@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/workflows/documents/documentMutationPreparation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentMutationPreparation.js","sourceRoot":"","sources":["documentMutationPreparation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAEL,kCAAkC,GACnC,MAAM,4CAA4C,CAAC;AAMpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAyBjE,SAAS,yBAAyB,CAChC,IAA+B,EAC/B,KAAgC;IAEhC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAAoC,EACpC,QAA8B;IAE9B,OAAO,CACL,OAAO,KAAK,IAAI;QAChB,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;QAC1B,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;QAC1C,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;QAC5C,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;QAC5C,yBAAyB,CACvB,OAAO,CAAC,eAAe,EACvB,QAAQ,CAAC,eAAe,CACzB;QACD,CAAC,OAAO,CAAC,oBAAoB,IAAI,IAAI,CAAC;YACpC,CAAC,QAAQ,CAAC,oBAAoB,IAAI,IAAI,CAAC;QACzC,yBAAyB,CACvB,OAAO,CAAC,gBAAgB,EACxB,QAAQ,CAAC,gBAAgB,CAC1B;QACD,yBAAyB,CACvB,OAAO,CAAC,kBAAkB,EAC1B,QAAQ,CAAC,kBAAkB,CAC5B;QACD,yBAAyB,CACvB,OAAO,CAAC,sBAAsB,EAC9B,QAAQ,CAAC,sBAAsB,CAChC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAoC;IAEpC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,wBAAwB,CAC/B,OAA6B,EAC7B,MAA4B;IAE5B,OAAO,CACL,CAAC,yBAAyB,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC;QACvE,OAAO,CAAC,kBAAkB,KAAK,MAAM,CAAC,kBAAkB;QACxD,CAAC,yBAAyB,CACxB,OAAO,CAAC,kBAAkB,EAC1B,MAAM,CAAC,kBAAkB,CAC1B;QACD,CAAC,kCAAkC,CACjC,OAAO,CAAC,gBAAgB,EACxB,MAAM,CAAC,gBAAgB,CACxB;QACD,OAAO,CAAC,OAAO,CAAC,gCAAgC,CAAC;YAC/C,OAAO,CAAC,MAAM,CAAC,gCAAgC,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAoC,EACpC,aAAmC;IAEnC,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC/B,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC3C,SAAS,CAAC,kBAAkB,GAAG,mBAAmB,CAAC;YACjD,aAAa,CAAC,kBAAkB;YAChC,KAAK,CAAC,kBAAkB;SACzB,CAAC,CAAC;IACL,CAAC;IACD,IACE,KAAK,CAAC,kBAAkB,KAAK,SAAS;QACtC,KAAK,CAAC,kBAAkB,KAAK,IAAI;QACjC,aAAa,CAAC,kBAAkB,EAChC,CAAC;QACD,SAAS,CAAC,kBAAkB,GAAG,mBAAmB,CAAC;YACjD,aAAa,CAAC,kBAAkB;YAChC,KAAK,CAAC,kBAAkB;SACzB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,8BAA8B,CACrC,KAAmC,EACnC,aAA0C;IAE1C,IACE,KAAK,CAAC,iBAAiB,KAAK,SAAS;QACrC,aAAa,KAAK,IAAI;QACtB,KAAK,CAAC,aAAa,KAAK,IAAI,EAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,kBAAkB,CAAC;IACjE,MAAM,8BAA8B,GAClC,CAAC,iBAAiB;QAClB,CAAC,aAAa,CAAC,kBAAkB,KAAK,IAAI;YACxC,aAAa,CAAC,kBAAkB,KAAK,SAAS;YAC9C,sBAAsB,CACpB,aAAa,CAAC,kBAAkB,EAChC,iBAAiB,CAClB,CAAC,CAAC;IACP,OAAO,CACL,aAAa,CAAC,EAAE,KAAK,KAAK,CAAC,aAAa,CAAC,EAAE;QAC3C,aAAa,CAAC,UAAU,KAAK,KAAK,CAAC,aAAa,CAAC,UAAU;QAC3D,sBAAsB,CACpB,aAAa,CAAC,kBAAkB,EAChC,KAAK,CAAC,aAAa,CAAC,kBAAkB,CACvC;QACD,8BAA8B;QAC9B,wBAAwB,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,KAAmC,EACnC,aAA0C;IAE1C,OAAO,CACL,KAAK,CAAC,iBAAiB,KAAK,SAAS;QACrC,KAAK,CAAC,aAAa,KAAK,IAAI;QAC5B,aAAa,KAAK,IAAI;QACtB,CAAC,aAAa,CAAC,EAAE,KAAK,KAAK,CAAC,aAAa,CAAC,EAAE;YAC1C,aAAa,CAAC,UAAU,KAAK,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,iCAAiC,CACxC,KAAmC,EACnC,aAA0C;IAE1C,OAAO,CACL,KAAK,CAAC,iBAAiB,KAAK,SAAS;QACrC,KAAK,CAAC,aAAa,KAAK,IAAI;QAC5B,aAAa,KAAK,IAAI;QACtB,4BAA4B,CAAC,KAAK,CAAC,aAAa,CAAC,oBAAoB,CAAC;QACtE,CAAC,4BAA4B,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAClE,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,KAAmC,EACnC,aAA0C;IAE1C,OAAO,CACL,KAAK,CAAC,aAAa,KAAK,IAAI;QAC5B,aAAa,KAAK,IAAI;QACtB,CAAC,KAAK,CAAC,aAAa,CAAC,kBAAkB,IAAI,CAAC,CAAC;YAC3C,CAAC,aAAa,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,OAAoC,EACpC,QAA+C;IAE/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,sBAAsB,GAAG,kCAAkC,CAC/D,OAAO,EACP,QAAQ,CAAC,MAAM,CAChB,CAAC;IACF,MAAM,qBAAqB,GACzB,yBAAyB,CACvB,OAAO,EAAE,aAAa,EACtB,QAAQ,CAAC,MAAM,CAAC,aAAa,CAC9B;QACD,OAAO,EAAE,kBAAkB,KAAK,QAAQ,CAAC,MAAM,CAAC,kBAAkB;QAClE,yBAAyB,CACvB,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CACnC,CAAC;IACJ,MAAM,oBAAoB,GACxB,OAAO,CAAC,OAAO,EAAE,gCAAgC,CAAC;QAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,gCAAgC,CAAC;QAC3D,CAAC,OAAO,EAAE,kBAAkB,IAAI,CAAC,CAAC;YAChC,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC;IAC9C,OAAO;QACL,0BAA0B,EACxB,CAAC,sBAAsB;YACvB,CAAC,qBAAqB;YACtB,CAAC,oBAAoB;YACrB,CAAC,kCAAkC,CACjC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,CAAC,gBAAgB,CAC1B;QACH,sBAAsB;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAmC,EACnC,OAAgB,EAChB,KAAoC;IAEpC,MAAM,oBAAoB,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CAC/D,OAAO,EACP,KAAK,CAAC,OAAO,CACd,CAAC;IACF,MAAM,kBAAkB,GACtB,KAAK,CAAC,aAAa,KAAK,IAAI,IAAI,oBAAoB,KAAK,IAAI,CAAC;IAChE,MAAM,qBAAqB,GAAG,oBAAoB,IAAI,KAAK,CAAC,aAAa,CAAC;IAC1E,MAAM,mBAAmB,GAAG,+BAA+B,CACzD,KAAK,EACL,oBAAoB,CACrB,CAAC;IACF,MAAM,qBAAqB,GAAG,iCAAiC,CAC7D,KAAK,EACL,oBAAoB,CACrB,CAAC;IACF,MAAM,qBAAqB,GAAG,+BAA+B,CAC3D,KAAK,EACL,oBAAoB,CACrB,CAAC;IACF,MAAM,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,GAC1D,kBAAkB,IAAI,mBAAmB,IAAI,qBAAqB;QAChE,CAAC,CAAC,EAAE,0BAA0B,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE;QACrE,CAAC,CAAC,qBAAqB;YACrB,CAAC,CAAC,EAAE,0BAA0B,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE;YACpE,CAAC,CAAC,0BAA0B,CACxB,qBAAqB,EACrB,KAAK,CAAC,iBAAiB,CACxB,CAAC;IACV,MAAM,uBAAuB,GAAG,8BAA8B,CAC5D,KAAK,EACL,oBAAoB,CACrB,CAAC;IAEF,IAAI,uBAAuB,IAAI,sBAAsB,EAAE,CAAC;QACtD,MAAM,6BAA6B,CAAC;YAClC,GAAG,EAAE,KAAK,CAAC,UAAU;YACrB,OAAO;YACP,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,GAAG,0BAA0B;QAC9C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,uBAAuB,IAAI,oBAAoB;YAC/C,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,oBAAoB,CAAC;YACrD,CAAC,CAAC,KAAK,CAAC;IACZ,MAAM,sBAAsB,GAAG,uBAAuB,CAAC,aAAa,CAAC;QACnE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1E,OAAO;QACL,kBAAkB;QAClB,qBAAqB;QACrB,0BAA0B;QAC1B,aAAa,EACX,sBAAsB,KAAK,SAAS;YAClC,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,WAAW,EAAE,sBAAsB,CAAC,WAAW,EAAE;QAC3E,sBAAsB;KACvB,CAAC;AACJ,CAAC","sourcesContent":["import { mergeVersionVectors, satisfiesVersionVector } from \"@tearleads/loro\";\nimport { canWriteEffectiveAccessLevel } from \"../../data/accessLevel\";\nimport {\n  type DocumentSyncPullContinuation,\n  documentSyncPullContinuationsEqual,\n} from \"../../data/documents/shared/syncPagination\";\nimport type {\n  DocumentsPersistence,\n  StoredDocumentRecord,\n} from \"../../data/persistence/documents/documentsPersistence\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport { mergePersistedDocumentHistory } from \"./historyContent\";\n\nexport interface ExpectedDocumentSyncState {\n  pullContinuation: DocumentSyncPullContinuation | null;\n  record: StoredDocumentRecord;\n}\n\nexport interface PrepareDocumentMutationInput {\n  currentDoc: Parameters<typeof mergePersistedDocumentHistory>[0][\"doc\"];\n  currentRecord: StoredDocumentRecord | null;\n  expectedSyncState?: ExpectedDocumentSyncState | undefined;\n  historyCheckpoint?:\n    | {\n        coveredTailIds: readonly string[];\n        endVersionVector: string;\n        pruneCoveredLocalState: boolean;\n        snapshot: string;\n      }\n    | undefined;\n  historyUpdateOrigin?: \"local\" | \"remote\" | undefined;\n  historyUpdates?: readonly string[] | undefined;\n  localId: string;\n  persistence: DocumentsPersistence;\n}\n\nfunction sameNullableDocumentValue(\n  left: string | null | undefined,\n  right: string | null | undefined,\n): boolean {\n  return (left ?? null) === (right ?? null);\n}\n\nexport function documentSyncSecurityContextMatches(\n  current: StoredDocumentRecord | null,\n  expected: StoredDocumentRecord,\n): boolean {\n  return (\n    current !== null &&\n    current.id === expected.id &&\n    current.documentId === expected.documentId &&\n    current.containerId === expected.containerId &&\n    current.accessEpoch === expected.accessEpoch &&\n    sameNullableDocumentValue(\n      current.accessStateHash,\n      expected.accessStateHash,\n    ) &&\n    (current.effectiveAccessLevel ?? null) ===\n      (expected.effectiveAccessLevel ?? null) &&\n    sameNullableDocumentValue(\n      current.contentKeyBundle,\n      expected.contentKeyBundle,\n    ) &&\n    sameNullableDocumentValue(\n      current.documentKekTargets,\n      expected.documentKekTargets,\n    ) &&\n    sameNullableDocumentValue(\n      current.documentManifestBundle,\n      expected.documentManifestBundle,\n    )\n  );\n}\n\nfunction patchSpecifiesContainer(\n  patch: Partial<StoredDocumentRecord>,\n): boolean {\n  return Object.hasOwn(patch, \"containerId\");\n}\n\nfunction documentSyncStateDiffers(\n  current: StoredDocumentRecord,\n  cached: StoredDocumentRecord,\n): boolean {\n  return (\n    !sameNullableDocumentValue(current.lastCommitLsn, cached.lastCommitLsn) ||\n    current.snapshotEndVersion !== cached.snapshotEndVersion ||\n    !sameNullableDocumentValue(\n      current.pendingBaseVersion,\n      cached.pendingBaseVersion,\n    ) ||\n    !documentSyncPullContinuationsEqual(\n      current.pullContinuation,\n      cached.pullContinuation,\n    ) ||\n    Boolean(current.pullContinuationRecoveryRequired) !==\n      Boolean(cached.pullContinuationRecoveryRequired)\n  );\n}\n\nfunction mergeMutationFrontiers(\n  patch: Partial<StoredDocumentRecord>,\n  durableRecord: StoredDocumentRecord,\n): Partial<StoredDocumentRecord> {\n  const nextPatch = { ...patch };\n  if (patch.snapshotEndVersion !== undefined) {\n    nextPatch.snapshotEndVersion = mergeVersionVectors([\n      durableRecord.snapshotEndVersion,\n      patch.snapshotEndVersion,\n    ]);\n  }\n  if (\n    patch.pendingBaseVersion !== undefined &&\n    patch.pendingBaseVersion !== null &&\n    durableRecord.pendingBaseVersion\n  ) {\n    nextPatch.pendingBaseVersion = mergeVersionVectors([\n      durableRecord.pendingBaseVersion,\n      patch.pendingBaseVersion,\n    ]);\n  }\n  return nextPatch;\n}\n\nfunction ordinarySaveNeedsHistoryRebase(\n  input: PrepareDocumentMutationInput,\n  durableRecord: StoredDocumentRecord | null,\n): boolean {\n  if (\n    input.expectedSyncState !== undefined ||\n    durableRecord === null ||\n    input.currentRecord === null\n  ) {\n    return false;\n  }\n  const cachedPendingBase = input.currentRecord.pendingBaseVersion;\n  const durableCoversCachedPendingBase =\n    !cachedPendingBase ||\n    (durableRecord.pendingBaseVersion !== null &&\n      durableRecord.pendingBaseVersion !== undefined &&\n      satisfiesVersionVector(\n        durableRecord.pendingBaseVersion,\n        cachedPendingBase,\n      ));\n  return (\n    durableRecord.id === input.currentRecord.id &&\n    durableRecord.documentId === input.currentRecord.documentId &&\n    satisfiesVersionVector(\n      durableRecord.snapshotEndVersion,\n      input.currentRecord.snapshotEndVersion,\n    ) &&\n    durableCoversCachedPendingBase &&\n    documentSyncStateDiffers(durableRecord, input.currentRecord)\n  );\n}\n\nfunction ordinarySaveIdentityWasReplaced(\n  input: PrepareDocumentMutationInput,\n  durableRecord: StoredDocumentRecord | null,\n): boolean {\n  return (\n    input.expectedSyncState === undefined &&\n    input.currentRecord !== null &&\n    durableRecord !== null &&\n    (durableRecord.id !== input.currentRecord.id ||\n      durableRecord.documentId !== input.currentRecord.documentId)\n  );\n}\n\nfunction ordinarySaveWriteAccessWasRevoked(\n  input: PrepareDocumentMutationInput,\n  durableRecord: StoredDocumentRecord | null,\n): boolean {\n  return (\n    input.expectedSyncState === undefined &&\n    input.currentRecord !== null &&\n    durableRecord !== null &&\n    canWriteEffectiveAccessLevel(input.currentRecord.effectiveAccessLevel) &&\n    !canWriteEffectiveAccessLevel(durableRecord.effectiveAccessLevel)\n  );\n}\n\nfunction recoveryGenerationWasSuperseded(\n  input: PrepareDocumentMutationInput,\n  durableRecord: StoredDocumentRecord | null,\n): boolean {\n  return (\n    input.currentRecord !== null &&\n    durableRecord !== null &&\n    (input.currentRecord.recoveryGeneration ?? 0) !==\n      (durableRecord.recoveryGeneration ?? 0)\n  );\n}\n\nfunction resolveSyncSettlementState(\n  current: StoredDocumentRecord | null,\n  expected: ExpectedDocumentSyncState | undefined,\n): { pullContinuationSuperseded: boolean; securityContextMatches: boolean } {\n  if (!expected) {\n    return { pullContinuationSuperseded: false, securityContextMatches: true };\n  }\n  const securityContextMatches = documentSyncSecurityContextMatches(\n    current,\n    expected.record,\n  );\n  const contentFrontiersMatch =\n    sameNullableDocumentValue(\n      current?.lastCommitLsn,\n      expected.record.lastCommitLsn,\n    ) &&\n    current?.snapshotEndVersion === expected.record.snapshotEndVersion &&\n    sameNullableDocumentValue(\n      current?.pendingBaseVersion,\n      expected.record.pendingBaseVersion,\n    );\n  const recoveryStateMatches =\n    Boolean(current?.pullContinuationRecoveryRequired) ===\n      Boolean(expected.record.pullContinuationRecoveryRequired) &&\n    (current?.recoveryGeneration ?? 0) ===\n      (expected.record.recoveryGeneration ?? 0);\n  return {\n    pullContinuationSuperseded:\n      !securityContextMatches ||\n      !contentFrontiersMatch ||\n      !recoveryStateMatches ||\n      !documentSyncPullContinuationsEqual(\n        current?.pullContinuation,\n        expected.pullContinuation,\n      ),\n    securityContextMatches,\n  };\n}\n\nexport async function prepareDocumentMutation(\n  input: PrepareDocumentMutationInput,\n  execSql: ExecSql,\n  patch: Partial<StoredDocumentRecord>,\n) {\n  const durableCurrentRecord = await input.persistence.loadDocument(\n    execSql,\n    input.localId,\n  );\n  const creationSuperseded =\n    input.currentRecord === null && durableCurrentRecord !== null;\n  const mutationCurrentRecord = durableCurrentRecord ?? input.currentRecord;\n  const identityWasReplaced = ordinarySaveIdentityWasReplaced(\n    input,\n    durableCurrentRecord,\n  );\n  const writeAccessWasRevoked = ordinarySaveWriteAccessWasRevoked(\n    input,\n    durableCurrentRecord,\n  );\n  const recoveryWasSuperseded = recoveryGenerationWasSuperseded(\n    input,\n    durableCurrentRecord,\n  );\n  const { pullContinuationSuperseded, securityContextMatches } =\n    creationSuperseded || identityWasReplaced || writeAccessWasRevoked\n      ? { pullContinuationSuperseded: true, securityContextMatches: false }\n      : recoveryWasSuperseded\n        ? { pullContinuationSuperseded: true, securityContextMatches: true }\n        : resolveSyncSettlementState(\n            mutationCurrentRecord,\n            input.expectedSyncState,\n          );\n  const ordinarySaveNeedsRebase = ordinarySaveNeedsHistoryRebase(\n    input,\n    durableCurrentRecord,\n  );\n\n  if (ordinarySaveNeedsRebase && securityContextMatches) {\n    await mergePersistedDocumentHistory({\n      doc: input.currentDoc,\n      execSql,\n      localId: input.localId,\n      persistence: input.persistence,\n    });\n  }\n  const mutationPatch = pullContinuationSuperseded\n    ? {}\n    : ordinarySaveNeedsRebase && durableCurrentRecord\n      ? mergeMutationFrontiers(patch, durableCurrentRecord)\n      : patch;\n  const authoritativeContainer = patchSpecifiesContainer(mutationPatch)\n    ? undefined\n    : await input.persistence.loadDocumentContainer(execSql, input.localId);\n  return {\n    creationSuperseded,\n    mutationCurrentRecord,\n    pullContinuationSuperseded,\n    resolvedPatch:\n      authoritativeContainer === undefined\n        ? mutationPatch\n        : { ...mutationPatch, containerId: authoritativeContainer.containerId },\n    securityContextMatches,\n  };\n}\n"]}

package/workflows/documents/documentPersistGuards.js

@@ -0,0 +1,15 @@
+import { DEFAULT_DOCUMENT_KIND } from "../../data/documents/documentConstants.js";
+/** Refuse a queued update after another subsystem deleted its canonical row. */
+export async function refuseDeletedDocumentPersist(input) {
+    const { currentRecord } = input;
+    if (!currentRecord)
+        return false;
+    return input.persistence.deleteDocumentSideRowsIfAbsent(input.execSql, input.localId, currentRecord.documentId, async (transactionExecSql) => {
+        await input.documentProjectors.deleteStoredDocumentClientProjection({
+            documentKind: currentRecord.documentKind ?? DEFAULT_DOCUMENT_KIND,
+            execSql: transactionExecSql,
+            localId: input.localId,
+        });
+    });
+}
+//# sourceMappingURL=documentPersistGuards.js.map

package/workflows/documents/documentPersistGuards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentPersistGuards.js","sourceRoot":"","sources":["documentPersistGuards.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAQ/E,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAMlD;IACC,MAAM,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAChC,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACjC,OAAO,KAAK,CAAC,WAAW,CAAC,8BAA8B,CACrD,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,aAAa,CAAC,UAAU,EACxB,KAAK,EAAE,kBAAkB,EAAE,EAAE;QAC3B,MAAM,KAAK,CAAC,kBAAkB,CAAC,oCAAoC,CAAC;YAClE,YAAY,EAAE,aAAa,CAAC,YAAY,IAAI,qBAAqB;YACjE,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import { DEFAULT_DOCUMENT_KIND } from \"../../data/documents/documentConstants\";\nimport type { DocumentProjectorRegistry } from \"../../data/documents/documentKinds\";\nimport type {\n  DocumentsPersistence,\n  StoredDocumentRecord,\n} from \"../../data/persistence/documents/documentsPersistence\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\n\n/** Refuse a queued update after another subsystem deleted its canonical row. */\nexport async function refuseDeletedDocumentPersist(input: {\n  currentRecord: StoredDocumentRecord | null;\n  documentProjectors: DocumentProjectorRegistry;\n  execSql: ExecSql;\n  localId: string;\n  persistence: DocumentsPersistence;\n}): Promise<boolean> {\n  const { currentRecord } = input;\n  if (!currentRecord) return false;\n  return input.persistence.deleteDocumentSideRowsIfAbsent(\n    input.execSql,\n    input.localId,\n    currentRecord.documentId,\n    async (transactionExecSql) => {\n      await input.documentProjectors.deleteStoredDocumentClientProjection({\n        documentKind: currentRecord.documentKind ?? DEFAULT_DOCUMENT_KIND,\n        execSql: transactionExecSql,\n        localId: input.localId,\n      });\n    },\n  );\n}\n"]}

package/workflows/documents/historyContent.d.ts

@@ -0,0 +1,28 @@
+import { createDocument, importSnapshot } from "../../internal/loro/index.js";
+import { type DocumentsPersistence } from "../../data/persistence/documents/documentsPersistence.js";
+import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
+/**
+ * Import durable-history tail rows into a document. Rotation baselines travel
+ * through the tail as snapshot-mode blobs, which importUpdates would silently
+ * ignore — import them individually.
+ */
+export declare function importDocumentHistoryTailUpdates(doc: Parameters<typeof importSnapshot>[0], tailUpdates: readonly string[]): void;
+/** Merge the latest durable checkpoint and tail into an already-live pane. */
+export declare function mergePersistedDocumentHistory(input: {
+    doc: Parameters<typeof importSnapshot>[0];
+    execSql: ExecSql;
+    localId: string;
+    persistence: DocumentsPersistence;
+}): Promise<void>;
+/**
+ * Load a persisted document's content into a fresh detached document from the
+ * durable full-history state (checkpoint + tail) — the only persisted content
+ * source. Returns null when the document has no checkpoint yet (a discovered
+ * shell that has not hydrated). For store-less readers (diagnostics, profile
+ * lookups); the document store restores through its own initialization path.
+ */
+export declare function loadPersistedDocumentContent(input: {
+    execSql: ExecSql;
+    localId: string;
+    persistence: DocumentsPersistence;
+}): Promise<Awaited<ReturnType<typeof createDocument>> | null>;

package/workflows/documents/historyContent.js

@@ -0,0 +1,56 @@
+import { base64ToBytes } from "../../internal/encoding/index.js";
+import { createDocument, getImportBlobMetadata, importSnapshot, importUpdates, } from "../../internal/loro/index.js";
+import { getScopedPeerSeed } from "../../data/crdtPeerSeed.js";
+import { DOCUMENTS_APP_KIND, } from "../../data/persistence/documents/documentsPersistence.js";
+/**
+ * Import durable-history tail rows into a document. Rotation baselines travel
+ * through the tail as snapshot-mode blobs, which importUpdates would silently
+ * ignore — import them individually.
+ */
+export function importDocumentHistoryTailUpdates(doc, tailUpdates) {
+    const ordinaryUpdates = [];
+    for (const encoded of tailUpdates) {
+        const bytes = base64ToBytes(encoded);
+        if (getImportBlobMetadata(bytes).mode === "snapshot") {
+            importSnapshot(doc, bytes);
+        }
+        else {
+            ordinaryUpdates.push(bytes);
+        }
+    }
+    if (ordinaryUpdates.length > 0) {
+        importUpdates(doc, ordinaryUpdates);
+    }
+}
+/** Merge the latest durable checkpoint and tail into an already-live pane. */
+export async function mergePersistedDocumentHistory(input) {
+    const history = await input.persistence.loadHistoryRestoreState(input.execSql, input.localId);
+    if (!history)
+        return;
+    if (history.snapshot.length > 0) {
+        importSnapshot(input.doc, base64ToBytes(history.snapshot));
+    }
+    importDocumentHistoryTailUpdates(input.doc, history.tailUpdates.map((update) => update.updateData));
+}
+/**
+ * Load a persisted document's content into a fresh detached document from the
+ * durable full-history state (checkpoint + tail) — the only persisted content
+ * source. Returns null when the document has no checkpoint yet (a discovered
+ * shell that has not hydrated). For store-less readers (diagnostics, profile
+ * lookups); the document store restores through its own initialization path.
+ */
+export async function loadPersistedDocumentContent(input) {
+    const history = await input.persistence.loadHistoryRestoreState(input.execSql, input.localId);
+    if (!history) {
+        return null;
+    }
+    const doc = await createDocument(await getScopedPeerSeed(DOCUMENTS_APP_KIND));
+    // A tail-only state (crash before the birth checkpoint landed) has an
+    // empty snapshot; the tail rows alone carry the content.
+    if (history.snapshot.length > 0) {
+        importSnapshot(doc, base64ToBytes(history.snapshot));
+    }
+    importDocumentHistoryTailUpdates(doc, history.tailUpdates.map((update) => update.updateData));
+    return doc;
+}
+//# sourceMappingURL=historyContent.js.map

package/workflows/documents/historyContent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"historyContent.js","sourceRoot":"","sources":["historyContent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,kBAAkB,GAEnB,MAAM,uDAAuD,CAAC;AAG/D;;;;GAIG;AACH,MAAM,UAAU,gCAAgC,CAC9C,GAAyC,EACzC,WAA8B;IAE9B,MAAM,eAAe,GAAiB,EAAE,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACrD,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,aAAa,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAKnD;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,uBAAuB,CAC7D,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,CACd,CAAC;IACF,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,gCAAgC,CAC9B,KAAK,CAAC,GAAG,EACT,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CACvD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAIlD;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,uBAAuB,CAC7D,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,CACd,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC9E,sEAAsE;IACtE,yDAAyD;IACzD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,cAAc,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,gCAAgC,CAC9B,GAAG,EACH,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CACvD,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import { base64ToBytes } from \"@tearleads/encoding\";\nimport {\n  createDocument,\n  getImportBlobMetadata,\n  importSnapshot,\n  importUpdates,\n} from \"@tearleads/loro\";\nimport { getScopedPeerSeed } from \"../../data/crdtPeerSeed\";\nimport {\n  DOCUMENTS_APP_KIND,\n  type DocumentsPersistence,\n} from \"../../data/persistence/documents/documentsPersistence\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\n\n/**\n * Import durable-history tail rows into a document. Rotation baselines travel\n * through the tail as snapshot-mode blobs, which importUpdates would silently\n * ignore — import them individually.\n */\nexport function importDocumentHistoryTailUpdates(\n  doc: Parameters<typeof importSnapshot>[0],\n  tailUpdates: readonly string[],\n): void {\n  const ordinaryUpdates: Uint8Array[] = [];\n  for (const encoded of tailUpdates) {\n    const bytes = base64ToBytes(encoded);\n    if (getImportBlobMetadata(bytes).mode === \"snapshot\") {\n      importSnapshot(doc, bytes);\n    } else {\n      ordinaryUpdates.push(bytes);\n    }\n  }\n  if (ordinaryUpdates.length > 0) {\n    importUpdates(doc, ordinaryUpdates);\n  }\n}\n\n/** Merge the latest durable checkpoint and tail into an already-live pane. */\nexport async function mergePersistedDocumentHistory(input: {\n  doc: Parameters<typeof importSnapshot>[0];\n  execSql: ExecSql;\n  localId: string;\n  persistence: DocumentsPersistence;\n}): Promise<void> {\n  const history = await input.persistence.loadHistoryRestoreState(\n    input.execSql,\n    input.localId,\n  );\n  if (!history) return;\n  if (history.snapshot.length > 0) {\n    importSnapshot(input.doc, base64ToBytes(history.snapshot));\n  }\n  importDocumentHistoryTailUpdates(\n    input.doc,\n    history.tailUpdates.map((update) => update.updateData),\n  );\n}\n\n/**\n * Load a persisted document's content into a fresh detached document from the\n * durable full-history state (checkpoint + tail) — the only persisted content\n * source. Returns null when the document has no checkpoint yet (a discovered\n * shell that has not hydrated). For store-less readers (diagnostics, profile\n * lookups); the document store restores through its own initialization path.\n */\nexport async function loadPersistedDocumentContent(input: {\n  execSql: ExecSql;\n  localId: string;\n  persistence: DocumentsPersistence;\n}): Promise<Awaited<ReturnType<typeof createDocument>> | null> {\n  const history = await input.persistence.loadHistoryRestoreState(\n    input.execSql,\n    input.localId,\n  );\n  if (!history) {\n    return null;\n  }\n\n  const doc = await createDocument(await getScopedPeerSeed(DOCUMENTS_APP_KIND));\n  // A tail-only state (crash before the birth checkpoint landed) has an\n  // empty snapshot; the tail rows alone carry the content.\n  if (history.snapshot.length > 0) {\n    importSnapshot(doc, base64ToBytes(history.snapshot));\n  }\n  importDocumentHistoryTailUpdates(\n    doc,\n    history.tailUpdates.map((update) => update.updateData),\n  );\n  return doc;\n}\n"]}

package/workflows/documents/index.d.ts

@@ -0,0 +1,35 @@
+export { type DocumentSyncUpdateIsolationError, type IncomingDocumentSyncUpdateValidator, isDocumentSyncUpdateIsolationError, validateDocumentSyncUpdateImports, } from "../../data/documents/shared/documentSyncUpdateIsolation.js";
+export { unwrapContainerKekPath, unwrapDocumentContentKeyTarget, } from "../../data/documents/shared/projection.js";
+export { persistedDocumentCreateStateFromResponse } from "../../data/documents/shared/responses.js";
+export { type DocumentSyncPullContinuation, documentSyncPullContinuationsEqual, readPullContinuation, } from "../../data/documents/shared/syncPagination.js";
+export type { DocumentCreateAuthor, DocumentLinkSetFailureHandler, DocumentLinkSetMutationFailure, RelinkRemoteDocumentResult, } from "../../data/documents/shared/types.js";
+export { DOCUMENT_HISTORY_COMPACTION_MAX_BYTES, DOCUMENT_HISTORY_COMPACTION_MAX_ROWS, } from "../../data/sqlite/documentHistoryPersistence.js";
+export { clearDocumentSyncFailure, invalidateDocumentSyncPullContinuation, recordDocumentSyncFailure, } from "../../data/sqlite/documentPersistence.js";
+export type { ExecSql } from "../../data/sqlite/sqlSchema.js";
+export { selectDocumentSyncOutgoingBatch } from "../../data/sync/documentSyncOutgoingBatch.js";
+export { settleOutgoingPassAndDecideReArm } from "../../data/sync/outgoingUpdateSettlement.js";
+export { didRegainSyncPrerequisites, isDatabaseUnavailableError, } from "../../data/sync/syncCoordinator.js";
+export { deleteLocalDocumentAttachment, deletePendingDocumentAttachment, markLocalDocumentAttachmentDetached, saveLocalDocumentAttachments, savePendingDocumentAttachment, } from "./attachmentPersistence.js";
+export { resolveDocumentCreateAuthor } from "./author.js";
+export { runSerializedDocumentBlobMutation } from "./blobMutationLock.js";
+export { buildMaterializedDocumentCreatePlan, createRemoteDocument, documentWriterProjectionFromCreateResponse, } from "./create.js";
+export { importDocumentHistoryTailUpdates, loadPersistedDocumentContent, mergePersistedDocumentHistory, } from "./historyContent.js";
+export { buildMaterializedDocumentLinkSetMutationPlan } from "./linkSet.js";
+export { relinkRemoteDocument } from "./linkSetRemote.js";
+export { reclaimDocumentOrphanBlobs } from "./orphanBlobReclaims.js";
+export { enqueuePendingDocumentUpdate, listPendingDocumentUpdates, } from "./pendingUpdatePersistence.js";
+export { type DiscardedDocumentShellResult, deletePersistedDocument, discardPersistedDocumentToShell, } from "./persistedDocumentRemoval.js";
+export { type AttachmentRemovalRows, type AttachmentStagingRows, DOCUMENTS_APP_KIND, type DocumentRecord, type DocumentsPersistence, defaultDocumentsPersistence, type LocalAttachmentRecord, loadPersistedDocumentStoreState, type PendingAttachmentRecord, type PendingAttachmentUploadIdentity, type PendingUpdateInsert, type PendingUpdateRecord, persistDocumentState, type RelinkPersistedDocumentInput, runSerializedSqlMutation, } from "./persistence.js";
+export { createDocumentProjectionUserKeyResolver, type DocumentProjectionKeyRuntime, type DocumentProjectionUserKeyResolver, didDocumentProjectionKeyRuntimeChange, } from "./projectionKeys.js";
+export { buildDocumentPurgeRequest, purgeRemoteDocument, } from "./purge.js";
+export type { SyncRemoteDocumentInput } from "./readOnlySync.js";
+export { createDocumentsWorkflowRuntime, type DocumentsWorkflowRuntime, type DocumentsWorkflowRuntimeGroups, type DocumentsWorkflowRuntimeInfra, type DocumentsWorkflowRuntimeInput, type DocumentsWorkflowRuntimeInputGroups, } from "./runtime.js";
+export { hasDocumentUpdateEvent, syncRemoteDocument, } from "./sync.js";
+export type { DocumentSyncContainerRekeyBuilder } from "./syncAttemptState.js";
+export { DocumentRawHistoryUnavailableError } from "./syncContentKeys.js";
+export { describeDocumentRevalidationFailure, describeDocumentSyncSubmitFailure, type TerminalSubmitFailureHandler, } from "./syncFailureClassification.js";
+export { shouldClearDocumentSyncFailureAfterPass } from "./syncFailureClearance.js";
+export { type DocumentSyncLane, registerDocumentSyncLane, requestDocumentSyncLaneAndWait, } from "./syncLane.js";
+export type { RekeyPendingUpdate } from "./syncRecoveryRekey.js";
+export { DOCUMENT_SYNC_TRACE_FRAGMENT, DOCUMENT_SYNC_TRACE_PATTERN, } from "./syncTrace.js";
+export { createDocumentWriterPublicKeyResolver } from "./writerKeys.js";

package/workflows/documents/index.js

@@ -0,0 +1,31 @@
+export { isDocumentSyncUpdateIsolationError, validateDocumentSyncUpdateImports, } from "../../data/documents/shared/documentSyncUpdateIsolation.js";
+export { unwrapContainerKekPath, unwrapDocumentContentKeyTarget, } from "../../data/documents/shared/projection.js";
+export { persistedDocumentCreateStateFromResponse } from "../../data/documents/shared/responses.js";
+export { documentSyncPullContinuationsEqual, readPullContinuation, } from "../../data/documents/shared/syncPagination.js";
+export { DOCUMENT_HISTORY_COMPACTION_MAX_BYTES, DOCUMENT_HISTORY_COMPACTION_MAX_ROWS, } from "../../data/sqlite/documentHistoryPersistence.js";
+export { clearDocumentSyncFailure, invalidateDocumentSyncPullContinuation, recordDocumentSyncFailure, } from "../../data/sqlite/documentPersistence.js";
+export { selectDocumentSyncOutgoingBatch } from "../../data/sync/documentSyncOutgoingBatch.js";
+export { settleOutgoingPassAndDecideReArm } from "../../data/sync/outgoingUpdateSettlement.js";
+export { didRegainSyncPrerequisites, isDatabaseUnavailableError, } from "../../data/sync/syncCoordinator.js";
+export { deleteLocalDocumentAttachment, deletePendingDocumentAttachment, markLocalDocumentAttachmentDetached, saveLocalDocumentAttachments, savePendingDocumentAttachment, } from "./attachmentPersistence.js";
+export { resolveDocumentCreateAuthor } from "./author.js";
+export { runSerializedDocumentBlobMutation } from "./blobMutationLock.js";
+export { buildMaterializedDocumentCreatePlan, createRemoteDocument, documentWriterProjectionFromCreateResponse, } from "./create.js";
+export { importDocumentHistoryTailUpdates, loadPersistedDocumentContent, mergePersistedDocumentHistory, } from "./historyContent.js";
+export { buildMaterializedDocumentLinkSetMutationPlan } from "./linkSet.js";
+export { relinkRemoteDocument } from "./linkSetRemote.js";
+export { reclaimDocumentOrphanBlobs } from "./orphanBlobReclaims.js";
+export { enqueuePendingDocumentUpdate, listPendingDocumentUpdates, } from "./pendingUpdatePersistence.js";
+export { deletePersistedDocument, discardPersistedDocumentToShell, } from "./persistedDocumentRemoval.js";
+export { DOCUMENTS_APP_KIND, defaultDocumentsPersistence, loadPersistedDocumentStoreState, persistDocumentState, runSerializedSqlMutation, } from "./persistence.js";
+export { createDocumentProjectionUserKeyResolver, didDocumentProjectionKeyRuntimeChange, } from "./projectionKeys.js";
+export { buildDocumentPurgeRequest, purgeRemoteDocument, } from "./purge.js";
+export { createDocumentsWorkflowRuntime, } from "./runtime.js";
+export { hasDocumentUpdateEvent, syncRemoteDocument, } from "./sync.js";
+export { DocumentRawHistoryUnavailableError } from "./syncContentKeys.js";
+export { describeDocumentRevalidationFailure, describeDocumentSyncSubmitFailure, } from "./syncFailureClassification.js";
+export { shouldClearDocumentSyncFailureAfterPass } from "./syncFailureClearance.js";
+export { registerDocumentSyncLane, requestDocumentSyncLaneAndWait, } from "./syncLane.js";
+export { DOCUMENT_SYNC_TRACE_FRAGMENT, DOCUMENT_SYNC_TRACE_PATTERN, } from "./syncTrace.js";
+export { createDocumentWriterPublicKeyResolver } from "./writerKeys.js";
+//# sourceMappingURL=index.js.map

package/workflows/documents/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,yDAAyD,CAAC;AACjE,OAAO,EACL,sBAAsB,EACtB,8BAA8B,GAC/B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,wCAAwC,EAAE,MAAM,uCAAuC,CAAC;AACjG,OAAO,EAEL,kCAAkC,EAClC,oBAAoB,GACrB,MAAM,4CAA4C,CAAC;AAOpD,OAAO,EACL,qCAAqC,EACrC,oCAAoC,GACrC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,wBAAwB,EACxB,sCAAsC,EACtC,yBAAyB,GAC1B,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EAAE,gCAAgC,EAAE,MAAM,0CAA0C,CAAC;AAC5F,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EACL,mCAAmC,EACnC,oBAAoB,EACpB,0CAA0C,GAC3C,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,gCAAgC,EAChC,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,4CAA4C,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,kBAAkB,EAGlB,2BAA2B,EAE3B,+BAA+B,EAK/B,oBAAoB,EAEpB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uCAAuC,EAGvC,qCAAqC,GACtC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,8BAA8B,GAM/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,QAAQ,CAAC;AAEhB,OAAO,EAAE,kCAAkC,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EACL,mCAAmC,EACnC,iCAAiC,GAElC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,uCAAuC,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAEL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qCAAqC,EAAE,MAAM,cAAc,CAAC","sourcesContent":["export {\n  type DocumentSyncUpdateIsolationError,\n  type IncomingDocumentSyncUpdateValidator,\n  isDocumentSyncUpdateIsolationError,\n  validateDocumentSyncUpdateImports,\n} from \"../../data/documents/shared/documentSyncUpdateIsolation\";\nexport {\n  unwrapContainerKekPath,\n  unwrapDocumentContentKeyTarget,\n} from \"../../data/documents/shared/projection\";\nexport { persistedDocumentCreateStateFromResponse } from \"../../data/documents/shared/responses\";\nexport {\n  type DocumentSyncPullContinuation,\n  documentSyncPullContinuationsEqual,\n  readPullContinuation,\n} from \"../../data/documents/shared/syncPagination\";\nexport type {\n  DocumentCreateAuthor,\n  DocumentLinkSetFailureHandler,\n  DocumentLinkSetMutationFailure,\n  RelinkRemoteDocumentResult,\n} from \"../../data/documents/shared/types\";\nexport {\n  DOCUMENT_HISTORY_COMPACTION_MAX_BYTES,\n  DOCUMENT_HISTORY_COMPACTION_MAX_ROWS,\n} from \"../../data/sqlite/documentHistoryPersistence\";\nexport {\n  clearDocumentSyncFailure,\n  invalidateDocumentSyncPullContinuation,\n  recordDocumentSyncFailure,\n} from \"../../data/sqlite/documentPersistence\";\nexport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nexport { selectDocumentSyncOutgoingBatch } from \"../../data/sync/documentSyncOutgoingBatch\";\nexport { settleOutgoingPassAndDecideReArm } from \"../../data/sync/outgoingUpdateSettlement\";\nexport {\n  didRegainSyncPrerequisites,\n  isDatabaseUnavailableError,\n} from \"../../data/sync/syncCoordinator\";\nexport {\n  deleteLocalDocumentAttachment,\n  deletePendingDocumentAttachment,\n  markLocalDocumentAttachmentDetached,\n  saveLocalDocumentAttachments,\n  savePendingDocumentAttachment,\n} from \"./attachmentPersistence\";\nexport { resolveDocumentCreateAuthor } from \"./author\";\nexport { runSerializedDocumentBlobMutation } from \"./blobMutationLock\";\nexport {\n  buildMaterializedDocumentCreatePlan,\n  createRemoteDocument,\n  documentWriterProjectionFromCreateResponse,\n} from \"./create\";\nexport {\n  importDocumentHistoryTailUpdates,\n  loadPersistedDocumentContent,\n  mergePersistedDocumentHistory,\n} from \"./historyContent\";\nexport { buildMaterializedDocumentLinkSetMutationPlan } from \"./linkSet\";\nexport { relinkRemoteDocument } from \"./linkSetRemote\";\nexport { reclaimDocumentOrphanBlobs } from \"./orphanBlobReclaims\";\nexport {\n  enqueuePendingDocumentUpdate,\n  listPendingDocumentUpdates,\n} from \"./pendingUpdatePersistence\";\nexport {\n  type DiscardedDocumentShellResult,\n  deletePersistedDocument,\n  discardPersistedDocumentToShell,\n} from \"./persistedDocumentRemoval\";\nexport {\n  type AttachmentRemovalRows,\n  type AttachmentStagingRows,\n  DOCUMENTS_APP_KIND,\n  type DocumentRecord,\n  type DocumentsPersistence,\n  defaultDocumentsPersistence,\n  type LocalAttachmentRecord,\n  loadPersistedDocumentStoreState,\n  type PendingAttachmentRecord,\n  type PendingAttachmentUploadIdentity,\n  type PendingUpdateInsert,\n  type PendingUpdateRecord,\n  persistDocumentState,\n  type RelinkPersistedDocumentInput,\n  runSerializedSqlMutation,\n} from \"./persistence\";\nexport {\n  createDocumentProjectionUserKeyResolver,\n  type DocumentProjectionKeyRuntime,\n  type DocumentProjectionUserKeyResolver,\n  didDocumentProjectionKeyRuntimeChange,\n} from \"./projectionKeys\";\nexport {\n  buildDocumentPurgeRequest,\n  purgeRemoteDocument,\n} from \"./purge\";\nexport type { SyncRemoteDocumentInput } from \"./readOnlySync\";\nexport {\n  createDocumentsWorkflowRuntime,\n  type DocumentsWorkflowRuntime,\n  type DocumentsWorkflowRuntimeGroups,\n  type DocumentsWorkflowRuntimeInfra,\n  type DocumentsWorkflowRuntimeInput,\n  type DocumentsWorkflowRuntimeInputGroups,\n} from \"./runtime\";\nexport {\n  hasDocumentUpdateEvent,\n  syncRemoteDocument,\n} from \"./sync\";\nexport type { DocumentSyncContainerRekeyBuilder } from \"./syncAttemptState\";\nexport { DocumentRawHistoryUnavailableError } from \"./syncContentKeys\";\nexport {\n  describeDocumentRevalidationFailure,\n  describeDocumentSyncSubmitFailure,\n  type TerminalSubmitFailureHandler,\n} from \"./syncFailureClassification\";\nexport { shouldClearDocumentSyncFailureAfterPass } from \"./syncFailureClearance\";\nexport {\n  type DocumentSyncLane,\n  registerDocumentSyncLane,\n  requestDocumentSyncLaneAndWait,\n} from \"./syncLane\";\nexport type { RekeyPendingUpdate } from \"./syncRecoveryRekey\";\nexport {\n  DOCUMENT_SYNC_TRACE_FRAGMENT,\n  DOCUMENT_SYNC_TRACE_PATTERN,\n} from \"./syncTrace\";\nexport { createDocumentWriterPublicKeyResolver } from \"./writerKeys\";\n"]}

package/workflows/documents/initialSync.js

@@ -0,0 +1,65 @@
+import { createPendingUpdateFields } from "../../data/documents/documentSync.js";
+import { importContentKeyMaterial } from "../../data/documents/shared/contentRecordKeys.js";
+import { encryptDocumentPendingUpdate } from "../../data/documents/shared/crypto.js";
+import { containerPathRefs } from "../../data/documents/shared/projection.js";
+import { signDocumentOutgoingUpdate } from "./syncPlanIdentity.js";
+/**
+ * Builds the single encrypted initial write for a provisioned document. The
+ * server commits it with the organization and document manifest transaction.
+ */
+export async function buildInitialDocumentSyncRequest(input) {
+    const pendingFields = createPendingUpdateFields(input.initialUpdate);
+    if (!pendingFields) {
+        throw new Error("Initial document sync update is empty");
+    }
+    const documentId = input.materializedDocument.plan.documentId;
+    const contentKeyBundle = input.materializedDocument.plan.request.contentKeyBundle;
+    const pendingUpdate = {
+        id: crypto.randomUUID(),
+        ...pendingFields,
+    };
+    const encrypted = await encryptDocumentPendingUpdate({
+        contentKeyMaterial: await importContentKeyMaterial(input.materializedDocument.contentKey),
+        contentKeyEpoch: contentKeyBundle.contentKeyEpoch,
+        documentId,
+        organizationId: input.containerProjection.organizationId,
+        update: pendingUpdate,
+    });
+    const outgoingUpdate = await signDocumentOutgoingUpdate({
+        authorizingContainerPathRefs: [
+            containerPathRefs(input.containerProjection.path),
+        ],
+        author: input.author,
+        contentKeyEpoch: contentKeyBundle.contentKeyEpoch,
+        documentId,
+        expectedLinkSetManifestHash: contentKeyBundle.linkSetManifestHash,
+        expectedTargetHash: contentKeyBundle.targetHash,
+        organizationId: input.containerProjection.organizationId,
+        signedAt: new Date().toISOString(),
+        update: {
+            contentRecordId: encrypted.contentRecordId,
+            encryptedData: encrypted.encryptedData,
+            id: pendingUpdate.id,
+            partialEndVersionVector: pendingUpdate.partialEndVersionVector,
+            partialStartVersionVector: pendingUpdate.partialStartVersionVector,
+            metadataHash: encrypted.metadataHash,
+            ciphertextHash: encrypted.ciphertextHash,
+            plaintextHash: encrypted.plaintextHash,
+        },
+    });
+    return {
+        authorizingContainerPathRefs: [
+            containerPathRefs(input.containerProjection.path),
+        ],
+        contentKeyBundle,
+        contentKeyEpoch: contentKeyBundle.contentKeyEpoch,
+        expectedLinkSetManifestHash: contentKeyBundle.linkSetManifestHash,
+        expectedTargetHash: contentKeyBundle.targetHash,
+        // The provisioning device already holds this exact initialized snapshot,
+        // so it does not need the transaction response to echo the update back.
+        localVersionVector: pendingUpdate.partialEndVersionVector,
+        outgoingUpdates: [outgoingUpdate],
+        supportsPullPagination: true,
+    };
+}
+//# sourceMappingURL=initialSync.js.map

package/workflows/documents/initialSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialSync.js","sourceRoot":"","sources":["initialSync.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAM3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAEhE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAKrD;IACC,MAAM,aAAa,GAAG,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACrE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC;IAC9D,MAAM,gBAAgB,GACpB,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC3D,MAAM,aAAa,GAAwB;QACzC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,GAAG,aAAa;KACjB,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;QACnD,kBAAkB,EAAE,MAAM,wBAAwB,CAChD,KAAK,CAAC,oBAAoB,CAAC,UAAU,CACtC;QACD,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,mBAAmB,CAAC,cAAc;QACxD,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,MAAM,0BAA0B,CAAC;QACtD,4BAA4B,EAAE;YAC5B,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC;SAClD;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,UAAU;QACV,2BAA2B,EAAE,gBAAgB,CAAC,mBAAmB;QACjE,kBAAkB,EAAE,gBAAgB,CAAC,UAAU;QAC/C,cAAc,EAAE,KAAK,CAAC,mBAAmB,CAAC,cAAc;QACxD,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,MAAM,EAAE;YACN,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,uBAAuB,EAAE,aAAa,CAAC,uBAAuB;YAC9D,yBAAyB,EAAE,aAAa,CAAC,yBAAyB;YAClE,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,aAAa,EAAE,SAAS,CAAC,aAAa;SACvC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,4BAA4B,EAAE;YAC5B,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC;SAClD;QACD,gBAAgB;QAChB,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,2BAA2B,EAAE,gBAAgB,CAAC,mBAAmB;QACjE,kBAAkB,EAAE,gBAAgB,CAAC,UAAU;QAC/C,yEAAyE;QACzE,wEAAwE;QACxE,kBAAkB,EAAE,aAAa,CAAC,uBAAuB;QACzD,eAAe,EAAE,CAAC,cAAc,CAAC;QACjC,sBAAsB,EAAE,IAAI;KAC7B,CAAC;AACJ,CAAC","sourcesContent":["import type { DocumentSyncRequest } from \"@tearleads/validators/request\";\nimport type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { createPendingUpdateFields } from \"../../data/documents/documentSync\";\nimport { importContentKeyMaterial } from \"../../data/documents/shared/contentRecordKeys\";\nimport { encryptDocumentPendingUpdate } from \"../../data/documents/shared/crypto\";\nimport { containerPathRefs } from \"../../data/documents/shared/projection\";\nimport type {\n  DocumentCreateAuthor,\n  MaterializedDocumentCreatePlan,\n} from \"../../data/documents/shared/types\";\nimport type { PendingUpdateRecord } from \"../../data/sqlite/documentPersistence\";\nimport { signDocumentOutgoingUpdate } from \"./syncPlanIdentity\";\n\n/**\n * Builds the single encrypted initial write for a provisioned document. The\n * server commits it with the organization and document manifest transaction.\n */\nexport async function buildInitialDocumentSyncRequest(input: {\n  readonly author: DocumentCreateAuthor;\n  readonly containerProjection: ContainerWriterProjectionResponse;\n  readonly initialUpdate: Uint8Array;\n  readonly materializedDocument: MaterializedDocumentCreatePlan;\n}): Promise<DocumentSyncRequest> {\n  const pendingFields = createPendingUpdateFields(input.initialUpdate);\n  if (!pendingFields) {\n    throw new Error(\"Initial document sync update is empty\");\n  }\n\n  const documentId = input.materializedDocument.plan.documentId;\n  const contentKeyBundle =\n    input.materializedDocument.plan.request.contentKeyBundle;\n  const pendingUpdate: PendingUpdateRecord = {\n    id: crypto.randomUUID(),\n    ...pendingFields,\n  };\n  const encrypted = await encryptDocumentPendingUpdate({\n    contentKeyMaterial: await importContentKeyMaterial(\n      input.materializedDocument.contentKey,\n    ),\n    contentKeyEpoch: contentKeyBundle.contentKeyEpoch,\n    documentId,\n    organizationId: input.containerProjection.organizationId,\n    update: pendingUpdate,\n  });\n  const outgoingUpdate = await signDocumentOutgoingUpdate({\n    authorizingContainerPathRefs: [\n      containerPathRefs(input.containerProjection.path),\n    ],\n    author: input.author,\n    contentKeyEpoch: contentKeyBundle.contentKeyEpoch,\n    documentId,\n    expectedLinkSetManifestHash: contentKeyBundle.linkSetManifestHash,\n    expectedTargetHash: contentKeyBundle.targetHash,\n    organizationId: input.containerProjection.organizationId,\n    signedAt: new Date().toISOString(),\n    update: {\n      contentRecordId: encrypted.contentRecordId,\n      encryptedData: encrypted.encryptedData,\n      id: pendingUpdate.id,\n      partialEndVersionVector: pendingUpdate.partialEndVersionVector,\n      partialStartVersionVector: pendingUpdate.partialStartVersionVector,\n      metadataHash: encrypted.metadataHash,\n      ciphertextHash: encrypted.ciphertextHash,\n      plaintextHash: encrypted.plaintextHash,\n    },\n  });\n\n  return {\n    authorizingContainerPathRefs: [\n      containerPathRefs(input.containerProjection.path),\n    ],\n    contentKeyBundle,\n    contentKeyEpoch: contentKeyBundle.contentKeyEpoch,\n    expectedLinkSetManifestHash: contentKeyBundle.linkSetManifestHash,\n    expectedTargetHash: contentKeyBundle.targetHash,\n    // The provisioning device already holds this exact initialized snapshot,\n    // so it does not need the transaction response to echo the update back.\n    localVersionVector: pendingUpdate.partialEndVersionVector,\n    outgoingUpdates: [outgoingUpdate],\n    supportsPullPagination: true,\n  };\n}\n"]}

package/workflows/documents/linkSet.d.ts

@@ -0,0 +1,18 @@
+import { type DocumentContentKeyTarget } from "../../internal/crypto/index.js";
+import type { ContainerWriterProjectionResponse, DocumentWriterProjectionResponse } from "../../internal/validators/response/index.js";
+import { type BuildDocumentLinkSetMutationPlanInput, type DocumentCreateAuthor, type DocumentLinkSetMutationOperation, type MaterializedDocumentLinkSetMutationPlan, type ProjectionVerificationOptions } from "../../data/documents/shared/types.js";
+import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
+export declare function assertDocumentLinkTargetCapacity(currentTargetCount: number): void;
+export declare function assertDocumentLinkAuthorizationPathCapacity(currentPathLengths: readonly number[], targetPathLength: number): void;
+export declare function buildMaterializedDocumentLinkSetMutationPlan(input: {
+    author: DocumentCreateAuthor;
+    prepareBlobRewraps: (targets: readonly DocumentContentKeyTarget[]) => Promise<BuildDocumentLinkSetMutationPlanInput["blobRewraps"]>;
+    contentKey?: Uint8Array | undefined;
+    eventId?: string | undefined;
+    execSql?: ExecSql | undefined;
+    operation: DocumentLinkSetMutationOperation;
+    signedAt?: string | undefined;
+    targetContainerProjection: ContainerWriterProjectionResponse;
+    targetSecretKey: Uint8Array;
+    writerProjection: DocumentWriterProjectionResponse;
+} & ProjectionVerificationOptions): Promise<MaterializedDocumentLinkSetMutationPlan>;

package/workflows/documents/linkSet.js

@@ -0,0 +1,288 @@
+import { computeAccessManifestHash, computeDocumentContentKeyTargetHash, DOCUMENT_CONTENT_KEY_WRAP_SUITE, deriveDocumentLinkSetManifest, wrapContentKey, } from "../../internal/crypto/index.js";
+import { bytesToBase64 } from "../../internal/encoding/index.js";
+import { isPlainObject as isPlainRecord } from "../../internal/validators/isPlainObject.js";
+import { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS, MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS, } from "../../internal/validators/util/index.js";
+import { assertContainerKekPathCurrent, assertDocumentKekPathsCurrent, } from "../../data/documents/shared/containerKekCurrency.js";
+import { buildDocumentLinkSetEventPlan } from "../../data/documents/shared/events.js";
+import { assertDocumentWriterProjectionConsistent, collectContainerKeksForDocumentSync, containerPathRefs, currentDocumentTargets, deriveDocumentTargetFromProjection, mergeTargetEnvelopes, readLinkedContainerIdsFromDocumentManifest, unwrapContainerKekPath, unwrapDocumentContentKeyFromWriterProjection, verifiedDocumentWrapTargets, } from "../../data/documents/shared/projection.js";
+import { assertDocumentManifestBundleConsistent, describeDocumentTargetKek, sortDocumentTargets, targetKey, uniqueSortedStrings, } from "../../data/documents/shared/readers.js";
+import { projectionVerificationOptions, } from "../../data/documents/shared/types.js";
+import { readCanonicalRecord } from "../../data/keyingCanonicalJson.js";
+import { assertDocumentLinkAuthorAccess, verifyDocumentLinkSetCurrentPolicies, } from "./linkSetAuthority.js";
+function deriveDocumentLinkSetTargetState(input) {
+    const currentTargets = currentDocumentTargets(input.writerProjection);
+    const currentLinkedContainerIds = readLinkedContainerIdsFromDocumentManifest(input.writerProjection);
+    const target = deriveDocumentTargetFromProjection(input.targetContainerProjection);
+    const currentTarget = currentTargets.find((candidate) => candidate.containerId === target.containerId);
+    if (input.operation === "link") {
+        if (currentTarget) {
+            throw new Error("Document link target is already linked");
+        }
+        assertDocumentLinkTargetCapacity(currentTargets.length);
+        assertDocumentLinkAuthorizationPathCapacity(input.writerProjection.authorizingContainerPaths.map((projection) => projection.path.length), input.targetContainerProjection.path.length);
+        return {
+            currentTargets,
+            linkedContainerIds: uniqueSortedStrings([
+                ...currentLinkedContainerIds,
+                target.containerId,
+            ]),
+            target,
+            targets: sortDocumentTargets([...currentTargets, target]),
+        };
+    }
+    if (!currentTarget) {
+        throw new Error("Document unlink target is not linked");
+    }
+    if (targetKey(currentTarget) !== targetKey(target)) {
+        throw new Error("Document unlink target projection is stale");
+    }
+    const linkedContainerIds = currentLinkedContainerIds.filter((containerId) => containerId !== target.containerId);
+    if (linkedContainerIds.length === 0) {
+        throw new Error("Document unlink must leave a linked container");
+    }
+    return {
+        currentTargets,
+        linkedContainerIds,
+        target,
+        targets: currentTargets.filter((candidate) => candidate.containerId !== target.containerId),
+    };
+}
+export function assertDocumentLinkTargetCapacity(currentTargetCount) {
+    if (currentTargetCount >= MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS) {
+        throw new RangeError(`A document cannot be linked to more than ${MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS} containers`);
+    }
+}
+export function assertDocumentLinkAuthorizationPathCapacity(currentPathLengths, targetPathLength) {
+    const totalReferences = currentPathLengths.reduce((total, length) => total + length, targetPathLength);
+    if (totalReferences > MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS) {
+        throw new RangeError(`Document links cannot require more than ${MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS} authorization references`);
+    }
+}
+async function wrapDocumentContentKeyForTargets(input) {
+    return Promise.all(sortDocumentTargets(input.targets).map(async (target) => {
+        const targetKek = input.keksByEpochId.get(target.containerKeyEpochId);
+        if (!targetKek) {
+            throw new Error(`Document target KEK could not be unwrapped for ${describeDocumentTargetKek(target)}`);
+        }
+        const wrapped = await wrapContentKey(input.contentKey, targetKek, {
+            kind: "Document",
+            objectId: input.documentId,
+            contentKeyEpoch: input.contentKeyEpoch,
+            containerId: target.containerId,
+            containerKeyEpochId: target.containerKeyEpochId,
+        });
+        return {
+            ...target,
+            wrappedKey: bytesToBase64(wrapped.ciphertext),
+            wrappingMetadata: {
+                suite: DOCUMENT_CONTENT_KEY_WRAP_SUITE,
+                iv: bytesToBase64(wrapped.iv),
+            },
+        };
+    }));
+}
+// Resolve the organization a link/unlink mutation belongs to: the document's
+// own org (from its manifest), which must equal the target container's org —
+// both are owned by the same organization. The acting member's personal org is
+// intentionally not part of this check; a member may link documents within any
+// org they belong to. Returns the document org so the plan stamps it onto the
+// signed event and manifest rather than the author's org.
+async function resolveDocumentLinkSetMutationOrganization(input) {
+    const manifestIdentity = await assertDocumentManifestBundleConsistent({
+        bundle: input.writerProjection.documentManifest,
+        label: "Document link-set manifest",
+    });
+    if (manifestIdentity.organizationId !==
+        input.targetContainerProjection.organizationId) {
+        throw new Error("Document target container organization mismatch");
+    }
+    return manifestIdentity.organizationId;
+}
+function readDocumentLinkSetPreviousEpoch(writerProjection) {
+    const previousState = writerProjection.documentManifest.state;
+    const previousEpoch = isPlainRecord(previousState)
+        ? Reflect.get(previousState, "epoch")
+        : undefined;
+    if (typeof previousEpoch !== "number" ||
+        !Number.isInteger(previousEpoch) ||
+        previousEpoch <= 0) {
+        throw new Error("Document link-set previous epoch is invalid");
+    }
+    return previousEpoch;
+}
+async function buildDocumentLinkSetMutationPlan({ author, blobRewraps, contentKeyEpoch, eventId = crypto.randomUUID(), operation, signedAt = new Date().toISOString(), targetContainerProjection, targetEnvelopes, writerProjection, }) {
+    const organizationId = await resolveDocumentLinkSetMutationOrganization({
+        targetContainerProjection,
+        writerProjection,
+    });
+    const targetState = deriveDocumentLinkSetTargetState({
+        operation,
+        targetContainerProjection,
+        writerProjection,
+    });
+    const targetEnvelopesForRequest = mergeTargetEnvelopes(targetState.targets, targetEnvelopes);
+    const targetContainerPathRefs = containerPathRefs(targetContainerProjection.path);
+    const eventPlan = await buildDocumentLinkSetEventPlan({
+        author,
+        blobRewraps,
+        eventId,
+        operation,
+        organizationId,
+        signedAt,
+        targetContainerPathRefs,
+        targetState,
+        writerProjection,
+    });
+    const previousEpoch = readDocumentLinkSetPreviousEpoch(writerProjection);
+    const state = {
+        version: 1,
+        documentId: writerProjection.documentId,
+        organizationId,
+        epoch: previousEpoch + 1,
+        previousManifestHash: writerProjection.documentManifest.manifestHash,
+        eventHash: eventPlan.eventHash,
+        linkedContainerIds: [...targetState.linkedContainerIds],
+    };
+    const manifest = await deriveDocumentLinkSetManifest(state);
+    const manifestHash = await computeAccessManifestHash(manifest);
+    const targetHash = await computeDocumentContentKeyTargetHash(targetState.targets);
+    return {
+        body: eventPlan.body,
+        contentKeyEpoch,
+        documentId: writerProjection.documentId,
+        event: eventPlan.event,
+        eventHash: eventPlan.eventHash,
+        manifest,
+        manifestHash,
+        operation,
+        request: {
+            event: readCanonicalRecord(eventPlan.event, "Document link-set event"),
+            body: readCanonicalRecord(eventPlan.body, "Document link-set body"),
+            expectedManifestHash: manifestHash,
+            manifest: readCanonicalRecord(manifest, "Document link-set manifest"),
+            targetContainerPathRefs,
+            authorizingContainerPathRefs: eventPlan.authorizingContainerPathRefs,
+            contentKeyBundle: {
+                contentKeyEpoch,
+                linkSetManifestHash: manifestHash,
+                targetHash,
+                targets: targetEnvelopesForRequest,
+            },
+        },
+        state,
+        targetHash,
+        targets: sortDocumentTargets(targetState.targets),
+    };
+}
+export async function buildMaterializedDocumentLinkSetMutationPlan(input) {
+    const verificationOptions = projectionVerificationOptions(input);
+    const principalPolicyCache = new Map();
+    await assertDocumentWriterProjectionConsistent(input.writerProjection, {
+        execSql: input.execSql,
+        principalPolicyCache,
+        ...verificationOptions,
+    });
+    await verifyDocumentLinkSetCurrentPolicies({
+        execSql: input.execSql,
+        principalPolicyCache,
+        targetContainerProjection: input.targetContainerProjection,
+        writerProjection: input.writerProjection,
+        ...verificationOptions,
+    });
+    if (input.resolveProjectionUserKey)
+        assertDocumentLinkAuthorAccess({
+            ...input,
+            principalPolicies: [...principalPolicyCache.values()],
+        });
+    const targetState = deriveDocumentLinkSetTargetState({
+        operation: input.operation,
+        targetContainerProjection: input.targetContainerProjection,
+        writerProjection: input.writerProjection,
+    });
+    assertLinkSetWriteKeksCurrent(input, targetState.linkedContainerIds);
+    const currentContentKey = await unwrapDocumentContentKeyFromWriterProjection({
+        execSql: input.execSql,
+        secretKey: input.targetSecretKey,
+        writerProjection: input.writerProjection,
+        ...verificationOptions,
+    });
+    const contentKeyRotated = input.operation === "unlink";
+    const contentKey = contentKeyRotated
+        ? (input.contentKey ?? crypto.getRandomValues(new Uint8Array(32)))
+        : currentContentKey;
+    if (contentKey.byteLength !== 32) {
+        throw new Error("Document content key must be 32 bytes");
+    }
+    // A link carries the existing envelopes forward at the same epoch; an
+    // unlink rotates to a fresh key at the next one.
+    const contentKeyEpoch = input.writerProjection.contentKeyBundle.contentKeyEpoch +
+        (contentKeyRotated ? 1 : 0);
+    const targetEnvelopes = await buildLinkSetTargetEnvelopes(input, {
+        contentKey,
+        contentKeyEpoch,
+        targetState,
+    });
+    const plan = await buildDocumentLinkSetMutationPlan({
+        author: input.author,
+        blobRewraps: await input.prepareBlobRewraps(targetState.targets),
+        contentKeyEpoch,
+        eventId: input.eventId,
+        operation: input.operation,
+        signedAt: input.signedAt,
+        targetContainerProjection: input.targetContainerProjection,
+        targetEnvelopes,
+        writerProjection: input.writerProjection,
+    });
+    return {
+        contentKey,
+        contentKeyRotated,
+        plan,
+    };
+}
+async function buildLinkSetTargetEnvelopes(input, wrap) {
+    const verificationOptions = projectionVerificationOptions(input);
+    const sealing = {
+        contentKey: wrap.contentKey,
+        contentKeyEpoch: wrap.contentKeyEpoch,
+        documentId: input.writerProjection.documentId,
+    };
+    if (input.operation === "link") {
+        return [
+            ...input.writerProjection.contentKeyBundle.targets,
+            ...(await wrapDocumentContentKeyForTargets({
+                ...sealing,
+                keksByEpochId: await unwrapContainerKekPath({
+                    execSql: input.execSql,
+                    projection: input.targetContainerProjection,
+                    secretKey: input.targetSecretKey,
+                    ...verificationOptions,
+                }),
+                targets: [wrap.targetState.target],
+            })),
+        ];
+    }
+    return wrapDocumentContentKeyForTargets({
+        ...sealing,
+        keksByEpochId: (await collectContainerKeksForDocumentSync({
+            execSql: input.execSql,
+            secretKey: input.targetSecretKey,
+            writerProjection: input.writerProjection,
+            ...verificationOptions,
+        })).keksByEpochId,
+        // The rotated key is wrapped only to verified current heads of the
+        // remaining linked containers, never to a server-listed epoch.
+        targets: verifiedDocumentWrapTargets({
+            linkedContainerIds: wrap.targetState.linkedContainerIds,
+            serverTargets: wrap.targetState.targets,
+            writerProjection: input.writerProjection,
+        }),
+    });
+}
+function assertLinkSetWriteKeksCurrent(input, linkedContainerIds) {
+    // Unlink can escape a stale branch; only recipients of the successor key must be current.
+    assertDocumentKekPathsCurrent(input.writerProjection, new Set(linkedContainerIds));
+    if (input.operation === "link") {
+        assertContainerKekPathCurrent(input.targetContainerProjection.containerKeks);
+    }
+}
+//# sourceMappingURL=linkSet.js.map