@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/stores/container-contents/documentRecovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentRecovery.js","sourceRoot":"","sources":["documentRecovery.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iCAAiC,EACjC,4BAA4B,GAC7B,MAAM,oDAAoD,CAAC;AAM5D,OAAO,EAEL,uCAAuC,GACxC,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sDAAsD,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAoB/D,MAAM,yBAAyB,GAAG,IAAI,OAAO,EAG1C,CAAC;AACJ,MAAM,uBAAuB,GAAG,IAAI,OAAO,EAGxC,CAAC;AAEJ,SAAS,eAAe,CACtB,OAA8C;IAE9C,OAAO;QACL,uBAAuB,EAAE,CAAC,WAAW,EAAE,EAAE,CACvC,uCAAuC,CAAC,OAAO,EAAE,WAAW,CAAC;QAC/D,iBAAiB,EAAE,CAAC,EAClB,UAAU,EACV,OAAO,EACP,OAAO,GACR,EAA+B,EAAE,CAChC,iBAAiB,CACf,OAAO,CAAC,KAAK,CAAC,WAAW,EACzB,OAAO,EACP,OAAO,EACP,UAAU,CACX;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAiC,EACjC,eAAuB,EACvB,YAA2B,GAAG,EAAE,CAAC,IAAI;IAErC,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO;IACzB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,iCAAiC,CAAC;QACtC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC;QAC9B,SAAS;QACT,eAAe;QACf,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAiC,EACjC,YAA2B,GAAG,EAAE,CAAC,IAAI;IAErC,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO;IACzB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,6EAA6E;IAC7E,2EAA2E;IAC3E,yDAAyD;IACzD,KAAK,CAAC,yBAAyB,GAAG,KAAK,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC;YAChD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC;YAC9B,SAAS;YACT,cAAc,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,IAAI,IAAI;YACpD,OAAO;SACR,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACvC,OAAO;QACT,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,GAAG,iCAAiC,CAAC,KAAK,CAAC,iCAAiC,MAAM,CAAC,cAAc,UAAU,MAAM,CAAC,SAAS,WAAW,MAAM,CAAC,WAAW,aAAa,MAAM,CAAC,iBAAiB,eAAe,MAAM,CAAC,eAAe,EAAE,CACrO,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACvC,OAAO;QACT,CAAC;QACD,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;QACvC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAiC,EACjC,YAA2B,GAAG,EAAE,CAAC,IAAI;IAErC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,OAAO,EAAE,CAAC;QACnD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,MAA2D,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,uBAAuB,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,iCAAiC,CAAC,KAAK,CAAC,8BAA8B,CAAC;QAC1F,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,iCAAiC,CAAC,KAAK,CAAC,gCAAgC,MAAM,CAAC,MAAM,eAAe,MAAM,CAAC,cAAc,EAAE,CAAC;IAC/I,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,eAAe,GACnB,gBAAgB,EAAE,OAAO,KAAK,OAAO;QACnC,CAAC,CAAC,gBAAgB,CAAC,eAAe,GAAG,CAAC;QACtC,CAAC,CAAC,CAAC,CAAC;IACR,yBAAyB,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACnC,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,CAAC,eAAe,GAAG,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,gBAAgB,eAAe,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACxC,uBAAuB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC","sourcesContent":["import type { ContainerContentsPersistence } from \"../../workflows/container-contents/containerPersistence\";\nimport {\n  primeDocumentsForContainerSubtree,\n  primeDocumentsForLoadedRoots,\n} from \"../../workflows/container-contents/documentPriming\";\nimport type {\n  ContainerDocumentPrimeHost,\n  ContainerDocumentPrimeStore,\n} from \"../../workflows/container-contents/documentQueries/types\";\nimport type { ContainerState } from \"../../workflows/container-contents/remoteHydration\";\nimport {\n  type ContainerContentsStoreWorkflowRuntime,\n  createContainerContentsDocumentsRuntime,\n} from \"../../workflows/container-contents/runtime\";\nimport type { StaleRootRecoveryStatus } from \"../../workflows/container-contents/staleRootRecovery\";\nimport { recoverStaleSessionRoot } from \"../../workflows/container-contents/staleRootRecovery\";\nimport { isDatabaseUnavailableError } from \"../../workflows/container-contents/syncLane\";\nimport { openDocumentStore } from \"../documents\";\nimport { getContainerContentsStoreLogLabel } from \"./logLabel\";\n\ntype PrimeDocumentRuntime = ReturnType<\n  typeof createContainerContentsDocumentsRuntime\n>;\n\ninterface DocumentRecoveryStoreState {\n  readonly containersById: Map<string, ContainerState>;\n  documentStoresNeedPriming: boolean;\n  readonly logLabel?: string | undefined;\n  readonly persistence: ContainerContentsPersistence;\n  readonly rootLaneHydrated: boolean;\n  readonly runtime: ContainerContentsStoreWorkflowRuntime;\n}\n\ninterface StaleRootRecoveryLogState {\n  readonly message: string;\n  readonly occurrenceCount: number;\n}\n\nconst staleRootRecoveryLogState = new WeakMap<\n  DocumentRecoveryStoreState,\n  StaleRootRecoveryLogState\n>();\nconst rejectedAdoptionRuntime = new WeakMap<\n  DocumentRecoveryStoreState,\n  ContainerContentsStoreWorkflowRuntime\n>();\n\nfunction createPrimeHost(\n  runtime: ContainerContentsStoreWorkflowRuntime,\n): ContainerDocumentPrimeHost<PrimeDocumentRuntime> {\n  return {\n    documentWorkflowRuntime: (containerId) =>\n      createContainerContentsDocumentsRuntime(runtime, containerId),\n    openDocumentStore: ({\n      documentId,\n      localId,\n      runtime,\n    }): ContainerDocumentPrimeStore =>\n      openDocumentStore(\n        runtime.state.domainScope,\n        localId,\n        runtime,\n        documentId,\n      ),\n  };\n}\n\nexport async function primeStoreDocumentSubtree(\n  state: DocumentRecoveryStoreState,\n  rootContainerId: string,\n  isCurrent: () => boolean = () => true,\n): Promise<void> {\n  if (!isCurrent()) return;\n  const runtime = state.runtime;\n  await primeDocumentsForContainerSubtree({\n    containersById: state.containersById,\n    host: createPrimeHost(runtime),\n    isCurrent,\n    rootContainerId,\n    runtime,\n  });\n}\n\nexport async function primeStoreDocuments(\n  state: DocumentRecoveryStoreState,\n  isCurrent: () => boolean = () => true,\n): Promise<void> {\n  if (!isCurrent()) return;\n  const runtime = state.runtime;\n  // Consume the current signal before scanning. A topology/root reconciliation\n  // that lands during an awaited query can then re-arm the next pass without\n  // this pass erasing that newer signal when it completes.\n  state.documentStoresNeedPriming = false;\n  try {\n    const result = await primeDocumentsForLoadedRoots({\n      containersById: state.containersById,\n      host: createPrimeHost(runtime),\n      isCurrent,\n      organizationId: runtime.auth?.organizationId ?? null,\n      runtime,\n    });\n    if (!isCurrent()) {\n      state.documentStoresNeedPriming = true;\n      return;\n    }\n    runtime.util.log(\n      `${getContainerContentsStoreLogLabel(state)}: document priming candidates=${result.candidateCount} roots=${result.rootCount} primed=${result.primedCount} orphaned=${result.orphanPrimedCount} unroutable=${result.unroutableCount}`,\n    );\n  } catch (error) {\n    if (!isCurrent()) {\n      state.documentStoresNeedPriming = true;\n      return;\n    }\n    state.documentStoresNeedPriming = true;\n    throw error;\n  }\n}\n\nexport async function recoverStoreStaleRoot(\n  state: DocumentRecoveryStoreState,\n  isCurrent: () => boolean = () => true,\n): Promise<StaleRootRecoveryStatus> {\n  if (!isCurrent()) {\n    return \"context-changed\";\n  }\n  const runtime = state.runtime;\n  if (rejectedAdoptionRuntime.get(state) === runtime) {\n    return \"not-needed\";\n  }\n\n  let result: Awaited<ReturnType<typeof recoverStaleSessionRoot>>;\n  try {\n    result = await recoverStaleSessionRoot({ ...state, runtime }, isCurrent);\n  } catch (error) {\n    if (!isCurrent()) {\n      return \"context-changed\";\n    }\n    if (isDatabaseUnavailableError(error)) {\n      throw error;\n    }\n    const message = `${getContainerContentsStoreLogLabel(state)}: stale root recovery failed`;\n    if (state.runtime.util.logError) {\n      state.runtime.util.logError(message, error);\n    } else {\n      state.runtime.util.log(message);\n    }\n    return \"not-needed\";\n  }\n  if (!isCurrent()) {\n    return \"context-changed\";\n  }\n  const message = `${getContainerContentsStoreLogLabel(state)}: stale root recovery status=${result.status} candidates=${result.candidateCount}`;\n  const previousLogState = staleRootRecoveryLogState.get(state);\n  const occurrenceCount =\n    previousLogState?.message === message\n      ? previousLogState.occurrenceCount + 1\n      : 1;\n  staleRootRecoveryLogState.set(state, { message, occurrenceCount });\n  if (result.status !== \"not-needed\") {\n    if (occurrenceCount === 1) {\n      runtime.util.log(message);\n    } else if ((occurrenceCount & (occurrenceCount - 1)) === 0) {\n      runtime.util.log(`${message} occurrences=${occurrenceCount}`);\n    }\n  }\n  if (result.status === \"context-changed\") {\n    rejectedAdoptionRuntime.set(state, runtime);\n  } else {\n    rejectedAdoptionRuntime.delete(state);\n  }\n  if (result.reassigned) {\n    state.documentStoresNeedPriming = true;\n  }\n  return result.status;\n}\n"]}

package/stores/container-contents/documentRotation.js

@@ -0,0 +1,13 @@
+import { createContainerContentsDocumentsRuntime, } from "../../workflows/container-contents/runtime.js";
+import { openDocumentStore } from "../documents/index.js";
+export async function prepareContainerDocumentRotationSnapshot(runtime, document) {
+    if (!document.documentId || !document.containerId) {
+        return null;
+    }
+    const store = openDocumentStore(runtime.state.domainScope, document.id, createContainerContentsDocumentsRuntime(runtime, document.containerId), document.documentId);
+    if (!(await store.ensureInitialized())) {
+        return null;
+    }
+    return store.assertCanRotateContentKey();
+}
+//# sourceMappingURL=documentRotation.js.map

package/stores/container-contents/documentRotation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentRotation.js","sourceRoot":"","sources":["documentRotation.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,uCAAuC,GACxC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,OAAyC,EACzC,QAAyB;IAEzB,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAC7B,OAAO,CAAC,KAAK,CAAC,WAAW,EACzB,QAAQ,CAAC,EAAE,EACX,uCAAuC,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,EACtE,QAAQ,CAAC,UAAU,CACpB,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,yBAAyB,EAAE,CAAC;AAC3C,CAAC","sourcesContent":["import type { DocumentSummary } from \"../../data/documents/documentSummary\";\nimport {\n  type ContainerContentsWorkflowRuntime,\n  createContainerContentsDocumentsRuntime,\n} from \"../../workflows/container-contents/runtime\";\nimport { openDocumentStore } from \"../documents\";\n\nexport async function prepareContainerDocumentRotationSnapshot(\n  runtime: ContainerContentsWorkflowRuntime,\n  document: DocumentSummary,\n): Promise<Uint8Array | null> {\n  if (!document.documentId || !document.containerId) {\n    return null;\n  }\n  const store = openDocumentStore(\n    runtime.state.domainScope,\n    document.id,\n    createContainerContentsDocumentsRuntime(runtime, document.containerId),\n    document.documentId,\n  );\n  if (!(await store.ensureInitialized())) {\n    return null;\n  }\n  return store.assertCanRotateContentKey();\n}\n"]}

package/stores/container-contents/documentWork.js

@@ -0,0 +1,29 @@
+/** Runs root repair before any work that consumes its rewritten projections. */
+export async function runContainerDocumentWork(input) {
+    if (!input.isCurrent()) {
+        return "abandoned";
+    }
+    const recoveryStatus = await input.recoverStaleRoot();
+    if (!input.isCurrent()) {
+        return "abandoned";
+    }
+    if (recoveryStatus === "context-changed") {
+        input.onContextChanged();
+        return "context-changed";
+    }
+    const movedDocumentCount = await input.syncPendingDocumentMoves();
+    if (!input.isCurrent()) {
+        return "abandoned";
+    }
+    if (movedDocumentCount > 0) {
+        input.onDocumentsMoved();
+    }
+    if (input.shouldPrimeDocuments()) {
+        await input.primeDocuments();
+        if (!input.isCurrent()) {
+            return "abandoned";
+        }
+    }
+    return "completed";
+}
+//# sourceMappingURL=documentWork.js.map

package/stores/container-contents/documentWork.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentWork.js","sourceRoot":"","sources":["documentWork.ts"],"names":[],"mappings":"AAYA,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAiC;IAEjC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACtD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,cAAc,KAAK,iBAAiB,EAAE,CAAC;QACzC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACzB,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,KAAK,CAAC,wBAAwB,EAAE,CAAC;IAClE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,gBAAgB,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,KAAK,CAAC,oBAAoB,EAAE,EAAE,CAAC;QACjC,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACvB,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC","sourcesContent":["import type { StaleRootRecoveryStatus } from \"../../workflows/container-contents/staleRootRecovery\";\n\ninterface ContainerDocumentWorkInput {\n  readonly isCurrent: () => boolean;\n  readonly onContextChanged: () => void;\n  readonly onDocumentsMoved: () => void;\n  readonly primeDocuments: () => Promise<void>;\n  readonly recoverStaleRoot: () => Promise<StaleRootRecoveryStatus>;\n  readonly shouldPrimeDocuments: () => boolean;\n  readonly syncPendingDocumentMoves: () => Promise<number>;\n}\n\n/** Runs root repair before any work that consumes its rewritten projections. */\nexport async function runContainerDocumentWork(\n  input: ContainerDocumentWorkInput,\n): Promise<\"abandoned\" | \"completed\" | \"context-changed\"> {\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  const recoveryStatus = await input.recoverStaleRoot();\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  if (recoveryStatus === \"context-changed\") {\n    input.onContextChanged();\n    return \"context-changed\";\n  }\n\n  const movedDocumentCount = await input.syncPendingDocumentMoves();\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  if (movedDocumentCount > 0) {\n    input.onDocumentsMoved();\n  }\n  if (input.shouldPrimeDocuments()) {\n    await input.primeDocuments();\n    if (!input.isCurrent()) {\n      return \"abandoned\";\n    }\n  }\n  return \"completed\";\n}\n"]}

package/stores/container-contents/emptyTrashOperation.js

@@ -0,0 +1,20 @@
+import { runContainerPurge } from "./containerPurgeCore.js";
+// Permanently destroy EVERYTHING under the Trash bin — every trashed folder's
+// whole subtree and every document deleted straight into Trash — while leaving
+// the Trash system container itself in place. This is "Empty Trash": it reuses
+// the recursive purge engine with keepRootContainer so the bin survives, and it
+// inherits that engine's semantics — documents also linked outside Trash are
+// unlinked (not destroyed), containers are torn down leaf-first, a failed item is
+// skipped rather than aborting the sweep, and an optional signal cancels between
+// items. The target must be a real system container (the Trash bin); like every
+// purge it is online-only when any of its contents are remote.
+export async function emptyTrash(state, syncAgent, trashContainerId, options, isCurrent = () => true) {
+    return runContainerPurge(state, syncAgent, trashContainerId, options, isCurrent, {
+        describeResult: (_target, result) => `emptied trash (${result.purgedContainerIds.length} container(s) removed, ${result.failedCount} failed)`,
+        // A clean empty: nothing failed and it ran to completion.
+        didSucceed: (result) => !result.aborted && result.failedCount === 0,
+        keepRootContainer: true,
+        validateTarget: (target) => (target.container.systemSlot ?? null) !== null,
+    });
+}
+//# sourceMappingURL=emptyTrashOperation.js.map

package/stores/container-contents/emptyTrashOperation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emptyTrashOperation.js","sourceRoot":"","sources":["emptyTrashOperation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAKzD,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,kFAAkF;AAClF,iFAAiF;AACjF,gFAAgF;AAChF,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAkC,EAClC,SAA0C,EAC1C,gBAAwB,EACxB,OAAsB,EACtB,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,OAAO,iBAAiB,CACtB,KAAK,EACL,SAAS,EACT,gBAAgB,EAChB,OAAO,EACP,SAAS,EACT;QACE,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAClC,kBAAkB,MAAM,CAAC,kBAAkB,CAAC,MAAM,0BAA0B,MAAM,CAAC,WAAW,UAAU;QAC1G,0DAA0D;QAC1D,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,WAAW,KAAK,CAAC;QACnE,iBAAiB,EAAE,IAAI;QACvB,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CACzB,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,IAAI;KACjD,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type { PurgeOptions } from \"../../workflows/container-contents/container-state/purgeProgress\";\nimport { runContainerPurge } from \"./containerPurgeCore\";\nimport type { ContainerContentsStoreSyncAgent } from \"./syncAgent\";\nimport type { ContainerContentsStoreState } from \"./types\";\nimport type { ContainerWriteGuard } from \"./writeGeneration\";\n\n// Permanently destroy EVERYTHING under the Trash bin — every trashed folder's\n// whole subtree and every document deleted straight into Trash — while leaving\n// the Trash system container itself in place. This is \"Empty Trash\": it reuses\n// the recursive purge engine with keepRootContainer so the bin survives, and it\n// inherits that engine's semantics — documents also linked outside Trash are\n// unlinked (not destroyed), containers are torn down leaf-first, a failed item is\n// skipped rather than aborting the sweep, and an optional signal cancels between\n// items. The target must be a real system container (the Trash bin); like every\n// purge it is online-only when any of its contents are remote.\nexport async function emptyTrash(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  trashContainerId: string,\n  options?: PurgeOptions,\n  isCurrent: ContainerWriteGuard = () => true,\n): Promise<boolean> {\n  return runContainerPurge(\n    state,\n    syncAgent,\n    trashContainerId,\n    options,\n    isCurrent,\n    {\n      describeResult: (_target, result) =>\n        `emptied trash (${result.purgedContainerIds.length} container(s) removed, ${result.failedCount} failed)`,\n      // A clean empty: nothing failed and it ran to completion.\n      didSucceed: (result) => !result.aborted && result.failedCount === 0,\n      keepRootContainer: true,\n      validateTarget: (target) =>\n        (target.container.systemSlot ?? null) !== null,\n    },\n  );\n}\n"]}

package/stores/container-contents/existingSystemContainer.js

@@ -0,0 +1,58 @@
+import { persistContainerState } from "./containerStatePersistence.js";
+import { getContainerContentsStoreLogLabel } from "./logLabel.js";
+import { invalidateRemoteContainerWrites } from "./remoteWriteGuards.js";
+import { applySystemContainerIcon } from "./systemContainerIcon.js";
+import { findRootContainerState } from "./systemContainerLookup.js";
+import { promoteExistingLocalSystemContainerSync } from "./systemContainerPromotion.js";
+import { toContainerNode } from "./utils.js";
+export async function updateExistingSystemContainer(state, syncAgent, existing, options, isCurrent) {
+    if ("icon" in options) {
+        const iconApplied = await applySystemContainerIcon({
+            containerState: existing,
+            icon: options.icon,
+            persistIcon: async (containerState, icon, update) => {
+                if (options.deferRemoteBootstrap) {
+                    invalidateRemoteContainerWrites(state, [containerState.container.id]);
+                }
+                const result = await persistContainerState(state, containerState, {
+                    patch: { icon },
+                    updateView: false,
+                    localMetadataPatch: { icon },
+                    localUpdate: update,
+                    isCurrent,
+                });
+                return result.status;
+            },
+            state,
+            syncAgent,
+            isCurrent,
+        });
+        if (!iconApplied || !isCurrent()) {
+            return null;
+        }
+    }
+    const promoted = await promoteExistingLocalSystemContainerSync({
+        containerState: existing,
+        logLabel: getContainerContentsStoreLogLabel(state),
+        options,
+        persistPromotion: async (containerState, promotion) => {
+            if (options.deferRemoteBootstrap) {
+                invalidateRemoteContainerWrites(state, [containerState.container.id]);
+            }
+            const result = await persistContainerState(state, containerState, {
+                saveOptions: promotion.queueCreateIntent
+                    ? { createIntent: { parentContainerId: promotion.parentContainerId } }
+                    : undefined,
+                localUpdate: promotion.metadataUpdate,
+                isCurrent,
+            });
+            return result.status === "persisted";
+        },
+        rootState: findRootContainerState(state),
+        state,
+        syncAgent,
+        isCurrent,
+    });
+    return promoted && isCurrent() ? toContainerNode(existing) : null;
+}
+//# sourceMappingURL=existingSystemContainer.js.map

package/stores/container-contents/existingSystemContainer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"existingSystemContainer.js","sourceRoot":"","sources":["existingSystemContainer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAKtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,uCAAuC,EAAE,MAAM,4BAA4B,CAAC;AAKrF,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG1C,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAkC,EAClC,SAA0C,EAC1C,QAAwB,EACxB,OAAqC,EACrC,SAA8B;IAE9B,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC;YACjD,cAAc,EAAE,QAAQ;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;gBAClD,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;oBACjC,+BAA+B,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,cAAc,EAAE;oBAChE,KAAK,EAAE,EAAE,IAAI,EAAE;oBACf,UAAU,EAAE,KAAK;oBACjB,kBAAkB,EAAE,EAAE,IAAI,EAAE;oBAC5B,WAAW,EAAE,MAAM;oBACnB,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACvB,CAAC;YACD,KAAK;YACL,SAAS;YACT,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,uCAAuC,CAAC;QAC7D,cAAc,EAAE,QAAQ;QACxB,QAAQ,EAAE,iCAAiC,CAAC,KAAK,CAAC;QAClD,OAAO;QACP,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE;YACpD,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;gBACjC,+BAA+B,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,cAAc,EAAE;gBAChE,WAAW,EAAE,SAAS,CAAC,iBAAiB;oBACtC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAAE;oBACtE,CAAC,CAAC,SAAS;gBACb,WAAW,EAAE,SAAS,CAAC,cAAc;gBACrC,SAAS;aACV,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC;QACvC,CAAC;QACD,SAAS,EAAE,sBAAsB,CAAC,KAAK,CAAC;QACxC,KAAK;QACL,SAAS;QACT,SAAS;KACV,CAAC,CAAC;IACH,OAAO,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC","sourcesContent":["import { persistContainerState } from \"./containerStatePersistence\";\nimport { getContainerContentsStoreLogLabel } from \"./logLabel\";\nimport { invalidateRemoteContainerWrites } from \"./remoteWriteGuards\";\nimport type {\n  ContainerContentsStoreSyncAgent,\n  ContainerState,\n} from \"./syncAgent\";\nimport { applySystemContainerIcon } from \"./systemContainerIcon\";\nimport { findRootContainerState } from \"./systemContainerLookup\";\nimport { promoteExistingLocalSystemContainerSync } from \"./systemContainerPromotion\";\nimport type {\n  ContainerContentsStoreState,\n  EnsureSystemContainerOptions,\n} from \"./types\";\nimport { toContainerNode } from \"./utils\";\nimport type { ContainerWriteGuard } from \"./writeGeneration\";\n\nexport async function updateExistingSystemContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  existing: ContainerState,\n  options: EnsureSystemContainerOptions,\n  isCurrent: ContainerWriteGuard,\n) {\n  if (\"icon\" in options) {\n    const iconApplied = await applySystemContainerIcon({\n      containerState: existing,\n      icon: options.icon,\n      persistIcon: async (containerState, icon, update) => {\n        if (options.deferRemoteBootstrap) {\n          invalidateRemoteContainerWrites(state, [containerState.container.id]);\n        }\n        const result = await persistContainerState(state, containerState, {\n          patch: { icon },\n          updateView: false,\n          localMetadataPatch: { icon },\n          localUpdate: update,\n          isCurrent,\n        });\n        return result.status;\n      },\n      state,\n      syncAgent,\n      isCurrent,\n    });\n    if (!iconApplied || !isCurrent()) {\n      return null;\n    }\n  }\n  const promoted = await promoteExistingLocalSystemContainerSync({\n    containerState: existing,\n    logLabel: getContainerContentsStoreLogLabel(state),\n    options,\n    persistPromotion: async (containerState, promotion) => {\n      if (options.deferRemoteBootstrap) {\n        invalidateRemoteContainerWrites(state, [containerState.container.id]);\n      }\n      const result = await persistContainerState(state, containerState, {\n        saveOptions: promotion.queueCreateIntent\n          ? { createIntent: { parentContainerId: promotion.parentContainerId } }\n          : undefined,\n        localUpdate: promotion.metadataUpdate,\n        isCurrent,\n      });\n      return result.status === \"persisted\";\n    },\n    rootState: findRootContainerState(state),\n    state,\n    syncAgent,\n    isCurrent,\n  });\n  return promoted && isCurrent() ? toContainerNode(existing) : null;\n}\n"]}

package/stores/container-contents/groupRewrapOperation.js

@@ -0,0 +1,52 @@
+import { containerStateHasCurrentGroupGrant } from "../../workflows/container-contents/container-state/groupGrantVerification.js";
+import { prepareContainerStateGroupRewrap } from "../../workflows/container-contents/container-state/share.js";
+export async function prepareContainerGroupRewrap(state, containerId, groupId, accessLevel, options, isCurrent = () => true) {
+    if (state.runtime.infra.dbStatus !== "ready" ||
+        !state.snapshot.ready ||
+        !state.runtime.auth.isAuthenticated ||
+        !state.runtime.state.online) {
+        return null;
+    }
+    const containerState = state.containersById.get(containerId);
+    if (!containerState) {
+        return null;
+    }
+    const preparation = await prepareContainerStateGroupRewrap({
+        accessLevel,
+        containerState,
+        groupId,
+        requireExistingGrant: options?.requireExistingGrant,
+        resolveProjectionUserKey: state.resolveProjectionUserKey,
+        runtime: state.runtime,
+        stillCurrent: isCurrent,
+    });
+    return isCurrent() ? preparation : null;
+}
+export async function verifyContainerGroupRewrapCurrent(state, containerId, groupId, accessLevel, expectedGroupHead, expectedContainerId, expectedOrganizationId, isCurrent = () => true) {
+    if (state.runtime.infra.dbStatus !== "ready" ||
+        !state.snapshot.ready ||
+        !state.runtime.auth.isAuthenticated ||
+        !state.runtime.state.online) {
+        return false;
+    }
+    if (containerId !== expectedContainerId) {
+        return false;
+    }
+    const containerState = state.containersById.get(expectedContainerId);
+    if (!containerState) {
+        return false;
+    }
+    const current = await containerStateHasCurrentGroupGrant({
+        accessLevel,
+        containerState,
+        expectedContainerId,
+        expectedGroupHead,
+        expectedOrganizationId,
+        groupId,
+        resolveProjectionUserKey: state.resolveProjectionUserKey,
+        runtime: state.runtime,
+        stillCurrent: isCurrent,
+    });
+    return isCurrent() && current;
+}
+//# sourceMappingURL=groupRewrapOperation.js.map

package/stores/container-contents/groupRewrapOperation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groupRewrapOperation.js","sourceRoot":"","sources":["groupRewrapOperation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,MAAM,2EAA2E,CAAC;AAC/H,OAAO,EAAE,gCAAgC,EAAE,MAAM,0DAA0D,CAAC;AAO5G,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAkC,EAClC,WAAmB,EACnB,OAAe,EACf,WAA8C,EAC9C,OAAwD,EACxD,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QACxC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK;QACrB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC7D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,gCAAgC,CAAC;QACzD,WAAW;QACX,cAAc;QACd,OAAO;QACP,oBAAoB,EAAE,OAAO,EAAE,oBAAoB;QACnD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,KAAkC,EAClC,WAAmB,EACnB,OAAe,EACf,WAA8C,EAC9C,iBAA0C,EAC1C,mBAA2B,EAC3B,sBAA8B,EAC9B,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QACxC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK;QACrB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,WAAW,KAAK,mBAAmB,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACrE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,kCAAkC,CAAC;QACvD,WAAW;QACX,cAAc;QACd,mBAAmB;QACnB,iBAAiB;QACjB,sBAAsB;QACtB,OAAO;QACP,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,OAAO,SAAS,EAAE,IAAI,OAAO,CAAC;AAChC,CAAC","sourcesContent":["import type { ReferencedPrincipalHead } from \"@tearleads/crypto\";\nimport { containerStateHasCurrentGroupGrant } from \"../../workflows/container-contents/container-state/groupGrantVerification\";\nimport { prepareContainerStateGroupRewrap } from \"../../workflows/container-contents/container-state/share\";\nimport type {\n  ContainerContentsShareAccessLevel,\n  ContainerContentsStoreState,\n} from \"./types\";\nimport type { ContainerWriteGuard } from \"./writeGeneration\";\n\nexport async function prepareContainerGroupRewrap(\n  state: ContainerContentsStoreState,\n  containerId: string,\n  groupId: string,\n  accessLevel: ContainerContentsShareAccessLevel,\n  options?: { requireExistingGrant?: boolean } | undefined,\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  if (\n    state.runtime.infra.dbStatus !== \"ready\" ||\n    !state.snapshot.ready ||\n    !state.runtime.auth.isAuthenticated ||\n    !state.runtime.state.online\n  ) {\n    return null;\n  }\n  const containerState = state.containersById.get(containerId);\n  if (!containerState) {\n    return null;\n  }\n\n  const preparation = await prepareContainerStateGroupRewrap({\n    accessLevel,\n    containerState,\n    groupId,\n    requireExistingGrant: options?.requireExistingGrant,\n    resolveProjectionUserKey: state.resolveProjectionUserKey,\n    runtime: state.runtime,\n    stillCurrent: isCurrent,\n  });\n  return isCurrent() ? preparation : null;\n}\n\nexport async function verifyContainerGroupRewrapCurrent(\n  state: ContainerContentsStoreState,\n  containerId: string,\n  groupId: string,\n  accessLevel: ContainerContentsShareAccessLevel,\n  expectedGroupHead: ReferencedPrincipalHead,\n  expectedContainerId: string,\n  expectedOrganizationId: string,\n  isCurrent: ContainerWriteGuard = () => true,\n): Promise<boolean> {\n  if (\n    state.runtime.infra.dbStatus !== \"ready\" ||\n    !state.snapshot.ready ||\n    !state.runtime.auth.isAuthenticated ||\n    !state.runtime.state.online\n  ) {\n    return false;\n  }\n  if (containerId !== expectedContainerId) {\n    return false;\n  }\n  const containerState = state.containersById.get(expectedContainerId);\n  if (!containerState) {\n    return false;\n  }\n\n  const current = await containerStateHasCurrentGroupGrant({\n    accessLevel,\n    containerState,\n    expectedContainerId,\n    expectedGroupHead,\n    expectedOrganizationId,\n    groupId,\n    resolveProjectionUserKey: state.resolveProjectionUserKey,\n    runtime: state.runtime,\n    stillCurrent: isCurrent,\n  });\n  return isCurrent() && current;\n}\n"]}

package/stores/container-contents/index.d.ts

@@ -0,0 +1,6 @@
+export type { PurgeOptions, PurgeProgress, } from "../../workflows/container-contents/container-state/purgeProgress.js";
+export * from "./containerContentsStore.js";
+export { isAutomaticRootCatchupContainerNode, isForeignSystemContainerNode, isReconcilableContainerNode, isRemoteBackedContainerNode, isSystemContainerNode, } from "./reconcilableContainer.js";
+export * from "./state.js";
+export * from "./syncAgent.js";
+export * from "./types.js";

package/stores/container-contents/index.js

@@ -0,0 +1,6 @@
+export * from "./containerContentsStore.js";
+export { isAutomaticRootCatchupContainerNode, isForeignSystemContainerNode, isReconcilableContainerNode, isRemoteBackedContainerNode, isSystemContainerNode, } from "./reconcilableContainer.js";
+export * from "./state.js";
+export * from "./syncAgent.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/stores/container-contents/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAIA,cAAc,0BAA0B,CAAC;AACzC,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AACjC,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC","sourcesContent":["export type {\n  PurgeOptions,\n  PurgeProgress,\n} from \"../../workflows/container-contents/container-state/purgeProgress\";\nexport * from \"./containerContentsStore\";\nexport {\n  isAutomaticRootCatchupContainerNode,\n  isForeignSystemContainerNode,\n  isReconcilableContainerNode,\n  isRemoteBackedContainerNode,\n  isSystemContainerNode,\n} from \"./reconcilableContainer\";\nexport * from \"./state\";\nexport * from \"./syncAgent\";\nexport * from \"./types\";\n"]}

package/stores/container-contents/localRefresh.js

@@ -0,0 +1,189 @@
+import { encodeVersionVector } from "../../internal/loro/index.js";
+import { errorMessage } from "../../data/errorMessage.js";
+import { loadLocalContainerStates } from "../../workflows/container-contents/localState.js";
+import { installContainerMetadataRecord } from "../../workflows/container-contents/metadata.js";
+import { currentMetadataPullContinuation } from "../../workflows/container-contents/metadataPersistence.js";
+import { reconcileLocalOnlyRootContainers } from "../../workflows/container-contents/remoteHydration/reconciliation.js";
+import { isDatabaseUnavailableError } from "../../workflows/container-contents/syncLane.js";
+import { captureContainerStateMutationGenerations, containerStateMutatedAfter, } from "./containerStateMap.js";
+import { isRemoteBackedContainerState } from "./remoteBackedContainerState.js";
+function readMetadataDocVersion(state) {
+    try {
+        return encodeVersionVector(state.doc);
+    }
+    catch {
+        return null;
+    }
+}
+function captureLocalContainerRefreshBaselines(states) {
+    return new Map(Array.from(states, ([containerId, state]) => [
+        containerId,
+        {
+            container: state.container,
+            docVersion: readMetadataDocVersion(state),
+            pullContinuation: currentMetadataPullContinuation(state),
+            record: state.record,
+        },
+    ]));
+}
+function liveContainerStateChangedAfterRefreshStarted(state, baseline) {
+    // No baseline means this live state was inserted after the refresh began.
+    // The loaded snapshot cannot authoritatively replace a state that did not
+    // exist when its query started.
+    return (baseline === undefined ||
+        state.container !== baseline.container ||
+        state.record !== baseline.record ||
+        currentMetadataPullContinuation(state) !== baseline.pullContinuation ||
+        readMetadataDocVersion(state) !== baseline.docVersion);
+}
+function mergeLocalContainerStates(input) {
+    for (const localContainerState of input.localContainerStates) {
+        const containerId = localContainerState.container.id;
+        if (containerStateMutatedAfter(input.state.containersById, containerId, input.containerMutationGenerations)) {
+            continue;
+        }
+        const existingState = input.state.containersById.get(containerId);
+        if (existingState) {
+            if (liveContainerStateChangedAfterRefreshStarted(existingState, input.liveStateBaselines.get(containerId))) {
+                continue;
+            }
+            // The load can start before a remote create and finish after it. Its
+            // local-only snapshot must not erase the remote identity that the create
+            // persisted in the meantime, or the pending create intent is re-queued.
+            if (!input.remoteContainerIdsAtLoadStart.has(containerId) &&
+                existingState.record.documentId &&
+                !localContainerState.record.documentId) {
+                continue;
+            }
+            existingState.container = localContainerState.container;
+            existingState.doc = localContainerState.doc;
+            installContainerMetadataRecord(existingState, localContainerState.record);
+        }
+        else if (!input.liveStateBaselines.has(containerId)) {
+            // A baseline without a live entry means the state was removed while the
+            // load was pending. Do not resurrect that stale snapshot.
+            input.state.containersById.set(containerId, localContainerState);
+        }
+    }
+}
+function isRemoteBackedRootState(containerState) {
+    return (containerState.container.parentId === null &&
+        isRemoteBackedContainerState(containerState));
+}
+async function reconcileLocalsLoadedAfterRemoteState(state, isCurrent) {
+    const remoteRootStates = Array.from(state.containersById.values()).filter(isRemoteBackedRootState);
+    for (const remoteRootState of remoteRootStates) {
+        if (!isCurrent()) {
+            return;
+        }
+        await reconcileLocalOnlyRootContainers({
+            isCurrent,
+            remoteRootState,
+            state,
+        });
+    }
+}
+/**
+ * Hand the tree-rebuild failure to host diagnostics as a real `Error`: the
+ * unguarded metadata import inside `loadLocalContainerStates` lands corrupt
+ * persisted state here, which the string-only log line cannot carry. That line
+ * is the fallback for a host without `logError`, so there is no second copy.
+ */
+function reportLocalContainerRefreshFailure(util, error) {
+    // Losing the database mid-flight is the teardown outcome the re-armed refresh
+    // already covers, not a defect.
+    if (!util.logError || isDatabaseUnavailableError(error))
+        return;
+    try {
+        // Callers run `void refreshLocalContainers()`, so a host logger that throws
+        // or rejects must not escape as an unhandled rejection carrying app frames.
+        void Promise.resolve(util.logError("Container contents: local container refresh failed", error)).catch(() => undefined);
+    }
+    catch {
+        // Hosts may throw synchronously or return a rejected promise.
+    }
+}
+export function refreshLocalContainerStates(input) {
+    const { host, state } = input;
+    if (state.localContainerRefreshPromise) {
+        const activeRefresh = state.localContainerRefreshPromise;
+        if (state.localContainerRefreshGeneration === state.lifecycleGeneration &&
+            state.localContainerRefreshStructuralGeneration ===
+                state.structuralGeneration) {
+            return activeRefresh;
+        }
+        // A stale refresh owns its replacement retry in `finally`, so callers can
+        // share that promise without scheduling a second replacement load.
+        return activeRefresh;
+    }
+    if (!state.localContainersNeedRefresh ||
+        !state.initialized ||
+        state.runtime.infra.dbStatus !== "ready") {
+        return Promise.resolve();
+    }
+    const lifecycleGeneration = state.lifecycleGeneration;
+    const structuralGeneration = state.structuralGeneration;
+    const isCurrent = () => state.lifecycleGeneration === lifecycleGeneration &&
+        state.structuralGeneration === structuralGeneration;
+    state.localContainersNeedRefresh = false;
+    const liveStateBaselines = captureLocalContainerRefreshBaselines(state.containersById);
+    const containerMutationGenerations = captureContainerStateMutationGenerations(state.containersById);
+    const remoteContainerIdsAtLoadStart = new Set();
+    for (const containerState of state.containersById.values()) {
+        if (containerState.record.documentId) {
+            remoteContainerIdsAtLoadStart.add(containerState.container.id);
+        }
+    }
+    state.localContainerRefreshGeneration = lifecycleGeneration;
+    state.localContainerRefreshStructuralGeneration = structuralGeneration;
+    const refreshPromise = loadLocalContainerStates({
+        persistence: state.persistence,
+        runtime: state.runtime,
+    })
+        .then(async (localContainerStates) => {
+        if (!isCurrent()) {
+            return;
+        }
+        mergeLocalContainerStates({
+            containerMutationGenerations,
+            liveStateBaselines,
+            localContainerStates,
+            remoteContainerIdsAtLoadStart,
+            state,
+        });
+        // Remote hydration can win the startup race and ingest the server root
+        // before this local read returns. Re-run root/system convergence after
+        // merging so that the late local bootstrap rows cannot reintroduce a
+        // stale root and same-slot system children into the live tree.
+        await reconcileLocalsLoadedAfterRemoteState(state, isCurrent);
+        if (!isCurrent()) {
+            return;
+        }
+        state.documentStoresNeedPriming = true;
+        host.updateSnapshot();
+    })
+        .catch((error) => {
+        if (!isCurrent()) {
+            return;
+        }
+        state.localContainersNeedRefresh = true;
+        state.runtime.util.log(`Failed to refresh local container states: ${errorMessage(error)}`);
+        reportLocalContainerRefreshFailure(state.runtime.util, error);
+    })
+        .finally(() => {
+        const shouldRetryAfterReplacement = !isCurrent();
+        if (state.localContainerRefreshPromise === refreshPromise) {
+            state.localContainerRefreshPromise = null;
+            state.localContainerRefreshGeneration = null;
+            state.localContainerRefreshStructuralGeneration = null;
+        }
+        if (shouldRetryAfterReplacement) {
+            state.localContainersNeedRefresh = true;
+            return refreshLocalContainerStates(input);
+        }
+        return undefined;
+    });
+    state.localContainerRefreshPromise = refreshPromise;
+    return refreshPromise;
+}
+//# sourceMappingURL=localRefresh.js.map

package/stores/container-contents/localRefresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localRefresh.js","sourceRoot":"","sources":["localRefresh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EAAE,8BAA8B,EAAE,MAAM,6CAA6C,CAAC;AAC7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,wDAAwD,CAAC;AAEzG,OAAO,EAAE,gCAAgC,EAAE,MAAM,mEAAmE,CAAC;AAErH,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EACL,wCAAwC,EACxC,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AA2B5E,SAAS,sBAAsB,CAAC,KAAqB;IACnD,IAAI,CAAC;QACH,OAAO,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qCAAqC,CAC5C,MAA2C;IAE3C,OAAO,IAAI,GAAG,CACZ,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC3C,WAAW;QACX;YACE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,sBAAsB,CAAC,KAAK,CAAC;YACzC,gBAAgB,EAAE,+BAA+B,CAAC,KAAK,CAAC;YACxD,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,4CAA4C,CACnD,KAAqB,EACrB,QAAmD;IAEnD,0EAA0E;IAC1E,0EAA0E;IAC1E,gCAAgC;IAChC,OAAO,CACL,QAAQ,KAAK,SAAS;QACtB,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QACtC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAChC,+BAA+B,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,gBAAgB;QACpE,sBAAsB,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,UAAU,CACtD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAMlC;IACC,KAAK,MAAM,mBAAmB,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;QAC7D,MAAM,WAAW,GAAG,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IACE,0BAA0B,CACxB,KAAK,CAAC,KAAK,CAAC,cAAc,EAC1B,WAAW,EACX,KAAK,CAAC,4BAA4B,CACnC,EACD,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClE,IAAI,aAAa,EAAE,CAAC;YAClB,IACE,4CAA4C,CAC1C,aAAa,EACb,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAC1C,EACD,CAAC;gBACD,SAAS;YACX,CAAC;YACD,qEAAqE;YACrE,yEAAyE;YACzE,wEAAwE;YACxE,IACE,CAAC,KAAK,CAAC,6BAA6B,CAAC,GAAG,CAAC,WAAW,CAAC;gBACrD,aAAa,CAAC,MAAM,CAAC,UAAU;gBAC/B,CAAC,mBAAmB,CAAC,MAAM,CAAC,UAAU,EACtC,CAAC;gBACD,SAAS;YACX,CAAC;YACD,aAAa,CAAC,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC;YACxD,aAAa,CAAC,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC;YAC5C,8BAA8B,CAAC,aAAa,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC5E,CAAC;aAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACtD,wEAAwE;YACxE,0DAA0D;YAC1D,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,cAA8B;IAC7D,OAAO,CACL,cAAc,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;QAC1C,4BAA4B,CAAC,cAAc,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qCAAqC,CAClD,KAAiC,EACjC,SAAwB;IAExB,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACvE,uBAAuB,CACxB,CAAC;IACF,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,gCAAgC,CAAC;YACrC,SAAS;YACT,eAAe;YACf,KAAK;SACN,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,kCAAkC,CACzC,IAA8C,EAC9C,KAAc;IAEd,8EAA8E;IAC9E,gCAAgC;IAChC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,0BAA0B,CAAC,KAAK,CAAC;QAAE,OAAO;IAChE,IAAI,CAAC;QACH,4EAA4E;QAC5E,4EAA4E;QAC5E,KAAK,OAAO,CAAC,OAAO,CAClB,IAAI,CAAC,QAAQ,CACX,oDAAoD,EACpD,KAAK,CACN,CACF,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAG3C;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9B,IAAI,KAAK,CAAC,4BAA4B,EAAE,CAAC;QACvC,MAAM,aAAa,GAAG,KAAK,CAAC,4BAA4B,CAAC;QACzD,IACE,KAAK,CAAC,+BAA+B,KAAK,KAAK,CAAC,mBAAmB;YACnE,KAAK,CAAC,yCAAyC;gBAC7C,KAAK,CAAC,oBAAoB,EAC5B,CAAC;YACD,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,0EAA0E;QAC1E,mEAAmE;QACnE,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,IACE,CAAC,KAAK,CAAC,0BAA0B;QACjC,CAAC,KAAK,CAAC,WAAW;QAClB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EACxC,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACtD,MAAM,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACxD,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,KAAK,CAAC,mBAAmB,KAAK,mBAAmB;QACjD,KAAK,CAAC,oBAAoB,KAAK,oBAAoB,CAAC;IACtD,KAAK,CAAC,0BAA0B,GAAG,KAAK,CAAC;IACzC,MAAM,kBAAkB,GAAG,qCAAqC,CAC9D,KAAK,CAAC,cAAc,CACrB,CAAC;IACF,MAAM,4BAA4B,GAAG,wCAAwC,CAC3E,KAAK,CAAC,cAAc,CACrB,CAAC;IACF,MAAM,6BAA6B,GAAG,IAAI,GAAG,EAAU,CAAC;IACxD,KAAK,MAAM,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3D,IAAI,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACrC,6BAA6B,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,KAAK,CAAC,+BAA+B,GAAG,mBAAmB,CAAC;IAC5D,KAAK,CAAC,yCAAyC,GAAG,oBAAoB,CAAC;IACvE,MAAM,cAAc,GAAG,wBAAwB,CAAC;QAC9C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;SACC,IAAI,CAAC,KAAK,EAAE,oBAAoB,EAAE,EAAE;QACnC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,yBAAyB,CAAC;YACxB,4BAA4B;YAC5B,kBAAkB;YAClB,oBAAoB;YACpB,6BAA6B;YAC7B,KAAK;SACN,CAAC,CAAC;QACH,uEAAuE;QACvE,uEAAuE;QACvE,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,qCAAqC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;QACvC,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;QACxC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,6CAA6C,YAAY,CAAC,KAAK,CAAC,EAAE,CACnE,CAAC;QACF,kCAAkC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC;SACD,OAAO,CAAC,GAAG,EAAE;QACZ,MAAM,2BAA2B,GAAG,CAAC,SAAS,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,4BAA4B,KAAK,cAAc,EAAE,CAAC;YAC1D,KAAK,CAAC,4BAA4B,GAAG,IAAI,CAAC;YAC1C,KAAK,CAAC,+BAA+B,GAAG,IAAI,CAAC;YAC7C,KAAK,CAAC,yCAAyC,GAAG,IAAI,CAAC;QACzD,CAAC;QACD,IAAI,2BAA2B,EAAE,CAAC;YAChC,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;YACxC,OAAO,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IACL,KAAK,CAAC,4BAA4B,GAAG,cAAc,CAAC;IAEpD,OAAO,cAAc,CAAC;AACxB,CAAC","sourcesContent":["import { encodeVersionVector } from \"@tearleads/loro\";\nimport { errorMessage } from \"../../data/errorMessage\";\nimport type { ContainerContentsPersistence } from \"../../workflows/container-contents/containerPersistence\";\nimport { loadLocalContainerStates } from \"../../workflows/container-contents/localState\";\nimport { installContainerMetadataRecord } from \"../../workflows/container-contents/metadata\";\nimport { currentMetadataPullContinuation } from \"../../workflows/container-contents/metadataPersistence\";\nimport type { ContainerState } from \"../../workflows/container-contents/remoteHydration\";\nimport { reconcileLocalOnlyRootContainers } from \"../../workflows/container-contents/remoteHydration/reconciliation\";\nimport type { ContainerContentsWorkflowRuntime } from \"../../workflows/container-contents/runtime\";\nimport { isDatabaseUnavailableError } from \"../../workflows/container-contents/syncLane\";\nimport {\n  captureContainerStateMutationGenerations,\n  containerStateMutatedAfter,\n} from \"./containerStateMap\";\nimport { isRemoteBackedContainerState } from \"./remoteBackedContainerState\";\n\ninterface LocalContainerRefreshHost {\n  updateSnapshot: () => void;\n}\n\nexport interface LocalContainerRefreshState {\n  containersById: Map<string, ContainerState>;\n  documentStoresNeedPriming: boolean;\n  initialized: boolean;\n  lifecycleGeneration: number;\n  localContainerRefreshGeneration: number | null;\n  localContainerRefreshPromise: Promise<void> | null;\n  localContainerRefreshStructuralGeneration: number | null;\n  localContainersNeedRefresh: boolean;\n  persistence: ContainerContentsPersistence;\n  runtime: ContainerContentsWorkflowRuntime;\n  structuralGeneration: number;\n}\n\ninterface LocalContainerRefreshBaseline {\n  container: ContainerState[\"container\"];\n  docVersion: string | null;\n  pullContinuation: ReturnType<typeof currentMetadataPullContinuation>;\n  record: ContainerState[\"record\"];\n}\n\nfunction readMetadataDocVersion(state: ContainerState): string | null {\n  try {\n    return encodeVersionVector(state.doc);\n  } catch {\n    return null;\n  }\n}\n\nfunction captureLocalContainerRefreshBaselines(\n  states: ReadonlyMap<string, ContainerState>,\n): ReadonlyMap<string, LocalContainerRefreshBaseline> {\n  return new Map(\n    Array.from(states, ([containerId, state]) => [\n      containerId,\n      {\n        container: state.container,\n        docVersion: readMetadataDocVersion(state),\n        pullContinuation: currentMetadataPullContinuation(state),\n        record: state.record,\n      },\n    ]),\n  );\n}\n\nfunction liveContainerStateChangedAfterRefreshStarted(\n  state: ContainerState,\n  baseline: LocalContainerRefreshBaseline | undefined,\n): boolean {\n  // No baseline means this live state was inserted after the refresh began.\n  // The loaded snapshot cannot authoritatively replace a state that did not\n  // exist when its query started.\n  return (\n    baseline === undefined ||\n    state.container !== baseline.container ||\n    state.record !== baseline.record ||\n    currentMetadataPullContinuation(state) !== baseline.pullContinuation ||\n    readMetadataDocVersion(state) !== baseline.docVersion\n  );\n}\n\nfunction mergeLocalContainerStates(input: {\n  containerMutationGenerations: ReadonlyMap<string, number>;\n  liveStateBaselines: ReadonlyMap<string, LocalContainerRefreshBaseline>;\n  localContainerStates: ReadonlyArray<ContainerState>;\n  remoteContainerIdsAtLoadStart: ReadonlySet<string>;\n  state: LocalContainerRefreshState;\n}): void {\n  for (const localContainerState of input.localContainerStates) {\n    const containerId = localContainerState.container.id;\n    if (\n      containerStateMutatedAfter(\n        input.state.containersById,\n        containerId,\n        input.containerMutationGenerations,\n      )\n    ) {\n      continue;\n    }\n    const existingState = input.state.containersById.get(containerId);\n    if (existingState) {\n      if (\n        liveContainerStateChangedAfterRefreshStarted(\n          existingState,\n          input.liveStateBaselines.get(containerId),\n        )\n      ) {\n        continue;\n      }\n      // The load can start before a remote create and finish after it. Its\n      // local-only snapshot must not erase the remote identity that the create\n      // persisted in the meantime, or the pending create intent is re-queued.\n      if (\n        !input.remoteContainerIdsAtLoadStart.has(containerId) &&\n        existingState.record.documentId &&\n        !localContainerState.record.documentId\n      ) {\n        continue;\n      }\n      existingState.container = localContainerState.container;\n      existingState.doc = localContainerState.doc;\n      installContainerMetadataRecord(existingState, localContainerState.record);\n    } else if (!input.liveStateBaselines.has(containerId)) {\n      // A baseline without a live entry means the state was removed while the\n      // load was pending. Do not resurrect that stale snapshot.\n      input.state.containersById.set(containerId, localContainerState);\n    }\n  }\n}\n\nfunction isRemoteBackedRootState(containerState: ContainerState): boolean {\n  return (\n    containerState.container.parentId === null &&\n    isRemoteBackedContainerState(containerState)\n  );\n}\n\nasync function reconcileLocalsLoadedAfterRemoteState(\n  state: LocalContainerRefreshState,\n  isCurrent: () => boolean,\n): Promise<void> {\n  const remoteRootStates = Array.from(state.containersById.values()).filter(\n    isRemoteBackedRootState,\n  );\n  for (const remoteRootState of remoteRootStates) {\n    if (!isCurrent()) {\n      return;\n    }\n    await reconcileLocalOnlyRootContainers({\n      isCurrent,\n      remoteRootState,\n      state,\n    });\n  }\n}\n\n/**\n * Hand the tree-rebuild failure to host diagnostics as a real `Error`: the\n * unguarded metadata import inside `loadLocalContainerStates` lands corrupt\n * persisted state here, which the string-only log line cannot carry. That line\n * is the fallback for a host without `logError`, so there is no second copy.\n */\nfunction reportLocalContainerRefreshFailure(\n  util: ContainerContentsWorkflowRuntime[\"util\"],\n  error: unknown,\n): void {\n  // Losing the database mid-flight is the teardown outcome the re-armed refresh\n  // already covers, not a defect.\n  if (!util.logError || isDatabaseUnavailableError(error)) return;\n  try {\n    // Callers run `void refreshLocalContainers()`, so a host logger that throws\n    // or rejects must not escape as an unhandled rejection carrying app frames.\n    void Promise.resolve(\n      util.logError(\n        \"Container contents: local container refresh failed\",\n        error,\n      ),\n    ).catch(() => undefined);\n  } catch {\n    // Hosts may throw synchronously or return a rejected promise.\n  }\n}\n\nexport function refreshLocalContainerStates(input: {\n  host: LocalContainerRefreshHost;\n  state: LocalContainerRefreshState;\n}): Promise<void> {\n  const { host, state } = input;\n  if (state.localContainerRefreshPromise) {\n    const activeRefresh = state.localContainerRefreshPromise;\n    if (\n      state.localContainerRefreshGeneration === state.lifecycleGeneration &&\n      state.localContainerRefreshStructuralGeneration ===\n        state.structuralGeneration\n    ) {\n      return activeRefresh;\n    }\n    // A stale refresh owns its replacement retry in `finally`, so callers can\n    // share that promise without scheduling a second replacement load.\n    return activeRefresh;\n  }\n\n  if (\n    !state.localContainersNeedRefresh ||\n    !state.initialized ||\n    state.runtime.infra.dbStatus !== \"ready\"\n  ) {\n    return Promise.resolve();\n  }\n\n  const lifecycleGeneration = state.lifecycleGeneration;\n  const structuralGeneration = state.structuralGeneration;\n  const isCurrent = () =>\n    state.lifecycleGeneration === lifecycleGeneration &&\n    state.structuralGeneration === structuralGeneration;\n  state.localContainersNeedRefresh = false;\n  const liveStateBaselines = captureLocalContainerRefreshBaselines(\n    state.containersById,\n  );\n  const containerMutationGenerations = captureContainerStateMutationGenerations(\n    state.containersById,\n  );\n  const remoteContainerIdsAtLoadStart = new Set<string>();\n  for (const containerState of state.containersById.values()) {\n    if (containerState.record.documentId) {\n      remoteContainerIdsAtLoadStart.add(containerState.container.id);\n    }\n  }\n  state.localContainerRefreshGeneration = lifecycleGeneration;\n  state.localContainerRefreshStructuralGeneration = structuralGeneration;\n  const refreshPromise = loadLocalContainerStates({\n    persistence: state.persistence,\n    runtime: state.runtime,\n  })\n    .then(async (localContainerStates) => {\n      if (!isCurrent()) {\n        return;\n      }\n      mergeLocalContainerStates({\n        containerMutationGenerations,\n        liveStateBaselines,\n        localContainerStates,\n        remoteContainerIdsAtLoadStart,\n        state,\n      });\n      // Remote hydration can win the startup race and ingest the server root\n      // before this local read returns. Re-run root/system convergence after\n      // merging so that the late local bootstrap rows cannot reintroduce a\n      // stale root and same-slot system children into the live tree.\n      await reconcileLocalsLoadedAfterRemoteState(state, isCurrent);\n      if (!isCurrent()) {\n        return;\n      }\n      state.documentStoresNeedPriming = true;\n      host.updateSnapshot();\n    })\n    .catch((error: unknown) => {\n      if (!isCurrent()) {\n        return;\n      }\n      state.localContainersNeedRefresh = true;\n      state.runtime.util.log(\n        `Failed to refresh local container states: ${errorMessage(error)}`,\n      );\n      reportLocalContainerRefreshFailure(state.runtime.util, error);\n    })\n    .finally(() => {\n      const shouldRetryAfterReplacement = !isCurrent();\n      if (state.localContainerRefreshPromise === refreshPromise) {\n        state.localContainerRefreshPromise = null;\n        state.localContainerRefreshGeneration = null;\n        state.localContainerRefreshStructuralGeneration = null;\n      }\n      if (shouldRetryAfterReplacement) {\n        state.localContainersNeedRefresh = true;\n        return refreshLocalContainerStates(input);\n      }\n      return undefined;\n    });\n  state.localContainerRefreshPromise = refreshPromise;\n\n  return refreshPromise;\n}\n"]}

package/stores/container-contents/logLabel.js

@@ -0,0 +1,4 @@
+export function getContainerContentsStoreLogLabel(state) {
+    return state.logLabel ?? "Container contents";
+}
+//# sourceMappingURL=logLabel.js.map

package/stores/container-contents/logLabel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logLabel.js","sourceRoot":"","sources":["logLabel.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,iCAAiC,CAAC,KAEjD;IACC,OAAO,KAAK,CAAC,QAAQ,IAAI,oBAAoB,CAAC;AAChD,CAAC","sourcesContent":["export function getContainerContentsStoreLogLabel(state: {\n  logLabel?: string | undefined;\n}): string {\n  return state.logLabel ?? \"Container contents\";\n}\n"]}

package/stores/container-contents/metadataSyncSignal.js

@@ -0,0 +1,37 @@
+/**
+ * Convergence-safety helpers for the container-contents metadata sync lane.
+ *
+ * `syncSingleContainerMetadata` reads `forceReadSync` for a container, then
+ * awaits a network GET of the container's metadata document. A remote
+ * rename/move event delivered during that await re-queues the container's
+ * metadata id and advances that id's entry in `metadataSyncSignalSeqById`. If
+ * the pass then deleted the id unconditionally it would erase that fresh
+ * re-queue, leaving the structural projection (name/icon) stale until an
+ * unrelated later event re-armed it.
+ *
+ * The pass therefore snapshots the id's sequence before its GET and only clears
+ * the queued id when that id's sequence is unchanged at pass end. The sequence
+ * is tracked per metadata document id (not a single global counter) so a remote
+ * event for an unrelated container does not block clearing this one. Mirrors
+ * the document store's `remoteUpdateSignalSeq` clear (the document store is
+ * single-document, so it needs only one counter).
+ */
+import { sequenceUnchanged } from "../../workflows/container-contents/syncLane.js";
+/** Read an id's current enqueue sequence, defaulting to 0 when never queued. */
+export function readMetadataSyncSeq(seqById, id) {
+    return seqById.get(id) ?? 0;
+}
+/** Advance an id's enqueue sequence (called when a remote event re-queues it). */
+export function bumpMetadataSyncSeq(seqById, id) {
+    seqById.set(id, readMetadataSyncSeq(seqById, id) + 1);
+}
+/**
+ * Delete `id` from the needs-sync queue only if no remote event re-queued that
+ * specific id since `consumedSeqById` was snapshotted at pass entry.
+ */
+export function clearMetadataSyncQueueIfUnchanged(input) {
+    if (sequenceUnchanged(readMetadataSyncSeq(input.seqById, input.id), input.consumedSeqById.get(input.id) ?? 0)) {
+        input.needingSync.delete(input.id);
+    }
+}
+//# sourceMappingURL=metadataSyncSignal.js.map

package/stores/container-contents/metadataSyncSignal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadataSyncSignal.js","sourceRoot":"","sources":["metadataSyncSignal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAEhF,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CACjC,OAAoC,EACpC,EAAU;IAEV,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CACjC,OAA4B,EAC5B,EAAU;IAEV,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,mBAAmB,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAKjD;IACC,IACE,iBAAiB,CACf,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,EAC5C,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CACzC,EACD,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC","sourcesContent":["/**\n * Convergence-safety helpers for the container-contents metadata sync lane.\n *\n * `syncSingleContainerMetadata` reads `forceReadSync` for a container, then\n * awaits a network GET of the container's metadata document. A remote\n * rename/move event delivered during that await re-queues the container's\n * metadata id and advances that id's entry in `metadataSyncSignalSeqById`. If\n * the pass then deleted the id unconditionally it would erase that fresh\n * re-queue, leaving the structural projection (name/icon) stale until an\n * unrelated later event re-armed it.\n *\n * The pass therefore snapshots the id's sequence before its GET and only clears\n * the queued id when that id's sequence is unchanged at pass end. The sequence\n * is tracked per metadata document id (not a single global counter) so a remote\n * event for an unrelated container does not block clearing this one. Mirrors\n * the document store's `remoteUpdateSignalSeq` clear (the document store is\n * single-document, so it needs only one counter).\n */\n\nimport { sequenceUnchanged } from \"../../workflows/container-contents/syncLane\";\n\n/** Read an id's current enqueue sequence, defaulting to 0 when never queued. */\nexport function readMetadataSyncSeq(\n  seqById: ReadonlyMap<string, number>,\n  id: string,\n): number {\n  return seqById.get(id) ?? 0;\n}\n\n/** Advance an id's enqueue sequence (called when a remote event re-queues it). */\nexport function bumpMetadataSyncSeq(\n  seqById: Map<string, number>,\n  id: string,\n): void {\n  seqById.set(id, readMetadataSyncSeq(seqById, id) + 1);\n}\n\n/**\n * Delete `id` from the needs-sync queue only if no remote event re-queued that\n * specific id since `consumedSeqById` was snapshotted at pass entry.\n */\nexport function clearMetadataSyncQueueIfUnchanged(input: {\n  needingSync: Set<string>;\n  seqById: ReadonlyMap<string, number>;\n  consumedSeqById: ReadonlyMap<string, number>;\n  id: string;\n}): void {\n  if (\n    sequenceUnchanged(\n      readMetadataSyncSeq(input.seqById, input.id),\n      input.consumedSeqById.get(input.id) ?? 0,\n    )\n  ) {\n    input.needingSync.delete(input.id);\n  }\n}\n"]}

package/stores/container-contents/missingContainerState.js

@@ -0,0 +1,10 @@
+import { updateContainerContentsSnapshot } from "./state.js";
+export function removeMissingContainerState(state, expectedState) {
+    const containerId = expectedState.container.id;
+    if (state.containersById.get(containerId) !== expectedState) {
+        return;
+    }
+    state.containersById.delete(containerId);
+    updateContainerContentsSnapshot(state);
+}
+//# sourceMappingURL=missingContainerState.js.map

package/stores/container-contents/missingContainerState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"missingContainerState.js","sourceRoot":"","sources":["missingContainerState.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,SAAS,CAAC;AAG1D,MAAM,UAAU,2BAA2B,CACzC,KAAkC,EAClC,aAA6B;IAE7B,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;IAC/C,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,aAAa,EAAE,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,+BAA+B,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC","sourcesContent":["import type { ContainerState } from \"../../workflows/container-contents/remoteHydration\";\nimport { updateContainerContentsSnapshot } from \"./state\";\nimport type { ContainerContentsStoreState } from \"./types\";\n\nexport function removeMissingContainerState(\n  state: ContainerContentsStoreState,\n  expectedState: ContainerState,\n): void {\n  const containerId = expectedState.container.id;\n  if (state.containersById.get(containerId) !== expectedState) {\n    return;\n  }\n  state.containersById.delete(containerId);\n  updateContainerContentsSnapshot(state);\n}\n"]}

package/stores/container-contents/missingSyncedContainerState.js

@@ -0,0 +1,10 @@
+export function removeMissingSyncedContainerState(state, expectedState, updateSnapshot) {
+    const containerId = expectedState.container.id;
+    if (state.containersById.get(containerId) !== expectedState) {
+        return false;
+    }
+    state.containersById.delete(containerId);
+    updateSnapshot();
+    return true;
+}
+//# sourceMappingURL=missingSyncedContainerState.js.map

package/stores/container-contents/missingSyncedContainerState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"missingSyncedContainerState.js","sourceRoot":"","sources":["missingSyncedContainerState.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,iCAAiC,CAC/C,KAAsC,EACtC,aAA6B,EAC7B,cAA0B;IAE1B,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;IAC/C,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,aAAa,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,cAAc,EAAE,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { ContainerState } from \"../../workflows/container-contents/remoteHydration\";\nimport type { ContainerContentsStoreSyncState } from \"./syncAgentTypes\";\n\nexport function removeMissingSyncedContainerState(\n  state: ContainerContentsStoreSyncState,\n  expectedState: ContainerState,\n  updateSnapshot: () => void,\n): boolean {\n  const containerId = expectedState.container.id;\n  if (state.containersById.get(containerId) !== expectedState) {\n    return false;\n  }\n\n  state.containersById.delete(containerId);\n  updateSnapshot();\n  return true;\n}\n"]}