@tearleads/client-sdk 0.1.63 → 0.1.65

package/client/organizations/organizationAccessRestoration.js

@@ -1,6 +1,6 @@
 import { sqlDocumentMoveIntentPersistence } from "../../data/persistence/container-contents/documentMoveIntentPersistence.js";
 import { requestDormantMetadataRestorationSweeps } from "../../data/persistence/container-contents/dormantMetadataSweep.js";
-import { hasRecordedTerminalSyncFailures } from "../../data/sqlite/documentPersistence.js";
+import { hasRecordedTerminalSyncFailures } from "../../data/sqlite/documentPersistence/index.js";
 import { requestAllDomainSyncLanes, requestDomainSyncLane, } from "../../data/sync/syncCoordinator.js";
 import { CONTAINER_CONTENTS_SYNC_LANE_KEY } from "../../workflows/container-contents/syncLane.js";
 /** Recover parked work before optional presentation hydration can fail. */

package/data/containers/shared/mutationAcknowledgement.js

@@ -1,6 +1,6 @@
 import { accessManifestCheckpointFromManifest, compareCanonicalStrings, computeContainerKekKeyringHash, computeContainerKekRecipientTargetHash, computeContainerKeyEpochHash, } from "../../../internal/crypto/index.js";
 import { canonicalKeyingJsonString } from "../../keying/canonicalJson.js";
-import { advanceLocallyAcknowledgedAccessManifestHeadsAtomically, } from "../../persistence/locallyAcknowledgedCheckpointPersistence.js";
+import { advanceLocallyAcknowledgedAccessManifestHeadsAtomically, } from "../../persistence/keyingCheckpoints/locallyAcknowledgedCheckpointPersistence.js";
 function assertCanonicalMatch(input) {
     if (canonicalKeyingJsonString(input.actual, `${input.label} response`) !==
         canonicalKeyingJsonString(input.expected, `${input.label} plan`)) {

package/data/containers/shared/mutationAcknowledgement.js.map

@@ -1 +1 @@
-{"version":3,"file":"mutationAcknowledgement.js","sourceRoot":"","sources":["mutationAcknowledgement.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,oCAAoC,EAKpC,uBAAuB,EACvB,8BAA8B,EAC9B,sCAAsC,EACtC,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EACL,uDAAuD,GAExD,MAAM,4DAA4D,CAAC;AAoBpE,SAAS,oBAAoB,CAAC,KAI7B;IACC,IACE,yBAAyB,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,WAAW,CAAC;QAClE,yBAAyB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,KAAK,OAAO,CAAC,EAChE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,KAAK,WAAW,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAI,MAAoB,EAAE,KAAa;IACnE,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACtC,uBAAuB,CACrB,yBAAyB,CAAC,IAAI,EAAE,KAAK,CAAC,EACtC,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,CACxC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAkC;IAElC,OAAO,qBAAqB,CAC1B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC,EACH,kBAAkB,CACnB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAAmC,EACnC,QAAmC;IAEnC,IACE,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;QACzC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,KAAK,CAAC,cAAc;QACrD,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,2EAA2E;IAC3E,0EAA0E;IAC1E,iDAAiD;IACjD,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IACE,QAAQ,CAAC,YAAY,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK;QAChD,QAAQ,CAAC,YAAY,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;QACxD,QAAQ,CAAC,cAAc,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,EAC1D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IACE,QAAQ,CAAC,YAAY,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;QACtD,QAAQ,CAAC,YAAY,CAAC,kBAAkB,KAAK,IAAI,CAAC,YAAY;QAC9D,QAAQ,CAAC,YAAY,CAAC,mBAAmB,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE;QAC9D,QAAQ,CAAC,YAAY,CAAC,iBAAiB,KAAK,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAClE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,uBAAuB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,yBAAyB,CACtC,IAAmC,EACnC,QAAmC;IAEnC,MAAM,aAAa,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC;IAC9C,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,sCAAsC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;QAC9C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,oEAAoE;YACpE,uEAAuE;YACvE,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,IACE,CAAC,MAAM,8BAA8B,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC,MAAM,8BAA8B,CAAC,QAAQ,CAAC,CAAC,EAChD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,MAAM,8BAA8B,CAAC,OAAO,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,IAAmC,EACnC,QAAmC;IAEnC,oBAAoB,CAAC;QACnB,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK;QAC3C,QAAQ,EAAE,IAAI,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO;KACf,CAAC,CAAC;IACH,oBAAoB,CAAC;QACnB,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI;QAC1C,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,KAAK,EAAE,YAAY;KACpB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,oBAAoB,CAAC;QACnB,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,QAAQ;QACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,UAAU;KAClB,CAAC,CAAC;IACH,oBAAoB,CAAC;QACnB,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK;QACrC,QAAQ,EAAE,IAAI,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO;KACf,CAAC,CAAC;IACH,oBAAoB,CAAC;QACnB,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,QAAQ;QACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,WAAW;KACnB,CAAC,CAAC;IACH,MAAM,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,oBAAoB,CAAC;QACnB,MAAM,EAAE,qBAAqB,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC;QAC3E,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC;QAC3D,KAAK,EAAE,OAAO;KACf,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,qBAAqB,CAC3C,QAAQ,CAAC,YAAY,CAAC,gBAAgB,EACtC,2BAA2B,CAC5B,CAAC;IACF,oBAAoB,CAAC;QACnB,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,mBAAmB;KAC3B,CAAC,CAAC;IACH,IACE,QAAQ,CAAC,YAAY,CAAC,YAAY;QAChC,CAAC,MAAM,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrD,QAAQ,CAAC,YAAY,CAAC,aAAa;YACjC,CAAC,MAAM,sCAAsC,CAAC,gBAAgB,CAAC,CAAC;QAClE,QAAQ,CAAC,YAAY,CAAC,yBAAyB;YAC7C,IAAI,CAAC,QAAQ,CAAC,yBAAyB,EACzC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,oBAAoB,CAAC;QACnB,MAAM,EAAE,QAAQ,CAAC,wBAAwB;QACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,wBAAwB;QAChD,KAAK,EAAE,4BAA4B;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAAC,KAG9D;IACC,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxD,OAAO;QACL,UAAU,EAAE,oCAAoC,CAAC;YAC/C,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAC7B,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY;SACtC,CAAC;QACF,oBAAoB,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB;KAC/D,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAKlD;IACC,OAAO,uDAAuD,CAAC;QAC7D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE;YACL,MAAM,wCAAwC,CAAC;gBAC7C,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC;SACH;QACD,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAKvD;IACC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,OAAO,wCAAwC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CACH,CAAC;IACF,OAAO,uDAAuD,CAAC;QAC7D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK;QACL,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  type AccessEvent,\n  type AccessManifest,\n  accessManifestCheckpointFromManifest,\n  type ContainerAccessManifestState,\n  type ContainerKekRecipientTarget,\n  type ContainerKeyEpoch,\n  type ContainerKeyWrap,\n  compareCanonicalStrings,\n  computeContainerKekKeyringHash,\n  computeContainerKekRecipientTargetHash,\n  computeContainerKeyEpochHash,\n} from \"@tearleads/crypto\";\nimport type { ContainerMutationResponse } from \"@tearleads/validators/response\";\nimport { canonicalKeyingJsonString } from \"../../keying/canonicalJson\";\nimport {\n  advanceLocallyAcknowledgedAccessManifestHeadsAtomically,\n  type LocallyAcknowledgedAccessManifestHead,\n} from \"../../persistence/locallyAcknowledgedCheckpointPersistence\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\n\nexport interface AuthoredContainerMutationHead {\n  readonly body: object;\n  readonly containerId: string;\n  readonly event: AccessEvent;\n  readonly eventHash: string;\n  readonly keyEpoch: ContainerKeyEpoch;\n  readonly manifest: AccessManifest;\n  readonly manifestHash: string;\n  /**\n   * The keyring the epoch already had, for mutations that keep their epoch.\n   * Its artifact is immutable, so the response must echo exactly this.\n   */\n  readonly previousKeyring?: Record<string, unknown> | null | undefined;\n  readonly state: ContainerAccessManifestState;\n  readonly wraps: readonly ContainerKeyWrap[];\n}\n\nfunction assertCanonicalMatch(input: {\n  readonly actual: unknown;\n  readonly expected: unknown;\n  readonly label: string;\n}): void {\n  if (\n    canonicalKeyingJsonString(input.actual, `${input.label} response`) !==\n    canonicalKeyingJsonString(input.expected, `${input.label} plan`)\n  ) {\n    throw new Error(`Container mutation response ${input.label} mismatch`);\n  }\n}\n\nfunction sortedCanonicalValues<T>(values: readonly T[], label: string): T[] {\n  return [...values].sort((left, right) =>\n    compareCanonicalStrings(\n      canonicalKeyingJsonString(left, label),\n      canonicalKeyingJsonString(right, label),\n    ),\n  );\n}\n\nfunction expectedRecipientTargets(\n  wraps: readonly ContainerKeyWrap[],\n): ContainerKekRecipientTarget[] {\n  return sortedCanonicalValues(\n    wraps.map((wrap) => ({\n      recipientId: wrap.recipientId,\n      recipientKeyEpochId: wrap.recipientKeyEpochId,\n      recipientKeyFingerprint: wrap.recipientKeyFingerprint,\n      recipientKind: wrap.recipientKind,\n    })),\n    \"recipient target\",\n  );\n}\n\nfunction assertResponseIdentity(\n  plan: AuthoredContainerMutationHead,\n  response: ContainerMutationResponse,\n): void {\n  if (\n    response.containerId !== plan.containerId ||\n    response.organizationId !== plan.state.organizationId ||\n    response.parentId !== plan.state.parentContainerId\n  ) {\n    throw new Error(\"Container mutation response object identity mismatch\");\n  }\n  // The top-level slot column is what local system-container lookups key on,\n  // so it must echo the slot this client signed into the manifest state; an\n  // omitted slot is the server's spelling of null.\n  if ((response.systemSlot ?? null) !== plan.state.systemSlot) {\n    throw new Error(\"Container mutation response system slot mismatch\");\n  }\n  if (\n    response.manifestHead.epoch !== plan.state.epoch ||\n    response.manifestHead.manifestHash !== plan.manifestHash ||\n    response.accessManifest.manifestHash !== plan.manifestHash\n  ) {\n    throw new Error(\"Container mutation response manifest head mismatch\");\n  }\n  if (\n    response.containerKek.containerId !== plan.containerId ||\n    response.containerKek.accessManifestHash !== plan.manifestHash ||\n    response.containerKek.containerKeyEpochId !== plan.keyEpoch.id ||\n    response.containerKek.containerKeyEpoch !== plan.keyEpoch.keyEpoch\n  ) {\n    throw new Error(\"Container mutation response KEK identity mismatch\");\n  }\n}\n\n/** A rotation body commits a keyring hash; other bodies do not. */\nfunction readOptionalKeyringHash(body: object): string | null {\n  const value = Reflect.get(body, \"keyringHash\");\n  return typeof value === \"string\" ? value : null;\n}\n\n/**\n * The response's keyring must be the one this client's own signed event\n * committed to. Without this a server could echo a substituted snapshot and\n * have it acknowledged into durable local state — the acknowledgement is the\n * moment the response becomes trusted, so the commitment is checked here.\n */\nasync function assertAcknowledgedKeyring(\n  plan: AuthoredContainerMutationHead,\n  response: ContainerMutationResponse,\n): Promise<void> {\n  const committedHash = readOptionalKeyringHash(plan.body);\n  const keyring = response.containerKek.keyring;\n  if (committedHash === null) {\n    // A non-rotating mutation keeps its epoch, so the echoed keyring must be\n    // the immutable artifact that epoch already had. Accepting anything else\n    // would let a server null or substitute the snapshot in the response that\n    // becomes the next writer projection.\n    const expected = plan.previousKeyring ?? null;\n    if (expected === null) {\n      // The epoch had no keyring, so the response must not invent one: an\n      // injected snapshot would become the next writer projection's history.\n      if (keyring) {\n        throw new Error(\n          \"Container mutation response added a keyring to an unchanged epoch\",\n        );\n      }\n      return;\n    }\n    if (!keyring) {\n      throw new Error(\n        \"Container mutation response dropped its unchanged keyring\",\n      );\n    }\n    if (\n      (await computeContainerKekKeyringHash(keyring)) !==\n      (await computeContainerKekKeyringHash(expected))\n    ) {\n      throw new Error(\n        \"Container mutation response replaced its unchanged keyring\",\n      );\n    }\n    return;\n  }\n  if (!keyring) {\n    throw new Error(\"Container mutation response is missing its keyring\");\n  }\n  if ((await computeContainerKekKeyringHash(keyring)) !== committedHash) {\n    throw new Error(\n      \"Container mutation response keyring does not match its signed event\",\n    );\n  }\n}\n\nasync function assertResponseContent(\n  plan: AuthoredContainerMutationHead,\n  response: ContainerMutationResponse,\n): Promise<void> {\n  assertCanonicalMatch({\n    actual: response.accessManifest.event.event,\n    expected: plan.event,\n    label: \"event\",\n  });\n  assertCanonicalMatch({\n    actual: response.accessManifest.event.body,\n    expected: plan.body,\n    label: \"event body\",\n  });\n  if (response.accessManifest.event.eventHash !== plan.eventHash) {\n    throw new Error(\"Container mutation response event hash mismatch\");\n  }\n  assertCanonicalMatch({\n    actual: response.accessManifest.manifest,\n    expected: plan.manifest,\n    label: \"manifest\",\n  });\n  assertCanonicalMatch({\n    actual: response.accessManifest.state,\n    expected: plan.state,\n    label: \"state\",\n  });\n  assertCanonicalMatch({\n    actual: response.containerKek.keyEpoch,\n    expected: plan.keyEpoch,\n    label: \"key epoch\",\n  });\n  await assertAcknowledgedKeyring(plan, response);\n  assertCanonicalMatch({\n    actual: sortedCanonicalValues(response.containerKek.wraps, \"response wrap\"),\n    expected: sortedCanonicalValues(plan.wraps, \"planned wrap\"),\n    label: \"wraps\",\n  });\n  const recipientTargets = expectedRecipientTargets(plan.wraps);\n  const responseTargets = sortedCanonicalValues(\n    response.containerKek.recipientTargets,\n    \"response recipient target\",\n  );\n  assertCanonicalMatch({\n    actual: responseTargets,\n    expected: recipientTargets,\n    label: \"recipient targets\",\n  });\n  if (\n    response.containerKek.keyEpochHash !==\n      (await computeContainerKeyEpochHash(plan.keyEpoch)) ||\n    response.containerKek.keyTargetHash !==\n      (await computeContainerKekRecipientTargetHash(recipientTargets)) ||\n    response.containerKek.parentContainerKeyEpochId !==\n      plan.keyEpoch.parentContainerKeyEpochId\n  ) {\n    throw new Error(\"Container mutation response KEK commitment mismatch\");\n  }\n  assertCanonicalMatch({\n    actual: response.referencedPrincipalHeads,\n    expected: plan.manifest.referencedPrincipalHeads,\n    label: \"referenced principal heads\",\n  });\n}\n\nexport async function locallyAcknowledgedContainerMutationHead(input: {\n  readonly plan: AuthoredContainerMutationHead;\n  readonly response: ContainerMutationResponse;\n}): Promise<LocallyAcknowledgedAccessManifestHead> {\n  assertResponseIdentity(input.plan, input.response);\n  await assertResponseContent(input.plan, input.response);\n  return {\n    checkpoint: accessManifestCheckpointFromManifest({\n      manifest: input.plan.manifest,\n      manifestHash: input.plan.manifestHash,\n    }),\n    previousManifestHash: input.plan.manifest.previousManifestHash,\n  };\n}\n\n/** Correlates an API acknowledgement to the locally signed plan before pinning. */\nexport async function acknowledgeContainerMutation(input: {\n  readonly execSql: ExecSql;\n  readonly plan: AuthoredContainerMutationHead;\n  readonly response: ContainerMutationResponse;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<boolean> {\n  return advanceLocallyAcknowledgedAccessManifestHeadsAtomically({\n    execSql: input.execSql,\n    heads: [\n      await locallyAcknowledgedContainerMutationHead({\n        plan: input.plan,\n        response: input.response,\n      }),\n    ],\n    stillCurrent: input.stillCurrent,\n  });\n}\n\n/** Correlates and advances a complete authored mutation batch atomically. */\nexport async function acknowledgeContainerMutationBatch(input: {\n  readonly execSql: ExecSql;\n  readonly plans: readonly AuthoredContainerMutationHead[];\n  readonly responses: readonly ContainerMutationResponse[];\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<boolean> {\n  if (input.plans.length !== input.responses.length) {\n    throw new Error(\"Container mutation acknowledgement batch is incomplete\");\n  }\n  const heads = await Promise.all(\n    input.plans.map(async (plan, index) => {\n      const response = input.responses[index];\n      if (!response) {\n        throw new Error(\n          \"Container mutation acknowledgement batch is incomplete\",\n        );\n      }\n      return locallyAcknowledgedContainerMutationHead({ plan, response });\n    }),\n  );\n  return advanceLocallyAcknowledgedAccessManifestHeadsAtomically({\n    execSql: input.execSql,\n    heads,\n    stillCurrent: input.stillCurrent,\n  });\n}\n"]}
+{"version":3,"file":"mutationAcknowledgement.js","sourceRoot":"","sources":["mutationAcknowledgement.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,oCAAoC,EAKpC,uBAAuB,EACvB,8BAA8B,EAC9B,sCAAsC,EACtC,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EACL,uDAAuD,GAExD,MAAM,8EAA8E,CAAC;AAoBtF,SAAS,oBAAoB,CAAC,KAI7B;IACC,IACE,yBAAyB,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,WAAW,CAAC;QAClE,yBAAyB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,KAAK,OAAO,CAAC,EAChE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,KAAK,WAAW,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAI,MAAoB,EAAE,KAAa;IACnE,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACtC,uBAAuB,CACrB,yBAAyB,CAAC,IAAI,EAAE,KAAK,CAAC,EACtC,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,CACxC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAkC;IAElC,OAAO,qBAAqB,CAC1B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC,EACH,kBAAkB,CACnB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAAmC,EACnC,QAAmC;IAEnC,IACE,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;QACzC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,KAAK,CAAC,cAAc;QACrD,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,2EAA2E;IAC3E,0EAA0E;IAC1E,iDAAiD;IACjD,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IACE,QAAQ,CAAC,YAAY,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK;QAChD,QAAQ,CAAC,YAAY,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;QACxD,QAAQ,CAAC,cAAc,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,EAC1D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IACE,QAAQ,CAAC,YAAY,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;QACtD,QAAQ,CAAC,YAAY,CAAC,kBAAkB,KAAK,IAAI,CAAC,YAAY;QAC9D,QAAQ,CAAC,YAAY,CAAC,mBAAmB,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE;QAC9D,QAAQ,CAAC,YAAY,CAAC,iBAAiB,KAAK,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAClE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,uBAAuB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,yBAAyB,CACtC,IAAmC,EACnC,QAAmC;IAEnC,MAAM,aAAa,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC;IAC9C,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,sCAAsC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;QAC9C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,oEAAoE;YACpE,uEAAuE;YACvE,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,IACE,CAAC,MAAM,8BAA8B,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC,MAAM,8BAA8B,CAAC,QAAQ,CAAC,CAAC,EAChD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,MAAM,8BAA8B,CAAC,OAAO,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,IAAmC,EACnC,QAAmC;IAEnC,oBAAoB,CAAC;QACnB,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK;QAC3C,QAAQ,EAAE,IAAI,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO;KACf,CAAC,CAAC;IACH,oBAAoB,CAAC;QACnB,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI;QAC1C,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,KAAK,EAAE,YAAY;KACpB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,oBAAoB,CAAC;QACnB,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,QAAQ;QACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,UAAU;KAClB,CAAC,CAAC;IACH,oBAAoB,CAAC;QACnB,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK;QACrC,QAAQ,EAAE,IAAI,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO;KACf,CAAC,CAAC;IACH,oBAAoB,CAAC;QACnB,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,QAAQ;QACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,WAAW;KACnB,CAAC,CAAC;IACH,MAAM,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,oBAAoB,CAAC;QACnB,MAAM,EAAE,qBAAqB,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC;QAC3E,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC;QAC3D,KAAK,EAAE,OAAO;KACf,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,qBAAqB,CAC3C,QAAQ,CAAC,YAAY,CAAC,gBAAgB,EACtC,2BAA2B,CAC5B,CAAC;IACF,oBAAoB,CAAC;QACnB,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,mBAAmB;KAC3B,CAAC,CAAC;IACH,IACE,QAAQ,CAAC,YAAY,CAAC,YAAY;QAChC,CAAC,MAAM,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrD,QAAQ,CAAC,YAAY,CAAC,aAAa;YACjC,CAAC,MAAM,sCAAsC,CAAC,gBAAgB,CAAC,CAAC;QAClE,QAAQ,CAAC,YAAY,CAAC,yBAAyB;YAC7C,IAAI,CAAC,QAAQ,CAAC,yBAAyB,EACzC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,oBAAoB,CAAC;QACnB,MAAM,EAAE,QAAQ,CAAC,wBAAwB;QACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,wBAAwB;QAChD,KAAK,EAAE,4BAA4B;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAAC,KAG9D;IACC,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxD,OAAO;QACL,UAAU,EAAE,oCAAoC,CAAC;YAC/C,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAC7B,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY;SACtC,CAAC;QACF,oBAAoB,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB;KAC/D,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAKlD;IACC,OAAO,uDAAuD,CAAC;QAC7D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE;YACL,MAAM,wCAAwC,CAAC;gBAC7C,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC;SACH;QACD,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAKvD;IACC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,OAAO,wCAAwC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CACH,CAAC;IACF,OAAO,uDAAuD,CAAC;QAC7D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK;QACL,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  type AccessEvent,\n  type AccessManifest,\n  accessManifestCheckpointFromManifest,\n  type ContainerAccessManifestState,\n  type ContainerKekRecipientTarget,\n  type ContainerKeyEpoch,\n  type ContainerKeyWrap,\n  compareCanonicalStrings,\n  computeContainerKekKeyringHash,\n  computeContainerKekRecipientTargetHash,\n  computeContainerKeyEpochHash,\n} from \"@tearleads/crypto\";\nimport type { ContainerMutationResponse } from \"@tearleads/validators/response\";\nimport { canonicalKeyingJsonString } from \"../../keying/canonicalJson\";\nimport {\n  advanceLocallyAcknowledgedAccessManifestHeadsAtomically,\n  type LocallyAcknowledgedAccessManifestHead,\n} from \"../../persistence/keyingCheckpoints/locallyAcknowledgedCheckpointPersistence\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\n\nexport interface AuthoredContainerMutationHead {\n  readonly body: object;\n  readonly containerId: string;\n  readonly event: AccessEvent;\n  readonly eventHash: string;\n  readonly keyEpoch: ContainerKeyEpoch;\n  readonly manifest: AccessManifest;\n  readonly manifestHash: string;\n  /**\n   * The keyring the epoch already had, for mutations that keep their epoch.\n   * Its artifact is immutable, so the response must echo exactly this.\n   */\n  readonly previousKeyring?: Record<string, unknown> | null | undefined;\n  readonly state: ContainerAccessManifestState;\n  readonly wraps: readonly ContainerKeyWrap[];\n}\n\nfunction assertCanonicalMatch(input: {\n  readonly actual: unknown;\n  readonly expected: unknown;\n  readonly label: string;\n}): void {\n  if (\n    canonicalKeyingJsonString(input.actual, `${input.label} response`) !==\n    canonicalKeyingJsonString(input.expected, `${input.label} plan`)\n  ) {\n    throw new Error(`Container mutation response ${input.label} mismatch`);\n  }\n}\n\nfunction sortedCanonicalValues<T>(values: readonly T[], label: string): T[] {\n  return [...values].sort((left, right) =>\n    compareCanonicalStrings(\n      canonicalKeyingJsonString(left, label),\n      canonicalKeyingJsonString(right, label),\n    ),\n  );\n}\n\nfunction expectedRecipientTargets(\n  wraps: readonly ContainerKeyWrap[],\n): ContainerKekRecipientTarget[] {\n  return sortedCanonicalValues(\n    wraps.map((wrap) => ({\n      recipientId: wrap.recipientId,\n      recipientKeyEpochId: wrap.recipientKeyEpochId,\n      recipientKeyFingerprint: wrap.recipientKeyFingerprint,\n      recipientKind: wrap.recipientKind,\n    })),\n    \"recipient target\",\n  );\n}\n\nfunction assertResponseIdentity(\n  plan: AuthoredContainerMutationHead,\n  response: ContainerMutationResponse,\n): void {\n  if (\n    response.containerId !== plan.containerId ||\n    response.organizationId !== plan.state.organizationId ||\n    response.parentId !== plan.state.parentContainerId\n  ) {\n    throw new Error(\"Container mutation response object identity mismatch\");\n  }\n  // The top-level slot column is what local system-container lookups key on,\n  // so it must echo the slot this client signed into the manifest state; an\n  // omitted slot is the server's spelling of null.\n  if ((response.systemSlot ?? null) !== plan.state.systemSlot) {\n    throw new Error(\"Container mutation response system slot mismatch\");\n  }\n  if (\n    response.manifestHead.epoch !== plan.state.epoch ||\n    response.manifestHead.manifestHash !== plan.manifestHash ||\n    response.accessManifest.manifestHash !== plan.manifestHash\n  ) {\n    throw new Error(\"Container mutation response manifest head mismatch\");\n  }\n  if (\n    response.containerKek.containerId !== plan.containerId ||\n    response.containerKek.accessManifestHash !== plan.manifestHash ||\n    response.containerKek.containerKeyEpochId !== plan.keyEpoch.id ||\n    response.containerKek.containerKeyEpoch !== plan.keyEpoch.keyEpoch\n  ) {\n    throw new Error(\"Container mutation response KEK identity mismatch\");\n  }\n}\n\n/** A rotation body commits a keyring hash; other bodies do not. */\nfunction readOptionalKeyringHash(body: object): string | null {\n  const value = Reflect.get(body, \"keyringHash\");\n  return typeof value === \"string\" ? value : null;\n}\n\n/**\n * The response's keyring must be the one this client's own signed event\n * committed to. Without this a server could echo a substituted snapshot and\n * have it acknowledged into durable local state — the acknowledgement is the\n * moment the response becomes trusted, so the commitment is checked here.\n */\nasync function assertAcknowledgedKeyring(\n  plan: AuthoredContainerMutationHead,\n  response: ContainerMutationResponse,\n): Promise<void> {\n  const committedHash = readOptionalKeyringHash(plan.body);\n  const keyring = response.containerKek.keyring;\n  if (committedHash === null) {\n    // A non-rotating mutation keeps its epoch, so the echoed keyring must be\n    // the immutable artifact that epoch already had. Accepting anything else\n    // would let a server null or substitute the snapshot in the response that\n    // becomes the next writer projection.\n    const expected = plan.previousKeyring ?? null;\n    if (expected === null) {\n      // The epoch had no keyring, so the response must not invent one: an\n      // injected snapshot would become the next writer projection's history.\n      if (keyring) {\n        throw new Error(\n          \"Container mutation response added a keyring to an unchanged epoch\",\n        );\n      }\n      return;\n    }\n    if (!keyring) {\n      throw new Error(\n        \"Container mutation response dropped its unchanged keyring\",\n      );\n    }\n    if (\n      (await computeContainerKekKeyringHash(keyring)) !==\n      (await computeContainerKekKeyringHash(expected))\n    ) {\n      throw new Error(\n        \"Container mutation response replaced its unchanged keyring\",\n      );\n    }\n    return;\n  }\n  if (!keyring) {\n    throw new Error(\"Container mutation response is missing its keyring\");\n  }\n  if ((await computeContainerKekKeyringHash(keyring)) !== committedHash) {\n    throw new Error(\n      \"Container mutation response keyring does not match its signed event\",\n    );\n  }\n}\n\nasync function assertResponseContent(\n  plan: AuthoredContainerMutationHead,\n  response: ContainerMutationResponse,\n): Promise<void> {\n  assertCanonicalMatch({\n    actual: response.accessManifest.event.event,\n    expected: plan.event,\n    label: \"event\",\n  });\n  assertCanonicalMatch({\n    actual: response.accessManifest.event.body,\n    expected: plan.body,\n    label: \"event body\",\n  });\n  if (response.accessManifest.event.eventHash !== plan.eventHash) {\n    throw new Error(\"Container mutation response event hash mismatch\");\n  }\n  assertCanonicalMatch({\n    actual: response.accessManifest.manifest,\n    expected: plan.manifest,\n    label: \"manifest\",\n  });\n  assertCanonicalMatch({\n    actual: response.accessManifest.state,\n    expected: plan.state,\n    label: \"state\",\n  });\n  assertCanonicalMatch({\n    actual: response.containerKek.keyEpoch,\n    expected: plan.keyEpoch,\n    label: \"key epoch\",\n  });\n  await assertAcknowledgedKeyring(plan, response);\n  assertCanonicalMatch({\n    actual: sortedCanonicalValues(response.containerKek.wraps, \"response wrap\"),\n    expected: sortedCanonicalValues(plan.wraps, \"planned wrap\"),\n    label: \"wraps\",\n  });\n  const recipientTargets = expectedRecipientTargets(plan.wraps);\n  const responseTargets = sortedCanonicalValues(\n    response.containerKek.recipientTargets,\n    \"response recipient target\",\n  );\n  assertCanonicalMatch({\n    actual: responseTargets,\n    expected: recipientTargets,\n    label: \"recipient targets\",\n  });\n  if (\n    response.containerKek.keyEpochHash !==\n      (await computeContainerKeyEpochHash(plan.keyEpoch)) ||\n    response.containerKek.keyTargetHash !==\n      (await computeContainerKekRecipientTargetHash(recipientTargets)) ||\n    response.containerKek.parentContainerKeyEpochId !==\n      plan.keyEpoch.parentContainerKeyEpochId\n  ) {\n    throw new Error(\"Container mutation response KEK commitment mismatch\");\n  }\n  assertCanonicalMatch({\n    actual: response.referencedPrincipalHeads,\n    expected: plan.manifest.referencedPrincipalHeads,\n    label: \"referenced principal heads\",\n  });\n}\n\nexport async function locallyAcknowledgedContainerMutationHead(input: {\n  readonly plan: AuthoredContainerMutationHead;\n  readonly response: ContainerMutationResponse;\n}): Promise<LocallyAcknowledgedAccessManifestHead> {\n  assertResponseIdentity(input.plan, input.response);\n  await assertResponseContent(input.plan, input.response);\n  return {\n    checkpoint: accessManifestCheckpointFromManifest({\n      manifest: input.plan.manifest,\n      manifestHash: input.plan.manifestHash,\n    }),\n    previousManifestHash: input.plan.manifest.previousManifestHash,\n  };\n}\n\n/** Correlates an API acknowledgement to the locally signed plan before pinning. */\nexport async function acknowledgeContainerMutation(input: {\n  readonly execSql: ExecSql;\n  readonly plan: AuthoredContainerMutationHead;\n  readonly response: ContainerMutationResponse;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<boolean> {\n  return advanceLocallyAcknowledgedAccessManifestHeadsAtomically({\n    execSql: input.execSql,\n    heads: [\n      await locallyAcknowledgedContainerMutationHead({\n        plan: input.plan,\n        response: input.response,\n      }),\n    ],\n    stillCurrent: input.stillCurrent,\n  });\n}\n\n/** Correlates and advances a complete authored mutation batch atomically. */\nexport async function acknowledgeContainerMutationBatch(input: {\n  readonly execSql: ExecSql;\n  readonly plans: readonly AuthoredContainerMutationHead[];\n  readonly responses: readonly ContainerMutationResponse[];\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<boolean> {\n  if (input.plans.length !== input.responses.length) {\n    throw new Error(\"Container mutation acknowledgement batch is incomplete\");\n  }\n  const heads = await Promise.all(\n    input.plans.map(async (plan, index) => {\n      const response = input.responses[index];\n      if (!response) {\n        throw new Error(\n          \"Container mutation acknowledgement batch is incomplete\",\n        );\n      }\n      return locallyAcknowledgedContainerMutationHead({ plan, response });\n    }),\n  );\n  return advanceLocallyAcknowledgedAccessManifestHeadsAtomically({\n    execSql: input.execSql,\n    heads,\n    stillCurrent: input.stillCurrent,\n  });\n}\n"]}

package/data/documents/blob/shared/projection.js

@@ -1,9 +1,9 @@
 import { BLOB_CONTENT_KEY_WRAP_SUITE, wrapContentKey, } from "../../../../internal/crypto/index.js";
 import { bytesToBase64 } from "../../../../internal/encoding/index.js";
-import { documentContainerProjections } from "../../../keyingProjectionVerification/documentContainerProjections.js";
-import { assertDocumentKekPathsCurrent } from "../../shared/containerKekCurrency.js";
-import { readLinkedContainerIdsFromDocumentManifest, unwrapContainerKekPath, verifiedDocumentWrapTargets, } from "../../shared/projection.js";
-import { unwrapContentKeyTargetForKind } from "../../shared/projectionContentKeys.js";
+import { documentContainerProjections } from "../../../keyingProjectionVerification/document/documentContainerProjections.js";
+import { assertDocumentKekPathsCurrent } from "../../shared/containerKek/containerKekCurrency.js";
+import { readLinkedContainerIdsFromDocumentManifest, unwrapContainerKekPath, verifiedDocumentWrapTargets, } from "../../shared/projection/index.js";
+import { unwrapContentKeyTargetForKind } from "../../shared/projection/projectionContentKeys.js";
 import { assertEqualBytes, normalizeDocumentKekTargetResponse, } from "../../shared/readers.js";
 import { projectionVerificationOptions, } from "../../shared/types.js";
 import { sortBlobTargets } from "./readers.js";

package/data/documents/blob/shared/projection.js.map

@@ -1 +1 @@
-{"version":3,"file":"projection.js","sourceRoot":"","sources":["projection.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAE3B,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAMpD,OAAO,EAAE,4BAA4B,EAAE,MAAM,oEAAoE,CAAC;AAElH,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EACL,0CAA0C,EAC1C,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EACL,gBAAgB,EAChB,kCAAkC,GACnC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,SAAS,cAAc,CACrB,KAAgD,EAChD,OAA4C;IAE5C,OAAO,eAAe,CACpB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,MAAM;KACV,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6CAA6C,CAAC,KAI7D;IACC,OAAO,cAAc,CACnB,KAAK,EACL,2BAA2B,CAAC;QAC1B,kBAAkB,EAAE,0CAA0C,CAC5D,KAAK,CAAC,gBAAgB,CACvB;QACD,aAAa,EAAE,kCAAkC,CAC/C,KAAK,CAAC,gBAAgB,CAAC,kBAAkB,CAC1C;QACD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,KAAK,UAAU,oBAAoB,CACjC,KAIiC;IAEjC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEpD,KAAK,MAAM,UAAU,IAAI,4BAA4B,CACnD,KAAK,CAAC,gBAAgB,CACvB,EAAE,CAAC;QACF,MAAM,cAAc,GAAG,MAAM,sBAAsB,CAAC;YAClD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU;YACV,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,6BAA6B,CAAC,KAAK,CAAC;SACxC,CAAC,CAAC;QAEH,KAAK,MAAM,CAAC,mBAAmB,EAAE,WAAW,CAAC,IAAI,cAAc,EAAE,CAAC;YAChE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACxD,IAAI,QAAQ,EAAE,CAAC;gBACb,gBAAgB,CACd,QAAQ,EACR,WAAW,EACX,4DAA4D,CAC7D,CAAC;gBACF,SAAS;YACX,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAQiC;IAEjC,6BAA6B,CAC3B,KAAK,CAAC,gBAAgB,EACtB,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAC3D,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC;QAC/C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,GAAG,6BAA6B,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC,GAAG,CAChB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACjC,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAChE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,8CAA8C,MAAM,CAAC,mBAAmB,EAAE,CAC3E,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE;YAChE,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;SAChD,CAAC,CAAC;QACH,OAAO;YACL,GAAG,MAAM;YACT,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC;YAC7C,gBAAgB,EAAE;gBAChB,KAAK,EAAE,2BAA2B;gBAClC,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;aAC9B;SACF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAKzC;IACC,OAAO,6BAA6B,CAAC;QACnC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAUiC;IAEjC,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC;QAC/C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,GAAG,6BAA6B,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IACH,IAAI,UAAU,GAAsB,IAAI,CAAC;IACzC,MAAM,iBAAiB,GAAG,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAC7D,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,iBAAiB;QAC9C,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAC3C,CAAC;IAEF,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QACrE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC;YACjD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY;YACZ,eAAe,EAAE,KAAK,CAAC,gBAAgB,CAAC,eAAe;YACvD,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,UAAU,EAAE,CAAC;YACf,gBAAgB,CACd,UAAU,EACV,SAAS,EACT,qDAAqD,CACtD,CAAC;YACF,SAAS;QACX,CAAC;QACD,UAAU,GAAG,SAAS,CAAC;IACzB,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import {\n  BLOB_CONTENT_KEY_WRAP_SUITE,\n  type DocumentContentKeyTarget,\n  wrapContentKey,\n} from \"@tearleads/crypto\";\nimport { bytesToBase64 } from \"@tearleads/encoding\";\nimport type { BlobContentKeyTargetEnvelopeRequest } from \"@tearleads/validators/request\";\nimport type {\n  BlobContentKeyBundleResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport { documentContainerProjections } from \"../../../keyingProjectionVerification/documentContainerProjections\";\nimport type { ExecSql } from \"../../../sqlite/sqlSchema\";\nimport { assertDocumentKekPathsCurrent } from \"../../shared/containerKekCurrency\";\nimport {\n  readLinkedContainerIdsFromDocumentManifest,\n  unwrapContainerKekPath,\n  verifiedDocumentWrapTargets,\n} from \"../../shared/projection\";\nimport { unwrapContentKeyTargetForKind } from \"../../shared/projectionContentKeys\";\nimport {\n  assertEqualBytes,\n  normalizeDocumentKekTargetResponse,\n} from \"../../shared/readers\";\nimport {\n  type ProjectionVerificationOptions,\n  projectionVerificationOptions,\n} from \"../../shared/types\";\nimport { sortBlobTargets } from \"./readers\";\nimport type { BlobContentKeyTarget, BlobEncryptedBytesHeader } from \"./types\";\n\nfunction blobTargetsFor(\n  input: { bindingId: string; documentId: string },\n  targets: readonly DocumentContentKeyTarget[],\n): BlobContentKeyTarget[] {\n  return sortBlobTargets(\n    targets.map((target) => ({\n      bindingId: input.bindingId,\n      documentId: input.documentId,\n      ...target,\n    })),\n  );\n}\n\n/**\n * The targets a blob content key may be wrapped to: the verified current\n * heads of the document's linked containers. The server list only names which\n * containers a bundle must cover.\n */\nexport function verifiedBlobWrapTargetsFromDocumentProjection(input: {\n  bindingId: string;\n  documentId: string;\n  writerProjection: DocumentWriterProjectionResponse;\n}): BlobContentKeyTarget[] {\n  return blobTargetsFor(\n    input,\n    verifiedDocumentWrapTargets({\n      linkedContainerIds: readLinkedContainerIdsFromDocumentManifest(\n        input.writerProjection,\n      ),\n      serverTargets: normalizeDocumentKekTargetResponse(\n        input.writerProjection.documentKekTargets,\n      ),\n      writerProjection: input.writerProjection,\n    }),\n  );\n}\n\n// Not collectContainerKeksForDocumentSync: the blob upload retry classifier\n// keys on the bare \"Container writer projection KEK… could not be unwrapped\"\n// message, which the sync collector would wrap with document-sync context.\nasync function collectContainerKeks(\n  input: {\n    execSql?: ExecSql | undefined;\n    secretKey: Uint8Array;\n    writerProjection: DocumentWriterProjectionResponse;\n  } & ProjectionVerificationOptions,\n): Promise<ReadonlyMap<string, Uint8Array>> {\n  const keksByEpochId = new Map<string, Uint8Array>();\n\n  for (const projection of documentContainerProjections(\n    input.writerProjection,\n  )) {\n    const projectionKeks = await unwrapContainerKekPath({\n      execSql: input.execSql,\n      projection,\n      secretKey: input.secretKey,\n      ...projectionVerificationOptions(input),\n    });\n\n    for (const [containerKeyEpochId, keyMaterial] of projectionKeks) {\n      const existing = keksByEpochId.get(containerKeyEpochId);\n      if (existing) {\n        assertEqualBytes(\n          existing,\n          keyMaterial,\n          \"Blob writer projection contains conflicting container KEKs\",\n        );\n        continue;\n      }\n      keksByEpochId.set(containerKeyEpochId, keyMaterial);\n    }\n  }\n\n  return keksByEpochId;\n}\n\nexport async function wrapBlobContentKey(\n  input: {\n    blobId: string;\n    contentKey: Uint8Array;\n    contentKeyEpoch: number;\n    execSql?: ExecSql | undefined;\n    secretKey: Uint8Array;\n    targets: readonly BlobContentKeyTarget[];\n    writerProjection: DocumentWriterProjectionResponse;\n  } & ProjectionVerificationOptions,\n): Promise<BlobContentKeyTargetEnvelopeRequest[]> {\n  assertDocumentKekPathsCurrent(\n    input.writerProjection,\n    new Set(input.targets.map((target) => target.containerId)),\n  );\n  const keksByEpochId = await collectContainerKeks({\n    execSql: input.execSql,\n    secretKey: input.secretKey,\n    writerProjection: input.writerProjection,\n    ...projectionVerificationOptions(input),\n  });\n\n  return Promise.all(\n    input.targets.map(async (target) => {\n      const targetKek = keksByEpochId.get(target.containerKeyEpochId);\n      if (!targetKek) {\n        throw new Error(\n          `Blob target KEK could not be unwrapped for ${target.containerKeyEpochId}`,\n        );\n      }\n\n      const wrapped = await wrapContentKey(input.contentKey, targetKek, {\n        kind: \"Blob\",\n        objectId: input.blobId,\n        contentKeyEpoch: input.contentKeyEpoch,\n        containerId: target.containerId,\n        containerKeyEpochId: target.containerKeyEpochId,\n      });\n      return {\n        ...target,\n        wrappedKey: bytesToBase64(wrapped.ciphertext),\n        wrappingMetadata: {\n          suite: BLOB_CONTENT_KEY_WRAP_SUITE,\n          iv: bytesToBase64(wrapped.iv),\n        },\n      };\n    }),\n  );\n}\n\nasync function unwrapBlobContentKeyTarget(input: {\n  blobId: string;\n  containerKek: Uint8Array;\n  contentKeyEpoch: number;\n  envelope: BlobContentKeyTargetEnvelopeRequest;\n}): Promise<Uint8Array> {\n  return unwrapContentKeyTargetForKind({\n    containerKek: input.containerKek,\n    contentKeyEpoch: input.contentKeyEpoch,\n    envelope: input.envelope,\n    kind: \"Blob\",\n    objectId: input.blobId,\n  });\n}\n\nexport async function unwrapBlobContentKey(\n  input: {\n    /** The blob being read; its wraps must be sealed to it. */\n    blobId: string;\n    contentKeyBundle: BlobContentKeyBundleResponse;\n    documentId: string;\n    encrypted: BlobEncryptedBytesHeader;\n    execSql?: ExecSql | undefined;\n    expectedBindingId: string;\n    secretKey: Uint8Array;\n    writerProjection: DocumentWriterProjectionResponse;\n  } & ProjectionVerificationOptions,\n): Promise<Uint8Array> {\n  const keksByEpochId = await collectContainerKeks({\n    execSql: input.execSql,\n    secretKey: input.secretKey,\n    writerProjection: input.writerProjection,\n    ...projectionVerificationOptions(input),\n  });\n  let contentKey: Uint8Array | null = null;\n  const attachmentTargets = input.contentKeyBundle.targets.filter(\n    (envelope) =>\n      envelope.bindingId === input.expectedBindingId &&\n      envelope.documentId === input.documentId,\n  );\n\n  if (attachmentTargets.length === 0) {\n    throw new Error(\"Blob content-key bundle is missing attachment target\");\n  }\n\n  for (const envelope of attachmentTargets) {\n    const containerKek = keksByEpochId.get(envelope.containerKeyEpochId);\n    if (!containerKek) {\n      continue;\n    }\n    const unwrapped = await unwrapBlobContentKeyTarget({\n      blobId: input.blobId,\n      containerKek,\n      contentKeyEpoch: input.contentKeyBundle.contentKeyEpoch,\n      envelope,\n    });\n    if (contentKey) {\n      assertEqualBytes(\n        contentKey,\n        unwrapped,\n        \"Blob content-key targets unwrap to conflicting keys\",\n      );\n      continue;\n    }\n    contentKey = unwrapped;\n  }\n\n  if (!contentKey) {\n    throw new Error(\"Blob content key could not be unwrapped\");\n  }\n  return contentKey;\n}\n"]}
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["projection.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAE3B,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAMpD,OAAO,EAAE,4BAA4B,EAAE,MAAM,6EAA6E,CAAC;AAE3H,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EACL,0CAA0C,EAC1C,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EACL,gBAAgB,EAChB,kCAAkC,GACnC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,SAAS,cAAc,CACrB,KAAgD,EAChD,OAA4C;IAE5C,OAAO,eAAe,CACpB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,MAAM;KACV,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6CAA6C,CAAC,KAI7D;IACC,OAAO,cAAc,CACnB,KAAK,EACL,2BAA2B,CAAC;QAC1B,kBAAkB,EAAE,0CAA0C,CAC5D,KAAK,CAAC,gBAAgB,CACvB;QACD,aAAa,EAAE,kCAAkC,CAC/C,KAAK,CAAC,gBAAgB,CAAC,kBAAkB,CAC1C;QACD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,KAAK,UAAU,oBAAoB,CACjC,KAIiC;IAEjC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEpD,KAAK,MAAM,UAAU,IAAI,4BAA4B,CACnD,KAAK,CAAC,gBAAgB,CACvB,EAAE,CAAC;QACF,MAAM,cAAc,GAAG,MAAM,sBAAsB,CAAC;YAClD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU;YACV,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,6BAA6B,CAAC,KAAK,CAAC;SACxC,CAAC,CAAC;QAEH,KAAK,MAAM,CAAC,mBAAmB,EAAE,WAAW,CAAC,IAAI,cAAc,EAAE,CAAC;YAChE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACxD,IAAI,QAAQ,EAAE,CAAC;gBACb,gBAAgB,CACd,QAAQ,EACR,WAAW,EACX,4DAA4D,CAC7D,CAAC;gBACF,SAAS;YACX,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAQiC;IAEjC,6BAA6B,CAC3B,KAAK,CAAC,gBAAgB,EACtB,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAC3D,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC;QAC/C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,GAAG,6BAA6B,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC,GAAG,CAChB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACjC,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAChE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,8CAA8C,MAAM,CAAC,mBAAmB,EAAE,CAC3E,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE;YAChE,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;SAChD,CAAC,CAAC;QACH,OAAO;YACL,GAAG,MAAM;YACT,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC;YAC7C,gBAAgB,EAAE;gBAChB,KAAK,EAAE,2BAA2B;gBAClC,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;aAC9B;SACF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAKzC;IACC,OAAO,6BAA6B,CAAC;QACnC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAUiC;IAEjC,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC;QAC/C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,GAAG,6BAA6B,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IACH,IAAI,UAAU,GAAsB,IAAI,CAAC;IACzC,MAAM,iBAAiB,GAAG,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAC7D,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,iBAAiB;QAC9C,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAC3C,CAAC;IAEF,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QACrE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC;YACjD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY;YACZ,eAAe,EAAE,KAAK,CAAC,gBAAgB,CAAC,eAAe;YACvD,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,UAAU,EAAE,CAAC;YACf,gBAAgB,CACd,UAAU,EACV,SAAS,EACT,qDAAqD,CACtD,CAAC;YACF,SAAS;QACX,CAAC;QACD,UAAU,GAAG,SAAS,CAAC;IACzB,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import {\n  BLOB_CONTENT_KEY_WRAP_SUITE,\n  type DocumentContentKeyTarget,\n  wrapContentKey,\n} from \"@tearleads/crypto\";\nimport { bytesToBase64 } from \"@tearleads/encoding\";\nimport type { BlobContentKeyTargetEnvelopeRequest } from \"@tearleads/validators/request\";\nimport type {\n  BlobContentKeyBundleResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport { documentContainerProjections } from \"../../../keyingProjectionVerification/document/documentContainerProjections\";\nimport type { ExecSql } from \"../../../sqlite/sqlSchema\";\nimport { assertDocumentKekPathsCurrent } from \"../../shared/containerKek/containerKekCurrency\";\nimport {\n  readLinkedContainerIdsFromDocumentManifest,\n  unwrapContainerKekPath,\n  verifiedDocumentWrapTargets,\n} from \"../../shared/projection\";\nimport { unwrapContentKeyTargetForKind } from \"../../shared/projection/projectionContentKeys\";\nimport {\n  assertEqualBytes,\n  normalizeDocumentKekTargetResponse,\n} from \"../../shared/readers\";\nimport {\n  type ProjectionVerificationOptions,\n  projectionVerificationOptions,\n} from \"../../shared/types\";\nimport { sortBlobTargets } from \"./readers\";\nimport type { BlobContentKeyTarget, BlobEncryptedBytesHeader } from \"./types\";\n\nfunction blobTargetsFor(\n  input: { bindingId: string; documentId: string },\n  targets: readonly DocumentContentKeyTarget[],\n): BlobContentKeyTarget[] {\n  return sortBlobTargets(\n    targets.map((target) => ({\n      bindingId: input.bindingId,\n      documentId: input.documentId,\n      ...target,\n    })),\n  );\n}\n\n/**\n * The targets a blob content key may be wrapped to: the verified current\n * heads of the document's linked containers. The server list only names which\n * containers a bundle must cover.\n */\nexport function verifiedBlobWrapTargetsFromDocumentProjection(input: {\n  bindingId: string;\n  documentId: string;\n  writerProjection: DocumentWriterProjectionResponse;\n}): BlobContentKeyTarget[] {\n  return blobTargetsFor(\n    input,\n    verifiedDocumentWrapTargets({\n      linkedContainerIds: readLinkedContainerIdsFromDocumentManifest(\n        input.writerProjection,\n      ),\n      serverTargets: normalizeDocumentKekTargetResponse(\n        input.writerProjection.documentKekTargets,\n      ),\n      writerProjection: input.writerProjection,\n    }),\n  );\n}\n\n// Not collectContainerKeksForDocumentSync: the blob upload retry classifier\n// keys on the bare \"Container writer projection KEK… could not be unwrapped\"\n// message, which the sync collector would wrap with document-sync context.\nasync function collectContainerKeks(\n  input: {\n    execSql?: ExecSql | undefined;\n    secretKey: Uint8Array;\n    writerProjection: DocumentWriterProjectionResponse;\n  } & ProjectionVerificationOptions,\n): Promise<ReadonlyMap<string, Uint8Array>> {\n  const keksByEpochId = new Map<string, Uint8Array>();\n\n  for (const projection of documentContainerProjections(\n    input.writerProjection,\n  )) {\n    const projectionKeks = await unwrapContainerKekPath({\n      execSql: input.execSql,\n      projection,\n      secretKey: input.secretKey,\n      ...projectionVerificationOptions(input),\n    });\n\n    for (const [containerKeyEpochId, keyMaterial] of projectionKeks) {\n      const existing = keksByEpochId.get(containerKeyEpochId);\n      if (existing) {\n        assertEqualBytes(\n          existing,\n          keyMaterial,\n          \"Blob writer projection contains conflicting container KEKs\",\n        );\n        continue;\n      }\n      keksByEpochId.set(containerKeyEpochId, keyMaterial);\n    }\n  }\n\n  return keksByEpochId;\n}\n\nexport async function wrapBlobContentKey(\n  input: {\n    blobId: string;\n    contentKey: Uint8Array;\n    contentKeyEpoch: number;\n    execSql?: ExecSql | undefined;\n    secretKey: Uint8Array;\n    targets: readonly BlobContentKeyTarget[];\n    writerProjection: DocumentWriterProjectionResponse;\n  } & ProjectionVerificationOptions,\n): Promise<BlobContentKeyTargetEnvelopeRequest[]> {\n  assertDocumentKekPathsCurrent(\n    input.writerProjection,\n    new Set(input.targets.map((target) => target.containerId)),\n  );\n  const keksByEpochId = await collectContainerKeks({\n    execSql: input.execSql,\n    secretKey: input.secretKey,\n    writerProjection: input.writerProjection,\n    ...projectionVerificationOptions(input),\n  });\n\n  return Promise.all(\n    input.targets.map(async (target) => {\n      const targetKek = keksByEpochId.get(target.containerKeyEpochId);\n      if (!targetKek) {\n        throw new Error(\n          `Blob target KEK could not be unwrapped for ${target.containerKeyEpochId}`,\n        );\n      }\n\n      const wrapped = await wrapContentKey(input.contentKey, targetKek, {\n        kind: \"Blob\",\n        objectId: input.blobId,\n        contentKeyEpoch: input.contentKeyEpoch,\n        containerId: target.containerId,\n        containerKeyEpochId: target.containerKeyEpochId,\n      });\n      return {\n        ...target,\n        wrappedKey: bytesToBase64(wrapped.ciphertext),\n        wrappingMetadata: {\n          suite: BLOB_CONTENT_KEY_WRAP_SUITE,\n          iv: bytesToBase64(wrapped.iv),\n        },\n      };\n    }),\n  );\n}\n\nasync function unwrapBlobContentKeyTarget(input: {\n  blobId: string;\n  containerKek: Uint8Array;\n  contentKeyEpoch: number;\n  envelope: BlobContentKeyTargetEnvelopeRequest;\n}): Promise<Uint8Array> {\n  return unwrapContentKeyTargetForKind({\n    containerKek: input.containerKek,\n    contentKeyEpoch: input.contentKeyEpoch,\n    envelope: input.envelope,\n    kind: \"Blob\",\n    objectId: input.blobId,\n  });\n}\n\nexport async function unwrapBlobContentKey(\n  input: {\n    /** The blob being read; its wraps must be sealed to it. */\n    blobId: string;\n    contentKeyBundle: BlobContentKeyBundleResponse;\n    documentId: string;\n    encrypted: BlobEncryptedBytesHeader;\n    execSql?: ExecSql | undefined;\n    expectedBindingId: string;\n    secretKey: Uint8Array;\n    writerProjection: DocumentWriterProjectionResponse;\n  } & ProjectionVerificationOptions,\n): Promise<Uint8Array> {\n  const keksByEpochId = await collectContainerKeks({\n    execSql: input.execSql,\n    secretKey: input.secretKey,\n    writerProjection: input.writerProjection,\n    ...projectionVerificationOptions(input),\n  });\n  let contentKey: Uint8Array | null = null;\n  const attachmentTargets = input.contentKeyBundle.targets.filter(\n    (envelope) =>\n      envelope.bindingId === input.expectedBindingId &&\n      envelope.documentId === input.documentId,\n  );\n\n  if (attachmentTargets.length === 0) {\n    throw new Error(\"Blob content-key bundle is missing attachment target\");\n  }\n\n  for (const envelope of attachmentTargets) {\n    const containerKek = keksByEpochId.get(envelope.containerKeyEpochId);\n    if (!containerKek) {\n      continue;\n    }\n    const unwrapped = await unwrapBlobContentKeyTarget({\n      blobId: input.blobId,\n      containerKek,\n      contentKeyEpoch: input.contentKeyBundle.contentKeyEpoch,\n      envelope,\n    });\n    if (contentKey) {\n      assertEqualBytes(\n        contentKey,\n        unwrapped,\n        \"Blob content-key targets unwrap to conflicting keys\",\n      );\n      continue;\n    }\n    contentKey = unwrapped;\n  }\n\n  if (!contentKey) {\n    throw new Error(\"Blob content key could not be unwrapped\");\n  }\n  return contentKey;\n}\n"]}

package/data/documents/shared/containerKek/containerKekCurrency.d.ts

@@ -0,0 +1,22 @@
+import type { ContainerKekResponse, DocumentWriterProjectionResponse } from "../../../../internal/validators/response/index.js";
+/**
+ * A write path cites a retired ancestor key epoch. Retryable: this writer's
+ * next sync pass, or a peer, re-keys the stale container parent-first.
+ */
+export declare class ContainerKekRepairRequiredError extends Error {
+    readonly containerId: string;
+    constructor(containerId: string, message?: string);
+}
+/**
+ * The stale container is one this writer cannot re-key: it holds no key for it
+ * or lacks write access on its path. It must not be handed that key either — a
+ * stale container's KEK may be held by a revoked ancestor member — so the
+ * repair belongs to a member with access at or above the container, normally
+ * the device that rotated the ancestor. Queued writes wait for that repair.
+ */
+export declare class ContainerKekRepairInaccessibleError extends ContainerKekRepairRequiredError {
+    constructor(containerId: string);
+}
+/** Recovery can open retired keys; new ciphertext must not use their stale descendants. */
+export declare function assertContainerKekPathCurrent(keks: readonly Pick<ContainerKekResponse, "containerId" | "containerKeyEpochId" | "parentContainerKeyEpochId">[]): void;
+export declare function assertDocumentKekPathsCurrent(projection: DocumentWriterProjectionResponse, containerIds?: ReadonlySet<string>): void;

package/data/documents/shared/containerKek/containerKekEntryVerification.js

@@ -0,0 +1,15 @@
+import { verifyContainerKekKeyringEntry, } from "../../../../internal/crypto/index.js";
+/** Bound outstanding key derivations and yield between batches on cold histories. */
+export async function verifyContainerKekEntries(containerId, entries) {
+    const batchSize = 16;
+    for (let start = 0; start < entries.length; start += batchSize) {
+        await Promise.all(entries.slice(start, start + batchSize).map((entry, ordinal) => verifyContainerKekKeyringEntry({
+            containerId,
+            entry,
+            keyEpoch: start + ordinal + 1,
+        })));
+        if (start + batchSize < entries.length)
+            await new Promise((resolve) => setTimeout(resolve, 0));
+    }
+}
+//# sourceMappingURL=containerKekEntryVerification.js.map

package/data/documents/shared/containerKek/containerKekLogFetch.d.ts

@@ -0,0 +1,18 @@
+import type { ContainerKekLogResponse } from "../../../../internal/validators/response/index.js";
+import type { AggregatedContainerKekLog } from "./keyringLogWalk.js";
+/**
+ * Fetches the container's complete rotation log across pages. The endpoint
+ * bounds each page, so a long-lived container needs several round trips; the
+ * cursor is the last served epoch number.
+ */
+export declare function fetchContainerKekLog(input: {
+    apiClient: {
+        getContainerKekLog(containerId: string, options?: {
+            readonly afterKeyEpoch?: number;
+            readonly keyringForEpoch?: number;
+        }): Promise<ContainerKekLogResponse | null>;
+    };
+    containerId: string;
+    /** Ask for one historical keyring by epoch number; blobs are never bulk. */
+    keyringForEpoch?: number | undefined;
+}): Promise<AggregatedContainerKekLog>;

package/data/documents/shared/containerKek/containerKekLogFetch.js

@@ -0,0 +1,76 @@
+import { CONTAINER_KEK_LOG_PAGE_LIMIT, MAX_CONTAINER_KEY_EPOCH, } from "../../../../internal/validators/util/index.js";
+/**
+ * Binds one page to what was actually asked for.
+ *
+ * Every page is checked, not just the last: the aggregate is handed to a
+ * rebuild that trusts its shape, so a page for another container — or one
+ * replaying epochs at or below the cursor — would splice foreign or duplicate
+ * history into the walk before any commitment check could notice the ordering
+ * was wrong.
+ */
+function assertLogPageMatchesRequest(page, containerId, afterKeyEpoch) {
+    if (page.containerId !== containerId) {
+        throw new Error("Container KEK log page is for the wrong container");
+    }
+    let previousKeyEpoch = afterKeyEpoch;
+    for (const epoch of page.epochs) {
+        if (epoch.containerKeyEpoch <= previousKeyEpoch) {
+            throw new Error("Container KEK log page is out of order");
+        }
+        previousKeyEpoch = epoch.containerKeyEpoch;
+    }
+}
+/**
+ * Fetches the container's complete rotation log across pages. The endpoint
+ * bounds each page, so a long-lived container needs several round trips; the
+ * cursor is the last served epoch number.
+ */
+export async function fetchContainerKekLog(input) {
+    const epochs = [];
+    let afterKeyEpoch = 0;
+    let options = input.keyringForEpoch === undefined
+        ? {}
+        : { keyringForEpoch: input.keyringForEpoch };
+    // A hostile server could claim `hasMore` forever. Two independent caps
+    // bound the walk: the protocol's lifetime rotation ceiling, and a page
+    // budget — a server that advances one epoch per page cannot force 65,536
+    // round trips, because a non-final page must be full.
+    const maxPages = Math.ceil(MAX_CONTAINER_KEY_EPOCH / CONTAINER_KEK_LOG_PAGE_LIMIT) + 1;
+    let pages = 0;
+    while (afterKeyEpoch < MAX_CONTAINER_KEY_EPOCH) {
+        pages += 1;
+        if (pages > maxPages) {
+            throw new Error("Container KEK log exceeds its page budget");
+        }
+        const page = await input.apiClient.getContainerKekLog(input.containerId, options);
+        if (!page) {
+            throw new Error("Container KEK log is unavailable");
+        }
+        if (page.hasMore && page.epochs.length < CONTAINER_KEK_LOG_PAGE_LIMIT) {
+            // Only the final page may be short; a partial page claiming more is a
+            // server stretching the walk across extra round trips.
+            throw new Error("Container KEK log page is short but claims more");
+        }
+        assertLogPageMatchesRequest(page, input.containerId, afterKeyEpoch);
+        epochs.push(...page.epochs);
+        if (epochs.length > MAX_CONTAINER_KEY_EPOCH) {
+            throw new Error("Container KEK log exceeds the maximum key epoch");
+        }
+        const lastEpoch = page.epochs.at(-1)?.containerKeyEpoch;
+        // Validate before returning, so a final page cannot smuggle an
+        // out-of-range epoch past the ceiling check.
+        if (lastEpoch !== undefined && lastEpoch > MAX_CONTAINER_KEY_EPOCH) {
+            throw new Error("Container KEK log exceeds the maximum key epoch");
+        }
+        if (!page.hasMore) {
+            return { containerId: page.containerId, epochs };
+        }
+        if (lastEpoch === undefined || lastEpoch <= afterKeyEpoch) {
+            throw new Error("Container KEK log page did not advance");
+        }
+        afterKeyEpoch = lastEpoch;
+        options = { ...options, afterKeyEpoch: lastEpoch };
+    }
+    throw new Error("Container KEK log exceeds the maximum key epoch");
+}
+//# sourceMappingURL=containerKekLogFetch.js.map

package/data/documents/shared/containerKek/containerKekPath.js

@@ -0,0 +1,265 @@
+import { isPlainObject as isPlainRecord } from "../../../../internal/validators/isPlainObject.js";
+import { unwrapKeyEnvelopesWithPrincipalPolicies } from "../../../principals/principalPolicyCrypto.js";
+import { normalizeContainerKeyWrap, readManifestContainerId, readRecordNullableString, readRecordPositiveInteger, readRecordString, } from "../readers.js";
+import { assertUnwrappedContainerKekMatchesMaterialId, projectedUnreachablePredecessorEpochIds, projectionKekLabel, unwrapKeyringContainerKeksAtIndex, } from "./containerKekPathHistory.js";
+import { verifyContainerKekPathProjection, } from "./containerKekPathVerification.js";
+import { assertSignedWrappingPublicKey, unwrapContainerKekFromParentWrap, } from "./containerKekWrapping.js";
+function assertProjectionKekMatchesPath(projection, index) {
+    const manifest = projection.path[index];
+    const kek = projection.containerKeks[index];
+    if (!manifest || !kek) {
+        throw new Error("Container writer projection path and KEKs are incomplete");
+    }
+    if (readManifestContainerId(manifest) !== kek.containerId) {
+        throw new Error(`${projectionKekLabel(index)} container is inconsistent`);
+    }
+    if (kek.accessManifestHash !== manifest.manifestHash) {
+        throw new Error(`${projectionKekLabel(index)} manifest is stale`);
+    }
+    if (!isPlainRecord(kek.keyEpoch)) {
+        throw new Error(`${projectionKekLabel(index)} key epoch is invalid`);
+    }
+    if (readRecordString(kek.keyEpoch, "id", projectionKekLabel(index)) !==
+        kek.containerKeyEpochId ||
+        readRecordString(kek.keyEpoch, "containerId", projectionKekLabel(index)) !==
+            kek.containerId ||
+        readRecordPositiveInteger(kek.keyEpoch, "keyEpoch", projectionKekLabel(index)) !== kek.containerKeyEpoch ||
+        readRecordNullableString(kek.keyEpoch, "parentContainerKeyEpochId", projectionKekLabel(index)) !== kek.parentContainerKeyEpochId) {
+        throw new Error(`${projectionKekLabel(index)} key epoch is inconsistent`);
+    }
+}
+async function unwrapContainerKekFromPrincipalWraps(input) {
+    const envelopes = input.wraps
+        .filter((wrap) => wrap.recipientKind !== "container")
+        .map((wrap) => ({
+        keyFingerprint: wrap.recipientKeyFingerprint,
+        kemCipherText: wrap.kemCipherText,
+        wrappedKey: wrap.wrappedKey,
+    }));
+    if (envelopes.length === 0) {
+        return null;
+    }
+    try {
+        return await unwrapKeyEnvelopesWithPrincipalPolicies({
+            envelopes,
+            execSql: input.execSql,
+            secretKey: input.secretKey,
+        });
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Admits caller-supplied keys that the projection also names.
+ *
+ * The projection match is deliberate: a seeded key is trusted only once its
+ * epoch is one this projection actually carries, which is what makes the
+ * material-id check below meaningful. Production seeds this with the epoch it
+ * just minted (see `registerIdentity`), never with recovered history — history
+ * arrives through the sealed keyring on each path instead, and is shared across
+ * authorizing paths through the common `keksByEpochId` map.
+ */
+async function seedKnownContainerKeks(input) {
+    const keksByEpochId = new Map();
+    for (const [containerKeyEpochId, keyMaterial] of input.knownContainerKeks ??
+        new Map()) {
+        const projected = findProjectedContainerKek(input.projection, containerKeyEpochId);
+        if (!projected) {
+            continue;
+        }
+        await assertUnwrappedContainerKekMatchesMaterialId({
+            label: projected.label,
+            kek: projected.kek,
+            keyMaterial,
+        });
+        await assertSignedWrappingPublicKey(input.projection, projected.index, keyMaterial);
+        keksByEpochId.set(containerKeyEpochId, {
+            containerId: projected.kek.containerId,
+            keyEpochHash: projected.kek.keyEpochHash,
+            keyMaterial,
+        });
+    }
+    return keksByEpochId;
+}
+function findProjectedContainerKek(projection, containerKeyEpochId) {
+    for (const [index, current] of projection.containerKeks.entries()) {
+        if (current.containerKeyEpochId === containerKeyEpochId) {
+            return { index, kek: current, label: projectionKekLabel(index) };
+        }
+    }
+    return null;
+}
+function successorKeyMaterial(keksByEpochId, kek, unwrapped) {
+    return keksByEpochId.get(kek.containerKeyEpochId)?.keyMaterial ?? unwrapped;
+}
+async function unwrapContainerKekAtIndex(input) {
+    assertProjectionKekMatchesPath(input.projection, input.index);
+    const kek = input.projection.containerKeks[input.index];
+    const currentManifest = input.projection.path[input.index];
+    if (!kek || !currentManifest) {
+        throw new Error(`${projectionKekLabel(input.index)} is missing`);
+    }
+    const wraps = [];
+    for (const rawWrap of kek.wraps) {
+        const wrap = normalizeContainerKeyWrap(rawWrap);
+        if (wrap.containerKeyEpochId === kek.containerKeyEpochId) {
+            wraps.push(wrap);
+        }
+    }
+    if (wraps.length !== kek.wraps.length) {
+        throw new Error(`${projectionKekLabel(input.index)} contains a stale wrap`);
+    }
+    const unwrapped = (await unwrapContainerKekFromPrincipalWraps({
+        execSql: input.execSql,
+        secretKey: input.secretKey,
+        wraps,
+    })) ??
+        (await unwrapContainerKekFromParentWrap({
+            label: projectionKekLabel(input.index),
+            parentContainerKeyEpochId: kek.parentContainerKeyEpochId,
+            parentKeksByEpochId: input.keksByEpochId,
+            wraps,
+        }));
+    if (unwrapped) {
+        await assertUnwrappedContainerKekMatchesMaterialId({
+            label: projectionKekLabel(input.index),
+            kek,
+            keyMaterial: unwrapped,
+        });
+        await assertSignedWrappingPublicKey(input.projection, input.index, unwrapped);
+        input.keksByEpochId.set(kek.containerKeyEpochId, {
+            containerId: kek.containerId,
+            keyEpochHash: kek.keyEpochHash,
+            keyMaterial: unwrapped,
+        });
+    }
+    try {
+        // Open the keyring immediately so descendants pinned to an older parent
+        // epoch can still unwrap during the same path walk.
+        await unwrapKeyringContainerKeksAtIndex({
+            currentManifest,
+            index: input.index,
+            kek,
+            keksByEpochId: input.keksByEpochId,
+            successorKeyMaterial: successorKeyMaterial(input.keksByEpochId, kek, unwrapped),
+            verifiedByHash: input.verifiedByHash,
+            verifyKeyringCommitment: input.verifyBridgeCommitment,
+        });
+        return null;
+    }
+    catch (error) {
+        // Historical keyring damage must not discard an independently verified
+        // current KEK. If the target still cannot be reached, the caller
+        // surfaces this integrity error; the bridge log remains the recovery
+        // path for the orphaned epochs.
+        return {
+            containerId: kek.containerId,
+            error: error instanceof Error
+                ? error
+                : new Error("Container predecessor KEK recovery failed", {
+                    cause: error,
+                }),
+            unreachableEpochIds: projectedUnreachablePredecessorEpochIds({
+                kek,
+                keksByEpochId: input.keksByEpochId,
+            }),
+        };
+    }
+}
+function recordPredecessorFailure(failuresByEpochId, unattributedFailuresByContainerId, failure) {
+    if (failure.unreachableEpochIds.length === 0) {
+        if (!unattributedFailuresByContainerId.has(failure.containerId)) {
+            unattributedFailuresByContainerId.set(failure.containerId, failure.error);
+        }
+        return;
+    }
+    for (const containerKeyEpochId of failure.unreachableEpochIds) {
+        if (!failuresByEpochId.has(containerKeyEpochId)) {
+            failuresByEpochId.set(containerKeyEpochId, failure.error);
+        }
+    }
+}
+/**
+ * No wrap on the path opens the target for this reader, and no recorded
+ * history failure explains it: the reader simply holds no key here. Distinct
+ * from keyring damage, which rethrows the underlying integrity error instead.
+ */
+export class ContainerKekTargetUnreachableError extends Error {
+    containerId;
+    constructor(containerId, label) {
+        super(`${label} could not be unwrapped`);
+        this.containerId = containerId;
+        this.name = "ContainerKekTargetUnreachableError";
+    }
+}
+function assertTargetKekUnwrapped(input) {
+    const targetKek = input.projection.containerKeks.at(-1);
+    if (!targetKek ||
+        input.keyMaterialByEpochId.has(targetKek.containerKeyEpochId)) {
+        return;
+    }
+    for (let index = input.projection.containerKeks.length - 1; index >= 0; index -= 1) {
+        const pathKek = input.projection.containerKeks[index];
+        if (!pathKek) {
+            continue;
+        }
+        const predecessorFailure = input.predecessorFailuresByEpochId.get(pathKek.containerKeyEpochId) ??
+            (pathKek.parentContainerKeyEpochId
+                ? input.predecessorFailuresByEpochId.get(pathKek.parentContainerKeyEpochId)
+                : undefined) ??
+            input.unattributedPredecessorFailuresByContainerId.get(pathKek.containerId);
+        if (predecessorFailure) {
+            throw predecessorFailure;
+        }
+    }
+    throw new ContainerKekTargetUnreachableError(targetKek.containerId, projectionKekLabel(input.projection.containerKeks.length - 1));
+}
+export async function unwrapContainerKekPathWithHistoryFailures(rawInput) {
+    // Kept for the keyring checks, which anchor to the verified lineage.
+    const input = {
+        ...rawInput,
+        verifiedByHash: rawInput.verifiedByHash ??
+            new Map(),
+    };
+    await verifyContainerKekPathProjection(input);
+    const keksByEpochId = await seedKnownContainerKeks({
+        knownContainerKeks: input.knownContainerKeks,
+        projection: input.projection,
+    });
+    const predecessorFailuresByEpochId = new Map();
+    const unattributedPredecessorFailuresByContainerId = new Map();
+    for (let index = 0; index < input.projection.containerKeks.length; index += 1) {
+        const currentFailure = await unwrapContainerKekAtIndex({
+            execSql: input.execSql,
+            index,
+            keksByEpochId,
+            projection: input.projection,
+            secretKey: input.secretKey,
+            verifiedByHash: input.verifiedByHash,
+            verifyBridgeCommitment: input.trustedLocalProjection !== true,
+        });
+        if (currentFailure) {
+            recordPredecessorFailure(predecessorFailuresByEpochId, unattributedPredecessorFailuresByContainerId, currentFailure);
+        }
+    }
+    const keyMaterialByEpochId = new Map();
+    for (const [containerKeyEpochId, kek] of keksByEpochId) {
+        keyMaterialByEpochId.set(containerKeyEpochId, kek.keyMaterial);
+    }
+    assertTargetKekUnwrapped({
+        keyMaterialByEpochId,
+        predecessorFailuresByEpochId,
+        projection: input.projection,
+        unattributedPredecessorFailuresByContainerId,
+    });
+    return {
+        keksByEpochId: keyMaterialByEpochId,
+        predecessorFailuresByEpochId,
+        unattributedPredecessorFailuresByContainerId,
+    };
+}
+export async function unwrapContainerKekPath(input) {
+    return (await unwrapContainerKekPathWithHistoryFailures(input)).keksByEpochId;
+}
+//# sourceMappingURL=containerKekPath.js.map

package/data/documents/shared/containerKek/containerKekPath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerKekPath.js","sourceRoot":"","sources":["containerKekPath.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAErF,OAAO,EAAE,uCAAuC,EAAE,MAAM,2CAA2C,CAAC;AAEpG,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,4CAA4C,EAC5C,uCAAuC,EACvC,kBAAkB,EAClB,iCAAiC,GAClC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,gCAAgC,GACjC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,wBAAwB,CAAC;AAEhC,SAAS,8BAA8B,CACrC,UAA6C,EAC7C,KAAa;IAEb,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,uBAAuB,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,GAAG,CAAC,kBAAkB,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACvE,CAAC;IACD,IACE,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC7D,GAAG,CAAC,mBAAmB;QACzB,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACtE,GAAG,CAAC,WAAW;QACjB,yBAAyB,CACvB,GAAG,CAAC,QAAQ,EACZ,UAAU,EACV,kBAAkB,CAAC,KAAK,CAAC,CAC1B,KAAK,GAAG,CAAC,iBAAiB;QAC3B,wBAAwB,CACtB,GAAG,CAAC,QAAQ,EACZ,2BAA2B,EAC3B,kBAAkB,CAAC,KAAK,CAAC,CAC1B,KAAK,GAAG,CAAC,yBAAyB,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oCAAoC,CAAC,KAInD;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,KAAK,WAAW,CAAC;SACpD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,cAAc,EAAE,IAAI,CAAC,uBAAuB;QAC5C,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC,CAAC;IACN,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,uCAAuC,CAAC;YACnD,SAAS;YACT,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,sBAAsB,CAAC,KAGrC;IACC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAiC,CAAC;IAE/D,KAAK,MAAM,CAAC,mBAAmB,EAAE,WAAW,CAAC,IAAI,KAAK,CAAC,kBAAkB;QACvE,IAAI,GAAG,EAAsB,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,yBAAyB,CACzC,KAAK,CAAC,UAAU,EAChB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QACD,MAAM,4CAA4C,CAAC;YACjD,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,6BAA6B,CACjC,KAAK,CAAC,UAAU,EAChB,SAAS,CAAC,KAAK,EACf,WAAW,CACZ,CAAC;QACF,aAAa,CAAC,GAAG,CAAC,mBAAmB,EAAE;YACrC,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,WAAW;YACtC,YAAY,EAAE,SAAS,CAAC,GAAG,CAAC,YAAY;YACxC,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,yBAAyB,CAChC,UAA6C,EAC7C,mBAA2B;IAE3B,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QAClE,IAAI,OAAO,CAAC,mBAAmB,KAAK,mBAAmB,EAAE,CAAC;YACxD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAC3B,aAAyD,EACzD,GAGC,EACD,SAA4B;IAE5B,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,WAAW,IAAI,SAAS,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,KAQxC;IAKC,8BAA8B,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,mBAAmB,KAAK,GAAG,CAAC,mBAAmB,EAAE,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,SAAS,GACb,CAAC,MAAM,oCAAoC,CAAC;QAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;KACN,CAAC,CAAC;QACH,CAAC,MAAM,gCAAgC,CAAC;YACtC,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC;YACtC,yBAAyB,EAAE,GAAG,CAAC,yBAAyB;YACxD,mBAAmB,EAAE,KAAK,CAAC,aAAa;YACxC,KAAK;SACN,CAAC,CAAC,CAAC;IAEN,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,4CAA4C,CAAC;YACjD,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC;YACtC,GAAG;YACH,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;QACH,MAAM,6BAA6B,CACjC,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,KAAK,EACX,SAAS,CACV,CAAC;QACF,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE;YAC/C,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,wEAAwE;QACxE,oDAAoD;QACpD,MAAM,iCAAiC,CAAC;YACtC,eAAe;YACf,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG;YACH,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,oBAAoB,EAAE,oBAAoB,CACxC,KAAK,CAAC,aAAa,EACnB,GAAG,EACH,SAAS,CACV;YACD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,uBAAuB,EAAE,KAAK,CAAC,sBAAsB;SACtD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uEAAuE;QACvE,iEAAiE;QACjE,qEAAqE;QACrE,gCAAgC;QAChC,OAAO;YACL,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,KAAK,EACH,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,IAAI,KAAK,CAAC,2CAA2C,EAAE;oBACrD,KAAK,EAAE,KAAK;iBACb,CAAC;YACR,mBAAmB,EAAE,uCAAuC,CAAC;gBAC3D,GAAG;gBACH,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC;AAWD,SAAS,wBAAwB,CAC/B,iBAAqC,EACrC,iCAAqD,EACrD,OAA2E;IAE3E,IAAI,OAAO,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,iCAAiC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,iCAAiC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO;IACT,CAAC;IACD,KAAK,MAAM,mBAAmB,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAC9D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAChD,iBAAiB,CAAC,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAEhD;IADX,YACW,WAAmB,EAC5B,KAAa;QAEb,KAAK,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;QAHhC,gBAAW,GAAX,WAAW,CAAQ;QAI5B,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IACnD,CAAC;CACF;AAED,SAAS,wBAAwB,CAAC,KAQjC;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,IACE,CAAC,SAAS;QACV,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAC7D,CAAC;QACD,OAAO;IACT,CAAC;IACD,KACE,IAAI,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EACrD,KAAK,IAAI,CAAC,EACV,KAAK,IAAI,CAAC,EACV,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,kBAAkB,GACtB,KAAK,CAAC,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC;YACnE,CAAC,OAAO,CAAC,yBAAyB;gBAChC,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,GAAG,CACpC,OAAO,CAAC,yBAAyB,CAClC;gBACH,CAAC,CAAC,SAAS,CAAC;YACd,KAAK,CAAC,4CAA4C,CAAC,GAAG,CACpD,OAAO,CAAC,WAAW,CACpB,CAAC;QACJ,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,kBAAkB,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,MAAM,IAAI,kCAAkC,CAC1C,SAAS,CAAC,WAAW,EACrB,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,QAAqC;IAErC,qEAAqE;IACrE,MAAM,KAAK,GAAG;QACZ,GAAG,QAAQ;QACX,cAAc,EACZ,QAAQ,CAAC,cAAc;YACvB,IAAI,GAAG,EAA2C;KACrD,CAAC;IACF,MAAM,gCAAgC,CAAC,KAAK,CAAC,CAAC;IAE9C,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC;QACjD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IACH,MAAM,4BAA4B,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC9D,MAAM,4CAA4C,GAAG,IAAI,GAAG,EAAiB,CAAC;IAE9E,KACE,IAAI,KAAK,GAAG,CAAC,EACb,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,EAC7C,KAAK,IAAI,CAAC,EACV,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,yBAAyB,CAAC;YACrD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK;YACL,aAAa;YACb,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,KAAK,IAAI;SAC9D,CAAC,CAAC;QACH,IAAI,cAAc,EAAE,CAAC;YACnB,wBAAwB,CACtB,4BAA4B,EAC5B,4CAA4C,EAC5C,cAAc,CACf,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC3D,KAAK,MAAM,CAAC,mBAAmB,EAAE,GAAG,CAAC,IAAI,aAAa,EAAE,CAAC;QACvD,oBAAoB,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IACjE,CAAC;IACD,wBAAwB,CAAC;QACvB,oBAAoB;QACpB,4BAA4B;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,4CAA4C;KAC7C,CAAC,CAAC;IACH,OAAO;QACL,aAAa,EAAE,oBAAoB;QACnC,4BAA4B;QAC5B,4CAA4C;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAkC;IAElC,OAAO,CAAC,MAAM,yCAAyC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC;AAChF,CAAC","sourcesContent":["import type {\n  ContainerKeyWrap,\n  VerifiedContainerAccessManifest,\n} from \"@tearleads/crypto\";\nimport { isPlainObject as isPlainRecord } from \"@tearleads/validators/isPlainObject\";\nimport type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { unwrapKeyEnvelopesWithPrincipalPolicies } from \"../../../principals/principalPolicyCrypto\";\nimport type { ExecSql } from \"../../../sqlite/sqlSchema\";\nimport {\n  normalizeContainerKeyWrap,\n  readManifestContainerId,\n  readRecordNullableString,\n  readRecordPositiveInteger,\n  readRecordString,\n} from \"../readers\";\nimport type { UnwrappedContainerKek } from \"../types\";\nimport {\n  assertUnwrappedContainerKekMatchesMaterialId,\n  projectedUnreachablePredecessorEpochIds,\n  projectionKekLabel,\n  unwrapKeyringContainerKeksAtIndex,\n} from \"./containerKekPathHistory\";\nimport {\n  type UnwrapContainerKekPathInput,\n  verifyContainerKekPathProjection,\n} from \"./containerKekPathVerification\";\nimport {\n  assertSignedWrappingPublicKey,\n  unwrapContainerKekFromParentWrap,\n} from \"./containerKekWrapping\";\n\nfunction assertProjectionKekMatchesPath(\n  projection: ContainerWriterProjectionResponse,\n  index: number,\n): void {\n  const manifest = projection.path[index];\n  const kek = projection.containerKeks[index];\n  if (!manifest || !kek) {\n    throw new Error(\"Container writer projection path and KEKs are incomplete\");\n  }\n  if (readManifestContainerId(manifest) !== kek.containerId) {\n    throw new Error(`${projectionKekLabel(index)} container is inconsistent`);\n  }\n  if (kek.accessManifestHash !== manifest.manifestHash) {\n    throw new Error(`${projectionKekLabel(index)} manifest is stale`);\n  }\n  if (!isPlainRecord(kek.keyEpoch)) {\n    throw new Error(`${projectionKekLabel(index)} key epoch is invalid`);\n  }\n  if (\n    readRecordString(kek.keyEpoch, \"id\", projectionKekLabel(index)) !==\n      kek.containerKeyEpochId ||\n    readRecordString(kek.keyEpoch, \"containerId\", projectionKekLabel(index)) !==\n      kek.containerId ||\n    readRecordPositiveInteger(\n      kek.keyEpoch,\n      \"keyEpoch\",\n      projectionKekLabel(index),\n    ) !== kek.containerKeyEpoch ||\n    readRecordNullableString(\n      kek.keyEpoch,\n      \"parentContainerKeyEpochId\",\n      projectionKekLabel(index),\n    ) !== kek.parentContainerKeyEpochId\n  ) {\n    throw new Error(`${projectionKekLabel(index)} key epoch is inconsistent`);\n  }\n}\n\nasync function unwrapContainerKekFromPrincipalWraps(input: {\n  execSql?: ExecSql | undefined;\n  secretKey: Uint8Array;\n  wraps: readonly ContainerKeyWrap[];\n}): Promise<Uint8Array | null> {\n  const envelopes = input.wraps\n    .filter((wrap) => wrap.recipientKind !== \"container\")\n    .map((wrap) => ({\n      keyFingerprint: wrap.recipientKeyFingerprint,\n      kemCipherText: wrap.kemCipherText,\n      wrappedKey: wrap.wrappedKey,\n    }));\n  if (envelopes.length === 0) {\n    return null;\n  }\n\n  try {\n    return await unwrapKeyEnvelopesWithPrincipalPolicies({\n      envelopes,\n      execSql: input.execSql,\n      secretKey: input.secretKey,\n    });\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Admits caller-supplied keys that the projection also names.\n *\n * The projection match is deliberate: a seeded key is trusted only once its\n * epoch is one this projection actually carries, which is what makes the\n * material-id check below meaningful. Production seeds this with the epoch it\n * just minted (see `registerIdentity`), never with recovered history — history\n * arrives through the sealed keyring on each path instead, and is shared across\n * authorizing paths through the common `keksByEpochId` map.\n */\nasync function seedKnownContainerKeks(input: {\n  knownContainerKeks?: ReadonlyMap<string, Uint8Array> | undefined;\n  projection: ContainerWriterProjectionResponse;\n}): Promise<Map<string, UnwrappedContainerKek>> {\n  const keksByEpochId = new Map<string, UnwrappedContainerKek>();\n\n  for (const [containerKeyEpochId, keyMaterial] of input.knownContainerKeks ??\n    new Map<string, Uint8Array>()) {\n    const projected = findProjectedContainerKek(\n      input.projection,\n      containerKeyEpochId,\n    );\n    if (!projected) {\n      continue;\n    }\n    await assertUnwrappedContainerKekMatchesMaterialId({\n      label: projected.label,\n      kek: projected.kek,\n      keyMaterial,\n    });\n    await assertSignedWrappingPublicKey(\n      input.projection,\n      projected.index,\n      keyMaterial,\n    );\n    keksByEpochId.set(containerKeyEpochId, {\n      containerId: projected.kek.containerId,\n      keyEpochHash: projected.kek.keyEpochHash,\n      keyMaterial,\n    });\n  }\n\n  return keksByEpochId;\n}\n\nfunction findProjectedContainerKek(\n  projection: ContainerWriterProjectionResponse,\n  containerKeyEpochId: string,\n) {\n  for (const [index, current] of projection.containerKeks.entries()) {\n    if (current.containerKeyEpochId === containerKeyEpochId) {\n      return { index, kek: current, label: projectionKekLabel(index) };\n    }\n  }\n  return null;\n}\n\nfunction successorKeyMaterial(\n  keksByEpochId: ReadonlyMap<string, UnwrappedContainerKek>,\n  kek: Pick<\n    ContainerWriterProjectionResponse[\"containerKeks\"][number],\n    \"containerKeyEpochId\"\n  >,\n  unwrapped: Uint8Array | null,\n): Uint8Array | null {\n  return keksByEpochId.get(kek.containerKeyEpochId)?.keyMaterial ?? unwrapped;\n}\n\nasync function unwrapContainerKekAtIndex(input: {\n  readonly execSql?: ExecSql | undefined;\n  readonly index: number;\n  readonly keksByEpochId: Map<string, UnwrappedContainerKek>;\n  readonly projection: ContainerWriterProjectionResponse;\n  readonly secretKey: Uint8Array;\n  readonly verifiedByHash: ReadonlyMap<string, VerifiedContainerAccessManifest>;\n  readonly verifyBridgeCommitment: boolean;\n}): Promise<{\n  readonly containerId: string;\n  readonly error: Error;\n  readonly unreachableEpochIds: readonly string[];\n} | null> {\n  assertProjectionKekMatchesPath(input.projection, input.index);\n  const kek = input.projection.containerKeks[input.index];\n  const currentManifest = input.projection.path[input.index];\n  if (!kek || !currentManifest) {\n    throw new Error(`${projectionKekLabel(input.index)} is missing`);\n  }\n\n  const wraps: ContainerKeyWrap[] = [];\n  for (const rawWrap of kek.wraps) {\n    const wrap = normalizeContainerKeyWrap(rawWrap);\n    if (wrap.containerKeyEpochId === kek.containerKeyEpochId) {\n      wraps.push(wrap);\n    }\n  }\n  if (wraps.length !== kek.wraps.length) {\n    throw new Error(`${projectionKekLabel(input.index)} contains a stale wrap`);\n  }\n\n  const unwrapped =\n    (await unwrapContainerKekFromPrincipalWraps({\n      execSql: input.execSql,\n      secretKey: input.secretKey,\n      wraps,\n    })) ??\n    (await unwrapContainerKekFromParentWrap({\n      label: projectionKekLabel(input.index),\n      parentContainerKeyEpochId: kek.parentContainerKeyEpochId,\n      parentKeksByEpochId: input.keksByEpochId,\n      wraps,\n    }));\n\n  if (unwrapped) {\n    await assertUnwrappedContainerKekMatchesMaterialId({\n      label: projectionKekLabel(input.index),\n      kek,\n      keyMaterial: unwrapped,\n    });\n    await assertSignedWrappingPublicKey(\n      input.projection,\n      input.index,\n      unwrapped,\n    );\n    input.keksByEpochId.set(kek.containerKeyEpochId, {\n      containerId: kek.containerId,\n      keyEpochHash: kek.keyEpochHash,\n      keyMaterial: unwrapped,\n    });\n  }\n\n  try {\n    // Open the keyring immediately so descendants pinned to an older parent\n    // epoch can still unwrap during the same path walk.\n    await unwrapKeyringContainerKeksAtIndex({\n      currentManifest,\n      index: input.index,\n      kek,\n      keksByEpochId: input.keksByEpochId,\n      successorKeyMaterial: successorKeyMaterial(\n        input.keksByEpochId,\n        kek,\n        unwrapped,\n      ),\n      verifiedByHash: input.verifiedByHash,\n      verifyKeyringCommitment: input.verifyBridgeCommitment,\n    });\n    return null;\n  } catch (error) {\n    // Historical keyring damage must not discard an independently verified\n    // current KEK. If the target still cannot be reached, the caller\n    // surfaces this integrity error; the bridge log remains the recovery\n    // path for the orphaned epochs.\n    return {\n      containerId: kek.containerId,\n      error:\n        error instanceof Error\n          ? error\n          : new Error(\"Container predecessor KEK recovery failed\", {\n              cause: error,\n            }),\n      unreachableEpochIds: projectedUnreachablePredecessorEpochIds({\n        kek,\n        keksByEpochId: input.keksByEpochId,\n      }),\n    };\n  }\n}\n\ninterface UnwrappedContainerKekPathResult {\n  readonly keksByEpochId: ReadonlyMap<string, Uint8Array>;\n  readonly predecessorFailuresByEpochId: ReadonlyMap<string, Error>;\n  readonly unattributedPredecessorFailuresByContainerId: ReadonlyMap<\n    string,\n    Error\n  >;\n}\n\nfunction recordPredecessorFailure(\n  failuresByEpochId: Map<string, Error>,\n  unattributedFailuresByContainerId: Map<string, Error>,\n  failure: NonNullable<Awaited<ReturnType<typeof unwrapContainerKekAtIndex>>>,\n): void {\n  if (failure.unreachableEpochIds.length === 0) {\n    if (!unattributedFailuresByContainerId.has(failure.containerId)) {\n      unattributedFailuresByContainerId.set(failure.containerId, failure.error);\n    }\n    return;\n  }\n  for (const containerKeyEpochId of failure.unreachableEpochIds) {\n    if (!failuresByEpochId.has(containerKeyEpochId)) {\n      failuresByEpochId.set(containerKeyEpochId, failure.error);\n    }\n  }\n}\n\n/**\n * No wrap on the path opens the target for this reader, and no recorded\n * history failure explains it: the reader simply holds no key here. Distinct\n * from keyring damage, which rethrows the underlying integrity error instead.\n */\nexport class ContainerKekTargetUnreachableError extends Error {\n  constructor(\n    readonly containerId: string,\n    label: string,\n  ) {\n    super(`${label} could not be unwrapped`);\n    this.name = \"ContainerKekTargetUnreachableError\";\n  }\n}\n\nfunction assertTargetKekUnwrapped(input: {\n  readonly keyMaterialByEpochId: ReadonlyMap<string, Uint8Array>;\n  readonly predecessorFailuresByEpochId: ReadonlyMap<string, Error>;\n  readonly projection: ContainerWriterProjectionResponse;\n  readonly unattributedPredecessorFailuresByContainerId: ReadonlyMap<\n    string,\n    Error\n  >;\n}): void {\n  const targetKek = input.projection.containerKeks.at(-1);\n  if (\n    !targetKek ||\n    input.keyMaterialByEpochId.has(targetKek.containerKeyEpochId)\n  ) {\n    return;\n  }\n  for (\n    let index = input.projection.containerKeks.length - 1;\n    index >= 0;\n    index -= 1\n  ) {\n    const pathKek = input.projection.containerKeks[index];\n    if (!pathKek) {\n      continue;\n    }\n    const predecessorFailure =\n      input.predecessorFailuresByEpochId.get(pathKek.containerKeyEpochId) ??\n      (pathKek.parentContainerKeyEpochId\n        ? input.predecessorFailuresByEpochId.get(\n            pathKek.parentContainerKeyEpochId,\n          )\n        : undefined) ??\n      input.unattributedPredecessorFailuresByContainerId.get(\n        pathKek.containerId,\n      );\n    if (predecessorFailure) {\n      throw predecessorFailure;\n    }\n  }\n  throw new ContainerKekTargetUnreachableError(\n    targetKek.containerId,\n    projectionKekLabel(input.projection.containerKeks.length - 1),\n  );\n}\n\nexport async function unwrapContainerKekPathWithHistoryFailures(\n  rawInput: UnwrapContainerKekPathInput,\n): Promise<UnwrappedContainerKekPathResult> {\n  // Kept for the keyring checks, which anchor to the verified lineage.\n  const input = {\n    ...rawInput,\n    verifiedByHash:\n      rawInput.verifiedByHash ??\n      new Map<string, VerifiedContainerAccessManifest>(),\n  };\n  await verifyContainerKekPathProjection(input);\n\n  const keksByEpochId = await seedKnownContainerKeks({\n    knownContainerKeks: input.knownContainerKeks,\n    projection: input.projection,\n  });\n  const predecessorFailuresByEpochId = new Map<string, Error>();\n  const unattributedPredecessorFailuresByContainerId = new Map<string, Error>();\n\n  for (\n    let index = 0;\n    index < input.projection.containerKeks.length;\n    index += 1\n  ) {\n    const currentFailure = await unwrapContainerKekAtIndex({\n      execSql: input.execSql,\n      index,\n      keksByEpochId,\n      projection: input.projection,\n      secretKey: input.secretKey,\n      verifiedByHash: input.verifiedByHash,\n      verifyBridgeCommitment: input.trustedLocalProjection !== true,\n    });\n    if (currentFailure) {\n      recordPredecessorFailure(\n        predecessorFailuresByEpochId,\n        unattributedPredecessorFailuresByContainerId,\n        currentFailure,\n      );\n    }\n  }\n\n  const keyMaterialByEpochId = new Map<string, Uint8Array>();\n  for (const [containerKeyEpochId, kek] of keksByEpochId) {\n    keyMaterialByEpochId.set(containerKeyEpochId, kek.keyMaterial);\n  }\n  assertTargetKekUnwrapped({\n    keyMaterialByEpochId,\n    predecessorFailuresByEpochId,\n    projection: input.projection,\n    unattributedPredecessorFailuresByContainerId,\n  });\n  return {\n    keksByEpochId: keyMaterialByEpochId,\n    predecessorFailuresByEpochId,\n    unattributedPredecessorFailuresByContainerId,\n  };\n}\n\nexport async function unwrapContainerKekPath(\n  input: UnwrapContainerKekPathInput,\n): Promise<ReadonlyMap<string, Uint8Array>> {\n  return (await unwrapContainerKekPathWithHistoryFailures(input)).keksByEpochId;\n}\n"]}