@tearleads/client-sdk 0.1.61 → 0.1.63

package/workflows/principals/acknowledgedPrincipalCurrents.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"acknowledgedPrincipalCurrents.js","sourceRoot":"","sources":["acknowledgedPrincipalCurrents.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAGL,oCAAoC,EACpC,oCAAoC,GACrC,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EAAE,mCAAmC,EAAE,MAAM,4DAA4D,CAAC;AACjH,OAAO,EAAE,6BAA6B,EAAE,MAAM,kDAAkD,CAAC;AAEjG,OAAO,EAEL,uCAAuC,GACxC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,qCAAqC,EAAE,MAAM,sCAAsC,CAAC;AAC7F,OAAO,EAAE,sCAAsC,EAAE,MAAM,sBAAsB,CAAC;AAE9E,OAAO,EACL,+BAA+B,EAC/B,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EACL,sCAAsC,EACtC,mCAAmC,GACpC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAC;AAgBhG,KAAK,UAAU,kBAAkB,CAC/B,OAA6C,EAC7C,OAAkC,EAClC,QAAyC,EACzC,WAAoD,EACpD,MAAsC;IAEtC,OAAO,GAAG;QACR,GAAG,OAAO;QACV,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,UAAU;YACrB,OAAO,EAAE,mCAAmC,CAAC,OAAO,CAAC;SACtD;KACF,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IACzE,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,EACJ,OAAO,EACP,KAAK,EACL,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,wBAAwB,GACzB,GAAG,MAAM,uCAAuC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,sCAAsC,CAAC;QACxD,MAAM,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,cAAc,EAAE,EAAE,EAAE;QACnE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;KAC/D,CAAC,CAAC;IACH,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,OAAO,IAAI,IAAI;QACjB,MAAM,IAAI,uBAAuB,CAC/B,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,EACrE,0DAA0D,CAC3D,CAAC;IACJ,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,qBAAqB,EAAE,CAC7D,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CACzE,CAAC;IACF,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC;QAC/C,qBAAqB,EAAE,QAAQ;QAC/B,YAAY;QACZ,OAAO;QACP,QAAQ,EAAE,QAAQ,CAAC,YAAY;QAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,iBAAiB;QACjB,YAAY,EAAE,OAAO;KACtB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG;QACZ,KAAK,EAAE,QAAQ,CAAC,YAAY;QAC5B,UAAU,EAAE,QAAQ,CAAC,iBAAiB;QACtC,MAAM,EAAE,QAAQ,CAAC,aAAa;KAC/B,CAAC;IACF,sCAAsC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,MAAM,gBAAgB,GAAG,MAAM,yBAAyB,CACtD,OAAO,EACP,QAAQ,CAAC,KAAK,EACd,QAAQ,EACR,SAAS,CACV,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACrC,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAClD,OAAO,EACP,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,QAAQ,CACT,CAAC;IACF,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO;QACL,MAAM;QACN,sBAAsB,EAAE,KAAK,CAAC,QAAQ;QACtC,gBAAgB;QAChB,wBAAwB;QACxB,GAAG,MAAM;QACT,QAAQ,EAAE,MAAM,mCAAmC,CAAC;YAClD,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;YAC3C,OAAO;YACP,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,OAAO,EAAE,CAAC,KAAK,CAAC;YAChB,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;SACjC,CAAC;KACH,CAAC;AACJ,CAAC;AAaD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,KAEC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IAC5C,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAMP,EAAE,CAAC;IACT,IAAI,CAAC;QACH,mCAAmC,CAAC,YAAY,CAAC,CAAC;QAClD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO;YAC/B,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,KAAK,CAAC,YAAY,KAAK,IAAI;gBACzC,WAAW,EAAE,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC/C,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;gBACvC,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACzC,OAAO,EAAE;oBACP,GAAG,KAAK,CAAC,QAAQ;oBACjB,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;oBAC1D,UAAU,EAAE,6BAA6B,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;oBACpE,OAAO;oBACP,cAAc;oBACd,YAAY;iBACb;aACF,CAAC,CAAC;QACL,MAAM,YAAY,GAA8C,EAAE,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,OAAO;YACzB,YAAY,CAAC,IAAI,CACf,MAAM,CAAC,KAAK,CAAC,YAAY;gBACvB,CAAC,CAAC,qCAAqC;gBACvC,CAAC,CAAC,kBAAkB,CAAC,CACrB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,WAAW,EACjB,MAAM,CACP,CACF,CAAC;QACJ,MAAM,CAAC,uBAAuB,CAC5B,cAAc,EACd,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CACxC,CAAC;QACF,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,EAAE,CAAC;YACtB,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBAC7D,UAAU,CAAC,IAAI,CACb,MAAM,qCAAqC,CACzC,KAAK,CAAC,OAAO,EACb,WAAW,CACZ,CACF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,oCAAoC,CAAC;oBACzC,OAAO;oBACP,cAAc;oBACd,OAAO,EAAE,UAAU;oBACnB,WAAW;oBACX,YAAY,EAAE,GAAG,EAAE,CACjB,YAAY,EAAE;wBACd,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;iBAC3D,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,CAAC,CAAC,KAAK,YAAY,oCAAoC,CAAC;oBACxD,OAAO,IAAI,CAAC;oBAEZ,MAAM,KAAK,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,KAAK,IAAI,OAAO;YAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;AACH,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type VerifiedPrincipalPolicyCurrent,\n} from \"@tearleads/crypto\";\nimport type { PutPrincipalPolicyRequest } from \"@tearleads/validators/request\";\nimport type { PrincipalPolicyMutationResponse } from \"@tearleads/validators/response\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport {\n  type AcknowledgedPrincipalCurrentPublication,\n  type AcknowledgedPrincipalCurrentRetirement,\n  PrincipalAcknowledgementChangedError,\n  persistAcknowledgedPrincipalCurrents,\n} from \"../../data/persistence/principalCurrentAcknowledgementPersistence\";\nimport { preparePrincipalHistoryEvidencePage } from \"../../data/persistence/principalHistoryEvidencePersistence\";\nimport { ownPrincipalHistoryProtection } from \"../../data/principals/principalHistoryProtection\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport {\n  type AcknowledgedPrincipalPredecessor,\n  restoreAcknowledgedPrincipalPredecessor,\n} from \"./acknowledgedPrincipalPredecessor\";\nimport { prepareInitialGroupCurrentPublication } from \"./initialPrincipalCurrentPublication\";\nimport { collectPrincipalPolicySignerPublicKeys } from \"./policyVerification\";\nimport type { PrincipalAcknowledgementChecks } from \"./principalAcknowledgementChecks\";\nimport {\n  sealPrincipalCurrentPublication,\n  sealPrincipalCurrentStage,\n} from \"./principalCurrentPublicationSeal\";\nimport type { RecoverPrincipalPolicyHistoryOptions } from \"./principalHistoryRecoveryTypes\";\nimport {\n  assertPrincipalHistoryVerificationMode,\n  principalHistoryVerificationContext,\n} from \"./principalHistoryRecoveryVerification\";\nimport { reconcileAcknowledgedPrincipalCurrent } from \"./reconcileAcknowledgedPrincipalCurrent\";\n\nexport interface AcknowledgedPrincipalCurrentInput {\n  /** Capture before submitting the mutation; null only for a new group. */\n  readonly predecessor: AcknowledgedPrincipalPredecessor | null;\n  /** Only a newly authored group at version one; never skips a predecessor. */\n  readonly initialGroup?: boolean | undefined;\n  /** The same scoped protection and verification mode used to recover the predecessor. */\n  readonly recovery: Omit<\n    RecoverPrincipalPolicyHistoryOptions,\n    \"execSql\" | \"organizationId\" | \"stillCurrent\"\n  >;\n  readonly request: PutPrincipalPolicyRequest;\n  readonly response: PrincipalPolicyMutationResponse;\n}\n\nasync function preparePublication(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  request: PutPrincipalPolicyRequest,\n  response: PrincipalPolicyMutationResponse,\n  predecessor: AcknowledgedPrincipalPredecessor | null,\n  checks: PrincipalAcknowledgementChecks,\n): Promise<AcknowledgedPrincipalCurrentPublication> {\n  options = {\n    ...options,\n    protection: {\n      ...options.protection,\n      context: principalHistoryVerificationContext(options),\n    },\n  };\n  const current = () => !options.signal?.aborted && options.stillCurrent();\n  assertProjectionVerificationCurrent(current);\n  const {\n    scopeId,\n    saved,\n    artifacts,\n    verifier,\n    previous,\n    predecessorIndexRootHash,\n  } = await restoreAcknowledgedPrincipalPredecessor(options, predecessor);\n  const expectedHead = await checks.authoredHead(request);\n  checks.assertReceipt({ expectedHead, request, response });\n  const keys = await collectPrincipalPolicySignerPublicKeys({\n    bundle: { currentState: response.currentState, previousStates: [] },\n    resolveTrustedUserIdentity: options.resolveTrustedUserIdentity,\n  });\n  assertProjectionVerificationCurrent(current);\n  if (\"error\" in keys)\n    throw new KeyingVerificationError(\n      keys.error === \"not-found\" ? \"missing_dependency\" : \"signer_mismatch\",\n      \"Acknowledged principal signer could not be authenticated\",\n    );\n  const externalAuthority = await options.loadExternalAuthority?.(\n    request.state.externalAuthority ? [request.state.externalAuthority] : [],\n  );\n  assertProjectionVerificationCurrent(current);\n  const policy = await checks.acknowledgeSuccessor({\n    verifiedCurrentPolicy: previous,\n    expectedHead,\n    request,\n    response: response.currentState,\n    signerPublicKeys: keys.signerPublicKeys,\n    externalAuthority,\n    stillCurrent: current,\n  });\n  const entry = {\n    state: response.currentState,\n    projection: response.currentProjection,\n    grants: response.currentGrants,\n  };\n  assertPrincipalHistoryVerificationMode(options, [entry]);\n  const predecessorStage = await sealPrincipalCurrentStage(\n    options,\n    previous.state,\n    verifier,\n    artifacts,\n  );\n  const appended = await verifier.append({\n    entries: [entry],\n    signerPublicKeys: keys.signerPublicKeys,\n    ...(externalAuthority ? { externalAuthority } : {}),\n  });\n  if (!appended.ok) throw appended.error;\n  const sealed = await sealPrincipalCurrentPublication(\n    options,\n    scopeId,\n    expectedHead,\n    verifier,\n    response,\n  );\n  assertProjectionVerificationCurrent(current);\n  return {\n    policy,\n    previousPrefixProgress: saved.progress,\n    predecessorStage,\n    predecessorIndexRootHash,\n    ...sealed,\n    evidence: await preparePrincipalHistoryEvidencePage({\n      indexRootHash: appended.value.indexRootHash,\n      scopeId,\n      organizationId: options.organizationId,\n      entries: [entry],\n      nodes: appended.value.indexNodes,\n    }),\n  };\n}\n\n/** The acknowledged currents of one mutation, recorded together. */\nexport interface AcknowledgedPrincipalCurrentBatch {\n  readonly execSql: ExecSql;\n  readonly organizationId: string;\n  readonly entries: readonly AcknowledgedPrincipalCurrentInput[];\n  readonly retirements?:\n    | readonly AcknowledgedPrincipalCurrentRetirement[]\n    | undefined;\n  readonly stillCurrent: () => boolean;\n}\n\n/**\n * Extend authenticated local progress and retain exact acknowledged artifacts\n * atomically with pins, once `checks` accept each acknowledgement.\n */\nexport async function recordAcknowledgedPrincipalCurrents(\n  input: AcknowledgedPrincipalCurrentBatch & {\n    readonly checks: PrincipalAcknowledgementChecks;\n  },\n): Promise<VerifiedPrincipalPolicyCurrent[]> {\n  const checks = input.checks;\n  const execSql = input.execSql;\n  const organizationId = input.organizationId;\n  const stillCurrent = input.stillCurrent;\n  const retirements = structuredClone(input.retirements ?? []);\n  const entries: {\n    initialGroup: boolean;\n    request: PutPrincipalPolicyRequest;\n    response: PrincipalPolicyMutationResponse;\n    options: RecoverPrincipalPolicyHistoryOptions;\n    predecessor: AcknowledgedPrincipalPredecessor | null;\n  }[] = [];\n  try {\n    assertProjectionVerificationCurrent(stillCurrent);\n    for (const entry of input.entries)\n      entries.push({\n        initialGroup: entry.initialGroup === true,\n        predecessor: structuredClone(entry.predecessor),\n        request: structuredClone(entry.request),\n        response: structuredClone(entry.response),\n        options: {\n          ...entry.recovery,\n          expectedHead: structuredClone(entry.recovery.expectedHead),\n          protection: ownPrincipalHistoryProtection(entry.recovery.protection),\n          execSql,\n          organizationId,\n          stillCurrent,\n        },\n      });\n    const publications: AcknowledgedPrincipalCurrentPublication[] = [];\n    for (const entry of entries)\n      publications.push(\n        await (entry.initialGroup\n          ? prepareInitialGroupCurrentPublication\n          : preparePublication)(\n          entry.options,\n          entry.request,\n          entry.response,\n          entry.predecessor,\n          checks,\n        ),\n      );\n    checks.assertDirectoryBindings(\n      organizationId,\n      entries.map(({ response }) => response),\n    );\n    for (let attempt = 0; ; attempt += 1) {\n      const reconciled = [];\n      for (const [index, publication] of publications.entries()) {\n        const entry = entries[index];\n        if (!entry) throw new Error(\"Missing acknowledgement entry\");\n        reconciled.push(\n          await reconcileAcknowledgedPrincipalCurrent(\n            entry.options,\n            publication,\n          ),\n        );\n      }\n      try {\n        await persistAcknowledgedPrincipalCurrents({\n          execSql,\n          organizationId,\n          entries: reconciled,\n          retirements,\n          stillCurrent: () =>\n            stillCurrent() &&\n            entries.every((entry) => !entry.options.signal?.aborted),\n        });\n        break;\n      } catch (error) {\n        if (\n          !(error instanceof PrincipalAcknowledgementChangedError) ||\n          attempt >= 7\n        )\n          throw error;\n      }\n    }\n    return publications.map(({ policy }) => policy);\n  } finally {\n    for (const entry of entries) entry.options.protection.localKey.fill(0);\n  }\n}\n"]}

package/workflows/principals/acknowledgedPrincipalPredecessor.d.ts

@@ -1,39 +0,0 @@
-import { type PrincipalHistoryPrefix } from "../../data/persistence/principalHistoryPrefixPersistence.js";
-import type { RecoverPrincipalPolicyHistoryOptions } from "./principalHistoryRecoveryTypes.js";
-/** Sealed predecessor evidence, owned by a mutation before its request is sent. */
-export type AcknowledgedPrincipalPredecessor = Readonly<PrincipalHistoryPrefix>;
-/** Authenticate the entire prefix, including its scope and current artifacts. */
-export declare function restoreAcknowledgedPrincipalPrefix(options: RecoverPrincipalPolicyHistoryOptions, saved: AcknowledgedPrincipalPredecessor | null): Promise<{
-    scopeId: string;
-    saved: Readonly<{
-        version: number;
-        organizationId: string;
-        scopeId: string;
-        headJson: string;
-        currentJson: string;
-        progress: string;
-    }>;
-    artifacts: import("../../internal/api-client/index.js").PrincipalPolicyPageCurrent;
-    verifier: import("../../internal/crypto/index.js").PrincipalPolicyHistoryVerifier;
-    previous: import("../../internal/crypto/index.js").VerifiedPrincipalPolicyCurrent;
-    history: import("../../internal/crypto/index.js").VerifiedPrincipalPolicyHistory;
-    predecessorIndexRootHash: string;
-}>;
-/** Capture exact predecessor evidence while authoring, before HTTP can commit. */
-export declare function captureAcknowledgedPrincipalPredecessor(input: RecoverPrincipalPolicyHistoryOptions): Promise<AcknowledgedPrincipalPredecessor>;
-export declare function restoreAcknowledgedPrincipalPredecessor(options: RecoverPrincipalPolicyHistoryOptions, saved: AcknowledgedPrincipalPredecessor | null): Promise<{
-    scopeId: string;
-    saved: Readonly<{
-        version: number;
-        organizationId: string;
-        scopeId: string;
-        headJson: string;
-        currentJson: string;
-        progress: string;
-    }>;
-    artifacts: import("../../internal/api-client/index.js").PrincipalPolicyPageCurrent;
-    verifier: import("../../internal/crypto/index.js").PrincipalPolicyHistoryVerifier;
-    previous: import("../../internal/crypto/index.js").VerifiedPrincipalPolicyCurrent;
-    history: import("../../internal/crypto/index.js").VerifiedPrincipalPolicyHistory;
-    predecessorIndexRootHash: string;
-}>;

package/workflows/principals/acknowledgedPrincipalPredecessor.js

@@ -1,87 +0,0 @@
-import { KeyingVerificationError, restorePrincipalPolicyHistoryVerifier, verifyPrincipalPolicyCurrent, } from "../../internal/crypto/index.js";
-import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
-import { loadPrincipalHistoryPrefix, } from "../../data/persistence/principalHistoryPrefixPersistence.js";
-import { principalHeadMatchesReference } from "../../data/principals/organizationAuthorityDescriptor.js";
-import { principalHistoryEvidenceScopeId, principalHistoryPrefixProtection, } from "../../data/principals/principalHistoryPrefixProtection.js";
-import { ownPrincipalHistoryProtection } from "../../data/principals/principalHistoryProtection.js";
-import { parsePrincipalHistoryStageCurrent } from "../../data/principals/principalHistoryStageProtection.js";
-import { principalPolicyReferenceFromBundle } from "../../data/principals/principalPolicyAdminSigners.js";
-import { principalHistoryVerificationContext } from "./principalHistoryRecoveryVerification.js";
-/** Authenticate the entire prefix, including its scope and current artifacts. */
-export async function restoreAcknowledgedPrincipalPrefix(options, saved) {
-    const scopeId = await principalHistoryEvidenceScopeId({
-        organizationId: options.organizationId,
-        head: options.expectedHead,
-        protection: options.protection,
-    });
-    if (!saved ||
-        saved.scopeId !== scopeId ||
-        saved.organizationId !== options.organizationId)
-        throw new KeyingVerificationError("missing_dependency", "Acknowledgement requires its authenticated predecessor prefix");
-    const restored = await restorePrincipalPolicyHistoryVerifier({
-        principalId: options.expectedHead.principalId,
-        principalType: options.expectedHead.principalType,
-    }, saved.progress, await principalHistoryPrefixProtection(options.protection, saved));
-    if (!restored.ok)
-        throw restored.error;
-    const artifacts = parsePrincipalHistoryStageCurrent({
-        currentJson: saved.currentJson,
-        afterVersion: saved.version - 1,
-    });
-    if (!artifacts)
-        throw new KeyingVerificationError("invalid_shape", "Acknowledged predecessor artifacts are malformed");
-    const history = restored.value.finish(principalPolicyReferenceFromBundle(artifacts));
-    if (!history.ok)
-        throw history.error;
-    const previous = await verifyPrincipalPolicyCurrent({
-        current: artifacts,
-        history: history.value,
-    });
-    if (!previous.ok)
-        throw previous.error;
-    return {
-        scopeId,
-        saved,
-        artifacts,
-        verifier: restored.value,
-        previous: previous.value,
-        history: history.value,
-        predecessorIndexRootHash: history.value.indexRootHash,
-    };
-}
-/** Capture exact predecessor evidence while authoring, before HTTP can commit. */
-export async function captureAcknowledgedPrincipalPredecessor(input) {
-    const protection = ownPrincipalHistoryProtection(input.protection);
-    const options = {
-        ...input,
-        expectedHead: structuredClone(input.expectedHead),
-        protection: {
-            ...protection,
-            context: principalHistoryVerificationContext(input),
-        },
-    };
-    const current = () => !options.signal?.aborted && options.stillCurrent();
-    try {
-        assertProjectionVerificationCurrent(current);
-        const scopeId = await principalHistoryEvidenceScopeId({
-            organizationId: options.organizationId,
-            head: options.expectedHead,
-            protection: options.protection,
-        });
-        const restored = await restoreAcknowledgedPrincipalPrefix(options, await loadPrincipalHistoryPrefix(options.execSql, scopeId));
-        assertProjectionVerificationCurrent(current);
-        if (!principalHeadMatchesReference(restored.previous.state, options.expectedHead))
-            throw new Error("Principal policy changed before submission; retry the mutation");
-        return structuredClone(restored.saved);
-    }
-    finally {
-        protection.localKey.fill(0);
-    }
-}
-export async function restoreAcknowledgedPrincipalPredecessor(options, saved) {
-    const restored = await restoreAcknowledgedPrincipalPrefix(options, saved);
-    if (!principalHeadMatchesReference(restored.previous.state, options.expectedHead))
-        throw new KeyingVerificationError("object_mismatch", "Acknowledgement predecessor does not match the authored request");
-    return restored;
-}
-//# sourceMappingURL=acknowledgedPrincipalPredecessor.js.map

package/workflows/principals/acknowledgedPrincipalPredecessor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"acknowledgedPrincipalPredecessor.js","sourceRoot":"","sources":["acknowledgedPrincipalPredecessor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,qCAAqC,EACrC,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EACL,0BAA0B,GAE3B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,EACL,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,MAAM,kDAAkD,CAAC;AACjG,OAAO,EAAE,iCAAiC,EAAE,MAAM,uDAAuD,CAAC;AAC1G,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AAEvG,OAAO,EAAE,mCAAmC,EAAE,MAAM,wCAAwC,CAAC;AAK7F,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,OAA6C,EAC7C,KAA8C;IAE9C,MAAM,OAAO,GAAG,MAAM,+BAA+B,CAAC;QACpD,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,IAAI,EAAE,OAAO,CAAC,YAAY;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,IACE,CAAC,KAAK;QACN,KAAK,CAAC,OAAO,KAAK,OAAO;QACzB,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;QAE/C,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,+DAA+D,CAChE,CAAC;IACJ,MAAM,QAAQ,GAAG,MAAM,qCAAqC,CAC1D;QACE,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,WAAW;QAC7C,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,aAAa;KAClD,EACD,KAAK,CAAC,QAAQ,EACd,MAAM,gCAAgC,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAClE,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,iCAAiC,CAAC;QAClD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,OAAO,GAAG,CAAC;KAChC,CAAC,CAAC;IACH,IAAI,CAAC,SAAS;QACZ,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,kDAAkD,CACnD,CAAC;IACJ,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CACnC,kCAAkC,CAAC,SAAS,CAAC,CAC9C,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,KAAK,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC;QAClD,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,OAAO,CAAC,KAAK;KACvB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,OAAO;QACL,OAAO;QACP,KAAK;QACL,SAAS;QACT,QAAQ,EAAE,QAAQ,CAAC,KAAK;QACxB,QAAQ,EAAE,QAAQ,CAAC,KAAK;QACxB,OAAO,EAAE,OAAO,CAAC,KAAK;QACtB,wBAAwB,EAAE,OAAO,CAAC,KAAK,CAAC,aAAa;KACtD,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,KAA2C;IAE3C,MAAM,UAAU,GAAG,6BAA6B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG;QACd,GAAG,KAAK;QACR,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC;QACjD,UAAU,EAAE;YACV,GAAG,UAAU;YACb,OAAO,EAAE,mCAAmC,CAAC,KAAK,CAAC;SACpD;KACF,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IACzE,IAAI,CAAC;QACH,mCAAmC,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,+BAA+B,CAAC;YACpD,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,IAAI,EAAE,OAAO,CAAC,YAAY;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CACvD,OAAO,EACP,MAAM,0BAA0B,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAC3D,CAAC;QACF,mCAAmC,CAAC,OAAO,CAAC,CAAC;QAC7C,IACE,CAAC,6BAA6B,CAC5B,QAAQ,CAAC,QAAQ,CAAC,KAAK,EACvB,OAAO,CAAC,YAAY,CACrB;YAED,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;QACJ,OAAO,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;YAAS,CAAC;QACT,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,OAA6C,EAC7C,KAA8C;IAE9C,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1E,IACE,CAAC,6BAA6B,CAC5B,QAAQ,CAAC,QAAQ,CAAC,KAAK,EACvB,OAAO,CAAC,YAAY,CACrB;QAED,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,iEAAiE,CAClE,CAAC;IACJ,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  restorePrincipalPolicyHistoryVerifier,\n  verifyPrincipalPolicyCurrent,\n} from \"@tearleads/crypto\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport {\n  loadPrincipalHistoryPrefix,\n  type PrincipalHistoryPrefix,\n} from \"../../data/persistence/principalHistoryPrefixPersistence\";\nimport { principalHeadMatchesReference } from \"../../data/principals/organizationAuthorityDescriptor\";\nimport {\n  principalHistoryEvidenceScopeId,\n  principalHistoryPrefixProtection,\n} from \"../../data/principals/principalHistoryPrefixProtection\";\nimport { ownPrincipalHistoryProtection } from \"../../data/principals/principalHistoryProtection\";\nimport { parsePrincipalHistoryStageCurrent } from \"../../data/principals/principalHistoryStageProtection\";\nimport { principalPolicyReferenceFromBundle } from \"../../data/principals/principalPolicyAdminSigners\";\nimport type { RecoverPrincipalPolicyHistoryOptions } from \"./principalHistoryRecoveryTypes\";\nimport { principalHistoryVerificationContext } from \"./principalHistoryRecoveryVerification\";\n\n/** Sealed predecessor evidence, owned by a mutation before its request is sent. */\nexport type AcknowledgedPrincipalPredecessor = Readonly<PrincipalHistoryPrefix>;\n\n/** Authenticate the entire prefix, including its scope and current artifacts. */\nexport async function restoreAcknowledgedPrincipalPrefix(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  saved: AcknowledgedPrincipalPredecessor | null,\n) {\n  const scopeId = await principalHistoryEvidenceScopeId({\n    organizationId: options.organizationId,\n    head: options.expectedHead,\n    protection: options.protection,\n  });\n  if (\n    !saved ||\n    saved.scopeId !== scopeId ||\n    saved.organizationId !== options.organizationId\n  )\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      \"Acknowledgement requires its authenticated predecessor prefix\",\n    );\n  const restored = await restorePrincipalPolicyHistoryVerifier(\n    {\n      principalId: options.expectedHead.principalId,\n      principalType: options.expectedHead.principalType,\n    },\n    saved.progress,\n    await principalHistoryPrefixProtection(options.protection, saved),\n  );\n  if (!restored.ok) throw restored.error;\n  const artifacts = parsePrincipalHistoryStageCurrent({\n    currentJson: saved.currentJson,\n    afterVersion: saved.version - 1,\n  });\n  if (!artifacts)\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"Acknowledged predecessor artifacts are malformed\",\n    );\n  const history = restored.value.finish(\n    principalPolicyReferenceFromBundle(artifacts),\n  );\n  if (!history.ok) throw history.error;\n  const previous = await verifyPrincipalPolicyCurrent({\n    current: artifacts,\n    history: history.value,\n  });\n  if (!previous.ok) throw previous.error;\n  return {\n    scopeId,\n    saved,\n    artifacts,\n    verifier: restored.value,\n    previous: previous.value,\n    history: history.value,\n    predecessorIndexRootHash: history.value.indexRootHash,\n  };\n}\n\n/** Capture exact predecessor evidence while authoring, before HTTP can commit. */\nexport async function captureAcknowledgedPrincipalPredecessor(\n  input: RecoverPrincipalPolicyHistoryOptions,\n): Promise<AcknowledgedPrincipalPredecessor> {\n  const protection = ownPrincipalHistoryProtection(input.protection);\n  const options = {\n    ...input,\n    expectedHead: structuredClone(input.expectedHead),\n    protection: {\n      ...protection,\n      context: principalHistoryVerificationContext(input),\n    },\n  };\n  const current = () => !options.signal?.aborted && options.stillCurrent();\n  try {\n    assertProjectionVerificationCurrent(current);\n    const scopeId = await principalHistoryEvidenceScopeId({\n      organizationId: options.organizationId,\n      head: options.expectedHead,\n      protection: options.protection,\n    });\n    const restored = await restoreAcknowledgedPrincipalPrefix(\n      options,\n      await loadPrincipalHistoryPrefix(options.execSql, scopeId),\n    );\n    assertProjectionVerificationCurrent(current);\n    if (\n      !principalHeadMatchesReference(\n        restored.previous.state,\n        options.expectedHead,\n      )\n    )\n      throw new Error(\n        \"Principal policy changed before submission; retry the mutation\",\n      );\n    return structuredClone(restored.saved);\n  } finally {\n    protection.localKey.fill(0);\n  }\n}\n\nexport async function restoreAcknowledgedPrincipalPredecessor(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  saved: AcknowledgedPrincipalPredecessor | null,\n) {\n  const restored = await restoreAcknowledgedPrincipalPrefix(options, saved);\n  if (\n    !principalHeadMatchesReference(\n      restored.previous.state,\n      options.expectedHead,\n    )\n  )\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Acknowledgement predecessor does not match the authored request\",\n    );\n  return restored;\n}\n"]}

package/workflows/principals/initialPrincipalCurrentPublication.js

@@ -1,84 +0,0 @@
-import { createPrincipalPolicyHistoryVerifier, KeyingVerificationError, verifyPrincipalPolicyCurrent, } from "../../internal/crypto/index.js";
-import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
-import { preparePrincipalHistoryEvidencePage } from "../../data/persistence/principalHistoryEvidencePersistence.js";
-import { principalHeadMatchesReference } from "../../data/principals/organizationAuthorityDescriptor.js";
-import { principalHistoryEvidenceScopeId } from "../../data/principals/principalHistoryPrefixProtection.js";
-import { collectPrincipalPolicySignerPublicKeys } from "./policyVerification.js";
-import { sealPrincipalCurrentPublication } from "./principalCurrentPublicationSeal.js";
-import { assertPrincipalHistoryVerificationMode, principalHistoryVerificationContext, } from "./principalHistoryRecoveryVerification.js";
-/** Verify a newly authored group from genesis before its atomic directory publication. */
-export async function prepareInitialGroupCurrentPublication(input, request, response, predecessor, checks) {
-    const current = () => !input.signal?.aborted && input.stillCurrent();
-    assertProjectionVerificationCurrent(current);
-    const expectedHead = await checks.authoredHead(request);
-    if (predecessor !== null ||
-        request.state.principalType !== "group" ||
-        request.state.version !== 1 ||
-        request.state.prevStateHash !== null ||
-        !principalHeadMatchesReference(expectedHead, input.expectedHead))
-        throw new KeyingVerificationError("object_mismatch", "Initial group publication must begin at its exact genesis");
-    checks.assertReceipt({ expectedHead, request, response });
-    const keys = await collectPrincipalPolicySignerPublicKeys({
-        bundle: { currentState: response.currentState, previousStates: [] },
-        resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,
-    });
-    if ("error" in keys)
-        throw new KeyingVerificationError("signer_mismatch", "Initial group signer could not be authenticated");
-    const externalAuthority = await input.loadExternalAuthority?.(request.state.externalAuthority ? [request.state.externalAuthority] : []);
-    assertProjectionVerificationCurrent(current);
-    const verifier = createPrincipalPolicyHistoryVerifier({
-        principalType: "group",
-        principalId: expectedHead.principalId,
-    });
-    const entry = {
-        state: response.currentState,
-        projection: response.currentProjection,
-        grants: response.currentGrants,
-    };
-    assertPrincipalHistoryVerificationMode(input, [entry]);
-    const appended = await verifier.append({
-        entries: [entry],
-        signerPublicKeys: keys.signerPublicKeys,
-        ...(externalAuthority ? { externalAuthority } : {}),
-    });
-    if (!appended.ok)
-        throw appended.error;
-    const history = verifier.finish(expectedHead);
-    if (!history.ok)
-        throw history.error;
-    const policy = await verifyPrincipalPolicyCurrent({
-        current: response,
-        history: history.value,
-    });
-    if (!policy.ok)
-        throw policy.error;
-    const options = {
-        ...input,
-        protection: {
-            ...input.protection,
-            context: principalHistoryVerificationContext(input),
-        },
-    };
-    const scopeId = await principalHistoryEvidenceScopeId({
-        organizationId: input.organizationId,
-        head: expectedHead,
-        protection: options.protection,
-    });
-    const sealed = await sealPrincipalCurrentPublication(options, scopeId, expectedHead, verifier, response);
-    assertProjectionVerificationCurrent(current);
-    return {
-        ...sealed,
-        policy: policy.value,
-        predecessorStage: null,
-        predecessorIndexRootHash: null,
-        previousPrefixProgress: null,
-        evidence: await preparePrincipalHistoryEvidencePage({
-            indexRootHash: appended.value.indexRootHash,
-            scopeId,
-            organizationId: input.organizationId,
-            entries: [entry],
-            nodes: appended.value.indexNodes,
-        }),
-    };
-}
-//# sourceMappingURL=initialPrincipalCurrentPublication.js.map

package/workflows/principals/initialPrincipalCurrentPublication.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"initialPrincipalCurrentPublication.js","sourceRoot":"","sources":["initialPrincipalCurrentPublication.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AAEpG,OAAO,EAAE,mCAAmC,EAAE,MAAM,4DAA4D,CAAC;AACjH,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,EAAE,+BAA+B,EAAE,MAAM,wDAAwD,CAAC;AAEzG,OAAO,EAAE,sCAAsC,EAAE,MAAM,sBAAsB,CAAC;AAE9E,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AAEpF,OAAO,EACL,sCAAsC,EACtC,mCAAmC,GACpC,MAAM,wCAAwC,CAAC;AAEhD,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,KAA2C,EAC3C,OAAkC,EAClC,QAAyC,EACzC,WAAoD,EACpD,MAAsC;IAEtC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;IACrE,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACxD,IACE,WAAW,KAAK,IAAI;QACpB,OAAO,CAAC,KAAK,CAAC,aAAa,KAAK,OAAO;QACvC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,aAAa,KAAK,IAAI;QACpC,CAAC,6BAA6B,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC;QAEhE,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,2DAA2D,CAC5D,CAAC;IACJ,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,sCAAsC,CAAC;QACxD,MAAM,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,cAAc,EAAE,EAAE,EAAE;QACnE,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;KAC7D,CAAC,CAAC;IACH,IAAI,OAAO,IAAI,IAAI;QACjB,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,iDAAiD,CAClD,CAAC;IACJ,MAAM,iBAAiB,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE,CAC3D,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CACzE,CAAC;IACF,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,oCAAoC,CAAC;QACpD,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,YAAY,CAAC,WAAW;KACtC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG;QACZ,KAAK,EAAE,QAAQ,CAAC,YAAY;QAC5B,UAAU,EAAE,QAAQ,CAAC,iBAAiB;QACtC,MAAM,EAAE,QAAQ,CAAC,aAAa;KAC/B,CAAC;IACF,sCAAsC,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACrC,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,KAAK,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC;QAChD,OAAO,EAAE,QAAQ;QACjB,OAAO,EAAE,OAAO,CAAC,KAAK;KACvB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG;QACd,GAAG,KAAK;QACR,UAAU,EAAE;YACV,GAAG,KAAK,CAAC,UAAU;YACnB,OAAO,EAAE,mCAAmC,CAAC,KAAK,CAAC;SACpD;KACF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,+BAA+B,CAAC;QACpD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAClD,OAAO,EACP,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,QAAQ,CACT,CAAC;IACF,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO;QACL,GAAG,MAAM;QACT,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,gBAAgB,EAAE,IAAI;QACtB,wBAAwB,EAAE,IAAI;QAC9B,sBAAsB,EAAE,IAAI;QAC5B,QAAQ,EAAE,MAAM,mCAAmC,CAAC;YAClD,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;YAC3C,OAAO;YACP,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE,CAAC,KAAK,CAAC;YAChB,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;SACjC,CAAC;KACH,CAAC;AACJ,CAAC","sourcesContent":["import {\n  createPrincipalPolicyHistoryVerifier,\n  KeyingVerificationError,\n  verifyPrincipalPolicyCurrent,\n} from \"@tearleads/crypto\";\nimport type { PutPrincipalPolicyRequest } from \"@tearleads/validators/request\";\nimport type { PrincipalPolicyMutationResponse } from \"@tearleads/validators/response\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport type { AcknowledgedPrincipalCurrentPublication } from \"../../data/persistence/principalCurrentAcknowledgementPersistence\";\nimport { preparePrincipalHistoryEvidencePage } from \"../../data/persistence/principalHistoryEvidencePersistence\";\nimport { principalHeadMatchesReference } from \"../../data/principals/organizationAuthorityDescriptor\";\nimport { principalHistoryEvidenceScopeId } from \"../../data/principals/principalHistoryPrefixProtection\";\nimport type { AcknowledgedPrincipalPredecessor } from \"./acknowledgedPrincipalPredecessor\";\nimport { collectPrincipalPolicySignerPublicKeys } from \"./policyVerification\";\nimport type { PrincipalAcknowledgementChecks } from \"./principalAcknowledgementChecks\";\nimport { sealPrincipalCurrentPublication } from \"./principalCurrentPublicationSeal\";\nimport type { RecoverPrincipalPolicyHistoryOptions } from \"./principalHistoryRecoveryTypes\";\nimport {\n  assertPrincipalHistoryVerificationMode,\n  principalHistoryVerificationContext,\n} from \"./principalHistoryRecoveryVerification\";\n\n/** Verify a newly authored group from genesis before its atomic directory publication. */\nexport async function prepareInitialGroupCurrentPublication(\n  input: RecoverPrincipalPolicyHistoryOptions,\n  request: PutPrincipalPolicyRequest,\n  response: PrincipalPolicyMutationResponse,\n  predecessor: AcknowledgedPrincipalPredecessor | null,\n  checks: PrincipalAcknowledgementChecks,\n): Promise<AcknowledgedPrincipalCurrentPublication> {\n  const current = () => !input.signal?.aborted && input.stillCurrent();\n  assertProjectionVerificationCurrent(current);\n  const expectedHead = await checks.authoredHead(request);\n  if (\n    predecessor !== null ||\n    request.state.principalType !== \"group\" ||\n    request.state.version !== 1 ||\n    request.state.prevStateHash !== null ||\n    !principalHeadMatchesReference(expectedHead, input.expectedHead)\n  )\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Initial group publication must begin at its exact genesis\",\n    );\n  checks.assertReceipt({ expectedHead, request, response });\n  const keys = await collectPrincipalPolicySignerPublicKeys({\n    bundle: { currentState: response.currentState, previousStates: [] },\n    resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n  });\n  if (\"error\" in keys)\n    throw new KeyingVerificationError(\n      \"signer_mismatch\",\n      \"Initial group signer could not be authenticated\",\n    );\n  const externalAuthority = await input.loadExternalAuthority?.(\n    request.state.externalAuthority ? [request.state.externalAuthority] : [],\n  );\n  assertProjectionVerificationCurrent(current);\n  const verifier = createPrincipalPolicyHistoryVerifier({\n    principalType: \"group\",\n    principalId: expectedHead.principalId,\n  });\n  const entry = {\n    state: response.currentState,\n    projection: response.currentProjection,\n    grants: response.currentGrants,\n  };\n  assertPrincipalHistoryVerificationMode(input, [entry]);\n  const appended = await verifier.append({\n    entries: [entry],\n    signerPublicKeys: keys.signerPublicKeys,\n    ...(externalAuthority ? { externalAuthority } : {}),\n  });\n  if (!appended.ok) throw appended.error;\n  const history = verifier.finish(expectedHead);\n  if (!history.ok) throw history.error;\n  const policy = await verifyPrincipalPolicyCurrent({\n    current: response,\n    history: history.value,\n  });\n  if (!policy.ok) throw policy.error;\n  const options = {\n    ...input,\n    protection: {\n      ...input.protection,\n      context: principalHistoryVerificationContext(input),\n    },\n  };\n  const scopeId = await principalHistoryEvidenceScopeId({\n    organizationId: input.organizationId,\n    head: expectedHead,\n    protection: options.protection,\n  });\n  const sealed = await sealPrincipalCurrentPublication(\n    options,\n    scopeId,\n    expectedHead,\n    verifier,\n    response,\n  );\n  assertProjectionVerificationCurrent(current);\n  return {\n    ...sealed,\n    policy: policy.value,\n    predecessorStage: null,\n    predecessorIndexRootHash: null,\n    previousPrefixProgress: null,\n    evidence: await preparePrincipalHistoryEvidencePage({\n      indexRootHash: appended.value.indexRootHash,\n      scopeId,\n      organizationId: input.organizationId,\n      entries: [entry],\n      nodes: appended.value.indexNodes,\n    }),\n  };\n}\n"]}

package/workflows/principals/loadRecoveredPrincipalHistoryPage.d.ts

@@ -1,10 +0,0 @@
-import { type PrincipalPolicyStateChainEntryResponse } from "../../internal/validators/response/index.js";
-import { type RecoverPrincipalPolicyHistoryOptions } from "./principalHistoryRecoveryTypes.js";
-export interface RecoveredPrincipalHistoryPage {
-    /** Ascending entries, with the immediate predecessor kept separately for diffs. */
-    readonly entries: readonly PrincipalPolicyStateChainEntryResponse[];
-    readonly predecessor: PrincipalPolicyStateChainEntryResponse | null;
-    readonly nextBeforeVersion: number | null;
-}
-/** Read a bounded historical window from an already recovered, exact private root. */
-export declare function loadRecoveredPrincipalHistoryPage(options: RecoverPrincipalPolicyHistoryOptions, beforeVersion?: number): Promise<RecoveredPrincipalHistoryPage>;

package/workflows/principals/loadRecoveredPrincipalHistoryPage.js

@@ -1,119 +0,0 @@
-import { KeyingVerificationError, verifyPrincipalPolicyHistoryReferences, } from "../../internal/crypto/index.js";
-import { isPrincipalPolicyStateChainEntryResponse, PRINCIPAL_DISPLAY_HISTORY_PAGE_SIZE, } from "../../internal/validators/response/index.js";
-import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
-import { loadPrincipalPolicyCheckpoint } from "../../data/persistence/keyingCheckpointPersistence.js";
-import { loadPrincipalHistoryReference } from "../../data/persistence/principalHistoryEvidencePersistence.js";
-import { principalHistoryEvidenceScopeId } from "../../data/principals/principalHistoryPrefixProtection.js";
-import { ownPrincipalHistoryProtection } from "../../data/principals/principalHistoryProtection.js";
-import { loadVerifiedPrincipalHistoryPrefix } from "./principalHistoryRecoveryPrefix.js";
-import { PrincipalHistoryEvidenceUnavailableError } from "./principalHistoryRecoveryReferences.js";
-import { PrincipalHistoryRecoveryRaceError, } from "./principalHistoryRecoveryTypes.js";
-import { principalHistoryVerificationContext } from "./principalHistoryRecoveryVerification.js";
-/** Read a bounded historical window from an already recovered, exact private root. */
-export async function loadRecoveredPrincipalHistoryPage(options, beforeVersion = options.expectedHead.version + 1) {
-    const owned = {
-        ...options,
-        expectedHead: structuredClone(options.expectedHead),
-        protection: ownPrincipalHistoryProtection(options.protection),
-    };
-    try {
-        return await readPage(owned, beforeVersion);
-    }
-    finally {
-        owned.protection.localKey.fill(0);
-    }
-}
-async function readPage(options, beforeVersion) {
-    if (!Number.isSafeInteger(beforeVersion) ||
-        beforeVersion <= 1 ||
-        beforeVersion > options.expectedHead.version + 1)
-        throw new KeyingVerificationError("invalid_shape", "Principal history page cursor is outside the selected history");
-    const current = () => !options.signal?.aborted && options.stillCurrent();
-    assertProjectionVerificationCurrent(current);
-    const { scopeId, history } = await restoreReadRoot(options, current);
-    const checkpoint = await loadPrincipalPolicyCheckpoint(options.execSql, options.expectedHead.principalType, options.expectedHead.principalId);
-    if (checkpoint && checkpoint.version > options.expectedHead.version)
-        throw new PrincipalHistoryRecoveryRaceError("Principal checkpoint advanced beyond the selected display history");
-    const load = (version) => loadPageReference({
-        execSql: options.execSql,
-        scopeId,
-        history,
-        version,
-    });
-    const firstVersion = Math.max(1, beforeVersion - PRINCIPAL_DISPLAY_HISTORY_PAGE_SIZE);
-    const references = [];
-    for (let version = Math.max(1, firstVersion - 1); version < beforeVersion; version += 1) {
-        assertProjectionVerificationCurrent(current);
-        references.push(await load(version));
-    }
-    const checkpointReference = checkpoint
-        ? await load(checkpoint.version)
-        : undefined;
-    if (checkpointReference &&
-        checkpointReference.reference.stateHash !== checkpoint?.stateHash)
-        throw new KeyingVerificationError("equivocation", "Principal history page conflicts with its durable checkpoint");
-    const selected = await verifyPrincipalPolicyHistoryReferences({
-        history,
-        references,
-        checkpointReference,
-    });
-    if (!selected.ok)
-        throw new PrincipalHistoryEvidenceUnavailableError(selected.error);
-    await assertDisplayCheckpointCurrent(options, checkpoint);
-    assertProjectionVerificationCurrent(current);
-    // These exact rows passed inclusion and commitment verification above. Keep
-    // their display-only server timestamps, which the private current strips.
-    const retained = references.map(({ entry }) => responseEntry(entry));
-    return {
-        entries: retained.filter(({ state }) => state.version >= firstVersion && state.version < beforeVersion),
-        predecessor: retained.find(({ state }) => state.version === firstVersion - 1) ?? null,
-        nextBeforeVersion: firstVersion > 1 ? firstVersion : null,
-    };
-}
-async function assertDisplayCheckpointCurrent(options, checkpoint) {
-    const latest = await loadPrincipalPolicyCheckpoint(options.execSql, options.expectedHead.principalType, options.expectedHead.principalId);
-    if (latest?.version !== checkpoint?.version ||
-        latest?.stateHash !== checkpoint?.stateHash)
-        throw new PrincipalHistoryRecoveryRaceError("Principal checkpoint changed while reading display history");
-}
-async function loadPageReference(input) {
-    try {
-        return await loadPrincipalHistoryReference(input);
-    }
-    catch (error) {
-        if (error instanceof KeyingVerificationError)
-            throw new PrincipalHistoryEvidenceUnavailableError(error);
-        throw error;
-    }
-}
-function responseEntry(entry) {
-    if (!isPrincipalPolicyStateChainEntryResponse(entry))
-        throw new KeyingVerificationError("missing_dependency", "Principal history display metadata is unavailable");
-    return entry;
-}
-async function restoreReadRoot(options, current) {
-    const normalized = {
-        ...options,
-        protection: {
-            ...options.protection,
-            context: principalHistoryVerificationContext(options),
-        },
-    };
-    const scopeId = await principalHistoryEvidenceScopeId({
-        organizationId: options.organizationId,
-        head: options.expectedHead,
-        protection: normalized.protection,
-    });
-    const prefix = await loadVerifiedPrincipalHistoryPrefix(normalized, {
-        principalType: options.expectedHead.principalType,
-        principalId: options.expectedHead.principalId,
-    }, scopeId);
-    assertProjectionVerificationCurrent(current);
-    if (!prefix)
-        throw new KeyingVerificationError("missing_dependency", "Principal history page requires a recovered private prefix");
-    const finished = prefix.verifier.finish(options.expectedHead);
-    if (!finished.ok)
-        throw finished.error;
-    return { scopeId, history: finished.value };
-}
-//# sourceMappingURL=loadRecoveredPrincipalHistoryPage.js.map

package/workflows/principals/loadRecoveredPrincipalHistoryPage.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"loadRecoveredPrincipalHistoryPage.js","sourceRoot":"","sources":["loadRecoveredPrincipalHistoryPage.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EAGvB,sCAAsC,GACvC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wCAAwC,EACxC,mCAAmC,GAEpC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,6BAA6B,EAAE,MAAM,4DAA4D,CAAC;AAC3G,OAAO,EAAE,+BAA+B,EAAE,MAAM,wDAAwD,CAAC;AACzG,OAAO,EAAE,6BAA6B,EAAE,MAAM,kDAAkD,CAAC;AACjG,OAAO,EAAE,kCAAkC,EAAE,MAAM,kCAAkC,CAAC;AACtF,OAAO,EAAE,wCAAwC,EAAE,MAAM,sCAAsC,CAAC;AAChG,OAAO,EACL,iCAAiC,GAElC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,mCAAmC,EAAE,MAAM,wCAAwC,CAAC;AAS7F,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,OAA6C,EAC7C,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,GAAG,CAAC;IAEhD,MAAM,KAAK,GAAG;QACZ,GAAG,OAAO;QACV,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC;QACnD,UAAU,EAAE,6BAA6B,CAAC,OAAO,CAAC,UAAU,CAAC;KAC9D,CAAC;IACF,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC9C,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,OAA6C,EAC7C,aAAqB;IAErB,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC;QACpC,aAAa,IAAI,CAAC;QAClB,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,GAAG,CAAC;QAEhD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,+DAA+D,CAChE,CAAC;IACJ,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IACzE,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,MAAM,6BAA6B,CACpD,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,YAAY,CAAC,aAAa,EAClC,OAAO,CAAC,YAAY,CAAC,WAAW,CACjC,CAAC;IACF,IAAI,UAAU,IAAI,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO;QACjE,MAAM,IAAI,iCAAiC,CACzC,mEAAmE,CACpE,CAAC;IACJ,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE,CAC/B,iBAAiB,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO;QACP,OAAO;QACP,OAAO;KACR,CAAC,CAAC;IACL,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAC3B,CAAC,EACD,aAAa,GAAG,mCAAmC,CACpD,CAAC;IACF,MAAM,UAAU,GAA2C,EAAE,CAAC;IAC9D,KACE,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,EAC3C,OAAO,GAAG,aAAa,EACvB,OAAO,IAAI,CAAC,EACZ,CAAC;QACD,mCAAmC,CAAC,OAAO,CAAC,CAAC;QAC7C,UAAU,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,mBAAmB,GAAG,UAAU;QACpC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,SAAS,CAAC;IACd,IACE,mBAAmB;QACnB,mBAAmB,CAAC,SAAS,CAAC,SAAS,KAAK,UAAU,EAAE,SAAS;QAEjE,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,8DAA8D,CAC/D,CAAC;IACJ,MAAM,QAAQ,GAAG,MAAM,sCAAsC,CAAC;QAC5D,OAAO;QACP,UAAU;QACV,mBAAmB;KACpB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,wCAAwC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,8BAA8B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC1D,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,MAAM,CACtB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CACZ,KAAK,CAAC,OAAO,IAAI,YAAY,IAAI,KAAK,CAAC,OAAO,GAAG,aAAa,CACjE;QACD,WAAW,EACT,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,YAAY,GAAG,CAAC,CAAC,IAAI,IAAI;QAC1E,iBAAiB,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;KAC1D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,OAA6C,EAC7C,UAAqE;IAErE,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,YAAY,CAAC,aAAa,EAClC,OAAO,CAAC,YAAY,CAAC,WAAW,CACjC,CAAC;IACF,IACE,MAAM,EAAE,OAAO,KAAK,UAAU,EAAE,OAAO;QACvC,MAAM,EAAE,SAAS,KAAK,UAAU,EAAE,SAAS;QAE3C,MAAM,IAAI,iCAAiC,CACzC,4DAA4D,CAC7D,CAAC;AACN,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,KAA0D;IAE1D,IAAI,CAAC;QACH,OAAO,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uBAAuB;YAC1C,MAAM,IAAI,wCAAwC,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,KAAqC;IAErC,IAAI,CAAC,wCAAwC,CAAC,KAAK,CAAC;QAClD,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,mDAAmD,CACpD,CAAC;IACJ,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAA6C,EAC7C,OAAsB;IAEtB,MAAM,UAAU,GAAG;QACjB,GAAG,OAAO;QACV,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,UAAU;YACrB,OAAO,EAAE,mCAAmC,CAAC,OAAO,CAAC;SACtD;KACF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,+BAA+B,CAAC;QACpD,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,IAAI,EAAE,OAAO,CAAC,YAAY;QAC1B,UAAU,EAAE,UAAU,CAAC,UAAU;KAClC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,kCAAkC,CACrD,UAAU,EACV;QACE,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,aAAa;QACjD,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,WAAW;KAC9C,EACD,OAAO,CACR,CAAC;IACF,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM;QACT,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,4DAA4D,CAC7D,CAAC;IACJ,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAC9C,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type PrincipalPolicyHistoryReferenceProof,\n  type PrincipalPolicyStateChainEntry,\n  verifyPrincipalPolicyHistoryReferences,\n} from \"@tearleads/crypto\";\nimport {\n  isPrincipalPolicyStateChainEntryResponse,\n  PRINCIPAL_DISPLAY_HISTORY_PAGE_SIZE,\n  type PrincipalPolicyStateChainEntryResponse,\n} from \"@tearleads/validators/response\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport { loadPrincipalPolicyCheckpoint } from \"../../data/persistence/keyingCheckpointPersistence\";\nimport { loadPrincipalHistoryReference } from \"../../data/persistence/principalHistoryEvidencePersistence\";\nimport { principalHistoryEvidenceScopeId } from \"../../data/principals/principalHistoryPrefixProtection\";\nimport { ownPrincipalHistoryProtection } from \"../../data/principals/principalHistoryProtection\";\nimport { loadVerifiedPrincipalHistoryPrefix } from \"./principalHistoryRecoveryPrefix\";\nimport { PrincipalHistoryEvidenceUnavailableError } from \"./principalHistoryRecoveryReferences\";\nimport {\n  PrincipalHistoryRecoveryRaceError,\n  type RecoverPrincipalPolicyHistoryOptions,\n} from \"./principalHistoryRecoveryTypes\";\nimport { principalHistoryVerificationContext } from \"./principalHistoryRecoveryVerification\";\n\nexport interface RecoveredPrincipalHistoryPage {\n  /** Ascending entries, with the immediate predecessor kept separately for diffs. */\n  readonly entries: readonly PrincipalPolicyStateChainEntryResponse[];\n  readonly predecessor: PrincipalPolicyStateChainEntryResponse | null;\n  readonly nextBeforeVersion: number | null;\n}\n\n/** Read a bounded historical window from an already recovered, exact private root. */\nexport async function loadRecoveredPrincipalHistoryPage(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  beforeVersion = options.expectedHead.version + 1,\n): Promise<RecoveredPrincipalHistoryPage> {\n  const owned = {\n    ...options,\n    expectedHead: structuredClone(options.expectedHead),\n    protection: ownPrincipalHistoryProtection(options.protection),\n  };\n  try {\n    return await readPage(owned, beforeVersion);\n  } finally {\n    owned.protection.localKey.fill(0);\n  }\n}\n\nasync function readPage(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  beforeVersion: number,\n): Promise<RecoveredPrincipalHistoryPage> {\n  if (\n    !Number.isSafeInteger(beforeVersion) ||\n    beforeVersion <= 1 ||\n    beforeVersion > options.expectedHead.version + 1\n  )\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"Principal history page cursor is outside the selected history\",\n    );\n  const current = () => !options.signal?.aborted && options.stillCurrent();\n  assertProjectionVerificationCurrent(current);\n  const { scopeId, history } = await restoreReadRoot(options, current);\n  const checkpoint = await loadPrincipalPolicyCheckpoint(\n    options.execSql,\n    options.expectedHead.principalType,\n    options.expectedHead.principalId,\n  );\n  if (checkpoint && checkpoint.version > options.expectedHead.version)\n    throw new PrincipalHistoryRecoveryRaceError(\n      \"Principal checkpoint advanced beyond the selected display history\",\n    );\n  const load = (version: number) =>\n    loadPageReference({\n      execSql: options.execSql,\n      scopeId,\n      history,\n      version,\n    });\n  const firstVersion = Math.max(\n    1,\n    beforeVersion - PRINCIPAL_DISPLAY_HISTORY_PAGE_SIZE,\n  );\n  const references: PrincipalPolicyHistoryReferenceProof[] = [];\n  for (\n    let version = Math.max(1, firstVersion - 1);\n    version < beforeVersion;\n    version += 1\n  ) {\n    assertProjectionVerificationCurrent(current);\n    references.push(await load(version));\n  }\n  const checkpointReference = checkpoint\n    ? await load(checkpoint.version)\n    : undefined;\n  if (\n    checkpointReference &&\n    checkpointReference.reference.stateHash !== checkpoint?.stateHash\n  )\n    throw new KeyingVerificationError(\n      \"equivocation\",\n      \"Principal history page conflicts with its durable checkpoint\",\n    );\n  const selected = await verifyPrincipalPolicyHistoryReferences({\n    history,\n    references,\n    checkpointReference,\n  });\n  if (!selected.ok)\n    throw new PrincipalHistoryEvidenceUnavailableError(selected.error);\n  await assertDisplayCheckpointCurrent(options, checkpoint);\n  assertProjectionVerificationCurrent(current);\n  // These exact rows passed inclusion and commitment verification above. Keep\n  // their display-only server timestamps, which the private current strips.\n  const retained = references.map(({ entry }) => responseEntry(entry));\n  return {\n    entries: retained.filter(\n      ({ state }) =>\n        state.version >= firstVersion && state.version < beforeVersion,\n    ),\n    predecessor:\n      retained.find(({ state }) => state.version === firstVersion - 1) ?? null,\n    nextBeforeVersion: firstVersion > 1 ? firstVersion : null,\n  };\n}\n\nasync function assertDisplayCheckpointCurrent(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  checkpoint: Awaited<ReturnType<typeof loadPrincipalPolicyCheckpoint>>,\n) {\n  const latest = await loadPrincipalPolicyCheckpoint(\n    options.execSql,\n    options.expectedHead.principalType,\n    options.expectedHead.principalId,\n  );\n  if (\n    latest?.version !== checkpoint?.version ||\n    latest?.stateHash !== checkpoint?.stateHash\n  )\n    throw new PrincipalHistoryRecoveryRaceError(\n      \"Principal checkpoint changed while reading display history\",\n    );\n}\n\nasync function loadPageReference(\n  input: Parameters<typeof loadPrincipalHistoryReference>[0],\n) {\n  try {\n    return await loadPrincipalHistoryReference(input);\n  } catch (error) {\n    if (error instanceof KeyingVerificationError)\n      throw new PrincipalHistoryEvidenceUnavailableError(error);\n    throw error;\n  }\n}\n\nfunction responseEntry(\n  entry: PrincipalPolicyStateChainEntry,\n): PrincipalPolicyStateChainEntryResponse {\n  if (!isPrincipalPolicyStateChainEntryResponse(entry))\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      \"Principal history display metadata is unavailable\",\n    );\n  return entry;\n}\n\nasync function restoreReadRoot(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  current: () => boolean,\n) {\n  const normalized = {\n    ...options,\n    protection: {\n      ...options.protection,\n      context: principalHistoryVerificationContext(options),\n    },\n  };\n  const scopeId = await principalHistoryEvidenceScopeId({\n    organizationId: options.organizationId,\n    head: options.expectedHead,\n    protection: normalized.protection,\n  });\n  const prefix = await loadVerifiedPrincipalHistoryPrefix(\n    normalized,\n    {\n      principalType: options.expectedHead.principalType,\n      principalId: options.expectedHead.principalId,\n    },\n    scopeId,\n  );\n  assertProjectionVerificationCurrent(current);\n  if (!prefix)\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      \"Principal history page requires a recovered private prefix\",\n    );\n  const finished = prefix.verifier.finish(options.expectedHead);\n  if (!finished.ok) throw finished.error;\n  return { scopeId, history: finished.value };\n}\n"]}

package/workflows/principals/policyCache.d.ts

@@ -1,20 +0,0 @@
-import type { PrincipalPolicyBundleResponse, ReferencedPrincipalStateResponse } from "../../internal/validators/response/index.js";
-import type { SecurityIncidentReporter } from "../../data/shared/securityIncidents.js";
-import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
-import type { TrustedUserIdentityResolver } from "../../data/trustedUserIdentity/index.js";
-import type { CurrentPrincipalPolicyReader } from "./currentPrincipalPolicyReader.js";
-export interface CacheReferencedPrincipalPoliciesOptions {
-    currentPolicyReader: CurrentPrincipalPolicyReader;
-    execSql: ExecSql;
-    log?: (message: string) => void;
-    organizationId: string;
-    reportSecurityIncident: SecurityIncidentReporter;
-    references: ReadonlyArray<ReferencedPrincipalStateResponse> | undefined;
-    resolveTrustedUserIdentity: TrustedUserIdentityResolver;
-    stillCurrent?: (() => boolean) | undefined;
-}
-export interface CachePrincipalPolicyBundlesOptions extends Omit<CacheReferencedPrincipalPoliciesOptions, "references"> {
-    bundles: ReadonlyArray<PrincipalPolicyBundleResponse> | undefined;
-}
-export declare function cacheReferencedPrincipalPolicies(input: CacheReferencedPrincipalPoliciesOptions): Promise<void>;
-export declare function cachePrincipalPolicyBundles({ bundles, currentPolicyReader, execSql, log, organizationId, reportSecurityIncident, resolveTrustedUserIdentity, stillCurrent, }: CachePrincipalPolicyBundlesOptions): Promise<void>;