@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/data/persistence/container-contents/documentMoveIntentPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentMoveIntentPersistence.js","sourceRoot":"","sources":["documentMoveIntentPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAEL,eAAe,EACf,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAE1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC;AACzD,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC;AACzD,MAAM,+BAA+B,GAAG;IACtC,yBAAyB;IACzB,yBAAyB;CAC1B,CAAC;AAEF,2EAA2E;AAC3E,mEAAmE;AACnE,yEAAyE;AACzE,oEAAoE;AACpE,6EAA6E;AAC7E,4EAA4E;AAC5E,wDAAwD;AACxD,MAAM,8BAA8B,GAAG;;;;EAIrC,CAAC;AAEH,MAAM,oCAAoC,GAAG;;;;;;yDAMY,CAAC;AAuD1D,SAAS,iCAAiC,CACxC,KAAc;IAEd,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,yBAAyB,CAAC,KAIlC;IACC,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,aAAa,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,SAAS,2BAA2B,CAClC,GAAqC;IAErC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,UAAU,EACR,GAAG,CAAC,UAAU,KAAK,yBAAyB;YAC1C,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,yBAAyB;QAC/B,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAC7D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,UAAU,EAAE,iCAAiC,CAAC,GAAG,CAAC,UAAU,CAAC;QAC7D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,KAAK,CAAC,YAAY,CAAC,OAAgB;QACjC,MAAM,eAAe,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAC3D,CAAC;IAED,iBAAiB,EAAE,yBAAyB;IAC5C,iBAAiB,EAAE,yBAAyB;IAC5C,mBAAmB,EAAE,2BAA2B;IAEhD,KAAK,CAAC,sBAAsB,CAC1B,OAAgB;QAEhB,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YAC/D,MAAM,eAAe,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;YAC/D,OAAO,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CACjE,KAAK,EAAE,EAAE,EAAE,EAAE;gBACX,MAAM,IAAI,GAAG,MAAM,EAAE;qBAClB,MAAM,EAAE;qBACR,IAAI,CAAC,mBAAmB,CAAC;oBAC1B,kEAAkE;oBAClE,qEAAqE;oBACrE,uEAAuE;oBACvE,qEAAqE;oBACrE,2DAA2D;oBAC3D,wEAAwE;oBACxE,mEAAmE;oBACnE,uEAAuE;qBACtE,KAAK,CACJ,GAAG,CACD,OAAO,CAAC,mBAAmB,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAC/D,OAAO,CACL,mBAAmB,CAAC,UAAU,EAC9B,+BAA+B,CAChC,CACF,CACF;qBACA,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;gBAE/C,OAAO,OAAO,CAAC,GAAG,CAChB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;oBACrB,MAAM,OAAO,GAAG,MAAM,6BAA6B,CACjD,aAAa,EACb,GAAG,CAAC,EAAE,IAAI,EAAE,CACb,CAAC;oBACF,MAAM,KAAK,GAAG,OAAO;yBAClB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC;yBAC/C,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;yBACnC,IAAI,EAAE,CAAC;oBACV,MAAM,OAAO,GAAG,OAAO;yBACpB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC;yBACjD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;yBACnC,IAAI,EAAE,CAAC;oBACV,OAAO;wBACL,GAAG,2BAA2B,CAAC,GAAG,CAAC;wBACnC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9D,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAChE,CAAC;gBACJ,CAAC,CAAC,CACH,CAAC;YACJ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,OAAgB,EAChB,KAIC;QAED,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YAC/D,MAAM,OAAO,GAAG,MAAM,aAAa,CACjC;;;;aAIK,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;sBACjC,EACd;gBACE,KAAK,CAAC,UAAU;gBAChB,GAAG,+BAA+B;gBAClC,KAAK,CAAC,iBAAiB;gBACvB,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5D,CACF,CAAC;YACF,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,iCAAiC,CAAC,aAAa,CAAC;qBACnD,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC;qBACpC,KAAK,CAAC,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;qBACzD,GAAG,EAAE,CAAC;YACX,CAAC;YACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,OAAgB,EAChB,KA2BC;QAED,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,kBAAkB,CACjE,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,EAAE;iBACL,MAAM,CAAC,mBAAmB,CAAC;iBAC3B,GAAG,CAAC;gBACH,eAAe,EAAE,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,OAAO;gBACxB,UAAU,EAAE,yBAAyB,CAAC,KAAK,CAAC;gBAC5C,SAAS;aACV,CAAC;iBACD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;YACpD,4DAA4D;YAC5D,8DAA8D;YAC9D,kDAAkD;YAClD,OAAO,CAAC,mBAAmB,CAAC,UAAU,EAAE;gBACtC,SAAS;gBACT,SAAS;gBACT,QAAQ;aACT,CAAC,EACF,OAAO,CACL,mBAAmB,CAAC,UAAU,EAC9B,+BAA+B,CAChC,EACD,GAAG,CAAC,KAAK,CAAC,gBAAgB;gBACxB,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACtD,CAAC,CAAC,EAAE,CAAC,EACP,GAAG,CAAC,KAAK,CAAC,iBAAiB;gBACzB,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBAC9D,CAAC,CAAC,EAAE,CAAC,CACR,CACF;iBACA,GAAG,EAAE,CAAC;QACX,CAAC,EACD,KAAK,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAClC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACJ,CAAC;IACD;;;OAGG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAAgB,EAChB,KAAmC;QAEnC,MAAM,gCAAgC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,eAAe,CAAC,OAAO,EAAE;YAC7B,GAAG,wBAAwB;YAC3B,GAAG,eAAe;SACnB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB;;SAEG,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,EAAE;;;WAG/D,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,8BAA8B,WAAW,8BAA8B,WAAW,CAAC,CAAC,CAAC,EAAE;eACnH,EACT,KAAK,EAAE,cAAc;YACnB,CAAC,CAAC,CAAC,GAAG,+BAA+B,EAAE,KAAK,CAAC,cAAc,CAAC;YAC5D,CAAC,CAAC,+BAA+B,CACpC,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;IACD;;;;OAIG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAAgB,EAChB,KAAqD;QAErD,MAAM,gCAAgC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,eAAe,CAAC,OAAO,EAAE;YAC7B,GAAG,wBAAwB;YAC3B,GAAG,eAAe;SACnB,CAAC,CAAC;QACH,MAAM,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YAC9D,uEAAuE;YACvE,sEAAsE;YACtE,qEAAqE;YACrE,8DAA8D;YAC9D,MAAM,aAAa,CACjB;;;;aAIK,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE;aAExC,KAAK,EAAE,cAAc;gBACnB,CAAC,CAAC;;sBAEK,oCAAoC;4BAC9B,8BAA8B;2BAC/B,8BAA8B;oBACrC;gBACL,CAAC,CAAC,EACjB,EAAE,EACM;gBACE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACxB,GAAG,+BAA+B;gBAClC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACzD,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC","sourcesContent":["import { and, asc, eq, inArray } from \"drizzle-orm\";\nimport { documentIntentLinkTargets } from \"../../sqlite/documentPlacementIntentSchema\";\nimport {\n  containerTables,\n  documentMoveIntents,\n  documentMoveIntentTables,\n  documentProjectionTables,\n} from \"../../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport {\n  type ExecSql,\n  ensureSqlTables,\n  runSerializedSqlMutation,\n} from \"../../sqlite/sqlSchema\";\nimport {\n  enqueueDocumentLinkIntent,\n  enqueueDocumentMoveIntent,\n  enqueueDocumentUnlinkIntent,\n  loadDocumentIntentLinkTargets,\n} from \"./documentPlacementIntentEnqueue\";\n\nexport const DOCUMENT_MOVE_INTENT_TYPE = \"document.move\";\nexport const DOCUMENT_LINK_INTENT_TYPE = \"document.link\";\nconst DOCUMENT_PLACEMENT_INTENT_TYPES = [\n  DOCUMENT_MOVE_INTENT_TYPE,\n  DOCUMENT_LINK_INTENT_TYPE,\n];\n\n// Resolves the organization a parked move belongs to, in confidence order:\n// the move's target container, the document's preserved projection\n// attribution, then the container the document currently sits in. Normal\n// saves routinely leave projection attribution empty (deferred-tail\n// reporting resolves through the same container join), so the container rows\n// carry the common case; rows with no resolvable organization stay in every\n// scope (device-first shapes, matching orphan priming).\nconst DENIED_INTENT_ORGANIZATION_SQL = `COALESCE(\n  NULLIF(target_container.organization_id, ''),\n  NULLIF(projection.organization_id, ''),\n  NULLIF(projection_container.organization_id, '')\n)`;\n\nconst DENIED_INTENT_ORGANIZATION_JOINS_SQL = `\n  LEFT JOIN containers target_container\n    ON target_container.id = intent.target_container_id\n  LEFT JOIN document_projection projection\n    ON projection.local_id = intent.local_id\n  LEFT JOIN containers projection_container\n    ON projection_container.id = projection.container_id`;\n\n/**\n * - `pending`: replays on every structural pass.\n * - `blocked`: the last pass could not proceed locally (missing local\n *   document / destination); replays, since hydration can heal it.\n * - `denied`: parked on a 403 until the access-restored replay (row 7).\n * - `unavailable`: terminal — after a projection refresh the destination\n *   itself is proven deleted (coded 404 on its own projection probe). No\n *   mutation 409 is ever terminal: with the destination live it can only\n *   name an ancestor or source, and the next pass's fresh paths outrun it.\n *   Container ids never return, so no replay can commit the intent as\n *   written; it leaves the replay set until the local container tombstone\n *   cascade retargets it or the user re-enqueues the move.\n */\nexport type DocumentMoveIntentSyncStatus =\n  | \"pending\"\n  | \"blocked\"\n  | \"denied\"\n  | \"unavailable\";\n\nexport interface DocumentMoveIntentRecord {\n  additionalLinkContainerIds?: readonly string[] | undefined;\n  removedLinkContainerIds?: readonly string[] | undefined;\n  id: string;\n  documentId: string;\n  intentType:\n    | typeof DOCUMENT_MOVE_INTENT_TYPE\n    | typeof DOCUMENT_LINK_INTENT_TYPE;\n  lastAttemptedAt: string | null;\n  lastError: string | null;\n  localId: string;\n  replaceLinkedContainers: boolean;\n  sourceContainerId: string | null;\n  syncStatus: DocumentMoveIntentSyncStatus;\n  targetContainerId: string;\n  createdAt: string;\n  updatedAt: string;\n}\n\ninterface SelectedDocumentMoveIntentRecord {\n  id: string | null;\n  documentId: string;\n  intentType: string;\n  lastAttemptedAt: string | null;\n  lastError: string | null;\n  localId: string;\n  replaceLinkedContainers: boolean;\n  sourceContainerId: string | null;\n  syncStatus: string;\n  targetContainerId: string;\n  createdAt: string;\n  updatedAt: string;\n}\n\nfunction parseDocumentMoveIntentSyncStatus(\n  value: unknown,\n): DocumentMoveIntentSyncStatus {\n  if (value === \"blocked\" || value === \"denied\" || value === \"unavailable\") {\n    return value;\n  }\n  return \"pending\";\n}\n\nfunction resolveRecordedSyncStatus(input: {\n  blocked?: boolean | undefined;\n  denied?: boolean | undefined;\n  unavailable?: boolean | undefined;\n}): DocumentMoveIntentSyncStatus {\n  if (input.unavailable) return \"unavailable\";\n  if (input.denied) return \"denied\";\n  return input.blocked ? \"blocked\" : \"pending\";\n}\n\nfunction mapDocumentMoveIntentRecord(\n  row: SelectedDocumentMoveIntentRecord,\n): DocumentMoveIntentRecord {\n  return {\n    id: String(row.id ?? \"\"),\n    documentId: row.documentId,\n    intentType:\n      row.intentType === DOCUMENT_LINK_INTENT_TYPE\n        ? DOCUMENT_LINK_INTENT_TYPE\n        : DOCUMENT_MOVE_INTENT_TYPE,\n    lastAttemptedAt: row.lastAttemptedAt,\n    lastError: row.lastError,\n    localId: row.localId,\n    replaceLinkedContainers: Boolean(row.replaceLinkedContainers),\n    sourceContainerId: row.sourceContainerId,\n    syncStatus: parseDocumentMoveIntentSyncStatus(row.syncStatus),\n    targetContainerId: row.targetContainerId,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\nexport const sqlDocumentMoveIntentPersistence = {\n  async ensureSchema(execSql: ExecSql): Promise<void> {\n    await ensureSqlTables(execSql, documentMoveIntentTables);\n  },\n\n  enqueueMoveIntent: enqueueDocumentMoveIntent,\n  enqueueLinkIntent: enqueueDocumentLinkIntent,\n  enqueueUnlinkIntent: enqueueDocumentUnlinkIntent,\n\n  async listPendingMoveIntents(\n    execSql: ExecSql,\n  ): Promise<DocumentMoveIntentRecord[]> {\n    return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n      await ensureSqlTables(lockedExecSql, documentMoveIntentTables);\n      return getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n        async (tx) => {\n          const rows = await tx\n            .select()\n            .from(documentMoveIntents)\n            // Blocked intents replay too: \"blocked\" names the reason the last\n            // attempt could not proceed (missing local doc / destination), not a\n            // terminal verdict. The blocking condition can heal after hydration or\n            // recovery, and re-checking is cheap — a still-blocked intent simply\n            // re-records its reason without counting as lane progress.\n            // Unavailable intents never replay: the server proved a cited container\n            // is gone, so every replay would re-issue the same doomed requests\n            // (#2278 #4). Only the tombstone cascade or a re-enqueue revives them.\n            .where(\n              and(\n                inArray(documentMoveIntents.syncStatus, [\"pending\", \"blocked\"]),\n                inArray(\n                  documentMoveIntents.intentType,\n                  DOCUMENT_PLACEMENT_INTENT_TYPES,\n                ),\n              ),\n            )\n            .orderBy(asc(documentMoveIntents.createdAt));\n\n          return Promise.all(\n            rows.map(async (row) => {\n              const targets = await loadDocumentIntentLinkTargets(\n                lockedExecSql,\n                row.id ?? \"\",\n              );\n              const added = targets\n                .filter((target) => target.operation === \"link\")\n                .map((target) => target.containerId)\n                .sort();\n              const removed = targets\n                .filter((target) => target.operation === \"unlink\")\n                .map((target) => target.containerId)\n                .sort();\n              return {\n                ...mapDocumentMoveIntentRecord(row),\n                ...(added.length ? { additionalLinkContainerIds: added } : {}),\n                ...(removed.length ? { removedLinkContainerIds: removed } : {}),\n              };\n            }),\n          );\n        },\n      );\n    });\n  },\n\n  async markMoveIntentSynced(\n    execSql: ExecSql,\n    input: {\n      documentId: string;\n      expectedIntentId?: string | undefined;\n      expectedUpdatedAt: string;\n    },\n  ): Promise<boolean> {\n    return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n      const deleted = await lockedExecSql(\n        `DELETE FROM document_move_intents\n         WHERE document_id = ?\n           AND intent_type IN (?, ?)\n           AND updated_at = ?\n           ${input.expectedIntentId ? \"AND id = ?\" : \"\"}\n         RETURNING id`,\n        [\n          input.documentId,\n          ...DOCUMENT_PLACEMENT_INTENT_TYPES,\n          input.expectedUpdatedAt,\n          ...(input.expectedIntentId ? [input.expectedIntentId] : []),\n        ],\n      );\n      for (const { id } of deleted) {\n        await getClientSQLitePersistenceRuntime(lockedExecSql)\n          .db.delete(documentIntentLinkTargets)\n          .where(eq(documentIntentLinkTargets.intentId, String(id)))\n          .run();\n      }\n      return deleted.length > 0;\n    });\n  },\n\n  async recordMoveIntentError(\n    execSql: ExecSql,\n    input: {\n      blocked?: boolean | undefined;\n      /**\n       * A permission denial (403): the intent parks as `denied` — excluded\n       * from routine structural replays — until the org-access-restored\n       * signal or a manual retry flips it back to pending (edge-case row 7).\n       */\n      denied?: boolean | undefined;\n      documentId: string;\n      /** Exact intent revision read by the pass; preferred over wall-clock CAS. */\n      expectedIntentId?: string | undefined;\n      /**\n       * Optimistic concurrency: when given, the error only records against\n       * the intent revision the pass read — a re-enqueued move (new\n       * updatedAt) is never parked by a stale in-flight failure.\n       */\n      expectedUpdatedAt?: string | undefined;\n      message: string;\n      stillCurrent?: (() => boolean) | undefined;\n      /**\n       * Server proof that a cited container was deleted (coded 404 or\n       * `container_unavailable` 409): the intent parks terminally as\n       * `unavailable`, outside every replay, until the tombstone cascade\n       * retargets it or a re-enqueue replaces it. Outranks `denied`: a\n       * restored permission cannot revive a deleted container.\n       */\n      unavailable?: boolean | undefined;\n    },\n  ): Promise<void> {\n    await getClientSQLitePersistenceRuntime(execSql).guardedTransaction(\n      async (db) => {\n        const updatedAt = new Date().toISOString();\n        await db\n          .update(documentMoveIntents)\n          .set({\n            lastAttemptedAt: updatedAt,\n            lastError: input.message,\n            syncStatus: resolveRecordedSyncStatus(input),\n            updatedAt,\n          })\n          .where(\n            and(\n              eq(documentMoveIntents.documentId, input.documentId),\n              // Blocked/denied rows must stay updatable: a retried intent\n              // records its fresh outcome, and a transient failure flips it\n              // back to pending instead of freezing it forever.\n              inArray(documentMoveIntents.syncStatus, [\n                \"pending\",\n                \"blocked\",\n                \"denied\",\n              ]),\n              inArray(\n                documentMoveIntents.intentType,\n                DOCUMENT_PLACEMENT_INTENT_TYPES,\n              ),\n              ...(input.expectedIntentId\n                ? [eq(documentMoveIntents.id, input.expectedIntentId)]\n                : []),\n              ...(input.expectedUpdatedAt\n                ? [eq(documentMoveIntents.updatedAt, input.expectedUpdatedAt)]\n                : []),\n            ),\n          )\n          .run();\n      },\n      input.stillCurrent ?? (() => true),\n      { behavior: \"immediate\" },\n    );\n  },\n  /**\n   * Evidence for the org-access-restored re-arm gate: a parked\n   * permission-denied move proves a queued write was refused.\n   */\n  async hasDeniedMoveIntents(\n    execSql: ExecSql,\n    input?: { organizationId?: string },\n  ): Promise<boolean> {\n    await sqlDocumentMoveIntentPersistence.ensureSchema(execSql);\n    await ensureSqlTables(execSql, [\n      ...documentProjectionTables,\n      ...containerTables,\n    ]);\n    const rows = await execSql(\n      `SELECT intent.document_id AS document_id\n       FROM document_move_intents intent\n       ${input?.organizationId ? DENIED_INTENT_ORGANIZATION_JOINS_SQL : \"\"}\n       WHERE intent.sync_status = 'denied'\n         AND intent.intent_type IN (?, ?)\n         ${input?.organizationId ? `AND (${DENIED_INTENT_ORGANIZATION_SQL} = ? OR ${DENIED_INTENT_ORGANIZATION_SQL} IS NULL)` : \"\"}\n       LIMIT 1`,\n      input?.organizationId\n        ? [...DOCUMENT_PLACEMENT_INTENT_TYPES, input.organizationId]\n        : DOCUMENT_PLACEMENT_INTENT_TYPES,\n    );\n    return rows.length > 0;\n  },\n  /**\n   * Flip parked permission-denied moves back to pending so the re-armed\n   * structural pass replays them (access restored, or a manual retry scoped\n   * to one document).\n   */\n  async resetDeniedMoveIntents(\n    execSql: ExecSql,\n    input?: { localId?: string; organizationId?: string },\n  ): Promise<void> {\n    await sqlDocumentMoveIntentPersistence.ensureSchema(execSql);\n    await ensureSqlTables(execSql, [\n      ...documentProjectionTables,\n      ...containerTables,\n    ]);\n    await runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n      // Organization scoping resolves each intent's organization through the\n      // container joins above: restoring one organization's access must not\n      // un-park moves that another organization still denies. Rows with no\n      // resolvable organization are included (device-first shapes).\n      await lockedExecSql(\n        `UPDATE document_move_intents\n         SET sync_status = 'pending', updated_at = ?\n         WHERE sync_status = 'denied'\n           AND intent_type IN (?, ?)\n           ${input?.localId ? \"AND local_id = ?\" : \"\"}\n           ${\n             input?.organizationId\n               ? `AND local_id IN (\n                    SELECT intent.local_id FROM document_move_intents intent\n                    ${DENIED_INTENT_ORGANIZATION_JOINS_SQL}\n                    WHERE ${DENIED_INTENT_ORGANIZATION_SQL} = ?\n                      OR ${DENIED_INTENT_ORGANIZATION_SQL} IS NULL\n                  )`\n               : \"\"\n}`,\n        [\n          new Date().toISOString(),\n          ...DOCUMENT_PLACEMENT_INTENT_TYPES,\n          ...(input?.localId ? [input.localId] : []),\n          ...(input?.organizationId ? [input.organizationId] : []),\n        ],\n      );\n    });\n  },\n};\n"]}

package/data/persistence/container-contents/documentPlacementIntentEnqueue.js

@@ -0,0 +1,149 @@
+import { and, eq } from "drizzle-orm";
+import { uniqueSortedStrings } from "../../documents/shared/readers.js";
+import { documentIntentLinkTargets } from "../../sqlite/documentPlacementIntentSchema.js";
+import { documentContainerProjection, documentContainerProjectionTables, documentMoveIntents, documentMoveIntentTables, } from "../../sqlite/schema.js";
+import { getClientSQLitePersistenceRuntime } from "../../sqlite/sqlitePersistenceRuntime.js";
+import { ensureSqlTables, runSerializedSqlMutation, } from "../../sqlite/sqlSchema.js";
+export async function loadDocumentIntentLinkTargets(execSql, intentId) {
+    return getClientSQLitePersistenceRuntime(execSql)
+        .db.select({
+        containerId: documentIntentLinkTargets.containerId,
+        operation: documentIntentLinkTargets.operation,
+    })
+        .from(documentIntentLinkTargets)
+        .where(eq(documentIntentLinkTargets.intentId, intentId));
+}
+async function loadSurvivingMoveTarget(execSql, previous) {
+    if (previous?.intentType !== "document.move")
+        return null;
+    const [link] = await getClientSQLitePersistenceRuntime(execSql)
+        .db.select({ containerId: documentContainerProjection.containerId })
+        .from(documentContainerProjection)
+        .where(and(eq(documentContainerProjection.documentId, previous.documentId), eq(documentContainerProjection.containerId, previous.targetContainerId)))
+        .limit(1);
+    return link?.containerId ?? null;
+}
+function resolveTargets(input, previous, operation, previousMoveTarget) {
+    const targets = new Map(previous.map((target) => [target.containerId, target.operation]));
+    if (operation === "link")
+        targets.set(input.targetContainerId, "link");
+    else if (operation === "unlink") {
+        if (!input.removedContainerId)
+            throw new Error("Unlink intent requires a removed container");
+        targets.set(input.removedContainerId, "unlink");
+    }
+    else if (input.replaceLinkedContainers)
+        targets.clear();
+    else {
+        if (previousMoveTarget &&
+            previousMoveTarget !== input.sourceContainerId &&
+            previousMoveTarget !== input.targetContainerId &&
+            targets.get(previousMoveTarget) !== "unlink") {
+            targets.set(previousMoveTarget, "link");
+        }
+        targets.delete(input.targetContainerId);
+        if (input.sourceContainerId &&
+            input.sourceContainerId !== input.targetContainerId)
+            targets.set(input.sourceContainerId, "unlink");
+    }
+    return uniqueSortedStrings([...targets.keys()]).map((containerId) => ({
+        containerId,
+        operation: targets.get(containerId) ?? "link",
+    }));
+}
+function resolvePlacement(input, previous, operation) {
+    if (operation === "unlink") {
+        return {
+            sourceContainerId: previous?.intentType === "document.move"
+                ? previous.sourceContainerId
+                : input.targetContainerId,
+            targetContainerId: previous?.intentType === "document.move" &&
+                previous.targetContainerId !== input.removedContainerId
+                ? previous.targetContainerId
+                : input.targetContainerId,
+            replaceLinkedContainers: previous?.replaceLinkedContainers ?? false,
+        };
+    }
+    const linkOnly = operation === "link";
+    const sourceContainerId = previous?.intentType === "document.move"
+        ? (previous.sourceContainerId ?? input.sourceContainerId ?? null)
+        : (input.sourceContainerId ?? null);
+    return {
+        sourceContainerId: linkOnly
+            ? (previous?.sourceContainerId ?? input.sourceContainerId ?? null)
+            : sourceContainerId,
+        targetContainerId: linkOnly
+            ? (previous?.targetContainerId ??
+                input.sourceContainerId ??
+                input.targetContainerId)
+            : input.targetContainerId,
+        replaceLinkedContainers: previous?.replaceLinkedContainers ||
+            (input.replaceLinkedContainers ?? false),
+    };
+}
+async function enqueuePlacementIntent(execSql, input, operation) {
+    await runSerializedSqlMutation(execSql, async (lockedExecSql) => {
+        await ensureSqlTables(lockedExecSql, documentMoveIntentTables);
+        await ensureSqlTables(lockedExecSql, documentContainerProjectionTables);
+        const runtime = getClientSQLitePersistenceRuntime(lockedExecSql);
+        await runtime.transaction(async (tx) => {
+            const [previous] = await tx
+                .select()
+                .from(documentMoveIntents)
+                .where(eq(documentMoveIntents.documentId, input.documentId))
+                .limit(1);
+            const previousTargets = previous?.id
+                ? await loadDocumentIntentLinkTargets(lockedExecSql, previous.id)
+                : [];
+            const targets = resolveTargets(input, previousTargets, operation, operation === "move"
+                ? await loadSurvivingMoveTarget(lockedExecSql, previous)
+                : null);
+            const id = input.id ?? crypto.randomUUID();
+            const updatedAt = new Date().toISOString();
+            // An additive intent retains the active placement and any pending move.
+            // Its targets are separate from the discovery projection: only explicit
+            // user additions may be replayed, never stale server-discovered links.
+            const next = {
+                id,
+                documentId: input.documentId,
+                localId: input.localId,
+                intentType: operation === "move" || previous?.intentType === "document.move"
+                    ? "document.move"
+                    : "document.link",
+                lastAttemptedAt: null,
+                lastError: null,
+                syncStatus: "pending",
+                updatedAt,
+                ...resolvePlacement(input, previous, operation),
+            };
+            await tx
+                .insert(documentMoveIntents)
+                .values({ ...next, createdAt: updatedAt })
+                .onConflictDoUpdate({
+                target: documentMoveIntents.documentId,
+                set: next,
+            })
+                .run();
+            if (previous?.id)
+                await tx
+                    .delete(documentIntentLinkTargets)
+                    .where(eq(documentIntentLinkTargets.intentId, previous.id))
+                    .run();
+            if (targets.length)
+                await tx
+                    .insert(documentIntentLinkTargets)
+                    .values(targets.map((target) => ({ intentId: id, ...target })))
+                    .run();
+        });
+    });
+}
+export function enqueueDocumentMoveIntent(execSql, input) {
+    return enqueuePlacementIntent(execSql, input, "move");
+}
+export function enqueueDocumentLinkIntent(execSql, input) {
+    return enqueuePlacementIntent(execSql, input, "link");
+}
+export function enqueueDocumentUnlinkIntent(execSql, input) {
+    return enqueuePlacementIntent(execSql, input, "unlink");
+}
+//# sourceMappingURL=documentPlacementIntentEnqueue.js.map

package/data/persistence/container-contents/documentPlacementIntentEnqueue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentPlacementIntentEnqueue.js","sourceRoot":"","sources":["documentPlacementIntentEnqueue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EACL,2BAA2B,EAC3B,iCAAiC,EACjC,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAEL,eAAe,EACf,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAYhC,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAgB,EAChB,QAAgB;IAEhB,OAAO,iCAAiC,CAAC,OAAO,CAAC;SAC9C,EAAE,CAAC,MAAM,CAAC;QACT,WAAW,EAAE,yBAAyB,CAAC,WAAW;QAClD,SAAS,EAAE,yBAAyB,CAAC,SAAS;KAC/C,CAAC;SACD,IAAI,CAAC,yBAAyB,CAAC;SAC/B,KAAK,CAAC,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC7D,CAAC;AAID,KAAK,UAAU,uBAAuB,CACpC,OAAgB,EAChB,QAA6D;IAE7D,IAAI,QAAQ,EAAE,UAAU,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,iCAAiC,CAAC,OAAO,CAAC;SAC5D,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2BAA2B,CAAC,WAAW,EAAE,CAAC;SACnE,IAAI,CAAC,2BAA2B,CAAC;SACjC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,2BAA2B,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,EAC/D,EAAE,CAAC,2BAA2B,CAAC,WAAW,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CACxE,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC;AACnC,CAAC;AAED,SAAS,cAAc,CACrB,KAA2B,EAC3B,QAAsB,EACtB,SAAqC,EACrC,kBAAiC;IAEjC,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CACjE,CAAC;IACF,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;SAClE,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,kBAAkB;YAC3B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,KAAK,CAAC,uBAAuB;QAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SACrD,CAAC;QACJ,IACE,kBAAkB;YAClB,kBAAkB,KAAK,KAAK,CAAC,iBAAiB;YAC9C,kBAAkB,KAAK,KAAK,CAAC,iBAAiB;YAC9C,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,QAAQ,EAC5C,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACxC,IACE,KAAK,CAAC,iBAAiB;YACvB,KAAK,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;YAEnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,mBAAmB,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpE,WAAW;QACX,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,MAAM;KAC9C,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB,CACvB,KAA2B,EAC3B,QAA6D,EAC7D,SAAqC;IAErC,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO;YACL,iBAAiB,EACf,QAAQ,EAAE,UAAU,KAAK,eAAe;gBACtC,CAAC,CAAC,QAAQ,CAAC,iBAAiB;gBAC5B,CAAC,CAAC,KAAK,CAAC,iBAAiB;YAC7B,iBAAiB,EACf,QAAQ,EAAE,UAAU,KAAK,eAAe;gBACxC,QAAQ,CAAC,iBAAiB,KAAK,KAAK,CAAC,kBAAkB;gBACrD,CAAC,CAAC,QAAQ,CAAC,iBAAiB;gBAC5B,CAAC,CAAC,KAAK,CAAC,iBAAiB;YAC7B,uBAAuB,EAAE,QAAQ,EAAE,uBAAuB,IAAI,KAAK;SACpE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,KAAK,MAAM,CAAC;IACtC,MAAM,iBAAiB,GACrB,QAAQ,EAAE,UAAU,KAAK,eAAe;QACtC,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,IAAI,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAAC;QACjE,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAAC,CAAC;IACxC,OAAO;QACL,iBAAiB,EAAE,QAAQ;YACzB,CAAC,CAAC,CAAC,QAAQ,EAAE,iBAAiB,IAAI,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAAC;YAClE,CAAC,CAAC,iBAAiB;QACrB,iBAAiB,EAAE,QAAQ;YACzB,CAAC,CAAC,CAAC,QAAQ,EAAE,iBAAiB;gBAC5B,KAAK,CAAC,iBAAiB;gBACvB,KAAK,CAAC,iBAAiB,CAAC;YAC1B,CAAC,CAAC,KAAK,CAAC,iBAAiB;QAC3B,uBAAuB,EACrB,QAAQ,EAAE,uBAAuB;YACjC,CAAC,KAAK,CAAC,uBAAuB,IAAI,KAAK,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,OAAgB,EAChB,KAA2B,EAC3B,SAAqC;IAErC,MAAM,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC9D,MAAM,eAAe,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;QAC/D,MAAM,eAAe,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,iCAAiC,CAAC,aAAa,CAAC,CAAC;QACjE,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;iBACxB,MAAM,EAAE;iBACR,IAAI,CAAC,mBAAmB,CAAC;iBACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;iBAC3D,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,MAAM,eAAe,GAAG,QAAQ,EAAE,EAAE;gBAClC,CAAC,CAAC,MAAM,6BAA6B,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACjE,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,OAAO,GAAG,cAAc,CAC5B,KAAK,EACL,eAAe,EACf,SAAS,EACT,SAAS,KAAK,MAAM;gBAClB,CAAC,CAAC,MAAM,uBAAuB,CAAC,aAAa,EAAE,QAAQ,CAAC;gBACxD,CAAC,CAAC,IAAI,CACT,CAAC;YACF,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,wEAAwE;YACxE,wEAAwE;YACxE,uEAAuE;YACvE,MAAM,IAAI,GAAG;gBACX,EAAE;gBACF,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EACR,SAAS,KAAK,MAAM,IAAI,QAAQ,EAAE,UAAU,KAAK,eAAe;oBAC9D,CAAC,CAAC,eAAe;oBACjB,CAAC,CAAC,eAAe;gBACrB,eAAe,EAAE,IAAI;gBACrB,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,SAAS;gBACrB,SAAS;gBACT,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;aAChD,CAAC;YACF,MAAM,EAAE;iBACL,MAAM,CAAC,mBAAmB,CAAC;iBAC3B,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;iBACzC,kBAAkB,CAAC;gBAClB,MAAM,EAAE,mBAAmB,CAAC,UAAU;gBACtC,GAAG,EAAE,IAAI;aACV,CAAC;iBACD,GAAG,EAAE,CAAC;YACT,IAAI,QAAQ,EAAE,EAAE;gBACd,MAAM,EAAE;qBACL,MAAM,CAAC,yBAAyB,CAAC;qBACjC,KAAK,CAAC,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;qBAC1D,GAAG,EAAE,CAAC;YACX,IAAI,OAAO,CAAC,MAAM;gBAChB,MAAM,EAAE;qBACL,MAAM,CAAC,yBAAyB,CAAC;qBACjC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;qBAC9D,GAAG,EAAE,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAgB,EAChB,KAA2B;IAE3B,OAAO,sBAAsB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAgB,EAChB,KAA2D;IAE3D,OAAO,sBAAsB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAAgB,EAChB,KAA4D;IAE5D,OAAO,sBAAsB,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC1D,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport { uniqueSortedStrings } from \"../../documents/shared/readers\";\nimport { documentIntentLinkTargets } from \"../../sqlite/documentPlacementIntentSchema\";\nimport {\n  documentContainerProjection,\n  documentContainerProjectionTables,\n  documentMoveIntents,\n  documentMoveIntentTables,\n} from \"../../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport {\n  type ExecSql,\n  ensureSqlTables,\n  runSerializedSqlMutation,\n} from \"../../sqlite/sqlSchema\";\n\ninterface PlacementIntentInput {\n  id?: string | undefined;\n  documentId: string;\n  localId: string;\n  replaceLinkedContainers?: boolean | undefined;\n  removedContainerId?: string | undefined;\n  sourceContainerId?: string | null | undefined;\n  targetContainerId: string;\n}\n\nexport async function loadDocumentIntentLinkTargets(\n  execSql: ExecSql,\n  intentId: string,\n) {\n  return getClientSQLitePersistenceRuntime(execSql)\n    .db.select({\n      containerId: documentIntentLinkTargets.containerId,\n      operation: documentIntentLinkTargets.operation,\n    })\n    .from(documentIntentLinkTargets)\n    .where(eq(documentIntentLinkTargets.intentId, intentId));\n}\n\ntype LinkTarget = { containerId: string; operation: \"link\" | \"unlink\" };\n\nasync function loadSurvivingMoveTarget(\n  execSql: ExecSql,\n  previous: typeof documentMoveIntents.$inferSelect | undefined,\n): Promise<string | null> {\n  if (previous?.intentType !== \"document.move\") return null;\n  const [link] = await getClientSQLitePersistenceRuntime(execSql)\n    .db.select({ containerId: documentContainerProjection.containerId })\n    .from(documentContainerProjection)\n    .where(\n      and(\n        eq(documentContainerProjection.documentId, previous.documentId),\n        eq(documentContainerProjection.containerId, previous.targetContainerId),\n      ),\n    )\n    .limit(1);\n  return link?.containerId ?? null;\n}\n\nfunction resolveTargets(\n  input: PlacementIntentInput,\n  previous: LinkTarget[],\n  operation: \"move\" | \"link\" | \"unlink\",\n  previousMoveTarget: string | null,\n): LinkTarget[] {\n  const targets = new Map(\n    previous.map((target) => [target.containerId, target.operation]),\n  );\n  if (operation === \"link\") targets.set(input.targetContainerId, \"link\");\n  else if (operation === \"unlink\") {\n    if (!input.removedContainerId)\n      throw new Error(\"Unlink intent requires a removed container\");\n    targets.set(input.removedContainerId, \"unlink\");\n  } else if (input.replaceLinkedContainers) targets.clear();\n  else {\n    if (\n      previousMoveTarget &&\n      previousMoveTarget !== input.sourceContainerId &&\n      previousMoveTarget !== input.targetContainerId &&\n      targets.get(previousMoveTarget) !== \"unlink\"\n    ) {\n      targets.set(previousMoveTarget, \"link\");\n    }\n    targets.delete(input.targetContainerId);\n    if (\n      input.sourceContainerId &&\n      input.sourceContainerId !== input.targetContainerId\n    )\n      targets.set(input.sourceContainerId, \"unlink\");\n  }\n  return uniqueSortedStrings([...targets.keys()]).map((containerId) => ({\n    containerId,\n    operation: targets.get(containerId) ?? \"link\",\n  }));\n}\n\nfunction resolvePlacement(\n  input: PlacementIntentInput,\n  previous: typeof documentMoveIntents.$inferSelect | undefined,\n  operation: \"move\" | \"link\" | \"unlink\",\n) {\n  if (operation === \"unlink\") {\n    return {\n      sourceContainerId:\n        previous?.intentType === \"document.move\"\n          ? previous.sourceContainerId\n          : input.targetContainerId,\n      targetContainerId:\n        previous?.intentType === \"document.move\" &&\n        previous.targetContainerId !== input.removedContainerId\n          ? previous.targetContainerId\n          : input.targetContainerId,\n      replaceLinkedContainers: previous?.replaceLinkedContainers ?? false,\n    };\n  }\n  const linkOnly = operation === \"link\";\n  const sourceContainerId =\n    previous?.intentType === \"document.move\"\n      ? (previous.sourceContainerId ?? input.sourceContainerId ?? null)\n      : (input.sourceContainerId ?? null);\n  return {\n    sourceContainerId: linkOnly\n      ? (previous?.sourceContainerId ?? input.sourceContainerId ?? null)\n      : sourceContainerId,\n    targetContainerId: linkOnly\n      ? (previous?.targetContainerId ??\n        input.sourceContainerId ??\n        input.targetContainerId)\n      : input.targetContainerId,\n    replaceLinkedContainers:\n      previous?.replaceLinkedContainers ||\n      (input.replaceLinkedContainers ?? false),\n  };\n}\n\nasync function enqueuePlacementIntent(\n  execSql: ExecSql,\n  input: PlacementIntentInput,\n  operation: \"move\" | \"link\" | \"unlink\",\n): Promise<void> {\n  await runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await ensureSqlTables(lockedExecSql, documentMoveIntentTables);\n    await ensureSqlTables(lockedExecSql, documentContainerProjectionTables);\n    const runtime = getClientSQLitePersistenceRuntime(lockedExecSql);\n    await runtime.transaction(async (tx) => {\n      const [previous] = await tx\n        .select()\n        .from(documentMoveIntents)\n        .where(eq(documentMoveIntents.documentId, input.documentId))\n        .limit(1);\n      const previousTargets = previous?.id\n        ? await loadDocumentIntentLinkTargets(lockedExecSql, previous.id)\n        : [];\n      const targets = resolveTargets(\n        input,\n        previousTargets,\n        operation,\n        operation === \"move\"\n          ? await loadSurvivingMoveTarget(lockedExecSql, previous)\n          : null,\n      );\n      const id = input.id ?? crypto.randomUUID();\n      const updatedAt = new Date().toISOString();\n      // An additive intent retains the active placement and any pending move.\n      // Its targets are separate from the discovery projection: only explicit\n      // user additions may be replayed, never stale server-discovered links.\n      const next = {\n        id,\n        documentId: input.documentId,\n        localId: input.localId,\n        intentType:\n          operation === \"move\" || previous?.intentType === \"document.move\"\n            ? \"document.move\"\n            : \"document.link\",\n        lastAttemptedAt: null,\n        lastError: null,\n        syncStatus: \"pending\",\n        updatedAt,\n        ...resolvePlacement(input, previous, operation),\n      };\n      await tx\n        .insert(documentMoveIntents)\n        .values({ ...next, createdAt: updatedAt })\n        .onConflictDoUpdate({\n          target: documentMoveIntents.documentId,\n          set: next,\n        })\n        .run();\n      if (previous?.id)\n        await tx\n          .delete(documentIntentLinkTargets)\n          .where(eq(documentIntentLinkTargets.intentId, previous.id))\n          .run();\n      if (targets.length)\n        await tx\n          .insert(documentIntentLinkTargets)\n          .values(targets.map((target) => ({ intentId: id, ...target })))\n          .run();\n    });\n  });\n}\n\nexport function enqueueDocumentMoveIntent(\n  execSql: ExecSql,\n  input: PlacementIntentInput,\n): Promise<void> {\n  return enqueuePlacementIntent(execSql, input, \"move\");\n}\n\nexport function enqueueDocumentLinkIntent(\n  execSql: ExecSql,\n  input: PlacementIntentInput & { sourceContainerId: string },\n): Promise<void> {\n  return enqueuePlacementIntent(execSql, input, \"link\");\n}\n\nexport function enqueueDocumentUnlinkIntent(\n  execSql: ExecSql,\n  input: PlacementIntentInput & { removedContainerId: string },\n): Promise<void> {\n  return enqueuePlacementIntent(execSql, input, \"unlink\");\n}\n"]}

package/data/persistence/container-contents/dormantContainerMetadata.d.ts

@@ -0,0 +1,12 @@
+import type { ClientSQLiteTransactionScope } from "../../sqlite/sqlitePersistenceRuntime.js";
+export declare const CONTAINER_METADATA_APP_KIND = "container-metadata";
+interface DormantContainerMetadataRetention {
+    readonly containerId: string;
+    readonly organizationId: string;
+    readonly retainedAt: string;
+}
+export declare function retainDormantContainerMetadataInTransaction(tx: ClientSQLiteTransactionScope, retained: ReadonlyArray<DormantContainerMetadataRetention>): Promise<void>;
+export declare function clearDormantContainerMetadataInTransaction(tx: ClientSQLiteTransactionScope, containerIds: ReadonlyArray<string>): Promise<void>;
+/** Delete every durable row owned by a container-metadata document scope. */
+export declare function deleteContainerMetadataDocumentRowsInTransaction(tx: ClientSQLiteTransactionScope, containerIds: ReadonlyArray<string>): Promise<void>;
+export {};

package/data/persistence/container-contents/dormantContainerMetadata.js

@@ -0,0 +1,57 @@
+import { and, eq, inArray, sql } from "drizzle-orm";
+import { documentHistoryCheckpoints, documentHistoryUpdates, documentPendingUpdates, documentSyncFailures, documents, dormantContainerMetadata, } from "../../sqlite/schema.js";
+export const CONTAINER_METADATA_APP_KIND = "container-metadata";
+export async function retainDormantContainerMetadataInTransaction(tx, retained) {
+    if (retained.length === 0) {
+        return;
+    }
+    await tx
+        .insert(dormantContainerMetadata)
+        .values([...retained])
+        .onConflictDoUpdate({
+        target: dormantContainerMetadata.containerId,
+        set: {
+            organizationId: sql `excluded.organization_id`,
+            retainedAt: sql `excluded.retained_at`,
+        },
+    })
+        .run();
+}
+export async function clearDormantContainerMetadataInTransaction(tx, containerIds) {
+    if (containerIds.length === 0) {
+        return;
+    }
+    await tx
+        .delete(dormantContainerMetadata)
+        .where(inArray(dormantContainerMetadata.containerId, [...containerIds]))
+        .run();
+}
+/** Delete every durable row owned by a container-metadata document scope. */
+export async function deleteContainerMetadataDocumentRowsInTransaction(tx, containerIds) {
+    const ids = [...containerIds];
+    if (ids.length === 0) {
+        return;
+    }
+    await tx
+        .delete(documents)
+        .where(and(eq(documents.appKind, CONTAINER_METADATA_APP_KIND), inArray(documents.localId, ids)))
+        .run();
+    await tx
+        .delete(documentHistoryCheckpoints)
+        .where(and(eq(documentHistoryCheckpoints.appKind, CONTAINER_METADATA_APP_KIND), inArray(documentHistoryCheckpoints.localId, ids)))
+        .run();
+    await tx
+        .delete(documentHistoryUpdates)
+        .where(and(eq(documentHistoryUpdates.appKind, CONTAINER_METADATA_APP_KIND), inArray(documentHistoryUpdates.localId, ids)))
+        .run();
+    await tx
+        .delete(documentPendingUpdates)
+        .where(and(eq(documentPendingUpdates.appKind, CONTAINER_METADATA_APP_KIND), inArray(documentPendingUpdates.localId, ids)))
+        .run();
+    await tx
+        .delete(documentSyncFailures)
+        .where(and(eq(documentSyncFailures.appKind, CONTAINER_METADATA_APP_KIND), inArray(documentSyncFailures.localId, ids)))
+        .run();
+    await clearDormantContainerMetadataInTransaction(tx, ids);
+}
+//# sourceMappingURL=dormantContainerMetadata.js.map

package/data/persistence/container-contents/dormantContainerMetadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dormantContainerMetadata.js","sourceRoot":"","sources":["dormantContainerMetadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,SAAS,EACT,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,CAAC,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAQhE,MAAM,CAAC,KAAK,UAAU,2CAA2C,CAC/D,EAAgC,EAChC,QAA0D;IAE1D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IAED,MAAM,EAAE;SACL,MAAM,CAAC,wBAAwB,CAAC;SAChC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;SACrB,kBAAkB,CAAC;QAClB,MAAM,EAAE,wBAAwB,CAAC,WAAW;QAC5C,GAAG,EAAE;YACH,cAAc,EAAE,GAAG,CAAA,0BAA0B;YAC7C,UAAU,EAAE,GAAG,CAAA,sBAAsB;SACtC;KACF,CAAC;SACD,GAAG,EAAE,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0CAA0C,CAC9D,EAAgC,EAChC,YAAmC;IAEnC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,MAAM,EAAE;SACL,MAAM,CAAC,wBAAwB,CAAC;SAChC,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAC,WAAW,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC;SACvE,GAAG,EAAE,CAAC;AACX,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,gDAAgD,CACpE,EAAgC,EAChC,YAAmC;IAEnC,MAAM,GAAG,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;IAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,EAAE;SACL,MAAM,CAAC,SAAS,CAAC;SACjB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,2BAA2B,CAAC,EAClD,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAChC,CACF;SACA,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,0BAA0B,CAAC;SAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,0BAA0B,CAAC,OAAO,EAAE,2BAA2B,CAAC,EACnE,OAAO,CAAC,0BAA0B,CAAC,OAAO,EAAE,GAAG,CAAC,CACjD,CACF;SACA,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,sBAAsB,CAAC;SAC9B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,2BAA2B,CAAC,EAC/D,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,CAC7C,CACF;SACA,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,sBAAsB,CAAC;SAC9B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,2BAA2B,CAAC,EAC/D,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,CAC7C,CACF;SACA,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,oBAAoB,CAAC;SAC5B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,CAAC,EAC7D,OAAO,CAAC,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAC3C,CACF;SACA,GAAG,EAAE,CAAC;IACT,MAAM,0CAA0C,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAC5D,CAAC","sourcesContent":["import { and, eq, inArray, sql } from \"drizzle-orm\";\nimport {\n  documentHistoryCheckpoints,\n  documentHistoryUpdates,\n  documentPendingUpdates,\n  documentSyncFailures,\n  documents,\n  dormantContainerMetadata,\n} from \"../../sqlite/schema\";\nimport type { ClientSQLiteTransactionScope } from \"../../sqlite/sqlitePersistenceRuntime\";\n\nexport const CONTAINER_METADATA_APP_KIND = \"container-metadata\";\n\ninterface DormantContainerMetadataRetention {\n  readonly containerId: string;\n  readonly organizationId: string;\n  readonly retainedAt: string;\n}\n\nexport async function retainDormantContainerMetadataInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  retained: ReadonlyArray<DormantContainerMetadataRetention>,\n): Promise<void> {\n  if (retained.length === 0) {\n    return;\n  }\n\n  await tx\n    .insert(dormantContainerMetadata)\n    .values([...retained])\n    .onConflictDoUpdate({\n      target: dormantContainerMetadata.containerId,\n      set: {\n        organizationId: sql`excluded.organization_id`,\n        retainedAt: sql`excluded.retained_at`,\n      },\n    })\n    .run();\n}\n\nexport async function clearDormantContainerMetadataInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  containerIds: ReadonlyArray<string>,\n): Promise<void> {\n  if (containerIds.length === 0) {\n    return;\n  }\n  await tx\n    .delete(dormantContainerMetadata)\n    .where(inArray(dormantContainerMetadata.containerId, [...containerIds]))\n    .run();\n}\n\n/** Delete every durable row owned by a container-metadata document scope. */\nexport async function deleteContainerMetadataDocumentRowsInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  containerIds: ReadonlyArray<string>,\n): Promise<void> {\n  const ids = [...containerIds];\n  if (ids.length === 0) {\n    return;\n  }\n  await tx\n    .delete(documents)\n    .where(\n      and(\n        eq(documents.appKind, CONTAINER_METADATA_APP_KIND),\n        inArray(documents.localId, ids),\n      ),\n    )\n    .run();\n  await tx\n    .delete(documentHistoryCheckpoints)\n    .where(\n      and(\n        eq(documentHistoryCheckpoints.appKind, CONTAINER_METADATA_APP_KIND),\n        inArray(documentHistoryCheckpoints.localId, ids),\n      ),\n    )\n    .run();\n  await tx\n    .delete(documentHistoryUpdates)\n    .where(\n      and(\n        eq(documentHistoryUpdates.appKind, CONTAINER_METADATA_APP_KIND),\n        inArray(documentHistoryUpdates.localId, ids),\n      ),\n    )\n    .run();\n  await tx\n    .delete(documentPendingUpdates)\n    .where(\n      and(\n        eq(documentPendingUpdates.appKind, CONTAINER_METADATA_APP_KIND),\n        inArray(documentPendingUpdates.localId, ids),\n      ),\n    )\n    .run();\n  await tx\n    .delete(documentSyncFailures)\n    .where(\n      and(\n        eq(documentSyncFailures.appKind, CONTAINER_METADATA_APP_KIND),\n        inArray(documentSyncFailures.localId, ids),\n      ),\n    )\n    .run();\n  await clearDormantContainerMetadataInTransaction(tx, ids);\n}\n"]}

package/data/persistence/container-contents/dormantMetadataSweep.d.ts

@@ -0,0 +1,20 @@
+import type { ExecSql } from "../../sqlite/sqlSchema.js";
+export interface DormantMetadataSweepRequest {
+    readonly attemptCount: number;
+    readonly generation: number;
+    readonly lastAttemptedAt: string | null;
+    readonly organizationId: string;
+    readonly requestedAt: string;
+    readonly requesterUserId: string;
+}
+export interface DormantMetadataSweepPersistence {
+    claimDormantMetadataSweepAttempt: (execSql: ExecSql, sweep: DormantMetadataSweepRequest, attemptedAt: string, stillCurrent?: (() => boolean) | undefined) => Promise<boolean>;
+    completeDormantMetadataSweepRequest: (execSql: ExecSql, sweep: DormantMetadataSweepRequest, stillCurrent?: (() => boolean) | undefined) => Promise<void>;
+    listDormantMetadataSweepRequests: (execSql: ExecSql, requesterUserId: string) => Promise<readonly DormantMetadataSweepRequest[]>;
+}
+export declare function requestDormantMetadataRestorationSweeps(execSql: ExecSql, input: {
+    requesterUserId: string;
+}): Promise<number>;
+export declare function listDormantMetadataSweepRequests(execSql: ExecSql, requesterUserId: string): Promise<readonly DormantMetadataSweepRequest[]>;
+export declare function claimDormantMetadataSweepAttempt(execSql: ExecSql, sweep: DormantMetadataSweepRequest, attemptedAt: string, stillCurrent?: (() => boolean) | undefined): Promise<boolean>;
+export declare function completeDormantMetadataSweepRequest(execSql: ExecSql, sweep: DormantMetadataSweepRequest, stillCurrent?: (() => boolean) | undefined): Promise<void>;

package/data/persistence/container-contents/dormantMetadataSweep.js

@@ -0,0 +1,102 @@
+import { and, eq, sql } from "drizzle-orm";
+import { dormantContainerMetadata, dormantMetadataSweepRequests, } from "../../sqlite/schema.js";
+import { getClientSQLitePersistenceRuntime, } from "../../sqlite/sqlitePersistenceRuntime.js";
+import { ensureContainerTables } from "../containers/containerPersistence.js";
+export async function requestDormantMetadataRestorationSweeps(execSql, input) {
+    await ensureContainerTables(execSql);
+    const requestedAt = new Date().toISOString();
+    return getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {
+        const organizations = await db
+            .selectDistinct({
+            organizationId: dormantContainerMetadata.organizationId,
+        })
+            .from(dormantContainerMetadata)
+            .orderBy(dormantContainerMetadata.organizationId);
+        if (organizations.length === 0) {
+            return 0;
+        }
+        await db
+            .insert(dormantMetadataSweepRequests)
+            .values(organizations.map(({ organizationId }) => ({
+            attemptCount: 0,
+            generation: 1,
+            lastAttemptedAt: null,
+            organizationId,
+            requestedAt,
+            requesterUserId: input.requesterUserId,
+        })))
+            .onConflictDoUpdate({
+            target: [
+                dormantMetadataSweepRequests.organizationId,
+                dormantMetadataSweepRequests.requesterUserId,
+            ],
+            set: {
+                attemptCount: 0,
+                generation: sql `${dormantMetadataSweepRequests.generation} + 1`,
+                lastAttemptedAt: null,
+                requestedAt: sql `excluded.requested_at`,
+            },
+        })
+            .run();
+        return organizations.length;
+    });
+}
+export async function listDormantMetadataSweepRequests(execSql, requesterUserId) {
+    await ensureContainerTables(execSql);
+    return getClientSQLitePersistenceRuntime(execSql)
+        .db.select({
+        attemptCount: dormantMetadataSweepRequests.attemptCount,
+        generation: dormantMetadataSweepRequests.generation,
+        lastAttemptedAt: dormantMetadataSweepRequests.lastAttemptedAt,
+        organizationId: dormantMetadataSweepRequests.organizationId,
+        requestedAt: dormantMetadataSweepRequests.requestedAt,
+        requesterUserId: dormantMetadataSweepRequests.requesterUserId,
+    })
+        .from(dormantMetadataSweepRequests)
+        .where(eq(dormantMetadataSweepRequests.requesterUserId, requesterUserId))
+        .orderBy(dormantMetadataSweepRequests.organizationId);
+}
+export async function claimDormantMetadataSweepAttempt(execSql, sweep, attemptedAt, stillCurrent) {
+    await ensureContainerTables(execSql);
+    const runtime = getClientSQLitePersistenceRuntime(execSql);
+    const claim = async (tx) => {
+        const [current] = await tx
+            .select({ attemptCount: dormantMetadataSweepRequests.attemptCount })
+            .from(dormantMetadataSweepRequests)
+            .where(and(eq(dormantMetadataSweepRequests.organizationId, sweep.organizationId), eq(dormantMetadataSweepRequests.requesterUserId, sweep.requesterUserId), eq(dormantMetadataSweepRequests.generation, sweep.generation)))
+            .limit(1);
+        if (!current || current.attemptCount !== sweep.attemptCount) {
+            return false;
+        }
+        await tx
+            .update(dormantMetadataSweepRequests)
+            .set({
+            attemptCount: current.attemptCount + 1,
+            lastAttemptedAt: attemptedAt,
+        })
+            .where(and(eq(dormantMetadataSweepRequests.organizationId, sweep.organizationId), eq(dormantMetadataSweepRequests.requesterUserId, sweep.requesterUserId), eq(dormantMetadataSweepRequests.generation, sweep.generation), eq(dormantMetadataSweepRequests.attemptCount, current.attemptCount)))
+            .run();
+        return true;
+    };
+    if (!stillCurrent) {
+        return runtime.transaction(claim);
+    }
+    const outcome = await runtime.guardedTransaction(claim, stillCurrent);
+    return outcome.committed && outcome.result === true;
+}
+export async function completeDormantMetadataSweepRequest(execSql, sweep, stillCurrent) {
+    await ensureContainerTables(execSql);
+    const runtime = getClientSQLitePersistenceRuntime(execSql);
+    const complete = async (tx) => {
+        await tx
+            .delete(dormantMetadataSweepRequests)
+            .where(and(eq(dormantMetadataSweepRequests.organizationId, sweep.organizationId), eq(dormantMetadataSweepRequests.requesterUserId, sweep.requesterUserId), eq(dormantMetadataSweepRequests.generation, sweep.generation)))
+            .run();
+    };
+    if (stillCurrent) {
+        await runtime.guardedTransaction(complete, stillCurrent);
+        return;
+    }
+    await runtime.transaction(complete);
+}
+//# sourceMappingURL=dormantMetadataSweep.js.map

package/data/persistence/container-contents/dormantMetadataSweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dormantMetadataSweep.js","sourceRoot":"","sources":["dormantMetadataSweep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AA6B3E,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,OAAgB,EAChB,KAAkC;IAElC,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACzE,MAAM,aAAa,GAAG,MAAM,EAAE;aAC3B,cAAc,CAAC;YACd,cAAc,EAAE,wBAAwB,CAAC,cAAc;SACxD,CAAC;aACD,IAAI,CAAC,wBAAwB,CAAC;aAC9B,OAAO,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC;QACpD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,EAAE;aACL,MAAM,CAAC,4BAA4B,CAAC;aACpC,MAAM,CACL,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;YACzC,YAAY,EAAE,CAAC;YACf,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,IAAI;YACrB,cAAc;YACd,WAAW;YACX,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC,CAAC,CAAC,CACJ;aACA,kBAAkB,CAAC;YAClB,MAAM,EAAE;gBACN,4BAA4B,CAAC,cAAc;gBAC3C,4BAA4B,CAAC,eAAe;aAC7C;YACD,GAAG,EAAE;gBACH,YAAY,EAAE,CAAC;gBACf,UAAU,EAAE,GAAG,CAAA,GAAG,4BAA4B,CAAC,UAAU,MAAM;gBAC/D,eAAe,EAAE,IAAI;gBACrB,WAAW,EAAE,GAAG,CAAA,uBAAuB;aACxC;SACF,CAAC;aACD,GAAG,EAAE,CAAC;QACT,OAAO,aAAa,CAAC,MAAM,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAgB,EAChB,eAAuB;IAEvB,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO,iCAAiC,CAAC,OAAO,CAAC;SAC9C,EAAE,CAAC,MAAM,CAAC;QACT,YAAY,EAAE,4BAA4B,CAAC,YAAY;QACvD,UAAU,EAAE,4BAA4B,CAAC,UAAU;QACnD,eAAe,EAAE,4BAA4B,CAAC,eAAe;QAC7D,cAAc,EAAE,4BAA4B,CAAC,cAAc;QAC3D,WAAW,EAAE,4BAA4B,CAAC,WAAW;QACrD,eAAe,EAAE,4BAA4B,CAAC,eAAe;KAC9D,CAAC;SACD,IAAI,CAAC,4BAA4B,CAAC;SAClC,KAAK,CAAC,EAAE,CAAC,4BAA4B,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;SACxE,OAAO,CAAC,4BAA4B,CAAC,cAAc,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAgB,EAChB,KAAkC,EAClC,WAAmB,EACnB,YAA0C;IAE1C,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,KAAK,EAAE,EAAgC,EAAE,EAAE;QACvD,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;aACvB,MAAM,CAAC,EAAE,YAAY,EAAE,4BAA4B,CAAC,YAAY,EAAE,CAAC;aACnE,IAAI,CAAC,4BAA4B,CAAC;aAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,4BAA4B,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,EACrE,EAAE,CACA,4BAA4B,CAAC,eAAe,EAC5C,KAAK,CAAC,eAAe,CACtB,EACD,EAAE,CAAC,4BAA4B,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAC9D,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,EAAE;aACL,MAAM,CAAC,4BAA4B,CAAC;aACpC,GAAG,CAAC;YACH,YAAY,EAAE,OAAO,CAAC,YAAY,GAAG,CAAC;YACtC,eAAe,EAAE,WAAW;SAC7B,CAAC;aACD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,4BAA4B,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,EACrE,EAAE,CACA,4BAA4B,CAAC,eAAe,EAC5C,KAAK,CAAC,eAAe,CACtB,EACD,EAAE,CAAC,4BAA4B,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAC7D,EAAE,CAAC,4BAA4B,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,CACpE,CACF;aACA,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACtE,OAAO,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,OAAgB,EAChB,KAAkC,EAClC,YAA0C;IAE1C,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,KAAK,EAAE,EAAgC,EAAE,EAAE;QAC1D,MAAM,EAAE;aACL,MAAM,CAAC,4BAA4B,CAAC;aACpC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,4BAA4B,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,EACrE,EAAE,CACA,4BAA4B,CAAC,eAAe,EAC5C,KAAK,CAAC,eAAe,CACtB,EACD,EAAE,CAAC,4BAA4B,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAC9D,CACF;aACA,GAAG,EAAE,CAAC;IACX,CAAC,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IACD,MAAM,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC","sourcesContent":["import { and, eq, sql } from \"drizzle-orm\";\nimport {\n  dormantContainerMetadata,\n  dormantMetadataSweepRequests,\n} from \"../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport { ensureContainerTables } from \"../containers/containerPersistence\";\n\nexport interface DormantMetadataSweepRequest {\n  readonly attemptCount: number;\n  readonly generation: number;\n  readonly lastAttemptedAt: string | null;\n  readonly organizationId: string;\n  readonly requestedAt: string;\n  readonly requesterUserId: string;\n}\n\nexport interface DormantMetadataSweepPersistence {\n  claimDormantMetadataSweepAttempt: (\n    execSql: ExecSql,\n    sweep: DormantMetadataSweepRequest,\n    attemptedAt: string,\n    stillCurrent?: (() => boolean) | undefined,\n  ) => Promise<boolean>;\n  completeDormantMetadataSweepRequest: (\n    execSql: ExecSql,\n    sweep: DormantMetadataSweepRequest,\n    stillCurrent?: (() => boolean) | undefined,\n  ) => Promise<void>;\n  listDormantMetadataSweepRequests: (\n    execSql: ExecSql,\n    requesterUserId: string,\n  ) => Promise<readonly DormantMetadataSweepRequest[]>;\n}\n\nexport async function requestDormantMetadataRestorationSweeps(\n  execSql: ExecSql,\n  input: { requesterUserId: string },\n): Promise<number> {\n  await ensureContainerTables(execSql);\n  const requestedAt = new Date().toISOString();\n  return getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    const organizations = await db\n      .selectDistinct({\n        organizationId: dormantContainerMetadata.organizationId,\n      })\n      .from(dormantContainerMetadata)\n      .orderBy(dormantContainerMetadata.organizationId);\n    if (organizations.length === 0) {\n      return 0;\n    }\n\n    await db\n      .insert(dormantMetadataSweepRequests)\n      .values(\n        organizations.map(({ organizationId }) => ({\n          attemptCount: 0,\n          generation: 1,\n          lastAttemptedAt: null,\n          organizationId,\n          requestedAt,\n          requesterUserId: input.requesterUserId,\n        })),\n      )\n      .onConflictDoUpdate({\n        target: [\n          dormantMetadataSweepRequests.organizationId,\n          dormantMetadataSweepRequests.requesterUserId,\n        ],\n        set: {\n          attemptCount: 0,\n          generation: sql`${dormantMetadataSweepRequests.generation} + 1`,\n          lastAttemptedAt: null,\n          requestedAt: sql`excluded.requested_at`,\n        },\n      })\n      .run();\n    return organizations.length;\n  });\n}\n\nexport async function listDormantMetadataSweepRequests(\n  execSql: ExecSql,\n  requesterUserId: string,\n): Promise<readonly DormantMetadataSweepRequest[]> {\n  await ensureContainerTables(execSql);\n  return getClientSQLitePersistenceRuntime(execSql)\n    .db.select({\n      attemptCount: dormantMetadataSweepRequests.attemptCount,\n      generation: dormantMetadataSweepRequests.generation,\n      lastAttemptedAt: dormantMetadataSweepRequests.lastAttemptedAt,\n      organizationId: dormantMetadataSweepRequests.organizationId,\n      requestedAt: dormantMetadataSweepRequests.requestedAt,\n      requesterUserId: dormantMetadataSweepRequests.requesterUserId,\n    })\n    .from(dormantMetadataSweepRequests)\n    .where(eq(dormantMetadataSweepRequests.requesterUserId, requesterUserId))\n    .orderBy(dormantMetadataSweepRequests.organizationId);\n}\n\nexport async function claimDormantMetadataSweepAttempt(\n  execSql: ExecSql,\n  sweep: DormantMetadataSweepRequest,\n  attemptedAt: string,\n  stillCurrent?: (() => boolean) | undefined,\n): Promise<boolean> {\n  await ensureContainerTables(execSql);\n  const runtime = getClientSQLitePersistenceRuntime(execSql);\n  const claim = async (tx: ClientSQLiteTransactionScope) => {\n    const [current] = await tx\n      .select({ attemptCount: dormantMetadataSweepRequests.attemptCount })\n      .from(dormantMetadataSweepRequests)\n      .where(\n        and(\n          eq(dormantMetadataSweepRequests.organizationId, sweep.organizationId),\n          eq(\n            dormantMetadataSweepRequests.requesterUserId,\n            sweep.requesterUserId,\n          ),\n          eq(dormantMetadataSweepRequests.generation, sweep.generation),\n        ),\n      )\n      .limit(1);\n    if (!current || current.attemptCount !== sweep.attemptCount) {\n      return false;\n    }\n    await tx\n      .update(dormantMetadataSweepRequests)\n      .set({\n        attemptCount: current.attemptCount + 1,\n        lastAttemptedAt: attemptedAt,\n      })\n      .where(\n        and(\n          eq(dormantMetadataSweepRequests.organizationId, sweep.organizationId),\n          eq(\n            dormantMetadataSweepRequests.requesterUserId,\n            sweep.requesterUserId,\n          ),\n          eq(dormantMetadataSweepRequests.generation, sweep.generation),\n          eq(dormantMetadataSweepRequests.attemptCount, current.attemptCount),\n        ),\n      )\n      .run();\n    return true;\n  };\n  if (!stillCurrent) {\n    return runtime.transaction(claim);\n  }\n  const outcome = await runtime.guardedTransaction(claim, stillCurrent);\n  return outcome.committed && outcome.result === true;\n}\n\nexport async function completeDormantMetadataSweepRequest(\n  execSql: ExecSql,\n  sweep: DormantMetadataSweepRequest,\n  stillCurrent?: (() => boolean) | undefined,\n): Promise<void> {\n  await ensureContainerTables(execSql);\n  const runtime = getClientSQLitePersistenceRuntime(execSql);\n  const complete = async (tx: ClientSQLiteTransactionScope) => {\n    await tx\n      .delete(dormantMetadataSweepRequests)\n      .where(\n        and(\n          eq(dormantMetadataSweepRequests.organizationId, sweep.organizationId),\n          eq(\n            dormantMetadataSweepRequests.requesterUserId,\n            sweep.requesterUserId,\n          ),\n          eq(dormantMetadataSweepRequests.generation, sweep.generation),\n        ),\n      )\n      .run();\n  };\n  if (stillCurrent) {\n    await runtime.guardedTransaction(complete, stillCurrent);\n    return;\n  }\n  await runtime.transaction(complete);\n}\n"]}

package/data/persistence/container-contents/pendingContainerCreate.js

@@ -0,0 +1,21 @@
+import { and, eq } from "drizzle-orm";
+import { containerCreateIntents, containerCreateIntentTables, } from "../../sqlite/schema.js";
+import { getClientSQLitePersistenceRuntime } from "../../sqlite/sqlitePersistenceRuntime.js";
+import { ensureSqlTables } from "../../sqlite/sqlSchema.js";
+import { CONTAINER_CREATE_INTENT_TYPE } from "./containerContentsPersistenceTypes.js";
+/**
+ * A folder whose create has not settled can carry a listed identity that
+ * adoption has not verified, or has refused; nothing is created inside it
+ * until the create settles.
+ */
+export async function isContainerCreatePending(execSql, containerId) {
+    await ensureSqlTables(execSql, containerCreateIntentTables);
+    const { db } = getClientSQLitePersistenceRuntime(execSql);
+    const [pending] = await db
+        .select({ containerId: containerCreateIntents.containerId })
+        .from(containerCreateIntents)
+        .where(and(eq(containerCreateIntents.containerId, containerId), eq(containerCreateIntents.intentType, CONTAINER_CREATE_INTENT_TYPE), eq(containerCreateIntents.syncStatus, "pending")))
+        .limit(1);
+    return pending !== undefined;
+}
+//# sourceMappingURL=pendingContainerCreate.js.map

package/data/persistence/container-contents/pendingContainerCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pendingContainerCreate.js","sourceRoot":"","sources":["pendingContainerCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EACL,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AAEnF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAgB,EAChB,WAAmB;IAEnB,MAAM,eAAe,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC5D,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;SACvB,MAAM,CAAC,EAAE,WAAW,EAAE,sBAAsB,CAAC,WAAW,EAAE,CAAC;SAC3D,IAAI,CAAC,sBAAsB,CAAC;SAC5B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,sBAAsB,CAAC,WAAW,EAAE,WAAW,CAAC,EACnD,EAAE,CAAC,sBAAsB,CAAC,UAAU,EAAE,4BAA4B,CAAC,EACnE,EAAE,CAAC,sBAAsB,CAAC,UAAU,EAAE,SAAS,CAAC,CACjD,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,OAAO,KAAK,SAAS,CAAC;AAC/B,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport {\n  containerCreateIntents,\n  containerCreateIntentTables,\n} from \"../../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\nimport { CONTAINER_CREATE_INTENT_TYPE } from \"./containerContentsPersistenceTypes\";\n\n/**\n * A folder whose create has not settled can carry a listed identity that\n * adoption has not verified, or has refused; nothing is created inside it\n * until the create settles.\n */\nexport async function isContainerCreatePending(\n  execSql: ExecSql,\n  containerId: string,\n): Promise<boolean> {\n  await ensureSqlTables(execSql, containerCreateIntentTables);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const [pending] = await db\n    .select({ containerId: containerCreateIntents.containerId })\n    .from(containerCreateIntents)\n    .where(\n      and(\n        eq(containerCreateIntents.containerId, containerId),\n        eq(containerCreateIntents.intentType, CONTAINER_CREATE_INTENT_TYPE),\n        eq(containerCreateIntents.syncStatus, \"pending\"),\n      ),\n    )\n    .limit(1);\n  return pending !== undefined;\n}\n"]}

package/data/persistence/container-contents/supersededContainerBindings.js

@@ -0,0 +1,27 @@
+import { and, eq } from "drizzle-orm";
+import { supersededContainerBindings } from "../../sqlite/schema.js";
+import { getClientSQLitePersistenceRuntime, } from "../../sqlite/sqlitePersistenceRuntime.js";
+/** Whether a held folder was re-homed away from this organization. */
+export async function isSupersededContainerBinding(execSql, input) {
+    const rows = await getClientSQLitePersistenceRuntime(execSql)
+        .db.select({ containerId: supersededContainerBindings.containerId })
+        .from(supersededContainerBindings)
+        .where(and(eq(supersededContainerBindings.containerId, input.containerId), eq(supersededContainerBindings.organizationId, input.organizationId)))
+        .limit(1);
+    return rows.length > 0;
+}
+/** Record that folders left an organization, so it can never be replayed. */
+export async function recordSupersededContainerBindingsInTransaction(tx, input) {
+    if (input.containerIds.length === 0 || input.organizationId === "")
+        return;
+    await tx
+        .insert(supersededContainerBindings)
+        .values(input.containerIds.map((containerId) => ({
+        containerId,
+        organizationId: input.organizationId,
+        supersededAt: input.supersededAt,
+    })))
+        .onConflictDoNothing()
+        .run();
+}
+//# sourceMappingURL=supersededContainerBindings.js.map

package/data/persistence/container-contents/supersededContainerBindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supersededContainerBindings.js","sourceRoot":"","sources":["supersededContainerBindings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAG/C,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAgB,EAChB,KAAsD;IAEtD,MAAM,IAAI,GAAG,MAAM,iCAAiC,CAAC,OAAO,CAAC;SAC1D,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2BAA2B,CAAC,WAAW,EAAE,CAAC;SACnE,IAAI,CAAC,2BAA2B,CAAC;SACjC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,2BAA2B,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAC9D,EAAE,CAAC,2BAA2B,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CACrE,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,8CAA8C,CAClE,EAAgC,EAChC,KAIC;IAED,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,EAAE;QAAE,OAAO;IAC3E,MAAM,EAAE;SACL,MAAM,CAAC,2BAA2B,CAAC;SACnC,MAAM,CACL,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACvC,WAAW;QACX,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC,CACJ;SACA,mBAAmB,EAAE;SACrB,GAAG,EAAE,CAAC;AACX,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport { supersededContainerBindings } from \"../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\n\n/** Whether a held folder was re-homed away from this organization. */\nexport async function isSupersededContainerBinding(\n  execSql: ExecSql,\n  input: { containerId: string; organizationId: string },\n): Promise<boolean> {\n  const rows = await getClientSQLitePersistenceRuntime(execSql)\n    .db.select({ containerId: supersededContainerBindings.containerId })\n    .from(supersededContainerBindings)\n    .where(\n      and(\n        eq(supersededContainerBindings.containerId, input.containerId),\n        eq(supersededContainerBindings.organizationId, input.organizationId),\n      ),\n    )\n    .limit(1);\n  return rows.length > 0;\n}\n\n/** Record that folders left an organization, so it can never be replayed. */\nexport async function recordSupersededContainerBindingsInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  input: {\n    containerIds: ReadonlyArray<string>;\n    organizationId: string;\n    supersededAt: string;\n  },\n): Promise<void> {\n  if (input.containerIds.length === 0 || input.organizationId === \"\") return;\n  await tx\n    .insert(supersededContainerBindings)\n    .values(\n      input.containerIds.map((containerId) => ({\n        containerId,\n        organizationId: input.organizationId,\n        supersededAt: input.supersededAt,\n      })),\n    )\n    .onConflictDoNothing()\n    .run();\n}\n"]}

package/data/persistence/containers/containerPersistence.d.ts

@@ -0,0 +1,35 @@
+import type { ContainerAccessLevel } from "../../../internal/crypto/index.js";
+import { type ContainerSystemSlot } from "../../../internal/validators/containerSystemSlot.js";
+import { type ClientSQLiteTransactionScope } from "../../sqlite/sqlitePersistenceRuntime.js";
+import { type ExecSql } from "../../sqlite/sqlSchema.js";
+export interface ContainerRecord {
+    createdAt?: string | null;
+    effectiveAccessLevel?: ContainerAccessLevel | null;
+    id: string;
+    organizationId: string;
+    parentId: string | null;
+    metadataDocumentId: string | null;
+    systemSlot?: ContainerSystemSlot | null;
+    name: string;
+    icon: string | null;
+    localCreatedAt?: string | null;
+    localUpdatedAt?: string | null;
+    serverCreatedAt?: string | null;
+    serverUpdatedAt?: string | null;
+    updatedAt?: string | null;
+}
+export declare function ensureContainerTables(execSql: ExecSql): Promise<void>;
+export declare function saveContainerRows(input: {
+    tx: ClientSQLiteTransactionScope;
+    record: ContainerRecord;
+    localUpdatedAt: string;
+}): Promise<ContainerRecord>;
+export declare function loadContainers(execSql: ExecSql): Promise<ContainerRecord[]>;
+export declare function loadContainerById(execSql: ExecSql, containerId: string): Promise<ContainerRecord | null>;
+export declare function loadContainerDisplayNamesByIds(execSql: ExecSql, ids: ReadonlyArray<string>): Promise<Map<string, string>>;
+export declare function saveContainer(execSql: ExecSql, record: ContainerRecord): Promise<void>;
+/**
+ * The container-row half of the delete cascade, statement-only so callers
+ * can compose it inside one atomic transaction.
+ */
+export declare function deleteContainerRowsInTransaction(tx: ClientSQLiteTransactionScope, ids: ReadonlyArray<string>): Promise<void>;