@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/workflows/container-contents/remoteContainerState.js

@@ -0,0 +1,260 @@
+import { heldContainerBinding, listingRepeatsHeldOrdinaryBinding, } from "../../data/containers/containerBinding.js";
+import { isKeyingVerificationError, runWithSecurityIncidentReporting, } from "../../data/keyingProjectionVerification/error.js";
+import { installContainerMetadataRecord } from "./metadataPersistence.js";
+import { projectionGeneration } from "./projectionGeneration.js";
+import { moveIndexedContainerChild, removeIndexedContainerChild, } from "./remoteHydration/childIndex.js";
+import { rebindReHomedContainer } from "./remoteHydration/heldContainerRebind.js";
+import { insertRemoteContainerState } from "./remoteHydration/insertRemoteContainer.js";
+import { reconcileLocalOnlyRootContainers, reconcileLocalOnlySystemContainers, } from "./remoteHydration/reconciliation.js";
+import { applyRemoteContainerTimestamps, remoteContainerHydrationSaveOptions, resolveRemoteContainerHydrationLocalUpdatedAt, } from "./remoteHydration/remoteContainerTimestamps.js";
+import { verifyRemoteContainerDestination } from "./remoteHydration/verifiedDestination.js";
+// Container ids (restricted to the inbound page) that carry an unsynced local
+// create or move intent. Such a container's parent and local-edit timestamp are
+// owned by its structural-intent lane until that lane reconciles, so inbound
+// hydration must not revert parentId to the server value nor collapse
+// localUpdatedAt — doing so silently undoes a queued move and falsely reads
+// "synced". Move intents are read via listUnsyncedMoveIntents so a blocked
+// move — one whose destination parent has not synced yet, the common boot-time
+// case — is protected too. Pending *metadata*
+// updates are handled separately (listRemoteContainerIdsWithPendingMetadataUpdates);
+// these live in dedicated create/move intent tables that that query does not cover.
+export async function listRemoteContainerIdsWithPendingStructuralIntents(input) {
+    if (input.remoteContainers.length === 0) {
+        return new Set();
+    }
+    const remoteContainerIds = new Set(input.remoteContainers.map((remoteContainer) => remoteContainer.id));
+    const execSql = input.state.runtime.infra.execSql;
+    const [pendingCreateIntents, unsyncedMoveIntents] = await Promise.all([
+        input.state.persistence.listPendingCreateIntents(execSql),
+        input.state.persistence.listUnsyncedMoveIntents(execSql),
+    ]);
+    const containerIdsWithPendingStructuralIntents = new Set();
+    for (const intent of pendingCreateIntents) {
+        if (remoteContainerIds.has(intent.containerId)) {
+            containerIdsWithPendingStructuralIntents.add(intent.containerId);
+        }
+    }
+    for (const intent of unsyncedMoveIntents) {
+        if (remoteContainerIds.has(intent.containerId)) {
+            containerIdsWithPendingStructuralIntents.add(intent.containerId);
+        }
+    }
+    return containerIdsWithPendingStructuralIntents;
+}
+export async function listRemoteContainerIdsWithPendingMetadataUpdates(input) {
+    const containerIds = input.remoteContainers.flatMap((remoteContainer) => {
+        const previousLocalUpdatedAt = input.state.containersById.get(remoteContainer.id)?.container.localUpdatedAt;
+        return previousLocalUpdatedAt &&
+            previousLocalUpdatedAt.localeCompare(remoteContainer.updatedAt) > 0
+            ? [remoteContainer.id]
+            : [];
+    });
+    if (containerIds.length === 0) {
+        return new Set();
+    }
+    const execSql = input.state.runtime.infra.execSql;
+    return new Set(await input.state.persistence.listContainerIdsWithPendingUpdates(execSql, containerIds));
+}
+function removeMissingHydratedContainer(input) {
+    const { existingState, remoteContainer, state } = input;
+    if (state.containersById.get(remoteContainer.id) !== existingState) {
+        return;
+    }
+    state.containersById.delete(remoteContainer.id);
+    if (input.childIdsByParentId) {
+        removeIndexedContainerChild(input.childIdsByParentId, remoteContainer.id, input.previousParentId);
+        input.childIdsByParentId.delete(remoteContainer.id);
+    }
+    input.host.updateSnapshot();
+}
+function createUpdatedRemoteContainerState(existingState, remoteContainer) {
+    return {
+        ...existingState,
+        container: applyRemoteContainerTimestamps(existingState.container, remoteContainer),
+        containerWriterProjection: null,
+        metadataReferencedPrincipals: remoteContainer.metadataReferencedPrincipals,
+    };
+}
+function installUpdatedRemoteContainerState(existingState, nextState, host) {
+    const wasLocalOnly = existingState.container.serverCreatedAt == null;
+    existingState.container = nextState.container;
+    existingState.containerWriterProjection = nextState.containerWriterProjection;
+    existingState.metadataReferencedPrincipals =
+        nextState.metadataReferencedPrincipals;
+    // The snapshot copied the live generation when it was taken; a hint that
+    // landed during the persist leaves the live metadata projection dropped.
+    if (projectionGeneration(existingState) === projectionGeneration(nextState))
+        existingState.metadataWriterProjection = nextState.metadataWriterProjection;
+    installContainerMetadataRecord(existingState, nextState.record);
+    // A document pass may have deferred while this root was awaiting proof.
+    // The first durable remote acknowledgement makes its pending creates runnable.
+    if (wasLocalOnly && existingState.container.serverCreatedAt != null)
+        host.requestDocumentPriming?.();
+}
+async function updateExistingRemoteContainerState(input) {
+    const { childIdsByParentId, existingState, host, remoteContainer, state } = input;
+    const previousParentId = existingState.container.parentId;
+    const previousLocalUpdatedAt = existingState.container.localUpdatedAt;
+    // A queued, not-yet-synced local move/create owns this container's parent
+    // until its intent lane reconciles. Omit the remote parent when the page scan
+    // saw one; persistence also rechecks the intent transactionally so a move
+    // created after that scan wins. Both paths preserve the durable local clock.
+    const hasPendingStructuralIntent = input.containerIdsWithPendingStructuralIntents.has(remoteContainer.id);
+    const nextParentId = hasPendingStructuralIntent
+        ? undefined
+        : remoteContainer.parentId;
+    const localUpdatedAt = resolveRemoteContainerHydrationLocalUpdatedAt({
+        containerIdsWithPendingMetadataUpdates: input.containerIdsWithPendingMetadataUpdates,
+        hasPendingStructuralIntent,
+        previousLocalUpdatedAt,
+        remoteContainer,
+    });
+    const nextState = createUpdatedRemoteContainerState(existingState, remoteContainer);
+    const persistenceResult = await host.persistContainerState(nextState, {
+        accessEpoch: remoteContainer.metadataAccessEpoch,
+        accessStateHash: remoteContainer.metadataAccessStateHash,
+        documentId: remoteContainer.metadataDocumentId,
+        effectiveAccessLevel: remoteContainer.effectiveAccessLevel,
+        metadataDocumentId: remoteContainer.metadataDocumentId,
+        systemSlot: remoteContainer.systemSlot ?? null,
+        organizationId: remoteContainer.organizationId,
+        ...(nextParentId !== undefined ? { parentId: nextParentId } : {}),
+    }, false, remoteContainerHydrationSaveOptions({
+        localUpdatedAt,
+        remoteContainer,
+    }), {
+        preserveDurableStructureWhenPending: true,
+    });
+    if (persistenceResult.status === "missing") {
+        // Hydration persists a detached candidate so an in-flight response cannot
+        // mutate mapped state before its guards settle. Retire the exact state this
+        // hydration read because store-level reference cleanup cannot see the clone.
+        removeMissingHydratedContainer({
+            childIdsByParentId,
+            existingState,
+            host,
+            previousParentId,
+            remoteContainer,
+            state,
+        });
+        return null;
+    }
+    if (persistenceResult.status !== "persisted")
+        return null;
+    const { record: nextRecord } = persistenceResult;
+    installContainerMetadataRecord(nextState, nextRecord);
+    if (input.isCurrent?.() === false) {
+        return existingState;
+    }
+    nextState.container = {
+        ...nextState.container,
+        metadataDocumentId: remoteContainer.metadataDocumentId,
+        organizationId: remoteContainer.organizationId,
+        parentId: nextState.container.parentId,
+    };
+    installUpdatedRemoteContainerState(existingState, nextState, host);
+    moveIndexedContainerChild(childIdsByParentId, remoteContainer.id, previousParentId, existingState.container.parentId);
+    await reconcileLocalOnlyRootContainers({
+        childIdsByParentId,
+        isCurrent: input.isCurrent,
+        remoteRootState: existingState,
+        requestDocumentPriming: host.requestDocumentPriming,
+        state,
+    });
+    return existingState;
+}
+export async function upsertRemoteContainerState(input) {
+    let expectedPlacementCheckpoint;
+    const heldState = input.state.containersById.get(input.remoteContainer.id);
+    const heldBinding = heldState
+        ? heldContainerBinding(heldState)
+        : await input.state.persistence.loadHeldContainerBinding(input.state.runtime.infra.execSql, input.remoteContainer.id);
+    const listed = input.remoteContainer;
+    // A folder re-homed away from the listed organization never returns there,
+    // whatever binding (possibly none, after a reset) the device holds now.
+    const supersededListing = !listingRepeatsHeldOrdinaryBinding(heldBinding, listed) &&
+        (await input.state.persistence.isSupersededContainerBinding(input.state.runtime.infra.execSql, { containerId: listed.id, organizationId: listed.organizationId }));
+    if (input.isCurrent?.() === false)
+        return null;
+    const verified = await verifyRemoteContainerDestination({
+        ...input,
+        heldBinding,
+        supersededListing,
+        refresh: !!input.expectedHydrationTombstone,
+        onVerifiedCheckpoint: (checkpoint) => {
+            expectedPlacementCheckpoint = checkpoint;
+        },
+    });
+    if (!verified || input.isCurrent?.() === false)
+        return null;
+    input = { ...input, remoteContainer: verified };
+    const existingState = input.state.containersById.get(input.remoteContainer.id);
+    const remoteState = await runWithSecurityIncidentReporting(input.state.runtime.util.reportSecurityIncident, {
+        objectId: verified.id,
+        objectKind: "container",
+        operation: "container.binding.persist",
+        organizationId: verified.organizationId,
+    }, async () => (await rebindReHomedContainer({
+        existingState,
+        heldBinding,
+        isCurrent: input.isCurrent,
+        state: input.state,
+        verified,
+    }))
+        ? persistVerifiedRemoteContainer({
+            ...input,
+            existingState,
+            expectedPlacementCheckpoint,
+        })
+        : null);
+    if (!remoteState) {
+        return null;
+    }
+    await reconcileLocalOnlySystemContainers({
+        childIdsByParentId: input.childIdsByParentId,
+        isCurrent: input.isCurrent,
+        requestDocumentPriming: input.host.requestDocumentPriming,
+        remoteSystemState: remoteState,
+        state: input.state,
+    });
+    return remoteState;
+}
+/**
+ * Upsert one listed folder, isolating a rejected proof or binding. The refusal
+ * was already reported; returning no state leaves the item unapplied without
+ * blocking independent folders.
+ */
+export async function upsertIsolatedRemoteContainerState(input) {
+    try {
+        return await upsertRemoteContainerState(input);
+    }
+    catch (error) {
+        if (!isKeyingVerificationError(error))
+            throw error;
+        return null;
+    }
+}
+function persistVerifiedRemoteContainer(input) {
+    const { existingState, expectedPlacementCheckpoint } = input;
+    return existingState
+        ? updateExistingRemoteContainerState({
+            childIdsByParentId: input.childIdsByParentId,
+            containerIdsWithPendingMetadataUpdates: input.containerIdsWithPendingMetadataUpdates,
+            containerIdsWithPendingStructuralIntents: input.containerIdsWithPendingStructuralIntents,
+            existingState,
+            host: input.host,
+            isCurrent: input.isCurrent,
+            remoteContainer: input.remoteContainer,
+            state: input.state,
+        })
+        : insertRemoteContainerState({
+            childIdsByParentId: input.childIdsByParentId,
+            host: input.host,
+            expectedHydrationTombstone: input.expectedHydrationTombstone ?? null,
+            expectedPlacementCheckpoint,
+            isCurrent: input.isCurrent,
+            remoteContainer: input.remoteContainer,
+            state: input.state,
+        });
+}
+//# sourceMappingURL=remoteContainerState.js.map

package/workflows/container-contents/remoteContainerState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteContainerState.js","sourceRoot":"","sources":["remoteContainerState.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,iCAAiC,GAClC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,+CAA+C,CAAC;AAEvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EACL,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EACL,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,mCAAmC,EACnC,6CAA6C,GAC9C,MAAM,6CAA6C,CAAC;AAQrD,OAAO,EAAE,gCAAgC,EAAE,MAAM,uCAAuC,CAAC;AAEzF,8EAA8E;AAC9E,gFAAgF;AAChF,6EAA6E;AAC7E,sEAAsE;AACtE,4EAA4E;AAC5E,2EAA2E;AAC3E,+EAA+E;AAC/E,8CAA8C;AAC9C,qFAAqF;AACrF,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,kDAAkD,CAAC,KAGxE;IACC,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CACpE,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAClD,MAAM,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,wBAAwB,CAAC,OAAO,CAAC;QACzD,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,uBAAuB,CAAC,OAAO,CAAC;KACzD,CAAC,CAAC;IACH,MAAM,wCAAwC,GAAG,IAAI,GAAG,EAAU,CAAC;IACnE,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;QAC1C,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,wCAAwC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACzC,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,wCAAwC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,OAAO,wCAAwC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gDAAgD,CAAC,KAGtE;IACC,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,EAAE;QACtE,MAAM,sBAAsB,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAC3D,eAAe,CAAC,EAAE,CACnB,EAAE,SAAS,CAAC,cAAc,CAAC;QAE5B,OAAO,sBAAsB;YAC3B,sBAAsB,CAAC,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC;YACnE,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC;YACtB,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAClD,OAAO,IAAI,GAAG,CACZ,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,kCAAkC,CAC9D,OAAO,EACP,YAAY,CACb,CACF,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,KAOvC;IACC,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,aAAa,EAAE,CAAC;QACnE,OAAO;IACT,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,2BAA2B,CACzB,KAAK,CAAC,kBAAkB,EACxB,eAAe,CAAC,EAAE,EAClB,KAAK,CAAC,gBAAgB,CACvB,CAAC;QACF,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,iCAAiC,CACxC,aAA6B,EAC7B,eAAgC;IAEhC,OAAO;QACL,GAAG,aAAa;QAChB,SAAS,EAAE,8BAA8B,CACvC,aAAa,CAAC,SAAS,EACvB,eAAe,CAChB;QACD,yBAAyB,EAAE,IAAI;QAC/B,4BAA4B,EAAE,eAAe,CAAC,4BAA4B;KAC3E,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CACzC,aAA6B,EAC7B,SAAyB,EACzB,IAAkC;IAElC,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,CAAC,eAAe,IAAI,IAAI,CAAC;IACrE,aAAa,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;IAC9C,aAAa,CAAC,yBAAyB,GAAG,SAAS,CAAC,yBAAyB,CAAC;IAC9E,aAAa,CAAC,4BAA4B;QACxC,SAAS,CAAC,4BAA4B,CAAC;IACzC,yEAAyE;IACzE,yEAAyE;IACzE,IAAI,oBAAoB,CAAC,aAAa,CAAC,KAAK,oBAAoB,CAAC,SAAS,CAAC;QACzE,aAAa,CAAC,wBAAwB,GAAG,SAAS,CAAC,wBAAwB,CAAC;IAC9E,8BAA8B,CAAC,aAAa,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAChE,wEAAwE;IACxE,+EAA+E;IAC/E,IAAI,YAAY,IAAI,aAAa,CAAC,SAAS,CAAC,eAAe,IAAI,IAAI;QACjE,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,kCAAkC,CAAC,KASjD;IACC,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,GACvE,KAAK,CAAC;IACR,MAAM,gBAAgB,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC;IAC1D,MAAM,sBAAsB,GAAG,aAAa,CAAC,SAAS,CAAC,cAAc,CAAC;IACtE,0EAA0E;IAC1E,8EAA8E;IAC9E,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,0BAA0B,GAC9B,KAAK,CAAC,wCAAwC,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,0BAA0B;QAC7C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC;IAC7B,MAAM,cAAc,GAAG,6CAA6C,CAAC;QACnE,sCAAsC,EACpC,KAAK,CAAC,sCAAsC;QAC9C,0BAA0B;QAC1B,sBAAsB;QACtB,eAAe;KAChB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,iCAAiC,CACjD,aAAa,EACb,eAAe,CAChB,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CACxD,SAAS,EACT;QACE,WAAW,EAAE,eAAe,CAAC,mBAAmB;QAChD,eAAe,EAAE,eAAe,CAAC,uBAAuB;QACxD,UAAU,EAAE,eAAe,CAAC,kBAAkB;QAC9C,oBAAoB,EAAE,eAAe,CAAC,oBAAoB;QAC1D,kBAAkB,EAAE,eAAe,CAAC,kBAAkB;QACtD,UAAU,EAAE,eAAe,CAAC,UAAU,IAAI,IAAI;QAC9C,cAAc,EAAE,eAAe,CAAC,cAAc;QAC9C,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,EACD,KAAK,EACL,mCAAmC,CAAC;QAClC,cAAc;QACd,eAAe;KAChB,CAAC,EACF;QACE,mCAAmC,EAAE,IAAI;KAC1C,CACF,CAAC;IACF,IAAI,iBAAiB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3C,0EAA0E;QAC1E,4EAA4E;QAC5E,6EAA6E;QAC7E,8BAA8B,CAAC;YAC7B,kBAAkB;YAClB,aAAa;YACb,IAAI;YACJ,gBAAgB;YAChB,eAAe;YACf,KAAK;SACN,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,iBAAiB,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC;IACjD,8BAA8B,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,SAAS,CAAC,SAAS,GAAG;QACpB,GAAG,SAAS,CAAC,SAAS;QACtB,kBAAkB,EAAE,eAAe,CAAC,kBAAkB;QACtD,cAAc,EAAE,eAAe,CAAC,cAAc;QAC9C,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ;KACvC,CAAC;IAEF,kCAAkC,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACnE,yBAAyB,CACvB,kBAAkB,EAClB,eAAe,CAAC,EAAE,EAClB,gBAAgB,EAChB,aAAa,CAAC,SAAS,CAAC,QAAQ,CACjC,CAAC;IACF,MAAM,gCAAgC,CAAC;QACrC,kBAAkB;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,aAAa;QAC9B,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,KAAK;KACN,CAAC,CAAC;IACH,OAAO,aAAa,CAAC;AACvB,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAsC;IAEtC,IAAI,2BAAiE,CAAC;IACtE,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,SAAS;QAC3B,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC;QACjC,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,wBAAwB,CACpD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EACjC,KAAK,CAAC,eAAe,CAAC,EAAE,CACzB,CAAC;IACN,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC;IACrC,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,iBAAiB,GACrB,CAAC,iCAAiC,CAAC,WAAW,EAAE,MAAM,CAAC;QACvD,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,4BAA4B,CACzD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EACjC,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAClE,CAAC,CAAC;IACL,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CAAC;QACtD,GAAG,KAAK;QACR,WAAW;QACX,iBAAiB;QACjB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B;QAC3C,oBAAoB,EAAE,CAAC,UAAU,EAAE,EAAE;YACnC,2BAA2B,GAAG,UAAU,CAAC;QAC3C,CAAC;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC5D,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;IAChD,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAClD,KAAK,CAAC,eAAe,CAAC,EAAE,CACzB,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,gCAAgC,CACxD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAC/C;QACE,QAAQ,EAAE,QAAQ,CAAC,EAAE;QACrB,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,2BAA2B;QACtC,cAAc,EAAE,QAAQ,CAAC,cAAc;KACxC,EACD,KAAK,IAAI,EAAE,CACT,CAAC,MAAM,sBAAsB,CAAC;QAC5B,aAAa;QACb,WAAW;QACX,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ;KACT,CAAC,CAAC;QACD,CAAC,CAAC,8BAA8B,CAAC;YAC7B,GAAG,KAAK;YACR,aAAa;YACb,2BAA2B;SAC5B,CAAC;QACJ,CAAC,CAAC,IAAI,CACX,CAAC;IACF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,kCAAkC,CAAC;QACvC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB;QACzD,iBAAiB,EAAE,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,KAAsC;IAEtC,IAAI,CAAC;QACH,OAAO,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CACrC,KAGC;IAED,MAAM,EAAE,aAAa,EAAE,2BAA2B,EAAE,GAAG,KAAK,CAAC;IAC7D,OAAO,aAAa;QAClB,CAAC,CAAC,kCAAkC,CAAC;YACjC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,sCAAsC,EACpC,KAAK,CAAC,sCAAsC;YAC9C,wCAAwC,EACtC,KAAK,CAAC,wCAAwC;YAChD,aAAa;YACb,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;QACJ,CAAC,CAAC,0BAA0B,CAAC;YACzB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,0BAA0B,EAAE,KAAK,CAAC,0BAA0B,IAAI,IAAI;YACpE,2BAA2B;YAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;AACT,CAAC","sourcesContent":["import type { AccessManifestCheckpoint } from \"@tearleads/crypto\";\nimport {\n  heldContainerBinding,\n  listingRepeatsHeldOrdinaryBinding,\n} from \"../../data/containers/containerBinding\";\nimport {\n  isKeyingVerificationError,\n  runWithSecurityIncidentReporting,\n} from \"../../data/keyingProjectionVerification/error\";\nimport type { ContainerHydrationTombstone } from \"./containerPersistence\";\nimport { installContainerMetadataRecord } from \"./metadataPersistence\";\nimport { projectionGeneration } from \"./projectionGeneration\";\nimport {\n  moveIndexedContainerChild,\n  removeIndexedContainerChild,\n} from \"./remoteHydration/childIndex\";\nimport type { PrefetchedDestinationProjection } from \"./remoteHydration/destinationPrefetch\";\nimport { rebindReHomedContainer } from \"./remoteHydration/heldContainerRebind\";\nimport { insertRemoteContainerState } from \"./remoteHydration/insertRemoteContainer\";\nimport {\n  reconcileLocalOnlyRootContainers,\n  reconcileLocalOnlySystemContainers,\n} from \"./remoteHydration/reconciliation\";\nimport {\n  applyRemoteContainerTimestamps,\n  remoteContainerHydrationSaveOptions,\n  resolveRemoteContainerHydrationLocalUpdatedAt,\n} from \"./remoteHydration/remoteContainerTimestamps\";\nimport type {\n  ContainerChildIndex,\n  ContainerState,\n  RemoteContainer,\n  RemoteContainerHydrationHost,\n  RemoteContainerHydrationState,\n} from \"./remoteHydration/types\";\nimport { verifyRemoteContainerDestination } from \"./remoteHydration/verifiedDestination\";\n\n// Container ids (restricted to the inbound page) that carry an unsynced local\n// create or move intent. Such a container's parent and local-edit timestamp are\n// owned by its structural-intent lane until that lane reconciles, so inbound\n// hydration must not revert parentId to the server value nor collapse\n// localUpdatedAt — doing so silently undoes a queued move and falsely reads\n// \"synced\". Move intents are read via listUnsyncedMoveIntents so a blocked\n// move — one whose destination parent has not synced yet, the common boot-time\n// case — is protected too. Pending *metadata*\n// updates are handled separately (listRemoteContainerIdsWithPendingMetadataUpdates);\n// these live in dedicated create/move intent tables that that query does not cover.\nexport async function listRemoteContainerIdsWithPendingStructuralIntents(input: {\n  remoteContainers: ReadonlyArray<RemoteContainer>;\n  state: RemoteContainerHydrationState;\n}): Promise<Set<string>> {\n  if (input.remoteContainers.length === 0) {\n    return new Set();\n  }\n  const remoteContainerIds = new Set(\n    input.remoteContainers.map((remoteContainer) => remoteContainer.id),\n  );\n\n  const execSql = input.state.runtime.infra.execSql;\n  const [pendingCreateIntents, unsyncedMoveIntents] = await Promise.all([\n    input.state.persistence.listPendingCreateIntents(execSql),\n    input.state.persistence.listUnsyncedMoveIntents(execSql),\n  ]);\n  const containerIdsWithPendingStructuralIntents = new Set<string>();\n  for (const intent of pendingCreateIntents) {\n    if (remoteContainerIds.has(intent.containerId)) {\n      containerIdsWithPendingStructuralIntents.add(intent.containerId);\n    }\n  }\n  for (const intent of unsyncedMoveIntents) {\n    if (remoteContainerIds.has(intent.containerId)) {\n      containerIdsWithPendingStructuralIntents.add(intent.containerId);\n    }\n  }\n  return containerIdsWithPendingStructuralIntents;\n}\n\nexport async function listRemoteContainerIdsWithPendingMetadataUpdates(input: {\n  remoteContainers: ReadonlyArray<RemoteContainer>;\n  state: RemoteContainerHydrationState;\n}): Promise<Set<string>> {\n  const containerIds = input.remoteContainers.flatMap((remoteContainer) => {\n    const previousLocalUpdatedAt = input.state.containersById.get(\n      remoteContainer.id,\n    )?.container.localUpdatedAt;\n\n    return previousLocalUpdatedAt &&\n      previousLocalUpdatedAt.localeCompare(remoteContainer.updatedAt) > 0\n      ? [remoteContainer.id]\n      : [];\n  });\n  if (containerIds.length === 0) {\n    return new Set();\n  }\n\n  const execSql = input.state.runtime.infra.execSql;\n  return new Set(\n    await input.state.persistence.listContainerIdsWithPendingUpdates(\n      execSql,\n      containerIds,\n    ),\n  );\n}\n\nfunction removeMissingHydratedContainer(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  existingState: ContainerState;\n  host: RemoteContainerHydrationHost;\n  previousParentId: string | null;\n  remoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}): void {\n  const { existingState, remoteContainer, state } = input;\n  if (state.containersById.get(remoteContainer.id) !== existingState) {\n    return;\n  }\n\n  state.containersById.delete(remoteContainer.id);\n  if (input.childIdsByParentId) {\n    removeIndexedContainerChild(\n      input.childIdsByParentId,\n      remoteContainer.id,\n      input.previousParentId,\n    );\n    input.childIdsByParentId.delete(remoteContainer.id);\n  }\n  input.host.updateSnapshot();\n}\n\nfunction createUpdatedRemoteContainerState(\n  existingState: ContainerState,\n  remoteContainer: RemoteContainer,\n): ContainerState {\n  return {\n    ...existingState,\n    container: applyRemoteContainerTimestamps(\n      existingState.container,\n      remoteContainer,\n    ),\n    containerWriterProjection: null,\n    metadataReferencedPrincipals: remoteContainer.metadataReferencedPrincipals,\n  };\n}\n\nfunction installUpdatedRemoteContainerState(\n  existingState: ContainerState,\n  nextState: ContainerState,\n  host: RemoteContainerHydrationHost,\n): void {\n  const wasLocalOnly = existingState.container.serverCreatedAt == null;\n  existingState.container = nextState.container;\n  existingState.containerWriterProjection = nextState.containerWriterProjection;\n  existingState.metadataReferencedPrincipals =\n    nextState.metadataReferencedPrincipals;\n  // The snapshot copied the live generation when it was taken; a hint that\n  // landed during the persist leaves the live metadata projection dropped.\n  if (projectionGeneration(existingState) === projectionGeneration(nextState))\n    existingState.metadataWriterProjection = nextState.metadataWriterProjection;\n  installContainerMetadataRecord(existingState, nextState.record);\n  // A document pass may have deferred while this root was awaiting proof.\n  // The first durable remote acknowledgement makes its pending creates runnable.\n  if (wasLocalOnly && existingState.container.serverCreatedAt != null)\n    host.requestDocumentPriming?.();\n}\n\nasync function updateExistingRemoteContainerState(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  containerIdsWithPendingMetadataUpdates: ReadonlySet<string>;\n  containerIdsWithPendingStructuralIntents: ReadonlySet<string>;\n  host: RemoteContainerHydrationHost;\n  isCurrent?: (() => boolean) | undefined;\n  existingState: ContainerState;\n  remoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}): Promise<ContainerState | null> {\n  const { childIdsByParentId, existingState, host, remoteContainer, state } =\n    input;\n  const previousParentId = existingState.container.parentId;\n  const previousLocalUpdatedAt = existingState.container.localUpdatedAt;\n  // A queued, not-yet-synced local move/create owns this container's parent\n  // until its intent lane reconciles. Omit the remote parent when the page scan\n  // saw one; persistence also rechecks the intent transactionally so a move\n  // created after that scan wins. Both paths preserve the durable local clock.\n  const hasPendingStructuralIntent =\n    input.containerIdsWithPendingStructuralIntents.has(remoteContainer.id);\n  const nextParentId = hasPendingStructuralIntent\n    ? undefined\n    : remoteContainer.parentId;\n  const localUpdatedAt = resolveRemoteContainerHydrationLocalUpdatedAt({\n    containerIdsWithPendingMetadataUpdates:\n      input.containerIdsWithPendingMetadataUpdates,\n    hasPendingStructuralIntent,\n    previousLocalUpdatedAt,\n    remoteContainer,\n  });\n  const nextState = createUpdatedRemoteContainerState(\n    existingState,\n    remoteContainer,\n  );\n  const persistenceResult = await host.persistContainerState(\n    nextState,\n    {\n      accessEpoch: remoteContainer.metadataAccessEpoch,\n      accessStateHash: remoteContainer.metadataAccessStateHash,\n      documentId: remoteContainer.metadataDocumentId,\n      effectiveAccessLevel: remoteContainer.effectiveAccessLevel,\n      metadataDocumentId: remoteContainer.metadataDocumentId,\n      systemSlot: remoteContainer.systemSlot ?? null,\n      organizationId: remoteContainer.organizationId,\n      ...(nextParentId !== undefined ? { parentId: nextParentId } : {}),\n    },\n    false,\n    remoteContainerHydrationSaveOptions({\n      localUpdatedAt,\n      remoteContainer,\n    }),\n    {\n      preserveDurableStructureWhenPending: true,\n    },\n  );\n  if (persistenceResult.status === \"missing\") {\n    // Hydration persists a detached candidate so an in-flight response cannot\n    // mutate mapped state before its guards settle. Retire the exact state this\n    // hydration read because store-level reference cleanup cannot see the clone.\n    removeMissingHydratedContainer({\n      childIdsByParentId,\n      existingState,\n      host,\n      previousParentId,\n      remoteContainer,\n      state,\n    });\n    return null;\n  }\n  if (persistenceResult.status !== \"persisted\") return null;\n  const { record: nextRecord } = persistenceResult;\n  installContainerMetadataRecord(nextState, nextRecord);\n  if (input.isCurrent?.() === false) {\n    return existingState;\n  }\n  nextState.container = {\n    ...nextState.container,\n    metadataDocumentId: remoteContainer.metadataDocumentId,\n    organizationId: remoteContainer.organizationId,\n    parentId: nextState.container.parentId,\n  };\n\n  installUpdatedRemoteContainerState(existingState, nextState, host);\n  moveIndexedContainerChild(\n    childIdsByParentId,\n    remoteContainer.id,\n    previousParentId,\n    existingState.container.parentId,\n  );\n  await reconcileLocalOnlyRootContainers({\n    childIdsByParentId,\n    isCurrent: input.isCurrent,\n    remoteRootState: existingState,\n    requestDocumentPriming: host.requestDocumentPriming,\n    state,\n  });\n  return existingState;\n}\n\ninterface UpsertRemoteContainerStateInput {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  containerIdsWithPendingMetadataUpdates: ReadonlySet<string>;\n  containerIdsWithPendingStructuralIntents: ReadonlySet<string>;\n  host: RemoteContainerHydrationHost;\n  expectedHydrationTombstone?: ContainerHydrationTombstone | null | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  prefetchedProjection?: PrefetchedDestinationProjection | undefined;\n  remoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}\n\nexport async function upsertRemoteContainerState(\n  input: UpsertRemoteContainerStateInput,\n): Promise<ContainerState | null> {\n  let expectedPlacementCheckpoint: AccessManifestCheckpoint | undefined;\n  const heldState = input.state.containersById.get(input.remoteContainer.id);\n  const heldBinding = heldState\n    ? heldContainerBinding(heldState)\n    : await input.state.persistence.loadHeldContainerBinding(\n        input.state.runtime.infra.execSql,\n        input.remoteContainer.id,\n      );\n  const listed = input.remoteContainer;\n  // A folder re-homed away from the listed organization never returns there,\n  // whatever binding (possibly none, after a reset) the device holds now.\n  const supersededListing =\n    !listingRepeatsHeldOrdinaryBinding(heldBinding, listed) &&\n    (await input.state.persistence.isSupersededContainerBinding(\n      input.state.runtime.infra.execSql,\n      { containerId: listed.id, organizationId: listed.organizationId },\n    ));\n  if (input.isCurrent?.() === false) return null;\n  const verified = await verifyRemoteContainerDestination({\n    ...input,\n    heldBinding,\n    supersededListing,\n    refresh: !!input.expectedHydrationTombstone,\n    onVerifiedCheckpoint: (checkpoint) => {\n      expectedPlacementCheckpoint = checkpoint;\n    },\n  });\n  if (!verified || input.isCurrent?.() === false) return null;\n  input = { ...input, remoteContainer: verified };\n  const existingState = input.state.containersById.get(\n    input.remoteContainer.id,\n  );\n  const remoteState = await runWithSecurityIncidentReporting(\n    input.state.runtime.util.reportSecurityIncident,\n    {\n      objectId: verified.id,\n      objectKind: \"container\",\n      operation: \"container.binding.persist\",\n      organizationId: verified.organizationId,\n    },\n    async () =>\n      (await rebindReHomedContainer({\n        existingState,\n        heldBinding,\n        isCurrent: input.isCurrent,\n        state: input.state,\n        verified,\n      }))\n        ? persistVerifiedRemoteContainer({\n            ...input,\n            existingState,\n            expectedPlacementCheckpoint,\n          })\n        : null,\n  );\n  if (!remoteState) {\n    return null;\n  }\n  await reconcileLocalOnlySystemContainers({\n    childIdsByParentId: input.childIdsByParentId,\n    isCurrent: input.isCurrent,\n    requestDocumentPriming: input.host.requestDocumentPriming,\n    remoteSystemState: remoteState,\n    state: input.state,\n  });\n  return remoteState;\n}\n\n/**\n * Upsert one listed folder, isolating a rejected proof or binding. The refusal\n * was already reported; returning no state leaves the item unapplied without\n * blocking independent folders.\n */\nexport async function upsertIsolatedRemoteContainerState(\n  input: UpsertRemoteContainerStateInput,\n): Promise<ContainerState | null> {\n  try {\n    return await upsertRemoteContainerState(input);\n  } catch (error) {\n    if (!isKeyingVerificationError(error)) throw error;\n    return null;\n  }\n}\n\nfunction persistVerifiedRemoteContainer(\n  input: UpsertRemoteContainerStateInput & {\n    existingState: ContainerState | undefined;\n    expectedPlacementCheckpoint: AccessManifestCheckpoint | undefined;\n  },\n): Promise<ContainerState | null> {\n  const { existingState, expectedPlacementCheckpoint } = input;\n  return existingState\n    ? updateExistingRemoteContainerState({\n        childIdsByParentId: input.childIdsByParentId,\n        containerIdsWithPendingMetadataUpdates:\n          input.containerIdsWithPendingMetadataUpdates,\n        containerIdsWithPendingStructuralIntents:\n          input.containerIdsWithPendingStructuralIntents,\n        existingState,\n        host: input.host,\n        isCurrent: input.isCurrent,\n        remoteContainer: input.remoteContainer,\n        state: input.state,\n      })\n    : insertRemoteContainerState({\n        childIdsByParentId: input.childIdsByParentId,\n        host: input.host,\n        expectedHydrationTombstone: input.expectedHydrationTombstone ?? null,\n        expectedPlacementCheckpoint,\n        isCurrent: input.isCurrent,\n        remoteContainer: input.remoteContainer,\n        state: input.state,\n      });\n}\n"]}

package/workflows/container-contents/remoteHydration/childIndex.js

@@ -0,0 +1,36 @@
+export function addIndexedContainerChild(childIdsByParentId, containerId, parentId) {
+    if (parentId === null) {
+        return;
+    }
+    const childIds = childIdsByParentId.get(parentId) ?? new Set();
+    childIds.add(containerId);
+    childIdsByParentId.set(parentId, childIds);
+}
+export function removeIndexedContainerChild(childIdsByParentId, containerId, parentId) {
+    if (parentId === null) {
+        return;
+    }
+    const childIds = childIdsByParentId.get(parentId);
+    if (!childIds) {
+        return;
+    }
+    childIds.delete(containerId);
+    if (childIds.size === 0) {
+        childIdsByParentId.delete(parentId);
+    }
+}
+export function moveIndexedContainerChild(childIdsByParentId, containerId, previousParentId, nextParentId) {
+    if (!childIdsByParentId || previousParentId === nextParentId) {
+        return;
+    }
+    removeIndexedContainerChild(childIdsByParentId, containerId, previousParentId);
+    addIndexedContainerChild(childIdsByParentId, containerId, nextParentId);
+}
+export function createContainerChildIndex(containersById) {
+    const childIdsByParentId = new Map();
+    for (const [containerId, containerState] of containersById) {
+        addIndexedContainerChild(childIdsByParentId, containerId, containerState.container.parentId);
+    }
+    return childIdsByParentId;
+}
+//# sourceMappingURL=childIndex.js.map

package/workflows/container-contents/remoteHydration/childIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"childIndex.js","sourceRoot":"","sources":["childIndex.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,wBAAwB,CACtC,kBAAuC,EACvC,WAAmB,EACnB,QAAuB;IAEvB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;IACvE,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1B,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,kBAAuC,EACvC,WAAmB,EACnB,QAAuB;IAEvB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC7B,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACxB,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,kBAAmD,EACnD,WAAmB,EACnB,gBAA+B,EAC/B,YAA2B;IAE3B,IAAI,CAAC,kBAAkB,IAAI,gBAAgB,KAAK,YAAY,EAAE,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,2BAA2B,CACzB,kBAAkB,EAClB,WAAW,EACX,gBAAgB,CACjB,CAAC;IACF,wBAAwB,CAAC,kBAAkB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,cAAmD;IAEnD,MAAM,kBAAkB,GAAwB,IAAI,GAAG,EAAE,CAAC;IAE1D,KAAK,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,IAAI,cAAc,EAAE,CAAC;QAC3D,wBAAwB,CACtB,kBAAkB,EAClB,WAAW,EACX,cAAc,CAAC,SAAS,CAAC,QAAQ,CAClC,CAAC;IACJ,CAAC;IAED,OAAO,kBAAkB,CAAC;AAC5B,CAAC","sourcesContent":["import type { ContainerChildIndex, ContainerState } from \"./types\";\n\nexport function addIndexedContainerChild(\n  childIdsByParentId: ContainerChildIndex,\n  containerId: string,\n  parentId: string | null,\n) {\n  if (parentId === null) {\n    return;\n  }\n\n  const childIds = childIdsByParentId.get(parentId) ?? new Set<string>();\n  childIds.add(containerId);\n  childIdsByParentId.set(parentId, childIds);\n}\n\nexport function removeIndexedContainerChild(\n  childIdsByParentId: ContainerChildIndex,\n  containerId: string,\n  parentId: string | null,\n) {\n  if (parentId === null) {\n    return;\n  }\n\n  const childIds = childIdsByParentId.get(parentId);\n  if (!childIds) {\n    return;\n  }\n\n  childIds.delete(containerId);\n  if (childIds.size === 0) {\n    childIdsByParentId.delete(parentId);\n  }\n}\n\nexport function moveIndexedContainerChild(\n  childIdsByParentId: ContainerChildIndex | undefined,\n  containerId: string,\n  previousParentId: string | null,\n  nextParentId: string | null,\n) {\n  if (!childIdsByParentId || previousParentId === nextParentId) {\n    return;\n  }\n\n  removeIndexedContainerChild(\n    childIdsByParentId,\n    containerId,\n    previousParentId,\n  );\n  addIndexedContainerChild(childIdsByParentId, containerId, nextParentId);\n}\n\nexport function createContainerChildIndex(\n  containersById: ReadonlyMap<string, ContainerState>,\n): ContainerChildIndex {\n  const childIdsByParentId: ContainerChildIndex = new Map();\n\n  for (const [containerId, containerState] of containersById) {\n    addIndexedContainerChild(\n      childIdsByParentId,\n      containerId,\n      containerState.container.parentId,\n    );\n  }\n\n  return childIdsByParentId;\n}\n"]}

package/workflows/container-contents/remoteHydration/completeHydration.js

@@ -0,0 +1,25 @@
+import { describeRemoteContainerHydration } from "../remoteHydrationLog.js";
+export async function finishRemoteHydration(input) {
+    if (input.isCurrent?.() === false) {
+        return;
+    }
+    if (input.changedCount > 0) {
+        input.host.updateSnapshot();
+        let insertedCount = 0;
+        for (const containerId of input.seenContainerIds) {
+            if (!input.containerIdsBeforeHydration.has(containerId)) {
+                insertedCount++;
+            }
+        }
+        input.state.runtime.util.log(describeRemoteContainerHydration({
+            changedCount: input.changedCount,
+            insertedCount,
+        }));
+    }
+    if (input.complete &&
+        input.isCurrent?.() !== false &&
+        input.onFullyHydrated) {
+        await input.onFullyHydrated();
+    }
+}
+//# sourceMappingURL=completeHydration.js.map

package/workflows/container-contents/remoteHydration/completeHydration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"completeHydration.js","sourceRoot":"","sources":["completeHydration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,uBAAuB,CAAC;AAMzE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAS3C;IACC,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxD,aAAa,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAC1B,gCAAgC,CAAC;YAC/B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,aAAa;SACd,CAAC,CACH,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAC7B,KAAK,CAAC,eAAe,EACrB,CAAC;QACD,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAChC,CAAC;AACH,CAAC","sourcesContent":["import { describeRemoteContainerHydration } from \"../remoteHydrationLog\";\nimport type {\n  RemoteContainerHydrationHost,\n  RemoteContainerHydrationState,\n} from \"./types\";\n\nexport async function finishRemoteHydration(input: {\n  changedCount: number;\n  complete: boolean;\n  host: RemoteContainerHydrationHost;\n  isCurrent?: (() => boolean) | undefined;\n  onFullyHydrated?: (() => Promise<void> | void) | undefined;\n  seenContainerIds: ReadonlySet<string>;\n  containerIdsBeforeHydration: ReadonlySet<string>;\n  state: RemoteContainerHydrationState;\n}): Promise<void> {\n  if (input.isCurrent?.() === false) {\n    return;\n  }\n  if (input.changedCount > 0) {\n    input.host.updateSnapshot();\n    let insertedCount = 0;\n    for (const containerId of input.seenContainerIds) {\n      if (!input.containerIdsBeforeHydration.has(containerId)) {\n        insertedCount++;\n      }\n    }\n    input.state.runtime.util.log(\n      describeRemoteContainerHydration({\n        changedCount: input.changedCount,\n        insertedCount,\n      }),\n    );\n  }\n  if (\n    input.complete &&\n    input.isCurrent?.() !== false &&\n    input.onFullyHydrated\n  ) {\n    await input.onFullyHydrated();\n  }\n}\n"]}

package/workflows/container-contents/remoteHydration/containerStateFingerprint.js

@@ -0,0 +1,14 @@
+/**
+ * Immutable request-time identity for one live container state. Hydration
+ * mutates ContainerState objects in place, so retaining the object reference is
+ * not enough to detect a newer local or remote commit while a page is fetched.
+ */
+export function createContainerStateFingerprint(state) {
+    return JSON.stringify([state.container, state.record]);
+}
+export function containerStateMatchesFingerprint(input) {
+    return ((input.currentState
+        ? createContainerStateFingerprint(input.currentState)
+        : undefined) === input.expectedFingerprint);
+}
+//# sourceMappingURL=containerStateFingerprint.js.map

package/workflows/container-contents/remoteHydration/containerStateFingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerStateFingerprint.js","sourceRoot":"","sources":["containerStateFingerprint.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAAC,KAAqB;IACnE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAGhD;IACC,OAAO,CACL,CAAC,KAAK,CAAC,YAAY;QACjB,CAAC,CAAC,+BAA+B,CAAC,KAAK,CAAC,YAAY,CAAC;QACrD,CAAC,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,mBAAmB,CAC7C,CAAC;AACJ,CAAC","sourcesContent":["import type { ContainerState } from \"./types\";\n\n/**\n * Immutable request-time identity for one live container state. Hydration\n * mutates ContainerState objects in place, so retaining the object reference is\n * not enough to detect a newer local or remote commit while a page is fetched.\n */\nexport function createContainerStateFingerprint(state: ContainerState): string {\n  return JSON.stringify([state.container, state.record]);\n}\n\nexport function containerStateMatchesFingerprint(input: {\n  currentState: ContainerState | undefined;\n  expectedFingerprint: string | undefined;\n}): boolean {\n  return (\n    (input.currentState\n      ? createContainerStateFingerprint(input.currentState)\n      : undefined) === input.expectedFingerprint\n  );\n}\n"]}

package/workflows/container-contents/remoteHydration/destinationPrefetch.js

@@ -0,0 +1,26 @@
+const DESTINATION_PREFETCH_CONCURRENCY = 4;
+/**
+ * Fetch the writer projections of newly discovered folders with bounded
+ * concurrency, so a fresh device does not pay one round trip per folder in
+ * series. Verification stays sequential and consumes these results. A failed
+ * fetch is omitted: verification refetches and reports it.
+ */
+export async function prefetchDestinationProjections(input) {
+    const prefetched = new Map();
+    const pending = [...input.containerIds];
+    const fetchNext = async () => {
+        for (let containerId = pending.shift(); containerId !== undefined && input.isCurrent?.() !== false; containerId = pending.shift()) {
+            try {
+                prefetched.set(containerId, {
+                    projection: await input.runtime.apiClient.getContainerWriterProjection(containerId),
+                });
+            }
+            catch {
+                // Verification refetches this folder and reports the failure.
+            }
+        }
+    };
+    await Promise.all(Array.from({ length: Math.min(DESTINATION_PREFETCH_CONCURRENCY, pending.length) }, fetchNext));
+    return prefetched;
+}
+//# sourceMappingURL=destinationPrefetch.js.map

package/workflows/container-contents/remoteHydration/destinationPrefetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destinationPrefetch.js","sourceRoot":"","sources":["destinationPrefetch.ts"],"names":[],"mappings":"AAQA,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAIpD;IACC,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2C,CAAC;IACtE,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,KAAK,IAAmB,EAAE;QAC1C,KACE,IAAI,WAAW,GAAG,OAAO,CAAC,KAAK,EAAE,EACjC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAC1D,WAAW,GAAG,OAAO,CAAC,KAAK,EAAE,EAC7B,CAAC;YACD,IAAI,CAAC;gBACH,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE;oBAC1B,UAAU,EACR,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,4BAA4B,CACxD,WAAW,CACZ;iBACJ,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;YAChE,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CACR,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,gCAAgC,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EACtE,SAAS,CACV,CACF,CAAC;IACF,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport type { RemoteContainerHydrationState } from \"./types\";\n\n/** A projection fetched ahead of sequential verification. */\nexport interface PrefetchedDestinationProjection {\n  readonly projection: ContainerWriterProjectionResponse | null;\n}\n\nconst DESTINATION_PREFETCH_CONCURRENCY = 4;\n\n/**\n * Fetch the writer projections of newly discovered folders with bounded\n * concurrency, so a fresh device does not pay one round trip per folder in\n * series. Verification stays sequential and consumes these results. A failed\n * fetch is omitted: verification refetches and reports it.\n */\nexport async function prefetchDestinationProjections(input: {\n  containerIds: ReadonlyArray<string>;\n  isCurrent?: (() => boolean) | undefined;\n  runtime: RemoteContainerHydrationState[\"runtime\"];\n}): Promise<ReadonlyMap<string, PrefetchedDestinationProjection>> {\n  const prefetched = new Map<string, PrefetchedDestinationProjection>();\n  const pending = [...input.containerIds];\n  const fetchNext = async (): Promise<void> => {\n    for (\n      let containerId = pending.shift();\n      containerId !== undefined && input.isCurrent?.() !== false;\n      containerId = pending.shift()\n    ) {\n      try {\n        prefetched.set(containerId, {\n          projection:\n            await input.runtime.apiClient.getContainerWriterProjection(\n              containerId,\n            ),\n        });\n      } catch {\n        // Verification refetches this folder and reports the failure.\n      }\n    }\n  };\n  await Promise.all(\n    Array.from(\n      { length: Math.min(DESTINATION_PREFETCH_CONCURRENCY, pending.length) },\n      fetchNext,\n    ),\n  );\n  return prefetched;\n}\n"]}

package/workflows/container-contents/remoteHydration/destinationRoleCache.js

@@ -0,0 +1,39 @@
+const rolesByDatabase = new WeakMap();
+const MAX_ROLES = 1_000;
+function destinationKey(identity) {
+    return JSON.stringify([identity.organizationId, identity.id]);
+}
+export function cachedDestinationRole(execSql, listed) {
+    const roles = rolesByDatabase.get(execSql);
+    const key = destinationKey(listed);
+    return roles?.fixed.get(key) ?? roles?.ordinary.get(key);
+}
+export function rememberDestinationRole(execSql, listed, role) {
+    // Shared verification forbids moves of roots and system containers, and all
+    // successors preserve the signed slot, metadata id and creator. Cache only
+    // these immutable fields; authority, key material and ordinary parent edges
+    // remain outside this cache. Reuse does not authorize any read or write
+    // operation, so logout and identity switches do not need to invalidate these
+    // roles: the session-root creator check runs on every reuse.
+    if (role.parentId !== undefined &&
+        role.parentId !== null &&
+        role.systemSlot === null) {
+        throw new Error("Ordinary container parents cannot enter the immutable binding cache");
+    }
+    let cache = rolesByDatabase.get(execSql);
+    if (!cache) {
+        cache = { fixed: new Map(), ordinary: new Map() };
+        rolesByDatabase.set(execSql, cache);
+    }
+    // Ordinary directory growth must not evict root/system reconciliation roles.
+    // Both buckets are bounded independently.
+    const roles = role.parentId === undefined ? cache.ordinary : cache.fixed;
+    const key = destinationKey(listed);
+    if (roles.size >= MAX_ROLES && !roles.has(key)) {
+        const oldest = roles.keys().next().value;
+        if (oldest !== undefined)
+            roles.delete(oldest);
+    }
+    roles.set(key, role);
+}
+//# sourceMappingURL=destinationRoleCache.js.map

package/workflows/container-contents/remoteHydration/destinationRoleCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destinationRoleCache.js","sourceRoot":"","sources":["destinationRoleCache.ts"],"names":[],"mappings":"AAmBA,MAAM,eAAe,GAAG,IAAI,OAAO,EAA6B,CAAC;AACjE,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB,SAAS,cAAc,CAAC,QAA6B;IACnD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAgB,EAChB,MAA2B;IAE3B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAgB,EAChB,MAA2B,EAC3B,IAAqB;IAErB,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,6DAA6D;IAC7D,IACE,IAAI,CAAC,QAAQ,KAAK,SAAS;QAC3B,IAAI,CAAC,QAAQ,KAAK,IAAI;QACtB,IAAI,CAAC,UAAU,KAAK,IAAI,EACxB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QAClD,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,6EAA6E;IAC7E,0CAA0C;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACzE,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,IAAI,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACvB,CAAC","sourcesContent":["import type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\nimport type { RemoteContainer } from \"./types\";\n\nexport interface DestinationRole\n  extends Pick<RemoteContainer, \"metadataDocumentId\" | \"systemSlot\"> {\n  /** Fixed parent only for roots/system slots; ordinary parent edges can move. */\n  readonly parentId?: string | null;\n  /** Signer of the epoch-1 `container.create`; immutable through successors. */\n  readonly createSignerUserId: string;\n  readonly rootContainerId: string;\n  readonly rootCreateManifestHash: string;\n  readonly rootMetadataDocumentId: string;\n}\n/** Roles are verified and cached under the container's id and organization. */\ntype DestinationIdentity = Pick<RemoteContainer, \"id\" | \"organizationId\">;\ninterface DestinationRoles {\n  fixed: Map<string, DestinationRole>;\n  ordinary: Map<string, DestinationRole>;\n}\nconst rolesByDatabase = new WeakMap<ExecSql, DestinationRoles>();\nconst MAX_ROLES = 1_000;\n\nfunction destinationKey(identity: DestinationIdentity): string {\n  return JSON.stringify([identity.organizationId, identity.id]);\n}\n\nexport function cachedDestinationRole(\n  execSql: ExecSql,\n  listed: DestinationIdentity,\n): DestinationRole | undefined {\n  const roles = rolesByDatabase.get(execSql);\n  const key = destinationKey(listed);\n  return roles?.fixed.get(key) ?? roles?.ordinary.get(key);\n}\n\nexport function rememberDestinationRole(\n  execSql: ExecSql,\n  listed: DestinationIdentity,\n  role: DestinationRole,\n): void {\n  // Shared verification forbids moves of roots and system containers, and all\n  // successors preserve the signed slot, metadata id and creator. Cache only\n  // these immutable fields; authority, key material and ordinary parent edges\n  // remain outside this cache. Reuse does not authorize any read or write\n  // operation, so logout and identity switches do not need to invalidate these\n  // roles: the session-root creator check runs on every reuse.\n  if (\n    role.parentId !== undefined &&\n    role.parentId !== null &&\n    role.systemSlot === null\n  ) {\n    throw new Error(\n      \"Ordinary container parents cannot enter the immutable binding cache\",\n    );\n  }\n  let cache = rolesByDatabase.get(execSql);\n  if (!cache) {\n    cache = { fixed: new Map(), ordinary: new Map() };\n    rolesByDatabase.set(execSql, cache);\n  }\n  // Ordinary directory growth must not evict root/system reconciliation roles.\n  // Both buckets are bounded independently.\n  const roles = role.parentId === undefined ? cache.ordinary : cache.fixed;\n  const key = destinationKey(listed);\n  if (roles.size >= MAX_ROLES && !roles.has(key)) {\n    const oldest = roles.keys().next().value;\n    if (oldest !== undefined) roles.delete(oldest);\n  }\n  roles.set(key, role);\n}\n"]}

package/workflows/container-contents/remoteHydration/destinationRootReload.js

@@ -0,0 +1,10 @@
+import { withMetadataRootReload } from "../../organizations/groupMetadataErrors.js";
+/**
+ * Reads a destination again once when its metadata root was behind the
+ * directory. A prefetched projection is that same stale root, so the reread
+ * drops it and fetches after `evictRoot` clears the cached one.
+ */
+export function resolveWithMetadataRootReload(input, resolve, evictRoot) {
+    return withMetadataRootReload((reread) => resolve(reread ? { ...input, prefetchedProjection: undefined } : input), evictRoot);
+}
+//# sourceMappingURL=destinationRootReload.js.map

package/workflows/container-contents/remoteHydration/destinationRootReload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destinationRootReload.js","sourceRoot":"","sources":["destinationRootReload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAEjF;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAI3C,KAAY,EACZ,OAA0C,EAC1C,SAAqB;IAErB,OAAO,sBAAsB,CAC3B,CAAC,MAAM,EAAE,EAAE,CACT,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EACzE,SAAS,CACV,CAAC;AACJ,CAAC","sourcesContent":["import { withMetadataRootReload } from \"../../organizations/groupMetadataErrors\";\n\n/**\n * Reads a destination again once when its metadata root was behind the\n * directory. A prefetched projection is that same stale root, so the reread\n * drops it and fetches after `evictRoot` clears the cached one.\n */\nexport function resolveWithMetadataRootReload<\n  Input extends { readonly prefetchedProjection?: unknown },\n  Result,\n>(\n  input: Input,\n  resolve: (input: Input) => Promise<Result>,\n  evictRoot: () => void,\n): Promise<Result> {\n  return withMetadataRootReload(\n    (reread) =>\n      resolve(reread ? { ...input, prefetchedProjection: undefined } : input),\n    evictRoot,\n  );\n}\n"]}

package/workflows/container-contents/remoteHydration/heldContainerRebind.js

@@ -0,0 +1,36 @@
+import { rebindsHeldContainer, } from "../../../data/containers/containerBinding.js";
+import { installContainerMetadataRecord } from "../metadataStateInstallation.js";
+/**
+ * Apply a re-home verified from the session user's create or the pinned
+ * founder's replacement authorization before hydration updates or inserts
+ * the folder. Returns false when
+ * the held binding changed underneath, leaving the listing unapplied.
+ */
+export async function rebindReHomedContainer(input) {
+    const { existingState, heldBinding, state, verified } = input;
+    if (!heldBinding || !rebindsHeldContainer(heldBinding, verified))
+        return true;
+    const execSql = state.runtime.infra.execSql;
+    const rebound = await state.persistence.rebindHeldContainer(execSql, {
+        containerId: verified.id,
+        expected: heldBinding,
+        next: {
+            metadataDocumentId: verified.metadataDocumentId,
+            organizationId: verified.organizationId,
+        },
+        stillCurrent: input.isCurrent,
+    });
+    if (!rebound || input.isCurrent?.() === false)
+        return false;
+    if (!existingState)
+        return true;
+    const stored = await state.persistence.loadContainerMetadataState(execSql, verified.id);
+    if (!stored?.record || input.isCurrent?.() === false)
+        return false;
+    existingState.container = stored.container;
+    existingState.containerWriterProjection = null;
+    existingState.metadataWriterProjection = null;
+    installContainerMetadataRecord(existingState, stored.record);
+    return true;
+}
+//# sourceMappingURL=heldContainerRebind.js.map

package/workflows/container-contents/remoteHydration/heldContainerRebind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heldContainerRebind.js","sourceRoot":"","sources":["heldContainerRebind.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,oBAAoB,GACrB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAO9E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAM5C;IACC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC9D,IAAI,CAAC,WAAW,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE;QACnE,WAAW,EAAE,QAAQ,CAAC,EAAE;QACxB,QAAQ,EAAE,WAAW;QACrB,IAAI,EAAE;YACJ,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,cAAc,EAAE,QAAQ,CAAC,cAAc;SACxC;QACD,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,0BAA0B,CAC/D,OAAO,EACP,QAAQ,CAAC,EAAE,CACZ,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACnE,aAAa,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC3C,aAAa,CAAC,yBAAyB,GAAG,IAAI,CAAC;IAC/C,aAAa,CAAC,wBAAwB,GAAG,IAAI,CAAC;IAC9C,8BAA8B,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import {\n  type HeldContainerBinding,\n  rebindsHeldContainer,\n} from \"../../../data/containers/containerBinding\";\nimport { installContainerMetadataRecord } from \"../metadataStateInstallation\";\nimport type {\n  ContainerState,\n  RemoteContainer,\n  RemoteContainerHydrationState,\n} from \"./types\";\n\n/**\n * Apply a re-home verified from the session user's create or the pinned\n * founder's replacement authorization before hydration updates or inserts\n * the folder. Returns false when\n * the held binding changed underneath, leaving the listing unapplied.\n */\nexport async function rebindReHomedContainer(input: {\n  existingState: ContainerState | undefined;\n  heldBinding: HeldContainerBinding | null;\n  isCurrent?: (() => boolean) | undefined;\n  state: RemoteContainerHydrationState;\n  verified: RemoteContainer;\n}): Promise<boolean> {\n  const { existingState, heldBinding, state, verified } = input;\n  if (!heldBinding || !rebindsHeldContainer(heldBinding, verified)) return true;\n  const execSql = state.runtime.infra.execSql;\n  const rebound = await state.persistence.rebindHeldContainer(execSql, {\n    containerId: verified.id,\n    expected: heldBinding,\n    next: {\n      metadataDocumentId: verified.metadataDocumentId,\n      organizationId: verified.organizationId,\n    },\n    stillCurrent: input.isCurrent,\n  });\n  if (!rebound || input.isCurrent?.() === false) return false;\n  if (!existingState) return true;\n  const stored = await state.persistence.loadContainerMetadataState(\n    execSql,\n    verified.id,\n  );\n  if (!stored?.record || input.isCurrent?.() === false) return false;\n  existingState.container = stored.container;\n  existingState.containerWriterProjection = null;\n  existingState.metadataWriterProjection = null;\n  installContainerMetadataRecord(existingState, stored.record);\n  return true;\n}\n"]}