@tearleads/client-sdk 0.1.61 → 0.1.63

package/workflows/principals/policyCache.js

@@ -1,242 +0,0 @@
-import { isProjectionVerificationCancelledError } from "../../data/keyingProjectionVerification/index.js";
-import { reportAndRethrowKeyingVerificationError, rethrowKeyingVerificationError, } from "../../data/keyingProjectionVerification/error.js";
-import { dedupeReferencedPrincipalStates } from "../../data/keyingProjectionVerification/principalPolicyCache.js";
-import { loadPrincipalPolicyCheckpoint } from "../../data/persistence/keyingCheckpointPersistence.js";
-import { ensurePrincipalPolicyTables } from "../../data/persistence/principalPolicyPersistence.js";
-import { loadPrincipalPolicyBundleForReference } from "../../data/persistence/principalPolicyReferencePersistence.js";
-import { principalPolicyReferenceFromBundle } from "../../data/principals/principalPolicyAdminSigners.js";
-import { errorMessage } from "../../data/shared/errorMessage.js";
-import { externalAdminPolicyPersistenceEntries, loadOrganizationExternalAdminPolicy, } from "./externalAdminPolicy.js";
-import { persistPrincipalPolicyCacheEntries, retryPrincipalPolicyCacheAdvance, } from "./principalPolicyCacheAdvance.js";
-import { scopeReferencedPolicyForCache } from "./principalPolicyCacheScope.js";
-import { validatePrincipalPolicyBundleForCache } from "./principalPolicyCacheValidation.js";
-import { createPolicyDirectoryLoader, directoryBindsGroupReference, } from "./principalPolicyOrganizationScope.js";
-function getReferencedPrincipalKey(reference) {
-    return `${reference.principalType}:${reference.principalId}`;
-}
-function getBundlePrincipalKey(bundle) {
-    return `${bundle.currentState.principalType}:${bundle.currentState.principalId}`;
-}
-function dedupePrincipalPolicyBundles(bundles) {
-    const bundlesByPrincipal = new Map();
-    for (const bundle of bundles) {
-        const key = getBundlePrincipalKey(bundle);
-        const previous = bundlesByPrincipal.get(key);
-        if (!previous ||
-            bundle.currentState.version > previous.currentState.version) {
-            bundlesByPrincipal.set(key, bundle);
-        }
-    }
-    return Array.from(bundlesByPrincipal.values());
-}
-async function cacheReferencedPrincipalPolicy(execSql, reader, reference, resolveTrustedUserIdentity, log, loadExternalAdminPolicy, organizationId, stillCurrent, loadDirectory, fresh) {
-    const localCheckpoint = await loadPrincipalPolicyCheckpoint(execSql, reference.principalType, reference.principalId);
-    // Only null is a recoverable local miss. Integrity failures remain typed and
-    // must escape rather than being hidden by a canonical network retry.
-    const cachedBundle = fresh
-        ? null
-        : await loadPrincipalPolicyBundleForReference(execSql, reference, localCheckpoint);
-    let bundle = cachedBundle ??
-        (await reader.getCurrentPrincipalPolicy(reference.principalType, reference.principalId));
-    if (!bundle) {
-        log?.(`Principal policy cache: failed to fetch ${getReferencedPrincipalKey(reference)}`);
-        return [];
-    }
-    let validation = await validatePrincipalPolicyBundleForCache({
-        bundle,
-        loadExternalAdminPolicy,
-        localCheckpoint,
-        reference,
-        resolveTrustedUserIdentity,
-    });
-    if (!validation.ok) {
-        throw validation.error;
-    }
-    const scoped = await scopeReferencedPolicyForCache({
-        bundle,
-        validation,
-        validationInput: {
-            loadExternalAdminPolicy,
-            localCheckpoint,
-            reference,
-            resolveTrustedUserIdentity,
-        },
-        loadDirectory,
-        organizationId,
-        reloadBundle: cachedBundle
-            ? () => reader.getCurrentPrincipalPolicy("group", reference.principalId)
-            : null,
-    });
-    if (!scoped) {
-        log?.(`Principal policy cache: signed organization directory does not cover ${getReferencedPrincipalKey(reference)}`);
-        return [];
-    }
-    bundle = scoped.bundle;
-    validation = scoped.validation;
-    const directory = scoped.directory;
-    const externalEntries = validation.externalAdminPolicy
-        ? externalAdminPolicyPersistenceEntries(validation.externalAdminPolicy).filter((entry) => !directory || entry.policy.principalType !== "organization")
-        : [];
-    const directoryEntries = directory
-        ? [{ bundle: directory.bundle, policy: directory.policy }]
-        : [];
-    await persistPrincipalPolicyCacheEntries({
-        entries: [
-            ...externalEntries,
-            ...directoryEntries,
-            { bundle, policy: validation.policy },
-        ],
-        execSql,
-        organizationId,
-        updatedAt: new Date().toISOString(),
-        stillCurrent,
-    });
-    return [...externalEntries.map(({ policy }) => policy), validation.policy];
-}
-async function cachePrincipalPolicyBundle(input) {
-    const reference = principalPolicyReferenceFromBundle(input.bundle);
-    // The API supplied this bundle after rejecting a write, but local storage is
-    // only updated after normal signature, signer, and checkpoint verification.
-    const localCheckpoint = await loadPrincipalPolicyCheckpoint(input.execSql, reference.principalType, reference.principalId);
-    const validation = await validatePrincipalPolicyBundleForCache({
-        bundle: input.bundle,
-        loadExternalAdminPolicy: input.loadExternalAdminPolicy,
-        localCheckpoint,
-        reference,
-        resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,
-    });
-    if (!validation.ok) {
-        throw validation.error;
-    }
-    let directory = null;
-    if (reference.principalType === "group") {
-        directory = await input.loadDirectory(false);
-        if (!directoryBindsGroupReference(directory, validation.policy, reference))
-            directory = await input.loadDirectory(true);
-        if (!directoryBindsGroupReference(directory, validation.policy, reference)) {
-            input.log?.("Principal policy cache: signed organization directory does not cover supplied group");
-            return [];
-        }
-    }
-    else if (reference.principalId !== input.organizationId) {
-        return [];
-    }
-    const externalEntries = validation.externalAdminPolicy
-        ? externalAdminPolicyPersistenceEntries(validation.externalAdminPolicy).filter((entry) => !directory || entry.policy.principalType !== "organization")
-        : [];
-    const directoryEntries = directory
-        ? [{ bundle: directory.bundle, policy: directory.policy }]
-        : [];
-    await persistPrincipalPolicyCacheEntries({
-        entries: [
-            ...externalEntries,
-            ...directoryEntries,
-            { bundle: input.bundle, policy: validation.policy },
-        ],
-        execSql: input.execSql,
-        organizationId: input.organizationId,
-        updatedAt: new Date().toISOString(),
-        stillCurrent: input.stillCurrent,
-    });
-    return [...externalEntries.map(({ policy }) => policy), validation.policy];
-}
-async function runPrincipalPolicyCache(input) {
-    if (!input.items || input.items.length === 0) {
-        return [];
-    }
-    try {
-        await ensurePrincipalPolicyTables(input.execSql);
-        const uniqueItems = input.dedupe(input.items);
-        const loadDirectory = createPolicyDirectoryLoader(input);
-        let externalAdminPolicy = null;
-        const loadExternalAdminPolicy = () => {
-            externalAdminPolicy ??= loadOrganizationExternalAdminPolicy({
-                currentPolicyReader: input.currentPolicyReader,
-                execSql: input.execSql,
-                organizationId: input.organizationId,
-                resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,
-                stillCurrent: input.stillCurrent,
-            });
-            return externalAdminPolicy;
-        };
-        const results = await Promise.all(uniqueItems.map(async (item) => {
-            try {
-                return await retryPrincipalPolicyCacheAdvance((fresh) => {
-                    const reloadDirectory = createPolicyDirectoryLoader(input);
-                    let reloadedAuthority = null;
-                    return input.cacheItem(item, fresh
-                        ? () => (reloadedAuthority ??=
-                            loadOrganizationExternalAdminPolicy(input))
-                        : loadExternalAdminPolicy, fresh ? () => reloadDirectory(true) : loadDirectory, fresh);
-                });
-            }
-            catch (error) {
-                if (isProjectionVerificationCancelledError(error))
-                    return [];
-                await reportAndRethrowKeyingVerificationError(error, input.reportSecurityIncident, {
-                    objectId: input.itemKey(item),
-                    objectKind: "principal",
-                    operation: "principal.policy.cache",
-                    organizationId: input.organizationId,
-                });
-                const message = errorMessage(error);
-                input.log?.(`Principal policy cache: failed to store ${input.itemKey(item)}: ${message}`);
-                return [];
-            }
-        }));
-        return results.flat();
-    }
-    catch (error) {
-        if (isProjectionVerificationCancelledError(error))
-            return [];
-        // Per-item verification failures were reported above before reaching this
-        // initialization/aggregation boundary.
-        rethrowKeyingVerificationError(error);
-        const message = errorMessage(error);
-        input.log?.(`Principal policy cache: failed to initialize cache: ${message}`);
-        return [];
-    }
-}
-async function loadReferencedPrincipalPolicies({ currentPolicyReader, execSql, log, organizationId, reportSecurityIncident, references, resolveTrustedUserIdentity, stillCurrent, }) {
-    return runPrincipalPolicyCache({
-        cacheItem: (reference, loadExternalAdminPolicy, loadDirectory, fresh) => cacheReferencedPrincipalPolicy(execSql, currentPolicyReader, reference, resolveTrustedUserIdentity, log, loadExternalAdminPolicy, organizationId, stillCurrent, loadDirectory, fresh),
-        currentPolicyReader,
-        dedupe: dedupeReferencedPrincipalStates,
-        execSql,
-        itemKey: getReferencedPrincipalKey,
-        items: references,
-        log,
-        organizationId,
-        reportSecurityIncident,
-        resolveTrustedUserIdentity,
-        stillCurrent,
-    });
-}
-export async function cacheReferencedPrincipalPolicies(input) {
-    await loadReferencedPrincipalPolicies(input);
-}
-export async function cachePrincipalPolicyBundles({ bundles, currentPolicyReader, execSql, log, organizationId, reportSecurityIncident, resolveTrustedUserIdentity, stillCurrent, }) {
-    await runPrincipalPolicyCache({
-        cacheItem: (bundle, loadExternalAdminPolicy, loadDirectory) => cachePrincipalPolicyBundle({
-            bundle,
-            execSql,
-            loadExternalAdminPolicy,
-            loadDirectory,
-            log,
-            organizationId,
-            resolveTrustedUserIdentity,
-            stillCurrent,
-        }),
-        currentPolicyReader,
-        dedupe: dedupePrincipalPolicyBundles,
-        execSql,
-        itemKey: getBundlePrincipalKey,
-        items: bundles,
-        log,
-        organizationId,
-        reportSecurityIncident,
-        resolveTrustedUserIdentity,
-        stillCurrent,
-    });
-}
-//# sourceMappingURL=policyCache.js.map

package/workflows/principals/policyCache.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"policyCache.js","sourceRoot":"","sources":["policyCache.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sCAAsC,EAAE,MAAM,yCAAyC,CAAC;AACjG,OAAO,EACL,uCAAuC,EACvC,8BAA8B,GAC/B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,+BAA+B,EAAE,MAAM,8DAA8D,CAAC;AAC/G,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,qCAAqC,EAAE,MAAM,4DAA4D,CAAC;AACnH,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AACvG,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAK9D,OAAO,EACL,qCAAqC,EACrC,mCAAmC,GAEpC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,kCAAkC,EAClC,gCAAgC,GACjC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAG7B,MAAM,oCAAoC,CAAC;AAkB5C,SAAS,yBAAyB,CAChC,SAA2C;IAE3C,OAAO,GAAG,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAqC;IAClE,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,aAAa,IAAI,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,4BAA4B,CACnC,OAAqD;IAErD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE5E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,IACE,CAAC,QAAQ;YACT,MAAM,CAAC,YAAY,CAAC,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,EAC3D,CAAC;YACD,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,OAAgB,EAChB,MAAoC,EACpC,SAA2C,EAC3C,0BAAuD,EACvD,GAA4C,EAC5C,uBAA0E,EAC1E,cAAsB,EACtB,YAAyC,EACzC,aAAoC,EACpC,KAAc;IAEd,MAAM,eAAe,GAAG,MAAM,6BAA6B,CACzD,OAAO,EACP,SAAS,CAAC,aAAa,EACvB,SAAS,CAAC,WAAW,CACtB,CAAC;IACF,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,YAAY,GAAG,KAAK;QACxB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,qCAAqC,CACzC,OAAO,EACP,SAAS,EACT,eAAe,CAChB,CAAC;IACN,IAAI,MAAM,GACR,YAAY;QACZ,CAAC,MAAM,MAAM,CAAC,yBAAyB,CACrC,SAAS,CAAC,aAAa,EACvB,SAAS,CAAC,WAAW,CACtB,CAAC,CAAC;IACL,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,EAAE,CACH,2CAA2C,yBAAyB,CAAC,SAAS,CAAC,EAAE,CAClF,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,UAAU,GAAG,MAAM,qCAAqC,CAAC;QAC3D,MAAM;QACN,uBAAuB;QACvB,eAAe;QACf,SAAS;QACT,0BAA0B;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,UAAU,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC;QACjD,MAAM;QACN,UAAU;QACV,eAAe,EAAE;YACf,uBAAuB;YACvB,eAAe;YACf,SAAS;YACT,0BAA0B;SAC3B;QACD,aAAa;QACb,cAAc;QACd,YAAY,EAAE,YAAY;YACxB,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,CAAC;YACxE,CAAC,CAAC,IAAI;KACT,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,EAAE,CACH,wEAAwE,yBAAyB,CAAC,SAAS,CAAC,EAAE,CAC/G,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACvB,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,MAAM,eAAe,GAAG,UAAU,CAAC,mBAAmB;QACpD,CAAC,CAAC,qCAAqC,CACnC,UAAU,CAAC,mBAAmB,CAC/B,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,cAAc,CACvE;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,gBAAgB,GAAG,SAAS;QAChC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,kCAAkC,CAAC;QACvC,OAAO,EAAE;YACP,GAAG,eAAe;YAClB,GAAG,gBAAgB;YACnB,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE;SACtC;QACD,OAAO;QACP,cAAc;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,YAAY;KACb,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KASzC;IACC,MAAM,SAAS,GAAG,kCAAkC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnE,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,eAAe,GAAG,MAAM,6BAA6B,CACzD,KAAK,CAAC,OAAO,EACb,SAAS,CAAC,aAAa,EACvB,SAAS,CAAC,WAAW,CACtB,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,qCAAqC,CAAC;QAC7D,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,eAAe;QACf,SAAS;QACT,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;KAC7D,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,UAAU,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,IAAI,SAAS,GAAmC,IAAI,CAAC;IACrD,IAAI,SAAS,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;QACxC,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,4BAA4B,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC;YACxE,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9C,IACE,CAAC,4BAA4B,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,EACtE,CAAC;YACD,KAAK,CAAC,GAAG,EAAE,CACT,qFAAqF,CACtF,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;SAAM,IAAI,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1D,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,eAAe,GAAG,UAAU,CAAC,mBAAmB;QACpD,CAAC,CAAC,qCAAqC,CACnC,UAAU,CAAC,mBAAmB,CAC/B,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,cAAc,CACvE;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,gBAAgB,GAAG,SAAS;QAChC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,kCAAkC,CAAC;QACvC,OAAO,EAAE;YACP,GAAG,eAAe;YAClB,GAAG,gBAAgB;YACnB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE;SACpD;QACD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAe,KAiBpD;IACC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,mBAAmB,GACrB,IAAI,CAAC;QACP,MAAM,uBAAuB,GAAG,GAAG,EAAE;YACnC,mBAAmB,KAAK,mCAAmC,CAAC;gBAC1D,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,cAAc,EAAE,KAAK,CAAC,cAAc;gBAEpC,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;gBAC5D,YAAY,EAAE,KAAK,CAAC,YAAY;aACjC,CAAC,CAAC;YACH,OAAO,mBAAmB,CAAC;QAC7B,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,IAAI,CAAC;gBACH,OAAO,MAAM,gCAAgC,CAAC,CAAC,KAAK,EAAE,EAAE;oBACtD,MAAM,eAAe,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;oBAC3D,IAAI,iBAAiB,GACnB,IAAI,CAAC;oBACP,OAAO,KAAK,CAAC,SAAS,CACpB,IAAI,EACJ,KAAK;wBACH,CAAC,CAAC,GAAG,EAAE,CACH,CAAC,iBAAiB;4BAChB,mCAAmC,CAAC,KAAK,CAAC,CAAC;wBACjD,CAAC,CAAC,uBAAuB,EAC3B,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,EACnD,KAAK,CACN,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,sCAAsC,CAAC,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAC;gBAC7D,MAAM,uCAAuC,CAC3C,KAAK,EACL,KAAK,CAAC,sBAAsB,EAC5B;oBACE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC7B,UAAU,EAAE,WAAW;oBACvB,SAAS,EAAE,wBAAwB;oBACnC,cAAc,EAAE,KAAK,CAAC,cAAc;iBACrC,CACF,CAAC;gBACF,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpC,KAAK,CAAC,GAAG,EAAE,CACT,2CAA2C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAC7E,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QACF,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,sCAAsC,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7D,0EAA0E;QAC1E,uCAAuC;QACvC,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,CAAC,GAAG,EAAE,CACT,uDAAuD,OAAO,EAAE,CACjE,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,EAC7C,mBAAmB,EACnB,OAAO,EACP,GAAG,EACH,cAAc,EACd,sBAAsB,EACtB,UAAU,EACV,0BAA0B,EAC1B,YAAY,GAC4B;IAGxC,OAAO,uBAAuB,CAAC;QAC7B,SAAS,EAAE,CAAC,SAAS,EAAE,uBAAuB,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,CACtE,8BAA8B,CAC5B,OAAO,EACP,mBAAmB,EACnB,SAAS,EACT,0BAA0B,EAC1B,GAAG,EACH,uBAAuB,EACvB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,KAAK,CACN;QACH,mBAAmB;QACnB,MAAM,EAAE,+BAA+B;QACvC,OAAO;QACP,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE,UAAU;QACjB,GAAG;QACH,cAAc;QAEd,sBAAsB;QACtB,0BAA0B;QAC1B,YAAY;KACb,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAA8C;IAE9C,MAAM,+BAA+B,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,EAChD,OAAO,EACP,mBAAmB,EACnB,OAAO,EACP,GAAG,EACH,cAAc,EACd,sBAAsB,EACtB,0BAA0B,EAC1B,YAAY,GACuB;IACnC,MAAM,uBAAuB,CAAC;QAC5B,SAAS,EAAE,CAAC,MAAM,EAAE,uBAAuB,EAAE,aAAa,EAAE,EAAE,CAC5D,0BAA0B,CAAC;YACzB,MAAM;YACN,OAAO;YACP,uBAAuB;YACvB,aAAa;YACb,GAAG;YACH,cAAc;YACd,0BAA0B;YAC1B,YAAY;SACb,CAAC;QACJ,mBAAmB;QACnB,MAAM,EAAE,4BAA4B;QACpC,OAAO;QACP,OAAO,EAAE,qBAAqB;QAC9B,KAAK,EAAE,OAAO;QACd,GAAG;QACH,cAAc;QAEd,sBAAsB;QACtB,0BAA0B;QAC1B,YAAY;KACb,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { VerifiedPrincipalPolicy } from \"@tearleads/crypto\";\nimport type {\n  PrincipalPolicyBundleResponse,\n  ReferencedPrincipalStateResponse,\n} from \"@tearleads/validators/response\";\nimport { isProjectionVerificationCancelledError } from \"../../data/keyingProjectionVerification\";\nimport {\n  reportAndRethrowKeyingVerificationError,\n  rethrowKeyingVerificationError,\n} from \"../../data/keyingProjectionVerification/error\";\nimport { dedupeReferencedPrincipalStates } from \"../../data/keyingProjectionVerification/principalPolicyCache\";\nimport { loadPrincipalPolicyCheckpoint } from \"../../data/persistence/keyingCheckpointPersistence\";\nimport { ensurePrincipalPolicyTables } from \"../../data/persistence/principalPolicyPersistence\";\nimport { loadPrincipalPolicyBundleForReference } from \"../../data/persistence/principalPolicyReferencePersistence\";\nimport { principalPolicyReferenceFromBundle } from \"../../data/principals/principalPolicyAdminSigners\";\nimport { errorMessage } from \"../../data/shared/errorMessage\";\nimport type { SecurityIncidentReporter } from \"../../data/shared/securityIncidents\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport type { TrustedUserIdentityResolver } from \"../../data/trustedUserIdentity\";\nimport type { CurrentPrincipalPolicyReader } from \"./currentPrincipalPolicyReader\";\nimport {\n  externalAdminPolicyPersistenceEntries,\n  loadOrganizationExternalAdminPolicy,\n  type VerifiedExternalAdminPolicy,\n} from \"./externalAdminPolicy\";\nimport {\n  persistPrincipalPolicyCacheEntries,\n  retryPrincipalPolicyCacheAdvance,\n} from \"./principalPolicyCacheAdvance\";\nimport { scopeReferencedPolicyForCache } from \"./principalPolicyCacheScope\";\nimport { validatePrincipalPolicyBundleForCache } from \"./principalPolicyCacheValidation\";\nimport {\n  createPolicyDirectoryLoader,\n  directoryBindsGroupReference,\n  type PolicyDirectoryLoader,\n  type VerifiedPolicyDirectory,\n} from \"./principalPolicyOrganizationScope\";\n\nexport interface CacheReferencedPrincipalPoliciesOptions {\n  currentPolicyReader: CurrentPrincipalPolicyReader;\n  execSql: ExecSql;\n  log?: (message: string) => void;\n  organizationId: string;\n  reportSecurityIncident: SecurityIncidentReporter;\n  references: ReadonlyArray<ReferencedPrincipalStateResponse> | undefined;\n  resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  stillCurrent?: (() => boolean) | undefined;\n}\n\nexport interface CachePrincipalPolicyBundlesOptions\n  extends Omit<CacheReferencedPrincipalPoliciesOptions, \"references\"> {\n  bundles: ReadonlyArray<PrincipalPolicyBundleResponse> | undefined;\n}\n\nfunction getReferencedPrincipalKey(\n  reference: ReferencedPrincipalStateResponse,\n): string {\n  return `${reference.principalType}:${reference.principalId}`;\n}\n\nfunction getBundlePrincipalKey(bundle: PrincipalPolicyBundleResponse): string {\n  return `${bundle.currentState.principalType}:${bundle.currentState.principalId}`;\n}\n\nfunction dedupePrincipalPolicyBundles(\n  bundles: ReadonlyArray<PrincipalPolicyBundleResponse>,\n): PrincipalPolicyBundleResponse[] {\n  const bundlesByPrincipal = new Map<string, PrincipalPolicyBundleResponse>();\n\n  for (const bundle of bundles) {\n    const key = getBundlePrincipalKey(bundle);\n    const previous = bundlesByPrincipal.get(key);\n    if (\n      !previous ||\n      bundle.currentState.version > previous.currentState.version\n    ) {\n      bundlesByPrincipal.set(key, bundle);\n    }\n  }\n\n  return Array.from(bundlesByPrincipal.values());\n}\n\nasync function cacheReferencedPrincipalPolicy(\n  execSql: ExecSql,\n  reader: CurrentPrincipalPolicyReader,\n  reference: ReferencedPrincipalStateResponse,\n  resolveTrustedUserIdentity: TrustedUserIdentityResolver,\n  log: ((message: string) => void) | undefined,\n  loadExternalAdminPolicy: () => Promise<VerifiedExternalAdminPolicy | null>,\n  organizationId: string,\n  stillCurrent: (() => boolean) | undefined,\n  loadDirectory: PolicyDirectoryLoader,\n  fresh: boolean,\n): Promise<VerifiedPrincipalPolicy[]> {\n  const localCheckpoint = await loadPrincipalPolicyCheckpoint(\n    execSql,\n    reference.principalType,\n    reference.principalId,\n  );\n  // Only null is a recoverable local miss. Integrity failures remain typed and\n  // must escape rather than being hidden by a canonical network retry.\n  const cachedBundle = fresh\n    ? null\n    : await loadPrincipalPolicyBundleForReference(\n        execSql,\n        reference,\n        localCheckpoint,\n      );\n  let bundle =\n    cachedBundle ??\n    (await reader.getCurrentPrincipalPolicy(\n      reference.principalType,\n      reference.principalId,\n    ));\n  if (!bundle) {\n    log?.(\n      `Principal policy cache: failed to fetch ${getReferencedPrincipalKey(reference)}`,\n    );\n    return [];\n  }\n\n  let validation = await validatePrincipalPolicyBundleForCache({\n    bundle,\n    loadExternalAdminPolicy,\n    localCheckpoint,\n    reference,\n    resolveTrustedUserIdentity,\n  });\n  if (!validation.ok) {\n    throw validation.error;\n  }\n\n  const scoped = await scopeReferencedPolicyForCache({\n    bundle,\n    validation,\n    validationInput: {\n      loadExternalAdminPolicy,\n      localCheckpoint,\n      reference,\n      resolveTrustedUserIdentity,\n    },\n    loadDirectory,\n    organizationId,\n    reloadBundle: cachedBundle\n      ? () => reader.getCurrentPrincipalPolicy(\"group\", reference.principalId)\n      : null,\n  });\n  if (!scoped) {\n    log?.(\n      `Principal policy cache: signed organization directory does not cover ${getReferencedPrincipalKey(reference)}`,\n    );\n    return [];\n  }\n  bundle = scoped.bundle;\n  validation = scoped.validation;\n  const directory = scoped.directory;\n  const externalEntries = validation.externalAdminPolicy\n    ? externalAdminPolicyPersistenceEntries(\n        validation.externalAdminPolicy,\n      ).filter(\n        (entry) => !directory || entry.policy.principalType !== \"organization\",\n      )\n    : [];\n  const directoryEntries = directory\n    ? [{ bundle: directory.bundle, policy: directory.policy }]\n    : [];\n  await persistPrincipalPolicyCacheEntries({\n    entries: [\n      ...externalEntries,\n      ...directoryEntries,\n      { bundle, policy: validation.policy },\n    ],\n    execSql,\n    organizationId,\n    updatedAt: new Date().toISOString(),\n    stillCurrent,\n  });\n  return [...externalEntries.map(({ policy }) => policy), validation.policy];\n}\n\nasync function cachePrincipalPolicyBundle(input: {\n  readonly bundle: PrincipalPolicyBundleResponse;\n  readonly execSql: ExecSql;\n  readonly loadExternalAdminPolicy: () => Promise<VerifiedExternalAdminPolicy | null>;\n  readonly log: ((message: string) => void) | undefined;\n  readonly loadDirectory: PolicyDirectoryLoader;\n  readonly organizationId: string;\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<VerifiedPrincipalPolicy[]> {\n  const reference = principalPolicyReferenceFromBundle(input.bundle);\n  // The API supplied this bundle after rejecting a write, but local storage is\n  // only updated after normal signature, signer, and checkpoint verification.\n  const localCheckpoint = await loadPrincipalPolicyCheckpoint(\n    input.execSql,\n    reference.principalType,\n    reference.principalId,\n  );\n  const validation = await validatePrincipalPolicyBundleForCache({\n    bundle: input.bundle,\n    loadExternalAdminPolicy: input.loadExternalAdminPolicy,\n    localCheckpoint,\n    reference,\n    resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n  });\n  if (!validation.ok) {\n    throw validation.error;\n  }\n\n  let directory: VerifiedPolicyDirectory | null = null;\n  if (reference.principalType === \"group\") {\n    directory = await input.loadDirectory(false);\n    if (!directoryBindsGroupReference(directory, validation.policy, reference))\n      directory = await input.loadDirectory(true);\n    if (\n      !directoryBindsGroupReference(directory, validation.policy, reference)\n    ) {\n      input.log?.(\n        \"Principal policy cache: signed organization directory does not cover supplied group\",\n      );\n      return [];\n    }\n  } else if (reference.principalId !== input.organizationId) {\n    return [];\n  }\n  const externalEntries = validation.externalAdminPolicy\n    ? externalAdminPolicyPersistenceEntries(\n        validation.externalAdminPolicy,\n      ).filter(\n        (entry) => !directory || entry.policy.principalType !== \"organization\",\n      )\n    : [];\n  const directoryEntries = directory\n    ? [{ bundle: directory.bundle, policy: directory.policy }]\n    : [];\n  await persistPrincipalPolicyCacheEntries({\n    entries: [\n      ...externalEntries,\n      ...directoryEntries,\n      { bundle: input.bundle, policy: validation.policy },\n    ],\n    execSql: input.execSql,\n    organizationId: input.organizationId,\n    updatedAt: new Date().toISOString(),\n    stillCurrent: input.stillCurrent,\n  });\n  return [...externalEntries.map(({ policy }) => policy), validation.policy];\n}\n\nasync function runPrincipalPolicyCache<Item, Result>(input: {\n  readonly cacheItem: (\n    item: Item,\n    loadExternalAdminPolicy: () => Promise<VerifiedExternalAdminPolicy | null>,\n    loadDirectory: PolicyDirectoryLoader,\n    fresh: boolean,\n  ) => Promise<readonly Result[]>;\n  readonly currentPolicyReader: CurrentPrincipalPolicyReader;\n  readonly dedupe: (items: ReadonlyArray<Item>) => Item[];\n  readonly execSql: ExecSql;\n  readonly itemKey: (item: Item) => string;\n  readonly items: ReadonlyArray<Item> | undefined;\n  readonly log: ((message: string) => void) | undefined;\n  readonly organizationId: string;\n  readonly reportSecurityIncident: SecurityIncidentReporter;\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<Result[]> {\n  if (!input.items || input.items.length === 0) {\n    return [];\n  }\n\n  try {\n    await ensurePrincipalPolicyTables(input.execSql);\n    const uniqueItems = input.dedupe(input.items);\n    const loadDirectory = createPolicyDirectoryLoader(input);\n    let externalAdminPolicy: Promise<VerifiedExternalAdminPolicy | null> | null =\n      null;\n    const loadExternalAdminPolicy = () => {\n      externalAdminPolicy ??= loadOrganizationExternalAdminPolicy({\n        currentPolicyReader: input.currentPolicyReader,\n        execSql: input.execSql,\n        organizationId: input.organizationId,\n\n        resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n        stillCurrent: input.stillCurrent,\n      });\n      return externalAdminPolicy;\n    };\n\n    const results = await Promise.all(\n      uniqueItems.map(async (item) => {\n        try {\n          return await retryPrincipalPolicyCacheAdvance((fresh) => {\n            const reloadDirectory = createPolicyDirectoryLoader(input);\n            let reloadedAuthority: Promise<VerifiedExternalAdminPolicy | null> | null =\n              null;\n            return input.cacheItem(\n              item,\n              fresh\n                ? () =>\n                    (reloadedAuthority ??=\n                      loadOrganizationExternalAdminPolicy(input))\n                : loadExternalAdminPolicy,\n              fresh ? () => reloadDirectory(true) : loadDirectory,\n              fresh,\n            );\n          });\n        } catch (error) {\n          if (isProjectionVerificationCancelledError(error)) return [];\n          await reportAndRethrowKeyingVerificationError(\n            error,\n            input.reportSecurityIncident,\n            {\n              objectId: input.itemKey(item),\n              objectKind: \"principal\",\n              operation: \"principal.policy.cache\",\n              organizationId: input.organizationId,\n            },\n          );\n          const message = errorMessage(error);\n          input.log?.(\n            `Principal policy cache: failed to store ${input.itemKey(item)}: ${message}`,\n          );\n          return [];\n        }\n      }),\n    );\n    return results.flat();\n  } catch (error) {\n    if (isProjectionVerificationCancelledError(error)) return [];\n    // Per-item verification failures were reported above before reaching this\n    // initialization/aggregation boundary.\n    rethrowKeyingVerificationError(error);\n    const message = errorMessage(error);\n    input.log?.(\n      `Principal policy cache: failed to initialize cache: ${message}`,\n    );\n    return [];\n  }\n}\n\nasync function loadReferencedPrincipalPolicies({\n  currentPolicyReader,\n  execSql,\n  log,\n  organizationId,\n  reportSecurityIncident,\n  references,\n  resolveTrustedUserIdentity,\n  stillCurrent,\n}: CacheReferencedPrincipalPoliciesOptions): Promise<\n  VerifiedPrincipalPolicy[]\n> {\n  return runPrincipalPolicyCache({\n    cacheItem: (reference, loadExternalAdminPolicy, loadDirectory, fresh) =>\n      cacheReferencedPrincipalPolicy(\n        execSql,\n        currentPolicyReader,\n        reference,\n        resolveTrustedUserIdentity,\n        log,\n        loadExternalAdminPolicy,\n        organizationId,\n        stillCurrent,\n        loadDirectory,\n        fresh,\n      ),\n    currentPolicyReader,\n    dedupe: dedupeReferencedPrincipalStates,\n    execSql,\n    itemKey: getReferencedPrincipalKey,\n    items: references,\n    log,\n    organizationId,\n\n    reportSecurityIncident,\n    resolveTrustedUserIdentity,\n    stillCurrent,\n  });\n}\n\nexport async function cacheReferencedPrincipalPolicies(\n  input: CacheReferencedPrincipalPoliciesOptions,\n): Promise<void> {\n  await loadReferencedPrincipalPolicies(input);\n}\n\nexport async function cachePrincipalPolicyBundles({\n  bundles,\n  currentPolicyReader,\n  execSql,\n  log,\n  organizationId,\n  reportSecurityIncident,\n  resolveTrustedUserIdentity,\n  stillCurrent,\n}: CachePrincipalPolicyBundlesOptions): Promise<void> {\n  await runPrincipalPolicyCache({\n    cacheItem: (bundle, loadExternalAdminPolicy, loadDirectory) =>\n      cachePrincipalPolicyBundle({\n        bundle,\n        execSql,\n        loadExternalAdminPolicy,\n        loadDirectory,\n        log,\n        organizationId,\n        resolveTrustedUserIdentity,\n        stillCurrent,\n      }),\n    currentPolicyReader,\n    dedupe: dedupePrincipalPolicyBundles,\n    execSql,\n    itemKey: getBundlePrincipalKey,\n    items: bundles,\n    log,\n    organizationId,\n\n    reportSecurityIncident,\n    resolveTrustedUserIdentity,\n    stillCurrent,\n  });\n}\n"]}

package/workflows/principals/principalAcknowledgementChecks.d.ts

@@ -1,30 +0,0 @@
-import type { PrincipalPolicyExternalAuthority, PrincipalPolicySignerPublicKey, ReferencedPrincipalHead, VerifiedPrincipalPolicyCurrent } from "../../internal/crypto/index.js";
-import type { PutPrincipalPolicyRequest } from "../../internal/validators/request/index.js";
-import type { PrincipalPolicyMutationResponse } from "../../internal/validators/response/index.js";
-/**
- * The checks the code that authored a principal mutation makes on the
- * server's acknowledgement of it. Recovery records an acknowledged current
- * only after these accept it; the organization mutation workflows supply them.
- */
-export interface PrincipalAcknowledgementChecks {
-    /** The head an authored request commits to. */
-    readonly authoredHead: (request: PutPrincipalPolicyRequest) => Promise<ReferencedPrincipalHead>;
-    /** The receipt carries exactly the authored state and artifacts. */
-    readonly assertReceipt: (input: {
-        readonly expectedHead: ReferencedPrincipalHead;
-        readonly request: PutPrincipalPolicyRequest;
-        readonly response: PrincipalPolicyMutationResponse;
-    }) => void;
-    /** The acknowledged state is the authored successor of the verified predecessor. */
-    readonly acknowledgeSuccessor: (input: {
-        readonly verifiedCurrentPolicy: VerifiedPrincipalPolicyCurrent;
-        readonly expectedHead: ReferencedPrincipalHead;
-        readonly request: PutPrincipalPolicyRequest;
-        readonly response: PrincipalPolicyMutationResponse["currentState"];
-        readonly signerPublicKeys: readonly PrincipalPolicySignerPublicKey[];
-        readonly externalAuthority?: PrincipalPolicyExternalAuthority | undefined;
-        readonly stillCurrent: () => boolean;
-    }) => Promise<VerifiedPrincipalPolicyCurrent>;
-    /** Acknowledged directory and group heads cite each other. */
-    readonly assertDirectoryBindings: (organizationId: string, responses: readonly PrincipalPolicyMutationResponse[]) => void;
-}

package/workflows/principals/principalCurrentPublicationSeal.js

@@ -1,51 +0,0 @@
-import { serializeKeyingCanonicalJson, } from "../../internal/crypto/index.js";
-import { principalHistoryPrefixProtection } from "../../data/principals/principalHistoryPrefixProtection.js";
-import { principalHistoryStageId, principalHistoryStageProtection, } from "../../data/principals/principalHistoryStageProtection.js";
-function exactHead(head) {
-    return {
-        principalType: head.principalType,
-        principalId: head.principalId,
-        version: head.version,
-        keyEpoch: head.keyEpoch,
-        stateHash: head.stateHash,
-        keyFingerprint: head.keyFingerprint,
-    };
-}
-export async function sealPrincipalCurrentStage(options, expectedHead, verifier, response) {
-    // Authentication uses the reference contract, never extra signed-state fields.
-    expectedHead = exactHead(expectedHead);
-    const currentJson = JSON.stringify({
-        currentState: response.currentState,
-        currentProjection: response.currentProjection,
-        currentGrants: response.currentGrants,
-        currentPayload: response.currentPayload,
-        currentMemberEnvelopes: response.currentMemberEnvelopes,
-    });
-    const stage = {
-        id: await principalHistoryStageId(options.organizationId, expectedHead, options.protection.context),
-        organizationId: options.organizationId,
-        afterVersion: expectedHead.version - 1,
-        complete: true,
-        currentJson,
-    };
-    const progress = await verifier.exportProgress(await principalHistoryStageProtection(options.protection, expectedHead, stage));
-    if (!progress.ok)
-        throw progress.error;
-    return { ...stage, progress: progress.value };
-}
-export async function sealPrincipalCurrentPublication(options, scopeId, expectedHead, verifier, response) {
-    expectedHead = exactHead(expectedHead);
-    const stage = await sealPrincipalCurrentStage(options, expectedHead, verifier, response);
-    const prefix = {
-        scopeId,
-        organizationId: options.organizationId,
-        version: expectedHead.version,
-        headJson: serializeKeyingCanonicalJson({ ...expectedHead }),
-        currentJson: stage.currentJson,
-    };
-    const progress = await verifier.exportProgress(await principalHistoryPrefixProtection(options.protection, prefix));
-    if (!progress.ok)
-        throw progress.error;
-    return { prefix: { ...prefix, progress: progress.value }, stage };
-}
-//# sourceMappingURL=principalCurrentPublicationSeal.js.map

package/workflows/principals/principalCurrentPublicationSeal.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principalCurrentPublicationSeal.js","sourceRoot":"","sources":["principalCurrentPublicationSeal.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gCAAgC,EAAE,MAAM,wDAAwD,CAAC;AAC1G,OAAO,EACL,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,uDAAuD,CAAC;AAG/D,SAAS,SAAS,CAAC,IAA6B;IAC9C,OAAO;QACL,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAA6C,EAC7C,YAAqC,EACrC,QAAwC,EACxC,QAAoC;IAEpC,+EAA+E;IAC/E,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;KACxD,CAAC,CAAC;IACH,MAAM,KAAK,GAAG;QACZ,EAAE,EAAE,MAAM,uBAAuB,CAC/B,OAAO,CAAC,cAAc,EACtB,YAAY,EACZ,OAAO,CAAC,UAAU,CAAC,OAAO,CAC3B;QACD,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,YAAY,EAAE,YAAY,CAAC,OAAO,GAAG,CAAC;QACtC,QAAQ,EAAE,IAAI;QACd,WAAW;KACZ,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,cAAc,CAC5C,MAAM,+BAA+B,CACnC,OAAO,CAAC,UAAU,EAClB,YAAY,EACZ,KAAK,CACN,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAA6C,EAC7C,OAAe,EACf,YAAqC,EACrC,QAAwC,EACxC,QAAoC;IAEpC,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAC3C,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,QAAQ,CACT,CAAC;IACF,MAAM,MAAM,GAAG;QACb,OAAO;QACP,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,QAAQ,EAAE,4BAA4B,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC;QAC3D,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,cAAc,CAC5C,MAAM,gCAAgC,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CACnE,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC;AACpE,CAAC","sourcesContent":["import type { PrincipalPolicyPageCurrent } from \"@tearleads/api-client\";\nimport {\n  type PrincipalPolicyHistoryVerifier,\n  type ReferencedPrincipalHead,\n  serializeKeyingCanonicalJson,\n} from \"@tearleads/crypto\";\nimport { principalHistoryPrefixProtection } from \"../../data/principals/principalHistoryPrefixProtection\";\nimport {\n  principalHistoryStageId,\n  principalHistoryStageProtection,\n} from \"../../data/principals/principalHistoryStageProtection\";\nimport type { RecoverPrincipalPolicyHistoryOptions } from \"./principalHistoryRecoveryTypes\";\n\nfunction exactHead(head: ReferencedPrincipalHead): ReferencedPrincipalHead {\n  return {\n    principalType: head.principalType,\n    principalId: head.principalId,\n    version: head.version,\n    keyEpoch: head.keyEpoch,\n    stateHash: head.stateHash,\n    keyFingerprint: head.keyFingerprint,\n  };\n}\n\nexport async function sealPrincipalCurrentStage(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  expectedHead: ReferencedPrincipalHead,\n  verifier: PrincipalPolicyHistoryVerifier,\n  response: PrincipalPolicyPageCurrent,\n) {\n  // Authentication uses the reference contract, never extra signed-state fields.\n  expectedHead = exactHead(expectedHead);\n  const currentJson = JSON.stringify({\n    currentState: response.currentState,\n    currentProjection: response.currentProjection,\n    currentGrants: response.currentGrants,\n    currentPayload: response.currentPayload,\n    currentMemberEnvelopes: response.currentMemberEnvelopes,\n  });\n  const stage = {\n    id: await principalHistoryStageId(\n      options.organizationId,\n      expectedHead,\n      options.protection.context,\n    ),\n    organizationId: options.organizationId,\n    afterVersion: expectedHead.version - 1,\n    complete: true,\n    currentJson,\n  };\n  const progress = await verifier.exportProgress(\n    await principalHistoryStageProtection(\n      options.protection,\n      expectedHead,\n      stage,\n    ),\n  );\n  if (!progress.ok) throw progress.error;\n  return { ...stage, progress: progress.value };\n}\n\nexport async function sealPrincipalCurrentPublication(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  scopeId: string,\n  expectedHead: ReferencedPrincipalHead,\n  verifier: PrincipalPolicyHistoryVerifier,\n  response: PrincipalPolicyPageCurrent,\n) {\n  expectedHead = exactHead(expectedHead);\n  const stage = await sealPrincipalCurrentStage(\n    options,\n    expectedHead,\n    verifier,\n    response,\n  );\n  const prefix = {\n    scopeId,\n    organizationId: options.organizationId,\n    version: expectedHead.version,\n    headJson: serializeKeyingCanonicalJson({ ...expectedHead }),\n    currentJson: stage.currentJson,\n  };\n  const progress = await verifier.exportProgress(\n    await principalHistoryPrefixProtection(options.protection, prefix),\n  );\n  if (!progress.ok) throw progress.error;\n  return { prefix: { ...prefix, progress: progress.value }, stage };\n}\n"]}

package/workflows/principals/principalCurrentRecoveryBatch.js

@@ -1,14 +0,0 @@
-import { recoverCurrentOrganizationPolicy } from "./recoverCurrentOrganizationPolicy.js";
-import { createScopedPrincipalPolicyHistoryBatch } from "./recoverScopedPrincipalPolicyHistory.js";
-/** Discovery and selected references share one authenticated batch view. */
-export function createPrincipalCurrentRecoveryBatch() {
-    const memo = {
-        directories: new Map(),
-        admins: new Map(),
-    };
-    return {
-        recover: createScopedPrincipalPolicyHistoryBatch(memo),
-        discover: (input) => recoverCurrentOrganizationPolicy(input, memo),
-    };
-}
-//# sourceMappingURL=principalCurrentRecoveryBatch.js.map

package/workflows/principals/principalCurrentRecoveryBatch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principalCurrentRecoveryBatch.js","sourceRoot":"","sources":["principalCurrentRecoveryBatch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,uCAAuC,EAAE,MAAM,uCAAuC,CAAC;AAEhG,4EAA4E;AAC5E,MAAM,UAAU,mCAAmC;IACjD,MAAM,IAAI,GAA0B;QAClC,WAAW,EAAE,IAAI,GAAG,EAAE;QACtB,MAAM,EAAE,IAAI,GAAG,EAAE;KAClB,CAAC;IACF,OAAO;QACL,OAAO,EAAE,uCAAuC,CAAC,IAAI,CAAC;QACtD,QAAQ,EAAE,CAAC,KAA+B,EAAE,EAAE,CAC5C,gCAAgC,CAAC,KAAK,EAAE,IAAI,CAAC;KAChD,CAAC;AACJ,CAAC","sourcesContent":["import type { PrincipalRecoveryContext } from \"./principalRecoveryDirectory\";\nimport type { PrincipalRecoveryMemo } from \"./principalRecoveryMemo\";\nimport { recoverCurrentOrganizationPolicy } from \"./recoverCurrentOrganizationPolicy\";\nimport { createScopedPrincipalPolicyHistoryBatch } from \"./recoverScopedPrincipalPolicyHistory\";\n\n/** Discovery and selected references share one authenticated batch view. */\nexport function createPrincipalCurrentRecoveryBatch() {\n  const memo: PrincipalRecoveryMemo = {\n    directories: new Map(),\n    admins: new Map(),\n  };\n  return {\n    recover: createScopedPrincipalPolicyHistoryBatch(memo),\n    discover: (input: PrincipalRecoveryContext) =>\n      recoverCurrentOrganizationPolicy(input, memo),\n  };\n}\n"]}

package/workflows/principals/principalHistoryRecoveryAuthority.js

@@ -1,20 +0,0 @@
-import { KeyingVerificationError, } from "../../internal/crypto/index.js";
-import { principalHeadMatchesReference } from "../../data/principals/organizationAuthorityDescriptor.js";
-import { PrincipalHistoryEvidenceUnavailableError } from "./principalHistoryRecoveryReferences.js";
-/** Reusable signatures remain conditional on their authenticated authority lineage. */
-export async function validatePrincipalHistoryRecoveryAuthority(input, verifier) {
-    const reference = verifier.getExternalAuthorityReference();
-    if (!reference)
-        return;
-    try {
-        const authority = await input.loadExternalAuthority?.([reference]);
-        if (!authority?.states.some(({ head }) => principalHeadMatchesReference(head, reference)))
-            throw new KeyingVerificationError("stale_predecessor", "Cached principal history has a different authority lineage");
-    }
-    catch (error) {
-        if (error instanceof KeyingVerificationError)
-            throw new PrincipalHistoryEvidenceUnavailableError(error);
-        throw error;
-    }
-}
-//# sourceMappingURL=principalHistoryRecoveryAuthority.js.map

package/workflows/principals/principalHistoryRecoveryAuthority.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principalHistoryRecoveryAuthority.js","sourceRoot":"","sources":["principalHistoryRecoveryAuthority.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,EAAE,wCAAwC,EAAE,MAAM,sCAAsC,CAAC;AAGhG,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,KAA2C,EAC3C,QAAwC;IAExC,MAAM,SAAS,GAAG,QAAQ,CAAC,6BAA6B,EAAE,CAAC;IAC3D,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACnE,IACE,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CACnC,6BAA6B,CAAC,IAAI,EAAE,SAAS,CAAC,CAC/C;YAED,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,4DAA4D,CAC7D,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uBAAuB;YAC1C,MAAM,IAAI,wCAAwC,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type PrincipalPolicyHistoryVerifier,\n} from \"@tearleads/crypto\";\nimport { principalHeadMatchesReference } from \"../../data/principals/organizationAuthorityDescriptor\";\nimport { PrincipalHistoryEvidenceUnavailableError } from \"./principalHistoryRecoveryReferences\";\nimport type { RecoverPrincipalPolicyHistoryOptions } from \"./principalHistoryRecoveryTypes\";\n\n/** Reusable signatures remain conditional on their authenticated authority lineage. */\nexport async function validatePrincipalHistoryRecoveryAuthority(\n  input: RecoverPrincipalPolicyHistoryOptions,\n  verifier: PrincipalPolicyHistoryVerifier,\n): Promise<void> {\n  const reference = verifier.getExternalAuthorityReference();\n  if (!reference) return;\n  try {\n    const authority = await input.loadExternalAuthority?.([reference]);\n    if (\n      !authority?.states.some(({ head }) =>\n        principalHeadMatchesReference(head, reference),\n      )\n    )\n      throw new KeyingVerificationError(\n        \"stale_predecessor\",\n        \"Cached principal history has a different authority lineage\",\n      );\n  } catch (error) {\n    if (error instanceof KeyingVerificationError)\n      throw new PrincipalHistoryEvidenceUnavailableError(error);\n    throw error;\n  }\n}\n"]}

package/workflows/principals/principalHistoryRecoveryPrefix.js

@@ -1,69 +0,0 @@
-import { restorePrincipalPolicyHistoryVerifier, serializeKeyingCanonicalJson, } from "../../internal/crypto/index.js";
-import { isReferencedPrincipalStateResponse } from "../../internal/validators/response/index.js";
-import { discardPrincipalHistoryPrefix, loadPrincipalHistoryPrefix, savePrincipalHistoryPrefix, } from "../../data/persistence/principalHistoryPrefixPersistence.js";
-import { principalHistoryPrefixProtection } from "../../data/principals/principalHistoryPrefixProtection.js";
-import { parsePrincipalHistoryStageCurrent } from "../../data/principals/principalHistoryStageProtection.js";
-export async function loadVerifiedPrincipalHistoryPrefix(options, historyInput, scopeId) {
-    const saved = await loadPrincipalHistoryPrefix(options.execSql, scopeId);
-    if (!saved)
-        return null;
-    let head;
-    try {
-        head = JSON.parse(saved.headJson);
-    }
-    catch {
-        head = null;
-    }
-    if (saved.organizationId === options.organizationId &&
-        isReferencedPrincipalStateResponse(head) &&
-        head.principalType === historyInput.principalType &&
-        head.principalId === historyInput.principalId &&
-        head.version === saved.version) {
-        const restored = await restorePrincipalPolicyHistoryVerifier(historyInput, saved.progress, await principalHistoryPrefixProtection(options.protection, saved));
-        const current = parsePrincipalHistoryStageCurrent({
-            currentJson: saved.currentJson,
-            afterVersion: saved.version - 1,
-        });
-        if (restored.ok && restored.value.finish(head).ok && current)
-            return { verifier: restored.value, head, current };
-    }
-    await discardPrincipalHistoryPrefix({
-        execSql: options.execSql,
-        prefix: saved,
-        stillCurrent: () => !options.signal?.aborted && options.stillCurrent(),
-    });
-    return null;
-}
-export async function restoreReusablePrincipalHistoryPrefix(options, historyInput, scopeId) {
-    const prefix = await loadVerifiedPrincipalHistoryPrefix(options, historyInput, scopeId);
-    if (!prefix || prefix.head.version > options.expectedHead.version)
-        return null;
-    if (prefix.head.version < options.expectedHead.version ||
-        prefix.verifier.finish(options.expectedHead).ok)
-        return { ...prefix, version: prefix.head.version };
-    // An incompatible target cannot erase an independently valid local hint.
-    return null;
-}
-/** The verifier must use stable empty selection/checkpoint inputs. */
-export async function publishReusablePrincipalHistoryPrefix(options, scopeId, verifier, current) {
-    const prefix = {
-        scopeId,
-        organizationId: options.organizationId,
-        version: options.expectedHead.version,
-        headJson: serializeKeyingCanonicalJson({ ...options.expectedHead }),
-        currentJson: JSON.stringify(current),
-    };
-    const sealed = await verifier.exportProgress(await principalHistoryPrefixProtection(options.protection, prefix));
-    if (!sealed.ok)
-        throw sealed.error;
-    const history = verifier.finish(options.expectedHead);
-    if (!history.ok)
-        throw history.error;
-    await savePrincipalHistoryPrefix({
-        indexRootHash: history.value.indexRootHash,
-        execSql: options.execSql,
-        prefix: { ...prefix, progress: sealed.value },
-        stillCurrent: () => !options.signal?.aborted && options.stillCurrent(),
-    });
-}
-//# sourceMappingURL=principalHistoryRecoveryPrefix.js.map

package/workflows/principals/principalHistoryRecoveryPrefix.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principalHistoryRecoveryPrefix.js","sourceRoot":"","sources":["principalHistoryRecoveryPrefix.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,qCAAqC,EACrC,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,kCAAkC,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EAAE,gCAAgC,EAAE,MAAM,wDAAwD,CAAC;AAC1G,OAAO,EAAE,iCAAiC,EAAE,MAAM,uDAAuD,CAAC;AAG1G,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,OAAmE,EACnE,YAAyC,EACzC,OAAe;IAMf,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,IACE,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;QAC/C,kCAAkC,CAAC,IAAI,CAAC;QACxC,IAAI,CAAC,aAAa,KAAK,YAAY,CAAC,aAAa;QACjD,IAAI,CAAC,WAAW,KAAK,YAAY,CAAC,WAAW;QAC7C,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAC9B,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,qCAAqC,CAC1D,YAAY,EACZ,KAAK,CAAC,QAAQ,EACd,MAAM,gCAAgC,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAClE,CAAC;QACF,MAAM,OAAO,GAAG,iCAAiC,CAAC;YAChD,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,OAAO,GAAG,CAAC;SAChC,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,OAAO;YAC1D,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,6BAA6B,CAAC;QAClC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,KAAK;QACb,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE;KACvE,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,OAA6C,EAC7C,YAAyC,EACzC,OAAe;IAEf,MAAM,MAAM,GAAG,MAAM,kCAAkC,CACrD,OAAO,EACP,YAAY,EACZ,OAAO,CACR,CAAC;IACF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO;QAC/D,OAAO,IAAI,CAAC;IACd,IACE,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO;QAClD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE;QAE/C,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IACrD,yEAAyE;IACzE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,OAA6C,EAC7C,OAAe,EACf,QAAwC,EACxC,OAAmC;IAEnC,MAAM,MAAM,GAAG;QACb,OAAO;QACP,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,OAAO;QACrC,QAAQ,EAAE,4BAA4B,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACnE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KACrC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAC1C,MAAM,gCAAgC,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CACnE,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,KAAK,CAAC;IACrC,MAAM,0BAA0B,CAAC;QAC/B,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,aAAa;QAC1C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE;QAC7C,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE;KACvE,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { PrincipalPolicyPageCurrent } from \"@tearleads/api-client\";\nimport {\n  type PrincipalPolicyHistoryInput,\n  type PrincipalPolicyHistoryVerifier,\n  type ReferencedPrincipalHead,\n  restorePrincipalPolicyHistoryVerifier,\n  serializeKeyingCanonicalJson,\n} from \"@tearleads/crypto\";\nimport { isReferencedPrincipalStateResponse } from \"@tearleads/validators/response\";\nimport {\n  discardPrincipalHistoryPrefix,\n  loadPrincipalHistoryPrefix,\n  savePrincipalHistoryPrefix,\n} from \"../../data/persistence/principalHistoryPrefixPersistence\";\nimport { principalHistoryPrefixProtection } from \"../../data/principals/principalHistoryPrefixProtection\";\nimport { parsePrincipalHistoryStageCurrent } from \"../../data/principals/principalHistoryStageProtection\";\nimport type { RecoverPrincipalPolicyHistoryOptions } from \"./principalHistoryRecoveryTypes\";\n\nexport async function loadVerifiedPrincipalHistoryPrefix(\n  options: Omit<RecoverPrincipalPolicyHistoryOptions, \"expectedHead\">,\n  historyInput: PrincipalPolicyHistoryInput,\n  scopeId: string,\n): Promise<{\n  verifier: PrincipalPolicyHistoryVerifier;\n  head: ReferencedPrincipalHead;\n  current: PrincipalPolicyPageCurrent;\n} | null> {\n  const saved = await loadPrincipalHistoryPrefix(options.execSql, scopeId);\n  if (!saved) return null;\n  let head: unknown;\n  try {\n    head = JSON.parse(saved.headJson);\n  } catch {\n    head = null;\n  }\n  if (\n    saved.organizationId === options.organizationId &&\n    isReferencedPrincipalStateResponse(head) &&\n    head.principalType === historyInput.principalType &&\n    head.principalId === historyInput.principalId &&\n    head.version === saved.version\n  ) {\n    const restored = await restorePrincipalPolicyHistoryVerifier(\n      historyInput,\n      saved.progress,\n      await principalHistoryPrefixProtection(options.protection, saved),\n    );\n    const current = parsePrincipalHistoryStageCurrent({\n      currentJson: saved.currentJson,\n      afterVersion: saved.version - 1,\n    });\n    if (restored.ok && restored.value.finish(head).ok && current)\n      return { verifier: restored.value, head, current };\n  }\n  await discardPrincipalHistoryPrefix({\n    execSql: options.execSql,\n    prefix: saved,\n    stillCurrent: () => !options.signal?.aborted && options.stillCurrent(),\n  });\n  return null;\n}\n\nexport async function restoreReusablePrincipalHistoryPrefix(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  historyInput: PrincipalPolicyHistoryInput,\n  scopeId: string,\n) {\n  const prefix = await loadVerifiedPrincipalHistoryPrefix(\n    options,\n    historyInput,\n    scopeId,\n  );\n  if (!prefix || prefix.head.version > options.expectedHead.version)\n    return null;\n  if (\n    prefix.head.version < options.expectedHead.version ||\n    prefix.verifier.finish(options.expectedHead).ok\n  )\n    return { ...prefix, version: prefix.head.version };\n  // An incompatible target cannot erase an independently valid local hint.\n  return null;\n}\n\n/** The verifier must use stable empty selection/checkpoint inputs. */\nexport async function publishReusablePrincipalHistoryPrefix(\n  options: RecoverPrincipalPolicyHistoryOptions,\n  scopeId: string,\n  verifier: PrincipalPolicyHistoryVerifier,\n  current: PrincipalPolicyPageCurrent,\n): Promise<void> {\n  const prefix = {\n    scopeId,\n    organizationId: options.organizationId,\n    version: options.expectedHead.version,\n    headJson: serializeKeyingCanonicalJson({ ...options.expectedHead }),\n    currentJson: JSON.stringify(current),\n  };\n  const sealed = await verifier.exportProgress(\n    await principalHistoryPrefixProtection(options.protection, prefix),\n  );\n  if (!sealed.ok) throw sealed.error;\n  const history = verifier.finish(options.expectedHead);\n  if (!history.ok) throw history.error;\n  await savePrincipalHistoryPrefix({\n    indexRootHash: history.value.indexRootHash,\n    execSql: options.execSql,\n    prefix: { ...prefix, progress: sealed.value },\n    stillCurrent: () => !options.signal?.aborted && options.stillCurrent(),\n  });\n}\n"]}

package/workflows/principals/principalHistoryRecoveryReferences.js

@@ -1,68 +0,0 @@
-import { KeyingVerificationError, verifyPrincipalPolicyHistoryReferences, } from "../../internal/crypto/index.js";
-import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
-import { loadPrincipalHistoryReference } from "../../data/persistence/principalHistoryEvidencePersistence.js";
-import { principalHeadMatchesReference } from "../../data/principals/organizationAuthorityDescriptor.js";
-export class PrincipalHistoryEvidenceUnavailableError extends Error {
-    verificationError;
-    constructor(verificationError) {
-        super(verificationError.message);
-        this.verificationError = verificationError;
-        this.name = "PrincipalHistoryEvidenceUnavailableError";
-    }
-}
-async function selectReferences(input) {
-    const { options, scopeId, history } = input;
-    const current = () => !options.signal?.aborted && options.stillCurrent();
-    const base = { execSql: options.execSql, scopeId, history };
-    const references = [];
-    for (const reference of options.retainedReferences ?? []) {
-        assertProjectionVerificationCurrent(current);
-        references.push(await loadPrincipalHistoryReference({
-            ...base,
-            version: reference.version,
-        }));
-    }
-    const versions = new Set((options.retainedReferences ?? []).map((reference) => reference.version));
-    for (const version of options.retainedVersions ?? []) {
-        if (versions.has(version))
-            continue;
-        versions.add(version);
-        assertProjectionVerificationCurrent(current);
-        references.push(await loadPrincipalHistoryReference({ ...base, version }));
-    }
-    assertProjectionVerificationCurrent(current);
-    const checkpointReference = input.checkpoint
-        ? await loadPrincipalHistoryReference({
-            ...base,
-            version: input.checkpoint.version,
-        })
-        : undefined;
-    const selected = await verifyPrincipalPolicyHistoryReferences({
-        history,
-        references,
-        checkpointReference,
-    });
-    if (!selected.ok)
-        throw selected.error;
-    assertProjectionVerificationCurrent(current);
-    return selected.value;
-}
-export async function selectRecoveredPrincipalHistory(input) {
-    let selected;
-    try {
-        selected = await selectReferences(input);
-    }
-    catch (error) {
-        if (error instanceof KeyingVerificationError)
-            throw new PrincipalHistoryEvidenceUnavailableError(error);
-        throw error;
-    }
-    // First authenticate the stored entry against the private root. Only then
-    // compare the caller's citation, so a bad request is not treated as cache loss.
-    for (const reference of input.options.retainedReferences ?? []) {
-        if (!selected.retainedEntries.some(({ state }) => principalHeadMatchesReference(state, reference)))
-            throw new KeyingVerificationError("object_mismatch", "Requested citation does not match the verified principal history");
-    }
-    return selected;
-}
-//# sourceMappingURL=principalHistoryRecoveryReferences.js.map

package/workflows/principals/principalHistoryRecoveryReferences.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principalHistoryRecoveryReferences.js","sourceRoot":"","sources":["principalHistoryRecoveryReferences.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EAIvB,sCAAsC,GACvC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,6BAA6B,EAAE,MAAM,4DAA4D,CAAC;AAC3G,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AAStG,MAAM,OAAO,wCAAyC,SAAQ,KAAK;IAC5C;IAArB,YAAqB,iBAA0C;QAC7D,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QADd,sBAAiB,GAAjB,iBAAiB,CAAyB;QAE7D,IAAI,CAAC,IAAI,GAAG,0CAA0C,CAAC;IACzD,CAAC;CACF;AAED,KAAK,UAAU,gBAAgB,CAAC,KAK/B;IACC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC5D,MAAM,UAAU,GAA2C,EAAE,CAAC;IAC9D,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QACzD,mCAAmC,CAAC,OAAO,CAAC,CAAC;QAC7C,UAAU,CAAC,IAAI,CACb,MAAM,6BAA6B,CAAC;YAClC,GAAG,IAAI;YACP,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CACzE,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;QACrD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QACpC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtB,mCAAmC,CAAC,OAAO,CAAC,CAAC;QAC7C,UAAU,CAAC,IAAI,CAAC,MAAM,6BAA6B,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,KAAK,CAAC,UAAU;QAC1C,CAAC,CAAC,MAAM,6BAA6B,CAAC;YAClC,GAAG,IAAI;YACP,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO;SAClC,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,QAAQ,GAAG,MAAM,sCAAsC,CAAC;QAC5D,OAAO;QACP,UAAU;QACV,mBAAmB;KACpB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,QAAQ,CAAC,KAAK,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,KAA6C;IAE7C,IAAI,QAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uBAAuB;YAC1C,MAAM,IAAI,wCAAwC,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;IACD,0EAA0E;IAC1E,gFAAgF;IAChF,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QAC/D,IACE,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAC3C,6BAA6B,CAAC,KAAK,EAAE,SAAS,CAAC,CAChD;YAED,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,kEAAkE,CACnE,CAAC;IACN,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type PrincipalPolicyCheckpoint,\n  type PrincipalPolicyHistoryReferenceProof,\n  type VerifiedPrincipalPolicyHistory,\n  verifyPrincipalPolicyHistoryReferences,\n} from \"@tearleads/crypto\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport { loadPrincipalHistoryReference } from \"../../data/persistence/principalHistoryEvidencePersistence\";\nimport { principalHeadMatchesReference } from \"../../data/principals/organizationAuthorityDescriptor\";\nimport type { RecoverPrincipalPolicyHistoryOptions } from \"./principalHistoryRecoveryTypes\";\n\nexport interface PrincipalHistorySelectionOptions\n  extends RecoverPrincipalPolicyHistoryOptions {\n  /** Internal page selection by version; every selected row still needs a private-root proof. */\n  readonly retainedVersions?: readonly number[] | undefined;\n}\n\nexport class PrincipalHistoryEvidenceUnavailableError extends Error {\n  constructor(readonly verificationError: KeyingVerificationError) {\n    super(verificationError.message);\n    this.name = \"PrincipalHistoryEvidenceUnavailableError\";\n  }\n}\n\nasync function selectReferences(input: {\n  readonly options: PrincipalHistorySelectionOptions;\n  readonly scopeId: string;\n  readonly history: VerifiedPrincipalPolicyHistory;\n  readonly checkpoint: PrincipalPolicyCheckpoint | null;\n}): Promise<VerifiedPrincipalPolicyHistory> {\n  const { options, scopeId, history } = input;\n  const current = () => !options.signal?.aborted && options.stillCurrent();\n  const base = { execSql: options.execSql, scopeId, history };\n  const references: PrincipalPolicyHistoryReferenceProof[] = [];\n  for (const reference of options.retainedReferences ?? []) {\n    assertProjectionVerificationCurrent(current);\n    references.push(\n      await loadPrincipalHistoryReference({\n        ...base,\n        version: reference.version,\n      }),\n    );\n  }\n  const versions = new Set(\n    (options.retainedReferences ?? []).map((reference) => reference.version),\n  );\n  for (const version of options.retainedVersions ?? []) {\n    if (versions.has(version)) continue;\n    versions.add(version);\n    assertProjectionVerificationCurrent(current);\n    references.push(await loadPrincipalHistoryReference({ ...base, version }));\n  }\n  assertProjectionVerificationCurrent(current);\n  const checkpointReference = input.checkpoint\n    ? await loadPrincipalHistoryReference({\n        ...base,\n        version: input.checkpoint.version,\n      })\n    : undefined;\n  const selected = await verifyPrincipalPolicyHistoryReferences({\n    history,\n    references,\n    checkpointReference,\n  });\n  if (!selected.ok) throw selected.error;\n  assertProjectionVerificationCurrent(current);\n  return selected.value;\n}\n\nexport async function selectRecoveredPrincipalHistory(\n  input: Parameters<typeof selectReferences>[0],\n): Promise<VerifiedPrincipalPolicyHistory> {\n  let selected: VerifiedPrincipalPolicyHistory;\n  try {\n    selected = await selectReferences(input);\n  } catch (error) {\n    if (error instanceof KeyingVerificationError)\n      throw new PrincipalHistoryEvidenceUnavailableError(error);\n    throw error;\n  }\n  // First authenticate the stored entry against the private root. Only then\n  // compare the caller's citation, so a bad request is not treated as cache loss.\n  for (const reference of input.options.retainedReferences ?? []) {\n    if (\n      !selected.retainedEntries.some(({ state }) =>\n        principalHeadMatchesReference(state, reference),\n      )\n    )\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"Requested citation does not match the verified principal history\",\n      );\n  }\n  return selected;\n}\n"]}