@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/workflows/registration/organizationProvisioningPersistence.js

@@ -0,0 +1,164 @@
+import { bytesToBase64 } from "../../internal/encoding/index.js";
+import { persistedDocumentCreateStateFromResponse } from "../../data/documents/shared/responses.js";
+import { createExecSql } from "../../data/sqlite/sqlSchema.js";
+import { persistRegistrationBootstrapFromExecSql } from "./persistRegistrationBootstrap.js";
+import { buildOrganizationProfileBootstrapInput, buildRosterProfileBootstrapInput, } from "./profileBootstrapPersistence.js";
+import { provisioningAcknowledgedAccessHeads } from "./provisioningAcknowledgement.js";
+import { principalPolicyBundleFromInitialGroupRequest, principalPolicyBundleFromInitialOrganizationRequest, } from "./registrationPrincipalPolicyPersistence.js";
+function coreMetadataInitialUpdateCommitted(response, updateId) {
+    return (updateId !== undefined &&
+        response.committedCoreMetadataUpdateIds.includes(updateId));
+}
+function buildCoreContainerBootstrapInput(response, container, bootstrap) {
+    return {
+        accessEpoch: container.container.manifestHead.epoch,
+        accessStateHash: container.container.manifestHead.manifestHash,
+        containerId: bootstrap.containerId,
+        createdAt: container.container.createdAt,
+        metadataDocumentId: container.metadataDocument.id,
+        metadataInitialUpdate: bootstrap.containerMetadataInitialUpdate,
+        metadataInitialUpdateCommitted: coreMetadataInitialUpdateCommitted(response, bootstrap.containerRequest.initialMetadataSync.outgoingUpdates[0]?.id),
+        metadataSnapshot: bytesToBase64(bootstrap.containerMetadataInitialUpdate),
+        metadataState: persistedDocumentCreateStateFromResponse(bootstrap.containerMetadataDocument.plan, container.metadataDocument),
+        systemSlot: bootstrap.systemSlot,
+        updatedAt: container.container.updatedAt,
+    };
+}
+function buildSystemContainersBootstrapInput(input) {
+    const responses = input.response.systemContainers;
+    if (responses.length === 0) {
+        return;
+    }
+    const responseByContainerId = new Map(responses.map((response) => [response.container.containerId, response]));
+    const entries = [];
+    for (const bootstrap of input.systemContainerBootstraps) {
+        const response = responseByContainerId.get(bootstrap.containerId);
+        if (!response) {
+            continue;
+        }
+        entries.push({
+            accessEpoch: response.container.manifestHead.epoch,
+            accessStateHash: response.container.manifestHead.manifestHash,
+            containerId: bootstrap.containerId,
+            createdAt: response.container.createdAt,
+            icon: bootstrap.icon,
+            metadataDocumentId: response.metadataDocument.id,
+            metadataSnapshot: bytesToBase64(bootstrap.containerMetadataInitialUpdate),
+            metadataState: persistedDocumentCreateStateFromResponse(bootstrap.containerMetadataDocument.plan, response.metadataDocument),
+            name: bootstrap.name,
+            systemSlot: bootstrap.systemSlot,
+            updatedAt: response.container.updatedAt,
+        });
+    }
+    return entries.length > 0 ? entries : undefined;
+}
+async function buildProvisioningPersistenceArtifacts(input) {
+    const acknowledgedAccessHeads = await provisioningAcknowledgedAccessHeads({
+        expectedOrganizationId: input.rootContainer.plan.state.organizationId,
+        expectedUserId: input.rootContainer.plan.event.signerUserId,
+        organizationMetadata: {
+            containerPlan: input.organizationMetadataBootstrap.containerPlan.plan,
+            metadataDocumentPlan: input.organizationMetadataBootstrap.containerMetadataDocument.plan,
+        },
+        organizationProfileDocumentPlan: input.organizationMetadataBootstrap.organizationProfileDocument.plan,
+        response: input.response,
+        rootContainerPlan: input.rootContainer.plan,
+        rootMetadataDocumentPlan: input.rootMetadataDocument.plan,
+        rosterProfile: {
+            containerPlan: input.rosterProfileBootstrap.containerPlan.plan,
+            metadataDocumentPlan: input.rosterProfileBootstrap.containerMetadataDocument.plan,
+        },
+        rosterProfileDocumentPlan: input.rosterProfileBootstrap.profileDocument.plan,
+        systemContainers: input.systemContainerBootstraps.map((bootstrap) => ({
+            containerPlan: bootstrap.containerPlan.plan,
+            metadataDocumentPlan: bootstrap.containerMetadataDocument.plan,
+        })),
+    });
+    const [initialAdminGroupPolicy, initialMemberGroupPolicy, initialOrganizationPolicy,] = await Promise.all([
+        principalPolicyBundleFromInitialGroupRequest(input.initialAdminGroup),
+        principalPolicyBundleFromInitialGroupRequest(input.initialMemberGroup),
+        principalPolicyBundleFromInitialOrganizationRequest(input.initialOrganizationPolicy),
+    ]);
+    return {
+        acknowledgedAccessHeads,
+        initialAdminGroupPolicy,
+        initialMemberGroupPolicy,
+        initialOrganizationPolicy,
+        organizationMetadataContainer: buildCoreContainerBootstrapInput(input.response, input.response.organizationMetadataContainer, input.organizationMetadataBootstrap),
+        organizationProfileDocument: buildOrganizationProfileBootstrapInput({
+            containerId: input.organizationMetadataBootstrap.containerId,
+            materializedDocument: input.organizationMetadataBootstrap.organizationProfileDocument,
+            request: input.organizationMetadataBootstrap.organizationProfileDocumentRequest,
+            response: input.response,
+            snapshot: input.organizationMetadataBootstrap.organizationProfileSnapshot,
+        }),
+        rosterProfileContainer: input.response.rosterProfileContainer
+            ? buildCoreContainerBootstrapInput(input.response, input.response.rosterProfileContainer, input.rosterProfileBootstrap)
+            : undefined,
+        rosterProfileDocument: buildRosterProfileBootstrapInput({
+            containerId: input.rosterProfileBootstrap.containerId,
+            initialUpdate: input.rosterProfileBootstrap.profileDocumentInitialUpdate,
+            materializedDocument: input.rosterProfileBootstrap.profileDocument,
+            request: input.rosterProfileBootstrap.profileDocumentRequest,
+            response: input.response,
+        }),
+        systemContainers: buildSystemContainersBootstrapInput(input),
+    };
+}
+export async function persistOrganizationProvisioningState(input) {
+    try {
+        const artifacts = await buildProvisioningPersistenceArtifacts(input);
+        const persisted = await persistRegistrationBootstrapFromExecSql(createExecSql(input.dbClient), {
+            acknowledgedAccessHeads: artifacts.acknowledgedAccessHeads,
+            canStartDurableMutation: input.canStartDurableMutation,
+            onPersistQueued: input.onPersistQueued,
+            containerId: input.containerId,
+            documentProjectors: input.documentProjectors,
+            initialAdminGroupPolicy: artifacts.initialAdminGroupPolicy,
+            initialMemberGroupPolicy: artifacts.initialMemberGroupPolicy,
+            initialOrganizationPolicy: artifacts.initialOrganizationPolicy,
+            organizationId: input.response.organizationId,
+            // The provisioning response does not expose the root container's own
+            // timestamps. Its metadata document is created in the same transaction,
+            // so its server timestamp is the acknowledged remote anchor for the
+            // locally persisted root row.
+            rootContainerServerTimestamp: input.response.rootMetadataDocument.createdAt,
+            rootMetadataAccessEpoch: input.response.rootMetadataAccessEpoch,
+            rootMetadataAccessStateHash: input.response.rootMetadataAccessStateHash,
+            rootMetadataDocumentId: input.response.rootMetadataDocumentId,
+            rootMetadataInitialUpdate: input.bootstrap.initialUpdate,
+            rootMetadataInitialUpdateCommitted: coreMetadataInitialUpdateCommitted(input.response, input.rootMetadataDocumentRequest.initialSync.outgoingUpdates[0]?.id),
+            rootMetadataSnapshot: bytesToBase64(input.bootstrap.initialUpdate),
+            rootMetadataState: persistedDocumentCreateStateFromResponse(input.rootMetadataDocument.plan, input.response.rootMetadataDocument),
+            ...(artifacts.rosterProfileContainer
+                ? { rosterProfileContainer: artifacts.rosterProfileContainer }
+                : {}),
+            organizationMetadataContainer: artifacts.organizationMetadataContainer,
+            ...(artifacts.organizationProfileDocument
+                ? {
+                    organizationProfileDocument: artifacts.organizationProfileDocument,
+                }
+                : {}),
+            ...(artifacts.rosterProfileDocument
+                ? { rosterProfileDocument: artifacts.rosterProfileDocument }
+                : {}),
+            ...(artifacts.systemContainers
+                ? { systemContainers: artifacts.systemContainers }
+                : {}),
+            userId: input.response.userId,
+        });
+        input.log?.(persisted
+            ? "Local organization bootstrap persisted"
+            : "Local organization bootstrap skipped: identity replaced");
+    }
+    catch (error) {
+        if (input.logError) {
+            input.logError("Failed to persist registration data", error);
+        }
+        else {
+            console.error("Failed to persist registration data:", error);
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=organizationProvisioningPersistence.js.map

package/workflows/registration/organizationProvisioningPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationProvisioningPersistence.js","sourceRoot":"","sources":["organizationProvisioningPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,EAAE,wCAAwC,EAAE,MAAM,uCAAuC,CAAC;AAEjG,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,OAAO,EAAE,uCAAuC,EAAE,MAAM,gCAAgC,CAAC;AACzF,OAAO,EACL,sCAAsC,EACtC,gCAAgC,GACjC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EACL,4CAA4C,EAC5C,mDAAmD,GACpD,MAAM,0CAA0C,CAAC;AAiClD,SAAS,kCAAkC,CACzC,QAA0C,EAC1C,QAAiB;IAEjB,OAAO,CACL,QAAQ,KAAK,SAAS;QACtB,QAAQ,CAAC,8BAA8B,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,QAA0C,EAC1C,SAA4E,EAC5E,SAOC;IAED,OAAO;QACL,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK;QACnD,eAAe,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY;QAC9D,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,SAAS;QACxC,kBAAkB,EAAE,SAAS,CAAC,gBAAgB,CAAC,EAAE;QACjD,qBAAqB,EAAE,SAAS,CAAC,8BAA8B;QAC/D,8BAA8B,EAAE,kCAAkC,CAChE,QAAQ,EACR,SAAS,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CACtE;QACD,gBAAgB,EAAE,aAAa,CAAC,SAAS,CAAC,8BAA8B,CAAC;QACzE,aAAa,EAAE,wCAAwC,CACrD,SAAS,CAAC,yBAAyB,CAAC,IAAI,EACxC,SAAS,CAAC,gBAAgB,CAC3B;QACD,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,SAAS;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC,CAC1C,KAAgD;IAEhD,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAClD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CACxE,CAAC;IACF,MAAM,OAAO,GAA2D,EAAE,CAAC;IAC3E,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,yBAAyB,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK;YAClD,eAAe,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY;YAC7D,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS;YACvC,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,kBAAkB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE;YAChD,gBAAgB,EAAE,aAAa,CAAC,SAAS,CAAC,8BAA8B,CAAC;YACzE,aAAa,EAAE,wCAAwC,CACrD,SAAS,CAAC,yBAAyB,CAAC,IAAI,EACxC,QAAQ,CAAC,gBAAgB,CAC1B;YACD,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS;SACxC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,qCAAqC,CAClD,KAAgD;IAEhD,MAAM,uBAAuB,GAAG,MAAM,mCAAmC,CAAC;QACxE,sBAAsB,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc;QACrE,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY;QAC3D,oBAAoB,EAAE;YACpB,aAAa,EAAE,KAAK,CAAC,6BAA6B,CAAC,aAAa,CAAC,IAAI;YACrE,oBAAoB,EAClB,KAAK,CAAC,6BAA6B,CAAC,yBAAyB,CAAC,IAAI;SACrE;QACD,+BAA+B,EAC7B,KAAK,CAAC,6BAA6B,CAAC,2BAA2B,CAAC,IAAI;QACtE,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI;QAC3C,wBAAwB,EAAE,KAAK,CAAC,oBAAoB,CAAC,IAAI;QACzD,aAAa,EAAE;YACb,aAAa,EAAE,KAAK,CAAC,sBAAsB,CAAC,aAAa,CAAC,IAAI;YAC9D,oBAAoB,EAClB,KAAK,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,IAAI;SAC9D;QACD,yBAAyB,EACvB,KAAK,CAAC,sBAAsB,CAAC,eAAe,CAAC,IAAI;QACnD,gBAAgB,EAAE,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACpE,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,IAAI;YAC3C,oBAAoB,EAAE,SAAS,CAAC,yBAAyB,CAAC,IAAI;SAC/D,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,MAAM,CACJ,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EAC1B,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpB,4CAA4C,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACrE,4CAA4C,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACtE,mDAAmD,CACjD,KAAK,CAAC,yBAAyB,CAChC;KACF,CAAC,CAAC;IACH,OAAO;QACL,uBAAuB;QACvB,uBAAuB;QACvB,wBAAwB;QACxB,yBAAyB;QACzB,6BAA6B,EAAE,gCAAgC,CAC7D,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,QAAQ,CAAC,6BAA6B,EAC5C,KAAK,CAAC,6BAA6B,CACpC;QACD,2BAA2B,EAAE,sCAAsC,CAAC;YAClE,WAAW,EAAE,KAAK,CAAC,6BAA6B,CAAC,WAAW;YAC5D,oBAAoB,EAClB,KAAK,CAAC,6BAA6B,CAAC,2BAA2B;YACjE,OAAO,EACL,KAAK,CAAC,6BAA6B,CAAC,kCAAkC;YACxE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,6BAA6B,CAAC,2BAA2B;SAC1E,CAAC;QACF,sBAAsB,EAAE,KAAK,CAAC,QAAQ,CAAC,sBAAsB;YAC3D,CAAC,CAAC,gCAAgC,CAC9B,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,QAAQ,CAAC,sBAAsB,EACrC,KAAK,CAAC,sBAAsB,CAC7B;YACH,CAAC,CAAC,SAAS;QACb,qBAAqB,EAAE,gCAAgC,CAAC;YACtD,WAAW,EAAE,KAAK,CAAC,sBAAsB,CAAC,WAAW;YACrD,aAAa,EAAE,KAAK,CAAC,sBAAsB,CAAC,4BAA4B;YACxE,oBAAoB,EAAE,KAAK,CAAC,sBAAsB,CAAC,eAAe;YAClE,OAAO,EAAE,KAAK,CAAC,sBAAsB,CAAC,sBAAsB;YAC5D,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;QACF,gBAAgB,EAAE,mCAAmC,CAAC,KAAK,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,KAAgD;IAEhD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,qCAAqC,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,MAAM,uCAAuC,CAC7D,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAC7B;YACE,uBAAuB,EAAE,SAAS,CAAC,uBAAuB;YAC1D,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,uBAAuB,EAAE,SAAS,CAAC,uBAAuB;YAC1D,wBAAwB,EAAE,SAAS,CAAC,wBAAwB;YAC5D,yBAAyB,EAAE,SAAS,CAAC,yBAAyB;YAC9D,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,qEAAqE;YACrE,wEAAwE;YACxE,oEAAoE;YACpE,8BAA8B;YAC9B,4BAA4B,EAC1B,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,SAAS;YAC/C,uBAAuB,EAAE,KAAK,CAAC,QAAQ,CAAC,uBAAuB;YAC/D,2BAA2B,EAAE,KAAK,CAAC,QAAQ,CAAC,2BAA2B;YACvE,sBAAsB,EAAE,KAAK,CAAC,QAAQ,CAAC,sBAAsB;YAC7D,yBAAyB,EAAE,KAAK,CAAC,SAAS,CAAC,aAAa;YACxD,kCAAkC,EAAE,kCAAkC,CACpE,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,2BAA2B,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CACrE;YACD,oBAAoB,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC;YAClE,iBAAiB,EAAE,wCAAwC,CACzD,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAC/B,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CACpC;YACD,GAAG,CAAC,SAAS,CAAC,sBAAsB;gBAClC,CAAC,CAAC,EAAE,sBAAsB,EAAE,SAAS,CAAC,sBAAsB,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACP,6BAA6B,EAAE,SAAS,CAAC,6BAA6B;YACtE,GAAG,CAAC,SAAS,CAAC,2BAA2B;gBACvC,CAAC,CAAC;oBACE,2BAA2B,EACzB,SAAS,CAAC,2BAA2B;iBACxC;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,qBAAqB;gBACjC,CAAC,CAAC,EAAE,qBAAqB,EAAE,SAAS,CAAC,qBAAqB,EAAE;gBAC5D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,gBAAgB;gBAC5B,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;SAC9B,CACF,CAAC;QACF,KAAK,CAAC,GAAG,EAAE,CACT,SAAS;YACP,CAAC,CAAC,wCAAwC;YAC1C,CAAC,CAAC,yDAAyD,CAC9D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,KAAK,CAAC,QAAQ,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { bytesToBase64 } from \"@tearleads/encoding\";\nimport type { OrganizationProvisioningResponse } from \"@tearleads/validators/response\";\nimport type { DocumentProjectorRegistryInput } from \"../../data/documents/documentKinds\";\nimport { persistedDocumentCreateStateFromResponse } from \"../../data/documents/shared/responses\";\nimport type { ExecSqlClientLike } from \"../../data/sqlite/sqlSchema\";\nimport { createExecSql } from \"../../data/sqlite/sqlSchema\";\nimport type { OrganizationProvisioningArtifacts } from \"./organizationProvisioningArtifacts\";\nimport { persistRegistrationBootstrapFromExecSql } from \"./persistRegistrationBootstrap\";\nimport {\n  buildOrganizationProfileBootstrapInput,\n  buildRosterProfileBootstrapInput,\n} from \"./profileBootstrapPersistence\";\nimport { provisioningAcknowledgedAccessHeads } from \"./provisioningAcknowledgement\";\nimport {\n  principalPolicyBundleFromInitialGroupRequest,\n  principalPolicyBundleFromInitialOrganizationRequest,\n} from \"./registrationPrincipalPolicyPersistence\";\n\ntype PersistOrganizationProvisioningStateInput = Pick<\n  OrganizationProvisioningArtifacts,\n  | \"bootstrap\"\n  | \"initialAdminGroup\"\n  | \"initialMemberGroup\"\n  | \"initialOrganizationPolicy\"\n  | \"organizationMetadataBootstrap\"\n  | \"rootContainer\"\n  | \"rootMetadataDocument\"\n  | \"rootMetadataDocumentRequest\"\n  | \"rosterProfileBootstrap\"\n  | \"systemContainerBootstraps\"\n> & {\n  /** Forwarded to the bootstrap persist's in-mutex currency check. */\n  readonly canStartDurableMutation?: (() => boolean) | undefined;\n  /** @internal Forwarded to the bootstrap persist; test-only seam. */\n  readonly onPersistQueued?: (() => void) | undefined;\n  readonly containerId: string;\n  readonly dbClient: ExecSqlClientLike;\n  readonly documentProjectors?: DocumentProjectorRegistryInput | undefined;\n  readonly log?: ((message: string) => void) | undefined;\n  readonly logError?:\n    | ((message: string | Error, cause?: unknown) => void)\n    | undefined;\n  readonly response: OrganizationProvisioningResponse;\n};\n\ntype PersistBootstrapInput = Parameters<\n  typeof persistRegistrationBootstrapFromExecSql\n>[1];\n\nfunction coreMetadataInitialUpdateCommitted(\n  response: OrganizationProvisioningResponse,\n  updateId?: string,\n): boolean {\n  return (\n    updateId !== undefined &&\n    response.committedCoreMetadataUpdateIds.includes(updateId)\n  );\n}\n\nfunction buildCoreContainerBootstrapInput(\n  response: OrganizationProvisioningResponse,\n  container: OrganizationProvisioningResponse[\"organizationMetadataContainer\"],\n  bootstrap: Pick<\n    OrganizationProvisioningArtifacts[\"rosterProfileBootstrap\"],\n    | \"containerId\"\n    | \"containerMetadataDocument\"\n    | \"containerMetadataInitialUpdate\"\n    | \"containerRequest\"\n    | \"systemSlot\"\n  >,\n): NonNullable<PersistBootstrapInput[\"organizationMetadataContainer\"]> {\n  return {\n    accessEpoch: container.container.manifestHead.epoch,\n    accessStateHash: container.container.manifestHead.manifestHash,\n    containerId: bootstrap.containerId,\n    createdAt: container.container.createdAt,\n    metadataDocumentId: container.metadataDocument.id,\n    metadataInitialUpdate: bootstrap.containerMetadataInitialUpdate,\n    metadataInitialUpdateCommitted: coreMetadataInitialUpdateCommitted(\n      response,\n      bootstrap.containerRequest.initialMetadataSync.outgoingUpdates[0]?.id,\n    ),\n    metadataSnapshot: bytesToBase64(bootstrap.containerMetadataInitialUpdate),\n    metadataState: persistedDocumentCreateStateFromResponse(\n      bootstrap.containerMetadataDocument.plan,\n      container.metadataDocument,\n    ),\n    systemSlot: bootstrap.systemSlot,\n    updatedAt: container.container.updatedAt,\n  };\n}\n\nfunction buildSystemContainersBootstrapInput(\n  input: PersistOrganizationProvisioningStateInput,\n): PersistBootstrapInput[\"systemContainers\"] {\n  const responses = input.response.systemContainers;\n  if (responses.length === 0) {\n    return;\n  }\n  const responseByContainerId = new Map(\n    responses.map((response) => [response.container.containerId, response]),\n  );\n  const entries: NonNullable<PersistBootstrapInput[\"systemContainers\"]> = [];\n  for (const bootstrap of input.systemContainerBootstraps) {\n    const response = responseByContainerId.get(bootstrap.containerId);\n    if (!response) {\n      continue;\n    }\n    entries.push({\n      accessEpoch: response.container.manifestHead.epoch,\n      accessStateHash: response.container.manifestHead.manifestHash,\n      containerId: bootstrap.containerId,\n      createdAt: response.container.createdAt,\n      icon: bootstrap.icon,\n      metadataDocumentId: response.metadataDocument.id,\n      metadataSnapshot: bytesToBase64(bootstrap.containerMetadataInitialUpdate),\n      metadataState: persistedDocumentCreateStateFromResponse(\n        bootstrap.containerMetadataDocument.plan,\n        response.metadataDocument,\n      ),\n      name: bootstrap.name,\n      systemSlot: bootstrap.systemSlot,\n      updatedAt: response.container.updatedAt,\n    });\n  }\n  return entries.length > 0 ? entries : undefined;\n}\n\nasync function buildProvisioningPersistenceArtifacts(\n  input: PersistOrganizationProvisioningStateInput,\n) {\n  const acknowledgedAccessHeads = await provisioningAcknowledgedAccessHeads({\n    expectedOrganizationId: input.rootContainer.plan.state.organizationId,\n    expectedUserId: input.rootContainer.plan.event.signerUserId,\n    organizationMetadata: {\n      containerPlan: input.organizationMetadataBootstrap.containerPlan.plan,\n      metadataDocumentPlan:\n        input.organizationMetadataBootstrap.containerMetadataDocument.plan,\n    },\n    organizationProfileDocumentPlan:\n      input.organizationMetadataBootstrap.organizationProfileDocument.plan,\n    response: input.response,\n    rootContainerPlan: input.rootContainer.plan,\n    rootMetadataDocumentPlan: input.rootMetadataDocument.plan,\n    rosterProfile: {\n      containerPlan: input.rosterProfileBootstrap.containerPlan.plan,\n      metadataDocumentPlan:\n        input.rosterProfileBootstrap.containerMetadataDocument.plan,\n    },\n    rosterProfileDocumentPlan:\n      input.rosterProfileBootstrap.profileDocument.plan,\n    systemContainers: input.systemContainerBootstraps.map((bootstrap) => ({\n      containerPlan: bootstrap.containerPlan.plan,\n      metadataDocumentPlan: bootstrap.containerMetadataDocument.plan,\n    })),\n  });\n  const [\n    initialAdminGroupPolicy,\n    initialMemberGroupPolicy,\n    initialOrganizationPolicy,\n  ] = await Promise.all([\n    principalPolicyBundleFromInitialGroupRequest(input.initialAdminGroup),\n    principalPolicyBundleFromInitialGroupRequest(input.initialMemberGroup),\n    principalPolicyBundleFromInitialOrganizationRequest(\n      input.initialOrganizationPolicy,\n    ),\n  ]);\n  return {\n    acknowledgedAccessHeads,\n    initialAdminGroupPolicy,\n    initialMemberGroupPolicy,\n    initialOrganizationPolicy,\n    organizationMetadataContainer: buildCoreContainerBootstrapInput(\n      input.response,\n      input.response.organizationMetadataContainer,\n      input.organizationMetadataBootstrap,\n    ),\n    organizationProfileDocument: buildOrganizationProfileBootstrapInput({\n      containerId: input.organizationMetadataBootstrap.containerId,\n      materializedDocument:\n        input.organizationMetadataBootstrap.organizationProfileDocument,\n      request:\n        input.organizationMetadataBootstrap.organizationProfileDocumentRequest,\n      response: input.response,\n      snapshot: input.organizationMetadataBootstrap.organizationProfileSnapshot,\n    }),\n    rosterProfileContainer: input.response.rosterProfileContainer\n      ? buildCoreContainerBootstrapInput(\n          input.response,\n          input.response.rosterProfileContainer,\n          input.rosterProfileBootstrap,\n        )\n      : undefined,\n    rosterProfileDocument: buildRosterProfileBootstrapInput({\n      containerId: input.rosterProfileBootstrap.containerId,\n      initialUpdate: input.rosterProfileBootstrap.profileDocumentInitialUpdate,\n      materializedDocument: input.rosterProfileBootstrap.profileDocument,\n      request: input.rosterProfileBootstrap.profileDocumentRequest,\n      response: input.response,\n    }),\n    systemContainers: buildSystemContainersBootstrapInput(input),\n  };\n}\n\nexport async function persistOrganizationProvisioningState(\n  input: PersistOrganizationProvisioningStateInput,\n): Promise<void> {\n  try {\n    const artifacts = await buildProvisioningPersistenceArtifacts(input);\n    const persisted = await persistRegistrationBootstrapFromExecSql(\n      createExecSql(input.dbClient),\n      {\n        acknowledgedAccessHeads: artifacts.acknowledgedAccessHeads,\n        canStartDurableMutation: input.canStartDurableMutation,\n        onPersistQueued: input.onPersistQueued,\n        containerId: input.containerId,\n        documentProjectors: input.documentProjectors,\n        initialAdminGroupPolicy: artifacts.initialAdminGroupPolicy,\n        initialMemberGroupPolicy: artifacts.initialMemberGroupPolicy,\n        initialOrganizationPolicy: artifacts.initialOrganizationPolicy,\n        organizationId: input.response.organizationId,\n        // The provisioning response does not expose the root container's own\n        // timestamps. Its metadata document is created in the same transaction,\n        // so its server timestamp is the acknowledged remote anchor for the\n        // locally persisted root row.\n        rootContainerServerTimestamp:\n          input.response.rootMetadataDocument.createdAt,\n        rootMetadataAccessEpoch: input.response.rootMetadataAccessEpoch,\n        rootMetadataAccessStateHash: input.response.rootMetadataAccessStateHash,\n        rootMetadataDocumentId: input.response.rootMetadataDocumentId,\n        rootMetadataInitialUpdate: input.bootstrap.initialUpdate,\n        rootMetadataInitialUpdateCommitted: coreMetadataInitialUpdateCommitted(\n          input.response,\n          input.rootMetadataDocumentRequest.initialSync.outgoingUpdates[0]?.id,\n        ),\n        rootMetadataSnapshot: bytesToBase64(input.bootstrap.initialUpdate),\n        rootMetadataState: persistedDocumentCreateStateFromResponse(\n          input.rootMetadataDocument.plan,\n          input.response.rootMetadataDocument,\n        ),\n        ...(artifacts.rosterProfileContainer\n          ? { rosterProfileContainer: artifacts.rosterProfileContainer }\n          : {}),\n        organizationMetadataContainer: artifacts.organizationMetadataContainer,\n        ...(artifacts.organizationProfileDocument\n          ? {\n              organizationProfileDocument:\n                artifacts.organizationProfileDocument,\n            }\n          : {}),\n        ...(artifacts.rosterProfileDocument\n          ? { rosterProfileDocument: artifacts.rosterProfileDocument }\n          : {}),\n        ...(artifacts.systemContainers\n          ? { systemContainers: artifacts.systemContainers }\n          : {}),\n        userId: input.response.userId,\n      },\n    );\n    input.log?.(\n      persisted\n        ? \"Local organization bootstrap persisted\"\n        : \"Local organization bootstrap skipped: identity replaced\",\n    );\n  } catch (error: unknown) {\n    if (input.logError) {\n      input.logError(\"Failed to persist registration data\", error);\n    } else {\n      console.error(\"Failed to persist registration data:\", error);\n    }\n    throw error;\n  }\n}\n"]}

package/workflows/registration/persistRegistrationBootstrap.d.ts

@@ -0,0 +1,93 @@
+import type { ContainerSystemSlot } from "../../internal/validators/containerSystemSlot.js";
+import type { PrincipalPolicyBundleResponse } from "../../internal/validators/response/index.js";
+import type { DocumentProjectorRegistryInput } from "../../data/documents/documentKinds.js";
+import { type LocallyAcknowledgedAccessManifestHead } from "../../data/persistence/locallyAcknowledgedCheckpointPersistence.js";
+import type { DocumentRecord } from "../../data/sqlite/documentPersistence.js";
+import { type ExecSql, type ExecSqlClientLike } from "../../data/sqlite/sqlSchema.js";
+interface ProvisionedContainerBootstrapInput {
+    accessEpoch: number;
+    accessStateHash: string;
+    containerId: string;
+    createdAt: string;
+    metadataDocumentId: string;
+    metadataSnapshot: string;
+    metadataState: Pick<DocumentRecord, "documentId" | "contentKeyBundle" | "documentKekTargets" | "documentManifestBundle">;
+    systemSlot: ContainerSystemSlot;
+    updatedAt: string;
+}
+interface ProvisionedProfileDocumentBootstrapInput {
+    accessEpoch: number;
+    accessStateHash: string;
+    containerId: string;
+    documentId: string;
+    documentState: ProvisionedContainerBootstrapInput["metadataState"];
+    initialUpdate: Uint8Array;
+    initialUpdateCommitted: boolean;
+    localId: string;
+}
+export interface RegistrationBootstrapInput {
+    acknowledgedAccessHeads: readonly LocallyAcknowledgedAccessManifestHead[];
+    /** Checked inside the mutation queue claim; false skips every write. */
+    canStartDurableMutation?: (() => boolean) | undefined;
+    /**
+     * @internal Test-only synchronization seam. Invoked synchronously,
+     * immediately before this persist joins the serialized mutation queue —
+     * no interleaving can separate the two. Lets identity-race tests
+     * deterministically place an identity replacement inside the queue-wait
+     * window instead of sleeping.
+     */
+    onPersistQueued?: (() => void) | undefined;
+    containerId: string;
+    initialAdminGroupPolicy: PrincipalPolicyBundleResponse;
+    initialMemberGroupPolicy: PrincipalPolicyBundleResponse;
+    initialOrganizationPolicy: PrincipalPolicyBundleResponse;
+    rootMetadataAccessEpoch: number;
+    rootMetadataAccessStateHash: string;
+    rootContainerServerTimestamp: string;
+    rootMetadataDocumentId: string;
+    rootMetadataInitialUpdate: Uint8Array;
+    rootMetadataInitialUpdateCommitted?: boolean | undefined;
+    rootMetadataSnapshot: string;
+    rootMetadataState: ProvisionedContainerBootstrapInput["metadataState"];
+    rosterProfileContainer?: ProvisionedContainerBootstrapInput & {
+        metadataInitialUpdate: Uint8Array;
+        metadataInitialUpdateCommitted?: boolean | undefined;
+    };
+    organizationMetadataContainer?: ProvisionedContainerBootstrapInput & {
+        metadataInitialUpdate: Uint8Array;
+        metadataInitialUpdateCommitted?: boolean | undefined;
+    };
+    organizationProfileDocument?: ProvisionedProfileDocumentBootstrapInput;
+    rosterProfileDocument?: ProvisionedProfileDocumentBootstrapInput;
+    systemContainers?: Array<ProvisionedContainerBootstrapInput & {
+        icon: string | null;
+        name: string;
+    }>;
+    documentProjectors?: DocumentProjectorRegistryInput | undefined;
+    organizationId: string;
+    userId: string;
+}
+export declare function persistInitialDocumentBootstrap(execSql: ExecSql, input: {
+    accessEpoch: number;
+    accessStateHash: string;
+    containerId: string;
+    documentId: string;
+    documentKind: string;
+    documentProjectors: DocumentProjectorRegistryInput | undefined;
+    documentState: Pick<DocumentRecord, "contentKeyBundle" | "documentKekTargets" | "documentManifestBundle">;
+    initialUpdate: Uint8Array;
+    initialUpdateCommitted: boolean;
+    localId: string;
+}): Promise<void>;
+/**
+ * Persists the local root-container bootstrap created during successful
+ * registration so container contents can initialize from SQLite on first
+ * login — atomically: every write lands inside ONE transaction whose last
+ * act re-checks identity currency, so an identity replaced anywhere between
+ * the queue claim and the commit rolls the entire bootstrap back instead of
+ * leaving a partial one. Resolves false when either currency check rejected
+ * the write, so callers do not report a bootstrap that was never persisted.
+ */
+export declare function persistRegistrationBootstrapFromExecSql(execSql: ExecSql, input: RegistrationBootstrapInput): Promise<boolean>;
+export declare function persistRegistrationBootstrap(client: ExecSqlClientLike, input: RegistrationBootstrapInput): Promise<void>;
+export {};

package/workflows/registration/persistRegistrationBootstrap.js

@@ -0,0 +1,204 @@
+import { createDocument, encodeVersionVector, importUpdates, } from "../../internal/loro/index.js";
+import { getScopedPeerSeed } from "../../data/crdtPeerSeed.js";
+import { createPendingUpdateFields } from "../../data/documents/documentSync.js";
+import { sqlContainerContentsPersistence, } from "../../data/persistence/container-contents/containerContentsPersistence.js";
+import { DOCUMENTS_APP_KIND, sqlDocumentsPersistence, } from "../../data/persistence/documents/documentsPersistence.js";
+import { advanceLocallyAcknowledgedAccessManifestHeadsAtomically, } from "../../data/persistence/locallyAcknowledgedCheckpointPersistence.js";
+import { getClientSQLitePersistenceRuntime } from "../../data/sqlite/sqlitePersistenceRuntime.js";
+import { createExecSql, runSerializedSqlMutation, } from "../../data/sqlite/sqlSchema.js";
+import { persistDocumentState } from "../documents/persistence.js";
+import { ORGANIZATION_PROFILE_DOCUMENT_KIND } from "../organizations/organizationProfile.js";
+import { ORGANIZATION_METADATA_CONTAINER_NAME, ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME, ROSTER_PROFILE_DOCUMENT_KIND, } from "../organizations/rosterProfileContainer.js";
+import { enqueueInitialContainerMetadataUpdate } from "./registrationBootstrapPendingUpdates.js";
+import { persistRegistrationPrincipalPolicies } from "./registrationPrincipalPolicyPersistence.js";
+async function persistProvisionedContainerBootstrap(execSql, input) {
+    const { container } = input;
+    const metadataState = container.metadataState;
+    const record = {
+        accessEpoch: container.accessEpoch,
+        accessStateHash: container.accessStateHash,
+        documentId: container.metadataDocumentId,
+        id: container.containerId,
+        lastCommitLsn: null,
+        metadataUpdates: container.metadataSnapshot,
+        snapshotEndVersion: "",
+        contentKeyBundle: metadataState.contentKeyBundle ?? null,
+        documentKekTargets: metadataState.documentKekTargets ?? null,
+        documentManifestBundle: metadataState.documentManifestBundle ?? null,
+    };
+    await sqlContainerContentsPersistence.saveContainer(execSql, {
+        id: container.containerId,
+        effectiveAccessLevel: "admin",
+        organizationId: input.organizationId,
+        parentId: input.parentId,
+        metadataDocumentId: container.metadataDocumentId,
+        systemSlot: container.systemSlot,
+        name: input.name,
+        icon: input.icon,
+    }, record, {
+        localUpdatedAt: container.updatedAt,
+        serverTimestamps: {
+            createdAt: container.createdAt,
+            updatedAt: container.updatedAt,
+        },
+    });
+}
+async function persistRootContainerBootstrap(execSql, input) {
+    const rootRecord = {
+        accessEpoch: input.rootMetadataAccessEpoch,
+        accessStateHash: input.rootMetadataAccessStateHash,
+        documentId: input.rootMetadataDocumentId,
+        id: input.containerId,
+        lastCommitLsn: null,
+        metadataUpdates: input.rootMetadataSnapshot,
+        snapshotEndVersion: "",
+        contentKeyBundle: input.rootMetadataState.contentKeyBundle ?? null,
+        documentKekTargets: input.rootMetadataState.documentKekTargets ?? null,
+        documentManifestBundle: input.rootMetadataState.documentManifestBundle ?? null,
+    };
+    await sqlContainerContentsPersistence.saveContainer(execSql, {
+        id: input.containerId,
+        effectiveAccessLevel: "admin",
+        organizationId: input.organizationId,
+        parentId: null,
+        metadataDocumentId: input.rootMetadataDocumentId,
+        name: "/",
+        icon: null,
+    }, rootRecord, {
+        localUpdatedAt: input.rootContainerServerTimestamp,
+        serverTimestamps: {
+            createdAt: input.rootContainerServerTimestamp,
+            updatedAt: input.rootContainerServerTimestamp,
+        },
+    });
+    await enqueueInitialContainerMetadataUpdate(execSql, input.containerId, input.rootMetadataInitialUpdate, input.rootMetadataInitialUpdateCommitted);
+}
+// Persist reserved profile containers using their fixed topology: roster profiles
+// inherit the personal root; shared organization metadata has an independent root.
+async function persistNamedChildContainerBootstrap(execSql, input, container, name) {
+    if (!container) {
+        return;
+    }
+    await persistProvisionedContainerBootstrap(execSql, {
+        container,
+        icon: null,
+        name,
+        organizationId: input.organizationId,
+        parentId: container === input.organizationMetadataContainer
+            ? null
+            : input.containerId,
+    });
+    await enqueueInitialContainerMetadataUpdate(execSql, container.containerId, container.metadataInitialUpdate, container.metadataInitialUpdateCommitted);
+}
+async function persistSystemContainersBootstrap(execSql, input) {
+    const systemContainers = input.systemContainers;
+    if (!systemContainers) {
+        return;
+    }
+    for (const systemContainer of systemContainers) {
+        await persistProvisionedContainerBootstrap(execSql, {
+            container: systemContainer,
+            icon: systemContainer.icon,
+            name: systemContainer.name,
+            organizationId: input.organizationId,
+            parentId: input.containerId,
+        });
+        // Provisioned system-container metadata is already committed remotely in
+        // the organization transaction. Persist the initialized snapshot locally,
+        // but do not queue a duplicate write with a second update id.
+    }
+}
+// The ONE persist shape for the provisioned profile documents (organization
+// profile and roster profile): the input carries exactly the bootstrap
+// fields, so only the document kind and the host's projectors join it.
+async function persistProfileDocumentBootstrap(execSql, input, profileDocument, documentKind) {
+    if (!profileDocument) {
+        return;
+    }
+    await persistInitialDocumentBootstrap(execSql, {
+        ...profileDocument,
+        documentKind,
+        documentProjectors: input.documentProjectors,
+    });
+}
+export async function persistInitialDocumentBootstrap(execSql, input) {
+    const doc = await createDocument(await getScopedPeerSeed(DOCUMENTS_APP_KIND));
+    importUpdates(doc, [input.initialUpdate]);
+    const pendingUpdate = input.initialUpdateCommitted
+        ? undefined
+        : (createPendingUpdateFields(input.initialUpdate) ?? undefined);
+    await persistDocumentState({
+        currentDoc: doc,
+        currentRecord: null,
+        documentProjectors: input.documentProjectors ?? [],
+        execSql,
+        localId: input.localId,
+        patch: {
+            accessEpoch: input.accessEpoch,
+            accessStateHash: input.accessStateHash,
+            containerId: input.containerId,
+            contentKeyBundle: input.documentState.contentKeyBundle ?? null,
+            documentId: input.documentId,
+            documentKekTargets: input.documentState.documentKekTargets ?? null,
+            documentKind: input.documentKind,
+            documentManifestBundle: input.documentState.documentManifestBundle ?? null,
+            // The create-only persistence primitive stores this frontier and the
+            // full-history checkpoint in one transaction.
+            snapshotEndVersion: encodeVersionVector(doc),
+        },
+        pendingUpdate,
+        persistence: sqlDocumentsPersistence,
+    });
+}
+/**
+ * Persists the local root-container bootstrap created during successful
+ * registration so container contents can initialize from SQLite on first
+ * login — atomically: every write lands inside ONE transaction whose last
+ * act re-checks identity currency, so an identity replaced anywhere between
+ * the queue claim and the commit rolls the entire bootstrap back instead of
+ * leaving a partial one. Resolves false when either currency check rejected
+ * the write, so callers do not report a bootstrap that was never persisted.
+ */
+export async function persistRegistrationBootstrapFromExecSql(execSql, input) {
+    input.onPersistQueued?.();
+    return runSerializedSqlMutation(execSql, async (lockedExecSql) => {
+        // In-mutex currency check, adjacent to the serialized-mutation claim
+        // (see persistDocumentState): the identity can be replaced while this
+        // persist waits for the queue, and its bootstrap must not be written
+        // through a client the replacement closed or renewed.
+        if (input.canStartDurableMutation && !input.canStartDurableMutation()) {
+            return false;
+        }
+        // Idempotent DDL stays outside the atomic boundary.
+        await sqlContainerContentsPersistence.ensureSchema(lockedExecSql);
+        await sqlDocumentsPersistence.ensureSchema(lockedExecSql);
+        // Pre-commit currency guard: the write sequence awaits real work, so
+        // the identity can be replaced mid-sequence. The guard runs
+        // synchronously with the COMMIT dispatch, so a refusal rolls the whole
+        // write set back and a pass cannot go stale before the commit is sent —
+        // the partial-persist window a single entry check leaves open.
+        const { committed } = await getClientSQLitePersistenceRuntime(lockedExecSql).guardedTransaction(async () => {
+            await advanceLocallyAcknowledgedAccessManifestHeadsAtomically({
+                execSql: lockedExecSql,
+                heads: input.acknowledgedAccessHeads,
+            });
+            await persistRegistrationPrincipalPolicies({
+                adminGroup: input.initialAdminGroupPolicy,
+                execSql: lockedExecSql,
+                memberGroup: input.initialMemberGroupPolicy,
+                organization: input.initialOrganizationPolicy,
+            });
+            await persistRootContainerBootstrap(lockedExecSql, input);
+            await persistNamedChildContainerBootstrap(lockedExecSql, input, input.rosterProfileContainer, ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME);
+            await persistProfileDocumentBootstrap(lockedExecSql, input, input.rosterProfileDocument, ROSTER_PROFILE_DOCUMENT_KIND);
+            await persistNamedChildContainerBootstrap(lockedExecSql, input, input.organizationMetadataContainer, ORGANIZATION_METADATA_CONTAINER_NAME);
+            await persistProfileDocumentBootstrap(lockedExecSql, input, input.organizationProfileDocument, ORGANIZATION_PROFILE_DOCUMENT_KIND);
+            await persistSystemContainersBootstrap(lockedExecSql, input);
+        }, () => !input.canStartDurableMutation || input.canStartDurableMutation());
+        return committed;
+    });
+}
+export async function persistRegistrationBootstrap(client, input) {
+    await persistRegistrationBootstrapFromExecSql(createExecSql(client), input);
+}
+//# sourceMappingURL=persistRegistrationBootstrap.js.map

package/workflows/registration/persistRegistrationBootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistRegistrationBootstrap.js","sourceRoot":"","sources":["persistRegistrationBootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAEL,+BAA+B,GAChC,MAAM,wEAAwE,CAAC;AAChF,OAAO,EACL,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EACL,uDAAuD,GAExD,MAAM,iEAAiE,CAAC;AAEzE,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAC/F,OAAO,EACL,aAAa,EAGb,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EACL,oCAAoC,EACpC,0CAA0C,EAC1C,4BAA4B,GAC7B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,qCAAqC,EAAE,MAAM,uCAAuC,CAAC;AAC9F,OAAO,EAAE,oCAAoC,EAAE,MAAM,0CAA0C,CAAC;AA+EhG,KAAK,UAAU,oCAAoC,CACjD,OAAgB,EAChB,KAMC;IAED,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5B,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC;IAC9C,MAAM,MAAM,GAA4B;QACtC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,UAAU,EAAE,SAAS,CAAC,kBAAkB;QACxC,EAAE,EAAE,SAAS,CAAC,WAAW;QACzB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,SAAS,CAAC,gBAAgB;QAC3C,kBAAkB,EAAE,EAAE;QACtB,gBAAgB,EAAE,aAAa,CAAC,gBAAgB,IAAI,IAAI;QACxD,kBAAkB,EAAE,aAAa,CAAC,kBAAkB,IAAI,IAAI;QAC5D,sBAAsB,EAAE,aAAa,CAAC,sBAAsB,IAAI,IAAI;KACrE,CAAC;IACF,MAAM,+BAA+B,CAAC,aAAa,CACjD,OAAO,EACP;QACE,EAAE,EAAE,SAAS,CAAC,WAAW;QACzB,oBAAoB,EAAE,OAAO;QAC7B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;QAChD,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,EACD,MAAM,EACN;QACE,cAAc,EAAE,SAAS,CAAC,SAAS;QACnC,gBAAgB,EAAE;YAChB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B;KACF,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,OAAgB,EAChB,KAAiC;IAEjC,MAAM,UAAU,GAA4B;QAC1C,WAAW,EAAE,KAAK,CAAC,uBAAuB;QAC1C,eAAe,EAAE,KAAK,CAAC,2BAA2B;QAClD,UAAU,EAAE,KAAK,CAAC,sBAAsB;QACxC,EAAE,EAAE,KAAK,CAAC,WAAW;QACrB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,KAAK,CAAC,oBAAoB;QAC3C,kBAAkB,EAAE,EAAE;QACtB,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,CAAC,gBAAgB,IAAI,IAAI;QAClE,kBAAkB,EAAE,KAAK,CAAC,iBAAiB,CAAC,kBAAkB,IAAI,IAAI;QACtE,sBAAsB,EACpB,KAAK,CAAC,iBAAiB,CAAC,sBAAsB,IAAI,IAAI;KACzD,CAAC;IACF,MAAM,+BAA+B,CAAC,aAAa,CACjD,OAAO,EACP;QACE,EAAE,EAAE,KAAK,CAAC,WAAW;QACrB,oBAAoB,EAAE,OAAO;QAC7B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE,KAAK,CAAC,sBAAsB;QAChD,IAAI,EAAE,GAAG;QACT,IAAI,EAAE,IAAI;KACX,EACD,UAAU,EACV;QACE,cAAc,EAAE,KAAK,CAAC,4BAA4B;QAClD,gBAAgB,EAAE;YAChB,SAAS,EAAE,KAAK,CAAC,4BAA4B;YAC7C,SAAS,EAAE,KAAK,CAAC,4BAA4B;SAC9C;KACF,CACF,CAAC;IACF,MAAM,qCAAqC,CACzC,OAAO,EACP,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,yBAAyB,EAC/B,KAAK,CAAC,kCAAkC,CACzC,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,mFAAmF;AACnF,KAAK,UAAU,mCAAmC,CAChD,OAAgB,EAChB,KAAiC,EACjC,SAA+D,EAC/D,IAAY;IAEZ,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,MAAM,oCAAoC,CAAC,OAAO,EAAE;QAClD,SAAS;QACT,IAAI,EAAE,IAAI;QACV,IAAI;QACJ,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EACN,SAAS,KAAK,KAAK,CAAC,6BAA6B;YAC/C,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,KAAK,CAAC,WAAW;KACxB,CAAC,CAAC;IACH,MAAM,qCAAqC,CACzC,OAAO,EACP,SAAS,CAAC,WAAW,EACrB,SAAS,CAAC,qBAAqB,EAC/B,SAAS,CAAC,8BAA8B,CACzC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,OAAgB,EAChB,KAAiC;IAEjC,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAChD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;QAC/C,MAAM,oCAAoC,CAAC,OAAO,EAAE;YAClD,SAAS,EAAE,eAAe;YAC1B,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,QAAQ,EAAE,KAAK,CAAC,WAAW;SAC5B,CAAC,CAAC;QACH,yEAAyE;QACzE,0EAA0E;QAC1E,8DAA8D;IAChE,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,uEAAuE;AACvE,uEAAuE;AACvE,KAAK,UAAU,+BAA+B,CAC5C,OAAgB,EAChB,KAAiC,EACjC,eAAqE,EACrE,YAAoB;IAEpB,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,+BAA+B,CAAC,OAAO,EAAE;QAC7C,GAAG,eAAe;QAClB,YAAY;QACZ,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAgB,EAChB,KAcC;IAED,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC9E,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,CAAC,sBAAsB;QAChD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,CAAC;IAElE,MAAM,oBAAoB,CAAC;QACzB,UAAU,EAAE,GAAG;QACf,aAAa,EAAE,IAAI;QACnB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE;QAClD,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,gBAAgB,EAAE,KAAK,CAAC,aAAa,CAAC,gBAAgB,IAAI,IAAI;YAC9D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,kBAAkB,EAAE,KAAK,CAAC,aAAa,CAAC,kBAAkB,IAAI,IAAI;YAClE,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,sBAAsB,EACpB,KAAK,CAAC,aAAa,CAAC,sBAAsB,IAAI,IAAI;YACpD,qEAAqE;YACrE,8CAA8C;YAC9C,kBAAkB,EAAE,mBAAmB,CAAC,GAAG,CAAC;SAC7C;QACD,aAAa;QACb,WAAW,EAAE,uBAAuB;KACrC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,OAAgB,EAChB,KAAiC;IAEjC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC;IAC1B,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,qEAAqE;QACrE,sEAAsE;QACtE,qEAAqE;QACrE,sDAAsD;QACtD,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,oDAAoD;QACpD,MAAM,+BAA+B,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAClE,MAAM,uBAAuB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC1D,qEAAqE;QACrE,4DAA4D;QAC5D,uEAAuE;QACvE,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,iCAAiC,CAC3D,aAAa,CACd,CAAC,kBAAkB,CAClB,KAAK,IAAI,EAAE;YACT,MAAM,uDAAuD,CAAC;gBAC5D,OAAO,EAAE,aAAa;gBACtB,KAAK,EAAE,KAAK,CAAC,uBAAuB;aACrC,CAAC,CAAC;YACH,MAAM,oCAAoC,CAAC;gBACzC,UAAU,EAAE,KAAK,CAAC,uBAAuB;gBACzC,OAAO,EAAE,aAAa;gBACtB,WAAW,EAAE,KAAK,CAAC,wBAAwB;gBAC3C,YAAY,EAAE,KAAK,CAAC,yBAAyB;aAC9C,CAAC,CAAC;YACH,MAAM,6BAA6B,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,mCAAmC,CACvC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,sBAAsB,EAC5B,0CAA0C,CAC3C,CAAC;YACF,MAAM,+BAA+B,CACnC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,qBAAqB,EAC3B,4BAA4B,CAC7B,CAAC;YACF,MAAM,mCAAmC,CACvC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,6BAA6B,EACnC,oCAAoC,CACrC,CAAC;YACF,MAAM,+BAA+B,CACnC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,2BAA2B,EACjC,kCAAkC,CACnC,CAAC;YACF,MAAM,gCAAgC,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC,EACD,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,IAAI,KAAK,CAAC,uBAAuB,EAAE,CACxE,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAyB,EACzB,KAAiC;IAEjC,MAAM,uCAAuC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["import {\n  createDocument,\n  encodeVersionVector,\n  importUpdates,\n} from \"@tearleads/loro\";\nimport type { ContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { getScopedPeerSeed } from \"../../data/crdtPeerSeed\";\nimport type { DocumentProjectorRegistryInput } from \"../../data/documents/documentKinds\";\nimport { createPendingUpdateFields } from \"../../data/documents/documentSync\";\nimport {\n  type ContainerMetadataRecord,\n  sqlContainerContentsPersistence,\n} from \"../../data/persistence/container-contents/containerContentsPersistence\";\nimport {\n  DOCUMENTS_APP_KIND,\n  sqlDocumentsPersistence,\n} from \"../../data/persistence/documents/documentsPersistence\";\nimport {\n  advanceLocallyAcknowledgedAccessManifestHeadsAtomically,\n  type LocallyAcknowledgedAccessManifestHead,\n} from \"../../data/persistence/locallyAcknowledgedCheckpointPersistence\";\nimport type { DocumentRecord } from \"../../data/sqlite/documentPersistence\";\nimport { getClientSQLitePersistenceRuntime } from \"../../data/sqlite/sqlitePersistenceRuntime\";\nimport {\n  createExecSql,\n  type ExecSql,\n  type ExecSqlClientLike,\n  runSerializedSqlMutation,\n} from \"../../data/sqlite/sqlSchema\";\nimport { persistDocumentState } from \"../documents/persistence\";\nimport { ORGANIZATION_PROFILE_DOCUMENT_KIND } from \"../organizations/organizationProfile\";\nimport {\n  ORGANIZATION_METADATA_CONTAINER_NAME,\n  ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME,\n  ROSTER_PROFILE_DOCUMENT_KIND,\n} from \"../organizations/rosterProfileContainer\";\nimport { enqueueInitialContainerMetadataUpdate } from \"./registrationBootstrapPendingUpdates\";\nimport { persistRegistrationPrincipalPolicies } from \"./registrationPrincipalPolicyPersistence\";\n\ninterface ProvisionedContainerBootstrapInput {\n  accessEpoch: number;\n  accessStateHash: string;\n  containerId: string;\n  createdAt: string;\n  metadataDocumentId: string;\n  metadataSnapshot: string;\n  metadataState: Pick<\n    DocumentRecord,\n    | \"documentId\"\n    | \"contentKeyBundle\"\n    | \"documentKekTargets\"\n    | \"documentManifestBundle\"\n  >;\n  systemSlot: ContainerSystemSlot;\n  updatedAt: string;\n}\n\ninterface ProvisionedProfileDocumentBootstrapInput {\n  accessEpoch: number;\n  accessStateHash: string;\n  containerId: string;\n  documentId: string;\n  documentState: ProvisionedContainerBootstrapInput[\"metadataState\"];\n  initialUpdate: Uint8Array;\n  initialUpdateCommitted: boolean;\n  localId: string;\n}\n\nexport interface RegistrationBootstrapInput {\n  acknowledgedAccessHeads: readonly LocallyAcknowledgedAccessManifestHead[];\n  /** Checked inside the mutation queue claim; false skips every write. */\n  canStartDurableMutation?: (() => boolean) | undefined;\n  /**\n   * @internal Test-only synchronization seam. Invoked synchronously,\n   * immediately before this persist joins the serialized mutation queue —\n   * no interleaving can separate the two. Lets identity-race tests\n   * deterministically place an identity replacement inside the queue-wait\n   * window instead of sleeping.\n   */\n  onPersistQueued?: (() => void) | undefined;\n  containerId: string;\n  initialAdminGroupPolicy: PrincipalPolicyBundleResponse;\n  initialMemberGroupPolicy: PrincipalPolicyBundleResponse;\n  initialOrganizationPolicy: PrincipalPolicyBundleResponse;\n  rootMetadataAccessEpoch: number;\n  rootMetadataAccessStateHash: string;\n  rootContainerServerTimestamp: string;\n  rootMetadataDocumentId: string;\n  rootMetadataInitialUpdate: Uint8Array;\n  rootMetadataInitialUpdateCommitted?: boolean | undefined;\n  rootMetadataSnapshot: string;\n  rootMetadataState: ProvisionedContainerBootstrapInput[\"metadataState\"];\n  rosterProfileContainer?: ProvisionedContainerBootstrapInput & {\n    metadataInitialUpdate: Uint8Array;\n    metadataInitialUpdateCommitted?: boolean | undefined;\n  };\n  organizationMetadataContainer?: ProvisionedContainerBootstrapInput & {\n    metadataInitialUpdate: Uint8Array;\n    metadataInitialUpdateCommitted?: boolean | undefined;\n  };\n  organizationProfileDocument?: ProvisionedProfileDocumentBootstrapInput;\n  rosterProfileDocument?: ProvisionedProfileDocumentBootstrapInput;\n  // Additional app-owned system containers provisioned with the organization\n  // (e.g. a trash bin). Each carries its own display name and icon (unlike the\n  // roster/organization-metadata containers, whose names are fixed), since the\n  // caller declares them.\n  systemContainers?: Array<\n    ProvisionedContainerBootstrapInput & {\n      icon: string | null;\n      name: string;\n    }\n  >;\n  documentProjectors?: DocumentProjectorRegistryInput | undefined;\n  organizationId: string;\n  userId: string;\n}\nasync function persistProvisionedContainerBootstrap(\n  execSql: ExecSql,\n  input: {\n    container: ProvisionedContainerBootstrapInput;\n    icon: string | null;\n    name: string;\n    organizationId: string;\n    parentId: string | null;\n  },\n): Promise<void> {\n  const { container } = input;\n  const metadataState = container.metadataState;\n  const record: ContainerMetadataRecord = {\n    accessEpoch: container.accessEpoch,\n    accessStateHash: container.accessStateHash,\n    documentId: container.metadataDocumentId,\n    id: container.containerId,\n    lastCommitLsn: null,\n    metadataUpdates: container.metadataSnapshot,\n    snapshotEndVersion: \"\",\n    contentKeyBundle: metadataState.contentKeyBundle ?? null,\n    documentKekTargets: metadataState.documentKekTargets ?? null,\n    documentManifestBundle: metadataState.documentManifestBundle ?? null,\n  };\n  await sqlContainerContentsPersistence.saveContainer(\n    execSql,\n    {\n      id: container.containerId,\n      effectiveAccessLevel: \"admin\",\n      organizationId: input.organizationId,\n      parentId: input.parentId,\n      metadataDocumentId: container.metadataDocumentId,\n      systemSlot: container.systemSlot,\n      name: input.name,\n      icon: input.icon,\n    },\n    record,\n    {\n      localUpdatedAt: container.updatedAt,\n      serverTimestamps: {\n        createdAt: container.createdAt,\n        updatedAt: container.updatedAt,\n      },\n    },\n  );\n}\n\nasync function persistRootContainerBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n): Promise<void> {\n  const rootRecord: ContainerMetadataRecord = {\n    accessEpoch: input.rootMetadataAccessEpoch,\n    accessStateHash: input.rootMetadataAccessStateHash,\n    documentId: input.rootMetadataDocumentId,\n    id: input.containerId,\n    lastCommitLsn: null,\n    metadataUpdates: input.rootMetadataSnapshot,\n    snapshotEndVersion: \"\",\n    contentKeyBundle: input.rootMetadataState.contentKeyBundle ?? null,\n    documentKekTargets: input.rootMetadataState.documentKekTargets ?? null,\n    documentManifestBundle:\n      input.rootMetadataState.documentManifestBundle ?? null,\n  };\n  await sqlContainerContentsPersistence.saveContainer(\n    execSql,\n    {\n      id: input.containerId,\n      effectiveAccessLevel: \"admin\",\n      organizationId: input.organizationId,\n      parentId: null,\n      metadataDocumentId: input.rootMetadataDocumentId,\n      name: \"/\",\n      icon: null,\n    },\n    rootRecord,\n    {\n      localUpdatedAt: input.rootContainerServerTimestamp,\n      serverTimestamps: {\n        createdAt: input.rootContainerServerTimestamp,\n        updatedAt: input.rootContainerServerTimestamp,\n      },\n    },\n  );\n  await enqueueInitialContainerMetadataUpdate(\n    execSql,\n    input.containerId,\n    input.rootMetadataInitialUpdate,\n    input.rootMetadataInitialUpdateCommitted,\n  );\n}\n\n// Persist reserved profile containers using their fixed topology: roster profiles\n// inherit the personal root; shared organization metadata has an independent root.\nasync function persistNamedChildContainerBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n  container: RegistrationBootstrapInput[\"rosterProfileContainer\"],\n  name: string,\n): Promise<void> {\n  if (!container) {\n    return;\n  }\n\n  await persistProvisionedContainerBootstrap(execSql, {\n    container,\n    icon: null,\n    name,\n    organizationId: input.organizationId,\n    parentId:\n      container === input.organizationMetadataContainer\n        ? null\n        : input.containerId,\n  });\n  await enqueueInitialContainerMetadataUpdate(\n    execSql,\n    container.containerId,\n    container.metadataInitialUpdate,\n    container.metadataInitialUpdateCommitted,\n  );\n}\n\nasync function persistSystemContainersBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n): Promise<void> {\n  const systemContainers = input.systemContainers;\n  if (!systemContainers) {\n    return;\n  }\n\n  for (const systemContainer of systemContainers) {\n    await persistProvisionedContainerBootstrap(execSql, {\n      container: systemContainer,\n      icon: systemContainer.icon,\n      name: systemContainer.name,\n      organizationId: input.organizationId,\n      parentId: input.containerId,\n    });\n    // Provisioned system-container metadata is already committed remotely in\n    // the organization transaction. Persist the initialized snapshot locally,\n    // but do not queue a duplicate write with a second update id.\n  }\n}\n\n// The ONE persist shape for the provisioned profile documents (organization\n// profile and roster profile): the input carries exactly the bootstrap\n// fields, so only the document kind and the host's projectors join it.\nasync function persistProfileDocumentBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n  profileDocument: ProvisionedProfileDocumentBootstrapInput | undefined,\n  documentKind: string,\n): Promise<void> {\n  if (!profileDocument) {\n    return;\n  }\n\n  await persistInitialDocumentBootstrap(execSql, {\n    ...profileDocument,\n    documentKind,\n    documentProjectors: input.documentProjectors,\n  });\n}\n\nexport async function persistInitialDocumentBootstrap(\n  execSql: ExecSql,\n  input: {\n    accessEpoch: number;\n    accessStateHash: string;\n    containerId: string;\n    documentId: string;\n    documentKind: string;\n    documentProjectors: DocumentProjectorRegistryInput | undefined;\n    documentState: Pick<\n      DocumentRecord,\n      \"contentKeyBundle\" | \"documentKekTargets\" | \"documentManifestBundle\"\n    >;\n    initialUpdate: Uint8Array;\n    initialUpdateCommitted: boolean;\n    localId: string;\n  },\n): Promise<void> {\n  const doc = await createDocument(await getScopedPeerSeed(DOCUMENTS_APP_KIND));\n  importUpdates(doc, [input.initialUpdate]);\n  const pendingUpdate = input.initialUpdateCommitted\n    ? undefined\n    : (createPendingUpdateFields(input.initialUpdate) ?? undefined);\n\n  await persistDocumentState({\n    currentDoc: doc,\n    currentRecord: null,\n    documentProjectors: input.documentProjectors ?? [],\n    execSql,\n    localId: input.localId,\n    patch: {\n      accessEpoch: input.accessEpoch,\n      accessStateHash: input.accessStateHash,\n      containerId: input.containerId,\n      contentKeyBundle: input.documentState.contentKeyBundle ?? null,\n      documentId: input.documentId,\n      documentKekTargets: input.documentState.documentKekTargets ?? null,\n      documentKind: input.documentKind,\n      documentManifestBundle:\n        input.documentState.documentManifestBundle ?? null,\n      // The create-only persistence primitive stores this frontier and the\n      // full-history checkpoint in one transaction.\n      snapshotEndVersion: encodeVersionVector(doc),\n    },\n    pendingUpdate,\n    persistence: sqlDocumentsPersistence,\n  });\n}\n\n/**\n * Persists the local root-container bootstrap created during successful\n * registration so container contents can initialize from SQLite on first\n * login — atomically: every write lands inside ONE transaction whose last\n * act re-checks identity currency, so an identity replaced anywhere between\n * the queue claim and the commit rolls the entire bootstrap back instead of\n * leaving a partial one. Resolves false when either currency check rejected\n * the write, so callers do not report a bootstrap that was never persisted.\n */\nexport async function persistRegistrationBootstrapFromExecSql(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n): Promise<boolean> {\n  input.onPersistQueued?.();\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    // In-mutex currency check, adjacent to the serialized-mutation claim\n    // (see persistDocumentState): the identity can be replaced while this\n    // persist waits for the queue, and its bootstrap must not be written\n    // through a client the replacement closed or renewed.\n    if (input.canStartDurableMutation && !input.canStartDurableMutation()) {\n      return false;\n    }\n    // Idempotent DDL stays outside the atomic boundary.\n    await sqlContainerContentsPersistence.ensureSchema(lockedExecSql);\n    await sqlDocumentsPersistence.ensureSchema(lockedExecSql);\n    // Pre-commit currency guard: the write sequence awaits real work, so\n    // the identity can be replaced mid-sequence. The guard runs\n    // synchronously with the COMMIT dispatch, so a refusal rolls the whole\n    // write set back and a pass cannot go stale before the commit is sent —\n    // the partial-persist window a single entry check leaves open.\n    const { committed } = await getClientSQLitePersistenceRuntime(\n      lockedExecSql,\n    ).guardedTransaction(\n      async () => {\n        await advanceLocallyAcknowledgedAccessManifestHeadsAtomically({\n          execSql: lockedExecSql,\n          heads: input.acknowledgedAccessHeads,\n        });\n        await persistRegistrationPrincipalPolicies({\n          adminGroup: input.initialAdminGroupPolicy,\n          execSql: lockedExecSql,\n          memberGroup: input.initialMemberGroupPolicy,\n          organization: input.initialOrganizationPolicy,\n        });\n        await persistRootContainerBootstrap(lockedExecSql, input);\n        await persistNamedChildContainerBootstrap(\n          lockedExecSql,\n          input,\n          input.rosterProfileContainer,\n          ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME,\n        );\n        await persistProfileDocumentBootstrap(\n          lockedExecSql,\n          input,\n          input.rosterProfileDocument,\n          ROSTER_PROFILE_DOCUMENT_KIND,\n        );\n        await persistNamedChildContainerBootstrap(\n          lockedExecSql,\n          input,\n          input.organizationMetadataContainer,\n          ORGANIZATION_METADATA_CONTAINER_NAME,\n        );\n        await persistProfileDocumentBootstrap(\n          lockedExecSql,\n          input,\n          input.organizationProfileDocument,\n          ORGANIZATION_PROFILE_DOCUMENT_KIND,\n        );\n        await persistSystemContainersBootstrap(lockedExecSql, input);\n      },\n      () => !input.canStartDurableMutation || input.canStartDurableMutation(),\n    );\n    return committed;\n  });\n}\n\nexport async function persistRegistrationBootstrap(\n  client: ExecSqlClientLike,\n  input: RegistrationBootstrapInput,\n): Promise<void> {\n  await persistRegistrationBootstrapFromExecSql(createExecSql(client), input);\n}\n"]}

package/workflows/registration/profileBootstrapPersistence.js

@@ -0,0 +1,47 @@
+import { base64ToBytes } from "../../internal/encoding/index.js";
+import { persistedDocumentCreateStateFromResponse } from "../../data/documents/shared/responses.js";
+import { getOrganizationProfileDocumentLocalId } from "../organizations/organizationProfile.js";
+import { getRosterProfileDocumentLocalId } from "../organizations/rosterProfileContainer.js";
+function initialUpdateCommitted(input) {
+    const updateId = input.request.initialSync.outgoingUpdates[0]?.id;
+    return (updateId !== undefined &&
+        input.response.committedProfileUpdateIds.includes(updateId));
+}
+export function buildOrganizationProfileBootstrapInput(input) {
+    const document = input.response.organizationProfileDocument;
+    if (!document) {
+        return undefined;
+    }
+    return {
+        accessEpoch: 1,
+        accessStateHash: document.accessManifest.manifestHash,
+        containerId: input.containerId,
+        documentId: document.id,
+        documentState: persistedDocumentCreateStateFromResponse(input.materializedDocument.plan, document),
+        initialUpdate: base64ToBytes(input.snapshot),
+        initialUpdateCommitted: initialUpdateCommitted(input),
+        localId: getOrganizationProfileDocumentLocalId({
+            organizationId: input.response.organizationId,
+        }),
+    };
+}
+export function buildRosterProfileBootstrapInput(input) {
+    const document = input.response.rosterProfileDocument;
+    if (!document) {
+        return undefined;
+    }
+    return {
+        accessEpoch: 1,
+        accessStateHash: document.accessManifest.manifestHash,
+        containerId: input.containerId,
+        documentId: document.id,
+        documentState: persistedDocumentCreateStateFromResponse(input.materializedDocument.plan, document),
+        initialUpdate: input.initialUpdate,
+        initialUpdateCommitted: initialUpdateCommitted(input),
+        localId: getRosterProfileDocumentLocalId({
+            organizationId: input.response.organizationId,
+            userId: input.response.userId,
+        }),
+    };
+}
+//# sourceMappingURL=profileBootstrapPersistence.js.map

package/workflows/registration/profileBootstrapPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profileBootstrapPersistence.js","sourceRoot":"","sources":["profileBootstrapPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,EAAE,wCAAwC,EAAE,MAAM,uCAAuC,CAAC;AAEjG,OAAO,EAAE,qCAAqC,EAAE,MAAM,sCAAsC,CAAC;AAC7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAW1F,SAAS,sBAAsB,CAC7B,KAA0D;IAE1D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAClE,OAAO,CACL,QAAQ,KAAK,SAAS;QACtB,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,KAA0E;IAE1E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,WAAW,EAAE,CAAC;QACd,eAAe,EAAE,QAAQ,CAAC,cAAc,CAAC,YAAY;QACrD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,aAAa,EAAE,wCAAwC,CACrD,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAC/B,QAAQ,CACT;QACD,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC5C,sBAAsB,EAAE,sBAAsB,CAAC,KAAK,CAAC;QACrD,OAAO,EAAE,qCAAqC,CAAC;YAC7C,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;SAC9C,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAA4B;IAE5B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,WAAW,EAAE,CAAC;QACd,eAAe,EAAE,QAAQ,CAAC,cAAc,CAAC,YAAY;QACrD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,aAAa,EAAE,wCAAwC,CACrD,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAC/B,QAAQ,CACT;QACD,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,sBAAsB,EAAE,sBAAsB,CAAC,KAAK,CAAC;QACrD,OAAO,EAAE,+BAA+B,CAAC;YACvC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;SAC9B,CAAC;KACH,CAAC;AACJ,CAAC","sourcesContent":["import { base64ToBytes } from \"@tearleads/encoding\";\nimport type { ProvisionedDocumentRequest } from \"@tearleads/validators/request\";\nimport type { OrganizationProvisioningResponse } from \"@tearleads/validators/response\";\nimport { persistedDocumentCreateStateFromResponse } from \"../../data/documents/shared/responses\";\nimport type { MaterializedDocumentCreatePlan } from \"../../data/documents/shared/types\";\nimport { getOrganizationProfileDocumentLocalId } from \"../organizations/organizationProfile\";\nimport { getRosterProfileDocumentLocalId } from \"../organizations/rosterProfileContainer\";\nimport type { RegistrationBootstrapInput } from \"./persistRegistrationBootstrap\";\n\ninterface ProfileBootstrapInput {\n  containerId: string;\n  initialUpdate: Uint8Array;\n  materializedDocument: MaterializedDocumentCreatePlan;\n  request: ProvisionedDocumentRequest;\n  response: OrganizationProvisioningResponse;\n}\n\nfunction initialUpdateCommitted(\n  input: Pick<ProfileBootstrapInput, \"request\" | \"response\">,\n): boolean {\n  const updateId = input.request.initialSync.outgoingUpdates[0]?.id;\n  return (\n    updateId !== undefined &&\n    input.response.committedProfileUpdateIds.includes(updateId)\n  );\n}\n\nexport function buildOrganizationProfileBootstrapInput(\n  input: Omit<ProfileBootstrapInput, \"initialUpdate\"> & { snapshot: string },\n): RegistrationBootstrapInput[\"organizationProfileDocument\"] {\n  const document = input.response.organizationProfileDocument;\n  if (!document) {\n    return undefined;\n  }\n  return {\n    accessEpoch: 1,\n    accessStateHash: document.accessManifest.manifestHash,\n    containerId: input.containerId,\n    documentId: document.id,\n    documentState: persistedDocumentCreateStateFromResponse(\n      input.materializedDocument.plan,\n      document,\n    ),\n    initialUpdate: base64ToBytes(input.snapshot),\n    initialUpdateCommitted: initialUpdateCommitted(input),\n    localId: getOrganizationProfileDocumentLocalId({\n      organizationId: input.response.organizationId,\n    }),\n  };\n}\n\nexport function buildRosterProfileBootstrapInput(\n  input: ProfileBootstrapInput,\n): RegistrationBootstrapInput[\"rosterProfileDocument\"] {\n  const document = input.response.rosterProfileDocument;\n  if (!document) {\n    return undefined;\n  }\n  return {\n    accessEpoch: 1,\n    accessStateHash: document.accessManifest.manifestHash,\n    containerId: input.containerId,\n    documentId: document.id,\n    documentState: persistedDocumentCreateStateFromResponse(\n      input.materializedDocument.plan,\n      document,\n    ),\n    initialUpdate: input.initialUpdate,\n    initialUpdateCommitted: initialUpdateCommitted(input),\n    localId: getRosterProfileDocumentLocalId({\n      organizationId: input.response.organizationId,\n      userId: input.response.userId,\n    }),\n  };\n}\n"]}