@tearleads/client-sdk 0.1.63 → 0.1.65

package/data/persistence/principalPolicyPersistence.js

@@ -1,279 +0,0 @@
-import { KeyingVerificationError } from "../../internal/crypto/index.js";
-import { isPrincipalPolicyBundleResponse } from "../../internal/validators/response/index.js";
-import { and, asc, eq } from "drizzle-orm";
-import { keyingCheckpointTables, principalPolicies, principalPolicyBundleHistory, principalPolicyCheckpoints, principalPolicyTables, } from "../sqlite/schema.js";
-import { getClientSQLitePersistenceRuntime, } from "../sqlite/sqlitePersistenceRuntime.js";
-import { ensureSqlTables } from "../sqlite/sqlSchema.js";
-import { assertSameHeadPrincipalPolicyBundle } from "./principalPolicyBundleIntegrity.js";
-import { recordPrincipalPolicyBundleOrganizationInTransaction, recordPrincipalPolicyOrganizationInTransaction, } from "./principalPolicyOrganizationPersistence.js";
-import { indexPrincipalPolicyBundleInTransaction } from "./principalPolicyReferenceIndexPersistence.js";
-import { storedPrincipalPolicyBundleFromJson } from "./storedPrincipalPolicyBundle.js";
-function isManagedPrincipalType(value) {
-    return value === "group" || value === "organization";
-}
-function parsePrincipalPolicyRow(row) {
-    if (!isManagedPrincipalType(row.principalType)) {
-        return null;
-    }
-    return {
-        principalType: row.principalType,
-        principalId: row.principalId,
-        stateHash: row.stateHash,
-        currentStateJson: row.currentStateJson,
-        currentPayloadJson: row.currentPayloadJson,
-        currentProjectionJson: row.currentProjectionJson,
-        currentGrantsJson: row.currentGrantsJson,
-        currentMemberEnvelopesJson: row.currentMemberEnvelopesJson,
-        previousStatesJson: row.previousStatesJson,
-        updatedAt: row.updatedAt,
-    };
-}
-function parseStoredPrincipalPolicyHead(currentStateJson) {
-    try {
-        const value = JSON.parse(currentStateJson);
-        if (!value || typeof value !== "object") {
-            return null;
-        }
-        const stateHash = Reflect.get(value, "stateHash");
-        const version = Reflect.get(value, "version");
-        return typeof stateHash === "string" && typeof version === "number"
-            ? { stateHash, version }
-            : null;
-    }
-    catch {
-        return null;
-    }
-}
-function parsePrincipalPolicyBundle(row) {
-    const bundle = storedPrincipalPolicyBundleFromJson(row);
-    if (!isPrincipalPolicyBundleResponse(bundle)) {
-        throw new Error("Stored principal policy bundle is invalid");
-    }
-    return bundle;
-}
-export async function ensurePrincipalPolicyTables(execSql) {
-    await ensureSqlTables(execSql, principalPolicyTables);
-}
-/**
- * The ONE select shape for a stored principal-policy bundle row, over either
- * the mutable-head table or the retained-history table.
- */
-export function principalPolicyBundleSelection(table) {
-    return {
-        principalType: table.principalType,
-        principalId: table.principalId,
-        stateHash: table.stateHash,
-        currentStateJson: table.currentStateJson,
-        currentPayloadJson: table.currentPayloadJson,
-        currentProjectionJson: table.currentProjectionJson,
-        currentGrantsJson: table.currentGrantsJson,
-        currentMemberEnvelopesJson: table.currentMemberEnvelopesJson,
-        previousStatesJson: table.previousStatesJson,
-        updatedAt: table.updatedAt,
-    };
-}
-export async function loadPrincipalPolicyBundle(execSql, principalType, principalId) {
-    await ensurePrincipalPolicyTables(execSql);
-    const { db } = getClientSQLitePersistenceRuntime(execSql);
-    const rows = await db
-        .select(principalPolicyBundleSelection(principalPolicies))
-        .from(principalPolicies)
-        .where(and(eq(principalPolicies.principalType, principalType), eq(principalPolicies.principalId, principalId)))
-        .limit(1);
-    const row = rows[0] ? parsePrincipalPolicyRow(rows[0]) : null;
-    return row ? parsePrincipalPolicyBundle(row) : null;
-}
-export async function loadAllPrincipalPolicyBundles(execSql) {
-    await ensurePrincipalPolicyTables(execSql);
-    const { db } = getClientSQLitePersistenceRuntime(execSql);
-    const rows = await db
-        .select(principalPolicyBundleSelection(principalPolicies))
-        .from(principalPolicies)
-        .orderBy(asc(principalPolicies.principalType), asc(principalPolicies.principalId));
-    const historyRows = await db
-        .select(principalPolicyBundleSelection(principalPolicyBundleHistory))
-        .from(principalPolicyBundleHistory)
-        .orderBy(asc(principalPolicyBundleHistory.principalType), asc(principalPolicyBundleHistory.principalId), asc(principalPolicyBundleHistory.stateHash));
-    const bundles = [];
-    for (const rawRow of [...rows, ...historyRows]) {
-        const row = parsePrincipalPolicyRow(rawRow);
-        if (!row) {
-            continue;
-        }
-        bundles.push(parsePrincipalPolicyBundle(row));
-    }
-    return bundles;
-}
-export async function loadPrincipalPolicyStateHash(execSql, principalType, principalId) {
-    await ensurePrincipalPolicyTables(execSql);
-    const { db } = getClientSQLitePersistenceRuntime(execSql);
-    const rows = await db
-        .select({ stateHash: principalPolicies.stateHash })
-        .from(principalPolicies)
-        .where(and(eq(principalPolicies.principalType, principalType), eq(principalPolicies.principalId, principalId)))
-        .limit(1);
-    return rows[0]?.stateHash ?? null;
-}
-function policyBundleRow(bundle, updatedAt) {
-    return {
-        principalType: bundle.currentState.principalType,
-        principalId: bundle.currentState.principalId,
-        stateHash: bundle.currentState.stateHash,
-        currentStateJson: JSON.stringify(bundle.currentState),
-        currentPayloadJson: JSON.stringify(bundle.currentPayload),
-        currentProjectionJson: JSON.stringify(bundle.currentProjection),
-        currentGrantsJson: JSON.stringify(bundle.currentGrants),
-        currentMemberEnvelopesJson: JSON.stringify(bundle.currentMemberEnvelopes),
-        previousStatesJson: JSON.stringify(bundle.previousStates),
-        updatedAt,
-    };
-}
-function assertNoHeadConflict(incoming, checkpoint) {
-    if (checkpoint &&
-        incoming.version === checkpoint.version &&
-        incoming.stateHash !== checkpoint.stateHash) {
-        throw new KeyingVerificationError("equivocation", "principal policy bundle conflicts with the cached head at one version");
-    }
-}
-async function archiveOlderPolicyBundle(tx, storedPolicy, storedHead, incomingHead) {
-    if (!storedPolicy ||
-        !storedHead ||
-        storedHead.version >= incomingHead.version) {
-        return;
-    }
-    const archiveRow = parsePrincipalPolicyRow(storedPolicy);
-    if (!archiveRow) {
-        return;
-    }
-    try {
-        parsePrincipalPolicyBundle(archiveRow);
-        await tx
-            .insert(principalPolicyBundleHistory)
-            .values(archiveRow)
-            .onConflictDoNothing()
-            .run();
-    }
-    catch {
-        // A corrupt cache row is replaced, never retained as key material.
-    }
-}
-async function writePrincipalPolicyBundle(tx, bundle, nextRow, incomingHead) {
-    const wherePrincipal = and(eq(principalPolicies.principalType, nextRow.principalType), eq(principalPolicies.principalId, nextRow.principalId));
-    const [storedPolicy] = await tx
-        .select(principalPolicyBundleSelection(principalPolicies))
-        .from(principalPolicies)
-        .where(wherePrincipal)
-        .limit(1);
-    const [durableCheckpoint] = await tx
-        .select({
-        stateHash: principalPolicyCheckpoints.stateHash,
-        version: principalPolicyCheckpoints.version,
-    })
-        .from(principalPolicyCheckpoints)
-        .where(and(eq(principalPolicyCheckpoints.principalType, nextRow.principalType), eq(principalPolicyCheckpoints.principalId, nextRow.principalId)))
-        .limit(1);
-    const storedHead = storedPolicy
-        ? parseStoredPrincipalPolicyHead(storedPolicy.currentStateJson)
-        : null;
-    if (storedPolicy &&
-        storedHead?.version === incomingHead.version &&
-        storedHead.stateHash === incomingHead.stateHash) {
-        assertSameHeadPrincipalPolicyBundle(storedPolicy, nextRow);
-        await indexPrincipalPolicyBundleInTransaction(tx, bundle);
-        return;
-    }
-    const [retainedPolicy] = await tx
-        .select(principalPolicyBundleSelection(principalPolicyBundleHistory))
-        .from(principalPolicyBundleHistory)
-        .where(and(eq(principalPolicyBundleHistory.principalType, nextRow.principalType), eq(principalPolicyBundleHistory.principalId, nextRow.principalId), eq(principalPolicyBundleHistory.stateHash, nextRow.stateHash)))
-        .limit(1);
-    if (retainedPolicy) {
-        assertSameHeadPrincipalPolicyBundle(retainedPolicy, nextRow);
-        await indexPrincipalPolicyBundleInTransaction(tx, bundle);
-    }
-    const effectiveHead = durableCheckpoint &&
-        (!storedHead || durableCheckpoint.version >= storedHead.version)
-        ? durableCheckpoint
-        : storedHead;
-    assertNoHeadConflict(incomingHead, storedHead);
-    assertNoHeadConflict(incomingHead, durableCheckpoint ?? null);
-    if (effectiveHead && incomingHead.version < effectiveHead.version) {
-        return;
-    }
-    await archiveOlderPolicyBundle(tx, storedPolicy, storedHead, incomingHead);
-    await tx
-        .insert(principalPolicies)
-        .values(nextRow)
-        .onConflictDoUpdate({
-        target: [principalPolicies.principalType, principalPolicies.principalId],
-        set: nextRow,
-    })
-        .run();
-    await tx
-        .delete(principalPolicyBundleHistory)
-        .where(and(eq(principalPolicyBundleHistory.principalType, nextRow.principalType), eq(principalPolicyBundleHistory.principalId, nextRow.principalId), eq(principalPolicyBundleHistory.stateHash, nextRow.stateHash)))
-        .run();
-    await indexPrincipalPolicyBundleInTransaction(tx, bundle);
-}
-export async function writePrincipalPolicyBundleInTransaction(tx, bundle, updatedAt, organizationId) {
-    await recordPrincipalPolicyBundleOrganizationInTransaction(tx, bundle, organizationId);
-    await writePrincipalPolicyBundle(tx, bundle, policyBundleRow(bundle, updatedAt), bundle.currentState);
-}
-export async function assertPrincipalPolicyBundleStoredInTransaction(tx, bundle) {
-    const expected = policyBundleRow(bundle, bundle.currentState.createdAt);
-    const [stored] = await tx
-        .select(principalPolicyBundleSelection(principalPolicies))
-        .from(principalPolicies)
-        .where(and(eq(principalPolicies.principalType, expected.principalType), eq(principalPolicies.principalId, expected.principalId)))
-        .limit(1);
-    if (!stored) {
-        throw new Error("Verified principal policy bundle was not persisted");
-    }
-    assertSameHeadPrincipalPolicyBundle(stored, expected);
-}
-export async function retainPrincipalPolicyBundleInTransaction(tx, bundle, updatedAt, organizationId) {
-    const row = policyBundleRow(bundle, updatedAt);
-    await recordPrincipalPolicyOrganizationInTransaction(tx, {
-        organizationId,
-        principalId: row.principalId,
-        principalType: row.principalType,
-    });
-    const [current] = await tx
-        .select(principalPolicyBundleSelection(principalPolicies))
-        .from(principalPolicies)
-        .where(and(eq(principalPolicies.principalType, row.principalType), eq(principalPolicies.principalId, row.principalId)))
-        .limit(1);
-    if (current?.stateHash === row.stateHash) {
-        assertSameHeadPrincipalPolicyBundle(current, row);
-        await indexPrincipalPolicyBundleInTransaction(tx, bundle);
-        return;
-    }
-    const [retained] = await tx
-        .select(principalPolicyBundleSelection(principalPolicyBundleHistory))
-        .from(principalPolicyBundleHistory)
-        .where(and(eq(principalPolicyBundleHistory.principalType, row.principalType), eq(principalPolicyBundleHistory.principalId, row.principalId), eq(principalPolicyBundleHistory.stateHash, row.stateHash)))
-        .limit(1);
-    if (retained) {
-        assertSameHeadPrincipalPolicyBundle(retained, row);
-        await indexPrincipalPolicyBundleInTransaction(tx, bundle);
-        return;
-    }
-    await tx.insert(principalPolicyBundleHistory).values(row).run();
-    await indexPrincipalPolicyBundleInTransaction(tx, bundle);
-}
-export async function savePrincipalPolicyBundle(execSql, bundle, updatedAt, organizationId, options) {
-    await ensureSqlTables(execSql, [
-        ...principalPolicyTables,
-        ...keyingCheckpointTables,
-    ]);
-    const runtime = getClientSQLitePersistenceRuntime(execSql);
-    const save = (tx) => writePrincipalPolicyBundleInTransaction(tx, bundle, updatedAt, organizationId);
-    if (options?.stillCurrent) {
-        await runtime.guardedTransaction(save, options.stillCurrent, {
-            behavior: "immediate",
-        });
-        return;
-    }
-    await runtime.transaction(save, { behavior: "immediate" });
-}
-//# sourceMappingURL=principalPolicyPersistence.js.map

package/data/persistence/principalPolicyPersistence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principalPolicyPersistence.js","sourceRoot":"","sources":["principalPolicyPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAK5D,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,iCAAiC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAgB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EACL,oDAAoD,EACpD,8CAA8C,GAC/C,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,uCAAuC,EAAE,MAAM,4CAA4C,CAAC;AACrG,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAiCpF,SAAS,sBAAsB,CAC7B,KAAa;IAEb,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,cAAc,CAAC;AACvD,CAAC;AAED,SAAS,uBAAuB,CAC9B,GAA+B;IAE/B,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;QAChD,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,0BAA0B,EAAE,GAAG,CAAC,0BAA0B;QAC1D,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,gBAAwB;IAExB,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC9C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;YACjE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE;YACxB,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,GAAuB;IAEvB,MAAM,MAAM,GAAG,mCAAmC,CAAC,GAAG,CAAC,CAAC;IAExD,IAAI,CAAC,+BAA+B,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAgB;IAEhB,MAAM,eAAe,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;AACxD,CAAC;AAMD;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAAiC;IAEjC,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;QAC5D,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAgB,EAChB,aAAsD,EACtD,WAAmB;IAEnB,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;SACzD,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,aAAa,CAAC,EAClD,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAC/C,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,OAAO,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAgB;IAEhB,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;SACzD,IAAI,CAAC,iBAAiB,CAAC;SACvB,OAAO,CACN,GAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC,EACpC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,CACnC,CAAC;IACJ,MAAM,WAAW,GAAG,MAAM,EAAE;SACzB,MAAM,CAAC,8BAA8B,CAAC,4BAA4B,CAAC,CAAC;SACpE,IAAI,CAAC,4BAA4B,CAAC;SAClC,OAAO,CACN,GAAG,CAAC,4BAA4B,CAAC,aAAa,CAAC,EAC/C,GAAG,CAAC,4BAA4B,CAAC,WAAW,CAAC,EAC7C,GAAG,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAC5C,CAAC;IAEJ,MAAM,OAAO,GAAoC,EAAE,CAAC;IAEpD,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,SAAS;QACX,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAgB,EAChB,aAAsD,EACtD,WAAmB;IAEnB,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC,SAAS,EAAE,CAAC;SAClD,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,aAAa,CAAC,EAClD,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAC/C,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CACtB,MAAqC,EACrC,SAAiB;IAEjB,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,aAAa;QAChD,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,WAAW;QAC5C,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS;QACxC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;QACrD,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;QACzD,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC/D,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC;QACvD,0BAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,sBAAsB,CAAC;QACzE,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;QACzD,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAAmC,EACnC,UAA4C;IAE5C,IACE,UAAU;QACV,QAAQ,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO;QACvC,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS,EAC3C,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,uEAAuE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,EAAgC,EAChC,YAAoD,EACpD,UAA4C,EAC5C,YAAuC;IAEvC,IACE,CAAC,YAAY;QACb,CAAC,UAAU;QACX,UAAU,CAAC,OAAO,IAAI,YAAY,CAAC,OAAO,EAC1C,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,0BAA0B,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,EAAE;aACL,MAAM,CAAC,4BAA4B,CAAC;aACpC,MAAM,CAAC,UAAU,CAAC;aAClB,mBAAmB,EAAE;aACrB,GAAG,EAAE,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,EAAgC,EAChC,MAAqC,EACrC,OAA2B,EAC3B,YAAuC;IAEvC,MAAM,cAAc,GAAG,GAAG,CACxB,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,EAC1D,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CACvD,CAAC;IACF,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,EAAE;SAC5B,MAAM,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;SACzD,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CAAC,cAAc,CAAC;SACrB,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,CAAC,iBAAiB,CAAC,GAAG,MAAM,EAAE;SACjC,MAAM,CAAC;QACN,SAAS,EAAE,0BAA0B,CAAC,SAAS;QAC/C,OAAO,EAAE,0BAA0B,CAAC,OAAO;KAC5C,CAAC;SACD,IAAI,CAAC,0BAA0B,CAAC;SAChC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,0BAA0B,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,EACnE,EAAE,CAAC,0BAA0B,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAChE,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,UAAU,GAAG,YAAY;QAC7B,CAAC,CAAC,8BAA8B,CAAC,YAAY,CAAC,gBAAgB,CAAC;QAC/D,CAAC,CAAC,IAAI,CAAC;IACT,IACE,YAAY;QACZ,UAAU,EAAE,OAAO,KAAK,YAAY,CAAC,OAAO;QAC5C,UAAU,CAAC,SAAS,KAAK,YAAY,CAAC,SAAS,EAC/C,CAAC;QACD,mCAAmC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,uCAAuC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,MAAM,CAAC,cAAc,CAAC,GAAG,MAAM,EAAE;SAC9B,MAAM,CAAC,8BAA8B,CAAC,4BAA4B,CAAC,CAAC;SACpE,IAAI,CAAC,4BAA4B,CAAC;SAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,4BAA4B,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,EACrE,EAAE,CAAC,4BAA4B,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,EACjE,EAAE,CAAC,4BAA4B,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAC9D,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,cAAc,EAAE,CAAC;QACnB,mCAAmC,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,uCAAuC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,aAAa,GACjB,iBAAiB;QACjB,CAAC,CAAC,UAAU,IAAI,iBAAiB,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC;QAC9D,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,UAAU,CAAC;IACjB,oBAAoB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC/C,oBAAoB,CAAC,YAAY,EAAE,iBAAiB,IAAI,IAAI,CAAC,CAAC;IAC9D,IAAI,aAAa,IAAI,YAAY,CAAC,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC;QAClE,OAAO;IACT,CAAC;IAED,MAAM,wBAAwB,CAAC,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IAC3E,MAAM,EAAE;SACL,MAAM,CAAC,iBAAiB,CAAC;SACzB,MAAM,CAAC,OAAO,CAAC;SACf,kBAAkB,CAAC;QAClB,MAAM,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,iBAAiB,CAAC,WAAW,CAAC;QACxE,GAAG,EAAE,OAAO;KACb,CAAC;SACD,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,4BAA4B,CAAC;SACpC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,4BAA4B,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,EACrE,EAAE,CAAC,4BAA4B,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,EACjE,EAAE,CAAC,4BAA4B,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAC9D,CACF;SACA,GAAG,EAAE,CAAC;IACT,MAAM,uCAAuC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,EAAgC,EAChC,MAAqC,EACrC,SAAiB,EACjB,cAAmC;IAEnC,MAAM,oDAAoD,CACxD,EAAE,EACF,MAAM,EACN,cAAc,CACf,CAAC;IACF,MAAM,0BAA0B,CAC9B,EAAE,EACF,MAAM,EACN,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,EAClC,MAAM,CAAC,YAAY,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8CAA8C,CAClE,EAAgC,EAChC,MAAqC;IAErC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;SACtB,MAAM,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;SACzD,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,EAC3D,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CACxD,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,mCAAmC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,EAAgC,EAChC,MAAqC,EACrC,SAAiB,EACjB,cAAmC;IAEnC,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,8CAA8C,CAAC,EAAE,EAAE;QACvD,cAAc;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC,CAAC;IACH,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;SACvB,MAAM,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;SACzD,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,EACtD,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CACnD,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,OAAO,EAAE,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QACzC,mCAAmC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,uCAAuC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,CAAC,8BAA8B,CAAC,4BAA4B,CAAC,CAAC;SACpE,IAAI,CAAC,4BAA4B,CAAC;SAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,4BAA4B,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,EACjE,EAAE,CAAC,4BAA4B,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAC7D,EAAE,CAAC,4BAA4B,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAC1D,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,QAAQ,EAAE,CAAC;QACb,mCAAmC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,uCAAuC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAChE,MAAM,uCAAuC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAgB,EAChB,MAAqC,EACrC,SAAiB,EACjB,cAAsB,EACtB,OAAoE;IAEpE,MAAM,eAAe,CAAC,OAAO,EAAE;QAC7B,GAAG,qBAAqB;QACxB,GAAG,sBAAsB;KAC1B,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,CAAC,EAAgC,EAAE,EAAE,CAChD,uCAAuC,CACrC,EAAE,EACF,MAAM,EACN,SAAS,EACT,cAAc,CACf,CAAC;IACJ,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;QAC1B,MAAM,OAAO,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE;YAC3D,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;AAC7D,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type {\n  PrincipalPolicyBundleResponse,\n  PrincipalStateResponse,\n} from \"@tearleads/validators/response\";\nimport { isPrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { and, asc, eq } from \"drizzle-orm\";\nimport {\n  keyingCheckpointTables,\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyCheckpoints,\n  principalPolicyTables,\n} from \"../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../sqlite/sqlSchema\";\nimport { assertSameHeadPrincipalPolicyBundle } from \"./principalPolicyBundleIntegrity\";\nimport {\n  recordPrincipalPolicyBundleOrganizationInTransaction,\n  recordPrincipalPolicyOrganizationInTransaction,\n} from \"./principalPolicyOrganizationPersistence\";\nimport { indexPrincipalPolicyBundleInTransaction } from \"./principalPolicyReferenceIndexPersistence\";\nimport { storedPrincipalPolicyBundleFromJson } from \"./storedPrincipalPolicyBundle\";\n\ninterface PrincipalPolicyRow {\n  principalType: \"group\" | \"organization\";\n  principalId: string;\n  stateHash: string;\n  currentStateJson: string;\n  currentPayloadJson: string;\n  currentProjectionJson: string;\n  currentGrantsJson: string;\n  currentMemberEnvelopesJson: string;\n  previousStatesJson: string;\n  updatedAt: string;\n}\n\nexport interface SelectedPrincipalPolicyRow {\n  principalType: string;\n  principalId: string;\n  stateHash: string;\n  currentStateJson: string;\n  currentPayloadJson: string;\n  currentProjectionJson: string;\n  currentGrantsJson: string;\n  currentMemberEnvelopesJson: string;\n  previousStatesJson: string;\n  updatedAt: string;\n}\n\ninterface StoredPrincipalPolicyHead {\n  readonly stateHash: string;\n  readonly version: number;\n}\n\nfunction isManagedPrincipalType(\n  value: string,\n): value is PrincipalStateResponse[\"principalType\"] {\n  return value === \"group\" || value === \"organization\";\n}\n\nfunction parsePrincipalPolicyRow(\n  row: SelectedPrincipalPolicyRow,\n): PrincipalPolicyRow | null {\n  if (!isManagedPrincipalType(row.principalType)) {\n    return null;\n  }\n\n  return {\n    principalType: row.principalType,\n    principalId: row.principalId,\n    stateHash: row.stateHash,\n    currentStateJson: row.currentStateJson,\n    currentPayloadJson: row.currentPayloadJson,\n    currentProjectionJson: row.currentProjectionJson,\n    currentGrantsJson: row.currentGrantsJson,\n    currentMemberEnvelopesJson: row.currentMemberEnvelopesJson,\n    previousStatesJson: row.previousStatesJson,\n    updatedAt: row.updatedAt,\n  };\n}\n\nfunction parseStoredPrincipalPolicyHead(\n  currentStateJson: string,\n): StoredPrincipalPolicyHead | null {\n  try {\n    const value: unknown = JSON.parse(currentStateJson);\n    if (!value || typeof value !== \"object\") {\n      return null;\n    }\n    const stateHash = Reflect.get(value, \"stateHash\");\n    const version = Reflect.get(value, \"version\");\n    return typeof stateHash === \"string\" && typeof version === \"number\"\n      ? { stateHash, version }\n      : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction parsePrincipalPolicyBundle(\n  row: PrincipalPolicyRow,\n): PrincipalPolicyBundleResponse {\n  const bundle = storedPrincipalPolicyBundleFromJson(row);\n\n  if (!isPrincipalPolicyBundleResponse(bundle)) {\n    throw new Error(\"Stored principal policy bundle is invalid\");\n  }\n\n  return bundle;\n}\n\nexport async function ensurePrincipalPolicyTables(\n  execSql: ExecSql,\n): Promise<void> {\n  await ensureSqlTables(execSql, principalPolicyTables);\n}\n\ntype PrincipalPolicyBundleTable =\n  | typeof principalPolicies\n  | typeof principalPolicyBundleHistory;\n\n/**\n * The ONE select shape for a stored principal-policy bundle row, over either\n * the mutable-head table or the retained-history table.\n */\nexport function principalPolicyBundleSelection(\n  table: PrincipalPolicyBundleTable,\n) {\n  return {\n    principalType: table.principalType,\n    principalId: table.principalId,\n    stateHash: table.stateHash,\n    currentStateJson: table.currentStateJson,\n    currentPayloadJson: table.currentPayloadJson,\n    currentProjectionJson: table.currentProjectionJson,\n    currentGrantsJson: table.currentGrantsJson,\n    currentMemberEnvelopesJson: table.currentMemberEnvelopesJson,\n    previousStatesJson: table.previousStatesJson,\n    updatedAt: table.updatedAt,\n  };\n}\n\nexport async function loadPrincipalPolicyBundle(\n  execSql: ExecSql,\n  principalType: PrincipalStateResponse[\"principalType\"],\n  principalId: string,\n): Promise<PrincipalPolicyBundleResponse | null> {\n  await ensurePrincipalPolicyTables(execSql);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select(principalPolicyBundleSelection(principalPolicies))\n    .from(principalPolicies)\n    .where(\n      and(\n        eq(principalPolicies.principalType, principalType),\n        eq(principalPolicies.principalId, principalId),\n      ),\n    )\n    .limit(1);\n\n  const row = rows[0] ? parsePrincipalPolicyRow(rows[0]) : null;\n  return row ? parsePrincipalPolicyBundle(row) : null;\n}\n\nexport async function loadAllPrincipalPolicyBundles(\n  execSql: ExecSql,\n): Promise<PrincipalPolicyBundleResponse[]> {\n  await ensurePrincipalPolicyTables(execSql);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select(principalPolicyBundleSelection(principalPolicies))\n    .from(principalPolicies)\n    .orderBy(\n      asc(principalPolicies.principalType),\n      asc(principalPolicies.principalId),\n    );\n  const historyRows = await db\n    .select(principalPolicyBundleSelection(principalPolicyBundleHistory))\n    .from(principalPolicyBundleHistory)\n    .orderBy(\n      asc(principalPolicyBundleHistory.principalType),\n      asc(principalPolicyBundleHistory.principalId),\n      asc(principalPolicyBundleHistory.stateHash),\n    );\n\n  const bundles: PrincipalPolicyBundleResponse[] = [];\n\n  for (const rawRow of [...rows, ...historyRows]) {\n    const row = parsePrincipalPolicyRow(rawRow);\n\n    if (!row) {\n      continue;\n    }\n\n    bundles.push(parsePrincipalPolicyBundle(row));\n  }\n\n  return bundles;\n}\n\nexport async function loadPrincipalPolicyStateHash(\n  execSql: ExecSql,\n  principalType: PrincipalStateResponse[\"principalType\"],\n  principalId: string,\n): Promise<string | null> {\n  await ensurePrincipalPolicyTables(execSql);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({ stateHash: principalPolicies.stateHash })\n    .from(principalPolicies)\n    .where(\n      and(\n        eq(principalPolicies.principalType, principalType),\n        eq(principalPolicies.principalId, principalId),\n      ),\n    )\n    .limit(1);\n\n  return rows[0]?.stateHash ?? null;\n}\n\nfunction policyBundleRow(\n  bundle: PrincipalPolicyBundleResponse,\n  updatedAt: string,\n): PrincipalPolicyRow {\n  return {\n    principalType: bundle.currentState.principalType,\n    principalId: bundle.currentState.principalId,\n    stateHash: bundle.currentState.stateHash,\n    currentStateJson: JSON.stringify(bundle.currentState),\n    currentPayloadJson: JSON.stringify(bundle.currentPayload),\n    currentProjectionJson: JSON.stringify(bundle.currentProjection),\n    currentGrantsJson: JSON.stringify(bundle.currentGrants),\n    currentMemberEnvelopesJson: JSON.stringify(bundle.currentMemberEnvelopes),\n    previousStatesJson: JSON.stringify(bundle.previousStates),\n    updatedAt,\n  };\n}\n\nfunction assertNoHeadConflict(\n  incoming: StoredPrincipalPolicyHead,\n  checkpoint: StoredPrincipalPolicyHead | null,\n): void {\n  if (\n    checkpoint &&\n    incoming.version === checkpoint.version &&\n    incoming.stateHash !== checkpoint.stateHash\n  ) {\n    throw new KeyingVerificationError(\n      \"equivocation\",\n      \"principal policy bundle conflicts with the cached head at one version\",\n    );\n  }\n}\n\nasync function archiveOlderPolicyBundle(\n  tx: ClientSQLiteTransactionScope,\n  storedPolicy: SelectedPrincipalPolicyRow | undefined,\n  storedHead: StoredPrincipalPolicyHead | null,\n  incomingHead: StoredPrincipalPolicyHead,\n): Promise<void> {\n  if (\n    !storedPolicy ||\n    !storedHead ||\n    storedHead.version >= incomingHead.version\n  ) {\n    return;\n  }\n  const archiveRow = parsePrincipalPolicyRow(storedPolicy);\n  if (!archiveRow) {\n    return;\n  }\n  try {\n    parsePrincipalPolicyBundle(archiveRow);\n    await tx\n      .insert(principalPolicyBundleHistory)\n      .values(archiveRow)\n      .onConflictDoNothing()\n      .run();\n  } catch {\n    // A corrupt cache row is replaced, never retained as key material.\n  }\n}\n\nasync function writePrincipalPolicyBundle(\n  tx: ClientSQLiteTransactionScope,\n  bundle: PrincipalPolicyBundleResponse,\n  nextRow: PrincipalPolicyRow,\n  incomingHead: StoredPrincipalPolicyHead,\n): Promise<void> {\n  const wherePrincipal = and(\n    eq(principalPolicies.principalType, nextRow.principalType),\n    eq(principalPolicies.principalId, nextRow.principalId),\n  );\n  const [storedPolicy] = await tx\n    .select(principalPolicyBundleSelection(principalPolicies))\n    .from(principalPolicies)\n    .where(wherePrincipal)\n    .limit(1);\n  const [durableCheckpoint] = await tx\n    .select({\n      stateHash: principalPolicyCheckpoints.stateHash,\n      version: principalPolicyCheckpoints.version,\n    })\n    .from(principalPolicyCheckpoints)\n    .where(\n      and(\n        eq(principalPolicyCheckpoints.principalType, nextRow.principalType),\n        eq(principalPolicyCheckpoints.principalId, nextRow.principalId),\n      ),\n    )\n    .limit(1);\n  const storedHead = storedPolicy\n    ? parseStoredPrincipalPolicyHead(storedPolicy.currentStateJson)\n    : null;\n  if (\n    storedPolicy &&\n    storedHead?.version === incomingHead.version &&\n    storedHead.stateHash === incomingHead.stateHash\n  ) {\n    assertSameHeadPrincipalPolicyBundle(storedPolicy, nextRow);\n    await indexPrincipalPolicyBundleInTransaction(tx, bundle);\n    return;\n  }\n  const [retainedPolicy] = await tx\n    .select(principalPolicyBundleSelection(principalPolicyBundleHistory))\n    .from(principalPolicyBundleHistory)\n    .where(\n      and(\n        eq(principalPolicyBundleHistory.principalType, nextRow.principalType),\n        eq(principalPolicyBundleHistory.principalId, nextRow.principalId),\n        eq(principalPolicyBundleHistory.stateHash, nextRow.stateHash),\n      ),\n    )\n    .limit(1);\n  if (retainedPolicy) {\n    assertSameHeadPrincipalPolicyBundle(retainedPolicy, nextRow);\n    await indexPrincipalPolicyBundleInTransaction(tx, bundle);\n  }\n  const effectiveHead =\n    durableCheckpoint &&\n    (!storedHead || durableCheckpoint.version >= storedHead.version)\n      ? durableCheckpoint\n      : storedHead;\n  assertNoHeadConflict(incomingHead, storedHead);\n  assertNoHeadConflict(incomingHead, durableCheckpoint ?? null);\n  if (effectiveHead && incomingHead.version < effectiveHead.version) {\n    return;\n  }\n\n  await archiveOlderPolicyBundle(tx, storedPolicy, storedHead, incomingHead);\n  await tx\n    .insert(principalPolicies)\n    .values(nextRow)\n    .onConflictDoUpdate({\n      target: [principalPolicies.principalType, principalPolicies.principalId],\n      set: nextRow,\n    })\n    .run();\n  await tx\n    .delete(principalPolicyBundleHistory)\n    .where(\n      and(\n        eq(principalPolicyBundleHistory.principalType, nextRow.principalType),\n        eq(principalPolicyBundleHistory.principalId, nextRow.principalId),\n        eq(principalPolicyBundleHistory.stateHash, nextRow.stateHash),\n      ),\n    )\n    .run();\n  await indexPrincipalPolicyBundleInTransaction(tx, bundle);\n}\n\nexport async function writePrincipalPolicyBundleInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  bundle: PrincipalPolicyBundleResponse,\n  updatedAt: string,\n  organizationId?: string | undefined,\n): Promise<void> {\n  await recordPrincipalPolicyBundleOrganizationInTransaction(\n    tx,\n    bundle,\n    organizationId,\n  );\n  await writePrincipalPolicyBundle(\n    tx,\n    bundle,\n    policyBundleRow(bundle, updatedAt),\n    bundle.currentState,\n  );\n}\n\nexport async function assertPrincipalPolicyBundleStoredInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  bundle: PrincipalPolicyBundleResponse,\n): Promise<void> {\n  const expected = policyBundleRow(bundle, bundle.currentState.createdAt);\n  const [stored] = await tx\n    .select(principalPolicyBundleSelection(principalPolicies))\n    .from(principalPolicies)\n    .where(\n      and(\n        eq(principalPolicies.principalType, expected.principalType),\n        eq(principalPolicies.principalId, expected.principalId),\n      ),\n    )\n    .limit(1);\n  if (!stored) {\n    throw new Error(\"Verified principal policy bundle was not persisted\");\n  }\n  assertSameHeadPrincipalPolicyBundle(stored, expected);\n}\n\nexport async function retainPrincipalPolicyBundleInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  bundle: PrincipalPolicyBundleResponse,\n  updatedAt: string,\n  organizationId?: string | undefined,\n): Promise<void> {\n  const row = policyBundleRow(bundle, updatedAt);\n  await recordPrincipalPolicyOrganizationInTransaction(tx, {\n    organizationId,\n    principalId: row.principalId,\n    principalType: row.principalType,\n  });\n  const [current] = await tx\n    .select(principalPolicyBundleSelection(principalPolicies))\n    .from(principalPolicies)\n    .where(\n      and(\n        eq(principalPolicies.principalType, row.principalType),\n        eq(principalPolicies.principalId, row.principalId),\n      ),\n    )\n    .limit(1);\n  if (current?.stateHash === row.stateHash) {\n    assertSameHeadPrincipalPolicyBundle(current, row);\n    await indexPrincipalPolicyBundleInTransaction(tx, bundle);\n    return;\n  }\n  const [retained] = await tx\n    .select(principalPolicyBundleSelection(principalPolicyBundleHistory))\n    .from(principalPolicyBundleHistory)\n    .where(\n      and(\n        eq(principalPolicyBundleHistory.principalType, row.principalType),\n        eq(principalPolicyBundleHistory.principalId, row.principalId),\n        eq(principalPolicyBundleHistory.stateHash, row.stateHash),\n      ),\n    )\n    .limit(1);\n  if (retained) {\n    assertSameHeadPrincipalPolicyBundle(retained, row);\n    await indexPrincipalPolicyBundleInTransaction(tx, bundle);\n    return;\n  }\n  await tx.insert(principalPolicyBundleHistory).values(row).run();\n  await indexPrincipalPolicyBundleInTransaction(tx, bundle);\n}\n\nexport async function savePrincipalPolicyBundle(\n  execSql: ExecSql,\n  bundle: PrincipalPolicyBundleResponse,\n  updatedAt: string,\n  organizationId: string,\n  options?: { stillCurrent?: (() => boolean) | undefined } | undefined,\n): Promise<void> {\n  await ensureSqlTables(execSql, [\n    ...principalPolicyTables,\n    ...keyingCheckpointTables,\n  ]);\n\n  const runtime = getClientSQLitePersistenceRuntime(execSql);\n  const save = (tx: ClientSQLiteTransactionScope) =>\n    writePrincipalPolicyBundleInTransaction(\n      tx,\n      bundle,\n      updatedAt,\n      organizationId,\n    );\n  if (options?.stillCurrent) {\n    await runtime.guardedTransaction(save, options.stillCurrent, {\n      behavior: \"immediate\",\n    });\n    return;\n  }\n  await runtime.transaction(save, { behavior: \"immediate\" });\n}\n"]}

package/data/persistence/principalPolicyReferenceCheckpoint.js

@@ -1,27 +0,0 @@
-import { KeyingVerificationError, } from "../../internal/crypto/index.js";
-import { principalPolicyBundleStates } from "../principals/principalPolicyStates.js";
-import { assertPrincipalPolicyCheckpointShape } from "./keyingCheckpointPersistence.js";
-export function applyPrincipalPolicyReferenceCheckpoint(bundle, checkpoint) {
-    if (!checkpoint) {
-        return bundle;
-    }
-    assertPrincipalPolicyCheckpointShape(checkpoint, bundle.currentState);
-    if (bundle.currentState.version < checkpoint.version) {
-        return null;
-    }
-    if (bundle.currentState.version === checkpoint.version) {
-        if (bundle.currentState.stateHash !== checkpoint.stateHash) {
-            throw new KeyingVerificationError("equivocation", "principal policy head conflicts with the local checkpoint");
-        }
-        return bundle;
-    }
-    const checkpointStates = principalPolicyBundleStates(bundle).filter((state) => state.version === checkpoint.version);
-    if (checkpointStates.length === 0) {
-        throw new KeyingVerificationError("stale_predecessor", "principal policy chain does not extend the local checkpoint");
-    }
-    if (checkpointStates.some((state) => state.stateHash !== checkpoint.stateHash)) {
-        throw new KeyingVerificationError("equivocation", "principal policy chain conflicts with the local checkpoint");
-    }
-    return bundle;
-}
-//# sourceMappingURL=principalPolicyReferenceCheckpoint.js.map

package/data/persistence/principalPolicyReferenceCheckpoint.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principalPolicyReferenceCheckpoint.js","sourceRoot":"","sources":["principalPolicyReferenceCheckpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAC;AAErF,MAAM,UAAU,uCAAuC,CACrD,MAAqC,EACrC,UAA4C;IAE5C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,oCAAoC,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,YAAY,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;QACvD,IAAI,MAAM,CAAC,YAAY,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS,EAAE,CAAC;YAC3D,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC,MAAM,CACjE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,CAChD,CAAC;IACF,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IACE,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS,CAAC,EAC1E,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type PrincipalPolicyCheckpoint,\n} from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { principalPolicyBundleStates } from \"../principals/principalPolicyStates\";\nimport { assertPrincipalPolicyCheckpointShape } from \"./keyingCheckpointPersistence\";\n\nexport function applyPrincipalPolicyReferenceCheckpoint(\n  bundle: PrincipalPolicyBundleResponse,\n  checkpoint: PrincipalPolicyCheckpoint | null,\n): PrincipalPolicyBundleResponse | null {\n  if (!checkpoint) {\n    return bundle;\n  }\n  assertPrincipalPolicyCheckpointShape(checkpoint, bundle.currentState);\n  if (bundle.currentState.version < checkpoint.version) {\n    return null;\n  }\n  if (bundle.currentState.version === checkpoint.version) {\n    if (bundle.currentState.stateHash !== checkpoint.stateHash) {\n      throw new KeyingVerificationError(\n        \"equivocation\",\n        \"principal policy head conflicts with the local checkpoint\",\n      );\n    }\n    return bundle;\n  }\n  const checkpointStates = principalPolicyBundleStates(bundle).filter(\n    (state) => state.version === checkpoint.version,\n  );\n  if (checkpointStates.length === 0) {\n    throw new KeyingVerificationError(\n      \"stale_predecessor\",\n      \"principal policy chain does not extend the local checkpoint\",\n    );\n  }\n  if (\n    checkpointStates.some((state) => state.stateHash !== checkpoint.stateHash)\n  ) {\n    throw new KeyingVerificationError(\n      \"equivocation\",\n      \"principal policy chain conflicts with the local checkpoint\",\n    );\n  }\n  return bundle;\n}\n"]}

package/data/persistence/principalPolicyReferenceIndexPersistence.js

@@ -1,115 +0,0 @@
-import { KeyingVerificationError } from "../../internal/crypto/index.js";
-import { and, eq, inArray, or } from "drizzle-orm";
-import { principalPolicyBundleStates } from "../principals/principalPolicyStates.js";
-import { principalPolicyBundleReferences } from "../sqlite/schema.js";
-import { sqliteInsertBatchSize, sqliteRowsPerStatement, } from "../sqlite/sqliteBindBudget.js";
-const REFERENCE_INSERT_BATCH_SIZE = sqliteInsertBatchSize(principalPolicyBundleReferences);
-// Principal type and id plus the bundle version and state hash bind once.
-const REFERENCE_LOOKUP_VERSIONS = sqliteRowsPerStatement(1, 4);
-/** The exact six-field match; the lookup already fixes the principal. */
-function isSameReference(stored, row) {
-    return (stored.version === row.version &&
-        stored.stateHash === row.stateHash &&
-        stored.keyEpoch === row.keyEpoch &&
-        stored.keyFingerprint === row.keyFingerprint);
-}
-/** The table's primary key within one principal. */
-function referenceKey(row) {
-    return JSON.stringify([
-        row.version,
-        row.stateHash,
-        row.keyEpoch,
-        row.keyFingerprint,
-        row.bundleStateHash,
-    ]);
-}
-/** Rows either equivocation check can match, read before this bundle's writes. */
-async function loadStoredReferences(tx, head, versions) {
-    const stored = [];
-    for (let index = 0; index < versions.length; index += REFERENCE_LOOKUP_VERSIONS) {
-        stored.push(...(await tx
-            .select({
-            version: principalPolicyBundleReferences.version,
-            stateHash: principalPolicyBundleReferences.stateHash,
-            keyEpoch: principalPolicyBundleReferences.keyEpoch,
-            keyFingerprint: principalPolicyBundleReferences.keyFingerprint,
-            bundleVersion: principalPolicyBundleReferences.bundleVersion,
-            bundleStateHash: principalPolicyBundleReferences.bundleStateHash,
-        })
-            .from(principalPolicyBundleReferences)
-            .where(and(eq(principalPolicyBundleReferences.principalType, head.principalType), eq(principalPolicyBundleReferences.principalId, head.principalId), inArray(principalPolicyBundleReferences.version, versions.slice(index, index + REFERENCE_LOOKUP_VERSIONS)), or(eq(principalPolicyBundleReferences.bundleVersion, head.version), eq(principalPolicyBundleReferences.bundleStateHash, head.stateHash))))));
-    }
-    return stored;
-}
-/**
- * Rows written earlier in the same bundle all carry its head, so neither
- * check can match them: each state's outcome depends only on stored rows.
- */
-function referenceConflict(row, stored) {
-    const sameReference = stored.filter((candidate) => isSameReference(candidate, row));
-    if (sameReference.some((candidate) => candidate.bundleVersion === row.bundleVersion &&
-        candidate.bundleStateHash !== row.bundleStateHash))
-        return new KeyingVerificationError("equivocation", "principal policy reference has conflicting bundle heads at one version");
-    const indexed = sameReference.find((candidate) => candidate.bundleStateHash === row.bundleStateHash);
-    if (indexed && indexed.bundleVersion !== row.bundleVersion)
-        return new KeyingVerificationError("equivocation", "principal policy reference index conflicts with the bundle head");
-    return null;
-}
-async function insertMissingReferences(tx, rows, stored) {
-    const present = new Set(stored.map(referenceKey));
-    const missing = new Map();
-    for (const row of rows) {
-        const key = referenceKey(row);
-        if (!present.has(key) && !missing.has(key))
-            missing.set(key, row);
-    }
-    const values = [...missing.values()];
-    for (let index = 0; index < values.length; index += REFERENCE_INSERT_BATCH_SIZE) {
-        await tx
-            .insert(principalPolicyBundleReferences)
-            .values(values.slice(index, index + REFERENCE_INSERT_BATCH_SIZE))
-            .onConflictDoNothing()
-            .run();
-    }
-}
-/**
- * Index every state of a verified bundle under its head. Fails in state order
- * with the per-state checks' errors, keeping the states indexed before the
- * first failure.
- */
-export async function indexPrincipalPolicyBundleInTransaction(tx, bundle) {
-    const head = bundle.currentState;
-    const states = principalPolicyBundleStates(bundle);
-    const foreignIndex = states.findIndex((state) => state.principalType !== head.principalType ||
-        state.principalId !== head.principalId);
-    const rows = (foreignIndex === -1 ? states : states.slice(0, foreignIndex)).map((state) => ({
-        principalType: state.principalType,
-        principalId: state.principalId,
-        version: state.version,
-        stateHash: state.stateHash,
-        keyEpoch: state.keyEpoch,
-        keyFingerprint: state.keyFingerprint,
-        bundleVersion: head.version,
-        bundleStateHash: head.stateHash,
-    }));
-    const stored = rows.length === 0
-        ? []
-        : await loadStoredReferences(tx, head, [
-            ...new Set(rows.map((row) => row.version)),
-        ]);
-    let failure = null;
-    let accepted = rows.length;
-    for (const [index, row] of rows.entries()) {
-        failure = referenceConflict(row, stored);
-        if (failure) {
-            accepted = index;
-            break;
-        }
-    }
-    if (!failure && foreignIndex !== -1)
-        failure = new KeyingVerificationError("object_mismatch", "principal policy bundle reference belongs to another principal");
-    await insertMissingReferences(tx, rows.slice(0, accepted), stored);
-    if (failure)
-        throw failure;
-}
-//# sourceMappingURL=principalPolicyReferenceIndexPersistence.js.map

package/data/persistence/principalPolicyReferenceIndexPersistence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principalPolicyReferenceIndexPersistence.js","sourceRoot":"","sources":["principalPolicyReferenceIndexPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AAgBpC,MAAM,2BAA2B,GAAG,qBAAqB,CACvD,+BAA+B,CAChC,CAAC;AACF,0EAA0E;AAC1E,MAAM,yBAAyB,GAAG,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAE/D,yEAAyE;AACzE,SAAS,eAAe,CACtB,MAAsC,EACtC,GAAgC;IAEhC,OAAO,CACL,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO;QAC9B,MAAM,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS;QAClC,MAAM,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ;QAChC,MAAM,CAAC,cAAc,KAAK,GAAG,CAAC,cAAc,CAC7C,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,SAAS,YAAY,CACnB,GAGC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,GAAG,CAAC,OAAO;QACX,GAAG,CAAC,SAAS;QACb,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,cAAc;QAClB,GAAG,CAAC,eAAe;KACpB,CAAC,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,oBAAoB,CACjC,EAAgC,EAChC,IAAmD,EACnD,QAA2B;IAE3B,MAAM,MAAM,GAAqC,EAAE,CAAC;IACpD,KACE,IAAI,KAAK,GAAG,CAAC,EACb,KAAK,GAAG,QAAQ,CAAC,MAAM,EACvB,KAAK,IAAI,yBAAyB,EAClC,CAAC;QACD,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,EAAE;aACT,MAAM,CAAC;YACN,OAAO,EAAE,+BAA+B,CAAC,OAAO;YAChD,SAAS,EAAE,+BAA+B,CAAC,SAAS;YACpD,QAAQ,EAAE,+BAA+B,CAAC,QAAQ;YAClD,cAAc,EAAE,+BAA+B,CAAC,cAAc;YAC9D,aAAa,EAAE,+BAA+B,CAAC,aAAa;YAC5D,eAAe,EAAE,+BAA+B,CAAC,eAAe;SACjE,CAAC;aACD,IAAI,CAAC,+BAA+B,CAAC;aACrC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,+BAA+B,CAAC,aAAa,EAC7C,IAAI,CAAC,aAAa,CACnB,EACD,EAAE,CAAC,+BAA+B,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,EACjE,OAAO,CACL,+BAA+B,CAAC,OAAO,EACvC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,yBAAyB,CAAC,CACzD,EACD,EAAE,CACA,EAAE,CAAC,+BAA+B,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,EAC/D,EAAE,CACA,+BAA+B,CAAC,eAAe,EAC/C,IAAI,CAAC,SAAS,CACf,CACF,CACF,CACF,CAAC,CACL,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CACxB,GAAgC,EAChC,MAAiD;IAEjD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAChD,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CAChC,CAAC;IACF,IACE,aAAa,CAAC,IAAI,CAChB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,aAAa,KAAK,GAAG,CAAC,aAAa;QAC7C,SAAS,CAAC,eAAe,KAAK,GAAG,CAAC,eAAe,CACpD;QAED,OAAO,IAAI,uBAAuB,CAChC,cAAc,EACd,wEAAwE,CACzE,CAAC;IACJ,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAChC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,eAAe,KAAK,GAAG,CAAC,eAAe,CACjE,CAAC;IACF,IAAI,OAAO,IAAI,OAAO,CAAC,aAAa,KAAK,GAAG,CAAC,aAAa;QACxD,OAAO,IAAI,uBAAuB,CAChC,cAAc,EACd,iEAAiE,CAClE,CAAC;IACJ,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,EAAgC,EAChC,IAA4C,EAC5C,MAAiD;IAEjD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuC,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,KACE,IAAI,KAAK,GAAG,CAAC,EACb,KAAK,GAAG,MAAM,CAAC,MAAM,EACrB,KAAK,IAAI,2BAA2B,EACpC,CAAC;QACD,MAAM,EAAE;aACL,MAAM,CAAC,+BAA+B,CAAC;aACvC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,2BAA2B,CAAC,CAAC;aAChE,mBAAmB,EAAE;aACrB,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,EAAgC,EAChC,MAAqC;IAErC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;IACjC,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CACnC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa;QAC1C,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,CACzC,CAAC;IACF,MAAM,IAAI,GAAkC,CAC1C,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAC7D,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,IAAI,CAAC,OAAO;QAC3B,eAAe,EAAE,IAAI,CAAC,SAAS;KAChC,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,CAAC;QACf,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,oBAAoB,CAAC,EAAE,EAAE,IAAI,EAAE;YACnC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;SAC3C,CAAC,CAAC;IACT,IAAI,OAAO,GAAmC,IAAI,CAAC;IACnD,IAAI,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,GAAG,KAAK,CAAC;YACjB,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,YAAY,KAAK,CAAC,CAAC;QACjC,OAAO,GAAG,IAAI,uBAAuB,CACnC,iBAAiB,EACjB,gEAAgE,CACjE,CAAC;IACJ,MAAM,uBAAuB,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IACnE,IAAI,OAAO;QAAE,MAAM,OAAO,CAAC;AAC7B,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { and, eq, inArray, or } from \"drizzle-orm\";\nimport { principalPolicyBundleStates } from \"../principals/principalPolicyStates\";\nimport { principalPolicyBundleReferences } from \"../sqlite/schema\";\nimport {\n  sqliteInsertBatchSize,\n  sqliteRowsPerStatement,\n} from \"../sqlite/sqliteBindBudget\";\nimport type { ClientSQLiteTransactionScope } from \"../sqlite/sqlitePersistenceRuntime\";\n\ntype PrincipalPolicyReferenceRow =\n  typeof principalPolicyBundleReferences.$inferInsert;\n\ntype StoredPrincipalPolicyReference = Pick<\n  typeof principalPolicyBundleReferences.$inferSelect,\n  | \"version\"\n  | \"stateHash\"\n  | \"keyEpoch\"\n  | \"keyFingerprint\"\n  | \"bundleVersion\"\n  | \"bundleStateHash\"\n>;\n\nconst REFERENCE_INSERT_BATCH_SIZE = sqliteInsertBatchSize(\n  principalPolicyBundleReferences,\n);\n// Principal type and id plus the bundle version and state hash bind once.\nconst REFERENCE_LOOKUP_VERSIONS = sqliteRowsPerStatement(1, 4);\n\n/** The exact six-field match; the lookup already fixes the principal. */\nfunction isSameReference(\n  stored: StoredPrincipalPolicyReference,\n  row: PrincipalPolicyReferenceRow,\n): boolean {\n  return (\n    stored.version === row.version &&\n    stored.stateHash === row.stateHash &&\n    stored.keyEpoch === row.keyEpoch &&\n    stored.keyFingerprint === row.keyFingerprint\n  );\n}\n\n/** The table's primary key within one principal. */\nfunction referenceKey(\n  row: Pick<\n    StoredPrincipalPolicyReference,\n    \"version\" | \"stateHash\" | \"keyEpoch\" | \"keyFingerprint\" | \"bundleStateHash\"\n  >,\n): string {\n  return JSON.stringify([\n    row.version,\n    row.stateHash,\n    row.keyEpoch,\n    row.keyFingerprint,\n    row.bundleStateHash,\n  ]);\n}\n\n/** Rows either equivocation check can match, read before this bundle's writes. */\nasync function loadStoredReferences(\n  tx: ClientSQLiteTransactionScope,\n  head: PrincipalPolicyBundleResponse[\"currentState\"],\n  versions: readonly number[],\n): Promise<StoredPrincipalPolicyReference[]> {\n  const stored: StoredPrincipalPolicyReference[] = [];\n  for (\n    let index = 0;\n    index < versions.length;\n    index += REFERENCE_LOOKUP_VERSIONS\n  ) {\n    stored.push(\n      ...(await tx\n        .select({\n          version: principalPolicyBundleReferences.version,\n          stateHash: principalPolicyBundleReferences.stateHash,\n          keyEpoch: principalPolicyBundleReferences.keyEpoch,\n          keyFingerprint: principalPolicyBundleReferences.keyFingerprint,\n          bundleVersion: principalPolicyBundleReferences.bundleVersion,\n          bundleStateHash: principalPolicyBundleReferences.bundleStateHash,\n        })\n        .from(principalPolicyBundleReferences)\n        .where(\n          and(\n            eq(\n              principalPolicyBundleReferences.principalType,\n              head.principalType,\n            ),\n            eq(principalPolicyBundleReferences.principalId, head.principalId),\n            inArray(\n              principalPolicyBundleReferences.version,\n              versions.slice(index, index + REFERENCE_LOOKUP_VERSIONS),\n            ),\n            or(\n              eq(principalPolicyBundleReferences.bundleVersion, head.version),\n              eq(\n                principalPolicyBundleReferences.bundleStateHash,\n                head.stateHash,\n              ),\n            ),\n          ),\n        )),\n    );\n  }\n  return stored;\n}\n\n/**\n * Rows written earlier in the same bundle all carry its head, so neither\n * check can match them: each state's outcome depends only on stored rows.\n */\nfunction referenceConflict(\n  row: PrincipalPolicyReferenceRow,\n  stored: readonly StoredPrincipalPolicyReference[],\n): KeyingVerificationError | null {\n  const sameReference = stored.filter((candidate) =>\n    isSameReference(candidate, row),\n  );\n  if (\n    sameReference.some(\n      (candidate) =>\n        candidate.bundleVersion === row.bundleVersion &&\n        candidate.bundleStateHash !== row.bundleStateHash,\n    )\n  )\n    return new KeyingVerificationError(\n      \"equivocation\",\n      \"principal policy reference has conflicting bundle heads at one version\",\n    );\n  const indexed = sameReference.find(\n    (candidate) => candidate.bundleStateHash === row.bundleStateHash,\n  );\n  if (indexed && indexed.bundleVersion !== row.bundleVersion)\n    return new KeyingVerificationError(\n      \"equivocation\",\n      \"principal policy reference index conflicts with the bundle head\",\n    );\n  return null;\n}\n\nasync function insertMissingReferences(\n  tx: ClientSQLiteTransactionScope,\n  rows: readonly PrincipalPolicyReferenceRow[],\n  stored: readonly StoredPrincipalPolicyReference[],\n): Promise<void> {\n  const present = new Set(stored.map(referenceKey));\n  const missing = new Map<string, PrincipalPolicyReferenceRow>();\n  for (const row of rows) {\n    const key = referenceKey(row);\n    if (!present.has(key) && !missing.has(key)) missing.set(key, row);\n  }\n  const values = [...missing.values()];\n  for (\n    let index = 0;\n    index < values.length;\n    index += REFERENCE_INSERT_BATCH_SIZE\n  ) {\n    await tx\n      .insert(principalPolicyBundleReferences)\n      .values(values.slice(index, index + REFERENCE_INSERT_BATCH_SIZE))\n      .onConflictDoNothing()\n      .run();\n  }\n}\n\n/**\n * Index every state of a verified bundle under its head. Fails in state order\n * with the per-state checks' errors, keeping the states indexed before the\n * first failure.\n */\nexport async function indexPrincipalPolicyBundleInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  bundle: PrincipalPolicyBundleResponse,\n): Promise<void> {\n  const head = bundle.currentState;\n  const states = principalPolicyBundleStates(bundle);\n  const foreignIndex = states.findIndex(\n    (state) =>\n      state.principalType !== head.principalType ||\n      state.principalId !== head.principalId,\n  );\n  const rows: PrincipalPolicyReferenceRow[] = (\n    foreignIndex === -1 ? states : states.slice(0, foreignIndex)\n  ).map((state) => ({\n    principalType: state.principalType,\n    principalId: state.principalId,\n    version: state.version,\n    stateHash: state.stateHash,\n    keyEpoch: state.keyEpoch,\n    keyFingerprint: state.keyFingerprint,\n    bundleVersion: head.version,\n    bundleStateHash: head.stateHash,\n  }));\n  const stored =\n    rows.length === 0\n      ? []\n      : await loadStoredReferences(tx, head, [\n          ...new Set(rows.map((row) => row.version)),\n        ]);\n  let failure: KeyingVerificationError | null = null;\n  let accepted = rows.length;\n  for (const [index, row] of rows.entries()) {\n    failure = referenceConflict(row, stored);\n    if (failure) {\n      accepted = index;\n      break;\n    }\n  }\n  if (!failure && foreignIndex !== -1)\n    failure = new KeyingVerificationError(\n      \"object_mismatch\",\n      \"principal policy bundle reference belongs to another principal\",\n    );\n  await insertMissingReferences(tx, rows.slice(0, accepted), stored);\n  if (failure) throw failure;\n}\n"]}