@tearleads/client-sdk 0.1.64 → 0.1.66

package/data/persistence/principalMutationJournalPersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"principalMutationJournalPersistence.js","sourceRoot":"","sources":["principalMutationJournalPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAgB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAKpE,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD;QACE,KAAK,CACH,kGAAkG,CACnG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAgB,EAChB,OAAe;IAEf,MAAM,eAAe,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IAC/D,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,EAAE;SACR,IAAI,CAAC,wBAAwB,CAAC;SAC9B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SACpD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAInD;IACC,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAC7C,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;aACxB,MAAM,CAAC,EAAE,OAAO,EAAE,wBAAwB,CAAC,OAAO,EAAE,CAAC;aACrD,IAAI,CAAC,wBAAwB,CAAC;aAC9B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;aACxD,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,QAAQ;YAAE,MAAM,IAAI,6BAA6B,EAAE,CAAC;QACxD,MAAM,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9D,CAAC,EACD,KAAK,CAAC,YAAY,EAClB,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACF,mCAAmC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAInD;IACC,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAC7C,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,MAAM,OAAO,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,wBAAwB,CAAC;aAChC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EACjD,EAAE,CAAC,wBAAwB,CAAC,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC,EAC/D,EAAE,CACA,wBAAwB,CAAC,iBAAiB,EAC1C,GAAG,CAAC,iBAAiB,CACtB,EACD,EAAE,CAAC,wBAAwB,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CACtD,CACF;aACA,SAAS,CAAC,EAAE,OAAO,EAAE,wBAAwB,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC,EACD,KAAK,CAAC,YAAY,EAClB,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACF,mCAAmC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC;AAChC,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport { assertProjectionVerificationCurrent } from \"../keyingProjectionVerification/types\";\nimport {\n  principalMutationJournal,\n  principalMutationJournalTables,\n} from \"../sqlite/principalMutationJournalSchema\";\nimport { getClientSQLitePersistenceRuntime } from \"../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../sqlite/sqlSchema\";\n\nexport type PrincipalMutationJournalRow =\n  typeof principalMutationJournal.$inferSelect;\n\nexport class PendingPrincipalMutationError extends Error {\n  constructor() {\n    super(\n      \"Resolve the pending principal mutation or explicitly abandon its retry before submitting another\",\n    );\n    this.name = \"PendingPrincipalMutationError\";\n  }\n}\n\nexport async function loadPrincipalMutationJournal(\n  execSql: ExecSql,\n  scopeId: string,\n): Promise<PrincipalMutationJournalRow | null> {\n  await ensureSqlTables(execSql, principalMutationJournalTables);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const [row] = await db\n    .select()\n    .from(principalMutationJournal)\n    .where(eq(principalMutationJournal.scopeId, scopeId))\n    .limit(1);\n  return row ?? null;\n}\n\n/** Claim the organization lane before dispatch; never overwrite unresolved work. */\nexport async function claimPrincipalMutationJournal(input: {\n  readonly execSql: ExecSql;\n  readonly row: PrincipalMutationJournalRow;\n  readonly stillCurrent: () => boolean;\n}): Promise<void> {\n  const row = { ...input.row };\n  await ensureSqlTables(input.execSql, principalMutationJournalTables);\n  const runtime = getClientSQLitePersistenceRuntime(input.execSql);\n  const result = await runtime.guardedTransaction(\n    async (tx) => {\n      const [existing] = await tx\n        .select({ scopeId: principalMutationJournal.scopeId })\n        .from(principalMutationJournal)\n        .where(eq(principalMutationJournal.scopeId, row.scopeId))\n        .limit(1);\n      if (existing) throw new PendingPrincipalMutationError();\n      await tx.insert(principalMutationJournal).values(row).run();\n    },\n    input.stillCurrent,\n    { behavior: \"immediate\" },\n  );\n  assertProjectionVerificationCurrent(() => result.committed);\n}\n\n/** A late acknowledgement cannot retire another operation's journal entry. */\nexport async function clearPrincipalMutationJournal(input: {\n  readonly execSql: ExecSql;\n  readonly row: PrincipalMutationJournalRow;\n  readonly stillCurrent: () => boolean;\n}): Promise<boolean> {\n  const row = { ...input.row };\n  const runtime = getClientSQLitePersistenceRuntime(input.execSql);\n  const result = await runtime.guardedTransaction(\n    async (tx) => {\n      const deleted = await tx\n        .delete(principalMutationJournal)\n        .where(\n          and(\n            eq(principalMutationJournal.scopeId, row.scopeId),\n            eq(principalMutationJournal.organizationId, row.organizationId),\n            eq(\n              principalMutationJournal.serializedRequest,\n              row.serializedRequest,\n            ),\n            eq(principalMutationJournal.signature, row.signature),\n          ),\n        )\n        .returning({ scopeId: principalMutationJournal.scopeId });\n      return deleted.length > 0;\n    },\n    input.stillCurrent,\n    { behavior: \"immediate\" },\n  );\n  assertProjectionVerificationCurrent(() => result.committed);\n  return result.result === true;\n}\n"]}
+{"version":3,"file":"principalMutationJournalPersistence.js","sourceRoot":"","sources":["principalMutationJournalPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAgB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAKpE,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD;QACE,KAAK,CACH,kGAAkG,CACnG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAgB,EAChB,OAAe;IAEf,MAAM,eAAe,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IAC/D,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,EAAE;SACR,IAAI,CAAC,wBAAwB,CAAC;SAC9B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SACpD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAInD;IACC,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAC7C,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;aACxB,MAAM,CAAC,EAAE,OAAO,EAAE,wBAAwB,CAAC,OAAO,EAAE,CAAC;aACrD,IAAI,CAAC,wBAAwB,CAAC;aAC9B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;aACxD,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,QAAQ;YAAE,MAAM,IAAI,6BAA6B,EAAE,CAAC;QACxD,MAAM,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9D,CAAC,EACD,KAAK,CAAC,YAAY,EAClB,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACF,mCAAmC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAInD;IACC,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAC7C,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,MAAM,OAAO,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,wBAAwB,CAAC;aAChC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EACjD,EAAE,CAAC,wBAAwB,CAAC,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC,EAC/D,EAAE,CACA,wBAAwB,CAAC,iBAAiB,EAC1C,GAAG,CAAC,iBAAiB,CACtB,EACD,EAAE,CAAC,wBAAwB,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CACtD,CACF;aACA,SAAS,CAAC,EAAE,OAAO,EAAE,wBAAwB,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC,EACD,KAAK,CAAC,YAAY,EAClB,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACF,mCAAmC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC;AAChC,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport { assertProjectionVerificationCurrent } from \"../keyingProjectionVerification/types\";\nimport {\n  principalMutationJournal,\n  principalMutationJournalTables,\n} from \"../sqlite/schema/principalMutationJournalSchema\";\nimport { getClientSQLitePersistenceRuntime } from \"../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../sqlite/sqlSchema\";\n\nexport type PrincipalMutationJournalRow =\n  typeof principalMutationJournal.$inferSelect;\n\nexport class PendingPrincipalMutationError extends Error {\n  constructor() {\n    super(\n      \"Resolve the pending principal mutation or explicitly abandon its retry before submitting another\",\n    );\n    this.name = \"PendingPrincipalMutationError\";\n  }\n}\n\nexport async function loadPrincipalMutationJournal(\n  execSql: ExecSql,\n  scopeId: string,\n): Promise<PrincipalMutationJournalRow | null> {\n  await ensureSqlTables(execSql, principalMutationJournalTables);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const [row] = await db\n    .select()\n    .from(principalMutationJournal)\n    .where(eq(principalMutationJournal.scopeId, scopeId))\n    .limit(1);\n  return row ?? null;\n}\n\n/** Claim the organization lane before dispatch; never overwrite unresolved work. */\nexport async function claimPrincipalMutationJournal(input: {\n  readonly execSql: ExecSql;\n  readonly row: PrincipalMutationJournalRow;\n  readonly stillCurrent: () => boolean;\n}): Promise<void> {\n  const row = { ...input.row };\n  await ensureSqlTables(input.execSql, principalMutationJournalTables);\n  const runtime = getClientSQLitePersistenceRuntime(input.execSql);\n  const result = await runtime.guardedTransaction(\n    async (tx) => {\n      const [existing] = await tx\n        .select({ scopeId: principalMutationJournal.scopeId })\n        .from(principalMutationJournal)\n        .where(eq(principalMutationJournal.scopeId, row.scopeId))\n        .limit(1);\n      if (existing) throw new PendingPrincipalMutationError();\n      await tx.insert(principalMutationJournal).values(row).run();\n    },\n    input.stillCurrent,\n    { behavior: \"immediate\" },\n  );\n  assertProjectionVerificationCurrent(() => result.committed);\n}\n\n/** A late acknowledgement cannot retire another operation's journal entry. */\nexport async function clearPrincipalMutationJournal(input: {\n  readonly execSql: ExecSql;\n  readonly row: PrincipalMutationJournalRow;\n  readonly stillCurrent: () => boolean;\n}): Promise<boolean> {\n  const row = { ...input.row };\n  const runtime = getClientSQLitePersistenceRuntime(input.execSql);\n  const result = await runtime.guardedTransaction(\n    async (tx) => {\n      const deleted = await tx\n        .delete(principalMutationJournal)\n        .where(\n          and(\n            eq(principalMutationJournal.scopeId, row.scopeId),\n            eq(principalMutationJournal.organizationId, row.organizationId),\n            eq(\n              principalMutationJournal.serializedRequest,\n              row.serializedRequest,\n            ),\n            eq(principalMutationJournal.signature, row.signature),\n          ),\n        )\n        .returning({ scopeId: principalMutationJournal.scopeId });\n      return deleted.length > 0;\n    },\n    input.stillCurrent,\n    { behavior: \"immediate\" },\n  );\n  assertProjectionVerificationCurrent(() => result.committed);\n  return result.result === true;\n}\n"]}

package/data/persistence/{principalPolicyBundleIntegrity.js → principalPolicy/principalPolicyBundleIntegrity.js}

@@ -1,6 +1,6 @@
-import { compareCanonicalStrings, KeyingVerificationError, normalizePrincipalContainerGrants, normalizePrincipalProjectionMembers, } from "../../internal/crypto/index.js";
-import { isPrincipalPolicyBundleResponse } from "../../internal/validators/response/index.js";
-import { canonicalKeyingJsonString } from "../keying/canonicalJson.js";
+import { compareCanonicalStrings, KeyingVerificationError, normalizePrincipalContainerGrants, normalizePrincipalProjectionMembers, } from "../../../internal/crypto/index.js";
+import { isPrincipalPolicyBundleResponse } from "../../../internal/validators/response/index.js";
+import { canonicalKeyingJsonString } from "../../keying/canonicalJson.js";
 import { storedPrincipalPolicyBundleFromJson, } from "./storedPrincipalPolicyBundle.js";
 function parseBundle(row) {
     const bundle = storedPrincipalPolicyBundleFromJson(row);

package/data/persistence/principalPolicy/principalPolicyBundleIntegrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalPolicyBundleIntegrity.js","sourceRoot":"","sources":["principalPolicyBundleIntegrity.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,iCAAiC,EACjC,mCAAmC,GACpC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAEL,mCAAmC,GACpC,MAAM,+BAA+B,CAAC;AAEvC,SAAS,WAAW,CAClB,GAAoC;IAEpC,MAAM,MAAM,GAAG,mCAAmC,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,+BAA+B,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,yBAAyB,CAC9B,KAAK,EACL,0CAA0C,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAQ;IAER,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IACpD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,MAAqC;IAC5D,OAAO;QACL,sBAAsB,EAAE;YACtB,GAAG,MAAM,CAAC,sBAAsB;YAChC,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACpE,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CACpD;SACF;QACD,cAAc,EAAE,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC;QACvD,iBAAiB,EAAE,mCAAmC,CACpD,MAAM,CAAC,iBAAiB,CACzB;QACD,aAAa,EAAE,iCAAiC,CAAC,MAAM,CAAC,aAAa,CAAC;QACtE,YAAY,EAAE,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC;QACnD,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpD,UAAU,EAAE,mCAAmC,CAAC,KAAK,CAAC,UAAU,CAAC;YACjE,MAAM,EAAE,iCAAiC,CAAC,KAAK,CAAC,MAAM,CAAC;YACvD,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC;SACrC,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,MAAuC,EACvC,QAAyC;IAEzC,IAAI,CAAC;QACH,IACE,SAAS,CAAC,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/C,SAAS,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EACjD,CAAC;YACD,OAAO;QACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,2EAA2E;IAC7E,CAAC;IACD,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,mFAAmF,CACpF,CAAC;AACJ,CAAC","sourcesContent":["import {\n  compareCanonicalStrings,\n  KeyingVerificationError,\n  normalizePrincipalContainerGrants,\n  normalizePrincipalProjectionMembers,\n} from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { isPrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { canonicalKeyingJsonString } from \"../../keying/canonicalJson\";\nimport {\n  type StoredPrincipalPolicyBundleJson,\n  storedPrincipalPolicyBundleFromJson,\n} from \"./storedPrincipalPolicyBundle\";\n\nfunction parseBundle(\n  row: StoredPrincipalPolicyBundleJson,\n): PrincipalPolicyBundleResponse {\n  const bundle = storedPrincipalPolicyBundleFromJson(row);\n  if (!isPrincipalPolicyBundleResponse(bundle)) {\n    throw new Error(\"Stored principal policy bundle is invalid\");\n  }\n  return bundle;\n}\n\nfunction canonical(value: unknown): string {\n  return canonicalKeyingJsonString(\n    value,\n    \"principal policy bundle security content\",\n  );\n}\n\nfunction withoutCreatedAt<T extends { readonly createdAt: string }>(\n  value: T,\n): Omit<T, \"createdAt\"> {\n  const { createdAt: _createdAt, ...content } = value;\n  return content;\n}\n\nfunction securityContent(bundle: PrincipalPolicyBundleResponse) {\n  return {\n    currentMemberEnvelopes: {\n      ...bundle.currentMemberEnvelopes,\n      envelopes: [...bundle.currentMemberEnvelopes.envelopes].sort((a, b) =>\n        compareCanonicalStrings(canonical(a), canonical(b)),\n      ),\n    },\n    currentPayload: withoutCreatedAt(bundle.currentPayload),\n    currentProjection: normalizePrincipalProjectionMembers(\n      bundle.currentProjection,\n    ),\n    currentGrants: normalizePrincipalContainerGrants(bundle.currentGrants),\n    currentState: withoutCreatedAt(bundle.currentState),\n    previousStates: bundle.previousStates.map((entry) => ({\n      projection: normalizePrincipalProjectionMembers(entry.projection),\n      grants: normalizePrincipalContainerGrants(entry.grants),\n      state: withoutCreatedAt(entry.state),\n    })),\n  };\n}\n\nexport function assertSameHeadPrincipalPolicyBundle(\n  stored: StoredPrincipalPolicyBundleJson,\n  incoming: StoredPrincipalPolicyBundleJson,\n): void {\n  try {\n    if (\n      canonical(securityContent(parseBundle(stored))) ===\n      canonical(securityContent(parseBundle(incoming)))\n    ) {\n      return;\n    }\n  } catch {\n    // Invalid same-head cache content is also an integrity conflict: replacing\n    // it would erase the only durable evidence that the head was inconsistent.\n  }\n  throw new KeyingVerificationError(\n    \"equivocation\",\n    \"principal policy bundle content conflicts with the cached bundle at the same head\",\n  );\n}\n"]}

package/data/persistence/{principalPolicyCheckpointSelection.js → principalPolicy/principalPolicyCheckpointSelection.js}

@@ -1,5 +1,5 @@
-import { verifyPrincipalPolicyCheckpoint } from "../../internal/crypto/index.js";
-import { assertPrincipalPolicyCheckpointShape } from "./keyingCheckpointPersistence.js";
+import { verifyPrincipalPolicyCheckpoint } from "../../../internal/crypto/index.js";
+import { assertPrincipalPolicyCheckpointShape } from "../keyingCheckpoints/keyingCheckpointPersistence.js";
 export function principalPolicyHeadMeetsCheckpoint(head, checkpoint) {
     return (!checkpoint ||
         head.version > checkpoint.version ||

package/data/persistence/principalPolicy/principalPolicyCheckpointSelection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalPolicyCheckpointSelection.js","sourceRoot":"","sources":["principalPolicyCheckpointSelection.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,oCAAoC,EAAE,MAAM,kDAAkD,CAAC;AAExG,MAAM,UAAU,kCAAkC,CAChD,IAA8D,EAC9D,UAA4C;IAE5C,OAAO,CACL,CAAC,UAAU;QACX,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO;QACjC,CAAC,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO;YAClC,IAAI,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,MAAoC,EACpC,UAA4C;IAE5C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,oCAAoC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,+BAA+B,CAAC;QAC9B,KAAK,EACH,iBAAiB,IAAI,MAAM;YACzB,CAAC,CAAC,MAAM,CAAC,eAAe;YACxB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAC5B,YAAY,EAAE,MAAM,CAAC,KAAK;QAC1B,eAAe,EAAE,UAAU;KAC5B,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type {\n  PrincipalPolicyAuthorization,\n  PrincipalPolicyCheckpoint,\n} from \"@tearleads/crypto\";\nimport { verifyPrincipalPolicyCheckpoint } from \"@tearleads/crypto\";\nimport { assertPrincipalPolicyCheckpointShape } from \"../keyingCheckpoints/keyingCheckpointPersistence\";\n\nexport function principalPolicyHeadMeetsCheckpoint(\n  head: { readonly stateHash: string; readonly version: number },\n  checkpoint: PrincipalPolicyCheckpoint | null,\n): boolean {\n  return (\n    !checkpoint ||\n    head.version > checkpoint.version ||\n    (head.version === checkpoint.version &&\n      head.stateHash === checkpoint.stateHash)\n  );\n}\n\nexport function verifiedPrincipalPolicyMeetsCheckpoint(\n  policy: PrincipalPolicyAuthorization,\n  checkpoint: PrincipalPolicyCheckpoint | null,\n): boolean {\n  if (!checkpoint) {\n    return true;\n  }\n  assertPrincipalPolicyCheckpointShape(checkpoint, policy);\n  if (policy.version < checkpoint.version) {\n    return false;\n  }\n  verifyPrincipalPolicyCheckpoint({\n    chain:\n      \"retainedHistory\" in policy\n        ? policy.retainedHistory\n        : (policy.history ?? []),\n    currentState: policy.state,\n    localCheckpoint: checkpoint,\n  });\n  return true;\n}\n"]}

package/data/persistence/{principalPolicyOrganizationPersistence.js → principalPolicy/principalPolicyOrganizationPersistence.js}

@@ -1,6 +1,6 @@
-import { KeyingVerificationError } from "../../internal/crypto/index.js";
+import { KeyingVerificationError } from "../../../internal/crypto/index.js";
 import { and, eq } from "drizzle-orm";
-import { principalPolicyOrganizations } from "../sqlite/schema.js";
+import { principalPolicyOrganizations } from "../../sqlite/schema/index.js";
 function resolveOrganizationId(input) {
     if (input.principalType === "organization") {
         if (input.organizationId !== undefined &&

package/data/persistence/principalPolicy/principalPolicyOrganizationPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalPolicyOrganizationPersistence.js","sourceRoot":"","sources":["principalPolicyOrganizationPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AASnE,SAAS,qBAAqB,CAC5B,KAAuC;IAEvC,IAAI,KAAK,CAAC,aAAa,KAAK,cAAc,EAAE,CAAC;QAC3C,IACE,KAAK,CAAC,cAAc,KAAK,SAAS;YAClC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,WAAW,EAC1C,CAAC;YACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC,cAAc,CAAC;AAC9B,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,8CAA8C,CAClE,EAAgC,EAChC,KAAuC;IAEvC,MAAM,cAAc,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,GAAG,CACxB,EAAE,CAAC,4BAA4B,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,EACnE,EAAE,CAAC,4BAA4B,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAChE,CAAC;IACF,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;SACtB,MAAM,CAAC,EAAE,cAAc,EAAE,4BAA4B,CAAC,cAAc,EAAE,CAAC;SACvE,IAAI,CAAC,4BAA4B,CAAC;SAClC,KAAK,CAAC,cAAc,CAAC;SACrB,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,MAAM,IAAI,MAAM,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;QACvD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,EAAE;SACL,MAAM,CAAC,4BAA4B,CAAC;SACpC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,CAAC;SACpC,mBAAmB,EAAE;SACrB,GAAG,EAAE,CAAC;AACX,CAAC;AAED,MAAM,UAAU,oDAAoD,CAClE,EAAgC,EAChC,MAAyD,EACzD,cAAmC;IAEnC,OAAO,8CAA8C,CAAC,EAAE,EAAE;QACxD,cAAc;QACd,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,WAAW;QAC5C,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,aAAa;KACjD,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type { PrincipalStateResponse } from \"@tearleads/validators/response\";\nimport { and, eq } from \"drizzle-orm\";\nimport { principalPolicyOrganizations } from \"../../sqlite/schema\";\nimport type { ClientSQLiteTransactionScope } from \"../../sqlite/sqlitePersistenceRuntime\";\n\ninterface PrincipalPolicyOrganizationInput {\n  readonly organizationId?: string | undefined;\n  readonly principalId: string;\n  readonly principalType: PrincipalStateResponse[\"principalType\"];\n}\n\nfunction resolveOrganizationId(\n  input: PrincipalPolicyOrganizationInput,\n): string {\n  if (input.principalType === \"organization\") {\n    if (\n      input.organizationId !== undefined &&\n      input.organizationId !== input.principalId\n    ) {\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"organization policy cache ownership targets another organization\",\n      );\n    }\n    return input.principalId;\n  }\n  if (!input.organizationId) {\n    throw new Error(\"Group policy cache writes require an organization ID\");\n  }\n  return input.organizationId;\n}\n\n/** Pins cache ownership in the same transaction as the cached policy state. */\nexport async function recordPrincipalPolicyOrganizationInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  input: PrincipalPolicyOrganizationInput,\n): Promise<void> {\n  const organizationId = resolveOrganizationId(input);\n  const wherePrincipal = and(\n    eq(principalPolicyOrganizations.principalType, input.principalType),\n    eq(principalPolicyOrganizations.principalId, input.principalId),\n  );\n  const [stored] = await tx\n    .select({ organizationId: principalPolicyOrganizations.organizationId })\n    .from(principalPolicyOrganizations)\n    .where(wherePrincipal)\n    .limit(1);\n  if (stored && stored.organizationId !== organizationId) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"principal policy cache is already owned by another organization\",\n    );\n  }\n  await tx\n    .insert(principalPolicyOrganizations)\n    .values({ ...input, organizationId })\n    .onConflictDoNothing()\n    .run();\n}\n\nexport function recordPrincipalPolicyBundleOrganizationInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  bundle: { readonly currentState: PrincipalStateResponse },\n  organizationId?: string | undefined,\n): Promise<void> {\n  return recordPrincipalPolicyOrganizationInTransaction(tx, {\n    organizationId,\n    principalId: bundle.currentState.principalId,\n    principalType: bundle.currentState.principalType,\n  });\n}\n"]}

package/data/persistence/{principalPolicyPersistence.js → principalPolicy/principalPolicyPersistence.js}

@@ -1,9 +1,9 @@
-import { KeyingVerificationError } from "../../internal/crypto/index.js";
-import { isPrincipalPolicyBundleResponse } from "../../internal/validators/response/index.js";
+import { KeyingVerificationError } from "../../../internal/crypto/index.js";
+import { isPrincipalPolicyBundleResponse } from "../../../internal/validators/response/index.js";
 import { and, asc, eq } from "drizzle-orm";
-import { keyingCheckpointTables, principalPolicies, principalPolicyBundleHistory, principalPolicyCheckpoints, principalPolicyTables, } from "../sqlite/schema.js";
-import { getClientSQLitePersistenceRuntime, } from "../sqlite/sqlitePersistenceRuntime.js";
-import { ensureSqlTables } from "../sqlite/sqlSchema.js";
+import { keyingCheckpointTables, principalPolicies, principalPolicyBundleHistory, principalPolicyCheckpoints, principalPolicyTables, } from "../../sqlite/schema/index.js";
+import { getClientSQLitePersistenceRuntime, } from "../../sqlite/sqlitePersistenceRuntime.js";
+import { ensureSqlTables } from "../../sqlite/sqlSchema.js";
 import { assertSameHeadPrincipalPolicyBundle } from "./principalPolicyBundleIntegrity.js";
 import { recordPrincipalPolicyBundleOrganizationInTransaction, recordPrincipalPolicyOrganizationInTransaction, } from "./principalPolicyOrganizationPersistence.js";
 import { indexPrincipalPolicyBundleInTransaction } from "./principalPolicyReferenceIndexPersistence.js";

package/data/persistence/principalPolicy/principalPolicyPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalPolicyPersistence.js","sourceRoot":"","sources":["principalPolicyPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAK5D,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EACL,oDAAoD,EACpD,8CAA8C,GAC/C,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,uCAAuC,EAAE,MAAM,4CAA4C,CAAC;AACrG,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAiCpF,SAAS,sBAAsB,CAC7B,KAAa;IAEb,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,cAAc,CAAC;AACvD,CAAC;AAED,SAAS,uBAAuB,CAC9B,GAA+B;IAE/B,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;QAChD,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,0BAA0B,EAAE,GAAG,CAAC,0BAA0B;QAC1D,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,gBAAwB;IAExB,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC9C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;YACjE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE;YACxB,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,GAAuB;IAEvB,MAAM,MAAM,GAAG,mCAAmC,CAAC,GAAG,CAAC,CAAC;IAExD,IAAI,CAAC,+BAA+B,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAgB;IAEhB,MAAM,eAAe,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;AACxD,CAAC;AAMD;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAAiC;IAEjC,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;QAC5D,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAgB,EAChB,aAAsD,EACtD,WAAmB;IAEnB,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;SACzD,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,aAAa,CAAC,EAClD,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAC/C,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,OAAO,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAgB;IAEhB,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;SACzD,IAAI,CAAC,iBAAiB,CAAC;SACvB,OAAO,CACN,GAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC,EACpC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,CACnC,CAAC;IACJ,MAAM,WAAW,GAAG,MAAM,EAAE;SACzB,MAAM,CAAC,8BAA8B,CAAC,4BAA4B,CAAC,CAAC;SACpE,IAAI,CAAC,4BAA4B,CAAC;SAClC,OAAO,CACN,GAAG,CAAC,4BAA4B,CAAC,aAAa,CAAC,EAC/C,GAAG,CAAC,4BAA4B,CAAC,WAAW,CAAC,EAC7C,GAAG,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAC5C,CAAC;IAEJ,MAAM,OAAO,GAAoC,EAAE,CAAC;IAEpD,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,SAAS;QACX,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAgB,EAChB,aAAsD,EACtD,WAAmB;IAEnB,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC,SAAS,EAAE,CAAC;SAClD,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,aAAa,CAAC,EAClD,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAC/C,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CACtB,MAAqC,EACrC,SAAiB;IAEjB,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,aAAa;QAChD,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,WAAW;QAC5C,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS;QACxC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;QACrD,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;QACzD,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC/D,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC;QACvD,0BAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,sBAAsB,CAAC;QACzE,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;QACzD,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAAmC,EACnC,UAA4C;IAE5C,IACE,UAAU;QACV,QAAQ,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO;QACvC,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS,EAC3C,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,uEAAuE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,EAAgC,EAChC,YAAoD,EACpD,UAA4C,EAC5C,YAAuC;IAEvC,IACE,CAAC,YAAY;QACb,CAAC,UAAU;QACX,UAAU,CAAC,OAAO,IAAI,YAAY,CAAC,OAAO,EAC1C,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,0BAA0B,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,EAAE;aACL,MAAM,CAAC,4BAA4B,CAAC;aACpC,MAAM,CAAC,UAAU,CAAC;aAClB,mBAAmB,EAAE;aACrB,GAAG,EAAE,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,EAAgC,EAChC,MAAqC,EACrC,OAA2B,EAC3B,YAAuC;IAEvC,MAAM,cAAc,GAAG,GAAG,CACxB,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,EAC1D,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CACvD,CAAC;IACF,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,EAAE;SAC5B,MAAM,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;SACzD,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CAAC,cAAc,CAAC;SACrB,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,CAAC,iBAAiB,CAAC,GAAG,MAAM,EAAE;SACjC,MAAM,CAAC;QACN,SAAS,EAAE,0BAA0B,CAAC,SAAS;QAC/C,OAAO,EAAE,0BAA0B,CAAC,OAAO;KAC5C,CAAC;SACD,IAAI,CAAC,0BAA0B,CAAC;SAChC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,0BAA0B,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,EACnE,EAAE,CAAC,0BAA0B,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAChE,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,UAAU,GAAG,YAAY;QAC7B,CAAC,CAAC,8BAA8B,CAAC,YAAY,CAAC,gBAAgB,CAAC;QAC/D,CAAC,CAAC,IAAI,CAAC;IACT,IACE,YAAY;QACZ,UAAU,EAAE,OAAO,KAAK,YAAY,CAAC,OAAO;QAC5C,UAAU,CAAC,SAAS,KAAK,YAAY,CAAC,SAAS,EAC/C,CAAC;QACD,mCAAmC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,uCAAuC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,MAAM,CAAC,cAAc,CAAC,GAAG,MAAM,EAAE;SAC9B,MAAM,CAAC,8BAA8B,CAAC,4BAA4B,CAAC,CAAC;SACpE,IAAI,CAAC,4BAA4B,CAAC;SAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,4BAA4B,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,EACrE,EAAE,CAAC,4BAA4B,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,EACjE,EAAE,CAAC,4BAA4B,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAC9D,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,cAAc,EAAE,CAAC;QACnB,mCAAmC,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,uCAAuC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,aAAa,GACjB,iBAAiB;QACjB,CAAC,CAAC,UAAU,IAAI,iBAAiB,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC;QAC9D,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,UAAU,CAAC;IACjB,oBAAoB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC/C,oBAAoB,CAAC,YAAY,EAAE,iBAAiB,IAAI,IAAI,CAAC,CAAC;IAC9D,IAAI,aAAa,IAAI,YAAY,CAAC,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC;QAClE,OAAO;IACT,CAAC;IAED,MAAM,wBAAwB,CAAC,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IAC3E,MAAM,EAAE;SACL,MAAM,CAAC,iBAAiB,CAAC;SACzB,MAAM,CAAC,OAAO,CAAC;SACf,kBAAkB,CAAC;QAClB,MAAM,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,iBAAiB,CAAC,WAAW,CAAC;QACxE,GAAG,EAAE,OAAO;KACb,CAAC;SACD,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,4BAA4B,CAAC;SACpC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,4BAA4B,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,EACrE,EAAE,CAAC,4BAA4B,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,EACjE,EAAE,CAAC,4BAA4B,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAC9D,CACF;SACA,GAAG,EAAE,CAAC;IACT,MAAM,uCAAuC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,EAAgC,EAChC,MAAqC,EACrC,SAAiB,EACjB,cAAmC;IAEnC,MAAM,oDAAoD,CACxD,EAAE,EACF,MAAM,EACN,cAAc,CACf,CAAC;IACF,MAAM,0BAA0B,CAC9B,EAAE,EACF,MAAM,EACN,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,EAClC,MAAM,CAAC,YAAY,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8CAA8C,CAClE,EAAgC,EAChC,MAAqC;IAErC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;SACtB,MAAM,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;SACzD,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,EAC3D,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CACxD,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,mCAAmC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,EAAgC,EAChC,MAAqC,EACrC,SAAiB,EACjB,cAAmC;IAEnC,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,8CAA8C,CAAC,EAAE,EAAE;QACvD,cAAc;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC,CAAC;IACH,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;SACvB,MAAM,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;SACzD,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,EACtD,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CACnD,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,OAAO,EAAE,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QACzC,mCAAmC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,uCAAuC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,CAAC,8BAA8B,CAAC,4BAA4B,CAAC,CAAC;SACpE,IAAI,CAAC,4BAA4B,CAAC;SAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,4BAA4B,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,EACjE,EAAE,CAAC,4BAA4B,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAC7D,EAAE,CAAC,4BAA4B,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAC1D,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,QAAQ,EAAE,CAAC;QACb,mCAAmC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,uCAAuC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAChE,MAAM,uCAAuC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAgB,EAChB,MAAqC,EACrC,SAAiB,EACjB,cAAsB,EACtB,OAAoE;IAEpE,MAAM,eAAe,CAAC,OAAO,EAAE;QAC7B,GAAG,qBAAqB;QACxB,GAAG,sBAAsB;KAC1B,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,CAAC,EAAgC,EAAE,EAAE,CAChD,uCAAuC,CACrC,EAAE,EACF,MAAM,EACN,SAAS,EACT,cAAc,CACf,CAAC;IACJ,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;QAC1B,MAAM,OAAO,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE;YAC3D,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;AAC7D,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type {\n  PrincipalPolicyBundleResponse,\n  PrincipalStateResponse,\n} from \"@tearleads/validators/response\";\nimport { isPrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { and, asc, eq } from \"drizzle-orm\";\nimport {\n  keyingCheckpointTables,\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyCheckpoints,\n  principalPolicyTables,\n} from \"../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\nimport { assertSameHeadPrincipalPolicyBundle } from \"./principalPolicyBundleIntegrity\";\nimport {\n  recordPrincipalPolicyBundleOrganizationInTransaction,\n  recordPrincipalPolicyOrganizationInTransaction,\n} from \"./principalPolicyOrganizationPersistence\";\nimport { indexPrincipalPolicyBundleInTransaction } from \"./principalPolicyReferenceIndexPersistence\";\nimport { storedPrincipalPolicyBundleFromJson } from \"./storedPrincipalPolicyBundle\";\n\ninterface PrincipalPolicyRow {\n  principalType: \"group\" | \"organization\";\n  principalId: string;\n  stateHash: string;\n  currentStateJson: string;\n  currentPayloadJson: string;\n  currentProjectionJson: string;\n  currentGrantsJson: string;\n  currentMemberEnvelopesJson: string;\n  previousStatesJson: string;\n  updatedAt: string;\n}\n\nexport interface SelectedPrincipalPolicyRow {\n  principalType: string;\n  principalId: string;\n  stateHash: string;\n  currentStateJson: string;\n  currentPayloadJson: string;\n  currentProjectionJson: string;\n  currentGrantsJson: string;\n  currentMemberEnvelopesJson: string;\n  previousStatesJson: string;\n  updatedAt: string;\n}\n\ninterface StoredPrincipalPolicyHead {\n  readonly stateHash: string;\n  readonly version: number;\n}\n\nfunction isManagedPrincipalType(\n  value: string,\n): value is PrincipalStateResponse[\"principalType\"] {\n  return value === \"group\" || value === \"organization\";\n}\n\nfunction parsePrincipalPolicyRow(\n  row: SelectedPrincipalPolicyRow,\n): PrincipalPolicyRow | null {\n  if (!isManagedPrincipalType(row.principalType)) {\n    return null;\n  }\n\n  return {\n    principalType: row.principalType,\n    principalId: row.principalId,\n    stateHash: row.stateHash,\n    currentStateJson: row.currentStateJson,\n    currentPayloadJson: row.currentPayloadJson,\n    currentProjectionJson: row.currentProjectionJson,\n    currentGrantsJson: row.currentGrantsJson,\n    currentMemberEnvelopesJson: row.currentMemberEnvelopesJson,\n    previousStatesJson: row.previousStatesJson,\n    updatedAt: row.updatedAt,\n  };\n}\n\nfunction parseStoredPrincipalPolicyHead(\n  currentStateJson: string,\n): StoredPrincipalPolicyHead | null {\n  try {\n    const value: unknown = JSON.parse(currentStateJson);\n    if (!value || typeof value !== \"object\") {\n      return null;\n    }\n    const stateHash = Reflect.get(value, \"stateHash\");\n    const version = Reflect.get(value, \"version\");\n    return typeof stateHash === \"string\" && typeof version === \"number\"\n      ? { stateHash, version }\n      : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction parsePrincipalPolicyBundle(\n  row: PrincipalPolicyRow,\n): PrincipalPolicyBundleResponse {\n  const bundle = storedPrincipalPolicyBundleFromJson(row);\n\n  if (!isPrincipalPolicyBundleResponse(bundle)) {\n    throw new Error(\"Stored principal policy bundle is invalid\");\n  }\n\n  return bundle;\n}\n\nexport async function ensurePrincipalPolicyTables(\n  execSql: ExecSql,\n): Promise<void> {\n  await ensureSqlTables(execSql, principalPolicyTables);\n}\n\ntype PrincipalPolicyBundleTable =\n  | typeof principalPolicies\n  | typeof principalPolicyBundleHistory;\n\n/**\n * The ONE select shape for a stored principal-policy bundle row, over either\n * the mutable-head table or the retained-history table.\n */\nexport function principalPolicyBundleSelection(\n  table: PrincipalPolicyBundleTable,\n) {\n  return {\n    principalType: table.principalType,\n    principalId: table.principalId,\n    stateHash: table.stateHash,\n    currentStateJson: table.currentStateJson,\n    currentPayloadJson: table.currentPayloadJson,\n    currentProjectionJson: table.currentProjectionJson,\n    currentGrantsJson: table.currentGrantsJson,\n    currentMemberEnvelopesJson: table.currentMemberEnvelopesJson,\n    previousStatesJson: table.previousStatesJson,\n    updatedAt: table.updatedAt,\n  };\n}\n\nexport async function loadPrincipalPolicyBundle(\n  execSql: ExecSql,\n  principalType: PrincipalStateResponse[\"principalType\"],\n  principalId: string,\n): Promise<PrincipalPolicyBundleResponse | null> {\n  await ensurePrincipalPolicyTables(execSql);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select(principalPolicyBundleSelection(principalPolicies))\n    .from(principalPolicies)\n    .where(\n      and(\n        eq(principalPolicies.principalType, principalType),\n        eq(principalPolicies.principalId, principalId),\n      ),\n    )\n    .limit(1);\n\n  const row = rows[0] ? parsePrincipalPolicyRow(rows[0]) : null;\n  return row ? parsePrincipalPolicyBundle(row) : null;\n}\n\nexport async function loadAllPrincipalPolicyBundles(\n  execSql: ExecSql,\n): Promise<PrincipalPolicyBundleResponse[]> {\n  await ensurePrincipalPolicyTables(execSql);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select(principalPolicyBundleSelection(principalPolicies))\n    .from(principalPolicies)\n    .orderBy(\n      asc(principalPolicies.principalType),\n      asc(principalPolicies.principalId),\n    );\n  const historyRows = await db\n    .select(principalPolicyBundleSelection(principalPolicyBundleHistory))\n    .from(principalPolicyBundleHistory)\n    .orderBy(\n      asc(principalPolicyBundleHistory.principalType),\n      asc(principalPolicyBundleHistory.principalId),\n      asc(principalPolicyBundleHistory.stateHash),\n    );\n\n  const bundles: PrincipalPolicyBundleResponse[] = [];\n\n  for (const rawRow of [...rows, ...historyRows]) {\n    const row = parsePrincipalPolicyRow(rawRow);\n\n    if (!row) {\n      continue;\n    }\n\n    bundles.push(parsePrincipalPolicyBundle(row));\n  }\n\n  return bundles;\n}\n\nexport async function loadPrincipalPolicyStateHash(\n  execSql: ExecSql,\n  principalType: PrincipalStateResponse[\"principalType\"],\n  principalId: string,\n): Promise<string | null> {\n  await ensurePrincipalPolicyTables(execSql);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({ stateHash: principalPolicies.stateHash })\n    .from(principalPolicies)\n    .where(\n      and(\n        eq(principalPolicies.principalType, principalType),\n        eq(principalPolicies.principalId, principalId),\n      ),\n    )\n    .limit(1);\n\n  return rows[0]?.stateHash ?? null;\n}\n\nfunction policyBundleRow(\n  bundle: PrincipalPolicyBundleResponse,\n  updatedAt: string,\n): PrincipalPolicyRow {\n  return {\n    principalType: bundle.currentState.principalType,\n    principalId: bundle.currentState.principalId,\n    stateHash: bundle.currentState.stateHash,\n    currentStateJson: JSON.stringify(bundle.currentState),\n    currentPayloadJson: JSON.stringify(bundle.currentPayload),\n    currentProjectionJson: JSON.stringify(bundle.currentProjection),\n    currentGrantsJson: JSON.stringify(bundle.currentGrants),\n    currentMemberEnvelopesJson: JSON.stringify(bundle.currentMemberEnvelopes),\n    previousStatesJson: JSON.stringify(bundle.previousStates),\n    updatedAt,\n  };\n}\n\nfunction assertNoHeadConflict(\n  incoming: StoredPrincipalPolicyHead,\n  checkpoint: StoredPrincipalPolicyHead | null,\n): void {\n  if (\n    checkpoint &&\n    incoming.version === checkpoint.version &&\n    incoming.stateHash !== checkpoint.stateHash\n  ) {\n    throw new KeyingVerificationError(\n      \"equivocation\",\n      \"principal policy bundle conflicts with the cached head at one version\",\n    );\n  }\n}\n\nasync function archiveOlderPolicyBundle(\n  tx: ClientSQLiteTransactionScope,\n  storedPolicy: SelectedPrincipalPolicyRow | undefined,\n  storedHead: StoredPrincipalPolicyHead | null,\n  incomingHead: StoredPrincipalPolicyHead,\n): Promise<void> {\n  if (\n    !storedPolicy ||\n    !storedHead ||\n    storedHead.version >= incomingHead.version\n  ) {\n    return;\n  }\n  const archiveRow = parsePrincipalPolicyRow(storedPolicy);\n  if (!archiveRow) {\n    return;\n  }\n  try {\n    parsePrincipalPolicyBundle(archiveRow);\n    await tx\n      .insert(principalPolicyBundleHistory)\n      .values(archiveRow)\n      .onConflictDoNothing()\n      .run();\n  } catch {\n    // A corrupt cache row is replaced, never retained as key material.\n  }\n}\n\nasync function writePrincipalPolicyBundle(\n  tx: ClientSQLiteTransactionScope,\n  bundle: PrincipalPolicyBundleResponse,\n  nextRow: PrincipalPolicyRow,\n  incomingHead: StoredPrincipalPolicyHead,\n): Promise<void> {\n  const wherePrincipal = and(\n    eq(principalPolicies.principalType, nextRow.principalType),\n    eq(principalPolicies.principalId, nextRow.principalId),\n  );\n  const [storedPolicy] = await tx\n    .select(principalPolicyBundleSelection(principalPolicies))\n    .from(principalPolicies)\n    .where(wherePrincipal)\n    .limit(1);\n  const [durableCheckpoint] = await tx\n    .select({\n      stateHash: principalPolicyCheckpoints.stateHash,\n      version: principalPolicyCheckpoints.version,\n    })\n    .from(principalPolicyCheckpoints)\n    .where(\n      and(\n        eq(principalPolicyCheckpoints.principalType, nextRow.principalType),\n        eq(principalPolicyCheckpoints.principalId, nextRow.principalId),\n      ),\n    )\n    .limit(1);\n  const storedHead = storedPolicy\n    ? parseStoredPrincipalPolicyHead(storedPolicy.currentStateJson)\n    : null;\n  if (\n    storedPolicy &&\n    storedHead?.version === incomingHead.version &&\n    storedHead.stateHash === incomingHead.stateHash\n  ) {\n    assertSameHeadPrincipalPolicyBundle(storedPolicy, nextRow);\n    await indexPrincipalPolicyBundleInTransaction(tx, bundle);\n    return;\n  }\n  const [retainedPolicy] = await tx\n    .select(principalPolicyBundleSelection(principalPolicyBundleHistory))\n    .from(principalPolicyBundleHistory)\n    .where(\n      and(\n        eq(principalPolicyBundleHistory.principalType, nextRow.principalType),\n        eq(principalPolicyBundleHistory.principalId, nextRow.principalId),\n        eq(principalPolicyBundleHistory.stateHash, nextRow.stateHash),\n      ),\n    )\n    .limit(1);\n  if (retainedPolicy) {\n    assertSameHeadPrincipalPolicyBundle(retainedPolicy, nextRow);\n    await indexPrincipalPolicyBundleInTransaction(tx, bundle);\n  }\n  const effectiveHead =\n    durableCheckpoint &&\n    (!storedHead || durableCheckpoint.version >= storedHead.version)\n      ? durableCheckpoint\n      : storedHead;\n  assertNoHeadConflict(incomingHead, storedHead);\n  assertNoHeadConflict(incomingHead, durableCheckpoint ?? null);\n  if (effectiveHead && incomingHead.version < effectiveHead.version) {\n    return;\n  }\n\n  await archiveOlderPolicyBundle(tx, storedPolicy, storedHead, incomingHead);\n  await tx\n    .insert(principalPolicies)\n    .values(nextRow)\n    .onConflictDoUpdate({\n      target: [principalPolicies.principalType, principalPolicies.principalId],\n      set: nextRow,\n    })\n    .run();\n  await tx\n    .delete(principalPolicyBundleHistory)\n    .where(\n      and(\n        eq(principalPolicyBundleHistory.principalType, nextRow.principalType),\n        eq(principalPolicyBundleHistory.principalId, nextRow.principalId),\n        eq(principalPolicyBundleHistory.stateHash, nextRow.stateHash),\n      ),\n    )\n    .run();\n  await indexPrincipalPolicyBundleInTransaction(tx, bundle);\n}\n\nexport async function writePrincipalPolicyBundleInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  bundle: PrincipalPolicyBundleResponse,\n  updatedAt: string,\n  organizationId?: string | undefined,\n): Promise<void> {\n  await recordPrincipalPolicyBundleOrganizationInTransaction(\n    tx,\n    bundle,\n    organizationId,\n  );\n  await writePrincipalPolicyBundle(\n    tx,\n    bundle,\n    policyBundleRow(bundle, updatedAt),\n    bundle.currentState,\n  );\n}\n\nexport async function assertPrincipalPolicyBundleStoredInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  bundle: PrincipalPolicyBundleResponse,\n): Promise<void> {\n  const expected = policyBundleRow(bundle, bundle.currentState.createdAt);\n  const [stored] = await tx\n    .select(principalPolicyBundleSelection(principalPolicies))\n    .from(principalPolicies)\n    .where(\n      and(\n        eq(principalPolicies.principalType, expected.principalType),\n        eq(principalPolicies.principalId, expected.principalId),\n      ),\n    )\n    .limit(1);\n  if (!stored) {\n    throw new Error(\"Verified principal policy bundle was not persisted\");\n  }\n  assertSameHeadPrincipalPolicyBundle(stored, expected);\n}\n\nexport async function retainPrincipalPolicyBundleInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  bundle: PrincipalPolicyBundleResponse,\n  updatedAt: string,\n  organizationId?: string | undefined,\n): Promise<void> {\n  const row = policyBundleRow(bundle, updatedAt);\n  await recordPrincipalPolicyOrganizationInTransaction(tx, {\n    organizationId,\n    principalId: row.principalId,\n    principalType: row.principalType,\n  });\n  const [current] = await tx\n    .select(principalPolicyBundleSelection(principalPolicies))\n    .from(principalPolicies)\n    .where(\n      and(\n        eq(principalPolicies.principalType, row.principalType),\n        eq(principalPolicies.principalId, row.principalId),\n      ),\n    )\n    .limit(1);\n  if (current?.stateHash === row.stateHash) {\n    assertSameHeadPrincipalPolicyBundle(current, row);\n    await indexPrincipalPolicyBundleInTransaction(tx, bundle);\n    return;\n  }\n  const [retained] = await tx\n    .select(principalPolicyBundleSelection(principalPolicyBundleHistory))\n    .from(principalPolicyBundleHistory)\n    .where(\n      and(\n        eq(principalPolicyBundleHistory.principalType, row.principalType),\n        eq(principalPolicyBundleHistory.principalId, row.principalId),\n        eq(principalPolicyBundleHistory.stateHash, row.stateHash),\n      ),\n    )\n    .limit(1);\n  if (retained) {\n    assertSameHeadPrincipalPolicyBundle(retained, row);\n    await indexPrincipalPolicyBundleInTransaction(tx, bundle);\n    return;\n  }\n  await tx.insert(principalPolicyBundleHistory).values(row).run();\n  await indexPrincipalPolicyBundleInTransaction(tx, bundle);\n}\n\nexport async function savePrincipalPolicyBundle(\n  execSql: ExecSql,\n  bundle: PrincipalPolicyBundleResponse,\n  updatedAt: string,\n  organizationId: string,\n  options?: { stillCurrent?: (() => boolean) | undefined } | undefined,\n): Promise<void> {\n  await ensureSqlTables(execSql, [\n    ...principalPolicyTables,\n    ...keyingCheckpointTables,\n  ]);\n\n  const runtime = getClientSQLitePersistenceRuntime(execSql);\n  const save = (tx: ClientSQLiteTransactionScope) =>\n    writePrincipalPolicyBundleInTransaction(\n      tx,\n      bundle,\n      updatedAt,\n      organizationId,\n    );\n  if (options?.stillCurrent) {\n    await runtime.guardedTransaction(save, options.stillCurrent, {\n      behavior: \"immediate\",\n    });\n    return;\n  }\n  await runtime.transaction(save, { behavior: \"immediate\" });\n}\n"]}

package/data/persistence/{principalPolicyReferenceCheckpoint.js → principalPolicy/principalPolicyReferenceCheckpoint.js}

@@ -1,6 +1,6 @@
-import { KeyingVerificationError, } from "../../internal/crypto/index.js";
-import { principalPolicyBundleStates } from "../principals/principalPolicyStates.js";
-import { assertPrincipalPolicyCheckpointShape } from "./keyingCheckpointPersistence.js";
+import { KeyingVerificationError, } from "../../../internal/crypto/index.js";
+import { principalPolicyBundleStates } from "../../principals/principalPolicyStates.js";
+import { assertPrincipalPolicyCheckpointShape } from "../keyingCheckpoints/keyingCheckpointPersistence.js";
 export function applyPrincipalPolicyReferenceCheckpoint(bundle, checkpoint) {
     if (!checkpoint) {
         return bundle;

package/data/persistence/principalPolicy/principalPolicyReferenceCheckpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalPolicyReferenceCheckpoint.js","sourceRoot":"","sources":["principalPolicyReferenceCheckpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,EAAE,oCAAoC,EAAE,MAAM,kDAAkD,CAAC;AAExG,MAAM,UAAU,uCAAuC,CACrD,MAAqC,EACrC,UAA4C;IAE5C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,oCAAoC,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,YAAY,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;QACvD,IAAI,MAAM,CAAC,YAAY,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS,EAAE,CAAC;YAC3D,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC,MAAM,CACjE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,CAChD,CAAC;IACF,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IACE,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS,CAAC,EAC1E,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type PrincipalPolicyCheckpoint,\n} from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { principalPolicyBundleStates } from \"../../principals/principalPolicyStates\";\nimport { assertPrincipalPolicyCheckpointShape } from \"../keyingCheckpoints/keyingCheckpointPersistence\";\n\nexport function applyPrincipalPolicyReferenceCheckpoint(\n  bundle: PrincipalPolicyBundleResponse,\n  checkpoint: PrincipalPolicyCheckpoint | null,\n): PrincipalPolicyBundleResponse | null {\n  if (!checkpoint) {\n    return bundle;\n  }\n  assertPrincipalPolicyCheckpointShape(checkpoint, bundle.currentState);\n  if (bundle.currentState.version < checkpoint.version) {\n    return null;\n  }\n  if (bundle.currentState.version === checkpoint.version) {\n    if (bundle.currentState.stateHash !== checkpoint.stateHash) {\n      throw new KeyingVerificationError(\n        \"equivocation\",\n        \"principal policy head conflicts with the local checkpoint\",\n      );\n    }\n    return bundle;\n  }\n  const checkpointStates = principalPolicyBundleStates(bundle).filter(\n    (state) => state.version === checkpoint.version,\n  );\n  if (checkpointStates.length === 0) {\n    throw new KeyingVerificationError(\n      \"stale_predecessor\",\n      \"principal policy chain does not extend the local checkpoint\",\n    );\n  }\n  if (\n    checkpointStates.some((state) => state.stateHash !== checkpoint.stateHash)\n  ) {\n    throw new KeyingVerificationError(\n      \"equivocation\",\n      \"principal policy chain conflicts with the local checkpoint\",\n    );\n  }\n  return bundle;\n}\n"]}

package/data/persistence/{principalPolicyReferenceIndexPersistence.js → principalPolicy/principalPolicyReferenceIndexPersistence.js}

@@ -1,8 +1,8 @@
-import { KeyingVerificationError } from "../../internal/crypto/index.js";
+import { KeyingVerificationError } from "../../../internal/crypto/index.js";
 import { and, eq, inArray, or } from "drizzle-orm";
-import { principalPolicyBundleStates } from "../principals/principalPolicyStates.js";
-import { principalPolicyBundleReferences } from "../sqlite/schema.js";
-import { sqliteInsertBatchSize, sqliteRowsPerStatement, } from "../sqlite/sqliteBindBudget.js";
+import { principalPolicyBundleStates } from "../../principals/principalPolicyStates.js";
+import { principalPolicyBundleReferences } from "../../sqlite/schema/index.js";
+import { sqliteInsertBatchSize, sqliteRowsPerStatement, } from "../../sqlite/sqliteBindBudget.js";
 const REFERENCE_INSERT_BATCH_SIZE = sqliteInsertBatchSize(principalPolicyBundleReferences);
 // Principal type and id plus the bundle version and state hash bind once.
 const REFERENCE_LOOKUP_VERSIONS = sqliteRowsPerStatement(1, 4);

package/data/persistence/principalPolicy/principalPolicyReferenceIndexPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalPolicyReferenceIndexPersistence.js","sourceRoot":"","sources":["principalPolicyReferenceIndexPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AAgBvC,MAAM,2BAA2B,GAAG,qBAAqB,CACvD,+BAA+B,CAChC,CAAC;AACF,0EAA0E;AAC1E,MAAM,yBAAyB,GAAG,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAE/D,yEAAyE;AACzE,SAAS,eAAe,CACtB,MAAsC,EACtC,GAAgC;IAEhC,OAAO,CACL,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO;QAC9B,MAAM,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS;QAClC,MAAM,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ;QAChC,MAAM,CAAC,cAAc,KAAK,GAAG,CAAC,cAAc,CAC7C,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,SAAS,YAAY,CACnB,GAGC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,GAAG,CAAC,OAAO;QACX,GAAG,CAAC,SAAS;QACb,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,cAAc;QAClB,GAAG,CAAC,eAAe;KACpB,CAAC,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,oBAAoB,CACjC,EAAgC,EAChC,IAAmD,EACnD,QAA2B;IAE3B,MAAM,MAAM,GAAqC,EAAE,CAAC;IACpD,KACE,IAAI,KAAK,GAAG,CAAC,EACb,KAAK,GAAG,QAAQ,CAAC,MAAM,EACvB,KAAK,IAAI,yBAAyB,EAClC,CAAC;QACD,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,EAAE;aACT,MAAM,CAAC;YACN,OAAO,EAAE,+BAA+B,CAAC,OAAO;YAChD,SAAS,EAAE,+BAA+B,CAAC,SAAS;YACpD,QAAQ,EAAE,+BAA+B,CAAC,QAAQ;YAClD,cAAc,EAAE,+BAA+B,CAAC,cAAc;YAC9D,aAAa,EAAE,+BAA+B,CAAC,aAAa;YAC5D,eAAe,EAAE,+BAA+B,CAAC,eAAe;SACjE,CAAC;aACD,IAAI,CAAC,+BAA+B,CAAC;aACrC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,+BAA+B,CAAC,aAAa,EAC7C,IAAI,CAAC,aAAa,CACnB,EACD,EAAE,CAAC,+BAA+B,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,EACjE,OAAO,CACL,+BAA+B,CAAC,OAAO,EACvC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,yBAAyB,CAAC,CACzD,EACD,EAAE,CACA,EAAE,CAAC,+BAA+B,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,EAC/D,EAAE,CACA,+BAA+B,CAAC,eAAe,EAC/C,IAAI,CAAC,SAAS,CACf,CACF,CACF,CACF,CAAC,CACL,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CACxB,GAAgC,EAChC,MAAiD;IAEjD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAChD,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CAChC,CAAC;IACF,IACE,aAAa,CAAC,IAAI,CAChB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,aAAa,KAAK,GAAG,CAAC,aAAa;QAC7C,SAAS,CAAC,eAAe,KAAK,GAAG,CAAC,eAAe,CACpD;QAED,OAAO,IAAI,uBAAuB,CAChC,cAAc,EACd,wEAAwE,CACzE,CAAC;IACJ,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAChC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,eAAe,KAAK,GAAG,CAAC,eAAe,CACjE,CAAC;IACF,IAAI,OAAO,IAAI,OAAO,CAAC,aAAa,KAAK,GAAG,CAAC,aAAa;QACxD,OAAO,IAAI,uBAAuB,CAChC,cAAc,EACd,iEAAiE,CAClE,CAAC;IACJ,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,EAAgC,EAChC,IAA4C,EAC5C,MAAiD;IAEjD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuC,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,KACE,IAAI,KAAK,GAAG,CAAC,EACb,KAAK,GAAG,MAAM,CAAC,MAAM,EACrB,KAAK,IAAI,2BAA2B,EACpC,CAAC;QACD,MAAM,EAAE;aACL,MAAM,CAAC,+BAA+B,CAAC;aACvC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,2BAA2B,CAAC,CAAC;aAChE,mBAAmB,EAAE;aACrB,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,EAAgC,EAChC,MAAqC;IAErC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;IACjC,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CACnC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa;QAC1C,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,CACzC,CAAC;IACF,MAAM,IAAI,GAAkC,CAC1C,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAC7D,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,IAAI,CAAC,OAAO;QAC3B,eAAe,EAAE,IAAI,CAAC,SAAS;KAChC,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,CAAC;QACf,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,oBAAoB,CAAC,EAAE,EAAE,IAAI,EAAE;YACnC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;SAC3C,CAAC,CAAC;IACT,IAAI,OAAO,GAAmC,IAAI,CAAC;IACnD,IAAI,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,GAAG,KAAK,CAAC;YACjB,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,YAAY,KAAK,CAAC,CAAC;QACjC,OAAO,GAAG,IAAI,uBAAuB,CACnC,iBAAiB,EACjB,gEAAgE,CACjE,CAAC;IACJ,MAAM,uBAAuB,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IACnE,IAAI,OAAO;QAAE,MAAM,OAAO,CAAC;AAC7B,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { and, eq, inArray, or } from \"drizzle-orm\";\nimport { principalPolicyBundleStates } from \"../../principals/principalPolicyStates\";\nimport { principalPolicyBundleReferences } from \"../../sqlite/schema\";\nimport {\n  sqliteInsertBatchSize,\n  sqliteRowsPerStatement,\n} from \"../../sqlite/sqliteBindBudget\";\nimport type { ClientSQLiteTransactionScope } from \"../../sqlite/sqlitePersistenceRuntime\";\n\ntype PrincipalPolicyReferenceRow =\n  typeof principalPolicyBundleReferences.$inferInsert;\n\ntype StoredPrincipalPolicyReference = Pick<\n  typeof principalPolicyBundleReferences.$inferSelect,\n  | \"version\"\n  | \"stateHash\"\n  | \"keyEpoch\"\n  | \"keyFingerprint\"\n  | \"bundleVersion\"\n  | \"bundleStateHash\"\n>;\n\nconst REFERENCE_INSERT_BATCH_SIZE = sqliteInsertBatchSize(\n  principalPolicyBundleReferences,\n);\n// Principal type and id plus the bundle version and state hash bind once.\nconst REFERENCE_LOOKUP_VERSIONS = sqliteRowsPerStatement(1, 4);\n\n/** The exact six-field match; the lookup already fixes the principal. */\nfunction isSameReference(\n  stored: StoredPrincipalPolicyReference,\n  row: PrincipalPolicyReferenceRow,\n): boolean {\n  return (\n    stored.version === row.version &&\n    stored.stateHash === row.stateHash &&\n    stored.keyEpoch === row.keyEpoch &&\n    stored.keyFingerprint === row.keyFingerprint\n  );\n}\n\n/** The table's primary key within one principal. */\nfunction referenceKey(\n  row: Pick<\n    StoredPrincipalPolicyReference,\n    \"version\" | \"stateHash\" | \"keyEpoch\" | \"keyFingerprint\" | \"bundleStateHash\"\n  >,\n): string {\n  return JSON.stringify([\n    row.version,\n    row.stateHash,\n    row.keyEpoch,\n    row.keyFingerprint,\n    row.bundleStateHash,\n  ]);\n}\n\n/** Rows either equivocation check can match, read before this bundle's writes. */\nasync function loadStoredReferences(\n  tx: ClientSQLiteTransactionScope,\n  head: PrincipalPolicyBundleResponse[\"currentState\"],\n  versions: readonly number[],\n): Promise<StoredPrincipalPolicyReference[]> {\n  const stored: StoredPrincipalPolicyReference[] = [];\n  for (\n    let index = 0;\n    index < versions.length;\n    index += REFERENCE_LOOKUP_VERSIONS\n  ) {\n    stored.push(\n      ...(await tx\n        .select({\n          version: principalPolicyBundleReferences.version,\n          stateHash: principalPolicyBundleReferences.stateHash,\n          keyEpoch: principalPolicyBundleReferences.keyEpoch,\n          keyFingerprint: principalPolicyBundleReferences.keyFingerprint,\n          bundleVersion: principalPolicyBundleReferences.bundleVersion,\n          bundleStateHash: principalPolicyBundleReferences.bundleStateHash,\n        })\n        .from(principalPolicyBundleReferences)\n        .where(\n          and(\n            eq(\n              principalPolicyBundleReferences.principalType,\n              head.principalType,\n            ),\n            eq(principalPolicyBundleReferences.principalId, head.principalId),\n            inArray(\n              principalPolicyBundleReferences.version,\n              versions.slice(index, index + REFERENCE_LOOKUP_VERSIONS),\n            ),\n            or(\n              eq(principalPolicyBundleReferences.bundleVersion, head.version),\n              eq(\n                principalPolicyBundleReferences.bundleStateHash,\n                head.stateHash,\n              ),\n            ),\n          ),\n        )),\n    );\n  }\n  return stored;\n}\n\n/**\n * Rows written earlier in the same bundle all carry its head, so neither\n * check can match them: each state's outcome depends only on stored rows.\n */\nfunction referenceConflict(\n  row: PrincipalPolicyReferenceRow,\n  stored: readonly StoredPrincipalPolicyReference[],\n): KeyingVerificationError | null {\n  const sameReference = stored.filter((candidate) =>\n    isSameReference(candidate, row),\n  );\n  if (\n    sameReference.some(\n      (candidate) =>\n        candidate.bundleVersion === row.bundleVersion &&\n        candidate.bundleStateHash !== row.bundleStateHash,\n    )\n  )\n    return new KeyingVerificationError(\n      \"equivocation\",\n      \"principal policy reference has conflicting bundle heads at one version\",\n    );\n  const indexed = sameReference.find(\n    (candidate) => candidate.bundleStateHash === row.bundleStateHash,\n  );\n  if (indexed && indexed.bundleVersion !== row.bundleVersion)\n    return new KeyingVerificationError(\n      \"equivocation\",\n      \"principal policy reference index conflicts with the bundle head\",\n    );\n  return null;\n}\n\nasync function insertMissingReferences(\n  tx: ClientSQLiteTransactionScope,\n  rows: readonly PrincipalPolicyReferenceRow[],\n  stored: readonly StoredPrincipalPolicyReference[],\n): Promise<void> {\n  const present = new Set(stored.map(referenceKey));\n  const missing = new Map<string, PrincipalPolicyReferenceRow>();\n  for (const row of rows) {\n    const key = referenceKey(row);\n    if (!present.has(key) && !missing.has(key)) missing.set(key, row);\n  }\n  const values = [...missing.values()];\n  for (\n    let index = 0;\n    index < values.length;\n    index += REFERENCE_INSERT_BATCH_SIZE\n  ) {\n    await tx\n      .insert(principalPolicyBundleReferences)\n      .values(values.slice(index, index + REFERENCE_INSERT_BATCH_SIZE))\n      .onConflictDoNothing()\n      .run();\n  }\n}\n\n/**\n * Index every state of a verified bundle under its head. Fails in state order\n * with the per-state checks' errors, keeping the states indexed before the\n * first failure.\n */\nexport async function indexPrincipalPolicyBundleInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  bundle: PrincipalPolicyBundleResponse,\n): Promise<void> {\n  const head = bundle.currentState;\n  const states = principalPolicyBundleStates(bundle);\n  const foreignIndex = states.findIndex(\n    (state) =>\n      state.principalType !== head.principalType ||\n      state.principalId !== head.principalId,\n  );\n  const rows: PrincipalPolicyReferenceRow[] = (\n    foreignIndex === -1 ? states : states.slice(0, foreignIndex)\n  ).map((state) => ({\n    principalType: state.principalType,\n    principalId: state.principalId,\n    version: state.version,\n    stateHash: state.stateHash,\n    keyEpoch: state.keyEpoch,\n    keyFingerprint: state.keyFingerprint,\n    bundleVersion: head.version,\n    bundleStateHash: head.stateHash,\n  }));\n  const stored =\n    rows.length === 0\n      ? []\n      : await loadStoredReferences(tx, head, [\n          ...new Set(rows.map((row) => row.version)),\n        ]);\n  let failure: KeyingVerificationError | null = null;\n  let accepted = rows.length;\n  for (const [index, row] of rows.entries()) {\n    failure = referenceConflict(row, stored);\n    if (failure) {\n      accepted = index;\n      break;\n    }\n  }\n  if (!failure && foreignIndex !== -1)\n    failure = new KeyingVerificationError(\n      \"object_mismatch\",\n      \"principal policy bundle reference belongs to another principal\",\n    );\n  await insertMissingReferences(tx, rows.slice(0, accepted), stored);\n  if (failure) throw failure;\n}\n"]}

package/data/persistence/{principalPolicyReferencePersistence.js → principalPolicy/principalPolicyReferencePersistence.js}

@@ -1,9 +1,9 @@
-import { KeyingVerificationError, } from "../../internal/crypto/index.js";
-import { isPrincipalPolicyBundleResponse, isReferencedPrincipalStateResponse, } from "../../internal/validators/response/index.js";
+import { KeyingVerificationError, } from "../../../internal/crypto/index.js";
+import { isPrincipalPolicyBundleResponse, isReferencedPrincipalStateResponse, } from "../../../internal/validators/response/index.js";
 import { and, eq, inArray } from "drizzle-orm";
-import { principalPolicyBundleContainsReference, principalPolicyBundleStates, } from "../principals/principalPolicyStates.js";
-import { principalPolicies, principalPolicyBundleHistory, principalPolicyBundleReferences, } from "../sqlite/schema.js";
-import { getClientSQLitePersistenceRuntime } from "../sqlite/sqlitePersistenceRuntime.js";
+import { principalPolicyBundleContainsReference, principalPolicyBundleStates, } from "../../principals/principalPolicyStates.js";
+import { principalPolicies, principalPolicyBundleHistory, principalPolicyBundleReferences, } from "../../sqlite/schema/index.js";
+import { getClientSQLitePersistenceRuntime } from "../../sqlite/sqlitePersistenceRuntime.js";
 import { assertSameHeadPrincipalPolicyBundle } from "./principalPolicyBundleIntegrity.js";
 import { ensurePrincipalPolicyTables, principalPolicyBundleSelection, } from "./principalPolicyPersistence.js";
 import { applyPrincipalPolicyReferenceCheckpoint } from "./principalPolicyReferenceCheckpoint.js";

package/data/persistence/principalPolicy/principalPolicyReferencePersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalPolicyReferencePersistence.js","sourceRoot":"","sources":["principalPolicyReferencePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAGxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,+BAA+B,EAC/B,kCAAkC,GACnC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,sCAAsC,EACtC,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAE1F,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAE/B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uCAAuC,EAAE,MAAM,sCAAsC,CAAC;AAC/F,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAOpF,SAAS,4BAA4B,CACnC,MAAqC;IAErC,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAClD,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,IACE,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC,YAAY,CAAC,aAAa;YACzD,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,YAAY,CAAC,WAAW,EACrD,CAAC;YACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,mEAAmE,CACpE,CAAC;QACJ,CAAC;QACD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;YAChC,KAAK,CAAC,OAAO,KAAK,KAAK,GAAG,CAAC;YAC3B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;YACrC,KAAK,CAAC,QAAQ,GAAG,CAAC;YAClB,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC9B,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAC5B,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EACjC,CAAC;YACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,IAAI,uBAAuB,CAC/B,YAAY,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc,EACrE,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,GAA+B;IAE/B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,mCAAmC,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,+BAA+B,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,IACE,MAAM,CAAC,YAAY,CAAC,aAAa,KAAK,GAAG,CAAC,aAAa;QACvD,MAAM,CAAC,YAAY,CAAC,WAAW,KAAK,GAAG,CAAC,WAAW,EACnD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAqC,EACrC,OAA0B,EAC1B,SAAkC;IAElC,IACE,MAAM,CAAC,YAAY,CAAC,SAAS,KAAK,OAAO,CAAC,eAAe;QACzD,MAAM,CAAC,YAAY,CAAC,OAAO,KAAK,OAAO,CAAC,aAAa,EACrD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,sCAAsC,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,sEAAsE,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,UAGC,EACD,MAAqC,EACrC,GAA+B;IAE/B,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,QAAQ,EAAE,CAAC;QACb,mCAAmC,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IACD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,4BAA4B,CACnC,MAAqC,EACrC,SAAkC;IAElC,IAAI,MAAM,CAAC,YAAY,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;QACpD,OAAO;IACT,CAAC;IACD,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC,IAAI,CAC/D,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,CAC/C,CAAC;IACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;QACvD,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,mEAAmE,CACpE,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,UAGC;IAED,IAAI,QAAQ,GAAyC,IAAI,CAAC;IAC1D,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACzE,IACE,YAAY,KAAK,SAAS;YAC1B,YAAY,KAAK,MAAM,CAAC,YAAY,CAAC,SAAS,EAC9C,CAAC;YACD,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QACD,kBAAkB,CAAC,GAAG,CACpB,MAAM,CAAC,YAAY,CAAC,OAAO,EAC3B,MAAM,CAAC,YAAY,CAAC,SAAS,CAC9B,CAAC;QACF,IACE,CAAC,QAAQ;YACT,MAAM,CAAC,YAAY,CAAC,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,EAC3D,CAAC;YACD,QAAQ,GAAG,MAAM,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAkC;IAC9D,IAAI,CAAC,kCAAkC,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC;QACpC,SAAS,CAAC,OAAO,GAAG,CAAC;QACrB,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC;QACzC,SAAS,CAAC,QAAQ,GAAG,CAAC;QACtB,SAAS,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAClC,SAAS,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAChC,SAAS,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,yCAAyC,CAC1C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAgB,EAChB,SAAkC;IAElC,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;SACzD,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,EAC5D,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,CACzD,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAAgB,EAChB,SAAkC;IAElC,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,OAAO,EAAE;SACN,MAAM,CAAC;QACN,eAAe,EAAE,+BAA+B,CAAC,eAAe;QAChE,aAAa,EAAE,+BAA+B,CAAC,aAAa;KAC7D,CAAC;SACD,IAAI,CAAC,+BAA+B,CAAC;SACrC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,+BAA+B,CAAC,aAAa,EAC7C,SAAS,CAAC,aAAa,CACxB,EACD,EAAE,CAAC,+BAA+B,CAAC,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,EACtE,EAAE,CAAC,+BAA+B,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAC9D,EAAE,CAAC,+BAA+B,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,EAClE,EAAE,CAAC,+BAA+B,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,EAChE,EAAE,CACA,+BAA+B,CAAC,cAAc,EAC9C,SAAS,CAAC,cAAc,CACzB,CACF,CACF,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAmC;IAEnC,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC;YACrC,IAAI,CAAC,aAAa,GAAG,CAAC;YACtB,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EACjC,CAAC;YACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,+CAA+C,CAChD,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/D,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YACtE,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QACD,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAAgB,EAChB,SAAkC,EAClC,UAAkD,EAClD,aAAqD;IAErD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACvE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,4EAA4E;IAC5E,6EAA6E;IAC7E,wEAAwE;IACxE,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,OAAO,EAAE;SACN,MAAM,CAAC,8BAA8B,CAAC,4BAA4B,CAAC,CAAC;SACpE,IAAI,CAAC,4BAA4B,CAAC;SAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,4BAA4B,CAAC,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,EACvE,EAAE,CAAC,4BAA4B,CAAC,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,EACnE,OAAO,CAAC,4BAA4B,CAAC,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAC7D,CACF,CAAC;AACN,CAAC;AAED,SAAS,iBAAiB,CACxB,UAAkD,EAClD,YAAmD,EACnD,aAAqD,EACrD,SAAkC;IAElC,MAAM,UAAU,GAAG,IAAI,GAAG,EAGvB,CAAC;IACJ,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,OAAO,EAAE,CAAC;YACZ,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,sCAAsC,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YAC9D,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,4BAA4B,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC;YACZ,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,CAAC,sCAAsC,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,wEAAwE,CACzE,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,OAAgB,EAChB,SAAkC,EAClC,UAA4C;IAE5C,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC;QAClC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC;KACrC,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,MAAM,gBAAgB,CACzC,OAAO,EACP,SAAS,EACT,UAAU,EACV,aAAa,CACd,CAAC;IACF,MAAM,UAAU,GAAG,iBAAiB,CAClC,UAAU,EACV,YAAY,EACZ,aAAa,EACb,SAAS,CACV,CAAC;IACF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,QAAQ;QACb,CAAC,CAAC,uCAAuC,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC/D,CAAC,CAAC,IAAI,CAAC;AACX,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type PrincipalPolicyCheckpoint,\n  type ReferencedPrincipalHead,\n} from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport {\n  isPrincipalPolicyBundleResponse,\n  isReferencedPrincipalStateResponse,\n} from \"@tearleads/validators/response\";\nimport { and, eq, inArray } from \"drizzle-orm\";\nimport {\n  principalPolicyBundleContainsReference,\n  principalPolicyBundleStates,\n} from \"../../principals/principalPolicyStates\";\nimport {\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyBundleReferences,\n} from \"../../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport { assertSameHeadPrincipalPolicyBundle } from \"./principalPolicyBundleIntegrity\";\nimport {\n  ensurePrincipalPolicyTables,\n  principalPolicyBundleSelection,\n  type SelectedPrincipalPolicyRow,\n} from \"./principalPolicyPersistence\";\nimport { applyPrincipalPolicyReferenceCheckpoint } from \"./principalPolicyReferenceCheckpoint\";\nimport { storedPrincipalPolicyBundleFromJson } from \"./storedPrincipalPolicyBundle\";\n\ninterface IndexedBundleHead {\n  readonly bundleStateHash: string;\n  readonly bundleVersion: number;\n}\n\nfunction assertUnambiguousBundleChain(\n  bundle: PrincipalPolicyBundleResponse,\n): void {\n  const states = principalPolicyBundleStates(bundle);\n  if (states.length !== bundle.currentState.version) {\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      \"stored principal policy bundle chain length does not match its head\",\n    );\n  }\n  const versions = new Map<number, string>();\n  for (const [index, state] of states.entries()) {\n    if (\n      state.principalType !== bundle.currentState.principalType ||\n      state.principalId !== bundle.currentState.principalId\n    ) {\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"stored principal policy bundle chain belongs to another principal\",\n      );\n    }\n    if (\n      !Number.isInteger(state.version) ||\n      state.version !== index + 1 ||\n      !Number.isSafeInteger(state.keyEpoch) ||\n      state.keyEpoch < 1 ||\n      state.principalId.length === 0 ||\n      state.stateHash.length === 0 ||\n      state.keyFingerprint.length === 0\n    ) {\n      throw new KeyingVerificationError(\n        \"invalid_shape\",\n        \"stored principal policy bundle chain has an invalid version or epoch\",\n      );\n    }\n    if (versions.has(state.version)) {\n      const previousHash = versions.get(state.version);\n      throw new KeyingVerificationError(\n        previousHash === state.stateHash ? \"duplicate_entry\" : \"equivocation\",\n        \"stored principal policy bundle chain repeats a version\",\n      );\n    }\n    versions.set(state.version, state.stateHash);\n  }\n}\n\nfunction parseBoundBundle(\n  row: SelectedPrincipalPolicyRow,\n): PrincipalPolicyBundleResponse {\n  let bundle: unknown;\n  try {\n    bundle = storedPrincipalPolicyBundleFromJson(row);\n  } catch {\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"stored principal policy bundle contains malformed JSON\",\n    );\n  }\n  if (!isPrincipalPolicyBundleResponse(bundle)) {\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"stored principal policy bundle is invalid\",\n    );\n  }\n  if (\n    bundle.currentState.principalType !== row.principalType ||\n    bundle.currentState.principalId !== row.principalId\n  ) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"stored principal policy bundle row belongs to another principal\",\n    );\n  }\n  if (bundle.currentState.stateHash !== row.stateHash) {\n    throw new KeyingVerificationError(\n      \"hash_mismatch\",\n      \"stored principal policy bundle row has a different head hash\",\n    );\n  }\n  assertUnambiguousBundleChain(bundle);\n  return bundle;\n}\n\nfunction assertIndexedBundle(\n  bundle: PrincipalPolicyBundleResponse,\n  indexed: IndexedBundleHead,\n  reference: ReferencedPrincipalHead,\n): void {\n  if (\n    bundle.currentState.stateHash !== indexed.bundleStateHash ||\n    bundle.currentState.version !== indexed.bundleVersion\n  ) {\n    throw new KeyingVerificationError(\n      \"equivocation\",\n      \"principal policy reference index conflicts with its bundle head\",\n    );\n  }\n  if (!principalPolicyBundleContainsReference(bundle, reference)) {\n    throw new KeyingVerificationError(\n      \"hash_mismatch\",\n      \"indexed principal policy bundle does not contain the exact reference\",\n    );\n  }\n}\n\nfunction addCandidate(\n  candidates: Map<\n    string,\n    { bundle: PrincipalPolicyBundleResponse; row: SelectedPrincipalPolicyRow }\n  >,\n  bundle: PrincipalPolicyBundleResponse,\n  row: SelectedPrincipalPolicyRow,\n): void {\n  const existing = candidates.get(bundle.currentState.stateHash);\n  if (existing) {\n    assertSameHeadPrincipalPolicyBundle(existing.row, row);\n    return;\n  }\n  candidates.set(bundle.currentState.stateHash, { bundle, row });\n}\n\nfunction assertCurrentDoesNotConflict(\n  bundle: PrincipalPolicyBundleResponse,\n  reference: ReferencedPrincipalHead,\n): void {\n  if (bundle.currentState.version < reference.version) {\n    return;\n  }\n  const stateAtReference = principalPolicyBundleStates(bundle).find(\n    (state) => state.version === reference.version,\n  );\n  if (!stateAtReference) {\n    throw new KeyingVerificationError(\n      \"stale_predecessor\",\n      \"current principal policy chain omits the referenced version\",\n    );\n  }\n  if (stateAtReference.stateHash !== reference.stateHash) {\n    throw new KeyingVerificationError(\n      \"equivocation\",\n      \"current principal policy chain conflicts with the referenced version\",\n    );\n  }\n  throw new KeyingVerificationError(\n    \"hash_mismatch\",\n    \"current principal policy state does not match the exact reference\",\n  );\n}\n\nfunction selectNewestCandidate(\n  candidates: ReadonlyMap<\n    string,\n    { readonly bundle: PrincipalPolicyBundleResponse }\n  >,\n): PrincipalPolicyBundleResponse | null {\n  let selected: PrincipalPolicyBundleResponse | null = null;\n  const stateHashByVersion = new Map<number, string>();\n  for (const { bundle } of candidates.values()) {\n    const existingHash = stateHashByVersion.get(bundle.currentState.version);\n    if (\n      existingHash !== undefined &&\n      existingHash !== bundle.currentState.stateHash\n    ) {\n      throw new KeyingVerificationError(\n        \"equivocation\",\n        \"stored principal policy bundles conflict at one version\",\n      );\n    }\n    stateHashByVersion.set(\n      bundle.currentState.version,\n      bundle.currentState.stateHash,\n    );\n    if (\n      !selected ||\n      bundle.currentState.version > selected.currentState.version\n    ) {\n      selected = bundle;\n    }\n  }\n  return selected;\n}\n\nfunction assertReferenceShape(reference: ReferencedPrincipalHead): void {\n  if (!isReferencedPrincipalStateResponse(reference)) {\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"principal policy reference is malformed\",\n    );\n  }\n  if (\n    !Number.isInteger(reference.version) ||\n    reference.version < 1 ||\n    !Number.isSafeInteger(reference.keyEpoch) ||\n    reference.keyEpoch < 1 ||\n    reference.principalId.length === 0 ||\n    reference.stateHash.length === 0 ||\n    reference.keyFingerprint.length === 0\n  ) {\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"principal policy reference is malformed\",\n    );\n  }\n}\n\nasync function loadCurrentRow(\n  execSql: ExecSql,\n  reference: ReferencedPrincipalHead,\n): Promise<SelectedPrincipalPolicyRow | undefined> {\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const [row] = await db\n    .select(principalPolicyBundleSelection(principalPolicies))\n    .from(principalPolicies)\n    .where(\n      and(\n        eq(principalPolicies.principalType, reference.principalType),\n        eq(principalPolicies.principalId, reference.principalId),\n      ),\n    )\n    .limit(1);\n  return row;\n}\n\nasync function loadIndexedHeads(\n  execSql: ExecSql,\n  reference: ReferencedPrincipalHead,\n): Promise<IndexedBundleHead[]> {\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  return db\n    .select({\n      bundleStateHash: principalPolicyBundleReferences.bundleStateHash,\n      bundleVersion: principalPolicyBundleReferences.bundleVersion,\n    })\n    .from(principalPolicyBundleReferences)\n    .where(\n      and(\n        eq(\n          principalPolicyBundleReferences.principalType,\n          reference.principalType,\n        ),\n        eq(principalPolicyBundleReferences.principalId, reference.principalId),\n        eq(principalPolicyBundleReferences.version, reference.version),\n        eq(principalPolicyBundleReferences.stateHash, reference.stateHash),\n        eq(principalPolicyBundleReferences.keyEpoch, reference.keyEpoch),\n        eq(\n          principalPolicyBundleReferences.keyFingerprint,\n          reference.keyFingerprint,\n        ),\n      ),\n    );\n}\n\nfunction indexHeadsByHash(\n  heads: readonly IndexedBundleHead[],\n): Map<string, IndexedBundleHead> {\n  const stateHashByVersion = new Map<number, string>();\n  for (const head of heads) {\n    if (\n      !Number.isInteger(head.bundleVersion) ||\n      head.bundleVersion < 1 ||\n      head.bundleStateHash.length === 0\n    ) {\n      throw new KeyingVerificationError(\n        \"invalid_shape\",\n        \"principal policy reference index is malformed\",\n      );\n    }\n    const indexedHash = stateHashByVersion.get(head.bundleVersion);\n    if (indexedHash !== undefined && indexedHash !== head.bundleStateHash) {\n      throw new KeyingVerificationError(\n        \"equivocation\",\n        \"principal policy reference index has conflicting bundle heads at one version\",\n      );\n    }\n    stateHashByVersion.set(head.bundleVersion, head.bundleStateHash);\n  }\n  return new Map(heads.map((head) => [head.bundleStateHash, head]));\n}\n\nasync function loadRetainedRows(\n  execSql: ExecSql,\n  reference: ReferencedPrincipalHead,\n  currentRow: SelectedPrincipalPolicyRow | undefined,\n  indexedByHash: ReadonlyMap<string, IndexedBundleHead>,\n): Promise<SelectedPrincipalPolicyRow[]> {\n  const hashes = new Set([reference.stateHash, ...indexedByHash.keys()]);\n  if (currentRow) {\n    hashes.delete(currentRow.stateHash);\n  }\n  if (hashes.size === 0) {\n    return [];\n  }\n  // Remote reset deliberately clears mutable heads while retaining historical\n  // key material, so an index target can outlive its bundle row. Such a target\n  // is only a selection hint; rows that still exist remain authoritative.\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  return db\n    .select(principalPolicyBundleSelection(principalPolicyBundleHistory))\n    .from(principalPolicyBundleHistory)\n    .where(\n      and(\n        eq(principalPolicyBundleHistory.principalType, reference.principalType),\n        eq(principalPolicyBundleHistory.principalId, reference.principalId),\n        inArray(principalPolicyBundleHistory.stateHash, [...hashes]),\n      ),\n    );\n}\n\nfunction collectCandidates(\n  currentRow: SelectedPrincipalPolicyRow | undefined,\n  retainedRows: readonly SelectedPrincipalPolicyRow[],\n  indexedByHash: ReadonlyMap<string, IndexedBundleHead>,\n  reference: ReferencedPrincipalHead,\n) {\n  const candidates = new Map<\n    string,\n    { bundle: PrincipalPolicyBundleResponse; row: SelectedPrincipalPolicyRow }\n  >();\n  if (currentRow) {\n    const bundle = parseBoundBundle(currentRow);\n    const indexed = indexedByHash.get(currentRow.stateHash);\n    if (indexed) {\n      assertIndexedBundle(bundle, indexed, reference);\n    }\n    if (principalPolicyBundleContainsReference(bundle, reference)) {\n      addCandidate(candidates, bundle, currentRow);\n    } else {\n      assertCurrentDoesNotConflict(bundle, reference);\n    }\n  }\n  for (const row of retainedRows) {\n    const bundle = parseBoundBundle(row);\n    const indexed = indexedByHash.get(row.stateHash);\n    if (indexed) {\n      assertIndexedBundle(bundle, indexed, reference);\n    } else if (!principalPolicyBundleContainsReference(bundle, reference)) {\n      throw new KeyingVerificationError(\n        \"hash_mismatch\",\n        \"stored principal policy bundle head does not match the exact reference\",\n      );\n    }\n    addCandidate(candidates, bundle, row);\n  }\n  return candidates;\n}\n\nexport async function loadPrincipalPolicyBundleForReference(\n  execSql: ExecSql,\n  reference: ReferencedPrincipalHead,\n  checkpoint: PrincipalPolicyCheckpoint | null,\n): Promise<PrincipalPolicyBundleResponse | null> {\n  assertReferenceShape(reference);\n  await ensurePrincipalPolicyTables(execSql);\n  const [currentRow, indexedHeads] = await Promise.all([\n    loadCurrentRow(execSql, reference),\n    loadIndexedHeads(execSql, reference),\n  ]);\n  const indexedByHash = indexHeadsByHash(indexedHeads);\n  const retainedRows = await loadRetainedRows(\n    execSql,\n    reference,\n    currentRow,\n    indexedByHash,\n  );\n  const candidates = collectCandidates(\n    currentRow,\n    retainedRows,\n    indexedByHash,\n    reference,\n  );\n  const selected = selectNewestCandidate(candidates);\n  return selected\n    ? applyPrincipalPolicyReferenceCheckpoint(selected, checkpoint)\n    : null;\n}\n"]}

package/data/persistence/{verifiedPrincipalPolicyBundle.js → principalPolicy/verifiedPrincipalPolicyBundle.js}

@@ -1,5 +1,5 @@
-import { KeyingVerificationError, normalizePrincipalContainerGrants, normalizePrincipalProjectionMembers, } from "../../internal/crypto/index.js";
-import { canonicalKeyingJsonString } from "../keying/canonicalJson.js";
+import { KeyingVerificationError, normalizePrincipalContainerGrants, normalizePrincipalProjectionMembers, } from "../../../internal/crypto/index.js";
+import { canonicalKeyingJsonString } from "../../keying/canonicalJson.js";
 import { assertCurrentMatchesVerifiedPolicy } from "./verifiedPrincipalPolicyCurrent.js";
 export async function assertBundleMatchesVerifiedPolicy(input) {
     const { bundle, policy } = input;

package/data/persistence/principalPolicy/verifiedPrincipalPolicyBundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedPrincipalPolicyBundle.js","sourceRoot":"","sources":["verifiedPrincipalPolicyBundle.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,iCAAiC,EACjC,mCAAmC,GAEpC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,kCAAkC,EAAE,MAAM,kCAAkC,CAAC;AAEtF,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAGvD;IACC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG;QACpB,GAAG,MAAM,CAAC,cAAc;QACxB;YACE,KAAK,EAAE,MAAM,CAAC,YAAY;YAC1B,UAAU,EAAE,MAAM,CAAC,iBAAiB;YACpC,MAAM,EAAE,MAAM,CAAC,aAAa;SAC7B;KACF,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChB,GAAG,KAAK;QACR,UAAU,EAAE,mCAAmC,CAAC,KAAK,CAAC,UAAU,CAAC;QACjE,MAAM,EAAE,iCAAiC,CAAC,KAAK,CAAC,MAAM,CAAC;KACxD,CAAC,CAAC,CAAC;IACJ,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9C,GAAG,KAAK;QACR,UAAU,EAAE,mCAAmC,CAAC,KAAK,CAAC,UAAU,CAAC;QACjE,MAAM,EAAE,iCAAiC,CAAC,KAAK,CAAC,MAAM,CAAC;KACxD,CAAC,CAAC,CAAC;IACJ,IACE,yBAAyB,CACvB,aAAa,EACb,iCAAiC,CAClC;QACD,yBAAyB,CACvB,eAAe,EACf,mCAAmC,CACpC,EACD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,kCAAkC,CAAC;QACvC,OAAO,EAAE,KAAK,CAAC,MAAM;QACrB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  normalizePrincipalContainerGrants,\n  normalizePrincipalProjectionMembers,\n  type VerifiedPrincipalPolicy,\n} from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { canonicalKeyingJsonString } from \"../../keying/canonicalJson\";\nimport { assertCurrentMatchesVerifiedPolicy } from \"./verifiedPrincipalPolicyCurrent\";\n\nexport async function assertBundleMatchesVerifiedPolicy(input: {\n  bundle: PrincipalPolicyBundleResponse;\n  policy: VerifiedPrincipalPolicy;\n}): Promise<void> {\n  const { bundle, policy } = input;\n  const history = policy.history ?? [];\n  const expectedChain = [\n    ...bundle.previousStates,\n    {\n      state: bundle.currentState,\n      projection: bundle.currentProjection,\n      grants: bundle.currentGrants,\n    },\n  ].map((entry) => ({\n    ...entry,\n    projection: normalizePrincipalProjectionMembers(entry.projection),\n    grants: normalizePrincipalContainerGrants(entry.grants),\n  }));\n  const verifiedHistory = history.map((entry) => ({\n    ...entry,\n    projection: normalizePrincipalProjectionMembers(entry.projection),\n    grants: normalizePrincipalContainerGrants(entry.grants),\n  }));\n  if (\n    canonicalKeyingJsonString(\n      expectedChain,\n      \"principal policy bundle history\",\n    ) !==\n    canonicalKeyingJsonString(\n      verifiedHistory,\n      \"verified principal policy history\",\n    )\n  ) {\n    throw new KeyingVerificationError(\n      \"equivocation\",\n      \"Verified principal policy bundle history mismatch\",\n    );\n  }\n  await assertCurrentMatchesVerifiedPolicy({\n    current: input.bundle,\n    policy: input.policy,\n  });\n}\n"]}

package/data/persistence/{verifiedPrincipalPolicyCurrent.js → principalPolicy/verifiedPrincipalPolicyCurrent.js}

@@ -1,5 +1,5 @@
-import { computePrincipalMemberEnvelopesRoot, computePrincipalStatePayloadCiphertextHash, KeyingVerificationError, normalizePrincipalContainerGrants, normalizePrincipalProjectionMembers, PrincipalMemberEnvelopeValidationError, } from "../../internal/crypto/index.js";
-import { canonicalKeyingJsonString } from "../keying/canonicalJson.js";
+import { computePrincipalMemberEnvelopesRoot, computePrincipalStatePayloadCiphertextHash, KeyingVerificationError, normalizePrincipalContainerGrants, normalizePrincipalProjectionMembers, PrincipalMemberEnvelopeValidationError, } from "../../../internal/crypto/index.js";
+import { canonicalKeyingJsonString } from "../../keying/canonicalJson.js";
 function currentMismatch(message) {
     throw new KeyingVerificationError("equivocation", message);
 }

package/data/persistence/principalPolicy/verifiedPrincipalPolicyCurrent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedPrincipalPolicyCurrent.js","sourceRoot":"","sources":["verifiedPrincipalPolicyCurrent.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mCAAmC,EACnC,0CAA0C,EAC1C,uBAAuB,EACvB,iCAAiC,EACjC,mCAAmC,EACnC,sCAAsC,GAGvC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAMvE,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,IAAI,uBAAuB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAAmC;IAEnC,IAAI,CAAC;QACH,OAAO,MAAM,mCAAmC,CAC9C,OAAO,CAAC,sBAAsB,CAAC,SAAS,CACzC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sCAAsC,EAAE,CAAC;YAC5D,MAAM,IAAI,uBAAuB,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAG1C;IACC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAClC,MAAM,WAAW,GAAG,MAAM,0CAA0C,CAClE,OAAO,CAAC,cAAc,CAAC,UAAU,CAClC,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACzD,IACE,OAAO,CAAC,cAAc,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;QAC7D,OAAO,CAAC,cAAc,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;QACzD,OAAO,CAAC,cAAc,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QACrD,OAAO,CAAC,cAAc,CAAC,cAAc,KAAK,WAAW;QACrD,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,WAAW;QAClD,OAAO,CAAC,sBAAsB,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;QACrE,OAAO,CAAC,sBAAsB,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;QACjE,OAAO,CAAC,sBAAsB,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QAC7D,OAAO,CAAC,sBAAsB,CAAC,KAAK,KAAK,MAAM,CAAC,QAAQ;QACxD,aAAa,KAAK,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAClD,CAAC;QACD,eAAe,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,KAGxD;IACC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAClC,IACE,OAAO,CAAC,YAAY,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;QAC3D,OAAO,CAAC,YAAY,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;QACvD,OAAO,CAAC,YAAY,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAC/C,OAAO,CAAC,YAAY,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QACjD,OAAO,CAAC,YAAY,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QACnD,MAAM,CAAC,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAC5C,MAAM,CAAC,UAAU,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAChD,CAAC;QACD,eAAe,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IACE,yBAAyB,CACvB,OAAO,CAAC,YAAY,EACpB,gCAAgC,CACjC;QACC,yBAAyB,CACvB,MAAM,CAAC,KAAK,EACZ,iCAAiC,CAClC;QACH,yBAAyB,CACvB,mCAAmC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAC9D,qCAAqC,CACtC;YACC,yBAAyB,CACvB,mCAAmC,CAAC,MAAM,CAAC,UAAU,CAAC,EACtD,sCAAsC,CACvC;QACH,yBAAyB,CACvB,iCAAiC,CAAC,OAAO,CAAC,aAAa,CAAC,EACxD,iCAAiC,CAClC;YACC,yBAAyB,CACvB,iCAAiC,CAAC,MAAM,CAAC,MAAM,CAAC,EAChD,kCAAkC,CACnC,EACH,CAAC;QACD,eAAe,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,2BAA2B,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC","sourcesContent":["import type { PrincipalPolicyPageCurrent } from \"@tearleads/api-client\";\nimport {\n  computePrincipalMemberEnvelopesRoot,\n  computePrincipalStatePayloadCiphertextHash,\n  KeyingVerificationError,\n  normalizePrincipalContainerGrants,\n  normalizePrincipalProjectionMembers,\n  PrincipalMemberEnvelopeValidationError,\n  type VerifiedPrincipalPolicy,\n  type VerifiedPrincipalPolicyCurrent,\n} from \"@tearleads/crypto\";\nimport { canonicalKeyingJsonString } from \"../../keying/canonicalJson\";\n\ntype VerifiedCurrentPolicy =\n  | VerifiedPrincipalPolicy\n  | VerifiedPrincipalPolicyCurrent;\n\nfunction currentMismatch(message: string): never {\n  throw new KeyingVerificationError(\"equivocation\", message);\n}\n\nasync function memberEnvelopesRoot(\n  current: PrincipalPolicyPageCurrent,\n): Promise<string> {\n  try {\n    return await computePrincipalMemberEnvelopesRoot(\n      current.currentMemberEnvelopes.envelopes,\n    );\n  } catch (error) {\n    if (error instanceof PrincipalMemberEnvelopeValidationError) {\n      throw new KeyingVerificationError(\"invalid_shape\", error.message);\n    }\n    throw error;\n  }\n}\n\nasync function assertCurrentPayloadMatches(input: {\n  current: PrincipalPolicyPageCurrent;\n  policy: VerifiedCurrentPolicy;\n}): Promise<void> {\n  const { current, policy } = input;\n  const payloadHash = await computePrincipalStatePayloadCiphertextHash(\n    current.currentPayload.ciphertext,\n  );\n  const envelopesRoot = await memberEnvelopesRoot(current);\n  if (\n    current.currentPayload.principalType !== policy.principalType ||\n    current.currentPayload.principalId !== policy.principalId ||\n    current.currentPayload.stateHash !== policy.stateHash ||\n    current.currentPayload.ciphertextHash !== payloadHash ||\n    policy.state.payloadCiphertextHash !== payloadHash ||\n    current.currentMemberEnvelopes.principalType !== policy.principalType ||\n    current.currentMemberEnvelopes.principalId !== policy.principalId ||\n    current.currentMemberEnvelopes.stateHash !== policy.stateHash ||\n    current.currentMemberEnvelopes.epoch !== policy.keyEpoch ||\n    envelopesRoot !== policy.state.memberEnvelopesRoot\n  ) {\n    currentMismatch(\"Verified principal policy current payload mismatch\");\n  }\n}\n\n/** Bind current wire artifacts to already verified policy evidence; never authenticate history. */\nexport async function assertCurrentMatchesVerifiedPolicy(input: {\n  current: PrincipalPolicyPageCurrent;\n  policy: VerifiedCurrentPolicy;\n}): Promise<void> {\n  const { current, policy } = input;\n  if (\n    current.currentState.principalType !== policy.principalType ||\n    current.currentState.principalId !== policy.principalId ||\n    current.currentState.version !== policy.version ||\n    current.currentState.keyEpoch !== policy.keyEpoch ||\n    current.currentState.stateHash !== policy.stateHash ||\n    policy.checkpoint.version !== policy.version ||\n    policy.checkpoint.stateHash !== policy.stateHash\n  ) {\n    currentMismatch(\"Verified principal policy current head mismatch\");\n  }\n  if (\n    canonicalKeyingJsonString(\n      current.currentState,\n      \"principal policy current state\",\n    ) !==\n      canonicalKeyingJsonString(\n        policy.state,\n        \"verified principal policy state\",\n      ) ||\n    canonicalKeyingJsonString(\n      normalizePrincipalProjectionMembers(current.currentProjection),\n      \"principal policy current projection\",\n    ) !==\n      canonicalKeyingJsonString(\n        normalizePrincipalProjectionMembers(policy.projection),\n        \"verified principal policy projection\",\n      ) ||\n    canonicalKeyingJsonString(\n      normalizePrincipalContainerGrants(current.currentGrants),\n      \"principal policy current grants\",\n    ) !==\n      canonicalKeyingJsonString(\n        normalizePrincipalContainerGrants(policy.grants),\n        \"verified principal policy grants\",\n      )\n  ) {\n    currentMismatch(\"Verified principal policy current content mismatch\");\n  }\n\n  await assertCurrentPayloadMatches(input);\n}\n"]}

package/data/persistence/{verifiedPrincipalPolicyRetentionPersistence.js → principalPolicy/verifiedPrincipalPolicyRetentionPersistence.js}

@@ -1,4 +1,4 @@
-import { getClientSQLitePersistenceRuntime } from "../sqlite/sqlitePersistenceRuntime.js";
+import { getClientSQLitePersistenceRuntime } from "../../sqlite/sqlitePersistenceRuntime.js";
 import { ensurePrincipalPolicyTables, retainPrincipalPolicyBundleInTransaction, } from "./principalPolicyPersistence.js";
 import { assertBundleMatchesVerifiedPolicy } from "./verifiedPrincipalPolicyBundle.js";
 /** Retains a just-verified epoch without promoting it to the mutable head. */

package/data/persistence/principalPolicy/verifiedPrincipalPolicyRetentionPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedPrincipalPolicyRetentionPersistence.js","sourceRoot":"","sources":["verifiedPrincipalPolicyRetentionPersistence.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAE1F,OAAO,EACL,2BAA2B,EAC3B,wCAAwC,GACzC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AAEpF,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,KAOzD;IACC,MAAM,iCAAiC,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,CACb,EAAkE,EAClE,EAAE,CACF,wCAAwC,CACtC,EAAE,EACF,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,CACrB,CAAC;IACJ,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE;YAC3D,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;AAC/D,CAAC","sourcesContent":["import type { VerifiedPrincipalPolicy } from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport {\n  ensurePrincipalPolicyTables,\n  retainPrincipalPolicyBundleInTransaction,\n} from \"./principalPolicyPersistence\";\nimport { assertBundleMatchesVerifiedPolicy } from \"./verifiedPrincipalPolicyBundle\";\n\n/** Retains a just-verified epoch without promoting it to the mutable head. */\nexport async function retainVerifiedPrincipalPolicyBundle(input: {\n  readonly bundle: PrincipalPolicyBundleResponse;\n  readonly execSql: ExecSql;\n  readonly organizationId?: string | undefined;\n  readonly policy: VerifiedPrincipalPolicy;\n  readonly stillCurrent?: (() => boolean) | undefined;\n  readonly updatedAt: string;\n}): Promise<void> {\n  await assertBundleMatchesVerifiedPolicy(input);\n  await ensurePrincipalPolicyTables(input.execSql);\n  const runtime = getClientSQLitePersistenceRuntime(input.execSql);\n  const retain = (\n    tx: Parameters<typeof retainPrincipalPolicyBundleInTransaction>[0],\n  ) =>\n    retainPrincipalPolicyBundleInTransaction(\n      tx,\n      input.bundle,\n      input.updatedAt,\n      input.organizationId,\n    );\n  if (input.stillCurrent) {\n    await runtime.guardedTransaction(retain, input.stillCurrent, {\n      behavior: \"immediate\",\n    });\n    return;\n  }\n  await runtime.transaction(retain, { behavior: \"immediate\" });\n}\n"]}

package/data/persistence/securityIncidentPersistence.js

@@ -1,6 +1,6 @@
 import { isKeyingVerificationCode, serializeKeyingCanonicalJson, } from "../../internal/crypto/index.js";
 import { desc, eq, inArray, isNull, sql } from "drizzle-orm";
-import { securityIncidents, securityIncidentTable, } from "../sqlite/securityIncidentSchema.js";
+import { securityIncidents, securityIncidentTable, } from "../sqlite/schema/securityIncidentSchema.js";
 import { getClientSQLitePersistenceRuntime } from "../sqlite/sqlitePersistenceRuntime.js";
 import { ensureSqlTables } from "../sqlite/sqlSchema.js";
 const SECURITY_INCIDENT_RETENTION_LIMIT = 1_000;

package/data/persistence/securityIncidentPersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"securityIncidentPersistence.js","sourceRoot":"","sources":["securityIncidentPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAK7D,OAAO,EACL,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAgB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAepE,MAAM,iCAAiC,GAAG,KAAK,CAAC;AAEhD;;;;GAIG;AACH,SAAS,uBAAuB,CAC9B,cAA4D;IAE5D,OAAO,4BAA4B,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,4EAA4E;IAC5E,oDAAoD;IACpD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,wBAAwB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,gCAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM,CAAC;QACZ,KAAK,WAAW,CAAC;QACjB,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW,CAAC;QACjB,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC;QACf;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,OAAgB;IACzD,MAAM,eAAe,CAAC,OAAO,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CACzE,EAAE,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,KAQvC;IACC,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC;QACvC,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,IAAI;QACV,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,cAAc;QACpB,KAAK,CAAC,cAAc;KACrB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC5C,CAAC;IACF,OAAO,eAAe,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,wBAAwB,CAC/B,GAA0C;IAE1C,OAAO;QACL,GAAG,GAAG;QACN,IAAI,EAAE,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;QACrC,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC;QACvD,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC;QAC3C,WAAW,EAAE,GAAG,CAAC,WAAW;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAgB,EAChB,QAA+B;IAE/B,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACxE,MAAM,cAAc,GAAG,QAAQ,CAAC,cAAc,IAAI,IAAI,CAAC;IACvD,MAAM,EAAE,GAAG,MAAM,wBAAwB,CAAC;QACxC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,cAAc;QACd,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,cAAc;QACd,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACjD,MAAM,EAAE;aACL,MAAM,CAAC,iBAAiB,CAAC;aACzB,MAAM,CAAC;YACN,GAAG,QAAQ;YACX,cAAc;YACd,EAAE;YACF,cAAc;YACd,WAAW,EAAE,QAAQ,CAAC,WAAW;SAClC,CAAC;aACD,kBAAkB,CAAC;YAClB,MAAM,EAAE,iBAAiB,CAAC,EAAE;YAC5B,GAAG,EAAE;gBACH,UAAU,EAAE,GAAG,CAAA,OAAO,iBAAiB,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,GAAG;gBAC7E,cAAc,EAAE,GAAG,CAAA,OAAO,iBAAiB,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc,GAAG;gBACzF,eAAe,EAAE,GAAG,CAAA,GAAG,iBAAiB,CAAC,eAAe,MAAM,QAAQ,CAAC,eAAe,EAAE;aACzF;SACF,CAAC;aACD,GAAG,EAAE,CAAC;QACT,MAAM,oBAAoB,GACxB,QAAQ,CAAC,WAAW,KAAK,IAAI;YAC3B,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC;YACvC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,EAAE;aACvB,MAAM,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC;aACpC,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,oBAAoB,CAAC;aAC3B,OAAO,CACN,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,EACtC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAC3B;aACA,KAAK,CAAC,CAAC,CAAC;aACR,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC7C,6EAA6E;QAC7E,2EAA2E;QAC3E,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE;iBACL,MAAM,CAAC,iBAAiB,CAAC;iBACzB,KAAK,CACJ,OAAO,CACL,iBAAiB,CAAC,EAAE,EACpB,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CACzC,CACF;iBACA,GAAG,EAAE,CAAC;QACX,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE;aACzB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aACnC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAgB,EAChB,WAA0B;IAE1B,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,EAAE;SACR,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CACJ,WAAW,KAAK,IAAI;QAClB,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC;QACvC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CACnD;SACA,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;SAC3E,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AAC5C,CAAC","sourcesContent":["import {\n  isKeyingVerificationCode,\n  serializeKeyingCanonicalJson,\n} from \"@tearleads/crypto\";\nimport { desc, eq, inArray, isNull, sql } from \"drizzle-orm\";\nimport type {\n  SecurityIncident,\n  SecurityIncidentObjectKind,\n} from \"../shared/securityIncidents\";\nimport {\n  securityIncidents,\n  securityIncidentTable,\n} from \"../sqlite/securityIncidentSchema\";\nimport { getClientSQLitePersistenceRuntime } from \"../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../sqlite/sqlSchema\";\n\ninterface SecurityIncidentWrite {\n  readonly trustDomain: string | null;\n  readonly code: SecurityIncident[\"code\"];\n  readonly operation: string;\n  readonly objectKind: SecurityIncidentObjectKind;\n  readonly objectId: string | null;\n  readonly organizationId?: string | null | undefined;\n  readonly evidenceHashes?: Readonly<Record<string, string>> | undefined;\n  readonly detectedAt: string;\n  readonly lastDetectedAt: string;\n  readonly occurrenceCount: number;\n}\n\nconst SECURITY_INCIDENT_RETENTION_LIMIT = 1_000;\n\n/**\n * The incident id hashes this text, so it must be identical on every device:\n * code-unit key order, no locale collation, and no `Object` property-order\n * rules (which would float integer-like keys ahead of the sort).\n */\nfunction serializeEvidenceHashes(\n  evidenceHashes: Readonly<Record<string, string>> | undefined,\n): string {\n  return serializeKeyingCanonicalJson(evidenceHashes ?? {});\n}\n\nfunction parseEvidenceHashes(value: string): Readonly<Record<string, string>> {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(value);\n  } catch {\n    return {};\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    return {};\n  }\n  const entries: Array<[string, string]> = [];\n  for (const [key, item] of Object.entries(parsed)) {\n    if (key.length === 0 || typeof item !== \"string\") {\n      return {};\n    }\n    entries.push([key, item]);\n  }\n  // Object.fromEntries keeps every key, including \"__proto__\", which an index\n  // assignment on a plain object would silently drop.\n  return Object.fromEntries(entries);\n}\n\nfunction parseVerificationCode(value: string): SecurityIncident[\"code\"] {\n  if (isKeyingVerificationCode(value)) return value;\n  return \"unrecognized_verification_code\";\n}\n\nfunction parseObjectKind(value: string): SecurityIncidentObjectKind {\n  switch (value) {\n    case \"blob\":\n    case \"container\":\n    case \"document\":\n    case \"principal\":\n    case \"user\":\n    case \"unknown\":\n      return value;\n    default:\n      return \"unknown\";\n  }\n}\n\nasync function ensureSecurityIncidentTable(execSql: ExecSql): Promise<void> {\n  await ensureSqlTables(execSql, [securityIncidentTable]);\n}\n\nfunction bytesToHex(bytes: Uint8Array): string {\n  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\")).join(\n    \"\",\n  );\n}\n\nasync function deriveSecurityIncidentId(input: {\n  readonly code: SecurityIncident[\"code\"];\n  readonly evidenceHashes: string;\n  readonly objectId: string | null;\n  readonly objectKind: SecurityIncidentObjectKind;\n  readonly operation: string;\n  readonly organizationId: string | null;\n  readonly trustDomain: string | null;\n}): Promise<string> {\n  const canonicalIdentity = JSON.stringify([\n    input.trustDomain,\n    input.code,\n    input.operation,\n    input.objectKind,\n    input.objectId,\n    input.organizationId,\n    input.evidenceHashes,\n  ]);\n  const digest = await crypto.subtle.digest(\n    \"SHA-256\",\n    new TextEncoder().encode(canonicalIdentity),\n  );\n  return `incident_v1_${bytesToHex(new Uint8Array(digest))}`;\n}\n\nfunction parseSecurityIncidentRow(\n  row: typeof securityIncidents.$inferSelect,\n): SecurityIncident {\n  return {\n    ...row,\n    code: parseVerificationCode(row.code),\n    evidenceHashes: parseEvidenceHashes(row.evidenceHashes),\n    objectKind: parseObjectKind(row.objectKind),\n    trustDomain: row.trustDomain,\n  };\n}\n\nexport async function appendSecurityIncident(\n  execSql: ExecSql,\n  incident: SecurityIncidentWrite,\n): Promise<SecurityIncident | null> {\n  await ensureSecurityIncidentTable(execSql);\n  const runtime = getClientSQLitePersistenceRuntime(execSql);\n  const evidenceHashes = serializeEvidenceHashes(incident.evidenceHashes);\n  const organizationId = incident.organizationId ?? null;\n  const id = await deriveSecurityIncidentId({\n    code: incident.code,\n    evidenceHashes,\n    objectId: incident.objectId,\n    objectKind: incident.objectKind,\n    operation: incident.operation,\n    organizationId,\n    trustDomain: incident.trustDomain,\n  });\n  const row = await runtime.transaction(async (tx) => {\n    await tx\n      .insert(securityIncidents)\n      .values({\n        ...incident,\n        evidenceHashes,\n        id,\n        organizationId,\n        trustDomain: incident.trustDomain,\n      })\n      .onConflictDoUpdate({\n        target: securityIncidents.id,\n        set: {\n          detectedAt: sql`min(${securityIncidents.detectedAt}, ${incident.detectedAt})`,\n          lastDetectedAt: sql`max(${securityIncidents.lastDetectedAt}, ${incident.lastDetectedAt})`,\n          occurrenceCount: sql`${securityIncidents.occurrenceCount} + ${incident.occurrenceCount}`,\n        },\n      })\n      .run();\n    const trustDomainCondition =\n      incident.trustDomain === null\n        ? isNull(securityIncidents.trustDomain)\n        : eq(securityIncidents.trustDomain, incident.trustDomain);\n    const staleRows = await tx\n      .select({ id: securityIncidents.id })\n      .from(securityIncidents)\n      .where(trustDomainCondition)\n      .orderBy(\n        desc(securityIncidents.lastDetectedAt),\n        desc(securityIncidents.id),\n      )\n      .limit(1)\n      .offset(SECURITY_INCIDENT_RETENTION_LIMIT);\n    // Each call can add at most one distinct row, so deleting the single 1,001st\n    // row restores the cap. A future bulk writer must delete its whole excess.\n    if (staleRows.length > 0) {\n      await tx\n        .delete(securityIncidents)\n        .where(\n          inArray(\n            securityIncidents.id,\n            staleRows.map((staleRow) => staleRow.id),\n          ),\n        )\n        .run();\n    }\n    const [storedRow] = await tx\n      .select()\n      .from(securityIncidents)\n      .where(eq(securityIncidents.id, id))\n      .limit(1);\n    return storedRow;\n  });\n  return row ? parseSecurityIncidentRow(row) : null;\n}\n\nexport async function listSecurityIncidents(\n  execSql: ExecSql,\n  trustDomain: string | null,\n): Promise<SecurityIncident[]> {\n  await ensureSecurityIncidentTable(execSql);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select()\n    .from(securityIncidents)\n    .where(\n      trustDomain === null\n        ? isNull(securityIncidents.trustDomain)\n        : eq(securityIncidents.trustDomain, trustDomain),\n    )\n    .orderBy(desc(securityIncidents.lastDetectedAt), desc(securityIncidents.id))\n    .limit(SECURITY_INCIDENT_RETENTION_LIMIT);\n  return rows.map(parseSecurityIncidentRow);\n}\n"]}
+{"version":3,"file":"securityIncidentPersistence.js","sourceRoot":"","sources":["securityIncidentPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAK7D,OAAO,EACL,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAgB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAepE,MAAM,iCAAiC,GAAG,KAAK,CAAC;AAEhD;;;;GAIG;AACH,SAAS,uBAAuB,CAC9B,cAA4D;IAE5D,OAAO,4BAA4B,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,4EAA4E;IAC5E,oDAAoD;IACpD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,wBAAwB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,gCAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM,CAAC;QACZ,KAAK,WAAW,CAAC;QACjB,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW,CAAC;QACjB,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC;QACf;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,OAAgB;IACzD,MAAM,eAAe,CAAC,OAAO,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CACzE,EAAE,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,KAQvC;IACC,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC;QACvC,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,IAAI;QACV,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,cAAc;QACpB,KAAK,CAAC,cAAc;KACrB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC5C,CAAC;IACF,OAAO,eAAe,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,wBAAwB,CAC/B,GAA0C;IAE1C,OAAO;QACL,GAAG,GAAG;QACN,IAAI,EAAE,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;QACrC,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC;QACvD,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC;QAC3C,WAAW,EAAE,GAAG,CAAC,WAAW;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAgB,EAChB,QAA+B;IAE/B,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACxE,MAAM,cAAc,GAAG,QAAQ,CAAC,cAAc,IAAI,IAAI,CAAC;IACvD,MAAM,EAAE,GAAG,MAAM,wBAAwB,CAAC;QACxC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,cAAc;QACd,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,cAAc;QACd,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACjD,MAAM,EAAE;aACL,MAAM,CAAC,iBAAiB,CAAC;aACzB,MAAM,CAAC;YACN,GAAG,QAAQ;YACX,cAAc;YACd,EAAE;YACF,cAAc;YACd,WAAW,EAAE,QAAQ,CAAC,WAAW;SAClC,CAAC;aACD,kBAAkB,CAAC;YAClB,MAAM,EAAE,iBAAiB,CAAC,EAAE;YAC5B,GAAG,EAAE;gBACH,UAAU,EAAE,GAAG,CAAA,OAAO,iBAAiB,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,GAAG;gBAC7E,cAAc,EAAE,GAAG,CAAA,OAAO,iBAAiB,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc,GAAG;gBACzF,eAAe,EAAE,GAAG,CAAA,GAAG,iBAAiB,CAAC,eAAe,MAAM,QAAQ,CAAC,eAAe,EAAE;aACzF;SACF,CAAC;aACD,GAAG,EAAE,CAAC;QACT,MAAM,oBAAoB,GACxB,QAAQ,CAAC,WAAW,KAAK,IAAI;YAC3B,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC;YACvC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,EAAE;aACvB,MAAM,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC;aACpC,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,oBAAoB,CAAC;aAC3B,OAAO,CACN,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,EACtC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAC3B;aACA,KAAK,CAAC,CAAC,CAAC;aACR,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC7C,6EAA6E;QAC7E,2EAA2E;QAC3E,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE;iBACL,MAAM,CAAC,iBAAiB,CAAC;iBACzB,KAAK,CACJ,OAAO,CACL,iBAAiB,CAAC,EAAE,EACpB,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CACzC,CACF;iBACA,GAAG,EAAE,CAAC;QACX,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE;aACzB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aACnC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAgB,EAChB,WAA0B;IAE1B,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,EAAE;SACR,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CACJ,WAAW,KAAK,IAAI;QAClB,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC;QACvC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CACnD;SACA,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;SAC3E,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AAC5C,CAAC","sourcesContent":["import {\n  isKeyingVerificationCode,\n  serializeKeyingCanonicalJson,\n} from \"@tearleads/crypto\";\nimport { desc, eq, inArray, isNull, sql } from \"drizzle-orm\";\nimport type {\n  SecurityIncident,\n  SecurityIncidentObjectKind,\n} from \"../shared/securityIncidents\";\nimport {\n  securityIncidents,\n  securityIncidentTable,\n} from \"../sqlite/schema/securityIncidentSchema\";\nimport { getClientSQLitePersistenceRuntime } from \"../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../sqlite/sqlSchema\";\n\ninterface SecurityIncidentWrite {\n  readonly trustDomain: string | null;\n  readonly code: SecurityIncident[\"code\"];\n  readonly operation: string;\n  readonly objectKind: SecurityIncidentObjectKind;\n  readonly objectId: string | null;\n  readonly organizationId?: string | null | undefined;\n  readonly evidenceHashes?: Readonly<Record<string, string>> | undefined;\n  readonly detectedAt: string;\n  readonly lastDetectedAt: string;\n  readonly occurrenceCount: number;\n}\n\nconst SECURITY_INCIDENT_RETENTION_LIMIT = 1_000;\n\n/**\n * The incident id hashes this text, so it must be identical on every device:\n * code-unit key order, no locale collation, and no `Object` property-order\n * rules (which would float integer-like keys ahead of the sort).\n */\nfunction serializeEvidenceHashes(\n  evidenceHashes: Readonly<Record<string, string>> | undefined,\n): string {\n  return serializeKeyingCanonicalJson(evidenceHashes ?? {});\n}\n\nfunction parseEvidenceHashes(value: string): Readonly<Record<string, string>> {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(value);\n  } catch {\n    return {};\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    return {};\n  }\n  const entries: Array<[string, string]> = [];\n  for (const [key, item] of Object.entries(parsed)) {\n    if (key.length === 0 || typeof item !== \"string\") {\n      return {};\n    }\n    entries.push([key, item]);\n  }\n  // Object.fromEntries keeps every key, including \"__proto__\", which an index\n  // assignment on a plain object would silently drop.\n  return Object.fromEntries(entries);\n}\n\nfunction parseVerificationCode(value: string): SecurityIncident[\"code\"] {\n  if (isKeyingVerificationCode(value)) return value;\n  return \"unrecognized_verification_code\";\n}\n\nfunction parseObjectKind(value: string): SecurityIncidentObjectKind {\n  switch (value) {\n    case \"blob\":\n    case \"container\":\n    case \"document\":\n    case \"principal\":\n    case \"user\":\n    case \"unknown\":\n      return value;\n    default:\n      return \"unknown\";\n  }\n}\n\nasync function ensureSecurityIncidentTable(execSql: ExecSql): Promise<void> {\n  await ensureSqlTables(execSql, [securityIncidentTable]);\n}\n\nfunction bytesToHex(bytes: Uint8Array): string {\n  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\")).join(\n    \"\",\n  );\n}\n\nasync function deriveSecurityIncidentId(input: {\n  readonly code: SecurityIncident[\"code\"];\n  readonly evidenceHashes: string;\n  readonly objectId: string | null;\n  readonly objectKind: SecurityIncidentObjectKind;\n  readonly operation: string;\n  readonly organizationId: string | null;\n  readonly trustDomain: string | null;\n}): Promise<string> {\n  const canonicalIdentity = JSON.stringify([\n    input.trustDomain,\n    input.code,\n    input.operation,\n    input.objectKind,\n    input.objectId,\n    input.organizationId,\n    input.evidenceHashes,\n  ]);\n  const digest = await crypto.subtle.digest(\n    \"SHA-256\",\n    new TextEncoder().encode(canonicalIdentity),\n  );\n  return `incident_v1_${bytesToHex(new Uint8Array(digest))}`;\n}\n\nfunction parseSecurityIncidentRow(\n  row: typeof securityIncidents.$inferSelect,\n): SecurityIncident {\n  return {\n    ...row,\n    code: parseVerificationCode(row.code),\n    evidenceHashes: parseEvidenceHashes(row.evidenceHashes),\n    objectKind: parseObjectKind(row.objectKind),\n    trustDomain: row.trustDomain,\n  };\n}\n\nexport async function appendSecurityIncident(\n  execSql: ExecSql,\n  incident: SecurityIncidentWrite,\n): Promise<SecurityIncident | null> {\n  await ensureSecurityIncidentTable(execSql);\n  const runtime = getClientSQLitePersistenceRuntime(execSql);\n  const evidenceHashes = serializeEvidenceHashes(incident.evidenceHashes);\n  const organizationId = incident.organizationId ?? null;\n  const id = await deriveSecurityIncidentId({\n    code: incident.code,\n    evidenceHashes,\n    objectId: incident.objectId,\n    objectKind: incident.objectKind,\n    operation: incident.operation,\n    organizationId,\n    trustDomain: incident.trustDomain,\n  });\n  const row = await runtime.transaction(async (tx) => {\n    await tx\n      .insert(securityIncidents)\n      .values({\n        ...incident,\n        evidenceHashes,\n        id,\n        organizationId,\n        trustDomain: incident.trustDomain,\n      })\n      .onConflictDoUpdate({\n        target: securityIncidents.id,\n        set: {\n          detectedAt: sql`min(${securityIncidents.detectedAt}, ${incident.detectedAt})`,\n          lastDetectedAt: sql`max(${securityIncidents.lastDetectedAt}, ${incident.lastDetectedAt})`,\n          occurrenceCount: sql`${securityIncidents.occurrenceCount} + ${incident.occurrenceCount}`,\n        },\n      })\n      .run();\n    const trustDomainCondition =\n      incident.trustDomain === null\n        ? isNull(securityIncidents.trustDomain)\n        : eq(securityIncidents.trustDomain, incident.trustDomain);\n    const staleRows = await tx\n      .select({ id: securityIncidents.id })\n      .from(securityIncidents)\n      .where(trustDomainCondition)\n      .orderBy(\n        desc(securityIncidents.lastDetectedAt),\n        desc(securityIncidents.id),\n      )\n      .limit(1)\n      .offset(SECURITY_INCIDENT_RETENTION_LIMIT);\n    // Each call can add at most one distinct row, so deleting the single 1,001st\n    // row restores the cap. A future bulk writer must delete its whole excess.\n    if (staleRows.length > 0) {\n      await tx\n        .delete(securityIncidents)\n        .where(\n          inArray(\n            securityIncidents.id,\n            staleRows.map((staleRow) => staleRow.id),\n          ),\n        )\n        .run();\n    }\n    const [storedRow] = await tx\n      .select()\n      .from(securityIncidents)\n      .where(eq(securityIncidents.id, id))\n      .limit(1);\n    return storedRow;\n  });\n  return row ? parseSecurityIncidentRow(row) : null;\n}\n\nexport async function listSecurityIncidents(\n  execSql: ExecSql,\n  trustDomain: string | null,\n): Promise<SecurityIncident[]> {\n  await ensureSecurityIncidentTable(execSql);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select()\n    .from(securityIncidents)\n    .where(\n      trustDomain === null\n        ? isNull(securityIncidents.trustDomain)\n        : eq(securityIncidents.trustDomain, trustDomain),\n    )\n    .orderBy(desc(securityIncidents.lastDetectedAt), desc(securityIncidents.id))\n    .limit(SECURITY_INCIDENT_RETENTION_LIMIT);\n  return rows.map(parseSecurityIncidentRow);\n}\n"]}

package/data/persistence/trustedUserIdentityPinPersistence.js

@@ -1,5 +1,5 @@
 import { and, eq } from "drizzle-orm";
-import { trustedUserIdentityPins, trustedUserIdentityPinTables, } from "../sqlite/schema.js";
+import { trustedUserIdentityPins, trustedUserIdentityPinTables, } from "../sqlite/schema/index.js";
 import { getClientSQLitePersistenceRuntime, } from "../sqlite/sqlitePersistenceRuntime.js";
 import { ensureSqlTables } from "../sqlite/sqlSchema.js";
 import { TRUSTED_USER_IDENTITY_ENCAPSULATION_SUITE, TRUSTED_USER_IDENTITY_FORMAT_VERSION, TRUSTED_USER_IDENTITY_SIGNING_SUITE, } from "../trustedUserIdentity/types.js";

package/data/persistence/verifiedManifestBundlePersistence.d.ts

@@ -1,8 +1,8 @@
 import type { VerifiedManifestCitations, WriterProjectionTarget } from "../../internal/api-client/index.js";
 import { type AccessManifestBundleWireResponse } from "../../internal/validators/response/index.js";
+import { verifiedAccessManifestBundles as bundles } from "../sqlite/schema/verifiedManifestBundleSchema.js";
 import { type ClientSQLiteTransactionScope } from "../sqlite/sqlitePersistenceRuntime.js";
 import { type ExecSql } from "../sqlite/sqlSchema.js";
-import { verifiedAccessManifestBundles as bundles } from "../sqlite/verifiedManifestBundleSchema.js";
 /**
  * Bounds local bytes (a bundle is ~10–20 KB). Evicting the least recently
  * verified rows only makes a later read carry those bundles again.

package/data/persistence/verifiedManifestBundlePersistence.js

@@ -2,12 +2,12 @@ import { toFingerprint } from "../../internal/crypto/index.js";
 import { isAccessManifestBundleWireResponse, } from "../../internal/validators/response/index.js";
 import { KNOWN_MANIFEST_HINT_LIMIT, MAX_CONTAINER_PATH_LENGTH, } from "../../internal/validators/util/index.js";
 import { and, asc, desc, eq, inArray, sql } from "drizzle-orm";
-import { containers } from "../sqlite/containerSchema.js";
-import { documentDiscoveryHeads, pendingDocumentDiscoveries, } from "../sqlite/documentDiscoveryEvidenceSchema.js";
-import { containerTables, documentContainerProjection, documentContainerProjectionTables, } from "../sqlite/schema.js";
+import { containerTables, documentContainerProjection, documentContainerProjectionTables, } from "../sqlite/schema/index.js";
+import { containers } from "../sqlite/schema/containerSchema.js";
+import { documentDiscoveryHeads, pendingDocumentDiscoveries, } from "../sqlite/schema/documentDiscoveryEvidenceSchema.js";
+import { verifiedAccessManifestBundles as bundles, verifiedManifestBundleTables, } from "../sqlite/schema/verifiedManifestBundleSchema.js";
 import { getClientSQLitePersistenceRuntime, } from "../sqlite/sqlitePersistenceRuntime.js";
 import { ensureSqlTables } from "../sqlite/sqlSchema.js";
-import { verifiedAccessManifestBundles as bundles, verifiedManifestBundleTables, } from "../sqlite/verifiedManifestBundleSchema.js";
 /**
  * Bounds local bytes (a bundle is ~10–20 KB). Evicting the least recently
  * verified rows only makes a later read carry those bundles again.