@tearleads/client-sdk 0.1.63 → 0.1.65

package/data/documents/shared/projectionTargets.js

@@ -1,164 +0,0 @@
-import { KeyingVerificationError, } from "../../../internal/crypto/index.js";
-import { isPlainObject as isPlainRecord } from "../../../internal/validators/isPlainObject.js";
-import { describeDocumentTargetKek, normalizeDocumentKekTargetResponse, readManifestContainerId, serializeCanonical, sortDocumentTargets, targetEnvelopeReference, targetKey, uniqueSortedStrings, } from "./readers.js";
-export function deriveDocumentCreateTargets(projection) {
-    const targetIndex = projection.path.length - 1;
-    const targetManifest = projection.path[targetIndex];
-    if (!targetManifest) {
-        throw new Error("Container writer projection path is empty");
-    }
-    if (readManifestContainerId(targetManifest) !== projection.containerId) {
-        throw new Error("Container writer projection target path is inconsistent");
-    }
-    const targetKek = projection.containerKeks[targetIndex];
-    if (!targetKek) {
-        throw new Error("Container writer projection target KEK is unavailable");
-    }
-    if (targetKek.containerId !== projection.containerId) {
-        throw new Error("Container writer projection target KEK is inconsistent");
-    }
-    if (targetKek.accessManifestHash !== targetManifest.manifestHash) {
-        throw new Error("Container writer projection target KEK is stale");
-    }
-    return [
-        {
-            containerId: targetKek.containerId,
-            containerManifestHash: targetKek.accessManifestHash,
-            containerKeyEpochId: targetKek.containerKeyEpochId,
-            containerKeyEpoch: targetKek.containerKeyEpoch,
-        },
-    ];
-}
-export function mergeTargetEnvelopes(targets, envelopes) {
-    const expectedByKey = new Map(targets.map((target) => [targetKey(target), target]));
-    const envelopeByKey = new Map();
-    for (const envelope of envelopes) {
-        const key = targetKey(envelope);
-        if (!expectedByKey.has(key)) {
-            throw new Error("Document content-key target envelope is unexpected");
-        }
-        if (envelopeByKey.has(key)) {
-            throw new Error("Document content-key target envelope is duplicated");
-        }
-        if (envelope.wrappedKey.length === 0) {
-            throw new Error("Document content-key target envelope is empty");
-        }
-        if (!isPlainRecord(envelope.wrappingMetadata)) {
-            throw new Error("Document content-key target wrapping metadata must be an object");
-        }
-        envelopeByKey.set(key, envelope);
-    }
-    return sortDocumentTargets(targets).map((target) => {
-        const envelope = envelopeByKey.get(targetKey(target));
-        if (!envelope) {
-            throw new Error("Document content-key target envelope is missing");
-        }
-        return envelope;
-    });
-}
-function projectionLeafContainerId(projection) {
-    const leafBundle = projection.path.at(-1);
-    return leafBundle ? readManifestContainerId(leafBundle) : null;
-}
-export function describeProjectionTargetKek(projection) {
-    const targetKek = projection.containerKeks.at(-1);
-    const containerId = projectionLeafContainerId(projection) ??
-        targetKek?.containerId ??
-        projection.containerId;
-    return targetKek
-        ? `container ${containerId} epoch ${targetKek.containerKeyEpochId}`
-        : `container ${containerId}`;
-}
-export function deriveDocumentTargetFromProjection(projection) {
-    const target = deriveDocumentCreateTargets(projection)[0];
-    if (!target) {
-        throw new Error("Document target projection is unavailable");
-    }
-    return target;
-}
-export function readLinkedContainerIdsFromDocumentManifest(writerProjection) {
-    const state = writerProjection.documentManifest.state;
-    const linkedContainerIds = isPlainRecord(state)
-        ? Reflect.get(state, "linkedContainerIds")
-        : undefined;
-    if (!Array.isArray(linkedContainerIds) ||
-        linkedContainerIds.some((containerId) => typeof containerId !== "string" || containerId.length === 0)) {
-        throw new Error("Document link-set state is invalid");
-    }
-    return uniqueSortedStrings(linkedContainerIds);
-}
-/**
- * The targets a content-key (re)wrap may address. The server's KEK target list
- * only says which linked containers the bundle must cover; the epoch each
- * envelope lands on comes from that container's verified authorizing-path
- * leaf, never from the server row. A listed epoch that is not the linked
- * container's verified current head — a predecessor a revoked member still
- * holds, or another container's epoch — therefore fails before any wrap, as
- * does a container listed twice. A linked container with no authorizing path
- * is an availability gap, not tampering: its KEK is simply unavailable here.
- */
-export function verifiedDocumentWrapTargets(input) {
-    const verifiedByKey = new Map();
-    const verifiedContainerIds = new Set();
-    for (const projection of input.writerProjection.authorizingContainerPaths) {
-        const target = deriveDocumentTargetFromProjection(projection);
-        verifiedByKey.set(targetKey(target), target);
-        verifiedContainerIds.add(target.containerId);
-    }
-    const containerIds = input.serverTargets.map((target) => target.containerId);
-    if (new Set(containerIds).size !== containerIds.length) {
-        throw new KeyingVerificationError("duplicate_entry", "Document content-key targets name a linked container more than once");
-    }
-    const linkedContainerIds = uniqueSortedStrings(input.linkedContainerIds);
-    const sortedContainerIds = uniqueSortedStrings(containerIds);
-    if (sortedContainerIds.length !== linkedContainerIds.length ||
-        sortedContainerIds.some((id, index) => id !== linkedContainerIds[index])) {
-        throw new KeyingVerificationError("object_mismatch", "Document content-key targets do not match the linked containers");
-    }
-    return sortDocumentTargets(input.serverTargets.map((target) => {
-        const verified = verifiedByKey.get(targetKey(target));
-        if (verified) {
-            return verified;
-        }
-        if (!verifiedContainerIds.has(target.containerId)) {
-            throw new Error(`Document content-key re-wrap KEK is unavailable for ${describeDocumentTargetKek(target)}`);
-        }
-        throw new KeyingVerificationError("object_mismatch", `Document content-key target is not the verified head of ${describeDocumentTargetKek(target)}`);
-    }));
-}
-export function currentDocumentTargets(writerProjection) {
-    const targets = normalizeDocumentKekTargetResponse(writerProjection.documentKekTargets);
-    const bundleTargets = sortDocumentTargets(writerProjection.contentKeyBundle.targets.map(targetEnvelopeReference));
-    if (serializeCanonical(targets, "KEK targets") !==
-        serializeCanonical(bundleTargets, "content-key targets")) {
-        throw new Error("Document link-set content-key targets mismatch");
-    }
-    return targets;
-}
-/**
- * Reduce a single container path (root→leaf chain) to {containerId,
- * manifestHash} references. The server already stores each manifest and resolves
- * it from its own store, so a write echoes only the hashes instead of
- * re-embedding the full signed bundles it received in the writer projection.
- */
-export function containerPathRefs(path) {
-    return path.map((bundle) => {
-        const containerId = readManifestContainerId(bundle);
-        if (!containerId) {
-            throw new Error("Container path manifest is missing a container id");
-        }
-        return { containerId, manifestHash: bundle.manifestHash };
-    });
-}
-export function authorizingContainerPathRefs(writerProjection) {
-    return writerProjection.authorizingContainerPaths.map((projection) => containerPathRefs(projection.path));
-}
-export function authorizingContainerPathRefsForLinkSet(input) {
-    const paths = input.writerProjection.authorizingContainerPaths.filter((projection) => input.operation === "link" ||
-        projectionLeafContainerId(projection) !== input.targetContainerId);
-    if (paths.length === 0) {
-        throw new Error("Document link-set authorizing paths are missing");
-    }
-    return paths.map((projection) => containerPathRefs(projection.path));
-}
-//# sourceMappingURL=projectionTargets.js.map

package/data/documents/shared/projectionTargets.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"projectionTargets.js","sourceRoot":"","sources":["projectionTargets.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,qCAAqC,CAAC;AASrF,OAAO,EACL,yBAAyB,EACzB,kCAAkC,EAClC,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,SAAS,EACT,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAGnB,MAAM,UAAU,2BAA2B,CACzC,UAAuC;IAEvC,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,uBAAuB,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,SAAS,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,SAAS,CAAC,kBAAkB,KAAK,cAAc,CAAC,YAAY,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,OAAO;QACL;YACE,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,qBAAqB,EAAE,SAAS,CAAC,kBAAkB;YACnD,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;YAClD,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;SAC/C;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAA4C,EAC5C,SAAsD;IAEtD,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CACrD,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,GAAG,EAA4C,CAAC;IAE1E,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;QACJ,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACjD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,yBAAyB,CAChC,UAAuC;IAEvC,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,UAAuC;IAEvC,MAAM,SAAS,GAAG,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,WAAW,GACf,yBAAyB,CAAC,UAAU,CAAC;QACrC,SAAS,EAAE,WAAW;QACtB,UAAU,CAAC,WAAW,CAAC;IACzB,OAAO,SAAS;QACd,CAAC,CAAC,aAAa,WAAW,UAAU,SAAS,CAAC,mBAAmB,EAAE;QACnE,CAAC,CAAC,aAAa,WAAW,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,UAAuC;IAEvC,MAAM,MAAM,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,gBAAkD;IAElD,MAAM,KAAK,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,KAAK,CAAC;IACtD,MAAM,kBAAkB,GAAG,aAAa,CAAC,KAAK,CAAC;QAC7C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,oBAAoB,CAAC;QAC1C,CAAC,CAAC,SAAS,CAAC;IACd,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAClC,kBAAkB,CAAC,IAAI,CACrB,CAAC,WAAW,EAAE,EAAE,CACd,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,CAC9D,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAI3C;IACC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAoC,CAAC;IAClE,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/C,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,gBAAgB,CAAC,yBAAyB,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAG,kCAAkC,CAAC,UAAU,CAAC,CAAC;QAC9D,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7C,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC7E,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACzE,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAC7D,IACE,kBAAkB,CAAC,MAAM,KAAK,kBAAkB,CAAC,MAAM;QACvD,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,kBAAkB,CAAC,KAAK,CAAC,CAAC,EACxE,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,iEAAiE,CAClE,CAAC;IACJ,CAAC;IAED,OAAO,mBAAmB,CACxB,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACjC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,uDAAuD,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAC3F,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,2DAA2D,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,gBAAkD;IAElD,MAAM,OAAO,GAAG,kCAAkC,CAChD,gBAAgB,CAAC,kBAAkB,CACpC,CAAC;IACF,MAAM,aAAa,GAAG,mBAAmB,CACvC,gBAAgB,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CACvE,CAAC;IAEF,IACE,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC;QAC1C,kBAAkB,CAAC,aAAa,EAAE,qBAAqB,CAAC,EACxD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAyC;IAEzC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACzB,MAAM,WAAW,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,gBAAkD;IAElD,OAAO,gBAAgB,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACnE,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sCAAsC,CAAC,KAItD;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,MAAM,CACnE,CAAC,UAAU,EAAE,EAAE,CACb,KAAK,CAAC,SAAS,KAAK,MAAM;QAC1B,yBAAyB,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,iBAAiB,CACpE,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACvE,CAAC","sourcesContent":["import {\n  type DocumentContentKeyTarget,\n  KeyingVerificationError,\n} from \"@tearleads/crypto\";\nimport { isPlainObject as isPlainRecord } from \"@tearleads/validators/isPlainObject\";\nimport type {\n  ContainerManifestRef,\n  DocumentContentKeyTargetEnvelope,\n} from \"@tearleads/validators/request\";\nimport type {\n  ContainerKeyingPathResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  describeDocumentTargetKek,\n  normalizeDocumentKekTargetResponse,\n  readManifestContainerId,\n  serializeCanonical,\n  sortDocumentTargets,\n  targetEnvelopeReference,\n  targetKey,\n  uniqueSortedStrings,\n} from \"./readers\";\nimport type { DocumentLinkSetMutationOperation } from \"./types\";\n\nexport function deriveDocumentCreateTargets(\n  projection: ContainerKeyingPathResponse,\n): DocumentContentKeyTarget[] {\n  const targetIndex = projection.path.length - 1;\n  const targetManifest = projection.path[targetIndex];\n  if (!targetManifest) {\n    throw new Error(\"Container writer projection path is empty\");\n  }\n\n  if (readManifestContainerId(targetManifest) !== projection.containerId) {\n    throw new Error(\"Container writer projection target path is inconsistent\");\n  }\n\n  const targetKek = projection.containerKeks[targetIndex];\n  if (!targetKek) {\n    throw new Error(\"Container writer projection target KEK is unavailable\");\n  }\n  if (targetKek.containerId !== projection.containerId) {\n    throw new Error(\"Container writer projection target KEK is inconsistent\");\n  }\n  if (targetKek.accessManifestHash !== targetManifest.manifestHash) {\n    throw new Error(\"Container writer projection target KEK is stale\");\n  }\n\n  return [\n    {\n      containerId: targetKek.containerId,\n      containerManifestHash: targetKek.accessManifestHash,\n      containerKeyEpochId: targetKek.containerKeyEpochId,\n      containerKeyEpoch: targetKek.containerKeyEpoch,\n    },\n  ];\n}\n\nexport function mergeTargetEnvelopes(\n  targets: readonly DocumentContentKeyTarget[],\n  envelopes: readonly DocumentContentKeyTargetEnvelope[],\n): DocumentContentKeyTargetEnvelope[] {\n  const expectedByKey = new Map(\n    targets.map((target) => [targetKey(target), target]),\n  );\n  const envelopeByKey = new Map<string, DocumentContentKeyTargetEnvelope>();\n\n  for (const envelope of envelopes) {\n    const key = targetKey(envelope);\n    if (!expectedByKey.has(key)) {\n      throw new Error(\"Document content-key target envelope is unexpected\");\n    }\n    if (envelopeByKey.has(key)) {\n      throw new Error(\"Document content-key target envelope is duplicated\");\n    }\n    if (envelope.wrappedKey.length === 0) {\n      throw new Error(\"Document content-key target envelope is empty\");\n    }\n    if (!isPlainRecord(envelope.wrappingMetadata)) {\n      throw new Error(\n        \"Document content-key target wrapping metadata must be an object\",\n      );\n    }\n    envelopeByKey.set(key, envelope);\n  }\n\n  return sortDocumentTargets(targets).map((target) => {\n    const envelope = envelopeByKey.get(targetKey(target));\n    if (!envelope) {\n      throw new Error(\"Document content-key target envelope is missing\");\n    }\n    return envelope;\n  });\n}\n\nfunction projectionLeafContainerId(\n  projection: ContainerKeyingPathResponse,\n): string | null {\n  const leafBundle = projection.path.at(-1);\n  return leafBundle ? readManifestContainerId(leafBundle) : null;\n}\n\nexport function describeProjectionTargetKek(\n  projection: ContainerKeyingPathResponse,\n): string {\n  const targetKek = projection.containerKeks.at(-1);\n  const containerId =\n    projectionLeafContainerId(projection) ??\n    targetKek?.containerId ??\n    projection.containerId;\n  return targetKek\n    ? `container ${containerId} epoch ${targetKek.containerKeyEpochId}`\n    : `container ${containerId}`;\n}\n\nexport function deriveDocumentTargetFromProjection(\n  projection: ContainerKeyingPathResponse,\n): DocumentContentKeyTarget {\n  const target = deriveDocumentCreateTargets(projection)[0];\n  if (!target) {\n    throw new Error(\"Document target projection is unavailable\");\n  }\n  return target;\n}\n\nexport function readLinkedContainerIdsFromDocumentManifest(\n  writerProjection: DocumentWriterProjectionResponse,\n): string[] {\n  const state = writerProjection.documentManifest.state;\n  const linkedContainerIds = isPlainRecord(state)\n    ? Reflect.get(state, \"linkedContainerIds\")\n    : undefined;\n  if (\n    !Array.isArray(linkedContainerIds) ||\n    linkedContainerIds.some(\n      (containerId) =>\n        typeof containerId !== \"string\" || containerId.length === 0,\n    )\n  ) {\n    throw new Error(\"Document link-set state is invalid\");\n  }\n\n  return uniqueSortedStrings(linkedContainerIds);\n}\n\n/**\n * The targets a content-key (re)wrap may address. The server's KEK target list\n * only says which linked containers the bundle must cover; the epoch each\n * envelope lands on comes from that container's verified authorizing-path\n * leaf, never from the server row. A listed epoch that is not the linked\n * container's verified current head — a predecessor a revoked member still\n * holds, or another container's epoch — therefore fails before any wrap, as\n * does a container listed twice. A linked container with no authorizing path\n * is an availability gap, not tampering: its KEK is simply unavailable here.\n */\nexport function verifiedDocumentWrapTargets(input: {\n  linkedContainerIds: readonly string[];\n  serverTargets: readonly DocumentContentKeyTarget[];\n  writerProjection: DocumentWriterProjectionResponse;\n}): DocumentContentKeyTarget[] {\n  const verifiedByKey = new Map<string, DocumentContentKeyTarget>();\n  const verifiedContainerIds = new Set<string>();\n  for (const projection of input.writerProjection.authorizingContainerPaths) {\n    const target = deriveDocumentTargetFromProjection(projection);\n    verifiedByKey.set(targetKey(target), target);\n    verifiedContainerIds.add(target.containerId);\n  }\n\n  const containerIds = input.serverTargets.map((target) => target.containerId);\n  if (new Set(containerIds).size !== containerIds.length) {\n    throw new KeyingVerificationError(\n      \"duplicate_entry\",\n      \"Document content-key targets name a linked container more than once\",\n    );\n  }\n  const linkedContainerIds = uniqueSortedStrings(input.linkedContainerIds);\n  const sortedContainerIds = uniqueSortedStrings(containerIds);\n  if (\n    sortedContainerIds.length !== linkedContainerIds.length ||\n    sortedContainerIds.some((id, index) => id !== linkedContainerIds[index])\n  ) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Document content-key targets do not match the linked containers\",\n    );\n  }\n\n  return sortDocumentTargets(\n    input.serverTargets.map((target) => {\n      const verified = verifiedByKey.get(targetKey(target));\n      if (verified) {\n        return verified;\n      }\n      if (!verifiedContainerIds.has(target.containerId)) {\n        throw new Error(\n          `Document content-key re-wrap KEK is unavailable for ${describeDocumentTargetKek(target)}`,\n        );\n      }\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        `Document content-key target is not the verified head of ${describeDocumentTargetKek(target)}`,\n      );\n    }),\n  );\n}\n\nexport function currentDocumentTargets(\n  writerProjection: DocumentWriterProjectionResponse,\n): DocumentContentKeyTarget[] {\n  const targets = normalizeDocumentKekTargetResponse(\n    writerProjection.documentKekTargets,\n  );\n  const bundleTargets = sortDocumentTargets(\n    writerProjection.contentKeyBundle.targets.map(targetEnvelopeReference),\n  );\n\n  if (\n    serializeCanonical(targets, \"KEK targets\") !==\n    serializeCanonical(bundleTargets, \"content-key targets\")\n  ) {\n    throw new Error(\"Document link-set content-key targets mismatch\");\n  }\n\n  return targets;\n}\n\n/**\n * Reduce a single container path (root→leaf chain) to {containerId,\n * manifestHash} references. The server already stores each manifest and resolves\n * it from its own store, so a write echoes only the hashes instead of\n * re-embedding the full signed bundles it received in the writer projection.\n */\nexport function containerPathRefs(\n  path: ContainerKeyingPathResponse[\"path\"],\n): ContainerManifestRef[] {\n  return path.map((bundle) => {\n    const containerId = readManifestContainerId(bundle);\n    if (!containerId) {\n      throw new Error(\"Container path manifest is missing a container id\");\n    }\n    return { containerId, manifestHash: bundle.manifestHash };\n  });\n}\n\nexport function authorizingContainerPathRefs(\n  writerProjection: DocumentWriterProjectionResponse,\n): ContainerManifestRef[][] {\n  return writerProjection.authorizingContainerPaths.map((projection) =>\n    containerPathRefs(projection.path),\n  );\n}\n\nexport function authorizingContainerPathRefsForLinkSet(input: {\n  operation: DocumentLinkSetMutationOperation;\n  targetContainerId: string;\n  writerProjection: DocumentWriterProjectionResponse;\n}): ContainerManifestRef[][] {\n  const paths = input.writerProjection.authorizingContainerPaths.filter(\n    (projection) =>\n      input.operation === \"link\" ||\n      projectionLeafContainerId(projection) !== input.targetContainerId,\n  );\n  if (paths.length === 0) {\n    throw new Error(\"Document link-set authorizing paths are missing\");\n  }\n\n  return paths.map((projection) => containerPathRefs(projection.path));\n}\n"]}

package/data/documents/shared/pullContinuation.js

@@ -1,53 +0,0 @@
-import { isWalLsnString, MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH, } from "../../../internal/validators/util/index.js";
-export function documentSyncPullContinuationsEqual(left, right) {
-    if (!left || !right)
-        return left == null && right == null;
-    return (left.commitLsn === right.commitLsn &&
-        left.commitLsnMode === right.commitLsnMode &&
-        left.cursor === right.cursor);
-}
-/**
- * Non-null durable value used after the server rejects a cursor. Readers treat
- * it like any other undecodable continuation and force page-one recovery, but
- * ordinary saves preserve it until a successful sync settlement explicitly
- * replaces or clears the continuation.
- */
-export const DOCUMENT_SYNC_PULL_RECOVERY_REQUIRED = '[0,"recovery-required"]';
-function isValidCheckpoint(mode, commitLsn) {
-    return ((mode === "tracked" && commitLsn !== "0/0" && isWalLsnString(commitLsn)) ||
-        (mode === "untracked" && commitLsn === "0/0"));
-}
-/** Decode untrusted local state; malformed progress restarts from page one. */
-export function deserializeDocumentSyncPullContinuation(value) {
-    if (value === null)
-        return null;
-    try {
-        const parsed = JSON.parse(value);
-        if (!Array.isArray(parsed) || parsed.length !== 4)
-            return null;
-        const [version, commitLsnMode, commitLsn, cursor] = parsed;
-        if (version !== 1 ||
-            !isValidCheckpoint(commitLsnMode, commitLsn) ||
-            typeof commitLsn !== "string" ||
-            typeof cursor !== "string" ||
-            cursor.length === 0 ||
-            cursor.length > MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH) {
-            return null;
-        }
-        return { commitLsn, commitLsnMode, cursor };
-    }
-    catch {
-        return null;
-    }
-}
-export function serializeDocumentSyncPullContinuation(continuation) {
-    if (continuation === null)
-        return null;
-    return JSON.stringify([
-        1,
-        continuation.commitLsnMode,
-        continuation.commitLsn,
-        continuation.cursor,
-    ]);
-}
-//# sourceMappingURL=pullContinuation.js.map

package/data/documents/shared/syncPagination.d.ts

@@ -1,20 +0,0 @@
-import type { DocumentSyncResponse } from "../../../internal/validators/response/index.js";
-import type { DocumentSyncCommitLsnMode, DocumentSyncPullContinuation } from "./pullContinuation.js";
-import type { DocumentSyncApi, DocumentSyncPlan, DocumentSyncSubmitFailure } from "./types.js";
-export type { DocumentSyncCommitLsnMode, DocumentSyncPullContinuation, } from "./pullContinuation.js";
-export { documentSyncPullContinuationsEqual } from "./pullContinuation.js";
-export declare class InvalidDocumentSyncPullContinuationError extends Error {
-    constructor(message: string);
-}
-type DocumentSyncSubmission = {
-    readonly ok: true;
-    readonly pullComplete: boolean;
-    readonly response: DocumentSyncResponse;
-} | DocumentSyncSubmitFailure | null;
-export declare function readPullContinuation(response: DocumentSyncResponse): DocumentSyncPullContinuation | null;
-export declare function resolvePullContinuationMinLsn(continuation: DocumentSyncPullContinuation | undefined, fallback: string | undefined): string | undefined;
-export declare function submitDocumentSync(input: {
-    apiClient: DocumentSyncApi;
-    expectedCommitLsnMode?: DocumentSyncCommitLsnMode | undefined;
-    plan: DocumentSyncPlan;
-}): Promise<DocumentSyncSubmission>;

package/data/documents/shared/syncPagination.js

@@ -1,109 +0,0 @@
-import { parseWalLsn } from "../../../internal/validators/util/index.js";
-export { documentSyncPullContinuationsEqual } from "./pullContinuation.js";
-export class InvalidDocumentSyncPullContinuationError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "InvalidDocumentSyncPullContinuationError";
-    }
-}
-export function readPullContinuation(response) {
-    const cursor = requirePullPage(response).nextCursor;
-    if (cursor === null)
-        return null;
-    if (response.commitLsn === null) {
-        throw new Error("Document sync pull continuation is missing its checkpoint");
-    }
-    return {
-        commitLsn: response.commitLsn,
-        commitLsnMode: response.commitLsnMode,
-        cursor,
-    };
-}
-export function resolvePullContinuationMinLsn(continuation, fallback) {
-    if (!continuation)
-        return fallback;
-    if (continuation.commitLsnMode === "untracked" || fallback === undefined) {
-        return continuation.commitLsn;
-    }
-    return parseWalLsn(continuation.commitLsn) >= parseWalLsn(fallback)
-        ? continuation.commitLsn
-        : fallback;
-}
-function assertPageCheckpoint(input) {
-    if (input.response.commitLsnMode === "untracked") {
-        if (input.response.commitLsn !== "0/0") {
-            throw new InvalidDocumentSyncPullContinuationError("Document sync continuation untracked LSN is invalid");
-        }
-        return;
-    }
-    if (input.response.commitLsn === null) {
-        if (input.minLsn === undefined && input.nextCursor === null)
-            return;
-        throw new InvalidDocumentSyncPullContinuationError("Document sync pull continuation is missing its checkpoint");
-    }
-    let responseLsn;
-    try {
-        responseLsn = parseWalLsn(input.response.commitLsn);
-    }
-    catch {
-        throw new InvalidDocumentSyncPullContinuationError("Document sync continuation commit LSN is invalid");
-    }
-    if (input.minLsn === undefined)
-        return;
-    let minimumLsn;
-    try {
-        minimumLsn = parseWalLsn(input.minLsn);
-    }
-    catch {
-        throw new InvalidDocumentSyncPullContinuationError("Document sync minimum commit LSN is invalid");
-    }
-    if (responseLsn < minimumLsn) {
-        throw new InvalidDocumentSyncPullContinuationError("Document sync continuation commit LSN regressed");
-    }
-}
-function requirePullPage(response) {
-    if (response.pullPage === undefined) {
-        throw new Error("Document sync response is missing pull page metadata");
-    }
-    return response.pullPage;
-}
-async function submitDocumentSyncPage(input) {
-    const page = await input.submit();
-    if (!page?.ok)
-        return page;
-    if (input.expectedCommitLsnMode !== undefined &&
-        page.response.commitLsnMode !== input.expectedCommitLsnMode) {
-        throw new InvalidDocumentSyncPullContinuationError("Document sync continuation commit LSN mode changed");
-    }
-    const nextCursor = requirePullPage(page.response).nextCursor;
-    assertPageCheckpoint({
-        minLsn: input.plan.request.minLsn,
-        nextCursor,
-        response: page.response,
-    });
-    if (nextCursor !== null && page.response.commitLsn === null) {
-        throw new InvalidDocumentSyncPullContinuationError("Document sync pull continuation is missing its checkpoint");
-    }
-    if (nextCursor !== null && nextCursor === input.plan.request.pullCursor) {
-        throw new InvalidDocumentSyncPullContinuationError("Document sync continuation cursor did not advance");
-    }
-    return {
-        ok: true,
-        pullComplete: nextCursor === null,
-        response: page.response,
-    };
-}
-export async function submitDocumentSync(input) {
-    return submitDocumentSyncPage({
-        expectedCommitLsnMode: input.expectedCommitLsnMode,
-        plan: input.plan,
-        submit: async () => {
-            const result = await input.apiClient.syncDocumentResult(input.plan.documentId, input.plan.request, {
-                expectedPaymentRequiredOrganizationId: input.plan.organizationId,
-                reportErrors: false,
-            });
-            return result.ok ? { ok: true, response: result.data } : result;
-        },
-    });
-}
-//# sourceMappingURL=syncPagination.js.map

package/data/documents/shared/syncPagination.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"syncPagination.js","sourceRoot":"","sources":["syncPagination.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAezD,OAAO,EAAE,kCAAkC,EAAE,MAAM,oBAAoB,CAAC;AAExE,MAAM,OAAO,wCAAyC,SAAQ,KAAK;IACjE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0CAA0C,CAAC;IACzD,CAAC;CACF;AAmBD,MAAM,UAAU,oBAAoB,CAClC,QAA8B;IAE9B,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC;IACpD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,YAAsD,EACtD,QAA4B;IAE5B,IAAI,CAAC,YAAY;QAAE,OAAO,QAAQ,CAAC;IACnC,IAAI,YAAY,CAAC,aAAa,KAAK,WAAW,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,YAAY,CAAC,SAAS,CAAC;IAChC,CAAC;IACD,OAAO,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC;QACjE,CAAC,CAAC,YAAY,CAAC,SAAS;QACxB,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAI7B;IACC,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YACvC,MAAM,IAAI,wCAAwC,CAChD,qDAAqD,CACtD,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO;QACpE,MAAM,IAAI,wCAAwC,CAChD,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,wCAAwC,CAChD,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO;IACvC,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,wCAAwC,CAChD,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,wCAAwC,CAChD,iDAAiD,CAClD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAA8B;IACrD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAIrC;IACC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3B,IACE,KAAK,CAAC,qBAAqB,KAAK,SAAS;QACzC,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,KAAK,CAAC,qBAAqB,EAC3D,CAAC;QACD,MAAM,IAAI,wCAAwC,CAChD,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC;IAC7D,oBAAoB,CAAC;QACnB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;QACjC,UAAU;QACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,IAAI,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,wCAAwC,CAChD,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxE,MAAM,IAAI,wCAAwC,CAChD,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,YAAY,EAAE,UAAU,KAAK,IAAI;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAIxC;IACC,OAAO,sBAAsB,CAAC;QAC5B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,kBAAkB,CACrD,KAAK,CAAC,IAAI,CAAC,UAAU,EACrB,KAAK,CAAC,IAAI,CAAC,OAAO,EAClB;gBACE,qCAAqC,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc;gBAChE,YAAY,EAAE,KAAK;aACpB,CACF,CAAC;YACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAClE,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { DocumentSyncResponse } from \"@tearleads/validators/response\";\nimport { parseWalLsn } from \"@tearleads/validators/util\";\nimport type {\n  DocumentSyncCommitLsnMode,\n  DocumentSyncPullContinuation,\n} from \"./pullContinuation\";\nimport type {\n  DocumentSyncApi,\n  DocumentSyncPlan,\n  DocumentSyncSubmitFailure,\n} from \"./types\";\n\nexport type {\n  DocumentSyncCommitLsnMode,\n  DocumentSyncPullContinuation,\n} from \"./pullContinuation\";\nexport { documentSyncPullContinuationsEqual } from \"./pullContinuation\";\n\nexport class InvalidDocumentSyncPullContinuationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"InvalidDocumentSyncPullContinuationError\";\n  }\n}\n\ntype DocumentSyncPageSubmission =\n  | {\n      readonly ok: true;\n      readonly response: DocumentSyncResponse;\n    }\n  | DocumentSyncSubmitFailure\n  | null;\n\ntype DocumentSyncSubmission =\n  | {\n      readonly ok: true;\n      readonly pullComplete: boolean;\n      readonly response: DocumentSyncResponse;\n    }\n  | DocumentSyncSubmitFailure\n  | null;\n\nexport function readPullContinuation(\n  response: DocumentSyncResponse,\n): DocumentSyncPullContinuation | null {\n  const cursor = requirePullPage(response).nextCursor;\n  if (cursor === null) return null;\n  if (response.commitLsn === null) {\n    throw new Error(\n      \"Document sync pull continuation is missing its checkpoint\",\n    );\n  }\n  return {\n    commitLsn: response.commitLsn,\n    commitLsnMode: response.commitLsnMode,\n    cursor,\n  };\n}\n\nexport function resolvePullContinuationMinLsn(\n  continuation: DocumentSyncPullContinuation | undefined,\n  fallback: string | undefined,\n): string | undefined {\n  if (!continuation) return fallback;\n  if (continuation.commitLsnMode === \"untracked\" || fallback === undefined) {\n    return continuation.commitLsn;\n  }\n  return parseWalLsn(continuation.commitLsn) >= parseWalLsn(fallback)\n    ? continuation.commitLsn\n    : fallback;\n}\n\nfunction assertPageCheckpoint(input: {\n  readonly minLsn: string | undefined;\n  readonly nextCursor: string | null;\n  readonly response: DocumentSyncResponse;\n}): void {\n  if (input.response.commitLsnMode === \"untracked\") {\n    if (input.response.commitLsn !== \"0/0\") {\n      throw new InvalidDocumentSyncPullContinuationError(\n        \"Document sync continuation untracked LSN is invalid\",\n      );\n    }\n    return;\n  }\n  if (input.response.commitLsn === null) {\n    if (input.minLsn === undefined && input.nextCursor === null) return;\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync pull continuation is missing its checkpoint\",\n    );\n  }\n  let responseLsn: bigint;\n  try {\n    responseLsn = parseWalLsn(input.response.commitLsn);\n  } catch {\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync continuation commit LSN is invalid\",\n    );\n  }\n  if (input.minLsn === undefined) return;\n  let minimumLsn: bigint;\n  try {\n    minimumLsn = parseWalLsn(input.minLsn);\n  } catch {\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync minimum commit LSN is invalid\",\n    );\n  }\n  if (responseLsn < minimumLsn) {\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync continuation commit LSN regressed\",\n    );\n  }\n}\n\nfunction requirePullPage(response: DocumentSyncResponse) {\n  if (response.pullPage === undefined) {\n    throw new Error(\"Document sync response is missing pull page metadata\");\n  }\n  return response.pullPage;\n}\n\nasync function submitDocumentSyncPage(input: {\n  readonly expectedCommitLsnMode?: DocumentSyncCommitLsnMode | undefined;\n  readonly plan: DocumentSyncPlan;\n  readonly submit: () => Promise<DocumentSyncPageSubmission>;\n}): Promise<DocumentSyncSubmission> {\n  const page = await input.submit();\n  if (!page?.ok) return page;\n  if (\n    input.expectedCommitLsnMode !== undefined &&\n    page.response.commitLsnMode !== input.expectedCommitLsnMode\n  ) {\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync continuation commit LSN mode changed\",\n    );\n  }\n  const nextCursor = requirePullPage(page.response).nextCursor;\n  assertPageCheckpoint({\n    minLsn: input.plan.request.minLsn,\n    nextCursor,\n    response: page.response,\n  });\n  if (nextCursor !== null && page.response.commitLsn === null) {\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync pull continuation is missing its checkpoint\",\n    );\n  }\n  if (nextCursor !== null && nextCursor === input.plan.request.pullCursor) {\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync continuation cursor did not advance\",\n    );\n  }\n  return {\n    ok: true,\n    pullComplete: nextCursor === null,\n    response: page.response,\n  };\n}\n\nexport async function submitDocumentSync(input: {\n  apiClient: DocumentSyncApi;\n  expectedCommitLsnMode?: DocumentSyncCommitLsnMode | undefined;\n  plan: DocumentSyncPlan;\n}): Promise<DocumentSyncSubmission> {\n  return submitDocumentSyncPage({\n    expectedCommitLsnMode: input.expectedCommitLsnMode,\n    plan: input.plan,\n    submit: async () => {\n      const result = await input.apiClient.syncDocumentResult(\n        input.plan.documentId,\n        input.plan.request,\n        {\n          expectedPaymentRequiredOrganizationId: input.plan.organizationId,\n          reportErrors: false,\n        },\n      );\n      return result.ok ? { ok: true, response: result.data } : result;\n    },\n  });\n}\n"]}

package/data/documents/shared/syncResponseAuthorization.js

@@ -1,63 +0,0 @@
-import { computeDocumentContentKeyTargetHash, makeVerifiedDocumentKekTargets, } from "../../../internal/crypto/index.js";
-import { resolveEventContainerPaths } from "../../keyingProjectionVerification/documentDependencyPaths.js";
-import { sortDocumentTargets } from "./readers.js";
-export async function documentWriteAuthorizationForHeader(input) {
-    const source = input.plan.documentWriterAuthorization;
-    if (!source) {
-        if (input.allowMissingAuthorization) {
-            return null;
-        }
-        throw new Error("Document sync response lacks verified writer-authorization material");
-    }
-    const documentManifest = source.documentManifestByHash.get(input.manifestHash);
-    if (!documentManifest) {
-        throw new Error("Document sync response write manifest is not in verified history");
-    }
-    if (input.contentKeyBundle.documentId !== input.plan.documentId) {
-        throw new Error("Document sync response content-key bundle belongs to another document");
-    }
-    const targets = sortDocumentTargets(input.authorizationTargets);
-    if ((await computeDocumentContentKeyTargetHash(targets)) !== input.targetHash) {
-        throw new Error("Document sync response write targets are not canonical");
-    }
-    const linkedContainerIds = new Set(documentManifest.state.linkedContainerIds);
-    if (targets.length !== linkedContainerIds.size ||
-        targets.some((target) => !linkedContainerIds.has(target.containerId))) {
-        throw new Error("Document sync response write targets do not match the signed link set");
-    }
-    const { dependencyContainerPaths } = resolveEventContainerPaths({
-        containerPathByManifestHash: source.containerPathByManifestHash,
-        dependencyManifestHashes: input.dependencyManifestHashes,
-    });
-    // A writer needs one committed target, and can be unable to read another
-    // linked container. Validate the targets that are cited without inventing
-    // paths for uncited targets or dropping signed ancestor evidence.
-    for (const target of targets) {
-        const path = dependencyContainerPaths.find((candidate) => candidate.at(-1)?.manifestHash === target.containerManifestHash);
-        if (!path)
-            continue;
-        const leaf = path.at(-1);
-        if (!leaf ||
-            leaf.state.containerId !== target.containerId ||
-            leaf.state.organizationId !== input.plan.organizationId ||
-            leaf.state.containerKeyEpochId !== target.containerKeyEpochId) {
-            throw new Error("Document sync response write target lacks a verified container path");
-        }
-    }
-    const authorizingContainerPaths = dependencyContainerPaths;
-    const documentKekTargets = makeVerifiedDocumentKekTargets({
-        documentId: input.contentKeyBundle.documentId,
-        documentKeyTargetHash: input.targetHash,
-        linkedContainerKeyEpochIds: targets.map((target) => target.containerKeyEpochId),
-        linkedContainerManifestHashes: targets.map((target) => target.containerManifestHash),
-        linkSetManifestHash: input.manifestHash,
-        targets,
-    });
-    return {
-        authorizingContainerPaths,
-        documentKekTargets,
-        documentManifest,
-        principalPolicies: source.principalPolicies,
-    };
-}
-//# sourceMappingURL=syncResponseAuthorization.js.map

package/data/documents/shared/syncResponseAuthorization.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"syncResponseAuthorization.js","sourceRoot":"","sources":["syncResponseAuthorization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mCAAmC,EAEnC,8BAA8B,GAC/B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AACxG,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGhD,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,KAWzD;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC;IACtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK,CAAC,yBAAyB,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,CAAC,sBAAsB,CAAC,GAAG,CACxD,KAAK,CAAC,YAAY,CACnB,CAAC;IACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAChE,IACE,CAAC,MAAM,mCAAmC,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,UAAU,EACzE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC9E,IACE,OAAO,CAAC,MAAM,KAAK,kBAAkB,CAAC,IAAI;QAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EACrE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,wBAAwB,EAAE,GAAG,0BAA0B,CAAC;QAC9D,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;QAC/D,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;KACzD,CAAC,CAAC;IACH,yEAAyE;IACzE,0EAA0E;IAC1E,kEAAkE;IAClE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CACxC,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,KAAK,MAAM,CAAC,qBAAqB,CAClE,CAAC;QACF,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,IACE,CAAC,IAAI;YACL,IAAI,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;YAC7C,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,IAAI,CAAC,cAAc;YACvD,IAAI,CAAC,KAAK,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,EAC7D,CAAC;YACD,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,yBAAyB,GAAG,wBAAwB,CAAC;IAC3D,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;QACxD,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,UAAU;QAC7C,qBAAqB,EAAE,KAAK,CAAC,UAAU;QACvC,0BAA0B,EAAE,OAAO,CAAC,GAAG,CACrC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CACvC;QACD,6BAA6B,EAAE,OAAO,CAAC,GAAG,CACxC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CACzC;QACD,mBAAmB,EAAE,KAAK,CAAC,YAAY;QACvC,OAAO;KACR,CAAC,CAAC;IACH,OAAO;QACL,yBAAyB;QACzB,kBAAkB;QAClB,gBAAgB;QAChB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC;AACJ,CAAC","sourcesContent":["import {\n  computeDocumentContentKeyTargetHash,\n  type DocumentContentKeyTarget,\n  makeVerifiedDocumentKekTargets,\n} from \"@tearleads/crypto\";\nimport type { DocumentSyncResponse } from \"@tearleads/validators/response\";\nimport { resolveEventContainerPaths } from \"../../keyingProjectionVerification/documentDependencyPaths\";\nimport { sortDocumentTargets } from \"./readers\";\nimport type { DocumentSyncPlan } from \"./types\";\n\nexport async function documentWriteAuthorizationForHeader(input: {\n  readonly allowMissingAuthorization: boolean;\n  readonly dependencyManifestHashes: readonly string[];\n  readonly authorizationTargets: readonly DocumentContentKeyTarget[];\n  readonly contentKeyBundle: DocumentSyncResponse[\"contentKeyBundle\"];\n  readonly manifestHash: string;\n  readonly plan: Pick<\n    DocumentSyncPlan,\n    \"documentId\" | \"organizationId\" | \"documentWriterAuthorization\"\n  >;\n  readonly targetHash: string;\n}) {\n  const source = input.plan.documentWriterAuthorization;\n  if (!source) {\n    if (input.allowMissingAuthorization) {\n      return null;\n    }\n    throw new Error(\n      \"Document sync response lacks verified writer-authorization material\",\n    );\n  }\n  const documentManifest = source.documentManifestByHash.get(\n    input.manifestHash,\n  );\n  if (!documentManifest) {\n    throw new Error(\n      \"Document sync response write manifest is not in verified history\",\n    );\n  }\n  if (input.contentKeyBundle.documentId !== input.plan.documentId) {\n    throw new Error(\n      \"Document sync response content-key bundle belongs to another document\",\n    );\n  }\n\n  const targets = sortDocumentTargets(input.authorizationTargets);\n  if (\n    (await computeDocumentContentKeyTargetHash(targets)) !== input.targetHash\n  ) {\n    throw new Error(\"Document sync response write targets are not canonical\");\n  }\n  const linkedContainerIds = new Set(documentManifest.state.linkedContainerIds);\n  if (\n    targets.length !== linkedContainerIds.size ||\n    targets.some((target) => !linkedContainerIds.has(target.containerId))\n  ) {\n    throw new Error(\n      \"Document sync response write targets do not match the signed link set\",\n    );\n  }\n\n  const { dependencyContainerPaths } = resolveEventContainerPaths({\n    containerPathByManifestHash: source.containerPathByManifestHash,\n    dependencyManifestHashes: input.dependencyManifestHashes,\n  });\n  // A writer needs one committed target, and can be unable to read another\n  // linked container. Validate the targets that are cited without inventing\n  // paths for uncited targets or dropping signed ancestor evidence.\n  for (const target of targets) {\n    const path = dependencyContainerPaths.find(\n      (candidate) =>\n        candidate.at(-1)?.manifestHash === target.containerManifestHash,\n    );\n    if (!path) continue;\n    const leaf = path.at(-1);\n    if (\n      !leaf ||\n      leaf.state.containerId !== target.containerId ||\n      leaf.state.organizationId !== input.plan.organizationId ||\n      leaf.state.containerKeyEpochId !== target.containerKeyEpochId\n    ) {\n      throw new Error(\n        \"Document sync response write target lacks a verified container path\",\n      );\n    }\n  }\n  const authorizingContainerPaths = dependencyContainerPaths;\n  const documentKekTargets = makeVerifiedDocumentKekTargets({\n    documentId: input.contentKeyBundle.documentId,\n    documentKeyTargetHash: input.targetHash,\n    linkedContainerKeyEpochIds: targets.map(\n      (target) => target.containerKeyEpochId,\n    ),\n    linkedContainerManifestHashes: targets.map(\n      (target) => target.containerManifestHash,\n    ),\n    linkSetManifestHash: input.manifestHash,\n    targets,\n  });\n  return {\n    authorizingContainerPaths,\n    documentKekTargets,\n    documentManifest,\n    principalPolicies: source.principalPolicies,\n  };\n}\n"]}

package/data/documents/shared/syncResponses.d.ts

@@ -1,11 +0,0 @@
-import { type DocumentSyncResponse } from "../../../internal/validators/response/index.js";
-export { submitDocumentSync } from "./syncPagination.js";
-import type { DocumentSyncPlan, DocumentSyncSubmitFailure, DocumentWriterPublicKeyResolver, PersistedDocumentSyncState } from "./types.js";
-export declare class DocumentSyncResponseUpdateContentKeyError extends Error {
-    constructor(message: string);
-}
-export declare function persistedDocumentSyncStateFromResponse(plan: DocumentSyncPlan, response: DocumentSyncResponse, options: {
-    resolveWriterPublicKey: DocumentWriterPublicKeyResolver;
-}): Promise<PersistedDocumentSyncState>;
-export declare function isRetryableDocumentSyncConflict(failure: DocumentSyncSubmitFailure): boolean;
-export declare function isUpstreamDeletedDocumentSyncFailure(failure: DocumentSyncSubmitFailure): boolean;