@tearleads/client-sdk 0.1.62 → 0.1.64

package/workflows/blobs/verification/attachmentKeyAuthenticator.js

@@ -0,0 +1,68 @@
+import { AES_GCM_TAG_BYTES, blobChunkPlaintextByteLength, bytesToHex, } from "../../../internal/crypto/index.js";
+import { createBlobEnvelopeStream } from "../../../data/documents/blob/shared/blobEnvelopeStream.js";
+import { assertEqualBytes, readWriteHeader, } from "../../../data/documents/shared/readers.js";
+import { decryptBlobChunk } from "../hydration/blobChunkDecryption.js";
+import { prepareDocumentAttachmentBlobDecryption } from "../hydration/decrypt.js";
+import { createAttachmentProofReader } from "./attachmentDecryptor.js";
+const createProofReader = (api, documentId) => createAttachmentProofReader(api, documentId, prepareDocumentAttachmentBlobDecryption);
+async function authenticateAttachmentKey(api, input, readProof) {
+    const blob = await api.getBlobBytes(input.binding.blobId);
+    if (!blob)
+        throw new Error("Attachment ciphertext is unavailable for relinking");
+    const body = new Response(blob.encryptedBytes).body;
+    if (!body)
+        throw new Error("Attachment ciphertext stream is unavailable");
+    const source = createBlobEnvelopeStream(body);
+    try {
+        const encrypted = await source.readHeader();
+        // A missing citation can refresh the proof before consuming ciphertext.
+        const context = await readProof({ ...input, encrypted });
+        for (let index = 0; index < encrypted.chunkCount; index++) {
+            const plaintextByteLength = blobChunkPlaintextByteLength({
+                chunkCount: encrypted.chunkCount,
+                chunkIndex: index,
+                chunkSize: encrypted.chunkSize,
+                plaintextByteLength: encrypted.byteLength,
+            });
+            const ciphertext = await source.read(plaintextByteLength + AES_GCM_TAG_BYTES);
+            await decryptBlobChunk({
+                ...context,
+                encrypted,
+                expectedBlobId: input.binding.blobId,
+                chunk: { ciphertext, index, plaintextByteLength },
+            });
+        }
+        const header = readWriteHeader(input.binding.writeHeader, "Attachment blob write header");
+        if (bytesToHex(await source.finish()) !== header.ciphertextHash)
+            throw new Error("Attachment blob write header does not match ciphertext");
+        return {
+            encrypted,
+            contentKey: context.contentKey,
+            ciphertextHash: header.ciphertextHash,
+        };
+    }
+    finally {
+        await source.close();
+    }
+}
+/** Shared blobs retain only authenticated keys and metadata, never their bytes. */
+export function createAttachmentKeyAuthenticator(api, documentId) {
+    const readProof = createProofReader(api, documentId);
+    const authenticated = new Map();
+    return async (input) => {
+        const existing = authenticated.get(input.binding.blobId);
+        if (!existing) {
+            const pending = authenticateAttachmentKey(api, input, readProof);
+            authenticated.set(input.binding.blobId, pending);
+            return (await pending).contentKey;
+        }
+        const cached = await existing;
+        const context = await readProof({ ...input, encrypted: cached.encrypted });
+        if (readWriteHeader(input.binding.writeHeader, "Attachment blob write header")
+            .ciphertextHash !== cached.ciphertextHash)
+            throw new Error("Attachment blob write header does not match ciphertext");
+        assertEqualBytes(context.contentKey, cached.contentKey, "Attachment bindings contain conflicting blob keys");
+        return cached.contentKey;
+    };
+}
+//# sourceMappingURL=attachmentKeyAuthenticator.js.map

package/workflows/blobs/verification/attachmentKeyAuthenticator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachmentKeyAuthenticator.js","sourceRoot":"","sources":["attachmentKeyAuthenticator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,UAAU,GACX,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAKlG,OAAO,EACL,gBAAgB,EAChB,eAAe,GAChB,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,uCAAuC,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAapE,MAAM,iBAAiB,GAAG,CACxB,GAA+B,EAC/B,UAAkB,EAClB,EAAE,CACF,2BAA2B,CACzB,GAAG,EACH,UAAU,EACV,uCAAuC,CACxC,CAAC;AAEJ,KAAK,UAAU,yBAAyB,CACtC,GAA+B,EAC/B,KAAyB,EACzB,SAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI;QACP,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC;IACpD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QAC5C,wEAAwE;QACxE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC;YAC1D,MAAM,mBAAmB,GAAG,4BAA4B,CAAC;gBACvD,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,UAAU,EAAE,KAAK;gBACjB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,mBAAmB,EAAE,SAAS,CAAC,UAAU;aAC1C,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAClC,mBAAmB,GAAG,iBAAiB,CACxC,CAAC;YACF,MAAM,gBAAgB,CAAC;gBACrB,GAAG,OAAO;gBACV,SAAS;gBACT,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;gBACpC,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAmB,EAAE;aAClD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAC5B,KAAK,CAAC,OAAO,CAAC,WAAW,EACzB,8BAA8B,CAC/B,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,MAAM,CAAC,cAAc;YAC7D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,OAAO;YACL,SAAS;YACT,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gCAAgC,CAC9C,GAA+B,EAC/B,UAAkB;IAElB,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC9D,OAAO,KAAK,EAAE,KAAyB,EAAuB,EAAE;QAC9D,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,yBAAyB,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YACjE,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACjD,OAAO,CAAC,MAAM,OAAO,CAAC,CAAC,UAAU,CAAC;QACpC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3E,IACE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,8BAA8B,CAAC;aACvE,cAAc,KAAK,MAAM,CAAC,cAAc;YAE3C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,gBAAgB,CACd,OAAO,CAAC,UAAU,EAClB,MAAM,CAAC,UAAU,EACjB,mDAAmD,CACpD,CAAC;QACF,OAAO,MAAM,CAAC,UAAU,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  AES_GCM_TAG_BYTES,\n  blobChunkPlaintextByteLength,\n  bytesToHex,\n} from \"@tearleads/crypto\";\nimport { createBlobEnvelopeStream } from \"../../../data/documents/blob/shared/blobEnvelopeStream\";\nimport type {\n  BlobEncryptedBytesHeader,\n  DecryptDocumentAttachmentBlobInput,\n} from \"../../../data/documents/blob/shared/types\";\nimport {\n  assertEqualBytes,\n  readWriteHeader,\n} from \"../../../data/documents/shared/readers\";\nimport type { DocumentLinkSetMutationApi } from \"../../../data/documents/shared/types\";\nimport { decryptBlobChunk } from \"../hydration/blobChunkDecryption\";\nimport { prepareDocumentAttachmentBlobDecryption } from \"../hydration/decrypt\";\nimport { createAttachmentProofReader } from \"./attachmentDecryptor\";\n\ntype AttachmentKeyInput = Omit<\n  DecryptDocumentAttachmentBlobInput,\n  \"encryptedBytes\"\n>;\ntype VerifiedKey = {\n  ciphertextHash: string;\n  encrypted: BlobEncryptedBytesHeader;\n  contentKey: Uint8Array;\n};\ntype ProofReader = ReturnType<typeof createProofReader>;\n\nconst createProofReader = (\n  api: DocumentLinkSetMutationApi,\n  documentId: string,\n) =>\n  createAttachmentProofReader(\n    api,\n    documentId,\n    prepareDocumentAttachmentBlobDecryption,\n  );\n\nasync function authenticateAttachmentKey(\n  api: DocumentLinkSetMutationApi,\n  input: AttachmentKeyInput,\n  readProof: ProofReader,\n): Promise<VerifiedKey> {\n  const blob = await api.getBlobBytes(input.binding.blobId);\n  if (!blob)\n    throw new Error(\"Attachment ciphertext is unavailable for relinking\");\n  const body = new Response(blob.encryptedBytes).body;\n  if (!body) throw new Error(\"Attachment ciphertext stream is unavailable\");\n  const source = createBlobEnvelopeStream(body);\n  try {\n    const encrypted = await source.readHeader();\n    // A missing citation can refresh the proof before consuming ciphertext.\n    const context = await readProof({ ...input, encrypted });\n    for (let index = 0; index < encrypted.chunkCount; index++) {\n      const plaintextByteLength = blobChunkPlaintextByteLength({\n        chunkCount: encrypted.chunkCount,\n        chunkIndex: index,\n        chunkSize: encrypted.chunkSize,\n        plaintextByteLength: encrypted.byteLength,\n      });\n      const ciphertext = await source.read(\n        plaintextByteLength + AES_GCM_TAG_BYTES,\n      );\n      await decryptBlobChunk({\n        ...context,\n        encrypted,\n        expectedBlobId: input.binding.blobId,\n        chunk: { ciphertext, index, plaintextByteLength },\n      });\n    }\n    const header = readWriteHeader(\n      input.binding.writeHeader,\n      \"Attachment blob write header\",\n    );\n    if (bytesToHex(await source.finish()) !== header.ciphertextHash)\n      throw new Error(\"Attachment blob write header does not match ciphertext\");\n    return {\n      encrypted,\n      contentKey: context.contentKey,\n      ciphertextHash: header.ciphertextHash,\n    };\n  } finally {\n    await source.close();\n  }\n}\n\n/** Shared blobs retain only authenticated keys and metadata, never their bytes. */\nexport function createAttachmentKeyAuthenticator(\n  api: DocumentLinkSetMutationApi,\n  documentId: string,\n) {\n  const readProof = createProofReader(api, documentId);\n  const authenticated = new Map<string, Promise<VerifiedKey>>();\n  return async (input: AttachmentKeyInput): Promise<Uint8Array> => {\n    const existing = authenticated.get(input.binding.blobId);\n    if (!existing) {\n      const pending = authenticateAttachmentKey(api, input, readProof);\n      authenticated.set(input.binding.blobId, pending);\n      return (await pending).contentKey;\n    }\n    const cached = await existing;\n    const context = await readProof({ ...input, encrypted: cached.encrypted });\n    if (\n      readWriteHeader(input.binding.writeHeader, \"Attachment blob write header\")\n        .ciphertextHash !== cached.ciphertextHash\n    )\n      throw new Error(\"Attachment blob write header does not match ciphertext\");\n    assertEqualBytes(\n      context.contentKey,\n      cached.contentKey,\n      \"Attachment bindings contain conflicting blob keys\",\n    );\n    return cached.contentKey;\n  };\n}\n"]}

package/workflows/blobs/verification/retainedAttachmentVerification.js

@@ -0,0 +1,40 @@
+import { KeyingVerificationError } from "../../../internal/crypto/index.js";
+import { assertBlobContentKeyBundleTargetHash } from "../../../data/documents/blob/shared/responses.js";
+import { assertDocumentWriterProjectionConsistent } from "../../../data/documents/shared/projection.js";
+import { projectionVerificationOptions } from "../../../data/documents/shared/types.js";
+import { requireProjectionUserKeyResolver, } from "../../../data/keyingProjectionVerification/index.js";
+import { assertAttachmentBindingVerified } from "./attachmentBindingVerification.js";
+import { assertBlobWrapScopeVerified } from "./verifiedWrapScope.js";
+/** Retaining an existing envelope does not propagate a key to a new recipient. */
+export async function verifyRetainedAttachment(input) {
+    const resolveProjectionUserKey = requireProjectionUserKeyResolver(input.resolveProjectionUserKey, "Retained attachment scope");
+    let authorization;
+    await assertDocumentWriterProjectionConsistent(input.writerProjection, {
+        allowStaleContentKeyBundle: true,
+        ...projectionVerificationOptions({
+            execSql: input.execSql,
+            stillCurrent: input.stillCurrent,
+            warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,
+            resolveProjectionUserKey,
+        }),
+        onVerifiedAuthorization: (value) => {
+            authorization = value;
+        },
+    });
+    if (input.binding.contentKeyBundle.blobId !== input.binding.blobId)
+        throw new KeyingVerificationError("object_mismatch", "Retained attachment bundle names another blob");
+    await assertBlobContentKeyBundleTargetHash(input.binding.contentKeyBundle);
+    await assertAttachmentBindingVerified({
+        ...input,
+        authorization,
+        resolveProjectionUserKey,
+    });
+    if (!authorization)
+        throw new Error("Attachment authority is unavailable");
+    assertBlobWrapScopeVerified({
+        authorization,
+        binding: input.binding,
+        documentId: input.expectedDocumentId,
+    });
+}
+//# sourceMappingURL=retainedAttachmentVerification.js.map

package/workflows/blobs/verification/retainedAttachmentVerification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retainedAttachmentVerification.js","sourceRoot":"","sources":["retainedAttachmentVerification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,oCAAoC,EAAE,MAAM,+CAA+C,CAAC;AAErG,OAAO,EAAE,wCAAwC,EAAE,MAAM,2CAA2C,CAAC;AACrG,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAEL,gCAAgC,GACjC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAElE,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAGC;IAED,MAAM,wBAAwB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,wBAAwB,EAC9B,2BAA2B,CAC5B,CAAC;IACF,IAAI,aAAgE,CAAC;IACrE,MAAM,wCAAwC,CAAC,KAAK,CAAC,gBAAgB,EAAE;QACrE,0BAA0B,EAAE,IAAI;QAChC,GAAG,6BAA6B,CAAC;YAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;YACtE,wBAAwB;SACzB,CAAC;QACF,uBAAuB,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,aAAa,GAAG,KAAK,CAAC;QACxB,CAAC;KACF,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM;QAChE,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,+CAA+C,CAChD,CAAC;IACJ,MAAM,oCAAoC,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3E,MAAM,+BAA+B,CAAC;QACpC,GAAG,KAAK;QACR,aAAa;QACb,wBAAwB;KACzB,CAAC,CAAC;IACH,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC3E,2BAA2B,CAAC;QAC1B,aAAa;QACb,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,kBAAkB;KACrC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport { assertBlobContentKeyBundleTargetHash } from \"../../../data/documents/blob/shared/responses\";\nimport type { DecryptDocumentAttachmentBlobInput } from \"../../../data/documents/blob/shared/types\";\nimport { assertDocumentWriterProjectionConsistent } from \"../../../data/documents/shared/projection\";\nimport { projectionVerificationOptions } from \"../../../data/documents/shared/types\";\nimport {\n  type DocumentWriterProjectionAuthorization,\n  requireProjectionUserKeyResolver,\n} from \"../../../data/keyingProjectionVerification\";\nimport { assertAttachmentBindingVerified } from \"./attachmentBindingVerification\";\nimport { assertBlobWrapScopeVerified } from \"./verifiedWrapScope\";\n\n/** Retaining an existing envelope does not propagate a key to a new recipient. */\nexport async function verifyRetainedAttachment(\n  input: Omit<\n    DecryptDocumentAttachmentBlobInput,\n    \"encryptedBytes\" | \"targetSecretKey\"\n  >,\n): Promise<void> {\n  const resolveProjectionUserKey = requireProjectionUserKeyResolver(\n    input.resolveProjectionUserKey,\n    \"Retained attachment scope\",\n  );\n  let authorization: DocumentWriterProjectionAuthorization | undefined;\n  await assertDocumentWriterProjectionConsistent(input.writerProjection, {\n    allowStaleContentKeyBundle: true,\n    ...projectionVerificationOptions({\n      execSql: input.execSql,\n      stillCurrent: input.stillCurrent,\n      warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,\n      resolveProjectionUserKey,\n    }),\n    onVerifiedAuthorization: (value) => {\n      authorization = value;\n    },\n  });\n  if (input.binding.contentKeyBundle.blobId !== input.binding.blobId)\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Retained attachment bundle names another blob\",\n    );\n  await assertBlobContentKeyBundleTargetHash(input.binding.contentKeyBundle);\n  await assertAttachmentBindingVerified({\n    ...input,\n    authorization,\n    resolveProjectionUserKey,\n  });\n  if (!authorization) throw new Error(\"Attachment authority is unavailable\");\n  assertBlobWrapScopeVerified({\n    authorization,\n    binding: input.binding,\n    documentId: input.expectedDocumentId,\n  });\n}\n"]}

package/workflows/blobs/verification/verifiedWrapScope.js

@@ -0,0 +1,20 @@
+import { KeyingVerificationError } from "../../../internal/crypto/index.js";
+import { ProjectionDependencyUnavailableError } from "../../../data/keyingProjectionVerification/dependencyUnavailable.js";
+/** A retained wrap must name a KEK committed by verified container history. */
+export function assertBlobWrapScopeVerified(input) {
+    const targets = input.binding.contentKeyBundle.targets.filter((target) => target.bindingId === input.binding.bindingId &&
+        target.documentId === input.documentId);
+    if (targets.length === 0)
+        throw new KeyingVerificationError("object_mismatch", "Blob bundle lacks its attachment target");
+    for (const target of targets) {
+        const path = input.authorization.containerPathByManifestHash.get(target.containerManifestHash);
+        const manifest = path?.at(-1);
+        if (!manifest)
+            throw new ProjectionDependencyUnavailableError("Blob wrapped-target manifest is unavailable");
+        if (manifest.state.containerId !== target.containerId ||
+            manifest.state.containerKeyEpochId !== target.containerKeyEpochId) {
+            throw new KeyingVerificationError("object_mismatch", "Blob wrapped target differs from verified container history");
+        }
+    }
+}
+//# sourceMappingURL=verifiedWrapScope.js.map

package/workflows/blobs/verification/verifiedWrapScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedWrapScope.js","sourceRoot":"","sources":["verifiedWrapScope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAG5D,OAAO,EAAE,oCAAoC,EAAE,MAAM,kEAAkE,CAAC;AAExH,+EAA+E;AAC/E,MAAM,UAAU,2BAA2B,CAAC,KAI3C;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAC3D,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,CAAC,SAAS;QAC5C,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CACzC,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QACtB,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,yCAAyC,CAC1C,CAAC;IACJ,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,GAAG,CAC9D,MAAM,CAAC,qBAAqB,CAC7B,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ;YACX,MAAM,IAAI,oCAAoC,CAC5C,6CAA6C,CAC9C,CAAC;QACJ,IACE,QAAQ,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;YACjD,QAAQ,CAAC,KAAK,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,EACjE,CAAC;YACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,6DAA6D,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type { BlobAttachmentSummary } from \"@tearleads/validators/response\";\nimport type { DocumentWriterProjectionAuthorization } from \"../../../data/keyingProjectionVerification\";\nimport { ProjectionDependencyUnavailableError } from \"../../../data/keyingProjectionVerification/dependencyUnavailable\";\n\n/** A retained wrap must name a KEK committed by verified container history. */\nexport function assertBlobWrapScopeVerified(input: {\n  authorization: DocumentWriterProjectionAuthorization;\n  binding: BlobAttachmentSummary;\n  documentId: string;\n}): void {\n  const targets = input.binding.contentKeyBundle.targets.filter(\n    (target) =>\n      target.bindingId === input.binding.bindingId &&\n      target.documentId === input.documentId,\n  );\n  if (targets.length === 0)\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Blob bundle lacks its attachment target\",\n    );\n  for (const target of targets) {\n    const path = input.authorization.containerPathByManifestHash.get(\n      target.containerManifestHash,\n    );\n    const manifest = path?.at(-1);\n    if (!manifest)\n      throw new ProjectionDependencyUnavailableError(\n        \"Blob wrapped-target manifest is unavailable\",\n      );\n    if (\n      manifest.state.containerId !== target.containerId ||\n      manifest.state.containerKeyEpochId !== target.containerKeyEpochId\n    ) {\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"Blob wrapped target differs from verified container history\",\n      );\n    }\n  }\n}\n"]}

package/workflows/blobs/verification/writerProjection.js

@@ -0,0 +1,29 @@
+import { readDocumentManifestIdentity } from "../../../data/documents/blob/shared/readers.js";
+import { assertDocumentWriterProjectionConsistent } from "../../../data/documents/shared/projection.js";
+import { projectionVerificationOptions, } from "../../../data/documents/shared/types.js";
+/**
+ * Shared prologue for blob attachment mutations (upload/detach): resolve the
+ * document writer projection, verify its consistency, confirm it targets the
+ * mutated document, and gate on a blocked organization. Returns null when the
+ * projection is unavailable or the organization's remote sync is blocked.
+ */
+export async function resolveBlobMutationWriterProjection(input) {
+    const writerProjection = input.writerProjection ??
+        (await input.apiClient.getDocumentWriterProjection(input.documentId));
+    if (!writerProjection) {
+        return null;
+    }
+    await assertDocumentWriterProjectionConsistent(writerProjection, {
+        execSql: input.execSql,
+        ...projectionVerificationOptions(input),
+    });
+    const manifestIdentity = readDocumentManifestIdentity(writerProjection);
+    if (manifestIdentity.documentId !== input.documentId) {
+        throw new Error(`${input.errorLabel} writer projection targets wrong document`);
+    }
+    if (input.isRemoteSyncBlocked?.(manifestIdentity.organizationId)) {
+        return null;
+    }
+    return { manifestIdentity, writerProjection };
+}
+//# sourceMappingURL=writerProjection.js.map

package/workflows/blobs/verification/writerProjection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writerProjection.js","sourceRoot":"","sources":["writerProjection.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAK3F,OAAO,EAAE,wCAAwC,EAAE,MAAM,2CAA2C,CAAC;AACrG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAG9C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,KAQiC;IAKjC,MAAM,gBAAgB,GACpB,KAAK,CAAC,gBAAgB;QACtB,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,wCAAwC,CAAC,gBAAgB,EAAE;QAC/D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,6BAA6B,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,gBAAgB,CAAC,CAAC;IACxE,IAAI,gBAAgB,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,UAAU,2CAA2C,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC;AAChD,CAAC","sourcesContent":["import type { DocumentWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { readDocumentManifestIdentity } from \"../../../data/documents/blob/shared/readers\";\nimport type {\n  BlobAttachmentApi,\n  DocumentManifestIdentity,\n} from \"../../../data/documents/blob/shared/types\";\nimport { assertDocumentWriterProjectionConsistent } from \"../../../data/documents/shared/projection\";\nimport {\n  type ProjectionVerificationOptions,\n  projectionVerificationOptions,\n} from \"../../../data/documents/shared/types\";\nimport type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\n\n/**\n * Shared prologue for blob attachment mutations (upload/detach): resolve the\n * document writer projection, verify its consistency, confirm it targets the\n * mutated document, and gate on a blocked organization. Returns null when the\n * projection is unavailable or the organization's remote sync is blocked.\n */\nexport async function resolveBlobMutationWriterProjection(\n  input: {\n    apiClient: Pick<BlobAttachmentApi, \"getDocumentWriterProjection\">;\n    documentId: string;\n    /** Prefix for the wrong-document error, e.g. \"Blob attachment detach\". */\n    errorLabel: string;\n    execSql?: ExecSql | undefined;\n    isRemoteSyncBlocked?: ((organizationId: string) => boolean) | undefined;\n    writerProjection?: DocumentWriterProjectionResponse | undefined;\n  } & ProjectionVerificationOptions,\n): Promise<{\n  manifestIdentity: DocumentManifestIdentity;\n  writerProjection: DocumentWriterProjectionResponse;\n} | null> {\n  const writerProjection =\n    input.writerProjection ??\n    (await input.apiClient.getDocumentWriterProjection(input.documentId));\n  if (!writerProjection) {\n    return null;\n  }\n\n  await assertDocumentWriterProjectionConsistent(writerProjection, {\n    execSql: input.execSql,\n    ...projectionVerificationOptions(input),\n  });\n  const manifestIdentity = readDocumentManifestIdentity(writerProjection);\n  if (manifestIdentity.documentId !== input.documentId) {\n    throw new Error(\n      `${input.errorLabel} writer projection targets wrong document`,\n    );\n  }\n  if (input.isRemoteSyncBlocked?.(manifestIdentity.organizationId)) {\n    return null;\n  }\n\n  return { manifestIdentity, writerProjection };\n}\n"]}

package/workflows/container-contents/container-state/create/createAdoption.js

@@ -0,0 +1,193 @@
+import { KeyingVerificationError, } from "../../../../internal/crypto/index.js";
+import { verifiedContainerCreateManifest } from "../../../../data/keyingProjectionVerification/container/containerCreateManifest.js";
+import { verifyContainerDestinationProjection } from "../../../../data/keyingProjectionVerification/container/containerDestinationVerification.js";
+import { isKeyingVerificationError, reportKeyingVerificationErrorInCauseChain, } from "../../../../data/keyingProjectionVerification/error.js";
+import { errorMessage } from "../../../../data/shared/errorMessage.js";
+import { createRuntimePrincipalPolicyWarmer } from "../../../principals/runtimePolicyWarmer.js";
+import { settleContainerCreateIntent } from "./createIntentSettlement.js";
+const LABEL = "Container create conflict";
+/** The recorded error that parks an intent whose listed create is foreign. */
+export const CONTAINER_CREATE_ADOPTION_REFUSED = "Container create adoption was refused";
+/**
+ * The listed create's signed identity is not this device's pending create: its
+ * signed create names another signer, another organization, or a root. An honest server never lists that under the
+ * id this device minted, and no later read can change those signed facts, so
+ * the intent parks instead of re-verifying.
+ */
+class ForeignContainerCreateError extends KeyingVerificationError {
+}
+function foreignCreate(code, message) {
+    return new ForeignContainerCreateError(code, `${LABEL} ${message}`);
+}
+async function verifyAdoptableProjection(input) {
+    const { projection } = input;
+    if (projection.containerId !== input.containerId ||
+        projection.organizationId !== input.expectedOrganizationId) {
+        // The envelope is unsigned: a corrupt read is retried, not parked.
+        throw new KeyingVerificationError("object_mismatch", `${LABEL} projection has the wrong identity`);
+    }
+    const { path, verifiedByHash } = await verifyContainerDestinationProjection({
+        execSql: input.state.runtime.infra.execSql,
+        projection,
+        resolveUserKey: input.state.resolveProjectionUserKey,
+        warmReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(input.state.runtime),
+    });
+    const head = path.at(-1);
+    // One read naming another container says nothing signed about this id.
+    if (!head || head.state.containerId !== input.containerId) {
+        throw new KeyingVerificationError("object_mismatch", `${LABEL} projection names another container`);
+    }
+    const create = verifiedContainerCreateManifest({
+        head,
+        label: LABEL,
+        verifiedByHash,
+    });
+    if (create.event.event.signerUserId !== input.sessionUserId) {
+        throw foreignCreate("signer_mismatch", "was signed by another user");
+    }
+    if (create.state.organizationId !== input.expectedOrganizationId) {
+        throw foreignCreate("object_mismatch", "belongs to another organization");
+    }
+    const createdParentId = create.state.parentContainerId;
+    const currentParentId = head.state.parentContainerId;
+    if (createdParentId === null || currentParentId === null) {
+        throw foreignCreate("object_mismatch", "is an organization root");
+    }
+    return { createdParentId, currentParentId };
+}
+/**
+ * A pending create whose container the listing already carries is adopted
+ * only when the container's signed epoch-1 `container.create` is this user's,
+ * in the intended organization (#2365 finding 26). Listing metadata is
+ * unsigned: a create by another writer that collides on the pending id, or one
+ * a dishonest server invents, must not become this device's container.
+ * Documents apply the same rule (`workflows/documents/createAdoption.ts`).
+ *
+ * Returns where the create committed and where the verified head sits now.
+ * The user may have moved the pending container since, which rewrites its
+ * intent's parent; that is a move still owed, not a mismatch.
+ */
+async function assertContainerCreateAdoptable(input) {
+    const { runtime } = input.state;
+    const sessionUserId = runtime.auth.userId;
+    // Without a session user there is no signer to compare: not tampering.
+    if (!sessionUserId) {
+        throw new Error(`${LABEL} needs a signed-in session user`);
+    }
+    const projection = await runtime.apiClient.getContainerWriterProjection(input.containerId);
+    if (!projection) {
+        throw new Error(`${LABEL} is unavailable to verify`);
+    }
+    try {
+        return await verifyAdoptableProjection({
+            ...input,
+            projection,
+            sessionUserId,
+        });
+    }
+    catch (error) {
+        // Never re-serve a cached projection that failed verification.
+        if (isKeyingVerificationError(error)) {
+            runtime.apiClient.evictContainerWriterProjection(input.containerId);
+        }
+        throw error;
+    }
+}
+function verifyListedContainerCreate(input) {
+    const adoption = {
+        containerId: input.intent.containerId,
+        expectedOrganizationId: input.parentState.container.organizationId,
+    };
+    return input.state.verifyCreateAdoption
+        ? input.state.verifyCreateAdoption(adoption)
+        : assertContainerCreateAdoptable({ ...adoption, state: input.state });
+}
+/** Settles a verified adoption against the row hydration installed. */
+async function markContainerCreateIntentAdopted(input) {
+    const { containerState, placement, syncInput } = input;
+    const remoteMetadataDocumentId = containerState.record.documentId;
+    const remoteMetadataAccessStateHash = containerState.record.accessStateHash;
+    if (!remoteMetadataDocumentId || !remoteMetadataAccessStateHash) {
+        return false;
+    }
+    return settleContainerCreateIntent({
+        createdParentContainerId: placement.createdParentId,
+        desiredParentContainerId: syncInput.intent.parentContainerId,
+        intent: syncInput.intent,
+        isCurrent: syncInput.isCurrent,
+        remoteContainerId: containerState.container.id,
+        remoteMetadataAccessStateHash,
+        remoteMetadataDocumentId,
+        state: syncInput.state,
+        supersededMovePreviousParentId: placement.currentParentId,
+    });
+}
+/**
+ * Records a failed adoption and leaves the lane's other intents to proceed. A
+ * foreign create parks the intent: its signed facts never change, so later
+ * passes neither re-read it nor report it again. Any other failure retries.
+ */
+async function recordAdoptionFailure(input) {
+    const { intent, isCurrent, state } = input.syncInput;
+    if (!isCurrent())
+        return "abandoned";
+    await reportKeyingVerificationErrorInCauseChain(input.error, state.runtime.util.reportSecurityIncident, {
+        objectId: intent.containerId,
+        objectKind: "container",
+        operation: "container.create.replay",
+        organizationId: input.organizationId,
+    });
+    if (!isCurrent())
+        return "abandoned";
+    const action = input.error instanceof ForeignContainerCreateError
+        ? CONTAINER_CREATE_ADOPTION_REFUSED
+        : "Container create adoption verification failed";
+    await state.persistence.recordCreateIntentRevisionError(state.runtime.infra.execSql, {
+        containerId: intent.containerId,
+        expectedIntentId: intent.id,
+        expectedUpdatedAt: intent.updatedAt,
+        message: `${action}: ${errorMessage(input.error)}`,
+        stillCurrent: isCurrent,
+    });
+    return isCurrent() ? "failed" : "abandoned";
+}
+/**
+ * Adopts a pending create the listing already carries, once its signed create
+ * proves it is this device's. A parked refusal stays blocked without a read.
+ */
+export async function syncListedContainerCreate(input) {
+    const { containerState, parentState, syncInput } = input;
+    const { intent, isCurrent, state } = syncInput;
+    if (intent.lastError?.startsWith(CONTAINER_CREATE_ADOPTION_REFUSED)) {
+        return "blocked";
+    }
+    let placement;
+    try {
+        placement = await verifyListedContainerCreate({
+            intent,
+            parentState,
+            state,
+        });
+    }
+    catch (error) {
+        return recordAdoptionFailure({
+            error,
+            organizationId: parentState.container.organizationId,
+            syncInput,
+        });
+    }
+    const marked = await markContainerCreateIntentAdopted({
+        containerState,
+        placement,
+        syncInput,
+    });
+    if (!marked)
+        return isCurrent() ? "blocked" : "abandoned";
+    // The folder now sits elsewhere; list it there rather than waiting for the
+    // next poll to correct the local parent.
+    if (placement.currentParentId !== intent.parentContainerId) {
+        syncInput.requestRemoteReconciliation(placement.currentParentId);
+    }
+    return "created";
+}
+//# sourceMappingURL=createAdoption.js.map

package/workflows/container-contents/container-state/create/createAdoption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAdoption.js","sourceRoot":"","sources":["createAdoption.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,+BAA+B,EAAE,MAAM,iFAAiF,CAAC;AAClI,OAAO,EAAE,oCAAoC,EAAE,MAAM,0FAA0F,CAAC;AAChJ,OAAO,EACL,yBAAyB,EACzB,yCAAyC,GAC1C,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACpE,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAO7F,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAEvE,MAAM,KAAK,GAAG,2BAA2B,CAAC;AAE1C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iCAAiC,GAC5C,uCAAuC,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,2BAA4B,SAAQ,uBAAuB;CAAG;AAEpE,SAAS,aAAa,CACpB,IAA4B,EAC5B,OAAe;IAEf,OAAO,IAAI,2BAA2B,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,KAMxC;IACC,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC7B,IACE,UAAU,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QAC5C,UAAU,CAAC,cAAc,KAAK,KAAK,CAAC,sBAAsB,EAC1D,CAAC;QACD,mEAAmE;QACnE,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,GAAG,KAAK,oCAAoC,CAC7C,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,MAAM,oCAAoC,CAAC;QAC1E,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QAC1C,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,wBAAwB;QACpD,+BAA+B,EAAE,kCAAkC,CACjE,KAAK,CAAC,KAAK,CAAC,OAAO,CACpB;KACF,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,uEAAuE;IACvE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,GAAG,KAAK,qCAAqC,CAC9C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,+BAA+B,CAAC;QAC7C,IAAI;QACJ,KAAK,EAAE,KAAK;QACZ,cAAc;KACf,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;QAC5D,MAAM,aAAa,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACjE,MAAM,aAAa,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACvD,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACrD,IAAI,eAAe,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QACzD,MAAM,aAAa,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,8BAA8B,CAAC,KAI7C;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;IAChC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IAC1C,uEAAuE;IACvE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,4BAA4B,CACrE,KAAK,CAAC,WAAW,CAClB,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,yBAAyB,CAAC;YACrC,GAAG,KAAK;YACR,UAAU;YACV,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+DAA+D;QAC/D,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,SAAS,CAAC,8BAA8B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,KAIpC;IACC,MAAM,QAAQ,GAAG;QACf,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;QACrC,sBAAsB,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,cAAc;KACnE,CAAC;IACF,OAAO,KAAK,CAAC,KAAK,CAAC,oBAAoB;QACrC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC;QAC5C,CAAC,CAAC,8BAA8B,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,gCAAgC,CAAC,KAI/C;IACC,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACvD,MAAM,wBAAwB,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC;IAClE,MAAM,6BAA6B,GAAG,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC;IAE5E,IAAI,CAAC,wBAAwB,IAAI,CAAC,6BAA6B,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,2BAA2B,CAAC;QACjC,wBAAwB,EAAE,SAAS,CAAC,eAAe;QACnD,wBAAwB,EAAE,SAAS,CAAC,MAAM,CAAC,iBAAiB;QAC5D,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,iBAAiB,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE;QAC9C,6BAA6B;QAC7B,wBAAwB;QACxB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,8BAA8B,EAAE,SAAS,CAAC,eAAe;KAC1D,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAAC,KAIpC;IACC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;IACrD,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,WAAW,CAAC;IACrC,MAAM,yCAAyC,CAC7C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACzC;QACE,QAAQ,EAAE,MAAM,CAAC,WAAW;QAC5B,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,yBAAyB;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CACF,CAAC;IACF,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,WAAW,CAAC;IACrC,MAAM,MAAM,GACV,KAAK,CAAC,KAAK,YAAY,2BAA2B;QAChD,CAAC,CAAC,iCAAiC;QACnC,CAAC,CAAC,+CAA+C,CAAC;IACtD,MAAM,KAAK,CAAC,WAAW,CAAC,+BAA+B,CACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B;QACE,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;QAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,OAAO,EAAE,GAAG,MAAM,KAAK,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QAClD,YAAY,EAAE,SAAS;KACxB,CACF,CAAC;IACF,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAI/C;IACC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IAC/C,IAAI,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,iCAAiC,CAAC,EAAE,CAAC;QACpE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,SAAoC,CAAC;IACzC,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,2BAA2B,CAAC;YAC5C,MAAM;YACN,WAAW;YACX,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,qBAAqB,CAAC;YAC3B,KAAK;YACL,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,cAAc;YACpD,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC;QACpD,cAAc;QACd,SAAS;QACT,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IAC1D,2EAA2E;IAC3E,yCAAyC;IACzC,IAAI,SAAS,CAAC,eAAe,KAAK,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC3D,SAAS,CAAC,2BAA2B,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["import {\n  type KeyingVerificationCode,\n  KeyingVerificationError,\n} from \"@tearleads/crypto\";\nimport type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { verifiedContainerCreateManifest } from \"../../../../data/keyingProjectionVerification/container/containerCreateManifest\";\nimport { verifyContainerDestinationProjection } from \"../../../../data/keyingProjectionVerification/container/containerDestinationVerification\";\nimport {\n  isKeyingVerificationError,\n  reportKeyingVerificationErrorInCauseChain,\n} from \"../../../../data/keyingProjectionVerification/error\";\nimport { errorMessage } from \"../../../../data/shared/errorMessage\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../../principals/runtimePolicyWarmer\";\nimport type { ContainerState } from \"../../remoteHydration\";\nimport type {\n  AdoptedContainerPlacement,\n  ContainerCreateIntentSyncInput,\n  ContainerCreateIntentSyncState,\n} from \"../types\";\nimport { settleContainerCreateIntent } from \"./createIntentSettlement\";\n\nconst LABEL = \"Container create conflict\";\n\n/** The recorded error that parks an intent whose listed create is foreign. */\nexport const CONTAINER_CREATE_ADOPTION_REFUSED =\n  \"Container create adoption was refused\";\n\n/**\n * The listed create's signed identity is not this device's pending create: its\n * signed create names another signer, another organization, or a root. An honest server never lists that under the\n * id this device minted, and no later read can change those signed facts, so\n * the intent parks instead of re-verifying.\n */\nclass ForeignContainerCreateError extends KeyingVerificationError {}\n\nfunction foreignCreate(\n  code: KeyingVerificationCode,\n  message: string,\n): ForeignContainerCreateError {\n  return new ForeignContainerCreateError(code, `${LABEL} ${message}`);\n}\n\nasync function verifyAdoptableProjection(input: {\n  readonly containerId: string;\n  readonly expectedOrganizationId: string;\n  readonly projection: ContainerWriterProjectionResponse;\n  readonly sessionUserId: string;\n  readonly state: ContainerCreateIntentSyncState;\n}): Promise<AdoptedContainerPlacement> {\n  const { projection } = input;\n  if (\n    projection.containerId !== input.containerId ||\n    projection.organizationId !== input.expectedOrganizationId\n  ) {\n    // The envelope is unsigned: a corrupt read is retried, not parked.\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      `${LABEL} projection has the wrong identity`,\n    );\n  }\n  const { path, verifiedByHash } = await verifyContainerDestinationProjection({\n    execSql: input.state.runtime.infra.execSql,\n    projection,\n    resolveUserKey: input.state.resolveProjectionUserKey,\n    warmReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(\n      input.state.runtime,\n    ),\n  });\n  const head = path.at(-1);\n  // One read naming another container says nothing signed about this id.\n  if (!head || head.state.containerId !== input.containerId) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      `${LABEL} projection names another container`,\n    );\n  }\n  const create = verifiedContainerCreateManifest({\n    head,\n    label: LABEL,\n    verifiedByHash,\n  });\n  if (create.event.event.signerUserId !== input.sessionUserId) {\n    throw foreignCreate(\"signer_mismatch\", \"was signed by another user\");\n  }\n  if (create.state.organizationId !== input.expectedOrganizationId) {\n    throw foreignCreate(\"object_mismatch\", \"belongs to another organization\");\n  }\n  const createdParentId = create.state.parentContainerId;\n  const currentParentId = head.state.parentContainerId;\n  if (createdParentId === null || currentParentId === null) {\n    throw foreignCreate(\"object_mismatch\", \"is an organization root\");\n  }\n  return { createdParentId, currentParentId };\n}\n\n/**\n * A pending create whose container the listing already carries is adopted\n * only when the container's signed epoch-1 `container.create` is this user's,\n * in the intended organization (#2365 finding 26). Listing metadata is\n * unsigned: a create by another writer that collides on the pending id, or one\n * a dishonest server invents, must not become this device's container.\n * Documents apply the same rule (`workflows/documents/createAdoption.ts`).\n *\n * Returns where the create committed and where the verified head sits now.\n * The user may have moved the pending container since, which rewrites its\n * intent's parent; that is a move still owed, not a mismatch.\n */\nasync function assertContainerCreateAdoptable(input: {\n  readonly containerId: string;\n  readonly expectedOrganizationId: string;\n  readonly state: ContainerCreateIntentSyncState;\n}): Promise<AdoptedContainerPlacement> {\n  const { runtime } = input.state;\n  const sessionUserId = runtime.auth.userId;\n  // Without a session user there is no signer to compare: not tampering.\n  if (!sessionUserId) {\n    throw new Error(`${LABEL} needs a signed-in session user`);\n  }\n  const projection = await runtime.apiClient.getContainerWriterProjection(\n    input.containerId,\n  );\n  if (!projection) {\n    throw new Error(`${LABEL} is unavailable to verify`);\n  }\n  try {\n    return await verifyAdoptableProjection({\n      ...input,\n      projection,\n      sessionUserId,\n    });\n  } catch (error) {\n    // Never re-serve a cached projection that failed verification.\n    if (isKeyingVerificationError(error)) {\n      runtime.apiClient.evictContainerWriterProjection(input.containerId);\n    }\n    throw error;\n  }\n}\n\nfunction verifyListedContainerCreate(input: {\n  readonly intent: ContainerCreateIntentSyncInput[\"intent\"];\n  readonly parentState: ContainerState;\n  readonly state: ContainerCreateIntentSyncState;\n}): Promise<AdoptedContainerPlacement> {\n  const adoption = {\n    containerId: input.intent.containerId,\n    expectedOrganizationId: input.parentState.container.organizationId,\n  };\n  return input.state.verifyCreateAdoption\n    ? input.state.verifyCreateAdoption(adoption)\n    : assertContainerCreateAdoptable({ ...adoption, state: input.state });\n}\n\n/** Settles a verified adoption against the row hydration installed. */\nasync function markContainerCreateIntentAdopted(input: {\n  containerState: ContainerState;\n  placement: AdoptedContainerPlacement;\n  syncInput: ContainerCreateIntentSyncInput;\n}): Promise<boolean> {\n  const { containerState, placement, syncInput } = input;\n  const remoteMetadataDocumentId = containerState.record.documentId;\n  const remoteMetadataAccessStateHash = containerState.record.accessStateHash;\n\n  if (!remoteMetadataDocumentId || !remoteMetadataAccessStateHash) {\n    return false;\n  }\n  return settleContainerCreateIntent({\n    createdParentContainerId: placement.createdParentId,\n    desiredParentContainerId: syncInput.intent.parentContainerId,\n    intent: syncInput.intent,\n    isCurrent: syncInput.isCurrent,\n    remoteContainerId: containerState.container.id,\n    remoteMetadataAccessStateHash,\n    remoteMetadataDocumentId,\n    state: syncInput.state,\n    supersededMovePreviousParentId: placement.currentParentId,\n  });\n}\n\n/**\n * Records a failed adoption and leaves the lane's other intents to proceed. A\n * foreign create parks the intent: its signed facts never change, so later\n * passes neither re-read it nor report it again. Any other failure retries.\n */\nasync function recordAdoptionFailure(input: {\n  readonly error: unknown;\n  readonly organizationId: string;\n  readonly syncInput: ContainerCreateIntentSyncInput;\n}): Promise<\"abandoned\" | \"failed\"> {\n  const { intent, isCurrent, state } = input.syncInput;\n  if (!isCurrent()) return \"abandoned\";\n  await reportKeyingVerificationErrorInCauseChain(\n    input.error,\n    state.runtime.util.reportSecurityIncident,\n    {\n      objectId: intent.containerId,\n      objectKind: \"container\",\n      operation: \"container.create.replay\",\n      organizationId: input.organizationId,\n    },\n  );\n  if (!isCurrent()) return \"abandoned\";\n  const action =\n    input.error instanceof ForeignContainerCreateError\n      ? CONTAINER_CREATE_ADOPTION_REFUSED\n      : \"Container create adoption verification failed\";\n  await state.persistence.recordCreateIntentRevisionError(\n    state.runtime.infra.execSql,\n    {\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      message: `${action}: ${errorMessage(input.error)}`,\n      stillCurrent: isCurrent,\n    },\n  );\n  return isCurrent() ? \"failed\" : \"abandoned\";\n}\n\n/**\n * Adopts a pending create the listing already carries, once its signed create\n * proves it is this device's. A parked refusal stays blocked without a read.\n */\nexport async function syncListedContainerCreate(input: {\n  readonly containerState: ContainerState;\n  readonly parentState: ContainerState;\n  readonly syncInput: ContainerCreateIntentSyncInput;\n}): Promise<\"abandoned\" | \"blocked\" | \"created\" | \"failed\"> {\n  const { containerState, parentState, syncInput } = input;\n  const { intent, isCurrent, state } = syncInput;\n  if (intent.lastError?.startsWith(CONTAINER_CREATE_ADOPTION_REFUSED)) {\n    return \"blocked\";\n  }\n  let placement: AdoptedContainerPlacement;\n  try {\n    placement = await verifyListedContainerCreate({\n      intent,\n      parentState,\n      state,\n    });\n  } catch (error) {\n    return recordAdoptionFailure({\n      error,\n      organizationId: parentState.container.organizationId,\n      syncInput,\n    });\n  }\n  const marked = await markContainerCreateIntentAdopted({\n    containerState,\n    placement,\n    syncInput,\n  });\n  if (!marked) return isCurrent() ? \"blocked\" : \"abandoned\";\n  // The folder now sits elsewhere; list it there rather than waiting for the\n  // next poll to correct the local parent.\n  if (placement.currentParentId !== intent.parentContainerId) {\n    syncInput.requestRemoteReconciliation(placement.currentParentId);\n  }\n  return \"created\";\n}\n"]}