@tearleads/client-sdk 0.1.63 → 0.1.65

package/data/persistence/locallyAcknowledgedCheckpointPersistence.d.ts

@@ -1,53 +0,0 @@
-import { type AccessManifest, type AccessManifestCheckpoint, type PrincipalPolicyCheckpoint, type VerifiedPrincipalPolicy } from "../../internal/crypto/index.js";
-import type { PrincipalPolicyBundleResponse } from "../../internal/validators/response/index.js";
-import { type ExecSql } from "../sqlite/sqlSchema.js";
-import { type AcknowledgedPrincipalGrantRetirements } from "./principalGrantRetirementPersistence.js";
-export interface LocallyAcknowledgedAccessManifestHead {
-    readonly checkpoint: AccessManifestCheckpoint;
-    readonly previousManifestHash: string | null;
-}
-export declare function locallyAuthoredAccessManifestHead(plan: {
-    readonly manifest: AccessManifest;
-    readonly manifestHash: string;
-}): LocallyAcknowledgedAccessManifestHead;
-/**
- * Commits only heads authored and signed by this client after an exact remote
- * acknowledgement check. Every non-initial head must directly extend the
- * latest durable pin; arbitrary remote projections must use the verified
- * projection checkpoint path instead.
- */
-export declare function advanceLocallyAcknowledgedAccessManifestHeadsAtomically(input: {
-    readonly execSql: ExecSql;
-    readonly heads: readonly LocallyAcknowledgedAccessManifestHead[];
-    /** Optional optimistic read dependencies, checked inside the write transaction. */
-    readonly expectedAccessManifestCheckpoints?: readonly AccessManifestCheckpoint[];
-    readonly expectedPrincipalPolicyCheckpoints?: readonly PrincipalPolicyCheckpoint[];
-    readonly stillCurrent?: (() => boolean) | undefined;
-}): Promise<boolean>;
-interface LocallyAcknowledgedPrincipalPolicyBundle {
-    readonly bundle: PrincipalPolicyBundleResponse;
-    readonly policy: VerifiedPrincipalPolicy;
-}
-/** Atomically pins and caches exact full policy bundles acknowledged by the API. */
-export declare function persistLocallyAcknowledgedPrincipalPolicyBundles(input: {
-    readonly entries: readonly LocallyAcknowledgedPrincipalPolicyBundle[];
-    readonly execSql: ExecSql;
-    readonly organizationId?: string | undefined;
-    readonly stillCurrent?: (() => boolean) | undefined;
-    readonly updatedAt: string;
-}): Promise<void>;
-export declare function persistLocallyAcknowledgedPrincipalPolicyBundle(input: LocallyAcknowledgedPrincipalPolicyBundle & {
-    readonly execSql: ExecSql;
-    readonly organizationId?: string | undefined;
-    readonly stillCurrent?: (() => boolean) | undefined;
-    readonly updatedAt: string;
-}): Promise<void>;
-export declare function retainLocallyAcknowledgedPrincipalPolicyBundles(input: {
-    readonly retiredContainers?: AcknowledgedPrincipalGrantRetirements | undefined;
-    readonly entries: readonly LocallyAcknowledgedPrincipalPolicyBundle[];
-    readonly execSql: ExecSql;
-    readonly organizationId?: string | undefined;
-    readonly stillCurrent?: (() => boolean) | undefined;
-    readonly updatedAt: string;
-}): Promise<void>;
-export {};

package/data/persistence/locallyAcknowledgedCheckpointPersistence.js

@@ -1,167 +0,0 @@
-import { accessManifestCheckpointFromManifest, KeyingVerificationError, verifyAccessManifestLocalCheckpoint, verifyPrincipalPolicyCheckpoint, } from "../../internal/crypto/index.js";
-import { keyingCheckpointTables, principalPolicyTables, } from "../sqlite/schema.js";
-import { getClientSQLitePersistenceRuntime, } from "../sqlite/sqlitePersistenceRuntime.js";
-import { ensureSqlTables } from "../sqlite/sqlSchema.js";
-import { accessManifestObjectKey, loadStoredAccessManifestCheckpoint, loadStoredPrincipalPolicyCheckpoint, principalPolicyKey, upsertAccessManifestCheckpointInTransaction, upsertPrincipalPolicyCheckpointInTransaction, } from "./keyingCheckpointPersistence.js";
-import { assertContainerNotRetired, storePrincipalGrantRetirements, } from "./principalGrantRetirementPersistence.js";
-import { retainPrincipalPolicyBundleInTransaction, writePrincipalPolicyBundleInTransaction, } from "./principalPolicyPersistence.js";
-import { assertBundleMatchesVerifiedPolicy } from "./verifiedPrincipalPolicyBundle.js";
-export function locallyAuthoredAccessManifestHead(plan) {
-    return {
-        checkpoint: accessManifestCheckpointFromManifest({
-            manifest: plan.manifest,
-            manifestHash: plan.manifestHash,
-        }),
-        previousManifestHash: plan.manifest.previousManifestHash,
-    };
-}
-function validateAcknowledgedHead(head, localCheckpoint) {
-    if (!localCheckpoint) {
-        if (head.checkpoint.epoch !== 1 || head.previousManifestHash !== null) {
-            throw new KeyingVerificationError("stale_predecessor", "locally acknowledged access manifest does not begin at epoch 1");
-        }
-        return;
-    }
-    verifyAccessManifestLocalCheckpoint({
-        checkpointPredecessors: [],
-        current: {
-            ...head.checkpoint,
-            previousManifestHash: head.previousManifestHash,
-        },
-        localCheckpoint,
-    });
-}
-async function validateAcknowledgedHeads(tx, heads) {
-    const pending = new Map();
-    for (const head of heads) {
-        await assertContainerNotRetired(tx, head.checkpoint);
-        const key = accessManifestObjectKey(head.checkpoint);
-        if (pending.has(key)) {
-            throw new KeyingVerificationError("equivocation", `locally acknowledged batch contains multiple heads for ${key}`);
-        }
-        validateAcknowledgedHead(head, await loadStoredAccessManifestCheckpoint(tx, head.checkpoint));
-        pending.set(key, head.checkpoint);
-    }
-    return pending;
-}
-async function writeAcknowledgedHeads(tx, pending, updatedAt) {
-    for (const checkpoint of pending.values()) {
-        await upsertAccessManifestCheckpointInTransaction(tx, checkpoint, updatedAt);
-    }
-}
-/**
- * Commits only heads authored and signed by this client after an exact remote
- * acknowledgement check. Every non-initial head must directly extend the
- * latest durable pin; arbitrary remote projections must use the verified
- * projection checkpoint path instead.
- */
-export async function advanceLocallyAcknowledgedAccessManifestHeadsAtomically(input) {
-    await ensureSqlTables(input.execSql, keyingCheckpointTables);
-    const updatedAt = new Date().toISOString();
-    const runtime = getClientSQLitePersistenceRuntime(input.execSql);
-    const acknowledge = async (tx) => {
-        for (const expected of input.expectedAccessManifestCheckpoints ?? []) {
-            const current = await loadStoredAccessManifestCheckpoint(tx, expected);
-            if (current?.epoch !== expected.epoch ||
-                current.manifestHash !== expected.manifestHash) {
-                throw new KeyingVerificationError("stale_predecessor", "A re-citation container checkpoint changed before acknowledgement");
-            }
-        }
-        for (const expected of input.expectedPrincipalPolicyCheckpoints ?? []) {
-            const current = await loadStoredPrincipalPolicyCheckpoint(tx, expected);
-            if (current?.version !== expected.version ||
-                current.stateHash !== expected.stateHash) {
-                throw new KeyingVerificationError("stale_predecessor", "A re-citation principal policy checkpoint changed before acknowledgement");
-            }
-        }
-        const pending = await validateAcknowledgedHeads(tx, input.heads);
-        await writeAcknowledgedHeads(tx, pending, updatedAt);
-    };
-    if (input.stillCurrent) {
-        return (await runtime.guardedTransaction(acknowledge, input.stillCurrent, {
-            behavior: "immediate",
-        })).committed;
-    }
-    await runtime.transaction(acknowledge, { behavior: "immediate" });
-    return true;
-}
-function validateAcknowledgedPolicy(policy, checkpoint) {
-    verifyPrincipalPolicyCheckpoint({
-        chain: policy.history ?? [],
-        currentState: policy.state,
-        localCheckpoint: checkpoint,
-    });
-    if (!checkpoint && policy.version !== 1) {
-        throw new KeyingVerificationError("stale_predecessor", "locally acknowledged principal policy does not begin at version 1");
-    }
-    if (checkpoint && policy.version > checkpoint.version + 1) {
-        throw new KeyingVerificationError("stale_predecessor", "locally acknowledged principal policy does not directly extend the durable checkpoint");
-    }
-}
-function assertUniqueAcknowledgedPolicies(entries) {
-    const seen = new Set();
-    for (const { policy } of entries) {
-        const key = principalPolicyKey(policy);
-        if (seen.has(key)) {
-            throw new KeyingVerificationError("duplicate_entry", `locally acknowledged policy batch repeats ${key}`);
-        }
-        seen.add(key);
-    }
-}
-async function storeAcknowledgedPrincipalPolicyBundles(input) {
-    assertUniqueAcknowledgedPolicies(input.entries);
-    await Promise.all(input.entries.map((entry) => assertBundleMatchesVerifiedPolicy(entry)));
-    await ensureSqlTables(input.execSql, [
-        ...principalPolicyTables,
-        ...keyingCheckpointTables,
-    ]);
-    const runtime = getClientSQLitePersistenceRuntime(input.execSql);
-    const store = async (tx) => {
-        for (const { policy } of input.entries) {
-            validateAcknowledgedPolicy(policy, await loadStoredPrincipalPolicyCheckpoint(tx, policy));
-        }
-        if (input.retiredContainers)
-            await storePrincipalGrantRetirements(tx, input.retiredContainers, input.entries.map(({ policy }) => policy), input.organizationId);
-        for (const entry of input.entries) {
-            if (input.placement === "current") {
-                await writePrincipalPolicyBundleInTransaction(tx, entry.bundle, input.updatedAt, input.organizationId);
-            }
-            else {
-                await retainPrincipalPolicyBundleInTransaction(tx, entry.bundle, input.updatedAt, input.organizationId);
-            }
-        }
-        for (const { policy } of input.entries) {
-            await upsertPrincipalPolicyCheckpointInTransaction(tx, policy.checkpoint, input.updatedAt, input.organizationId);
-        }
-    };
-    if (input.stillCurrent) {
-        await runtime.guardedTransaction(store, input.stillCurrent, {
-            behavior: "immediate",
-        });
-        return;
-    }
-    await runtime.transaction(store, { behavior: "immediate" });
-}
-/** Atomically pins and caches exact full policy bundles acknowledged by the API. */
-export function persistLocallyAcknowledgedPrincipalPolicyBundles(input) {
-    return storeAcknowledgedPrincipalPolicyBundles({
-        ...input,
-        placement: "current",
-    });
-}
-export function persistLocallyAcknowledgedPrincipalPolicyBundle(input) {
-    return persistLocallyAcknowledgedPrincipalPolicyBundles({
-        entries: [input],
-        execSql: input.execSql,
-        organizationId: input.organizationId,
-        stillCurrent: input.stillCurrent,
-        updatedAt: input.updatedAt,
-    });
-}
-export function retainLocallyAcknowledgedPrincipalPolicyBundles(input) {
-    return storeAcknowledgedPrincipalPolicyBundles({
-        ...input,
-        placement: "history",
-    });
-}
-//# sourceMappingURL=locallyAcknowledgedCheckpointPersistence.js.map

package/data/persistence/locallyAcknowledgedCheckpointPersistence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"locallyAcknowledgedCheckpointPersistence.js","sourceRoot":"","sources":["locallyAcknowledgedCheckpointPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,oCAAoC,EACpC,uBAAuB,EAGvB,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,iCAAiC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAgB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EACL,uBAAuB,EACvB,kCAAkC,EAClC,mCAAmC,EACnC,kBAAkB,EAClB,2CAA2C,EAC3C,4CAA4C,GAC7C,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,wCAAwC,EACxC,uCAAuC,GACxC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AAOpF,MAAM,UAAU,iCAAiC,CAAC,IAGjD;IACC,OAAO;QACL,UAAU,EAAE,oCAAoC,CAAC;YAC/C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC;QACF,oBAAoB,EAAE,IAAI,CAAC,QAAQ,CAAC,oBAAoB;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,IAA2C,EAC3C,eAAgD;IAEhD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;YACtE,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,gEAAgE,CACjE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,mCAAmC,CAAC;QAClC,sBAAsB,EAAE,EAAE;QAC1B,OAAO,EAAE;YACP,GAAG,IAAI,CAAC,UAAU;YAClB,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;SAChD;QACD,eAAe;KAChB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,EAAgC,EAChC,KAAuD;IAEvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,0DAA0D,GAAG,EAAE,CAChE,CAAC;QACJ,CAAC;QACD,wBAAwB,CACtB,IAAI,EACJ,MAAM,kCAAkC,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAC9D,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,EAAgC,EAChC,OAAsD,EACtD,SAAiB;IAEjB,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,MAAM,2CAA2C,CAC/C,EAAE,EACF,UAAU,EACV,SAAS,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uDAAuD,CAAC,KAO7E;IACC,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,KAAK,EAAE,EAAgC,EAAE,EAAE;QAC7D,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,MAAM,kCAAkC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACvE,IACE,OAAO,EAAE,KAAK,KAAK,QAAQ,CAAC,KAAK;gBACjC,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,EAC9C,CAAC;gBACD,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,mEAAmE,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,kCAAkC,IAAI,EAAE,EAAE,CAAC;YACtE,MAAM,OAAO,GAAG,MAAM,mCAAmC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACxE,IACE,OAAO,EAAE,OAAO,KAAK,QAAQ,CAAC,OAAO;gBACrC,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EACxC,CAAC;gBACD,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,0EAA0E,CAC3E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,sBAAsB,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,OAAO,CACL,MAAM,OAAO,CAAC,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE;YAChE,QAAQ,EAAE,WAAW;SACtB,CAAC,CACH,CAAC,SAAS,CAAC;IACd,CAAC;IACD,MAAM,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CACjC,MAA+B,EAC/B,UAA4C;IAE5C,+BAA+B,CAAC;QAC9B,KAAK,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC3B,YAAY,EAAE,MAAM,CAAC,KAAK;QAC1B,eAAe,EAAE,UAAU;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,IAAI,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,uFAAuF,CACxF,CAAC;IACJ,CAAC;AACH,CAAC;AAOD,SAAS,gCAAgC,CACvC,OAA4D;IAE5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,6CAA6C,GAAG,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uCAAuC,CAAC,KAUtD;IACC,gCAAgC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAC,CACvE,CAAC;IACF,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE;QACnC,GAAG,qBAAqB;QACxB,GAAG,sBAAsB;KAC1B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,KAAK,EAAE,EAAgC,EAAE,EAAE;QACvD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACvC,0BAA0B,CACxB,MAAM,EACN,MAAM,mCAAmC,CAAC,EAAE,EAAE,MAAM,CAAC,CACtD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,iBAAiB;YACzB,MAAM,8BAA8B,CAClC,EAAE,EACF,KAAK,CAAC,iBAAiB,EACvB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EACzC,KAAK,CAAC,cAAc,CACrB,CAAC;QACJ,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,uCAAuC,CAC3C,EAAE,EACF,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,CACrB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,wCAAwC,CAC5C,EAAE,EACF,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,CACrB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,4CAA4C,CAChD,EAAE,EACF,MAAM,CAAC,UAAU,EACjB,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,CACrB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE;YAC1D,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gDAAgD,CAAC,KAMhE;IACC,OAAO,uCAAuC,CAAC;QAC7C,GAAG,KAAK;QACR,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+CAA+C,CAC7D,KAKC;IAED,OAAO,gDAAgD,CAAC;QACtD,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+CAA+C,CAAC,KAS/D;IACC,OAAO,uCAAuC,CAAC;QAC7C,GAAG,KAAK;QACR,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  type AccessManifest,\n  type AccessManifestCheckpoint,\n  accessManifestCheckpointFromManifest,\n  KeyingVerificationError,\n  type PrincipalPolicyCheckpoint,\n  type VerifiedPrincipalPolicy,\n  verifyAccessManifestLocalCheckpoint,\n  verifyPrincipalPolicyCheckpoint,\n} from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport {\n  keyingCheckpointTables,\n  principalPolicyTables,\n} from \"../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../sqlite/sqlSchema\";\nimport {\n  accessManifestObjectKey,\n  loadStoredAccessManifestCheckpoint,\n  loadStoredPrincipalPolicyCheckpoint,\n  principalPolicyKey,\n  upsertAccessManifestCheckpointInTransaction,\n  upsertPrincipalPolicyCheckpointInTransaction,\n} from \"./keyingCheckpointPersistence\";\nimport {\n  type AcknowledgedPrincipalGrantRetirements,\n  assertContainerNotRetired,\n  storePrincipalGrantRetirements,\n} from \"./principalGrantRetirementPersistence\";\nimport {\n  retainPrincipalPolicyBundleInTransaction,\n  writePrincipalPolicyBundleInTransaction,\n} from \"./principalPolicyPersistence\";\nimport { assertBundleMatchesVerifiedPolicy } from \"./verifiedPrincipalPolicyBundle\";\n\nexport interface LocallyAcknowledgedAccessManifestHead {\n  readonly checkpoint: AccessManifestCheckpoint;\n  readonly previousManifestHash: string | null;\n}\n\nexport function locallyAuthoredAccessManifestHead(plan: {\n  readonly manifest: AccessManifest;\n  readonly manifestHash: string;\n}): LocallyAcknowledgedAccessManifestHead {\n  return {\n    checkpoint: accessManifestCheckpointFromManifest({\n      manifest: plan.manifest,\n      manifestHash: plan.manifestHash,\n    }),\n    previousManifestHash: plan.manifest.previousManifestHash,\n  };\n}\n\nfunction validateAcknowledgedHead(\n  head: LocallyAcknowledgedAccessManifestHead,\n  localCheckpoint: AccessManifestCheckpoint | null,\n): void {\n  if (!localCheckpoint) {\n    if (head.checkpoint.epoch !== 1 || head.previousManifestHash !== null) {\n      throw new KeyingVerificationError(\n        \"stale_predecessor\",\n        \"locally acknowledged access manifest does not begin at epoch 1\",\n      );\n    }\n    return;\n  }\n\n  verifyAccessManifestLocalCheckpoint({\n    checkpointPredecessors: [],\n    current: {\n      ...head.checkpoint,\n      previousManifestHash: head.previousManifestHash,\n    },\n    localCheckpoint,\n  });\n}\n\nasync function validateAcknowledgedHeads(\n  tx: ClientSQLiteTransactionScope,\n  heads: readonly LocallyAcknowledgedAccessManifestHead[],\n): Promise<Map<string, AccessManifestCheckpoint>> {\n  const pending = new Map<string, AccessManifestCheckpoint>();\n  for (const head of heads) {\n    await assertContainerNotRetired(tx, head.checkpoint);\n    const key = accessManifestObjectKey(head.checkpoint);\n    if (pending.has(key)) {\n      throw new KeyingVerificationError(\n        \"equivocation\",\n        `locally acknowledged batch contains multiple heads for ${key}`,\n      );\n    }\n    validateAcknowledgedHead(\n      head,\n      await loadStoredAccessManifestCheckpoint(tx, head.checkpoint),\n    );\n    pending.set(key, head.checkpoint);\n  }\n  return pending;\n}\n\nasync function writeAcknowledgedHeads(\n  tx: ClientSQLiteTransactionScope,\n  pending: ReadonlyMap<string, AccessManifestCheckpoint>,\n  updatedAt: string,\n): Promise<void> {\n  for (const checkpoint of pending.values()) {\n    await upsertAccessManifestCheckpointInTransaction(\n      tx,\n      checkpoint,\n      updatedAt,\n    );\n  }\n}\n\n/**\n * Commits only heads authored and signed by this client after an exact remote\n * acknowledgement check. Every non-initial head must directly extend the\n * latest durable pin; arbitrary remote projections must use the verified\n * projection checkpoint path instead.\n */\nexport async function advanceLocallyAcknowledgedAccessManifestHeadsAtomically(input: {\n  readonly execSql: ExecSql;\n  readonly heads: readonly LocallyAcknowledgedAccessManifestHead[];\n  /** Optional optimistic read dependencies, checked inside the write transaction. */\n  readonly expectedAccessManifestCheckpoints?: readonly AccessManifestCheckpoint[];\n  readonly expectedPrincipalPolicyCheckpoints?: readonly PrincipalPolicyCheckpoint[];\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<boolean> {\n  await ensureSqlTables(input.execSql, keyingCheckpointTables);\n  const updatedAt = new Date().toISOString();\n  const runtime = getClientSQLitePersistenceRuntime(input.execSql);\n  const acknowledge = async (tx: ClientSQLiteTransactionScope) => {\n    for (const expected of input.expectedAccessManifestCheckpoints ?? []) {\n      const current = await loadStoredAccessManifestCheckpoint(tx, expected);\n      if (\n        current?.epoch !== expected.epoch ||\n        current.manifestHash !== expected.manifestHash\n      ) {\n        throw new KeyingVerificationError(\n          \"stale_predecessor\",\n          \"A re-citation container checkpoint changed before acknowledgement\",\n        );\n      }\n    }\n    for (const expected of input.expectedPrincipalPolicyCheckpoints ?? []) {\n      const current = await loadStoredPrincipalPolicyCheckpoint(tx, expected);\n      if (\n        current?.version !== expected.version ||\n        current.stateHash !== expected.stateHash\n      ) {\n        throw new KeyingVerificationError(\n          \"stale_predecessor\",\n          \"A re-citation principal policy checkpoint changed before acknowledgement\",\n        );\n      }\n    }\n    const pending = await validateAcknowledgedHeads(tx, input.heads);\n    await writeAcknowledgedHeads(tx, pending, updatedAt);\n  };\n  if (input.stillCurrent) {\n    return (\n      await runtime.guardedTransaction(acknowledge, input.stillCurrent, {\n        behavior: \"immediate\",\n      })\n    ).committed;\n  }\n  await runtime.transaction(acknowledge, { behavior: \"immediate\" });\n  return true;\n}\n\nfunction validateAcknowledgedPolicy(\n  policy: VerifiedPrincipalPolicy,\n  checkpoint: PrincipalPolicyCheckpoint | null,\n): void {\n  verifyPrincipalPolicyCheckpoint({\n    chain: policy.history ?? [],\n    currentState: policy.state,\n    localCheckpoint: checkpoint,\n  });\n  if (!checkpoint && policy.version !== 1) {\n    throw new KeyingVerificationError(\n      \"stale_predecessor\",\n      \"locally acknowledged principal policy does not begin at version 1\",\n    );\n  }\n  if (checkpoint && policy.version > checkpoint.version + 1) {\n    throw new KeyingVerificationError(\n      \"stale_predecessor\",\n      \"locally acknowledged principal policy does not directly extend the durable checkpoint\",\n    );\n  }\n}\n\ninterface LocallyAcknowledgedPrincipalPolicyBundle {\n  readonly bundle: PrincipalPolicyBundleResponse;\n  readonly policy: VerifiedPrincipalPolicy;\n}\n\nfunction assertUniqueAcknowledgedPolicies(\n  entries: readonly LocallyAcknowledgedPrincipalPolicyBundle[],\n): void {\n  const seen = new Set<string>();\n  for (const { policy } of entries) {\n    const key = principalPolicyKey(policy);\n    if (seen.has(key)) {\n      throw new KeyingVerificationError(\n        \"duplicate_entry\",\n        `locally acknowledged policy batch repeats ${key}`,\n      );\n    }\n    seen.add(key);\n  }\n}\n\nasync function storeAcknowledgedPrincipalPolicyBundles(input: {\n  readonly retiredContainers?:\n    | AcknowledgedPrincipalGrantRetirements\n    | undefined;\n  readonly entries: readonly LocallyAcknowledgedPrincipalPolicyBundle[];\n  readonly execSql: ExecSql;\n  readonly organizationId?: string | undefined;\n  readonly placement: \"current\" | \"history\";\n  readonly stillCurrent?: (() => boolean) | undefined;\n  readonly updatedAt: string;\n}): Promise<void> {\n  assertUniqueAcknowledgedPolicies(input.entries);\n  await Promise.all(\n    input.entries.map((entry) => assertBundleMatchesVerifiedPolicy(entry)),\n  );\n  await ensureSqlTables(input.execSql, [\n    ...principalPolicyTables,\n    ...keyingCheckpointTables,\n  ]);\n  const runtime = getClientSQLitePersistenceRuntime(input.execSql);\n  const store = async (tx: ClientSQLiteTransactionScope) => {\n    for (const { policy } of input.entries) {\n      validateAcknowledgedPolicy(\n        policy,\n        await loadStoredPrincipalPolicyCheckpoint(tx, policy),\n      );\n    }\n    if (input.retiredContainers)\n      await storePrincipalGrantRetirements(\n        tx,\n        input.retiredContainers,\n        input.entries.map(({ policy }) => policy),\n        input.organizationId,\n      );\n    for (const entry of input.entries) {\n      if (input.placement === \"current\") {\n        await writePrincipalPolicyBundleInTransaction(\n          tx,\n          entry.bundle,\n          input.updatedAt,\n          input.organizationId,\n        );\n      } else {\n        await retainPrincipalPolicyBundleInTransaction(\n          tx,\n          entry.bundle,\n          input.updatedAt,\n          input.organizationId,\n        );\n      }\n    }\n    for (const { policy } of input.entries) {\n      await upsertPrincipalPolicyCheckpointInTransaction(\n        tx,\n        policy.checkpoint,\n        input.updatedAt,\n        input.organizationId,\n      );\n    }\n  };\n  if (input.stillCurrent) {\n    await runtime.guardedTransaction(store, input.stillCurrent, {\n      behavior: \"immediate\",\n    });\n    return;\n  }\n  await runtime.transaction(store, { behavior: \"immediate\" });\n}\n\n/** Atomically pins and caches exact full policy bundles acknowledged by the API. */\nexport function persistLocallyAcknowledgedPrincipalPolicyBundles(input: {\n  readonly entries: readonly LocallyAcknowledgedPrincipalPolicyBundle[];\n  readonly execSql: ExecSql;\n  readonly organizationId?: string | undefined;\n  readonly stillCurrent?: (() => boolean) | undefined;\n  readonly updatedAt: string;\n}): Promise<void> {\n  return storeAcknowledgedPrincipalPolicyBundles({\n    ...input,\n    placement: \"current\",\n  });\n}\n\nexport function persistLocallyAcknowledgedPrincipalPolicyBundle(\n  input: LocallyAcknowledgedPrincipalPolicyBundle & {\n    readonly execSql: ExecSql;\n    readonly organizationId?: string | undefined;\n    readonly stillCurrent?: (() => boolean) | undefined;\n    readonly updatedAt: string;\n  },\n): Promise<void> {\n  return persistLocallyAcknowledgedPrincipalPolicyBundles({\n    entries: [input],\n    execSql: input.execSql,\n    organizationId: input.organizationId,\n    stillCurrent: input.stillCurrent,\n    updatedAt: input.updatedAt,\n  });\n}\n\nexport function retainLocallyAcknowledgedPrincipalPolicyBundles(input: {\n  readonly retiredContainers?:\n    | AcknowledgedPrincipalGrantRetirements\n    | undefined;\n  readonly entries: readonly LocallyAcknowledgedPrincipalPolicyBundle[];\n  readonly execSql: ExecSql;\n  readonly organizationId?: string | undefined;\n  readonly stillCurrent?: (() => boolean) | undefined;\n  readonly updatedAt: string;\n}): Promise<void> {\n  return storeAcknowledgedPrincipalPolicyBundles({\n    ...input,\n    placement: \"history\",\n  });\n}\n"]}

package/data/persistence/organizationReplacementCheckpointPersistence.js

@@ -1,72 +0,0 @@
-import { KeyingVerificationError, } from "../../internal/crypto/index.js";
-import { keyingCheckpointTables, principalPolicyTables, } from "../sqlite/schema.js";
-import { getClientSQLitePersistenceRuntime } from "../sqlite/sqlitePersistenceRuntime.js";
-import { ensureSqlTables } from "../sqlite/sqlSchema.js";
-import { loadStoredAccessManifestCheckpoint, loadStoredPrincipalPolicyCheckpoint, upsertAccessManifestCheckpointInTransaction, upsertPrincipalPolicyCheckpointInTransaction, } from "./keyingCheckpointPersistence.js";
-import { assertContainerNotRetired } from "./principalGrantRetirementPersistence.js";
-import { recordPrincipalPolicyOrganizationInTransaction } from "./principalPolicyOrganizationPersistence.js";
-/**
- * A verified authorization from this identity also authenticates the winning
- * device's genesis. Seed first-sight pins before adopting its IDs; retain any
- * later observations rather than rolling them back to the provisioning epoch.
- */
-export async function persistOrganizationReplacementCheckpoints(input) {
-    const authorization = input.authorization;
-    const organizationId = authorization.organizationId;
-    const root = {
-        objectKind: "container",
-        objectId: authorization.rootContainerId,
-        organizationId,
-        epoch: 1,
-        manifestHash: authorization.rootManifestHash,
-    };
-    const principals = [
-        {
-            principalType: "organization",
-            principalId: organizationId,
-            version: 1,
-            stateHash: authorization.organizationStateHash,
-        },
-        {
-            principalType: "group",
-            principalId: authorization.adminGroupId,
-            version: 1,
-            stateHash: authorization.adminGroupStateHash,
-        },
-        {
-            principalType: "group",
-            principalId: authorization.memberGroupId,
-            version: 1,
-            stateHash: authorization.memberGroupStateHash,
-        },
-    ];
-    await ensureSqlTables(input.execSql, [
-        ...principalPolicyTables,
-        ...keyingCheckpointTables,
-    ]);
-    const runtime = getClientSQLitePersistenceRuntime(input.execSql);
-    const result = await runtime.guardedTransaction(async (tx) => {
-        const updatedAt = new Date().toISOString();
-        await assertContainerNotRetired(tx, root);
-        const storedRoot = await loadStoredAccessManifestCheckpoint(tx, root);
-        if (storedRoot?.epoch === 1 &&
-            storedRoot.manifestHash !== root.manifestHash)
-            throw new KeyingVerificationError("equivocation", "Replacement root conflicts with its local genesis checkpoint");
-        if (!storedRoot)
-            await upsertAccessManifestCheckpointInTransaction(tx, root, updatedAt);
-        for (const principal of principals) {
-            await recordPrincipalPolicyOrganizationInTransaction(tx, {
-                principalId: principal.principalId,
-                principalType: principal.principalType,
-                organizationId,
-            });
-            const stored = await loadStoredPrincipalPolicyCheckpoint(tx, principal);
-            if (stored?.version === 1 && stored.stateHash !== principal.stateHash)
-                throw new KeyingVerificationError("equivocation", "Replacement policy conflicts with its local genesis checkpoint");
-            if (!stored)
-                await upsertPrincipalPolicyCheckpointInTransaction(tx, principal, updatedAt, organizationId);
-        }
-    }, input.stillCurrent ?? (() => true), { behavior: "immediate" });
-    return result.committed;
-}
-//# sourceMappingURL=organizationReplacementCheckpointPersistence.js.map

package/data/persistence/organizationReplacementCheckpointPersistence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"organizationReplacementCheckpointPersistence.js","sourceRoot":"","sources":["organizationReplacementCheckpointPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,uBAAuB,GAGxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAgB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EACL,kCAAkC,EAClC,mCAAmC,EACnC,2CAA2C,EAC3C,4CAA4C,GAC7C,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,EAAE,8CAA8C,EAAE,MAAM,0CAA0C,CAAC;AAE1G;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAAC,KAI/D;IACC,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IAC1C,MAAM,cAAc,GAAG,aAAa,CAAC,cAAc,CAAC;IACpD,MAAM,IAAI,GAA6B;QACrC,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,aAAa,CAAC,eAAe;QACvC,cAAc;QACd,KAAK,EAAE,CAAC;QACR,YAAY,EAAE,aAAa,CAAC,gBAAgB;KAC7C,CAAC;IACF,MAAM,UAAU,GAAgC;QAC9C;YACE,aAAa,EAAE,cAAc;YAC7B,WAAW,EAAE,cAAc;YAC3B,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,aAAa,CAAC,qBAAqB;SAC/C;QACD;YACE,aAAa,EAAE,OAAO;YACtB,WAAW,EAAE,aAAa,CAAC,YAAY;YACvC,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,aAAa,CAAC,mBAAmB;SAC7C;QACD;YACE,aAAa,EAAE,OAAO;YACtB,WAAW,EAAE,aAAa,CAAC,aAAa;YACxC,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,aAAa,CAAC,oBAAoB;SAC9C;KACF,CAAC;IACF,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE;QACnC,GAAG,qBAAqB;QACxB,GAAG,sBAAsB;KAC1B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAC7C,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,kCAAkC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACtE,IACE,UAAU,EAAE,KAAK,KAAK,CAAC;YACvB,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;YAE7C,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,8DAA8D,CAC/D,CAAC;QACJ,IAAI,CAAC,UAAU;YACb,MAAM,2CAA2C,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACzE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,8CAA8C,CAAC,EAAE,EAAE;gBACvD,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,aAAa,EAAE,SAAS,CAAC,aAAa;gBACtC,cAAc;aACf,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,mCAAmC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACxE,IAAI,MAAM,EAAE,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;gBACnE,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,gEAAgE,CACjE,CAAC;YACJ,IAAI,CAAC,MAAM;gBACT,MAAM,4CAA4C,CAChD,EAAE,EACF,SAAS,EACT,SAAS,EACT,cAAc,CACf,CAAC;QACN,CAAC;IACH,CAAC,EACD,KAAK,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAClC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACF,OAAO,MAAM,CAAC,SAAS,CAAC;AAC1B,CAAC","sourcesContent":["import {\n  type AccessManifestCheckpoint,\n  KeyingVerificationError,\n  type PrincipalPolicyCheckpoint,\n  type VerifiedOrganizationReplacementAuthorization,\n} from \"@tearleads/crypto\";\nimport {\n  keyingCheckpointTables,\n  principalPolicyTables,\n} from \"../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../sqlite/sqlSchema\";\nimport {\n  loadStoredAccessManifestCheckpoint,\n  loadStoredPrincipalPolicyCheckpoint,\n  upsertAccessManifestCheckpointInTransaction,\n  upsertPrincipalPolicyCheckpointInTransaction,\n} from \"./keyingCheckpointPersistence\";\nimport { assertContainerNotRetired } from \"./principalGrantRetirementPersistence\";\nimport { recordPrincipalPolicyOrganizationInTransaction } from \"./principalPolicyOrganizationPersistence\";\n\n/**\n * A verified authorization from this identity also authenticates the winning\n * device's genesis. Seed first-sight pins before adopting its IDs; retain any\n * later observations rather than rolling them back to the provisioning epoch.\n */\nexport async function persistOrganizationReplacementCheckpoints(input: {\n  readonly authorization: VerifiedOrganizationReplacementAuthorization;\n  readonly execSql: ExecSql;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<boolean> {\n  const authorization = input.authorization;\n  const organizationId = authorization.organizationId;\n  const root: AccessManifestCheckpoint = {\n    objectKind: \"container\",\n    objectId: authorization.rootContainerId,\n    organizationId,\n    epoch: 1,\n    manifestHash: authorization.rootManifestHash,\n  };\n  const principals: PrincipalPolicyCheckpoint[] = [\n    {\n      principalType: \"organization\",\n      principalId: organizationId,\n      version: 1,\n      stateHash: authorization.organizationStateHash,\n    },\n    {\n      principalType: \"group\",\n      principalId: authorization.adminGroupId,\n      version: 1,\n      stateHash: authorization.adminGroupStateHash,\n    },\n    {\n      principalType: \"group\",\n      principalId: authorization.memberGroupId,\n      version: 1,\n      stateHash: authorization.memberGroupStateHash,\n    },\n  ];\n  await ensureSqlTables(input.execSql, [\n    ...principalPolicyTables,\n    ...keyingCheckpointTables,\n  ]);\n  const runtime = getClientSQLitePersistenceRuntime(input.execSql);\n  const result = await runtime.guardedTransaction(\n    async (tx) => {\n      const updatedAt = new Date().toISOString();\n      await assertContainerNotRetired(tx, root);\n      const storedRoot = await loadStoredAccessManifestCheckpoint(tx, root);\n      if (\n        storedRoot?.epoch === 1 &&\n        storedRoot.manifestHash !== root.manifestHash\n      )\n        throw new KeyingVerificationError(\n          \"equivocation\",\n          \"Replacement root conflicts with its local genesis checkpoint\",\n        );\n      if (!storedRoot)\n        await upsertAccessManifestCheckpointInTransaction(tx, root, updatedAt);\n      for (const principal of principals) {\n        await recordPrincipalPolicyOrganizationInTransaction(tx, {\n          principalId: principal.principalId,\n          principalType: principal.principalType,\n          organizationId,\n        });\n        const stored = await loadStoredPrincipalPolicyCheckpoint(tx, principal);\n        if (stored?.version === 1 && stored.stateHash !== principal.stateHash)\n          throw new KeyingVerificationError(\n            \"equivocation\",\n            \"Replacement policy conflicts with its local genesis checkpoint\",\n          );\n        if (!stored)\n          await upsertPrincipalPolicyCheckpointInTransaction(\n            tx,\n            principal,\n            updatedAt,\n            organizationId,\n          );\n      }\n    },\n    input.stillCurrent ?? (() => true),\n    { behavior: \"immediate\" },\n  );\n  return result.committed;\n}\n"]}

package/data/persistence/principalAuthorizationCheckpoints.js

@@ -1,29 +0,0 @@
-import { KeyingVerificationError, verifyPrincipalPolicyCheckpoint, } from "../../internal/crypto/index.js";
-import { loadStoredPrincipalPolicyCheckpoint } from "./keyingCheckpointPersistence.js";
-export class PrincipalAuthorizationCheckpointUnavailableError extends KeyingVerificationError {
-    constructor() {
-        super("missing_dependency", "Public authorization cannot connect to the latest durable checkpoint");
-    }
-}
-/** Validate public evidence or a verified private ancestry bridge without admitting pins. */
-export async function validatePrincipalAuthorizationCheckpoints(tx, policies) {
-    for (const policy of policies) {
-        const checkpoint = await loadStoredPrincipalPolicyCheckpoint(tx, policy);
-        if (!checkpoint)
-            continue;
-        const matchingHead = policies.filter((other) => other.principalType === policy.principalType &&
-            other.principalId === policy.principalId &&
-            other.stateHash === policy.stateHash);
-        const chain = matchingHead.flatMap((other) => other.retainedHistory);
-        if (checkpoint.version > policy.version ||
-            (checkpoint.version < policy.version &&
-                !chain.some(({ state }) => state.version === checkpoint.version)))
-            throw new PrincipalAuthorizationCheckpointUnavailableError();
-        verifyPrincipalPolicyCheckpoint({
-            chain,
-            currentState: policy.state,
-            localCheckpoint: checkpoint,
-        });
-    }
-}
-//# sourceMappingURL=principalAuthorizationCheckpoints.js.map

package/data/persistence/principalAuthorizationCheckpoints.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principalAuthorizationCheckpoints.js","sourceRoot":"","sources":["principalAuthorizationCheckpoints.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EAGvB,+BAA+B,GAChC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAEpF,MAAM,OAAO,gDAAiD,SAAQ,uBAAuB;IAC3F;QACE,KAAK,CACH,oBAAoB,EACpB,sEAAsE,CACvE,CAAC;IACJ,CAAC;CACF;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,EAAgC,EAChC,QAGG;IAEH,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,MAAM,mCAAmC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAClC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;YAC5C,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;YACxC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CACvC,CAAC;QACF,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACrE,IACE,UAAU,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO;YACnC,CAAC,UAAU,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO;gBAClC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,CAAC,CAAC;YAEnE,MAAM,IAAI,gDAAgD,EAAE,CAAC;QAC/D,+BAA+B,CAAC;YAC9B,KAAK;YACL,YAAY,EAAE,MAAM,CAAC,KAAK;YAC1B,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;AACH,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type VerifiedPrincipalPolicyCurrent,\n  type VerifiedPrincipalPolicySelection,\n  verifyPrincipalPolicyCheckpoint,\n} from \"@tearleads/crypto\";\nimport type { ClientSQLiteTransactionScope } from \"../sqlite/sqlitePersistenceRuntime\";\nimport { loadStoredPrincipalPolicyCheckpoint } from \"./keyingCheckpointPersistence\";\n\nexport class PrincipalAuthorizationCheckpointUnavailableError extends KeyingVerificationError {\n  constructor() {\n    super(\n      \"missing_dependency\",\n      \"Public authorization cannot connect to the latest durable checkpoint\",\n    );\n  }\n}\n\n/** Validate public evidence or a verified private ancestry bridge without admitting pins. */\nexport async function validatePrincipalAuthorizationCheckpoints(\n  tx: ClientSQLiteTransactionScope,\n  policies: readonly (\n    | VerifiedPrincipalPolicySelection\n    | VerifiedPrincipalPolicyCurrent\n  )[],\n): Promise<void> {\n  for (const policy of policies) {\n    const checkpoint = await loadStoredPrincipalPolicyCheckpoint(tx, policy);\n    if (!checkpoint) continue;\n    const matchingHead = policies.filter(\n      (other) =>\n        other.principalType === policy.principalType &&\n        other.principalId === policy.principalId &&\n        other.stateHash === policy.stateHash,\n    );\n    const chain = matchingHead.flatMap((other) => other.retainedHistory);\n    if (\n      checkpoint.version > policy.version ||\n      (checkpoint.version < policy.version &&\n        !chain.some(({ state }) => state.version === checkpoint.version))\n    )\n      throw new PrincipalAuthorizationCheckpointUnavailableError();\n    verifyPrincipalPolicyCheckpoint({\n      chain,\n      currentState: policy.state,\n      localCheckpoint: checkpoint,\n    });\n  }\n}\n"]}

package/data/persistence/principalGrantRetirementPersistence.d.ts

@@ -1,9 +0,0 @@
-import { type AccessManifestCheckpoint, type VerifiedPrincipalPolicy, type VerifiedPrincipalPolicyCurrent } from "../../internal/crypto/index.js";
-import type { ClientSQLiteTransactionScope } from "../sqlite/sqlitePersistenceRuntime.js";
-export interface AcknowledgedPrincipalGrantRetirements {
-    readonly containerIds: readonly string[];
-    readonly organizationId: string;
-    readonly policy: VerifiedPrincipalPolicy | VerifiedPrincipalPolicyCurrent;
-}
-export declare function storePrincipalGrantRetirements(tx: ClientSQLiteTransactionScope, retirement: AcknowledgedPrincipalGrantRetirements, policies: readonly (VerifiedPrincipalPolicy | VerifiedPrincipalPolicyCurrent)[], organizationId: string | undefined): Promise<void>;
-export declare function assertContainerNotRetired(tx: ClientSQLiteTransactionScope, checkpoint: AccessManifestCheckpoint): Promise<void>;

package/data/persistence/principalGrantRetirementPersistence.js

@@ -1,43 +0,0 @@
-import { KeyingVerificationError, } from "../../internal/crypto/index.js";
-import { and, eq } from "drizzle-orm";
-import { principalGrantRetirements } from "../sqlite/principalGrantRetirementSchema.js";
-export async function storePrincipalGrantRetirements(tx, retirement, policies, organizationId) {
-    if (!policies.some((policy) => policy.principalId === retirement.policy.principalId &&
-        policy.principalType === retirement.policy.principalType &&
-        policy.stateHash === retirement.policy.stateHash)) {
-        throw new KeyingVerificationError("object_mismatch", "Retirement must accompany its acknowledged policy");
-    }
-    const history = "retainedHistory" in retirement.policy
-        ? retirement.policy.retainedHistory
-        : retirement.policy.history;
-    const previous = history?.find((entry) => entry.state.stateHash === retirement.policy.state.prevStateHash);
-    const granted = new Set([...retirement.policy.grants, ...(previous?.grants ?? [])].map((grant) => grant.containerId));
-    if (retirement.organizationId !== organizationId ||
-        retirement.containerIds.some((id) => !granted.has(id))) {
-        throw new KeyingVerificationError("object_mismatch", "Retirement must match the acknowledged organization and signed grants");
-    }
-    for (const containerId of new Set(retirement.containerIds)) {
-        await tx
-            .insert(principalGrantRetirements)
-            .values({
-            organizationId: retirement.organizationId,
-            containerId,
-            principalId: retirement.policy.principalId,
-            policyStateHash: retirement.policy.stateHash,
-        })
-            .onConflictDoNothing()
-            .run();
-    }
-}
-export async function assertContainerNotRetired(tx, checkpoint) {
-    if (checkpoint.objectKind !== "container")
-        return;
-    const [retired] = await tx
-        .select({ containerId: principalGrantRetirements.containerId })
-        .from(principalGrantRetirements)
-        .where(and(eq(principalGrantRetirements.organizationId, checkpoint.organizationId), eq(principalGrantRetirements.containerId, checkpoint.objectId)))
-        .limit(1);
-    if (retired)
-        throw new KeyingVerificationError("equivocation", `Container ${checkpoint.objectId} was retired during principal rotation`);
-}
-//# sourceMappingURL=principalGrantRetirementPersistence.js.map

package/data/persistence/principalGrantRetirementPersistence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principalGrantRetirementPersistence.js","sourceRoot":"","sources":["principalGrantRetirementPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,uBAAuB,GAGxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AASrF,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,EAAgC,EAChC,UAAiD,EACjD,QAGG,EACH,cAAkC;IAElC,IACE,CAAC,QAAQ,CAAC,IAAI,CACZ,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,WAAW,KAAK,UAAU,CAAC,MAAM,CAAC,WAAW;QACpD,MAAM,CAAC,aAAa,KAAK,UAAU,CAAC,MAAM,CAAC,aAAa;QACxD,MAAM,CAAC,SAAS,KAAK,UAAU,CAAC,MAAM,CAAC,SAAS,CACnD,EACD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GACX,iBAAiB,IAAI,UAAU,CAAC,MAAM;QACpC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe;QACnC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;IAChC,MAAM,QAAQ,GAAG,OAAO,EAAE,IAAI,CAC5B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAC3E,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAC5D,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAC7B,CACF,CAAC;IACF,IACE,UAAU,CAAC,cAAc,KAAK,cAAc;QAC5C,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EACtD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3D,MAAM,EAAE;aACL,MAAM,CAAC,yBAAyB,CAAC;aACjC,MAAM,CAAC;YACN,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,WAAW;YACX,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,WAAW;YAC1C,eAAe,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS;SAC7C,CAAC;aACD,mBAAmB,EAAE;aACrB,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAgC,EAChC,UAAoC;IAEpC,IAAI,UAAU,CAAC,UAAU,KAAK,WAAW;QAAE,OAAO;IAClD,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;SACvB,MAAM,CAAC,EAAE,WAAW,EAAE,yBAAyB,CAAC,WAAW,EAAE,CAAC;SAC9D,IAAI,CAAC,yBAAyB,CAAC;SAC/B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,yBAAyB,CAAC,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC,EACvE,EAAE,CAAC,yBAAyB,CAAC,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC,CAC/D,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,OAAO;QACT,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,aAAa,UAAU,CAAC,QAAQ,wCAAwC,CACzE,CAAC;AACN,CAAC","sourcesContent":["import {\n  type AccessManifestCheckpoint,\n  KeyingVerificationError,\n  type VerifiedPrincipalPolicy,\n  type VerifiedPrincipalPolicyCurrent,\n} from \"@tearleads/crypto\";\nimport { and, eq } from \"drizzle-orm\";\nimport { principalGrantRetirements } from \"../sqlite/principalGrantRetirementSchema\";\nimport type { ClientSQLiteTransactionScope } from \"../sqlite/sqlitePersistenceRuntime\";\n\nexport interface AcknowledgedPrincipalGrantRetirements {\n  readonly containerIds: readonly string[];\n  readonly organizationId: string;\n  readonly policy: VerifiedPrincipalPolicy | VerifiedPrincipalPolicyCurrent;\n}\n\nexport async function storePrincipalGrantRetirements(\n  tx: ClientSQLiteTransactionScope,\n  retirement: AcknowledgedPrincipalGrantRetirements,\n  policies: readonly (\n    | VerifiedPrincipalPolicy\n    | VerifiedPrincipalPolicyCurrent\n  )[],\n  organizationId: string | undefined,\n): Promise<void> {\n  if (\n    !policies.some(\n      (policy) =>\n        policy.principalId === retirement.policy.principalId &&\n        policy.principalType === retirement.policy.principalType &&\n        policy.stateHash === retirement.policy.stateHash,\n    )\n  ) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Retirement must accompany its acknowledged policy\",\n    );\n  }\n  const history =\n    \"retainedHistory\" in retirement.policy\n      ? retirement.policy.retainedHistory\n      : retirement.policy.history;\n  const previous = history?.find(\n    (entry) => entry.state.stateHash === retirement.policy.state.prevStateHash,\n  );\n  const granted = new Set(\n    [...retirement.policy.grants, ...(previous?.grants ?? [])].map(\n      (grant) => grant.containerId,\n    ),\n  );\n  if (\n    retirement.organizationId !== organizationId ||\n    retirement.containerIds.some((id) => !granted.has(id))\n  ) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Retirement must match the acknowledged organization and signed grants\",\n    );\n  }\n  for (const containerId of new Set(retirement.containerIds)) {\n    await tx\n      .insert(principalGrantRetirements)\n      .values({\n        organizationId: retirement.organizationId,\n        containerId,\n        principalId: retirement.policy.principalId,\n        policyStateHash: retirement.policy.stateHash,\n      })\n      .onConflictDoNothing()\n      .run();\n  }\n}\n\nexport async function assertContainerNotRetired(\n  tx: ClientSQLiteTransactionScope,\n  checkpoint: AccessManifestCheckpoint,\n): Promise<void> {\n  if (checkpoint.objectKind !== \"container\") return;\n  const [retired] = await tx\n    .select({ containerId: principalGrantRetirements.containerId })\n    .from(principalGrantRetirements)\n    .where(\n      and(\n        eq(principalGrantRetirements.organizationId, checkpoint.organizationId),\n        eq(principalGrantRetirements.containerId, checkpoint.objectId),\n      ),\n    )\n    .limit(1);\n  if (retired)\n    throw new KeyingVerificationError(\n      \"equivocation\",\n      `Container ${checkpoint.objectId} was retired during principal rotation`,\n    );\n}\n"]}

package/data/persistence/principalHistoryEvidencePersistence.d.ts

@@ -1,32 +0,0 @@
-import { type PrincipalHistoryIndexNode, type PrincipalPolicyHistoryReferenceProof, type ReferencedPrincipalHead, type VerifiedPrincipalPolicyHistory } from "../../internal/crypto/index.js";
-import { type PrincipalPolicyStateChainEntryResponse } from "../../internal/validators/response/index.js";
-import { type ClientSQLiteTransactionScope } from "../sqlite/sqlitePersistenceRuntime.js";
-import { type ExecSql } from "../sqlite/sqlSchema.js";
-export interface PrincipalHistoryEvidencePage {
-    readonly indexRootHash: string;
-    readonly scopeId: string;
-    readonly organizationId: string;
-    readonly entries: readonly {
-        readonly leafHash: string;
-        readonly entryJson: string;
-    }[];
-    readonly nodes: readonly PrincipalHistoryIndexNode[];
-}
-/** Prepare only a page accepted by the signature/authorization verifier. */
-export declare function preparePrincipalHistoryEvidencePage(input: {
-    readonly indexRootHash: string;
-    readonly scopeId: string;
-    readonly organizationId: string;
-    readonly entries: readonly PrincipalPolicyStateChainEntryResponse[];
-    readonly nodes: readonly PrincipalHistoryIndexNode[];
-}): Promise<PrincipalHistoryEvidencePage>;
-/** Publish in the same guarded transaction as the accepted page's progress. */
-export declare function writePrincipalHistoryEvidencePage(tx: ClientSQLiteTransactionScope, page: PrincipalHistoryEvidencePage): Promise<void>;
-/** Returns untrusted material. The caller must verify it against the issued root. */
-export declare function loadPrincipalHistoryReference(input: {
-    readonly execSql: ExecSql;
-    readonly scopeId: string;
-    readonly history: VerifiedPrincipalPolicyHistory;
-    readonly version: number;
-    readonly expectedReference?: ReferencedPrincipalHead | undefined;
-}): Promise<PrincipalPolicyHistoryReferenceProof>;

package/data/persistence/principalHistoryEvidencePersistence.js

@@ -1,92 +0,0 @@
-import { compareCanonicalStrings, KeyingVerificationError, PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT, principalHistoryIndexLeaf, resolvePrincipalHistoryIndexProof, } from "../../internal/crypto/index.js";
-import { isPrincipalPolicyStateChainEntryResponse, } from "../../internal/validators/response/index.js";
-import { and, eq } from "drizzle-orm";
-import { principalHistoryEntries, principalHistoryEvidenceTables, principalHistoryNodes, } from "../sqlite/principalHistoryEvidenceSchema.js";
-import { sqliteInsertBatchSize } from "../sqlite/sqliteBindBudget.js";
-import { getClientSQLitePersistenceRuntime, } from "../sqlite/sqlitePersistenceRuntime.js";
-import { excludedValue } from "../sqlite/sqliteUpsert.js";
-import { ensureSqlTables } from "../sqlite/sqlSchema.js";
-import { writePrincipalHistoryNodes } from "./principalHistoryNodeRetention.js";
-const ENTRY_WRITE_BATCH_SIZE = sqliteInsertBatchSize(principalHistoryEntries);
-/** Prepare only a page accepted by the signature/authorization verifier. */
-export async function preparePrincipalHistoryEvidencePage(input) {
-    if (input.entries.length > PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT ||
-        input.nodes.length > 2 * PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT)
-        throw new KeyingVerificationError("invalid_shape", "Principal evidence page exceeds its batch budget");
-    const owned = structuredClone(input);
-    return {
-        ...owned,
-        entries: await Promise.all(owned.entries.map(async (entry) => ({
-            leafHash: await principalHistoryIndexLeaf(entry.state),
-            entryJson: JSON.stringify(entry),
-        }))),
-    };
-}
-/** Publish in the same guarded transaction as the accepted page's progress. */
-export async function writePrincipalHistoryEvidencePage(tx, page) {
-    const scope = { scopeId: page.scopeId, organizationId: page.organizationId };
-    // A repeated leaf keeps its last entry, as sequential upserts would.
-    const entries = new Map(page.entries.map((entry) => [
-        entry.leafHash,
-        { ...scope, leafHash: entry.leafHash, entryJson: entry.entryJson },
-    ]));
-    const rows = [...entries.values()].sort((a, b) => compareCanonicalStrings(a.leafHash, b.leafHash));
-    for (let index = 0; index < rows.length; index += ENTRY_WRITE_BATCH_SIZE)
-        await tx
-            .insert(principalHistoryEntries)
-            .values(rows.slice(index, index + ENTRY_WRITE_BATCH_SIZE))
-            .onConflictDoUpdate({
-            target: [
-                principalHistoryEntries.scopeId,
-                principalHistoryEntries.leafHash,
-            ],
-            set: {
-                organizationId: excludedValue(principalHistoryEntries.organizationId),
-                entryJson: excludedValue(principalHistoryEntries.entryJson),
-            },
-        })
-            .run();
-    await writePrincipalHistoryNodes(tx, scope, [...page.nodes].sort((a, b) => compareCanonicalStrings(a.hash, b.hash)));
-}
-/** Returns untrusted material. The caller must verify it against the issued root. */
-export async function loadPrincipalHistoryReference(input) {
-    await ensureSqlTables(input.execSql, principalHistoryEvidenceTables);
-    const { db } = getClientSQLitePersistenceRuntime(input.execSql);
-    const resolved = await resolvePrincipalHistoryIndexProof({
-        rootHash: input.history.indexRootHash,
-        treeSize: input.history.currentEntry.state.version,
-        version: input.version,
-        readNode: async (hash) => {
-            const [row] = await db
-                .select()
-                .from(principalHistoryNodes)
-                .where(and(eq(principalHistoryNodes.scopeId, input.scopeId), eq(principalHistoryNodes.hash, hash)))
-                .limit(1);
-            return row ?? null;
-        },
-    });
-    const [row] = await db
-        .select()
-        .from(principalHistoryEntries)
-        .where(and(eq(principalHistoryEntries.scopeId, input.scopeId), eq(principalHistoryEntries.leafHash, resolved.leafHash)))
-        .limit(1);
-    let entry;
-    try {
-        entry = row ? JSON.parse(row.entryJson) : null;
-    }
-    catch {
-        entry = null;
-    }
-    if (!isPrincipalPolicyStateChainEntryResponse(entry))
-        throw new KeyingVerificationError("missing_dependency", "Principal history entry is missing or corrupt");
-    const reference = input.expectedReference ?? {
-        principalType: entry.state.principalType,
-        principalId: entry.state.principalId,
-        version: entry.state.version,
-        keyEpoch: entry.state.keyEpoch,
-        stateHash: entry.state.stateHash,
-        keyFingerprint: entry.state.keyFingerprint,
-    };
-    return { reference, entry, proof: resolved.proof };
-}
-//# sourceMappingURL=principalHistoryEvidencePersistence.js.map

package/data/persistence/principalHistoryEvidencePersistence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principalHistoryEvidencePersistence.js","sourceRoot":"","sources":["principalHistoryEvidencePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,kCAAkC,EAGlC,yBAAyB,EAEzB,iCAAiC,GAElC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wCAAwC,GAEzC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EACL,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAEL,iCAAiC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAgB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,MAAM,sBAAsB,GAAG,qBAAqB,CAAC,uBAAuB,CAAC,CAAC;AAa9E,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,KAMzD;IACC,IACE,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,kCAAkC;QACzD,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,kCAAkC;QAE3D,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,kDAAkD,CACnD,CAAC;IACJ,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO;QACL,GAAG,KAAK;QACR,OAAO,EAAE,MAAM,OAAO,CAAC,GAAG,CACxB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAClC,QAAQ,EAAE,MAAM,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC;YACtD,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SACjC,CAAC,CAAC,CACJ;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,EAAgC,EAChC,IAAkC;IAElC,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;IAC7E,qEAAqE;IACrE,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC1B,KAAK,CAAC,QAAQ;QACd,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;KACnE,CAAC,CACH,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC/C,uBAAuB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAChD,CAAC;IACF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,sBAAsB;QACtE,MAAM,EAAE;aACL,MAAM,CAAC,uBAAuB,CAAC;aAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,sBAAsB,CAAC,CAAC;aACzD,kBAAkB,CAAC;YAClB,MAAM,EAAE;gBACN,uBAAuB,CAAC,OAAO;gBAC/B,uBAAuB,CAAC,QAAQ;aACjC;YACD,GAAG,EAAE;gBACH,cAAc,EAAE,aAAa,CAAC,uBAAuB,CAAC,cAAc,CAAC;gBACrE,SAAS,EAAE,aAAa,CAAC,uBAAuB,CAAC,SAAS,CAAC;aAC5D;SACF,CAAC;aACD,GAAG,EAAE,CAAC;IACX,MAAM,0BAA0B,CAC9B,EAAE,EACF,KAAK,EACL,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAMnD;IACC,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACrE,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,iCAAiC,CAAC;QACvD,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa;QACrC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO;QAClD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACvB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,EAAE;iBACR,IAAI,CAAC,qBAAqB,CAAC;iBAC3B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAChD,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CACrC,CACF;iBACA,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,OAAO,GAAG,IAAI,IAAI,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,EAAE;SACR,IAAI,CAAC,uBAAuB,CAAC;SAC7B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,uBAAuB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAClD,EAAE,CAAC,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CACxD,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,IAAI,CAAC,wCAAwC,CAAC,KAAK,CAAC;QAClD,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,+CAA+C,CAChD,CAAC;IACJ,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,IAAI;QAC3C,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa;QACxC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW;QACpC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;QAC5B,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;QAC9B,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS;QAChC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;KAC3C,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AACrD,CAAC","sourcesContent":["import {\n  compareCanonicalStrings,\n  KeyingVerificationError,\n  PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT,\n  type PrincipalHistoryIndexNode,\n  type PrincipalPolicyHistoryReferenceProof,\n  principalHistoryIndexLeaf,\n  type ReferencedPrincipalHead,\n  resolvePrincipalHistoryIndexProof,\n  type VerifiedPrincipalPolicyHistory,\n} from \"@tearleads/crypto\";\nimport {\n  isPrincipalPolicyStateChainEntryResponse,\n  type PrincipalPolicyStateChainEntryResponse,\n} from \"@tearleads/validators/response\";\nimport { and, eq } from \"drizzle-orm\";\nimport {\n  principalHistoryEntries,\n  principalHistoryEvidenceTables,\n  principalHistoryNodes,\n} from \"../sqlite/principalHistoryEvidenceSchema\";\nimport { sqliteInsertBatchSize } from \"../sqlite/sqliteBindBudget\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../sqlite/sqlitePersistenceRuntime\";\nimport { excludedValue } from \"../sqlite/sqliteUpsert\";\nimport { type ExecSql, ensureSqlTables } from \"../sqlite/sqlSchema\";\nimport { writePrincipalHistoryNodes } from \"./principalHistoryNodeRetention\";\n\nconst ENTRY_WRITE_BATCH_SIZE = sqliteInsertBatchSize(principalHistoryEntries);\n\nexport interface PrincipalHistoryEvidencePage {\n  readonly indexRootHash: string;\n  readonly scopeId: string;\n  readonly organizationId: string;\n  readonly entries: readonly {\n    readonly leafHash: string;\n    readonly entryJson: string;\n  }[];\n  readonly nodes: readonly PrincipalHistoryIndexNode[];\n}\n\n/** Prepare only a page accepted by the signature/authorization verifier. */\nexport async function preparePrincipalHistoryEvidencePage(input: {\n  readonly indexRootHash: string;\n  readonly scopeId: string;\n  readonly organizationId: string;\n  readonly entries: readonly PrincipalPolicyStateChainEntryResponse[];\n  readonly nodes: readonly PrincipalHistoryIndexNode[];\n}): Promise<PrincipalHistoryEvidencePage> {\n  if (\n    input.entries.length > PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT ||\n    input.nodes.length > 2 * PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT\n  )\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"Principal evidence page exceeds its batch budget\",\n    );\n  const owned = structuredClone(input);\n  return {\n    ...owned,\n    entries: await Promise.all(\n      owned.entries.map(async (entry) => ({\n        leafHash: await principalHistoryIndexLeaf(entry.state),\n        entryJson: JSON.stringify(entry),\n      })),\n    ),\n  };\n}\n\n/** Publish in the same guarded transaction as the accepted page's progress. */\nexport async function writePrincipalHistoryEvidencePage(\n  tx: ClientSQLiteTransactionScope,\n  page: PrincipalHistoryEvidencePage,\n): Promise<void> {\n  const scope = { scopeId: page.scopeId, organizationId: page.organizationId };\n  // A repeated leaf keeps its last entry, as sequential upserts would.\n  const entries = new Map(\n    page.entries.map((entry) => [\n      entry.leafHash,\n      { ...scope, leafHash: entry.leafHash, entryJson: entry.entryJson },\n    ]),\n  );\n  const rows = [...entries.values()].sort((a, b) =>\n    compareCanonicalStrings(a.leafHash, b.leafHash),\n  );\n  for (let index = 0; index < rows.length; index += ENTRY_WRITE_BATCH_SIZE)\n    await tx\n      .insert(principalHistoryEntries)\n      .values(rows.slice(index, index + ENTRY_WRITE_BATCH_SIZE))\n      .onConflictDoUpdate({\n        target: [\n          principalHistoryEntries.scopeId,\n          principalHistoryEntries.leafHash,\n        ],\n        set: {\n          organizationId: excludedValue(principalHistoryEntries.organizationId),\n          entryJson: excludedValue(principalHistoryEntries.entryJson),\n        },\n      })\n      .run();\n  await writePrincipalHistoryNodes(\n    tx,\n    scope,\n    [...page.nodes].sort((a, b) => compareCanonicalStrings(a.hash, b.hash)),\n  );\n}\n\n/** Returns untrusted material. The caller must verify it against the issued root. */\nexport async function loadPrincipalHistoryReference(input: {\n  readonly execSql: ExecSql;\n  readonly scopeId: string;\n  readonly history: VerifiedPrincipalPolicyHistory;\n  readonly version: number;\n  readonly expectedReference?: ReferencedPrincipalHead | undefined;\n}): Promise<PrincipalPolicyHistoryReferenceProof> {\n  await ensureSqlTables(input.execSql, principalHistoryEvidenceTables);\n  const { db } = getClientSQLitePersistenceRuntime(input.execSql);\n  const resolved = await resolvePrincipalHistoryIndexProof({\n    rootHash: input.history.indexRootHash,\n    treeSize: input.history.currentEntry.state.version,\n    version: input.version,\n    readNode: async (hash) => {\n      const [row] = await db\n        .select()\n        .from(principalHistoryNodes)\n        .where(\n          and(\n            eq(principalHistoryNodes.scopeId, input.scopeId),\n            eq(principalHistoryNodes.hash, hash),\n          ),\n        )\n        .limit(1);\n      return row ?? null;\n    },\n  });\n  const [row] = await db\n    .select()\n    .from(principalHistoryEntries)\n    .where(\n      and(\n        eq(principalHistoryEntries.scopeId, input.scopeId),\n        eq(principalHistoryEntries.leafHash, resolved.leafHash),\n      ),\n    )\n    .limit(1);\n  let entry: unknown;\n  try {\n    entry = row ? JSON.parse(row.entryJson) : null;\n  } catch {\n    entry = null;\n  }\n  if (!isPrincipalPolicyStateChainEntryResponse(entry))\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      \"Principal history entry is missing or corrupt\",\n    );\n  const reference = input.expectedReference ?? {\n    principalType: entry.state.principalType,\n    principalId: entry.state.principalId,\n    version: entry.state.version,\n    keyEpoch: entry.state.keyEpoch,\n    stateHash: entry.state.stateHash,\n    keyFingerprint: entry.state.keyFingerprint,\n  };\n  return { reference, entry, proof: resolved.proof };\n}\n"]}