@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/data/persistence/containers/documentContainerProjectionPersistence.js

@@ -0,0 +1,130 @@
+import { asc, eq, inArray } from "drizzle-orm";
+import { containerDocumentTombstoneHolds, documentContainerProjection, documentContainerProjectionTables, documentMoveIntentTables, documentTables, } from "../../sqlite/schema.js";
+import { getClientSQLitePersistenceRuntime, } from "../../sqlite/sqlitePersistenceRuntime.js";
+import { ensureSqlTables } from "../../sqlite/sqlSchema.js";
+import { deleteContainerDocumentTombstoneHoldRowsForLinks, deleteContainerDocumentTombstoneHoldsForDocuments, } from "../documents/containerDocumentTombstoneHoldsPersistence.js";
+import { filterWritableDocumentPlacements, } from "./documentPlacement.js";
+/** Link rows and their tombstone holds leave together on a remote reset. */
+export async function deleteDocumentPlacementRowsByContainerIds(tx, containerIds) {
+    await tx
+        .delete(documentContainerProjection)
+        .where(inArray(documentContainerProjection.containerId, containerIds))
+        .run();
+    await tx
+        .delete(containerDocumentTombstoneHolds)
+        .where(inArray(containerDocumentTombstoneHolds.containerId, containerIds))
+        .run();
+}
+export async function deleteDocumentPlacementRowsByDocumentIds(tx, documentIds) {
+    await tx
+        .delete(documentContainerProjection)
+        .where(inArray(documentContainerProjection.documentId, documentIds))
+        .run();
+    await tx
+        .delete(containerDocumentTombstoneHolds)
+        .where(inArray(containerDocumentTombstoneHolds.documentId, documentIds))
+        .run();
+}
+export const sqlDocumentContainerProjectionPersistence = {
+    async ensureSchema(execSql) {
+        await ensureSqlTables(execSql, documentContainerProjectionTables);
+    },
+    async listLinkedContainerIds(execSql, documentId) {
+        await ensureSqlTables(execSql, documentContainerProjectionTables);
+        const { db } = getClientSQLitePersistenceRuntime(execSql);
+        const rows = await db
+            .select({ containerId: documentContainerProjection.containerId })
+            .from(documentContainerProjection)
+            .where(eq(documentContainerProjection.documentId, documentId))
+            .orderBy(asc(documentContainerProjection.containerId));
+        return rows.map((row) => row.containerId);
+    },
+    async listLinkedContainerIdsByDocumentIds(execSql, documentIds) {
+        await ensureSqlTables(execSql, documentContainerProjectionTables);
+        const uniqueDocumentIds = Array.from(new Set(documentIds));
+        if (uniqueDocumentIds.length === 0) {
+            return new Map();
+        }
+        const { db } = getClientSQLitePersistenceRuntime(execSql);
+        const rows = await db
+            .select({
+            documentId: documentContainerProjection.documentId,
+            containerId: documentContainerProjection.containerId,
+        })
+            .from(documentContainerProjection)
+            .where(inArray(documentContainerProjection.documentId, uniqueDocumentIds))
+            .orderBy(asc(documentContainerProjection.documentId), asc(documentContainerProjection.containerId));
+        const linkedContainerIdsByDocumentId = new Map();
+        for (const documentId of uniqueDocumentIds) {
+            linkedContainerIdsByDocumentId.set(documentId, []);
+        }
+        for (const row of rows) {
+            const linkedContainerIds = linkedContainerIdsByDocumentId.get(row.documentId) ?? [];
+            linkedContainerIds.push(row.containerId);
+            linkedContainerIdsByDocumentId.set(row.documentId, linkedContainerIds);
+        }
+        return linkedContainerIdsByDocumentId;
+    },
+    async listDocumentIdsByContainerIds(execSql, containerIds) {
+        await ensureSqlTables(execSql, documentContainerProjectionTables);
+        const uniqueContainerIds = Array.from(new Set(containerIds));
+        if (uniqueContainerIds.length === 0) {
+            return [];
+        }
+        const { db } = getClientSQLitePersistenceRuntime(execSql);
+        const rows = await db
+            .selectDistinct({ documentId: documentContainerProjection.documentId })
+            .from(documentContainerProjection)
+            .where(inArray(documentContainerProjection.containerId, uniqueContainerIds))
+            .orderBy(asc(documentContainerProjection.documentId));
+        return rows.map((row) => row.documentId);
+    },
+    async replaceDocumentLinks(execSql, documentId, containerIds, options) {
+        await sqlDocumentContainerProjectionPersistence.replaceDocumentLinksBatch(execSql, [{ documentId, containerIds }], options);
+    },
+    async replaceDocumentLinksBatch(execSql, inputs, options) {
+        await ensureSqlTables(execSql, [
+            ...documentContainerProjectionTables,
+            ...documentMoveIntentTables,
+            ...documentTables,
+        ]);
+        const latest = new Map(inputs.map((input) => [input.documentId, input]));
+        if (latest.size === 0)
+            return;
+        const runtime = getClientSQLitePersistenceRuntime(execSql);
+        const replace = async (tx) => {
+            const writable = await filterWritableDocumentPlacements(tx, [...latest.values()], options);
+            if (writable.length === 0)
+                return;
+            // A placement the writer re-asserts is no longer tombstoned: a
+            // listing that links it again, or a local move that owns it, releases
+            // the hold so the document is not hidden until the next retry.
+            if (options?.moveIntentId) {
+                await deleteContainerDocumentTombstoneHoldsForDocuments(tx, writable.map((input) => input.documentId));
+            }
+            else {
+                await deleteContainerDocumentTombstoneHoldRowsForLinks(tx, writable);
+            }
+            await tx
+                .delete(documentContainerProjection)
+                .where(inArray(documentContainerProjection.documentId, writable.map((input) => input.documentId)))
+                .run();
+            const updatedAt = new Date().toISOString();
+            const rows = writable.flatMap((input) => Array.from(new Set(input.containerIds))
+                .sort()
+                .map((containerId) => ({
+                documentId: input.documentId,
+                containerId,
+                updatedAt,
+            })));
+            if (rows.length > 0)
+                await tx.insert(documentContainerProjection).values(rows).run();
+        };
+        if (options?.stillCurrent) {
+            await runtime.guardedTransaction(replace, options.stillCurrent);
+            return;
+        }
+        await runtime.transaction(replace);
+    },
+};
+//# sourceMappingURL=documentContainerProjectionPersistence.js.map

package/data/persistence/containers/documentContainerProjectionPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentContainerProjectionPersistence.js","sourceRoot":"","sources":["documentContainerProjectionPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,iCAAiC,EACjC,wBAAwB,EACxB,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EACL,gDAAgD,EAChD,iDAAiD,GAClD,MAAM,yDAAyD,CAAC;AAEjE,OAAO,EAGL,gCAAgC,GACjC,MAAM,qBAAqB,CAAC;AA6B7B,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,EAAgC,EAChC,YAAmC;IAEnC,MAAM,EAAE;SACL,MAAM,CAAC,2BAA2B,CAAC;SACnC,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;SACrE,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,+BAA+B,CAAC;SACvC,KAAK,CAAC,OAAO,CAAC,+BAA+B,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;SACzE,GAAG,EAAE,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,EAAgC,EAChC,WAAkC;IAElC,MAAM,EAAE;SACL,MAAM,CAAC,2BAA2B,CAAC;SACnC,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;SACnE,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,+BAA+B,CAAC;SACvC,KAAK,CAAC,OAAO,CAAC,+BAA+B,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;SACvE,GAAG,EAAE,CAAC;AACX,CAAC;AAED,MAAM,CAAC,MAAM,yCAAyC,GACpD;IACE,KAAK,CAAC,YAAY,CAAC,OAAO;QACxB,MAAM,eAAe,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IACpE,CAAC;IACD,KAAK,CAAC,sBAAsB,CAAC,OAAO,EAAE,UAAU;QAC9C,MAAM,eAAe,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;QAClE,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,CAAC,EAAE,WAAW,EAAE,2BAA2B,CAAC,WAAW,EAAE,CAAC;aAChE,IAAI,CAAC,2BAA2B,CAAC;aACjC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;aAC7D,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC,CAAC;QAEzD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,mCAAmC,CAAC,OAAO,EAAE,WAAW;QAC5D,MAAM,eAAe,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;QAClE,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3D,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,CAAC;YACN,UAAU,EAAE,2BAA2B,CAAC,UAAU;YAClD,WAAW,EAAE,2BAA2B,CAAC,WAAW;SACrD,CAAC;aACD,IAAI,CAAC,2BAA2B,CAAC;aACjC,KAAK,CACJ,OAAO,CAAC,2BAA2B,CAAC,UAAU,EAAE,iBAAiB,CAAC,CACnE;aACA,OAAO,CACN,GAAG,CAAC,2BAA2B,CAAC,UAAU,CAAC,EAC3C,GAAG,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAC7C,CAAC;QAEJ,MAAM,8BAA8B,GAAG,IAAI,GAAG,EAAoB,CAAC;QACnE,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;YAC3C,8BAA8B,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,kBAAkB,GACtB,8BAA8B,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAC3D,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzC,8BAA8B,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,8BAA8B,CAAC;IACxC,CAAC;IACD,KAAK,CAAC,6BAA6B,CAAC,OAAO,EAAE,YAAY;QACvD,MAAM,eAAe,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;QAClE,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QAC7D,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,cAAc,CAAC,EAAE,UAAU,EAAE,2BAA2B,CAAC,UAAU,EAAE,CAAC;aACtE,IAAI,CAAC,2BAA2B,CAAC;aACjC,KAAK,CACJ,OAAO,CAAC,2BAA2B,CAAC,WAAW,EAAE,kBAAkB,CAAC,CACrE;aACA,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC;QAExD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO;QACnE,MAAM,yCAAyC,CAAC,yBAAyB,CACvE,OAAO,EACP,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAC9B,OAAO,CACR,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO;QACtD,MAAM,eAAe,CAAC,OAAO,EAAE;YAC7B,GAAG,iCAAiC;YACpC,GAAG,wBAAwB;YAC3B,GAAG,cAAc;SAClB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAC9B,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,KAAK,EAAE,EAAgC,EAAE,EAAE;YACzD,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CACrD,EAAE,EACF,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EACpB,OAAO,CACR,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAClC,+DAA+D;YAC/D,sEAAsE;YACtE,+DAA+D;YAC/D,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;gBAC1B,MAAM,iDAAiD,CACrD,EAAE,EACF,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAC1C,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,gDAAgD,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,EAAE;iBACL,MAAM,CAAC,2BAA2B,CAAC;iBACnC,KAAK,CACJ,OAAO,CACL,2BAA2B,CAAC,UAAU,EACtC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAC1C,CACF;iBACA,GAAG,EAAE,CAAC;YACT,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACtC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;iBACpC,IAAI,EAAE;iBACN,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBACrB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,WAAW;gBACX,SAAS;aACV,CAAC,CAAC,CACN,CAAC;YACF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBACjB,MAAM,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;QACpE,CAAC,CAAC;QACF,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;YAC1B,MAAM,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;CACF,CAAC","sourcesContent":["import { asc, eq, inArray } from \"drizzle-orm\";\nimport {\n  containerDocumentTombstoneHolds,\n  documentContainerProjection,\n  documentContainerProjectionTables,\n  documentMoveIntentTables,\n  documentTables,\n} from \"../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\nimport {\n  deleteContainerDocumentTombstoneHoldRowsForLinks,\n  deleteContainerDocumentTombstoneHoldsForDocuments,\n} from \"../documents/containerDocumentTombstoneHoldsPersistence\";\n\nimport {\n  type DocumentPlacementInput,\n  type DocumentPlacementWriteOptions,\n  filterWritableDocumentPlacements,\n} from \"./documentPlacement\";\n\ninterface DocumentContainerProjectionPersistence {\n  ensureSchema: (execSql: ExecSql) => Promise<void>;\n  listLinkedContainerIds: (\n    execSql: ExecSql,\n    documentId: string,\n  ) => Promise<ReadonlyArray<string>>;\n  listLinkedContainerIdsByDocumentIds: (\n    execSql: ExecSql,\n    documentIds: ReadonlyArray<string>,\n  ) => Promise<ReadonlyMap<string, ReadonlyArray<string>>>;\n  listDocumentIdsByContainerIds: (\n    execSql: ExecSql,\n    containerIds: ReadonlyArray<string>,\n  ) => Promise<ReadonlyArray<string>>;\n  replaceDocumentLinks: (\n    execSql: ExecSql,\n    documentId: string,\n    containerIds: ReadonlyArray<string>,\n    options?: DocumentPlacementWriteOptions,\n  ) => Promise<void>;\n  replaceDocumentLinksBatch: (\n    execSql: ExecSql,\n    inputs: ReadonlyArray<DocumentPlacementInput>,\n    options?: DocumentPlacementWriteOptions,\n  ) => Promise<void>;\n}\n\n/** Link rows and their tombstone holds leave together on a remote reset. */\nexport async function deleteDocumentPlacementRowsByContainerIds(\n  tx: ClientSQLiteTransactionScope,\n  containerIds: ReadonlyArray<string>,\n): Promise<void> {\n  await tx\n    .delete(documentContainerProjection)\n    .where(inArray(documentContainerProjection.containerId, containerIds))\n    .run();\n  await tx\n    .delete(containerDocumentTombstoneHolds)\n    .where(inArray(containerDocumentTombstoneHolds.containerId, containerIds))\n    .run();\n}\n\nexport async function deleteDocumentPlacementRowsByDocumentIds(\n  tx: ClientSQLiteTransactionScope,\n  documentIds: ReadonlyArray<string>,\n): Promise<void> {\n  await tx\n    .delete(documentContainerProjection)\n    .where(inArray(documentContainerProjection.documentId, documentIds))\n    .run();\n  await tx\n    .delete(containerDocumentTombstoneHolds)\n    .where(inArray(containerDocumentTombstoneHolds.documentId, documentIds))\n    .run();\n}\n\nexport const sqlDocumentContainerProjectionPersistence: DocumentContainerProjectionPersistence =\n  {\n    async ensureSchema(execSql) {\n      await ensureSqlTables(execSql, documentContainerProjectionTables);\n    },\n    async listLinkedContainerIds(execSql, documentId) {\n      await ensureSqlTables(execSql, documentContainerProjectionTables);\n      const { db } = getClientSQLitePersistenceRuntime(execSql);\n      const rows = await db\n        .select({ containerId: documentContainerProjection.containerId })\n        .from(documentContainerProjection)\n        .where(eq(documentContainerProjection.documentId, documentId))\n        .orderBy(asc(documentContainerProjection.containerId));\n\n      return rows.map((row) => row.containerId);\n    },\n    async listLinkedContainerIdsByDocumentIds(execSql, documentIds) {\n      await ensureSqlTables(execSql, documentContainerProjectionTables);\n      const uniqueDocumentIds = Array.from(new Set(documentIds));\n      if (uniqueDocumentIds.length === 0) {\n        return new Map();\n      }\n\n      const { db } = getClientSQLitePersistenceRuntime(execSql);\n      const rows = await db\n        .select({\n          documentId: documentContainerProjection.documentId,\n          containerId: documentContainerProjection.containerId,\n        })\n        .from(documentContainerProjection)\n        .where(\n          inArray(documentContainerProjection.documentId, uniqueDocumentIds),\n        )\n        .orderBy(\n          asc(documentContainerProjection.documentId),\n          asc(documentContainerProjection.containerId),\n        );\n\n      const linkedContainerIdsByDocumentId = new Map<string, string[]>();\n      for (const documentId of uniqueDocumentIds) {\n        linkedContainerIdsByDocumentId.set(documentId, []);\n      }\n\n      for (const row of rows) {\n        const linkedContainerIds =\n          linkedContainerIdsByDocumentId.get(row.documentId) ?? [];\n        linkedContainerIds.push(row.containerId);\n        linkedContainerIdsByDocumentId.set(row.documentId, linkedContainerIds);\n      }\n\n      return linkedContainerIdsByDocumentId;\n    },\n    async listDocumentIdsByContainerIds(execSql, containerIds) {\n      await ensureSqlTables(execSql, documentContainerProjectionTables);\n      const uniqueContainerIds = Array.from(new Set(containerIds));\n      if (uniqueContainerIds.length === 0) {\n        return [];\n      }\n\n      const { db } = getClientSQLitePersistenceRuntime(execSql);\n      const rows = await db\n        .selectDistinct({ documentId: documentContainerProjection.documentId })\n        .from(documentContainerProjection)\n        .where(\n          inArray(documentContainerProjection.containerId, uniqueContainerIds),\n        )\n        .orderBy(asc(documentContainerProjection.documentId));\n\n      return rows.map((row) => row.documentId);\n    },\n    async replaceDocumentLinks(execSql, documentId, containerIds, options) {\n      await sqlDocumentContainerProjectionPersistence.replaceDocumentLinksBatch(\n        execSql,\n        [{ documentId, containerIds }],\n        options,\n      );\n    },\n    async replaceDocumentLinksBatch(execSql, inputs, options) {\n      await ensureSqlTables(execSql, [\n        ...documentContainerProjectionTables,\n        ...documentMoveIntentTables,\n        ...documentTables,\n      ]);\n      const latest = new Map(inputs.map((input) => [input.documentId, input]));\n      if (latest.size === 0) return;\n      const runtime = getClientSQLitePersistenceRuntime(execSql);\n      const replace = async (tx: ClientSQLiteTransactionScope) => {\n        const writable = await filterWritableDocumentPlacements(\n          tx,\n          [...latest.values()],\n          options,\n        );\n        if (writable.length === 0) return;\n        // A placement the writer re-asserts is no longer tombstoned: a\n        // listing that links it again, or a local move that owns it, releases\n        // the hold so the document is not hidden until the next retry.\n        if (options?.moveIntentId) {\n          await deleteContainerDocumentTombstoneHoldsForDocuments(\n            tx,\n            writable.map((input) => input.documentId),\n          );\n        } else {\n          await deleteContainerDocumentTombstoneHoldRowsForLinks(tx, writable);\n        }\n        await tx\n          .delete(documentContainerProjection)\n          .where(\n            inArray(\n              documentContainerProjection.documentId,\n              writable.map((input) => input.documentId),\n            ),\n          )\n          .run();\n        const updatedAt = new Date().toISOString();\n        const rows = writable.flatMap((input) =>\n          Array.from(new Set(input.containerIds))\n            .sort()\n            .map((containerId) => ({\n              documentId: input.documentId,\n              containerId,\n              updatedAt,\n            })),\n        );\n        if (rows.length > 0)\n          await tx.insert(documentContainerProjection).values(rows).run();\n      };\n      if (options?.stillCurrent) {\n        await runtime.guardedTransaction(replace, options.stillCurrent);\n        return;\n      }\n      await runtime.transaction(replace);\n    },\n  };\n"]}

package/data/persistence/containers/documentPlacement.js

@@ -0,0 +1,51 @@
+import { and, eq, inArray } from "drizzle-orm";
+import { documentMoveIntents, documents } from "../../sqlite/schema.js";
+import { DOCUMENTS_APP_KIND } from "../documents/internal/constants.js";
+export async function loadDocumentMovePlacement(tx, documentId) {
+    const [intent] = await tx
+        .select({
+        id: documentMoveIntents.id,
+        intentType: documentMoveIntents.intentType,
+        targetContainerId: documentMoveIntents.targetContainerId,
+    })
+        .from(documentMoveIntents)
+        .where(eq(documentMoveIntents.documentId, documentId))
+        .limit(1);
+    return intent;
+}
+/** Check at commit time: neither intermediate replay nor discovery owns a pending move. */
+export async function filterWritableDocumentPlacements(tx, inputs, options) {
+    const ids = inputs.map((input) => input.documentId);
+    const intents = new Map((await tx
+        .select({
+        documentId: documentMoveIntents.documentId,
+        id: documentMoveIntents.id,
+    })
+        .from(documentMoveIntents)
+        .where(inArray(documentMoveIntents.documentId, ids))).map((row) => [row.documentId, row.id]));
+    const versionedIds = inputs
+        .filter((input) => input.accessEpoch !== undefined)
+        .map((input) => input.documentId);
+    const epochs = new Map();
+    if (versionedIds.length > 0) {
+        const rows = await tx
+            .select({
+            documentId: documents.documentId,
+            accessEpoch: documents.accessEpoch,
+        })
+            .from(documents)
+            .where(and(eq(documents.appKind, DOCUMENTS_APP_KIND), inArray(documents.documentId, versionedIds)));
+        for (const row of rows)
+            if (row.documentId)
+                epochs.set(row.documentId, Math.max(epochs.get(row.documentId) ?? 0, row.accessEpoch));
+    }
+    return inputs.filter((input) => {
+        if (options?.moveIntentId)
+            return intents.get(input.documentId) === options.moveIntentId;
+        if (intents.has(input.documentId))
+            return false;
+        return (input.accessEpoch === undefined ||
+            input.accessEpoch >= (epochs.get(input.documentId) ?? 0));
+    });
+}
+//# sourceMappingURL=documentPlacement.js.map

package/data/persistence/containers/documentPlacement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentPlacement.js","sourceRoot":"","sources":["documentPlacement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAarE,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAgC,EAChC,UAAkB;IAElB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;SACtB,MAAM,CAAC;QACN,EAAE,EAAE,mBAAmB,CAAC,EAAE;QAC1B,UAAU,EAAE,mBAAmB,CAAC,UAAU;QAC1C,iBAAiB,EAAE,mBAAmB,CAAC,iBAAiB;KACzD,CAAC;SACD,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;SACrD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,EAAgC,EAChC,MAAyC,EACzC,OAAuC;IAEvC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CACE,MAAM,EAAE;SACL,MAAM,CAAC;QACN,UAAU,EAAE,mBAAmB,CAAC,UAAU;QAC1C,EAAE,EAAE,mBAAmB,CAAC,EAAE;KAC3B,CAAC;SACD,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CACvD,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CACzC,CAAC;IACF,MAAM,YAAY,GAAG,MAAM;SACxB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC;SAClD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,CAAC;YACN,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC,EACzC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,YAAY,CAAC,CAC5C,CACF,CAAC;QACJ,KAAK,MAAM,GAAG,IAAI,IAAI;YACpB,IAAI,GAAG,CAAC,UAAU;gBAChB,MAAM,CAAC,GAAG,CACR,GAAG,CAAC,UAAU,EACd,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,CAC3D,CAAC;IACR,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7B,IAAI,OAAO,EAAE,YAAY;YACvB,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;QAChE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAChD,OAAO,CACL,KAAK,CAAC,WAAW,KAAK,SAAS;YAC/B,KAAK,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CACzD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { and, eq, inArray } from \"drizzle-orm\";\nimport { documentMoveIntents, documents } from \"../../sqlite/schema\";\nimport type { ClientSQLiteTransactionScope } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { DOCUMENTS_APP_KIND } from \"../documents/internal/constants\";\n\nexport interface DocumentPlacementInput {\n  documentId: string;\n  containerIds: ReadonlyArray<string>;\n  accessEpoch?: number | undefined;\n}\n\nexport interface DocumentPlacementWriteOptions {\n  stillCurrent?: (() => boolean) | undefined;\n  moveIntentId?: string | undefined;\n}\n\nexport async function loadDocumentMovePlacement(\n  tx: ClientSQLiteTransactionScope,\n  documentId: string,\n) {\n  const [intent] = await tx\n    .select({\n      id: documentMoveIntents.id,\n      intentType: documentMoveIntents.intentType,\n      targetContainerId: documentMoveIntents.targetContainerId,\n    })\n    .from(documentMoveIntents)\n    .where(eq(documentMoveIntents.documentId, documentId))\n    .limit(1);\n  return intent;\n}\n\n/** Check at commit time: neither intermediate replay nor discovery owns a pending move. */\nexport async function filterWritableDocumentPlacements(\n  tx: ClientSQLiteTransactionScope,\n  inputs: readonly DocumentPlacementInput[],\n  options?: DocumentPlacementWriteOptions,\n): Promise<readonly DocumentPlacementInput[]> {\n  const ids = inputs.map((input) => input.documentId);\n  const intents = new Map(\n    (\n      await tx\n        .select({\n          documentId: documentMoveIntents.documentId,\n          id: documentMoveIntents.id,\n        })\n        .from(documentMoveIntents)\n        .where(inArray(documentMoveIntents.documentId, ids))\n    ).map((row) => [row.documentId, row.id]),\n  );\n  const versionedIds = inputs\n    .filter((input) => input.accessEpoch !== undefined)\n    .map((input) => input.documentId);\n  const epochs = new Map<string, number>();\n  if (versionedIds.length > 0) {\n    const rows = await tx\n      .select({\n        documentId: documents.documentId,\n        accessEpoch: documents.accessEpoch,\n      })\n      .from(documents)\n      .where(\n        and(\n          eq(documents.appKind, DOCUMENTS_APP_KIND),\n          inArray(documents.documentId, versionedIds),\n        ),\n      );\n    for (const row of rows)\n      if (row.documentId)\n        epochs.set(\n          row.documentId,\n          Math.max(epochs.get(row.documentId) ?? 0, row.accessEpoch),\n        );\n  }\n  return inputs.filter((input) => {\n    if (options?.moveIntentId)\n      return intents.get(input.documentId) === options.moveIntentId;\n    if (intents.has(input.documentId)) return false;\n    return (\n      input.accessEpoch === undefined ||\n      input.accessEpoch >= (epochs.get(input.documentId) ?? 0)\n    );\n  });\n}\n"]}

package/data/persistence/documentPurgeCheckpointPersistence.d.ts

@@ -0,0 +1,10 @@
+import type { ClientSQLiteTransactionScope } from "../sqlite/sqlitePersistenceRuntime.js";
+import { type ExecSql } from "../sqlite/sqlSchema.js";
+export interface DocumentPurgeCheckpoint {
+    readonly documentId: string;
+    readonly documentManifestHash: string;
+    readonly organizationId: string;
+    readonly purgeEventHash: string;
+}
+export declare function loadDocumentPurgeCheckpoint(execSql: ExecSql, documentId: string): Promise<DocumentPurgeCheckpoint | null>;
+export declare function storeDocumentPurgeCheckpointInTransaction(tx: ClientSQLiteTransactionScope, checkpoint: DocumentPurgeCheckpoint, updatedAt: string): Promise<void>;

package/data/persistence/documentPurgeCheckpointPersistence.js

@@ -0,0 +1,43 @@
+import { KeyingVerificationError } from "../../internal/crypto/index.js";
+import { eq } from "drizzle-orm";
+import { documentPurgeCheckpoints, keyingCheckpointTables, } from "../sqlite/schema.js";
+import { getClientSQLitePersistenceRuntime } from "../sqlite/sqlitePersistenceRuntime.js";
+import { ensureSqlTables } from "../sqlite/sqlSchema.js";
+export async function loadDocumentPurgeCheckpoint(execSql, documentId) {
+    await ensureSqlTables(execSql, keyingCheckpointTables);
+    const [row] = await getClientSQLitePersistenceRuntime(execSql)
+        .db.select({
+        documentId: documentPurgeCheckpoints.documentId,
+        documentManifestHash: documentPurgeCheckpoints.documentManifestHash,
+        organizationId: documentPurgeCheckpoints.organizationId,
+        purgeEventHash: documentPurgeCheckpoints.purgeEventHash,
+    })
+        .from(documentPurgeCheckpoints)
+        .where(eq(documentPurgeCheckpoints.documentId, documentId))
+        .limit(1);
+    return row ?? null;
+}
+export async function storeDocumentPurgeCheckpointInTransaction(tx, checkpoint, updatedAt) {
+    const [stored] = await tx
+        .select({
+        documentManifestHash: documentPurgeCheckpoints.documentManifestHash,
+        organizationId: documentPurgeCheckpoints.organizationId,
+        purgeEventHash: documentPurgeCheckpoints.purgeEventHash,
+    })
+        .from(documentPurgeCheckpoints)
+        .where(eq(documentPurgeCheckpoints.documentId, checkpoint.documentId))
+        .limit(1);
+    if (stored) {
+        if (stored.documentManifestHash !== checkpoint.documentManifestHash ||
+            stored.organizationId !== checkpoint.organizationId ||
+            stored.purgeEventHash !== checkpoint.purgeEventHash) {
+            throw new KeyingVerificationError("equivocation", "Document purge checkpoint conflicts with the verified terminal event");
+        }
+        return;
+    }
+    await tx
+        .insert(documentPurgeCheckpoints)
+        .values({ ...checkpoint, updatedAt })
+        .run();
+}
+//# sourceMappingURL=documentPurgeCheckpointPersistence.js.map

package/data/persistence/documentPurgeCheckpointPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentPurgeCheckpointPersistence.js","sourceRoot":"","sources":["documentPurgeCheckpointPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAgB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AASpE,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAgB,EAChB,UAAkB;IAElB,MAAM,eAAe,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,iCAAiC,CAAC,OAAO,CAAC;SAC3D,EAAE,CAAC,MAAM,CAAC;QACT,UAAU,EAAE,wBAAwB,CAAC,UAAU;QAC/C,oBAAoB,EAAE,wBAAwB,CAAC,oBAAoB;QACnE,cAAc,EAAE,wBAAwB,CAAC,cAAc;QACvD,cAAc,EAAE,wBAAwB,CAAC,cAAc;KACxD,CAAC;SACD,IAAI,CAAC,wBAAwB,CAAC;SAC9B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;SAC1D,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,EAAgC,EAChC,UAAmC,EACnC,SAAiB;IAEjB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;SACtB,MAAM,CAAC;QACN,oBAAoB,EAAE,wBAAwB,CAAC,oBAAoB;QACnE,cAAc,EAAE,wBAAwB,CAAC,cAAc;QACvD,cAAc,EAAE,wBAAwB,CAAC,cAAc;KACxD,CAAC;SACD,IAAI,CAAC,wBAAwB,CAAC;SAC9B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;SACrE,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,MAAM,EAAE,CAAC;QACX,IACE,MAAM,CAAC,oBAAoB,KAAK,UAAU,CAAC,oBAAoB;YAC/D,MAAM,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc;YACnD,MAAM,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc,EACnD,CAAC;YACD,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,EAAE;SACL,MAAM,CAAC,wBAAwB,CAAC;SAChC,MAAM,CAAC,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,CAAC;SACpC,GAAG,EAAE,CAAC;AACX,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport { eq } from \"drizzle-orm\";\nimport {\n  documentPurgeCheckpoints,\n  keyingCheckpointTables,\n} from \"../sqlite/schema\";\nimport type { ClientSQLiteTransactionScope } from \"../sqlite/sqlitePersistenceRuntime\";\nimport { getClientSQLitePersistenceRuntime } from \"../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../sqlite/sqlSchema\";\n\nexport interface DocumentPurgeCheckpoint {\n  readonly documentId: string;\n  readonly documentManifestHash: string;\n  readonly organizationId: string;\n  readonly purgeEventHash: string;\n}\n\nexport async function loadDocumentPurgeCheckpoint(\n  execSql: ExecSql,\n  documentId: string,\n): Promise<DocumentPurgeCheckpoint | null> {\n  await ensureSqlTables(execSql, keyingCheckpointTables);\n  const [row] = await getClientSQLitePersistenceRuntime(execSql)\n    .db.select({\n      documentId: documentPurgeCheckpoints.documentId,\n      documentManifestHash: documentPurgeCheckpoints.documentManifestHash,\n      organizationId: documentPurgeCheckpoints.organizationId,\n      purgeEventHash: documentPurgeCheckpoints.purgeEventHash,\n    })\n    .from(documentPurgeCheckpoints)\n    .where(eq(documentPurgeCheckpoints.documentId, documentId))\n    .limit(1);\n  return row ?? null;\n}\n\nexport async function storeDocumentPurgeCheckpointInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  checkpoint: DocumentPurgeCheckpoint,\n  updatedAt: string,\n): Promise<void> {\n  const [stored] = await tx\n    .select({\n      documentManifestHash: documentPurgeCheckpoints.documentManifestHash,\n      organizationId: documentPurgeCheckpoints.organizationId,\n      purgeEventHash: documentPurgeCheckpoints.purgeEventHash,\n    })\n    .from(documentPurgeCheckpoints)\n    .where(eq(documentPurgeCheckpoints.documentId, checkpoint.documentId))\n    .limit(1);\n  if (stored) {\n    if (\n      stored.documentManifestHash !== checkpoint.documentManifestHash ||\n      stored.organizationId !== checkpoint.organizationId ||\n      stored.purgeEventHash !== checkpoint.purgeEventHash\n    ) {\n      throw new KeyingVerificationError(\n        \"equivocation\",\n        \"Document purge checkpoint conflicts with the verified terminal event\",\n      );\n    }\n    return;\n  }\n  await tx\n    .insert(documentPurgeCheckpoints)\n    .values({ ...checkpoint, updatedAt })\n    .run();\n}\n"]}

package/data/persistence/documents/containerDocumentTombstoneHoldsPersistence.js

@@ -0,0 +1,108 @@
+import { and, eq, max } from "drizzle-orm";
+import { containerDocumentTombstoneHolds, documentContainerProjectionTables, documents, documentTables, } from "../../sqlite/schema.js";
+import { getClientSQLitePersistenceRuntime } from "../../sqlite/sqlitePersistenceRuntime.js";
+import { ensureSqlTables, runSerializedSqlMutation, } from "../../sqlite/sqlSchema.js";
+import { DOCUMENTS_APP_KIND } from "./internal/constants.js";
+import { deleteContainerDocumentTombstoneHoldRows, holdContainerDocumentTombstonesInTransaction, listContainerDocumentTombstoneHoldsForDocumentsInTransaction, listContainerDocumentTombstoneHoldsInTransaction, listKnownContainerDocumentPlacementsInTransaction, partitionContainerDocumentTombstoneHolds, } from "./internal/containerDocumentTombstoneHolds.js";
+export { containerDocumentPlacementKey, deleteContainerDocumentTombstoneHoldRowsForLinks, deleteContainerDocumentTombstoneHoldsForContainers, deleteContainerDocumentTombstoneHoldsForDocuments, } from "./internal/containerDocumentTombstoneHolds.js";
+/**
+ * Retry backoff for a held tombstone: fifteen minutes after the first failed
+ * verification, doubling on every further failure up to 32 hours. An
+ * honest hold that can never verify (the requester lost read access to the
+ * document, or it was purged elsewhere) would otherwise cost a head fetch on
+ * every discovery of its container for as long as the container exists.
+ */
+export const HELD_TOMBSTONE_RETRY_INTERVAL_MS = 15 * 60 * 1000;
+const HELD_TOMBSTONE_MAX_BACKOFF_DOUBLINGS = 7;
+export function heldTombstoneRetryDelayMs(attempts) {
+    const doublings = Math.min(Math.max(attempts, 1) - 1, HELD_TOMBSTONE_MAX_BACKOFF_DOUBLINGS);
+    return HELD_TOMBSTONE_RETRY_INTERVAL_MS * 2 ** doublings;
+}
+function isHoldDue(hold, now) {
+    return (Date.parse(hold.updatedAt) + heldTombstoneRetryDelayMs(hold.attempts) <=
+        now.getTime());
+}
+export async function holdContainerDocumentTombstones(execSql, tombstones, now = new Date().toISOString()) {
+    if (tombstones.length === 0)
+        return;
+    return runSerializedSqlMutation(execSql, async (lockedExecSql) => {
+        await ensureSqlTables(lockedExecSql, documentContainerProjectionTables);
+        const { db } = getClientSQLitePersistenceRuntime(lockedExecSql);
+        await db.transaction((tx) => holdContainerDocumentTombstonesInTransaction(tx, tombstones, now));
+    });
+}
+export async function refuteContainerDocumentTombstoneHolds(execSql, placements) {
+    if (placements.length === 0)
+        return;
+    return runSerializedSqlMutation(execSql, async (lockedExecSql) => {
+        await ensureSqlTables(lockedExecSql, documentContainerProjectionTables);
+        const { db } = getClientSQLitePersistenceRuntime(lockedExecSql);
+        await db.transaction(async (tx) => {
+            for (const placement of placements) {
+                await tx
+                    .update(containerDocumentTombstoneHolds)
+                    .set({ hidden: false })
+                    .where(and(eq(containerDocumentTombstoneHolds.containerId, placement.containerId), eq(containerDocumentTombstoneHolds.documentId, placement.documentId)))
+                    .run();
+            }
+        });
+    });
+}
+export async function listContainerDocumentTombstoneHolds(execSql, containerIds) {
+    if (containerIds.length === 0)
+        return [];
+    await ensureSqlTables(execSql, documentContainerProjectionTables);
+    const { db } = getClientSQLitePersistenceRuntime(execSql);
+    return listContainerDocumentTombstoneHoldsInTransaction(db, containerIds);
+}
+export async function listContainerDocumentTombstoneHoldsForDocuments(execSql, documentIds) {
+    if (documentIds.length === 0)
+        return [];
+    await ensureSqlTables(execSql, documentContainerProjectionTables);
+    const { db } = getClientSQLitePersistenceRuntime(execSql);
+    return listContainerDocumentTombstoneHoldsForDocumentsInTransaction(db, documentIds);
+}
+export async function listKnownContainerDocumentPlacements(execSql, placements) {
+    if (placements.length === 0)
+        return [];
+    await ensureSqlTables(execSql, documentContainerProjectionTables);
+    const { db } = getClientSQLitePersistenceRuntime(execSql);
+    return listKnownContainerDocumentPlacementsInTransaction(db, placements);
+}
+/**
+ * The held tombstones on the given containers that are due for another
+ * verification attempt. Holds whose placement is gone are pruned first; that
+ * is the only write, and it is taken under the mutation lock only when there
+ * is something to prune.
+ */
+export async function listRetryableHeldContainerDocumentTombstones(execSql, containerIds, now = new Date()) {
+    if (containerIds.length === 0)
+        return [];
+    await ensureSqlTables(execSql, documentContainerProjectionTables);
+    const { db } = getClientSQLitePersistenceRuntime(execSql);
+    const { live, orphaned } = await partitionContainerDocumentTombstoneHolds(db, await listContainerDocumentTombstoneHoldsInTransaction(db, containerIds));
+    if (orphaned.length > 0) {
+        // Re-check under the lock: a hold re-created between the unlocked read
+        // and this write is hiding a placement again and must survive.
+        await runSerializedSqlMutation(execSql, (lockedExecSql) => getClientSQLitePersistenceRuntime(lockedExecSql).db.transaction(async (tx) => deleteContainerDocumentTombstoneHoldRows(tx, (await partitionContainerDocumentTombstoneHolds(tx, orphaned))
+            .orphaned)));
+    }
+    return live
+        .filter((hold) => isHoldDue(hold, now))
+        .map((hold) => ({
+        containerId: hold.containerId,
+        documentId: hold.documentId,
+        updatedAt: hold.tombstonedAt,
+    }));
+}
+/** Ordinary-document floors must exclude unsigned container-metadata epochs. */
+export async function loadLocalDocumentAccessEpoch(execSql, documentId) {
+    await ensureSqlTables(execSql, documentTables);
+    const { db } = getClientSQLitePersistenceRuntime(execSql);
+    const [row] = await db
+        .select({ accessEpoch: max(documents.accessEpoch) })
+        .from(documents)
+        .where(and(eq(documents.appKind, DOCUMENTS_APP_KIND), eq(documents.documentId, documentId)));
+    return row?.accessEpoch ?? 0;
+}
+//# sourceMappingURL=containerDocumentTombstoneHoldsPersistence.js.map

package/data/persistence/documents/containerDocumentTombstoneHoldsPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerDocumentTombstoneHoldsPersistence.js","sourceRoot":"","sources":["containerDocumentTombstoneHoldsPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,+BAA+B,EAC/B,iCAAiC,EACjC,SAAS,EACT,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAEL,eAAe,EACf,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAGL,wCAAwC,EAExC,4CAA4C,EAC5C,4DAA4D,EAC5D,gDAAgD,EAChD,iDAAiD,EACjD,wCAAwC,GACzC,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAEL,6BAA6B,EAC7B,gDAAgD,EAChD,kDAAkD,EAClD,iDAAiD,GAElD,MAAM,4CAA4C,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/D,MAAM,oCAAoC,GAAG,CAAC,CAAC;AAE/C,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,EACzB,oCAAoC,CACrC,CAAC;IACF,OAAO,gCAAgC,GAAG,CAAC,IAAI,SAAS,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS,CAChB,IAAuC,EACvC,GAAS;IAET,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrE,GAAG,CAAC,OAAO,EAAE,CACd,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAgB,EAChB,UAAyD,EACzD,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAE9B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,eAAe,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;QACxE,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,aAAa,CAAC,CAAC;QAChE,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAC1B,4CAA4C,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,CAClE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,OAAgB,EAChB,UAAwD;IAExD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,eAAe,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;QACxE,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,aAAa,CAAC,CAAC;QAChE,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAChC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,EAAE;qBACL,MAAM,CAAC,+BAA+B,CAAC;qBACvC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;qBACtB,KAAK,CACJ,GAAG,CACD,EAAE,CACA,+BAA+B,CAAC,WAAW,EAC3C,SAAS,CAAC,WAAW,CACtB,EACD,EAAE,CACA,+BAA+B,CAAC,UAAU,EAC1C,SAAS,CAAC,UAAU,CACrB,CACF,CACF;qBACA,GAAG,EAAE,CAAC;YACX,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,OAAgB,EAChB,YAAmC;IAEnC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,eAAe,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IAClE,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,OAAO,gDAAgD,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+CAA+C,CACnE,OAAgB,EAChB,WAAkC;IAElC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,eAAe,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IAClE,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,OAAO,4DAA4D,CACjE,EAAE,EACF,WAAW,CACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,OAAgB,EAChB,UAAwD;IAExD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,eAAe,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IAClE,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,OAAO,iDAAiD,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAChE,OAAgB,EAChB,YAAmC,EACnC,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,eAAe,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IAClE,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,wCAAwC,CACvE,EAAE,EACF,MAAM,gDAAgD,CAAC,EAAE,EAAE,YAAY,CAAC,CACzE,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,uEAAuE;QACvE,+DAA+D;QAC/D,MAAM,wBAAwB,CAAC,OAAO,EAAE,CAAC,aAAa,EAAE,EAAE,CACxD,iCAAiC,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,WAAW,CAC7D,KAAK,EAAE,EAAE,EAAE,EAAE,CACX,wCAAwC,CACtC,EAAE,EACF,CAAC,MAAM,wCAAwC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;aAC3D,QAAQ,CACZ,CACJ,CACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI;SACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,CAAC,YAAY;KAC7B,CAAC,CAAC,CAAC;AACR,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAgB,EAChB,UAAkB;IAElB,MAAM,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;SACnD,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC,EACzC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,CACrC,CACF,CAAC;IACJ,OAAO,GAAG,EAAE,WAAW,IAAI,CAAC,CAAC;AAC/B,CAAC","sourcesContent":["import { and, eq, max } from \"drizzle-orm\";\nimport {\n  containerDocumentTombstoneHolds,\n  documentContainerProjectionTables,\n  documents,\n  documentTables,\n} from \"../../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport {\n  type ExecSql,\n  ensureSqlTables,\n  runSerializedSqlMutation,\n} from \"../../sqlite/sqlSchema\";\nimport { DOCUMENTS_APP_KIND } from \"./internal/constants\";\nimport {\n  type ContainerDocumentPlacementKey,\n  type ContainerDocumentTombstoneHoldRow,\n  deleteContainerDocumentTombstoneHoldRows,\n  type HeldContainerDocumentTombstone,\n  holdContainerDocumentTombstonesInTransaction,\n  listContainerDocumentTombstoneHoldsForDocumentsInTransaction,\n  listContainerDocumentTombstoneHoldsInTransaction,\n  listKnownContainerDocumentPlacementsInTransaction,\n  partitionContainerDocumentTombstoneHolds,\n} from \"./internal/containerDocumentTombstoneHolds\";\n\nexport {\n  type ContainerDocumentPlacementKey,\n  containerDocumentPlacementKey,\n  deleteContainerDocumentTombstoneHoldRowsForLinks,\n  deleteContainerDocumentTombstoneHoldsForContainers,\n  deleteContainerDocumentTombstoneHoldsForDocuments,\n  type HeldContainerDocumentTombstone,\n} from \"./internal/containerDocumentTombstoneHolds\";\n\n/**\n * Retry backoff for a held tombstone: fifteen minutes after the first failed\n * verification, doubling on every further failure up to 32 hours. An\n * honest hold that can never verify (the requester lost read access to the\n * document, or it was purged elsewhere) would otherwise cost a head fetch on\n * every discovery of its container for as long as the container exists.\n */\nexport const HELD_TOMBSTONE_RETRY_INTERVAL_MS = 15 * 60 * 1000;\nconst HELD_TOMBSTONE_MAX_BACKOFF_DOUBLINGS = 7;\n\nexport function heldTombstoneRetryDelayMs(attempts: number): number {\n  const doublings = Math.min(\n    Math.max(attempts, 1) - 1,\n    HELD_TOMBSTONE_MAX_BACKOFF_DOUBLINGS,\n  );\n  return HELD_TOMBSTONE_RETRY_INTERVAL_MS * 2 ** doublings;\n}\n\nfunction isHoldDue(\n  hold: ContainerDocumentTombstoneHoldRow,\n  now: Date,\n): boolean {\n  return (\n    Date.parse(hold.updatedAt) + heldTombstoneRetryDelayMs(hold.attempts) <=\n    now.getTime()\n  );\n}\n\nexport async function holdContainerDocumentTombstones(\n  execSql: ExecSql,\n  tombstones: ReadonlyArray<HeldContainerDocumentTombstone>,\n  now = new Date().toISOString(),\n): Promise<void> {\n  if (tombstones.length === 0) return;\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await ensureSqlTables(lockedExecSql, documentContainerProjectionTables);\n    const { db } = getClientSQLitePersistenceRuntime(lockedExecSql);\n    await db.transaction((tx) =>\n      holdContainerDocumentTombstonesInTransaction(tx, tombstones, now),\n    );\n  });\n}\n\nexport async function refuteContainerDocumentTombstoneHolds(\n  execSql: ExecSql,\n  placements: ReadonlyArray<ContainerDocumentPlacementKey>,\n): Promise<void> {\n  if (placements.length === 0) return;\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await ensureSqlTables(lockedExecSql, documentContainerProjectionTables);\n    const { db } = getClientSQLitePersistenceRuntime(lockedExecSql);\n    await db.transaction(async (tx) => {\n      for (const placement of placements) {\n        await tx\n          .update(containerDocumentTombstoneHolds)\n          .set({ hidden: false })\n          .where(\n            and(\n              eq(\n                containerDocumentTombstoneHolds.containerId,\n                placement.containerId,\n              ),\n              eq(\n                containerDocumentTombstoneHolds.documentId,\n                placement.documentId,\n              ),\n            ),\n          )\n          .run();\n      }\n    });\n  });\n}\n\nexport async function listContainerDocumentTombstoneHolds(\n  execSql: ExecSql,\n  containerIds: ReadonlyArray<string>,\n): Promise<ContainerDocumentTombstoneHoldRow[]> {\n  if (containerIds.length === 0) return [];\n  await ensureSqlTables(execSql, documentContainerProjectionTables);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  return listContainerDocumentTombstoneHoldsInTransaction(db, containerIds);\n}\n\nexport async function listContainerDocumentTombstoneHoldsForDocuments(\n  execSql: ExecSql,\n  documentIds: ReadonlyArray<string>,\n): Promise<ContainerDocumentPlacementKey[]> {\n  if (documentIds.length === 0) return [];\n  await ensureSqlTables(execSql, documentContainerProjectionTables);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  return listContainerDocumentTombstoneHoldsForDocumentsInTransaction(\n    db,\n    documentIds,\n  );\n}\n\nexport async function listKnownContainerDocumentPlacements(\n  execSql: ExecSql,\n  placements: ReadonlyArray<ContainerDocumentPlacementKey>,\n): Promise<ContainerDocumentPlacementKey[]> {\n  if (placements.length === 0) return [];\n  await ensureSqlTables(execSql, documentContainerProjectionTables);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  return listKnownContainerDocumentPlacementsInTransaction(db, placements);\n}\n\n/**\n * The held tombstones on the given containers that are due for another\n * verification attempt. Holds whose placement is gone are pruned first; that\n * is the only write, and it is taken under the mutation lock only when there\n * is something to prune.\n */\nexport async function listRetryableHeldContainerDocumentTombstones(\n  execSql: ExecSql,\n  containerIds: ReadonlyArray<string>,\n  now = new Date(),\n): Promise<HeldContainerDocumentTombstone[]> {\n  if (containerIds.length === 0) return [];\n  await ensureSqlTables(execSql, documentContainerProjectionTables);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const { live, orphaned } = await partitionContainerDocumentTombstoneHolds(\n    db,\n    await listContainerDocumentTombstoneHoldsInTransaction(db, containerIds),\n  );\n  if (orphaned.length > 0) {\n    // Re-check under the lock: a hold re-created between the unlocked read\n    // and this write is hiding a placement again and must survive.\n    await runSerializedSqlMutation(execSql, (lockedExecSql) =>\n      getClientSQLitePersistenceRuntime(lockedExecSql).db.transaction(\n        async (tx) =>\n          deleteContainerDocumentTombstoneHoldRows(\n            tx,\n            (await partitionContainerDocumentTombstoneHolds(tx, orphaned))\n              .orphaned,\n          ),\n      ),\n    );\n  }\n  return live\n    .filter((hold) => isHoldDue(hold, now))\n    .map((hold) => ({\n      containerId: hold.containerId,\n      documentId: hold.documentId,\n      updatedAt: hold.tombstonedAt,\n    }));\n}\n\n/** Ordinary-document floors must exclude unsigned container-metadata epochs. */\nexport async function loadLocalDocumentAccessEpoch(\n  execSql: ExecSql,\n  documentId: string,\n): Promise<number> {\n  await ensureSqlTables(execSql, documentTables);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const [row] = await db\n    .select({ accessEpoch: max(documents.accessEpoch) })\n    .from(documents)\n    .where(\n      and(\n        eq(documents.appKind, DOCUMENTS_APP_KIND),\n        eq(documents.documentId, documentId),\n      ),\n    );\n  return row?.accessEpoch ?? 0;\n}\n"]}

package/data/persistence/documents/documentDiscoveryCandidate.d.ts

@@ -0,0 +1,6 @@
+import type { DiscoveredDocumentInput } from "../../documents/documentSummary.js";
+export interface DiscoveredDocumentCandidate extends DiscoveredDocumentInput {
+    readonly listedContainerIds: readonly string[];
+}
+export declare function isDiscoveredDocumentCandidate(value: unknown): value is DiscoveredDocumentCandidate;
+export declare function readStoredDiscoveryCandidate(json: string): DiscoveredDocumentCandidate;

package/data/persistence/documents/documentDiscoveryCandidate.js

@@ -0,0 +1,33 @@
+import { isPlainObject } from "../../../internal/validators/isPlainObject.js";
+import { readRecordValue } from "../../recordReaders.js";
+function isStringArray(value) {
+    return (Array.isArray(value) && value.every((item) => typeof item === "string"));
+}
+export function isDiscoveredDocumentCandidate(value) {
+    if (!isPlainObject(value))
+        return false;
+    const level = readRecordValue(value, "effectiveAccessLevel");
+    const hash = readRecordValue(value, "accessStateHash");
+    const epoch = readRecordValue(value, "accessEpoch");
+    return (typeof readRecordValue(value, "documentId") === "string" &&
+        typeof readRecordValue(value, "containerId") === "string" &&
+        typeof readRecordValue(value, "createdAt") === "string" &&
+        typeof epoch === "number" &&
+        Number.isSafeInteger(epoch) &&
+        epoch > 0 &&
+        (hash === undefined || hash === null || typeof hash === "string") &&
+        (level === undefined ||
+            level === "admin" ||
+            level === "read" ||
+            level === "write") &&
+        isStringArray(readRecordValue(value, "linkedContainerIds")) &&
+        isStringArray(readRecordValue(value, "listedContainerIds")));
+}
+export function readStoredDiscoveryCandidate(json) {
+    const value = JSON.parse(json);
+    if (!isDiscoveredDocumentCandidate(value))
+        throw new Error("Stored document discovery candidate is invalid");
+    // Preserve property order: acknowledgements compare the exact stored input.
+    return value;
+}
+//# sourceMappingURL=documentDiscoveryCandidate.js.map

package/data/persistence/documents/documentDiscoveryCandidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentDiscoveryCandidate.js","sourceRoot":"","sources":["documentDiscoveryCandidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAMtD,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAc;IAEd,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACpD,OAAO,CACL,OAAO,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,QAAQ;QACxD,OAAO,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,QAAQ;QACzD,OAAO,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,QAAQ;QACvD,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,KAAK,GAAG,CAAC;QACT,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;QACjE,CAAC,KAAK,KAAK,SAAS;YAClB,KAAK,KAAK,OAAO;YACjB,KAAK,KAAK,MAAM;YAChB,KAAK,KAAK,OAAO,CAAC;QACpB,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAC3D,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,IAAY;IAEZ,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,4EAA4E;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { isPlainObject } from \"@tearleads/validators/isPlainObject\";\nimport type { DiscoveredDocumentInput } from \"../../documents/documentSummary\";\nimport { readRecordValue } from \"../../recordReaders\";\n\nexport interface DiscoveredDocumentCandidate extends DiscoveredDocumentInput {\n  readonly listedContainerIds: readonly string[];\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return (\n    Array.isArray(value) && value.every((item) => typeof item === \"string\")\n  );\n}\n\nexport function isDiscoveredDocumentCandidate(\n  value: unknown,\n): value is DiscoveredDocumentCandidate {\n  if (!isPlainObject(value)) return false;\n  const level = readRecordValue(value, \"effectiveAccessLevel\");\n  const hash = readRecordValue(value, \"accessStateHash\");\n  const epoch = readRecordValue(value, \"accessEpoch\");\n  return (\n    typeof readRecordValue(value, \"documentId\") === \"string\" &&\n    typeof readRecordValue(value, \"containerId\") === \"string\" &&\n    typeof readRecordValue(value, \"createdAt\") === \"string\" &&\n    typeof epoch === \"number\" &&\n    Number.isSafeInteger(epoch) &&\n    epoch > 0 &&\n    (hash === undefined || hash === null || typeof hash === \"string\") &&\n    (level === undefined ||\n      level === \"admin\" ||\n      level === \"read\" ||\n      level === \"write\") &&\n    isStringArray(readRecordValue(value, \"linkedContainerIds\")) &&\n    isStringArray(readRecordValue(value, \"listedContainerIds\"))\n  );\n}\n\nexport function readStoredDiscoveryCandidate(\n  json: string,\n): DiscoveredDocumentCandidate {\n  const value: unknown = JSON.parse(json);\n  if (!isDiscoveredDocumentCandidate(value))\n    throw new Error(\"Stored document discovery candidate is invalid\");\n  // Preserve property order: acknowledgements compare the exact stored input.\n  return value;\n}\n"]}

package/data/persistence/documents/documentDiscoveryEvidencePersistence.d.ts

@@ -0,0 +1,26 @@
+import { type ExecSql } from "../../sqlite/sqlSchema.js";
+import { type DiscoveredDocumentCandidate } from "./documentDiscoveryCandidate.js";
+export type { DiscoveredDocumentCandidate } from "./documentDiscoveryCandidate.js";
+export interface CachedDiscoveryHead {
+    readonly organizationId: string | null;
+    readonly accessEpoch: number;
+    readonly accessStateHash?: string;
+    readonly linkedContainerIds: readonly string[];
+}
+interface RemovedDiscoveryPlacement {
+    readonly containerId: string;
+    readonly documentId: string;
+}
+export interface DocumentDiscoveryEvidenceStore {
+    begin(): Promise<number>;
+    isCurrent(generation: number): Promise<boolean>;
+    stage(inputs: readonly DiscoveredDocumentCandidate[], generation: number, removed?: readonly RemovedDiscoveryPlacement[]): Promise<boolean>;
+    pending(containerIds: readonly string[], limit: number): Promise<readonly DiscoveredDocumentCandidate[]>;
+    defer(input: DiscoveredDocumentCandidate, generation: number): Promise<void>;
+    acknowledge(inputs: readonly DiscoveredDocumentCandidate[], generation: number): Promise<void>;
+    hasPending(containerIds: readonly string[]): Promise<boolean>;
+    retryDelay(containerIds: readonly string[]): Promise<number | null>;
+    loadHead(documentId: string, manifestHash: string | null | undefined): Promise<CachedDiscoveryHead | null>;
+    saveHead(documentId: string, head: CachedDiscoveryHead, generation: number): Promise<boolean>;
+}
+export declare function createDocumentDiscoveryEvidenceStore(execSql: ExecSql, now?: () => number): DocumentDiscoveryEvidenceStore;