@tearleads/client-sdk 0.1.57 → 0.1.59

package/data/keyingProjectionVerification/principalPolicyVerification.js.map

@@ -1 +1 @@
-{"version":3,"file":"principalPolicyVerification.js","sourceRoot":"","sources":["principalPolicyVerification.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EAGvB,aAAa,EAEb,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,6BAA6B,EAAE,MAAM,4CAA4C,CAAC;AAC3F,OAAO,EACL,kCAAkC,EAClC,sCAAsC,GACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,qCAAqC,EAAE,MAAM,oDAAoD,CAAC;AAC3G,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EACL,oCAAoC,EACpC,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACL,kCAAkC,EAClC,kCAAkC,EAClC,6BAA6B,EAC7B,yDAAyD,GAC1D,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EACL,sBAAsB,GAEvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oCAAoC,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,0CAA0C,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EACL,uCAAuC,EACvC,4BAA4B,EAC5B,wCAAwC,GACzC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAC;AAM7E,OAAO,EACL,mCAAmC,EACnC,sCAAsC,GACvC,MAAM,SAAS,CAAC;AAEjB,SAAS,6BAA6B,CACpC,SAAkC;IAElC,OAAO,GAAG,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,YAAY,cAAsB;QAChC,KAAK,CAAC,oBAAoB,cAAc,gBAAgB,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,OAAO,CACL,KAAK,YAAY,6BAA6B;QAC9C,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sCAAsC,CAAC,KAIrD;IACC,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAGlC,CAAC;IAEJ,KAAK,MAAM,KAAK,IAAI,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,wBAAwB,EAAE,CAAC;QAC3E,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,oCAAoC,CAC5C,GAAG,KAAK,CAAC,KAAK,yCAAyC,KAAK,CAAC,YAAY,EAAE,CAC5E,CAAC;QACJ,CAAC;QAED,MAAM,qBAAqB,GAAG,MAAM,aAAa,CAC/C,SAAS,CAAC,gBAAgB,CAC3B,CAAC;QACF,IAAI,qBAAqB,KAAK,KAAK,CAAC,wBAAwB,EAAE,CAAC;YAC7D,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,GAAG,KAAK,CAAC,KAAK,kCAAkC,CACjD,CAAC;QACJ,CAAC;QAED,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE;YAClC,MAAM,EAAE,KAAK,CAAC,YAAY;YAC1B,qBAAqB;YACrB,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7C,CAAC;AASD,KAAK,UAAU,qCAAqC,CAClD,KAAmC;IAUnC,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC;IAChD,IAAI,MAAM,GAAG,MAAM,yBAAyB,CAC1C,OAAO,EACP,cAAc,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,eAAe,GAAG,MAAM,6BAA6B,CACvD,OAAO,EACP,cAAc,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;IACF,IACE,CAAC,kCAAkC,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC;QACzE,KAAK,CAAC,+BAA+B,EACrC,CAAC;QACD,MAAM,KAAK,CAAC,+BAA+B,CAAC;YAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,CAAC,kCAAkC,CAAC,MAAM,CAAC,CAAC;SACzD,CAAC,CAAC;QACH,MAAM,GAAG,MAAM,yBAAyB,CACtC,OAAO,EACP,cAAc,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;QACF,eAAe,GAAG,MAAM,6BAA6B,CACnD,OAAO,EACP,cAAc,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,+BAA+B,CACtC,MAA+B;IAE/B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACtE,IACE,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAC7B,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAC7D,EACD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,6DAA6D,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,KAK7C;IACC,MAAM,WAAW,GAAG,MAAM,yBAAyB,CACjD,KAAK,CAAC,OAAO,EACb,OAAO,EACP,KAAK,CAAC,YAAY,CACnB,CAAC;IACF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,CAAC,6BAA6B,CAC5B,kCAAkC,CAAC,WAAW,CAAC,EAC/C,KAAK,CAAC,YAAY,CACnB,EACD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,6BAA6B,CACzD,KAAK,CAAC,OAAO,EACb,OAAO,EACP,KAAK,CAAC,YAAY,CACnB,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,sCAAsC,CAAC;QACpE,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,iBAAiB,KAAK,CAAC,YAAY,EAAE;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;QACjD,MAAM,EAAE,WAAW;QACnB,iBAAiB,EAAE,KAAK,CAAC,YAAY;QACrC,eAAe,EAAE,eAAe;QAChC,gBAAgB;KACjB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvB,CAAC;IACD,+BAA+B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,QAAQ,CAAC,KAAK,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,KAAmC;IAEnC,MAAM,kBAAkB,GAAG,MAAM,qCAAqC,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG,MAAM,sCAAsC,CAAC;YACpE,MAAM,EAAE,kBAAkB,CAAC,MAAM;YACjC,KAAK,EAAE,uBAAuB,KAAK,CAAC,cAAc,EAAE;YACpD,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC;YACnD,MAAM,EAAE,kBAAkB,CAAC,MAAM;YACjC,eAAe,EAAE,kBAAkB,CAAC,eAAe;YACnD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,gBAAgB;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,QAAQ,CAAC,KAAK,CAAC;QACvB,CAAC;QACD,MAAM,UAAU,GAAG,oCAAoC,CACrD,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CACpD,CAAC;QACF,IAAI,UAAU,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YACvD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,8BAA8B,CAAC;YAC1D,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,OAAO;YACxC,YAAY,EAAE,4BAA4B,CACxC,UAAU,EACV,UAAU,CAAC,YAAY,CACxB;YACD,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,sBAAsB,CACpB,KAAK,CAAC,iBAAiB,EACvB,QAAQ,CAAC,KAAK,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;QACF,sBAAsB,CACpB,KAAK,CAAC,iBAAiB,EACvB,cAAc,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;QACF,OAAO,kCAAkC,CAAC,cAAc,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0CAA0C,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,KAQ9C;IACC,0EAA0E;IAC1E,2DAA2D;IAC3D,MAAM,SAAS,GAAG,MAAM,gCAAgC,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC;IAChD,MAAM,eAAe,GAAG,MAAM,6BAA6B,CACzD,OAAO,EACP,KAAK,CAAC,SAAS,CAAC,aAAa,EAC7B,KAAK,CAAC,SAAS,CAAC,WAAW,CAC5B,CAAC;IACF,IAAI,YAAY,IAAI,CAAC,CAAC,iBAAiB,IAAI,YAAY,CAAC,EAAE,CAAC;QACzD,IACE,CAAC,wCAAwC,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,EACxE,CAAC;YACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,sCAAsC,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,CAAC;YAC1E,sBAAsB,CACpB,KAAK,CAAC,iBAAiB,EACvB,YAAY,EACZ,KAAK,CAAC,cAAc,CACrB,CAAC;YACF,OAAO,YAAY,CAAC;QACtB,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,6BAA6B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,MAAM,GAAG,MAAM,qCAAqC,CACtD,OAAO,EACP,KAAK,CAAC,SAAS,EACf,eAAe,CAChB,CAAC;IACF,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,EAAE,CAAC;QACrD,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,KAAK,CAAC,+BAA+B,CAAC;YAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;SAC9B,CAAC,CAAC;QACH,MAAM,GAAG,MAAM,qCAAqC,CAClD,OAAO,EACP,KAAK,CAAC,SAAS,EACf,eAAe,CAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,6BAA6B,CAAC,cAAc,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,sCAAsC,CAAC;QACpE,MAAM;QACN,KAAK,EAAE,oBAAoB,cAAc,EAAE;QAC3C,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,MAAM,QAAQ,GACZ,MAAM,yDAAyD,CAAC;QAC9D,MAAM;QACN,iBAAiB,EAAE,KAAK,CAAC,SAAS;QAClC,qBAAqB,EAAE,GAAG,EAAE,CAC1B,iCAAiC,CAAC;YAChC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,+BAA+B,EAC7B,KAAK,CAAC,+BAA+B;SACxC,CAAC;QACJ,eAAe;QACf,gBAAgB;KACjB,CAAC,CAAC;IACL,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvB,CAAC;IAED,sBAAsB,CACpB,KAAK,CAAC,iBAAiB,EACvB,QAAQ,CAAC,KAAK,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;IACF,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzD,OAAO,QAAQ,CAAC,KAAK,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,KAQxD;IACC,MAAM,+BAA+B,GACnC,sCAAsC,CACpC,KAAK,CAAC,+BAA+B,EACrC,KAAK,CAAC,YAAY,CACnB,CAAC;IACJ,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAmC,CAAC;IACpE,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,gBAAgB,CAAC,GAAG,CAAC,4BAA4B,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,2EAA2E;IAC3E,yEAAyE;IACzE,0CAA0C;IAC1C,IACE,+BAA+B;QAC/B,CAAC,+BAA+B,CAAC,gBAAgB,EACjD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,uCAAuC,CAAC;YAC7D,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,OAAO;YACxC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;YAChD,UAAU;SACX,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxD,MAAM,+BAA+B,CAAC;gBACpC,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,UAAU,EAAE,QAAQ;aACrB,CAAC,CAAC;YACH,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,OAAO,OAAO,CAAC,GAAG,CAChB,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC3B,+BAA+B,CAAC;QAC9B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,SAAS;QACT,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,+BAA+B;KAChC,CAAC,CACH,CACF,CAAC;AACJ,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type PrincipalPolicySignerPublicKey,\n  type ReferencedPrincipalHead,\n  toFingerprint,\n  type VerifiedPrincipalPolicy,\n  verifyPrincipalPolicyBundle,\n} from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { loadPrincipalPolicyCheckpoint } from \"../persistence/keyingCheckpointPersistence\";\nimport {\n  principalPolicyHeadMeetsCheckpoint,\n  verifiedPrincipalPolicyMeetsCheckpoint,\n} from \"../persistence/principalPolicyCheckpointSelection\";\nimport { loadPrincipalPolicyBundle } from \"../persistence/principalPolicyPersistence\";\nimport { loadPrincipalPolicyBundleForReference } from \"../persistence/principalPolicyReferencePersistence\";\nimport { principalPolicyBundleStates } from \"../principalPolicyStates\";\nimport {\n  parseOrganizationAuthorityDescriptor,\n  principalHeadMatchesReference,\n  requireOrganizationGroupHead,\n} from \"../principals/organizationAuthorityDescriptor\";\nimport {\n  organizationAdminExternalAuthority,\n  principalPolicyReferenceFromBundle,\n  verifyOrganizationAdminPolicy,\n  verifyPrincipalPolicyBundleWithExternalOrganizationAdmins,\n} from \"../principals/principalPolicyAdminSigners\";\nimport type { PrincipalPolicyCurrentEvidence } from \"../principals/principalPolicyEvidence\";\nimport {\n  observePrincipalPolicy,\n  type ProjectionCheckpointContext,\n} from \"./checkpointContext\";\nimport { ProjectionDependencyUnavailableError } from \"./dependencyUnavailable\";\nimport { rethrowProjectionVerificationBoundaryError } from \"./error\";\nimport {\n  filterUncachedPrincipalPolicyReferences,\n  referencedPrincipalPolicyKey,\n  verifiedPrincipalPolicyContainsReference,\n} from \"./principalPolicyCache\";\nimport { resolveReferencedPrincipalPolicy } from \"./resolvedPrincipalPolicy\";\nimport type {\n  PrincipalPolicyCache,\n  ProjectionUserKeyResolver,\n  ReferencedPrincipalPolicyWarmer,\n} from \"./types\";\nimport {\n  assertProjectionVerificationCurrent,\n  generationGuardedPrincipalPolicyWarmer,\n} from \"./types\";\n\nfunction principalPolicyReferenceLabel(\n  reference: ReferencedPrincipalHead,\n): string {\n  return `${reference.principalType}:${reference.principalId}@${reference.version}`;\n}\n\n/**\n * A referenced principal policy is not in the local store and warming could\n * not fetch it this pass — a transient cold-cache condition, typical for a\n * member whose access arrives via a group policy the device has not hydrated\n * yet. Sync passes discriminate on this type to defer the affected container\n * and retry on a later trigger, rather than failing the whole pass.\n */\nexport class PrincipalPolicyNotCachedError extends Error {\n  constructor(referenceLabel: string) {\n    super(`Principal policy ${referenceLabel} is not cached`);\n    this.name = \"PrincipalPolicyNotCachedError\";\n  }\n}\n\nexport function isPrincipalPolicyNotCachedError(error: unknown): boolean {\n  return (\n    error instanceof PrincipalPolicyNotCachedError ||\n    (error instanceof Error && error.name === \"PrincipalPolicyNotCachedError\")\n  );\n}\n\nasync function collectPrincipalPolicySignerPublicKeys(input: {\n  bundle: PrincipalPolicyBundleResponse;\n  label: string;\n  resolveUserKey: ProjectionUserKeyResolver;\n}): Promise<PrincipalPolicySignerPublicKey[]> {\n  const signerPublicKeysByKey = new Map<\n    string,\n    PrincipalPolicySignerPublicKey\n  >();\n\n  for (const state of principalPolicyBundleStates(input.bundle)) {\n    const cacheKey = `${state.signerUserId}:${state.signerUserKeyFingerprint}`;\n    if (signerPublicKeysByKey.has(cacheKey)) {\n      continue;\n    }\n\n    const signerKey = await input.resolveUserKey(state.signerUserId);\n    if (!signerKey) {\n      throw new ProjectionDependencyUnavailableError(\n        `${input.label} signer key could not be resolved for ${state.signerUserId}`,\n      );\n    }\n\n    const signingKeyFingerprint = await toFingerprint(\n      signerKey.signingPublicKey,\n    );\n    if (signingKeyFingerprint !== state.signerUserKeyFingerprint) {\n      throw new KeyingVerificationError(\n        \"signer_mismatch\",\n        `${input.label} signer key fingerprint mismatch`,\n      );\n    }\n\n    signerPublicKeysByKey.set(cacheKey, {\n      userId: state.signerUserId,\n      signingKeyFingerprint,\n      signingPublicKey: signerKey.signingPublicKey,\n    });\n  }\n\n  return [...signerPublicKeysByKey.values()];\n}\n\ntype OrganizationAdminPolicyInput = {\n  checkpointContext: ProjectionCheckpointContext;\n  organizationId: string;\n  resolveUserKey: ProjectionUserKeyResolver;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n};\n\nasync function loadOrganizationPolicyForVerification(\n  input: OrganizationAdminPolicyInput,\n): Promise<\n  | {\n      bundle: PrincipalPolicyBundleResponse;\n      localCheckpoint: Awaited<\n        ReturnType<typeof loadPrincipalPolicyCheckpoint>\n      >;\n    }\n  | undefined\n> {\n  const execSql = input.checkpointContext.execSql;\n  let bundle = await loadPrincipalPolicyBundle(\n    execSql,\n    \"organization\",\n    input.organizationId,\n  );\n  if (!bundle) {\n    return undefined;\n  }\n  let localCheckpoint = await loadPrincipalPolicyCheckpoint(\n    execSql,\n    \"organization\",\n    input.organizationId,\n  );\n  if (\n    !principalPolicyHeadMeetsCheckpoint(bundle.currentState, localCheckpoint) &&\n    input.warmReferencedPrincipalPolicies\n  ) {\n    await input.warmReferencedPrincipalPolicies({\n      organizationId: input.organizationId,\n      references: [principalPolicyReferenceFromBundle(bundle)],\n    });\n    bundle = await loadPrincipalPolicyBundle(\n      execSql,\n      \"organization\",\n      input.organizationId,\n    );\n    localCheckpoint = await loadPrincipalPolicyCheckpoint(\n      execSql,\n      \"organization\",\n      input.organizationId,\n    );\n    if (!bundle) {\n      return undefined;\n    }\n  }\n\n  return { bundle, localCheckpoint };\n}\n\nfunction assertReservedAdminsPolicyShape(\n  policy: VerifiedPrincipalPolicy,\n): void {\n  const history = policy.history ?? [{ projection: policy.projection }];\n  if (\n    history.some(\n      (entry) =>\n        entry.projection.length === 0 ||\n        entry.projection.some((member) => member.role !== \"admin\"),\n    )\n  ) {\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"reserved Admins policy must contain only direct admin users\",\n    );\n  }\n}\n\nasync function verifyOrganizationAdminsPolicy(input: {\n  adminGroupId: string;\n  execSql: ProjectionCheckpointContext[\"execSql\"];\n  expectedHead: ReferencedPrincipalHead;\n  resolveUserKey: ProjectionUserKeyResolver;\n}): Promise<VerifiedPrincipalPolicy | undefined> {\n  const adminBundle = await loadPrincipalPolicyBundle(\n    input.execSql,\n    \"group\",\n    input.adminGroupId,\n  );\n  if (!adminBundle) {\n    return undefined;\n  }\n  if (\n    !principalHeadMatchesReference(\n      principalPolicyReferenceFromBundle(adminBundle),\n      input.expectedHead,\n    )\n  ) {\n    throw new KeyingVerificationError(\n      \"hash_mismatch\",\n      \"Admins policy does not match the signed organization directory\",\n    );\n  }\n  const adminCheckpoint = await loadPrincipalPolicyCheckpoint(\n    input.execSql,\n    \"group\",\n    input.adminGroupId,\n  );\n  const signerPublicKeys = await collectPrincipalPolicySignerPublicKeys({\n    bundle: adminBundle,\n    label: `Admins policy ${input.adminGroupId}`,\n    resolveUserKey: input.resolveUserKey,\n  });\n  const verified = await verifyPrincipalPolicyBundle({\n    bundle: adminBundle,\n    expectedReference: input.expectedHead,\n    localCheckpoint: adminCheckpoint,\n    signerPublicKeys,\n  });\n  if (!verified.ok) {\n    throw verified.error;\n  }\n  assertReservedAdminsPolicyShape(verified.value);\n  return verified.value;\n}\n\nasync function loadOrganizationExternalAuthority(\n  input: OrganizationAdminPolicyInput,\n): Promise<ReturnType<typeof organizationAdminExternalAuthority> | null> {\n  const organizationPolicy = await loadOrganizationPolicyForVerification(input);\n  if (!organizationPolicy) {\n    return null;\n  }\n\n  try {\n    const signerPublicKeys = await collectPrincipalPolicySignerPublicKeys({\n      bundle: organizationPolicy.bundle,\n      label: `Organization policy ${input.organizationId}`,\n      resolveUserKey: input.resolveUserKey,\n    });\n    const verified = await verifyOrganizationAdminPolicy({\n      bundle: organizationPolicy.bundle,\n      localCheckpoint: organizationPolicy.localCheckpoint,\n      organizationId: input.organizationId,\n      signerPublicKeys,\n    });\n    if (!verified.ok) {\n      throw verified.error;\n    }\n    const descriptor = parseOrganizationAuthorityDescriptor(\n      organizationPolicy.bundle.currentPayload.ciphertext,\n    );\n    if (descriptor.organizationId !== input.organizationId) {\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"organization authority descriptor scope does not match\",\n      );\n    }\n    const verifiedAdmins = await verifyOrganizationAdminsPolicy({\n      adminGroupId: descriptor.adminGroupId,\n      execSql: input.checkpointContext.execSql,\n      expectedHead: requireOrganizationGroupHead(\n        descriptor,\n        descriptor.adminGroupId,\n      ),\n      resolveUserKey: input.resolveUserKey,\n    });\n    if (!verifiedAdmins) {\n      return null;\n    }\n    observePrincipalPolicy(\n      input.checkpointContext,\n      verified.value,\n      input.organizationId,\n    );\n    observePrincipalPolicy(\n      input.checkpointContext,\n      verifiedAdmins,\n      input.organizationId,\n    );\n    return organizationAdminExternalAuthority(verifiedAdmins);\n  } catch (error) {\n    rethrowProjectionVerificationBoundaryError(error);\n    if (error instanceof KeyingVerificationError) {\n      throw error;\n    }\n    return null;\n  }\n}\n\nasync function verifyReferencedPrincipalPolicy(input: {\n  checkpointContext: ProjectionCheckpointContext;\n  organizationId: string;\n  principalPolicyCache: PrincipalPolicyCache;\n  reference: ReferencedPrincipalHead;\n  stillCurrent?: (() => boolean) | undefined;\n  resolveUserKey: ProjectionUserKeyResolver;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n}): Promise<PrincipalPolicyCurrentEvidence> {\n  // Scoped recovery carries organization, dependency and lifetime bindings.\n  // A bare policy cache entry cannot replace those bindings.\n  const recovered = await resolveReferencedPrincipalPolicy(input);\n  if (recovered) return recovered;\n  const cacheKey = referencedPrincipalPolicyKey(input.reference);\n  const cachedPolicy = input.principalPolicyCache.get(cacheKey);\n  const execSql = input.checkpointContext.execSql;\n  const localCheckpoint = await loadPrincipalPolicyCheckpoint(\n    execSql,\n    input.reference.principalType,\n    input.reference.principalId,\n  );\n  if (cachedPolicy && !(\"retainedHistory\" in cachedPolicy)) {\n    if (\n      !verifiedPrincipalPolicyContainsReference(cachedPolicy, input.reference)\n    ) {\n      throw new KeyingVerificationError(\n        \"hash_mismatch\",\n        \"in-memory principal policy cache does not match its exact reference\",\n      );\n    }\n    if (verifiedPrincipalPolicyMeetsCheckpoint(cachedPolicy, localCheckpoint)) {\n      observePrincipalPolicy(\n        input.checkpointContext,\n        cachedPolicy,\n        input.organizationId,\n      );\n      return cachedPolicy;\n    }\n  }\n\n  const referenceLabel = principalPolicyReferenceLabel(input.reference);\n  let bundle = await loadPrincipalPolicyBundleForReference(\n    execSql,\n    input.reference,\n    localCheckpoint,\n  );\n  if (!bundle && input.warmReferencedPrincipalPolicies) {\n    // The reference is not cached locally — the common case for a member who\n    // gained access via another org's group grant and never hydrated that\n    // group's policy. Fetch+verify+persist it, then re-read from the cache.\n    await input.warmReferencedPrincipalPolicies({\n      organizationId: input.organizationId,\n      references: [input.reference],\n    });\n    bundle = await loadPrincipalPolicyBundleForReference(\n      execSql,\n      input.reference,\n      localCheckpoint,\n    );\n  }\n  if (!bundle) {\n    throw new PrincipalPolicyNotCachedError(referenceLabel);\n  }\n\n  const signerPublicKeys = await collectPrincipalPolicySignerPublicKeys({\n    bundle,\n    label: `Principal policy ${referenceLabel}`,\n    resolveUserKey: input.resolveUserKey,\n  });\n  const verified =\n    await verifyPrincipalPolicyBundleWithExternalOrganizationAdmins({\n      bundle,\n      expectedReference: input.reference,\n      loadExternalAuthority: () =>\n        loadOrganizationExternalAuthority({\n          checkpointContext: input.checkpointContext,\n          organizationId: input.organizationId,\n          resolveUserKey: input.resolveUserKey,\n          warmReferencedPrincipalPolicies:\n            input.warmReferencedPrincipalPolicies,\n        }),\n      localCheckpoint,\n      signerPublicKeys,\n    });\n  if (!verified.ok) {\n    throw verified.error;\n  }\n\n  observePrincipalPolicy(\n    input.checkpointContext,\n    verified.value,\n    input.organizationId,\n  );\n  input.principalPolicyCache.set(cacheKey, verified.value);\n  return verified.value;\n}\n\nexport async function collectReferencedPrincipalPolicies(input: {\n  checkpointContext: ProjectionCheckpointContext;\n  organizationId: string;\n  principalPolicyCache: PrincipalPolicyCache;\n  references: readonly ReferencedPrincipalHead[];\n  resolveUserKey: ProjectionUserKeyResolver;\n  stillCurrent?: (() => boolean) | undefined;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n}): Promise<PrincipalPolicyCurrentEvidence[]> {\n  const warmReferencedPrincipalPolicies =\n    generationGuardedPrincipalPolicyWarmer(\n      input.warmReferencedPrincipalPolicies,\n      input.stillCurrent,\n    );\n  const uniqueReferences = new Map<string, ReferencedPrincipalHead>();\n  for (const reference of input.references) {\n    uniqueReferences.set(referencedPrincipalPolicyKey(reference), reference);\n  }\n\n  const references = [...uniqueReferences.values()];\n  // Warm every missing reference in one batched fetch before verifying, so a\n  // path that references several uncached policies makes a single round of\n  // requests rather than one per reference.\n  if (\n    warmReferencedPrincipalPolicies &&\n    !warmReferencedPrincipalPolicies.resolveReference\n  ) {\n    const uncached = await filterUncachedPrincipalPolicyReferences({\n      execSql: input.checkpointContext.execSql,\n      principalPolicyCache: input.principalPolicyCache,\n      references,\n    });\n    if (uncached.length > 0) {\n      assertProjectionVerificationCurrent(input.stillCurrent);\n      await warmReferencedPrincipalPolicies({\n        organizationId: input.organizationId,\n        references: uncached,\n      });\n      assertProjectionVerificationCurrent(input.stillCurrent);\n    }\n  }\n\n  // The warmer's operation shares one recovery view across its collections.\n  return Promise.all(\n    references.map((reference) =>\n      verifyReferencedPrincipalPolicy({\n        checkpointContext: input.checkpointContext,\n        organizationId: input.organizationId,\n        principalPolicyCache: input.principalPolicyCache,\n        reference,\n        stillCurrent: input.stillCurrent,\n        resolveUserKey: input.resolveUserKey,\n        warmReferencedPrincipalPolicies,\n      }),\n    ),\n  );\n}\n"]}
+{"version":3,"file":"principalPolicyVerification.js","sourceRoot":"","sources":["principalPolicyVerification.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EAGvB,aAAa,EAEb,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,6BAA6B,EAAE,MAAM,4CAA4C,CAAC;AAC3F,OAAO,EACL,kCAAkC,EAClC,sCAAsC,GACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,qCAAqC,EAAE,MAAM,oDAAoD,CAAC;AAC3G,OAAO,EACL,oCAAoC,EACpC,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACL,kCAAkC,EAClC,kCAAkC,EAClC,6BAA6B,EAC7B,yDAAyD,GAC1D,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EACL,sBAAsB,GAEvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oCAAoC,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,0CAA0C,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EACL,uCAAuC,EACvC,4BAA4B,EAC5B,wCAAwC,GACzC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAC;AAM7E,OAAO,EACL,mCAAmC,EACnC,sCAAsC,GACvC,MAAM,SAAS,CAAC;AAEjB,SAAS,6BAA6B,CACpC,SAAkC;IAElC,OAAO,GAAG,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,YAAY,cAAsB;QAChC,KAAK,CAAC,oBAAoB,cAAc,gBAAgB,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,OAAO,CACL,KAAK,YAAY,6BAA6B;QAC9C,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sCAAsC,CAAC,KAIrD;IACC,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAGlC,CAAC;IAEJ,KAAK,MAAM,KAAK,IAAI,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,wBAAwB,EAAE,CAAC;QAC3E,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,oCAAoC,CAC5C,GAAG,KAAK,CAAC,KAAK,yCAAyC,KAAK,CAAC,YAAY,EAAE,CAC5E,CAAC;QACJ,CAAC;QAED,MAAM,qBAAqB,GAAG,MAAM,aAAa,CAC/C,SAAS,CAAC,gBAAgB,CAC3B,CAAC;QACF,IAAI,qBAAqB,KAAK,KAAK,CAAC,wBAAwB,EAAE,CAAC;YAC7D,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,GAAG,KAAK,CAAC,KAAK,kCAAkC,CACjD,CAAC;QACJ,CAAC;QAED,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE;YAClC,MAAM,EAAE,KAAK,CAAC,YAAY;YAC1B,qBAAqB;YACrB,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7C,CAAC;AASD,KAAK,UAAU,qCAAqC,CAClD,KAAmC;IAUnC,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC;IAChD,IAAI,MAAM,GAAG,MAAM,yBAAyB,CAC1C,OAAO,EACP,cAAc,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,eAAe,GAAG,MAAM,6BAA6B,CACvD,OAAO,EACP,cAAc,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;IACF,IACE,CAAC,kCAAkC,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC;QACzE,KAAK,CAAC,+BAA+B,EACrC,CAAC;QACD,MAAM,KAAK,CAAC,+BAA+B,CAAC;YAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,CAAC,kCAAkC,CAAC,MAAM,CAAC,CAAC;SACzD,CAAC,CAAC;QACH,MAAM,GAAG,MAAM,yBAAyB,CACtC,OAAO,EACP,cAAc,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;QACF,eAAe,GAAG,MAAM,6BAA6B,CACnD,OAAO,EACP,cAAc,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,+BAA+B,CACtC,MAA+B;IAE/B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACtE,IACE,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAC7B,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAC7D,EACD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,6DAA6D,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,KAK7C;IACC,MAAM,WAAW,GAAG,MAAM,yBAAyB,CACjD,KAAK,CAAC,OAAO,EACb,OAAO,EACP,KAAK,CAAC,YAAY,CACnB,CAAC;IACF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,CAAC,6BAA6B,CAC5B,kCAAkC,CAAC,WAAW,CAAC,EAC/C,KAAK,CAAC,YAAY,CACnB,EACD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,6BAA6B,CACzD,KAAK,CAAC,OAAO,EACb,OAAO,EACP,KAAK,CAAC,YAAY,CACnB,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,sCAAsC,CAAC;QACpE,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,iBAAiB,KAAK,CAAC,YAAY,EAAE;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;QACjD,MAAM,EAAE,WAAW;QACnB,iBAAiB,EAAE,KAAK,CAAC,YAAY;QACrC,eAAe,EAAE,eAAe;QAChC,gBAAgB;KACjB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvB,CAAC;IACD,+BAA+B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,QAAQ,CAAC,KAAK,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,KAAmC;IAEnC,MAAM,kBAAkB,GAAG,MAAM,qCAAqC,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG,MAAM,sCAAsC,CAAC;YACpE,MAAM,EAAE,kBAAkB,CAAC,MAAM;YACjC,KAAK,EAAE,uBAAuB,KAAK,CAAC,cAAc,EAAE;YACpD,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC;YACnD,MAAM,EAAE,kBAAkB,CAAC,MAAM;YACjC,eAAe,EAAE,kBAAkB,CAAC,eAAe;YACnD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,gBAAgB;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,QAAQ,CAAC,KAAK,CAAC;QACvB,CAAC;QACD,MAAM,UAAU,GAAG,oCAAoC,CACrD,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CACpD,CAAC;QACF,IAAI,UAAU,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YACvD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,8BAA8B,CAAC;YAC1D,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,OAAO;YACxC,YAAY,EAAE,4BAA4B,CACxC,UAAU,EACV,UAAU,CAAC,YAAY,CACxB;YACD,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,sBAAsB,CACpB,KAAK,CAAC,iBAAiB,EACvB,QAAQ,CAAC,KAAK,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;QACF,sBAAsB,CACpB,KAAK,CAAC,iBAAiB,EACvB,cAAc,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;QACF,OAAO,kCAAkC,CAAC,cAAc,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0CAA0C,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,KAQ9C;IACC,0EAA0E;IAC1E,2DAA2D;IAC3D,MAAM,SAAS,GAAG,MAAM,gCAAgC,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC;IAChD,MAAM,eAAe,GAAG,MAAM,6BAA6B,CACzD,OAAO,EACP,KAAK,CAAC,SAAS,CAAC,aAAa,EAC7B,KAAK,CAAC,SAAS,CAAC,WAAW,CAC5B,CAAC;IACF,IAAI,YAAY,IAAI,CAAC,CAAC,iBAAiB,IAAI,YAAY,CAAC,EAAE,CAAC;QACzD,IACE,CAAC,wCAAwC,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,EACxE,CAAC;YACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,sCAAsC,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,CAAC;YAC1E,sBAAsB,CACpB,KAAK,CAAC,iBAAiB,EACvB,YAAY,EACZ,KAAK,CAAC,cAAc,CACrB,CAAC;YACF,OAAO,YAAY,CAAC;QACtB,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,6BAA6B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,MAAM,GAAG,MAAM,qCAAqC,CACtD,OAAO,EACP,KAAK,CAAC,SAAS,EACf,eAAe,CAChB,CAAC;IACF,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,EAAE,CAAC;QACrD,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,KAAK,CAAC,+BAA+B,CAAC;YAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;SAC9B,CAAC,CAAC;QACH,MAAM,GAAG,MAAM,qCAAqC,CAClD,OAAO,EACP,KAAK,CAAC,SAAS,EACf,eAAe,CAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,6BAA6B,CAAC,cAAc,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,sCAAsC,CAAC;QACpE,MAAM;QACN,KAAK,EAAE,oBAAoB,cAAc,EAAE;QAC3C,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,MAAM,QAAQ,GACZ,MAAM,yDAAyD,CAAC;QAC9D,MAAM;QACN,iBAAiB,EAAE,KAAK,CAAC,SAAS;QAClC,qBAAqB,EAAE,GAAG,EAAE,CAC1B,iCAAiC,CAAC;YAChC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,+BAA+B,EAC7B,KAAK,CAAC,+BAA+B;SACxC,CAAC;QACJ,eAAe;QACf,gBAAgB;KACjB,CAAC,CAAC;IACL,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvB,CAAC;IAED,sBAAsB,CACpB,KAAK,CAAC,iBAAiB,EACvB,QAAQ,CAAC,KAAK,EACd,KAAK,CAAC,cAAc,CACrB,CAAC;IACF,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzD,OAAO,QAAQ,CAAC,KAAK,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,KAQxD;IACC,MAAM,+BAA+B,GACnC,sCAAsC,CACpC,KAAK,CAAC,+BAA+B,EACrC,KAAK,CAAC,YAAY,CACnB,CAAC;IACJ,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAmC,CAAC;IACpE,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,gBAAgB,CAAC,GAAG,CAAC,4BAA4B,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,2EAA2E;IAC3E,yEAAyE;IACzE,0CAA0C;IAC1C,IACE,+BAA+B;QAC/B,CAAC,+BAA+B,CAAC,gBAAgB,EACjD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,uCAAuC,CAAC;YAC7D,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,OAAO;YACxC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;YAChD,UAAU;SACX,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxD,MAAM,+BAA+B,CAAC;gBACpC,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,UAAU,EAAE,QAAQ;aACrB,CAAC,CAAC;YACH,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,OAAO,OAAO,CAAC,GAAG,CAChB,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC3B,+BAA+B,CAAC;QAC9B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,SAAS;QACT,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,+BAA+B;KAChC,CAAC,CACH,CACF,CAAC;AACJ,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type PrincipalPolicySignerPublicKey,\n  type ReferencedPrincipalHead,\n  toFingerprint,\n  type VerifiedPrincipalPolicy,\n  verifyPrincipalPolicyBundle,\n} from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { loadPrincipalPolicyCheckpoint } from \"../persistence/keyingCheckpointPersistence\";\nimport {\n  principalPolicyHeadMeetsCheckpoint,\n  verifiedPrincipalPolicyMeetsCheckpoint,\n} from \"../persistence/principalPolicyCheckpointSelection\";\nimport { loadPrincipalPolicyBundle } from \"../persistence/principalPolicyPersistence\";\nimport { loadPrincipalPolicyBundleForReference } from \"../persistence/principalPolicyReferencePersistence\";\nimport {\n  parseOrganizationAuthorityDescriptor,\n  principalHeadMatchesReference,\n  requireOrganizationGroupHead,\n} from \"../principals/organizationAuthorityDescriptor\";\nimport {\n  organizationAdminExternalAuthority,\n  principalPolicyReferenceFromBundle,\n  verifyOrganizationAdminPolicy,\n  verifyPrincipalPolicyBundleWithExternalOrganizationAdmins,\n} from \"../principals/principalPolicyAdminSigners\";\nimport type { PrincipalPolicyCurrentEvidence } from \"../principals/principalPolicyEvidence\";\nimport { principalPolicyBundleStates } from \"../principals/principalPolicyStates\";\nimport {\n  observePrincipalPolicy,\n  type ProjectionCheckpointContext,\n} from \"./checkpointContext\";\nimport { ProjectionDependencyUnavailableError } from \"./dependencyUnavailable\";\nimport { rethrowProjectionVerificationBoundaryError } from \"./error\";\nimport {\n  filterUncachedPrincipalPolicyReferences,\n  referencedPrincipalPolicyKey,\n  verifiedPrincipalPolicyContainsReference,\n} from \"./principalPolicyCache\";\nimport { resolveReferencedPrincipalPolicy } from \"./resolvedPrincipalPolicy\";\nimport type {\n  PrincipalPolicyCache,\n  ProjectionUserKeyResolver,\n  ReferencedPrincipalPolicyWarmer,\n} from \"./types\";\nimport {\n  assertProjectionVerificationCurrent,\n  generationGuardedPrincipalPolicyWarmer,\n} from \"./types\";\n\nfunction principalPolicyReferenceLabel(\n  reference: ReferencedPrincipalHead,\n): string {\n  return `${reference.principalType}:${reference.principalId}@${reference.version}`;\n}\n\n/**\n * A referenced principal policy is not in the local store and warming could\n * not fetch it this pass — a transient cold-cache condition, typical for a\n * member whose access arrives via a group policy the device has not hydrated\n * yet. Sync passes discriminate on this type to defer the affected container\n * and retry on a later trigger, rather than failing the whole pass.\n */\nexport class PrincipalPolicyNotCachedError extends Error {\n  constructor(referenceLabel: string) {\n    super(`Principal policy ${referenceLabel} is not cached`);\n    this.name = \"PrincipalPolicyNotCachedError\";\n  }\n}\n\nexport function isPrincipalPolicyNotCachedError(error: unknown): boolean {\n  return (\n    error instanceof PrincipalPolicyNotCachedError ||\n    (error instanceof Error && error.name === \"PrincipalPolicyNotCachedError\")\n  );\n}\n\nasync function collectPrincipalPolicySignerPublicKeys(input: {\n  bundle: PrincipalPolicyBundleResponse;\n  label: string;\n  resolveUserKey: ProjectionUserKeyResolver;\n}): Promise<PrincipalPolicySignerPublicKey[]> {\n  const signerPublicKeysByKey = new Map<\n    string,\n    PrincipalPolicySignerPublicKey\n  >();\n\n  for (const state of principalPolicyBundleStates(input.bundle)) {\n    const cacheKey = `${state.signerUserId}:${state.signerUserKeyFingerprint}`;\n    if (signerPublicKeysByKey.has(cacheKey)) {\n      continue;\n    }\n\n    const signerKey = await input.resolveUserKey(state.signerUserId);\n    if (!signerKey) {\n      throw new ProjectionDependencyUnavailableError(\n        `${input.label} signer key could not be resolved for ${state.signerUserId}`,\n      );\n    }\n\n    const signingKeyFingerprint = await toFingerprint(\n      signerKey.signingPublicKey,\n    );\n    if (signingKeyFingerprint !== state.signerUserKeyFingerprint) {\n      throw new KeyingVerificationError(\n        \"signer_mismatch\",\n        `${input.label} signer key fingerprint mismatch`,\n      );\n    }\n\n    signerPublicKeysByKey.set(cacheKey, {\n      userId: state.signerUserId,\n      signingKeyFingerprint,\n      signingPublicKey: signerKey.signingPublicKey,\n    });\n  }\n\n  return [...signerPublicKeysByKey.values()];\n}\n\ntype OrganizationAdminPolicyInput = {\n  checkpointContext: ProjectionCheckpointContext;\n  organizationId: string;\n  resolveUserKey: ProjectionUserKeyResolver;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n};\n\nasync function loadOrganizationPolicyForVerification(\n  input: OrganizationAdminPolicyInput,\n): Promise<\n  | {\n      bundle: PrincipalPolicyBundleResponse;\n      localCheckpoint: Awaited<\n        ReturnType<typeof loadPrincipalPolicyCheckpoint>\n      >;\n    }\n  | undefined\n> {\n  const execSql = input.checkpointContext.execSql;\n  let bundle = await loadPrincipalPolicyBundle(\n    execSql,\n    \"organization\",\n    input.organizationId,\n  );\n  if (!bundle) {\n    return undefined;\n  }\n  let localCheckpoint = await loadPrincipalPolicyCheckpoint(\n    execSql,\n    \"organization\",\n    input.organizationId,\n  );\n  if (\n    !principalPolicyHeadMeetsCheckpoint(bundle.currentState, localCheckpoint) &&\n    input.warmReferencedPrincipalPolicies\n  ) {\n    await input.warmReferencedPrincipalPolicies({\n      organizationId: input.organizationId,\n      references: [principalPolicyReferenceFromBundle(bundle)],\n    });\n    bundle = await loadPrincipalPolicyBundle(\n      execSql,\n      \"organization\",\n      input.organizationId,\n    );\n    localCheckpoint = await loadPrincipalPolicyCheckpoint(\n      execSql,\n      \"organization\",\n      input.organizationId,\n    );\n    if (!bundle) {\n      return undefined;\n    }\n  }\n\n  return { bundle, localCheckpoint };\n}\n\nfunction assertReservedAdminsPolicyShape(\n  policy: VerifiedPrincipalPolicy,\n): void {\n  const history = policy.history ?? [{ projection: policy.projection }];\n  if (\n    history.some(\n      (entry) =>\n        entry.projection.length === 0 ||\n        entry.projection.some((member) => member.role !== \"admin\"),\n    )\n  ) {\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"reserved Admins policy must contain only direct admin users\",\n    );\n  }\n}\n\nasync function verifyOrganizationAdminsPolicy(input: {\n  adminGroupId: string;\n  execSql: ProjectionCheckpointContext[\"execSql\"];\n  expectedHead: ReferencedPrincipalHead;\n  resolveUserKey: ProjectionUserKeyResolver;\n}): Promise<VerifiedPrincipalPolicy | undefined> {\n  const adminBundle = await loadPrincipalPolicyBundle(\n    input.execSql,\n    \"group\",\n    input.adminGroupId,\n  );\n  if (!adminBundle) {\n    return undefined;\n  }\n  if (\n    !principalHeadMatchesReference(\n      principalPolicyReferenceFromBundle(adminBundle),\n      input.expectedHead,\n    )\n  ) {\n    throw new KeyingVerificationError(\n      \"hash_mismatch\",\n      \"Admins policy does not match the signed organization directory\",\n    );\n  }\n  const adminCheckpoint = await loadPrincipalPolicyCheckpoint(\n    input.execSql,\n    \"group\",\n    input.adminGroupId,\n  );\n  const signerPublicKeys = await collectPrincipalPolicySignerPublicKeys({\n    bundle: adminBundle,\n    label: `Admins policy ${input.adminGroupId}`,\n    resolveUserKey: input.resolveUserKey,\n  });\n  const verified = await verifyPrincipalPolicyBundle({\n    bundle: adminBundle,\n    expectedReference: input.expectedHead,\n    localCheckpoint: adminCheckpoint,\n    signerPublicKeys,\n  });\n  if (!verified.ok) {\n    throw verified.error;\n  }\n  assertReservedAdminsPolicyShape(verified.value);\n  return verified.value;\n}\n\nasync function loadOrganizationExternalAuthority(\n  input: OrganizationAdminPolicyInput,\n): Promise<ReturnType<typeof organizationAdminExternalAuthority> | null> {\n  const organizationPolicy = await loadOrganizationPolicyForVerification(input);\n  if (!organizationPolicy) {\n    return null;\n  }\n\n  try {\n    const signerPublicKeys = await collectPrincipalPolicySignerPublicKeys({\n      bundle: organizationPolicy.bundle,\n      label: `Organization policy ${input.organizationId}`,\n      resolveUserKey: input.resolveUserKey,\n    });\n    const verified = await verifyOrganizationAdminPolicy({\n      bundle: organizationPolicy.bundle,\n      localCheckpoint: organizationPolicy.localCheckpoint,\n      organizationId: input.organizationId,\n      signerPublicKeys,\n    });\n    if (!verified.ok) {\n      throw verified.error;\n    }\n    const descriptor = parseOrganizationAuthorityDescriptor(\n      organizationPolicy.bundle.currentPayload.ciphertext,\n    );\n    if (descriptor.organizationId !== input.organizationId) {\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"organization authority descriptor scope does not match\",\n      );\n    }\n    const verifiedAdmins = await verifyOrganizationAdminsPolicy({\n      adminGroupId: descriptor.adminGroupId,\n      execSql: input.checkpointContext.execSql,\n      expectedHead: requireOrganizationGroupHead(\n        descriptor,\n        descriptor.adminGroupId,\n      ),\n      resolveUserKey: input.resolveUserKey,\n    });\n    if (!verifiedAdmins) {\n      return null;\n    }\n    observePrincipalPolicy(\n      input.checkpointContext,\n      verified.value,\n      input.organizationId,\n    );\n    observePrincipalPolicy(\n      input.checkpointContext,\n      verifiedAdmins,\n      input.organizationId,\n    );\n    return organizationAdminExternalAuthority(verifiedAdmins);\n  } catch (error) {\n    rethrowProjectionVerificationBoundaryError(error);\n    if (error instanceof KeyingVerificationError) {\n      throw error;\n    }\n    return null;\n  }\n}\n\nasync function verifyReferencedPrincipalPolicy(input: {\n  checkpointContext: ProjectionCheckpointContext;\n  organizationId: string;\n  principalPolicyCache: PrincipalPolicyCache;\n  reference: ReferencedPrincipalHead;\n  stillCurrent?: (() => boolean) | undefined;\n  resolveUserKey: ProjectionUserKeyResolver;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n}): Promise<PrincipalPolicyCurrentEvidence> {\n  // Scoped recovery carries organization, dependency and lifetime bindings.\n  // A bare policy cache entry cannot replace those bindings.\n  const recovered = await resolveReferencedPrincipalPolicy(input);\n  if (recovered) return recovered;\n  const cacheKey = referencedPrincipalPolicyKey(input.reference);\n  const cachedPolicy = input.principalPolicyCache.get(cacheKey);\n  const execSql = input.checkpointContext.execSql;\n  const localCheckpoint = await loadPrincipalPolicyCheckpoint(\n    execSql,\n    input.reference.principalType,\n    input.reference.principalId,\n  );\n  if (cachedPolicy && !(\"retainedHistory\" in cachedPolicy)) {\n    if (\n      !verifiedPrincipalPolicyContainsReference(cachedPolicy, input.reference)\n    ) {\n      throw new KeyingVerificationError(\n        \"hash_mismatch\",\n        \"in-memory principal policy cache does not match its exact reference\",\n      );\n    }\n    if (verifiedPrincipalPolicyMeetsCheckpoint(cachedPolicy, localCheckpoint)) {\n      observePrincipalPolicy(\n        input.checkpointContext,\n        cachedPolicy,\n        input.organizationId,\n      );\n      return cachedPolicy;\n    }\n  }\n\n  const referenceLabel = principalPolicyReferenceLabel(input.reference);\n  let bundle = await loadPrincipalPolicyBundleForReference(\n    execSql,\n    input.reference,\n    localCheckpoint,\n  );\n  if (!bundle && input.warmReferencedPrincipalPolicies) {\n    // The reference is not cached locally — the common case for a member who\n    // gained access via another org's group grant and never hydrated that\n    // group's policy. Fetch+verify+persist it, then re-read from the cache.\n    await input.warmReferencedPrincipalPolicies({\n      organizationId: input.organizationId,\n      references: [input.reference],\n    });\n    bundle = await loadPrincipalPolicyBundleForReference(\n      execSql,\n      input.reference,\n      localCheckpoint,\n    );\n  }\n  if (!bundle) {\n    throw new PrincipalPolicyNotCachedError(referenceLabel);\n  }\n\n  const signerPublicKeys = await collectPrincipalPolicySignerPublicKeys({\n    bundle,\n    label: `Principal policy ${referenceLabel}`,\n    resolveUserKey: input.resolveUserKey,\n  });\n  const verified =\n    await verifyPrincipalPolicyBundleWithExternalOrganizationAdmins({\n      bundle,\n      expectedReference: input.reference,\n      loadExternalAuthority: () =>\n        loadOrganizationExternalAuthority({\n          checkpointContext: input.checkpointContext,\n          organizationId: input.organizationId,\n          resolveUserKey: input.resolveUserKey,\n          warmReferencedPrincipalPolicies:\n            input.warmReferencedPrincipalPolicies,\n        }),\n      localCheckpoint,\n      signerPublicKeys,\n    });\n  if (!verified.ok) {\n    throw verified.error;\n  }\n\n  observePrincipalPolicy(\n    input.checkpointContext,\n    verified.value,\n    input.organizationId,\n  );\n  input.principalPolicyCache.set(cacheKey, verified.value);\n  return verified.value;\n}\n\nexport async function collectReferencedPrincipalPolicies(input: {\n  checkpointContext: ProjectionCheckpointContext;\n  organizationId: string;\n  principalPolicyCache: PrincipalPolicyCache;\n  references: readonly ReferencedPrincipalHead[];\n  resolveUserKey: ProjectionUserKeyResolver;\n  stillCurrent?: (() => boolean) | undefined;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n}): Promise<PrincipalPolicyCurrentEvidence[]> {\n  const warmReferencedPrincipalPolicies =\n    generationGuardedPrincipalPolicyWarmer(\n      input.warmReferencedPrincipalPolicies,\n      input.stillCurrent,\n    );\n  const uniqueReferences = new Map<string, ReferencedPrincipalHead>();\n  for (const reference of input.references) {\n    uniqueReferences.set(referencedPrincipalPolicyKey(reference), reference);\n  }\n\n  const references = [...uniqueReferences.values()];\n  // Warm every missing reference in one batched fetch before verifying, so a\n  // path that references several uncached policies makes a single round of\n  // requests rather than one per reference.\n  if (\n    warmReferencedPrincipalPolicies &&\n    !warmReferencedPrincipalPolicies.resolveReference\n  ) {\n    const uncached = await filterUncachedPrincipalPolicyReferences({\n      execSql: input.checkpointContext.execSql,\n      principalPolicyCache: input.principalPolicyCache,\n      references,\n    });\n    if (uncached.length > 0) {\n      assertProjectionVerificationCurrent(input.stillCurrent);\n      await warmReferencedPrincipalPolicies({\n        organizationId: input.organizationId,\n        references: uncached,\n      });\n      assertProjectionVerificationCurrent(input.stillCurrent);\n    }\n  }\n\n  // The warmer's operation shares one recovery view across its collections.\n  return Promise.all(\n    references.map((reference) =>\n      verifyReferencedPrincipalPolicy({\n        checkpointContext: input.checkpointContext,\n        organizationId: input.organizationId,\n        principalPolicyCache: input.principalPolicyCache,\n        reference,\n        stillCurrent: input.stillCurrent,\n        resolveUserKey: input.resolveUserKey,\n        warmReferencedPrincipalPolicies,\n      }),\n    ),\n  );\n}\n"]}

package/data/keyingProjectionVerification/readers.d.ts

@@ -1,4 +1,4 @@
-export { readRecordNullableString, readRecordString, readRequiredRecordValue, } from "../recordReaders.js";
+export { readRecordNullableString, readRecordString, readRequiredRecordValue, } from "../shared/recordReaders.js";
 import type { AccessEvent, AccessManifest, ContainerKekRecipientTarget, ContainerKeyEpoch, ContainerKeyWrap, DocumentLinkAccessEventBody, DocumentUnlinkAccessEventBody } from "../../internal/crypto/index.js";
 export declare function readAccessEvent(value: unknown, label: string): AccessEvent;
 export declare function readAccessManifest(value: unknown, label: string): AccessManifest;

package/data/keyingProjectionVerification/readers.js

@@ -1,7 +1,7 @@
 import { normalizeDocumentAccessEventBody } from "../../internal/crypto/index.js";
-export { readRecordNullableString, readRecordString, readRequiredRecordValue, } from "../recordReaders.js";
-import { readCanonicalJson, readCanonicalRecord } from "../keyingCanonicalJson.js";
-import { readRecordNullableString, readRecordPositiveInteger, readRecordString, readRequiredRecordValue, readStringArray, } from "../recordReaders.js";
+export { readRecordNullableString, readRecordString, readRequiredRecordValue, } from "../shared/recordReaders.js";
+import { readCanonicalJson, readCanonicalRecord, } from "../keying/canonicalJson.js";
+import { readRecordNullableString, readRecordPositiveInteger, readRecordString, readRequiredRecordValue, readStringArray, } from "../shared/recordReaders.js";
 import { readKeyingVerificationShape } from "./error.js";
 function isAccessEventType(value) {
     return (value === "attachment.bind" ||

package/data/keyingProjectionVerification/readers.js.map

@@ -1 +1 @@
-{"version":3,"file":"readers.js","sourceRoot":"","sources":["readers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,mBAAmB,CAAC;AAErE,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAW1B,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,gBAAgB,EAChB,uBAAuB,EACvB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,2BAA2B,EAAE,MAAM,SAAS,CAAC;AAEtD,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,CACL,KAAK,KAAK,iBAAiB;QAC3B,KAAK,KAAK,mBAAmB;QAC7B,KAAK,KAAK,kBAAkB;QAC5B,KAAK,KAAK,iBAAiB;QAC3B,KAAK,KAAK,gBAAgB;QAC1B,KAAK,KAAK,iBAAiB;QAC3B,KAAK,KAAK,kBAAkB;QAC5B,KAAK,KAAK,kBAAkB;QAC5B,KAAK,KAAK,eAAe;QACzB,KAAK,KAAK,gBAAgB;QAC1B,KAAK,KAAK,iBAAiB,CAC5B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc;IAEd,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,UAAU,CAAC;AAC3E,CAAC;AAED,SAAS,eAAe,CACtB,KAAc;IAEd,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,KAAa;IAC3D,OAAO,2BAA2B,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAa;IACzD,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IAED,OAAO;QACL,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC;QACnD,SAAS;QACT,UAAU;QACV,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC;QACrD,cAAc,EAAE,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC;QACjE,oBAAoB,EAAE,wBAAwB,CAC5C,MAAM,EACN,sBAAsB,EACtB,KAAK,CACN;QACD,wBAAwB,EAAE,eAAe,CACvC,uBAAuB,CAAC,MAAM,EAAE,0BAA0B,EAAE,KAAK,CAAC,EAClE,GAAG,KAAK,2BAA2B,CACpC;QACD,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC;QACrD,YAAY,EAAE,gBAAgB,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC;QAC7D,cAAc,EAAE,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC;QACjE,oBAAoB,EAAE,gBAAgB,CACpC,MAAM,EACN,sBAAsB,EACtB,KAAK,CACN;QACD,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC;QACrD,SAAS,EAAE,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAc,EACd,KAAa;IAEb,OAAO,2BAA2B,CAAC,GAAG,EAAE,CACtC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAc,EACd,KAAa;IAEb,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,wBAAwB,GAAG,uBAAuB,CACtD,MAAM,EACN,0BAA0B,EAC1B,KAAK,CACN,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4CAA4C,CAAC,CAAC;IACxE,CAAC;IAED,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU;QACV,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC;QACrD,cAAc,EAAE,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC;QACjE,KAAK,EAAE,yBAAyB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;QACxD,oBAAoB,EAAE,wBAAwB,CAC5C,MAAM,EACN,sBAAsB,EACtB,KAAK,CACN;QACD,SAAS,EAAE,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC;QACvD,cAAc,EAAE,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC;QACjE,SAAS,EAAE,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC;QACvD,wBAAwB,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACrE,MAAM,UAAU,GAAG,mBAAmB,CACpC,IAAI,EACJ,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C,CAAC;YACF,MAAM,aAAa,GAAG,uBAAuB,CAC3C,UAAU,EACV,eAAe,EACf,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C,CAAC;YACF,IAAI,aAAa,KAAK,OAAO,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,6BAA6B,KAAK,4BAA4B,CACvE,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,aAAa;gBACb,WAAW,EAAE,gBAAgB,CAC3B,UAAU,EACV,aAAa,EACb,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C;gBACD,OAAO,EAAE,yBAAyB,CAChC,UAAU,EACV,SAAS,EACT,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C;gBACD,QAAQ,EAAE,yBAAyB,CACjC,UAAU,EACV,UAAU,EACV,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C;gBACD,SAAS,EAAE,gBAAgB,CACzB,UAAU,EACV,WAAW,EACX,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C;gBACD,cAAc,EAAE,gBAAgB,CAC9B,UAAU,EACV,gBAAgB,EAChB,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C;aACF,CAAC;QACJ,CAAC,CAAC;QACF,aAAa,EAAE,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc,EACd,KAAa;IAEb,OAAO,2BAA2B,CAAC,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAEjD,OAAO;YACL,EAAE,EAAE,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;YACzC,WAAW,EAAE,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC;YAC3D,QAAQ,EAAE,yBAAyB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC;YAC9D,kBAAkB,EAAE,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,CAAC;YACzE,yBAAyB,EAAE,wBAAwB,CACjD,MAAM,EACN,2BAA2B,EAC3B,KAAK,CACN;YACD,kBAAkB,EAAE,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,CAAC;YACzE,qBAAqB,EAAE,gBAAgB,CACrC,MAAM,EACN,uBAAuB,EACvB,KAAK,CACN;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,KAAa;IAEb,OAAO,2BAA2B,CAAC,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,uBAAuB,CAC3C,MAAM,EACN,eAAe,EACf,KAAK,CACN,CAAC;QACF,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;QACvD,CAAC;QAED,OAAO;YACL,mBAAmB,EAAE,gBAAgB,CACnC,MAAM,EACN,qBAAqB,EACrB,KAAK,CACN;YACD,aAAa;YACb,WAAW,EAAE,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC;YAC3D,mBAAmB,EAAE,gBAAgB,CACnC,MAAM,EACN,qBAAqB,EACrB,KAAK,CACN;YACD,uBAAuB,EAAE,gBAAgB,CACvC,MAAM,EACN,yBAAyB,EACzB,KAAK,CACN;YACD,aAAa,EAAE,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC;YAC/D,UAAU,EAAE,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC;YACzD,gBAAgB,EAAE,gBAAgB,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,CAAC;SACtE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,KAAc,EACd,KAAa;IAEb,OAAO,2BAA2B,CAAC,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,uBAAuB,CAC3C,MAAM,EACN,eAAe,EACf,KAAK,CACN,CAAC;QACF,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;QACvD,CAAC;QAED,OAAO;YACL,aAAa;YACb,WAAW,EAAE,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC;YAC3D,mBAAmB,EAAE,gBAAgB,CACnC,MAAM,EACN,qBAAqB,EACrB,KAAK,CACN;YACD,uBAAuB,EAAE,gBAAgB,CACvC,MAAM,EACN,yBAAyB,EACzB,KAAK,CACN;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAc,EACd,KAAa;IAEb,OAAO,2BAA2B,CAAC,GAAG,EAAE,CACtC,gCAAgC,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAClE,CAAC;AACJ,CAAC","sourcesContent":["import { normalizeDocumentAccessEventBody } from \"@tearleads/crypto\";\n\nexport {\n  readRecordNullableString,\n  readRecordString,\n  readRequiredRecordValue,\n} from \"../recordReaders\";\n\nimport type {\n  AccessEvent,\n  AccessManifest,\n  ContainerKekRecipientTarget,\n  ContainerKeyEpoch,\n  ContainerKeyWrap,\n  DocumentLinkAccessEventBody,\n  DocumentUnlinkAccessEventBody,\n} from \"@tearleads/crypto\";\nimport { readCanonicalJson, readCanonicalRecord } from \"../keyingCanonicalJson\";\nimport {\n  readRecordNullableString,\n  readRecordPositiveInteger,\n  readRecordString,\n  readRequiredRecordValue,\n  readStringArray,\n} from \"../recordReaders\";\nimport { readKeyingVerificationShape } from \"./error\";\n\nfunction isAccessEventType(value: unknown): value is AccessEvent[\"eventType\"] {\n  return (\n    value === \"attachment.bind\" ||\n    value === \"attachment.detach\" ||\n    value === \"container.create\" ||\n    value === \"container.grant\" ||\n    value === \"container.move\" ||\n    value === \"container.rekey\" ||\n    value === \"container.recite\" ||\n    value === \"container.revoke\" ||\n    value === \"document.link\" ||\n    value === \"document.purge\" ||\n    value === \"document.unlink\"\n  );\n}\n\nfunction isAccessObjectKind(\n  value: unknown,\n): value is AccessEvent[\"objectKind\"] {\n  return value === \"blob\" || value === \"container\" || value === \"document\";\n}\n\nfunction isRecipientKind(\n  value: unknown,\n): value is ContainerKekRecipientTarget[\"recipientKind\"] {\n  return value === \"container\" || value === \"group\" || value === \"user\";\n}\n\nexport function readAccessEvent(value: unknown, label: string): AccessEvent {\n  return readKeyingVerificationShape(() => readAccessEventShape(value, label));\n}\n\nfunction readAccessEventShape(value: unknown, label: string): AccessEvent {\n  const record = readCanonicalRecord(value, label);\n  const eventType = readRequiredRecordValue(record, \"eventType\", label);\n  const objectKind = readRequiredRecordValue(record, \"objectKind\", label);\n  if (!isAccessEventType(eventType)) {\n    throw new Error(`${label}.eventType is invalid`);\n  }\n  if (!isAccessObjectKind(objectKind)) {\n    throw new Error(`${label}.objectKind is invalid`);\n  }\n  if (readRecordPositiveInteger(record, \"version\", label) !== 1) {\n    throw new Error(`${label}.version must be 1`);\n  }\n\n  return {\n    version: 1,\n    eventId: readRecordString(record, \"eventId\", label),\n    eventType,\n    objectKind,\n    objectId: readRecordString(record, \"objectId\", label),\n    organizationId: readRecordString(record, \"organizationId\", label),\n    previousManifestHash: readRecordNullableString(\n      record,\n      \"previousManifestHash\",\n      label,\n    ),\n    dependencyManifestHashes: readStringArray(\n      readRequiredRecordValue(record, \"dependencyManifestHashes\", label),\n      `${label}.dependencyManifestHashes`,\n    ),\n    bodyHash: readRecordString(record, \"bodyHash\", label),\n    signerUserId: readRecordString(record, \"signerUserId\", label),\n    signerDeviceId: readRecordString(record, \"signerDeviceId\", label),\n    signerKeyFingerprint: readRecordString(\n      record,\n      \"signerKeyFingerprint\",\n      label,\n    ),\n    signedAt: readRecordString(record, \"signedAt\", label),\n    signature: readRecordString(record, \"signature\", label),\n  };\n}\n\nexport function readAccessManifest(\n  value: unknown,\n  label: string,\n): AccessManifest {\n  return readKeyingVerificationShape(() =>\n    readAccessManifestShape(value, label),\n  );\n}\n\nfunction readAccessManifestShape(\n  value: unknown,\n  label: string,\n): AccessManifest {\n  const record = readCanonicalRecord(value, label);\n  const objectKind = readRequiredRecordValue(record, \"objectKind\", label);\n  if (!isAccessObjectKind(objectKind)) {\n    throw new Error(`${label}.objectKind is invalid`);\n  }\n  if (readRecordPositiveInteger(record, \"version\", label) !== 1) {\n    throw new Error(`${label}.version must be 1`);\n  }\n  const referencedPrincipalHeads = readRequiredRecordValue(\n    record,\n    \"referencedPrincipalHeads\",\n    label,\n  );\n  if (!Array.isArray(referencedPrincipalHeads)) {\n    throw new Error(`${label}.referencedPrincipalHeads must be an array`);\n  }\n\n  return {\n    version: 1,\n    objectKind,\n    objectId: readRecordString(record, \"objectId\", label),\n    organizationId: readRecordString(record, \"organizationId\", label),\n    epoch: readRecordPositiveInteger(record, \"epoch\", label),\n    previousManifestHash: readRecordNullableString(\n      record,\n      \"previousManifestHash\",\n      label,\n    ),\n    eventHash: readRecordString(record, \"eventHash\", label),\n    structuralHash: readRecordString(record, \"structuralHash\", label),\n    grantRoot: readRecordString(record, \"grantRoot\", label),\n    referencedPrincipalHeads: referencedPrincipalHeads.map((head, index) => {\n      const headRecord = readCanonicalRecord(\n        head,\n        `${label}.referencedPrincipalHeads[${index}]`,\n      );\n      const principalType = readRequiredRecordValue(\n        headRecord,\n        \"principalType\",\n        `${label}.referencedPrincipalHeads[${index}]`,\n      );\n      if (principalType !== \"group\" && principalType !== \"organization\") {\n        throw new Error(\n          `${label}.referencedPrincipalHeads[${index}].principalType is invalid`,\n        );\n      }\n      return {\n        principalType,\n        principalId: readRecordString(\n          headRecord,\n          \"principalId\",\n          `${label}.referencedPrincipalHeads[${index}]`,\n        ),\n        version: readRecordPositiveInteger(\n          headRecord,\n          \"version\",\n          `${label}.referencedPrincipalHeads[${index}]`,\n        ),\n        keyEpoch: readRecordPositiveInteger(\n          headRecord,\n          \"keyEpoch\",\n          `${label}.referencedPrincipalHeads[${index}]`,\n        ),\n        stateHash: readRecordString(\n          headRecord,\n          \"stateHash\",\n          `${label}.referencedPrincipalHeads[${index}]`,\n        ),\n        keyFingerprint: readRecordString(\n          headRecord,\n          \"keyFingerprint\",\n          `${label}.referencedPrincipalHeads[${index}]`,\n        ),\n      };\n    }),\n    keyTargetHash: readRecordString(record, \"keyTargetHash\", label),\n  };\n}\n\nexport function readContainerKeyEpoch(\n  value: unknown,\n  label: string,\n): ContainerKeyEpoch {\n  return readKeyingVerificationShape(() => {\n    const record = readCanonicalRecord(value, label);\n\n    return {\n      id: readRecordString(record, \"id\", label),\n      containerId: readRecordString(record, \"containerId\", label),\n      keyEpoch: readRecordPositiveInteger(record, \"keyEpoch\", label),\n      accessManifestHash: readRecordString(record, \"accessManifestHash\", label),\n      parentContainerKeyEpochId: readRecordNullableString(\n        record,\n        \"parentContainerKeyEpochId\",\n        label,\n      ),\n      createdByEventHash: readRecordString(record, \"createdByEventHash\", label),\n      createdByManifestHash: readRecordString(\n        record,\n        \"createdByManifestHash\",\n        label,\n      ),\n    };\n  });\n}\n\nexport function readContainerKeyWrap(\n  value: unknown,\n  label: string,\n): ContainerKeyWrap {\n  return readKeyingVerificationShape(() => {\n    const record = readCanonicalRecord(value, label);\n    const recipientKind = readRequiredRecordValue(\n      record,\n      \"recipientKind\",\n      label,\n    );\n    if (!isRecipientKind(recipientKind)) {\n      throw new Error(`${label}.recipientKind is invalid`);\n    }\n\n    return {\n      containerKeyEpochId: readRecordString(\n        record,\n        \"containerKeyEpochId\",\n        label,\n      ),\n      recipientKind,\n      recipientId: readRecordString(record, \"recipientId\", label),\n      recipientKeyEpochId: readRecordString(\n        record,\n        \"recipientKeyEpochId\",\n        label,\n      ),\n      recipientKeyFingerprint: readRecordString(\n        record,\n        \"recipientKeyFingerprint\",\n        label,\n      ),\n      kemCipherText: readRecordString(record, \"kemCipherText\", label),\n      wrappedKey: readRecordString(record, \"wrappedKey\", label),\n      wrapManifestHash: readRecordString(record, \"wrapManifestHash\", label),\n    };\n  });\n}\n\nexport function readContainerKekRecipientTarget(\n  value: unknown,\n  label: string,\n): ContainerKekRecipientTarget {\n  return readKeyingVerificationShape(() => {\n    const record = readCanonicalRecord(value, label);\n    const recipientKind = readRequiredRecordValue(\n      record,\n      \"recipientKind\",\n      label,\n    );\n    if (!isRecipientKind(recipientKind)) {\n      throw new Error(`${label}.recipientKind is invalid`);\n    }\n\n    return {\n      recipientKind,\n      recipientId: readRecordString(record, \"recipientId\", label),\n      recipientKeyEpochId: readRecordString(\n        record,\n        \"recipientKeyEpochId\",\n        label,\n      ),\n      recipientKeyFingerprint: readRecordString(\n        record,\n        \"recipientKeyFingerprint\",\n        label,\n      ),\n    };\n  });\n}\n\nexport function readDocumentAccessEventBody(\n  value: unknown,\n  label: string,\n): DocumentLinkAccessEventBody | DocumentUnlinkAccessEventBody {\n  return readKeyingVerificationShape(() =>\n    normalizeDocumentAccessEventBody(readCanonicalJson(value, label)),\n  );\n}\n"]}
+{"version":3,"file":"readers.js","sourceRoot":"","sources":["readers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,mBAAmB,CAAC;AAErE,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAWjC,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,gBAAgB,EAChB,uBAAuB,EACvB,eAAe,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,SAAS,CAAC;AAEtD,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,CACL,KAAK,KAAK,iBAAiB;QAC3B,KAAK,KAAK,mBAAmB;QAC7B,KAAK,KAAK,kBAAkB;QAC5B,KAAK,KAAK,iBAAiB;QAC3B,KAAK,KAAK,gBAAgB;QAC1B,KAAK,KAAK,iBAAiB;QAC3B,KAAK,KAAK,kBAAkB;QAC5B,KAAK,KAAK,kBAAkB;QAC5B,KAAK,KAAK,eAAe;QACzB,KAAK,KAAK,gBAAgB;QAC1B,KAAK,KAAK,iBAAiB,CAC5B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc;IAEd,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,UAAU,CAAC;AAC3E,CAAC;AAED,SAAS,eAAe,CACtB,KAAc;IAEd,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,KAAa;IAC3D,OAAO,2BAA2B,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAa;IACzD,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IAED,OAAO;QACL,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC;QACnD,SAAS;QACT,UAAU;QACV,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC;QACrD,cAAc,EAAE,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC;QACjE,oBAAoB,EAAE,wBAAwB,CAC5C,MAAM,EACN,sBAAsB,EACtB,KAAK,CACN;QACD,wBAAwB,EAAE,eAAe,CACvC,uBAAuB,CAAC,MAAM,EAAE,0BAA0B,EAAE,KAAK,CAAC,EAClE,GAAG,KAAK,2BAA2B,CACpC;QACD,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC;QACrD,YAAY,EAAE,gBAAgB,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC;QAC7D,cAAc,EAAE,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC;QACjE,oBAAoB,EAAE,gBAAgB,CACpC,MAAM,EACN,sBAAsB,EACtB,KAAK,CACN;QACD,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC;QACrD,SAAS,EAAE,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAc,EACd,KAAa;IAEb,OAAO,2BAA2B,CAAC,GAAG,EAAE,CACtC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAc,EACd,KAAa;IAEb,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,wBAAwB,GAAG,uBAAuB,CACtD,MAAM,EACN,0BAA0B,EAC1B,KAAK,CACN,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4CAA4C,CAAC,CAAC;IACxE,CAAC;IAED,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU;QACV,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC;QACrD,cAAc,EAAE,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC;QACjE,KAAK,EAAE,yBAAyB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;QACxD,oBAAoB,EAAE,wBAAwB,CAC5C,MAAM,EACN,sBAAsB,EACtB,KAAK,CACN;QACD,SAAS,EAAE,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC;QACvD,cAAc,EAAE,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC;QACjE,SAAS,EAAE,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC;QACvD,wBAAwB,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACrE,MAAM,UAAU,GAAG,mBAAmB,CACpC,IAAI,EACJ,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C,CAAC;YACF,MAAM,aAAa,GAAG,uBAAuB,CAC3C,UAAU,EACV,eAAe,EACf,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C,CAAC;YACF,IAAI,aAAa,KAAK,OAAO,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,6BAA6B,KAAK,4BAA4B,CACvE,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,aAAa;gBACb,WAAW,EAAE,gBAAgB,CAC3B,UAAU,EACV,aAAa,EACb,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C;gBACD,OAAO,EAAE,yBAAyB,CAChC,UAAU,EACV,SAAS,EACT,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C;gBACD,QAAQ,EAAE,yBAAyB,CACjC,UAAU,EACV,UAAU,EACV,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C;gBACD,SAAS,EAAE,gBAAgB,CACzB,UAAU,EACV,WAAW,EACX,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C;gBACD,cAAc,EAAE,gBAAgB,CAC9B,UAAU,EACV,gBAAgB,EAChB,GAAG,KAAK,6BAA6B,KAAK,GAAG,CAC9C;aACF,CAAC;QACJ,CAAC,CAAC;QACF,aAAa,EAAE,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc,EACd,KAAa;IAEb,OAAO,2BAA2B,CAAC,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAEjD,OAAO;YACL,EAAE,EAAE,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;YACzC,WAAW,EAAE,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC;YAC3D,QAAQ,EAAE,yBAAyB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC;YAC9D,kBAAkB,EAAE,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,CAAC;YACzE,yBAAyB,EAAE,wBAAwB,CACjD,MAAM,EACN,2BAA2B,EAC3B,KAAK,CACN;YACD,kBAAkB,EAAE,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,CAAC;YACzE,qBAAqB,EAAE,gBAAgB,CACrC,MAAM,EACN,uBAAuB,EACvB,KAAK,CACN;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,KAAa;IAEb,OAAO,2BAA2B,CAAC,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,uBAAuB,CAC3C,MAAM,EACN,eAAe,EACf,KAAK,CACN,CAAC;QACF,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;QACvD,CAAC;QAED,OAAO;YACL,mBAAmB,EAAE,gBAAgB,CACnC,MAAM,EACN,qBAAqB,EACrB,KAAK,CACN;YACD,aAAa;YACb,WAAW,EAAE,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC;YAC3D,mBAAmB,EAAE,gBAAgB,CACnC,MAAM,EACN,qBAAqB,EACrB,KAAK,CACN;YACD,uBAAuB,EAAE,gBAAgB,CACvC,MAAM,EACN,yBAAyB,EACzB,KAAK,CACN;YACD,aAAa,EAAE,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC;YAC/D,UAAU,EAAE,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC;YACzD,gBAAgB,EAAE,gBAAgB,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,CAAC;SACtE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,KAAc,EACd,KAAa;IAEb,OAAO,2BAA2B,CAAC,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,uBAAuB,CAC3C,MAAM,EACN,eAAe,EACf,KAAK,CACN,CAAC;QACF,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;QACvD,CAAC;QAED,OAAO;YACL,aAAa;YACb,WAAW,EAAE,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC;YAC3D,mBAAmB,EAAE,gBAAgB,CACnC,MAAM,EACN,qBAAqB,EACrB,KAAK,CACN;YACD,uBAAuB,EAAE,gBAAgB,CACvC,MAAM,EACN,yBAAyB,EACzB,KAAK,CACN;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAc,EACd,KAAa;IAEb,OAAO,2BAA2B,CAAC,GAAG,EAAE,CACtC,gCAAgC,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAClE,CAAC;AACJ,CAAC","sourcesContent":["import { normalizeDocumentAccessEventBody } from \"@tearleads/crypto\";\n\nexport {\n  readRecordNullableString,\n  readRecordString,\n  readRequiredRecordValue,\n} from \"../shared/recordReaders\";\n\nimport type {\n  AccessEvent,\n  AccessManifest,\n  ContainerKekRecipientTarget,\n  ContainerKeyEpoch,\n  ContainerKeyWrap,\n  DocumentLinkAccessEventBody,\n  DocumentUnlinkAccessEventBody,\n} from \"@tearleads/crypto\";\nimport {\n  readCanonicalJson,\n  readCanonicalRecord,\n} from \"../keying/canonicalJson\";\nimport {\n  readRecordNullableString,\n  readRecordPositiveInteger,\n  readRecordString,\n  readRequiredRecordValue,\n  readStringArray,\n} from \"../shared/recordReaders\";\nimport { readKeyingVerificationShape } from \"./error\";\n\nfunction isAccessEventType(value: unknown): value is AccessEvent[\"eventType\"] {\n  return (\n    value === \"attachment.bind\" ||\n    value === \"attachment.detach\" ||\n    value === \"container.create\" ||\n    value === \"container.grant\" ||\n    value === \"container.move\" ||\n    value === \"container.rekey\" ||\n    value === \"container.recite\" ||\n    value === \"container.revoke\" ||\n    value === \"document.link\" ||\n    value === \"document.purge\" ||\n    value === \"document.unlink\"\n  );\n}\n\nfunction isAccessObjectKind(\n  value: unknown,\n): value is AccessEvent[\"objectKind\"] {\n  return value === \"blob\" || value === \"container\" || value === \"document\";\n}\n\nfunction isRecipientKind(\n  value: unknown,\n): value is ContainerKekRecipientTarget[\"recipientKind\"] {\n  return value === \"container\" || value === \"group\" || value === \"user\";\n}\n\nexport function readAccessEvent(value: unknown, label: string): AccessEvent {\n  return readKeyingVerificationShape(() => readAccessEventShape(value, label));\n}\n\nfunction readAccessEventShape(value: unknown, label: string): AccessEvent {\n  const record = readCanonicalRecord(value, label);\n  const eventType = readRequiredRecordValue(record, \"eventType\", label);\n  const objectKind = readRequiredRecordValue(record, \"objectKind\", label);\n  if (!isAccessEventType(eventType)) {\n    throw new Error(`${label}.eventType is invalid`);\n  }\n  if (!isAccessObjectKind(objectKind)) {\n    throw new Error(`${label}.objectKind is invalid`);\n  }\n  if (readRecordPositiveInteger(record, \"version\", label) !== 1) {\n    throw new Error(`${label}.version must be 1`);\n  }\n\n  return {\n    version: 1,\n    eventId: readRecordString(record, \"eventId\", label),\n    eventType,\n    objectKind,\n    objectId: readRecordString(record, \"objectId\", label),\n    organizationId: readRecordString(record, \"organizationId\", label),\n    previousManifestHash: readRecordNullableString(\n      record,\n      \"previousManifestHash\",\n      label,\n    ),\n    dependencyManifestHashes: readStringArray(\n      readRequiredRecordValue(record, \"dependencyManifestHashes\", label),\n      `${label}.dependencyManifestHashes`,\n    ),\n    bodyHash: readRecordString(record, \"bodyHash\", label),\n    signerUserId: readRecordString(record, \"signerUserId\", label),\n    signerDeviceId: readRecordString(record, \"signerDeviceId\", label),\n    signerKeyFingerprint: readRecordString(\n      record,\n      \"signerKeyFingerprint\",\n      label,\n    ),\n    signedAt: readRecordString(record, \"signedAt\", label),\n    signature: readRecordString(record, \"signature\", label),\n  };\n}\n\nexport function readAccessManifest(\n  value: unknown,\n  label: string,\n): AccessManifest {\n  return readKeyingVerificationShape(() =>\n    readAccessManifestShape(value, label),\n  );\n}\n\nfunction readAccessManifestShape(\n  value: unknown,\n  label: string,\n): AccessManifest {\n  const record = readCanonicalRecord(value, label);\n  const objectKind = readRequiredRecordValue(record, \"objectKind\", label);\n  if (!isAccessObjectKind(objectKind)) {\n    throw new Error(`${label}.objectKind is invalid`);\n  }\n  if (readRecordPositiveInteger(record, \"version\", label) !== 1) {\n    throw new Error(`${label}.version must be 1`);\n  }\n  const referencedPrincipalHeads = readRequiredRecordValue(\n    record,\n    \"referencedPrincipalHeads\",\n    label,\n  );\n  if (!Array.isArray(referencedPrincipalHeads)) {\n    throw new Error(`${label}.referencedPrincipalHeads must be an array`);\n  }\n\n  return {\n    version: 1,\n    objectKind,\n    objectId: readRecordString(record, \"objectId\", label),\n    organizationId: readRecordString(record, \"organizationId\", label),\n    epoch: readRecordPositiveInteger(record, \"epoch\", label),\n    previousManifestHash: readRecordNullableString(\n      record,\n      \"previousManifestHash\",\n      label,\n    ),\n    eventHash: readRecordString(record, \"eventHash\", label),\n    structuralHash: readRecordString(record, \"structuralHash\", label),\n    grantRoot: readRecordString(record, \"grantRoot\", label),\n    referencedPrincipalHeads: referencedPrincipalHeads.map((head, index) => {\n      const headRecord = readCanonicalRecord(\n        head,\n        `${label}.referencedPrincipalHeads[${index}]`,\n      );\n      const principalType = readRequiredRecordValue(\n        headRecord,\n        \"principalType\",\n        `${label}.referencedPrincipalHeads[${index}]`,\n      );\n      if (principalType !== \"group\" && principalType !== \"organization\") {\n        throw new Error(\n          `${label}.referencedPrincipalHeads[${index}].principalType is invalid`,\n        );\n      }\n      return {\n        principalType,\n        principalId: readRecordString(\n          headRecord,\n          \"principalId\",\n          `${label}.referencedPrincipalHeads[${index}]`,\n        ),\n        version: readRecordPositiveInteger(\n          headRecord,\n          \"version\",\n          `${label}.referencedPrincipalHeads[${index}]`,\n        ),\n        keyEpoch: readRecordPositiveInteger(\n          headRecord,\n          \"keyEpoch\",\n          `${label}.referencedPrincipalHeads[${index}]`,\n        ),\n        stateHash: readRecordString(\n          headRecord,\n          \"stateHash\",\n          `${label}.referencedPrincipalHeads[${index}]`,\n        ),\n        keyFingerprint: readRecordString(\n          headRecord,\n          \"keyFingerprint\",\n          `${label}.referencedPrincipalHeads[${index}]`,\n        ),\n      };\n    }),\n    keyTargetHash: readRecordString(record, \"keyTargetHash\", label),\n  };\n}\n\nexport function readContainerKeyEpoch(\n  value: unknown,\n  label: string,\n): ContainerKeyEpoch {\n  return readKeyingVerificationShape(() => {\n    const record = readCanonicalRecord(value, label);\n\n    return {\n      id: readRecordString(record, \"id\", label),\n      containerId: readRecordString(record, \"containerId\", label),\n      keyEpoch: readRecordPositiveInteger(record, \"keyEpoch\", label),\n      accessManifestHash: readRecordString(record, \"accessManifestHash\", label),\n      parentContainerKeyEpochId: readRecordNullableString(\n        record,\n        \"parentContainerKeyEpochId\",\n        label,\n      ),\n      createdByEventHash: readRecordString(record, \"createdByEventHash\", label),\n      createdByManifestHash: readRecordString(\n        record,\n        \"createdByManifestHash\",\n        label,\n      ),\n    };\n  });\n}\n\nexport function readContainerKeyWrap(\n  value: unknown,\n  label: string,\n): ContainerKeyWrap {\n  return readKeyingVerificationShape(() => {\n    const record = readCanonicalRecord(value, label);\n    const recipientKind = readRequiredRecordValue(\n      record,\n      \"recipientKind\",\n      label,\n    );\n    if (!isRecipientKind(recipientKind)) {\n      throw new Error(`${label}.recipientKind is invalid`);\n    }\n\n    return {\n      containerKeyEpochId: readRecordString(\n        record,\n        \"containerKeyEpochId\",\n        label,\n      ),\n      recipientKind,\n      recipientId: readRecordString(record, \"recipientId\", label),\n      recipientKeyEpochId: readRecordString(\n        record,\n        \"recipientKeyEpochId\",\n        label,\n      ),\n      recipientKeyFingerprint: readRecordString(\n        record,\n        \"recipientKeyFingerprint\",\n        label,\n      ),\n      kemCipherText: readRecordString(record, \"kemCipherText\", label),\n      wrappedKey: readRecordString(record, \"wrappedKey\", label),\n      wrapManifestHash: readRecordString(record, \"wrapManifestHash\", label),\n    };\n  });\n}\n\nexport function readContainerKekRecipientTarget(\n  value: unknown,\n  label: string,\n): ContainerKekRecipientTarget {\n  return readKeyingVerificationShape(() => {\n    const record = readCanonicalRecord(value, label);\n    const recipientKind = readRequiredRecordValue(\n      record,\n      \"recipientKind\",\n      label,\n    );\n    if (!isRecipientKind(recipientKind)) {\n      throw new Error(`${label}.recipientKind is invalid`);\n    }\n\n    return {\n      recipientKind,\n      recipientId: readRecordString(record, \"recipientId\", label),\n      recipientKeyEpochId: readRecordString(\n        record,\n        \"recipientKeyEpochId\",\n        label,\n      ),\n      recipientKeyFingerprint: readRecordString(\n        record,\n        \"recipientKeyFingerprint\",\n        label,\n      ),\n    };\n  });\n}\n\nexport function readDocumentAccessEventBody(\n  value: unknown,\n  label: string,\n): DocumentLinkAccessEventBody | DocumentUnlinkAccessEventBody {\n  return readKeyingVerificationShape(() =>\n    normalizeDocumentAccessEventBody(readCanonicalJson(value, label)),\n  );\n}\n"]}

package/data/keyingProjectionVerification/userKeyResolver.d.ts

@@ -1,5 +1,5 @@
-import type { ProjectionUserKeyResolver } from "../keyingProjectionVerification.js";
 import { type TrustedUserIdentityResolver } from "../trustedUserIdentity/index.js";
+import type { ProjectionUserKeyResolver } from "./types.js";
 interface ProjectionUserKeyRuntime {
     readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;
 }

package/data/keyingProjectionVerification/userKeyResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"userKeyResolver.js","sourceRoot":"","sources":["userKeyResolver.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,kCAAkC,GAEnC,MAAM,wBAAwB,CAAC;AAMhC,MAAM,UAAU,+BAA+B,CAC7C,OAAiC;IAEjC,MAAM,0BAA0B,GAAG,kCAAkC,CACnE,OAAO,CAAC,0BAA0B,CACnC,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6C,CAAC;IAEnE,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,IAAI,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACnE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrB,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  ProjectionUserKey,\n  ProjectionUserKeyResolver,\n} from \"../keyingProjectionVerification\";\nimport {\n  requireTrustedUserIdentityResolver,\n  type TrustedUserIdentityResolver,\n} from \"../trustedUserIdentity\";\n\ninterface ProjectionUserKeyRuntime {\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n}\n\nexport function createProjectionUserKeyResolver(\n  runtime: ProjectionUserKeyRuntime,\n): ProjectionUserKeyResolver {\n  const resolveTrustedUserIdentity = requireTrustedUserIdentityResolver(\n    runtime.resolveTrustedUserIdentity,\n  );\n  const cache = new Map<string, Promise<ProjectionUserKey | null>>();\n\n  return async (userId) => {\n    let cached = cache.get(userId);\n    if (!cached) {\n      cached = resolveTrustedUserIdentity(userId).catch((error: unknown) => {\n        cache.delete(userId);\n        throw error;\n      });\n      cache.set(userId, cached);\n    }\n\n    return cached;\n  };\n}\n"]}
+{"version":3,"file":"userKeyResolver.js","sourceRoot":"","sources":["userKeyResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,GAEnC,MAAM,wBAAwB,CAAC;AAOhC,MAAM,UAAU,+BAA+B,CAC7C,OAAiC;IAEjC,MAAM,0BAA0B,GAAG,kCAAkC,CACnE,OAAO,CAAC,0BAA0B,CACnC,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6C,CAAC;IAEnE,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,IAAI,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACnE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrB,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  requireTrustedUserIdentityResolver,\n  type TrustedUserIdentityResolver,\n} from \"../trustedUserIdentity\";\nimport type { ProjectionUserKey, ProjectionUserKeyResolver } from \"./types\";\n\ninterface ProjectionUserKeyRuntime {\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n}\n\nexport function createProjectionUserKeyResolver(\n  runtime: ProjectionUserKeyRuntime,\n): ProjectionUserKeyResolver {\n  const resolveTrustedUserIdentity = requireTrustedUserIdentityResolver(\n    runtime.resolveTrustedUserIdentity,\n  );\n  const cache = new Map<string, Promise<ProjectionUserKey | null>>();\n\n  return async (userId) => {\n    let cached = cache.get(userId);\n    if (!cached) {\n      cached = resolveTrustedUserIdentity(userId).catch((error: unknown) => {\n        cache.delete(userId);\n        throw error;\n      });\n      cache.set(userId, cached);\n    }\n\n    return cached;\n  };\n}\n"]}

package/data/persistence/containers/containerPersistence.js

@@ -1,6 +1,6 @@
 import { isContainerSystemSlot, } from "../../../internal/validators/containerSystemSlot.js";
 import { asc, eq, inArray, sql } from "drizzle-orm";
-import { DEFAULT_EFFECTIVE_ACCESS_LEVEL, normalizeEffectiveAccessLevel, } from "../../accessLevel.js";
+import { DEFAULT_EFFECTIVE_ACCESS_LEVEL, normalizeEffectiveAccessLevel, } from "../../keying/accessLevel.js";
 import { containers, containerTables } from "../../sqlite/schema.js";
 import { getClientSQLitePersistenceRuntime, } from "../../sqlite/sqlitePersistenceRuntime.js";
 import { ensureSqlTables } from "../../sqlite/sqlSchema.js";

package/data/persistence/containers/containerPersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"containerPersistence.js","sourceRoot":"","sources":["containerPersistence.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,qBAAqB,GACtB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,GAC9B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AA4BvE,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AACnD,CAAC;AAED,gFAAgF;AAChF,iEAAiE;AACjE,MAAM,oBAAoB,GAAG,GAAG,CAAQ;MAClC,UAAU,CAAC,WAAW;gBACZ,UAAU,CAAC,QAAQ;IAC/B,CAAC;AAiBL,SAAS,wBAAwB,CAAC,MAAuB;IACvD,OAAO;QACL,GAAG,MAAM;QACT,SAAS,EAAE,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,cAAc,IAAI,IAAI;QAClE,SAAS,EAAE,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,cAAc,IAAI,IAAI;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,MAAuB,EACvB,cAAsB;IAEtB,MAAM,mBAAmB,GACvB,MAAM,CAAC,eAAe,KAAK,SAAS;QACpC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC;IACvC,MAAM,cAAc,GAClB,MAAM,CAAC,cAAc;QACrB,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,cAAc,CAAC;IACjB,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC;IACvD,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC;IAEvD,OAAO;QACL,GAAG,MAAM;QACT,SAAS,EAAE,eAAe,IAAI,cAAc;QAC5C,cAAc;QACd,cAAc;QACd,eAAe;QACf,eAAe;QACf,SAAS,EAAE,eAAe,IAAI,cAAc;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,GAA4B;IAE5B,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC;QACtD,CAAC,CAAC,GAAG,CAAC,UAAU;QAChB,CAAC,CAAC,IAAI,CAAC;IAET,OAAO,wBAAwB,CAAC;QAC9B,oBAAoB,EAAE,6BAA6B,CACjD,GAAG,CAAC,oBAAoB,CACzB;QACD,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QACxB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,UAAU;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACvD,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,eAAe,EAAE,GAAG,CAAC,eAAe;KACrC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAIvC;IACC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;IAC7C,MAAM,UAAU,GAAG,+BAA+B,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG;QACnB,oBAAoB,EAClB,UAAU,CAAC,oBAAoB,IAAI,8BAA8B;QACnE,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,UAAU,EAAE,UAAU,CAAC,UAAU,IAAI,IAAI;QACzC,WAAW,EAAE,UAAU,CAAC,IAAI;QAC5B,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,cAAc;QACd,eAAe,EAAE,UAAU,CAAC,eAAe;QAC3C,eAAe,EAAE,UAAU,CAAC,eAAe;KAC5C,CAAC;IACF,MAAM,EAAE;SACL,MAAM,CAAC,UAAU,CAAC;SAClB,MAAM,CAAC,YAAY,CAAC;SACpB,kBAAkB,CAAC;QAClB,MAAM,EAAE,UAAU,CAAC,EAAE;QACrB,GAAG,EAAE;YACH,cAAc,EAAE,YAAY,CAAC,cAAc;YAC3C,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,kBAAkB,EAAE,YAAY,CAAC,kBAAkB;YACnD,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,oBAAoB,EAAE,YAAY,CAAC,oBAAoB;YACvD,cAAc,EAAE,YAAY,CAAC,cAAc;YAC3C,eAAe,EACb,MAAM,CAAC,eAAe,KAAK,SAAS;gBAClC,CAAC,CAAC,GAAG,CAAA,GAAG,UAAU,CAAC,eAAe,EAAE;gBACpC,CAAC,CAAC,YAAY,CAAC,eAAe;YAClC,eAAe,EACb,MAAM,CAAC,eAAe,KAAK,SAAS;gBAClC,CAAC,CAAC,GAAG,CAAA,GAAG,UAAU,CAAC,eAAe,EAAE;gBACpC,CAAC,CAAC,YAAY,CAAC,eAAe;SACnC;KACF,CAAC;SACD,GAAG,EAAE,CAAC;IAET,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAgB;IAEhB,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,oBAAoB,EAAE,UAAU,CAAC,oBAAoB;QACrD,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,eAAe,EAAE,UAAU,CAAC,eAAe;QAC3C,eAAe,EAAE,UAAU,CAAC,eAAe;KAC5C,CAAC;SACD,IAAI,CAAC,UAAU,CAAC;SAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAA,GAAG,oBAAoB,iBAAiB,CAAC,CAAC,CAAC;IAE7D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB,EAChB,WAAmB;IAEnB,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,oBAAoB,EAAE,UAAU,CAAC,oBAAoB;QACrD,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,eAAe,EAAE,UAAU,CAAC,eAAe;QAC3C,eAAe,EAAE,UAAU,CAAC,eAAe;KAC5C,CAAC;SACD,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;SACrC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAgB,EAChB,GAA0B;IAE1B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,IAAI,EAAE,oBAAoB;KAC3B,CAAC;SACD,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IAE5C,OAAO,IAAI,GAAG,CACZ,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACnB,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgB,EAChB,MAAuB;IAEvB,MAAM,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEhD,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,iBAAiB,CAAC;YACtB,MAAM;YACN,EAAE;YACF,cAAc;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,EAAgC,EAChC,GAA0B;IAE1B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC7E,CAAC","sourcesContent":["import type { ContainerAccessLevel } from \"@tearleads/crypto\";\nimport {\n  type ContainerSystemSlot,\n  isContainerSystemSlot,\n} from \"@tearleads/validators/containerSystemSlot\";\nimport { asc, eq, inArray, sql } from \"drizzle-orm\";\nimport {\n  DEFAULT_EFFECTIVE_ACCESS_LEVEL,\n  normalizeEffectiveAccessLevel,\n} from \"../../accessLevel\";\nimport { containers, containerTables } from \"../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\n\nexport interface ContainerRecord {\n  createdAt?: string | null;\n  effectiveAccessLevel?: ContainerAccessLevel | null;\n  id: string;\n  organizationId: string;\n  parentId: string | null;\n  metadataDocumentId: string | null;\n  systemSlot?: ContainerSystemSlot | null;\n  name: string;\n  icon: string | null;\n  localCreatedAt?: string | null;\n  localUpdatedAt?: string | null;\n  serverCreatedAt?: string | null;\n  serverUpdatedAt?: string | null;\n  updatedAt?: string | null;\n}\n\ninterface ContainerRecordWithTimestampDefaults extends ContainerRecord {\n  createdAt: string | null;\n  localCreatedAt: string;\n  localUpdatedAt: string;\n  serverCreatedAt: string | null;\n  serverUpdatedAt: string | null;\n  updatedAt: string | null;\n}\n\nexport function ensureContainerTables(execSql: ExecSql): Promise<void> {\n  return ensureSqlTables(execSql, containerTables);\n}\n\n// The ONE display-name fallback: a decrypted metadata name names the container;\n// without one the root reads '/' and everything else 'Untitled'.\nconst containerDisplayName = sql<string>`COALESCE(\n    ${containers.displayName},\n    CASE WHEN ${containers.parentId} IS NULL THEN '/' ELSE 'Untitled' END\n  )`;\n\ninterface SelectedContainerRecord {\n  effectiveAccessLevel: string | null;\n  id: string | null;\n  organizationId: string;\n  parentId: string | null;\n  metadataDocumentId: string | null;\n  systemSlot: string | null;\n  name: string;\n  icon: string | null;\n  localCreatedAt: string;\n  localUpdatedAt: string;\n  serverCreatedAt: string | null;\n  serverUpdatedAt: string | null;\n}\n\nfunction toDisplayContainerRecord(record: ContainerRecord): ContainerRecord {\n  return {\n    ...record,\n    createdAt: record.serverCreatedAt ?? record.localCreatedAt ?? null,\n    updatedAt: record.serverUpdatedAt ?? record.localUpdatedAt ?? null,\n  };\n}\n\nfunction applyContainerTimestampDefaults(\n  record: ContainerRecord,\n  localUpdatedAt: string,\n): ContainerRecordWithTimestampDefaults {\n  const hasServerTimestamps =\n    record.serverCreatedAt !== undefined ||\n    record.serverUpdatedAt !== undefined;\n  const localCreatedAt =\n    record.localCreatedAt ??\n    (!hasServerTimestamps ? record.createdAt : null) ??\n    localUpdatedAt;\n  const serverCreatedAt = record.serverCreatedAt ?? null;\n  const serverUpdatedAt = record.serverUpdatedAt ?? null;\n\n  return {\n    ...record,\n    createdAt: serverCreatedAt ?? localCreatedAt,\n    localCreatedAt,\n    localUpdatedAt,\n    serverCreatedAt,\n    serverUpdatedAt,\n    updatedAt: serverUpdatedAt ?? localUpdatedAt,\n  };\n}\n\nfunction mapSelectedContainerRecord(\n  row: SelectedContainerRecord,\n): ContainerRecord {\n  const systemSlot = isContainerSystemSlot(row.systemSlot)\n    ? row.systemSlot\n    : null;\n\n  return toDisplayContainerRecord({\n    effectiveAccessLevel: normalizeEffectiveAccessLevel(\n      row.effectiveAccessLevel,\n    ),\n    id: String(row.id ?? \"\"),\n    organizationId: row.organizationId,\n    parentId: row.parentId,\n    metadataDocumentId: row.metadataDocumentId,\n    systemSlot,\n    name: row.name,\n    icon: row.icon && row.icon.length > 0 ? row.icon : null,\n    localCreatedAt: row.localCreatedAt,\n    localUpdatedAt: row.localUpdatedAt,\n    serverCreatedAt: row.serverCreatedAt,\n    serverUpdatedAt: row.serverUpdatedAt,\n  });\n}\n\nexport async function saveContainerRows(input: {\n  tx: ClientSQLiteTransactionScope;\n  record: ContainerRecord;\n  localUpdatedAt: string;\n}): Promise<ContainerRecord> {\n  const { record, tx, localUpdatedAt } = input;\n  const nextRecord = applyContainerTimestampDefaults(record, localUpdatedAt);\n  const containerRow = {\n    effectiveAccessLevel:\n      nextRecord.effectiveAccessLevel ?? DEFAULT_EFFECTIVE_ACCESS_LEVEL,\n    id: nextRecord.id,\n    organizationId: nextRecord.organizationId,\n    parentId: nextRecord.parentId,\n    metadataDocumentId: nextRecord.metadataDocumentId,\n    systemSlot: nextRecord.systemSlot ?? null,\n    displayName: nextRecord.name,\n    icon: nextRecord.icon,\n    localCreatedAt: nextRecord.localCreatedAt,\n    localUpdatedAt,\n    serverCreatedAt: nextRecord.serverCreatedAt,\n    serverUpdatedAt: nextRecord.serverUpdatedAt,\n  };\n  await tx\n    .insert(containers)\n    .values(containerRow)\n    .onConflictDoUpdate({\n      target: containers.id,\n      set: {\n        organizationId: containerRow.organizationId,\n        parentId: containerRow.parentId,\n        metadataDocumentId: containerRow.metadataDocumentId,\n        systemSlot: containerRow.systemSlot,\n        displayName: containerRow.displayName,\n        icon: containerRow.icon,\n        effectiveAccessLevel: containerRow.effectiveAccessLevel,\n        localUpdatedAt: containerRow.localUpdatedAt,\n        serverCreatedAt:\n          record.serverCreatedAt === undefined\n            ? sql`${containers.serverCreatedAt}`\n            : containerRow.serverCreatedAt,\n        serverUpdatedAt:\n          record.serverUpdatedAt === undefined\n            ? sql`${containers.serverUpdatedAt}`\n            : containerRow.serverUpdatedAt,\n      },\n    })\n    .run();\n\n  return nextRecord;\n}\n\nexport async function loadContainers(\n  execSql: ExecSql,\n): Promise<ContainerRecord[]> {\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({\n      effectiveAccessLevel: containers.effectiveAccessLevel,\n      id: containers.id,\n      organizationId: containers.organizationId,\n      parentId: containers.parentId,\n      metadataDocumentId: containers.metadataDocumentId,\n      systemSlot: containers.systemSlot,\n      name: containerDisplayName,\n      icon: containers.icon,\n      localCreatedAt: containers.localCreatedAt,\n      localUpdatedAt: containers.localUpdatedAt,\n      serverCreatedAt: containers.serverCreatedAt,\n      serverUpdatedAt: containers.serverUpdatedAt,\n    })\n    .from(containers)\n    .orderBy(asc(sql`${containerDisplayName} COLLATE NOCASE`));\n\n  return rows.map((row) => mapSelectedContainerRecord(row));\n}\n\nexport async function loadContainerById(\n  execSql: ExecSql,\n  containerId: string,\n): Promise<ContainerRecord | null> {\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({\n      effectiveAccessLevel: containers.effectiveAccessLevel,\n      id: containers.id,\n      organizationId: containers.organizationId,\n      parentId: containers.parentId,\n      metadataDocumentId: containers.metadataDocumentId,\n      systemSlot: containers.systemSlot,\n      name: containerDisplayName,\n      icon: containers.icon,\n      localCreatedAt: containers.localCreatedAt,\n      localUpdatedAt: containers.localUpdatedAt,\n      serverCreatedAt: containers.serverCreatedAt,\n      serverUpdatedAt: containers.serverUpdatedAt,\n    })\n    .from(containers)\n    .where(eq(containers.id, containerId))\n    .limit(1);\n\n  return rows[0] ? mapSelectedContainerRecord(rows[0]) : null;\n}\n\nexport async function loadContainerDisplayNamesByIds(\n  execSql: ExecSql,\n  ids: ReadonlyArray<string>,\n): Promise<Map<string, string>> {\n  const uniqueIds = Array.from(new Set(ids));\n  if (uniqueIds.length === 0) {\n    return new Map();\n  }\n\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({\n      id: containers.id,\n      name: containerDisplayName,\n    })\n    .from(containers)\n    .where(inArray(containers.id, uniqueIds));\n\n  return new Map(\n    rows.flatMap((row) => {\n      const displayName = row.name.trim();\n      if (!row.id || displayName.length === 0) {\n        return [];\n      }\n\n      return [[row.id, displayName]];\n    }),\n  );\n}\n\nexport async function saveContainer(\n  execSql: ExecSql,\n  record: ContainerRecord,\n): Promise<void> {\n  const localUpdatedAt = new Date().toISOString();\n\n  await getClientSQLitePersistenceRuntime(execSql).transaction(async (tx) => {\n    await saveContainerRows({\n      record,\n      tx,\n      localUpdatedAt,\n    });\n  });\n}\n\n/**\n * The container-row half of the delete cascade, statement-only so callers\n * can compose it inside one atomic transaction.\n */\nexport async function deleteContainerRowsInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  ids: ReadonlyArray<string>,\n): Promise<void> {\n  const uniqueIds = Array.from(new Set(ids));\n  if (uniqueIds.length === 0) {\n    return;\n  }\n  await tx.delete(containers).where(inArray(containers.id, uniqueIds)).run();\n}\n"]}
+{"version":3,"file":"containerPersistence.js","sourceRoot":"","sources":["containerPersistence.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,qBAAqB,GACtB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AA4BvE,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AACnD,CAAC;AAED,gFAAgF;AAChF,iEAAiE;AACjE,MAAM,oBAAoB,GAAG,GAAG,CAAQ;MAClC,UAAU,CAAC,WAAW;gBACZ,UAAU,CAAC,QAAQ;IAC/B,CAAC;AAiBL,SAAS,wBAAwB,CAAC,MAAuB;IACvD,OAAO;QACL,GAAG,MAAM;QACT,SAAS,EAAE,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,cAAc,IAAI,IAAI;QAClE,SAAS,EAAE,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,cAAc,IAAI,IAAI;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,MAAuB,EACvB,cAAsB;IAEtB,MAAM,mBAAmB,GACvB,MAAM,CAAC,eAAe,KAAK,SAAS;QACpC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC;IACvC,MAAM,cAAc,GAClB,MAAM,CAAC,cAAc;QACrB,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,cAAc,CAAC;IACjB,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC;IACvD,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC;IAEvD,OAAO;QACL,GAAG,MAAM;QACT,SAAS,EAAE,eAAe,IAAI,cAAc;QAC5C,cAAc;QACd,cAAc;QACd,eAAe;QACf,eAAe;QACf,SAAS,EAAE,eAAe,IAAI,cAAc;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,GAA4B;IAE5B,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC;QACtD,CAAC,CAAC,GAAG,CAAC,UAAU;QAChB,CAAC,CAAC,IAAI,CAAC;IAET,OAAO,wBAAwB,CAAC;QAC9B,oBAAoB,EAAE,6BAA6B,CACjD,GAAG,CAAC,oBAAoB,CACzB;QACD,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QACxB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,UAAU;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACvD,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,eAAe,EAAE,GAAG,CAAC,eAAe;KACrC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAIvC;IACC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;IAC7C,MAAM,UAAU,GAAG,+BAA+B,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG;QACnB,oBAAoB,EAClB,UAAU,CAAC,oBAAoB,IAAI,8BAA8B;QACnE,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,UAAU,EAAE,UAAU,CAAC,UAAU,IAAI,IAAI;QACzC,WAAW,EAAE,UAAU,CAAC,IAAI;QAC5B,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,cAAc;QACd,eAAe,EAAE,UAAU,CAAC,eAAe;QAC3C,eAAe,EAAE,UAAU,CAAC,eAAe;KAC5C,CAAC;IACF,MAAM,EAAE;SACL,MAAM,CAAC,UAAU,CAAC;SAClB,MAAM,CAAC,YAAY,CAAC;SACpB,kBAAkB,CAAC;QAClB,MAAM,EAAE,UAAU,CAAC,EAAE;QACrB,GAAG,EAAE;YACH,cAAc,EAAE,YAAY,CAAC,cAAc;YAC3C,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,kBAAkB,EAAE,YAAY,CAAC,kBAAkB;YACnD,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,oBAAoB,EAAE,YAAY,CAAC,oBAAoB;YACvD,cAAc,EAAE,YAAY,CAAC,cAAc;YAC3C,eAAe,EACb,MAAM,CAAC,eAAe,KAAK,SAAS;gBAClC,CAAC,CAAC,GAAG,CAAA,GAAG,UAAU,CAAC,eAAe,EAAE;gBACpC,CAAC,CAAC,YAAY,CAAC,eAAe;YAClC,eAAe,EACb,MAAM,CAAC,eAAe,KAAK,SAAS;gBAClC,CAAC,CAAC,GAAG,CAAA,GAAG,UAAU,CAAC,eAAe,EAAE;gBACpC,CAAC,CAAC,YAAY,CAAC,eAAe;SACnC;KACF,CAAC;SACD,GAAG,EAAE,CAAC;IAET,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAgB;IAEhB,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,oBAAoB,EAAE,UAAU,CAAC,oBAAoB;QACrD,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,eAAe,EAAE,UAAU,CAAC,eAAe;QAC3C,eAAe,EAAE,UAAU,CAAC,eAAe;KAC5C,CAAC;SACD,IAAI,CAAC,UAAU,CAAC;SAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAA,GAAG,oBAAoB,iBAAiB,CAAC,CAAC,CAAC;IAE7D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB,EAChB,WAAmB;IAEnB,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,oBAAoB,EAAE,UAAU,CAAC,oBAAoB;QACrD,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,eAAe,EAAE,UAAU,CAAC,eAAe;QAC3C,eAAe,EAAE,UAAU,CAAC,eAAe;KAC5C,CAAC;SACD,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;SACrC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAgB,EAChB,GAA0B;IAE1B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,IAAI,EAAE,oBAAoB;KAC3B,CAAC;SACD,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IAE5C,OAAO,IAAI,GAAG,CACZ,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACnB,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgB,EAChB,MAAuB;IAEvB,MAAM,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEhD,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,iBAAiB,CAAC;YACtB,MAAM;YACN,EAAE;YACF,cAAc;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,EAAgC,EAChC,GAA0B;IAE1B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC7E,CAAC","sourcesContent":["import type { ContainerAccessLevel } from \"@tearleads/crypto\";\nimport {\n  type ContainerSystemSlot,\n  isContainerSystemSlot,\n} from \"@tearleads/validators/containerSystemSlot\";\nimport { asc, eq, inArray, sql } from \"drizzle-orm\";\nimport {\n  DEFAULT_EFFECTIVE_ACCESS_LEVEL,\n  normalizeEffectiveAccessLevel,\n} from \"../../keying/accessLevel\";\nimport { containers, containerTables } from \"../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\n\nexport interface ContainerRecord {\n  createdAt?: string | null;\n  effectiveAccessLevel?: ContainerAccessLevel | null;\n  id: string;\n  organizationId: string;\n  parentId: string | null;\n  metadataDocumentId: string | null;\n  systemSlot?: ContainerSystemSlot | null;\n  name: string;\n  icon: string | null;\n  localCreatedAt?: string | null;\n  localUpdatedAt?: string | null;\n  serverCreatedAt?: string | null;\n  serverUpdatedAt?: string | null;\n  updatedAt?: string | null;\n}\n\ninterface ContainerRecordWithTimestampDefaults extends ContainerRecord {\n  createdAt: string | null;\n  localCreatedAt: string;\n  localUpdatedAt: string;\n  serverCreatedAt: string | null;\n  serverUpdatedAt: string | null;\n  updatedAt: string | null;\n}\n\nexport function ensureContainerTables(execSql: ExecSql): Promise<void> {\n  return ensureSqlTables(execSql, containerTables);\n}\n\n// The ONE display-name fallback: a decrypted metadata name names the container;\n// without one the root reads '/' and everything else 'Untitled'.\nconst containerDisplayName = sql<string>`COALESCE(\n    ${containers.displayName},\n    CASE WHEN ${containers.parentId} IS NULL THEN '/' ELSE 'Untitled' END\n  )`;\n\ninterface SelectedContainerRecord {\n  effectiveAccessLevel: string | null;\n  id: string | null;\n  organizationId: string;\n  parentId: string | null;\n  metadataDocumentId: string | null;\n  systemSlot: string | null;\n  name: string;\n  icon: string | null;\n  localCreatedAt: string;\n  localUpdatedAt: string;\n  serverCreatedAt: string | null;\n  serverUpdatedAt: string | null;\n}\n\nfunction toDisplayContainerRecord(record: ContainerRecord): ContainerRecord {\n  return {\n    ...record,\n    createdAt: record.serverCreatedAt ?? record.localCreatedAt ?? null,\n    updatedAt: record.serverUpdatedAt ?? record.localUpdatedAt ?? null,\n  };\n}\n\nfunction applyContainerTimestampDefaults(\n  record: ContainerRecord,\n  localUpdatedAt: string,\n): ContainerRecordWithTimestampDefaults {\n  const hasServerTimestamps =\n    record.serverCreatedAt !== undefined ||\n    record.serverUpdatedAt !== undefined;\n  const localCreatedAt =\n    record.localCreatedAt ??\n    (!hasServerTimestamps ? record.createdAt : null) ??\n    localUpdatedAt;\n  const serverCreatedAt = record.serverCreatedAt ?? null;\n  const serverUpdatedAt = record.serverUpdatedAt ?? null;\n\n  return {\n    ...record,\n    createdAt: serverCreatedAt ?? localCreatedAt,\n    localCreatedAt,\n    localUpdatedAt,\n    serverCreatedAt,\n    serverUpdatedAt,\n    updatedAt: serverUpdatedAt ?? localUpdatedAt,\n  };\n}\n\nfunction mapSelectedContainerRecord(\n  row: SelectedContainerRecord,\n): ContainerRecord {\n  const systemSlot = isContainerSystemSlot(row.systemSlot)\n    ? row.systemSlot\n    : null;\n\n  return toDisplayContainerRecord({\n    effectiveAccessLevel: normalizeEffectiveAccessLevel(\n      row.effectiveAccessLevel,\n    ),\n    id: String(row.id ?? \"\"),\n    organizationId: row.organizationId,\n    parentId: row.parentId,\n    metadataDocumentId: row.metadataDocumentId,\n    systemSlot,\n    name: row.name,\n    icon: row.icon && row.icon.length > 0 ? row.icon : null,\n    localCreatedAt: row.localCreatedAt,\n    localUpdatedAt: row.localUpdatedAt,\n    serverCreatedAt: row.serverCreatedAt,\n    serverUpdatedAt: row.serverUpdatedAt,\n  });\n}\n\nexport async function saveContainerRows(input: {\n  tx: ClientSQLiteTransactionScope;\n  record: ContainerRecord;\n  localUpdatedAt: string;\n}): Promise<ContainerRecord> {\n  const { record, tx, localUpdatedAt } = input;\n  const nextRecord = applyContainerTimestampDefaults(record, localUpdatedAt);\n  const containerRow = {\n    effectiveAccessLevel:\n      nextRecord.effectiveAccessLevel ?? DEFAULT_EFFECTIVE_ACCESS_LEVEL,\n    id: nextRecord.id,\n    organizationId: nextRecord.organizationId,\n    parentId: nextRecord.parentId,\n    metadataDocumentId: nextRecord.metadataDocumentId,\n    systemSlot: nextRecord.systemSlot ?? null,\n    displayName: nextRecord.name,\n    icon: nextRecord.icon,\n    localCreatedAt: nextRecord.localCreatedAt,\n    localUpdatedAt,\n    serverCreatedAt: nextRecord.serverCreatedAt,\n    serverUpdatedAt: nextRecord.serverUpdatedAt,\n  };\n  await tx\n    .insert(containers)\n    .values(containerRow)\n    .onConflictDoUpdate({\n      target: containers.id,\n      set: {\n        organizationId: containerRow.organizationId,\n        parentId: containerRow.parentId,\n        metadataDocumentId: containerRow.metadataDocumentId,\n        systemSlot: containerRow.systemSlot,\n        displayName: containerRow.displayName,\n        icon: containerRow.icon,\n        effectiveAccessLevel: containerRow.effectiveAccessLevel,\n        localUpdatedAt: containerRow.localUpdatedAt,\n        serverCreatedAt:\n          record.serverCreatedAt === undefined\n            ? sql`${containers.serverCreatedAt}`\n            : containerRow.serverCreatedAt,\n        serverUpdatedAt:\n          record.serverUpdatedAt === undefined\n            ? sql`${containers.serverUpdatedAt}`\n            : containerRow.serverUpdatedAt,\n      },\n    })\n    .run();\n\n  return nextRecord;\n}\n\nexport async function loadContainers(\n  execSql: ExecSql,\n): Promise<ContainerRecord[]> {\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({\n      effectiveAccessLevel: containers.effectiveAccessLevel,\n      id: containers.id,\n      organizationId: containers.organizationId,\n      parentId: containers.parentId,\n      metadataDocumentId: containers.metadataDocumentId,\n      systemSlot: containers.systemSlot,\n      name: containerDisplayName,\n      icon: containers.icon,\n      localCreatedAt: containers.localCreatedAt,\n      localUpdatedAt: containers.localUpdatedAt,\n      serverCreatedAt: containers.serverCreatedAt,\n      serverUpdatedAt: containers.serverUpdatedAt,\n    })\n    .from(containers)\n    .orderBy(asc(sql`${containerDisplayName} COLLATE NOCASE`));\n\n  return rows.map((row) => mapSelectedContainerRecord(row));\n}\n\nexport async function loadContainerById(\n  execSql: ExecSql,\n  containerId: string,\n): Promise<ContainerRecord | null> {\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({\n      effectiveAccessLevel: containers.effectiveAccessLevel,\n      id: containers.id,\n      organizationId: containers.organizationId,\n      parentId: containers.parentId,\n      metadataDocumentId: containers.metadataDocumentId,\n      systemSlot: containers.systemSlot,\n      name: containerDisplayName,\n      icon: containers.icon,\n      localCreatedAt: containers.localCreatedAt,\n      localUpdatedAt: containers.localUpdatedAt,\n      serverCreatedAt: containers.serverCreatedAt,\n      serverUpdatedAt: containers.serverUpdatedAt,\n    })\n    .from(containers)\n    .where(eq(containers.id, containerId))\n    .limit(1);\n\n  return rows[0] ? mapSelectedContainerRecord(rows[0]) : null;\n}\n\nexport async function loadContainerDisplayNamesByIds(\n  execSql: ExecSql,\n  ids: ReadonlyArray<string>,\n): Promise<Map<string, string>> {\n  const uniqueIds = Array.from(new Set(ids));\n  if (uniqueIds.length === 0) {\n    return new Map();\n  }\n\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({\n      id: containers.id,\n      name: containerDisplayName,\n    })\n    .from(containers)\n    .where(inArray(containers.id, uniqueIds));\n\n  return new Map(\n    rows.flatMap((row) => {\n      const displayName = row.name.trim();\n      if (!row.id || displayName.length === 0) {\n        return [];\n      }\n\n      return [[row.id, displayName]];\n    }),\n  );\n}\n\nexport async function saveContainer(\n  execSql: ExecSql,\n  record: ContainerRecord,\n): Promise<void> {\n  const localUpdatedAt = new Date().toISOString();\n\n  await getClientSQLitePersistenceRuntime(execSql).transaction(async (tx) => {\n    await saveContainerRows({\n      record,\n      tx,\n      localUpdatedAt,\n    });\n  });\n}\n\n/**\n * The container-row half of the delete cascade, statement-only so callers\n * can compose it inside one atomic transaction.\n */\nexport async function deleteContainerRowsInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  ids: ReadonlyArray<string>,\n): Promise<void> {\n  const uniqueIds = Array.from(new Set(ids));\n  if (uniqueIds.length === 0) {\n    return;\n  }\n  await tx.delete(containers).where(inArray(containers.id, uniqueIds)).run();\n}\n"]}

package/data/persistence/documents/documentDiscoveryCandidate.js

@@ -1,5 +1,5 @@
 import { isPlainObject } from "../../../internal/validators/isPlainObject.js";
-import { readRecordValue } from "../../recordReaders.js";
+import { readRecordValue } from "../../shared/recordReaders.js";
 function isStringArray(value) {
     return (Array.isArray(value) && value.every((item) => typeof item === "string"));
 }

package/data/persistence/documents/documentDiscoveryCandidate.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentDiscoveryCandidate.js","sourceRoot":"","sources":["documentDiscoveryCandidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAMtD,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAc;IAEd,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACpD,OAAO,CACL,OAAO,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,QAAQ;QACxD,OAAO,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,QAAQ;QACzD,OAAO,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,QAAQ;QACvD,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,KAAK,GAAG,CAAC;QACT,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;QACjE,CAAC,KAAK,KAAK,SAAS;YAClB,KAAK,KAAK,OAAO;YACjB,KAAK,KAAK,MAAM;YAChB,KAAK,KAAK,OAAO,CAAC;QACpB,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAC3D,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,IAAY;IAEZ,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,4EAA4E;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { isPlainObject } from \"@tearleads/validators/isPlainObject\";\nimport type { DiscoveredDocumentInput } from \"../../documents/documentSummary\";\nimport { readRecordValue } from \"../../recordReaders\";\n\nexport interface DiscoveredDocumentCandidate extends DiscoveredDocumentInput {\n  readonly listedContainerIds: readonly string[];\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return (\n    Array.isArray(value) && value.every((item) => typeof item === \"string\")\n  );\n}\n\nexport function isDiscoveredDocumentCandidate(\n  value: unknown,\n): value is DiscoveredDocumentCandidate {\n  if (!isPlainObject(value)) return false;\n  const level = readRecordValue(value, \"effectiveAccessLevel\");\n  const hash = readRecordValue(value, \"accessStateHash\");\n  const epoch = readRecordValue(value, \"accessEpoch\");\n  return (\n    typeof readRecordValue(value, \"documentId\") === \"string\" &&\n    typeof readRecordValue(value, \"containerId\") === \"string\" &&\n    typeof readRecordValue(value, \"createdAt\") === \"string\" &&\n    typeof epoch === \"number\" &&\n    Number.isSafeInteger(epoch) &&\n    epoch > 0 &&\n    (hash === undefined || hash === null || typeof hash === \"string\") &&\n    (level === undefined ||\n      level === \"admin\" ||\n      level === \"read\" ||\n      level === \"write\") &&\n    isStringArray(readRecordValue(value, \"linkedContainerIds\")) &&\n    isStringArray(readRecordValue(value, \"listedContainerIds\"))\n  );\n}\n\nexport function readStoredDiscoveryCandidate(\n  json: string,\n): DiscoveredDocumentCandidate {\n  const value: unknown = JSON.parse(json);\n  if (!isDiscoveredDocumentCandidate(value))\n    throw new Error(\"Stored document discovery candidate is invalid\");\n  // Preserve property order: acknowledgements compare the exact stored input.\n  return value;\n}\n"]}
+{"version":3,"file":"documentDiscoveryCandidate.js","sourceRoot":"","sources":["documentDiscoveryCandidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAM7D,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAc;IAEd,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACpD,OAAO,CACL,OAAO,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,QAAQ;QACxD,OAAO,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,QAAQ;QACzD,OAAO,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,QAAQ;QACvD,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,KAAK,GAAG,CAAC;QACT,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;QACjE,CAAC,KAAK,KAAK,SAAS;YAClB,KAAK,KAAK,OAAO;YACjB,KAAK,KAAK,MAAM;YAChB,KAAK,KAAK,OAAO,CAAC;QACpB,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAC3D,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,IAAY;IAEZ,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,4EAA4E;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { isPlainObject } from \"@tearleads/validators/isPlainObject\";\nimport type { DiscoveredDocumentInput } from \"../../documents/documentSummary\";\nimport { readRecordValue } from \"../../shared/recordReaders\";\n\nexport interface DiscoveredDocumentCandidate extends DiscoveredDocumentInput {\n  readonly listedContainerIds: readonly string[];\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return (\n    Array.isArray(value) && value.every((item) => typeof item === \"string\")\n  );\n}\n\nexport function isDiscoveredDocumentCandidate(\n  value: unknown,\n): value is DiscoveredDocumentCandidate {\n  if (!isPlainObject(value)) return false;\n  const level = readRecordValue(value, \"effectiveAccessLevel\");\n  const hash = readRecordValue(value, \"accessStateHash\");\n  const epoch = readRecordValue(value, \"accessEpoch\");\n  return (\n    typeof readRecordValue(value, \"documentId\") === \"string\" &&\n    typeof readRecordValue(value, \"containerId\") === \"string\" &&\n    typeof readRecordValue(value, \"createdAt\") === \"string\" &&\n    typeof epoch === \"number\" &&\n    Number.isSafeInteger(epoch) &&\n    epoch > 0 &&\n    (hash === undefined || hash === null || typeof hash === \"string\") &&\n    (level === undefined ||\n      level === \"admin\" ||\n      level === \"read\" ||\n      level === \"write\") &&\n    isStringArray(readRecordValue(value, \"linkedContainerIds\")) &&\n    isStringArray(readRecordValue(value, \"listedContainerIds\"))\n  );\n}\n\nexport function readStoredDiscoveryCandidate(\n  json: string,\n): DiscoveredDocumentCandidate {\n  const value: unknown = JSON.parse(json);\n  if (!isDiscoveredDocumentCandidate(value))\n    throw new Error(\"Stored document discovery candidate is invalid\");\n  // Preserve property order: acknowledgements compare the exact stored input.\n  return value;\n}\n"]}

package/data/persistence/documents/documentDiscoveryEvidencePersistence.js

@@ -1,6 +1,6 @@
 import { and, asc, eq, inArray, lte, min, sql } from "drizzle-orm";
 import { uniqueSortedStrings } from "../../documents/shared/readers.js";
-import { readStringArray } from "../../recordReaders.js";
+import { readStringArray } from "../../shared/recordReaders.js";
 import { documentDiscoveryHeads, documentDiscoverySequence, pendingDocumentDiscoveries, } from "../../sqlite/documentDiscoveryEvidenceSchema.js";
 import { accessManifestCheckpoints, documentContainerProjectionTables, } from "../../sqlite/schema.js";
 import { getClientSQLitePersistenceRuntime } from "../../sqlite/sqlitePersistenceRuntime.js";

package/data/persistence/documents/documentDiscoveryEvidencePersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentDiscoveryEvidencePersistence.js","sourceRoot":"","sources":["documentDiscoveryEvidencePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,yBAAyB,EACzB,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAEL,eAAe,EACf,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AAEzF,OAAO,EAEL,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,oCAAoC,EAAE,MAAM,0BAA0B,CAAC;AA2ChF,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAC3C,MAAM,KAAK,GAAG,sBAAsB,CAAC;AACrC,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,OAAO,GAAG,CAAC,GAAsB,EAAE,EAAE,CACzC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACrE,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,CACtD,CAAC;AACJ,MAAM,QAAQ,GAAG,CAAC,KAAkC,EAAE,EAAE,CACtD,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAC1C,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EACxC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAC7C,CAAC;AAEJ,MAAM,iCAAiC;IAIlB;IACA;IAFnB,YACmB,OAAgB,EAChB,GAAiB;QADjB,YAAO,GAAP,OAAO,CAAS;QAChB,QAAG,GAAH,GAAG,CAAc;IACjC,CAAC;IAEI,IAAI,GAAG,KAAK,IAAI,EAAE;QACxB,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;QACvE,OAAO,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC,CAAC;IACM,KAAK,GAAG,KAAK,EACnB,SAEe,EACf,EAAE,CACF,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,eAAe,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QACjE,OAAO,SAAS,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACL,KAAK,GAAG,KAAK,IAAI,EAAE;QACjB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,CAAC,yBAAyB,CAAC;iBACjC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;iBACzC,kBAAkB,CAAC;gBAClB,MAAM,EAAE,yBAAyB,CAAC,EAAE;gBACpC,GAAG,EAAE;oBACH,UAAU,EAAE,GAAG,CAAA,GAAG,yBAAyB,CAAC,UAAU,MAAM;iBAC7D;aACF,CAAC;iBACD,SAAS,CAAC,EAAE,UAAU,EAAE,yBAAyB,CAAC,UAAU,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IACF,SAAS,GAAG,KAAK,EAAE,UAAkB,EAAE,EAAE,CACvC,oCAAoC,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;IACtE,KAAK,GAAG,CACN,MAA8C,EAC9C,UAAkB,EAClB,UAAgD,EAAE,EAClD,EAAE;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC7B,IAAI,CAAC,CAAC,MAAM,oCAAoC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;gBAC/D,OAAO,KAAK,CAAC;YACf,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7D,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBAChC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC;wBAAE,SAAS;oBACpD,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;wBACnD,MAAM,QAAQ,GAAG;4BACf,GAAG,KAAK;4BACR,WAAW;4BACX,kBAAkB,EAAE,CAAC,WAAW,CAAC;yBAClC,CAAC;wBACF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;wBAC3C,MAAM,EAAE;6BACL,MAAM,CAAC,OAAO,CAAC;6BACf,MAAM,CAAC;4BACN,WAAW;4BACX,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;4BAC9B,UAAU;4BACV,SAAS;4BACT,OAAO,EAAE,CAAC;yBACX,CAAC;6BACD,kBAAkB,CAAC;4BAClB,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC;4BACjD,GAAG,EAAE;gCACH,WAAW,EAAE,KAAK,CAAC,WAAW;gCAC9B,UAAU;gCACV,SAAS;gCACT,OAAO,EAAE,GAAG,CAAA,aAAa,OAAO,CAAC,SAAS,MAAM,SAAS,SAAS,OAAO,CAAC,OAAO,aAAa;gCAC9F,QAAQ,EAAE,GAAG,CAAA,aAAa,OAAO,CAAC,SAAS,MAAM,SAAS,SAAS,OAAO,CAAC,QAAQ,aAAa;6BACjG;4BACD,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC;yBAC9C,CAAC;6BACD,GAAG,EAAE,CAAC;oBACX,CAAC;gBACH,CAAC;gBACD,wEAAwE;gBACxE,wEAAwE;gBACxE,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC1B,MAAM,EAAE;yBACL,MAAM,CAAC,OAAO,CAAC;yBACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EACxC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,EACtC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CACpC,CACF;yBACA,GAAG,EAAE,CAAC;gBACX,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO,GAAG,KAAK,EAAE,YAA+B,EAAE,KAAa,EAAE,EAAE;QACjE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAkC,EAAE,CAAC;QACjD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK;gBAAE,MAAM;YAClC,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;iBACxC,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CACJ,GAAG,CACD,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,EACxC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CACjC,CACF;iBACA,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;iBACtD,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,4BAA4B,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAClE,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,KAAK,GAAG,CAAC,KAAkC,EAAE,UAAkB,EAAE,EAAE,CACjE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACtB,IAAI,CAAC,CAAC,MAAM,oCAAoC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YAAE,OAAO;QAC1E,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;aACtC,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aACtB,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,EAAE;aACL,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC;YACH,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,yBAAyB,CAAC,QAAQ,CAAC;SAC1D,CAAC;aACD,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aACtB,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IACL,WAAW,GAAG,CACZ,MAA8C,EAC9C,UAAkB,EAClB,EAAE,CACF,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACtB,IAAI,CAAC,CAAC,MAAM,oCAAoC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YAAE,OAAO;QAC1E,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAChC,KAAK,MAAM,KAAK,IAAI,MAAM;gBACxB,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACL,UAAU,GAAG,KAAK,EAAE,YAA+B,EAAE,EAAE;QACrD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1C,IACE,CACE,MAAM,EAAE;iBACL,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;iBAC1C,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;iBAC/C,KAAK,CAAC,CAAC,CAAC,CACZ,CAAC,MAAM;gBAER,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,UAAU,GAAG,KAAK,EAAE,YAA+B,EAAE,EAAE;QACrD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;iBACrC,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACnD,IAAI,GAAG,EAAE,GAAG,KAAK,IAAI,IAAI,GAAG,EAAE,GAAG,KAAK,SAAS;gBAC7C,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC;IACF,QAAQ,GAAG,KAAK,EACd,UAAkB,EAClB,YAAuC,EACvC,EAAE;QACF,IAAI,MAAM,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;YAC7D,OAAO;gBACL,cAAc,EAAE,IAAI;gBACpB,WAAW,EAAE,MAAM,CAAC,gBAAgB;gBACpC,kBAAkB,EAAE,EAAE;aACvB,CAAC;QACJ,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,EAChC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CACrC,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,4EAA4E;QAC5E,MAAM,WAAW,GAAG,MAAM,EAAE;aACzB,MAAM,EAAE;aACR,IAAI,CAAC,yBAAyB,CAAC;aAC/B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,yBAAyB,CAAC,UAAU,EAAE,UAAU,CAAC,EACpD,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,UAAU,CAAC,EAClD,EAAE,CAAC,yBAAyB,CAAC,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC,CACjE,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IACE,WAAW,CAAC,MAAM,KAAK,CAAC;YACxB,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,KAAK,GAAG,CAAC,YAAY;YACjD,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,GAAG,CAAC,WAAW;YAEzC,OAAO,IAAI,CAAC;QACd,OAAO;YACL,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,eAAe,EAAE,GAAG,CAAC,YAAY;YACjC,kBAAkB,EAAE,eAAe,CACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EACzB,wBAAwB,CACzB;SACF,CAAC;IACJ,CAAC,CAAC;IACF,QAAQ,GAAG,CACT,UAAkB,EAClB,IAAyB,EACzB,UAAkB,EAClB,EAAE,CACF,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACtB,IACE,CAAC,IAAI,CAAC,eAAe;YACrB,CAAC,IAAI,CAAC,cAAc;YACpB,CAAC,CAAC,MAAM,oCAAoC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YAE7D,OAAO,KAAK,CAAC;QACf,MAAM,GAAG,GAAG;YACV,UAAU;YACV,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,eAAe;YAClC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC;SACnD,CAAC;QACF,MAAM,EAAE;aACL,MAAM,CAAC,KAAK,CAAC;aACb,MAAM,CAAC,GAAG,CAAC;aACX,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC;YAChD,GAAG,EAAE,GAAG;YACR,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC;SACnD,CAAC;aACD,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;CACN;AAiBD,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,OAAgB,EAChB,QAA0C;IAE1C,MAAM,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG;YACV,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,eAAe;YAClC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;SACxE,CAAC;QACF,MAAM,EAAE;aACL,MAAM,CAAC,KAAK,CAAC;aACb,MAAM,CAAC,GAAG,CAAC;aACX,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC;YAChD,GAAG,EAAE,GAAG;YACR,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC;SACnD,CAAC;aACD,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,OAAgB,EAChB,GAAG,GAAG,IAAI,CAAC,GAAG;IAEd,OAAO,IAAI,iCAAiC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC","sourcesContent":["import { and, asc, eq, inArray, lte, min, sql } from \"drizzle-orm\";\nimport { uniqueSortedStrings } from \"../../documents/shared/readers\";\nimport { readStringArray } from \"../../recordReaders\";\nimport {\n  documentDiscoveryHeads,\n  documentDiscoverySequence,\n  pendingDocumentDiscoveries,\n} from \"../../sqlite/documentDiscoveryEvidenceSchema\";\nimport {\n  accessManifestCheckpoints,\n  documentContainerProjectionTables,\n} from \"../../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport {\n  type ExecSql,\n  ensureSqlTables,\n  runSerializedSqlMutation,\n} from \"../../sqlite/sqlSchema\";\nimport { loadDocumentPurgeCheckpoint } from \"../documentPurgeCheckpointPersistence\";\nimport { heldTombstoneRetryDelayMs } from \"./containerDocumentTombstoneHoldsPersistence\";\n\nimport {\n  type DiscoveredDocumentCandidate,\n  isDiscoveredDocumentCandidate,\n  readStoredDiscoveryCandidate,\n} from \"./documentDiscoveryCandidate\";\n\nimport { isDocumentDiscoveryGenerationCurrent } from \"./documentDiscoveryReset\";\n\nexport type { DiscoveredDocumentCandidate } from \"./documentDiscoveryCandidate\";\nexport interface CachedDiscoveryHead {\n  readonly organizationId: string | null;\n  readonly accessEpoch: number;\n  readonly accessStateHash?: string;\n  readonly linkedContainerIds: readonly string[];\n}\ninterface RemovedDiscoveryPlacement {\n  readonly containerId: string;\n  readonly documentId: string;\n}\nexport interface DocumentDiscoveryEvidenceStore {\n  begin(): Promise<number>;\n  isCurrent(generation: number): Promise<boolean>;\n  stage(\n    inputs: readonly DiscoveredDocumentCandidate[],\n    generation: number,\n    removed?: readonly RemovedDiscoveryPlacement[],\n  ): Promise<boolean>;\n  pending(\n    containerIds: readonly string[],\n    limit: number,\n  ): Promise<readonly DiscoveredDocumentCandidate[]>;\n  defer(input: DiscoveredDocumentCandidate, generation: number): Promise<void>;\n  acknowledge(\n    inputs: readonly DiscoveredDocumentCandidate[],\n    generation: number,\n  ): Promise<void>;\n  hasPending(containerIds: readonly string[]): Promise<boolean>;\n  retryDelay(containerIds: readonly string[]): Promise<number | null>;\n  loadHead(\n    documentId: string,\n    manifestHash: string | null | undefined,\n  ): Promise<CachedDiscoveryHead | null>;\n  saveHead(\n    documentId: string,\n    head: CachedDiscoveryHead,\n    generation: number,\n  ): Promise<boolean>;\n}\n\nconst pending = pendingDocumentDiscoveries;\nconst heads = documentDiscoveryHeads;\nconst ID_BATCH_SIZE = 400;\nconst batches = (ids: readonly string[]) =>\n  Array.from({ length: Math.ceil(ids.length / ID_BATCH_SIZE) }, (_, i) =>\n    ids.slice(i * ID_BATCH_SIZE, (i + 1) * ID_BATCH_SIZE),\n  );\nconst identity = (input: DiscoveredDocumentCandidate) =>\n  and(\n    eq(pending.containerId, input.containerId),\n    eq(pending.documentId, input.documentId),\n    eq(pending.inputJson, JSON.stringify(input)),\n  );\n\nclass SqlDocumentDiscoveryEvidenceStore\n  implements DocumentDiscoveryEvidenceStore\n{\n  constructor(\n    private readonly execSql: ExecSql,\n    private readonly now: () => number,\n  ) {}\n\n  private read = async () => {\n    await ensureSqlTables(this.execSql, documentContainerProjectionTables);\n    return getClientSQLitePersistenceRuntime(this.execSql).db;\n  };\n  private write = async <T>(\n    operation: (\n      db: ReturnType<typeof getClientSQLitePersistenceRuntime>[\"db\"],\n    ) => Promise<T>,\n  ) =>\n    runSerializedSqlMutation(this.execSql, async (locked) => {\n      await ensureSqlTables(locked, documentContainerProjectionTables);\n      return operation(getClientSQLitePersistenceRuntime(locked).db);\n    });\n  begin = async () => {\n    let generation = 0;\n    await this.write(async (db) => {\n      const [row] = await db\n        .insert(documentDiscoverySequence)\n        .values({ id: \"requests\", generation: 1 })\n        .onConflictDoUpdate({\n          target: documentDiscoverySequence.id,\n          set: {\n            generation: sql`${documentDiscoverySequence.generation} + 1`,\n          },\n        })\n        .returning({ generation: documentDiscoverySequence.generation });\n      if (!row || !Number.isSafeInteger(row.generation))\n        throw new Error(\"Document discovery generation is exhausted\");\n      generation = row.generation;\n    });\n    return generation;\n  };\n  isCurrent = async (generation: number) =>\n    isDocumentDiscoveryGenerationCurrent(await this.read(), generation);\n  stage = (\n    inputs: readonly DiscoveredDocumentCandidate[],\n    generation: number,\n    removed: readonly RemovedDiscoveryPlacement[] = [],\n  ) => {\n    return this.write(async (db) => {\n      if (!(await isDocumentDiscoveryGenerationCurrent(db, generation)))\n        return false;\n      if (inputs.length === 0 && removed.length === 0) return true;\n      await db.transaction(async (tx) => {\n        for (const input of inputs) {\n          if (!isDiscoveredDocumentCandidate(input)) continue;\n          for (const containerId of input.listedContainerIds) {\n            const rowInput = {\n              ...input,\n              containerId,\n              listedContainerIds: [containerId],\n            };\n            const inputJson = JSON.stringify(rowInput);\n            await tx\n              .insert(pending)\n              .values({\n                containerId,\n                documentId: input.documentId,\n                accessEpoch: input.accessEpoch,\n                generation,\n                inputJson,\n                retryAt: 0,\n              })\n              .onConflictDoUpdate({\n                target: [pending.containerId, pending.documentId],\n                set: {\n                  accessEpoch: input.accessEpoch,\n                  generation,\n                  inputJson,\n                  retryAt: sql`case when ${pending.inputJson} = ${inputJson} then ${pending.retryAt} else 0 end`,\n                  attempts: sql`case when ${pending.inputJson} = ${inputJson} then ${pending.attempts} else 0 end`,\n                },\n                setWhere: lte(pending.generation, generation),\n              })\n              .run();\n          }\n        }\n        // These are untrusted, unapplied hints only. Removing an existing local\n        // placement still requires the separate signed tombstone evidence gate.\n        for (const row of removed) {\n          await tx\n            .delete(pending)\n            .where(\n              and(\n                eq(pending.containerId, row.containerId),\n                eq(pending.documentId, row.documentId),\n                lte(pending.generation, generation),\n              ),\n            )\n            .run();\n        }\n      });\n      return true;\n    });\n  };\n  pending = async (containerIds: readonly string[], limit: number) => {\n    const db = await this.read();\n    const result: DiscoveredDocumentCandidate[] = [];\n    for (const batch of batches(containerIds)) {\n      if (result.length >= limit) break;\n      const rows = await db\n        .select({ inputJson: pending.inputJson })\n        .from(pending)\n        .where(\n          and(\n            inArray(pending.containerId, [...batch]),\n            lte(pending.retryAt, this.now()),\n          ),\n        )\n        .orderBy(asc(pending.retryAt), asc(pending.documentId))\n        .limit(limit - result.length);\n      result.push(\n        ...rows.map((row) => readStoredDiscoveryCandidate(row.inputJson)),\n      );\n    }\n    return result;\n  };\n  defer = (input: DiscoveredDocumentCandidate, generation: number) =>\n    this.write(async (db) => {\n      if (!(await isDocumentDiscoveryGenerationCurrent(db, generation))) return;\n      const [row] = await db\n        .select({ attempts: pending.attempts })\n        .from(pending)\n        .where(identity(input))\n        .limit(1);\n      if (!row) return;\n      const attempts = Math.min(row.attempts + 1, 8);\n      await db\n        .update(pending)\n        .set({\n          attempts,\n          retryAt: this.now() + heldTombstoneRetryDelayMs(attempts),\n        })\n        .where(identity(input))\n        .run();\n    });\n  acknowledge = (\n    inputs: readonly DiscoveredDocumentCandidate[],\n    generation: number,\n  ) =>\n    this.write(async (db) => {\n      if (!(await isDocumentDiscoveryGenerationCurrent(db, generation))) return;\n      await db.transaction(async (tx) => {\n        for (const input of inputs)\n          await tx.delete(pending).where(identity(input)).run();\n      });\n    });\n  hasPending = async (containerIds: readonly string[]) => {\n    const db = await this.read();\n    for (const batch of batches(containerIds)) {\n      if (\n        (\n          await db\n            .select({ documentId: pending.documentId })\n            .from(pending)\n            .where(inArray(pending.containerId, [...batch]))\n            .limit(1)\n        ).length\n      )\n        return true;\n    }\n    return false;\n  };\n  retryDelay = async (containerIds: readonly string[]) => {\n    const db = await this.read();\n    let due: number | null = null;\n    for (const batch of batches(containerIds)) {\n      const [row] = await db\n        .select({ due: min(pending.retryAt) })\n        .from(pending)\n        .where(inArray(pending.containerId, [...batch]));\n      if (row?.due !== null && row?.due !== undefined)\n        due = Math.min(due ?? row.due, row.due);\n    }\n    return due === null ? null : Math.max(0, due - this.now());\n  };\n  loadHead = async (\n    documentId: string,\n    manifestHash: string | null | undefined,\n  ) => {\n    if (await loadDocumentPurgeCheckpoint(this.execSql, documentId))\n      return {\n        organizationId: null,\n        accessEpoch: Number.MAX_SAFE_INTEGER,\n        linkedContainerIds: [],\n      };\n    if (!manifestHash) return null;\n    const db = await this.read();\n    const [row] = await db\n      .select()\n      .from(heads)\n      .where(\n        and(\n          eq(heads.documentId, documentId),\n          eq(heads.manifestHash, manifestHash),\n        ),\n      )\n      .limit(1);\n    if (!row) return null;\n    // A different verifier (for example tombstone removal) can advance the\n    // signed checkpoint without updating documents.accessEpoch or this cache.\n    // Old-organization pins survive recovery; only the cached signed head's\n    // organization can authorize reuse. Missing pins require full verification.\n    const checkpoints = await db\n      .select()\n      .from(accessManifestCheckpoints)\n      .where(\n        and(\n          eq(accessManifestCheckpoints.objectKind, \"document\"),\n          eq(accessManifestCheckpoints.objectId, documentId),\n          eq(accessManifestCheckpoints.organizationId, row.organizationId),\n        ),\n      )\n      .limit(1);\n    if (\n      checkpoints.length !== 1 ||\n      checkpoints[0]?.manifestHash !== row.manifestHash ||\n      checkpoints[0]?.epoch !== row.accessEpoch\n    )\n      return null;\n    return {\n      organizationId: row.organizationId,\n      accessEpoch: row.accessEpoch,\n      accessStateHash: row.manifestHash,\n      linkedContainerIds: readStringArray(\n        JSON.parse(row.linksJson),\n        \"stored discovery links\",\n      ),\n    };\n  };\n  saveHead = (\n    documentId: string,\n    head: CachedDiscoveryHead,\n    generation: number,\n  ) =>\n    this.write(async (db) => {\n      if (\n        !head.accessStateHash ||\n        !head.organizationId ||\n        !(await isDocumentDiscoveryGenerationCurrent(db, generation))\n      )\n        return false;\n      const row = {\n        documentId,\n        organizationId: head.organizationId,\n        manifestHash: head.accessStateHash,\n        accessEpoch: head.accessEpoch,\n        linksJson: JSON.stringify(head.linkedContainerIds),\n      };\n      await db\n        .insert(heads)\n        .values(row)\n        .onConflictDoUpdate({\n          target: [heads.documentId, heads.organizationId],\n          set: row,\n          setWhere: lte(heads.accessEpoch, head.accessEpoch),\n        })\n        .run();\n      return true;\n    });\n}\n\n/**\n * A document head this client signed, already checked against the server's\n * create acknowledgement and pinned as its access-manifest checkpoint in the\n * same transaction. It is the same signed head a discovery projection would\n * verify, so it seeds the exact-head cache; `loadHead` still reuses it only\n * while that checkpoint matches.\n */\nexport interface AuthoredDiscoveryHead {\n  readonly documentId: string;\n  readonly organizationId: string;\n  readonly accessEpoch: number;\n  readonly accessStateHash: string;\n  readonly linkedContainerIds: readonly string[];\n}\n\n/** Writes authored heads inside the caller's serialized write transaction. */\nexport async function primeAuthoredDocumentDiscoveryHeads(\n  execSql: ExecSql,\n  authored: readonly AuthoredDiscoveryHead[],\n): Promise<void> {\n  const db = getClientSQLitePersistenceRuntime(execSql).db;\n  for (const head of authored) {\n    const row = {\n      documentId: head.documentId,\n      organizationId: head.organizationId,\n      manifestHash: head.accessStateHash,\n      accessEpoch: head.accessEpoch,\n      linksJson: JSON.stringify(uniqueSortedStrings(head.linkedContainerIds)),\n    };\n    await db\n      .insert(heads)\n      .values(row)\n      .onConflictDoUpdate({\n        target: [heads.documentId, heads.organizationId],\n        set: row,\n        setWhere: lte(heads.accessEpoch, head.accessEpoch),\n      })\n      .run();\n  }\n}\n\nexport function createDocumentDiscoveryEvidenceStore(\n  execSql: ExecSql,\n  now = Date.now,\n): DocumentDiscoveryEvidenceStore {\n  return new SqlDocumentDiscoveryEvidenceStore(execSql, now);\n}\n"]}
+{"version":3,"file":"documentDiscoveryEvidencePersistence.js","sourceRoot":"","sources":["documentDiscoveryEvidencePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,yBAAyB,EACzB,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAEL,eAAe,EACf,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AAEzF,OAAO,EAEL,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,oCAAoC,EAAE,MAAM,0BAA0B,CAAC;AA2ChF,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAC3C,MAAM,KAAK,GAAG,sBAAsB,CAAC;AACrC,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,OAAO,GAAG,CAAC,GAAsB,EAAE,EAAE,CACzC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACrE,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,CACtD,CAAC;AACJ,MAAM,QAAQ,GAAG,CAAC,KAAkC,EAAE,EAAE,CACtD,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAC1C,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EACxC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAC7C,CAAC;AAEJ,MAAM,iCAAiC;IAIlB;IACA;IAFnB,YACmB,OAAgB,EAChB,GAAiB;QADjB,YAAO,GAAP,OAAO,CAAS;QAChB,QAAG,GAAH,GAAG,CAAc;IACjC,CAAC;IAEI,IAAI,GAAG,KAAK,IAAI,EAAE;QACxB,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;QACvE,OAAO,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC,CAAC;IACM,KAAK,GAAG,KAAK,EACnB,SAEe,EACf,EAAE,CACF,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,eAAe,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QACjE,OAAO,SAAS,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACL,KAAK,GAAG,KAAK,IAAI,EAAE;QACjB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,CAAC,yBAAyB,CAAC;iBACjC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;iBACzC,kBAAkB,CAAC;gBAClB,MAAM,EAAE,yBAAyB,CAAC,EAAE;gBACpC,GAAG,EAAE;oBACH,UAAU,EAAE,GAAG,CAAA,GAAG,yBAAyB,CAAC,UAAU,MAAM;iBAC7D;aACF,CAAC;iBACD,SAAS,CAAC,EAAE,UAAU,EAAE,yBAAyB,CAAC,UAAU,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IACF,SAAS,GAAG,KAAK,EAAE,UAAkB,EAAE,EAAE,CACvC,oCAAoC,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;IACtE,KAAK,GAAG,CACN,MAA8C,EAC9C,UAAkB,EAClB,UAAgD,EAAE,EAClD,EAAE;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC7B,IAAI,CAAC,CAAC,MAAM,oCAAoC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;gBAC/D,OAAO,KAAK,CAAC;YACf,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7D,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBAChC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC;wBAAE,SAAS;oBACpD,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;wBACnD,MAAM,QAAQ,GAAG;4BACf,GAAG,KAAK;4BACR,WAAW;4BACX,kBAAkB,EAAE,CAAC,WAAW,CAAC;yBAClC,CAAC;wBACF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;wBAC3C,MAAM,EAAE;6BACL,MAAM,CAAC,OAAO,CAAC;6BACf,MAAM,CAAC;4BACN,WAAW;4BACX,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;4BAC9B,UAAU;4BACV,SAAS;4BACT,OAAO,EAAE,CAAC;yBACX,CAAC;6BACD,kBAAkB,CAAC;4BAClB,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC;4BACjD,GAAG,EAAE;gCACH,WAAW,EAAE,KAAK,CAAC,WAAW;gCAC9B,UAAU;gCACV,SAAS;gCACT,OAAO,EAAE,GAAG,CAAA,aAAa,OAAO,CAAC,SAAS,MAAM,SAAS,SAAS,OAAO,CAAC,OAAO,aAAa;gCAC9F,QAAQ,EAAE,GAAG,CAAA,aAAa,OAAO,CAAC,SAAS,MAAM,SAAS,SAAS,OAAO,CAAC,QAAQ,aAAa;6BACjG;4BACD,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC;yBAC9C,CAAC;6BACD,GAAG,EAAE,CAAC;oBACX,CAAC;gBACH,CAAC;gBACD,wEAAwE;gBACxE,wEAAwE;gBACxE,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC1B,MAAM,EAAE;yBACL,MAAM,CAAC,OAAO,CAAC;yBACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EACxC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,EACtC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CACpC,CACF;yBACA,GAAG,EAAE,CAAC;gBACX,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO,GAAG,KAAK,EAAE,YAA+B,EAAE,KAAa,EAAE,EAAE;QACjE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAkC,EAAE,CAAC;QACjD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK;gBAAE,MAAM;YAClC,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;iBACxC,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CACJ,GAAG,CACD,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,EACxC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CACjC,CACF;iBACA,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;iBACtD,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,4BAA4B,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAClE,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,KAAK,GAAG,CAAC,KAAkC,EAAE,UAAkB,EAAE,EAAE,CACjE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACtB,IAAI,CAAC,CAAC,MAAM,oCAAoC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YAAE,OAAO;QAC1E,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;aACtC,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aACtB,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,EAAE;aACL,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC;YACH,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,yBAAyB,CAAC,QAAQ,CAAC;SAC1D,CAAC;aACD,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aACtB,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IACL,WAAW,GAAG,CACZ,MAA8C,EAC9C,UAAkB,EAClB,EAAE,CACF,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACtB,IAAI,CAAC,CAAC,MAAM,oCAAoC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YAAE,OAAO;QAC1E,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAChC,KAAK,MAAM,KAAK,IAAI,MAAM;gBACxB,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACL,UAAU,GAAG,KAAK,EAAE,YAA+B,EAAE,EAAE;QACrD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1C,IACE,CACE,MAAM,EAAE;iBACL,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;iBAC1C,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;iBAC/C,KAAK,CAAC,CAAC,CAAC,CACZ,CAAC,MAAM;gBAER,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,UAAU,GAAG,KAAK,EAAE,YAA+B,EAAE,EAAE;QACrD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;iBACrC,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACnD,IAAI,GAAG,EAAE,GAAG,KAAK,IAAI,IAAI,GAAG,EAAE,GAAG,KAAK,SAAS;gBAC7C,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC;IACF,QAAQ,GAAG,KAAK,EACd,UAAkB,EAClB,YAAuC,EACvC,EAAE;QACF,IAAI,MAAM,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;YAC7D,OAAO;gBACL,cAAc,EAAE,IAAI;gBACpB,WAAW,EAAE,MAAM,CAAC,gBAAgB;gBACpC,kBAAkB,EAAE,EAAE;aACvB,CAAC;QACJ,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,EAChC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CACrC,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,4EAA4E;QAC5E,MAAM,WAAW,GAAG,MAAM,EAAE;aACzB,MAAM,EAAE;aACR,IAAI,CAAC,yBAAyB,CAAC;aAC/B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,yBAAyB,CAAC,UAAU,EAAE,UAAU,CAAC,EACpD,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,UAAU,CAAC,EAClD,EAAE,CAAC,yBAAyB,CAAC,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC,CACjE,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IACE,WAAW,CAAC,MAAM,KAAK,CAAC;YACxB,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,KAAK,GAAG,CAAC,YAAY;YACjD,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,GAAG,CAAC,WAAW;YAEzC,OAAO,IAAI,CAAC;QACd,OAAO;YACL,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,eAAe,EAAE,GAAG,CAAC,YAAY;YACjC,kBAAkB,EAAE,eAAe,CACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EACzB,wBAAwB,CACzB;SACF,CAAC;IACJ,CAAC,CAAC;IACF,QAAQ,GAAG,CACT,UAAkB,EAClB,IAAyB,EACzB,UAAkB,EAClB,EAAE,CACF,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACtB,IACE,CAAC,IAAI,CAAC,eAAe;YACrB,CAAC,IAAI,CAAC,cAAc;YACpB,CAAC,CAAC,MAAM,oCAAoC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YAE7D,OAAO,KAAK,CAAC;QACf,MAAM,GAAG,GAAG;YACV,UAAU;YACV,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,eAAe;YAClC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC;SACnD,CAAC;QACF,MAAM,EAAE;aACL,MAAM,CAAC,KAAK,CAAC;aACb,MAAM,CAAC,GAAG,CAAC;aACX,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC;YAChD,GAAG,EAAE,GAAG;YACR,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC;SACnD,CAAC;aACD,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;CACN;AAiBD,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,OAAgB,EAChB,QAA0C;IAE1C,MAAM,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG;YACV,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,eAAe;YAClC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;SACxE,CAAC;QACF,MAAM,EAAE;aACL,MAAM,CAAC,KAAK,CAAC;aACb,MAAM,CAAC,GAAG,CAAC;aACX,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC;YAChD,GAAG,EAAE,GAAG;YACR,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC;SACnD,CAAC;aACD,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,OAAgB,EAChB,GAAG,GAAG,IAAI,CAAC,GAAG;IAEd,OAAO,IAAI,iCAAiC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC","sourcesContent":["import { and, asc, eq, inArray, lte, min, sql } from \"drizzle-orm\";\nimport { uniqueSortedStrings } from \"../../documents/shared/readers\";\nimport { readStringArray } from \"../../shared/recordReaders\";\nimport {\n  documentDiscoveryHeads,\n  documentDiscoverySequence,\n  pendingDocumentDiscoveries,\n} from \"../../sqlite/documentDiscoveryEvidenceSchema\";\nimport {\n  accessManifestCheckpoints,\n  documentContainerProjectionTables,\n} from \"../../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport {\n  type ExecSql,\n  ensureSqlTables,\n  runSerializedSqlMutation,\n} from \"../../sqlite/sqlSchema\";\nimport { loadDocumentPurgeCheckpoint } from \"../documentPurgeCheckpointPersistence\";\nimport { heldTombstoneRetryDelayMs } from \"./containerDocumentTombstoneHoldsPersistence\";\n\nimport {\n  type DiscoveredDocumentCandidate,\n  isDiscoveredDocumentCandidate,\n  readStoredDiscoveryCandidate,\n} from \"./documentDiscoveryCandidate\";\n\nimport { isDocumentDiscoveryGenerationCurrent } from \"./documentDiscoveryReset\";\n\nexport type { DiscoveredDocumentCandidate } from \"./documentDiscoveryCandidate\";\nexport interface CachedDiscoveryHead {\n  readonly organizationId: string | null;\n  readonly accessEpoch: number;\n  readonly accessStateHash?: string;\n  readonly linkedContainerIds: readonly string[];\n}\ninterface RemovedDiscoveryPlacement {\n  readonly containerId: string;\n  readonly documentId: string;\n}\nexport interface DocumentDiscoveryEvidenceStore {\n  begin(): Promise<number>;\n  isCurrent(generation: number): Promise<boolean>;\n  stage(\n    inputs: readonly DiscoveredDocumentCandidate[],\n    generation: number,\n    removed?: readonly RemovedDiscoveryPlacement[],\n  ): Promise<boolean>;\n  pending(\n    containerIds: readonly string[],\n    limit: number,\n  ): Promise<readonly DiscoveredDocumentCandidate[]>;\n  defer(input: DiscoveredDocumentCandidate, generation: number): Promise<void>;\n  acknowledge(\n    inputs: readonly DiscoveredDocumentCandidate[],\n    generation: number,\n  ): Promise<void>;\n  hasPending(containerIds: readonly string[]): Promise<boolean>;\n  retryDelay(containerIds: readonly string[]): Promise<number | null>;\n  loadHead(\n    documentId: string,\n    manifestHash: string | null | undefined,\n  ): Promise<CachedDiscoveryHead | null>;\n  saveHead(\n    documentId: string,\n    head: CachedDiscoveryHead,\n    generation: number,\n  ): Promise<boolean>;\n}\n\nconst pending = pendingDocumentDiscoveries;\nconst heads = documentDiscoveryHeads;\nconst ID_BATCH_SIZE = 400;\nconst batches = (ids: readonly string[]) =>\n  Array.from({ length: Math.ceil(ids.length / ID_BATCH_SIZE) }, (_, i) =>\n    ids.slice(i * ID_BATCH_SIZE, (i + 1) * ID_BATCH_SIZE),\n  );\nconst identity = (input: DiscoveredDocumentCandidate) =>\n  and(\n    eq(pending.containerId, input.containerId),\n    eq(pending.documentId, input.documentId),\n    eq(pending.inputJson, JSON.stringify(input)),\n  );\n\nclass SqlDocumentDiscoveryEvidenceStore\n  implements DocumentDiscoveryEvidenceStore\n{\n  constructor(\n    private readonly execSql: ExecSql,\n    private readonly now: () => number,\n  ) {}\n\n  private read = async () => {\n    await ensureSqlTables(this.execSql, documentContainerProjectionTables);\n    return getClientSQLitePersistenceRuntime(this.execSql).db;\n  };\n  private write = async <T>(\n    operation: (\n      db: ReturnType<typeof getClientSQLitePersistenceRuntime>[\"db\"],\n    ) => Promise<T>,\n  ) =>\n    runSerializedSqlMutation(this.execSql, async (locked) => {\n      await ensureSqlTables(locked, documentContainerProjectionTables);\n      return operation(getClientSQLitePersistenceRuntime(locked).db);\n    });\n  begin = async () => {\n    let generation = 0;\n    await this.write(async (db) => {\n      const [row] = await db\n        .insert(documentDiscoverySequence)\n        .values({ id: \"requests\", generation: 1 })\n        .onConflictDoUpdate({\n          target: documentDiscoverySequence.id,\n          set: {\n            generation: sql`${documentDiscoverySequence.generation} + 1`,\n          },\n        })\n        .returning({ generation: documentDiscoverySequence.generation });\n      if (!row || !Number.isSafeInteger(row.generation))\n        throw new Error(\"Document discovery generation is exhausted\");\n      generation = row.generation;\n    });\n    return generation;\n  };\n  isCurrent = async (generation: number) =>\n    isDocumentDiscoveryGenerationCurrent(await this.read(), generation);\n  stage = (\n    inputs: readonly DiscoveredDocumentCandidate[],\n    generation: number,\n    removed: readonly RemovedDiscoveryPlacement[] = [],\n  ) => {\n    return this.write(async (db) => {\n      if (!(await isDocumentDiscoveryGenerationCurrent(db, generation)))\n        return false;\n      if (inputs.length === 0 && removed.length === 0) return true;\n      await db.transaction(async (tx) => {\n        for (const input of inputs) {\n          if (!isDiscoveredDocumentCandidate(input)) continue;\n          for (const containerId of input.listedContainerIds) {\n            const rowInput = {\n              ...input,\n              containerId,\n              listedContainerIds: [containerId],\n            };\n            const inputJson = JSON.stringify(rowInput);\n            await tx\n              .insert(pending)\n              .values({\n                containerId,\n                documentId: input.documentId,\n                accessEpoch: input.accessEpoch,\n                generation,\n                inputJson,\n                retryAt: 0,\n              })\n              .onConflictDoUpdate({\n                target: [pending.containerId, pending.documentId],\n                set: {\n                  accessEpoch: input.accessEpoch,\n                  generation,\n                  inputJson,\n                  retryAt: sql`case when ${pending.inputJson} = ${inputJson} then ${pending.retryAt} else 0 end`,\n                  attempts: sql`case when ${pending.inputJson} = ${inputJson} then ${pending.attempts} else 0 end`,\n                },\n                setWhere: lte(pending.generation, generation),\n              })\n              .run();\n          }\n        }\n        // These are untrusted, unapplied hints only. Removing an existing local\n        // placement still requires the separate signed tombstone evidence gate.\n        for (const row of removed) {\n          await tx\n            .delete(pending)\n            .where(\n              and(\n                eq(pending.containerId, row.containerId),\n                eq(pending.documentId, row.documentId),\n                lte(pending.generation, generation),\n              ),\n            )\n            .run();\n        }\n      });\n      return true;\n    });\n  };\n  pending = async (containerIds: readonly string[], limit: number) => {\n    const db = await this.read();\n    const result: DiscoveredDocumentCandidate[] = [];\n    for (const batch of batches(containerIds)) {\n      if (result.length >= limit) break;\n      const rows = await db\n        .select({ inputJson: pending.inputJson })\n        .from(pending)\n        .where(\n          and(\n            inArray(pending.containerId, [...batch]),\n            lte(pending.retryAt, this.now()),\n          ),\n        )\n        .orderBy(asc(pending.retryAt), asc(pending.documentId))\n        .limit(limit - result.length);\n      result.push(\n        ...rows.map((row) => readStoredDiscoveryCandidate(row.inputJson)),\n      );\n    }\n    return result;\n  };\n  defer = (input: DiscoveredDocumentCandidate, generation: number) =>\n    this.write(async (db) => {\n      if (!(await isDocumentDiscoveryGenerationCurrent(db, generation))) return;\n      const [row] = await db\n        .select({ attempts: pending.attempts })\n        .from(pending)\n        .where(identity(input))\n        .limit(1);\n      if (!row) return;\n      const attempts = Math.min(row.attempts + 1, 8);\n      await db\n        .update(pending)\n        .set({\n          attempts,\n          retryAt: this.now() + heldTombstoneRetryDelayMs(attempts),\n        })\n        .where(identity(input))\n        .run();\n    });\n  acknowledge = (\n    inputs: readonly DiscoveredDocumentCandidate[],\n    generation: number,\n  ) =>\n    this.write(async (db) => {\n      if (!(await isDocumentDiscoveryGenerationCurrent(db, generation))) return;\n      await db.transaction(async (tx) => {\n        for (const input of inputs)\n          await tx.delete(pending).where(identity(input)).run();\n      });\n    });\n  hasPending = async (containerIds: readonly string[]) => {\n    const db = await this.read();\n    for (const batch of batches(containerIds)) {\n      if (\n        (\n          await db\n            .select({ documentId: pending.documentId })\n            .from(pending)\n            .where(inArray(pending.containerId, [...batch]))\n            .limit(1)\n        ).length\n      )\n        return true;\n    }\n    return false;\n  };\n  retryDelay = async (containerIds: readonly string[]) => {\n    const db = await this.read();\n    let due: number | null = null;\n    for (const batch of batches(containerIds)) {\n      const [row] = await db\n        .select({ due: min(pending.retryAt) })\n        .from(pending)\n        .where(inArray(pending.containerId, [...batch]));\n      if (row?.due !== null && row?.due !== undefined)\n        due = Math.min(due ?? row.due, row.due);\n    }\n    return due === null ? null : Math.max(0, due - this.now());\n  };\n  loadHead = async (\n    documentId: string,\n    manifestHash: string | null | undefined,\n  ) => {\n    if (await loadDocumentPurgeCheckpoint(this.execSql, documentId))\n      return {\n        organizationId: null,\n        accessEpoch: Number.MAX_SAFE_INTEGER,\n        linkedContainerIds: [],\n      };\n    if (!manifestHash) return null;\n    const db = await this.read();\n    const [row] = await db\n      .select()\n      .from(heads)\n      .where(\n        and(\n          eq(heads.documentId, documentId),\n          eq(heads.manifestHash, manifestHash),\n        ),\n      )\n      .limit(1);\n    if (!row) return null;\n    // A different verifier (for example tombstone removal) can advance the\n    // signed checkpoint without updating documents.accessEpoch or this cache.\n    // Old-organization pins survive recovery; only the cached signed head's\n    // organization can authorize reuse. Missing pins require full verification.\n    const checkpoints = await db\n      .select()\n      .from(accessManifestCheckpoints)\n      .where(\n        and(\n          eq(accessManifestCheckpoints.objectKind, \"document\"),\n          eq(accessManifestCheckpoints.objectId, documentId),\n          eq(accessManifestCheckpoints.organizationId, row.organizationId),\n        ),\n      )\n      .limit(1);\n    if (\n      checkpoints.length !== 1 ||\n      checkpoints[0]?.manifestHash !== row.manifestHash ||\n      checkpoints[0]?.epoch !== row.accessEpoch\n    )\n      return null;\n    return {\n      organizationId: row.organizationId,\n      accessEpoch: row.accessEpoch,\n      accessStateHash: row.manifestHash,\n      linkedContainerIds: readStringArray(\n        JSON.parse(row.linksJson),\n        \"stored discovery links\",\n      ),\n    };\n  };\n  saveHead = (\n    documentId: string,\n    head: CachedDiscoveryHead,\n    generation: number,\n  ) =>\n    this.write(async (db) => {\n      if (\n        !head.accessStateHash ||\n        !head.organizationId ||\n        !(await isDocumentDiscoveryGenerationCurrent(db, generation))\n      )\n        return false;\n      const row = {\n        documentId,\n        organizationId: head.organizationId,\n        manifestHash: head.accessStateHash,\n        accessEpoch: head.accessEpoch,\n        linksJson: JSON.stringify(head.linkedContainerIds),\n      };\n      await db\n        .insert(heads)\n        .values(row)\n        .onConflictDoUpdate({\n          target: [heads.documentId, heads.organizationId],\n          set: row,\n          setWhere: lte(heads.accessEpoch, head.accessEpoch),\n        })\n        .run();\n      return true;\n    });\n}\n\n/**\n * A document head this client signed, already checked against the server's\n * create acknowledgement and pinned as its access-manifest checkpoint in the\n * same transaction. It is the same signed head a discovery projection would\n * verify, so it seeds the exact-head cache; `loadHead` still reuses it only\n * while that checkpoint matches.\n */\nexport interface AuthoredDiscoveryHead {\n  readonly documentId: string;\n  readonly organizationId: string;\n  readonly accessEpoch: number;\n  readonly accessStateHash: string;\n  readonly linkedContainerIds: readonly string[];\n}\n\n/** Writes authored heads inside the caller's serialized write transaction. */\nexport async function primeAuthoredDocumentDiscoveryHeads(\n  execSql: ExecSql,\n  authored: readonly AuthoredDiscoveryHead[],\n): Promise<void> {\n  const db = getClientSQLitePersistenceRuntime(execSql).db;\n  for (const head of authored) {\n    const row = {\n      documentId: head.documentId,\n      organizationId: head.organizationId,\n      manifestHash: head.accessStateHash,\n      accessEpoch: head.accessEpoch,\n      linksJson: JSON.stringify(uniqueSortedStrings(head.linkedContainerIds)),\n    };\n    await db\n      .insert(heads)\n      .values(row)\n      .onConflictDoUpdate({\n        target: [heads.documentId, heads.organizationId],\n        set: row,\n        setWhere: lte(heads.accessEpoch, head.accessEpoch),\n      })\n      .run();\n  }\n}\n\nexport function createDocumentDiscoveryEvidenceStore(\n  execSql: ExecSql,\n  now = Date.now,\n): DocumentDiscoveryEvidenceStore {\n  return new SqlDocumentDiscoveryEvidenceStore(execSql, now);\n}\n"]}

package/data/persistence/documents/internal/documentProjectionRows.js

@@ -1,7 +1,7 @@
 import { and, eq } from "drizzle-orm";
-import { normalizeEffectiveAccessLevel } from "../../../accessLevel.js";
 import { DEFAULT_DOCUMENT_KIND } from "../../../documents/documentConstants.js";
 import { deriveStoredDocumentTitle, getUntitledDocumentTitle, } from "../../../documents/documentKinds.js";
+import { normalizeEffectiveAccessLevel } from "../../../keying/accessLevel.js";
 import { documentProjection, documents } from "../../../sqlite/schema.js";
 import { DOCUMENTS_APP_KIND } from "./constants.js";
 // Deliberately excludes the projected text (`documentProjectionText`): the

package/data/persistence/documents/internal/documentProjectionRows.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentProjectionRows.js","sourceRoot":"","sources":["documentProjectionRows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EACL,yBAAyB,EACzB,wBAAwB,GAEzB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AA2BjD,2EAA2E;AAC3E,6EAA6E;AAC7E,gDAAgD;AAChD,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,OAAO,EAAE,kBAAkB,CAAC,OAAO;IACnC,UAAU,EAAE,kBAAkB,CAAC,UAAU;IACzC,WAAW,EAAE,kBAAkB,CAAC,WAAW;IAC3C,YAAY,EAAE,kBAAkB,CAAC,YAAY;IAC7C,KAAK,EAAE,kBAAkB,CAAC,KAAK;IAC/B,SAAS,EAAE,kBAAkB,CAAC,SAAS;IACvC,eAAe,EAAE,SAAS,CAAC,eAAe;IAC1C,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;CACrD,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CACpC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC,EACzC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAClD,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAChC,GAA+B;IAE/B,OAAO;QACL,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,oBAAoB,EAAE,6BAA6B,CACjD,GAAG,CAAC,oBAAoB,CACzB;QACD,EAAE,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;QACrB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAA4B,EAC5B,SAAiB;IAEjB,OAAO;QACL,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QAC/C,oBAAoB,EAAE,6BAA6B,CACjD,MAAM,CAAC,oBAAoB,CAC5B;QACD,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,qBAAqB;QAC1D,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7D,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,GAGa;IAEb,OAAO,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,GAAiD;IAEjD,OAAO,GAAG,EAAE,WAAW,IAAI,IAAI,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,GAGa;IAEb,OAAO,GAAG,EAAE,YAAY,IAAI,qBAAqB,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAGa;IAEb,MAAM,KAAK,GAAG,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC;IAC/B,IACE,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,KAAK,wBAAwB,CAAC,qBAAqB,CAAC,EACzD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,yBAAyB,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAoD;IAEpD,OAAO,GAAG,EAAE,SAAS,IAAI,EAAE,CAAC;AAC9B,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport { normalizeEffectiveAccessLevel } from \"../../../accessLevel\";\nimport { DEFAULT_DOCUMENT_KIND } from \"../../../documents/documentConstants\";\nimport {\n  deriveStoredDocumentTitle,\n  getUntitledDocumentTitle,\n  type StoredDocumentKind,\n} from \"../../../documents/documentKinds\";\nimport type { DocumentSummary } from \"../../../documents/documentSummary\";\nimport { documentProjection, documents } from \"../../../sqlite/schema\";\nimport type { StoredDocumentRecord } from \"../types\";\nimport { DOCUMENTS_APP_KIND } from \"./constants\";\n\ninterface SelectedDocumentProjection {\n  localId: string | null;\n  documentId: string | null;\n  containerId: string | null;\n  documentKind: StoredDocumentKind;\n  title: string;\n  updatedAt: string;\n  accessStateHash: string | null;\n  effectiveAccessLevel: string | null;\n}\n\ninterface SelectedDocumentProjectionDetail {\n  text: string | null;\n  containerId: string | null;\n  documentKind: StoredDocumentKind;\n  title: string;\n}\n\ninterface SelectedDocumentProjectionTimestamp {\n  documentKind?: StoredDocumentKind;\n  text?: string | null;\n  title?: string;\n  updatedAt: string;\n}\n\n// Deliberately excludes the projected text (`documentProjectionText`): the\n// title fallback is derived at write time, so summary listings never need to\n// haul content-sized values through the worker.\nexport const documentSummarySelection = {\n  localId: documentProjection.localId,\n  documentId: documentProjection.documentId,\n  containerId: documentProjection.containerId,\n  documentKind: documentProjection.documentKind,\n  title: documentProjection.title,\n  updatedAt: documentProjection.updatedAt,\n  accessStateHash: documents.accessStateHash,\n  effectiveAccessLevel: documents.effectiveAccessLevel,\n};\n\nexport const documentSummaryJoin = and(\n  eq(documents.appKind, DOCUMENTS_APP_KIND),\n  eq(documents.localId, documentProjection.localId),\n);\n\nexport function mapDocumentSummary(\n  row: SelectedDocumentProjection,\n): DocumentSummary {\n  return {\n    accessStateHash: row.accessStateHash,\n    effectiveAccessLevel: normalizeEffectiveAccessLevel(\n      row.effectiveAccessLevel,\n    ),\n    id: row.localId ?? \"\",\n    containerId: row.containerId,\n    documentKind: row.documentKind,\n    documentId: row.documentId,\n    title: getProjectionTitle(row),\n    updatedAt: row.updatedAt,\n  };\n}\n\nexport function toDocumentSummary(\n  record: StoredDocumentRecord,\n  updatedAt: string,\n): DocumentSummary {\n  return {\n    accessStateHash: record.accessStateHash ?? null,\n    effectiveAccessLevel: normalizeEffectiveAccessLevel(\n      record.effectiveAccessLevel,\n    ),\n    id: record.id,\n    containerId: record.containerId,\n    documentKind: record.documentKind ?? DEFAULT_DOCUMENT_KIND,\n    documentId: record.documentId,\n    title: record.title ?? deriveStoredDocumentTitle(record.text),\n    updatedAt,\n  };\n}\n\nexport function getProjectionText(\n  row:\n    | SelectedDocumentProjectionDetail\n    | SelectedDocumentProjectionTimestamp\n    | undefined,\n): string {\n  return row?.text ?? \"\";\n}\n\nexport function getProjectionContainerId(\n  row: SelectedDocumentProjectionDetail | undefined,\n): string | null {\n  return row?.containerId ?? null;\n}\n\nexport function getProjectionDocumentKind(\n  row:\n    | SelectedDocumentProjectionDetail\n    | SelectedDocumentProjectionTimestamp\n    | undefined,\n): StoredDocumentKind {\n  return row?.documentKind ?? DEFAULT_DOCUMENT_KIND;\n}\n\nexport function getProjectionTitle(\n  row:\n    | SelectedDocumentProjectionDetail\n    | SelectedDocumentProjectionTimestamp\n    | undefined,\n): string {\n  const title = row?.title ?? \"\";\n  if (\n    title.length > 0 &&\n    title !== getUntitledDocumentTitle(DEFAULT_DOCUMENT_KIND)\n  ) {\n    return title;\n  }\n\n  return deriveStoredDocumentTitle(row?.text ?? \"\");\n}\n\nexport function getProjectionUpdatedAt(\n  row: SelectedDocumentProjectionTimestamp | undefined,\n): string {\n  return row?.updatedAt ?? \"\";\n}\n"]}
+{"version":3,"file":"documentProjectionRows.js","sourceRoot":"","sources":["documentProjectionRows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EACL,yBAAyB,EACzB,wBAAwB,GAEzB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AA2BjD,2EAA2E;AAC3E,6EAA6E;AAC7E,gDAAgD;AAChD,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,OAAO,EAAE,kBAAkB,CAAC,OAAO;IACnC,UAAU,EAAE,kBAAkB,CAAC,UAAU;IACzC,WAAW,EAAE,kBAAkB,CAAC,WAAW;IAC3C,YAAY,EAAE,kBAAkB,CAAC,YAAY;IAC7C,KAAK,EAAE,kBAAkB,CAAC,KAAK;IAC/B,SAAS,EAAE,kBAAkB,CAAC,SAAS;IACvC,eAAe,EAAE,SAAS,CAAC,eAAe;IAC1C,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;CACrD,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CACpC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC,EACzC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAClD,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAChC,GAA+B;IAE/B,OAAO;QACL,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,oBAAoB,EAAE,6BAA6B,CACjD,GAAG,CAAC,oBAAoB,CACzB;QACD,EAAE,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;QACrB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAA4B,EAC5B,SAAiB;IAEjB,OAAO;QACL,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QAC/C,oBAAoB,EAAE,6BAA6B,CACjD,MAAM,CAAC,oBAAoB,CAC5B;QACD,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,qBAAqB;QAC1D,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7D,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,GAGa;IAEb,OAAO,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,GAAiD;IAEjD,OAAO,GAAG,EAAE,WAAW,IAAI,IAAI,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,GAGa;IAEb,OAAO,GAAG,EAAE,YAAY,IAAI,qBAAqB,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAGa;IAEb,MAAM,KAAK,GAAG,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC;IAC/B,IACE,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,KAAK,wBAAwB,CAAC,qBAAqB,CAAC,EACzD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,yBAAyB,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAoD;IAEpD,OAAO,GAAG,EAAE,SAAS,IAAI,EAAE,CAAC;AAC9B,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport { DEFAULT_DOCUMENT_KIND } from \"../../../documents/documentConstants\";\nimport {\n  deriveStoredDocumentTitle,\n  getUntitledDocumentTitle,\n  type StoredDocumentKind,\n} from \"../../../documents/documentKinds\";\nimport type { DocumentSummary } from \"../../../documents/documentSummary\";\nimport { normalizeEffectiveAccessLevel } from \"../../../keying/accessLevel\";\nimport { documentProjection, documents } from \"../../../sqlite/schema\";\nimport type { StoredDocumentRecord } from \"../types\";\nimport { DOCUMENTS_APP_KIND } from \"./constants\";\n\ninterface SelectedDocumentProjection {\n  localId: string | null;\n  documentId: string | null;\n  containerId: string | null;\n  documentKind: StoredDocumentKind;\n  title: string;\n  updatedAt: string;\n  accessStateHash: string | null;\n  effectiveAccessLevel: string | null;\n}\n\ninterface SelectedDocumentProjectionDetail {\n  text: string | null;\n  containerId: string | null;\n  documentKind: StoredDocumentKind;\n  title: string;\n}\n\ninterface SelectedDocumentProjectionTimestamp {\n  documentKind?: StoredDocumentKind;\n  text?: string | null;\n  title?: string;\n  updatedAt: string;\n}\n\n// Deliberately excludes the projected text (`documentProjectionText`): the\n// title fallback is derived at write time, so summary listings never need to\n// haul content-sized values through the worker.\nexport const documentSummarySelection = {\n  localId: documentProjection.localId,\n  documentId: documentProjection.documentId,\n  containerId: documentProjection.containerId,\n  documentKind: documentProjection.documentKind,\n  title: documentProjection.title,\n  updatedAt: documentProjection.updatedAt,\n  accessStateHash: documents.accessStateHash,\n  effectiveAccessLevel: documents.effectiveAccessLevel,\n};\n\nexport const documentSummaryJoin = and(\n  eq(documents.appKind, DOCUMENTS_APP_KIND),\n  eq(documents.localId, documentProjection.localId),\n);\n\nexport function mapDocumentSummary(\n  row: SelectedDocumentProjection,\n): DocumentSummary {\n  return {\n    accessStateHash: row.accessStateHash,\n    effectiveAccessLevel: normalizeEffectiveAccessLevel(\n      row.effectiveAccessLevel,\n    ),\n    id: row.localId ?? \"\",\n    containerId: row.containerId,\n    documentKind: row.documentKind,\n    documentId: row.documentId,\n    title: getProjectionTitle(row),\n    updatedAt: row.updatedAt,\n  };\n}\n\nexport function toDocumentSummary(\n  record: StoredDocumentRecord,\n  updatedAt: string,\n): DocumentSummary {\n  return {\n    accessStateHash: record.accessStateHash ?? null,\n    effectiveAccessLevel: normalizeEffectiveAccessLevel(\n      record.effectiveAccessLevel,\n    ),\n    id: record.id,\n    containerId: record.containerId,\n    documentKind: record.documentKind ?? DEFAULT_DOCUMENT_KIND,\n    documentId: record.documentId,\n    title: record.title ?? deriveStoredDocumentTitle(record.text),\n    updatedAt,\n  };\n}\n\nexport function getProjectionText(\n  row:\n    | SelectedDocumentProjectionDetail\n    | SelectedDocumentProjectionTimestamp\n    | undefined,\n): string {\n  return row?.text ?? \"\";\n}\n\nexport function getProjectionContainerId(\n  row: SelectedDocumentProjectionDetail | undefined,\n): string | null {\n  return row?.containerId ?? null;\n}\n\nexport function getProjectionDocumentKind(\n  row:\n    | SelectedDocumentProjectionDetail\n    | SelectedDocumentProjectionTimestamp\n    | undefined,\n): StoredDocumentKind {\n  return row?.documentKind ?? DEFAULT_DOCUMENT_KIND;\n}\n\nexport function getProjectionTitle(\n  row:\n    | SelectedDocumentProjectionDetail\n    | SelectedDocumentProjectionTimestamp\n    | undefined,\n): string {\n  const title = row?.title ?? \"\";\n  if (\n    title.length > 0 &&\n    title !== getUntitledDocumentTitle(DEFAULT_DOCUMENT_KIND)\n  ) {\n    return title;\n  }\n\n  return deriveStoredDocumentTitle(row?.text ?? \"\");\n}\n\nexport function getProjectionUpdatedAt(\n  row: SelectedDocumentProjectionTimestamp | undefined,\n): string {\n  return row?.updatedAt ?? \"\";\n}\n"]}

package/data/persistence/documents/internal/documentRows.js

@@ -1,8 +1,8 @@
 import { and, eq, lte } from "drizzle-orm";
-import { normalizeEffectiveAccessLevel } from "../../../accessLevel.js";
 import { DEFAULT_DOCUMENT_KIND } from "../../../documents/documentConstants.js";
 import { deriveStoredDocumentTitle } from "../../../documents/documentKinds.js";
 import { serializeDocumentSyncPullContinuation } from "../../../documents/shared/pullContinuation.js";
+import { normalizeEffectiveAccessLevel } from "../../../keying/accessLevel.js";
 import { documentProjection, documentProjectionText, documents, } from "../../../sqlite/schema.js";
 import { getClientSQLitePersistenceRuntime, } from "../../../sqlite/sqlitePersistenceRuntime.js";
 import { DOCUMENTS_APP_KIND } from "./constants.js";