,+BAA+B,EAAE,MAAM,8DAA8D,CAAC;AAC/G,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,qCAAqC,EAAE,MAAM,4DAA4D,CAAC;AACnH,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AACvG,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAK9D,OAAO,EACL,qCAAqC,EACrC,mCAAmC,GAEpC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,kCAAkC,EAClC,gCAAgC,GACjC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAG7B,MAAM,oCAAoC,CAAC;AAkB5C,SAAS,yBAAyB,CAChC,SAA2C;IAE3C,OAAO,GAAG,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAqC;IAClE,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,aAAa,IAAI,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,4BAA4B,CACnC,OAAqD;IAErD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE5E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,IACE,CAAC,QAAQ;YACT,MAAM,CAAC,YAAY,CAAC,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,EAC3D,CAAC;YACD,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,OAAgB,EAChB,MAAoC,EACpC,SAA2C,EAC3C,0BAAuD,EACvD,GAA4C,EAC5C,uBAA0E,EAC1E,cAAsB,EACtB,YAAyC,EACzC,aAAoC,EACpC,KAAc;IAEd,MAAM,eAAe,GAAG,MAAM,6BAA6B,CACzD,OAAO,EACP,SAAS,CAAC,aAAa,EACvB,SAAS,CAAC,WAAW,CACtB,CAAC;IACF,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,YAAY,GAAG,KAAK;QACxB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,qCAAqC,CACzC,OAAO,EACP,SAAS,EACT,eAAe,CAChB,CAAC;IACN,IAAI,MAAM,GACR,YAAY;QACZ,CAAC,MAAM,MAAM,CAAC,yBAAyB,CACrC,SAAS,CAAC,aAAa,EACvB,SAAS,CAAC,WAAW,CACtB,CAAC,CAAC;IACL,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,EAAE,CACH,2CAA2C,yBAAyB,CAAC,SAAS,CAAC,EAAE,CAClF,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,UAAU,GAAG,MAAM,qCAAqC,CAAC;QAC3D,MAAM;QACN,uBAAuB;QACvB,eAAe;QACf,SAAS;QACT,0BAA0B;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,UAAU,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC;QACjD,MAAM;QACN,UAAU;QACV,eAAe,EAAE;YACf,uBAAuB;YACvB,eAAe;YACf,SAAS;YACT,0BAA0B;SAC3B;QACD,aAAa;QACb,cAAc;QACd,YAAY,EAAE,YAAY;YACxB,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,CAAC;YACxE,CAAC,CAAC,IAAI;KACT,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,EAAE,CACH,wEAAwE,yBAAyB,CAAC,SAAS,CAAC,EAAE,CAC/G,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACvB,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,MAAM,eAAe,GAAG,UAAU,CAAC,mBAAmB;QACpD,CAAC,CAAC,qCAAqC,CACnC,UAAU,CAAC,mBAAmB,CAC/B,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,cAAc,CACvE;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,gBAAgB,GAAG,SAAS;QAChC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,kCAAkC,CAAC;QACvC,OAAO,EAAE;YACP,GAAG,eAAe;YAClB,GAAG,gBAAgB;YACnB,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE;SACtC;QACD,OAAO;QACP,cAAc;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,YAAY;KACb,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KASzC;IACC,MAAM,SAAS,GAAG,kCAAkC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnE,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,eAAe,GAAG,MAAM,6BAA6B,CACzD,KAAK,CAAC,OAAO,EACb,SAAS,CAAC,aAAa,EACvB,SAAS,CAAC,WAAW,CACtB,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,qCAAqC,CAAC;QAC7D,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,eAAe;QACf,SAAS;QACT,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;KAC7D,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,UAAU,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,IAAI,SAAS,GAAmC,IAAI,CAAC;IACrD,IAAI,SAAS,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;QACxC,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,4BAA4B,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC;YACxE,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9C,IACE,CAAC,4BAA4B,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,EACtE,CAAC;YACD,KAAK,CAAC,GAAG,EAAE,CACT,qFAAqF,CACtF,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;SAAM,IAAI,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1D,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,eAAe,GAAG,UAAU,CAAC,mBAAmB;QACpD,CAAC,CAAC,qCAAqC,CACnC,UAAU,CAAC,mBAAmB,CAC/B,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,cAAc,CACvE;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,gBAAgB,GAAG,SAAS;QAChC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,kCAAkC,CAAC;QACvC,OAAO,EAAE;YACP,GAAG,eAAe;YAClB,GAAG,gBAAgB;YACnB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE;SACpD;QACD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAe,KAiBpD;IACC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,mBAAmB,GACrB,IAAI,CAAC;QACP,MAAM,uBAAuB,GAAG,GAAG,EAAE;YACnC,mBAAmB,KAAK,mCAAmC,CAAC;gBAC1D,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,cAAc,EAAE,KAAK,CAAC,cAAc;gBAEpC,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;gBAC5D,YAAY,EAAE,KAAK,CAAC,YAAY;aACjC,CAAC,CAAC;YACH,OAAO,mBAAmB,CAAC;QAC7B,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,IAAI,CAAC;gBACH,OAAO,MAAM,gCAAgC,CAAC,CAAC,KAAK,EAAE,EAAE;oBACtD,MAAM,eAAe,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;oBAC3D,IAAI,iBAAiB,GACnB,IAAI,CAAC;oBACP,OAAO,KAAK,CAAC,SAAS,CACpB,IAAI,EACJ,KAAK;wBACH,CAAC,CAAC,GAAG,EAAE,CACH,CAAC,iBAAiB;4BAChB,mCAAmC,CAAC,KAAK,CAAC,CAAC;wBACjD,CAAC,CAAC,uBAAuB,EAC3B,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,EACnD,KAAK,CACN,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,sCAAsC,CAAC,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAC;gBAC7D,MAAM,uCAAuC,CAC3C,KAAK,EACL,KAAK,CAAC,sBAAsB,EAC5B;oBACE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC7B,UAAU,EAAE,WAAW;oBACvB,SAAS,EAAE,wBAAwB;oBACnC,cAAc,EAAE,KAAK,CAAC,cAAc;iBACrC,CACF,CAAC;gBACF,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpC,KAAK,CAAC,GAAG,EAAE,CACT,2CAA2C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAC7E,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QACF,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,sCAAsC,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7D,0EAA0E;QAC1E,uCAAuC;QACvC,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,CAAC,GAAG,EAAE,CACT,uDAAuD,OAAO,EAAE,CACjE,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,EAC7C,mBAAmB,EACnB,OAAO,EACP,GAAG,EACH,cAAc,EACd,sBAAsB,EACtB,UAAU,EACV,0BAA0B,EAC1B,YAAY,GAC4B;IAGxC,OAAO,uBAAuB,CAAC;QAC7B,SAAS,EAAE,CAAC,SAAS,EAAE,uBAAuB,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,CACtE,8BAA8B,CAC5B,OAAO,EACP,mBAAmB,EACnB,SAAS,EACT,0BAA0B,EAC1B,GAAG,EACH,uBAAuB,EACvB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,KAAK,CACN;QACH,mBAAmB;QACnB,MAAM,EAAE,+BAA+B;QACvC,OAAO;QACP,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE,UAAU;QACjB,GAAG;QACH,cAAc;QAEd,sBAAsB;QACtB,0BAA0B;QAC1B,YAAY;KACb,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAA8C;IAE9C,MAAM,+BAA+B,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,EAChD,OAAO,EACP,mBAAmB,EACnB,OAAO,EACP,GAAG,EACH,cAAc,EACd,sBAAsB,EACtB,0BAA0B,EAC1B,YAAY,GACuB;IACnC,MAAM,uBAAuB,CAAC;QAC5B,SAAS,EAAE,CAAC,MAAM,EAAE,uBAAuB,EAAE,aAAa,EAAE,EAAE,CAC5D,0BAA0B,CAAC;YACzB,MAAM;YACN,OAAO;YACP,uBAAuB;YACvB,aAAa;YACb,GAAG;YACH,cAAc;YACd,0BAA0B;YAC1B,YAAY;SACb,CAAC;QACJ,mBAAmB;QACnB,MAAM,EAAE,4BAA4B;QACpC,OAAO;QACP,OAAO,EAAE,qBAAqB;QAC9B,KAAK,EAAE,OAAO;QACd,GAAG;QACH,cAAc;QAEd,sBAAsB;QACtB,0BAA0B;QAC1B,YAAY;KACb,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { VerifiedPrincipalPolicy } from \"@tearleads/crypto\";\nimport type {\n  PrincipalPolicyBundleResponse,\n  ReferencedPrincipalStateResponse,\n} from \"@tearleads/validators/response\";\nimport { isProjectionVerificationCancelledError } from \"../../data/keyingProjectionVerification\";\nimport {\n  reportAndRethrowKeyingVerificationError,\n  rethrowKeyingVerificationError,\n} from \"../../data/keyingProjectionVerification/error\";\nimport { dedupeReferencedPrincipalStates } from \"../../data/keyingProjectionVerification/principalPolicyCache\";\nimport { loadPrincipalPolicyCheckpoint } from \"../../data/persistence/keyingCheckpointPersistence\";\nimport { ensurePrincipalPolicyTables } from \"../../data/persistence/principalPolicyPersistence\";\nimport { loadPrincipalPolicyBundleForReference } from \"../../data/persistence/principalPolicyReferencePersistence\";\nimport { principalPolicyReferenceFromBundle } from \"../../data/principals/principalPolicyAdminSigners\";\nimport { errorMessage } from \"../../data/shared/errorMessage\";\nimport type { SecurityIncidentReporter } from \"../../data/shared/securityIncidents\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport type { TrustedUserIdentityResolver } from \"../../data/trustedUserIdentity\";\nimport type { CurrentPrincipalPolicyReader } from \"./currentPrincipalPolicyReader\";\nimport {\n  externalAdminPolicyPersistenceEntries,\n  loadOrganizationExternalAdminPolicy,\n  type VerifiedExternalAdminPolicy,\n} from \"./externalAdminPolicy\";\nimport {\n  persistPrincipalPolicyCacheEntries,\n  retryPrincipalPolicyCacheAdvance,\n} from \"./principalPolicyCacheAdvance\";\nimport { scopeReferencedPolicyForCache } from \"./principalPolicyCacheScope\";\nimport { validatePrincipalPolicyBundleForCache } from \"./principalPolicyCacheValidation\";\nimport {\n  createPolicyDirectoryLoader,\n  directoryBindsGroupReference,\n  type PolicyDirectoryLoader,\n  type VerifiedPolicyDirectory,\n} from \"./principalPolicyOrganizationScope\";\n\nexport interface CacheReferencedPrincipalPoliciesOptions {\n  currentPolicyReader: CurrentPrincipalPolicyReader;\n  execSql: ExecSql;\n  log?: (message: string) => void;\n  organizationId: string;\n  reportSecurityIncident: SecurityIncidentReporter;\n  references: ReadonlyArray<ReferencedPrincipalStateResponse> | undefined;\n  resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  stillCurrent?: (() => boolean) | undefined;\n}\n\nexport interface CachePrincipalPolicyBundlesOptions\n  extends Omit<CacheReferencedPrincipalPoliciesOptions, \"references\"> {\n  bundles: ReadonlyArray<PrincipalPolicyBundleResponse> | undefined;\n}\n\nfunction getReferencedPrincipalKey(\n  reference: ReferencedPrincipalStateResponse,\n): string {\n  return `${reference.principalType}:${reference.principalId}`;\n}\n\nfunction getBundlePrincipalKey(bundle: PrincipalPolicyBundleResponse): string {\n  return `${bundle.currentState.principalType}:${bundle.currentState.principalId}`;\n}\n\nfunction dedupePrincipalPolicyBundles(\n  bundles: ReadonlyArray<PrincipalPolicyBundleResponse>,\n): PrincipalPolicyBundleResponse[] {\n  const bundlesByPrincipal = new Map<string, PrincipalPolicyBundleResponse>();\n\n  for (const bundle of bundles) {\n    const key = getBundlePrincipalKey(bundle);\n    const previous = bundlesByPrincipal.get(key);\n    if (\n      !previous ||\n      bundle.currentState.version > previous.currentState.version\n    ) {\n      bundlesByPrincipal.set(key, bundle);\n    }\n  }\n\n  return Array.from(bundlesByPrincipal.values());\n}\n\nasync function cacheReferencedPrincipalPolicy(\n  execSql: ExecSql,\n  reader: CurrentPrincipalPolicyReader,\n  reference: ReferencedPrincipalStateResponse,\n  resolveTrustedUserIdentity: TrustedUserIdentityResolver,\n  log: ((message: string) => void) | undefined,\n  loadExternalAdminPolicy: () => Promise<VerifiedExternalAdminPolicy | null>,\n  organizationId: string,\n  stillCurrent: (() => boolean) | undefined,\n  loadDirectory: PolicyDirectoryLoader,\n  fresh: boolean,\n): Promise<VerifiedPrincipalPolicy[]> {\n  const localCheckpoint = await loadPrincipalPolicyCheckpoint(\n    execSql,\n    reference.principalType,\n    reference.principalId,\n  );\n  // Only null is a recoverable local miss. Integrity failures remain typed and\n  // must escape rather than being hidden by a canonical network retry.\n  const cachedBundle = fresh\n    ? null\n    : await loadPrincipalPolicyBundleForReference(\n        execSql,\n        reference,\n        localCheckpoint,\n      );\n  let bundle =\n    cachedBundle ??\n    (await reader.getCurrentPrincipalPolicy(\n      reference.principalType,\n      reference.principalId,\n    ));\n  if (!bundle) {\n    log?.(\n      `Principal policy cache: failed to fetch ${getReferencedPrincipalKey(reference)}`,\n    );\n    return [];\n  }\n\n  let validation = await validatePrincipalPolicyBundleForCache({\n    bundle,\n    loadExternalAdminPolicy,\n    localCheckpoint,\n    reference,\n    resolveTrustedUserIdentity,\n  });\n  if (!validation.ok) {\n    throw validation.error;\n  }\n\n  const scoped = await scopeReferencedPolicyForCache({\n    bundle,\n    validation,\n    validationInput: {\n      loadExternalAdminPolicy,\n      localCheckpoint,\n      reference,\n      resolveTrustedUserIdentity,\n    },\n    loadDirectory,\n    organizationId,\n    reloadBundle: cachedBundle\n      ? () => reader.getCurrentPrincipalPolicy(\"group\", reference.principalId)\n      : null,\n  });\n  if (!scoped) {\n    log?.(\n      `Principal policy cache: signed organization directory does not cover ${getReferencedPrincipalKey(reference)}`,\n    );\n    return [];\n  }\n  bundle = scoped.bundle;\n  validation = scoped.validation;\n  const directory = scoped.directory;\n  const externalEntries = validation.externalAdminPolicy\n    ? externalAdminPolicyPersistenceEntries(\n        validation.externalAdminPolicy,\n      ).filter(\n        (entry) => !directory || entry.policy.principalType !== \"organization\",\n      )\n    : [];\n  const directoryEntries = directory\n    ? [{ bundle: directory.bundle, policy: directory.policy }]\n    : [];\n  await persistPrincipalPolicyCacheEntries({\n    entries: [\n      ...externalEntries,\n      ...directoryEntries,\n      { bundle, policy: validation.policy },\n    ],\n    execSql,\n    organizationId,\n    updatedAt: new Date().toISOString(),\n    stillCurrent,\n  });\n  return [...externalEntries.map(({ policy }) => policy), validation.policy];\n}\n\nasync function cachePrincipalPolicyBundle(input: {\n  readonly bundle: PrincipalPolicyBundleResponse;\n  readonly execSql: ExecSql;\n  readonly loadExternalAdminPolicy: () => Promise<VerifiedExternalAdminPolicy | null>;\n  readonly log: ((message: string) => void) | undefined;\n  readonly loadDirectory: PolicyDirectoryLoader;\n  readonly organizationId: string;\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<VerifiedPrincipalPolicy[]> {\n  const reference = principalPolicyReferenceFromBundle(input.bundle);\n  // The API supplied this bundle after rejecting a write, but local storage is\n  // only updated after normal signature, signer, and checkpoint verification.\n  const localCheckpoint = await loadPrincipalPolicyCheckpoint(\n    input.execSql,\n    reference.principalType,\n    reference.principalId,\n  );\n  const validation = await validatePrincipalPolicyBundleForCache({\n    bundle: input.bundle,\n    loadExternalAdminPolicy: input.loadExternalAdminPolicy,\n    localCheckpoint,\n    reference,\n    resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n  });\n  if (!validation.ok) {\n    throw validation.error;\n  }\n\n  let directory: VerifiedPolicyDirectory | null = null;\n  if (reference.principalType === \"group\") {\n    directory = await input.loadDirectory(false);\n    if (!directoryBindsGroupReference(directory, validation.policy, reference))\n      directory = await input.loadDirectory(true);\n    if (\n      !directoryBindsGroupReference(directory, validation.policy, reference)\n    ) {\n      input.log?.(\n        \"Principal policy cache: signed organization directory does not cover supplied group\",\n      );\n      return [];\n    }\n  } else if (reference.principalId !== input.organizationId) {\n    return [];\n  }\n  const externalEntries = validation.externalAdminPolicy\n    ? externalAdminPolicyPersistenceEntries(\n        validation.externalAdminPolicy,\n      ).filter(\n        (entry) => !directory || entry.policy.principalType !== \"organization\",\n      )\n    : [];\n  const directoryEntries = directory\n    ? [{ bundle: directory.bundle, policy: directory.policy }]\n    : [];\n  await persistPrincipalPolicyCacheEntries({\n    entries: [\n      ...externalEntries,\n      ...directoryEntries,\n      { bundle: input.bundle, policy: validation.policy },\n    ],\n    execSql: input.execSql,\n    organizationId: input.organizationId,\n    updatedAt: new Date().toISOString(),\n    stillCurrent: input.stillCurrent,\n  });\n  return [...externalEntries.map(({ policy }) => policy), validation.policy];\n}\n\nasync function runPrincipalPolicyCache<Item, Result>(input: {\n  readonly cacheItem: (\n    item: Item,\n    loadExternalAdminPolicy: () => Promise<VerifiedExternalAdminPolicy | null>,\n    loadDirectory: PolicyDirectoryLoader,\n    fresh: boolean,\n  ) => Promise<readonly Result[]>;\n  readonly currentPolicyReader: CurrentPrincipalPolicyReader;\n  readonly dedupe: (items: ReadonlyArray<Item>) => Item[];\n  readonly execSql: ExecSql;\n  readonly itemKey: (item: Item) => string;\n  readonly items: ReadonlyArray<Item> | undefined;\n  readonly log: ((message: string) => void) | undefined;\n  readonly organizationId: string;\n  readonly reportSecurityIncident: SecurityIncidentReporter;\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<Result[]> {\n  if (!input.items || input.items.length === 0) {\n    return [];\n  }\n\n  try {\n    await ensurePrincipalPolicyTables(input.execSql);\n    const uniqueItems = input.dedupe(input.items);\n    const loadDirectory = createPolicyDirectoryLoader(input);\n    let externalAdminPolicy: Promise<VerifiedExternalAdminPolicy | null> | null =\n      null;\n    const loadExternalAdminPolicy = () => {\n      externalAdminPolicy ??= loadOrganizationExternalAdminPolicy({\n        currentPolicyReader: input.currentPolicyReader,\n        execSql: input.execSql,\n        organizationId: input.organizationId,\n\n        resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n        stillCurrent: input.stillCurrent,\n      });\n      return externalAdminPolicy;\n    };\n\n    const results = await Promise.all(\n      uniqueItems.map(async (item) => {\n        try {\n          return await retryPrincipalPolicyCacheAdvance((fresh) => {\n            const reloadDirectory = createPolicyDirectoryLoader(input);\n            let reloadedAuthority: Promise<VerifiedExternalAdminPolicy | null> | null =\n              null;\n            return input.cacheItem(\n              item,\n              fresh\n                ? () =>\n                    (reloadedAuthority ??=\n                      loadOrganizationExternalAdminPolicy(input))\n                : loadExternalAdminPolicy,\n              fresh ? () => reloadDirectory(true) : loadDirectory,\n              fresh,\n            );\n          });\n        } catch (error) {\n          if (isProjectionVerificationCancelledError(error)) return [];\n          await reportAndRethrowKeyingVerificationError(\n            error,\n            input.reportSecurityIncident,\n            {\n              objectId: input.itemKey(item),\n              objectKind: \"principal\",\n              operation: \"principal.policy.cache\",\n              organizationId: input.organizationId,\n            },\n          );\n          const message = errorMessage(error);\n          input.log?.(\n            `Principal policy cache: failed to store ${input.itemKey(item)}: ${message}`,\n          );\n          return [];\n        }\n      }),\n    );\n    return results.flat();\n  } catch (error) {\n    if (isProjectionVerificationCancelledError(error)) return [];\n    // Per-item verification failures were reported above before reaching this\n    // initialization/aggregation boundary.\n    rethrowKeyingVerificationError(error);\n    const message = errorMessage(error);\n    input.log?.(\n      `Principal policy cache: failed to initialize cache: ${message}`,\n    );\n    return [];\n  }\n}\n\nasync function loadReferencedPrincipalPolicies({\n  currentPolicyReader,\n  execSql,\n  log,\n  organizationId,\n  reportSecurityIncident,\n  references,\n  resolveTrustedUserIdentity,\n  stillCurrent,\n}: CacheReferencedPrincipalPoliciesOptions): Promise<\n  VerifiedPrincipalPolicy[]\n> {\n  return runPrincipalPolicyCache({\n    cacheItem: (reference, loadExternalAdminPolicy, loadDirectory, fresh) =>\n      cacheReferencedPrincipalPolicy(\n        execSql,\n        currentPolicyReader,\n        reference,\n        resolveTrustedUserIdentity,\n        log,\n        loadExternalAdminPolicy,\n        organizationId,\n        stillCurrent,\n        loadDirectory,\n        fresh,\n      ),\n    currentPolicyReader,\n    dedupe: dedupeReferencedPrincipalStates,\n    execSql,\n    itemKey: getReferencedPrincipalKey,\n    items: references,\n    log,\n    organizationId,\n\n    reportSecurityIncident,\n    resolveTrustedUserIdentity,\n    stillCurrent,\n  });\n}\n\nexport async function cacheReferencedPrincipalPolicies(\n  input: CacheReferencedPrincipalPoliciesOptions,\n): Promise<void> {\n  await loadReferencedPrincipalPolicies(input);\n}\n\nexport async function cachePrincipalPolicyBundles({\n  bundles,\n  currentPolicyReader,\n  execSql,\n  log,\n  organizationId,\n  reportSecurityIncident,\n  resolveTrustedUserIdentity,\n  stillCurrent,\n}: CachePrincipalPolicyBundlesOptions): Promise<void> {\n  await runPrincipalPolicyCache({\n    cacheItem: (bundle, loadExternalAdminPolicy, loadDirectory) =>\n      cachePrincipalPolicyBundle({\n        bundle,\n        execSql,\n        loadExternalAdminPolicy,\n        loadDirectory,\n        log,\n        organizationId,\n        resolveTrustedUserIdentity,\n        stillCurrent,\n      }),\n    currentPolicyReader,\n    dedupe: dedupePrincipalPolicyBundles,\n    execSql,\n    itemKey: getBundlePrincipalKey,\n    items: bundles,\n    log,\n    organizationId,\n\n    reportSecurityIncident,\n    resolveTrustedUserIdentity,\n    stillCurrent,\n  });\n}\n"]}

package/workflows/principals/principalAcknowledgementChecks.d.ts

@@ -0,0 +1,30 @@
+import type { PrincipalPolicyExternalAuthority, PrincipalPolicySignerPublicKey, ReferencedPrincipalHead, VerifiedPrincipalPolicyCurrent } from "../../internal/crypto/index.js";
+import type { PutPrincipalPolicyRequest } from "../../internal/validators/request/index.js";
+import type { PrincipalPolicyMutationResponse } from "../../internal/validators/response/index.js";
+/**
+ * The checks the code that authored a principal mutation makes on the
+ * server's acknowledgement of it. Recovery records an acknowledged current
+ * only after these accept it; the organization mutation workflows supply them.
+ */
+export interface PrincipalAcknowledgementChecks {
+    /** The head an authored request commits to. */
+    readonly authoredHead: (request: PutPrincipalPolicyRequest) => Promise<ReferencedPrincipalHead>;
+    /** The receipt carries exactly the authored state and artifacts. */
+    readonly assertReceipt: (input: {
+        readonly expectedHead: ReferencedPrincipalHead;
+        readonly request: PutPrincipalPolicyRequest;
+        readonly response: PrincipalPolicyMutationResponse;
+    }) => void;
+    /** The acknowledged state is the authored successor of the verified predecessor. */
+    readonly acknowledgeSuccessor: (input: {
+        readonly verifiedCurrentPolicy: VerifiedPrincipalPolicyCurrent;
+        readonly expectedHead: ReferencedPrincipalHead;
+        readonly request: PutPrincipalPolicyRequest;
+        readonly response: PrincipalPolicyMutationResponse["currentState"];
+        readonly signerPublicKeys: readonly PrincipalPolicySignerPublicKey[];
+        readonly externalAuthority?: PrincipalPolicyExternalAuthority | undefined;
+        readonly stillCurrent: () => boolean;
+    }) => Promise<VerifiedPrincipalPolicyCurrent>;
+    /** Acknowledged directory and group heads cite each other. */
+    readonly assertDirectoryBindings: (organizationId: string, responses: readonly PrincipalPolicyMutationResponse[]) => void;
+}