@tearleads/client-sdk 0.1.69 → 0.1.72

package/internal/validators/request/documentCreateSeed.js

@@ -0,0 +1,35 @@
+import { MAX_DOCUMENT_SYNC_REQUEST_BYTES } from "../util/documentSyncLimits.js";
+const TEXT_ENCODER = new TextEncoder();
+/**
+ * A seed is the one update a document is born with, committed in its create
+ * transaction: exactly one outgoing update and no container rekeys.
+ */
+export function refineSingleUpdateSeed(seed, context, issue) {
+    if (!Array.isArray(seed?.outgoingUpdates)) {
+        return;
+    }
+    if (seed.outgoingUpdates.length !== 1 ||
+        (seed.containerRekeys?.length ?? 0) !== 0) {
+        context.addIssue({
+            code: "custom",
+            message: issue.message,
+            path: [issue.path],
+        });
+    }
+}
+/**
+ * A create seed stands in for the document's first sync, so it is held to the
+ * sync request limit the create route's larger ingress ceiling would not apply.
+ */
+export function refineSeedWithinSyncRequestLimit(seed, context, path) {
+    if (seed !== undefined &&
+        TEXT_ENCODER.encode(JSON.stringify(seed)).byteLength >
+            MAX_DOCUMENT_SYNC_REQUEST_BYTES) {
+        context.addIssue({
+            code: "custom",
+            message: `create seed exceeds ${MAX_DOCUMENT_SYNC_REQUEST_BYTES} serialized bytes`,
+            path: [path],
+        });
+    }
+}
+//# sourceMappingURL=documentCreateSeed.js.map

package/internal/validators/request/documentCreateSeed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentCreateSeed.js","sourceRoot":"","sources":["documentCreateSeed.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AAG7E,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;AAEvC;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAqC,EACrC,OAAwB,EACxB,KAA0D;IAE1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,IACE,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QACjC,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,EACzC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SACnB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gCAAgC,CAC9C,IAAqC,EACrC,OAAwB,EACxB,IAAY;IAEZ,IACE,IAAI,KAAK,SAAS;QAClB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;YAClD,+BAA+B,EACjC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uBAAuB,+BAA+B,mBAAmB;YAClF,IAAI,EAAE,CAAC,IAAI,CAAC;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC","sourcesContent":["import type { z } from \"zod\";\nimport { MAX_DOCUMENT_SYNC_REQUEST_BYTES } from \"../util/documentSyncLimits\";\nimport type { DocumentSyncRequest } from \"./documentSyncSchema\";\n\nconst TEXT_ENCODER = new TextEncoder();\n\n/**\n * A seed is the one update a document is born with, committed in its create\n * transaction: exactly one outgoing update and no container rekeys.\n */\nexport function refineSingleUpdateSeed(\n  seed: DocumentSyncRequest | undefined,\n  context: z.RefinementCtx,\n  issue: { readonly message: string; readonly path: string },\n): void {\n  if (!Array.isArray(seed?.outgoingUpdates)) {\n    return;\n  }\n  if (\n    seed.outgoingUpdates.length !== 1 ||\n    (seed.containerRekeys?.length ?? 0) !== 0\n  ) {\n    context.addIssue({\n      code: \"custom\",\n      message: issue.message,\n      path: [issue.path],\n    });\n  }\n}\n\n/**\n * A create seed stands in for the document's first sync, so it is held to the\n * sync request limit the create route's larger ingress ceiling would not apply.\n */\nexport function refineSeedWithinSyncRequestLimit(\n  seed: DocumentSyncRequest | undefined,\n  context: z.RefinementCtx,\n  path: string,\n): void {\n  if (\n    seed !== undefined &&\n    TEXT_ENCODER.encode(JSON.stringify(seed)).byteLength >\n      MAX_DOCUMENT_SYNC_REQUEST_BYTES\n  ) {\n    context.addIssue({\n      code: \"custom\",\n      message: `create seed exceeds ${MAX_DOCUMENT_SYNC_REQUEST_BYTES} serialized bytes`,\n      path: [path],\n    });\n  }\n}\n"]}

package/internal/validators/request/organizationProvisioning.js

@@ -6,6 +6,7 @@ import { OrganizationReplacementAuthorizationSchema } from "../util/organization
 import { ContainerMutationRequestSchema } from "./container.js";
 import { containerCreateWithMetadataDocumentRequestShape } from "./containerMetadata.js";
 import { DocumentSyncRequestSchema, documentCreateRequestShape, } from "./document.js";
+import { refineSingleUpdateSeed } from "./documentCreateSeed.js";
 import { CreateOrganizationGroupRequestSchema } from "./organization.js";
 import { OrganizationPrincipalPolicyRequestSchema } from "./principal.js";
 /**
@@ -26,30 +27,16 @@ const provisionedDocumentRequestShape = {
     initialSync: DocumentSyncRequestSchema,
 };
 export const ProvisionedDocumentRequestSchema = registerJsonSchemaRuntimeRefinements(loosePlainObject(provisionedDocumentRequestShape).superRefine((value, context) => {
-    if (!Array.isArray(value.initialSync?.outgoingUpdates)) {
-        return;
-    }
-    if (value.initialSync.outgoingUpdates.length !== 1 ||
-        (value.initialSync.containerRekeys?.length ?? 0) !== 0) {
-        context.addIssue({
-            code: "custom",
-            message: "provisioned document seed requires one update and no container rekeys",
-            path: ["initialSync"],
-        });
-    }
+    refineSingleUpdateSeed(value.initialSync, context, {
+        message: "provisioned document seed requires one update and no container rekeys",
+        path: "initialSync",
+    });
 }), [organizationProvisioningDocumentSeedRefinement]);
 export const ProvisionedSystemContainerRequestSchema = registerJsonSchemaRuntimeRefinements(loosePlainObject(provisionedSystemContainerRequestShape).superRefine((value, context) => {
-    if (!Array.isArray(value.initialMetadataSync?.outgoingUpdates)) {
-        return;
-    }
-    if (value.initialMetadataSync.outgoingUpdates.length !== 1 ||
-        (value.initialMetadataSync.containerRekeys?.length ?? 0) !== 0) {
-        context.addIssue({
-            code: "custom",
-            message: "provisioned system-container metadata seed requires one update and no container rekeys",
-            path: ["initialMetadataSync"],
-        });
-    }
+    refineSingleUpdateSeed(value.initialMetadataSync, context, {
+        message: "provisioned system-container metadata seed requires one update and no container rekeys",
+        path: "initialMetadataSync",
+    });
 }), [organizationProvisioningContainerSeedRefinement]);
 export function isProvisionedDocumentRequest(value) {
     return ProvisionedDocumentRequestSchema.safeParse(value).success;

package/internal/validators/request/organizationProvisioning.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationProvisioning.js","sourceRoot":"","sources":["organizationProvisioning.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oCAAoC,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,+CAA+C,EAC/C,8CAA8C,GAC/C,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,0CAA0C,EAAE,MAAM,iCAAiC,CAAC;AAC7F,OAAO,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,+CAA+C,EAAE,MAAM,qBAAqB,CAAC;AACtF,OAAO,EACL,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oCAAoC,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE;;;;GAIG;AACH,MAAM,sCAAsC,GAAG;IAC7C,GAAG,+CAA+C;IAClD,mBAAmB,EAAE,yBAAyB;CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,+BAA+B,GAAG;IACtC,GAAG,0BAA0B;IAC7B,WAAW,EAAE,yBAAyB;CACvC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAC3C,oCAAoC,CAClC,gBAAgB,CAAC,+BAA+B,CAAC,CAAC,WAAW,CAC3D,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;QACvD,OAAO;IACT,CAAC;IACD,IACE,KAAK,CAAC,WAAW,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QAC9C,CAAC,KAAK,CAAC,WAAW,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,EACtD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EACL,uEAAuE;YACzE,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,EACD,CAAC,8CAA8C,CAAC,CACjD,CAAC;AAMJ,MAAM,CAAC,MAAM,uCAAuC,GAClD,oCAAoC,CAClC,gBAAgB,CAAC,sCAAsC,CAAC,CAAC,WAAW,CAClE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,eAAe,CAAC,EAAE,CAAC;QAC/D,OAAO;IACT,CAAC;IACD,IACE,KAAK,CAAC,mBAAmB,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QACtD,CAAC,KAAK,CAAC,mBAAmB,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,EAC9D,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EACL,wFAAwF;YAC1F,IAAI,EAAE,CAAC,qBAAqB,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,EACD,CAAC,+CAA+C,CAAC,CAClD,CAAC;AAMJ,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,OAAO,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,KAAc;IAEd,OAAO,uCAAuC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,iBAAiB,EAAE,oCAAoC;IACvD,kBAAkB,EAAE,oCAAoC;IACxD,oCAAoC,EAAE,uCAAuC;IAC7E,yBAAyB,EAAE,wCAAwC;IACnE,kCAAkC,EAChC,gCAAgC,CAAC,QAAQ,EAAE;IAC7C,oBAAoB,EAAE,8BAA8B;IACpD,2BAA2B,EAAE,gCAAgC;IAC7D,6BAA6B,EAC3B,uCAAuC,CAAC,QAAQ,EAAE;IACpD,4BAA4B,EAAE,gCAAgC,CAAC,QAAQ,EAAE;IACzE,uBAAuB,EAAE,WAAW,CAClC,uCAAuC,CACxC,CAAC,QAAQ,EAAE;IACZ,cAAc,EAAE,kBAAkB;IAClC,eAAe,EAAE,kBAAkB;IACnC,MAAM,EAAE,kBAAkB;CACH,CAAC;AAE1B,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CACnE,oCAAoC,CACrC,CAAC;AAMF,MAAM,UAAU,iCAAiC,CAC/C,KAAc;IAEd,OAAO,qCAAqC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,gBAAgB,CAAC;IAC9D,GAAG,oCAAoC;IACvC,wBAAwB,EACtB,0CAA0C,CAAC,QAAQ,EAAE;IACvD;;;;OAIG;IACH,yBAAyB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACrD;;;;;OAKG;IACH,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3C;;;;OAIG;IACH,sBAAsB,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAMH,MAAM,UAAU,2BAA2B,CACzC,KAAc;IAEd,OAAO,+BAA+B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAClE,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaRuntimeRefinements } from \"../jsonSchema\";\nimport {\n  organizationProvisioningContainerSeedRefinement,\n  organizationProvisioningDocumentSeedRefinement,\n} from \"../organizationProvisioningRefinements\";\nimport { arraySchema, loosePlainObject, uuidV4StringSchema } from \"../schema\";\nimport { OrganizationReplacementAuthorizationSchema } from \"../util/organizationReplacement\";\nimport { ContainerMutationRequestSchema } from \"./container\";\nimport { containerCreateWithMetadataDocumentRequestShape } from \"./containerMetadata\";\nimport {\n  DocumentSyncRequestSchema,\n  documentCreateRequestShape,\n} from \"./document\";\nimport { CreateOrganizationGroupRequestSchema } from \"./organization\";\nimport { OrganizationPrincipalPolicyRequestSchema } from \"./principal\";\n\n/**\n * A built-in or app-owned system container whose encrypted initial metadata\n * body is committed in the same transaction as the organization and document\n * shell.\n */\nconst provisionedSystemContainerRequestShape = {\n  ...containerCreateWithMetadataDocumentRequestShape,\n  initialMetadataSync: DocumentSyncRequestSchema,\n};\n\n/**\n * A document whose encrypted initial body is committed with its manifest in the\n * organization-provisioning transaction.\n */\nconst provisionedDocumentRequestShape = {\n  ...documentCreateRequestShape,\n  initialSync: DocumentSyncRequestSchema,\n};\n\nexport const ProvisionedDocumentRequestSchema =\n  registerJsonSchemaRuntimeRefinements(\n    loosePlainObject(provisionedDocumentRequestShape).superRefine(\n      (value, context) => {\n        if (!Array.isArray(value.initialSync?.outgoingUpdates)) {\n          return;\n        }\n        if (\n          value.initialSync.outgoingUpdates.length !== 1 ||\n          (value.initialSync.containerRekeys?.length ?? 0) !== 0\n        ) {\n          context.addIssue({\n            code: \"custom\",\n            message:\n              \"provisioned document seed requires one update and no container rekeys\",\n            path: [\"initialSync\"],\n          });\n        }\n      },\n    ),\n    [organizationProvisioningDocumentSeedRefinement],\n  );\n\nexport type ProvisionedDocumentRequest = z.infer<\n  typeof ProvisionedDocumentRequestSchema\n>;\n\nexport const ProvisionedSystemContainerRequestSchema =\n  registerJsonSchemaRuntimeRefinements(\n    loosePlainObject(provisionedSystemContainerRequestShape).superRefine(\n      (value, context) => {\n        if (!Array.isArray(value.initialMetadataSync?.outgoingUpdates)) {\n          return;\n        }\n        if (\n          value.initialMetadataSync.outgoingUpdates.length !== 1 ||\n          (value.initialMetadataSync.containerRekeys?.length ?? 0) !== 0\n        ) {\n          context.addIssue({\n            code: \"custom\",\n            message:\n              \"provisioned system-container metadata seed requires one update and no container rekeys\",\n            path: [\"initialMetadataSync\"],\n          });\n        }\n      },\n    ),\n    [organizationProvisioningContainerSeedRefinement],\n  );\n\nexport type ProvisionedSystemContainerRequest = z.infer<\n  typeof ProvisionedSystemContainerRequestSchema\n>;\n\nexport function isProvisionedDocumentRequest(\n  value: unknown,\n): value is ProvisionedDocumentRequest {\n  return ProvisionedDocumentRequestSchema.safeParse(value).success;\n}\n\nexport function isProvisionedSystemContainerRequest(\n  value: unknown,\n): value is ProvisionedSystemContainerRequest {\n  return ProvisionedSystemContainerRequestSchema.safeParse(value).success;\n}\n\n/**\n * The client-signed artifacts required to bootstrap a fresh organization: the\n * organization + admin/member group policies, the signed root container and its\n * metadata document, the organization metadata root, and the optional\n * roster/organization profile documents.\n *\n * This is the shared shape between user registration (which bootstraps the\n * user's personal organization) and creating an additional organization for an\n * existing user. Registration additionally carries the new user's public key\n * material (see {@link RegistrationRequest}); creating an additional\n * organization reuses the caller's existing keys, so it needs only this base.\n */\nexport const organizationProvisioningRequestShape = {\n  initialAdminGroup: CreateOrganizationGroupRequestSchema,\n  initialMemberGroup: CreateOrganizationGroupRequestSchema,\n  initialOrganizationMetadataContainer: ProvisionedSystemContainerRequestSchema,\n  initialOrganizationPolicy: OrganizationPrincipalPolicyRequestSchema,\n  initialOrganizationProfileDocument:\n    ProvisionedDocumentRequestSchema.optional(),\n  initialRootContainer: ContainerMutationRequestSchema,\n  initialRootMetadataDocument: ProvisionedDocumentRequestSchema,\n  initialRosterProfileContainer:\n    ProvisionedSystemContainerRequestSchema.optional(),\n  initialRosterProfileDocument: ProvisionedDocumentRequestSchema.optional(),\n  initialSystemContainers: arraySchema(\n    ProvisionedSystemContainerRequestSchema,\n  ).optional(),\n  organizationId: uuidV4StringSchema,\n  rootContainerId: uuidV4StringSchema,\n  userId: uuidV4StringSchema,\n} satisfies z.ZodRawShape;\n\nexport const OrganizationProvisioningRequestSchema = loosePlainObject(\n  organizationProvisioningRequestShape,\n);\n\nexport type OrganizationProvisioningRequest = z.infer<\n  typeof OrganizationProvisioningRequestSchema\n>;\n\nexport function isOrganizationProvisioningRequest(\n  value: unknown,\n): value is OrganizationProvisioningRequest {\n  return OrganizationProvisioningRequestSchema.safeParse(value).success;\n}\n\n/**\n * Request to create an additional organization for the authenticated user. The\n * caller re-signs the same provisioning artifacts as registration, but with\n * their existing identity keys, so the request is exactly an\n * {@link OrganizationProvisioningRequest} where `userId` is the caller.\n */\nexport const CreateOrganizationRequestSchema = loosePlainObject({\n  ...organizationProvisioningRequestShape,\n  replacementAuthorization:\n    OrganizationReplacementAuthorizationSchema.optional(),\n  /**\n   * Marks this fresh organization as the durable destination for one native\n   * subscription restore. The server records and later verifies this intent;\n   * ordinary existing organizations cannot be used as restore destinations.\n   */\n  nativeSubscriptionRestore: z.literal(true).optional(),\n  /**\n   * Completes a previously provisioned personal-organization replacement\n   * after the client has committed its local remote-state reset. The server\n   * rechecks replacement ownership and sync eligibility before moving the\n   * user's default-organization pointer.\n   */\n  finalizeReplacement: z.boolean().optional(),\n  /**\n   * Purged personal organization this fresh organization replaces. The server\n   * accepts this only after the old organization's purge is complete. The\n   * default pointer moves only on a later `finalizeReplacement` replay.\n   */\n  replacesOrganizationId: uuidV4StringSchema.optional(),\n});\n\nexport type CreateOrganizationRequest = z.infer<\n  typeof CreateOrganizationRequestSchema\n>;\n\nexport function isCreateOrganizationRequest(\n  value: unknown,\n): value is CreateOrganizationRequest {\n  return CreateOrganizationRequestSchema.safeParse(value).success;\n}\n"]}
+{"version":3,"file":"organizationProvisioning.js","sourceRoot":"","sources":["organizationProvisioning.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oCAAoC,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,+CAA+C,EAC/C,8CAA8C,GAC/C,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,0CAA0C,EAAE,MAAM,iCAAiC,CAAC;AAC7F,OAAO,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,+CAA+C,EAAE,MAAM,qBAAqB,CAAC;AACtF,OAAO,EACL,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,oCAAoC,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE;;;;GAIG;AACH,MAAM,sCAAsC,GAAG;IAC7C,GAAG,+CAA+C;IAClD,mBAAmB,EAAE,yBAAyB;CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,+BAA+B,GAAG;IACtC,GAAG,0BAA0B;IAC7B,WAAW,EAAE,yBAAyB;CACvC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAC3C,oCAAoC,CAClC,gBAAgB,CAAC,+BAA+B,CAAC,CAAC,WAAW,CAC3D,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACjB,sBAAsB,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE;QACjD,OAAO,EACL,uEAAuE;QACzE,IAAI,EAAE,aAAa;KACpB,CAAC,CAAC;AACL,CAAC,CACF,EACD,CAAC,8CAA8C,CAAC,CACjD,CAAC;AAMJ,MAAM,CAAC,MAAM,uCAAuC,GAClD,oCAAoC,CAClC,gBAAgB,CAAC,sCAAsC,CAAC,CAAC,WAAW,CAClE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACjB,sBAAsB,CAAC,KAAK,CAAC,mBAAmB,EAAE,OAAO,EAAE;QACzD,OAAO,EACL,wFAAwF;QAC1F,IAAI,EAAE,qBAAqB;KAC5B,CAAC,CAAC;AACL,CAAC,CACF,EACD,CAAC,+CAA+C,CAAC,CAClD,CAAC;AAMJ,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,OAAO,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,KAAc;IAEd,OAAO,uCAAuC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,iBAAiB,EAAE,oCAAoC;IACvD,kBAAkB,EAAE,oCAAoC;IACxD,oCAAoC,EAAE,uCAAuC;IAC7E,yBAAyB,EAAE,wCAAwC;IACnE,kCAAkC,EAChC,gCAAgC,CAAC,QAAQ,EAAE;IAC7C,oBAAoB,EAAE,8BAA8B;IACpD,2BAA2B,EAAE,gCAAgC;IAC7D,6BAA6B,EAC3B,uCAAuC,CAAC,QAAQ,EAAE;IACpD,4BAA4B,EAAE,gCAAgC,CAAC,QAAQ,EAAE;IACzE,uBAAuB,EAAE,WAAW,CAClC,uCAAuC,CACxC,CAAC,QAAQ,EAAE;IACZ,cAAc,EAAE,kBAAkB;IAClC,eAAe,EAAE,kBAAkB;IACnC,MAAM,EAAE,kBAAkB;CACH,CAAC;AAE1B,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CACnE,oCAAoC,CACrC,CAAC;AAMF,MAAM,UAAU,iCAAiC,CAC/C,KAAc;IAEd,OAAO,qCAAqC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,gBAAgB,CAAC;IAC9D,GAAG,oCAAoC;IACvC,wBAAwB,EACtB,0CAA0C,CAAC,QAAQ,EAAE;IACvD;;;;OAIG;IACH,yBAAyB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACrD;;;;;OAKG;IACH,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3C;;;;OAIG;IACH,sBAAsB,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAMH,MAAM,UAAU,2BAA2B,CACzC,KAAc;IAEd,OAAO,+BAA+B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAClE,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaRuntimeRefinements } from \"../jsonSchema\";\nimport {\n  organizationProvisioningContainerSeedRefinement,\n  organizationProvisioningDocumentSeedRefinement,\n} from \"../organizationProvisioningRefinements\";\nimport { arraySchema, loosePlainObject, uuidV4StringSchema } from \"../schema\";\nimport { OrganizationReplacementAuthorizationSchema } from \"../util/organizationReplacement\";\nimport { ContainerMutationRequestSchema } from \"./container\";\nimport { containerCreateWithMetadataDocumentRequestShape } from \"./containerMetadata\";\nimport {\n  DocumentSyncRequestSchema,\n  documentCreateRequestShape,\n} from \"./document\";\nimport { refineSingleUpdateSeed } from \"./documentCreateSeed\";\nimport { CreateOrganizationGroupRequestSchema } from \"./organization\";\nimport { OrganizationPrincipalPolicyRequestSchema } from \"./principal\";\n\n/**\n * A built-in or app-owned system container whose encrypted initial metadata\n * body is committed in the same transaction as the organization and document\n * shell.\n */\nconst provisionedSystemContainerRequestShape = {\n  ...containerCreateWithMetadataDocumentRequestShape,\n  initialMetadataSync: DocumentSyncRequestSchema,\n};\n\n/**\n * A document whose encrypted initial body is committed with its manifest in the\n * organization-provisioning transaction.\n */\nconst provisionedDocumentRequestShape = {\n  ...documentCreateRequestShape,\n  initialSync: DocumentSyncRequestSchema,\n};\n\nexport const ProvisionedDocumentRequestSchema =\n  registerJsonSchemaRuntimeRefinements(\n    loosePlainObject(provisionedDocumentRequestShape).superRefine(\n      (value, context) => {\n        refineSingleUpdateSeed(value.initialSync, context, {\n          message:\n            \"provisioned document seed requires one update and no container rekeys\",\n          path: \"initialSync\",\n        });\n      },\n    ),\n    [organizationProvisioningDocumentSeedRefinement],\n  );\n\nexport type ProvisionedDocumentRequest = z.infer<\n  typeof ProvisionedDocumentRequestSchema\n>;\n\nexport const ProvisionedSystemContainerRequestSchema =\n  registerJsonSchemaRuntimeRefinements(\n    loosePlainObject(provisionedSystemContainerRequestShape).superRefine(\n      (value, context) => {\n        refineSingleUpdateSeed(value.initialMetadataSync, context, {\n          message:\n            \"provisioned system-container metadata seed requires one update and no container rekeys\",\n          path: \"initialMetadataSync\",\n        });\n      },\n    ),\n    [organizationProvisioningContainerSeedRefinement],\n  );\n\nexport type ProvisionedSystemContainerRequest = z.infer<\n  typeof ProvisionedSystemContainerRequestSchema\n>;\n\nexport function isProvisionedDocumentRequest(\n  value: unknown,\n): value is ProvisionedDocumentRequest {\n  return ProvisionedDocumentRequestSchema.safeParse(value).success;\n}\n\nexport function isProvisionedSystemContainerRequest(\n  value: unknown,\n): value is ProvisionedSystemContainerRequest {\n  return ProvisionedSystemContainerRequestSchema.safeParse(value).success;\n}\n\n/**\n * The client-signed artifacts required to bootstrap a fresh organization: the\n * organization + admin/member group policies, the signed root container and its\n * metadata document, the organization metadata root, and the optional\n * roster/organization profile documents.\n *\n * This is the shared shape between user registration (which bootstraps the\n * user's personal organization) and creating an additional organization for an\n * existing user. Registration additionally carries the new user's public key\n * material (see {@link RegistrationRequest}); creating an additional\n * organization reuses the caller's existing keys, so it needs only this base.\n */\nexport const organizationProvisioningRequestShape = {\n  initialAdminGroup: CreateOrganizationGroupRequestSchema,\n  initialMemberGroup: CreateOrganizationGroupRequestSchema,\n  initialOrganizationMetadataContainer: ProvisionedSystemContainerRequestSchema,\n  initialOrganizationPolicy: OrganizationPrincipalPolicyRequestSchema,\n  initialOrganizationProfileDocument:\n    ProvisionedDocumentRequestSchema.optional(),\n  initialRootContainer: ContainerMutationRequestSchema,\n  initialRootMetadataDocument: ProvisionedDocumentRequestSchema,\n  initialRosterProfileContainer:\n    ProvisionedSystemContainerRequestSchema.optional(),\n  initialRosterProfileDocument: ProvisionedDocumentRequestSchema.optional(),\n  initialSystemContainers: arraySchema(\n    ProvisionedSystemContainerRequestSchema,\n  ).optional(),\n  organizationId: uuidV4StringSchema,\n  rootContainerId: uuidV4StringSchema,\n  userId: uuidV4StringSchema,\n} satisfies z.ZodRawShape;\n\nexport const OrganizationProvisioningRequestSchema = loosePlainObject(\n  organizationProvisioningRequestShape,\n);\n\nexport type OrganizationProvisioningRequest = z.infer<\n  typeof OrganizationProvisioningRequestSchema\n>;\n\nexport function isOrganizationProvisioningRequest(\n  value: unknown,\n): value is OrganizationProvisioningRequest {\n  return OrganizationProvisioningRequestSchema.safeParse(value).success;\n}\n\n/**\n * Request to create an additional organization for the authenticated user. The\n * caller re-signs the same provisioning artifacts as registration, but with\n * their existing identity keys, so the request is exactly an\n * {@link OrganizationProvisioningRequest} where `userId` is the caller.\n */\nexport const CreateOrganizationRequestSchema = loosePlainObject({\n  ...organizationProvisioningRequestShape,\n  replacementAuthorization:\n    OrganizationReplacementAuthorizationSchema.optional(),\n  /**\n   * Marks this fresh organization as the durable destination for one native\n   * subscription restore. The server records and later verifies this intent;\n   * ordinary existing organizations cannot be used as restore destinations.\n   */\n  nativeSubscriptionRestore: z.literal(true).optional(),\n  /**\n   * Completes a previously provisioned personal-organization replacement\n   * after the client has committed its local remote-state reset. The server\n   * rechecks replacement ownership and sync eligibility before moving the\n   * user's default-organization pointer.\n   */\n  finalizeReplacement: z.boolean().optional(),\n  /**\n   * Purged personal organization this fresh organization replaces. The server\n   * accepts this only after the old organization's purge is complete. The\n   * default pointer moves only on a later `finalizeReplacement` replay.\n   */\n  replacesOrganizationId: uuidV4StringSchema.optional(),\n});\n\nexport type CreateOrganizationRequest = z.infer<\n  typeof CreateOrganizationRequestSchema\n>;\n\nexport function isCreateOrganizationRequest(\n  value: unknown,\n): value is CreateOrganizationRequest {\n  return CreateOrganizationRequestSchema.safeParse(value).success;\n}\n"]}

package/internal/validators/response/containerMetadata.d.ts

@@ -95,6 +95,11 @@ export declare const ContainerCreateWithMetadataDocumentResponseSchema: z.ZodTyp
             targets: Record<string, unknown>[];
         };
         id: string;
+        initialSync?: {
+            commitLsn: string | null;
+            commitLsnMode: "tracked" | "untracked";
+            acceptedOutgoingUpdateIds: string[];
+        } | undefined;
     };
 }, {
     container: {
@@ -192,6 +197,11 @@ export declare const ContainerCreateWithMetadataDocumentResponseSchema: z.ZodTyp
             targets: Record<string, unknown>[];
         };
         id: string;
+        initialSync?: {
+            commitLsn: string | null;
+            commitLsnMode: "tracked" | "untracked";
+            acceptedOutgoingUpdateIds: string[];
+        } | undefined;
     };
 }, z.core.$ZodTypeInternals<{
     container: {
@@ -289,6 +299,11 @@ export declare const ContainerCreateWithMetadataDocumentResponseSchema: z.ZodTyp
             targets: Record<string, unknown>[];
         };
         id: string;
+        initialSync?: {
+            commitLsn: string | null;
+            commitLsnMode: "tracked" | "untracked";
+            acceptedOutgoingUpdateIds: string[];
+        } | undefined;
     };
 }, {
     container: {
@@ -386,6 +401,11 @@ export declare const ContainerCreateWithMetadataDocumentResponseSchema: z.ZodTyp
             targets: Record<string, unknown>[];
         };
         id: string;
+        initialSync?: {
+            commitLsn: string | null;
+            commitLsnMode: "tracked" | "untracked";
+            acceptedOutgoingUpdateIds: string[];
+        } | undefined;
     };
 }>>;
 export type ContainerCreateWithMetadataDocumentResponse = z.infer<typeof ContainerCreateWithMetadataDocumentResponseSchema>;

package/internal/validators/response/documentMutation.d.ts

@@ -1,6 +1,29 @@
 import { z } from "zod";
 import { type DocumentContentKeyBundleResponse, type DocumentKekTargetsResponse, type DocumentSyncResponse } from "./documentSyncSchema.js";
 export { type DocumentContentKeyBundleResponse, DocumentContentKeyBundleResponseSchema, type DocumentContentKeyTargetEnvelopeResponse, DocumentContentKeyTargetEnvelopeResponseSchema, type DocumentKekTargetsResponse, DocumentKekTargetsResponseSchema, type DocumentSyncPullPageResponse, DocumentSyncPullPageResponseSchema, type DocumentSyncResponse, DocumentSyncResponseSchema, type DocumentSyncUpdateResponse, DocumentSyncUpdateResponseSchema, } from "./documentSyncSchema.js";
+/**
+ * What the create transaction committed of a seed: the accepted update id and
+ * the commit position a following sync reads from, as a sync response reports
+ * them.
+ */
+export declare const DocumentCreateSeedResponseSchema: z.ZodType<{
+    commitLsn: string | null;
+    commitLsnMode: "tracked" | "untracked";
+    acceptedOutgoingUpdateIds: string[];
+}, {
+    commitLsn: string | null;
+    commitLsnMode: "tracked" | "untracked";
+    acceptedOutgoingUpdateIds: string[];
+}, z.core.$ZodTypeInternals<{
+    commitLsn: string | null;
+    commitLsnMode: "tracked" | "untracked";
+    acceptedOutgoingUpdateIds: string[];
+}, {
+    commitLsn: string | null;
+    commitLsnMode: "tracked" | "untracked";
+    acceptedOutgoingUpdateIds: string[];
+}>>;
+export type DocumentCreateSeedResponse = z.infer<typeof DocumentCreateSeedResponseSchema>;
 export declare const DocumentCreateResponseSchema: z.ZodType<{
     accessManifest: {
         event: {
@@ -36,6 +59,11 @@ export declare const DocumentCreateResponseSchema: z.ZodType<{
         targets: Record<string, unknown>[];
     };
     id: string;
+    initialSync?: {
+        commitLsn: string | null;
+        commitLsnMode: "tracked" | "untracked";
+        acceptedOutgoingUpdateIds: string[];
+    } | undefined;
 }, {
     accessManifest: {
         event: {
@@ -71,6 +99,11 @@ export declare const DocumentCreateResponseSchema: z.ZodType<{
         targets: Record<string, unknown>[];
     };
     id: string;
+    initialSync?: {
+        commitLsn: string | null;
+        commitLsnMode: "tracked" | "untracked";
+        acceptedOutgoingUpdateIds: string[];
+    } | undefined;
 }, z.core.$ZodTypeInternals<{
     accessManifest: {
         event: {
@@ -106,6 +139,11 @@ export declare const DocumentCreateResponseSchema: z.ZodType<{
         targets: Record<string, unknown>[];
     };
     id: string;
+    initialSync?: {
+        commitLsn: string | null;
+        commitLsnMode: "tracked" | "untracked";
+        acceptedOutgoingUpdateIds: string[];
+    } | undefined;
 }, {
     accessManifest: {
         event: {
@@ -141,6 +179,11 @@ export declare const DocumentCreateResponseSchema: z.ZodType<{
         targets: Record<string, unknown>[];
     };
     id: string;
+    initialSync?: {
+        commitLsn: string | null;
+        commitLsnMode: "tracked" | "untracked";
+        acceptedOutgoingUpdateIds: string[];
+    } | undefined;
 }>>;
 export type DocumentCreateResponse = z.infer<typeof DocumentCreateResponseSchema>;
 export declare const DocumentLinkSetMutationResponseSchema: z.ZodType<{

package/internal/validators/response/documentMutation.js

@@ -4,16 +4,27 @@ import { arraySchema, loosePlainObject, nonEmptyArraySchema, nonEmptyStringSchem
 import { AccessEventBundleWireResponseSchema, AccessManifestBundleWireResponseSchema, } from "../util/index.js";
 import { writerProjectionManifestBundlesRefinement } from "../writerProjectionRefinements.js";
 import { ContainerKeyingPathResponseSchema, ContainerKeyingPathWireResponseSchema, } from "./container.js";
-import { DocumentContentKeyBundleResponseSchema, DocumentKekTargetsResponseSchema, DocumentSyncResponseSchema, } from "./documentSyncSchema.js";
+import { commitLsnResponseShape, DocumentContentKeyBundleResponseSchema, DocumentKekTargetsResponseSchema, DocumentSyncResponseSchema, } from "./documentSyncSchema.js";
 import { containerKeyingPathReferences, ManifestBundlesSchema, ManifestHashReferenceSchema, OmittedManifestBundlesSchema, refineManifestBundleReferences, } from "./manifestBundleReferences.js";
 import { ProjectionPolicyEvidenceResponseSchema } from "./projectionPolicyEvidence.js";
 export { DocumentContentKeyBundleResponseSchema, DocumentContentKeyTargetEnvelopeResponseSchema, DocumentKekTargetsResponseSchema, DocumentSyncPullPageResponseSchema, DocumentSyncResponseSchema, DocumentSyncUpdateResponseSchema, } from "./documentSyncSchema.js";
+/**
+ * What the create transaction committed of a seed: the accepted update id and
+ * the commit position a following sync reads from, as a sync response reports
+ * them.
+ */
+export const DocumentCreateSeedResponseSchema = loosePlainObject({
+    acceptedOutgoingUpdateIds: arraySchema(nonEmptyStringSchema, 1),
+    ...commitLsnResponseShape,
+});
 export const DocumentCreateResponseSchema = loosePlainObject({
     accessManifest: AccessManifestBundleWireResponseSchema,
     contentKeyBundle: DocumentContentKeyBundleResponseSchema,
     createdAt: z.string(),
     documentKekTargets: DocumentKekTargetsResponseSchema,
     id: z.string(),
+    /** Present exactly when the request carried a seed. */
+    initialSync: DocumentCreateSeedResponseSchema.optional(),
 });
 export const DocumentLinkSetMutationResponseSchema = loosePlainObject({
     accessManifest: AccessManifestBundleWireResponseSchema,

package/internal/validators/response/documentMutation.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentMutation.js","sourceRoot":"","sources":["documentMutation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oCAAoC,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,mCAAmC,EACnC,sCAAsC,GACvC,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,yCAAyC,EAAE,MAAM,gCAAgC,CAAC;AAC3F,OAAO,EACL,iCAAiC,EACjC,qCAAqC,GACtC,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,sCAAsC,EAEtC,gCAAgC,EAEhC,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sCAAsC,EAAE,MAAM,4BAA4B,CAAC;AAEpF,OAAO,EAEL,sCAAsC,EAEtC,8CAA8C,EAE9C,gCAAgC,EAEhC,kCAAkC,EAElC,0BAA0B,EAE1B,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC;IAC3D,cAAc,EAAE,sCAAsC;IACtD,gBAAgB,EAAE,sCAAsC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,kBAAkB,EAAE,gCAAgC;IACpD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CACf,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,cAAc,EAAE,sCAAsC;IACtD,gBAAgB,EAAE,sCAAsC;IACxD,kBAAkB,EAAE,gCAAgC;IACpD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CACf,CAAC,CAAC;AAMH,MAAM,uBAAuB,GAAG;IAC9B,wBAAwB,EAAE,mBAAmB,CAC3C,sCAAsC,CACvC;IACD,gCAAgC,EAAE,WAAW,CAC3C,sCAAsC,CACvC;IACD,UAAU,EAAE,oBAAoB;IAChC,gBAAgB,EAAE,sCAAsC;IACxD,8BAA8B,EAAE,WAAW,CACzC,WAAW,CAAC,sCAAsC,CAAC,CACpD;IACD,4BAA4B,EAAE,WAAW,CACvC,sCAAsC,CACvC;IACD,UAAU,EAAE,mCAAmC;IAC/C,QAAQ,EAAE,oBAAoB;IAC9B,cAAc,EAAE,sCAAsC;CAC9C,CAAC;AAEX,MAAM,CAAC,MAAM,gCAAgC,GAAG,gBAAgB,CAC9D,uBAAuB,CACxB,CAAC;AAMF,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;IAC1D,GAAG,uBAAuB;IAC1B,wBAAwB,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAClD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,sCAAsC,GAAG,gBAAgB,CAAC;IACrE,cAAc,EAAE,sCAAsC;IACtD,yBAAyB,EAAE,mBAAmB,CAC5C,iCAAiC,CAClC;IACD,gBAAgB,EAAE,sCAAsC;IACxD,0EAA0E;IAC1E,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACjD,gCAAgC,EAAE,WAAW,CAC3C,sCAAsC,CACvC;IACD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,kBAAkB,EAAE,gCAAgC;IACpD,gBAAgB,EAAE,sCAAsC;IACxD,8BAA8B,EAAE,WAAW,CACzC,WAAW,CAAC,sCAAsC,CAAC,CACpD;IACD,uBAAuB,EAAE,WAAW,CAAC,sCAAsC,CAAC;CAC7E,CAAC,CAAC;AAMH,SAAS,kCAAkC,CAAC,UAM3C;IACC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAa,EAAE,CAC3C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,OAAO;QACL,UAAU,CAAC,gBAAgB;QAC3B,GAAG,MAAM,CAAC,UAAU,CAAC,uBAAuB,CAAC;QAC7C,GAAG,MAAM,CAAC,UAAU,CAAC,gCAAgC,CAAC;QACtD,GAAG,MAAM,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACpE,GAAG,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,OAAO,CACrD,6BAA6B,CAC9B;KACF,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,0CAA0C,GACrD,oCAAoC,CAClC,gBAAgB,CAAC;IACf,OAAO,EAAE,qBAAqB;IAC9B,cAAc,EAAE,4BAA4B;IAC5C,cAAc,EAAE,sCAAsC;IACtD,yBAAyB,EAAE,mBAAmB,CAC5C,qCAAqC,CACtC;IACD,gBAAgB,EAAE,sCAAsC;IACxD,0EAA0E;IAC1E,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACjD,gCAAgC,EAAE,WAAW,CAC3C,2BAA2B,CAC5B;IACD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,kBAAkB,EAAE,gCAAgC;IACpD,gBAAgB,EAAE,2BAA2B;IAC7C,8BAA8B,EAAE,WAAW,CACzC,WAAW,CAAC,2BAA2B,CAAC,CACzC;IACD,uBAAuB,EAAE,WAAW,CAAC,2BAA2B,CAAC;CAClE,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CACrC,8BAA8B,CAC5B,UAAU,EACV,kCAAkC,CAAC,UAAU,CAAC,EAC9C,OAAO,CACR,CACF,EACD,CAAC,yCAAyC,CAAC,CAC5C,CAAC;AAMJ;;;;;;GAMG;AACH,MAAM,UAAU,sCAAsC,CACpD,MAAwC;IAExC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9C,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,qBAAqB,EAAE,MAAM,CAAC,UAAU;QACxC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,0BAA0B,EAAE,OAAO,CAAC,GAAG,CACrC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CACvC;QACD,6BAA6B,EAAE,OAAO,CAAC,GAAG,CACxC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CACzC;QACD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,OAAO,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAAc;IAEd,OAAO,sCAAsC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,OAAO,4BAA4B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAc;IAEd,OAAO,qCAAqC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAc;IAEd,OAAO,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,OAAO,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc;IAEd,OAAO,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAAc;IAEd,OAAO,sCAAsC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,KAAc;IAEd,OAAO,0CAA0C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC7E,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaRuntimeRefinements } from \"../jsonSchema\";\nimport {\n  arraySchema,\n  loosePlainObject,\n  nonEmptyArraySchema,\n  nonEmptyStringSchema,\n} from \"../schema\";\nimport {\n  AccessEventBundleWireResponseSchema,\n  AccessManifestBundleWireResponseSchema,\n} from \"../util\";\nimport { writerProjectionManifestBundlesRefinement } from \"../writerProjectionRefinements\";\nimport {\n  ContainerKeyingPathResponseSchema,\n  ContainerKeyingPathWireResponseSchema,\n} from \"./container\";\nimport {\n  type DocumentContentKeyBundleResponse,\n  DocumentContentKeyBundleResponseSchema,\n  type DocumentKekTargetsResponse,\n  DocumentKekTargetsResponseSchema,\n  type DocumentSyncResponse,\n  DocumentSyncResponseSchema,\n} from \"./documentSyncSchema\";\nimport {\n  containerKeyingPathReferences,\n  ManifestBundlesSchema,\n  ManifestHashReferenceSchema,\n  OmittedManifestBundlesSchema,\n  refineManifestBundleReferences,\n} from \"./manifestBundleReferences\";\nimport { ProjectionPolicyEvidenceResponseSchema } from \"./projectionPolicyEvidence\";\n\nexport {\n  type DocumentContentKeyBundleResponse,\n  DocumentContentKeyBundleResponseSchema,\n  type DocumentContentKeyTargetEnvelopeResponse,\n  DocumentContentKeyTargetEnvelopeResponseSchema,\n  type DocumentKekTargetsResponse,\n  DocumentKekTargetsResponseSchema,\n  type DocumentSyncPullPageResponse,\n  DocumentSyncPullPageResponseSchema,\n  type DocumentSyncResponse,\n  DocumentSyncResponseSchema,\n  type DocumentSyncUpdateResponse,\n  DocumentSyncUpdateResponseSchema,\n} from \"./documentSyncSchema\";\n\nexport const DocumentCreateResponseSchema = loosePlainObject({\n  accessManifest: AccessManifestBundleWireResponseSchema,\n  contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n  createdAt: z.string(),\n  documentKekTargets: DocumentKekTargetsResponseSchema,\n  id: z.string(),\n});\n\nexport type DocumentCreateResponse = z.infer<\n  typeof DocumentCreateResponseSchema\n>;\n\nexport const DocumentLinkSetMutationResponseSchema = loosePlainObject({\n  accessManifest: AccessManifestBundleWireResponseSchema,\n  contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n  documentKekTargets: DocumentKekTargetsResponseSchema,\n  id: z.string(),\n});\n\nexport type DocumentLinkSetMutationResponse = z.infer<\n  typeof DocumentLinkSetMutationResponseSchema\n>;\n\nconst documentPurgeProofShape = {\n  authorizingContainerPath: nonEmptyArraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  documentContainerManifestHistory: arraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  documentId: nonEmptyStringSchema,\n  documentManifest: AccessManifestBundleWireResponseSchema,\n  documentManifestContainerPaths: arraySchema(\n    arraySchema(AccessManifestBundleWireResponseSchema),\n  ),\n  documentManifestPredecessors: arraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  purgeEvent: AccessEventBundleWireResponseSchema,\n  purgedAt: nonEmptyStringSchema,\n  policyEvidence: ProjectionPolicyEvidenceResponseSchema,\n} as const;\n\nexport const DocumentPurgeProofResponseSchema = loosePlainObject(\n  documentPurgeProofShape,\n);\n\nexport type DocumentPurgeProofResponse = z.infer<\n  typeof DocumentPurgeProofResponseSchema\n>;\n\nexport const DocumentPurgeResponseSchema = loosePlainObject({\n  ...documentPurgeProofShape,\n  reclaimedBlobStorageKeys: arraySchema(z.string()),\n});\n\nexport type DocumentPurgeResponse = z.infer<typeof DocumentPurgeResponseSchema>;\n\nexport const DocumentWriterProjectionResponseSchema = loosePlainObject({\n  policyEvidence: ProjectionPolicyEvidenceResponseSchema,\n  authorizingContainerPaths: nonEmptyArraySchema(\n    ContainerKeyingPathResponseSchema,\n  ),\n  contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n  /** Present only when the stored content-key bundle targets stale KEKs. */\n  contentKeyBundleStale: z.literal(true).optional(),\n  documentContainerManifestHistory: arraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  documentId: z.string(),\n  documentKekTargets: DocumentKekTargetsResponseSchema,\n  documentManifest: AccessManifestBundleWireResponseSchema,\n  documentManifestContainerPaths: arraySchema(\n    arraySchema(AccessManifestBundleWireResponseSchema),\n  ),\n  documentManifestHistory: arraySchema(AccessManifestBundleWireResponseSchema),\n});\n\nexport type DocumentWriterProjectionResponse = z.infer<\n  typeof DocumentWriterProjectionResponseSchema\n>;\n\nfunction documentWriterProjectionReferences(projection: {\n  readonly authorizingContainerPaths: unknown;\n  readonly documentContainerManifestHistory: unknown;\n  readonly documentManifest: unknown;\n  readonly documentManifestContainerPaths: unknown;\n  readonly documentManifestHistory: unknown;\n}): unknown[] {\n  const listed = (value: unknown): unknown[] =>\n    Array.isArray(value) ? value : [];\n  return [\n    projection.documentManifest,\n    ...listed(projection.documentManifestHistory),\n    ...listed(projection.documentContainerManifestHistory),\n    ...listed(projection.documentManifestContainerPaths).flatMap(listed),\n    ...listed(projection.authorizingContainerPaths).flatMap(\n      containerKeyingPathReferences,\n    ),\n  ];\n}\n\n/** The served shape; see ContainerWriterProjectionWireResponseSchema. */\nexport const DocumentWriterProjectionWireResponseSchema =\n  registerJsonSchemaRuntimeRefinements(\n    loosePlainObject({\n      bundles: ManifestBundlesSchema,\n      omittedBundles: OmittedManifestBundlesSchema,\n      policyEvidence: ProjectionPolicyEvidenceResponseSchema,\n      authorizingContainerPaths: nonEmptyArraySchema(\n        ContainerKeyingPathWireResponseSchema,\n      ),\n      contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n      /** Present only when the stored content-key bundle targets stale KEKs. */\n      contentKeyBundleStale: z.literal(true).optional(),\n      documentContainerManifestHistory: arraySchema(\n        ManifestHashReferenceSchema,\n      ),\n      documentId: z.string(),\n      documentKekTargets: DocumentKekTargetsResponseSchema,\n      documentManifest: ManifestHashReferenceSchema,\n      documentManifestContainerPaths: arraySchema(\n        arraySchema(ManifestHashReferenceSchema),\n      ),\n      documentManifestHistory: arraySchema(ManifestHashReferenceSchema),\n    }).superRefine((projection, context) =>\n      refineManifestBundleReferences(\n        projection,\n        documentWriterProjectionReferences(projection),\n        context,\n      ),\n    ),\n    [writerProjectionManifestBundlesRefinement],\n  );\n\nexport type DocumentWriterProjectionWireResponse = z.infer<\n  typeof DocumentWriterProjectionWireResponseSchema\n>;\n\n/**\n * Derives the KEK-target summary that corresponds to a content-key bundle,\n * preserving the bundle's served target order. Both the API (for stale-bundle\n * read-only sync responses) and clients (for plans built against a stale\n * bundle) must derive this identically so response/plan state comparisons\n * hold byte-for-byte.\n */\nexport function documentKekTargetsFromContentKeyBundle(\n  bundle: DocumentContentKeyBundleResponse,\n): DocumentKekTargetsResponse {\n  const targets = bundle.targets.map((target) => ({\n    containerId: target.containerId,\n    containerManifestHash: target.containerManifestHash,\n    containerKeyEpochId: target.containerKeyEpochId,\n    containerKeyEpoch: target.containerKeyEpoch,\n  }));\n\n  return {\n    documentId: bundle.documentId,\n    documentKeyTargetHash: bundle.targetHash,\n    linkSetManifestHash: bundle.linkSetManifestHash,\n    linkedContainerKeyEpochIds: targets.map(\n      (target) => target.containerKeyEpochId,\n    ),\n    linkedContainerManifestHashes: targets.map(\n      (target) => target.containerManifestHash,\n    ),\n    targets,\n  };\n}\n\nexport function isDocumentKekTargetsResponse(\n  value: unknown,\n): value is DocumentKekTargetsResponse {\n  return DocumentKekTargetsResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentContentKeyBundleResponse(\n  value: unknown,\n): value is DocumentContentKeyBundleResponse {\n  return DocumentContentKeyBundleResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentCreateResponse(\n  value: unknown,\n): value is DocumentCreateResponse {\n  return DocumentCreateResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentLinkSetMutationResponse(\n  value: unknown,\n): value is DocumentLinkSetMutationResponse {\n  return DocumentLinkSetMutationResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentPurgeResponse(\n  value: unknown,\n): value is DocumentPurgeResponse {\n  return DocumentPurgeResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentPurgeProofResponse(\n  value: unknown,\n): value is DocumentPurgeProofResponse {\n  return DocumentPurgeProofResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentSyncResponse(\n  value: unknown,\n): value is DocumentSyncResponse {\n  return DocumentSyncResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentWriterProjectionResponse(\n  value: unknown,\n): value is DocumentWriterProjectionResponse {\n  return DocumentWriterProjectionResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentWriterProjectionWireResponse(\n  value: unknown,\n): value is DocumentWriterProjectionWireResponse {\n  return DocumentWriterProjectionWireResponseSchema.safeParse(value).success;\n}\n"]}
+{"version":3,"file":"documentMutation.js","sourceRoot":"","sources":["documentMutation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oCAAoC,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,mCAAmC,EACnC,sCAAsC,GACvC,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,yCAAyC,EAAE,MAAM,gCAAgC,CAAC;AAC3F,OAAO,EACL,iCAAiC,EACjC,qCAAqC,GACtC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EAEtB,sCAAsC,EAEtC,gCAAgC,EAEhC,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sCAAsC,EAAE,MAAM,4BAA4B,CAAC;AAEpF,OAAO,EAEL,sCAAsC,EAEtC,8CAA8C,EAE9C,gCAAgC,EAEhC,kCAAkC,EAElC,0BAA0B,EAE1B,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,gBAAgB,CAAC;IAC/D,yBAAyB,EAAE,WAAW,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC/D,GAAG,sBAAsB;CAC1B,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC;IAC3D,cAAc,EAAE,sCAAsC;IACtD,gBAAgB,EAAE,sCAAsC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,kBAAkB,EAAE,gCAAgC;IACpD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,uDAAuD;IACvD,WAAW,EAAE,gCAAgC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,cAAc,EAAE,sCAAsC;IACtD,gBAAgB,EAAE,sCAAsC;IACxD,kBAAkB,EAAE,gCAAgC;IACpD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CACf,CAAC,CAAC;AAMH,MAAM,uBAAuB,GAAG;IAC9B,wBAAwB,EAAE,mBAAmB,CAC3C,sCAAsC,CACvC;IACD,gCAAgC,EAAE,WAAW,CAC3C,sCAAsC,CACvC;IACD,UAAU,EAAE,oBAAoB;IAChC,gBAAgB,EAAE,sCAAsC;IACxD,8BAA8B,EAAE,WAAW,CACzC,WAAW,CAAC,sCAAsC,CAAC,CACpD;IACD,4BAA4B,EAAE,WAAW,CACvC,sCAAsC,CACvC;IACD,UAAU,EAAE,mCAAmC;IAC/C,QAAQ,EAAE,oBAAoB;IAC9B,cAAc,EAAE,sCAAsC;CAC9C,CAAC;AAEX,MAAM,CAAC,MAAM,gCAAgC,GAAG,gBAAgB,CAC9D,uBAAuB,CACxB,CAAC;AAMF,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;IAC1D,GAAG,uBAAuB;IAC1B,wBAAwB,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAClD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,sCAAsC,GAAG,gBAAgB,CAAC;IACrE,cAAc,EAAE,sCAAsC;IACtD,yBAAyB,EAAE,mBAAmB,CAC5C,iCAAiC,CAClC;IACD,gBAAgB,EAAE,sCAAsC;IACxD,0EAA0E;IAC1E,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACjD,gCAAgC,EAAE,WAAW,CAC3C,sCAAsC,CACvC;IACD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,kBAAkB,EAAE,gCAAgC;IACpD,gBAAgB,EAAE,sCAAsC;IACxD,8BAA8B,EAAE,WAAW,CACzC,WAAW,CAAC,sCAAsC,CAAC,CACpD;IACD,uBAAuB,EAAE,WAAW,CAAC,sCAAsC,CAAC;CAC7E,CAAC,CAAC;AAMH,SAAS,kCAAkC,CAAC,UAM3C;IACC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAa,EAAE,CAC3C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,OAAO;QACL,UAAU,CAAC,gBAAgB;QAC3B,GAAG,MAAM,CAAC,UAAU,CAAC,uBAAuB,CAAC;QAC7C,GAAG,MAAM,CAAC,UAAU,CAAC,gCAAgC,CAAC;QACtD,GAAG,MAAM,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACpE,GAAG,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,OAAO,CACrD,6BAA6B,CAC9B;KACF,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,0CAA0C,GACrD,oCAAoC,CAClC,gBAAgB,CAAC;IACf,OAAO,EAAE,qBAAqB;IAC9B,cAAc,EAAE,4BAA4B;IAC5C,cAAc,EAAE,sCAAsC;IACtD,yBAAyB,EAAE,mBAAmB,CAC5C,qCAAqC,CACtC;IACD,gBAAgB,EAAE,sCAAsC;IACxD,0EAA0E;IAC1E,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACjD,gCAAgC,EAAE,WAAW,CAC3C,2BAA2B,CAC5B;IACD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,kBAAkB,EAAE,gCAAgC;IACpD,gBAAgB,EAAE,2BAA2B;IAC7C,8BAA8B,EAAE,WAAW,CACzC,WAAW,CAAC,2BAA2B,CAAC,CACzC;IACD,uBAAuB,EAAE,WAAW,CAAC,2BAA2B,CAAC;CAClE,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CACrC,8BAA8B,CAC5B,UAAU,EACV,kCAAkC,CAAC,UAAU,CAAC,EAC9C,OAAO,CACR,CACF,EACD,CAAC,yCAAyC,CAAC,CAC5C,CAAC;AAMJ;;;;;;GAMG;AACH,MAAM,UAAU,sCAAsC,CACpD,MAAwC;IAExC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9C,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,qBAAqB,EAAE,MAAM,CAAC,UAAU;QACxC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,0BAA0B,EAAE,OAAO,CAAC,GAAG,CACrC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CACvC;QACD,6BAA6B,EAAE,OAAO,CAAC,GAAG,CACxC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CACzC;QACD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,OAAO,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAAc;IAEd,OAAO,sCAAsC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,OAAO,4BAA4B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAc;IAEd,OAAO,qCAAqC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAc;IAEd,OAAO,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,OAAO,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc;IAEd,OAAO,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAAc;IAEd,OAAO,sCAAsC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,KAAc;IAEd,OAAO,0CAA0C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC7E,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaRuntimeRefinements } from \"../jsonSchema\";\nimport {\n  arraySchema,\n  loosePlainObject,\n  nonEmptyArraySchema,\n  nonEmptyStringSchema,\n} from \"../schema\";\nimport {\n  AccessEventBundleWireResponseSchema,\n  AccessManifestBundleWireResponseSchema,\n} from \"../util\";\nimport { writerProjectionManifestBundlesRefinement } from \"../writerProjectionRefinements\";\nimport {\n  ContainerKeyingPathResponseSchema,\n  ContainerKeyingPathWireResponseSchema,\n} from \"./container\";\nimport {\n  commitLsnResponseShape,\n  type DocumentContentKeyBundleResponse,\n  DocumentContentKeyBundleResponseSchema,\n  type DocumentKekTargetsResponse,\n  DocumentKekTargetsResponseSchema,\n  type DocumentSyncResponse,\n  DocumentSyncResponseSchema,\n} from \"./documentSyncSchema\";\nimport {\n  containerKeyingPathReferences,\n  ManifestBundlesSchema,\n  ManifestHashReferenceSchema,\n  OmittedManifestBundlesSchema,\n  refineManifestBundleReferences,\n} from \"./manifestBundleReferences\";\nimport { ProjectionPolicyEvidenceResponseSchema } from \"./projectionPolicyEvidence\";\n\nexport {\n  type DocumentContentKeyBundleResponse,\n  DocumentContentKeyBundleResponseSchema,\n  type DocumentContentKeyTargetEnvelopeResponse,\n  DocumentContentKeyTargetEnvelopeResponseSchema,\n  type DocumentKekTargetsResponse,\n  DocumentKekTargetsResponseSchema,\n  type DocumentSyncPullPageResponse,\n  DocumentSyncPullPageResponseSchema,\n  type DocumentSyncResponse,\n  DocumentSyncResponseSchema,\n  type DocumentSyncUpdateResponse,\n  DocumentSyncUpdateResponseSchema,\n} from \"./documentSyncSchema\";\n\n/**\n * What the create transaction committed of a seed: the accepted update id and\n * the commit position a following sync reads from, as a sync response reports\n * them.\n */\nexport const DocumentCreateSeedResponseSchema = loosePlainObject({\n  acceptedOutgoingUpdateIds: arraySchema(nonEmptyStringSchema, 1),\n  ...commitLsnResponseShape,\n});\n\nexport type DocumentCreateSeedResponse = z.infer<\n  typeof DocumentCreateSeedResponseSchema\n>;\n\nexport const DocumentCreateResponseSchema = loosePlainObject({\n  accessManifest: AccessManifestBundleWireResponseSchema,\n  contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n  createdAt: z.string(),\n  documentKekTargets: DocumentKekTargetsResponseSchema,\n  id: z.string(),\n  /** Present exactly when the request carried a seed. */\n  initialSync: DocumentCreateSeedResponseSchema.optional(),\n});\n\nexport type DocumentCreateResponse = z.infer<\n  typeof DocumentCreateResponseSchema\n>;\n\nexport const DocumentLinkSetMutationResponseSchema = loosePlainObject({\n  accessManifest: AccessManifestBundleWireResponseSchema,\n  contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n  documentKekTargets: DocumentKekTargetsResponseSchema,\n  id: z.string(),\n});\n\nexport type DocumentLinkSetMutationResponse = z.infer<\n  typeof DocumentLinkSetMutationResponseSchema\n>;\n\nconst documentPurgeProofShape = {\n  authorizingContainerPath: nonEmptyArraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  documentContainerManifestHistory: arraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  documentId: nonEmptyStringSchema,\n  documentManifest: AccessManifestBundleWireResponseSchema,\n  documentManifestContainerPaths: arraySchema(\n    arraySchema(AccessManifestBundleWireResponseSchema),\n  ),\n  documentManifestPredecessors: arraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  purgeEvent: AccessEventBundleWireResponseSchema,\n  purgedAt: nonEmptyStringSchema,\n  policyEvidence: ProjectionPolicyEvidenceResponseSchema,\n} as const;\n\nexport const DocumentPurgeProofResponseSchema = loosePlainObject(\n  documentPurgeProofShape,\n);\n\nexport type DocumentPurgeProofResponse = z.infer<\n  typeof DocumentPurgeProofResponseSchema\n>;\n\nexport const DocumentPurgeResponseSchema = loosePlainObject({\n  ...documentPurgeProofShape,\n  reclaimedBlobStorageKeys: arraySchema(z.string()),\n});\n\nexport type DocumentPurgeResponse = z.infer<typeof DocumentPurgeResponseSchema>;\n\nexport const DocumentWriterProjectionResponseSchema = loosePlainObject({\n  policyEvidence: ProjectionPolicyEvidenceResponseSchema,\n  authorizingContainerPaths: nonEmptyArraySchema(\n    ContainerKeyingPathResponseSchema,\n  ),\n  contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n  /** Present only when the stored content-key bundle targets stale KEKs. */\n  contentKeyBundleStale: z.literal(true).optional(),\n  documentContainerManifestHistory: arraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  documentId: z.string(),\n  documentKekTargets: DocumentKekTargetsResponseSchema,\n  documentManifest: AccessManifestBundleWireResponseSchema,\n  documentManifestContainerPaths: arraySchema(\n    arraySchema(AccessManifestBundleWireResponseSchema),\n  ),\n  documentManifestHistory: arraySchema(AccessManifestBundleWireResponseSchema),\n});\n\nexport type DocumentWriterProjectionResponse = z.infer<\n  typeof DocumentWriterProjectionResponseSchema\n>;\n\nfunction documentWriterProjectionReferences(projection: {\n  readonly authorizingContainerPaths: unknown;\n  readonly documentContainerManifestHistory: unknown;\n  readonly documentManifest: unknown;\n  readonly documentManifestContainerPaths: unknown;\n  readonly documentManifestHistory: unknown;\n}): unknown[] {\n  const listed = (value: unknown): unknown[] =>\n    Array.isArray(value) ? value : [];\n  return [\n    projection.documentManifest,\n    ...listed(projection.documentManifestHistory),\n    ...listed(projection.documentContainerManifestHistory),\n    ...listed(projection.documentManifestContainerPaths).flatMap(listed),\n    ...listed(projection.authorizingContainerPaths).flatMap(\n      containerKeyingPathReferences,\n    ),\n  ];\n}\n\n/** The served shape; see ContainerWriterProjectionWireResponseSchema. */\nexport const DocumentWriterProjectionWireResponseSchema =\n  registerJsonSchemaRuntimeRefinements(\n    loosePlainObject({\n      bundles: ManifestBundlesSchema,\n      omittedBundles: OmittedManifestBundlesSchema,\n      policyEvidence: ProjectionPolicyEvidenceResponseSchema,\n      authorizingContainerPaths: nonEmptyArraySchema(\n        ContainerKeyingPathWireResponseSchema,\n      ),\n      contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n      /** Present only when the stored content-key bundle targets stale KEKs. */\n      contentKeyBundleStale: z.literal(true).optional(),\n      documentContainerManifestHistory: arraySchema(\n        ManifestHashReferenceSchema,\n      ),\n      documentId: z.string(),\n      documentKekTargets: DocumentKekTargetsResponseSchema,\n      documentManifest: ManifestHashReferenceSchema,\n      documentManifestContainerPaths: arraySchema(\n        arraySchema(ManifestHashReferenceSchema),\n      ),\n      documentManifestHistory: arraySchema(ManifestHashReferenceSchema),\n    }).superRefine((projection, context) =>\n      refineManifestBundleReferences(\n        projection,\n        documentWriterProjectionReferences(projection),\n        context,\n      ),\n    ),\n    [writerProjectionManifestBundlesRefinement],\n  );\n\nexport type DocumentWriterProjectionWireResponse = z.infer<\n  typeof DocumentWriterProjectionWireResponseSchema\n>;\n\n/**\n * Derives the KEK-target summary that corresponds to a content-key bundle,\n * preserving the bundle's served target order. Both the API (for stale-bundle\n * read-only sync responses) and clients (for plans built against a stale\n * bundle) must derive this identically so response/plan state comparisons\n * hold byte-for-byte.\n */\nexport function documentKekTargetsFromContentKeyBundle(\n  bundle: DocumentContentKeyBundleResponse,\n): DocumentKekTargetsResponse {\n  const targets = bundle.targets.map((target) => ({\n    containerId: target.containerId,\n    containerManifestHash: target.containerManifestHash,\n    containerKeyEpochId: target.containerKeyEpochId,\n    containerKeyEpoch: target.containerKeyEpoch,\n  }));\n\n  return {\n    documentId: bundle.documentId,\n    documentKeyTargetHash: bundle.targetHash,\n    linkSetManifestHash: bundle.linkSetManifestHash,\n    linkedContainerKeyEpochIds: targets.map(\n      (target) => target.containerKeyEpochId,\n    ),\n    linkedContainerManifestHashes: targets.map(\n      (target) => target.containerManifestHash,\n    ),\n    targets,\n  };\n}\n\nexport function isDocumentKekTargetsResponse(\n  value: unknown,\n): value is DocumentKekTargetsResponse {\n  return DocumentKekTargetsResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentContentKeyBundleResponse(\n  value: unknown,\n): value is DocumentContentKeyBundleResponse {\n  return DocumentContentKeyBundleResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentCreateResponse(\n  value: unknown,\n): value is DocumentCreateResponse {\n  return DocumentCreateResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentLinkSetMutationResponse(\n  value: unknown,\n): value is DocumentLinkSetMutationResponse {\n  return DocumentLinkSetMutationResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentPurgeResponse(\n  value: unknown,\n): value is DocumentPurgeResponse {\n  return DocumentPurgeResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentPurgeProofResponse(\n  value: unknown,\n): value is DocumentPurgeProofResponse {\n  return DocumentPurgeProofResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentSyncResponse(\n  value: unknown,\n): value is DocumentSyncResponse {\n  return DocumentSyncResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentWriterProjectionResponse(\n  value: unknown,\n): value is DocumentWriterProjectionResponse {\n  return DocumentWriterProjectionResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentWriterProjectionWireResponse(\n  value: unknown,\n): value is DocumentWriterProjectionWireResponse {\n  return DocumentWriterProjectionWireResponseSchema.safeParse(value).success;\n}\n"]}

package/internal/validators/response/documentSyncSchema.d.ts

@@ -209,10 +209,11 @@ export declare const DocumentSyncPullPageResponseSchema: z.ZodType<{
     nextCursor: string | null;
 }>>;
 export type DocumentSyncPullPageResponse = z.infer<typeof DocumentSyncPullPageResponseSchema>;
+export declare const commitLsnResponseShape: {
+    commitLsn: z.ZodNullable<z.ZodString>;
+    commitLsnMode: z.ZodUnion<readonly [z.ZodLiteral<"tracked">, z.ZodLiteral<"untracked">]>;
+};
 export declare const DocumentSyncResponseSchema: z.ZodType<{
-    acceptedOutgoingUpdateIds: string[];
-    commitLsn: string | null;
-    commitLsnMode: "tracked" | "untracked";
     contentKeyBundle: {
         contentKeyEpoch: number;
         documentId: string;
@@ -275,10 +276,10 @@ export declare const DocumentSyncResponseSchema: z.ZodType<{
         checkpointPayloadKind?: "full_history_snapshot" | undefined;
         sourceVersionVector?: string | undefined;
     }[];
-}, {
-    acceptedOutgoingUpdateIds: string[];
     commitLsn: string | null;
     commitLsnMode: "tracked" | "untracked";
+    acceptedOutgoingUpdateIds: string[];
+}, {
     contentKeyBundle: {
         contentKeyEpoch: number;
         documentId: string;
@@ -341,10 +342,10 @@ export declare const DocumentSyncResponseSchema: z.ZodType<{
         checkpointPayloadKind?: "full_history_snapshot" | undefined;
         sourceVersionVector?: string | undefined;
     }[];
-}, z.core.$ZodTypeInternals<{
-    acceptedOutgoingUpdateIds: string[];
     commitLsn: string | null;
     commitLsnMode: "tracked" | "untracked";
+    acceptedOutgoingUpdateIds: string[];
+}, z.core.$ZodTypeInternals<{
     contentKeyBundle: {
         contentKeyEpoch: number;
         documentId: string;
@@ -407,10 +408,10 @@ export declare const DocumentSyncResponseSchema: z.ZodType<{
         checkpointPayloadKind?: "full_history_snapshot" | undefined;
         sourceVersionVector?: string | undefined;
     }[];
-}, {
-    acceptedOutgoingUpdateIds: string[];
     commitLsn: string | null;
     commitLsnMode: "tracked" | "untracked";
+    acceptedOutgoingUpdateIds: string[];
+}, {
     contentKeyBundle: {
         contentKeyEpoch: number;
         documentId: string;
@@ -473,5 +474,8 @@ export declare const DocumentSyncResponseSchema: z.ZodType<{
         checkpointPayloadKind?: "full_history_snapshot" | undefined;
         sourceVersionVector?: string | undefined;
     }[];
+    commitLsn: string | null;
+    commitLsnMode: "tracked" | "untracked";
+    acceptedOutgoingUpdateIds: string[];
 }>>;
 export type DocumentSyncResponse = z.infer<typeof DocumentSyncResponseSchema>;

package/internal/validators/response/documentSyncSchema.js

@@ -96,10 +96,30 @@ function addHistoricalContentKeyBundleIssues(response, context) {
         seenEpochs.add(contentKeyEpoch);
     });
 }
-export const DocumentSyncResponseSchema = registerJsonSchemaRuntimeRefinements(loosePlainObject({
-    acceptedOutgoingUpdateIds: arraySchema(z.string(), MAX_DOCUMENT_SYNC_OUTGOING_UPDATES),
+export const commitLsnResponseShape = {
     commitLsn: z.string().nullable(),
     commitLsnMode: z.union([z.literal("tracked"), z.literal("untracked")]),
+};
+/** The 0/0 sentinel and the untracked mode imply each other. */
+function addCommitLsnIssues(response, context) {
+    if (response.commitLsnMode === "untracked" && response.commitLsn !== "0/0") {
+        context.addIssue({
+            code: "custom",
+            message: "untracked commit LSN must use the 0/0 sentinel",
+            path: ["commitLsn"],
+        });
+    }
+    if (response.commitLsn === "0/0" && response.commitLsnMode !== "untracked") {
+        context.addIssue({
+            code: "custom",
+            message: "0/0 commit LSN must be declared untracked",
+            path: ["commitLsnMode"],
+        });
+    }
+}
+export const DocumentSyncResponseSchema = registerJsonSchemaRuntimeRefinements(loosePlainObject({
+    acceptedOutgoingUpdateIds: arraySchema(z.string(), MAX_DOCUMENT_SYNC_OUTGOING_UPDATES),
+    ...commitLsnResponseShape,
     contentKeyBundle: DocumentContentKeyBundleResponseSchema,
     contentKeyBundles: arraySchema(DocumentContentKeyBundleResponseSchema),
     documentId: z.string(),
@@ -115,22 +135,7 @@ export const DocumentSyncResponseSchema = registerJsonSchemaRuntimeRefinements(l
             path: ["pullPage", "nextCursor"],
         });
     }
-    if (response.commitLsnMode === "untracked" &&
-        response.commitLsn !== "0/0") {
-        context.addIssue({
-            code: "custom",
-            message: "untracked commit LSN must use the 0/0 sentinel",
-            path: ["commitLsn"],
-        });
-    }
-    if (response.commitLsn === "0/0" &&
-        response.commitLsnMode !== "untracked") {
-        context.addIssue({
-            code: "custom",
-            message: "0/0 commit LSN must be declared untracked",
-            path: ["commitLsnMode"],
-        });
-    }
+    addCommitLsnIssues(response, context);
     addHistoricalContentKeyBundleIssues(response, context);
 }), [
     documentSyncResponseCommitLsnModeRefinement,

package/internal/validators/response/documentSyncSchema.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentSyncSchema.js","sourceRoot":"","sources":["documentSyncSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oCAAoC,EACpC,gDAAgD,EAChD,sCAAsC,EACtC,8CAA8C,GAC/C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,2CAA2C,EAC3C,+CAA+C,EAC/C,+CAA+C,EAC/C,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oCAAoC,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,WAAW,EACX,2BAA2B,EAC3B,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,kCAAkC,EAClC,oCAAoC,EACpC,uCAAuC,GACxC,MAAM,4BAA4B,CAAC;AAEpC,MAAM,CAAC,MAAM,8CAA8C,GAAG,gBAAgB,CAAC;IAC7E,WAAW,EAAE,oBAAoB;IACjC,iBAAiB,EAAE,qBAAqB;IACxC,mBAAmB,EAAE,oBAAoB;IACzC,qBAAqB,EAAE,oBAAoB;IAC3C,UAAU,EAAE,oBAAoB;IAChC,gBAAgB,EAAE,iBAAiB;CACpC,CAAC,CAAC;AAMH,MAAM,sCAAsC,GAAG,gBAAgB,CAAC;IAC9D,WAAW,EAAE,oBAAoB;IACjC,iBAAiB,EAAE,qBAAqB;IACxC,mBAAmB,EAAE,oBAAoB;IACzC,qBAAqB,EAAE,oBAAoB;CAC5C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,gBAAgB,CAAC;IAC/D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,qBAAqB,EAAE,oBAAoB;IAC3C,0BAA0B,EAAE,mBAAmB,CAAC,oBAAoB,CAAC;IACrE,6BAA6B,EAAE,mBAAmB,CAAC,oBAAoB,CAAC;IACxE,mBAAmB,EAAE,oBAAoB;IACzC,OAAO,EAAE,mBAAmB,CAAC,iBAAiB,CAAC;CAChD,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,sCAAsC,GAAG,gBAAgB,CAAC;IACrE,eAAe,EAAE,qBAAqB;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,mBAAmB,EAAE,oBAAoB;IACzC,UAAU,EAAE,oBAAoB;IAChC,OAAO,EAAE,mBAAmB,CAAC,8CAA8C,CAAC;CAC7E,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,oCAAoC,CAClC,gBAAgB,CAAC;IACf,WAAW,EAAE,qBAAqB;IAClC,oBAAoB,EAAE,mBAAmB,CACvC,sCAAsC,CACvC;IACD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,cAAc,EAAE,CAAC;SACd,OAAO,CAAC,sCAAsC,CAAC;SAC/C,QAAQ,EAAE;IACb,qBAAqB,EAAE,CAAC;SACrB,OAAO,CAAC,8CAA8C,CAAC;SACvD,QAAQ,EAAE;IACb,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE;IACnC,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE;IACrC,aAAa,EAAE,oBAAoB;IACnC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,WAAW,EAAE,iBAAiB;CAC/B,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IACjC,IAAI,oCAAoC,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QAC/D,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,EACF,CAAC,sCAAsC,CAAC,CACzC,CAAC;AAMJ,MAAM,CAAC,MAAM,kCAAkC,GAAG,gBAAgB,CAAC;IACjE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,2BAA2B,CACrC,oCAAoC,CACrC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC;AAMH,SAAS,iBAAiB,CAAC,MAAe;IACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,eAAe,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACxE,OAAO,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,SAAS,mCAAmC,CAC1C,QAGC,EACD,OAAwB;IAExB,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAClE,IAAI,YAAY,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACxE,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,qEAAqE;IACrE,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,MAAe,EAAE,KAAa,EAAE,EAAE;QACpE,MAAM,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,eAAe,KAAK,IAAI;YAAE,OAAO;QACrC,IAAI,eAAe,IAAI,YAAY,IAAI,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YACvE,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,yEAAyE;gBAC3E,IAAI,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,iBAAiB,CAAC;aACtD,CAAC,CAAC;QACL,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,oCAAoC,CAC5E,gBAAgB,CAAC;IACf,yBAAyB,EAAE,WAAW,CACpC,CAAC,CAAC,MAAM,EAAE,EACV,kCAAkC,CACnC;IACD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IACtE,gBAAgB,EAAE,sCAAsC;IACxD,iBAAiB,EAAE,WAAW,CAAC,sCAAsC,CAAC;IACtE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,kBAAkB,EAAE,gCAAgC;IACpD,QAAQ,EAAE,kCAAkC;IAC5C,OAAO,EAAE,WAAW,CAClB,gCAAgC,EAChC,uCAAuC,CACxC;CACF,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACnC,IACE,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAC/B,QAAQ,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,EACrE,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,+CAA+C;YACxD,IAAI,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IACD,IACE,QAAQ,CAAC,aAAa,KAAK,WAAW;QACtC,QAAQ,CAAC,SAAS,KAAK,KAAK,EAC5B,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,gDAAgD;YACzD,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;IACD,IACE,QAAQ,CAAC,SAAS,KAAK,KAAK;QAC5B,QAAQ,CAAC,aAAa,KAAK,WAAW,EACtC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,2CAA2C;YACpD,IAAI,EAAE,CAAC,eAAe,CAAC;SACxB,CAAC,CAAC;IACL,CAAC;IACD,mCAAmC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC,CAAC,EACF;IACE,2CAA2C;IAC3C,+CAA+C;IAC/C,sCAAsC;IACtC,+CAA+C;CAChD,CACF,CAAC","sourcesContent":["import { z } from \"zod\";\nimport {\n  classifyDocumentSyncCheckpointFields,\n  DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE,\n  DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND,\n  DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND,\n} from \"../documentSyncCheckpoint\";\nimport {\n  documentSyncResponseCommitLsnModeRefinement,\n  documentSyncResponseCommitLsnSentinelRefinement,\n  documentSyncResponseHistoricalBundlesRefinement,\n  documentSyncResponsePullPageRefinement,\n  documentSyncResponseRotationRefinement,\n} from \"../documentSyncRefinements\";\nimport { registerJsonSchemaRuntimeRefinements } from \"../jsonSchema\";\nimport {\n  arraySchema,\n  boundedNonEmptyStringSchema,\n  loosePlainObject,\n  nonEmptyArraySchema,\n  nonEmptyStringSchema,\n  plainObjectSchema,\n  positiveIntegerSchema,\n} from \"../schema\";\nimport {\n  MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n  MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n  MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES,\n} from \"../util/documentSyncLimits\";\n\nexport const DocumentContentKeyTargetEnvelopeResponseSchema = loosePlainObject({\n  containerId: nonEmptyStringSchema,\n  containerKeyEpoch: positiveIntegerSchema,\n  containerKeyEpochId: nonEmptyStringSchema,\n  containerManifestHash: nonEmptyStringSchema,\n  wrappedKey: nonEmptyStringSchema,\n  wrappingMetadata: plainObjectSchema,\n});\n\nexport type DocumentContentKeyTargetEnvelopeResponse = z.infer<\n  typeof DocumentContentKeyTargetEnvelopeResponseSchema\n>;\n\nconst DocumentContentKeyTargetResponseSchema = loosePlainObject({\n  containerId: nonEmptyStringSchema,\n  containerKeyEpoch: positiveIntegerSchema,\n  containerKeyEpochId: nonEmptyStringSchema,\n  containerManifestHash: nonEmptyStringSchema,\n});\n\nexport const DocumentKekTargetsResponseSchema = loosePlainObject({\n  documentId: z.string(),\n  documentKeyTargetHash: nonEmptyStringSchema,\n  linkedContainerKeyEpochIds: nonEmptyArraySchema(nonEmptyStringSchema),\n  linkedContainerManifestHashes: nonEmptyArraySchema(nonEmptyStringSchema),\n  linkSetManifestHash: nonEmptyStringSchema,\n  targets: nonEmptyArraySchema(plainObjectSchema),\n});\n\nexport type DocumentKekTargetsResponse = z.infer<\n  typeof DocumentKekTargetsResponseSchema\n>;\n\nexport const DocumentContentKeyBundleResponseSchema = loosePlainObject({\n  contentKeyEpoch: positiveIntegerSchema,\n  documentId: z.string(),\n  linkSetManifestHash: nonEmptyStringSchema,\n  targetHash: nonEmptyStringSchema,\n  targets: nonEmptyArraySchema(DocumentContentKeyTargetEnvelopeResponseSchema),\n});\n\nexport type DocumentContentKeyBundleResponse = z.infer<\n  typeof DocumentContentKeyBundleResponseSchema\n>;\n\nexport const DocumentSyncUpdateResponseSchema =\n  registerJsonSchemaRuntimeRefinements(\n    loosePlainObject({\n      accessEpoch: positiveIntegerSchema,\n      authorizationTargets: nonEmptyArraySchema(\n        DocumentContentKeyTargetResponseSchema,\n      ),\n      authorFingerprint: z.string(),\n      checkpointKind: z\n        .literal(DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND)\n        .optional(),\n      checkpointPayloadKind: z\n        .literal(DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND)\n        .optional(),\n      createdAt: z.string(),\n      documentId: z.string(),\n      encryptedData: z.string(),\n      id: z.string(),\n      partialEndVersionVector: z.string(),\n      partialStartVersionVector: z.string(),\n      plaintextHash: nonEmptyStringSchema,\n      sourceVersionVector: z.string().min(1).optional(),\n      writeHeader: plainObjectSchema,\n    }).superRefine((update, context) => {\n      if (classifyDocumentSyncCheckpointFields(update) === \"invalid\") {\n        context.addIssue({\n          code: \"custom\",\n          message: DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE,\n        });\n      }\n    }),\n    [documentSyncResponseRotationRefinement],\n  );\n\nexport type DocumentSyncUpdateResponse = z.infer<\n  typeof DocumentSyncUpdateResponseSchema\n>;\n\nexport const DocumentSyncPullPageResponseSchema = loosePlainObject({\n  hasMore: z.boolean(),\n  nextCursor: boundedNonEmptyStringSchema(\n    MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n  ).nullable(),\n});\n\nexport type DocumentSyncPullPageResponse = z.infer<\n  typeof DocumentSyncPullPageResponseSchema\n>;\n\nfunction contentKeyEpochOf(bundle: unknown): number | null {\n  if (typeof bundle !== \"object\" || bundle === null) return null;\n  const contentKeyEpoch: unknown = Reflect.get(bundle, \"contentKeyEpoch\");\n  return typeof contentKeyEpoch === \"number\" ? contentKeyEpoch : null;\n}\n\n/**\n * The current epoch's bundle travels only as `contentKeyBundle`, so the array\n * holds the distinct older epochs that served updates cite. Field issues do not\n * stop this object refinement, so it judges only epochs that parsed.\n */\nfunction addHistoricalContentKeyBundleIssues(\n  response: {\n    readonly contentKeyBundle: unknown;\n    readonly contentKeyBundles: unknown;\n  },\n  context: z.RefinementCtx,\n): void {\n  const currentEpoch = contentKeyEpochOf(response.contentKeyBundle);\n  if (currentEpoch === null || !Array.isArray(response.contentKeyBundles)) {\n    return;\n  }\n  const seenEpochs = new Set<number>();\n  // forEach skips holes exactly as arraySchema's item validation does.\n  response.contentKeyBundles.forEach((bundle: unknown, index: number) => {\n    const contentKeyEpoch = contentKeyEpochOf(bundle);\n    if (contentKeyEpoch === null) return;\n    if (contentKeyEpoch >= currentEpoch || seenEpochs.has(contentKeyEpoch)) {\n      context.addIssue({\n        code: \"custom\",\n        message:\n          \"content-key bundles must be distinct epochs older than contentKeyBundle\",\n        path: [\"contentKeyBundles\", index, \"contentKeyEpoch\"],\n      });\n    }\n    seenEpochs.add(contentKeyEpoch);\n  });\n}\n\nexport const DocumentSyncResponseSchema = registerJsonSchemaRuntimeRefinements(\n  loosePlainObject({\n    acceptedOutgoingUpdateIds: arraySchema(\n      z.string(),\n      MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n    ),\n    commitLsn: z.string().nullable(),\n    commitLsnMode: z.union([z.literal(\"tracked\"), z.literal(\"untracked\")]),\n    contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n    contentKeyBundles: arraySchema(DocumentContentKeyBundleResponseSchema),\n    documentId: z.string(),\n    documentKekTargets: DocumentKekTargetsResponseSchema,\n    pullPage: DocumentSyncPullPageResponseSchema,\n    updates: arraySchema(\n      DocumentSyncUpdateResponseSchema,\n      MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES,\n    ),\n  }).superRefine((response, context) => {\n    if (\n      response.pullPage !== undefined &&\n      response.pullPage.hasMore !== (response.pullPage.nextCursor !== null)\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"pull page continuation does not match hasMore\",\n        path: [\"pullPage\", \"nextCursor\"],\n      });\n    }\n    if (\n      response.commitLsnMode === \"untracked\" &&\n      response.commitLsn !== \"0/0\"\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"untracked commit LSN must use the 0/0 sentinel\",\n        path: [\"commitLsn\"],\n      });\n    }\n    if (\n      response.commitLsn === \"0/0\" &&\n      response.commitLsnMode !== \"untracked\"\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"0/0 commit LSN must be declared untracked\",\n        path: [\"commitLsnMode\"],\n      });\n    }\n    addHistoricalContentKeyBundleIssues(response, context);\n  }),\n  [\n    documentSyncResponseCommitLsnModeRefinement,\n    documentSyncResponseCommitLsnSentinelRefinement,\n    documentSyncResponsePullPageRefinement,\n    documentSyncResponseHistoricalBundlesRefinement,\n  ],\n);\n\nexport type DocumentSyncResponse = z.infer<typeof DocumentSyncResponseSchema>;\n"]}
+{"version":3,"file":"documentSyncSchema.js","sourceRoot":"","sources":["documentSyncSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oCAAoC,EACpC,gDAAgD,EAChD,sCAAsC,EACtC,8CAA8C,GAC/C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,2CAA2C,EAC3C,+CAA+C,EAC/C,+CAA+C,EAC/C,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oCAAoC,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,WAAW,EACX,2BAA2B,EAC3B,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,kCAAkC,EAClC,oCAAoC,EACpC,uCAAuC,GACxC,MAAM,4BAA4B,CAAC;AAEpC,MAAM,CAAC,MAAM,8CAA8C,GAAG,gBAAgB,CAAC;IAC7E,WAAW,EAAE,oBAAoB;IACjC,iBAAiB,EAAE,qBAAqB;IACxC,mBAAmB,EAAE,oBAAoB;IACzC,qBAAqB,EAAE,oBAAoB;IAC3C,UAAU,EAAE,oBAAoB;IAChC,gBAAgB,EAAE,iBAAiB;CACpC,CAAC,CAAC;AAMH,MAAM,sCAAsC,GAAG,gBAAgB,CAAC;IAC9D,WAAW,EAAE,oBAAoB;IACjC,iBAAiB,EAAE,qBAAqB;IACxC,mBAAmB,EAAE,oBAAoB;IACzC,qBAAqB,EAAE,oBAAoB;CAC5C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,gBAAgB,CAAC;IAC/D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,qBAAqB,EAAE,oBAAoB;IAC3C,0BAA0B,EAAE,mBAAmB,CAAC,oBAAoB,CAAC;IACrE,6BAA6B,EAAE,mBAAmB,CAAC,oBAAoB,CAAC;IACxE,mBAAmB,EAAE,oBAAoB;IACzC,OAAO,EAAE,mBAAmB,CAAC,iBAAiB,CAAC;CAChD,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,sCAAsC,GAAG,gBAAgB,CAAC;IACrE,eAAe,EAAE,qBAAqB;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,mBAAmB,EAAE,oBAAoB;IACzC,UAAU,EAAE,oBAAoB;IAChC,OAAO,EAAE,mBAAmB,CAAC,8CAA8C,CAAC;CAC7E,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,oCAAoC,CAClC,gBAAgB,CAAC;IACf,WAAW,EAAE,qBAAqB;IAClC,oBAAoB,EAAE,mBAAmB,CACvC,sCAAsC,CACvC;IACD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,cAAc,EAAE,CAAC;SACd,OAAO,CAAC,sCAAsC,CAAC;SAC/C,QAAQ,EAAE;IACb,qBAAqB,EAAE,CAAC;SACrB,OAAO,CAAC,8CAA8C,CAAC;SACvD,QAAQ,EAAE;IACb,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE;IACnC,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE;IACrC,aAAa,EAAE,oBAAoB;IACnC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,WAAW,EAAE,iBAAiB;CAC/B,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IACjC,IAAI,oCAAoC,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QAC/D,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,EACF,CAAC,sCAAsC,CAAC,CACzC,CAAC;AAMJ,MAAM,CAAC,MAAM,kCAAkC,GAAG,gBAAgB,CAAC;IACjE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,2BAA2B,CACrC,oCAAoC,CACrC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC;AAMH,SAAS,iBAAiB,CAAC,MAAe;IACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,eAAe,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACxE,OAAO,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,SAAS,mCAAmC,CAC1C,QAGC,EACD,OAAwB;IAExB,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAClE,IAAI,YAAY,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACxE,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,qEAAqE;IACrE,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,MAAe,EAAE,KAAa,EAAE,EAAE;QACpE,MAAM,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,eAAe,KAAK,IAAI;YAAE,OAAO;QACrC,IAAI,eAAe,IAAI,YAAY,IAAI,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YACvE,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,yEAAyE;gBAC3E,IAAI,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,iBAAiB,CAAC;aACtD,CAAC,CAAC;QACL,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;CACvE,CAAC;AAEF,gEAAgE;AAChE,SAAS,kBAAkB,CACzB,QAGC,EACD,OAAwB;IAExB,IAAI,QAAQ,CAAC,aAAa,KAAK,WAAW,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC3E,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,gDAAgD;YACzD,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,IAAI,QAAQ,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;QAC3E,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,2CAA2C;YACpD,IAAI,EAAE,CAAC,eAAe,CAAC;SACxB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,oCAAoC,CAC5E,gBAAgB,CAAC;IACf,yBAAyB,EAAE,WAAW,CACpC,CAAC,CAAC,MAAM,EAAE,EACV,kCAAkC,CACnC;IACD,GAAG,sBAAsB;IACzB,gBAAgB,EAAE,sCAAsC;IACxD,iBAAiB,EAAE,WAAW,CAAC,sCAAsC,CAAC;IACtE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,kBAAkB,EAAE,gCAAgC;IACpD,QAAQ,EAAE,kCAAkC;IAC5C,OAAO,EAAE,WAAW,CAClB,gCAAgC,EAChC,uCAAuC,CACxC;CACF,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACnC,IACE,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAC/B,QAAQ,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,EACrE,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,+CAA+C;YACxD,IAAI,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IACD,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtC,mCAAmC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC,CAAC,EACF;IACE,2CAA2C;IAC3C,+CAA+C;IAC/C,sCAAsC;IACtC,+CAA+C;CAChD,CACF,CAAC","sourcesContent":["import { z } from \"zod\";\nimport {\n  classifyDocumentSyncCheckpointFields,\n  DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE,\n  DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND,\n  DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND,\n} from \"../documentSyncCheckpoint\";\nimport {\n  documentSyncResponseCommitLsnModeRefinement,\n  documentSyncResponseCommitLsnSentinelRefinement,\n  documentSyncResponseHistoricalBundlesRefinement,\n  documentSyncResponsePullPageRefinement,\n  documentSyncResponseRotationRefinement,\n} from \"../documentSyncRefinements\";\nimport { registerJsonSchemaRuntimeRefinements } from \"../jsonSchema\";\nimport {\n  arraySchema,\n  boundedNonEmptyStringSchema,\n  loosePlainObject,\n  nonEmptyArraySchema,\n  nonEmptyStringSchema,\n  plainObjectSchema,\n  positiveIntegerSchema,\n} from \"../schema\";\nimport {\n  MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n  MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n  MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES,\n} from \"../util/documentSyncLimits\";\n\nexport const DocumentContentKeyTargetEnvelopeResponseSchema = loosePlainObject({\n  containerId: nonEmptyStringSchema,\n  containerKeyEpoch: positiveIntegerSchema,\n  containerKeyEpochId: nonEmptyStringSchema,\n  containerManifestHash: nonEmptyStringSchema,\n  wrappedKey: nonEmptyStringSchema,\n  wrappingMetadata: plainObjectSchema,\n});\n\nexport type DocumentContentKeyTargetEnvelopeResponse = z.infer<\n  typeof DocumentContentKeyTargetEnvelopeResponseSchema\n>;\n\nconst DocumentContentKeyTargetResponseSchema = loosePlainObject({\n  containerId: nonEmptyStringSchema,\n  containerKeyEpoch: positiveIntegerSchema,\n  containerKeyEpochId: nonEmptyStringSchema,\n  containerManifestHash: nonEmptyStringSchema,\n});\n\nexport const DocumentKekTargetsResponseSchema = loosePlainObject({\n  documentId: z.string(),\n  documentKeyTargetHash: nonEmptyStringSchema,\n  linkedContainerKeyEpochIds: nonEmptyArraySchema(nonEmptyStringSchema),\n  linkedContainerManifestHashes: nonEmptyArraySchema(nonEmptyStringSchema),\n  linkSetManifestHash: nonEmptyStringSchema,\n  targets: nonEmptyArraySchema(plainObjectSchema),\n});\n\nexport type DocumentKekTargetsResponse = z.infer<\n  typeof DocumentKekTargetsResponseSchema\n>;\n\nexport const DocumentContentKeyBundleResponseSchema = loosePlainObject({\n  contentKeyEpoch: positiveIntegerSchema,\n  documentId: z.string(),\n  linkSetManifestHash: nonEmptyStringSchema,\n  targetHash: nonEmptyStringSchema,\n  targets: nonEmptyArraySchema(DocumentContentKeyTargetEnvelopeResponseSchema),\n});\n\nexport type DocumentContentKeyBundleResponse = z.infer<\n  typeof DocumentContentKeyBundleResponseSchema\n>;\n\nexport const DocumentSyncUpdateResponseSchema =\n  registerJsonSchemaRuntimeRefinements(\n    loosePlainObject({\n      accessEpoch: positiveIntegerSchema,\n      authorizationTargets: nonEmptyArraySchema(\n        DocumentContentKeyTargetResponseSchema,\n      ),\n      authorFingerprint: z.string(),\n      checkpointKind: z\n        .literal(DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND)\n        .optional(),\n      checkpointPayloadKind: z\n        .literal(DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND)\n        .optional(),\n      createdAt: z.string(),\n      documentId: z.string(),\n      encryptedData: z.string(),\n      id: z.string(),\n      partialEndVersionVector: z.string(),\n      partialStartVersionVector: z.string(),\n      plaintextHash: nonEmptyStringSchema,\n      sourceVersionVector: z.string().min(1).optional(),\n      writeHeader: plainObjectSchema,\n    }).superRefine((update, context) => {\n      if (classifyDocumentSyncCheckpointFields(update) === \"invalid\") {\n        context.addIssue({\n          code: \"custom\",\n          message: DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE,\n        });\n      }\n    }),\n    [documentSyncResponseRotationRefinement],\n  );\n\nexport type DocumentSyncUpdateResponse = z.infer<\n  typeof DocumentSyncUpdateResponseSchema\n>;\n\nexport const DocumentSyncPullPageResponseSchema = loosePlainObject({\n  hasMore: z.boolean(),\n  nextCursor: boundedNonEmptyStringSchema(\n    MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n  ).nullable(),\n});\n\nexport type DocumentSyncPullPageResponse = z.infer<\n  typeof DocumentSyncPullPageResponseSchema\n>;\n\nfunction contentKeyEpochOf(bundle: unknown): number | null {\n  if (typeof bundle !== \"object\" || bundle === null) return null;\n  const contentKeyEpoch: unknown = Reflect.get(bundle, \"contentKeyEpoch\");\n  return typeof contentKeyEpoch === \"number\" ? contentKeyEpoch : null;\n}\n\n/**\n * The current epoch's bundle travels only as `contentKeyBundle`, so the array\n * holds the distinct older epochs that served updates cite. Field issues do not\n * stop this object refinement, so it judges only epochs that parsed.\n */\nfunction addHistoricalContentKeyBundleIssues(\n  response: {\n    readonly contentKeyBundle: unknown;\n    readonly contentKeyBundles: unknown;\n  },\n  context: z.RefinementCtx,\n): void {\n  const currentEpoch = contentKeyEpochOf(response.contentKeyBundle);\n  if (currentEpoch === null || !Array.isArray(response.contentKeyBundles)) {\n    return;\n  }\n  const seenEpochs = new Set<number>();\n  // forEach skips holes exactly as arraySchema's item validation does.\n  response.contentKeyBundles.forEach((bundle: unknown, index: number) => {\n    const contentKeyEpoch = contentKeyEpochOf(bundle);\n    if (contentKeyEpoch === null) return;\n    if (contentKeyEpoch >= currentEpoch || seenEpochs.has(contentKeyEpoch)) {\n      context.addIssue({\n        code: \"custom\",\n        message:\n          \"content-key bundles must be distinct epochs older than contentKeyBundle\",\n        path: [\"contentKeyBundles\", index, \"contentKeyEpoch\"],\n      });\n    }\n    seenEpochs.add(contentKeyEpoch);\n  });\n}\n\nexport const commitLsnResponseShape = {\n  commitLsn: z.string().nullable(),\n  commitLsnMode: z.union([z.literal(\"tracked\"), z.literal(\"untracked\")]),\n};\n\n/** The 0/0 sentinel and the untracked mode imply each other. */\nfunction addCommitLsnIssues(\n  response: {\n    readonly commitLsn: string | null;\n    readonly commitLsnMode: \"tracked\" | \"untracked\";\n  },\n  context: z.RefinementCtx,\n): void {\n  if (response.commitLsnMode === \"untracked\" && response.commitLsn !== \"0/0\") {\n    context.addIssue({\n      code: \"custom\",\n      message: \"untracked commit LSN must use the 0/0 sentinel\",\n      path: [\"commitLsn\"],\n    });\n  }\n  if (response.commitLsn === \"0/0\" && response.commitLsnMode !== \"untracked\") {\n    context.addIssue({\n      code: \"custom\",\n      message: \"0/0 commit LSN must be declared untracked\",\n      path: [\"commitLsnMode\"],\n    });\n  }\n}\n\nexport const DocumentSyncResponseSchema = registerJsonSchemaRuntimeRefinements(\n  loosePlainObject({\n    acceptedOutgoingUpdateIds: arraySchema(\n      z.string(),\n      MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n    ),\n    ...commitLsnResponseShape,\n    contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n    contentKeyBundles: arraySchema(DocumentContentKeyBundleResponseSchema),\n    documentId: z.string(),\n    documentKekTargets: DocumentKekTargetsResponseSchema,\n    pullPage: DocumentSyncPullPageResponseSchema,\n    updates: arraySchema(\n      DocumentSyncUpdateResponseSchema,\n      MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES,\n    ),\n  }).superRefine((response, context) => {\n    if (\n      response.pullPage !== undefined &&\n      response.pullPage.hasMore !== (response.pullPage.nextCursor !== null)\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"pull page continuation does not match hasMore\",\n        path: [\"pullPage\", \"nextCursor\"],\n      });\n    }\n    addCommitLsnIssues(response, context);\n    addHistoricalContentKeyBundleIssues(response, context);\n  }),\n  [\n    documentSyncResponseCommitLsnModeRefinement,\n    documentSyncResponseCommitLsnSentinelRefinement,\n    documentSyncResponsePullPageRefinement,\n    documentSyncResponseHistoricalBundlesRefinement,\n  ],\n);\n\nexport type DocumentSyncResponse = z.infer<typeof DocumentSyncResponseSchema>;\n"]}

package/internal/validators/response/index.d.ts

@@ -12,7 +12,7 @@ export { CONTAINER_NOT_FOUND_ERROR_CODE, type ContainerNotFoundErrorResponse, Co
 export { isListContainerParentLanesResponse, type ListContainerParentLanesResponse, ListContainerParentLanesResponseSchema, } from "./containerParentLanes.js";
 export { CONTAINER_UNAVAILABLE_ERROR_CODE, type ContainerUnavailableErrorCode, } from "./containerUnavailableError.js";
 export { type ContainerDocumentSummary, ContainerDocumentSummaryResponseSchema, type ContainerDocumentSyncTombstone, ContainerDocumentSyncTombstoneResponseSchema, type DocumentEditAttributionRangeResponse, DocumentEditAttributionRangeResponseSchema, type DocumentEditAttributionResponse, DocumentEditAttributionResponseSchema, type DocumentEditAttributionSegmentResponse, DocumentEditAttributionSegmentResponseSchema, isDocumentEditAttributionResponse, isListDocumentEditAttributionRangesResponse, type ListContainerDocumentsResponse, ListContainerDocumentsResponseSchema, type ListDocumentEditAttributionRangesResponse, ListDocumentEditAttributionRangesResponseSchema, } from "./document.js";
-export { type DocumentContentKeyBundleResponse, DocumentContentKeyBundleResponseSchema, type DocumentContentKeyTargetEnvelopeResponse, DocumentContentKeyTargetEnvelopeResponseSchema, type DocumentCreateResponse, DocumentCreateResponseSchema, type DocumentKekTargetsResponse, DocumentKekTargetsResponseSchema, type DocumentLinkSetMutationResponse, DocumentLinkSetMutationResponseSchema, type DocumentPurgeProofResponse, DocumentPurgeProofResponseSchema, type DocumentPurgeResponse, DocumentPurgeResponseSchema, type DocumentSyncPullPageResponse, DocumentSyncPullPageResponseSchema, type DocumentSyncResponse, DocumentSyncResponseSchema, type DocumentSyncUpdateResponse, DocumentSyncUpdateResponseSchema, type DocumentWriterProjectionResponse, DocumentWriterProjectionResponseSchema, type DocumentWriterProjectionWireResponse, DocumentWriterProjectionWireResponseSchema, documentKekTargetsFromContentKeyBundle, isDocumentContentKeyBundleResponse, isDocumentCreateResponse, isDocumentKekTargetsResponse, isDocumentLinkSetMutationResponse, isDocumentPurgeProofResponse, isDocumentPurgeResponse, isDocumentSyncResponse, isDocumentWriterProjectionResponse, isDocumentWriterProjectionWireResponse, } from "./documentMutation.js";
+export { type DocumentContentKeyBundleResponse, DocumentContentKeyBundleResponseSchema, type DocumentContentKeyTargetEnvelopeResponse, DocumentContentKeyTargetEnvelopeResponseSchema, type DocumentCreateResponse, DocumentCreateResponseSchema, type DocumentCreateSeedResponse, type DocumentKekTargetsResponse, DocumentKekTargetsResponseSchema, type DocumentLinkSetMutationResponse, DocumentLinkSetMutationResponseSchema, type DocumentPurgeProofResponse, DocumentPurgeProofResponseSchema, type DocumentPurgeResponse, DocumentPurgeResponseSchema, type DocumentSyncPullPageResponse, DocumentSyncPullPageResponseSchema, type DocumentSyncResponse, DocumentSyncResponseSchema, type DocumentSyncUpdateResponse, DocumentSyncUpdateResponseSchema, type DocumentWriterProjectionResponse, DocumentWriterProjectionResponseSchema, type DocumentWriterProjectionWireResponse, DocumentWriterProjectionWireResponseSchema, documentKekTargetsFromContentKeyBundle, isDocumentContentKeyBundleResponse, isDocumentCreateResponse, isDocumentKekTargetsResponse, isDocumentLinkSetMutationResponse, isDocumentPurgeProofResponse, isDocumentPurgeResponse, isDocumentSyncResponse, isDocumentWriterProjectionResponse, isDocumentWriterProjectionWireResponse, } from "./documentMutation.js";
 export { DOCUMENT_MUTATION_ERROR_CODES, DocumentMutationBehaviorErrorCodeSchema, type DocumentMutationErrorCode, DocumentMutationErrorCodeSchema, type DocumentMutationFailureResponse, DocumentMutationFailureResponseSchema, } from "./documentMutationError.js";
 export { DOCUMENT_NOT_FOUND_ERROR_CODE, DOCUMENT_PROJECTION_ERROR_CODES, DOCUMENT_SYNC_ERROR_CODES, type DocumentNotFoundErrorCode, type DocumentNotFoundErrorResponse, DocumentNotFoundErrorResponseSchema, type DocumentProjectionErrorCode, DocumentProjectionErrorCodeSchema, type DocumentSyncErrorCode, DocumentSyncErrorCodeSchema, type DocumentSyncErrorResponse, DocumentSyncErrorResponseSchema, type DocumentSyncStateStaleErrorResponse, DocumentSyncStateStaleErrorResponseSchema, type DocumentWriterProjectionErrorResponse, DocumentWriterProjectionErrorResponseSchema, isDocumentSyncErrorCode, isDocumentSyncErrorResponse, isDocumentSyncStateStaleErrorResponse, } from "./documentSyncError.js";
 export { type ErrorResponse, ErrorResponseSchema, isErrorResponse, } from "./error.js";