@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/internal/validators/util/protocol.js

@@ -0,0 +1,26 @@
+export const SHA256_HEX_LENGTH = 64;
+export const AUTH_CHALLENGE_HEX_LENGTH = 64;
+export const ML_DSA87_PUBLIC_KEY_BYTES = 2592;
+export const ML_DSA87_SIGNATURE_BYTES = 4627;
+export const ML_KEM1024_PUBLIC_KEY_BYTES = 1568;
+export function isByteArray(value) {
+    return (Array.isArray(value) &&
+        value.every((item) => typeof item === "number" &&
+            Number.isInteger(item) &&
+            item >= 0 &&
+            item <= 255));
+}
+export function isByteArrayOfLength(value, length) {
+    return isByteArray(value) && value.length === length;
+}
+export function isSha256HexString(value) {
+    return (typeof value === "string" &&
+        value.length === SHA256_HEX_LENGTH &&
+        /^[0-9a-f]+$/.test(value));
+}
+export function isAuthChallengeHexString(value) {
+    return (typeof value === "string" &&
+        value.length === AUTH_CHALLENGE_HEX_LENGTH &&
+        /^[0-9a-f]+$/.test(value));
+}
+//# sourceMappingURL=protocol.js.map

package/internal/validators/util/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["protocol.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAC9C,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAC7C,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC;AAEhD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,KAAK,CACT,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,IAAI,KAAK,QAAQ;YACxB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YACtB,IAAI,IAAI,CAAC;YACT,IAAI,IAAI,GAAG,CACd,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAc,EACd,MAAc;IAEd,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,iBAAiB;QAClC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,yBAAyB;QAC1C,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAC1B,CAAC;AACJ,CAAC","sourcesContent":["export const SHA256_HEX_LENGTH = 64;\nexport const AUTH_CHALLENGE_HEX_LENGTH = 64;\nexport const ML_DSA87_PUBLIC_KEY_BYTES = 2592;\nexport const ML_DSA87_SIGNATURE_BYTES = 4627;\nexport const ML_KEM1024_PUBLIC_KEY_BYTES = 1568;\n\nexport function isByteArray(value: unknown): value is number[] {\n  return (\n    Array.isArray(value) &&\n    value.every(\n      (item) =>\n        typeof item === \"number\" &&\n        Number.isInteger(item) &&\n        item >= 0 &&\n        item <= 255,\n    )\n  );\n}\n\nexport function isByteArrayOfLength(\n  value: unknown,\n  length: number,\n): value is number[] {\n  return isByteArray(value) && value.length === length;\n}\n\nexport function isSha256HexString(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    value.length === SHA256_HEX_LENGTH &&\n    /^[0-9a-f]+$/.test(value)\n  );\n}\n\nexport function isAuthChallengeHexString(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    value.length === AUTH_CHALLENGE_HEX_LENGTH &&\n    /^[0-9a-f]+$/.test(value)\n  );\n}\n"]}

package/internal/validators/util/signedAt.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Signed timestamps are stored in a `timestamp` column and served back as
+ * `Date#toISOString()`. Only the 24-character canonical form with a four-digit
+ * year from 1970 through 9999 survives that round trip verbatim: years
+ * 0001–0099 are re-read through the two-digit-year pivot, and expanded
+ * `±YYYYYY` years are rejected by the column. Honest clients sign `Date.now()`,
+ * so nothing outside this range is ever honest data.
+ */
+export declare const MIN_SIGNED_AT_YEAR = 1970;
+export declare const MAX_SIGNED_AT_YEAR = 9999;
+/** Structural half of the contract; the calendar half needs `Date`. */
+export declare const CANONICAL_SIGNED_AT_PATTERN: RegExp;
+export declare const SIGNED_AT_CONTRACT = "a canonical ISO-8601 UTC timestamp (YYYY-MM-DDTHH:mm:ss.sssZ) dated 1970-9999";
+export declare function isCanonicalSignedAt(value: string): boolean;

package/internal/validators/util/signedAt.js

@@ -0,0 +1,21 @@
+/**
+ * Signed timestamps are stored in a `timestamp` column and served back as
+ * `Date#toISOString()`. Only the 24-character canonical form with a four-digit
+ * year from 1970 through 9999 survives that round trip verbatim: years
+ * 0001–0099 are re-read through the two-digit-year pivot, and expanded
+ * `±YYYYYY` years are rejected by the column. Honest clients sign `Date.now()`,
+ * so nothing outside this range is ever honest data.
+ */
+export const MIN_SIGNED_AT_YEAR = 1970;
+export const MAX_SIGNED_AT_YEAR = 9999;
+/** Structural half of the contract; the calendar half needs `Date`. */
+export const CANONICAL_SIGNED_AT_PATTERN = /^(?:19[7-9]\d|[2-9]\d{3})-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/;
+export const SIGNED_AT_CONTRACT = "a canonical ISO-8601 UTC timestamp (YYYY-MM-DDTHH:mm:ss.sssZ) dated 1970-9999";
+export function isCanonicalSignedAt(value) {
+    if (!CANONICAL_SIGNED_AT_PATTERN.test(value)) {
+        return false;
+    }
+    const date = new Date(value);
+    return !Number.isNaN(date.valueOf()) && date.toISOString() === value;
+}
+//# sourceMappingURL=signedAt.js.map

package/internal/validators/util/signedAt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signedAt.js","sourceRoot":"","sources":["signedAt.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEvC,uEAAuE;AACvE,MAAM,CAAC,MAAM,2BAA2B,GACtC,kEAAkE,CAAC;AAErE,MAAM,CAAC,MAAM,kBAAkB,GAC7B,+EAA+E,CAAC;AAElF,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACvE,CAAC","sourcesContent":["/**\n * Signed timestamps are stored in a `timestamp` column and served back as\n * `Date#toISOString()`. Only the 24-character canonical form with a four-digit\n * year from 1970 through 9999 survives that round trip verbatim: years\n * 0001–0099 are re-read through the two-digit-year pivot, and expanded\n * `±YYYYYY` years are rejected by the column. Honest clients sign `Date.now()`,\n * so nothing outside this range is ever honest data.\n */\nexport const MIN_SIGNED_AT_YEAR = 1970;\nexport const MAX_SIGNED_AT_YEAR = 9999;\n\n/** Structural half of the contract; the calendar half needs `Date`. */\nexport const CANONICAL_SIGNED_AT_PATTERN =\n  /^(?:19[7-9]\\d|[2-9]\\d{3})-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/;\n\nexport const SIGNED_AT_CONTRACT =\n  \"a canonical ISO-8601 UTC timestamp (YYYY-MM-DDTHH:mm:ss.sssZ) dated 1970-9999\";\n\nexport function isCanonicalSignedAt(value: string): boolean {\n  if (!CANONICAL_SIGNED_AT_PATTERN.test(value)) {\n    return false;\n  }\n  const date = new Date(value);\n  return !Number.isNaN(date.valueOf()) && date.toISOString() === value;\n}\n"]}

package/internal/validators/util/uuid.d.ts

@@ -0,0 +1,2 @@
+export declare const UUID_V4_PATTERN: RegExp;
+export declare function isUuidV4String(value: string): boolean;

package/internal/validators/util/uuid.js

@@ -0,0 +1,5 @@
+export const UUID_V4_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+export function isUuidV4String(value) {
+    return UUID_V4_PATTERN.test(value);
+}
+//# sourceMappingURL=uuid.js.map

package/internal/validators/util/uuid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uuid.js","sourceRoot":"","sources":["uuid.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAC1B,uEAAuE,CAAC;AAE1E,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC","sourcesContent":["export const UUID_V4_PATTERN =\n  /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;\n\nexport function isUuidV4String(value: string): boolean {\n  return UUID_V4_PATTERN.test(value);\n}\n"]}

package/internal/validators/util/walLsn.d.ts

@@ -0,0 +1,3 @@
+export declare const WAL_LSN_PATTERN: RegExp;
+export declare function parseWalLsn(value: string, label?: string): bigint;
+export declare function isWalLsnString(value: unknown): value is string;

package/internal/validators/util/walLsn.js

@@ -0,0 +1,22 @@
+export const WAL_LSN_PATTERN = /^[0-9A-Fa-f]{1,8}\/[0-9A-Fa-f]{1,8}$/;
+function invalidWalLsn(label) {
+    throw new Error(label ? `${label} is invalid` : "Invalid WAL LSN.");
+}
+function parseWalLsnSegment(segment, label) {
+    if (!segment || !/^[0-9A-Fa-f]{1,8}$/.test(segment)) {
+        invalidWalLsn(label);
+    }
+    return BigInt(`0x${segment}`);
+}
+export function parseWalLsn(value, label) {
+    const parts = value.split("/");
+    if (parts.length !== 2) {
+        invalidWalLsn(label);
+    }
+    return ((parseWalLsnSegment(parts[0], label) << 32n) +
+        parseWalLsnSegment(parts[1], label));
+}
+export function isWalLsnString(value) {
+    return typeof value === "string" && WAL_LSN_PATTERN.test(value);
+}
+//# sourceMappingURL=walLsn.js.map

package/internal/validators/util/walLsn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walLsn.js","sourceRoot":"","sources":["walLsn.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG,sCAAsC,CAAC;AAEtE,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B,EAAE,KAAc;IACrE,IAAI,CAAC,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,aAAa,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,KAAc;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,aAAa,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,CACL,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC;QAC5C,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC","sourcesContent":["export const WAL_LSN_PATTERN = /^[0-9A-Fa-f]{1,8}\\/[0-9A-Fa-f]{1,8}$/;\n\nfunction invalidWalLsn(label?: string): never {\n  throw new Error(label ? `${label} is invalid` : \"Invalid WAL LSN.\");\n}\n\nfunction parseWalLsnSegment(segment: string | undefined, label?: string) {\n  if (!segment || !/^[0-9A-Fa-f]{1,8}$/.test(segment)) {\n    invalidWalLsn(label);\n  }\n\n  return BigInt(`0x${segment}`);\n}\n\nexport function parseWalLsn(value: string, label?: string): bigint {\n  const parts = value.split(\"/\");\n  if (parts.length !== 2) {\n    invalidWalLsn(label);\n  }\n\n  return (\n    (parseWalLsnSegment(parts[0], label) << 32n) +\n    parseWalLsnSegment(parts[1], label)\n  );\n}\n\nexport function isWalLsnString(value: unknown): value is string {\n  return typeof value === \"string\" && WAL_LSN_PATTERN.test(value);\n}\n"]}

package/internal/validators/writerProjectionRefinements.js

@@ -0,0 +1,10 @@
+export const containerWriterProjectionPathKekCountRefinement = {
+    description: "containerKeks must contain exactly one entry for every manifest in path",
+    id: "response.container-writer-projection-path-kek-count",
+};
+export const writerProjectionResponseRuntimeRefinements = [
+    containerWriterProjectionPathKekCountRefinement,
+    organizationProvisioningContainerKeyringRefinement,
+];
+import { organizationProvisioningContainerKeyringRefinement } from "./organizationProvisioningRefinements.js";
+//# sourceMappingURL=writerProjectionRefinements.js.map

package/internal/validators/writerProjectionRefinements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writerProjectionRefinements.js","sourceRoot":"","sources":["writerProjectionRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,+CAA+C,GAAG;IAC7D,WAAW,EACT,yEAAyE;IAC3E,EAAE,EAAE,qDAAqD;CACjD,CAAC;AAEX,MAAM,CAAC,MAAM,0CAA0C,GAAG;IACxD,+CAA+C;IAC/C,kDAAkD;CAC1C,CAAC;AAEX,OAAO,EAAE,kDAAkD,EAAE,MAAM,uCAAuC,CAAC","sourcesContent":["export const containerWriterProjectionPathKekCountRefinement = {\n  description:\n    \"containerKeks must contain exactly one entry for every manifest in path\",\n  id: \"response.container-writer-projection-path-kek-count\",\n} as const;\n\nexport const writerProjectionResponseRuntimeRefinements = [\n  containerWriterProjectionPathKekCountRefinement,\n  organizationProvisioningContainerKeyringRefinement,\n] as const;\n\nimport { organizationProvisioningContainerKeyringRefinement } from \"./organizationProvisioningRefinements\";\n"]}

package/package.json

@@ -1,6 +1,37 @@
 {
   "name": "@tearleads/client-sdk",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.13",
+  "description": "React-free Tearleads client runtime: local SQLite persistence, keys, sync, encrypted blobs, and domain workflows.",
+  "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/a2f0/tearleads.git",
+    "directory": "packages/client-sdk"
+  },
+  "type": "module",
+  "main": "./index.js",
+  "types": "./index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./index.d.ts",
+      "default": "./index.js"
+    },
+    "./sqlite": {
+      "types": "./sqlite.d.ts",
+      "default": "./sqlite.js"
+    },
+    "./testing": {
+      "types": "./data/trustedUserIdentity/testFixtures.d.ts",
+      "default": "./data/trustedUserIdentity/testFixtures.js"
+    }
+  },
+  "sideEffects": false,
+  "dependencies": {
+    "@noble/hashes": "^2.4.0",
+    "@noble/post-quantum": "^0.7.1",
+    "@scure/bip39": "^2.4.0",
+    "drizzle-orm": "^0.45.2",
+    "loro-crdt": "^1.16.0",
+    "zod": "^4.5.4"
+  }
+}

package/sqlite.d.ts

@@ -0,0 +1,18 @@
+import type { DatabaseWorkerClient, WorkerLike } from "./internal/sqlite-worker/client.js";
+import { type CreateModuleDatabaseRuntimeOptions, type DatabaseRuntime, type ModuleWorkerConstructor, type ModuleWorkerLike } from "./internal/sqlite-worker/runtime.js";
+export type SQLiteWorkerClient = DatabaseWorkerClient;
+export type CreateSQLiteRuntimeOptions = CreateModuleDatabaseRuntimeOptions;
+export type SQLiteRuntime = DatabaseRuntime;
+export type SQLiteModuleWorkerConstructor = ModuleWorkerConstructor;
+export type SQLiteModuleWorkerLike = ModuleWorkerLike;
+export interface SQLiteRuntimeWorker extends WorkerLike {
+    terminate(): void;
+}
+export { createModuleDatabaseRuntime as createSQLiteRuntime } from "./internal/sqlite-worker/runtime.js";
+export declare function createSQLiteRuntimeFromWorker(worker: SQLiteRuntimeWorker): SQLiteRuntime;
+export { purgeOpfsSqliteDatabase } from "./internal/sqlite-worker/purgeOpfsDatabase.js";
+export type { DatabasePersistenceMode } from "./internal/sqlite-worker/types.js";
+export { clientSQLiteSchema } from "./data/sqlite/schema.js";
+export { type ClientSQLiteDatabase as SQLiteDatabase, type ClientSQLitePersistenceRuntime as SQLitePersistenceRuntime, type ClientSQLiteTransactionScope as SQLiteTransaction, getClientSQLitePersistenceRuntime as getSQLitePersistenceRuntime, } from "./data/sqlite/sqlitePersistenceRuntime.js";
+export { createExecSql, defineSqlTableSchema, type ExecSql, type ExecSqlClientLike, ensureSqlTables, resetConnectionSchemaMemo, runSerializedSqlMutation, type SqlArrayRow, type SqlBind, type SqlRow, type SqlRowMode, type SqlRowValue, type SqlTableSchema, unavailableExecSql, } from "./data/sqlite/sqlSchema.js";
+export { EPHEMERAL_STORAGE_POLICY, isPersistentStorageSupported, PERSISTENT_STORAGE_POLICY, type RequestPersistentStorageResult, requestPersistentStorage, resolveStoragePersistencePolicy, type StoragePersistencePolicy, } from "./data/sqlite/storagePersistence.js";

package/sqlite.js

@@ -0,0 +1,11 @@
+import { createDatabaseRuntime, } from "./internal/sqlite-worker/runtime.js";
+export { createModuleDatabaseRuntime as createSQLiteRuntime } from "./internal/sqlite-worker/runtime.js";
+export function createSQLiteRuntimeFromWorker(worker) {
+    return createDatabaseRuntime(worker);
+}
+export { purgeOpfsSqliteDatabase } from "./internal/sqlite-worker/purgeOpfsDatabase.js";
+export { clientSQLiteSchema } from "./data/sqlite/schema.js";
+export { getClientSQLitePersistenceRuntime as getSQLitePersistenceRuntime, } from "./data/sqlite/sqlitePersistenceRuntime.js";
+export { createExecSql, defineSqlTableSchema, ensureSqlTables, resetConnectionSchemaMemo, runSerializedSqlMutation, unavailableExecSql, } from "./data/sqlite/sqlSchema.js";
+export { EPHEMERAL_STORAGE_POLICY, isPersistentStorageSupported, PERSISTENT_STORAGE_POLICY, requestPersistentStorage, resolveStoragePersistencePolicy, } from "./data/sqlite/storagePersistence.js";
+//# sourceMappingURL=sqlite.js.map

package/sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["sqlite.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,qBAAqB,GAItB,MAAM,kCAAkC,CAAC;AAW1C,OAAO,EAAE,2BAA2B,IAAI,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEtG,MAAM,UAAU,6BAA6B,CAC3C,MAA2B;IAE3B,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAEvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAIL,iCAAiC,IAAI,2BAA2B,GACjE,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,aAAa,EACb,oBAAoB,EAGpB,eAAe,EACf,yBAAyB,EACzB,wBAAwB,EAOxB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,yBAAyB,EAEzB,wBAAwB,EACxB,+BAA+B,GAEhC,MAAM,kCAAkC,CAAC","sourcesContent":["import type {\n  DatabaseWorkerClient,\n  WorkerLike,\n} from \"@tearleads/sqlite-worker/client\";\nimport {\n  type CreateModuleDatabaseRuntimeOptions,\n  createDatabaseRuntime,\n  type DatabaseRuntime,\n  type ModuleWorkerConstructor,\n  type ModuleWorkerLike,\n} from \"@tearleads/sqlite-worker/runtime\";\n\nexport type SQLiteWorkerClient = DatabaseWorkerClient;\nexport type CreateSQLiteRuntimeOptions = CreateModuleDatabaseRuntimeOptions;\nexport type SQLiteRuntime = DatabaseRuntime;\nexport type SQLiteModuleWorkerConstructor = ModuleWorkerConstructor;\nexport type SQLiteModuleWorkerLike = ModuleWorkerLike;\nexport interface SQLiteRuntimeWorker extends WorkerLike {\n  terminate(): void;\n}\n\nexport { createModuleDatabaseRuntime as createSQLiteRuntime } from \"@tearleads/sqlite-worker/runtime\";\n\nexport function createSQLiteRuntimeFromWorker(\n  worker: SQLiteRuntimeWorker,\n): SQLiteRuntime {\n  return createDatabaseRuntime(worker);\n}\n\nexport { purgeOpfsSqliteDatabase } from \"@tearleads/sqlite-worker/purge-opfs-database\";\nexport type { DatabasePersistenceMode } from \"@tearleads/sqlite-worker/types\";\nexport { clientSQLiteSchema } from \"./data/sqlite/schema\";\nexport {\n  type ClientSQLiteDatabase as SQLiteDatabase,\n  type ClientSQLitePersistenceRuntime as SQLitePersistenceRuntime,\n  type ClientSQLiteTransactionScope as SQLiteTransaction,\n  getClientSQLitePersistenceRuntime as getSQLitePersistenceRuntime,\n} from \"./data/sqlite/sqlitePersistenceRuntime\";\nexport {\n  createExecSql,\n  defineSqlTableSchema,\n  type ExecSql,\n  type ExecSqlClientLike,\n  ensureSqlTables,\n  resetConnectionSchemaMemo,\n  runSerializedSqlMutation,\n  type SqlArrayRow,\n  type SqlBind,\n  type SqlRow,\n  type SqlRowMode,\n  type SqlRowValue,\n  type SqlTableSchema,\n  unavailableExecSql,\n} from \"./data/sqlite/sqlSchema\";\nexport {\n  EPHEMERAL_STORAGE_POLICY,\n  isPersistentStorageSupported,\n  PERSISTENT_STORAGE_POLICY,\n  type RequestPersistentStorageResult,\n  requestPersistentStorage,\n  resolveStoragePersistencePolicy,\n  type StoragePersistencePolicy,\n} from \"./data/sqlite/storagePersistence\";\n"]}

package/stores/container-contents/accessRestorationSweep.js

@@ -0,0 +1,146 @@
+import { getContainerContentsStoreLogLabel } from "./logLabel.js";
+import { refreshAllRemoteHydration, } from "./remoteHydrationRefresh.js";
+function createRestorationSweepSession(state, isCurrent) {
+    return {
+        isCurrent,
+        persistence: state.persistence,
+        runtime: state.runtime,
+        state,
+    };
+}
+function captureRestorationGeneration(state) {
+    const lifecycleGeneration = state.lifecycleGeneration;
+    const structuralGeneration = state.structuralGeneration;
+    return () => state.lifecycleGeneration === lifecycleGeneration &&
+        state.structuralGeneration === structuralGeneration;
+}
+const SWEEP_ATTEMPT_LIMIT = 5;
+const SWEEP_RETRY_BASE_MS = 60_000;
+const SWEEP_RETRY_MAX_MS = 15 * 60_000;
+function isSweepAttemptDue(sweep, now) {
+    if (!sweep.lastAttemptedAt) {
+        return true;
+    }
+    const lastAttemptedAt = Date.parse(sweep.lastAttemptedAt);
+    if (!Number.isFinite(lastAttemptedAt)) {
+        return true;
+    }
+    const retryDelay = Math.min(SWEEP_RETRY_BASE_MS * 2 ** Math.max(0, sweep.attemptCount - 1), SWEEP_RETRY_MAX_MS);
+    return lastAttemptedAt + retryDelay <= now;
+}
+function restorationSweepIdentity(sweep) {
+    return `${sweep.requesterUserId}\u0000${sweep.organizationId}\u0000${sweep.generation}`;
+}
+/** A completed crawl can restore verified objects; absence never authorizes data loss. */
+async function completeRestorationSweeps(session, sweeps) {
+    for (const sweep of sweeps) {
+        if (!session.isCurrent())
+            return;
+        // An unsigned 404 cannot prove that encrypted local edits are disposable.
+        // Leave unavailable metadata dormant until verified rediscovery or explicit deletion.
+        await session.persistence.completeDormantMetadataSweepRequest(session.runtime.infra.execSql, sweep, session.isCurrent);
+    }
+}
+async function claimDueRestorationSweeps(session, sweeps, forcedRetrySweepIds) {
+    const now = Date.now();
+    const attemptedAt = new Date(now).toISOString();
+    const claimed = [];
+    for (const sweep of sweeps) {
+        if (!session.isCurrent()) {
+            return claimed;
+        }
+        if (forcedRetrySweepIds?.has(restorationSweepIdentity(sweep))) {
+            // The interrupted generation already claimed and durably counted this
+            // attempt. Resume that exact attempt after reset instead of consuming a
+            // new one or retiring it at the limit before its completion ran.
+            claimed.push(sweep);
+            continue;
+        }
+        if (sweep.attemptCount >= SWEEP_ATTEMPT_LIMIT) {
+            await session.persistence.completeDormantMetadataSweepRequest(session.runtime.infra.execSql, sweep, session.isCurrent);
+            if (!session.isCurrent()) {
+                return claimed;
+            }
+            session.runtime.util.log(`${getContainerContentsStoreLogLabel(session.state)}: retired exhausted dormant metadata sweep; metadata remains dormant`);
+            continue;
+        }
+        if (!isSweepAttemptDue(sweep, now)) {
+            continue;
+        }
+        const didClaim = await session.persistence.claimDormantMetadataSweepAttempt(session.runtime.infra.execSql, sweep, attemptedAt, session.isCurrent);
+        if (!session.isCurrent()) {
+            return claimed;
+        }
+        if (didClaim) {
+            claimed.push({
+                ...sweep,
+                attemptCount: sweep.attemptCount + 1,
+                lastAttemptedAt: attemptedAt,
+            });
+        }
+    }
+    return claimed;
+}
+async function loadAndClaimRestorationSweeps(session, forcedRetrySweepIds) {
+    const requesterUserId = session.runtime.auth.userId;
+    if (!requesterUserId) {
+        return [];
+    }
+    const pendingSweeps = await session.persistence.listDormantMetadataSweepRequests(session.runtime.infra.execSql, requesterUserId);
+    if (!session.isCurrent()) {
+        return [];
+    }
+    return claimDueRestorationSweeps(session, pendingSweeps, forcedRetrySweepIds);
+}
+function recreateRestorationSweepCompletion(state, interruptedSession, interruptedSweeps) {
+    const session = createRestorationSweepSession(state, captureRestorationGeneration(state));
+    return async () => {
+        const sameStorage = session.runtime.infra.execSql ===
+            interruptedSession.runtime.infra.execSql;
+        const forcedRetrySweepIds = sameStorage
+            ? new Set(interruptedSweeps.map(restorationSweepIdentity))
+            : undefined;
+        const sweeps = await loadAndClaimRestorationSweeps(session, forcedRetrySweepIds);
+        if (session.isCurrent() && sweeps.length > 0) {
+            await completeRestorationSweeps(session, sweeps);
+        }
+    };
+}
+async function reconcileRestoredAccess(input) {
+    const { requestHydration, state } = input;
+    const session = createRestorationSweepSession(state, input.isCurrent);
+    const sweeps = await loadAndClaimRestorationSweeps(session);
+    if (!session.isCurrent() || sweeps.length === 0) {
+        return;
+    }
+    await refreshAllRemoteHydration({
+        onFullyHydrated: () => completeRestorationSweeps(session, sweeps),
+        recreateOnFullyHydratedAfterReset: () => recreateRestorationSweepCompletion(state, session, sweeps),
+        requestHydration,
+        resetAllLaneWatermarks: true,
+        scheduleSyncAfterHydration: false,
+        scheduleSyncOnHydrationChange: false,
+        state,
+    });
+}
+export function createRestoredAccessReconciler(input) {
+    const { state } = input;
+    return async (isCurrent = captureRestorationGeneration(state)) => {
+        try {
+            await reconcileRestoredAccess({ ...input, isCurrent });
+        }
+        catch (error) {
+            if (!isCurrent()) {
+                return;
+            }
+            const message = `${getContainerContentsStoreLogLabel(state)}: dormant metadata sweep failed`;
+            if (state.runtime.util.logError) {
+                state.runtime.util.logError(message, error);
+            }
+            else {
+                state.runtime.util.log(message);
+            }
+        }
+    };
+}
+//# sourceMappingURL=accessRestorationSweep.js.map

package/stores/container-contents/accessRestorationSweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessRestorationSweep.js","sourceRoot":"","sources":["accessRestorationSweep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAEL,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAgBlC,SAAS,6BAA6B,CACpC,KAAsC,EACtC,SAAwB;IAExB,OAAO;QACL,SAAS;QACT,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAsC;IAEtC,MAAM,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACtD,MAAM,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACxD,OAAO,GAAG,EAAE,CACV,KAAK,CAAC,mBAAmB,KAAK,mBAAmB;QACjD,KAAK,CAAC,oBAAoB,KAAK,oBAAoB,CAAC;AACxD,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AAEvC,SAAS,iBAAiB,CAAC,KAA2B,EAAE,GAAW;IACjE,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,mBAAmB,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,EAC9D,kBAAkB,CACnB,CAAC;IACF,OAAO,eAAe,GAAG,UAAU,IAAI,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,wBAAwB,CAAC,KAA2B;IAC3D,OAAO,GAAG,KAAK,CAAC,eAAe,SAAS,KAAK,CAAC,cAAc,SAAS,KAAK,CAAC,UAAU,EAAE,CAAC;AAC1F,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,yBAAyB,CACtC,OAAgC,EAChC,MAAuC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YAAE,OAAO;QACjC,0EAA0E;QAC1E,sFAAsF;QACtF,MAAM,OAAO,CAAC,WAAW,CAAC,mCAAmC,CAC3D,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC7B,KAAK,EACL,OAAO,CAAC,SAAS,CAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,OAAgC,EAChC,MAAuC,EACvC,mBAAqD;IAErD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,mBAAmB,EAAE,GAAG,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9D,sEAAsE;YACtE,wEAAwE;YACxE,iEAAiE;YACjE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;YAC9C,MAAM,OAAO,CAAC,WAAW,CAAC,mCAAmC,CAC3D,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC7B,KAAK,EACL,OAAO,CAAC,SAAS,CAClB,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;gBACzB,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACtB,GAAG,iCAAiC,CAAC,OAAO,CAAC,KAAK,CAAC,sEAAsE,CAC1H,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YACnC,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,gCAAgC,CACzE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC7B,KAAK,EACL,WAAW,EACX,OAAO,CAAC,SAAS,CAClB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG,KAAK;gBACR,YAAY,EAAE,KAAK,CAAC,YAAY,GAAG,CAAC;gBACpC,eAAe,EAAE,WAAW;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,OAAgC,EAChC,mBAAqD;IAErD,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IACpD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,aAAa,GACjB,MAAM,OAAO,CAAC,WAAW,CAAC,gCAAgC,CACxD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC7B,eAAe,CAChB,CAAC;IACJ,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,yBAAyB,CAAC,OAAO,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,kCAAkC,CACzC,KAAsC,EACtC,kBAA2C,EAC3C,iBAAkD;IAElD,MAAM,OAAO,GAAG,6BAA6B,CAC3C,KAAK,EACL,4BAA4B,CAAC,KAAK,CAAC,CACpC,CAAC;IACF,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,WAAW,GACf,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YAC7B,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC3C,MAAM,mBAAmB,GAAG,WAAW;YACrC,CAAC,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YAC1D,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,OAAO,EACP,mBAAmB,CACpB,CAAC;QACF,IAAI,OAAO,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,yBAAyB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,KAItC;IACC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC1C,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO;IACT,CAAC;IAED,MAAM,yBAAyB,CAAC;QAC9B,eAAe,EAAE,GAAG,EAAE,CAAC,yBAAyB,CAAC,OAAO,EAAE,MAAM,CAAC;QACjE,iCAAiC,EAAE,GAAG,EAAE,CACtC,kCAAkC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC;QAC5D,gBAAgB;QAChB,sBAAsB,EAAE,IAAI;QAC5B,0BAA0B,EAAE,KAAK;QACjC,6BAA6B,EAAE,KAAK;QACpC,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAG9C;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,OAAO,KAAK,EAAE,SAAS,GAAG,4BAA4B,CAAC,KAAK,CAAC,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,GAAG,iCAAiC,CAAC,KAAK,CAAC,iCAAiC,CAAC;YAC7F,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { getContainerContentsStoreLogLabel } from \"./logLabel\";\nimport {\n  type RemoteHydrationRequester,\n  refreshAllRemoteHydration,\n} from \"./remoteHydrationRefresh\";\nimport type { ContainerContentsStoreSyncState } from \"./syncAgentTypes\";\n\ntype DormantMetadataSweep = Awaited<\n  ReturnType<\n    ContainerContentsStoreSyncState[\"persistence\"][\"listDormantMetadataSweepRequests\"]\n  >\n>[number];\n\ninterface RestorationSweepSession {\n  isCurrent: () => boolean;\n  persistence: ContainerContentsStoreSyncState[\"persistence\"];\n  runtime: ContainerContentsStoreSyncState[\"runtime\"];\n  state: ContainerContentsStoreSyncState;\n}\n\nfunction createRestorationSweepSession(\n  state: ContainerContentsStoreSyncState,\n  isCurrent: () => boolean,\n): RestorationSweepSession {\n  return {\n    isCurrent,\n    persistence: state.persistence,\n    runtime: state.runtime,\n    state,\n  };\n}\n\nfunction captureRestorationGeneration(\n  state: ContainerContentsStoreSyncState,\n): () => boolean {\n  const lifecycleGeneration = state.lifecycleGeneration;\n  const structuralGeneration = state.structuralGeneration;\n  return () =>\n    state.lifecycleGeneration === lifecycleGeneration &&\n    state.structuralGeneration === structuralGeneration;\n}\n\nconst SWEEP_ATTEMPT_LIMIT = 5;\nconst SWEEP_RETRY_BASE_MS = 60_000;\nconst SWEEP_RETRY_MAX_MS = 15 * 60_000;\n\nfunction isSweepAttemptDue(sweep: DormantMetadataSweep, now: number): boolean {\n  if (!sweep.lastAttemptedAt) {\n    return true;\n  }\n  const lastAttemptedAt = Date.parse(sweep.lastAttemptedAt);\n  if (!Number.isFinite(lastAttemptedAt)) {\n    return true;\n  }\n  const retryDelay = Math.min(\n    SWEEP_RETRY_BASE_MS * 2 ** Math.max(0, sweep.attemptCount - 1),\n    SWEEP_RETRY_MAX_MS,\n  );\n  return lastAttemptedAt + retryDelay <= now;\n}\n\nfunction restorationSweepIdentity(sweep: DormantMetadataSweep): string {\n  return `${sweep.requesterUserId}\\u0000${sweep.organizationId}\\u0000${sweep.generation}`;\n}\n\n/** A completed crawl can restore verified objects; absence never authorizes data loss. */\nasync function completeRestorationSweeps(\n  session: RestorationSweepSession,\n  sweeps: readonly DormantMetadataSweep[],\n): Promise<void> {\n  for (const sweep of sweeps) {\n    if (!session.isCurrent()) return;\n    // An unsigned 404 cannot prove that encrypted local edits are disposable.\n    // Leave unavailable metadata dormant until verified rediscovery or explicit deletion.\n    await session.persistence.completeDormantMetadataSweepRequest(\n      session.runtime.infra.execSql,\n      sweep,\n      session.isCurrent,\n    );\n  }\n}\n\nasync function claimDueRestorationSweeps(\n  session: RestorationSweepSession,\n  sweeps: readonly DormantMetadataSweep[],\n  forcedRetrySweepIds?: ReadonlySet<string> | undefined,\n): Promise<DormantMetadataSweep[]> {\n  const now = Date.now();\n  const attemptedAt = new Date(now).toISOString();\n  const claimed: DormantMetadataSweep[] = [];\n  for (const sweep of sweeps) {\n    if (!session.isCurrent()) {\n      return claimed;\n    }\n    if (forcedRetrySweepIds?.has(restorationSweepIdentity(sweep))) {\n      // The interrupted generation already claimed and durably counted this\n      // attempt. Resume that exact attempt after reset instead of consuming a\n      // new one or retiring it at the limit before its completion ran.\n      claimed.push(sweep);\n      continue;\n    }\n    if (sweep.attemptCount >= SWEEP_ATTEMPT_LIMIT) {\n      await session.persistence.completeDormantMetadataSweepRequest(\n        session.runtime.infra.execSql,\n        sweep,\n        session.isCurrent,\n      );\n      if (!session.isCurrent()) {\n        return claimed;\n      }\n      session.runtime.util.log(\n        `${getContainerContentsStoreLogLabel(session.state)}: retired exhausted dormant metadata sweep; metadata remains dormant`,\n      );\n      continue;\n    }\n    if (!isSweepAttemptDue(sweep, now)) {\n      continue;\n    }\n    const didClaim = await session.persistence.claimDormantMetadataSweepAttempt(\n      session.runtime.infra.execSql,\n      sweep,\n      attemptedAt,\n      session.isCurrent,\n    );\n    if (!session.isCurrent()) {\n      return claimed;\n    }\n    if (didClaim) {\n      claimed.push({\n        ...sweep,\n        attemptCount: sweep.attemptCount + 1,\n        lastAttemptedAt: attemptedAt,\n      });\n    }\n  }\n  return claimed;\n}\n\nasync function loadAndClaimRestorationSweeps(\n  session: RestorationSweepSession,\n  forcedRetrySweepIds?: ReadonlySet<string> | undefined,\n): Promise<DormantMetadataSweep[]> {\n  const requesterUserId = session.runtime.auth.userId;\n  if (!requesterUserId) {\n    return [];\n  }\n  const pendingSweeps =\n    await session.persistence.listDormantMetadataSweepRequests(\n      session.runtime.infra.execSql,\n      requesterUserId,\n    );\n  if (!session.isCurrent()) {\n    return [];\n  }\n  return claimDueRestorationSweeps(session, pendingSweeps, forcedRetrySweepIds);\n}\n\nfunction recreateRestorationSweepCompletion(\n  state: ContainerContentsStoreSyncState,\n  interruptedSession: RestorationSweepSession,\n  interruptedSweeps: readonly DormantMetadataSweep[],\n): () => Promise<void> {\n  const session = createRestorationSweepSession(\n    state,\n    captureRestorationGeneration(state),\n  );\n  return async () => {\n    const sameStorage =\n      session.runtime.infra.execSql ===\n      interruptedSession.runtime.infra.execSql;\n    const forcedRetrySweepIds = sameStorage\n      ? new Set(interruptedSweeps.map(restorationSweepIdentity))\n      : undefined;\n    const sweeps = await loadAndClaimRestorationSweeps(\n      session,\n      forcedRetrySweepIds,\n    );\n    if (session.isCurrent() && sweeps.length > 0) {\n      await completeRestorationSweeps(session, sweeps);\n    }\n  };\n}\n\nasync function reconcileRestoredAccess(input: {\n  isCurrent: () => boolean;\n  requestHydration: RemoteHydrationRequester;\n  state: ContainerContentsStoreSyncState;\n}): Promise<void> {\n  const { requestHydration, state } = input;\n  const session = createRestorationSweepSession(state, input.isCurrent);\n  const sweeps = await loadAndClaimRestorationSweeps(session);\n  if (!session.isCurrent() || sweeps.length === 0) {\n    return;\n  }\n\n  await refreshAllRemoteHydration({\n    onFullyHydrated: () => completeRestorationSweeps(session, sweeps),\n    recreateOnFullyHydratedAfterReset: () =>\n      recreateRestorationSweepCompletion(state, session, sweeps),\n    requestHydration,\n    resetAllLaneWatermarks: true,\n    scheduleSyncAfterHydration: false,\n    scheduleSyncOnHydrationChange: false,\n    state,\n  });\n}\n\nexport function createRestoredAccessReconciler(input: {\n  requestHydration: RemoteHydrationRequester;\n  state: ContainerContentsStoreSyncState;\n}): (isCurrent?: () => boolean) => Promise<void> {\n  const { state } = input;\n  return async (isCurrent = captureRestorationGeneration(state)) => {\n    try {\n      await reconcileRestoredAccess({ ...input, isCurrent });\n    } catch (error) {\n      if (!isCurrent()) {\n        return;\n      }\n      const message = `${getContainerContentsStoreLogLabel(state)}: dormant metadata sweep failed`;\n      if (state.runtime.util.logError) {\n        state.runtime.util.logError(message, error);\n      } else {\n        state.runtime.util.log(message);\n      }\n    }\n  };\n}\n"]}

package/stores/container-contents/backgroundHydration.js

@@ -0,0 +1,32 @@
+import { errorMessage } from "../../data/errorMessage.js";
+import { reportKeyingVerificationErrorInCauseChain } from "../../data/keyingProjectionVerification/error.js";
+import { isDatabaseUnavailableError } from "../../workflows/container-contents/syncLane.js";
+/** Observe a background refresh without changing the caller's rejection. */
+export function observeContainerBackgroundHydration(state, hydration) {
+    const generation = state.lifecycleGeneration;
+    const runtime = state.runtime;
+    void hydration.catch(async (error) => {
+        if (state.lifecycleGeneration !== generation ||
+            isDatabaseUnavailableError(error))
+            return;
+        await reportKeyingVerificationErrorInCauseChain(error, runtime.util.reportSecurityIncident, {
+            objectId: null,
+            objectKind: "container",
+            operation: "container.hydration.background",
+            organizationId: runtime.auth.organizationId,
+        });
+        try {
+            const message = "Container background hydration failed";
+            if (runtime.util.logError) {
+                await runtime.util.logError(message, error);
+            }
+            else {
+                await runtime.util.log(`${message}: ${errorMessage(error)}`);
+            }
+        }
+        catch {
+            // A host logger must not turn an observed refusal into a new rejection.
+        }
+    });
+}
+//# sourceMappingURL=backgroundHydration.js.map

package/stores/container-contents/backgroundHydration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backgroundHydration.js","sourceRoot":"","sources":["backgroundHydration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,yCAAyC,EAAE,MAAM,+CAA+C,CAAC;AAC1G,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAGzF,4EAA4E;AAC5E,MAAM,UAAU,mCAAmC,CACjD,KAAsC,EACtC,SAAwB;IAExB,MAAM,UAAU,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QAC5C,IACE,KAAK,CAAC,mBAAmB,KAAK,UAAU;YACxC,0BAA0B,CAAC,KAAK,CAAC;YAEjC,OAAO;QAET,MAAM,yCAAyC,CAC7C,KAAK,EACL,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,gCAAgC;YAC3C,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,CACF,CAAC;QACF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,uCAAuC,CAAC;YACxD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1B,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { errorMessage } from \"../../data/errorMessage\";\nimport { reportKeyingVerificationErrorInCauseChain } from \"../../data/keyingProjectionVerification/error\";\nimport { isDatabaseUnavailableError } from \"../../workflows/container-contents/syncLane\";\nimport type { ContainerContentsStoreSyncState } from \"./syncAgentTypes\";\n\n/** Observe a background refresh without changing the caller's rejection. */\nexport function observeContainerBackgroundHydration(\n  state: ContainerContentsStoreSyncState,\n  hydration: Promise<void>,\n): void {\n  const generation = state.lifecycleGeneration;\n  const runtime = state.runtime;\n  void hydration.catch(async (error: unknown) => {\n    if (\n      state.lifecycleGeneration !== generation ||\n      isDatabaseUnavailableError(error)\n    )\n      return;\n\n    await reportKeyingVerificationErrorInCauseChain(\n      error,\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: null,\n        objectKind: \"container\",\n        operation: \"container.hydration.background\",\n        organizationId: runtime.auth.organizationId,\n      },\n    );\n    try {\n      const message = \"Container background hydration failed\";\n      if (runtime.util.logError) {\n        await runtime.util.logError(message, error);\n      } else {\n        await runtime.util.log(`${message}: ${errorMessage(error)}`);\n      }\n    } catch {\n      // A host logger must not turn an observed refusal into a new rejection.\n    }\n  });\n}\n"]}

package/stores/container-contents/containerContentsStore.d.ts

@@ -0,0 +1,18 @@
+import type { DomainScope } from "../../data/domainScope.js";
+import { type ContainerContentsPersistence } from "../../workflows/container-contents/containerPersistence.js";
+import { type ContainerContentsStoreRuntime, createContainerContentsStoreSyncAgent } from "./syncAgent.js";
+import type { ContainerContentsStore, ContainerContentsStoreOptions, ContainerContentsStoreState } from "./types.js";
+type ContainerWriteMethods = Pick<ContainerContentsStore, "createChild" | "deleteContainer" | "emptyTrash" | "ensureSystemContainer" | "moveContainer" | "prepareGroupRewrap" | "purgeContainer" | "renameContainer" | "setContainerIcon" | "shareWithGroup" | "shareWithUser">;
+export declare function createContainerWriteMethods(state: ContainerContentsStoreState, syncAgent: ReturnType<typeof createContainerContentsStoreSyncAgent>): ContainerWriteMethods;
+export declare function createContainerContentsStore(initialRuntime: ContainerContentsStoreRuntime, persistence?: ContainerContentsPersistence, options?: ContainerContentsStoreOptions): ContainerContentsStore;
+export declare function getOrCreateContainerContentsStore(domainScope: DomainScope, runtime: ContainerContentsStoreRuntime, options?: ContainerContentsStoreOptions): ContainerContentsStore;
+/**
+ * Arm the next structural pass's document-priming scan for a domain scope.
+ * Priming normally re-arms only on store creation and topology changes, so a
+ * caller that just tore down a document's local state uses this to have the
+ * still-listed server document re-created without waiting for an app
+ * restart. Returns false when the scope has no container-contents store yet;
+ * the startup priming pass covers that case.
+ */
+export declare function requestContainerContentsDocumentPriming(domainScope: DomainScope): boolean;
+export {};