@wireapp/core 46.46.6-beta.10.d7a6c4c53 → 46.46.6-beta.14.f6fd03fe6

package/lib/messagingProtocols/mls/recovery/MlsErrorMapper.test.js

@@ -1,117 +0,0 @@
-"use strict";
-/*
- * Wire
- * Copyright (C) 2025 Wire Swiss GmbH
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program. If not, see http://www.gnu.org/licenses/.
- *
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-const conversation_1 = require("@wireapp/api-client/lib/conversation");
-const bazinga64_1 = require("bazinga64");
-const core_crypto_1 = require("@wireapp/core-crypto");
-const MlsErrorMapper_1 = require("./MlsErrorMapper");
-const CoreCryptoMLSError_1 = require("../MLSService/CoreCryptoMLSError");
-// Helpers
-const id = { id: 'conv-id', domain: 'wire.test' };
-const groupIdBase64 = bazinga64_1.Encoder.toBase64(new Uint8Array([1, 2, 3, 4])).asString;
-const mapper = (0, MlsErrorMapper_1.createDefaultMlsErrorMapper)();
-function map(error, extra) {
-    return mapper.map(error, { qualifiedConversationId: id, groupId: extra?.groupId });
-}
-describe('MlsErrorMapper', () => {
-    afterEach(() => {
-        jest.restoreAllMocks();
-    });
-    it('maps WrongEpoch via stale message class instance', () => {
-        const err = new conversation_1.MLSStaleMessageError('stale');
-        const mapped = map(err, { groupId: groupIdBase64 });
-        expect(mapped.type).toBe('WrongEpoch');
-        expect(mapped.context?.qualifiedConversationId).toEqual(id);
-        expect(mapped.context?.groupId).toBe(groupIdBase64);
-    });
-    it('maps GroupNotEstablished for broken conversation error', () => {
-        const err = {
-            type: core_crypto_1.ErrorType.Mls,
-            context: {
-                type: core_crypto_1.MlsErrorType.MessageRejected,
-                context: { reason: (0, CoreCryptoMLSError_1.serializeAbortReason)({ message: CoreCryptoMLSError_1.UPLOAD_COMMIT_BUNDLE_ABORT_REASONS.BROKEN_MLS_CONVERSATION }) },
-            },
-        };
-        const mapped = map(err);
-        expect(mapped.type).toBe('GroupNotEstablished');
-    });
-    it('maps GroupOutOfSync with missing users list', () => {
-        const missing = [
-            { id: 'u1', domain: 'wire.test' },
-            { id: 'u2', domain: 'wire.test' },
-        ];
-        const err = {
-            type: core_crypto_1.ErrorType.Mls,
-            context: {
-                type: core_crypto_1.MlsErrorType.MessageRejected,
-                context: {
-                    reason: (0, CoreCryptoMLSError_1.serializeAbortReason)({
-                        message: CoreCryptoMLSError_1.UPLOAD_COMMIT_BUNDLE_ABORT_REASONS.MLS_GROUP_OUT_OF_SYNC,
-                        missing_users: missing,
-                    }),
-                },
-            },
-        };
-        const mapped = map(err, { groupId: groupIdBase64 });
-        expect(mapped.type).toBe('GroupOutOfSync');
-        expect(mapped.context?.missingUsers).toEqual(missing);
-        expect(mapped.context?.groupId).toBe(groupIdBase64);
-    });
-    it('maps ConversationAlreadyExists and extracts groupId bytes', () => {
-        const conversationIdArray = [1, 2, 3, 4];
-        const expectedGroupId = bazinga64_1.Encoder.toBase64(new Uint8Array(conversationIdArray)).asString;
-        const err = {
-            type: core_crypto_1.ErrorType.Mls,
-            context: { type: core_crypto_1.MlsErrorType.ConversationAlreadyExists, context: { conversationId: conversationIdArray } },
-        };
-        const mapped = map(err);
-        expect(mapped.type).toBe('ConversationAlreadyExists');
-        expect(mapped.context?.groupId).toBe(expectedGroupId);
-    });
-    it('maps OrphanWelcome', () => {
-        const err = { type: core_crypto_1.ErrorType.Mls, context: { type: core_crypto_1.MlsErrorType.OrphanWelcome } };
-        const mapped = map(err);
-        expect(mapped.type).toBe('OrphanWelcome');
-        expect(mapped.context?.qualifiedConversationId).toEqual(id);
-    });
-    it('falls back to Unknown for unmapped error', () => {
-        const err = new Error('random');
-        const mapped = map(err);
-        expect(mapped.type).toBe(core_crypto_1.MlsErrorType.Other);
-        expect(mapped.cause).toBe(err);
-    });
-    it('honors handler priority (WrongEpoch before GroupOutOfSync)', () => {
-        const err = new Error('ambiguous');
-        err.name = CoreCryptoMLSError_1.CORE_CRYPTO_ERROR_NAMES.MlsErrorWrongEpoch; // triggers WrongEpoch guard
-        // Also craft message-rejected with out-of-sync to trigger GroupOutOfSync guard
-        err.type = core_crypto_1.ErrorType.Mls;
-        err.context = {
-            type: core_crypto_1.MlsErrorType.MessageRejected,
-            context: {
-                reason: (0, CoreCryptoMLSError_1.serializeAbortReason)({
-                    message: CoreCryptoMLSError_1.UPLOAD_COMMIT_BUNDLE_ABORT_REASONS.MLS_GROUP_OUT_OF_SYNC,
-                    missing_users: [],
-                }),
-            },
-        };
-        const mapped = map(err);
-        expect(mapped.type).toBe('WrongEpoch');
-    });
-});

package/lib/messagingProtocols/mls/recovery/MlsRecoveryOrchestrator.d.ts

@@ -1,167 +0,0 @@
-import { SUBCONVERSATION_ID } from '@wireapp/api-client/lib/conversation';
-import { QualifiedId } from '@wireapp/api-client/lib/user';
-import { DomainMlsErrorType, MlsErrorMapper } from './MlsErrorMapper';
-import { BaseCreateConversationResponse } from '../../../conversation';
-/**
- * Coordinates recovery actions for MLS operations.
- *
- * The orchestrator takes an arbitrary async "operation" (e.g. send, add users, handle welcome),
- * executes it, and on failure maps the thrown error to a DomainMlsError via {@link MlsErrorMapper}.
- * A recovery policy is then resolved and executed exactly-once per unique key, with optional
- * re-run of the original operation after recovery.
- *
- * Key properties:
- * - Single-flight: duplicate recoveries (same action+conversation+group+subconv) are deduplicated.
- * - Per-operation policies: the same DomainMlsError can map to different actions depending on operation.
- * - Non-invasive: the orchestrator has no MLS logic; it calls provided deps to perform actions.
- */
-/**
- * Concrete recovery actions the orchestrator can trigger.
- */
-export declare enum RecoveryActionKind {
-    /**
-     * Issue an external-commit join for the conversation.
-     */
-    JoinViaExternalCommit = "JoinViaExternalCommit",
-    /**
-     * Fetch missing epoch state and reconcile.
-     */
-    RecoverFromEpochMismatch = "RecoverFromEpochMismatch",
-    /**
-     * Tear down local MLS state and re-create the group.
-     */
-    ResetAndReestablish = "ResetAndReestablish",
-    /**
-     * Add users reported as missing to get the group back in sync.
-     */
-    AddMissingUsers = "AddMissingUsers",
-    /**
-     * Remove local MLS artifacts for the group and retry welcome handling.
-     */
-    WipeAndReprocessWelcome = "WipeAndReprocessWelcome",
-    /**
-     * No matching policy found; treated as no-op and the original error is re-thrown.
-     */
-    Unknown = "Unknown"
-}
-/**
- * Retry behavior for an operation under recovery.
- */
-export type RetryPolicy = {
-    maxAttempts: number;
-    delayMs?: number;
-    /**
-     * Whether to retry the original operation once after a successful recovery
-     */
-    reRunOriginalOperation?: boolean;
-};
-/**
- * A single recovery policy that pairs an action with a retry configuration.
- */
-export type RecoveryPolicy = {
-    action: RecoveryActionKind;
-    retryConfig: RetryPolicy;
-};
-type PerOperationPolicies = Partial<Record<OperationName, RecoveryPolicy>>;
-/**
- * Global policy table from DomainMlsErrorType to RecoveryPolicy.
- *
- * A value can be either a flat policy (applies to all operations) or a per-operation
- * map that allows different actions depending on the invoking operation.
- */
-export type PolicyTable = Partial<Record<DomainMlsErrorType, RecoveryPolicy | PerOperationPolicies>>;
-export declare enum OperationName {
-    send = "send",
-    addUsers = "addUsers",
-    removeUsers = "removeUsers",
-    joinExternalCommit = "joinExternalCommit",
-    handleWelcome = "handleWelcome",
-    handleMessageAdd = "handleMessageAdd",
-    keyMaterialUpdate = "keyMaterialUpdate"
-}
-/**
- * Context about the operation being orchestrated. Used for policy selection and keying.
- */
-export type OperationContext = {
-    operationName: OperationName;
-    qualifiedConversationId?: QualifiedId;
-    groupId?: string;
-    subconvId?: SUBCONVERSATION_ID;
-};
-/**
- * Public orchestrator interface. Wrap your async operation with {@link execute}.
- *
- * The callback is invoked immediately. If it throws, the orchestrator maps the error,
- * performs recovery according to policies, optionally waits, and may re-run the callback once.
- */
-export interface MlsRecoveryOrchestrator {
-    execute(params: executeParams<void>): Promise<void>;
-    execute<T>(params: executeParams<T>): Promise<T>;
-}
-/**
- * Concrete side-effecting functions the orchestrator uses to perform recovery.
- * Provided by the MLS layer/service.
- */
-export type OrchestratorDeps = {
-    joinViaExternalCommit: (conversationId: QualifiedId) => Promise<void>;
-    resetAndReestablish: (conversationId: QualifiedId) => Promise<void>;
-    recoverFromEpochMismatch: (conversationId: QualifiedId, subconvId?: SUBCONVERSATION_ID) => Promise<void>;
-    addMissingUsers: (conversationId: QualifiedId, groupId: string, users: QualifiedId[]) => Promise<BaseCreateConversationResponse>;
-    wipeMLSConversation: (groupId: string) => Promise<void>;
-};
-/**
- * Parameters for {@link execute}.
- */
-type executeParams<T> = {
-    context: OperationContext;
-    callBack: () => Promise<T>;
-    retry?: boolean;
-};
-/**
- * Default implementation with in-process deduplication keyed by action and context.
- */
-export declare class MlsRecoveryOrchestratorImpl implements MlsRecoveryOrchestrator {
-    private readonly mapper;
-    private readonly policies;
-    private readonly deps;
-    private readonly inProgressRecoveries;
-    private readonly logger;
-    constructor(mapper: MlsErrorMapper, policies: PolicyTable, deps: OrchestratorDeps, inProgressRecoveries?: Set<string>, logger?: import("logdown").Logger);
-    /**
-     * Execute the provided callback, and on failure, map and perform a configured recovery.
-     * If {@link RetryPolicy.reRunOriginalOperation} is true, the callback is re-invoked once after recovery.
-     */
-    execute(params: executeParams<void>): Promise<void>;
-    execute<T>(params: executeParams<T>): Promise<T>;
-    /** Resolve the effective policy for the mapped error and operation. Supports per-operation policies. */
-    private getPolicyFor;
-    /**
-     * Execute the concrete recovery action once per unique recovery key. Throws if required context is missing.
-     * For WipeAndReprocessWelcome, attempts to derive groupId from either the operation context or error context.
-     */
-    private performRecovery;
-    /**
-     * Build a stable deduplication key from action and operation context.
-     */
-    private getRecoveryKey;
-    /**
-     * Ensure the provided async task runs at most once for the given key at a time.
-     */
-    private runOnceWithKey;
-    /** Optionally wait before re-invoking the original operation. */
-    private maybeDelay;
-    private sleep;
-}
-/**
- * Minimal default policies used by the initial integration. These can be extended over time.
- *
- * Highlights:
- * - WrongEpoch: reconcile and retry for typed ops; do not re-run for join.
- * - GroupNotEstablished: reset and re-establish; typed ops re-run once.
- * - GroupOutOfSync: add missing users and retry for typed ops.
- * - ConversationAlreadyExists (welcome): wipe local MLS state and re-run welcome once.
- * - OrphanWelcome (welcome): attempt join via external commit; do not re-run.
- */
-export declare const minimalDefaultPolicies: PolicyTable;
-export {};
-//# sourceMappingURL=MlsRecoveryOrchestrator.d.ts.map

package/lib/messagingProtocols/mls/recovery/MlsRecoveryOrchestrator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"MlsRecoveryOrchestrator.d.ts","sourceRoot":"","sources":["../../../../src/messagingProtocols/mls/recovery/MlsRecoveryOrchestrator.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAC,kBAAkB,EAAC,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAC,WAAW,EAAC,MAAM,8BAA8B,CAAC;AAIzD,OAAO,EAAiB,kBAAkB,EAAE,cAAc,EAAC,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAC,8BAA8B,EAAC,MAAM,uBAAuB,CAAC;AAErE;;;;;;;;;;;;GAYG;AAEH;;GAEG;AACH,oBAAY,kBAAkB;IAC5B;;OAEG;IACH,qBAAqB,0BAA0B;IAC/C;;OAEG;IACH,wBAAwB,6BAA6B;IACrD;;OAEG;IACH,mBAAmB,wBAAwB;IAC3C;;OAEG;IACH,eAAe,oBAAoB;IACnC;;OAEG;IACH,uBAAuB,4BAA4B;IACnD;;OAEG;IACH,OAAO,YAAY;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,WAAW,EAAE,WAAW,CAAC;CAC1B,CAAC;AAEF,KAAK,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;AAC3E;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,cAAc,GAAG,oBAAoB,CAAC,CAAC,CAAC;AAErG,oBAAY,aAAa;IACvB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,WAAW,gBAAgB;IAC3B,kBAAkB,uBAAuB;IACzC,aAAa,kBAAkB;IAC/B,gBAAgB,qBAAqB;IACrC,iBAAiB,sBAAsB;CACxC;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,aAAa,CAAC;IAC7B,uBAAuB,CAAC,EAAE,WAAW,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IAEtC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpD,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAClD;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,qBAAqB,EAAE,CAAC,cAAc,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,mBAAmB,EAAE,CAAC,cAAc,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,wBAAwB,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzG,eAAe,EAAE,CACf,cAAc,EAAE,WAAW,EAC3B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,WAAW,EAAE,KACjB,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAE7C,mBAAmB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD,CAAC;AAEF;;GAEG;AACH,KAAK,aAAa,CAAC,CAAC,IAAI;IACtB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,QAAQ,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAMF;;GAEG;AACH,qBAAa,2BAA4B,YAAW,uBAAuB;IAEvE,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAJN,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,WAAW,EACrB,IAAI,EAAE,gBAAgB,EACtB,oBAAoB,GAAE,GAAG,CAAC,MAAM,CAAa,EAC7C,MAAM,2BAAgE;IAGzF;;;OAGG;IACU,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IACnD,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAgC7D,wGAAwG;IACxG,OAAO,CAAC,YAAY,CAYlB;IAEF;;;OAGG;YACW,eAAe;IAsD7B;;OAEG;IACH,OAAO,CAAC,cAAc;IAStB;;OAEG;IACH,OAAO,CAAC,cAAc,CAgBpB;IAEF,iEAAiE;YACnD,UAAU;IAOxB,OAAO,CAAC,KAAK;CAGd;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,EAAE,WA4EpC,CAAC"}

package/lib/messagingProtocols/mls/recovery/MlsRecoveryOrchestrator.js

@@ -1,317 +0,0 @@
-"use strict";
-/*
- * Wire
- * Copyright (C) 2025 Wire Swiss GmbH
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program. If not, see http://www.gnu.org/licenses/.
- *
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.minimalDefaultPolicies = exports.MlsRecoveryOrchestratorImpl = exports.OperationName = exports.RecoveryActionKind = void 0;
-const commons_1 = require("@wireapp/commons");
-/**
- * Coordinates recovery actions for MLS operations.
- *
- * The orchestrator takes an arbitrary async "operation" (e.g. send, add users, handle welcome),
- * executes it, and on failure maps the thrown error to a DomainMlsError via {@link MlsErrorMapper}.
- * A recovery policy is then resolved and executed exactly-once per unique key, with optional
- * re-run of the original operation after recovery.
- *
- * Key properties:
- * - Single-flight: duplicate recoveries (same action+conversation+group+subconv) are deduplicated.
- * - Per-operation policies: the same DomainMlsError can map to different actions depending on operation.
- * - Non-invasive: the orchestrator has no MLS logic; it calls provided deps to perform actions.
- */
-/**
- * Concrete recovery actions the orchestrator can trigger.
- */
-var RecoveryActionKind;
-(function (RecoveryActionKind) {
-    /**
-     * Issue an external-commit join for the conversation.
-     */
-    RecoveryActionKind["JoinViaExternalCommit"] = "JoinViaExternalCommit";
-    /**
-     * Fetch missing epoch state and reconcile.
-     */
-    RecoveryActionKind["RecoverFromEpochMismatch"] = "RecoverFromEpochMismatch";
-    /**
-     * Tear down local MLS state and re-create the group.
-     */
-    RecoveryActionKind["ResetAndReestablish"] = "ResetAndReestablish";
-    /**
-     * Add users reported as missing to get the group back in sync.
-     */
-    RecoveryActionKind["AddMissingUsers"] = "AddMissingUsers";
-    /**
-     * Remove local MLS artifacts for the group and retry welcome handling.
-     */
-    RecoveryActionKind["WipeAndReprocessWelcome"] = "WipeAndReprocessWelcome";
-    /**
-     * No matching policy found; treated as no-op and the original error is re-thrown.
-     */
-    RecoveryActionKind["Unknown"] = "Unknown";
-})(RecoveryActionKind || (exports.RecoveryActionKind = RecoveryActionKind = {}));
-var OperationName;
-(function (OperationName) {
-    OperationName["send"] = "send";
-    OperationName["addUsers"] = "addUsers";
-    OperationName["removeUsers"] = "removeUsers";
-    OperationName["joinExternalCommit"] = "joinExternalCommit";
-    OperationName["handleWelcome"] = "handleWelcome";
-    OperationName["handleMessageAdd"] = "handleMessageAdd";
-    OperationName["keyMaterialUpdate"] = "keyMaterialUpdate";
-})(OperationName || (exports.OperationName = OperationName = {}));
-function isRecoveryPolicy(entry) {
-    return 'action' in entry && typeof entry.action === 'string';
-}
-/**
- * Default implementation with in-process deduplication keyed by action and context.
- */
-class MlsRecoveryOrchestratorImpl {
-    mapper;
-    policies;
-    deps;
-    inProgressRecoveries;
-    logger;
-    constructor(mapper, policies, deps, inProgressRecoveries = new Set(), logger = commons_1.LogFactory.getLogger('@wireapp/core/MlsRecoveryOrchestrator')) {
-        this.mapper = mapper;
-        this.policies = policies;
-        this.deps = deps;
-        this.inProgressRecoveries = inProgressRecoveries;
-        this.logger = logger;
-    }
-    async execute({ context, callBack, retry = true }) {
-        try {
-            this.logger.info('Executing MLS operation with recovery orchestration', { context });
-            return await callBack();
-        }
-        catch (rawError) {
-            this.logger.info('Operation failed, invoking MLS recovery orchestrator', { rawError });
-            const normalizedError = this.mapper.map(rawError, {
-                qualifiedConversationId: context.qualifiedConversationId,
-                groupId: context.groupId,
-                subconvId: context.subconvId,
-            });
-            this.logger.info(`Mapped error to domain MLS error of type ${normalizedError.type}`, { normalizedError });
-            const policy = this.getPolicyFor(normalizedError, context);
-            this.logger.info(`Resolved recovery policy: action=${policy.action}`, { policy });
-            if (policy.action === 'Unknown' || !retry) {
-                this.logger.info('No recovery action configured or retry disabled, re-throwing original error');
-                throw rawError;
-            }
-            const key = this.getRecoveryKey(context, policy.action);
-            await this.performRecovery(context, normalizedError, policy, key);
-            await this.maybeDelay(policy.retryConfig);
-            if (policy.retryConfig.reRunOriginalOperation) {
-                this.logger.info(`Re-running original operation after recovery for key ${key}`);
-                return this.execute({ context, callBack, retry: false });
-            }
-        }
-    }
-    /** Resolve the effective policy for the mapped error and operation. Supports per-operation policies. */
-    getPolicyFor = (err, ctx) => {
-        const entry = this.policies[err.type];
-        if (!entry) {
-            return { action: RecoveryActionKind.Unknown, retryConfig: { maxAttempts: 0 } };
-        }
-        if (isRecoveryPolicy(entry)) {
-            return entry;
-        }
-        const perOperationPolicy = entry;
-        return perOperationPolicy[ctx.operationName] ?? { action: RecoveryActionKind.Unknown, retryConfig: { maxAttempts: 0 } };
-    };
-    /**
-     * Execute the concrete recovery action once per unique recovery key. Throws if required context is missing.
-     * For WipeAndReprocessWelcome, attempts to derive groupId from either the operation context or error context.
-     */
-    async performRecovery(context, err, policy, recoveryKey) {
-        const id = context.qualifiedConversationId;
-        if (!id) {
-            const errorMessage = `Missing conversationId for recovery action ${policy.action}`;
-            this.logger.error(errorMessage);
-            throw new Error(errorMessage);
-        }
-        switch (policy.action) {
-            case 'RecoverFromEpochMismatch': {
-                await this.runOnceWithKey(recoveryKey, () => this.deps.recoverFromEpochMismatch(id, context.subconvId));
-                break;
-            }
-            case 'JoinViaExternalCommit': {
-                await this.runOnceWithKey(recoveryKey, () => this.deps.joinViaExternalCommit(id));
-                break;
-            }
-            case 'ResetAndReestablish': {
-                await this.runOnceWithKey(recoveryKey, () => this.deps.resetAndReestablish(id));
-                break;
-            }
-            case 'AddMissingUsers': {
-                const groupId = context.groupId;
-                const missing = err.context?.missingUsers;
-                if (!missing || missing.length === 0) {
-                    throw new Error('No missing users reported in error context for AddMissingUsers');
-                }
-                if (!groupId) {
-                    throw new Error('Missing groupId for AddMissingUsers');
-                }
-                await this.runOnceWithKey(recoveryKey, () => this.deps.addMissingUsers(id, groupId, missing));
-                break;
-            }
-            case 'WipeAndReprocessWelcome': {
-                // We rely on either the operation context groupId (preferred) or any mapped error context
-                const groupId = context.groupId ?? err.context?.groupId;
-                if (!groupId) {
-                    this.logger.warn('Could not determine groupId for WipeAndReprocessWelcome; skipping wipe');
-                    break;
-                }
-                await this.runOnceWithKey(recoveryKey, () => this.deps.wipeMLSConversation(groupId));
-                break;
-            }
-            default:
-                this.logger.info(`No recovery action taken for action ${policy.action}`);
-                break;
-        }
-    }
-    /**
-     * Build a stable deduplication key from action and operation context.
-     */
-    getRecoveryKey(context, action) {
-        const conv = context.qualifiedConversationId?.id ?? 'unknownConv';
-        const group = context.groupId ?? 'unknownGroup';
-        const sub = context.subconvId ?? 'none';
-        const key = `${action}:${conv}:${group}:${String(sub)}`;
-        this.logger.info(`Generated recovery key: ${key} for action ${action} with context`, { context });
-        return key;
-    }
-    /**
-     * Ensure the provided async task runs at most once for the given key at a time.
-     */
-    runOnceWithKey = async (key, task) => {
-        if (this.inProgressRecoveries.has(key)) {
-            this.logger.info(`Recovery already in progress for key ${key}, skipping duplicate recovery`);
-            return;
-        }
-        this.logger.info(`Starting recovery for key ${key}`);
-        this.inProgressRecoveries.add(key);
-        try {
-            await task();
-        }
-        catch (error) {
-            this.logger.warn(`Recovery failed for key ${key}`, { error });
-            throw error;
-        }
-        finally {
-            this.logger.info(`Completed recovery for key ${key}`);
-            this.inProgressRecoveries.delete(key);
-        }
-    };
-    /** Optionally wait before re-invoking the original operation. */
-    async maybeDelay(retry) {
-        if (retry.delayMs) {
-            this.logger.info(`Waiting for ${retry.delayMs}ms before retrying original operation`);
-            await this.sleep(retry.delayMs);
-        }
-    }
-    sleep(ms) {
-        return new Promise(resolve => setTimeout(resolve, ms));
-    }
-}
-exports.MlsRecoveryOrchestratorImpl = MlsRecoveryOrchestratorImpl;
-/**
- * Minimal default policies used by the initial integration. These can be extended over time.
- *
- * Highlights:
- * - WrongEpoch: reconcile and retry for typed ops; do not re-run for join.
- * - GroupNotEstablished: reset and re-establish; typed ops re-run once.
- * - GroupOutOfSync: add missing users and retry for typed ops.
- * - ConversationAlreadyExists (welcome): wipe local MLS state and re-run welcome once.
- * - OrphanWelcome (welcome): attempt join via external commit; do not re-run.
- */
-exports.minimalDefaultPolicies = {
-    WrongEpoch: {
-        // For join operations, recover from epoch mismatch; do not re-run original op
-        joinExternalCommit: {
-            action: RecoveryActionKind.RecoverFromEpochMismatch,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: false },
-        },
-        // For non-join operations, recover from epoch mismatch and retry original once
-        send: {
-            action: RecoveryActionKind.RecoverFromEpochMismatch,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: true },
-        },
-        addUsers: {
-            action: RecoveryActionKind.RecoverFromEpochMismatch,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: true },
-        },
-        removeUsers: {
-            action: RecoveryActionKind.RecoverFromEpochMismatch,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: true },
-        },
-        // For inbound message-add processing, fix epoch and allow normal flow to progress (no auto re-run)
-        handleMessageAdd: {
-            action: RecoveryActionKind.RecoverFromEpochMismatch,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: true },
-        },
-        keyMaterialUpdate: {
-            action: RecoveryActionKind.RecoverFromEpochMismatch,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: false },
-        },
-    },
-    // Use per-operation semantics so typed operations re-run once post-recovery
-    GroupNotEstablished: {
-        joinExternalCommit: {
-            action: RecoveryActionKind.ResetAndReestablish,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: false },
-        },
-        send: { action: RecoveryActionKind.ResetAndReestablish, retryConfig: { maxAttempts: 1, reRunOriginalOperation: true } },
-        addUsers: {
-            action: RecoveryActionKind.ResetAndReestablish,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: true },
-        },
-        removeUsers: {
-            action: RecoveryActionKind.ResetAndReestablish,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: true },
-        },
-        keyMaterialUpdate: {
-            action: RecoveryActionKind.ResetAndReestablish,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: false },
-        },
-    },
-    GroupOutOfSync: {
-        send: { action: RecoveryActionKind.AddMissingUsers, retryConfig: { maxAttempts: 1, reRunOriginalOperation: true } },
-        addUsers: { action: RecoveryActionKind.AddMissingUsers, retryConfig: { maxAttempts: 1, reRunOriginalOperation: true } },
-        removeUsers: {
-            action: RecoveryActionKind.AddMissingUsers,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: true },
-        },
-        keyMaterialUpdate: {
-            action: RecoveryActionKind.AddMissingUsers,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: false },
-        },
-    },
-    ConversationAlreadyExists: {
-        // For welcome handling, wipe local state; do not auto re-run the original callback
-        handleWelcome: {
-            action: RecoveryActionKind.WipeAndReprocessWelcome,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: true },
-        },
-    },
-    OrphanWelcome: {
-        // For orphan welcome, attempt an external commit join; no auto re-run
-        handleWelcome: {
-            action: RecoveryActionKind.JoinViaExternalCommit,
-            retryConfig: { maxAttempts: 1, reRunOriginalOperation: false },
-        },
-    },
-};

package/lib/messagingProtocols/mls/recovery/MlsRecoveryOrchestrator.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=MlsRecoveryOrchestrator.test.d.ts.map

package/lib/messagingProtocols/mls/recovery/MlsRecoveryOrchestrator.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"MlsRecoveryOrchestrator.test.d.ts","sourceRoot":"","sources":["../../../../src/messagingProtocols/mls/recovery/MlsRecoveryOrchestrator.test.ts"],"names":[],"mappings":""}