@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/workflows/container-contents/container-state/moveIntentSync.js

@@ -0,0 +1,345 @@
+import { ContainerPathTooDeepError } from "../../../data/containers/shared/containerPathLimits.js";
+import { errorMessage } from "../../../data/errorMessage.js";
+import { reportAndRethrowKeyingVerificationError } from "../../../data/keyingProjectionVerification/error.js";
+import { createRuntimePrincipalPolicyWarmer } from "../../principals/runtimePolicyWarmer.js";
+import { createDetachedContainerMetadataState, installDetachedContainerMetadataState, } from "../metadataStateIsolation.js";
+import { hasRemoteContainerMetadataState } from "../remoteHydration/reconciliation.js";
+import { moveRemoteContainer } from "./remote.js";
+function currentMoveResult(isCurrent, result) {
+    return isCurrent() ? result : "abandoned";
+}
+async function recordPendingMoveIntentError(input) {
+    if (!input.isCurrent()) {
+        return false;
+    }
+    const execSql = input.state.runtime.infra.execSql;
+    await input.state.persistence.recordMoveIntentError(execSql, {
+        blocked: input.blocked,
+        containerId: input.containerId,
+        expectedIntentId: input.expectedIntentId,
+        expectedUpdatedAt: input.expectedUpdatedAt,
+        message: input.message,
+        stillCurrent: input.isCurrent,
+    });
+    return input.isCurrent();
+}
+async function resolveMoveIntentLocalUpdatedAt(input) {
+    if (!input.isCurrent()) {
+        return null;
+    }
+    const previousLocalUpdatedAt = input.state.containersById.get(input.containerId)?.container
+        .localUpdatedAt ?? null;
+    if (!previousLocalUpdatedAt ||
+        previousLocalUpdatedAt.localeCompare(input.remoteUpdatedAt) <= 0) {
+        return input.remoteUpdatedAt;
+    }
+    const execSql = input.state.runtime.infra.execSql;
+    const containersWithPendingMetadataUpdates = await input.state.persistence.listContainerIdsWithPendingUpdates(execSql, [
+        input.containerId,
+    ]);
+    if (!input.isCurrent()) {
+        return null;
+    }
+    return containersWithPendingMetadataUpdates.includes(input.containerId)
+        ? previousLocalUpdatedAt
+        : input.remoteUpdatedAt;
+}
+export async function persistAcceptedMoveIntent(input) {
+    const { host, intent, moved, state } = input;
+    const abandon = () => {
+        input.requestRemoteReconciliation(moved.parentId);
+        return false;
+    };
+    if (!input.isCurrent())
+        return abandon();
+    const containerState = state.containersById.get(intent.containerId);
+    if (!containerState) {
+        return false;
+    }
+    await createRuntimePrincipalPolicyWarmer(state.runtime)({
+        organizationId: moved.organizationId,
+        references: moved.metadataReferencedPrincipals,
+        stillCurrent: input.isCurrent,
+    });
+    if (!input.isCurrent()) {
+        return abandon();
+    }
+    const localUpdatedAt = await resolveMoveIntentLocalUpdatedAt({
+        containerId: intent.containerId,
+        isCurrent: input.isCurrent,
+        remoteUpdatedAt: moved.updatedAt,
+        state,
+    });
+    if (!input.isCurrent() || localUpdatedAt === null) {
+        return abandon();
+    }
+    const persistenceCandidate = await createDetachedContainerMetadataState(containerState);
+    if (!input.isCurrent()) {
+        return abandon();
+    }
+    persistenceCandidate.container = {
+        ...persistenceCandidate.container,
+        createdAt: moved.createdAt,
+        serverCreatedAt: moved.createdAt,
+        serverUpdatedAt: moved.updatedAt,
+        updatedAt: moved.updatedAt,
+    };
+    const persistenceResult = await host.persistContainerState(persistenceCandidate, {
+        accessEpoch: moved.metadataAccessEpoch,
+        accessStateHash: moved.metadataAccessStateHash,
+        documentId: moved.metadataDocumentId,
+        metadataDocumentId: moved.metadataDocumentId,
+        organizationId: moved.organizationId,
+        parentId: moved.parentId,
+        systemSlot: moved.systemSlot ?? null,
+    }, false, {
+        localUpdatedAt,
+        serverTimestamps: {
+            createdAt: moved.createdAt,
+            updatedAt: moved.updatedAt,
+        },
+    }, {
+        expectedStateWhenMissing: containerState,
+        isCurrent: input.isCurrent,
+        moveIntentSettlement: {
+            containerId: intent.containerId,
+            expectedIntentId: intent.id,
+            expectedUpdatedAt: intent.updatedAt,
+        },
+    });
+    if (!input.isCurrent() || persistenceResult.status !== "persisted") {
+        return abandon();
+    }
+    if (persistenceResult.moveIntentSettled !== true) {
+        throw new Error("Container move persistence must settle the intent atomically");
+    }
+    if (!input.isCurrent())
+        return abandon();
+    const { record: nextRecord } = persistenceResult;
+    installDetachedContainerMetadataState(containerState, persistenceCandidate, {
+        candidateRecord: nextRecord,
+        preserveConcurrentMetadataEdit: true,
+    });
+    containerState.container = {
+        ...containerState.container,
+        metadataDocumentId: moved.metadataDocumentId,
+        organizationId: moved.organizationId,
+        parentId: moved.parentId,
+    };
+    return true;
+}
+/**
+ * A move refused for path length never succeeds; the queue-time check saw only
+ * the descendants this device holds. Drop the queued move and restore the
+ * previous parent together: the server row never changed, so no listing would
+ * ever put the folder back.
+ */
+async function abandonTooDeepMove(syncInput) {
+    const { host, intent, state } = syncInput;
+    const previousParentId = intent.previousParentContainerId;
+    if (previousParentId === null) {
+        throw new Error("A queued container move must name its previous parent");
+    }
+    const abandoned = await state.persistence.abandonMoveIntentRevision(state.runtime.infra.execSql, {
+        containerId: intent.containerId,
+        expectedIntentId: intent.id,
+        expectedUpdatedAt: intent.updatedAt,
+        previousParentContainerId: previousParentId,
+        stillCurrent: syncInput.isCurrent,
+    });
+    if (!syncInput.isCurrent())
+        return "abandoned";
+    // A newer local move superseded this revision; it replays on its own.
+    if (!abandoned)
+        return "failed";
+    const containerState = state.containersById.get(intent.containerId);
+    if (containerState) {
+        containerState.container = {
+            ...containerState.container,
+            parentId: previousParentId,
+        };
+    }
+    host.updateSnapshot();
+    state.runtime.util.log(`Container contents: abandoned queued move of ${intent.containerId}; its path would exceed the maximum depth`);
+    return "failed";
+}
+async function movePendingRemoteContainer(input) {
+    const { parentState, syncInput } = input;
+    const { host, intent, state } = syncInput;
+    let remoteMoveApplied = false;
+    let remoteParentId = intent.parentContainerId;
+    const abandonAppliedMove = () => {
+        if (remoteMoveApplied) {
+            syncInput.requestRemoteReconciliation(remoteParentId);
+        }
+        return "abandoned";
+    };
+    try {
+        const moved = await moveRemoteContainer({
+            containerId: intent.containerId,
+            parentContainerId: intent.parentContainerId,
+            resolveProjectionUserKey: state.resolveProjectionUserKey,
+            runtime: state.runtime,
+            stillCurrent: syncInput.isCurrent,
+        });
+        if (!moved) {
+            if (!syncInput.isCurrent()) {
+                syncInput.requestRemoteReconciliation(intent.parentContainerId);
+                return "abandoned";
+            }
+            await recordPendingMoveIntentError({
+                containerId: intent.containerId,
+                expectedIntentId: intent.id,
+                expectedUpdatedAt: intent.updatedAt,
+                isCurrent: syncInput.isCurrent,
+                message: "Remote container move was rejected or unavailable",
+                state,
+            });
+            return currentMoveResult(syncInput.isCurrent, "failed");
+        }
+        remoteMoveApplied = true;
+        remoteParentId = moved.parentId;
+        if (!syncInput.isCurrent())
+            return abandonAppliedMove();
+        const persisted = await persistAcceptedMoveIntent({
+            host,
+            isCurrent: syncInput.isCurrent,
+            intent,
+            moved,
+            requestRemoteReconciliation: syncInput.requestRemoteReconciliation,
+            state,
+        });
+        if (!persisted) {
+            return currentMoveResult(syncInput.isCurrent, "failed");
+        }
+        state.runtime.util.log(`Container contents: synced queued container move ${intent.containerId}`);
+        return "moved";
+    }
+    catch (error) {
+        if (!syncInput.isCurrent()) {
+            return abandonAppliedMove();
+        }
+        if (error instanceof ContainerPathTooDeepError)
+            return abandonTooDeepMove(syncInput);
+        await reportAndRethrowKeyingVerificationError(error, state.runtime.util.reportSecurityIncident, {
+            objectId: intent.containerId,
+            objectKind: "container",
+            operation: "container.move.replay",
+            organizationId: parentState.container.organizationId,
+        });
+        if (!syncInput.isCurrent()) {
+            return abandonAppliedMove();
+        }
+        await recordPendingMoveIntentError({
+            containerId: intent.containerId,
+            expectedIntentId: intent.id,
+            expectedUpdatedAt: intent.updatedAt,
+            isCurrent: syncInput.isCurrent,
+            message: `Failed to sync container move: ${errorMessage(error)}`,
+            state,
+        });
+        return currentMoveResult(syncInput.isCurrent, "failed");
+    }
+}
+async function trySyncPendingContainerMoveIntent(input) {
+    const { intent, state } = input;
+    if (!input.isCurrent()) {
+        return "abandoned";
+    }
+    const containerState = state.containersById.get(intent.containerId);
+    const parentState = state.containersById.get(intent.parentContainerId);
+    if (!containerState) {
+        await recordPendingMoveIntentError({
+            blocked: true,
+            containerId: intent.containerId,
+            expectedIntentId: intent.id,
+            expectedUpdatedAt: intent.updatedAt,
+            isCurrent: input.isCurrent,
+            message: "Container move intent references a missing local container",
+            state,
+        });
+        return currentMoveResult(input.isCurrent, "failed");
+    }
+    if (!parentState) {
+        await recordPendingMoveIntentError({
+            blocked: true,
+            containerId: intent.containerId,
+            expectedIntentId: intent.id,
+            expectedUpdatedAt: intent.updatedAt,
+            isCurrent: input.isCurrent,
+            message: "Container move intent references a missing destination parent container",
+            state,
+        });
+        return currentMoveResult(input.isCurrent, "failed");
+    }
+    if (input.isRemoteSyncBlocked(containerState.container.organizationId)) {
+        return "blocked";
+    }
+    if (!hasRemoteContainerMetadataState(containerState) ||
+        input.isCreatePending(intent.containerId)) {
+        // Source not synced yet is TRANSIENT, exactly like the destination case
+        // below: the source's own create intent syncs first (createIntentSync runs
+        // before moveIntentSync in a pass), but if that create fails on this pass
+        // the source still lacks remote metadata here. Keep the intent 'pending'
+        // (not 'blocked') so the queue reports a retryable failure rather than a
+        // missing-dependency block; either way listUnsyncedMoveIntents replays it
+        // once the create lands.
+        await recordPendingMoveIntentError({
+            containerId: intent.containerId,
+            expectedIntentId: intent.id,
+            expectedUpdatedAt: intent.updatedAt,
+            isCurrent: input.isCurrent,
+            message: "Container move source is not synced yet",
+            state,
+        });
+        return currentMoveResult(input.isCurrent, "blocked");
+    }
+    if (!hasRemoteContainerMetadataState(parentState) ||
+        input.isCreatePending(intent.parentContainerId)) {
+        await recordPendingMoveIntentError({
+            containerId: intent.containerId,
+            expectedIntentId: intent.id,
+            expectedUpdatedAt: intent.updatedAt,
+            isCurrent: input.isCurrent,
+            message: "Container move destination parent is not synced yet",
+            state,
+        });
+        return currentMoveResult(input.isCurrent, "blocked");
+    }
+    return movePendingRemoteContainer({ parentState, syncInput: input });
+}
+export async function syncPendingContainerMoveIntents(input) {
+    if (!input.isCurrent()) {
+        return 0;
+    }
+    const { host } = input;
+    const state = { ...input.state };
+    const execSql = state.runtime.infra.execSql;
+    const pendingIntents = await state.persistence.listUnsyncedMoveIntents(execSql);
+    if (!input.isCurrent()) {
+        return 0;
+    }
+    let movedCount = 0;
+    for (const intent of pendingIntents) {
+        if (!input.isCurrent()) {
+            return movedCount;
+        }
+        const result = await trySyncPendingContainerMoveIntent({
+            host,
+            isCurrent: input.isCurrent,
+            isCreatePending: input.isCreatePending,
+            isRemoteSyncBlocked: input.isRemoteSyncBlocked,
+            intent,
+            requestRemoteReconciliation: input.requestRemoteReconciliation,
+            state,
+        });
+        if (result === "abandoned") {
+            return movedCount;
+        }
+        if (result === "moved") {
+            movedCount += 1;
+        }
+    }
+    return movedCount;
+}
+//# sourceMappingURL=moveIntentSync.js.map

package/workflows/container-contents/container-state/moveIntentSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"moveIntentSync.js","sourceRoot":"","sources":["moveIntentSync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,uCAAuC,EAAE,MAAM,kDAAkD,CAAC;AAC3G,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EACL,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAS/C,SAAS,iBAAiB,CAExB,SAAwB,EAAE,MAAc;IACxC,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAQ3C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAClD,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,EAAE;QAC3D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,KAK9C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,sBAAsB,GAC1B,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,SAAS;SACzD,cAAc,IAAI,IAAI,CAAC;IAC5B,IACE,CAAC,sBAAsB;QACvB,sBAAsB,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAChE,CAAC;QACD,OAAO,KAAK,CAAC,eAAe,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAClD,MAAM,oCAAoC,GACxC,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,kCAAkC,CAAC,OAAO,EAAE;QACxE,KAAK,CAAC,WAAW;KAClB,CAAC,CAAC;IACL,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,oCAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QACrE,CAAC,CAAC,sBAAsB;QACxB,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAO/C;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,KAAK,CAAC,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,OAAO,EAAE,CAAC;IACzC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,kCAAkC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,4BAA4B;QAC9C,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,+BAA+B,CAAC;QAC3D,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,oBAAoB,GACxB,MAAM,oCAAoC,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,oBAAoB,CAAC,SAAS,GAAG;QAC/B,GAAG,oBAAoB,CAAC,SAAS;QACjC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CACxD,oBAAoB,EACpB;QACE,WAAW,EAAE,KAAK,CAAC,mBAAmB;QACtC,eAAe,EAAE,KAAK,CAAC,uBAAuB;QAC9C,UAAU,EAAE,KAAK,CAAC,kBAAkB;QACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;KACrC,EACD,KAAK,EACL;QACE,cAAc;QACd,gBAAgB,EAAE;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B;KACF,EACD;QACE,wBAAwB,EAAE,cAAc;QACxC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,oBAAoB,EAAE;YACpB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;SACpC;KACF,CACF,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,iBAAiB,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnE,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,iBAAiB,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,OAAO,EAAE,CAAC;IACzC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC;IACjD,qCAAqC,CAAC,cAAc,EAAE,oBAAoB,EAAE;QAC1E,eAAe,EAAE,UAAU;QAC3B,8BAA8B,EAAE,IAAI;KACrC,CAAC,CAAC;IACH,cAAc,CAAC,SAAS,GAAG;QACzB,GAAG,cAAc,CAAC,SAAS;QAC3B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAC/B,SAAuC;IAEvC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IAC1C,MAAM,gBAAgB,GAAG,MAAM,CAAC,yBAAyB,CAAC;IAC1D,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,yBAAyB,CACjE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B;QACE,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;QAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,yBAAyB,EAAE,gBAAgB;QAC3C,YAAY,EAAE,SAAS,CAAC,SAAS;KAClC,CACF,CAAC;IACF,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE;QAAE,OAAO,WAAW,CAAC;IAC/C,sEAAsE;IACtE,IAAI,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IAChC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpE,IAAI,cAAc,EAAE,CAAC;QACnB,cAAc,CAAC,SAAS,GAAG;YACzB,GAAG,cAAc,CAAC,SAAS;YAC3B,QAAQ,EAAE,gBAAgB;SAC3B,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;IACtB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,gDAAgD,MAAM,CAAC,WAAW,2CAA2C,CAC9G,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAGzC;IACC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IAC1C,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,cAAc,GAAkB,MAAM,CAAC,iBAAiB,CAAC;IAC7D,MAAM,kBAAkB,GAAG,GAAG,EAAE;QAC9B,IAAI,iBAAiB,EAAE,CAAC;YACtB,SAAS,CAAC,2BAA2B,CAAC,cAAc,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,WAAoB,CAAC;IAC9B,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,SAAS,CAAC,SAAS;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC3B,SAAS,CAAC,2BAA2B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAChE,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,MAAM,4BAA4B,CAAC;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;gBAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;gBACnC,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,OAAO,EAAE,mDAAmD;gBAC5D,KAAK;aACN,CAAC,CAAC;YACH,OAAO,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QACD,iBAAiB,GAAG,IAAI,CAAC;QACzB,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE;YAAE,OAAO,kBAAkB,EAAE,CAAC;QAExD,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC;YAChD,IAAI;YACJ,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM;YACN,KAAK;YACL,2BAA2B,EAAE,SAAS,CAAC,2BAA2B;YAClE,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,oDAAoD,MAAM,CAAC,WAAW,EAAE,CACzE,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;YAC3B,OAAO,kBAAkB,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,YAAY,yBAAyB;YAC5C,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,uCAAuC,CAC3C,KAAK,EACL,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACzC;YACE,QAAQ,EAAE,MAAM,CAAC,WAAW;YAC5B,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,uBAAuB;YAClC,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,cAAc;SACrD,CACF,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;YAC3B,OAAO,kBAAkB,EAAE,CAAC;QAC9B,CAAC;QACD,MAAM,4BAA4B,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,OAAO,EAAE,kCAAkC,YAAY,CAAC,KAAK,CAAC,EAAE;YAChE,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,KAAmC;IAEnC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAEvE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,4BAA4B,CAAC;YACjC,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,4DAA4D;YACrE,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,4BAA4B,CAAC;YACjC,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EACL,yEAAyE;YAC3E,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,CAAC,+BAA+B,CAAC,cAAc,CAAC;QAChD,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,EACzC,CAAC;QACD,wEAAwE;QACxE,2EAA2E;QAC3E,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,yBAAyB;QACzB,MAAM,4BAA4B,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,yCAAyC;YAClD,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IACD,IACE,CAAC,+BAA+B,CAAC,WAAW,CAAC;QAC7C,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAC/C,CAAC;QACD,MAAM,4BAA4B,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,qDAAqD;YAC9D,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,0BAA0B,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAOrD;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,cAAc,GAClB,MAAM,KAAK,CAAC,WAAW,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACvB,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC;YACrD,IAAI;YACJ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,MAAM;YACN,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;YAC9D,KAAK;SACN,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import { ContainerPathTooDeepError } from \"../../../data/containers/shared/containerPathLimits\";\nimport { errorMessage } from \"../../../data/errorMessage\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../../data/keyingProjectionVerification/error\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../principals/runtimePolicyWarmer\";\nimport {\n  createDetachedContainerMetadataState,\n  installDetachedContainerMetadataState,\n} from \"../metadataStateIsolation\";\nimport type { ContainerState, RemoteContainer } from \"../remoteHydration\";\nimport { hasRemoteContainerMetadataState } from \"../remoteHydration/reconciliation\";\nimport { moveRemoteContainer } from \"./remote\";\nimport type {\n  ContainerMoveIntentSyncHost,\n  ContainerMoveIntentSyncInput,\n  ContainerMoveIntentSyncState,\n} from \"./types\";\n\ntype MoveIntentSyncResult = \"abandoned\" | \"blocked\" | \"failed\" | \"moved\";\n\nfunction currentMoveResult<\n  Result extends Exclude<MoveIntentSyncResult, \"abandoned\">,\n>(isCurrent: () => boolean, result: Result): \"abandoned\" | Result {\n  return isCurrent() ? result : \"abandoned\";\n}\n\nasync function recordPendingMoveIntentError(input: {\n  blocked?: boolean | undefined;\n  containerId: string;\n  expectedIntentId: string;\n  expectedUpdatedAt: string;\n  isCurrent: () => boolean;\n  message: string;\n  state: ContainerMoveIntentSyncState;\n}): Promise<boolean> {\n  if (!input.isCurrent()) {\n    return false;\n  }\n  const execSql = input.state.runtime.infra.execSql;\n  await input.state.persistence.recordMoveIntentError(execSql, {\n    blocked: input.blocked,\n    containerId: input.containerId,\n    expectedIntentId: input.expectedIntentId,\n    expectedUpdatedAt: input.expectedUpdatedAt,\n    message: input.message,\n    stillCurrent: input.isCurrent,\n  });\n  return input.isCurrent();\n}\n\nasync function resolveMoveIntentLocalUpdatedAt(input: {\n  containerId: string;\n  isCurrent: () => boolean;\n  remoteUpdatedAt: string;\n  state: ContainerMoveIntentSyncState;\n}): Promise<string | null> {\n  if (!input.isCurrent()) {\n    return null;\n  }\n  const previousLocalUpdatedAt =\n    input.state.containersById.get(input.containerId)?.container\n      .localUpdatedAt ?? null;\n  if (\n    !previousLocalUpdatedAt ||\n    previousLocalUpdatedAt.localeCompare(input.remoteUpdatedAt) <= 0\n  ) {\n    return input.remoteUpdatedAt;\n  }\n\n  const execSql = input.state.runtime.infra.execSql;\n  const containersWithPendingMetadataUpdates =\n    await input.state.persistence.listContainerIdsWithPendingUpdates(execSql, [\n      input.containerId,\n    ]);\n  if (!input.isCurrent()) {\n    return null;\n  }\n\n  return containersWithPendingMetadataUpdates.includes(input.containerId)\n    ? previousLocalUpdatedAt\n    : input.remoteUpdatedAt;\n}\n\nexport async function persistAcceptedMoveIntent(input: {\n  host: ContainerMoveIntentSyncHost;\n  isCurrent: () => boolean;\n  intent: ContainerMoveIntentSyncInput[\"intent\"];\n  moved: RemoteContainer;\n  requestRemoteReconciliation: (parentContainerId: string | null) => void;\n  state: ContainerMoveIntentSyncState;\n}): Promise<boolean> {\n  const { host, intent, moved, state } = input;\n  const abandon = () => {\n    input.requestRemoteReconciliation(moved.parentId);\n    return false;\n  };\n  if (!input.isCurrent()) return abandon();\n  const containerState = state.containersById.get(intent.containerId);\n  if (!containerState) {\n    return false;\n  }\n\n  await createRuntimePrincipalPolicyWarmer(state.runtime)({\n    organizationId: moved.organizationId,\n    references: moved.metadataReferencedPrincipals,\n    stillCurrent: input.isCurrent,\n  });\n  if (!input.isCurrent()) {\n    return abandon();\n  }\n  const localUpdatedAt = await resolveMoveIntentLocalUpdatedAt({\n    containerId: intent.containerId,\n    isCurrent: input.isCurrent,\n    remoteUpdatedAt: moved.updatedAt,\n    state,\n  });\n  if (!input.isCurrent() || localUpdatedAt === null) {\n    return abandon();\n  }\n  const persistenceCandidate =\n    await createDetachedContainerMetadataState(containerState);\n  if (!input.isCurrent()) {\n    return abandon();\n  }\n  persistenceCandidate.container = {\n    ...persistenceCandidate.container,\n    createdAt: moved.createdAt,\n    serverCreatedAt: moved.createdAt,\n    serverUpdatedAt: moved.updatedAt,\n    updatedAt: moved.updatedAt,\n  };\n  const persistenceResult = await host.persistContainerState(\n    persistenceCandidate,\n    {\n      accessEpoch: moved.metadataAccessEpoch,\n      accessStateHash: moved.metadataAccessStateHash,\n      documentId: moved.metadataDocumentId,\n      metadataDocumentId: moved.metadataDocumentId,\n      organizationId: moved.organizationId,\n      parentId: moved.parentId,\n      systemSlot: moved.systemSlot ?? null,\n    },\n    false,\n    {\n      localUpdatedAt,\n      serverTimestamps: {\n        createdAt: moved.createdAt,\n        updatedAt: moved.updatedAt,\n      },\n    },\n    {\n      expectedStateWhenMissing: containerState,\n      isCurrent: input.isCurrent,\n      moveIntentSettlement: {\n        containerId: intent.containerId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n      },\n    },\n  );\n  if (!input.isCurrent() || persistenceResult.status !== \"persisted\") {\n    return abandon();\n  }\n  if (persistenceResult.moveIntentSettled !== true) {\n    throw new Error(\n      \"Container move persistence must settle the intent atomically\",\n    );\n  }\n  if (!input.isCurrent()) return abandon();\n  const { record: nextRecord } = persistenceResult;\n  installDetachedContainerMetadataState(containerState, persistenceCandidate, {\n    candidateRecord: nextRecord,\n    preserveConcurrentMetadataEdit: true,\n  });\n  containerState.container = {\n    ...containerState.container,\n    metadataDocumentId: moved.metadataDocumentId,\n    organizationId: moved.organizationId,\n    parentId: moved.parentId,\n  };\n  return true;\n}\n\n/**\n * A move refused for path length never succeeds; the queue-time check saw only\n * the descendants this device holds. Drop the queued move and restore the\n * previous parent together: the server row never changed, so no listing would\n * ever put the folder back.\n */\nasync function abandonTooDeepMove(\n  syncInput: ContainerMoveIntentSyncInput,\n): Promise<MoveIntentSyncResult> {\n  const { host, intent, state } = syncInput;\n  const previousParentId = intent.previousParentContainerId;\n  if (previousParentId === null) {\n    throw new Error(\"A queued container move must name its previous parent\");\n  }\n  const abandoned = await state.persistence.abandonMoveIntentRevision(\n    state.runtime.infra.execSql,\n    {\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      previousParentContainerId: previousParentId,\n      stillCurrent: syncInput.isCurrent,\n    },\n  );\n  if (!syncInput.isCurrent()) return \"abandoned\";\n  // A newer local move superseded this revision; it replays on its own.\n  if (!abandoned) return \"failed\";\n  const containerState = state.containersById.get(intent.containerId);\n  if (containerState) {\n    containerState.container = {\n      ...containerState.container,\n      parentId: previousParentId,\n    };\n  }\n  host.updateSnapshot();\n  state.runtime.util.log(\n    `Container contents: abandoned queued move of ${intent.containerId}; its path would exceed the maximum depth`,\n  );\n  return \"failed\";\n}\n\nasync function movePendingRemoteContainer(input: {\n  parentState: ContainerState;\n  syncInput: ContainerMoveIntentSyncInput;\n}): Promise<MoveIntentSyncResult> {\n  const { parentState, syncInput } = input;\n  const { host, intent, state } = syncInput;\n  let remoteMoveApplied = false;\n  let remoteParentId: string | null = intent.parentContainerId;\n  const abandonAppliedMove = () => {\n    if (remoteMoveApplied) {\n      syncInput.requestRemoteReconciliation(remoteParentId);\n    }\n    return \"abandoned\" as const;\n  };\n  try {\n    const moved = await moveRemoteContainer({\n      containerId: intent.containerId,\n      parentContainerId: intent.parentContainerId,\n      resolveProjectionUserKey: state.resolveProjectionUserKey,\n      runtime: state.runtime,\n      stillCurrent: syncInput.isCurrent,\n    });\n    if (!moved) {\n      if (!syncInput.isCurrent()) {\n        syncInput.requestRemoteReconciliation(intent.parentContainerId);\n        return \"abandoned\";\n      }\n      await recordPendingMoveIntentError({\n        containerId: intent.containerId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n        isCurrent: syncInput.isCurrent,\n        message: \"Remote container move was rejected or unavailable\",\n        state,\n      });\n      return currentMoveResult(syncInput.isCurrent, \"failed\");\n    }\n    remoteMoveApplied = true;\n    remoteParentId = moved.parentId;\n    if (!syncInput.isCurrent()) return abandonAppliedMove();\n\n    const persisted = await persistAcceptedMoveIntent({\n      host,\n      isCurrent: syncInput.isCurrent,\n      intent,\n      moved,\n      requestRemoteReconciliation: syncInput.requestRemoteReconciliation,\n      state,\n    });\n    if (!persisted) {\n      return currentMoveResult(syncInput.isCurrent, \"failed\");\n    }\n    state.runtime.util.log(\n      `Container contents: synced queued container move ${intent.containerId}`,\n    );\n    return \"moved\";\n  } catch (error: unknown) {\n    if (!syncInput.isCurrent()) {\n      return abandonAppliedMove();\n    }\n    if (error instanceof ContainerPathTooDeepError)\n      return abandonTooDeepMove(syncInput);\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      state.runtime.util.reportSecurityIncident,\n      {\n        objectId: intent.containerId,\n        objectKind: \"container\",\n        operation: \"container.move.replay\",\n        organizationId: parentState.container.organizationId,\n      },\n    );\n    if (!syncInput.isCurrent()) {\n      return abandonAppliedMove();\n    }\n    await recordPendingMoveIntentError({\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: syncInput.isCurrent,\n      message: `Failed to sync container move: ${errorMessage(error)}`,\n      state,\n    });\n    return currentMoveResult(syncInput.isCurrent, \"failed\");\n  }\n}\n\nasync function trySyncPendingContainerMoveIntent(\n  input: ContainerMoveIntentSyncInput,\n): Promise<MoveIntentSyncResult> {\n  const { intent, state } = input;\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  const containerState = state.containersById.get(intent.containerId);\n  const parentState = state.containersById.get(intent.parentContainerId);\n\n  if (!containerState) {\n    await recordPendingMoveIntentError({\n      blocked: true,\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Container move intent references a missing local container\",\n      state,\n    });\n    return currentMoveResult(input.isCurrent, \"failed\");\n  }\n  if (!parentState) {\n    await recordPendingMoveIntentError({\n      blocked: true,\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message:\n        \"Container move intent references a missing destination parent container\",\n      state,\n    });\n    return currentMoveResult(input.isCurrent, \"failed\");\n  }\n  if (input.isRemoteSyncBlocked(containerState.container.organizationId)) {\n    return \"blocked\";\n  }\n  if (\n    !hasRemoteContainerMetadataState(containerState) ||\n    input.isCreatePending(intent.containerId)\n  ) {\n    // Source not synced yet is TRANSIENT, exactly like the destination case\n    // below: the source's own create intent syncs first (createIntentSync runs\n    // before moveIntentSync in a pass), but if that create fails on this pass\n    // the source still lacks remote metadata here. Keep the intent 'pending'\n    // (not 'blocked') so the queue reports a retryable failure rather than a\n    // missing-dependency block; either way listUnsyncedMoveIntents replays it\n    // once the create lands.\n    await recordPendingMoveIntentError({\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Container move source is not synced yet\",\n      state,\n    });\n    return currentMoveResult(input.isCurrent, \"blocked\");\n  }\n  if (\n    !hasRemoteContainerMetadataState(parentState) ||\n    input.isCreatePending(intent.parentContainerId)\n  ) {\n    await recordPendingMoveIntentError({\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Container move destination parent is not synced yet\",\n      state,\n    });\n    return currentMoveResult(input.isCurrent, \"blocked\");\n  }\n\n  return movePendingRemoteContainer({ parentState, syncInput: input });\n}\n\nexport async function syncPendingContainerMoveIntents(input: {\n  host: ContainerMoveIntentSyncHost;\n  isCreatePending: (containerId: string) => boolean;\n  isCurrent: () => boolean;\n  isRemoteSyncBlocked: (organizationId: string) => boolean;\n  requestRemoteReconciliation: (parentContainerId: string | null) => void;\n  state: ContainerMoveIntentSyncState;\n}): Promise<number> {\n  if (!input.isCurrent()) {\n    return 0;\n  }\n  const { host } = input;\n  const state = { ...input.state };\n  const execSql = state.runtime.infra.execSql;\n  const pendingIntents =\n    await state.persistence.listUnsyncedMoveIntents(execSql);\n  if (!input.isCurrent()) {\n    return 0;\n  }\n  let movedCount = 0;\n\n  for (const intent of pendingIntents) {\n    if (!input.isCurrent()) {\n      return movedCount;\n    }\n    const result = await trySyncPendingContainerMoveIntent({\n      host,\n      isCurrent: input.isCurrent,\n      isCreatePending: input.isCreatePending,\n      isRemoteSyncBlocked: input.isRemoteSyncBlocked,\n      intent,\n      requestRemoteReconciliation: input.requestRemoteReconciliation,\n      state,\n    });\n    if (result === \"abandoned\") {\n      return movedCount;\n    }\n\n    if (result === \"moved\") {\n      movedCount += 1;\n    }\n  }\n\n  return movedCount;\n}\n"]}

package/workflows/container-contents/container-state/projectionCache.js

@@ -0,0 +1,71 @@
+import { projectionGeneration } from "../projectionGeneration.js";
+function cachedProjectionMatchesContainerState(input) {
+    const { containerState, projection } = input;
+    if (projection.containerId !== containerState.container.id) {
+        return false;
+    }
+    const targetManifest = projection.path.at(-1);
+    const targetKek = projection.containerKeks.at(-1);
+    if (!targetManifest ||
+        !targetKek ||
+        targetKek.containerId !== projection.containerId ||
+        targetKek.accessManifestHash !== targetManifest.manifestHash) {
+        return false;
+    }
+    const expectedAccessStateHash = containerState.record.accessStateHash;
+    return (typeof expectedAccessStateHash !== "string" ||
+        expectedAccessStateHash.length === 0 ||
+        targetManifest.manifestHash === expectedAccessStateHash);
+}
+export function getCachedContainerWriterProjection(containerState) {
+    const projection = containerState.containerWriterProjection ?? null;
+    return projection &&
+        cachedProjectionMatchesContainerState({ containerState, projection })
+        ? projection
+        : null;
+}
+// A hint can invalidate a container while its load is in flight; each retry
+// re-reads the generation, so this only bounds a pathological hint storm.
+const MAX_PROJECTION_LOAD_ATTEMPTS = 3;
+/**
+ * Drop both cached writer projections (the container's and its metadata
+ * document's) and advance their shared generation, so an operation that
+ * started before this invalidation (and may carry a pre-hint manifest) cannot
+ * install its result.
+ */
+export function invalidateContainerProjections(containerState) {
+    containerState.containerWriterProjection = null;
+    containerState.metadataWriterProjection = null;
+    containerState.writerProjectionGeneration =
+        projectionGeneration(containerState) + 1;
+}
+/**
+ * Install a container projection an operation fetched or was handed back,
+ * unless a hint invalidated the container while that operation ran: its
+ * answer may predate the hint, so the slot is left as the hint left it and the
+ * next operation fetches fresh.
+ */
+export function installContainerWriterProjection(containerState, projection, capturedGeneration) {
+    if (projectionGeneration(containerState) !== capturedGeneration)
+        return;
+    containerState.containerWriterProjection = projection;
+}
+export async function loadContainerWriterProjectionForState(input) {
+    const cachedProjection = getCachedContainerWriterProjection(input.containerState);
+    if (cachedProjection) {
+        return cachedProjection;
+    }
+    let projection = null;
+    for (let attempt = 0; attempt < MAX_PROJECTION_LOAD_ATTEMPTS; attempt++) {
+        const generation = projectionGeneration(input.containerState);
+        projection = await input.runtime.apiClient.getContainerWriterProjection(input.containerState.container.id);
+        if (projectionGeneration(input.containerState) === generation) {
+            installContainerWriterProjection(input.containerState, projection, generation);
+            return projection;
+        }
+        // Invalidated while in flight (the api-client entry went with it): this
+        // answer may predate the hint, so fetch again instead of caching it.
+    }
+    return projection;
+}
+//# sourceMappingURL=projectionCache.js.map

package/workflows/container-contents/container-state/projectionCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectionCache.js","sourceRoot":"","sources":["projectionCache.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAI/D,SAAS,qCAAqC,CAAC,KAG9C;IACC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC7C,IAAI,UAAU,CAAC,WAAW,KAAK,cAAc,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,IACE,CAAC,cAAc;QACf,CAAC,SAAS;QACV,SAAS,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW;QAChD,SAAS,CAAC,kBAAkB,KAAK,cAAc,CAAC,YAAY,EAC5D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,uBAAuB,GAAG,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC;IACtE,OAAO,CACL,OAAO,uBAAuB,KAAK,QAAQ;QAC3C,uBAAuB,CAAC,MAAM,KAAK,CAAC;QACpC,cAAc,CAAC,YAAY,KAAK,uBAAuB,CACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,cAA8B;IAE9B,MAAM,UAAU,GAAG,cAAc,CAAC,yBAAyB,IAAI,IAAI,CAAC;IACpE,OAAO,UAAU;QACf,qCAAqC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;QACrE,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,4EAA4E;AAC5E,0EAA0E;AAC1E,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,cAA8B;IAE9B,cAAc,CAAC,yBAAyB,GAAG,IAAI,CAAC;IAChD,cAAc,CAAC,wBAAwB,GAAG,IAAI,CAAC;IAC/C,cAAc,CAAC,0BAA0B;QACvC,oBAAoB,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAC9C,cAA8B,EAC9B,UAAoD,EACpD,kBAA0B;IAE1B,IAAI,oBAAoB,CAAC,cAAc,CAAC,KAAK,kBAAkB;QAAE,OAAO;IACxE,cAAc,CAAC,yBAAyB,GAAG,UAAU,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAAC,KAG3D;IACC,MAAM,gBAAgB,GAAG,kCAAkC,CACzD,KAAK,CAAC,cAAc,CACrB,CAAC;IACF,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,IAAI,UAAU,GAA6C,IAAI,CAAC;IAChE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,4BAA4B,EAAE,OAAO,EAAE,EAAE,CAAC;QACxE,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC9D,UAAU,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,4BAA4B,CACrE,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAClC,CAAC;QACF,IAAI,oBAAoB,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,UAAU,EAAE,CAAC;YAC9D,gCAAgC,CAC9B,KAAK,CAAC,cAAc,EACpB,UAAU,EACV,UAAU,CACX,CAAC;YACF,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,wEAAwE;QACxE,qEAAqE;IACvE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { projectionGeneration } from \"../projectionGeneration\";\nimport type { ContainerState } from \"../remoteHydration\";\nimport type { ContainerWorkflowRuntime } from \"./types\";\n\nfunction cachedProjectionMatchesContainerState(input: {\n  containerState: ContainerState;\n  projection: ContainerWriterProjectionResponse;\n}): boolean {\n  const { containerState, projection } = input;\n  if (projection.containerId !== containerState.container.id) {\n    return false;\n  }\n\n  const targetManifest = projection.path.at(-1);\n  const targetKek = projection.containerKeks.at(-1);\n  if (\n    !targetManifest ||\n    !targetKek ||\n    targetKek.containerId !== projection.containerId ||\n    targetKek.accessManifestHash !== targetManifest.manifestHash\n  ) {\n    return false;\n  }\n\n  const expectedAccessStateHash = containerState.record.accessStateHash;\n  return (\n    typeof expectedAccessStateHash !== \"string\" ||\n    expectedAccessStateHash.length === 0 ||\n    targetManifest.manifestHash === expectedAccessStateHash\n  );\n}\n\nexport function getCachedContainerWriterProjection(\n  containerState: ContainerState,\n): ContainerWriterProjectionResponse | null {\n  const projection = containerState.containerWriterProjection ?? null;\n  return projection &&\n    cachedProjectionMatchesContainerState({ containerState, projection })\n    ? projection\n    : null;\n}\n\n// A hint can invalidate a container while its load is in flight; each retry\n// re-reads the generation, so this only bounds a pathological hint storm.\nconst MAX_PROJECTION_LOAD_ATTEMPTS = 3;\n\n/**\n * Drop both cached writer projections (the container's and its metadata\n * document's) and advance their shared generation, so an operation that\n * started before this invalidation (and may carry a pre-hint manifest) cannot\n * install its result.\n */\nexport function invalidateContainerProjections(\n  containerState: ContainerState,\n): void {\n  containerState.containerWriterProjection = null;\n  containerState.metadataWriterProjection = null;\n  containerState.writerProjectionGeneration =\n    projectionGeneration(containerState) + 1;\n}\n\n/**\n * Install a container projection an operation fetched or was handed back,\n * unless a hint invalidated the container while that operation ran: its\n * answer may predate the hint, so the slot is left as the hint left it and the\n * next operation fetches fresh.\n */\nexport function installContainerWriterProjection(\n  containerState: ContainerState,\n  projection: ContainerWriterProjectionResponse | null,\n  capturedGeneration: number,\n): void {\n  if (projectionGeneration(containerState) !== capturedGeneration) return;\n  containerState.containerWriterProjection = projection;\n}\n\nexport async function loadContainerWriterProjectionForState(input: {\n  containerState: ContainerState;\n  runtime: ContainerWorkflowRuntime;\n}): Promise<ContainerWriterProjectionResponse | null> {\n  const cachedProjection = getCachedContainerWriterProjection(\n    input.containerState,\n  );\n  if (cachedProjection) {\n    return cachedProjection;\n  }\n\n  let projection: ContainerWriterProjectionResponse | null = null;\n  for (let attempt = 0; attempt < MAX_PROJECTION_LOAD_ATTEMPTS; attempt++) {\n    const generation = projectionGeneration(input.containerState);\n    projection = await input.runtime.apiClient.getContainerWriterProjection(\n      input.containerState.container.id,\n    );\n    if (projectionGeneration(input.containerState) === generation) {\n      installContainerWriterProjection(\n        input.containerState,\n        projection,\n        generation,\n      );\n      return projection;\n    }\n    // Invalidated while in flight (the api-client entry went with it): this\n    // answer may predate the hint, so fetch again instead of caching it.\n  }\n  return projection;\n}\n"]}

package/workflows/container-contents/container-state/purgeProgress.d.ts

@@ -0,0 +1,9 @@
+export interface PurgeProgress {
+    readonly completedCount: number;
+    readonly failedCount: number;
+    readonly totalCount: number;
+}
+export interface PurgeOptions {
+    onProgress?: ((progress: PurgeProgress) => void) | undefined;
+    signal?: AbortSignal | undefined;
+}

package/workflows/container-contents/container-state/purgeProgress.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=purgeProgress.js.map

package/workflows/container-contents/container-state/purgeProgress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purgeProgress.js","sourceRoot":"","sources":["purgeProgress.ts"],"names":[],"mappings":"","sourcesContent":["// Progress + cancellation contract shared by the recursive purge engine and its\n// store wrappers (\"Delete Forever\" and \"Empty Trash\"). onProgress reports\n// ABSOLUTE counts (not deltas) so a determinate progress bar can render\n// completed/total directly; a fresh object is emitted each tick so a\n// referential-equality state setter never drops an update. signal cancels at the\n// next unit boundary — between whole documents / whole containers, never\n// mid-remote-call — so a cancelled run always stops on a consistent prefix that\n// re-running can safely resume.\nexport interface PurgeProgress {\n  readonly completedCount: number;\n  readonly failedCount: number;\n  readonly totalCount: number;\n}\n\nexport interface PurgeOptions {\n  onProgress?: ((progress: PurgeProgress) => void) | undefined;\n  signal?: AbortSignal | undefined;\n}\n"]}