@powerhousedao/reactor 6.2.2-dev.32 → 6.2.2-dev.33

package/dist/{drive-container-types-CPQDOggp.js → drive-container-types-ZSLCC3lC.js}

@@ -425,6 +425,16 @@ function buildErrorResult(job, error, startTime) {
 		duration: Date.now() - startTime
 	};
 }
+/**
+* Whether this operation is part of the document's creation. The create and the
+* upgrade from version zero hold the first two indexes for the life of the
+* document, so a reshuffle has to leave them where they are.
+*/
+function isGenesisOperation(operation) {
+	if (operation.action.type === "CREATE_DOCUMENT") return true;
+	if (operation.action.type !== "UPGRADE_DOCUMENT") return false;
+	return operation.action.input.fromVersion === 0;
+}
 //#endregion
 //#region src/cache/lru/lru-tracker.ts
 var LRUNode = class {
@@ -1773,14 +1783,9 @@ function comparePositions(a, b) {
 	return (a.operation.id ?? "").localeCompare(b.operation.id ?? "");
 }
 /**
-* Merges the read-set streams into one sequence by position. Each stream keeps
-* its stored order; only how far to go is decided by the timestamp, so a stream
-* whose stored order disagrees with its timestamp order still applies in the
-* order it is stored.
-*
-* An operation's position in the result is the bound a decision at that
-* operation reads to: every operation before it has been applied, and it has
-* not.
+* Merges the read-set streams into one sequence by position. An operation's
+* place in the result is the bound a decision at that operation reads to: every
+* operation before it has been applied, and it has not.
 */
 function mergeByPosition(streams) {
 	const merged = [];
@@ -1791,8 +1796,9 @@ function mergeByPosition(streams) {
 	return merged.sort(comparePositions);
 }
 /**
-* For auth-related reshuffles, we may need to retract previous operations.
-* This function calculates the needed skip value.
+* The skip that retracts everything from `firstRetractedIndex` up to where the
+* re-appended operation lands. It spans the indexes rather than counting the
+* operations, because a stream with a gap in it makes those differ.
 */
 function retractionSkip(nextIndex, firstRetractedIndex) {
 	return nextIndex - firstRetractedIndex;
@@ -1836,6 +1842,7 @@ function* walkByPosition(streams) {
 			operations
 		};
 	}));
+	const byKey = new Map(streams.map((stream) => [stream.streamKey, stream]));
 	const states = new Map(streams.map((stream) => [stream.streamKey, stream.document]));
 	for (const { streamKey, operation } of merged) {
 		yield {
@@ -1844,7 +1851,7 @@ function* walkByPosition(streams) {
 			states: new Map(states)
 		};
 		if (isDenied(operation)) continue;
-		const stream = streams.find((candidate) => candidate.streamKey === streamKey);
+		const stream = byKey.get(streamKey);
 		const before = states.get(streamKey);
 		if (before === void 0 || stream === void 0) throw new Error(`No state for stream ${streamKey}`);
 		states.set(streamKey, stream.apply(before, operation));
@@ -1871,11 +1878,10 @@ function firstDeleted(candidates) {
 * and leaves the earlier ones alone. A deletion among the ones passed in does
 * the same to those after it.
 */
-async function evaluateDeletionsByPosition(documentId, scope, branch, operations, writeCache, operationStore, signal) {
-	const definition = documentDecisionModel({
-		documentId,
-		branch
-	});
+async function evaluateDeletionsByPosition(target, subject, stores, signal) {
+	const { scope, operations } = subject;
+	const { writeCache, operationStore } = stores;
+	const definition = documentDecisionModel(target);
 	const readSet = staticReadSet(definition);
 	if (!definition.evaluatesScope(scope)) return operations.map(() => void 0);
 	const evaluating = new Set(operations.map((operation) => operation.id));
@@ -1885,6 +1891,7 @@ async function evaluateDeletionsByPosition(documentId, scope, branch, operations
 	})));
 	const decidingWritten = operations.filter((operation) => canRefuseOthers(operation, readSet));
 	if (readStreams.every((read) => read.operations.length === 0) && decidingWritten.length === 0) return operations.map(() => void 0);
+	if (readStreams.length === 0) throw new Error(`Decision model for ${target.documentId} reads no stream whose query is known before it is built`);
 	const walked = [];
 	for (const read of readStreams) {
 		const before = await writeCache.getState(read.stream.query.documentId, read.stream.query.scope, read.stream.query.branch, 0, signal);
@@ -1965,25 +1972,33 @@ var DriveCollectionId = class DriveCollectionId {
 //#endregion
 //#region src/executor/document-action-handler.ts
 var DocumentActionHandler = class {
-	constructor(registry, logger, driveContainerTypes) {
+	constructor(registry, logger, driveContainerTypes, featureFlags) {
 		this.registry = registry;
 		this.logger = logger;
 		this.driveContainerTypes = driveContainerTypes;
+		this.featureFlags = featureFlags;
 	}
-	async execute(job, action, startTime, indexTxn, stores, skip = 0, sourceRemote = "", signal, alreadyEvaluated = false, deniedReason) {
-		if (deniedReason !== void 0) return this.writeDenied(job, action, startTime, indexTxn, stores, skip, sourceRemote, deniedReason, signal);
+	/** Whether the write arrives with its evaluation already decided. */
+	alreadyEvaluated(executing) {
+		return this.featureFlags.documentDecisions && executing.replayingAcceptedHistory;
+	}
+	async execute(write, executing) {
+		const { action } = write;
+		if (write.deniedReason !== void 0) return this.writeDenied(write, executing);
 		switch (action.type) {
-			case "CREATE_DOCUMENT": return this.executeCreate(job, action, startTime, indexTxn, stores, skip, sourceRemote, signal);
-			case "DELETE_DOCUMENT": return this.executeDelete(job, action, startTime, indexTxn, stores, skip, sourceRemote, signal, alreadyEvaluated);
-			case "UPGRADE_DOCUMENT": return this.executeUpgrade(job, action, startTime, indexTxn, stores, skip, sourceRemote, signal, alreadyEvaluated);
-			case "ADD_RELATIONSHIP": return this.executeAddRelationship(job, action, startTime, indexTxn, stores, sourceRemote, signal);
-			case "REMOVE_RELATIONSHIP": return this.executeRemoveRelationship(job, action, startTime, indexTxn, stores, sourceRemote, signal);
-			case "UPDATE_RELATIONSHIP": return this.executeUpdateRelationship(job, action, startTime, indexTxn, stores, sourceRemote, signal);
-			default: return buildErrorResult(job, /* @__PURE__ */ new Error(`Unknown document action type: ${action.type}`), startTime);
+			case "CREATE_DOCUMENT": return this.executeCreate(write, executing);
+			case "DELETE_DOCUMENT": return this.executeDelete(write, executing);
+			case "UPGRADE_DOCUMENT": return this.executeUpgrade(write, executing);
+			case "ADD_RELATIONSHIP": return this.executeAddRelationship(write, executing);
+			case "REMOVE_RELATIONSHIP": return this.executeRemoveRelationship(write, executing);
+			case "UPDATE_RELATIONSHIP": return this.executeUpdateRelationship(write, executing);
+			default: return buildErrorResult(executing.job, /* @__PURE__ */ new Error(`Unknown document action type: ${action.type}`), executing.startTime);
 		}
 	}
 	/** A refused operation holds a position in the stream but changes nothing. */
-	async writeDenied(job, action, startTime, indexTxn, stores, skip, sourceRemote, deniedReason, signal) {
+	async writeDenied(write, executing) {
+		const { action, skip, sourceRemote, deniedReason } = write;
+		const { job, startTime, indexTxn, stores, signal } = executing;
 		let document;
 		try {
 			document = await stores.writeCache.getState(job.documentId, job.scope, job.branch, void 0, signal);
@@ -1997,7 +2012,12 @@ var DocumentActionHandler = class {
 		});
 		operation.deniedReason = deniedReason;
 		operation.hash = hashDocumentStateForScope(document, job.scope);
-		const writeResult = await this.writeOperationToStore(job.documentId, document.header.documentType, job.scope, job.branch, operation, job, startTime, stores, signal);
+		const writeResult = await this.writeOperationToStore({
+			documentId: job.documentId,
+			documentType: document.header.documentType,
+			scope: job.scope,
+			branch: job.branch
+		}, operation, executing);
 		if (!Array.isArray(writeResult)) return writeResult;
 		operation = writeResult[0];
 		updateDocumentRevision(document, job.scope, operation.index);
@@ -2024,7 +2044,9 @@ var DocumentActionHandler = class {
 			document: document.state.document
 		}), startTime);
 	}
-	async executeCreate(job, action, startTime, indexTxn, stores, skip = 0, sourceRemote = "", signal) {
+	async executeCreate(write, executing) {
+		const { action, skip, sourceRemote } = write;
+		const { job, startTime, indexTxn, stores, signal } = executing;
 		if (job.scope !== "document") return {
 			job,
 			success: false,
@@ -2042,7 +2064,12 @@ var DocumentActionHandler = class {
 			...document.state
 		};
 		const resultingState = JSON.stringify(resultingStateObj);
-		const writeResult = await this.writeOperationToStore(document.header.id, document.header.documentType, job.scope, job.branch, operation, job, startTime, stores, signal);
+		const writeResult = await this.writeOperationToStore({
+			documentId: document.header.id,
+			documentType: document.header.documentType,
+			scope: job.scope,
+			branch: job.branch
+		}, operation, executing);
 		if (!Array.isArray(writeResult)) return writeResult;
 		operation = writeResult[0];
 		updateDocumentRevision(document, job.scope, operation.index);
@@ -2071,7 +2098,9 @@ var DocumentActionHandler = class {
 		});
 		return buildSuccessResult(job, operation, document.header.id, document.header.documentType, resultingState, startTime);
 	}
-	async executeDelete(job, action, startTime, indexTxn, stores, skip = 0, sourceRemote = "", signal, alreadyEvaluated = false) {
+	async executeDelete(write, executing) {
+		const { action, skip, sourceRemote } = write;
+		const { job, startTime, indexTxn, stores, signal } = executing;
 		const input = action.input;
 		if (!input.documentId) return buildErrorResult(job, /* @__PURE__ */ new Error("DELETE_DOCUMENT action requires a documentId in input"), startTime);
 		const documentId = input.documentId;
@@ -2082,7 +2111,7 @@ var DocumentActionHandler = class {
 			return buildErrorResult(job, /* @__PURE__ */ new Error(`Failed to fetch document before deletion: ${error instanceof Error ? error.message : String(error)}`), startTime);
 		}
 		const documentState = document.state.document;
-		if (documentState.isDeleted && !alreadyEvaluated) return buildErrorResult(job, new DocumentDeletedError(documentId, documentState.deletedAtUtcIso), startTime);
+		if (documentState.isDeleted && !this.alreadyEvaluated(executing)) return buildErrorResult(job, new DocumentDeletedError(documentId, documentState.deletedAtUtcIso), startTime);
 		let operation = createOperation(action, getNextIndexForScope(document, job.scope), skip, {
 			documentId,
 			scope: job.scope,
@@ -2094,7 +2123,12 @@ var DocumentActionHandler = class {
 			document: document.state.document
 		};
 		const resultingState = JSON.stringify(resultingStateObj);
-		const writeResult = await this.writeOperationToStore(documentId, document.header.documentType, job.scope, job.branch, operation, job, startTime, stores, signal);
+		const writeResult = await this.writeOperationToStore({
+			documentId,
+			documentType: document.header.documentType,
+			scope: job.scope,
+			branch: job.branch
+		}, operation, executing);
 		if (!Array.isArray(writeResult)) return writeResult;
 		operation = writeResult[0];
 		updateDocumentRevision(document, job.scope, operation.index);
@@ -2118,7 +2152,9 @@ var DocumentActionHandler = class {
 		});
 		return buildSuccessResult(job, operation, documentId, document.header.documentType, resultingState, startTime);
 	}
-	async executeUpgrade(job, action, startTime, indexTxn, stores, skip = 0, sourceRemote = "", signal, alreadyEvaluated = false) {
+	async executeUpgrade(write, executing) {
+		const { action, skip, sourceRemote } = write;
+		const { job, startTime, indexTxn, stores, signal } = executing;
 		const input = action.input;
 		if (!input.documentId) return buildErrorResult(job, /* @__PURE__ */ new Error("UPGRADE_DOCUMENT action requires a documentId in input"), startTime);
 		const documentId = input.documentId;
@@ -2131,7 +2167,7 @@ var DocumentActionHandler = class {
 			return buildErrorResult(job, /* @__PURE__ */ new Error(`Failed to fetch document for upgrade: ${error instanceof Error ? error.message : String(error)}`), startTime);
 		}
 		const documentState = document.state.document;
-		if (documentState.isDeleted && !alreadyEvaluated) return buildErrorResult(job, new DocumentDeletedError(documentId, documentState.deletedAtUtcIso), startTime);
+		if (documentState.isDeleted && !this.alreadyEvaluated(executing)) return buildErrorResult(job, new DocumentDeletedError(documentId, documentState.deletedAtUtcIso), startTime);
 		const nextIndex = getNextIndexForScope(document, job.scope);
 		let upgradePath;
 		if (fromVersion > 0 && fromVersion < toVersion) try {
@@ -2161,7 +2197,12 @@ var DocumentActionHandler = class {
 			...document.state
 		};
 		const resultingState = JSON.stringify(resultingStateObj);
-		const writeResult = await this.writeOperationToStore(documentId, document.header.documentType, job.scope, job.branch, operation, job, startTime, stores, signal);
+		const writeResult = await this.writeOperationToStore({
+			documentId,
+			documentType: document.header.documentType,
+			scope: job.scope,
+			branch: job.branch
+		}, operation, executing);
 		if (!Array.isArray(writeResult)) return writeResult;
 		operation = writeResult[0];
 		updateDocumentRevision(document, job.scope, operation.index);
@@ -2185,8 +2226,8 @@ var DocumentActionHandler = class {
 		});
 		return buildSuccessResult(job, operation, documentId, document.header.documentType, resultingState, startTime);
 	}
-	executeAddRelationship(job, action, startTime, indexTxn, stores, sourceRemote = "", signal) {
-		return this.withRelationshipAction("ADD_RELATIONSHIP", job, action, startTime, indexTxn, stores, sourceRemote, signal, (input) => input.sourceId === input.targetId ? /* @__PURE__ */ new Error("ADD_RELATIONSHIP: sourceId and targetId cannot be the same (self-relationships not allowed)") : null, ({ indexTxn: txn, stores: s, sourceDoc, input, job: j }) => {
+	executeAddRelationship(write, executing) {
+		return this.withRelationshipAction("ADD_RELATIONSHIP", write, executing, (input) => input.sourceId === input.targetId ? /* @__PURE__ */ new Error("ADD_RELATIONSHIP: sourceId and targetId cannot be the same (self-relationships not allowed)") : null, ({ indexTxn: txn, stores: s, sourceDoc, input, job: j }) => {
 			if (this.driveContainerTypes.has(sourceDoc.header.documentType)) {
 				const collectionId = DriveCollectionId.forDrive(input.sourceId, j.branch).key;
 				txn.addToCollection(collectionId, input.targetId);
@@ -2194,8 +2235,8 @@ var DocumentActionHandler = class {
 			}
 		});
 	}
-	executeRemoveRelationship(job, action, startTime, indexTxn, stores, sourceRemote = "", signal) {
-		return this.withRelationshipAction("REMOVE_RELATIONSHIP", job, action, startTime, indexTxn, stores, sourceRemote, signal, null, ({ indexTxn: txn, stores: s, sourceDoc, input, job: j }) => {
+	executeRemoveRelationship(write, executing) {
+		return this.withRelationshipAction("REMOVE_RELATIONSHIP", write, executing, null, ({ indexTxn: txn, stores: s, sourceDoc, input, job: j }) => {
 			if (this.driveContainerTypes.has(sourceDoc.header.documentType)) {
 				const collectionId = DriveCollectionId.forDrive(input.sourceId, j.branch).key;
 				txn.removeFromCollection(collectionId, input.targetId);
@@ -2203,10 +2244,12 @@ var DocumentActionHandler = class {
 			}
 		});
 	}
-	executeUpdateRelationship(job, action, startTime, indexTxn, stores, sourceRemote = "", signal) {
-		return this.withRelationshipAction("UPDATE_RELATIONSHIP", job, action, startTime, indexTxn, stores, sourceRemote, signal, null, null);
+	executeUpdateRelationship(write, executing) {
+		return this.withRelationshipAction("UPDATE_RELATIONSHIP", write, executing, null, null);
 	}
-	async withRelationshipAction(actionTypeName, job, action, startTime, indexTxn, stores, sourceRemote, signal, preValidate, postWrite) {
+	async withRelationshipAction(actionTypeName, write, executing, preValidate, postWrite) {
+		const { action, skip, sourceRemote } = write;
+		const { job, startTime, indexTxn, stores, signal } = executing;
 		if (job.scope !== "document") return buildErrorResult(job, /* @__PURE__ */ new Error(`${actionTypeName} must be in "document" scope, got "${job.scope}"`), startTime);
 		const input = action.input;
 		if (!input.sourceId || !input.targetId || !input.relationshipType) return buildErrorResult(job, /* @__PURE__ */ new Error(`${actionTypeName} action requires sourceId, targetId, and relationshipType in input`), startTime);
@@ -2220,12 +2263,17 @@ var DocumentActionHandler = class {
 		} catch (error) {
 			return buildErrorResult(job, /* @__PURE__ */ new Error(`${actionTypeName}: source document ${input.sourceId} not found: ${error instanceof Error ? error.message : String(error)}`), startTime);
 		}
-		let operation = createOperation(action, getNextIndexForScope(sourceDoc, job.scope), 0, {
+		let operation = createOperation(action, getNextIndexForScope(sourceDoc, job.scope), skip, {
 			documentId: input.sourceId,
 			scope: job.scope,
 			branch: job.branch
 		});
-		const writeResult = await this.writeOperationToStore(input.sourceId, sourceDoc.header.documentType, job.scope, job.branch, operation, job, startTime, stores, signal);
+		const writeResult = await this.writeOperationToStore({
+			documentId: input.sourceId,
+			documentType: sourceDoc.header.documentType,
+			scope: job.scope,
+			branch: job.branch
+		}, operation, executing);
 		if (!Array.isArray(writeResult)) return writeResult;
 		operation = writeResult[0];
 		sourceDoc.header.lastModifiedAtUtcIso = operation.timestampUtcMs || (/* @__PURE__ */ new Date()).toISOString();
@@ -2263,7 +2311,9 @@ var DocumentActionHandler = class {
 		});
 		return buildSuccessResult(job, operation, input.sourceId, sourceDoc.header.documentType, resultingState, startTime);
 	}
-	async writeOperationToStore(documentId, documentType, scope, branch, operation, job, startTime, stores, signal) {
+	async writeOperationToStore(target, operation, executing) {
+		const { documentId, documentType, scope, branch } = target;
+		const { job, startTime, stores, signal } = executing;
 		let storedOperations;
 		try {
 			storedOperations = await stores.operationStore.apply(documentId, documentType, scope, branch, operation.index, (txn) => {
@@ -2379,7 +2429,7 @@ var SimpleJobExecutor = class {
 		};
 		this.featureFlags = { documentDecisions: config.featureFlags?.documentDecisions ?? false };
 		this.signatureVerifierModule = new SignatureVerifier(signatureVerifier);
-		this.documentActionHandler = new DocumentActionHandler(registry, logger, driveContainerTypes);
+		this.documentActionHandler = new DocumentActionHandler(registry, logger, driveContainerTypes, this.featureFlags);
 		this.executionScope = executionScope ?? new DefaultExecutionScope(operationStore, operationIndex, writeCache, documentMetaCache, collectionMembershipCache);
 	}
 	/**
@@ -2395,7 +2445,14 @@ var SimpleJobExecutor = class {
 			result = await this.executionScope.run(async (stores) => {
 				const indexTxn = stores.operationIndex.start();
 				if (job.kind === "load") {
-					const loadResult = await this.executeLoadJob(job, startTime, indexTxn, stores, signal);
+					const loadResult = await this.executeLoadJob({
+						job,
+						startTime,
+						indexTxn,
+						stores,
+						signal,
+						replayingAcceptedHistory: true
+					});
 					if (loadResult.success && loadResult.operationsWithContext) {
 						for (const owc of loadResult.operationsWithContext) touchedCacheEntries.push({
 							documentId: owc.context.documentId,
@@ -2414,7 +2471,20 @@ var SimpleJobExecutor = class {
 					}
 					return loadResult;
 				}
-				const actionResult = await this.processActions(job, job.actions, startTime, indexTxn, stores, void 0, void 0, "", signal);
+				const executing = {
+					job,
+					startTime,
+					indexTxn,
+					stores,
+					signal,
+					replayingAcceptedHistory: false
+				};
+				const positioned = await this.positionByTimestamp(job, stores, signal);
+				const actionResult = await this.processActions(positioned.actions.map((action, i) => ({
+					action,
+					skip: positioned.skipValues?.[i] ?? 0,
+					sourceRemote: ""
+				})), executing);
 				if (!actionResult.success) return {
 					job,
 					success: false,
@@ -2429,13 +2499,7 @@ var SimpleJobExecutor = class {
 				const reevaluationError = await this.reevaluateIfCriteriaMet({
 					scope: job.scope,
 					operations: actionResult.generatedOperations
-				}, {
-					job,
-					startTime,
-					indexTxn,
-					stores,
-					signal
-				});
+				}, executing);
 				if (reevaluationError) return {
 					job,
 					success: false,
@@ -2477,7 +2541,9 @@ var SimpleJobExecutor = class {
 		const documentIds = [...new Set(operations.map((op) => op.context.documentId))];
 		return stores.collectionMembershipCache.getCollectionsForDocuments(documentIds);
 	}
-	async processActions(job, actions, startTime, indexTxn, stores, skipValues, sourceOperations, sourceRemote = "", signal, deniedReasons) {
+	async processActions(writes, executing) {
+		const { job, signal } = executing;
+		const actions = writes.map((write) => write.action);
 		const generatedOperations = [];
 		const operationsWithContext = [];
 		try {
@@ -2497,13 +2563,8 @@ var SimpleJobExecutor = class {
 			error: /* @__PURE__ */ new Error(`Invalid timestamp "${action.timestampUtcMs}" on action ${action.type} (id: ${action.id})`)
 		};
 		let lastYield = performance.now();
-		const replayingAcceptedHistory = job.kind === "load" || deniedReasons !== void 0;
-		for (let actionIndex = 0; actionIndex < actions.length; actionIndex++) {
-			const action = actions[actionIndex];
-			const skip = skipValues?.[actionIndex] ?? 0;
-			const sourceOperation = sourceOperations?.[actionIndex];
-			const deniedReason = deniedReasons?.[actionIndex];
-			const result = documentScopeActions.includes(action.type) ? await this.documentActionHandler.execute(job, action, startTime, indexTxn, stores, skip, sourceRemote, signal, this.featureFlags.documentDecisions && replayingAcceptedHistory, deniedReason) : await this.executeRegularAction(job, action, startTime, indexTxn, stores, skip, sourceOperation, sourceRemote, signal, deniedReason, replayingAcceptedHistory);
+		for (const write of writes) {
+			const result = documentScopeActions.includes(write.action.type) ? await this.documentActionHandler.execute(write, executing) : await this.executeRegularAction(write, executing);
 			const error = this.accumulateResultOrReturnError(result, generatedOperations, operationsWithContext);
 			if (error !== null) return {
 				success: false,
@@ -2528,10 +2589,12 @@ var SimpleJobExecutor = class {
 			operationsWithContext
 		};
 	}
-	async executeRegularAction(job, action, startTime, indexTxn, stores, skip = 0, sourceOperation, sourceRemote = "", signal, deniedReason, replayingAcceptedHistory = false) {
+	async executeRegularAction(write, executing) {
+		const { action, skip, sourceOperation, sourceRemote, deniedReason } = write;
+		const { job, startTime, indexTxn, stores, signal } = executing;
 		let appendCondition;
 		let documentVersion;
-		const alreadyEvaluated = this.featureFlags.documentDecisions && replayingAcceptedHistory;
+		const alreadyEvaluated = this.featureFlags.documentDecisions && executing.replayingAcceptedHistory;
 		if (this.featureFlags.documentDecisions && !alreadyEvaluated) {
 			const target = {
 				documentId: job.documentId,
@@ -2572,10 +2635,10 @@ var SimpleJobExecutor = class {
 		} catch (error) {
 			return buildErrorResult(job, error instanceof Error ? error : new Error(String(error)), startTime);
 		}
-		if (!replayingAcceptedHistory) {
+		if (!executing.replayingAcceptedHistory) {
 			const subject = {
-				address: action.context?.signer?.user.address,
-				key: action.context?.signer?.app.key
+				address: write.action.context?.signer?.user.address,
+				key: write.action.context?.signer?.app.key
 			};
 			if (decide(document.state.auth, subject, {
 				verb: "execute",
@@ -2690,6 +2753,41 @@ var SimpleJobExecutor = class {
 		};
 	}
 	/**
+	* Orders a write by timestamp. The caller supplies the timestamp, so a write
+	* can belong before operations already stored, and appending it at the tail
+	* would leave the scope out of order. The operations it belongs before are
+	* re-appended alongside it, the way a load reshuffles.
+	*/
+	async positionByTimestamp(job, stores, signal) {
+		if (!this.featureFlags.documentDecisions || job.actions.length === 0) return { actions: job.actions };
+		let earliest = job.actions[0].timestampUtcMs;
+		for (const action of job.actions) if (action.timestampUtcMs < earliest) earliest = action.timestampUtcMs;
+		const revisions = await stores.operationStore.getRevisions(job.documentId, job.branch, signal);
+		if (earliest >= revisions.latestTimestamp) return { actions: job.actions };
+		const conflicting = (await stores.operationStore.getConflicting(job.documentId, job.scope, job.branch, earliest, void 0, signal)).results.filter((operation) => !isGenesisOperation(operation));
+		if (conflicting.length === 0) return { actions: job.actions };
+		const nextIndex = revisions.revision[job.scope] ?? 0;
+		let firstConflicting = conflicting[0].index;
+		for (const operation of conflicting) if (operation.index < firstConflicting) firstConflicting = operation.index;
+		const incoming = job.actions.map((action, i) => ({
+			id: action.id,
+			index: nextIndex + i,
+			skip: 0,
+			hash: "",
+			timestampUtcMs: action.timestampUtcMs,
+			action
+		}));
+		const merged = reshuffleByTimestamp({
+			index: nextIndex,
+			skip: retractionSkip(nextIndex, firstConflicting)
+		}, conflicting, incoming);
+		stores.writeCache.invalidate(job.documentId, job.scope, job.branch);
+		return {
+			actions: merged.map((operation) => operation.action),
+			skipValues: merged.map((operation) => operation.skip)
+		};
+	}
+	/**
 	* Re-evaluates the document when a write meets both criteria: it was written
 	* to a stream the model reads, and it is timestamped before an operation
 	* already stored. The caller supplies the timestamp and the reactor does not replace
@@ -2714,7 +2812,7 @@ var SimpleJobExecutor = class {
 	* re-appended, carrying a skip that spans the indices it supersedes.
 	*/
 	async reevaluateDocument(executing) {
-		const { job, startTime, indexTxn, stores, signal } = executing;
+		const { job, stores, signal } = executing;
 		const definition = documentDecisionModel({
 			documentId: job.documentId,
 			branch: job.branch
@@ -2725,20 +2823,36 @@ var SimpleJobExecutor = class {
 			const stored = (await stores.operationStore.getSince(job.documentId, scope, job.branch, -1, void 0, void 0, signal)).results;
 			const effective = garbageCollect(sortOperations([...stored]));
 			if (effective.length === 0) continue;
-			const reevaluated = await evaluateDeletionsByPosition(job.documentId, scope, job.branch, effective, stores.writeCache, stores.operationStore, signal);
+			const reevaluated = await evaluateDeletionsByPosition({
+				documentId: job.documentId,
+				branch: job.branch
+			}, {
+				scope,
+				operations: effective
+			}, stores, signal);
 			const firstChange = effective.findIndex((operation, i) => operation.deniedReason !== reevaluated[i]);
 			if (firstChange === -1) continue;
 			const tail = effective.slice(firstChange);
 			const nextIndex = revisions.revision[scope];
 			stores.writeCache.invalidate(job.documentId, scope, job.branch);
-			const result = await this.processActions({
-				...job,
-				scope
-			}, tail.map((operation) => operation.action), startTime, indexTxn, stores, tail.map((_, i) => i === 0 ? retractionSkip(nextIndex, tail[0].index) : 0), void 0, "", signal, reevaluated.slice(firstChange));
+			const result = await this.processActions(tail.map((operation, i) => ({
+				action: operation.action,
+				skip: i === 0 ? retractionSkip(nextIndex, tail[0].index) : 0,
+				sourceRemote: "",
+				deniedReason: reevaluated[firstChange + i]
+			})), {
+				...executing,
+				job: {
+					...job,
+					scope
+				},
+				replayingAcceptedHistory: true
+			});
 			if (!result.success) return result.error ?? /* @__PURE__ */ new Error(`Re-evaluation of ${job.documentId} ${scope} failed`);
 		}
 	}
-	async executeLoadJob(job, startTime, indexTxn, stores, signal) {
+	async executeLoadJob(executing) {
+		const { job, startTime, indexTxn, stores, signal } = executing;
 		if (job.operations.length === 0) return buildErrorResult(job, /* @__PURE__ */ new Error("Load job must include at least one operation"), startTime);
 		let docMeta;
 		try {
@@ -2788,7 +2902,7 @@ var SimpleJobExecutor = class {
 			}
 			return true;
 		});
-		const existingOpsToReshuffle = nonSupersededOps;
+		const existingOpsToReshuffle = nonSupersededOps.filter((operation) => !isGenesisOperation(operation));
 		if (existingOpsToReshuffle.length > this.config.maxSkipThreshold) return {
 			job,
 			success: false,
@@ -2831,11 +2945,15 @@ var SimpleJobExecutor = class {
 			id: operation.id
 		})));
 		for (const operation of reshuffledOperations) if (operation.action.type === "NOOP") operation.skip = 1;
-		const actions = reshuffledOperations.map((operation) => operation.action);
-		const skipValues = reshuffledOperations.map((operation) => operation.skip);
 		let deniedReasons;
 		if (this.featureFlags.documentDecisions) try {
-			deniedReasons = await evaluateDeletionsByPosition(job.documentId, scope, job.branch, reshuffledOperations, stores.writeCache, stores.operationStore, signal);
+			deniedReasons = await evaluateDeletionsByPosition({
+				documentId: job.documentId,
+				branch: job.branch
+			}, {
+				scope,
+				operations: reshuffledOperations
+			}, stores, signal);
 		} catch (error) {
 			return {
 				job,
@@ -2845,7 +2963,13 @@ var SimpleJobExecutor = class {
 			};
 		}
 		const effectiveSourceRemote = skipCount > 0 ? "" : job.meta.sourceRemote || "";
-		const result = await this.processActions(job, actions, startTime, indexTxn, stores, skipValues, reshuffledOperations, effectiveSourceRemote, signal, deniedReasons);
+		const result = await this.processActions(reshuffledOperations.map((operation, i) => ({
+			action: operation.action,
+			skip: operation.skip,
+			sourceOperation: operation,
+			sourceRemote: effectiveSourceRemote,
+			deniedReason: deniedReasons?.[i]
+		})), executing);
 		if (!result.success) return {
 			job,
 			success: false,
@@ -2857,13 +2981,7 @@ var SimpleJobExecutor = class {
 		const reevaluationError = await this.reevaluateIfCriteriaMet({
 			scope,
 			operations: result.generatedOperations
-		}, {
-			job,
-			startTime,
-			indexTxn,
-			stores,
-			signal
-		});
+		}, executing);
 		if (reevaluationError) return {
 			job,
 			success: false,
@@ -3374,16 +3492,12 @@ var KyselyOperationStore = class KyselyOperationStore {
 			"o1.index",
 			"o1.timestampUtcMs"
 		]).where("o1.documentId", "=", documentId).where("o1.branch", "=", branch).where((eb) => eb("o1.index", "=", eb.selectFrom("Operation as o2").select((eb2) => eb2.fn.max("o2.index").as("maxIndex")).where("o2.documentId", "=", eb.ref("o1.documentId")).where("o2.branch", "=", eb.ref("o1.branch")).where("o2.scope", "=", eb.ref("o1.scope")))).execute();
+		const latest = await this.queryExecutor.selectFrom("Operation").select((eb) => eb.fn.max("timestampUtcMs").as("latestTimestamp")).where("documentId", "=", documentId).where("branch", "=", branch).executeTakeFirst();
 		const revision = {};
-		let latestTimestamp = (/* @__PURE__ */ new Date(0)).toISOString();
-		for (const row of scopeRevisions) {
-			revision[row.scope] = row.index + 1;
-			const timestamp = row.timestampUtcMs.toISOString();
-			if (timestamp > latestTimestamp) latestTimestamp = timestamp;
-		}
+		for (const row of scopeRevisions) revision[row.scope] = row.index + 1;
 		return {
 			revision,
-			latestTimestamp
+			latestTimestamp: latest?.latestTimestamp ? new Date(latest.latestTimestamp).toISOString() : (/* @__PURE__ */ new Date(0)).toISOString()
 		};
 	}
 	rowToOperation(row) {
@@ -3730,4 +3844,4 @@ const DEFAULT_DRIVE_CONTAINER_TYPES = new Set(["powerhouse/document-drive", "pow
 //#endregion
 export { AuthorizationDeniedError as A, DuplicateOperationError as C, DuplicateModuleError as D, DuplicateManifestError as E, throwIfAborted as F, __exportAll as I, DocumentNotFoundError as M, matchesScope as N, InvalidModuleError as O, parsePagingOptions as P, AppendConditionFailedError as S, RevisionMismatchError as T, DocumentMetaCache as _, createForwardingPoolInstrumentation as a, CollectionMembershipCache as b, KyselyKeyframeStore as c, DriveCollectionId as d, buildDecisionModel as f, KyselyOperationIndex as g, KyselyWriteCache as h, runMigrations as i, DocumentDeletedError as j, ModuleNotFoundError as k, DocumentModelRegistry as l, EventBus as m, REACTOR_SCHEMA as n, instrumentPgPool as o, KyselyExecutionScope as p, getMigrationStatus as r, KyselyOperationStore as s, DEFAULT_DRIVE_CONTAINER_TYPES as t, SimpleJobExecutor as u, createConsistencyToken as v, OptimisticLockError as w, APPEND_CONDITION_FAILED_PREFIX as x, createEmptyConsistencyToken as y };
 
-//# sourceMappingURL=drive-container-types-CPQDOggp.js.map
+//# sourceMappingURL=drive-container-types-ZSLCC3lC.js.map