@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/workflows/registration/persistRegistrationBootstrap.js

@@ -0,0 +1,204 @@
+import { createDocument, encodeVersionVector, importUpdates, } from "../../internal/loro/index.js";
+import { getScopedPeerSeed } from "../../data/crdtPeerSeed.js";
+import { createPendingUpdateFields } from "../../data/documents/documentSync.js";
+import { sqlContainerContentsPersistence, } from "../../data/persistence/container-contents/containerContentsPersistence.js";
+import { DOCUMENTS_APP_KIND, sqlDocumentsPersistence, } from "../../data/persistence/documents/documentsPersistence.js";
+import { advanceLocallyAcknowledgedAccessManifestHeadsAtomically, } from "../../data/persistence/locallyAcknowledgedCheckpointPersistence.js";
+import { getClientSQLitePersistenceRuntime } from "../../data/sqlite/sqlitePersistenceRuntime.js";
+import { createExecSql, runSerializedSqlMutation, } from "../../data/sqlite/sqlSchema.js";
+import { persistDocumentState } from "../documents/persistence.js";
+import { ORGANIZATION_PROFILE_DOCUMENT_KIND } from "../organizations/organizationProfile.js";
+import { ORGANIZATION_METADATA_CONTAINER_NAME, ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME, ROSTER_PROFILE_DOCUMENT_KIND, } from "../organizations/rosterProfileContainer.js";
+import { enqueueInitialContainerMetadataUpdate } from "./registrationBootstrapPendingUpdates.js";
+import { persistRegistrationPrincipalPolicies } from "./registrationPrincipalPolicyPersistence.js";
+async function persistProvisionedContainerBootstrap(execSql, input) {
+    const { container } = input;
+    const metadataState = container.metadataState;
+    const record = {
+        accessEpoch: container.accessEpoch,
+        accessStateHash: container.accessStateHash,
+        documentId: container.metadataDocumentId,
+        id: container.containerId,
+        lastCommitLsn: null,
+        metadataUpdates: container.metadataSnapshot,
+        snapshotEndVersion: "",
+        contentKeyBundle: metadataState.contentKeyBundle ?? null,
+        documentKekTargets: metadataState.documentKekTargets ?? null,
+        documentManifestBundle: metadataState.documentManifestBundle ?? null,
+    };
+    await sqlContainerContentsPersistence.saveContainer(execSql, {
+        id: container.containerId,
+        effectiveAccessLevel: "admin",
+        organizationId: input.organizationId,
+        parentId: input.parentId,
+        metadataDocumentId: container.metadataDocumentId,
+        systemSlot: container.systemSlot,
+        name: input.name,
+        icon: input.icon,
+    }, record, {
+        localUpdatedAt: container.updatedAt,
+        serverTimestamps: {
+            createdAt: container.createdAt,
+            updatedAt: container.updatedAt,
+        },
+    });
+}
+async function persistRootContainerBootstrap(execSql, input) {
+    const rootRecord = {
+        accessEpoch: input.rootMetadataAccessEpoch,
+        accessStateHash: input.rootMetadataAccessStateHash,
+        documentId: input.rootMetadataDocumentId,
+        id: input.containerId,
+        lastCommitLsn: null,
+        metadataUpdates: input.rootMetadataSnapshot,
+        snapshotEndVersion: "",
+        contentKeyBundle: input.rootMetadataState.contentKeyBundle ?? null,
+        documentKekTargets: input.rootMetadataState.documentKekTargets ?? null,
+        documentManifestBundle: input.rootMetadataState.documentManifestBundle ?? null,
+    };
+    await sqlContainerContentsPersistence.saveContainer(execSql, {
+        id: input.containerId,
+        effectiveAccessLevel: "admin",
+        organizationId: input.organizationId,
+        parentId: null,
+        metadataDocumentId: input.rootMetadataDocumentId,
+        name: "/",
+        icon: null,
+    }, rootRecord, {
+        localUpdatedAt: input.rootContainerServerTimestamp,
+        serverTimestamps: {
+            createdAt: input.rootContainerServerTimestamp,
+            updatedAt: input.rootContainerServerTimestamp,
+        },
+    });
+    await enqueueInitialContainerMetadataUpdate(execSql, input.containerId, input.rootMetadataInitialUpdate, input.rootMetadataInitialUpdateCommitted);
+}
+// Persist reserved profile containers using their fixed topology: roster profiles
+// inherit the personal root; shared organization metadata has an independent root.
+async function persistNamedChildContainerBootstrap(execSql, input, container, name) {
+    if (!container) {
+        return;
+    }
+    await persistProvisionedContainerBootstrap(execSql, {
+        container,
+        icon: null,
+        name,
+        organizationId: input.organizationId,
+        parentId: container === input.organizationMetadataContainer
+            ? null
+            : input.containerId,
+    });
+    await enqueueInitialContainerMetadataUpdate(execSql, container.containerId, container.metadataInitialUpdate, container.metadataInitialUpdateCommitted);
+}
+async function persistSystemContainersBootstrap(execSql, input) {
+    const systemContainers = input.systemContainers;
+    if (!systemContainers) {
+        return;
+    }
+    for (const systemContainer of systemContainers) {
+        await persistProvisionedContainerBootstrap(execSql, {
+            container: systemContainer,
+            icon: systemContainer.icon,
+            name: systemContainer.name,
+            organizationId: input.organizationId,
+            parentId: input.containerId,
+        });
+        // Provisioned system-container metadata is already committed remotely in
+        // the organization transaction. Persist the initialized snapshot locally,
+        // but do not queue a duplicate write with a second update id.
+    }
+}
+// The ONE persist shape for the provisioned profile documents (organization
+// profile and roster profile): the input carries exactly the bootstrap
+// fields, so only the document kind and the host's projectors join it.
+async function persistProfileDocumentBootstrap(execSql, input, profileDocument, documentKind) {
+    if (!profileDocument) {
+        return;
+    }
+    await persistInitialDocumentBootstrap(execSql, {
+        ...profileDocument,
+        documentKind,
+        documentProjectors: input.documentProjectors,
+    });
+}
+export async function persistInitialDocumentBootstrap(execSql, input) {
+    const doc = await createDocument(await getScopedPeerSeed(DOCUMENTS_APP_KIND));
+    importUpdates(doc, [input.initialUpdate]);
+    const pendingUpdate = input.initialUpdateCommitted
+        ? undefined
+        : (createPendingUpdateFields(input.initialUpdate) ?? undefined);
+    await persistDocumentState({
+        currentDoc: doc,
+        currentRecord: null,
+        documentProjectors: input.documentProjectors ?? [],
+        execSql,
+        localId: input.localId,
+        patch: {
+            accessEpoch: input.accessEpoch,
+            accessStateHash: input.accessStateHash,
+            containerId: input.containerId,
+            contentKeyBundle: input.documentState.contentKeyBundle ?? null,
+            documentId: input.documentId,
+            documentKekTargets: input.documentState.documentKekTargets ?? null,
+            documentKind: input.documentKind,
+            documentManifestBundle: input.documentState.documentManifestBundle ?? null,
+            // The create-only persistence primitive stores this frontier and the
+            // full-history checkpoint in one transaction.
+            snapshotEndVersion: encodeVersionVector(doc),
+        },
+        pendingUpdate,
+        persistence: sqlDocumentsPersistence,
+    });
+}
+/**
+ * Persists the local root-container bootstrap created during successful
+ * registration so container contents can initialize from SQLite on first
+ * login — atomically: every write lands inside ONE transaction whose last
+ * act re-checks identity currency, so an identity replaced anywhere between
+ * the queue claim and the commit rolls the entire bootstrap back instead of
+ * leaving a partial one. Resolves false when either currency check rejected
+ * the write, so callers do not report a bootstrap that was never persisted.
+ */
+export async function persistRegistrationBootstrapFromExecSql(execSql, input) {
+    input.onPersistQueued?.();
+    return runSerializedSqlMutation(execSql, async (lockedExecSql) => {
+        // In-mutex currency check, adjacent to the serialized-mutation claim
+        // (see persistDocumentState): the identity can be replaced while this
+        // persist waits for the queue, and its bootstrap must not be written
+        // through a client the replacement closed or renewed.
+        if (input.canStartDurableMutation && !input.canStartDurableMutation()) {
+            return false;
+        }
+        // Idempotent DDL stays outside the atomic boundary.
+        await sqlContainerContentsPersistence.ensureSchema(lockedExecSql);
+        await sqlDocumentsPersistence.ensureSchema(lockedExecSql);
+        // Pre-commit currency guard: the write sequence awaits real work, so
+        // the identity can be replaced mid-sequence. The guard runs
+        // synchronously with the COMMIT dispatch, so a refusal rolls the whole
+        // write set back and a pass cannot go stale before the commit is sent —
+        // the partial-persist window a single entry check leaves open.
+        const { committed } = await getClientSQLitePersistenceRuntime(lockedExecSql).guardedTransaction(async () => {
+            await advanceLocallyAcknowledgedAccessManifestHeadsAtomically({
+                execSql: lockedExecSql,
+                heads: input.acknowledgedAccessHeads,
+            });
+            await persistRegistrationPrincipalPolicies({
+                adminGroup: input.initialAdminGroupPolicy,
+                execSql: lockedExecSql,
+                memberGroup: input.initialMemberGroupPolicy,
+                organization: input.initialOrganizationPolicy,
+            });
+            await persistRootContainerBootstrap(lockedExecSql, input);
+            await persistNamedChildContainerBootstrap(lockedExecSql, input, input.rosterProfileContainer, ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME);
+            await persistProfileDocumentBootstrap(lockedExecSql, input, input.rosterProfileDocument, ROSTER_PROFILE_DOCUMENT_KIND);
+            await persistNamedChildContainerBootstrap(lockedExecSql, input, input.organizationMetadataContainer, ORGANIZATION_METADATA_CONTAINER_NAME);
+            await persistProfileDocumentBootstrap(lockedExecSql, input, input.organizationProfileDocument, ORGANIZATION_PROFILE_DOCUMENT_KIND);
+            await persistSystemContainersBootstrap(lockedExecSql, input);
+        }, () => !input.canStartDurableMutation || input.canStartDurableMutation());
+        return committed;
+    });
+}
+export async function persistRegistrationBootstrap(client, input) {
+    await persistRegistrationBootstrapFromExecSql(createExecSql(client), input);
+}
+//# sourceMappingURL=persistRegistrationBootstrap.js.map

package/workflows/registration/persistRegistrationBootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistRegistrationBootstrap.js","sourceRoot":"","sources":["persistRegistrationBootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAEL,+BAA+B,GAChC,MAAM,wEAAwE,CAAC;AAChF,OAAO,EACL,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EACL,uDAAuD,GAExD,MAAM,iEAAiE,CAAC;AAEzE,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAC/F,OAAO,EACL,aAAa,EAGb,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EACL,oCAAoC,EACpC,0CAA0C,EAC1C,4BAA4B,GAC7B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,qCAAqC,EAAE,MAAM,uCAAuC,CAAC;AAC9F,OAAO,EAAE,oCAAoC,EAAE,MAAM,0CAA0C,CAAC;AA+EhG,KAAK,UAAU,oCAAoC,CACjD,OAAgB,EAChB,KAMC;IAED,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5B,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC;IAC9C,MAAM,MAAM,GAA4B;QACtC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,UAAU,EAAE,SAAS,CAAC,kBAAkB;QACxC,EAAE,EAAE,SAAS,CAAC,WAAW;QACzB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,SAAS,CAAC,gBAAgB;QAC3C,kBAAkB,EAAE,EAAE;QACtB,gBAAgB,EAAE,aAAa,CAAC,gBAAgB,IAAI,IAAI;QACxD,kBAAkB,EAAE,aAAa,CAAC,kBAAkB,IAAI,IAAI;QAC5D,sBAAsB,EAAE,aAAa,CAAC,sBAAsB,IAAI,IAAI;KACrE,CAAC;IACF,MAAM,+BAA+B,CAAC,aAAa,CACjD,OAAO,EACP;QACE,EAAE,EAAE,SAAS,CAAC,WAAW;QACzB,oBAAoB,EAAE,OAAO;QAC7B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;QAChD,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,EACD,MAAM,EACN;QACE,cAAc,EAAE,SAAS,CAAC,SAAS;QACnC,gBAAgB,EAAE;YAChB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B;KACF,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,OAAgB,EAChB,KAAiC;IAEjC,MAAM,UAAU,GAA4B;QAC1C,WAAW,EAAE,KAAK,CAAC,uBAAuB;QAC1C,eAAe,EAAE,KAAK,CAAC,2BAA2B;QAClD,UAAU,EAAE,KAAK,CAAC,sBAAsB;QACxC,EAAE,EAAE,KAAK,CAAC,WAAW;QACrB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,KAAK,CAAC,oBAAoB;QAC3C,kBAAkB,EAAE,EAAE;QACtB,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,CAAC,gBAAgB,IAAI,IAAI;QAClE,kBAAkB,EAAE,KAAK,CAAC,iBAAiB,CAAC,kBAAkB,IAAI,IAAI;QACtE,sBAAsB,EACpB,KAAK,CAAC,iBAAiB,CAAC,sBAAsB,IAAI,IAAI;KACzD,CAAC;IACF,MAAM,+BAA+B,CAAC,aAAa,CACjD,OAAO,EACP;QACE,EAAE,EAAE,KAAK,CAAC,WAAW;QACrB,oBAAoB,EAAE,OAAO;QAC7B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE,KAAK,CAAC,sBAAsB;QAChD,IAAI,EAAE,GAAG;QACT,IAAI,EAAE,IAAI;KACX,EACD,UAAU,EACV;QACE,cAAc,EAAE,KAAK,CAAC,4BAA4B;QAClD,gBAAgB,EAAE;YAChB,SAAS,EAAE,KAAK,CAAC,4BAA4B;YAC7C,SAAS,EAAE,KAAK,CAAC,4BAA4B;SAC9C;KACF,CACF,CAAC;IACF,MAAM,qCAAqC,CACzC,OAAO,EACP,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,yBAAyB,EAC/B,KAAK,CAAC,kCAAkC,CACzC,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,mFAAmF;AACnF,KAAK,UAAU,mCAAmC,CAChD,OAAgB,EAChB,KAAiC,EACjC,SAA+D,EAC/D,IAAY;IAEZ,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,MAAM,oCAAoC,CAAC,OAAO,EAAE;QAClD,SAAS;QACT,IAAI,EAAE,IAAI;QACV,IAAI;QACJ,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EACN,SAAS,KAAK,KAAK,CAAC,6BAA6B;YAC/C,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,KAAK,CAAC,WAAW;KACxB,CAAC,CAAC;IACH,MAAM,qCAAqC,CACzC,OAAO,EACP,SAAS,CAAC,WAAW,EACrB,SAAS,CAAC,qBAAqB,EAC/B,SAAS,CAAC,8BAA8B,CACzC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,OAAgB,EAChB,KAAiC;IAEjC,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAChD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;QAC/C,MAAM,oCAAoC,CAAC,OAAO,EAAE;YAClD,SAAS,EAAE,eAAe;YAC1B,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,QAAQ,EAAE,KAAK,CAAC,WAAW;SAC5B,CAAC,CAAC;QACH,yEAAyE;QACzE,0EAA0E;QAC1E,8DAA8D;IAChE,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,uEAAuE;AACvE,uEAAuE;AACvE,KAAK,UAAU,+BAA+B,CAC5C,OAAgB,EAChB,KAAiC,EACjC,eAAqE,EACrE,YAAoB;IAEpB,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,+BAA+B,CAAC,OAAO,EAAE;QAC7C,GAAG,eAAe;QAClB,YAAY;QACZ,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAgB,EAChB,KAcC;IAED,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC9E,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,CAAC,sBAAsB;QAChD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,CAAC;IAElE,MAAM,oBAAoB,CAAC;QACzB,UAAU,EAAE,GAAG;QACf,aAAa,EAAE,IAAI;QACnB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE;QAClD,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,gBAAgB,EAAE,KAAK,CAAC,aAAa,CAAC,gBAAgB,IAAI,IAAI;YAC9D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,kBAAkB,EAAE,KAAK,CAAC,aAAa,CAAC,kBAAkB,IAAI,IAAI;YAClE,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,sBAAsB,EACpB,KAAK,CAAC,aAAa,CAAC,sBAAsB,IAAI,IAAI;YACpD,qEAAqE;YACrE,8CAA8C;YAC9C,kBAAkB,EAAE,mBAAmB,CAAC,GAAG,CAAC;SAC7C;QACD,aAAa;QACb,WAAW,EAAE,uBAAuB;KACrC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,OAAgB,EAChB,KAAiC;IAEjC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC;IAC1B,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,qEAAqE;QACrE,sEAAsE;QACtE,qEAAqE;QACrE,sDAAsD;QACtD,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,oDAAoD;QACpD,MAAM,+BAA+B,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAClE,MAAM,uBAAuB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC1D,qEAAqE;QACrE,4DAA4D;QAC5D,uEAAuE;QACvE,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,iCAAiC,CAC3D,aAAa,CACd,CAAC,kBAAkB,CAClB,KAAK,IAAI,EAAE;YACT,MAAM,uDAAuD,CAAC;gBAC5D,OAAO,EAAE,aAAa;gBACtB,KAAK,EAAE,KAAK,CAAC,uBAAuB;aACrC,CAAC,CAAC;YACH,MAAM,oCAAoC,CAAC;gBACzC,UAAU,EAAE,KAAK,CAAC,uBAAuB;gBACzC,OAAO,EAAE,aAAa;gBACtB,WAAW,EAAE,KAAK,CAAC,wBAAwB;gBAC3C,YAAY,EAAE,KAAK,CAAC,yBAAyB;aAC9C,CAAC,CAAC;YACH,MAAM,6BAA6B,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,mCAAmC,CACvC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,sBAAsB,EAC5B,0CAA0C,CAC3C,CAAC;YACF,MAAM,+BAA+B,CACnC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,qBAAqB,EAC3B,4BAA4B,CAC7B,CAAC;YACF,MAAM,mCAAmC,CACvC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,6BAA6B,EACnC,oCAAoC,CACrC,CAAC;YACF,MAAM,+BAA+B,CACnC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,2BAA2B,EACjC,kCAAkC,CACnC,CAAC;YACF,MAAM,gCAAgC,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC,EACD,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,IAAI,KAAK,CAAC,uBAAuB,EAAE,CACxE,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAyB,EACzB,KAAiC;IAEjC,MAAM,uCAAuC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["import {\n  createDocument,\n  encodeVersionVector,\n  importUpdates,\n} from \"@tearleads/loro\";\nimport type { ContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { getScopedPeerSeed } from \"../../data/crdtPeerSeed\";\nimport type { DocumentProjectorRegistryInput } from \"../../data/documents/documentKinds\";\nimport { createPendingUpdateFields } from \"../../data/documents/documentSync\";\nimport {\n  type ContainerMetadataRecord,\n  sqlContainerContentsPersistence,\n} from \"../../data/persistence/container-contents/containerContentsPersistence\";\nimport {\n  DOCUMENTS_APP_KIND,\n  sqlDocumentsPersistence,\n} from \"../../data/persistence/documents/documentsPersistence\";\nimport {\n  advanceLocallyAcknowledgedAccessManifestHeadsAtomically,\n  type LocallyAcknowledgedAccessManifestHead,\n} from \"../../data/persistence/locallyAcknowledgedCheckpointPersistence\";\nimport type { DocumentRecord } from \"../../data/sqlite/documentPersistence\";\nimport { getClientSQLitePersistenceRuntime } from \"../../data/sqlite/sqlitePersistenceRuntime\";\nimport {\n  createExecSql,\n  type ExecSql,\n  type ExecSqlClientLike,\n  runSerializedSqlMutation,\n} from \"../../data/sqlite/sqlSchema\";\nimport { persistDocumentState } from \"../documents/persistence\";\nimport { ORGANIZATION_PROFILE_DOCUMENT_KIND } from \"../organizations/organizationProfile\";\nimport {\n  ORGANIZATION_METADATA_CONTAINER_NAME,\n  ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME,\n  ROSTER_PROFILE_DOCUMENT_KIND,\n} from \"../organizations/rosterProfileContainer\";\nimport { enqueueInitialContainerMetadataUpdate } from \"./registrationBootstrapPendingUpdates\";\nimport { persistRegistrationPrincipalPolicies } from \"./registrationPrincipalPolicyPersistence\";\n\ninterface ProvisionedContainerBootstrapInput {\n  accessEpoch: number;\n  accessStateHash: string;\n  containerId: string;\n  createdAt: string;\n  metadataDocumentId: string;\n  metadataSnapshot: string;\n  metadataState: Pick<\n    DocumentRecord,\n    | \"documentId\"\n    | \"contentKeyBundle\"\n    | \"documentKekTargets\"\n    | \"documentManifestBundle\"\n  >;\n  systemSlot: ContainerSystemSlot;\n  updatedAt: string;\n}\n\ninterface ProvisionedProfileDocumentBootstrapInput {\n  accessEpoch: number;\n  accessStateHash: string;\n  containerId: string;\n  documentId: string;\n  documentState: ProvisionedContainerBootstrapInput[\"metadataState\"];\n  initialUpdate: Uint8Array;\n  initialUpdateCommitted: boolean;\n  localId: string;\n}\n\nexport interface RegistrationBootstrapInput {\n  acknowledgedAccessHeads: readonly LocallyAcknowledgedAccessManifestHead[];\n  /** Checked inside the mutation queue claim; false skips every write. */\n  canStartDurableMutation?: (() => boolean) | undefined;\n  /**\n   * @internal Test-only synchronization seam. Invoked synchronously,\n   * immediately before this persist joins the serialized mutation queue —\n   * no interleaving can separate the two. Lets identity-race tests\n   * deterministically place an identity replacement inside the queue-wait\n   * window instead of sleeping.\n   */\n  onPersistQueued?: (() => void) | undefined;\n  containerId: string;\n  initialAdminGroupPolicy: PrincipalPolicyBundleResponse;\n  initialMemberGroupPolicy: PrincipalPolicyBundleResponse;\n  initialOrganizationPolicy: PrincipalPolicyBundleResponse;\n  rootMetadataAccessEpoch: number;\n  rootMetadataAccessStateHash: string;\n  rootContainerServerTimestamp: string;\n  rootMetadataDocumentId: string;\n  rootMetadataInitialUpdate: Uint8Array;\n  rootMetadataInitialUpdateCommitted?: boolean | undefined;\n  rootMetadataSnapshot: string;\n  rootMetadataState: ProvisionedContainerBootstrapInput[\"metadataState\"];\n  rosterProfileContainer?: ProvisionedContainerBootstrapInput & {\n    metadataInitialUpdate: Uint8Array;\n    metadataInitialUpdateCommitted?: boolean | undefined;\n  };\n  organizationMetadataContainer?: ProvisionedContainerBootstrapInput & {\n    metadataInitialUpdate: Uint8Array;\n    metadataInitialUpdateCommitted?: boolean | undefined;\n  };\n  organizationProfileDocument?: ProvisionedProfileDocumentBootstrapInput;\n  rosterProfileDocument?: ProvisionedProfileDocumentBootstrapInput;\n  // Additional app-owned system containers provisioned with the organization\n  // (e.g. a trash bin). Each carries its own display name and icon (unlike the\n  // roster/organization-metadata containers, whose names are fixed), since the\n  // caller declares them.\n  systemContainers?: Array<\n    ProvisionedContainerBootstrapInput & {\n      icon: string | null;\n      name: string;\n    }\n  >;\n  documentProjectors?: DocumentProjectorRegistryInput | undefined;\n  organizationId: string;\n  userId: string;\n}\nasync function persistProvisionedContainerBootstrap(\n  execSql: ExecSql,\n  input: {\n    container: ProvisionedContainerBootstrapInput;\n    icon: string | null;\n    name: string;\n    organizationId: string;\n    parentId: string | null;\n  },\n): Promise<void> {\n  const { container } = input;\n  const metadataState = container.metadataState;\n  const record: ContainerMetadataRecord = {\n    accessEpoch: container.accessEpoch,\n    accessStateHash: container.accessStateHash,\n    documentId: container.metadataDocumentId,\n    id: container.containerId,\n    lastCommitLsn: null,\n    metadataUpdates: container.metadataSnapshot,\n    snapshotEndVersion: \"\",\n    contentKeyBundle: metadataState.contentKeyBundle ?? null,\n    documentKekTargets: metadataState.documentKekTargets ?? null,\n    documentManifestBundle: metadataState.documentManifestBundle ?? null,\n  };\n  await sqlContainerContentsPersistence.saveContainer(\n    execSql,\n    {\n      id: container.containerId,\n      effectiveAccessLevel: \"admin\",\n      organizationId: input.organizationId,\n      parentId: input.parentId,\n      metadataDocumentId: container.metadataDocumentId,\n      systemSlot: container.systemSlot,\n      name: input.name,\n      icon: input.icon,\n    },\n    record,\n    {\n      localUpdatedAt: container.updatedAt,\n      serverTimestamps: {\n        createdAt: container.createdAt,\n        updatedAt: container.updatedAt,\n      },\n    },\n  );\n}\n\nasync function persistRootContainerBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n): Promise<void> {\n  const rootRecord: ContainerMetadataRecord = {\n    accessEpoch: input.rootMetadataAccessEpoch,\n    accessStateHash: input.rootMetadataAccessStateHash,\n    documentId: input.rootMetadataDocumentId,\n    id: input.containerId,\n    lastCommitLsn: null,\n    metadataUpdates: input.rootMetadataSnapshot,\n    snapshotEndVersion: \"\",\n    contentKeyBundle: input.rootMetadataState.contentKeyBundle ?? null,\n    documentKekTargets: input.rootMetadataState.documentKekTargets ?? null,\n    documentManifestBundle:\n      input.rootMetadataState.documentManifestBundle ?? null,\n  };\n  await sqlContainerContentsPersistence.saveContainer(\n    execSql,\n    {\n      id: input.containerId,\n      effectiveAccessLevel: \"admin\",\n      organizationId: input.organizationId,\n      parentId: null,\n      metadataDocumentId: input.rootMetadataDocumentId,\n      name: \"/\",\n      icon: null,\n    },\n    rootRecord,\n    {\n      localUpdatedAt: input.rootContainerServerTimestamp,\n      serverTimestamps: {\n        createdAt: input.rootContainerServerTimestamp,\n        updatedAt: input.rootContainerServerTimestamp,\n      },\n    },\n  );\n  await enqueueInitialContainerMetadataUpdate(\n    execSql,\n    input.containerId,\n    input.rootMetadataInitialUpdate,\n    input.rootMetadataInitialUpdateCommitted,\n  );\n}\n\n// Persist reserved profile containers using their fixed topology: roster profiles\n// inherit the personal root; shared organization metadata has an independent root.\nasync function persistNamedChildContainerBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n  container: RegistrationBootstrapInput[\"rosterProfileContainer\"],\n  name: string,\n): Promise<void> {\n  if (!container) {\n    return;\n  }\n\n  await persistProvisionedContainerBootstrap(execSql, {\n    container,\n    icon: null,\n    name,\n    organizationId: input.organizationId,\n    parentId:\n      container === input.organizationMetadataContainer\n        ? null\n        : input.containerId,\n  });\n  await enqueueInitialContainerMetadataUpdate(\n    execSql,\n    container.containerId,\n    container.metadataInitialUpdate,\n    container.metadataInitialUpdateCommitted,\n  );\n}\n\nasync function persistSystemContainersBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n): Promise<void> {\n  const systemContainers = input.systemContainers;\n  if (!systemContainers) {\n    return;\n  }\n\n  for (const systemContainer of systemContainers) {\n    await persistProvisionedContainerBootstrap(execSql, {\n      container: systemContainer,\n      icon: systemContainer.icon,\n      name: systemContainer.name,\n      organizationId: input.organizationId,\n      parentId: input.containerId,\n    });\n    // Provisioned system-container metadata is already committed remotely in\n    // the organization transaction. Persist the initialized snapshot locally,\n    // but do not queue a duplicate write with a second update id.\n  }\n}\n\n// The ONE persist shape for the provisioned profile documents (organization\n// profile and roster profile): the input carries exactly the bootstrap\n// fields, so only the document kind and the host's projectors join it.\nasync function persistProfileDocumentBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n  profileDocument: ProvisionedProfileDocumentBootstrapInput | undefined,\n  documentKind: string,\n): Promise<void> {\n  if (!profileDocument) {\n    return;\n  }\n\n  await persistInitialDocumentBootstrap(execSql, {\n    ...profileDocument,\n    documentKind,\n    documentProjectors: input.documentProjectors,\n  });\n}\n\nexport async function persistInitialDocumentBootstrap(\n  execSql: ExecSql,\n  input: {\n    accessEpoch: number;\n    accessStateHash: string;\n    containerId: string;\n    documentId: string;\n    documentKind: string;\n    documentProjectors: DocumentProjectorRegistryInput | undefined;\n    documentState: Pick<\n      DocumentRecord,\n      \"contentKeyBundle\" | \"documentKekTargets\" | \"documentManifestBundle\"\n    >;\n    initialUpdate: Uint8Array;\n    initialUpdateCommitted: boolean;\n    localId: string;\n  },\n): Promise<void> {\n  const doc = await createDocument(await getScopedPeerSeed(DOCUMENTS_APP_KIND));\n  importUpdates(doc, [input.initialUpdate]);\n  const pendingUpdate = input.initialUpdateCommitted\n    ? undefined\n    : (createPendingUpdateFields(input.initialUpdate) ?? undefined);\n\n  await persistDocumentState({\n    currentDoc: doc,\n    currentRecord: null,\n    documentProjectors: input.documentProjectors ?? [],\n    execSql,\n    localId: input.localId,\n    patch: {\n      accessEpoch: input.accessEpoch,\n      accessStateHash: input.accessStateHash,\n      containerId: input.containerId,\n      contentKeyBundle: input.documentState.contentKeyBundle ?? null,\n      documentId: input.documentId,\n      documentKekTargets: input.documentState.documentKekTargets ?? null,\n      documentKind: input.documentKind,\n      documentManifestBundle:\n        input.documentState.documentManifestBundle ?? null,\n      // The create-only persistence primitive stores this frontier and the\n      // full-history checkpoint in one transaction.\n      snapshotEndVersion: encodeVersionVector(doc),\n    },\n    pendingUpdate,\n    persistence: sqlDocumentsPersistence,\n  });\n}\n\n/**\n * Persists the local root-container bootstrap created during successful\n * registration so container contents can initialize from SQLite on first\n * login — atomically: every write lands inside ONE transaction whose last\n * act re-checks identity currency, so an identity replaced anywhere between\n * the queue claim and the commit rolls the entire bootstrap back instead of\n * leaving a partial one. Resolves false when either currency check rejected\n * the write, so callers do not report a bootstrap that was never persisted.\n */\nexport async function persistRegistrationBootstrapFromExecSql(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n): Promise<boolean> {\n  input.onPersistQueued?.();\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    // In-mutex currency check, adjacent to the serialized-mutation claim\n    // (see persistDocumentState): the identity can be replaced while this\n    // persist waits for the queue, and its bootstrap must not be written\n    // through a client the replacement closed or renewed.\n    if (input.canStartDurableMutation && !input.canStartDurableMutation()) {\n      return false;\n    }\n    // Idempotent DDL stays outside the atomic boundary.\n    await sqlContainerContentsPersistence.ensureSchema(lockedExecSql);\n    await sqlDocumentsPersistence.ensureSchema(lockedExecSql);\n    // Pre-commit currency guard: the write sequence awaits real work, so\n    // the identity can be replaced mid-sequence. The guard runs\n    // synchronously with the COMMIT dispatch, so a refusal rolls the whole\n    // write set back and a pass cannot go stale before the commit is sent —\n    // the partial-persist window a single entry check leaves open.\n    const { committed } = await getClientSQLitePersistenceRuntime(\n      lockedExecSql,\n    ).guardedTransaction(\n      async () => {\n        await advanceLocallyAcknowledgedAccessManifestHeadsAtomically({\n          execSql: lockedExecSql,\n          heads: input.acknowledgedAccessHeads,\n        });\n        await persistRegistrationPrincipalPolicies({\n          adminGroup: input.initialAdminGroupPolicy,\n          execSql: lockedExecSql,\n          memberGroup: input.initialMemberGroupPolicy,\n          organization: input.initialOrganizationPolicy,\n        });\n        await persistRootContainerBootstrap(lockedExecSql, input);\n        await persistNamedChildContainerBootstrap(\n          lockedExecSql,\n          input,\n          input.rosterProfileContainer,\n          ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME,\n        );\n        await persistProfileDocumentBootstrap(\n          lockedExecSql,\n          input,\n          input.rosterProfileDocument,\n          ROSTER_PROFILE_DOCUMENT_KIND,\n        );\n        await persistNamedChildContainerBootstrap(\n          lockedExecSql,\n          input,\n          input.organizationMetadataContainer,\n          ORGANIZATION_METADATA_CONTAINER_NAME,\n        );\n        await persistProfileDocumentBootstrap(\n          lockedExecSql,\n          input,\n          input.organizationProfileDocument,\n          ORGANIZATION_PROFILE_DOCUMENT_KIND,\n        );\n        await persistSystemContainersBootstrap(lockedExecSql, input);\n      },\n      () => !input.canStartDurableMutation || input.canStartDurableMutation(),\n    );\n    return committed;\n  });\n}\n\nexport async function persistRegistrationBootstrap(\n  client: ExecSqlClientLike,\n  input: RegistrationBootstrapInput,\n): Promise<void> {\n  await persistRegistrationBootstrapFromExecSql(createExecSql(client), input);\n}\n"]}

package/workflows/registration/profileBootstrapPersistence.js

@@ -0,0 +1,47 @@
+import { base64ToBytes } from "../../internal/encoding/index.js";
+import { persistedDocumentCreateStateFromResponse } from "../../data/documents/shared/responses.js";
+import { getOrganizationProfileDocumentLocalId } from "../organizations/organizationProfile.js";
+import { getRosterProfileDocumentLocalId } from "../organizations/rosterProfileContainer.js";
+function initialUpdateCommitted(input) {
+    const updateId = input.request.initialSync.outgoingUpdates[0]?.id;
+    return (updateId !== undefined &&
+        input.response.committedProfileUpdateIds.includes(updateId));
+}
+export function buildOrganizationProfileBootstrapInput(input) {
+    const document = input.response.organizationProfileDocument;
+    if (!document) {
+        return undefined;
+    }
+    return {
+        accessEpoch: 1,
+        accessStateHash: document.accessManifest.manifestHash,
+        containerId: input.containerId,
+        documentId: document.id,
+        documentState: persistedDocumentCreateStateFromResponse(input.materializedDocument.plan, document),
+        initialUpdate: base64ToBytes(input.snapshot),
+        initialUpdateCommitted: initialUpdateCommitted(input),
+        localId: getOrganizationProfileDocumentLocalId({
+            organizationId: input.response.organizationId,
+        }),
+    };
+}
+export function buildRosterProfileBootstrapInput(input) {
+    const document = input.response.rosterProfileDocument;
+    if (!document) {
+        return undefined;
+    }
+    return {
+        accessEpoch: 1,
+        accessStateHash: document.accessManifest.manifestHash,
+        containerId: input.containerId,
+        documentId: document.id,
+        documentState: persistedDocumentCreateStateFromResponse(input.materializedDocument.plan, document),
+        initialUpdate: input.initialUpdate,
+        initialUpdateCommitted: initialUpdateCommitted(input),
+        localId: getRosterProfileDocumentLocalId({
+            organizationId: input.response.organizationId,
+            userId: input.response.userId,
+        }),
+    };
+}
+//# sourceMappingURL=profileBootstrapPersistence.js.map

package/workflows/registration/profileBootstrapPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profileBootstrapPersistence.js","sourceRoot":"","sources":["profileBootstrapPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,EAAE,wCAAwC,EAAE,MAAM,uCAAuC,CAAC;AAEjG,OAAO,EAAE,qCAAqC,EAAE,MAAM,sCAAsC,CAAC;AAC7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAW1F,SAAS,sBAAsB,CAC7B,KAA0D;IAE1D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAClE,OAAO,CACL,QAAQ,KAAK,SAAS;QACtB,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,KAA0E;IAE1E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,WAAW,EAAE,CAAC;QACd,eAAe,EAAE,QAAQ,CAAC,cAAc,CAAC,YAAY;QACrD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,aAAa,EAAE,wCAAwC,CACrD,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAC/B,QAAQ,CACT;QACD,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC5C,sBAAsB,EAAE,sBAAsB,CAAC,KAAK,CAAC;QACrD,OAAO,EAAE,qCAAqC,CAAC;YAC7C,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;SAC9C,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAA4B;IAE5B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,WAAW,EAAE,CAAC;QACd,eAAe,EAAE,QAAQ,CAAC,cAAc,CAAC,YAAY;QACrD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,aAAa,EAAE,wCAAwC,CACrD,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAC/B,QAAQ,CACT;QACD,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,sBAAsB,EAAE,sBAAsB,CAAC,KAAK,CAAC;QACrD,OAAO,EAAE,+BAA+B,CAAC;YACvC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;SAC9B,CAAC;KACH,CAAC;AACJ,CAAC","sourcesContent":["import { base64ToBytes } from \"@tearleads/encoding\";\nimport type { ProvisionedDocumentRequest } from \"@tearleads/validators/request\";\nimport type { OrganizationProvisioningResponse } from \"@tearleads/validators/response\";\nimport { persistedDocumentCreateStateFromResponse } from \"../../data/documents/shared/responses\";\nimport type { MaterializedDocumentCreatePlan } from \"../../data/documents/shared/types\";\nimport { getOrganizationProfileDocumentLocalId } from \"../organizations/organizationProfile\";\nimport { getRosterProfileDocumentLocalId } from \"../organizations/rosterProfileContainer\";\nimport type { RegistrationBootstrapInput } from \"./persistRegistrationBootstrap\";\n\ninterface ProfileBootstrapInput {\n  containerId: string;\n  initialUpdate: Uint8Array;\n  materializedDocument: MaterializedDocumentCreatePlan;\n  request: ProvisionedDocumentRequest;\n  response: OrganizationProvisioningResponse;\n}\n\nfunction initialUpdateCommitted(\n  input: Pick<ProfileBootstrapInput, \"request\" | \"response\">,\n): boolean {\n  const updateId = input.request.initialSync.outgoingUpdates[0]?.id;\n  return (\n    updateId !== undefined &&\n    input.response.committedProfileUpdateIds.includes(updateId)\n  );\n}\n\nexport function buildOrganizationProfileBootstrapInput(\n  input: Omit<ProfileBootstrapInput, \"initialUpdate\"> & { snapshot: string },\n): RegistrationBootstrapInput[\"organizationProfileDocument\"] {\n  const document = input.response.organizationProfileDocument;\n  if (!document) {\n    return undefined;\n  }\n  return {\n    accessEpoch: 1,\n    accessStateHash: document.accessManifest.manifestHash,\n    containerId: input.containerId,\n    documentId: document.id,\n    documentState: persistedDocumentCreateStateFromResponse(\n      input.materializedDocument.plan,\n      document,\n    ),\n    initialUpdate: base64ToBytes(input.snapshot),\n    initialUpdateCommitted: initialUpdateCommitted(input),\n    localId: getOrganizationProfileDocumentLocalId({\n      organizationId: input.response.organizationId,\n    }),\n  };\n}\n\nexport function buildRosterProfileBootstrapInput(\n  input: ProfileBootstrapInput,\n): RegistrationBootstrapInput[\"rosterProfileDocument\"] {\n  const document = input.response.rosterProfileDocument;\n  if (!document) {\n    return undefined;\n  }\n  return {\n    accessEpoch: 1,\n    accessStateHash: document.accessManifest.manifestHash,\n    containerId: input.containerId,\n    documentId: document.id,\n    documentState: persistedDocumentCreateStateFromResponse(\n      input.materializedDocument.plan,\n      document,\n    ),\n    initialUpdate: input.initialUpdate,\n    initialUpdateCommitted: initialUpdateCommitted(input),\n    localId: getRosterProfileDocumentLocalId({\n      organizationId: input.response.organizationId,\n      userId: input.response.userId,\n    }),\n  };\n}\n"]}

package/workflows/registration/provisionedProfileDocument.js

@@ -0,0 +1,34 @@
+import { bytesToBase64 } from "../../internal/encoding/index.js";
+import { buildInitialDocumentSyncRequest } from "../documents/initialSync.js";
+import { createInitializedOrganizationProfileDocument, DEFAULT_PERSONAL_ORGANIZATION_PROFILE_NAME, } from "../organizations/organizationProfile.js";
+import { createInitializedRosterProfileDocument, DEFAULT_ROSTER_PROFILE_SELF_NICKNAME, } from "../organizations/rosterProfileContainer.js";
+async function buildProvisionedDocumentRequest(input) {
+    return {
+        ...input.materializedDocument.plan.request,
+        initialSync: await buildInitialDocumentSyncRequest(input),
+    };
+}
+export async function buildProvisionedOrganizationProfile(input) {
+    const initialized = await createInitializedOrganizationProfileDocument({
+        name: input.name ?? DEFAULT_PERSONAL_ORGANIZATION_PROFILE_NAME,
+    });
+    const request = await buildProvisionedDocumentRequest({
+        ...input,
+        initialUpdate: initialized.initialUpdate,
+    });
+    return { ...initialized, request };
+}
+export async function buildProvisionedRosterProfile(input) {
+    const initialized = await createInitializedRosterProfileDocument({
+        encapsulationPublicKey: bytesToBase64(input.encapsulationPublicKey),
+        isSelf: true,
+        nickname: input.nickname ?? DEFAULT_ROSTER_PROFILE_SELF_NICKNAME,
+        userId: input.author.signerUserId,
+    });
+    const request = await buildProvisionedDocumentRequest({
+        ...input,
+        initialUpdate: initialized.initialUpdate,
+    });
+    return { ...initialized, request };
+}
+//# sourceMappingURL=provisionedProfileDocument.js.map

package/workflows/registration/provisionedProfileDocument.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisionedProfileDocument.js","sourceRoot":"","sources":["provisionedProfileDocument.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAOpD,OAAO,EAAE,+BAA+B,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EACL,4CAA4C,EAC5C,0CAA0C,GAC3C,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,sCAAsC,EACtC,oCAAoC,GACrC,MAAM,yCAAyC,CAAC;AAQjD,KAAK,UAAU,+BAA+B,CAC5C,KAA8D;IAE9D,OAAO;QACL,GAAG,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO;QAC1C,WAAW,EAAE,MAAM,+BAA+B,CAAC,KAAK,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,KAA8D;IAE9D,MAAM,WAAW,GAAG,MAAM,4CAA4C,CAAC;QACrE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,0CAA0C;KAC/D,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,+BAA+B,CAAC;QACpD,GAAG,KAAK;QACR,aAAa,EAAE,WAAW,CAAC,aAAa;KACzC,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAGC;IAED,MAAM,WAAW,GAAG,MAAM,sCAAsC,CAAC;QAC/D,sBAAsB,EAAE,aAAa,CAAC,KAAK,CAAC,sBAAsB,CAAC;QACnE,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,oCAAoC;QAChE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY;KAClC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,+BAA+B,CAAC;QACpD,GAAG,KAAK;QACR,aAAa,EAAE,WAAW,CAAC,aAAa;KACzC,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC","sourcesContent":["import { bytesToBase64 } from \"@tearleads/encoding\";\nimport type { ProvisionedDocumentRequest } from \"@tearleads/validators/request\";\nimport type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport type {\n  DocumentCreateAuthor,\n  MaterializedDocumentCreatePlan,\n} from \"../../data/documents/shared/types\";\nimport { buildInitialDocumentSyncRequest } from \"../documents/initialSync\";\nimport {\n  createInitializedOrganizationProfileDocument,\n  DEFAULT_PERSONAL_ORGANIZATION_PROFILE_NAME,\n} from \"../organizations/organizationProfile\";\nimport {\n  createInitializedRosterProfileDocument,\n  DEFAULT_ROSTER_PROFILE_SELF_NICKNAME,\n} from \"../organizations/rosterProfileContainer\";\n\ninterface ProvisionedProfileInput {\n  author: DocumentCreateAuthor;\n  containerProjection: ContainerWriterProjectionResponse;\n  materializedDocument: MaterializedDocumentCreatePlan;\n}\n\nasync function buildProvisionedDocumentRequest(\n  input: ProvisionedProfileInput & { initialUpdate: Uint8Array },\n): Promise<ProvisionedDocumentRequest> {\n  return {\n    ...input.materializedDocument.plan.request,\n    initialSync: await buildInitialDocumentSyncRequest(input),\n  };\n}\n\nexport async function buildProvisionedOrganizationProfile(\n  input: ProvisionedProfileInput & { name?: string | undefined },\n) {\n  const initialized = await createInitializedOrganizationProfileDocument({\n    name: input.name ?? DEFAULT_PERSONAL_ORGANIZATION_PROFILE_NAME,\n  });\n  const request = await buildProvisionedDocumentRequest({\n    ...input,\n    initialUpdate: initialized.initialUpdate,\n  });\n  return { ...initialized, request };\n}\n\nexport async function buildProvisionedRosterProfile(\n  input: ProvisionedProfileInput & {\n    encapsulationPublicKey: Uint8Array;\n    nickname?: string | undefined;\n  },\n) {\n  const initialized = await createInitializedRosterProfileDocument({\n    encapsulationPublicKey: bytesToBase64(input.encapsulationPublicKey),\n    isSelf: true,\n    nickname: input.nickname ?? DEFAULT_ROSTER_PROFILE_SELF_NICKNAME,\n    userId: input.author.signerUserId,\n  });\n  const request = await buildProvisionedDocumentRequest({\n    ...input,\n    initialUpdate: initialized.initialUpdate,\n  });\n  return { ...initialized, request };\n}\n"]}

package/workflows/registration/provisioningAcknowledgement.js

@@ -0,0 +1,85 @@
+import { locallyAcknowledgedContainerMutationHead } from "../../data/containers/shared/mutationAcknowledgement.js";
+import { assertDocumentCreateResponseMatchesPlan } from "../../data/documents/shared/responses.js";
+import { locallyAuthoredAccessManifestHead, } from "../../data/persistence/locallyAcknowledgedCheckpointPersistence.js";
+function requireResponse(value, label) {
+    if (!value) {
+        throw new Error(`Organization provisioning response is missing ${label}`);
+    }
+    return value;
+}
+function assertId(actual, expected, label) {
+    if (actual !== expected) {
+        throw new Error(`Organization provisioning response ${label} mismatch`);
+    }
+}
+function assertProvisioningIdentity(input) {
+    const { response, rootContainerPlan, rootMetadataDocumentPlan } = input;
+    if (response.userId !== input.expectedUserId ||
+        response.organizationId !== input.expectedOrganizationId ||
+        response.rootContainerId !== rootContainerPlan.containerId ||
+        response.rootMetadataDocumentId !== rootMetadataDocumentPlan.documentId ||
+        response.rootMetadataAccessEpoch !== rootContainerPlan.manifest.epoch ||
+        response.rootMetadataAccessStateHash !== rootContainerPlan.manifestHash) {
+        throw new Error("Organization provisioning response identity mismatch");
+    }
+}
+async function containerArtifactHeads(input) {
+    assertDocumentCreateResponseMatchesPlan(input.artifact.metadataDocumentPlan, input.response.metadataDocument);
+    return [
+        await locallyAcknowledgedContainerMutationHead({
+            plan: input.artifact.containerPlan,
+            response: input.response.container,
+        }),
+        locallyAuthoredAccessManifestHead(input.artifact.metadataDocumentPlan),
+    ];
+}
+function documentHead(input) {
+    assertDocumentCreateResponseMatchesPlan(input.plan, input.response);
+    return locallyAuthoredAccessManifestHead(input.plan);
+}
+export async function provisioningAcknowledgedAccessHeads(input) {
+    assertProvisioningIdentity(input);
+    const response = input.response;
+    assertDocumentCreateResponseMatchesPlan(input.rootMetadataDocumentPlan, response.rootMetadataDocument);
+    const rosterContainer = requireResponse(response.rosterProfileContainer, "roster profile container");
+    const rosterDocument = requireResponse(response.rosterProfileDocument, "roster profile document");
+    const organizationContainer = requireResponse(response.organizationMetadataContainer, "organization metadata container");
+    const organizationDocument = requireResponse(response.organizationProfileDocument, "organization profile document");
+    assertId(response.rosterProfileContainerId, input.rosterProfile.containerPlan.containerId, "roster profile container id");
+    assertId(response.rosterProfileDocumentId, input.rosterProfileDocumentPlan.documentId, "roster profile document id");
+    assertId(response.organizationMetadataContainerId, input.organizationMetadata.containerPlan.containerId, "organization metadata container id");
+    assertId(response.organizationProfileDocumentId, input.organizationProfileDocumentPlan.documentId, "organization profile document id");
+    const systemResponses = response.systemContainers;
+    if (systemResponses.length !== input.systemContainers.length) {
+        throw new Error("Organization provisioning response system container count mismatch");
+    }
+    const heads = [
+        locallyAuthoredAccessManifestHead(input.rootContainerPlan),
+        locallyAuthoredAccessManifestHead(input.rootMetadataDocumentPlan),
+        ...(await containerArtifactHeads({
+            artifact: input.rosterProfile,
+            response: rosterContainer,
+        })),
+        documentHead({
+            plan: input.rosterProfileDocumentPlan,
+            response: rosterDocument,
+        }),
+        ...(await containerArtifactHeads({
+            artifact: input.organizationMetadata,
+            response: organizationContainer,
+        })),
+        documentHead({
+            plan: input.organizationProfileDocumentPlan,
+            response: organizationDocument,
+        }),
+    ];
+    for (const [index, artifact] of input.systemContainers.entries()) {
+        const systemResponse = systemResponses[index];
+        if (!systemResponse) {
+            throw new Error("Organization provisioning system response is missing");
+        }
+        heads.push(...(await containerArtifactHeads({ artifact, response: systemResponse })));
+    }
+    return heads;
+}
+//# sourceMappingURL=provisioningAcknowledgement.js.map

package/workflows/registration/provisioningAcknowledgement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioningAcknowledgement.js","sourceRoot":"","sources":["provisioningAcknowledgement.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,wCAAwC,EAAE,MAAM,sDAAsD,CAAC;AAChH,OAAO,EAAE,uCAAuC,EAAE,MAAM,uCAAuC,CAAC;AAChG,OAAO,EAEL,iCAAiC,GAClC,MAAM,iEAAiE,CAAC;AAczE,SAAS,eAAe,CAAI,KAAoB,EAAE,KAAa;IAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,iDAAiD,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CACf,MAA0B,EAC1B,QAAgB,EAChB,KAAa;IAEb,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,WAAW,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,KAMnC;IACC,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,GAAG,KAAK,CAAC;IACxE,IACE,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc;QACxC,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,sBAAsB;QACxD,QAAQ,CAAC,eAAe,KAAK,iBAAiB,CAAC,WAAW;QAC1D,QAAQ,CAAC,sBAAsB,KAAK,wBAAwB,CAAC,UAAU;QACvE,QAAQ,CAAC,uBAAuB,KAAK,iBAAiB,CAAC,QAAQ,CAAC,KAAK;QACrE,QAAQ,CAAC,2BAA2B,KAAK,iBAAiB,CAAC,YAAY,EACvE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAGrC;IACC,uCAAuC,CACrC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,EACnC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAChC,CAAC;IACF,OAAO;QACL,MAAM,wCAAwC,CAAC;YAC7C,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;SACnC,CAAC;QACF,iCAAiC,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAGrB;IACC,uCAAuC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpE,OAAO,iCAAiC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,KAWzD;IACC,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,uCAAuC,CACrC,KAAK,CAAC,wBAAwB,EAC9B,QAAQ,CAAC,oBAAoB,CAC9B,CAAC;IACF,MAAM,eAAe,GAAG,eAAe,CACrC,QAAQ,CAAC,sBAAsB,EAC/B,0BAA0B,CAC3B,CAAC;IACF,MAAM,cAAc,GAAG,eAAe,CACpC,QAAQ,CAAC,qBAAqB,EAC9B,yBAAyB,CAC1B,CAAC;IACF,MAAM,qBAAqB,GAAG,eAAe,CAC3C,QAAQ,CAAC,6BAA6B,EACtC,iCAAiC,CAClC,CAAC;IACF,MAAM,oBAAoB,GAAG,eAAe,CAC1C,QAAQ,CAAC,2BAA2B,EACpC,+BAA+B,CAChC,CAAC;IACF,QAAQ,CACN,QAAQ,CAAC,wBAAwB,EACjC,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC,WAAW,EAC7C,6BAA6B,CAC9B,CAAC;IACF,QAAQ,CACN,QAAQ,CAAC,uBAAuB,EAChC,KAAK,CAAC,yBAAyB,CAAC,UAAU,EAC1C,4BAA4B,CAC7B,CAAC;IACF,QAAQ,CACN,QAAQ,CAAC,+BAA+B,EACxC,KAAK,CAAC,oBAAoB,CAAC,aAAa,CAAC,WAAW,EACpD,oCAAoC,CACrC,CAAC;IACF,QAAQ,CACN,QAAQ,CAAC,6BAA6B,EACtC,KAAK,CAAC,+BAA+B,CAAC,UAAU,EAChD,kCAAkC,CACnC,CAAC;IAEF,MAAM,eAAe,GAAG,QAAQ,CAAC,gBAAgB,CAAC;IAClD,IAAI,eAAe,CAAC,MAAM,KAAK,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAA4C;QACrD,iCAAiC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC1D,iCAAiC,CAAC,KAAK,CAAC,wBAAwB,CAAC;QACjE,GAAG,CAAC,MAAM,sBAAsB,CAAC;YAC/B,QAAQ,EAAE,KAAK,CAAC,aAAa;YAC7B,QAAQ,EAAE,eAAe;SAC1B,CAAC,CAAC;QACH,YAAY,CAAC;YACX,IAAI,EAAE,KAAK,CAAC,yBAAyB;YACrC,QAAQ,EAAE,cAAc;SACzB,CAAC;QACF,GAAG,CAAC,MAAM,sBAAsB,CAAC;YAC/B,QAAQ,EAAE,KAAK,CAAC,oBAAoB;YACpC,QAAQ,EAAE,qBAAqB;SAChC,CAAC,CAAC;QACH,YAAY,CAAC;YACX,IAAI,EAAE,KAAK,CAAC,+BAA+B;YAC3C,QAAQ,EAAE,oBAAoB;SAC/B,CAAC;KACH,CAAC;IACF,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,MAAM,cAAc,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,MAAM,sBAAsB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import type {\n  ContainerCreateWithMetadataDocumentResponse,\n  DocumentCreateResponse,\n  OrganizationProvisioningResponse,\n} from \"@tearleads/validators/response\";\nimport { locallyAcknowledgedContainerMutationHead } from \"../../data/containers/shared/mutationAcknowledgement\";\nimport { assertDocumentCreateResponseMatchesPlan } from \"../../data/documents/shared/responses\";\nimport {\n  type LocallyAcknowledgedAccessManifestHead,\n  locallyAuthoredAccessManifestHead,\n} from \"../../data/persistence/locallyAcknowledgedCheckpointPersistence\";\n\ntype ContainerPlan = Parameters<\n  typeof locallyAcknowledgedContainerMutationHead\n>[0][\"plan\"];\ntype DocumentPlan = Parameters<\n  typeof assertDocumentCreateResponseMatchesPlan\n>[0];\n\ninterface ProvisioningContainerArtifact {\n  readonly containerPlan: ContainerPlan;\n  readonly metadataDocumentPlan: DocumentPlan;\n}\n\nfunction requireResponse<T>(value: T | undefined, label: string): T {\n  if (!value) {\n    throw new Error(`Organization provisioning response is missing ${label}`);\n  }\n  return value;\n}\n\nfunction assertId(\n  actual: string | undefined,\n  expected: string,\n  label: string,\n): void {\n  if (actual !== expected) {\n    throw new Error(`Organization provisioning response ${label} mismatch`);\n  }\n}\n\nfunction assertProvisioningIdentity(input: {\n  expectedOrganizationId: string;\n  expectedUserId: string;\n  response: OrganizationProvisioningResponse;\n  rootContainerPlan: ContainerPlan;\n  rootMetadataDocumentPlan: DocumentPlan;\n}): void {\n  const { response, rootContainerPlan, rootMetadataDocumentPlan } = input;\n  if (\n    response.userId !== input.expectedUserId ||\n    response.organizationId !== input.expectedOrganizationId ||\n    response.rootContainerId !== rootContainerPlan.containerId ||\n    response.rootMetadataDocumentId !== rootMetadataDocumentPlan.documentId ||\n    response.rootMetadataAccessEpoch !== rootContainerPlan.manifest.epoch ||\n    response.rootMetadataAccessStateHash !== rootContainerPlan.manifestHash\n  ) {\n    throw new Error(\"Organization provisioning response identity mismatch\");\n  }\n}\n\nasync function containerArtifactHeads(input: {\n  artifact: ProvisioningContainerArtifact;\n  response: ContainerCreateWithMetadataDocumentResponse;\n}): Promise<LocallyAcknowledgedAccessManifestHead[]> {\n  assertDocumentCreateResponseMatchesPlan(\n    input.artifact.metadataDocumentPlan,\n    input.response.metadataDocument,\n  );\n  return [\n    await locallyAcknowledgedContainerMutationHead({\n      plan: input.artifact.containerPlan,\n      response: input.response.container,\n    }),\n    locallyAuthoredAccessManifestHead(input.artifact.metadataDocumentPlan),\n  ];\n}\n\nfunction documentHead(input: {\n  plan: DocumentPlan;\n  response: DocumentCreateResponse;\n}): LocallyAcknowledgedAccessManifestHead {\n  assertDocumentCreateResponseMatchesPlan(input.plan, input.response);\n  return locallyAuthoredAccessManifestHead(input.plan);\n}\n\nexport async function provisioningAcknowledgedAccessHeads(input: {\n  expectedOrganizationId: string;\n  expectedUserId: string;\n  organizationMetadata: ProvisioningContainerArtifact;\n  organizationProfileDocumentPlan: DocumentPlan;\n  response: OrganizationProvisioningResponse;\n  rootContainerPlan: ContainerPlan;\n  rootMetadataDocumentPlan: DocumentPlan;\n  rosterProfile: ProvisioningContainerArtifact;\n  rosterProfileDocumentPlan: DocumentPlan;\n  systemContainers: readonly ProvisioningContainerArtifact[];\n}): Promise<LocallyAcknowledgedAccessManifestHead[]> {\n  assertProvisioningIdentity(input);\n  const response = input.response;\n  assertDocumentCreateResponseMatchesPlan(\n    input.rootMetadataDocumentPlan,\n    response.rootMetadataDocument,\n  );\n  const rosterContainer = requireResponse(\n    response.rosterProfileContainer,\n    \"roster profile container\",\n  );\n  const rosterDocument = requireResponse(\n    response.rosterProfileDocument,\n    \"roster profile document\",\n  );\n  const organizationContainer = requireResponse(\n    response.organizationMetadataContainer,\n    \"organization metadata container\",\n  );\n  const organizationDocument = requireResponse(\n    response.organizationProfileDocument,\n    \"organization profile document\",\n  );\n  assertId(\n    response.rosterProfileContainerId,\n    input.rosterProfile.containerPlan.containerId,\n    \"roster profile container id\",\n  );\n  assertId(\n    response.rosterProfileDocumentId,\n    input.rosterProfileDocumentPlan.documentId,\n    \"roster profile document id\",\n  );\n  assertId(\n    response.organizationMetadataContainerId,\n    input.organizationMetadata.containerPlan.containerId,\n    \"organization metadata container id\",\n  );\n  assertId(\n    response.organizationProfileDocumentId,\n    input.organizationProfileDocumentPlan.documentId,\n    \"organization profile document id\",\n  );\n\n  const systemResponses = response.systemContainers;\n  if (systemResponses.length !== input.systemContainers.length) {\n    throw new Error(\n      \"Organization provisioning response system container count mismatch\",\n    );\n  }\n  const heads: LocallyAcknowledgedAccessManifestHead[] = [\n    locallyAuthoredAccessManifestHead(input.rootContainerPlan),\n    locallyAuthoredAccessManifestHead(input.rootMetadataDocumentPlan),\n    ...(await containerArtifactHeads({\n      artifact: input.rosterProfile,\n      response: rosterContainer,\n    })),\n    documentHead({\n      plan: input.rosterProfileDocumentPlan,\n      response: rosterDocument,\n    }),\n    ...(await containerArtifactHeads({\n      artifact: input.organizationMetadata,\n      response: organizationContainer,\n    })),\n    documentHead({\n      plan: input.organizationProfileDocumentPlan,\n      response: organizationDocument,\n    }),\n  ];\n  for (const [index, artifact] of input.systemContainers.entries()) {\n    const systemResponse = systemResponses[index];\n    if (!systemResponse) {\n      throw new Error(\"Organization provisioning system response is missing\");\n    }\n    heads.push(\n      ...(await containerArtifactHeads({ artifact, response: systemResponse })),\n    );\n  }\n  return heads;\n}\n"]}