@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/workflows/root/organizations.js

@@ -0,0 +1,11 @@
+import { toOutcome } from "./identities.js";
+export async function listRootOrganizations(api, query = {}) {
+    return toOutcome(await api.listRootOrganizationsResult(query));
+}
+export async function loadRootOrganization(api, organizationId) {
+    return toOutcome(await api.getRootOrganizationResult(organizationId));
+}
+export async function listRootOrganizationIdentities(api, organizationId, query = {}) {
+    return toOutcome(await api.listRootOrganizationIdentitiesResult(organizationId, query));
+}
+//# sourceMappingURL=organizations.js.map

package/workflows/root/organizations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.js","sourceRoot":"","sources":["organizations.ts"],"names":[],"mappings":"AAYA,OAAO,EAA2B,SAAS,EAAE,MAAM,cAAc,CAAC;AAsBlE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAyB,EACzB,QAAqC,EAAE;IAEvC,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAyB,EACzB,cAAsB;IAEtB,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,yBAAyB,CAAC,cAAc,CAAC,CAAC,CAAC;AACxE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,GAAyB,EACzB,cAAsB,EACtB,QAAwC,EAAE;IAE1C,OAAO,SAAS,CACd,MAAM,GAAG,CAAC,oCAAoC,CAAC,cAAc,EAAE,KAAK,CAAC,CACtE,CAAC;AACJ,CAAC","sourcesContent":["import type { RequestResult } from \"@tearleads/api-client\";\nimport type {\n  RootOrganizationPageQuery,\n  RootOrganizationsQuery,\n} from \"@tearleads/validators/operation\";\nimport type {\n  RootOrganizationDetailResponse,\n  RootOrganizationIdentitiesResponse,\n  RootOrganizationIdentityResponse,\n  RootOrganizationSummaryResponse,\n  RootOrganizationsResponse,\n} from \"@tearleads/validators/response\";\nimport { type RootRequestOutcome, toOutcome } from \"./identities\";\n\nexport type RootOrganization = RootOrganizationSummaryResponse;\nexport type RootOrganizationsPage = RootOrganizationsResponse;\nexport type RootOrganizationDetail = RootOrganizationDetailResponse;\nexport type RootOrganizationIdentity = RootOrganizationIdentityResponse;\nexport type RootOrganizationIdentitiesPage = RootOrganizationIdentitiesResponse;\nexport type RootOrganizationsQueryInput = RootOrganizationsQuery;\nexport type RootOrganizationPageQueryInput = RootOrganizationPageQuery;\n\nexport interface RootOrganizationsApi {\n  listRootOrganizationsResult(\n    query?: RootOrganizationsQuery,\n  ): Promise<RequestResult<RootOrganizationsResponse>>;\n  getRootOrganizationResult(\n    organizationId: string,\n  ): Promise<RequestResult<RootOrganizationDetailResponse>>;\n  listRootOrganizationIdentitiesResult(\n    organizationId: string,\n    query?: RootOrganizationPageQuery,\n  ): Promise<RequestResult<RootOrganizationIdentitiesResponse>>;\n}\nexport async function listRootOrganizations(\n  api: RootOrganizationsApi,\n  query: RootOrganizationsQueryInput = {},\n): Promise<RootRequestOutcome<RootOrganizationsPage>> {\n  return toOutcome(await api.listRootOrganizationsResult(query));\n}\nexport async function loadRootOrganization(\n  api: RootOrganizationsApi,\n  organizationId: string,\n): Promise<RootRequestOutcome<RootOrganizationDetail>> {\n  return toOutcome(await api.getRootOrganizationResult(organizationId));\n}\nexport async function listRootOrganizationIdentities(\n  api: RootOrganizationsApi,\n  organizationId: string,\n  query: RootOrganizationPageQueryInput = {},\n): Promise<RootRequestOutcome<RootOrganizationIdentitiesPage>> {\n  return toOutcome(\n    await api.listRootOrganizationIdentitiesResult(organizationId, query),\n  );\n}\n"]}

package/workflows/runtimeInput.d.ts

@@ -0,0 +1,61 @@
+import type { EncapsulationKeyPair, SigningKeyPair } from "../internal/crypto/index.js";
+import type { BlobStore } from "../data/blobContracts.js";
+import type { DocumentProjectorRegistry } from "../data/documents/documentKinds.js";
+import type { DomainScope } from "../data/domainScope.js";
+import type { SecurityIncidentReporter } from "../data/securityIncidents.js";
+import type { ExecSql } from "../data/sqlite/sqlSchema.js";
+export type WorkflowRuntimeDatabaseStatus = "idle" | "ready" | "error" | "terminated";
+export interface WorkflowRuntimeAuthInput {
+    /** Server-backed personal organization; independent of organizationId. */
+    readonly defaultOrganizationId?: string | null;
+    /** Session root identity, independent of a document/pane target. */
+    readonly rootContainerId?: string | null | undefined;
+    readonly isAuthenticated: boolean;
+    /** Platform-operator flag from the server; the API enforces root access. */
+    readonly isRoot?: boolean | undefined;
+    readonly organizationId: string | null;
+    readonly userId: string | null;
+}
+export interface WorkflowRuntimeCryptoInput {
+    readonly encapsulationKeyPair: EncapsulationKeyPair | null;
+    readonly signingFingerprint: string | null;
+    readonly signingKeyPair: SigningKeyPair | null;
+}
+export interface WorkflowRuntimeStateInput {
+    readonly containerId: string | null;
+    readonly domainScope: DomainScope;
+    readonly events: ReadonlyArray<unknown>;
+    readonly online: boolean;
+    /**
+     * Increments after each restored server-events interest baseline. Unlike a
+     * boolean connection edge, this survives coalesced runtime notifications and
+     * document stores retained while their host provider is unmounted.
+     */
+    readonly serverEventsConnectionGeneration?: number | undefined;
+    /**
+     * Per-pane CRDT peer-seed discriminator (e.g. the pane's local identity
+     * namespace). Documents in distinct panes must derive distinct Loro peer ids;
+     * absent/`null` means single-pane (bare scope). The document runtime factory
+     * always populates it; other runtimes and test fixtures may omit it.
+     */
+    readonly peerScope?: string | null;
+}
+export interface WorkflowRuntimeInfraInput {
+    readonly blobStore: BlobStore;
+    readonly dbStatus: WorkflowRuntimeDatabaseStatus;
+    readonly documentProjectors: DocumentProjectorRegistry;
+    readonly execSql: ExecSql;
+}
+export interface WorkflowRuntimeUtilInput {
+    readonly isRemoteSyncBlocked?: ((organizationId: string) => boolean) | undefined;
+    readonly log: (message: string) => void;
+    readonly logError: (message: string | Error, cause?: unknown) => void;
+    readonly reportSecurityIncident: SecurityIncidentReporter;
+}
+export interface WorkflowRuntimeGroups {
+    readonly auth: WorkflowRuntimeAuthInput;
+    readonly crypto: WorkflowRuntimeCryptoInput;
+    readonly infra: WorkflowRuntimeInfraInput;
+    readonly state: WorkflowRuntimeStateInput;
+    readonly util: WorkflowRuntimeUtilInput;
+}

package/workflows/runtimeInput.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=runtimeInput.js.map

package/workflows/runtimeInput.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeInput.js","sourceRoot":"","sources":["runtimeInput.ts"],"names":[],"mappings":"","sourcesContent":["import type { EncapsulationKeyPair, SigningKeyPair } from \"@tearleads/crypto\";\nimport type { BlobStore } from \"../data/blobContracts\";\nimport type { DocumentProjectorRegistry } from \"../data/documents/documentKinds\";\nimport type { DomainScope } from \"../data/domainScope\";\nimport type { SecurityIncidentReporter } from \"../data/securityIncidents\";\nimport type { ExecSql } from \"../data/sqlite/sqlSchema\";\n\nexport type WorkflowRuntimeDatabaseStatus =\n  | \"idle\"\n  | \"ready\"\n  | \"error\"\n  | \"terminated\";\n\nexport interface WorkflowRuntimeAuthInput {\n  /** Server-backed personal organization; independent of organizationId. */\n  readonly defaultOrganizationId?: string | null;\n  /** Session root identity, independent of a document/pane target. */\n  readonly rootContainerId?: string | null | undefined;\n  readonly isAuthenticated: boolean;\n  /** Platform-operator flag from the server; the API enforces root access. */\n  readonly isRoot?: boolean | undefined;\n  readonly organizationId: string | null;\n  readonly userId: string | null;\n}\n\nexport interface WorkflowRuntimeCryptoInput {\n  readonly encapsulationKeyPair: EncapsulationKeyPair | null;\n  readonly signingFingerprint: string | null;\n  readonly signingKeyPair: SigningKeyPair | null;\n}\n\nexport interface WorkflowRuntimeStateInput {\n  readonly containerId: string | null;\n  readonly domainScope: DomainScope;\n  readonly events: ReadonlyArray<unknown>;\n  readonly online: boolean;\n  /**\n   * Increments after each restored server-events interest baseline. Unlike a\n   * boolean connection edge, this survives coalesced runtime notifications and\n   * document stores retained while their host provider is unmounted.\n   */\n  readonly serverEventsConnectionGeneration?: number | undefined;\n  /**\n   * Per-pane CRDT peer-seed discriminator (e.g. the pane's local identity\n   * namespace). Documents in distinct panes must derive distinct Loro peer ids;\n   * absent/`null` means single-pane (bare scope). The document runtime factory\n   * always populates it; other runtimes and test fixtures may omit it.\n   */\n  readonly peerScope?: string | null;\n}\n\nexport interface WorkflowRuntimeInfraInput {\n  readonly blobStore: BlobStore;\n  readonly dbStatus: WorkflowRuntimeDatabaseStatus;\n  readonly documentProjectors: DocumentProjectorRegistry;\n  readonly execSql: ExecSql;\n}\n\nexport interface WorkflowRuntimeUtilInput {\n  readonly isRemoteSyncBlocked?:\n    | ((organizationId: string) => boolean)\n    | undefined;\n  readonly log: (message: string) => void;\n  readonly logError: (message: string | Error, cause?: unknown) => void;\n  readonly reportSecurityIncident: SecurityIncidentReporter;\n}\n\nexport interface WorkflowRuntimeGroups {\n  readonly auth: WorkflowRuntimeAuthInput;\n  readonly crypto: WorkflowRuntimeCryptoInput;\n  readonly infra: WorkflowRuntimeInfraInput;\n  readonly state: WorkflowRuntimeStateInput;\n  readonly util: WorkflowRuntimeUtilInput;\n}\n"]}

package/workflows/sync/index.d.ts

@@ -0,0 +1,4 @@
+export { createDomainScope, type DomainScope, } from "../../data/domainScope.js";
+export type { DomainSyncCoordinator, DomainSyncSnapshot, SyncIdleOptions, SyncLane, SyncLaneConfig, SyncLaneLastAction, SyncLanePhase, SyncLaneProgress, SyncLaneSnapshot, SyncLaneStatus, UploadSyncLane, UploadSyncLaneOptions, } from "../../data/sync/syncCoordinator.js";
+export { beginDomainSyncUploadLane, getDomainSyncCoordinatorSnapshot, getOrCreateDomainSyncCoordinator, hasDomainSyncCoordinatorPendingWork, requestAllDomainSyncLanes, subscribeToDomainSyncCoordinator, waitForDomainSyncCoordinatorToSettle, } from "../../data/sync/syncCoordinator.js";
+export { type ClearRemoteSyncStateResult, clearRemoteSyncState, type RemoteResetInput, type RemoteResetReplacement, } from "./remoteReset.js";

package/workflows/sync/index.js

@@ -0,0 +1,4 @@
+export { createDomainScope, } from "../../data/domainScope.js";
+export { beginDomainSyncUploadLane, getDomainSyncCoordinatorSnapshot, getOrCreateDomainSyncCoordinator, hasDomainSyncCoordinatorPendingWork, requestAllDomainSyncLanes, subscribeToDomainSyncCoordinator, waitForDomainSyncCoordinatorToSettle, } from "../../data/sync/syncCoordinator.js";
+export { clearRemoteSyncState, } from "./remoteReset.js";
+//# sourceMappingURL=index.js.map

package/workflows/sync/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,GAElB,MAAM,wBAAwB,CAAC;AAehC,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,gCAAgC,EAChC,mCAAmC,EACnC,yBAAyB,EACzB,gCAAgC,EAChC,oCAAoC,GACrC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAEL,oBAAoB,GAGrB,MAAM,eAAe,CAAC","sourcesContent":["export {\n  createDomainScope,\n  type DomainScope,\n} from \"../../data/domainScope\";\nexport type {\n  DomainSyncCoordinator,\n  DomainSyncSnapshot,\n  SyncIdleOptions,\n  SyncLane,\n  SyncLaneConfig,\n  SyncLaneLastAction,\n  SyncLanePhase,\n  SyncLaneProgress,\n  SyncLaneSnapshot,\n  SyncLaneStatus,\n  UploadSyncLane,\n  UploadSyncLaneOptions,\n} from \"../../data/sync/syncCoordinator\";\nexport {\n  beginDomainSyncUploadLane,\n  getDomainSyncCoordinatorSnapshot,\n  getOrCreateDomainSyncCoordinator,\n  hasDomainSyncCoordinatorPendingWork,\n  requestAllDomainSyncLanes,\n  subscribeToDomainSyncCoordinator,\n  waitForDomainSyncCoordinatorToSettle,\n} from \"../../data/sync/syncCoordinator\";\nexport {\n  type ClearRemoteSyncStateResult,\n  clearRemoteSyncState,\n  type RemoteResetInput,\n  type RemoteResetReplacement,\n} from \"./remoteReset\";\n"]}

package/workflows/sync/remoteReset.d.ts

@@ -0,0 +1,16 @@
+import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
+import { type RemoteResetInput } from "./remoteResetScope.js";
+export type { RemoteResetInput, RemoteResetReplacement, } from "./remoteResetScope.js";
+export interface ClearRemoteSyncStateResult {
+    readonly clearedContainerCreateIntentCount: number;
+    readonly clearedContainerMoveIntentCount: number;
+    readonly clearedDocumentMoveIntentCount: number;
+    readonly clearedPrincipalPolicyCount: number;
+    readonly clearedSyncCursorCount: number;
+    readonly queuedAttachmentUploadCount: number;
+    readonly queuedContainerCreateCount: number;
+    readonly queuedDocumentUpdateCount: number;
+    readonly resetContainerCount: number;
+    readonly resetDocumentCount: number;
+}
+export declare function clearRemoteSyncState(execSql: ExecSql, reset: RemoteResetInput, canCommit?: (() => boolean) | undefined): Promise<ClearRemoteSyncStateResult>;

package/workflows/sync/remoteReset.js

@@ -0,0 +1,293 @@
+import { and, eq, inArray, or } from "drizzle-orm";
+import { recordSupersededContainerBindingsInTransaction } from "../../data/persistence/container-contents/supersededContainerBindings.js";
+import { deleteDocumentPlacementRowsByContainerIds, deleteDocumentPlacementRowsByDocumentIds, } from "../../data/persistence/containers/documentContainerProjectionPersistence.js";
+import { clearDocumentDiscoveryEvidenceOnRemoteReset } from "../../data/persistence/documents/documentDiscoveryReset.js";
+import { documentIntentLinkTargets } from "../../data/sqlite/documentPlacementIntentSchema.js";
+import { organizationDataUsageCategories, organizationDataUsageSnapshots, } from "../../data/sqlite/organizationDataUsageSchema.js";
+import { organizationPresentationDenials, organizationReadModelContainerGrants, organizationReadModelDirectoryUsers, organizationReadModelGroupMembers, organizationReadModelGroupMemberships, organizationReadModelGroups, organizationReadModelPolicyHeads, organizationReadModelRequesters, organizationReadModelState, } from "../../data/sqlite/organizationReadModelSchema.js";
+import { clientSqlTables, containerCreateIntents, containerHydrationTombstones, containerMoveIntents, containers, documentAttachmentBlobProjection, documentMoveIntents, documentPendingAttachments, documentPendingUpdates, documentProjection, documentSyncFailures, documents, dormantContainerMetadata, dormantMetadataSweepRequests, } from "../../data/sqlite/schema.js";
+import { getClientSQLitePersistenceRuntime, } from "../../data/sqlite/sqlitePersistenceRuntime.js";
+import { ensureSqlTables } from "../../data/sqlite/sqlTableSchema.js";
+import { runOrganizationPresentationReset } from "../organizations/organizationPresentationAccessState.js";
+import { clearResetPendingAttachments } from "./remoteResetAttachments.js";
+import { remoteResetBatches } from "./remoteResetBatches.js";
+import { clearRemoteResetSyncCursors } from "./remoteResetCursorScope.js";
+import { buildResetPlans, } from "./remoteResetPlans.js";
+import { clearRemoteResetPrincipalRows } from "./remoteResetPrincipalScope.js";
+import { readRemoteSyncStateSnapshot, } from "./remoteResetScope.js";
+const CONTAINER_CREATE_INTENT_TYPE = "container.create";
+async function clearOrganizationPresentationRows(tx, organizationId) {
+    for (const table of [
+        organizationDataUsageCategories,
+        organizationDataUsageSnapshots,
+        organizationReadModelContainerGrants,
+        organizationReadModelGroupMembers,
+        organizationReadModelGroupMemberships,
+        organizationReadModelDirectoryUsers,
+        organizationReadModelGroups,
+        organizationReadModelPolicyHeads,
+        organizationReadModelRequesters,
+        organizationReadModelState,
+        organizationPresentationDenials,
+    ]) {
+        await tx
+            .delete(table)
+            .where(eq(table.organizationId, organizationId))
+            .run();
+    }
+}
+async function clearScopedContainerRows(input) {
+    for (const containerBatch of remoteResetBatches(input.snapshot.containerIds)) {
+        await deleteDocumentPlacementRowsByContainerIds(input.tx, containerBatch);
+        await input.tx
+            .delete(containerMoveIntents)
+            .where(inArray(containerMoveIntents.containerId, containerBatch))
+            .run();
+        await input.tx
+            .delete(containerCreateIntents)
+            .where(inArray(containerCreateIntents.containerId, containerBatch))
+            .run();
+        await input.tx
+            .delete(containerHydrationTombstones)
+            .where(inArray(containerHydrationTombstones.containerId, containerBatch))
+            .run();
+    }
+}
+async function clearScopedDocumentRows(input) {
+    const { snapshot, tx } = input;
+    for (const documentIdBatch of remoteResetBatches(snapshot.oldDocumentIds)) {
+        await deleteDocumentPlacementRowsByDocumentIds(tx, documentIdBatch);
+    }
+    await clearResetPendingAttachments({
+        attachmentUploads: input.attachmentUploads,
+        documentLocalIds: snapshot.documentLocalIds,
+        tx,
+    });
+    for (const localIdBatch of remoteResetBatches(snapshot.documentLocalIds)) {
+        await tx
+            .delete(documentIntentLinkTargets)
+            .where(inArray(documentIntentLinkTargets.intentId, tx
+            .select({ id: documentMoveIntents.id })
+            .from(documentMoveIntents)
+            .where(inArray(documentMoveIntents.localId, localIdBatch))))
+            .run();
+        await tx
+            .delete(documentMoveIntents)
+            .where(inArray(documentMoveIntents.localId, localIdBatch))
+            .run();
+    }
+    for (const documentBatch of remoteResetBatches(snapshot.documentRows)) {
+        await tx
+            .delete(documentPendingUpdates)
+            .where(or(...documentBatch.map((row) => and(eq(documentPendingUpdates.appKind, row.appKind), eq(documentPendingUpdates.localId, row.localId)))))
+            .run();
+        await tx
+            .delete(documentSyncFailures)
+            .where(or(...documentBatch.map((row) => and(eq(documentSyncFailures.appKind, row.appKind), eq(documentSyncFailures.localId, row.localId)))))
+            .run();
+    }
+}
+async function clearScopedRemoteRows(input) {
+    const { organizationId, tx } = input;
+    await clearOrganizationPresentationRows(tx, organizationId);
+    for (const table of [
+        dormantContainerMetadata,
+        dormantMetadataSweepRequests,
+    ]) {
+        await tx
+            .delete(table)
+            .where(eq(table.organizationId, organizationId))
+            .run();
+    }
+    await clearDocumentDiscoveryEvidenceOnRemoteReset(tx, {
+        containerIds: input.snapshot.containerIds,
+        documentIds: input.snapshot.oldDocumentIds,
+    });
+    await clearRemoteResetPrincipalRows(input);
+    await clearScopedContainerRows(input);
+    await clearScopedDocumentRows(input);
+    await clearRemoteResetSyncCursors({
+        containerIds: input.snapshot.containerIds,
+        tx,
+    });
+}
+async function resetRemoteColumns(input) {
+    const { now, reset, snapshot, tx } = input;
+    for (const row of snapshot.documentRows) {
+        await tx
+            .update(documents)
+            .set({
+            accessEpoch: 1,
+            accessStateHash: null,
+            contentKeyBundle: null,
+            documentId: null,
+            documentKekTargets: null,
+            documentManifestBundle: null,
+            lastCommitLsn: null,
+            pullContinuation: null,
+            recoveryDocumentId: row.documentId ?? row.recoveryDocumentId,
+            updatedAt: now,
+        })
+            .where(and(eq(documents.appKind, row.appKind), eq(documents.localId, row.localId)))
+            .run();
+    }
+    for (const localIdBatch of remoteResetBatches(snapshot.documentLocalIds)) {
+        await tx
+            .update(documentProjection)
+            .set({
+            documentId: null,
+            organizationId: reset.replacement?.organizationId ?? reset.organizationId,
+        })
+            .where(inArray(documentProjection.localId, localIdBatch))
+            .run();
+    }
+    // Replacement re-homes folders under their ids; the purged organization
+    // can never bind them again on this device.
+    for (const containerIds of reset.replacement
+        ? remoteResetBatches(snapshot.containerIds)
+        : []) {
+        await recordSupersededContainerBindingsInTransaction(tx, {
+            containerIds,
+            organizationId: reset.organizationId,
+            supersededAt: now,
+        });
+    }
+    for (const row of snapshot.containerRows) {
+        await tx
+            .update(containers)
+            .set({
+            metadataDocumentId: null,
+            organizationId: reset.replacement?.organizationId ?? reset.organizationId,
+            parentId: reset.replacement && row.parentId === null
+                ? reset.replacement.rootContainerId
+                : row.parentId,
+            serverCreatedAt: null,
+            serverUpdatedAt: null,
+            ...(reset.replacement ? { systemSlot: null } : {}),
+            localUpdatedAt: now,
+        })
+            .where(eq(containers.id, row.id))
+            .run();
+    }
+}
+async function queueResetDocumentUpdates(input) {
+    for (const updateBatch of remoteResetBatches(input.documentUpdates)) {
+        await input.tx
+            .insert(documentPendingUpdates)
+            .values(updateBatch.map((update) => ({
+            ...update,
+            id: crypto.randomUUID(),
+            createdAt: input.now,
+        })))
+            .run();
+    }
+}
+async function queueResetContainerCreates(input) {
+    const rows = input.snapshot.containerRows.flatMap((row) => {
+        const parentId = row.parentId ?? input.reset.replacement?.rootContainerId ?? null;
+        return parentId ? [{ id: row.id, parentId }] : [];
+    });
+    if (rows.length === 0)
+        return 0;
+    for (const rowBatch of remoteResetBatches(rows)) {
+        await input.tx
+            .insert(containerCreateIntents)
+            .values(rowBatch.map((row) => ({
+            id: crypto.randomUUID(),
+            containerId: row.id,
+            parentContainerId: row.parentId,
+            intentType: CONTAINER_CREATE_INTENT_TYPE,
+            syncStatus: "pending",
+            remoteContainerId: null,
+            remoteMetadataAccessStateHash: null,
+            remoteMetadataDocumentId: null,
+            lastError: null,
+            createdAt: input.now,
+            updatedAt: input.now,
+        })))
+            .run();
+    }
+    return rows.length;
+}
+async function queueResetAttachmentUploads(input) {
+    for (const attachmentBatch of remoteResetBatches(input.attachmentUploads)) {
+        await input.tx
+            .insert(documentPendingAttachments)
+            .values(attachmentBatch.map((attachment) => ({
+            ...attachment,
+            createdAt: input.now,
+        })))
+            .run();
+        await input.tx
+            .delete(documentAttachmentBlobProjection)
+            .where(or(...attachmentBatch.map((attachment) => and(eq(documentAttachmentBlobProjection.localId, attachment.localId), eq(documentAttachmentBlobProjection.slotId, attachment.slotId)))))
+            .run();
+    }
+}
+async function clearRemoteSyncStateInTransaction(input) {
+    const now = new Date().toISOString();
+    const { snapshot } = input;
+    await clearScopedRemoteRows({
+        attachmentUploads: input.plans.attachmentUploads,
+        organizationId: input.reset.organizationId,
+        snapshot,
+        tx: input.tx,
+    });
+    await resetRemoteColumns({ now, reset: input.reset, snapshot, tx: input.tx });
+    await queueResetDocumentUpdates({
+        documentUpdates: input.plans.documentUpdates,
+        now,
+        tx: input.tx,
+    });
+    const queuedContainerCreateCount = await queueResetContainerCreates({
+        now,
+        reset: input.reset,
+        snapshot,
+        tx: input.tx,
+    });
+    await queueResetAttachmentUploads({
+        attachmentUploads: input.plans.attachmentUploads,
+        now,
+        tx: input.tx,
+    });
+    return {
+        clearedContainerCreateIntentCount: snapshot.clearedContainerCreateIntentCount,
+        clearedContainerMoveIntentCount: snapshot.clearedContainerMoveIntentCount,
+        clearedDocumentMoveIntentCount: snapshot.clearedDocumentMoveIntentCount,
+        clearedPrincipalPolicyCount: snapshot.clearedPrincipalPolicyCount,
+        clearedSyncCursorCount: snapshot.clearedSyncCursorCount,
+        queuedAttachmentUploadCount: input.plans.attachmentUploads.length,
+        queuedContainerCreateCount,
+        queuedDocumentUpdateCount: input.plans.documentUpdates.length,
+        resetContainerCount: snapshot.containerRows.length,
+        resetDocumentCount: snapshot.documentRows.length,
+    };
+}
+export async function clearRemoteSyncState(execSql, reset, canCommit) {
+    return runOrganizationPresentationReset(execSql, reset.organizationId, async () => {
+        await ensureSqlTables(execSql, clientSqlTables);
+        const runtime = getClientSQLitePersistenceRuntime(execSql);
+        const resetInTransaction = async (tx) => {
+            if (canCommit && !canCommit()) {
+                throw new Error("Remote sync reset aborted: session identity changed");
+            }
+            const snapshot = await readRemoteSyncStateSnapshot(tx, reset.organizationId);
+            const plans = await buildResetPlans(tx, snapshot.documentRows);
+            return clearRemoteSyncStateInTransaction({
+                plans,
+                reset,
+                snapshot,
+                tx,
+            });
+        };
+        if (!canCommit) {
+            return runtime.transaction(resetInTransaction);
+        }
+        const outcome = await runtime.guardedTransaction(resetInTransaction, canCommit);
+        if (!outcome.committed || !outcome.result) {
+            throw new Error("Remote sync reset aborted: session identity changed");
+        }
+        return outcome.result;
+    });
+}
+//# sourceMappingURL=remoteReset.js.map

package/workflows/sync/remoteReset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteReset.js","sourceRoot":"","sources":["remoteReset.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,8CAA8C,EAAE,MAAM,uEAAuE,CAAC;AACvI,OAAO,EACL,yCAAyC,EACzC,wCAAwC,GACzC,MAAM,0EAA0E,CAAC;AAClF,OAAO,EAAE,2CAA2C,EAAE,MAAM,yDAAyD,CAAC;AACtH,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,EACpC,mCAAmC,EACnC,iCAAiC,EACjC,qCAAqC,EACrC,2BAA2B,EAC3B,gCAAgC,EAChC,+BAA+B,EAC/B,0BAA0B,GAC3B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,4BAA4B,EAC5B,oBAAoB,EACpB,UAAU,EACV,gCAAgC,EAChC,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,SAAS,EACT,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,iCAAiC,GAClC,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,gCAAgC,EAAE,MAAM,sDAAsD,CAAC;AACxG,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EACL,eAAe,GAGhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAGL,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAO5B,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AAexD,KAAK,UAAU,iCAAiC,CAC9C,EAAgC,EAChC,cAAsB;IAEtB,KAAK,MAAM,KAAK,IAAI;QAClB,+BAA+B;QAC/B,8BAA8B;QAC9B,oCAAoC;QACpC,iCAAiC;QACjC,qCAAqC;QACrC,mCAAmC;QACnC,2BAA2B;QAC3B,gCAAgC;QAChC,+BAA+B;QAC/B,0BAA0B;QAC1B,+BAA+B;KACvB,EAAE,CAAC;QACX,MAAM,EAAE;aACL,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;aAC/C,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AASD,KAAK,UAAU,wBAAwB,CACrC,KAA4B;IAE5B,KAAK,MAAM,cAAc,IAAI,kBAAkB,CAC7C,KAAK,CAAC,QAAQ,CAAC,YAAY,CAC5B,EAAE,CAAC;QACF,MAAM,yCAAyC,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAC1E,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,oBAAoB,CAAC;aAC5B,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;aAChE,GAAG,EAAE,CAAC;QACT,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,sBAAsB,CAAC;aAC9B,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;aAClE,GAAG,EAAE,CAAC;QACT,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,4BAA4B,CAAC;aACpC,KAAK,CAAC,OAAO,CAAC,4BAA4B,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;aACxE,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,KAA4B;IAE5B,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IAC/B,KAAK,MAAM,eAAe,IAAI,kBAAkB,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1E,MAAM,wCAAwC,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,4BAA4B,CAAC;QACjC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,EAAE;KACH,CAAC,CAAC;IACH,KAAK,MAAM,YAAY,IAAI,kBAAkB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzE,MAAM,EAAE;aACL,MAAM,CAAC,yBAAyB,CAAC;aACjC,KAAK,CACJ,OAAO,CACL,yBAAyB,CAAC,QAAQ,EAClC,EAAE;aACC,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;aACtC,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAC7D,CACF;aACA,GAAG,EAAE,CAAC;QACT,MAAM,EAAE;aACL,MAAM,CAAC,mBAAmB,CAAC;aAC3B,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;aACzD,GAAG,EAAE,CAAC;IACX,CAAC;IACD,KAAK,MAAM,aAAa,IAAI,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACtE,MAAM,EAAE;aACL,MAAM,CAAC,sBAAsB,CAAC;aAC9B,KAAK,CACJ,EAAE,CACA,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC3B,GAAG,CACD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAC/C,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAChD,CACF,CACF,CACF;aACA,GAAG,EAAE,CAAC;QACT,MAAM,EAAE;aACL,MAAM,CAAC,oBAAoB,CAAC;aAC5B,KAAK,CACJ,EAAE,CACA,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC3B,GAAG,CACD,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAC7C,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAC9C,CACF,CACF,CACF;aACA,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,KAA4B;IAE5B,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACrC,MAAM,iCAAiC,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI;QAClB,wBAAwB;QACxB,4BAA4B;KACpB,EAAE,CAAC;QACX,MAAM,EAAE;aACL,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;aAC/C,GAAG,EAAE,CAAC;IACX,CAAC;IACD,MAAM,2CAA2C,CAAC,EAAE,EAAE;QACpD,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;QACzC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;KAC3C,CAAC,CAAC;IACH,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,2BAA2B,CAAC;QAChC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;QACzC,EAAE;KACH,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,KAKjC;IACC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,EAAE;aACL,MAAM,CAAC,SAAS,CAAC;aACjB,GAAG,CAAC;YACH,WAAW,EAAE,CAAC;YACd,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;YACtB,UAAU,EAAE,IAAI;YAChB,kBAAkB,EAAE,IAAI;YACxB,sBAAsB,EAAE,IAAI;YAC5B,aAAa,EAAE,IAAI;YACnB,gBAAgB,EAAE,IAAI;YACtB,kBAAkB,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,kBAAkB;YAC5D,SAAS,EAAE,GAAG;SACf,CAAC;aACD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAClC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CACnC,CACF;aACA,GAAG,EAAE,CAAC;IACX,CAAC;IACD,KAAK,MAAM,YAAY,IAAI,kBAAkB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzE,MAAM,EAAE;aACL,MAAM,CAAC,kBAAkB,CAAC;aAC1B,GAAG,CAAC;YACH,UAAU,EAAE,IAAI;YAChB,cAAc,EACZ,KAAK,CAAC,WAAW,EAAE,cAAc,IAAI,KAAK,CAAC,cAAc;SAC5D,CAAC;aACD,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;aACxD,GAAG,EAAE,CAAC;IACX,CAAC;IACD,wEAAwE;IACxE,4CAA4C;IAC5C,KAAK,MAAM,YAAY,IAAI,KAAK,CAAC,WAAW;QAC1C,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC3C,CAAC,CAAC,EAAE,EAAE,CAAC;QACP,MAAM,8CAA8C,CAAC,EAAE,EAAE;YACvD,YAAY;YACZ,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,YAAY,EAAE,GAAG;SAClB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QACzC,MAAM,EAAE;aACL,MAAM,CAAC,UAAU,CAAC;aAClB,GAAG,CAAC;YACH,kBAAkB,EAAE,IAAI;YACxB,cAAc,EACZ,KAAK,CAAC,WAAW,EAAE,cAAc,IAAI,KAAK,CAAC,cAAc;YAC3D,QAAQ,EACN,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI;gBACxC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,eAAe;gBACnC,CAAC,CAAC,GAAG,CAAC,QAAQ;YAClB,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,IAAI;YACrB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,cAAc,EAAE,GAAG;SACpB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;aAChC,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,KAIxC;IACC,KAAK,MAAM,WAAW,IAAI,kBAAkB,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QACpE,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,sBAAsB,CAAC;aAC9B,MAAM,CACL,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC3B,GAAG,MAAM;YACT,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,SAAS,EAAE,KAAK,CAAC,GAAG;SACrB,CAAC,CAAC,CACJ;aACA,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAKzC;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACxD,MAAM,QAAQ,GACZ,GAAG,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,eAAe,IAAI,IAAI,CAAC;QACnE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAChC,KAAK,MAAM,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,sBAAsB,CAAC;aAC9B,MAAM,CACL,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACrB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,WAAW,EAAE,GAAG,CAAC,EAAE;YACnB,iBAAiB,EAAE,GAAG,CAAC,QAAQ;YAC/B,UAAU,EAAE,4BAA4B;YACxC,UAAU,EAAE,SAAkB;YAC9B,iBAAiB,EAAE,IAAI;YACvB,6BAA6B,EAAE,IAAI;YACnC,wBAAwB,EAAE,IAAI;YAC9B,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,KAAK,CAAC,GAAG;YACpB,SAAS,EAAE,KAAK,CAAC,GAAG;SACrB,CAAC,CAAC,CACJ;aACA,GAAG,EAAE,CAAC;IACX,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAI1C;IACC,KAAK,MAAM,eAAe,IAAI,kBAAkB,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1E,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,0BAA0B,CAAC;aAClC,MAAM,CACL,eAAe,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACnC,GAAG,UAAU;YACb,SAAS,EAAE,KAAK,CAAC,GAAG;SACrB,CAAC,CAAC,CACJ;aACA,GAAG,EAAE,CAAC;QACT,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,gCAAgC,CAAC;aACxC,KAAK,CACJ,EAAE,CACA,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACpC,GAAG,CACD,EAAE,CAAC,gCAAgC,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,EAChE,EAAE,CAAC,gCAAgC,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAC/D,CACF,CACF,CACF;aACA,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iCAAiC,CAAC,KAKhD;IACC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,MAAM,qBAAqB,CAAC;QAC1B,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,iBAAiB;QAChD,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;QAC1C,QAAQ;QACR,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,MAAM,kBAAkB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,yBAAyB,CAAC;QAC9B,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,eAAe;QAC5C,GAAG;QACH,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,MAAM,0BAA0B,GAAG,MAAM,0BAA0B,CAAC;QAClE,GAAG;QACH,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ;QACR,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,MAAM,2BAA2B,CAAC;QAChC,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,iBAAiB;QAChD,GAAG;QACH,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,OAAO;QACL,iCAAiC,EAC/B,QAAQ,CAAC,iCAAiC;QAC5C,+BAA+B,EAAE,QAAQ,CAAC,+BAA+B;QACzE,8BAA8B,EAAE,QAAQ,CAAC,8BAA8B;QACvE,2BAA2B,EAAE,QAAQ,CAAC,2BAA2B;QACjE,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;QACvD,2BAA2B,EAAE,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM;QACjE,0BAA0B;QAC1B,yBAAyB,EAAE,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM;QAC7D,mBAAmB,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM;QAClD,kBAAkB,EAAE,QAAQ,CAAC,YAAY,CAAC,MAAM;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAgB,EAChB,KAAuB,EACvB,SAAuC;IAEvC,OAAO,gCAAgC,CACrC,OAAO,EACP,KAAK,CAAC,cAAc,EACpB,KAAK,IAAI,EAAE;QACT,MAAM,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,kBAAkB,GAAG,KAAK,EAAE,EAAgC,EAAE,EAAE;YACpE,IAAI,SAAS,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CACb,qDAAqD,CACtD,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAChD,EAAE,EACF,KAAK,CAAC,cAAc,CACrB,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC/D,OAAO,iCAAiC,CAAC;gBACvC,KAAK;gBACL,KAAK;gBACL,QAAQ;gBACR,EAAE;aACH,CAAC,CAAC;QACL,CAAC,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAC9C,kBAAkB,EAClB,SAAS,CACV,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import { and, eq, inArray, or } from \"drizzle-orm\";\nimport { recordSupersededContainerBindingsInTransaction } from \"../../data/persistence/container-contents/supersededContainerBindings\";\nimport {\n  deleteDocumentPlacementRowsByContainerIds,\n  deleteDocumentPlacementRowsByDocumentIds,\n} from \"../../data/persistence/containers/documentContainerProjectionPersistence\";\nimport { clearDocumentDiscoveryEvidenceOnRemoteReset } from \"../../data/persistence/documents/documentDiscoveryReset\";\nimport { documentIntentLinkTargets } from \"../../data/sqlite/documentPlacementIntentSchema\";\nimport {\n  organizationDataUsageCategories,\n  organizationDataUsageSnapshots,\n} from \"../../data/sqlite/organizationDataUsageSchema\";\nimport {\n  organizationPresentationDenials,\n  organizationReadModelContainerGrants,\n  organizationReadModelDirectoryUsers,\n  organizationReadModelGroupMembers,\n  organizationReadModelGroupMemberships,\n  organizationReadModelGroups,\n  organizationReadModelPolicyHeads,\n  organizationReadModelRequesters,\n  organizationReadModelState,\n} from \"../../data/sqlite/organizationReadModelSchema\";\nimport {\n  clientSqlTables,\n  containerCreateIntents,\n  containerHydrationTombstones,\n  containerMoveIntents,\n  containers,\n  documentAttachmentBlobProjection,\n  documentMoveIntents,\n  documentPendingAttachments,\n  documentPendingUpdates,\n  documentProjection,\n  documentSyncFailures,\n  documents,\n  dormantContainerMetadata,\n  dormantMetadataSweepRequests,\n} from \"../../data/sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../data/sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport { ensureSqlTables } from \"../../data/sqlite/sqlTableSchema\";\nimport { runOrganizationPresentationReset } from \"../organizations/organizationPresentationAccessState\";\nimport { clearResetPendingAttachments } from \"./remoteResetAttachments\";\nimport { remoteResetBatches } from \"./remoteResetBatches\";\nimport { clearRemoteResetSyncCursors } from \"./remoteResetCursorScope\";\nimport {\n  buildResetPlans,\n  type ResetAttachmentUpload,\n  type ResetDocumentUpdate,\n} from \"./remoteResetPlans\";\nimport { clearRemoteResetPrincipalRows } from \"./remoteResetPrincipalScope\";\nimport {\n  type RemoteResetInput,\n  type RemoteSyncStateSnapshot,\n  readRemoteSyncStateSnapshot,\n} from \"./remoteResetScope\";\n\nexport type {\n  RemoteResetInput,\n  RemoteResetReplacement,\n} from \"./remoteResetScope\";\n\nconst CONTAINER_CREATE_INTENT_TYPE = \"container.create\";\n\nexport interface ClearRemoteSyncStateResult {\n  readonly clearedContainerCreateIntentCount: number;\n  readonly clearedContainerMoveIntentCount: number;\n  readonly clearedDocumentMoveIntentCount: number;\n  readonly clearedPrincipalPolicyCount: number;\n  readonly clearedSyncCursorCount: number;\n  readonly queuedAttachmentUploadCount: number;\n  readonly queuedContainerCreateCount: number;\n  readonly queuedDocumentUpdateCount: number;\n  readonly resetContainerCount: number;\n  readonly resetDocumentCount: number;\n}\n\nasync function clearOrganizationPresentationRows(\n  tx: ClientSQLiteTransactionScope,\n  organizationId: string,\n): Promise<void> {\n  for (const table of [\n    organizationDataUsageCategories,\n    organizationDataUsageSnapshots,\n    organizationReadModelContainerGrants,\n    organizationReadModelGroupMembers,\n    organizationReadModelGroupMemberships,\n    organizationReadModelDirectoryUsers,\n    organizationReadModelGroups,\n    organizationReadModelPolicyHeads,\n    organizationReadModelRequesters,\n    organizationReadModelState,\n    organizationPresentationDenials,\n  ] as const) {\n    await tx\n      .delete(table)\n      .where(eq(table.organizationId, organizationId))\n      .run();\n  }\n}\n\ninterface ScopedRemoteRowsInput {\n  attachmentUploads: readonly ResetAttachmentUpload[];\n  organizationId: string;\n  snapshot: RemoteSyncStateSnapshot;\n  tx: ClientSQLiteTransactionScope;\n}\n\nasync function clearScopedContainerRows(\n  input: ScopedRemoteRowsInput,\n): Promise<void> {\n  for (const containerBatch of remoteResetBatches(\n    input.snapshot.containerIds,\n  )) {\n    await deleteDocumentPlacementRowsByContainerIds(input.tx, containerBatch);\n    await input.tx\n      .delete(containerMoveIntents)\n      .where(inArray(containerMoveIntents.containerId, containerBatch))\n      .run();\n    await input.tx\n      .delete(containerCreateIntents)\n      .where(inArray(containerCreateIntents.containerId, containerBatch))\n      .run();\n    await input.tx\n      .delete(containerHydrationTombstones)\n      .where(inArray(containerHydrationTombstones.containerId, containerBatch))\n      .run();\n  }\n}\n\nasync function clearScopedDocumentRows(\n  input: ScopedRemoteRowsInput,\n): Promise<void> {\n  const { snapshot, tx } = input;\n  for (const documentIdBatch of remoteResetBatches(snapshot.oldDocumentIds)) {\n    await deleteDocumentPlacementRowsByDocumentIds(tx, documentIdBatch);\n  }\n  await clearResetPendingAttachments({\n    attachmentUploads: input.attachmentUploads,\n    documentLocalIds: snapshot.documentLocalIds,\n    tx,\n  });\n  for (const localIdBatch of remoteResetBatches(snapshot.documentLocalIds)) {\n    await tx\n      .delete(documentIntentLinkTargets)\n      .where(\n        inArray(\n          documentIntentLinkTargets.intentId,\n          tx\n            .select({ id: documentMoveIntents.id })\n            .from(documentMoveIntents)\n            .where(inArray(documentMoveIntents.localId, localIdBatch)),\n        ),\n      )\n      .run();\n    await tx\n      .delete(documentMoveIntents)\n      .where(inArray(documentMoveIntents.localId, localIdBatch))\n      .run();\n  }\n  for (const documentBatch of remoteResetBatches(snapshot.documentRows)) {\n    await tx\n      .delete(documentPendingUpdates)\n      .where(\n        or(\n          ...documentBatch.map((row) =>\n            and(\n              eq(documentPendingUpdates.appKind, row.appKind),\n              eq(documentPendingUpdates.localId, row.localId),\n            ),\n          ),\n        ),\n      )\n      .run();\n    await tx\n      .delete(documentSyncFailures)\n      .where(\n        or(\n          ...documentBatch.map((row) =>\n            and(\n              eq(documentSyncFailures.appKind, row.appKind),\n              eq(documentSyncFailures.localId, row.localId),\n            ),\n          ),\n        ),\n      )\n      .run();\n  }\n}\n\nasync function clearScopedRemoteRows(\n  input: ScopedRemoteRowsInput,\n): Promise<void> {\n  const { organizationId, tx } = input;\n  await clearOrganizationPresentationRows(tx, organizationId);\n  for (const table of [\n    dormantContainerMetadata,\n    dormantMetadataSweepRequests,\n  ] as const) {\n    await tx\n      .delete(table)\n      .where(eq(table.organizationId, organizationId))\n      .run();\n  }\n  await clearDocumentDiscoveryEvidenceOnRemoteReset(tx, {\n    containerIds: input.snapshot.containerIds,\n    documentIds: input.snapshot.oldDocumentIds,\n  });\n  await clearRemoteResetPrincipalRows(input);\n  await clearScopedContainerRows(input);\n  await clearScopedDocumentRows(input);\n  await clearRemoteResetSyncCursors({\n    containerIds: input.snapshot.containerIds,\n    tx,\n  });\n}\n\nasync function resetRemoteColumns(input: {\n  now: string;\n  reset: RemoteResetInput;\n  snapshot: RemoteSyncStateSnapshot;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  const { now, reset, snapshot, tx } = input;\n  for (const row of snapshot.documentRows) {\n    await tx\n      .update(documents)\n      .set({\n        accessEpoch: 1,\n        accessStateHash: null,\n        contentKeyBundle: null,\n        documentId: null,\n        documentKekTargets: null,\n        documentManifestBundle: null,\n        lastCommitLsn: null,\n        pullContinuation: null,\n        recoveryDocumentId: row.documentId ?? row.recoveryDocumentId,\n        updatedAt: now,\n      })\n      .where(\n        and(\n          eq(documents.appKind, row.appKind),\n          eq(documents.localId, row.localId),\n        ),\n      )\n      .run();\n  }\n  for (const localIdBatch of remoteResetBatches(snapshot.documentLocalIds)) {\n    await tx\n      .update(documentProjection)\n      .set({\n        documentId: null,\n        organizationId:\n          reset.replacement?.organizationId ?? reset.organizationId,\n      })\n      .where(inArray(documentProjection.localId, localIdBatch))\n      .run();\n  }\n  // Replacement re-homes folders under their ids; the purged organization\n  // can never bind them again on this device.\n  for (const containerIds of reset.replacement\n    ? remoteResetBatches(snapshot.containerIds)\n    : []) {\n    await recordSupersededContainerBindingsInTransaction(tx, {\n      containerIds,\n      organizationId: reset.organizationId,\n      supersededAt: now,\n    });\n  }\n  for (const row of snapshot.containerRows) {\n    await tx\n      .update(containers)\n      .set({\n        metadataDocumentId: null,\n        organizationId:\n          reset.replacement?.organizationId ?? reset.organizationId,\n        parentId:\n          reset.replacement && row.parentId === null\n            ? reset.replacement.rootContainerId\n            : row.parentId,\n        serverCreatedAt: null,\n        serverUpdatedAt: null,\n        ...(reset.replacement ? { systemSlot: null } : {}),\n        localUpdatedAt: now,\n      })\n      .where(eq(containers.id, row.id))\n      .run();\n  }\n}\n\nasync function queueResetDocumentUpdates(input: {\n  documentUpdates: readonly ResetDocumentUpdate[];\n  now: string;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  for (const updateBatch of remoteResetBatches(input.documentUpdates)) {\n    await input.tx\n      .insert(documentPendingUpdates)\n      .values(\n        updateBatch.map((update) => ({\n          ...update,\n          id: crypto.randomUUID(),\n          createdAt: input.now,\n        })),\n      )\n      .run();\n  }\n}\n\nasync function queueResetContainerCreates(input: {\n  now: string;\n  reset: RemoteResetInput;\n  snapshot: RemoteSyncStateSnapshot;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<number> {\n  const rows = input.snapshot.containerRows.flatMap((row) => {\n    const parentId =\n      row.parentId ?? input.reset.replacement?.rootContainerId ?? null;\n    return parentId ? [{ id: row.id, parentId }] : [];\n  });\n  if (rows.length === 0) return 0;\n  for (const rowBatch of remoteResetBatches(rows)) {\n    await input.tx\n      .insert(containerCreateIntents)\n      .values(\n        rowBatch.map((row) => ({\n          id: crypto.randomUUID(),\n          containerId: row.id,\n          parentContainerId: row.parentId,\n          intentType: CONTAINER_CREATE_INTENT_TYPE,\n          syncStatus: \"pending\" as const,\n          remoteContainerId: null,\n          remoteMetadataAccessStateHash: null,\n          remoteMetadataDocumentId: null,\n          lastError: null,\n          createdAt: input.now,\n          updatedAt: input.now,\n        })),\n      )\n      .run();\n  }\n  return rows.length;\n}\n\nasync function queueResetAttachmentUploads(input: {\n  attachmentUploads: readonly ResetAttachmentUpload[];\n  now: string;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  for (const attachmentBatch of remoteResetBatches(input.attachmentUploads)) {\n    await input.tx\n      .insert(documentPendingAttachments)\n      .values(\n        attachmentBatch.map((attachment) => ({\n          ...attachment,\n          createdAt: input.now,\n        })),\n      )\n      .run();\n    await input.tx\n      .delete(documentAttachmentBlobProjection)\n      .where(\n        or(\n          ...attachmentBatch.map((attachment) =>\n            and(\n              eq(documentAttachmentBlobProjection.localId, attachment.localId),\n              eq(documentAttachmentBlobProjection.slotId, attachment.slotId),\n            ),\n          ),\n        ),\n      )\n      .run();\n  }\n}\n\nasync function clearRemoteSyncStateInTransaction(input: {\n  plans: Awaited<ReturnType<typeof buildResetPlans>>;\n  reset: RemoteResetInput;\n  snapshot: RemoteSyncStateSnapshot;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<ClearRemoteSyncStateResult> {\n  const now = new Date().toISOString();\n  const { snapshot } = input;\n  await clearScopedRemoteRows({\n    attachmentUploads: input.plans.attachmentUploads,\n    organizationId: input.reset.organizationId,\n    snapshot,\n    tx: input.tx,\n  });\n  await resetRemoteColumns({ now, reset: input.reset, snapshot, tx: input.tx });\n  await queueResetDocumentUpdates({\n    documentUpdates: input.plans.documentUpdates,\n    now,\n    tx: input.tx,\n  });\n  const queuedContainerCreateCount = await queueResetContainerCreates({\n    now,\n    reset: input.reset,\n    snapshot,\n    tx: input.tx,\n  });\n  await queueResetAttachmentUploads({\n    attachmentUploads: input.plans.attachmentUploads,\n    now,\n    tx: input.tx,\n  });\n  return {\n    clearedContainerCreateIntentCount:\n      snapshot.clearedContainerCreateIntentCount,\n    clearedContainerMoveIntentCount: snapshot.clearedContainerMoveIntentCount,\n    clearedDocumentMoveIntentCount: snapshot.clearedDocumentMoveIntentCount,\n    clearedPrincipalPolicyCount: snapshot.clearedPrincipalPolicyCount,\n    clearedSyncCursorCount: snapshot.clearedSyncCursorCount,\n    queuedAttachmentUploadCount: input.plans.attachmentUploads.length,\n    queuedContainerCreateCount,\n    queuedDocumentUpdateCount: input.plans.documentUpdates.length,\n    resetContainerCount: snapshot.containerRows.length,\n    resetDocumentCount: snapshot.documentRows.length,\n  };\n}\n\nexport async function clearRemoteSyncState(\n  execSql: ExecSql,\n  reset: RemoteResetInput,\n  canCommit?: (() => boolean) | undefined,\n): Promise<ClearRemoteSyncStateResult> {\n  return runOrganizationPresentationReset(\n    execSql,\n    reset.organizationId,\n    async () => {\n      await ensureSqlTables(execSql, clientSqlTables);\n      const runtime = getClientSQLitePersistenceRuntime(execSql);\n      const resetInTransaction = async (tx: ClientSQLiteTransactionScope) => {\n        if (canCommit && !canCommit()) {\n          throw new Error(\n            \"Remote sync reset aborted: session identity changed\",\n          );\n        }\n        const snapshot = await readRemoteSyncStateSnapshot(\n          tx,\n          reset.organizationId,\n        );\n        const plans = await buildResetPlans(tx, snapshot.documentRows);\n        return clearRemoteSyncStateInTransaction({\n          plans,\n          reset,\n          snapshot,\n          tx,\n        });\n      };\n      if (!canCommit) {\n        return runtime.transaction(resetInTransaction);\n      }\n      const outcome = await runtime.guardedTransaction(\n        resetInTransaction,\n        canCommit,\n      );\n      if (!outcome.committed || !outcome.result) {\n        throw new Error(\"Remote sync reset aborted: session identity changed\");\n      }\n      return outcome.result;\n    },\n  );\n}\n"]}

package/workflows/sync/remoteResetAttachments.js

@@ -0,0 +1,26 @@
+import { inArray } from "drizzle-orm";
+import { queueDocumentAttachmentStorageKeys } from "../../data/persistence/documents/internal/orphanSideRows.js";
+import { documentPendingAttachments } from "../../data/sqlite/schema.js";
+import { remoteResetBatches } from "./remoteResetBatches.js";
+/** Delete reset-scoped pending rows without abandoning dropped local bytes. */
+export async function clearResetPendingAttachments(input) {
+    const requeuedKeys = new Set(input.attachmentUploads.map((attachment) => `${attachment.localId}\0${attachment.slotId}`));
+    for (const localIdBatch of remoteResetBatches(input.documentLocalIds)) {
+        const rows = await input.tx
+            .select({
+            localId: documentPendingAttachments.localId,
+            slotId: documentPendingAttachments.slotId,
+            storageKey: documentPendingAttachments.storageKey,
+        })
+            .from(documentPendingAttachments)
+            .where(inArray(documentPendingAttachments.localId, localIdBatch));
+        await queueDocumentAttachmentStorageKeys(input.tx, rows
+            .filter((row) => !requeuedKeys.has(`${row.localId}\0${row.slotId}`))
+            .map((row) => row.storageKey));
+        await input.tx
+            .delete(documentPendingAttachments)
+            .where(inArray(documentPendingAttachments.localId, localIdBatch))
+            .run();
+    }
+}
+//# sourceMappingURL=remoteResetAttachments.js.map

package/workflows/sync/remoteResetAttachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteResetAttachments.js","sourceRoot":"","sources":["remoteResetAttachments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,MAAM,0DAA0D,CAAC;AAC9G,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAEtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAIlD;IACC,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,KAAK,CAAC,iBAAiB,CAAC,GAAG,CACzB,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,EAAE,CAC9D,CACF,CAAC;IACF,KAAK,MAAM,YAAY,IAAI,kBAAkB,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,EAAE;aACxB,MAAM,CAAC;YACN,OAAO,EAAE,0BAA0B,CAAC,OAAO;YAC3C,MAAM,EAAE,0BAA0B,CAAC,MAAM;YACzC,UAAU,EAAE,0BAA0B,CAAC,UAAU;SAClD,CAAC;aACD,IAAI,CAAC,0BAA0B,CAAC;aAChC,KAAK,CAAC,OAAO,CAAC,0BAA0B,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QACpE,MAAM,kCAAkC,CACtC,KAAK,CAAC,EAAE,EACR,IAAI;aACD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;aACnE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAChC,CAAC;QACF,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,0BAA0B,CAAC;aAClC,KAAK,CAAC,OAAO,CAAC,0BAA0B,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;aAChE,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC","sourcesContent":["import { inArray } from \"drizzle-orm\";\nimport { queueDocumentAttachmentStorageKeys } from \"../../data/persistence/documents/internal/orphanSideRows\";\nimport { documentPendingAttachments } from \"../../data/sqlite/schema\";\nimport type { ClientSQLiteTransactionScope } from \"../../data/sqlite/sqlitePersistenceRuntime\";\nimport { remoteResetBatches } from \"./remoteResetBatches\";\nimport type { ResetAttachmentUpload } from \"./remoteResetPlans\";\n\n/** Delete reset-scoped pending rows without abandoning dropped local bytes. */\nexport async function clearResetPendingAttachments(input: {\n  readonly attachmentUploads: readonly ResetAttachmentUpload[];\n  readonly documentLocalIds: readonly string[];\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  const requeuedKeys = new Set(\n    input.attachmentUploads.map(\n      (attachment) => `${attachment.localId}\\0${attachment.slotId}`,\n    ),\n  );\n  for (const localIdBatch of remoteResetBatches(input.documentLocalIds)) {\n    const rows = await input.tx\n      .select({\n        localId: documentPendingAttachments.localId,\n        slotId: documentPendingAttachments.slotId,\n        storageKey: documentPendingAttachments.storageKey,\n      })\n      .from(documentPendingAttachments)\n      .where(inArray(documentPendingAttachments.localId, localIdBatch));\n    await queueDocumentAttachmentStorageKeys(\n      input.tx,\n      rows\n        .filter((row) => !requeuedKeys.has(`${row.localId}\\0${row.slotId}`))\n        .map((row) => row.storageKey),\n    );\n    await input.tx\n      .delete(documentPendingAttachments)\n      .where(inArray(documentPendingAttachments.localId, localIdBatch))\n      .run();\n  }\n}\n"]}

package/workflows/sync/remoteResetBatches.js

@@ -0,0 +1,13 @@
+// Keep bulk inserts, IN predicates, and expanded pair predicates comfortably
+// below SQLite's common 999-bind and expression-depth limits. Some queued rows
+// consume more than ten binds each, so one conservative size covers every
+// reset statement.
+export const REMOTE_RESET_SQL_BATCH_SIZE = 50;
+export function remoteResetBatches(values) {
+    const batches = [];
+    for (let offset = 0; offset < values.length; offset += REMOTE_RESET_SQL_BATCH_SIZE) {
+        batches.push(values.slice(offset, offset + REMOTE_RESET_SQL_BATCH_SIZE));
+    }
+    return batches;
+}
+//# sourceMappingURL=remoteResetBatches.js.map

package/workflows/sync/remoteResetBatches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteResetBatches.js","sourceRoot":"","sources":["remoteResetBatches.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,+EAA+E;AAC/E,0EAA0E;AAC1E,mBAAmB;AACnB,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAE9C,MAAM,UAAU,kBAAkB,CAChC,MAAoB;IAEpB,MAAM,OAAO,GAAU,EAAE,CAAC;IAC1B,KACE,IAAI,MAAM,GAAG,CAAC,EACd,MAAM,GAAG,MAAM,CAAC,MAAM,EACtB,MAAM,IAAI,2BAA2B,EACrC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,2BAA2B,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["// Keep bulk inserts, IN predicates, and expanded pair predicates comfortably\n// below SQLite's common 999-bind and expression-depth limits. Some queued rows\n// consume more than ten binds each, so one conservative size covers every\n// reset statement.\nexport const REMOTE_RESET_SQL_BATCH_SIZE = 50;\n\nexport function remoteResetBatches<T>(\n  values: readonly T[],\n): readonly (readonly T[])[] {\n  const batches: T[][] = [];\n  for (\n    let offset = 0;\n    offset < values.length;\n    offset += REMOTE_RESET_SQL_BATCH_SIZE\n  ) {\n    batches.push(values.slice(offset, offset + REMOTE_RESET_SQL_BATCH_SIZE));\n  }\n  return batches;\n}\n"]}

package/workflows/sync/remoteResetCursorScope.js

@@ -0,0 +1,44 @@
+import { and, eq, inArray, or } from "drizzle-orm";
+import { containerSyncLaneChecks, containerSyncWatermarks, } from "../../data/sqlite/schema.js";
+import { remoteResetBatches } from "./remoteResetBatches.js";
+const CONTAINER_DOCUMENTS_LANE = "container_documents";
+const CONTAINER_PARENT_LANE = "container_parent";
+// The API root feed lists every accessible organization. Its one cursor must
+// reset on any organization's purge; child feeds use globally unique IDs.
+const ROOT_LANE_ID = "root";
+const PARENT_LANE_PREFIX = "parent:";
+export function isRemoteResetSyncCursor(input) {
+    if (input.row.laneKind === CONTAINER_DOCUMENTS_LANE) {
+        return input.containerIds.has(input.row.laneId);
+    }
+    if (input.row.laneKind !== CONTAINER_PARENT_LANE)
+        return false;
+    if (input.row.laneId === ROOT_LANE_ID)
+        return true;
+    return (input.row.laneId.startsWith(PARENT_LANE_PREFIX) &&
+        input.containerIds.has(input.row.laneId.slice(PARENT_LANE_PREFIX.length)));
+}
+export async function clearRemoteResetSyncCursors(input) {
+    for (const table of [
+        containerSyncWatermarks,
+        containerSyncLaneChecks,
+    ]) {
+        await input.tx
+            .delete(table)
+            .where(and(eq(table.laneKind, CONTAINER_PARENT_LANE), eq(table.laneId, ROOT_LANE_ID)))
+            .run();
+    }
+    for (const containerBatch of remoteResetBatches(input.containerIds)) {
+        const parentLaneIds = containerBatch.map((containerId) => `${PARENT_LANE_PREFIX}${containerId}`);
+        for (const table of [
+            containerSyncWatermarks,
+            containerSyncLaneChecks,
+        ]) {
+            await input.tx
+                .delete(table)
+                .where(or(and(eq(table.laneKind, CONTAINER_PARENT_LANE), inArray(table.laneId, parentLaneIds)), and(eq(table.laneKind, CONTAINER_DOCUMENTS_LANE), inArray(table.laneId, containerBatch))))
+                .run();
+        }
+    }
+}
+//# sourceMappingURL=remoteResetCursorScope.js.map

package/workflows/sync/remoteResetCursorScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteResetCursorScope.js","sourceRoot":"","sources":["remoteResetCursorScope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AACvD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AACjD,6EAA6E;AAC7E,0EAA0E;AAC1E,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAOrC,MAAM,UAAU,uBAAuB,CAAC,KAGvC;IACC,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,wBAAwB,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,qBAAqB;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,CACL,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAC/C,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAGjD;IACC,KAAK,MAAM,KAAK,IAAI;QAClB,uBAAuB;QACvB,uBAAuB;KACf,EAAE,CAAC;QACX,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,qBAAqB,CAAC,EACzC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAC/B,CACF;aACA,GAAG,EAAE,CAAC;IACX,CAAC;IACD,KAAK,MAAM,cAAc,IAAI,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACpE,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CACtC,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,kBAAkB,GAAG,WAAW,EAAE,CACvD,CAAC;QACF,KAAK,MAAM,KAAK,IAAI;YAClB,uBAAuB;YACvB,uBAAuB;SACf,EAAE,CAAC;YACX,MAAM,KAAK,CAAC,EAAE;iBACX,MAAM,CAAC,KAAK,CAAC;iBACb,KAAK,CACJ,EAAE,CACA,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,qBAAqB,CAAC,EACzC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CACrC,EACD,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,wBAAwB,CAAC,EAC5C,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CACtC,CACF,CACF;iBACA,GAAG,EAAE,CAAC;QACX,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import { and, eq, inArray, or } from \"drizzle-orm\";\nimport {\n  containerSyncLaneChecks,\n  containerSyncWatermarks,\n} from \"../../data/sqlite/schema\";\nimport type { ClientSQLiteTransactionScope } from \"../../data/sqlite/sqlitePersistenceRuntime\";\nimport { remoteResetBatches } from \"./remoteResetBatches\";\n\nconst CONTAINER_DOCUMENTS_LANE = \"container_documents\";\nconst CONTAINER_PARENT_LANE = \"container_parent\";\n// The API root feed lists every accessible organization. Its one cursor must\n// reset on any organization's purge; child feeds use globally unique IDs.\nconst ROOT_LANE_ID = \"root\";\nconst PARENT_LANE_PREFIX = \"parent:\";\n\ninterface SyncCursorRow {\n  readonly laneId: string;\n  readonly laneKind: string;\n}\n\nexport function isRemoteResetSyncCursor(input: {\n  containerIds: ReadonlySet<string>;\n  row: SyncCursorRow;\n}): boolean {\n  if (input.row.laneKind === CONTAINER_DOCUMENTS_LANE) {\n    return input.containerIds.has(input.row.laneId);\n  }\n  if (input.row.laneKind !== CONTAINER_PARENT_LANE) return false;\n  if (input.row.laneId === ROOT_LANE_ID) return true;\n  return (\n    input.row.laneId.startsWith(PARENT_LANE_PREFIX) &&\n    input.containerIds.has(input.row.laneId.slice(PARENT_LANE_PREFIX.length))\n  );\n}\n\nexport async function clearRemoteResetSyncCursors(input: {\n  containerIds: readonly string[];\n  tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  for (const table of [\n    containerSyncWatermarks,\n    containerSyncLaneChecks,\n  ] as const) {\n    await input.tx\n      .delete(table)\n      .where(\n        and(\n          eq(table.laneKind, CONTAINER_PARENT_LANE),\n          eq(table.laneId, ROOT_LANE_ID),\n        ),\n      )\n      .run();\n  }\n  for (const containerBatch of remoteResetBatches(input.containerIds)) {\n    const parentLaneIds = containerBatch.map(\n      (containerId) => `${PARENT_LANE_PREFIX}${containerId}`,\n    );\n    for (const table of [\n      containerSyncWatermarks,\n      containerSyncLaneChecks,\n    ] as const) {\n      await input.tx\n        .delete(table)\n        .where(\n          or(\n            and(\n              eq(table.laneKind, CONTAINER_PARENT_LANE),\n              inArray(table.laneId, parentLaneIds),\n            ),\n            and(\n              eq(table.laneKind, CONTAINER_DOCUMENTS_LANE),\n              inArray(table.laneId, containerBatch),\n            ),\n          ),\n        )\n        .run();\n    }\n  }\n}\n"]}

package/workflows/sync/remoteResetPlans.d.ts

@@ -0,0 +1,26 @@
+import type { ClientSQLiteTransactionScope } from "../../data/sqlite/sqlitePersistenceRuntime.js";
+export interface ResetDocumentUpdate {
+    readonly appKind: string;
+    readonly localId: string;
+    readonly updateData: string;
+    readonly partialStartVersionVector: string;
+    readonly partialEndVersionVector: string;
+    readonly sourceVersionVector: string | null;
+}
+export interface ResetAttachmentUpload {
+    readonly byteLength: number;
+    readonly contentSha256: string;
+    readonly localId: string;
+    readonly mimeType: string | null;
+    readonly name: string;
+    readonly slotId: string;
+    readonly storageKey: string;
+}
+export interface ResetDocumentScope {
+    readonly appKind: string;
+    readonly localId: string;
+}
+export declare function buildResetPlans(db: ClientSQLiteTransactionScope, documentScopes?: readonly ResetDocumentScope[]): Promise<{
+    readonly attachmentUploads: ResetAttachmentUpload[];
+    readonly documentUpdates: ResetDocumentUpdate[];
+}>;