@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/workflows/container-contents/remoteHydration/reconciliation.js

@@ -0,0 +1,322 @@
+import { createContainerChildIndex, moveIndexedContainerChild, removeIndexedContainerChild, } from "./childIndex.js";
+import { isSessionRootState, isVerifiedLocalRootReconciliationTarget, } from "./verifiedDestination.js";
+export function hasRemoteContainerMetadataState(containerState) {
+    return (typeof containerState.record.documentId === "string" &&
+        containerState.record.documentId.length > 0 &&
+        typeof containerState.record.accessStateHash === "string" &&
+        containerState.record.accessStateHash.length > 0 &&
+        typeof containerState.container.metadataDocumentId === "string" &&
+        containerState.container.metadataDocumentId.length > 0);
+}
+function isLocalOnlyRootContainerState(containerState) {
+    return (containerState.container.parentId === null &&
+        !containerState.container.systemSlot &&
+        !hasRemoteContainerMetadataState(containerState));
+}
+function collectContainerSubtreeStates(input) {
+    const { childIdsByParentId, containersById, rootContainerId } = input;
+    const subtreeStates = [];
+    const pendingContainerIds = [rootContainerId];
+    const enqueuedContainerIds = new Set([rootContainerId]);
+    const index = childIdsByParentId ?? createContainerChildIndex(containersById);
+    while (pendingContainerIds.length > 0) {
+        const containerId = pendingContainerIds.pop();
+        if (!containerId) {
+            continue;
+        }
+        const childIds = index.get(containerId);
+        if (!childIds) {
+            continue;
+        }
+        for (const childId of childIds) {
+            if (enqueuedContainerIds.has(childId)) {
+                continue;
+            }
+            const childState = containersById.get(childId);
+            if (!childState) {
+                continue;
+            }
+            enqueuedContainerIds.add(childId);
+            subtreeStates.push(childState);
+            pendingContainerIds.push(childId);
+        }
+    }
+    return subtreeStates;
+}
+function buildLocalRootDescendantReparents(input) {
+    const { childIdsByParentId, localRootState, remoteRootState, state } = input;
+    const descendants = collectContainerSubtreeStates({
+        childIdsByParentId,
+        containersById: state.containersById,
+        rootContainerId: localRootState.container.id,
+    });
+    const descendantReparents = descendants.map((descendant) => {
+        const previousParentId = descendant.container.parentId;
+        const parentContainerId = previousParentId === localRootState.container.id
+            ? remoteRootState.container.id
+            : previousParentId;
+        return {
+            containerId: descendant.container.id,
+            parentContainerId,
+            updateCreateIntent: !descendant.record.documentId && !!parentContainerId,
+        };
+    });
+    return { descendantReparents, descendants };
+}
+function applyLocalRootDescendantReparents(input) {
+    const { childIdsByParentId, descendantReparents, descendants, remoteRootState, updatedAt, } = input;
+    const reparentByContainerId = new Map(descendantReparents.map((reparent) => [reparent.containerId, reparent]));
+    for (const descendant of descendants) {
+        const previousParentId = descendant.container.parentId;
+        const reparent = reparentByContainerId.get(descendant.container.id);
+        if (!reparent) {
+            continue;
+        }
+        descendant.container = {
+            ...descendant.container,
+            organizationId: remoteRootState.container.organizationId,
+            parentId: reparent.parentContainerId,
+            localUpdatedAt: updatedAt,
+            updatedAt: descendant.container.serverUpdatedAt ?? updatedAt,
+        };
+        moveIndexedContainerChild(childIdsByParentId, descendant.container.id, previousParentId, reparent.parentContainerId);
+    }
+}
+function adoptReconciledSessionRoot(input) {
+    const { localRootState, remoteRootState, state } = input;
+    const adopter = state.runtime.adoptRootContainer;
+    const defaultOrganizationId = state.runtime.auth.defaultOrganizationId;
+    const userId = state.runtime.auth.userId;
+    if (!adopter ||
+        !defaultOrganizationId ||
+        defaultOrganizationId === remoteRootState.container.organizationId ||
+        !userId) {
+        return;
+    }
+    // Personal-org adoption waits for the complete root lane so hydration cannot
+    // re-enter the store before its child lanes are applied. The heuristic is
+    // intentionally personal-only, so use this exact durable identity pair to
+    // close the corresponding recovery gap for an active secondary organization.
+    adopter({
+        domainScope: state.runtime.state.domainScope,
+        expectedContainerId: localRootState.container.id,
+        nextContainerId: remoteRootState.container.id,
+        organizationId: remoteRootState.container.organizationId,
+        userId,
+    });
+}
+async function reconcileLocalOnlyRootContainer(input) {
+    const { childIdsByParentId, localRootState, remoteRootState, state } = input;
+    const execSql = state.runtime.infra.execSql;
+    const updatedAt = new Date().toISOString();
+    const { descendantReparents, descendants } = buildLocalRootDescendantReparents({
+        childIdsByParentId,
+        localRootState,
+        remoteRootState,
+        state,
+    });
+    await state.persistence.reconcileLocalRootContainer(execSql, {
+        descendantReparents,
+        localRootContainerId: localRootState.container.id,
+        remoteOrganizationId: remoteRootState.container.organizationId,
+        remoteRootContainerId: remoteRootState.container.id,
+        stillCurrent: input.isCurrent,
+        updatedAt,
+    });
+    if (input.isCurrent?.() === false) {
+        return;
+    }
+    applyLocalRootDescendantReparents({
+        childIdsByParentId,
+        descendantReparents,
+        descendants,
+        remoteRootState,
+        updatedAt,
+    });
+    if (childIdsByParentId) {
+        removeIndexedContainerChild(childIdsByParentId, localRootState.container.id, localRootState.container.parentId);
+        childIdsByParentId.delete(localRootState.container.id);
+    }
+    state.containersById.delete(localRootState.container.id);
+    adoptReconciledSessionRoot({ localRootState, remoteRootState, state });
+    state.runtime.util.log(`Container contents: reconciled local root ${localRootState.container.id} into remote root ${remoteRootState.container.id}`);
+}
+export async function reconcileLocalOnlyRootContainers(input) {
+    const { childIdsByParentId, remoteRootState, state } = input;
+    if (input.isCurrent?.() === false ||
+        !isSessionRootState(remoteRootState, state)) {
+        return 0;
+    }
+    const localRootStates = Array.from(state.containersById.values()).filter((containerState) => containerState.container.id !== remoteRootState.container.id &&
+        isLocalOnlyRootContainerState(containerState));
+    // The unsigned login answer names the root; only the verified root created
+    // by the session user may absorb local content (see verifiedDestination).
+    // Checked only when there is local root content to merge, from the cached
+    // role alone, so a local refresh never waits on the network.
+    if (localRootStates.length > 0 &&
+        !(await isVerifiedLocalRootReconciliationTarget({ remoteRootState, state }))) {
+        return 0;
+    }
+    let reconciledRootContainerCount = 0;
+    for (const localRootState of localRootStates) {
+        if (input.isCurrent?.() === false) {
+            return reconciledRootContainerCount;
+        }
+        await reconcileLocalOnlyRootContainer({
+            childIdsByParentId,
+            isCurrent: input.isCurrent,
+            localRootState,
+            remoteRootState,
+            state,
+        });
+        if (input.isCurrent?.() === false) {
+            return reconciledRootContainerCount;
+        }
+        reconciledRootContainerCount += 1;
+    }
+    // A remote system child can be applied before its remote root (for example,
+    // from an earlier page/pass). Its local twin does not match while it is still
+    // parented to the pre-auth root. Root reconciliation fixes the parent and
+    // organization, so retry every already-known remote system sibling now. The
+    // normal root-first ordering still reconciles when the remote system arrives.
+    let reconciledSystemContainerCount = 0;
+    for (const knownRemoteSystemState of Array.from(state.containersById.values())) {
+        if ((knownRemoteSystemState.container.systemSlot ?? null) !== null &&
+            hasRemoteContainerMetadataState(knownRemoteSystemState)) {
+            reconciledSystemContainerCount +=
+                await reconcileLocalOnlySystemContainers({
+                    childIdsByParentId,
+                    isCurrent: input.isCurrent,
+                    remoteSystemState: knownRemoteSystemState,
+                    state,
+                });
+        }
+    }
+    if (reconciledRootContainerCount + reconciledSystemContainerCount > 0) {
+        input.requestDocumentPriming?.();
+    }
+    return reconciledRootContainerCount;
+}
+function isLocalOnlySystemContainerState(input) {
+    const { containerState, remoteSystemState, state } = input;
+    const localSystemSlot = containerState.container.systemSlot ?? null;
+    const remoteSystemSlot = remoteSystemState.container.systemSlot ?? null;
+    if (remoteSystemSlot === null ||
+        localSystemSlot !== remoteSystemSlot ||
+        containerState.container.id === remoteSystemState.container.id ||
+        hasRemoteContainerMetadataState(containerState)) {
+        return false;
+    }
+    const sharesRemoteLocation = containerState.container.organizationId ===
+        remoteSystemState.container.organizationId &&
+        containerState.container.parentId === remoteSystemState.container.parentId;
+    if (sharesRemoteLocation) {
+        return true;
+    }
+    const homeOrganizationId = state.runtime.auth.organizationId;
+    if (!homeOrganizationId ||
+        remoteSystemState.container.organizationId !== homeOrganizationId ||
+        containerState.container.organizationId !== "") {
+        return false;
+    }
+    const localParentId = containerState.container.parentId;
+    const localParentState = localParentId
+        ? state.containersById.get(localParentId)
+        : null;
+    return !localParentState || isLocalOnlyRootContainerState(localParentState);
+}
+function findLocalOnlySystemContainerStates(input) {
+    const { remoteSystemState, state } = input;
+    if ((remoteSystemState.container.systemSlot ?? null) === null) {
+        return [];
+    }
+    return Array.from(state.containersById.values()).filter((containerState) => isLocalOnlySystemContainerState({
+        containerState,
+        remoteSystemState,
+        state,
+    }));
+}
+function applyLocalSystemContainerChildReparents(input) {
+    const { childIdsByParentId, localSystemState, remoteSystemState, state } = input;
+    const localContainerId = localSystemState.container.id;
+    const childContainerIds = childIdsByParentId
+        ? Array.from(childIdsByParentId.get(localContainerId) ?? [])
+        : Array.from(state.containersById.values()).flatMap((containerState) => containerState.container.parentId === localContainerId
+            ? [containerState.container.id]
+            : []);
+    for (const childContainerId of childContainerIds) {
+        const childState = state.containersById.get(childContainerId);
+        if (!childState) {
+            continue;
+        }
+        const previousParentId = childState.container.parentId;
+        childState.container = {
+            ...childState.container,
+            organizationId: remoteSystemState.container.organizationId,
+            parentId: remoteSystemState.container.id,
+            localUpdatedAt: input.updatedAt,
+            updatedAt: childState.container.serverUpdatedAt ?? input.updatedAt,
+        };
+        moveIndexedContainerChild(childIdsByParentId, childState.container.id, previousParentId, remoteSystemState.container.id);
+    }
+}
+async function reconcileLocalOnlySystemContainer(input) {
+    const { childIdsByParentId, localSystemState, remoteSystemState, state } = input;
+    const updatedAt = new Date().toISOString();
+    const execSql = state.runtime.infra.execSql;
+    await state.persistence.reconcileLocalSystemContainer(execSql, {
+        localContainerId: localSystemState.container.id,
+        remoteContainerId: remoteSystemState.container.id,
+        remoteOrganizationId: remoteSystemState.container.organizationId,
+        stillCurrent: input.isCurrent,
+        updatedAt,
+    });
+    if (input.isCurrent?.() === false) {
+        return;
+    }
+    applyLocalSystemContainerChildReparents({
+        childIdsByParentId,
+        localSystemState,
+        remoteSystemState,
+        state,
+        updatedAt,
+    });
+    if (childIdsByParentId) {
+        removeIndexedContainerChild(childIdsByParentId, localSystemState.container.id, localSystemState.container.parentId);
+        childIdsByParentId.delete(localSystemState.container.id);
+    }
+    state.containersById.delete(localSystemState.container.id);
+    state.runtime.util.log(`Container contents: reconciled local system container ${localSystemState.container.id} into remote system container ${remoteSystemState.container.id}`);
+}
+export async function reconcileLocalOnlySystemContainers(input) {
+    const { childIdsByParentId, remoteSystemState, state } = input;
+    if (input.isCurrent?.() === false) {
+        return 0;
+    }
+    const localSystemStates = findLocalOnlySystemContainerStates({
+        remoteSystemState,
+        state,
+    });
+    let reconciledSystemContainerCount = 0;
+    for (const localSystemState of localSystemStates) {
+        if (input.isCurrent?.() === false) {
+            return reconciledSystemContainerCount;
+        }
+        await reconcileLocalOnlySystemContainer({
+            childIdsByParentId,
+            isCurrent: input.isCurrent,
+            localSystemState,
+            remoteSystemState,
+            state,
+        });
+        if (input.isCurrent?.() === false) {
+            return reconciledSystemContainerCount;
+        }
+        reconciledSystemContainerCount += 1;
+    }
+    if (reconciledSystemContainerCount > 0) {
+        input.requestDocumentPriming?.();
+    }
+    return reconciledSystemContainerCount;
+}
+//# sourceMappingURL=reconciliation.js.map

package/workflows/container-contents/remoteHydration/reconciliation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconciliation.js","sourceRoot":"","sources":["reconciliation.ts"],"names":[],"mappings":"AACA,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AAMtB,OAAO,EACL,kBAAkB,EAClB,uCAAuC,GACxC,MAAM,uBAAuB,CAAC;AAE/B,MAAM,UAAU,+BAA+B,CAC7C,cAA8B;IAE9B,OAAO,CACL,OAAO,cAAc,CAAC,MAAM,CAAC,UAAU,KAAK,QAAQ;QACpD,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAC3C,OAAO,cAAc,CAAC,MAAM,CAAC,eAAe,KAAK,QAAQ;QACzD,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;QAChD,OAAO,cAAc,CAAC,SAAS,CAAC,kBAAkB,KAAK,QAAQ;QAC/D,cAAc,CAAC,SAAS,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CACvD,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CACpC,cAA8B;IAE9B,OAAO,CACL,cAAc,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;QAC1C,CAAC,cAAc,CAAC,SAAS,CAAC,UAAU;QACpC,CAAC,+BAA+B,CAAC,cAAc,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,KAItC;IACC,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC;IACtE,MAAM,aAAa,GAAqB,EAAE,CAAC;IAC3C,MAAM,mBAAmB,GAAG,CAAC,eAAe,CAAC,CAAC;IAC9C,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS,CAAC,eAAe,CAAC,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,kBAAkB,IAAI,yBAAyB,CAAC,cAAc,CAAC,CAAC;IAE9E,OAAO,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,mBAAmB,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,iCAAiC,CAAC,KAK1C;IAIC,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7E,MAAM,WAAW,GAAG,6BAA6B,CAAC;QAChD,kBAAkB;QAClB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,eAAe,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE;KAC7C,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QACzD,MAAM,gBAAgB,GAAG,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC;QACvD,MAAM,iBAAiB,GACrB,gBAAgB,KAAK,cAAc,CAAC,SAAS,CAAC,EAAE;YAC9C,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE;YAC9B,CAAC,CAAC,gBAAgB,CAAC;QAEvB,OAAO;YACL,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE;YACpC,iBAAiB;YACjB,kBAAkB,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,iBAAiB;SACzE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,iCAAiC,CAAC,KAM1C;IACC,MAAM,EACJ,kBAAkB,EAClB,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,SAAS,GACV,GAAG,KAAK,CAAC;IACV,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,mBAAmB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CACxE,CAAC;IAEF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,gBAAgB,GAAG,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC;QACvD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QAED,UAAU,CAAC,SAAS,GAAG;YACrB,GAAG,UAAU,CAAC,SAAS;YACvB,cAAc,EAAE,eAAe,CAAC,SAAS,CAAC,cAAc;YACxD,QAAQ,EAAE,QAAQ,CAAC,iBAAiB;YACpC,cAAc,EAAE,SAAS;YACzB,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,eAAe,IAAI,SAAS;SAC7D,CAAC;QACF,yBAAyB,CACvB,kBAAkB,EAClB,UAAU,CAAC,SAAS,CAAC,EAAE,EACvB,gBAAgB,EAChB,QAAQ,CAAC,iBAAiB,CAC3B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,KAInC;IACC,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACjD,MAAM,qBAAqB,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC;IACvE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IACzC,IACE,CAAC,OAAO;QACR,CAAC,qBAAqB;QACtB,qBAAqB,KAAK,eAAe,CAAC,SAAS,CAAC,cAAc;QAClE,CAAC,MAAM,EACP,CAAC;QACD,OAAO;IACT,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,6EAA6E;IAC7E,OAAO,CAAC;QACN,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW;QAC5C,mBAAmB,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE;QAChD,eAAe,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE;QAC7C,cAAc,EAAE,eAAe,CAAC,SAAS,CAAC,cAAc;QACxD,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,KAM9C;IACC,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,GACxC,iCAAiC,CAAC;QAChC,kBAAkB;QAClB,cAAc;QACd,eAAe;QACf,KAAK;KACN,CAAC,CAAC;IAEL,MAAM,KAAK,CAAC,WAAW,CAAC,2BAA2B,CAAC,OAAO,EAAE;QAC3D,mBAAmB;QACnB,oBAAoB,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE;QACjD,oBAAoB,EAAE,eAAe,CAAC,SAAS,CAAC,cAAc;QAC9D,qBAAqB,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE;QACnD,YAAY,EAAE,KAAK,CAAC,SAAS;QAC7B,SAAS;KACV,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO;IACT,CAAC;IACD,iCAAiC,CAAC;QAChC,kBAAkB;QAClB,mBAAmB;QACnB,WAAW;QACX,eAAe;QACf,SAAS;KACV,CAAC,CAAC;IAEH,IAAI,kBAAkB,EAAE,CAAC;QACvB,2BAA2B,CACzB,kBAAkB,EAClB,cAAc,CAAC,SAAS,CAAC,EAAE,EAC3B,cAAc,CAAC,SAAS,CAAC,QAAQ,CAClC,CAAC;QACF,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACzD,0BAA0B,CAAC,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,6CAA6C,cAAc,CAAC,SAAS,CAAC,EAAE,qBAAqB,eAAe,CAAC,SAAS,CAAC,EAAE,EAAE,CAC5H,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,KAMtD;IACC,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7D,IACE,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAC7B,CAAC,kBAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,EAC3C,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACtE,CAAC,cAAc,EAAE,EAAE,CACjB,cAAc,CAAC,SAAS,CAAC,EAAE,KAAK,eAAe,CAAC,SAAS,CAAC,EAAE;QAC5D,6BAA6B,CAAC,cAAc,CAAC,CAChD,CAAC;IACF,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,6DAA6D;IAC7D,IACE,eAAe,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,MAAM,uCAAuC,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,EAC5E,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,4BAA4B,GAAG,CAAC,CAAC;IACrC,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;YAClC,OAAO,4BAA4B,CAAC;QACtC,CAAC;QACD,MAAM,+BAA+B,CAAC;YACpC,kBAAkB;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc;YACd,eAAe;YACf,KAAK;SACN,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;YAClC,OAAO,4BAA4B,CAAC;QACtC,CAAC;QACD,4BAA4B,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,4EAA4E;IAC5E,8EAA8E;IAC9E,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IAC9E,IAAI,8BAA8B,GAAG,CAAC,CAAC;IACvC,KAAK,MAAM,sBAAsB,IAAI,KAAK,CAAC,IAAI,CAC7C,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAC9B,EAAE,CAAC;QACF,IACE,CAAC,sBAAsB,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,IAAI;YAC9D,+BAA+B,CAAC,sBAAsB,CAAC,EACvD,CAAC;YACD,8BAA8B;gBAC5B,MAAM,kCAAkC,CAAC;oBACvC,kBAAkB;oBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,iBAAiB,EAAE,sBAAsB;oBACzC,KAAK;iBACN,CAAC,CAAC;QACP,CAAC;IACH,CAAC;IACD,IAAI,4BAA4B,GAAG,8BAA8B,GAAG,CAAC,EAAE,CAAC;QACtE,KAAK,CAAC,sBAAsB,EAAE,EAAE,CAAC;IACnC,CAAC;IAED,OAAO,4BAA4B,CAAC;AACtC,CAAC;AAED,SAAS,+BAA+B,CAAC,KAIxC;IACC,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC3D,MAAM,eAAe,GAAG,cAAc,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC;IACpE,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC;IAExE,IACE,gBAAgB,KAAK,IAAI;QACzB,eAAe,KAAK,gBAAgB;QACpC,cAAc,CAAC,SAAS,CAAC,EAAE,KAAK,iBAAiB,CAAC,SAAS,CAAC,EAAE;QAC9D,+BAA+B,CAAC,cAAc,CAAC,EAC/C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,oBAAoB,GACxB,cAAc,CAAC,SAAS,CAAC,cAAc;QACrC,iBAAiB,CAAC,SAAS,CAAC,cAAc;QAC5C,cAAc,CAAC,SAAS,CAAC,QAAQ,KAAK,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC;IAC7E,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;IAC7D,IACE,CAAC,kBAAkB;QACnB,iBAAiB,CAAC,SAAS,CAAC,cAAc,KAAK,kBAAkB;QACjE,cAAc,CAAC,SAAS,CAAC,cAAc,KAAK,EAAE,EAC9C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,aAAa,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC;IACxD,MAAM,gBAAgB,GAAG,aAAa;QACpC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC;IAET,OAAO,CAAC,gBAAgB,IAAI,6BAA6B,CAAC,gBAAgB,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kCAAkC,CAAC,KAG3C;IACC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC3C,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,EAAE,CACzE,+BAA+B,CAAC;QAC9B,cAAc;QACd,iBAAiB;QACjB,KAAK;KACN,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,uCAAuC,CAAC,KAMhD;IACC,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,KAAK,EAAE,GACtE,KAAK,CAAC;IACR,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;IACvD,MAAM,iBAAiB,GAAG,kBAAkB;QAC1C,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAC5D,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CACnE,cAAc,CAAC,SAAS,CAAC,QAAQ,KAAK,gBAAgB;YACpD,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,CAAC,CAAC,EAAE,CACP,CAAC;IAEN,KAAK,MAAM,gBAAgB,IAAI,iBAAiB,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAS;QACX,CAAC;QAED,MAAM,gBAAgB,GAAG,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC;QACvD,UAAU,CAAC,SAAS,GAAG;YACrB,GAAG,UAAU,CAAC,SAAS;YACvB,cAAc,EAAE,iBAAiB,CAAC,SAAS,CAAC,cAAc;YAC1D,QAAQ,EAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE;YACxC,cAAc,EAAE,KAAK,CAAC,SAAS;YAC/B,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,eAAe,IAAI,KAAK,CAAC,SAAS;SACnE,CAAC;QACF,yBAAyB,CACvB,kBAAkB,EAClB,UAAU,CAAC,SAAS,CAAC,EAAE,EACvB,gBAAgB,EAChB,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAC/B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iCAAiC,CAAC,KAMhD;IACC,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,KAAK,EAAE,GACtE,KAAK,CAAC;IACR,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAE5C,MAAM,KAAK,CAAC,WAAW,CAAC,6BAA6B,CAAC,OAAO,EAAE;QAC7D,gBAAgB,EAAE,gBAAgB,CAAC,SAAS,CAAC,EAAE;QAC/C,iBAAiB,EAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE;QACjD,oBAAoB,EAAE,iBAAiB,CAAC,SAAS,CAAC,cAAc;QAChE,YAAY,EAAE,KAAK,CAAC,SAAS;QAC7B,SAAS;KACV,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO;IACT,CAAC;IACD,uCAAuC,CAAC;QACtC,kBAAkB;QAClB,gBAAgB;QAChB,iBAAiB;QACjB,KAAK;QACL,SAAS;KACV,CAAC,CAAC;IAEH,IAAI,kBAAkB,EAAE,CAAC;QACvB,2BAA2B,CACzB,kBAAkB,EAClB,gBAAgB,CAAC,SAAS,CAAC,EAAE,EAC7B,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CACpC,CAAC;QACF,kBAAkB,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC3D,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,yDAAyD,gBAAgB,CAAC,SAAS,CAAC,EAAE,iCAAiC,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CACxJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,KAMxD;IACC,MAAM,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC/D,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,iBAAiB,GAAG,kCAAkC,CAAC;QAC3D,iBAAiB;QACjB,KAAK;KACN,CAAC,CAAC;IAEH,IAAI,8BAA8B,GAAG,CAAC,CAAC;IACvC,KAAK,MAAM,gBAAgB,IAAI,iBAAiB,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;YAClC,OAAO,8BAA8B,CAAC;QACxC,CAAC;QACD,MAAM,iCAAiC,CAAC;YACtC,kBAAkB;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,gBAAgB;YAChB,iBAAiB;YACjB,KAAK;SACN,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;YAClC,OAAO,8BAA8B,CAAC;QACxC,CAAC;QACD,8BAA8B,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,8BAA8B,GAAG,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,sBAAsB,EAAE,EAAE,CAAC;IACnC,CAAC;IAED,OAAO,8BAA8B,CAAC;AACxC,CAAC","sourcesContent":["import type { LocalRootDescendantReparentInput } from \"../containerPersistence\";\nimport {\n  createContainerChildIndex,\n  moveIndexedContainerChild,\n  removeIndexedContainerChild,\n} from \"./childIndex\";\nimport type {\n  ContainerChildIndex,\n  ContainerState,\n  RemoteContainerHydrationState,\n} from \"./types\";\nimport {\n  isSessionRootState,\n  isVerifiedLocalRootReconciliationTarget,\n} from \"./verifiedDestination\";\n\nexport function hasRemoteContainerMetadataState(\n  containerState: ContainerState,\n): boolean {\n  return (\n    typeof containerState.record.documentId === \"string\" &&\n    containerState.record.documentId.length > 0 &&\n    typeof containerState.record.accessStateHash === \"string\" &&\n    containerState.record.accessStateHash.length > 0 &&\n    typeof containerState.container.metadataDocumentId === \"string\" &&\n    containerState.container.metadataDocumentId.length > 0\n  );\n}\n\nfunction isLocalOnlyRootContainerState(\n  containerState: ContainerState,\n): boolean {\n  return (\n    containerState.container.parentId === null &&\n    !containerState.container.systemSlot &&\n    !hasRemoteContainerMetadataState(containerState)\n  );\n}\n\nfunction collectContainerSubtreeStates(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  containersById: ReadonlyMap<string, ContainerState>;\n  rootContainerId: string;\n}): ContainerState[] {\n  const { childIdsByParentId, containersById, rootContainerId } = input;\n  const subtreeStates: ContainerState[] = [];\n  const pendingContainerIds = [rootContainerId];\n  const enqueuedContainerIds = new Set<string>([rootContainerId]);\n  const index = childIdsByParentId ?? createContainerChildIndex(containersById);\n\n  while (pendingContainerIds.length > 0) {\n    const containerId = pendingContainerIds.pop();\n    if (!containerId) {\n      continue;\n    }\n\n    const childIds = index.get(containerId);\n    if (!childIds) {\n      continue;\n    }\n\n    for (const childId of childIds) {\n      if (enqueuedContainerIds.has(childId)) {\n        continue;\n      }\n      const childState = containersById.get(childId);\n      if (!childState) {\n        continue;\n      }\n\n      enqueuedContainerIds.add(childId);\n      subtreeStates.push(childState);\n      pendingContainerIds.push(childId);\n    }\n  }\n\n  return subtreeStates;\n}\n\nfunction buildLocalRootDescendantReparents(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  localRootState: ContainerState;\n  remoteRootState: ContainerState;\n  state: RemoteContainerHydrationState;\n}): {\n  descendantReparents: LocalRootDescendantReparentInput[];\n  descendants: ContainerState[];\n} {\n  const { childIdsByParentId, localRootState, remoteRootState, state } = input;\n  const descendants = collectContainerSubtreeStates({\n    childIdsByParentId,\n    containersById: state.containersById,\n    rootContainerId: localRootState.container.id,\n  });\n  const descendantReparents = descendants.map((descendant) => {\n    const previousParentId = descendant.container.parentId;\n    const parentContainerId =\n      previousParentId === localRootState.container.id\n        ? remoteRootState.container.id\n        : previousParentId;\n\n    return {\n      containerId: descendant.container.id,\n      parentContainerId,\n      updateCreateIntent: !descendant.record.documentId && !!parentContainerId,\n    };\n  });\n\n  return { descendantReparents, descendants };\n}\n\nfunction applyLocalRootDescendantReparents(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  descendantReparents: ReadonlyArray<LocalRootDescendantReparentInput>;\n  descendants: ReadonlyArray<ContainerState>;\n  remoteRootState: ContainerState;\n  updatedAt: string;\n}): void {\n  const {\n    childIdsByParentId,\n    descendantReparents,\n    descendants,\n    remoteRootState,\n    updatedAt,\n  } = input;\n  const reparentByContainerId = new Map(\n    descendantReparents.map((reparent) => [reparent.containerId, reparent]),\n  );\n\n  for (const descendant of descendants) {\n    const previousParentId = descendant.container.parentId;\n    const reparent = reparentByContainerId.get(descendant.container.id);\n    if (!reparent) {\n      continue;\n    }\n\n    descendant.container = {\n      ...descendant.container,\n      organizationId: remoteRootState.container.organizationId,\n      parentId: reparent.parentContainerId,\n      localUpdatedAt: updatedAt,\n      updatedAt: descendant.container.serverUpdatedAt ?? updatedAt,\n    };\n    moveIndexedContainerChild(\n      childIdsByParentId,\n      descendant.container.id,\n      previousParentId,\n      reparent.parentContainerId,\n    );\n  }\n}\n\nfunction adoptReconciledSessionRoot(input: {\n  localRootState: ContainerState;\n  remoteRootState: ContainerState;\n  state: RemoteContainerHydrationState;\n}): void {\n  const { localRootState, remoteRootState, state } = input;\n  const adopter = state.runtime.adoptRootContainer;\n  const defaultOrganizationId = state.runtime.auth.defaultOrganizationId;\n  const userId = state.runtime.auth.userId;\n  if (\n    !adopter ||\n    !defaultOrganizationId ||\n    defaultOrganizationId === remoteRootState.container.organizationId ||\n    !userId\n  ) {\n    return;\n  }\n\n  // Personal-org adoption waits for the complete root lane so hydration cannot\n  // re-enter the store before its child lanes are applied. The heuristic is\n  // intentionally personal-only, so use this exact durable identity pair to\n  // close the corresponding recovery gap for an active secondary organization.\n  adopter({\n    domainScope: state.runtime.state.domainScope,\n    expectedContainerId: localRootState.container.id,\n    nextContainerId: remoteRootState.container.id,\n    organizationId: remoteRootState.container.organizationId,\n    userId,\n  });\n}\n\nasync function reconcileLocalOnlyRootContainer(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  localRootState: ContainerState;\n  remoteRootState: ContainerState;\n  state: RemoteContainerHydrationState;\n}): Promise<void> {\n  const { childIdsByParentId, localRootState, remoteRootState, state } = input;\n  const execSql = state.runtime.infra.execSql;\n  const updatedAt = new Date().toISOString();\n  const { descendantReparents, descendants } =\n    buildLocalRootDescendantReparents({\n      childIdsByParentId,\n      localRootState,\n      remoteRootState,\n      state,\n    });\n\n  await state.persistence.reconcileLocalRootContainer(execSql, {\n    descendantReparents,\n    localRootContainerId: localRootState.container.id,\n    remoteOrganizationId: remoteRootState.container.organizationId,\n    remoteRootContainerId: remoteRootState.container.id,\n    stillCurrent: input.isCurrent,\n    updatedAt,\n  });\n  if (input.isCurrent?.() === false) {\n    return;\n  }\n  applyLocalRootDescendantReparents({\n    childIdsByParentId,\n    descendantReparents,\n    descendants,\n    remoteRootState,\n    updatedAt,\n  });\n\n  if (childIdsByParentId) {\n    removeIndexedContainerChild(\n      childIdsByParentId,\n      localRootState.container.id,\n      localRootState.container.parentId,\n    );\n    childIdsByParentId.delete(localRootState.container.id);\n  }\n  state.containersById.delete(localRootState.container.id);\n  adoptReconciledSessionRoot({ localRootState, remoteRootState, state });\n  state.runtime.util.log(\n    `Container contents: reconciled local root ${localRootState.container.id} into remote root ${remoteRootState.container.id}`,\n  );\n}\n\nexport async function reconcileLocalOnlyRootContainers(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  requestDocumentPriming?: (() => void) | undefined;\n  remoteRootState: ContainerState;\n  state: RemoteContainerHydrationState;\n}): Promise<number> {\n  const { childIdsByParentId, remoteRootState, state } = input;\n  if (\n    input.isCurrent?.() === false ||\n    !isSessionRootState(remoteRootState, state)\n  ) {\n    return 0;\n  }\n\n  const localRootStates = Array.from(state.containersById.values()).filter(\n    (containerState) =>\n      containerState.container.id !== remoteRootState.container.id &&\n      isLocalOnlyRootContainerState(containerState),\n  );\n  // The unsigned login answer names the root; only the verified root created\n  // by the session user may absorb local content (see verifiedDestination).\n  // Checked only when there is local root content to merge, from the cached\n  // role alone, so a local refresh never waits on the network.\n  if (\n    localRootStates.length > 0 &&\n    !(await isVerifiedLocalRootReconciliationTarget({ remoteRootState, state }))\n  ) {\n    return 0;\n  }\n\n  let reconciledRootContainerCount = 0;\n  for (const localRootState of localRootStates) {\n    if (input.isCurrent?.() === false) {\n      return reconciledRootContainerCount;\n    }\n    await reconcileLocalOnlyRootContainer({\n      childIdsByParentId,\n      isCurrent: input.isCurrent,\n      localRootState,\n      remoteRootState,\n      state,\n    });\n    if (input.isCurrent?.() === false) {\n      return reconciledRootContainerCount;\n    }\n    reconciledRootContainerCount += 1;\n  }\n  // A remote system child can be applied before its remote root (for example,\n  // from an earlier page/pass). Its local twin does not match while it is still\n  // parented to the pre-auth root. Root reconciliation fixes the parent and\n  // organization, so retry every already-known remote system sibling now. The\n  // normal root-first ordering still reconciles when the remote system arrives.\n  let reconciledSystemContainerCount = 0;\n  for (const knownRemoteSystemState of Array.from(\n    state.containersById.values(),\n  )) {\n    if (\n      (knownRemoteSystemState.container.systemSlot ?? null) !== null &&\n      hasRemoteContainerMetadataState(knownRemoteSystemState)\n    ) {\n      reconciledSystemContainerCount +=\n        await reconcileLocalOnlySystemContainers({\n          childIdsByParentId,\n          isCurrent: input.isCurrent,\n          remoteSystemState: knownRemoteSystemState,\n          state,\n        });\n    }\n  }\n  if (reconciledRootContainerCount + reconciledSystemContainerCount > 0) {\n    input.requestDocumentPriming?.();\n  }\n\n  return reconciledRootContainerCount;\n}\n\nfunction isLocalOnlySystemContainerState(input: {\n  containerState: ContainerState;\n  remoteSystemState: ContainerState;\n  state: RemoteContainerHydrationState;\n}): boolean {\n  const { containerState, remoteSystemState, state } = input;\n  const localSystemSlot = containerState.container.systemSlot ?? null;\n  const remoteSystemSlot = remoteSystemState.container.systemSlot ?? null;\n\n  if (\n    remoteSystemSlot === null ||\n    localSystemSlot !== remoteSystemSlot ||\n    containerState.container.id === remoteSystemState.container.id ||\n    hasRemoteContainerMetadataState(containerState)\n  ) {\n    return false;\n  }\n\n  const sharesRemoteLocation =\n    containerState.container.organizationId ===\n      remoteSystemState.container.organizationId &&\n    containerState.container.parentId === remoteSystemState.container.parentId;\n  if (sharesRemoteLocation) {\n    return true;\n  }\n\n  const homeOrganizationId = state.runtime.auth.organizationId;\n  if (\n    !homeOrganizationId ||\n    remoteSystemState.container.organizationId !== homeOrganizationId ||\n    containerState.container.organizationId !== \"\"\n  ) {\n    return false;\n  }\n\n  const localParentId = containerState.container.parentId;\n  const localParentState = localParentId\n    ? state.containersById.get(localParentId)\n    : null;\n\n  return !localParentState || isLocalOnlyRootContainerState(localParentState);\n}\n\nfunction findLocalOnlySystemContainerStates(input: {\n  remoteSystemState: ContainerState;\n  state: RemoteContainerHydrationState;\n}): ContainerState[] {\n  const { remoteSystemState, state } = input;\n  if ((remoteSystemState.container.systemSlot ?? null) === null) {\n    return [];\n  }\n\n  return Array.from(state.containersById.values()).filter((containerState) =>\n    isLocalOnlySystemContainerState({\n      containerState,\n      remoteSystemState,\n      state,\n    }),\n  );\n}\n\nfunction applyLocalSystemContainerChildReparents(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  localSystemState: ContainerState;\n  remoteSystemState: ContainerState;\n  state: RemoteContainerHydrationState;\n  updatedAt: string;\n}): void {\n  const { childIdsByParentId, localSystemState, remoteSystemState, state } =\n    input;\n  const localContainerId = localSystemState.container.id;\n  const childContainerIds = childIdsByParentId\n    ? Array.from(childIdsByParentId.get(localContainerId) ?? [])\n    : Array.from(state.containersById.values()).flatMap((containerState) =>\n        containerState.container.parentId === localContainerId\n          ? [containerState.container.id]\n          : [],\n      );\n\n  for (const childContainerId of childContainerIds) {\n    const childState = state.containersById.get(childContainerId);\n    if (!childState) {\n      continue;\n    }\n\n    const previousParentId = childState.container.parentId;\n    childState.container = {\n      ...childState.container,\n      organizationId: remoteSystemState.container.organizationId,\n      parentId: remoteSystemState.container.id,\n      localUpdatedAt: input.updatedAt,\n      updatedAt: childState.container.serverUpdatedAt ?? input.updatedAt,\n    };\n    moveIndexedContainerChild(\n      childIdsByParentId,\n      childState.container.id,\n      previousParentId,\n      remoteSystemState.container.id,\n    );\n  }\n}\n\nasync function reconcileLocalOnlySystemContainer(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  localSystemState: ContainerState;\n  remoteSystemState: ContainerState;\n  state: RemoteContainerHydrationState;\n}): Promise<void> {\n  const { childIdsByParentId, localSystemState, remoteSystemState, state } =\n    input;\n  const updatedAt = new Date().toISOString();\n  const execSql = state.runtime.infra.execSql;\n\n  await state.persistence.reconcileLocalSystemContainer(execSql, {\n    localContainerId: localSystemState.container.id,\n    remoteContainerId: remoteSystemState.container.id,\n    remoteOrganizationId: remoteSystemState.container.organizationId,\n    stillCurrent: input.isCurrent,\n    updatedAt,\n  });\n  if (input.isCurrent?.() === false) {\n    return;\n  }\n  applyLocalSystemContainerChildReparents({\n    childIdsByParentId,\n    localSystemState,\n    remoteSystemState,\n    state,\n    updatedAt,\n  });\n\n  if (childIdsByParentId) {\n    removeIndexedContainerChild(\n      childIdsByParentId,\n      localSystemState.container.id,\n      localSystemState.container.parentId,\n    );\n    childIdsByParentId.delete(localSystemState.container.id);\n  }\n  state.containersById.delete(localSystemState.container.id);\n  state.runtime.util.log(\n    `Container contents: reconciled local system container ${localSystemState.container.id} into remote system container ${remoteSystemState.container.id}`,\n  );\n}\n\nexport async function reconcileLocalOnlySystemContainers(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  requestDocumentPriming?: (() => void) | undefined;\n  remoteSystemState: ContainerState;\n  state: RemoteContainerHydrationState;\n}): Promise<number> {\n  const { childIdsByParentId, remoteSystemState, state } = input;\n  if (input.isCurrent?.() === false) {\n    return 0;\n  }\n  const localSystemStates = findLocalOnlySystemContainerStates({\n    remoteSystemState,\n    state,\n  });\n\n  let reconciledSystemContainerCount = 0;\n  for (const localSystemState of localSystemStates) {\n    if (input.isCurrent?.() === false) {\n      return reconciledSystemContainerCount;\n    }\n    await reconcileLocalOnlySystemContainer({\n      childIdsByParentId,\n      isCurrent: input.isCurrent,\n      localSystemState,\n      remoteSystemState,\n      state,\n    });\n    if (input.isCurrent?.() === false) {\n      return reconciledSystemContainerCount;\n    }\n    reconciledSystemContainerCount += 1;\n  }\n  if (reconciledSystemContainerCount > 0) {\n    input.requestDocumentPriming?.();\n  }\n\n  return reconciledSystemContainerCount;\n}\n"]}

package/workflows/container-contents/remoteHydration/remoteContainerTimestamps.js

@@ -0,0 +1,31 @@
+export function applyRemoteContainerTimestamps(container, remoteContainer) {
+    return {
+        ...container,
+        createdAt: remoteContainer.createdAt,
+        effectiveAccessLevel: remoteContainer.effectiveAccessLevel,
+        serverCreatedAt: remoteContainer.createdAt,
+        serverUpdatedAt: remoteContainer.updatedAt,
+        updatedAt: remoteContainer.updatedAt,
+    };
+}
+export function remoteContainerHydrationSaveOptions(input) {
+    return {
+        localUpdatedAt: input.localUpdatedAt ?? input.remoteContainer.updatedAt,
+        serverTimestamps: {
+            createdAt: input.remoteContainer.createdAt,
+            updatedAt: input.remoteContainer.updatedAt,
+        },
+    };
+}
+export function resolveRemoteContainerHydrationLocalUpdatedAt(input) {
+    const { containerIdsWithPendingMetadataUpdates, hasPendingStructuralIntent, previousLocalUpdatedAt, remoteContainer, } = input;
+    if (!previousLocalUpdatedAt ||
+        previousLocalUpdatedAt.localeCompare(remoteContainer.updatedAt) <= 0) {
+        return remoteContainer.updatedAt;
+    }
+    return containerIdsWithPendingMetadataUpdates.has(remoteContainer.id) ||
+        hasPendingStructuralIntent
+        ? previousLocalUpdatedAt
+        : remoteContainer.updatedAt;
+}
+//# sourceMappingURL=remoteContainerTimestamps.js.map

package/workflows/container-contents/remoteHydration/remoteContainerTimestamps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteContainerTimestamps.js","sourceRoot":"","sources":["remoteContainerTimestamps.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,8BAA8B,CAC5C,SAA0B,EAC1B,eAAgC;IAEhC,OAAO;QACL,GAAG,SAAS;QACZ,SAAS,EAAE,eAAe,CAAC,SAAS;QACpC,oBAAoB,EAAE,eAAe,CAAC,oBAAoB;QAC1D,eAAe,EAAE,eAAe,CAAC,SAAS;QAC1C,eAAe,EAAE,eAAe,CAAC,SAAS;QAC1C,SAAS,EAAE,eAAe,CAAC,SAAS;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,KAGnD;IACC,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,eAAe,CAAC,SAAS;QACvE,gBAAgB,EAAE;YAChB,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC,SAAS;YAC1C,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC,SAAS;SAC3C;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6CAA6C,CAAC,KAK7D;IACC,MAAM,EACJ,sCAAsC,EACtC,0BAA0B,EAC1B,sBAAsB,EACtB,eAAe,GAChB,GAAG,KAAK,CAAC;IACV,IACE,CAAC,sBAAsB;QACvB,sBAAsB,CAAC,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,EACpE,CAAC;QACD,OAAO,eAAe,CAAC,SAAS,CAAC;IACnC,CAAC;IAED,OAAO,sCAAsC,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QACnE,0BAA0B;QAC1B,CAAC,CAAC,sBAAsB;QACxB,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC;AAChC,CAAC","sourcesContent":["import type { ContainerRecord } from \"../containerPersistence\";\nimport type { RemoteContainer, SaveContainerOptions } from \"./types\";\n\nexport function applyRemoteContainerTimestamps(\n  container: ContainerRecord,\n  remoteContainer: RemoteContainer,\n): ContainerRecord {\n  return {\n    ...container,\n    createdAt: remoteContainer.createdAt,\n    effectiveAccessLevel: remoteContainer.effectiveAccessLevel,\n    serverCreatedAt: remoteContainer.createdAt,\n    serverUpdatedAt: remoteContainer.updatedAt,\n    updatedAt: remoteContainer.updatedAt,\n  };\n}\n\nexport function remoteContainerHydrationSaveOptions(input: {\n  localUpdatedAt?: string | null | undefined;\n  remoteContainer: RemoteContainer;\n}): NonNullable<SaveContainerOptions> {\n  return {\n    localUpdatedAt: input.localUpdatedAt ?? input.remoteContainer.updatedAt,\n    serverTimestamps: {\n      createdAt: input.remoteContainer.createdAt,\n      updatedAt: input.remoteContainer.updatedAt,\n    },\n  };\n}\n\nexport function resolveRemoteContainerHydrationLocalUpdatedAt(input: {\n  containerIdsWithPendingMetadataUpdates: ReadonlySet<string>;\n  hasPendingStructuralIntent: boolean;\n  previousLocalUpdatedAt: string | null | undefined;\n  remoteContainer: RemoteContainer;\n}): string {\n  const {\n    containerIdsWithPendingMetadataUpdates,\n    hasPendingStructuralIntent,\n    previousLocalUpdatedAt,\n    remoteContainer,\n  } = input;\n  if (\n    !previousLocalUpdatedAt ||\n    previousLocalUpdatedAt.localeCompare(remoteContainer.updatedAt) <= 0\n  ) {\n    return remoteContainer.updatedAt;\n  }\n\n  return containerIdsWithPendingMetadataUpdates.has(remoteContainer.id) ||\n    hasPendingStructuralIntent\n    ? previousLocalUpdatedAt\n    : remoteContainer.updatedAt;\n}\n"]}

package/workflows/container-contents/remoteHydration/replacementBinding.js

@@ -0,0 +1,75 @@
+import { KeyingVerificationError, verifyOrganizationReplacementAuthorization, } from "../../../internal/crypto/index.js";
+import { assertHeldContainerBinding, } from "../../../data/containers/containerBinding.js";
+import { ProjectionDependencyUnavailableError } from "../../../data/keyingProjectionVerification/dependencyUnavailable.js";
+import { loadOrganizationFounder } from "../../../data/persistence/organizationFounderPersistence.js";
+import { persistOrganizationReplacementCheckpoints } from "../../../data/persistence/organizationReplacementCheckpointPersistence.js";
+async function acceptsSharedReplacement(input, oldOrganizationId) {
+    const { listed, role, runtime } = input;
+    const founder = await loadOrganizationFounder(runtime.infra.execSql, oldOrganizationId);
+    if (!founder || role.createSignerUserId !== founder.userId)
+        return false;
+    const identity = await runtime.resolveTrustedUserIdentity(founder.userId);
+    if (!identity)
+        throw new ProjectionDependencyUnavailableError("Replacement founder identity is unavailable");
+    if (identity.signingKeyFingerprint !== founder.signingKeyFingerprint)
+        throw new KeyingVerificationError("signer_mismatch", "Replacement founder differs from the held organization's pinned identity");
+    const response = await runtime.apiClient.getContainerReplacementAuthorizationsResult(listed.id, oldOrganizationId);
+    if (!response.ok) {
+        if (response.status === 404)
+            return false;
+        throw new ProjectionDependencyUnavailableError(response.message);
+    }
+    const last = verifyReplacementLineage(response.data.authorizations, oldOrganizationId, founder.userId, identity.signingPublicKey);
+    const replacementFounder = await loadOrganizationFounder(runtime.infra.execSql, listed.organizationId);
+    if (last?.organizationId !== listed.organizationId ||
+        replacementFounder?.userId !== founder.userId ||
+        replacementFounder.signingKeyFingerprint !==
+            founder.signingKeyFingerprint ||
+        replacementFounder.genesisStateHash !== last.organizationStateHash ||
+        role.rootContainerId !== last.rootContainerId ||
+        role.rootCreateManifestHash !== last.rootManifestHash ||
+        role.rootMetadataDocumentId !== last.rootMetadataDocumentId)
+        throw new KeyingVerificationError("object_mismatch", "Replacement authorization does not bind the destination genesis");
+    // The founder also commits the reserved groups' genesis. Pin those even
+    // when the readable folder's projection does not cite both groups yet.
+    await persistOrganizationReplacementCheckpoints({
+        authorization: last,
+        execSql: runtime.infra.execSql,
+        stillCurrent: input.stillCurrent,
+    });
+    return true;
+}
+function verifyReplacementLineage(authorizations, oldOrganizationId, userId, signingPublicKey) {
+    let expected = oldOrganizationId;
+    const visited = new Set([expected]);
+    let last;
+    for (const candidate of authorizations) {
+        const proof = verifyOrganizationReplacementAuthorization(candidate, signingPublicKey);
+        if (proof.replacesOrganizationId !== expected ||
+            proof.userId !== userId ||
+            visited.has(proof.organizationId))
+            throw new KeyingVerificationError("object_mismatch", "Replacement authorization lineage does not extend the held organization");
+        expected = proof.organizationId;
+        visited.add(expected);
+        last = proof;
+    }
+    return last;
+}
+/** A foreign creator needs the held organization's pinned founder to authorize rehome. */
+export async function assertPermittedDestinationBinding(input) {
+    const { heldBinding: held, listed, role, runtime } = input;
+    if (role.createSignerUserId === runtime.auth.userId)
+        return;
+    if (held?.metadataDocumentId === null)
+        throw new KeyingVerificationError("signer_mismatch", "a local folder can bind only to its own signed create");
+    if (held?.organizationId &&
+        held.organizationId !== listed.organizationId &&
+        role.systemSlot === null &&
+        (await acceptsSharedReplacement(input, held.organizationId)))
+        return;
+    assertHeldContainerBinding(held, {
+        organizationId: listed.organizationId,
+        metadataDocumentIds: [role.metadataDocumentId],
+    });
+}
+//# sourceMappingURL=replacementBinding.js.map

package/workflows/container-contents/remoteHydration/replacementBinding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replacementBinding.js","sourceRoot":"","sources":["replacementBinding.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,0CAA0C,GAC3C,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,0BAA0B,GAE3B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,oCAAoC,EAAE,MAAM,kEAAkE,CAAC;AACxH,OAAO,EAAE,uBAAuB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,yCAAyC,EAAE,MAAM,wEAAwE,CAAC;AAYnI,KAAK,UAAU,wBAAwB,CACrC,KAAmB,EACnB,iBAAyB;IAEzB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAC3C,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,kBAAkB,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ;QACX,MAAM,IAAI,oCAAoC,CAC5C,6CAA6C,CAC9C,CAAC;IACJ,IAAI,QAAQ,CAAC,qBAAqB,KAAK,OAAO,CAAC,qBAAqB;QAClE,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,0EAA0E,CAC3E,CAAC;IACJ,MAAM,QAAQ,GACZ,MAAM,OAAO,CAAC,SAAS,CAAC,2CAA2C,CACjE,MAAM,CAAC,EAAE,EACT,iBAAiB,CAClB,CAAC;IACJ,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,IAAI,oCAAoC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,wBAAwB,CACnC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAC5B,iBAAiB,EACjB,OAAO,CAAC,MAAM,EACd,QAAQ,CAAC,gBAAgB,CAC1B,CAAC;IACF,MAAM,kBAAkB,GAAG,MAAM,uBAAuB,CACtD,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,MAAM,CAAC,cAAc,CACtB,CAAC;IACF,IACE,IAAI,EAAE,cAAc,KAAK,MAAM,CAAC,cAAc;QAC9C,kBAAkB,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM;QAC7C,kBAAkB,CAAC,qBAAqB;YACtC,OAAO,CAAC,qBAAqB;QAC/B,kBAAkB,CAAC,gBAAgB,KAAK,IAAI,CAAC,qBAAqB;QAClE,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe;QAC7C,IAAI,CAAC,sBAAsB,KAAK,IAAI,CAAC,gBAAgB;QACrD,IAAI,CAAC,sBAAsB,KAAK,IAAI,CAAC,sBAAsB;QAE3D,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,iEAAiE,CAClE,CAAC;IACJ,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,yCAAyC,CAAC;QAC9C,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAC/B,cAAkC,EAClC,iBAAyB,EACzB,MAAc,EACd,gBAA4B;IAE5B,IAAI,QAAQ,GAAG,iBAAiB,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpC,IAAI,IAES,CAAC;IACd,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,0CAA0C,CACtD,SAAS,EACT,gBAAgB,CACjB,CAAC;QACF,IACE,KAAK,CAAC,sBAAsB,KAAK,QAAQ;YACzC,KAAK,CAAC,MAAM,KAAK,MAAM;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;YAEjC,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,yEAAyE,CAC1E,CAAC;QACJ,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,KAAmB;IAEnB,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC3D,IAAI,IAAI,CAAC,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO;IAC5D,IAAI,IAAI,EAAE,kBAAkB,KAAK,IAAI;QACnC,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,uDAAuD,CACxD,CAAC;IACJ,IACE,IAAI,EAAE,cAAc;QACpB,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;QAC7C,IAAI,CAAC,UAAU,KAAK,IAAI;QACxB,CAAC,MAAM,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAE5D,OAAO;IACT,0BAA0B,CAAC,IAAI,EAAE;QAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,mBAAmB,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC;KAC/C,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  verifyOrganizationReplacementAuthorization,\n} from \"@tearleads/crypto\";\nimport {\n  assertHeldContainerBinding,\n  type HeldContainerBinding,\n} from \"../../../data/containers/containerBinding\";\nimport { ProjectionDependencyUnavailableError } from \"../../../data/keyingProjectionVerification/dependencyUnavailable\";\nimport { loadOrganizationFounder } from \"../../../data/persistence/organizationFounderPersistence\";\nimport { persistOrganizationReplacementCheckpoints } from \"../../../data/persistence/organizationReplacementCheckpointPersistence\";\nimport type { DestinationRole } from \"./destinationRoleCache\";\nimport type { RemoteContainer, RemoteContainerHydrationState } from \"./types\";\n\nexport interface BindingInput {\n  readonly stillCurrent?: (() => boolean) | undefined;\n  readonly heldBinding: HeldContainerBinding | null;\n  readonly listed: Pick<RemoteContainer, \"id\" | \"organizationId\">;\n  readonly role: DestinationRole;\n  readonly runtime: RemoteContainerHydrationState[\"runtime\"];\n}\n\nasync function acceptsSharedReplacement(\n  input: BindingInput,\n  oldOrganizationId: string,\n): Promise<boolean> {\n  const { listed, role, runtime } = input;\n  const founder = await loadOrganizationFounder(\n    runtime.infra.execSql,\n    oldOrganizationId,\n  );\n  if (!founder || role.createSignerUserId !== founder.userId) return false;\n  const identity = await runtime.resolveTrustedUserIdentity(founder.userId);\n  if (!identity)\n    throw new ProjectionDependencyUnavailableError(\n      \"Replacement founder identity is unavailable\",\n    );\n  if (identity.signingKeyFingerprint !== founder.signingKeyFingerprint)\n    throw new KeyingVerificationError(\n      \"signer_mismatch\",\n      \"Replacement founder differs from the held organization's pinned identity\",\n    );\n  const response =\n    await runtime.apiClient.getContainerReplacementAuthorizationsResult(\n      listed.id,\n      oldOrganizationId,\n    );\n  if (!response.ok) {\n    if (response.status === 404) return false;\n    throw new ProjectionDependencyUnavailableError(response.message);\n  }\n  const last = verifyReplacementLineage(\n    response.data.authorizations,\n    oldOrganizationId,\n    founder.userId,\n    identity.signingPublicKey,\n  );\n  const replacementFounder = await loadOrganizationFounder(\n    runtime.infra.execSql,\n    listed.organizationId,\n  );\n  if (\n    last?.organizationId !== listed.organizationId ||\n    replacementFounder?.userId !== founder.userId ||\n    replacementFounder.signingKeyFingerprint !==\n      founder.signingKeyFingerprint ||\n    replacementFounder.genesisStateHash !== last.organizationStateHash ||\n    role.rootContainerId !== last.rootContainerId ||\n    role.rootCreateManifestHash !== last.rootManifestHash ||\n    role.rootMetadataDocumentId !== last.rootMetadataDocumentId\n  )\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Replacement authorization does not bind the destination genesis\",\n    );\n  // The founder also commits the reserved groups' genesis. Pin those even\n  // when the readable folder's projection does not cite both groups yet.\n  await persistOrganizationReplacementCheckpoints({\n    authorization: last,\n    execSql: runtime.infra.execSql,\n    stillCurrent: input.stillCurrent,\n  });\n  return true;\n}\n\nfunction verifyReplacementLineage(\n  authorizations: readonly unknown[],\n  oldOrganizationId: string,\n  userId: string,\n  signingPublicKey: Uint8Array,\n) {\n  let expected = oldOrganizationId;\n  const visited = new Set([expected]);\n  let last:\n    | ReturnType<typeof verifyOrganizationReplacementAuthorization>\n    | undefined;\n  for (const candidate of authorizations) {\n    const proof = verifyOrganizationReplacementAuthorization(\n      candidate,\n      signingPublicKey,\n    );\n    if (\n      proof.replacesOrganizationId !== expected ||\n      proof.userId !== userId ||\n      visited.has(proof.organizationId)\n    )\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"Replacement authorization lineage does not extend the held organization\",\n      );\n    expected = proof.organizationId;\n    visited.add(expected);\n    last = proof;\n  }\n  return last;\n}\n\n/** A foreign creator needs the held organization's pinned founder to authorize rehome. */\nexport async function assertPermittedDestinationBinding(\n  input: BindingInput,\n): Promise<void> {\n  const { heldBinding: held, listed, role, runtime } = input;\n  if (role.createSignerUserId === runtime.auth.userId) return;\n  if (held?.metadataDocumentId === null)\n    throw new KeyingVerificationError(\n      \"signer_mismatch\",\n      \"a local folder can bind only to its own signed create\",\n    );\n  if (\n    held?.organizationId &&\n    held.organizationId !== listed.organizationId &&\n    role.systemSlot === null &&\n    (await acceptsSharedReplacement(input, held.organizationId))\n  )\n    return;\n  assertHeldContainerBinding(held, {\n    organizationId: listed.organizationId,\n    metadataDocumentIds: [role.metadataDocumentId],\n  });\n}\n"]}