@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/data/persistence/documents/internal/attachmentRows.js

@@ -0,0 +1,78 @@
+export function buildPendingAttachmentRow(attachment, createdAt) {
+    return {
+        byteLength: attachment.byteLength,
+        contentSha256: attachment.contentSha256,
+        createdAt,
+        localId: attachment.localId,
+        mimeType: attachment.mimeType,
+        name: attachment.name,
+        slotId: attachment.slotId,
+        storageKey: attachment.storageKey,
+        uploadBlobId: attachment.upload?.blobId ?? null,
+        uploadContentKey: attachment.upload?.contentKey ?? null,
+        uploadContentKeyEpoch: attachment.upload?.contentKeyEpoch ?? null,
+        uploadIv: attachment.upload?.nonceSeed ?? null,
+        uploadPartSize: attachment.upload?.partSize ?? null,
+        uploadPlaintextSha256: attachment.upload?.plaintextSha256 ?? null,
+        uploadStageId: attachment.upload?.stageId ?? null,
+    };
+}
+export function mapPendingAttachmentRecord(row) {
+    const identityFields = [
+        row.uploadBlobId,
+        row.uploadContentKey,
+        row.uploadIv,
+        row.uploadContentKeyEpoch,
+        row.uploadPlaintextSha256,
+    ];
+    const hasIdentityField = identityFields.some((value) => value !== null);
+    const hasCompleteIdentity = identityFields.every((value) => value !== null);
+    if (hasIdentityField !== hasCompleteIdentity) {
+        throw new Error("Pending attachment upload identity is incomplete.");
+    }
+    if ((row.uploadPartSize === null) !== (row.uploadStageId === null)) {
+        throw new Error("Pending attachment multipart identity is incomplete.");
+    }
+    if (!hasIdentityField && row.uploadPartSize !== null) {
+        throw new Error("Pending attachment multipart identity has no upload.");
+    }
+    let upload = null;
+    if (row.uploadBlobId !== null &&
+        row.uploadContentKey !== null &&
+        row.uploadIv !== null &&
+        row.uploadContentKeyEpoch !== null &&
+        row.uploadPlaintextSha256 !== null) {
+        upload = {
+            blobId: row.uploadBlobId,
+            contentKey: row.uploadContentKey,
+            contentKeyEpoch: row.uploadContentKeyEpoch,
+            nonceSeed: row.uploadIv,
+            partSize: row.uploadPartSize,
+            plaintextSha256: row.uploadPlaintextSha256,
+            stageId: row.uploadStageId,
+        };
+    }
+    return {
+        byteLength: row.byteLength,
+        contentSha256: row.contentSha256,
+        localId: row.localId,
+        mimeType: row.mimeType,
+        name: row.name,
+        slotId: row.slotId,
+        storageKey: row.storageKey,
+        upload,
+    };
+}
+export function mapLocalAttachmentRecord(row) {
+    return {
+        blobId: row.blobId,
+        byteLength: row.byteLength,
+        contentSha256: row.contentSha256,
+        detachedAt: row.detachedAt,
+        localId: row.localId,
+        mimeType: row.mimeType,
+        slotId: row.slotId,
+        storageKey: row.storageKey,
+    };
+}
+//# sourceMappingURL=attachmentRows.js.map

package/data/persistence/documents/internal/attachmentRows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachmentRows.js","sourceRoot":"","sources":["attachmentRows.ts"],"names":[],"mappings":"AAkCA,MAAM,UAAU,yBAAyB,CACvC,UAAmC,EACnC,SAAiB;IAEjB,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,SAAS;QACT,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,YAAY,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI;QAC/C,gBAAgB,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI;QACvD,qBAAqB,EAAE,UAAU,CAAC,MAAM,EAAE,eAAe,IAAI,IAAI;QACjE,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,IAAI,IAAI;QAC9C,cAAc,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,IAAI,IAAI;QACnD,qBAAqB,EAAE,UAAU,CAAC,MAAM,EAAE,eAAe,IAAI,IAAI;QACjE,aAAa,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,GAA8B;IAE9B,MAAM,cAAc,GAAG;QACrB,GAAG,CAAC,YAAY;QAChB,GAAG,CAAC,gBAAgB;QACpB,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,qBAAqB;QACzB,GAAG,CAAC,qBAAqB;KAC1B,CAAC;IACF,MAAM,gBAAgB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IACxE,MAAM,mBAAmB,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAC5E,IAAI,gBAAgB,KAAK,mBAAmB,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,gBAAgB,IAAI,GAAG,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,MAAM,GAA2C,IAAI,CAAC;IAC1D,IACE,GAAG,CAAC,YAAY,KAAK,IAAI;QACzB,GAAG,CAAC,gBAAgB,KAAK,IAAI;QAC7B,GAAG,CAAC,QAAQ,KAAK,IAAI;QACrB,GAAG,CAAC,qBAAqB,KAAK,IAAI;QAClC,GAAG,CAAC,qBAAqB,KAAK,IAAI,EAClC,CAAC;QACD,MAAM,GAAG;YACP,MAAM,EAAE,GAAG,CAAC,YAAY;YACxB,UAAU,EAAE,GAAG,CAAC,gBAAgB;YAChC,eAAe,EAAE,GAAG,CAAC,qBAAqB;YAC1C,SAAS,EAAE,GAAG,CAAC,QAAQ;YACvB,QAAQ,EAAE,GAAG,CAAC,cAAc;YAC5B,eAAe,EAAE,GAAG,CAAC,qBAAqB;YAC1C,OAAO,EAAE,GAAG,CAAC,aAAa;SAC3B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,GAA4B;IAE5B,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  LocalAttachmentRecord,\n  PendingAttachmentRecord,\n  PendingAttachmentUploadIdentity,\n} from \"../types\";\n\ninterface SelectedPendingAttachment {\n  localId: string;\n  slotId: string;\n  name: string;\n  mimeType: string | null;\n  storageKey: string;\n  byteLength: number;\n  contentSha256: string;\n  uploadBlobId: string | null;\n  uploadContentKey: string | null;\n  uploadIv: string | null;\n  uploadContentKeyEpoch: number | null;\n  uploadPartSize: number | null;\n  uploadPlaintextSha256: string | null;\n  uploadStageId: string | null;\n}\n\ninterface SelectedLocalAttachment {\n  localId: string;\n  slotId: string;\n  blobId: string | null;\n  storageKey: string;\n  mimeType: string | null;\n  byteLength: number;\n  contentSha256: string;\n  detachedAt: string | null;\n}\n\nexport function buildPendingAttachmentRow(\n  attachment: PendingAttachmentRecord,\n  createdAt: string,\n) {\n  return {\n    byteLength: attachment.byteLength,\n    contentSha256: attachment.contentSha256,\n    createdAt,\n    localId: attachment.localId,\n    mimeType: attachment.mimeType,\n    name: attachment.name,\n    slotId: attachment.slotId,\n    storageKey: attachment.storageKey,\n    uploadBlobId: attachment.upload?.blobId ?? null,\n    uploadContentKey: attachment.upload?.contentKey ?? null,\n    uploadContentKeyEpoch: attachment.upload?.contentKeyEpoch ?? null,\n    uploadIv: attachment.upload?.nonceSeed ?? null,\n    uploadPartSize: attachment.upload?.partSize ?? null,\n    uploadPlaintextSha256: attachment.upload?.plaintextSha256 ?? null,\n    uploadStageId: attachment.upload?.stageId ?? null,\n  };\n}\n\nexport function mapPendingAttachmentRecord(\n  row: SelectedPendingAttachment,\n): PendingAttachmentRecord {\n  const identityFields = [\n    row.uploadBlobId,\n    row.uploadContentKey,\n    row.uploadIv,\n    row.uploadContentKeyEpoch,\n    row.uploadPlaintextSha256,\n  ];\n  const hasIdentityField = identityFields.some((value) => value !== null);\n  const hasCompleteIdentity = identityFields.every((value) => value !== null);\n  if (hasIdentityField !== hasCompleteIdentity) {\n    throw new Error(\"Pending attachment upload identity is incomplete.\");\n  }\n  if ((row.uploadPartSize === null) !== (row.uploadStageId === null)) {\n    throw new Error(\"Pending attachment multipart identity is incomplete.\");\n  }\n  if (!hasIdentityField && row.uploadPartSize !== null) {\n    throw new Error(\"Pending attachment multipart identity has no upload.\");\n  }\n\n  let upload: PendingAttachmentUploadIdentity | null = null;\n  if (\n    row.uploadBlobId !== null &&\n    row.uploadContentKey !== null &&\n    row.uploadIv !== null &&\n    row.uploadContentKeyEpoch !== null &&\n    row.uploadPlaintextSha256 !== null\n  ) {\n    upload = {\n      blobId: row.uploadBlobId,\n      contentKey: row.uploadContentKey,\n      contentKeyEpoch: row.uploadContentKeyEpoch,\n      nonceSeed: row.uploadIv,\n      partSize: row.uploadPartSize,\n      plaintextSha256: row.uploadPlaintextSha256,\n      stageId: row.uploadStageId,\n    };\n  }\n  return {\n    byteLength: row.byteLength,\n    contentSha256: row.contentSha256,\n    localId: row.localId,\n    mimeType: row.mimeType,\n    name: row.name,\n    slotId: row.slotId,\n    storageKey: row.storageKey,\n    upload,\n  };\n}\n\nexport function mapLocalAttachmentRecord(\n  row: SelectedLocalAttachment,\n): LocalAttachmentRecord {\n  return {\n    blobId: row.blobId,\n    byteLength: row.byteLength,\n    contentSha256: row.contentSha256,\n    detachedAt: row.detachedAt,\n    localId: row.localId,\n    mimeType: row.mimeType,\n    slotId: row.slotId,\n    storageKey: row.storageKey,\n  };\n}\n"]}

package/data/persistence/documents/internal/attachmentStagingPersistence.js

@@ -0,0 +1,99 @@
+import { and, eq, isNull } from "drizzle-orm";
+import { documentAttachmentBlobProjection, documentPendingAttachments, } from "../../../sqlite/schema.js";
+import { buildPendingAttachmentRow } from "./attachmentRows.js";
+import { queueDocumentAttachmentStorageKeys } from "./orphanSideRows.js";
+export async function applyStoredAttachmentRemoval(input) {
+    const { localId, removal, tx } = input;
+    const pendingMatch = and(eq(documentPendingAttachments.localId, localId), eq(documentPendingAttachments.slotId, removal.slotId), eq(documentPendingAttachments.storageKey, removal.storageKey));
+    const localMatch = and(eq(documentAttachmentBlobProjection.localId, localId), eq(documentAttachmentBlobProjection.slotId, removal.slotId), eq(documentAttachmentBlobProjection.storageKey, removal.storageKey));
+    await tx.delete(documentPendingAttachments).where(pendingMatch).run();
+    if (removal.mode === "detach") {
+        await tx
+            .update(documentAttachmentBlobProjection)
+            .set({ detachedAt: new Date().toISOString() })
+            .where(and(localMatch, isNull(documentAttachmentBlobProjection.detachedAt)))
+            .run();
+        return;
+    }
+    await queueDocumentAttachmentStorageKeys(tx, [removal.storageKey]);
+    await tx.delete(documentAttachmentBlobProjection).where(localMatch).run();
+}
+function assertAttachmentScope(localId, staging) {
+    const everyAttachmentMatchesScope = [
+        ...staging.localAttachments,
+        ...staging.pendingAttachments,
+    ].every((attachment) => attachment.localId === localId);
+    if (!everyAttachmentMatchesScope) {
+        throw new Error("Attachment staging rows must share one document scope");
+    }
+}
+export async function upsertStoredAttachmentStagingRows(input) {
+    const { createdAt, localId, staging, tx } = input;
+    assertAttachmentScope(localId, staging);
+    for (const attachment of staging.pendingAttachments) {
+        const row = buildPendingAttachmentRow(attachment, createdAt);
+        const [existing] = await tx
+            .select({ storageKey: documentPendingAttachments.storageKey })
+            .from(documentPendingAttachments)
+            .where(and(eq(documentPendingAttachments.localId, localId), eq(documentPendingAttachments.slotId, attachment.slotId)))
+            .limit(1);
+        if (existing && existing.storageKey !== row.storageKey) {
+            await queueDocumentAttachmentStorageKeys(tx, [existing.storageKey]);
+        }
+        await tx
+            .insert(documentPendingAttachments)
+            .values(row)
+            .onConflictDoUpdate({
+            target: [
+                documentPendingAttachments.localId,
+                documentPendingAttachments.slotId,
+            ],
+            set: {
+                byteLength: row.byteLength,
+                contentSha256: row.contentSha256,
+                mimeType: row.mimeType,
+                name: row.name,
+                storageKey: row.storageKey,
+                uploadBlobId: row.uploadBlobId,
+                uploadContentKey: row.uploadContentKey,
+                uploadContentKeyEpoch: row.uploadContentKeyEpoch,
+                uploadIv: row.uploadIv,
+                uploadPartSize: row.uploadPartSize,
+                uploadPlaintextSha256: row.uploadPlaintextSha256,
+                uploadStageId: row.uploadStageId,
+            },
+        })
+            .run();
+    }
+    for (const attachment of staging.localAttachments) {
+        const row = { ...attachment, updatedAt: createdAt };
+        const [existing] = await tx
+            .select({ storageKey: documentAttachmentBlobProjection.storageKey })
+            .from(documentAttachmentBlobProjection)
+            .where(and(eq(documentAttachmentBlobProjection.localId, localId), eq(documentAttachmentBlobProjection.slotId, attachment.slotId)))
+            .limit(1);
+        if (existing && existing.storageKey !== row.storageKey) {
+            await queueDocumentAttachmentStorageKeys(tx, [existing.storageKey]);
+        }
+        await tx
+            .insert(documentAttachmentBlobProjection)
+            .values(row)
+            .onConflictDoUpdate({
+            target: [
+                documentAttachmentBlobProjection.localId,
+                documentAttachmentBlobProjection.slotId,
+            ],
+            set: {
+                blobId: row.blobId,
+                byteLength: row.byteLength,
+                contentSha256: row.contentSha256,
+                detachedAt: row.detachedAt,
+                mimeType: row.mimeType,
+                storageKey: row.storageKey,
+                updatedAt: row.updatedAt,
+            },
+        })
+            .run();
+    }
+}
+//# sourceMappingURL=attachmentStagingPersistence.js.map

package/data/persistence/documents/internal/attachmentStagingPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachmentStagingPersistence.js","sourceRoot":"","sources":["attachmentStagingPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,kCAAkC,EAAE,MAAM,kBAAkB,CAAC;AAatE,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAIlD;IACC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACvC,MAAM,YAAY,GAAG,GAAG,CACtB,EAAE,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,EAC/C,EAAE,CAAC,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EACrD,EAAE,CAAC,0BAA0B,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAC9D,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,CACpB,EAAE,CAAC,gCAAgC,CAAC,OAAO,EAAE,OAAO,CAAC,EACrD,EAAE,CAAC,gCAAgC,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAC3D,EAAE,CAAC,gCAAgC,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CACpE,CAAC;IACF,MAAM,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC;IACtE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,EAAE;aACL,MAAM,CAAC,gCAAgC,CAAC;aACxC,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;aAC7C,KAAK,CACJ,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,gCAAgC,CAAC,UAAU,CAAC,CAAC,CACrE;aACA,GAAG,EAAE,CAAC;QACT,OAAO;IACT,CAAC;IACD,MAAM,kCAAkC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACnE,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAe,EACf,OAA0B;IAE1B,MAAM,2BAA2B,GAAG;QAClC,GAAG,OAAO,CAAC,gBAAgB;QAC3B,GAAG,OAAO,CAAC,kBAAkB;KAC9B,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAKvD;IACC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IAClD,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAExC,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,yBAAyB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;aACxB,MAAM,CAAC,EAAE,UAAU,EAAE,0BAA0B,CAAC,UAAU,EAAE,CAAC;aAC7D,IAAI,CAAC,0BAA0B,CAAC;aAChC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,EAC/C,EAAE,CAAC,0BAA0B,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CACzD,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU,EAAE,CAAC;YACvD,MAAM,kCAAkC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,EAAE;aACL,MAAM,CAAC,0BAA0B,CAAC;aAClC,MAAM,CAAC,GAAG,CAAC;aACX,kBAAkB,CAAC;YAClB,MAAM,EAAE;gBACN,0BAA0B,CAAC,OAAO;gBAClC,0BAA0B,CAAC,MAAM;aAClC;YACD,GAAG,EAAE;gBACH,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;gBAChD,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;gBAChD,aAAa,EAAE,GAAG,CAAC,aAAa;aACjC;SACF,CAAC;aACD,GAAG,EAAE,CAAC;IACX,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QACpD,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;aACxB,MAAM,CAAC,EAAE,UAAU,EAAE,gCAAgC,CAAC,UAAU,EAAE,CAAC;aACnE,IAAI,CAAC,gCAAgC,CAAC;aACtC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gCAAgC,CAAC,OAAO,EAAE,OAAO,CAAC,EACrD,EAAE,CAAC,gCAAgC,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAC/D,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU,EAAE,CAAC;YACvD,MAAM,kCAAkC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,EAAE;aACL,MAAM,CAAC,gCAAgC,CAAC;aACxC,MAAM,CAAC,GAAG,CAAC;aACX,kBAAkB,CAAC;YAClB,MAAM,EAAE;gBACN,gCAAgC,CAAC,OAAO;gBACxC,gCAAgC,CAAC,MAAM;aACxC;YACD,GAAG,EAAE;gBACH,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB;SACF,CAAC;aACD,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC","sourcesContent":["import { and, eq, isNull } from \"drizzle-orm\";\nimport {\n  documentAttachmentBlobProjection,\n  documentPendingAttachments,\n} from \"../../../sqlite/schema\";\nimport type { ClientSQLiteTransactionScope } from \"../../../sqlite/sqlitePersistenceRuntime\";\nimport type { DocumentsPersistence } from \"../types\";\nimport { buildPendingAttachmentRow } from \"./attachmentRows\";\nimport { queueDocumentAttachmentStorageKeys } from \"./orphanSideRows\";\n\ntype AttachmentStaging = NonNullable<\n  Parameters<\n    DocumentsPersistence[\"commitDocumentMutation\"]\n  >[1][\"attachmentStaging\"]\n>;\ntype AttachmentRemoval = NonNullable<\n  Parameters<\n    DocumentsPersistence[\"commitDocumentMutation\"]\n  >[1][\"attachmentRemoval\"]\n>;\n\nexport async function applyStoredAttachmentRemoval(input: {\n  localId: string;\n  removal: AttachmentRemoval;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  const { localId, removal, tx } = input;\n  const pendingMatch = and(\n    eq(documentPendingAttachments.localId, localId),\n    eq(documentPendingAttachments.slotId, removal.slotId),\n    eq(documentPendingAttachments.storageKey, removal.storageKey),\n  );\n  const localMatch = and(\n    eq(documentAttachmentBlobProjection.localId, localId),\n    eq(documentAttachmentBlobProjection.slotId, removal.slotId),\n    eq(documentAttachmentBlobProjection.storageKey, removal.storageKey),\n  );\n  await tx.delete(documentPendingAttachments).where(pendingMatch).run();\n  if (removal.mode === \"detach\") {\n    await tx\n      .update(documentAttachmentBlobProjection)\n      .set({ detachedAt: new Date().toISOString() })\n      .where(\n        and(localMatch, isNull(documentAttachmentBlobProjection.detachedAt)),\n      )\n      .run();\n    return;\n  }\n  await queueDocumentAttachmentStorageKeys(tx, [removal.storageKey]);\n  await tx.delete(documentAttachmentBlobProjection).where(localMatch).run();\n}\n\nfunction assertAttachmentScope(\n  localId: string,\n  staging: AttachmentStaging,\n): void {\n  const everyAttachmentMatchesScope = [\n    ...staging.localAttachments,\n    ...staging.pendingAttachments,\n  ].every((attachment) => attachment.localId === localId);\n  if (!everyAttachmentMatchesScope) {\n    throw new Error(\"Attachment staging rows must share one document scope\");\n  }\n}\n\nexport async function upsertStoredAttachmentStagingRows(input: {\n  createdAt: string;\n  localId: string;\n  staging: AttachmentStaging;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  const { createdAt, localId, staging, tx } = input;\n  assertAttachmentScope(localId, staging);\n\n  for (const attachment of staging.pendingAttachments) {\n    const row = buildPendingAttachmentRow(attachment, createdAt);\n    const [existing] = await tx\n      .select({ storageKey: documentPendingAttachments.storageKey })\n      .from(documentPendingAttachments)\n      .where(\n        and(\n          eq(documentPendingAttachments.localId, localId),\n          eq(documentPendingAttachments.slotId, attachment.slotId),\n        ),\n      )\n      .limit(1);\n    if (existing && existing.storageKey !== row.storageKey) {\n      await queueDocumentAttachmentStorageKeys(tx, [existing.storageKey]);\n    }\n    await tx\n      .insert(documentPendingAttachments)\n      .values(row)\n      .onConflictDoUpdate({\n        target: [\n          documentPendingAttachments.localId,\n          documentPendingAttachments.slotId,\n        ],\n        set: {\n          byteLength: row.byteLength,\n          contentSha256: row.contentSha256,\n          mimeType: row.mimeType,\n          name: row.name,\n          storageKey: row.storageKey,\n          uploadBlobId: row.uploadBlobId,\n          uploadContentKey: row.uploadContentKey,\n          uploadContentKeyEpoch: row.uploadContentKeyEpoch,\n          uploadIv: row.uploadIv,\n          uploadPartSize: row.uploadPartSize,\n          uploadPlaintextSha256: row.uploadPlaintextSha256,\n          uploadStageId: row.uploadStageId,\n        },\n      })\n      .run();\n  }\n\n  for (const attachment of staging.localAttachments) {\n    const row = { ...attachment, updatedAt: createdAt };\n    const [existing] = await tx\n      .select({ storageKey: documentAttachmentBlobProjection.storageKey })\n      .from(documentAttachmentBlobProjection)\n      .where(\n        and(\n          eq(documentAttachmentBlobProjection.localId, localId),\n          eq(documentAttachmentBlobProjection.slotId, attachment.slotId),\n        ),\n      )\n      .limit(1);\n    if (existing && existing.storageKey !== row.storageKey) {\n      await queueDocumentAttachmentStorageKeys(tx, [existing.storageKey]);\n    }\n    await tx\n      .insert(documentAttachmentBlobProjection)\n      .values(row)\n      .onConflictDoUpdate({\n        target: [\n          documentAttachmentBlobProjection.localId,\n          documentAttachmentBlobProjection.slotId,\n        ],\n        set: {\n          blobId: row.blobId,\n          byteLength: row.byteLength,\n          contentSha256: row.contentSha256,\n          detachedAt: row.detachedAt,\n          mimeType: row.mimeType,\n          storageKey: row.storageKey,\n          updatedAt: row.updatedAt,\n        },\n      })\n      .run();\n  }\n}\n"]}

package/data/persistence/documents/internal/constants.d.ts

@@ -0,0 +1 @@
+export declare const DOCUMENTS_APP_KIND = "documents";

package/data/persistence/documents/internal/constants.js

@@ -0,0 +1,2 @@
+export const DOCUMENTS_APP_KIND = "documents";
+//# sourceMappingURL=constants.js.map

package/data/persistence/documents/internal/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAC","sourcesContent":["export const DOCUMENTS_APP_KIND = \"documents\";\n"]}

package/data/persistence/documents/internal/containerDocumentTombstoneHolds.js

@@ -0,0 +1,182 @@
+import { and, asc, eq, inArray, sql } from "drizzle-orm";
+import { containerDocumentTombstoneHolds, documentContainerProjection, documentProjection, } from "../../../sqlite/schema.js";
+import { filterWritableDocumentPlacements } from "../../containers/documentPlacement.js";
+/** Keep `IN (...)` lists well under SQLite's bound-parameter limit. */
+const HOLD_SQL_ID_BATCH_SIZE = 400;
+function batches(values) {
+    const unique = Array.from(new Set(values));
+    const result = [];
+    for (let index = 0; index < unique.length; index += HOLD_SQL_ID_BATCH_SIZE) {
+        result.push(unique.slice(index, index + HOLD_SQL_ID_BATCH_SIZE));
+    }
+    return result;
+}
+export function containerDocumentPlacementKey(placement) {
+    return `${placement.documentId}\u0000${placement.containerId}`;
+}
+const placementKey = containerDocumentPlacementKey;
+export async function deleteContainerDocumentTombstoneHoldRows(tx, placements) {
+    for (const placement of placements) {
+        await tx
+            .delete(containerDocumentTombstoneHolds)
+            .where(and(eq(containerDocumentTombstoneHolds.documentId, placement.documentId), eq(containerDocumentTombstoneHolds.containerId, placement.containerId)))
+            .run();
+    }
+}
+/**
+ * A local move takes ownership of a document's placement: the intent, not a
+ * server listing, now says where it lives, so every hold that was hiding one
+ * of its placements is released with the link rewrite.
+ */
+export async function deleteContainerDocumentTombstoneHoldsForDocuments(tx, documentIds) {
+    for (const batch of batches(documentIds)) {
+        await tx
+            .delete(containerDocumentTombstoneHolds)
+            .where(inArray(containerDocumentTombstoneHolds.documentId, batch))
+            .run();
+    }
+}
+/** Holds on containers whose link rows are being removed locally. */
+export async function deleteContainerDocumentTombstoneHoldsForContainers(tx, containerIds) {
+    for (const batch of batches(containerIds)) {
+        await tx
+            .delete(containerDocumentTombstoneHolds)
+            .where(inArray(containerDocumentTombstoneHolds.containerId, batch))
+            .run();
+    }
+}
+/**
+ * The placements among `placements` that exist locally: a link row, or a
+ * document projection row whose primary container is the named container.
+ * A tombstone for any other placement has nothing to remove or hide, so it
+ * is not worth fetching and verifying the document head for.
+ */
+export async function listKnownContainerDocumentPlacementsInTransaction(tx, placements) {
+    const known = new Set();
+    for (const batch of batches(placements.map((entry) => entry.documentId))) {
+        const [linkRows, projectionRows] = await Promise.all([
+            tx
+                .select({
+                containerId: documentContainerProjection.containerId,
+                documentId: documentContainerProjection.documentId,
+            })
+                .from(documentContainerProjection)
+                .where(inArray(documentContainerProjection.documentId, batch)),
+            tx
+                .select({
+                containerId: documentProjection.containerId,
+                documentId: documentProjection.documentId,
+            })
+                .from(documentProjection)
+                .where(inArray(documentProjection.documentId, batch)),
+        ]);
+        for (const row of [...linkRows, ...projectionRows]) {
+            if (row.documentId !== null && row.containerId !== null) {
+                known.add(placementKey({
+                    containerId: row.containerId,
+                    documentId: row.documentId,
+                }));
+            }
+        }
+    }
+    return placements.filter((placement) => known.has(placementKey(placement)));
+}
+/**
+ * Hold listing tombstones whose signed evidence is unavailable. A placement a
+ * pending move intent owns is never held: the intent, not the listing, decides
+ * where the document lives until it settles (`ProtectPendingTombstones`).
+ */
+export async function holdContainerDocumentTombstonesInTransaction(tx, tombstones, now) {
+    const writable = new Set((await filterWritableDocumentPlacements(tx, tombstones.map((tombstone) => ({
+        documentId: tombstone.documentId,
+        containerIds: [],
+    })))).map((input) => input.documentId));
+    for (const tombstone of tombstones) {
+        if (!writable.has(tombstone.documentId))
+            continue;
+        const row = {
+            containerId: tombstone.containerId,
+            documentId: tombstone.documentId,
+            tombstonedAt: tombstone.updatedAt,
+            hidden: !tombstone.refuted,
+            updatedAt: now,
+        };
+        // A deferred hold was not attempted: it keeps its attempt count and its
+        // last-attempt time, so it stays due and is not starved by the cap.
+        await tx
+            .insert(containerDocumentTombstoneHolds)
+            .values({ ...row, attempts: tombstone.deferred ? 0 : 1 })
+            .onConflictDoUpdate({
+            target: [
+                containerDocumentTombstoneHolds.documentId,
+                containerDocumentTombstoneHolds.containerId,
+            ],
+            set: tombstone.deferred
+                ? { tombstonedAt: row.tombstonedAt }
+                : {
+                    ...row,
+                    hidden: tombstone.refuted
+                        ? false
+                        : containerDocumentTombstoneHolds.hidden,
+                    attempts: sql `${containerDocumentTombstoneHolds.attempts} + 1`,
+                },
+        })
+            .run();
+    }
+}
+/** Release the holds on placements a listing has re-asserted as linked. */
+export async function deleteContainerDocumentTombstoneHoldRowsForLinks(tx, links) {
+    for (const link of links) {
+        for (const batch of batches(link.containerIds)) {
+            await tx
+                .delete(containerDocumentTombstoneHolds)
+                .where(and(eq(containerDocumentTombstoneHolds.documentId, link.documentId), inArray(containerDocumentTombstoneHolds.containerId, batch)))
+                .run();
+        }
+    }
+}
+const holdRowSelection = {
+    attempts: containerDocumentTombstoneHolds.attempts,
+    hidden: containerDocumentTombstoneHolds.hidden,
+    containerId: containerDocumentTombstoneHolds.containerId,
+    documentId: containerDocumentTombstoneHolds.documentId,
+    tombstonedAt: containerDocumentTombstoneHolds.tombstonedAt,
+    updatedAt: containerDocumentTombstoneHolds.updatedAt,
+};
+/** Every hold on the given containers, including visible refuted retries. */
+export async function listContainerDocumentTombstoneHoldsInTransaction(handle, containerIds) {
+    const holds = [];
+    for (const batch of batches(containerIds)) {
+        holds.push(...(await handle
+            .select(holdRowSelection)
+            .from(containerDocumentTombstoneHolds)
+            .where(inArray(containerDocumentTombstoneHolds.containerId, batch))
+            .orderBy(asc(containerDocumentTombstoneHolds.containerId), asc(containerDocumentTombstoneHolds.documentId))));
+    }
+    return holds;
+}
+/** Every hidden hold on the given documents, in any container. */
+export async function listContainerDocumentTombstoneHoldsForDocumentsInTransaction(handle, documentIds) {
+    const holds = [];
+    for (const batch of batches(documentIds)) {
+        holds.push(...(await handle
+            .select(holdRowSelection)
+            .from(containerDocumentTombstoneHolds)
+            .where(and(inArray(containerDocumentTombstoneHolds.documentId, batch), eq(containerDocumentTombstoneHolds.hidden, true)))
+            .orderBy(asc(containerDocumentTombstoneHolds.documentId), asc(containerDocumentTombstoneHolds.containerId))));
+    }
+    return holds;
+}
+/**
+ * Split the holds on the given containers into those whose placement is gone
+ * (the document was purged, reset, or relinked locally: nothing left to hide,
+ * so the hold is dropped) and those still hiding a placement.
+ */
+export async function partitionContainerDocumentTombstoneHolds(handle, holds) {
+    const known = new Set((await listKnownContainerDocumentPlacementsInTransaction(handle, holds)).map(placementKey));
+    return {
+        live: holds.filter((hold) => known.has(placementKey(hold))),
+        orphaned: holds.filter((hold) => !known.has(placementKey(hold))),
+    };
+}
+//# sourceMappingURL=containerDocumentTombstoneHolds.js.map

package/data/persistence/documents/internal/containerDocumentTombstoneHolds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerDocumentTombstoneHolds.js","sourceRoot":"","sources":["containerDocumentTombstoneHolds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AAkBtF,uEAAuE;AACvE,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC,SAAS,OAAO,CAAI,MAAwB;IAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAU,EAAE,CAAC;IACzB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,sBAAsB,EAAE,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,sBAAsB,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,SAAwC;IAExC,OAAO,GAAG,SAAS,CAAC,UAAU,SAAS,SAAS,CAAC,WAAW,EAAE,CAAC;AACjE,CAAC;AACD,MAAM,YAAY,GAAG,6BAA6B,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,EAAgC,EAChC,UAAwD;IAExD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,EAAE;aACL,MAAM,CAAC,+BAA+B,CAAC;aACvC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,+BAA+B,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,EACpE,EAAE,CACA,+BAA+B,CAAC,WAAW,EAC3C,SAAS,CAAC,WAAW,CACtB,CACF,CACF;aACA,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iDAAiD,CACrE,EAAgC,EAChC,WAAkC;IAElC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACzC,MAAM,EAAE;aACL,MAAM,CAAC,+BAA+B,CAAC;aACvC,KAAK,CAAC,OAAO,CAAC,+BAA+B,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;aACjE,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,kDAAkD,CACtE,EAAgC,EAChC,YAAmC;IAEnC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1C,MAAM,EAAE;aACL,MAAM,CAAC,+BAA+B,CAAC;aACvC,KAAK,CAAC,OAAO,CAAC,+BAA+B,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;aAClE,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iDAAiD,CACrE,EAAgC,EAChC,UAAwD;IAExD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnD,EAAE;iBACC,MAAM,CAAC;gBACN,WAAW,EAAE,2BAA2B,CAAC,WAAW;gBACpD,UAAU,EAAE,2BAA2B,CAAC,UAAU;aACnD,CAAC;iBACD,IAAI,CAAC,2BAA2B,CAAC;iBACjC,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAChE,EAAE;iBACC,MAAM,CAAC;gBACN,WAAW,EAAE,kBAAkB,CAAC,WAAW;gBAC3C,UAAU,EAAE,kBAAkB,CAAC,UAAU;aAC1C,CAAC;iBACD,IAAI,CAAC,kBAAkB,CAAC;iBACxB,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;SACxD,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,cAAc,CAAC,EAAE,CAAC;YACnD,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBACxD,KAAK,CAAC,GAAG,CACP,YAAY,CAAC;oBACX,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;iBAC3B,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAChE,EAAgC,EAChC,UAAyD,EACzD,GAAW;IAEX,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CACE,MAAM,gCAAgC,CACpC,EAAE,EACF,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC7B,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,YAAY,EAAE,EAAE;KACjB,CAAC,CAAC,CACJ,CACF,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CACnC,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC;YAAE,SAAS;QAClD,MAAM,GAAG,GAAG;YACV,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,YAAY,EAAE,SAAS,CAAC,SAAS;YACjC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO;YAC1B,SAAS,EAAE,GAAG;SACf,CAAC;QACF,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,EAAE;aACL,MAAM,CAAC,+BAA+B,CAAC;aACvC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD,kBAAkB,CAAC;YAClB,MAAM,EAAE;gBACN,+BAA+B,CAAC,UAAU;gBAC1C,+BAA+B,CAAC,WAAW;aAC5C;YACD,GAAG,EAAE,SAAS,CAAC,QAAQ;gBACrB,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;gBACpC,CAAC,CAAC;oBACE,GAAG,GAAG;oBACN,MAAM,EAAE,SAAS,CAAC,OAAO;wBACvB,CAAC,CAAC,KAAK;wBACP,CAAC,CAAC,+BAA+B,CAAC,MAAM;oBAC1C,QAAQ,EAAE,GAAG,CAAA,GAAG,+BAA+B,CAAC,QAAQ,MAAM;iBAC/D;SACN,CAAC;aACD,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,gDAAgD,CACpE,EAAgC,EAChC,KAGE;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/C,MAAM,EAAE;iBACL,MAAM,CAAC,+BAA+B,CAAC;iBACvC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,+BAA+B,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAC/D,OAAO,CAAC,+BAA+B,CAAC,WAAW,EAAE,KAAK,CAAC,CAC5D,CACF;iBACA,GAAG,EAAE,CAAC;QACX,CAAC;IACH,CAAC;AACH,CAAC;AAUD,MAAM,gBAAgB,GAAG;IACvB,QAAQ,EAAE,+BAA+B,CAAC,QAAQ;IAClD,MAAM,EAAE,+BAA+B,CAAC,MAAM;IAC9C,WAAW,EAAE,+BAA+B,CAAC,WAAW;IACxD,UAAU,EAAE,+BAA+B,CAAC,UAAU;IACtD,YAAY,EAAE,+BAA+B,CAAC,YAAY;IAC1D,SAAS,EAAE,+BAA+B,CAAC,SAAS;CACrD,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,gDAAgD,CACpE,MAAoC,EACpC,YAAmC;IAEnC,MAAM,KAAK,GAAwC,EAAE,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1C,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,MAAM,MAAM;aACb,MAAM,CAAC,gBAAgB,CAAC;aACxB,IAAI,CAAC,+BAA+B,CAAC;aACrC,KAAK,CAAC,OAAO,CAAC,+BAA+B,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;aAClE,OAAO,CACN,GAAG,CAAC,+BAA+B,CAAC,WAAW,CAAC,EAChD,GAAG,CAAC,+BAA+B,CAAC,UAAU,CAAC,CAChD,CAAC,CACL,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,4DAA4D,CAChF,MAAoC,EACpC,WAAkC;IAElC,MAAM,KAAK,GAAwC,EAAE,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,MAAM,MAAM;aACb,MAAM,CAAC,gBAAgB,CAAC;aACxB,IAAI,CAAC,+BAA+B,CAAC;aACrC,KAAK,CACJ,GAAG,CACD,OAAO,CAAC,+BAA+B,CAAC,UAAU,EAAE,KAAK,CAAC,EAC1D,EAAE,CAAC,+BAA+B,CAAC,MAAM,EAAE,IAAI,CAAC,CACjD,CACF;aACA,OAAO,CACN,GAAG,CAAC,+BAA+B,CAAC,UAAU,CAAC,EAC/C,GAAG,CAAC,+BAA+B,CAAC,WAAW,CAAC,CACjD,CAAC,CACL,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,MAAoC,EACpC,KAAuD;IAKvD,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,CACE,MAAM,iDAAiD,CAAC,MAAM,EAAE,KAAK,CAAC,CACvE,CAAC,GAAG,CAAC,YAAY,CAAC,CACpB,CAAC;IACF,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;KACjE,CAAC;AACJ,CAAC","sourcesContent":["import { and, asc, eq, inArray, sql } from \"drizzle-orm\";\nimport {\n  containerDocumentTombstoneHolds,\n  documentContainerProjection,\n  documentProjection,\n} from \"../../../sqlite/schema\";\nimport type { ClientSQLiteTransactionScope } from \"../../../sqlite/sqlitePersistenceRuntime\";\nimport { filterWritableDocumentPlacements } from \"../../containers/documentPlacement\";\nimport type { ContainerDocumentTombstoneInput } from \"../types\";\n\nexport interface ContainerDocumentPlacementKey {\n  readonly containerId: string;\n  readonly documentId: string;\n}\n\nexport type HeldContainerDocumentTombstone = Omit<\n  ContainerDocumentTombstoneInput,\n  \"accessEpoch\" | \"linkedContainerIds\"\n> & {\n  /** Held without a verification attempt; the backoff does not advance. */\n  readonly deferred?: boolean | undefined;\n  /** A verified head still links it; retry the tombstone while keeping it visible. */\n  readonly refuted?: boolean | undefined;\n};\n\n/** Keep `IN (...)` lists well under SQLite's bound-parameter limit. */\nconst HOLD_SQL_ID_BATCH_SIZE = 400;\n\nfunction batches<T>(values: ReadonlyArray<T>): T[][] {\n  const unique = Array.from(new Set(values));\n  const result: T[][] = [];\n  for (let index = 0; index < unique.length; index += HOLD_SQL_ID_BATCH_SIZE) {\n    result.push(unique.slice(index, index + HOLD_SQL_ID_BATCH_SIZE));\n  }\n  return result;\n}\n\nexport function containerDocumentPlacementKey(\n  placement: ContainerDocumentPlacementKey,\n): string {\n  return `${placement.documentId}\\u0000${placement.containerId}`;\n}\nconst placementKey = containerDocumentPlacementKey;\n\nexport async function deleteContainerDocumentTombstoneHoldRows(\n  tx: ClientSQLiteTransactionScope,\n  placements: ReadonlyArray<ContainerDocumentPlacementKey>,\n): Promise<void> {\n  for (const placement of placements) {\n    await tx\n      .delete(containerDocumentTombstoneHolds)\n      .where(\n        and(\n          eq(containerDocumentTombstoneHolds.documentId, placement.documentId),\n          eq(\n            containerDocumentTombstoneHolds.containerId,\n            placement.containerId,\n          ),\n        ),\n      )\n      .run();\n  }\n}\n\n/**\n * A local move takes ownership of a document's placement: the intent, not a\n * server listing, now says where it lives, so every hold that was hiding one\n * of its placements is released with the link rewrite.\n */\nexport async function deleteContainerDocumentTombstoneHoldsForDocuments(\n  tx: ClientSQLiteTransactionScope,\n  documentIds: ReadonlyArray<string>,\n): Promise<void> {\n  for (const batch of batches(documentIds)) {\n    await tx\n      .delete(containerDocumentTombstoneHolds)\n      .where(inArray(containerDocumentTombstoneHolds.documentId, batch))\n      .run();\n  }\n}\n\n/** Holds on containers whose link rows are being removed locally. */\nexport async function deleteContainerDocumentTombstoneHoldsForContainers(\n  tx: ClientSQLiteTransactionScope,\n  containerIds: ReadonlyArray<string>,\n): Promise<void> {\n  for (const batch of batches(containerIds)) {\n    await tx\n      .delete(containerDocumentTombstoneHolds)\n      .where(inArray(containerDocumentTombstoneHolds.containerId, batch))\n      .run();\n  }\n}\n\n/**\n * The placements among `placements` that exist locally: a link row, or a\n * document projection row whose primary container is the named container.\n * A tombstone for any other placement has nothing to remove or hide, so it\n * is not worth fetching and verifying the document head for.\n */\nexport async function listKnownContainerDocumentPlacementsInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  placements: ReadonlyArray<ContainerDocumentPlacementKey>,\n): Promise<ContainerDocumentPlacementKey[]> {\n  const known = new Set<string>();\n  for (const batch of batches(placements.map((entry) => entry.documentId))) {\n    const [linkRows, projectionRows] = await Promise.all([\n      tx\n        .select({\n          containerId: documentContainerProjection.containerId,\n          documentId: documentContainerProjection.documentId,\n        })\n        .from(documentContainerProjection)\n        .where(inArray(documentContainerProjection.documentId, batch)),\n      tx\n        .select({\n          containerId: documentProjection.containerId,\n          documentId: documentProjection.documentId,\n        })\n        .from(documentProjection)\n        .where(inArray(documentProjection.documentId, batch)),\n    ]);\n    for (const row of [...linkRows, ...projectionRows]) {\n      if (row.documentId !== null && row.containerId !== null) {\n        known.add(\n          placementKey({\n            containerId: row.containerId,\n            documentId: row.documentId,\n          }),\n        );\n      }\n    }\n  }\n  return placements.filter((placement) => known.has(placementKey(placement)));\n}\n\n/**\n * Hold listing tombstones whose signed evidence is unavailable. A placement a\n * pending move intent owns is never held: the intent, not the listing, decides\n * where the document lives until it settles (`ProtectPendingTombstones`).\n */\nexport async function holdContainerDocumentTombstonesInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  tombstones: ReadonlyArray<HeldContainerDocumentTombstone>,\n  now: string,\n): Promise<void> {\n  const writable = new Set(\n    (\n      await filterWritableDocumentPlacements(\n        tx,\n        tombstones.map((tombstone) => ({\n          documentId: tombstone.documentId,\n          containerIds: [],\n        })),\n      )\n    ).map((input) => input.documentId),\n  );\n  for (const tombstone of tombstones) {\n    if (!writable.has(tombstone.documentId)) continue;\n    const row = {\n      containerId: tombstone.containerId,\n      documentId: tombstone.documentId,\n      tombstonedAt: tombstone.updatedAt,\n      hidden: !tombstone.refuted,\n      updatedAt: now,\n    };\n    // A deferred hold was not attempted: it keeps its attempt count and its\n    // last-attempt time, so it stays due and is not starved by the cap.\n    await tx\n      .insert(containerDocumentTombstoneHolds)\n      .values({ ...row, attempts: tombstone.deferred ? 0 : 1 })\n      .onConflictDoUpdate({\n        target: [\n          containerDocumentTombstoneHolds.documentId,\n          containerDocumentTombstoneHolds.containerId,\n        ],\n        set: tombstone.deferred\n          ? { tombstonedAt: row.tombstonedAt }\n          : {\n              ...row,\n              hidden: tombstone.refuted\n                ? false\n                : containerDocumentTombstoneHolds.hidden,\n              attempts: sql`${containerDocumentTombstoneHolds.attempts} + 1`,\n            },\n      })\n      .run();\n  }\n}\n\n/** Release the holds on placements a listing has re-asserted as linked. */\nexport async function deleteContainerDocumentTombstoneHoldRowsForLinks(\n  tx: ClientSQLiteTransactionScope,\n  links: ReadonlyArray<{\n    readonly containerIds: ReadonlyArray<string>;\n    readonly documentId: string;\n  }>,\n): Promise<void> {\n  for (const link of links) {\n    for (const batch of batches(link.containerIds)) {\n      await tx\n        .delete(containerDocumentTombstoneHolds)\n        .where(\n          and(\n            eq(containerDocumentTombstoneHolds.documentId, link.documentId),\n            inArray(containerDocumentTombstoneHolds.containerId, batch),\n          ),\n        )\n        .run();\n    }\n  }\n}\n\nexport interface ContainerDocumentTombstoneHoldRow\n  extends ContainerDocumentPlacementKey {\n  readonly attempts: number;\n  readonly hidden: boolean;\n  readonly tombstonedAt: string;\n  readonly updatedAt: string;\n}\n\nconst holdRowSelection = {\n  attempts: containerDocumentTombstoneHolds.attempts,\n  hidden: containerDocumentTombstoneHolds.hidden,\n  containerId: containerDocumentTombstoneHolds.containerId,\n  documentId: containerDocumentTombstoneHolds.documentId,\n  tombstonedAt: containerDocumentTombstoneHolds.tombstonedAt,\n  updatedAt: containerDocumentTombstoneHolds.updatedAt,\n};\n\n/** Every hold on the given containers, including visible refuted retries. */\nexport async function listContainerDocumentTombstoneHoldsInTransaction(\n  handle: ClientSQLiteTransactionScope,\n  containerIds: ReadonlyArray<string>,\n): Promise<ContainerDocumentTombstoneHoldRow[]> {\n  const holds: ContainerDocumentTombstoneHoldRow[] = [];\n  for (const batch of batches(containerIds)) {\n    holds.push(\n      ...(await handle\n        .select(holdRowSelection)\n        .from(containerDocumentTombstoneHolds)\n        .where(inArray(containerDocumentTombstoneHolds.containerId, batch))\n        .orderBy(\n          asc(containerDocumentTombstoneHolds.containerId),\n          asc(containerDocumentTombstoneHolds.documentId),\n        )),\n    );\n  }\n  return holds;\n}\n\n/** Every hidden hold on the given documents, in any container. */\nexport async function listContainerDocumentTombstoneHoldsForDocumentsInTransaction(\n  handle: ClientSQLiteTransactionScope,\n  documentIds: ReadonlyArray<string>,\n): Promise<ContainerDocumentTombstoneHoldRow[]> {\n  const holds: ContainerDocumentTombstoneHoldRow[] = [];\n  for (const batch of batches(documentIds)) {\n    holds.push(\n      ...(await handle\n        .select(holdRowSelection)\n        .from(containerDocumentTombstoneHolds)\n        .where(\n          and(\n            inArray(containerDocumentTombstoneHolds.documentId, batch),\n            eq(containerDocumentTombstoneHolds.hidden, true),\n          ),\n        )\n        .orderBy(\n          asc(containerDocumentTombstoneHolds.documentId),\n          asc(containerDocumentTombstoneHolds.containerId),\n        )),\n    );\n  }\n  return holds;\n}\n\n/**\n * Split the holds on the given containers into those whose placement is gone\n * (the document was purged, reset, or relinked locally: nothing left to hide,\n * so the hold is dropped) and those still hiding a placement.\n */\nexport async function partitionContainerDocumentTombstoneHolds(\n  handle: ClientSQLiteTransactionScope,\n  holds: ReadonlyArray<ContainerDocumentTombstoneHoldRow>,\n): Promise<{\n  live: ContainerDocumentTombstoneHoldRow[];\n  orphaned: ContainerDocumentTombstoneHoldRow[];\n}> {\n  const known = new Set(\n    (\n      await listKnownContainerDocumentPlacementsInTransaction(handle, holds)\n    ).map(placementKey),\n  );\n  return {\n    live: holds.filter((hold) => known.has(placementKey(hold))),\n    orphaned: holds.filter((hold) => !known.has(placementKey(hold))),\n  };\n}\n"]}

package/data/persistence/documents/internal/containerDocumentTombstones.js

@@ -0,0 +1,164 @@
+import { and, asc, desc, eq, inArray, notInArray } from "drizzle-orm";
+import { documentContainerProjection, documentProjection, documents, } from "../../../sqlite/schema.js";
+import { getClientSQLitePersistenceRuntime, } from "../../../sqlite/sqlitePersistenceRuntime.js";
+import { filterWritableDocumentPlacements } from "../../containers/documentPlacement.js";
+import { getLatestTimestamp } from "../../latestTimestamp.js";
+import { DOCUMENTS_APP_KIND } from "./constants.js";
+import { deleteContainerDocumentTombstoneHoldRows } from "./containerDocumentTombstoneHolds.js";
+import { documentSummaryJoin, documentSummarySelection, mapDocumentSummary, } from "./documentProjectionRows.js";
+function dedupeContainerDocumentTombstones(tombstones) {
+    return Array.from(new Map(tombstones.map((tombstone) => [
+        `${tombstone.documentId}\u0000${tombstone.containerId}`,
+        tombstone,
+    ])).values());
+}
+function buildContainerDocumentTombstoneState(uniqueTombstones) {
+    const removedContainerIdsByDocumentId = new Map();
+    const tombstoneUpdatedAtByDocumentId = new Map();
+    const verifiedLinkedContainerIdsByDocumentId = new Map();
+    for (const tombstone of uniqueTombstones) {
+        verifiedLinkedContainerIdsByDocumentId.set(tombstone.documentId, new Set(tombstone.linkedContainerIds));
+        const removedContainerIds = removedContainerIdsByDocumentId.get(tombstone.documentId) ?? new Set();
+        removedContainerIds.add(tombstone.containerId);
+        removedContainerIdsByDocumentId.set(tombstone.documentId, removedContainerIds);
+        tombstoneUpdatedAtByDocumentId.set(tombstone.documentId, getLatestTimestamp(tombstoneUpdatedAtByDocumentId.get(tombstone.documentId), tombstone.updatedAt));
+    }
+    return {
+        removedContainerIdsByDocumentId,
+        tombstoneUpdatedAtByDocumentId,
+        verifiedLinkedContainerIdsByDocumentId,
+    };
+}
+/**
+ * Remove the tombstoned placement and, with the head now verified, every
+ * remaining local link row the head does not link: those are listing-seeded
+ * rows, and leaving one would keep showing the document in a container the
+ * signed link set never named. Rows the head links are kept as they are.
+ */
+async function deleteContainerDocumentTombstoneRows(tx, uniqueTombstones, verifiedLinkedContainerIdsByDocumentId) {
+    for (const tombstone of uniqueTombstones) {
+        await tx
+            .delete(documentContainerProjection)
+            .where(and(eq(documentContainerProjection.documentId, tombstone.documentId), eq(documentContainerProjection.containerId, tombstone.containerId)))
+            .run();
+    }
+    for (const [documentId, linked] of verifiedLinkedContainerIdsByDocumentId) {
+        await tx
+            .delete(documentContainerProjection)
+            .where(linked.size === 0
+            ? eq(documentContainerProjection.documentId, documentId)
+            : and(eq(documentContainerProjection.documentId, documentId), notInArray(documentContainerProjection.containerId, [...linked])))
+            .run();
+    }
+}
+/**
+ * The primary container after a removal: the first remaining local row the
+ * verified head links. A remaining row the head does not link is a
+ * listing-seeded row and never becomes the primary, so a listing cannot
+ * re-home the document. With no such row the document is unplaced (`null`)
+ * and reachable through orphan recovery, rather than pointed at a head
+ * container this device may not be able to read.
+ */
+function selectNextContainerId(remainingContainerIds, verifiedLinkedContainerIds) {
+    return (remainingContainerIds.find((containerId) => verifiedLinkedContainerIds.has(containerId)) ?? null);
+}
+async function updateSelectedContainersForDocumentTombstones(input) {
+    const { documentId, removedContainerIds, tombstoneUpdatedAt, tx } = input;
+    // A server document can own more than one local projection row: identity
+    // recovery legitimately rematerializes a second projection for the same
+    // documentId before semantic convergence completes. The link delete above is
+    // keyed by (documentId, containerId) and the container item view surfaces a
+    // document by its primary container_id, so EVERY projection row still pointing
+    // at a removed container must be repaired here — resolving a single localId
+    // left a duplicate row stranded at the source, keeping a moved document
+    // visible in the container it was unlinked from.
+    const localIds = (await tx
+        .select({ localId: documents.localId })
+        .from(documents)
+        .where(and(eq(documents.appKind, DOCUMENTS_APP_KIND), eq(documents.documentId, documentId)))).map((row) => row.localId);
+    if (localIds.length === 0) {
+        return [];
+    }
+    const projectionRows = await tx
+        .select({
+        localId: documentProjection.localId,
+        containerId: documentProjection.containerId,
+        updatedAt: documentProjection.updatedAt,
+    })
+        .from(documentProjection)
+        .where(inArray(documentProjection.localId, localIds));
+    // Every projection row whose primary container is tombstoned OR outside the
+    // verified link set is repointed: a primary at a listing-seeded row would
+    // otherwise keep showing the document in a container the head never named.
+    const rowsAtRemovedContainer = projectionRows.flatMap((row) => row.localId !== null &&
+        row.containerId !== null &&
+        (removedContainerIds.has(row.containerId) ||
+            !input.verifiedLinkedContainerIds.has(row.containerId))
+        ? [{ localId: row.localId, updatedAt: row.updatedAt ?? undefined }]
+        : []);
+    if (rowsAtRemovedContainer.length === 0) {
+        return [];
+    }
+    const remainingLinkRows = await tx
+        .select({ containerId: documentContainerProjection.containerId })
+        .from(documentContainerProjection)
+        .where(eq(documentContainerProjection.documentId, documentId))
+        .orderBy(asc(documentContainerProjection.containerId));
+    const nextContainerId = selectNextContainerId(remainingLinkRows.map((row) => row.containerId), input.verifiedLinkedContainerIds);
+    const changedLocalIds = [];
+    for (const row of rowsAtRemovedContainer) {
+        await tx
+            .update(documentProjection)
+            .set({
+            containerId: nextContainerId,
+            updatedAt: getLatestTimestamp(row.updatedAt, tombstoneUpdatedAt),
+        })
+            .where(eq(documentProjection.localId, row.localId))
+            .run();
+        changedLocalIds.push(row.localId);
+    }
+    return changedLocalIds;
+}
+export async function applyContainerDocumentTombstonesWithExec(execSql, tombstones) {
+    const uniqueTombstones = dedupeContainerDocumentTombstones(tombstones);
+    if (uniqueTombstones.length === 0) {
+        return [];
+    }
+    const { db } = getClientSQLitePersistenceRuntime(execSql);
+    return db.transaction(async (tx) => {
+        // Besides the pending-intent guard, the verified head must not be older
+        // than local document state: a lagging or replayed head must never
+        // delete rows a newer listing or settled move wrote (`CheckEpoch`).
+        const writable = await filterWritableDocumentPlacements(tx, uniqueTombstones.map((tombstone) => ({
+            accessEpoch: tombstone.accessEpoch,
+            documentId: tombstone.documentId,
+            containerIds: [],
+        })));
+        const writableIds = new Set(writable.map((input) => input.documentId));
+        const applicable = uniqueTombstones.filter((tombstone) => writableIds.has(tombstone.documentId));
+        const { removedContainerIdsByDocumentId, tombstoneUpdatedAtByDocumentId, verifiedLinkedContainerIdsByDocumentId, } = buildContainerDocumentTombstoneState(applicable);
+        await deleteContainerDocumentTombstoneRows(tx, applicable, verifiedLinkedContainerIdsByDocumentId);
+        await deleteContainerDocumentTombstoneHoldRows(tx, applicable);
+        const changedLocalIds = [];
+        for (const [documentId, removedContainerIds,] of removedContainerIdsByDocumentId) {
+            changedLocalIds.push(...(await updateSelectedContainersForDocumentTombstones({
+                documentId,
+                removedContainerIds,
+                tombstoneUpdatedAt: tombstoneUpdatedAtByDocumentId.get(documentId),
+                tx,
+                verifiedLinkedContainerIds: verifiedLinkedContainerIdsByDocumentId.get(documentId) ?? new Set(),
+            })));
+        }
+        if (changedLocalIds.length === 0) {
+            return [];
+        }
+        const rows = await tx
+            .select(documentSummarySelection)
+            .from(documentProjection)
+            .leftJoin(documents, documentSummaryJoin)
+            .where(inArray(documentProjection.localId, changedLocalIds))
+            .orderBy(desc(documentProjection.updatedAt), desc(documentProjection.localId));
+        return rows.map(mapDocumentSummary);
+    });
+}
+//# sourceMappingURL=containerDocumentTombstones.js.map