@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/data/sqlite/documentPendingUpdatePersistence.js

@@ -0,0 +1,169 @@
+import { and, asc, eq, lt, sql } from "drizzle-orm";
+import { documentHistoryUpdates, documentPendingUpdates, documents, } from "./schema.js";
+import { getClientSQLitePersistenceRuntime } from "./sqlitePersistenceRuntime.js";
+function mapSelectedPendingUpdate(row) {
+    return {
+        id: String(row.id ?? ""),
+        updateData: row.updateData,
+        partialStartVersionVector: row.partialStartVersionVector,
+        partialEndVersionVector: row.partialEndVersionVector,
+        sourceVersionVector: row.sourceVersionVector,
+        rekeyCount: row.rekeyCount,
+    };
+}
+export async function listDocumentPendingUpdates(execSql, scope) {
+    const { db } = getClientSQLitePersistenceRuntime(execSql);
+    const rows = await db
+        .select({
+        id: documentPendingUpdates.id,
+        updateData: documentPendingUpdates.updateData,
+        partialStartVersionVector: documentPendingUpdates.partialStartVersionVector,
+        partialEndVersionVector: documentPendingUpdates.partialEndVersionVector,
+        sourceVersionVector: documentPendingUpdates.sourceVersionVector,
+        rekeyCount: documentPendingUpdates.rekeyCount,
+    })
+        .from(documentPendingUpdates)
+        .where(and(eq(documentPendingUpdates.appKind, scope.appKind), eq(documentPendingUpdates.localId, scope.localId)))
+        .orderBy(asc(documentPendingUpdates.createdAt), asc(sql `rowid`));
+    return rows.map(mapSelectedPendingUpdate);
+}
+function pendingUpdateRow(scope, pendingUpdate, createdAt, id = crypto.randomUUID()) {
+    return {
+        id,
+        appKind: scope.appKind,
+        localId: scope.localId,
+        updateData: pendingUpdate.updateData,
+        partialStartVersionVector: pendingUpdate.partialStartVersionVector,
+        partialEndVersionVector: pendingUpdate.partialEndVersionVector,
+        sourceVersionVector: pendingUpdate.sourceVersionVector ?? null,
+        createdAt,
+    };
+}
+export async function enqueueDocumentPendingUpdate(execSql, scope, pendingUpdate) {
+    const id = crypto.randomUUID();
+    await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {
+        await db
+            .insert(documentPendingUpdates)
+            .values(pendingUpdateRow(scope, pendingUpdate, new Date().toISOString(), id))
+            .run();
+    });
+    return id;
+}
+/**
+ * Enqueue an outgoing update AND append it to the durable-history tail in a
+ * single transaction. Serialization alone is not enough: a crash between
+ * separate inserts could leave the op restorable from history while missing
+ * from the outgoing queue, and a null-marker restore would then classify it
+ * as covered and never send it.
+ */
+export async function enqueueDocumentPendingUpdateWithHistory(execSql, scope, pendingUpdate, options) {
+    const createdAt = new Date().toISOString();
+    return getClientSQLitePersistenceRuntime(execSql).transaction(async (tx) => {
+        if (options) {
+            const matchingDocuments = await tx
+                .select({ localId: documents.localId })
+                .from(documents)
+                .where(and(eq(documents.appKind, scope.appKind), eq(documents.localId, scope.localId), sql `${documents.documentId} IS ${options.expectedDocumentId}`, eq(documents.recoveryGeneration, options.expectedRecoveryGeneration)))
+                .limit(1);
+            if (matchingDocuments.length === 0) {
+                return null;
+            }
+        }
+        return insertDocumentPendingUpdateWithHistoryInTransaction({
+            createdAt,
+            pendingUpdate,
+            scope,
+            tx,
+        });
+    }, { behavior: "immediate" });
+}
+export async function insertDocumentPendingUpdateWithHistoryInTransaction(input) {
+    const id = crypto.randomUUID();
+    await input.tx
+        .insert(documentHistoryUpdates)
+        .values({
+        id: crypto.randomUUID(),
+        appKind: input.scope.appKind,
+        localId: input.scope.localId,
+        updateData: input.pendingUpdate.updateData,
+        origin: "local",
+        createdAt: input.createdAt,
+    })
+        .run();
+    await input.tx
+        .insert(documentPendingUpdates)
+        .values(pendingUpdateRow(input.scope, input.pendingUpdate, input.createdAt, id))
+        .run();
+    return id;
+}
+/**
+ * Assign a fresh id to a pending update, keeping every other column. A lost
+ * sync ack leaves the server holding the update under the original id with
+ * ciphertext a rebuilt submission can never reproduce (each rebuild encrypts
+ * with a fresh IV), so the id is permanently poisoned: every resubmission
+ * 409s and the whole outgoing batch rolls back. Re-keying lets the next sync
+ * pass submit the same ops under a conflict-free id; the server-side copy is
+ * harmless because CRDT update import is idempotent.
+ *
+ * Returns null when no row carries the id, so callers never report progress
+ * for a row that lives in some other queue (or nowhere). The UPDATE's own
+ * RETURNING row is the progress signal — a pre-flight SELECT would race a
+ * second tab sharing the SQLite file, which can settle-delete the row between
+ * the read and the write and turn "rekeyed" into a spurious re-arm.
+ *
+ * The persisted per-row bound is enforced here as well: a row already at
+ * MAX_PENDING_UPDATE_REKEYS is left untouched and reported as no progress.
+ * The in-memory lane counter bounds a busy-loop within one session; this
+ * bound survives restarts, so a poisoned row cannot re-key forever at three
+ * passes per launch.
+ */
+export const MAX_PENDING_UPDATE_REKEYS = 5;
+/**
+ * Reset the durable re-key budget for every pending update in a scope. The
+ * cap exists to stop a server that keeps conflicting fresh ids from driving
+ * a network-speed loop — but a budget burned during an unrelated outage
+ * (e.g. yesterday's stale-bundle deadlock 409ing every submit) should not be
+ * terminal forever. An explicit manual retry is the deliberate, rate-limited
+ * signal that conditions changed, so it gets a fresh budget.
+ */
+export async function resetDocumentPendingUpdateRekeyBudget(execSql, scope) {
+    await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {
+        await db
+            .update(documentPendingUpdates)
+            .set({ rekeyCount: 0 })
+            .where(and(eq(documentPendingUpdates.appKind, scope.appKind), eq(documentPendingUpdates.localId, scope.localId)));
+    });
+}
+export async function rekeyDocumentPendingUpdate(execSql, id) {
+    const nextId = crypto.randomUUID();
+    let rekeyed = false;
+    await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {
+        const updated = await db
+            .update(documentPendingUpdates)
+            .set({
+            id: nextId,
+            rekeyCount: sql `${documentPendingUpdates.rekeyCount} + 1`,
+        })
+            .where(and(eq(documentPendingUpdates.id, id), lt(documentPendingUpdates.rekeyCount, MAX_PENDING_UPDATE_REKEYS)))
+            .returning({ id: documentPendingUpdates.id });
+        rekeyed = updated.length > 0;
+    });
+    return rekeyed ? nextId : null;
+}
+export async function deleteDocumentPendingUpdate(execSql, id) {
+    await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {
+        await db
+            .delete(documentPendingUpdates)
+            .where(eq(documentPendingUpdates.id, id))
+            .run();
+    });
+}
+export async function deleteDocumentPendingUpdates(execSql, scope) {
+    await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {
+        await db
+            .delete(documentPendingUpdates)
+            .where(and(eq(documentPendingUpdates.appKind, scope.appKind), eq(documentPendingUpdates.localId, scope.localId)))
+            .run();
+    });
+}
+//# sourceMappingURL=documentPendingUpdatePersistence.js.map

package/data/sqlite/documentPendingUpdatePersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentPendingUpdatePersistence.js","sourceRoot":"","sources":["documentPendingUpdatePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAOpD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,SAAS,GACV,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAG/E,SAAS,wBAAwB,CAC/B,GAA6B;IAE7B,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,yBAAyB,EAAE,GAAG,CAAC,yBAAyB;QACxD,uBAAuB,EAAE,GAAG,CAAC,uBAAuB;QACpD,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAgB,EAChB,KAAoB;IAEpB,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,EAAE,EAAE,sBAAsB,CAAC,EAAE;QAC7B,UAAU,EAAE,sBAAsB,CAAC,UAAU;QAC7C,yBAAyB,EACvB,sBAAsB,CAAC,yBAAyB;QAClD,uBAAuB,EAAE,sBAAsB,CAAC,uBAAuB;QACvE,mBAAmB,EAAE,sBAAsB,CAAC,mBAAmB;QAC/D,UAAU,EAAE,sBAAsB,CAAC,UAAU;KAC9C,CAAC;SACD,IAAI,CAAC,sBAAsB,CAAC;SAC5B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACjD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAClD,CACF;SACA,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,GAAG,CAAA,OAAO,CAAC,CAAC,CAAC;IAEnE,OAAO,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAoB,EACpB,aAAkC,EAClC,SAAiB,EACjB,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE;IAExB,OAAO;QACL,EAAE;QACF,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,yBAAyB,EAAE,aAAa,CAAC,yBAAyB;QAClE,uBAAuB,EAAE,aAAa,CAAC,uBAAuB;QAC9D,mBAAmB,EAAE,aAAa,CAAC,mBAAmB,IAAI,IAAI;QAC9D,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAgB,EAChB,KAAoB,EACpB,aAAkC;IAElC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/B,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,EAAE;aACL,MAAM,CAAC,sBAAsB,CAAC;aAC9B,MAAM,CACL,gBAAgB,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CACrE;aACA,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,OAAgB,EAChB,KAAoB,EACpB,aAAkC,EAClC,OAGC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,OAAO,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAC3D,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,iBAAiB,GAAG,MAAM,EAAE;iBAC/B,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;iBACtC,IAAI,CAAC,SAAS,CAAC;iBACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACpC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACpC,GAAG,CAAA,GAAG,SAAS,CAAC,UAAU,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAC7D,EAAE,CACA,SAAS,CAAC,kBAAkB,EAC5B,OAAO,CAAC,0BAA0B,CACnC,CACF,CACF;iBACA,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,mDAAmD,CAAC;YACzD,SAAS;YACT,aAAa;YACb,KAAK;YACL,EAAE;SACH,CAAC,CAAC;IACL,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mDAAmD,CAAC,KAKzE;IACC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/B,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,sBAAsB,CAAC;SAC9B,MAAM,CAAC;QACN,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;QAC5B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;QAC5B,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,UAAU;QAC1C,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;SACD,GAAG,EAAE,CAAC;IACT,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,sBAAsB,CAAC;SAC9B,MAAM,CACL,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CACxE;SACA,GAAG,EAAE,CAAC;IACT,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,OAAgB,EAChB,KAAoB;IAEpB,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,EAAE;aACL,MAAM,CAAC,sBAAsB,CAAC;aAC9B,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;aACtB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACjD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAClD,CACF,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAgB,EAChB,EAAU;IAEV,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,OAAO,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,sBAAsB,CAAC;aAC9B,GAAG,CAAC;YACH,EAAE,EAAE,MAAM;YACV,UAAU,EAAE,GAAG,CAAA,GAAG,sBAAsB,CAAC,UAAU,MAAM;SAC1D,CAAC;aACD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC,EACjC,EAAE,CAAC,sBAAsB,CAAC,UAAU,EAAE,yBAAyB,CAAC,CACjE,CACF;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAC;QAChD,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAgB,EAChB,EAAU;IAEV,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,EAAE;aACL,MAAM,CAAC,sBAAsB,CAAC;aAC9B,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aACxC,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAgB,EAChB,KAAoB;IAEpB,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,EAAE;aACL,MAAM,CAAC,sBAAsB,CAAC;aAC9B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACjD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAClD,CACF;aACA,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { and, asc, eq, lt, sql } from \"drizzle-orm\";\nimport type {\n  DocumentScope,\n  PendingUpdateFields,\n  PendingUpdateRecord,\n  SelectedPendingUpdateRow,\n} from \"./documentPersistenceTypes\";\nimport {\n  documentHistoryUpdates,\n  documentPendingUpdates,\n  documents,\n} from \"./schema\";\nimport type { ClientSQLiteTransactionScope } from \"./sqlitePersistenceRuntime\";\nimport { getClientSQLitePersistenceRuntime } from \"./sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"./sqlSchema\";\n\nfunction mapSelectedPendingUpdate(\n  row: SelectedPendingUpdateRow,\n): PendingUpdateRecord {\n  return {\n    id: String(row.id ?? \"\"),\n    updateData: row.updateData,\n    partialStartVersionVector: row.partialStartVersionVector,\n    partialEndVersionVector: row.partialEndVersionVector,\n    sourceVersionVector: row.sourceVersionVector,\n    rekeyCount: row.rekeyCount,\n  };\n}\n\nexport async function listDocumentPendingUpdates(\n  execSql: ExecSql,\n  scope: DocumentScope,\n): Promise<PendingUpdateRecord[]> {\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({\n      id: documentPendingUpdates.id,\n      updateData: documentPendingUpdates.updateData,\n      partialStartVersionVector:\n        documentPendingUpdates.partialStartVersionVector,\n      partialEndVersionVector: documentPendingUpdates.partialEndVersionVector,\n      sourceVersionVector: documentPendingUpdates.sourceVersionVector,\n      rekeyCount: documentPendingUpdates.rekeyCount,\n    })\n    .from(documentPendingUpdates)\n    .where(\n      and(\n        eq(documentPendingUpdates.appKind, scope.appKind),\n        eq(documentPendingUpdates.localId, scope.localId),\n      ),\n    )\n    .orderBy(asc(documentPendingUpdates.createdAt), asc(sql`rowid`));\n\n  return rows.map(mapSelectedPendingUpdate);\n}\n\nfunction pendingUpdateRow(\n  scope: DocumentScope,\n  pendingUpdate: PendingUpdateFields,\n  createdAt: string,\n  id = crypto.randomUUID(),\n) {\n  return {\n    id,\n    appKind: scope.appKind,\n    localId: scope.localId,\n    updateData: pendingUpdate.updateData,\n    partialStartVersionVector: pendingUpdate.partialStartVersionVector,\n    partialEndVersionVector: pendingUpdate.partialEndVersionVector,\n    sourceVersionVector: pendingUpdate.sourceVersionVector ?? null,\n    createdAt,\n  };\n}\n\nexport async function enqueueDocumentPendingUpdate(\n  execSql: ExecSql,\n  scope: DocumentScope,\n  pendingUpdate: PendingUpdateFields,\n): Promise<string> {\n  const id = crypto.randomUUID();\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    await db\n      .insert(documentPendingUpdates)\n      .values(\n        pendingUpdateRow(scope, pendingUpdate, new Date().toISOString(), id),\n      )\n      .run();\n  });\n  return id;\n}\n\n/**\n * Enqueue an outgoing update AND append it to the durable-history tail in a\n * single transaction. Serialization alone is not enough: a crash between\n * separate inserts could leave the op restorable from history while missing\n * from the outgoing queue, and a null-marker restore would then classify it\n * as covered and never send it.\n */\nexport async function enqueueDocumentPendingUpdateWithHistory(\n  execSql: ExecSql,\n  scope: DocumentScope,\n  pendingUpdate: PendingUpdateFields,\n  options?: {\n    expectedDocumentId: string | null;\n    expectedRecoveryGeneration: number;\n  },\n): Promise<string | null> {\n  const createdAt = new Date().toISOString();\n  return getClientSQLitePersistenceRuntime(execSql).transaction(\n    async (tx) => {\n      if (options) {\n        const matchingDocuments = await tx\n          .select({ localId: documents.localId })\n          .from(documents)\n          .where(\n            and(\n              eq(documents.appKind, scope.appKind),\n              eq(documents.localId, scope.localId),\n              sql`${documents.documentId} IS ${options.expectedDocumentId}`,\n              eq(\n                documents.recoveryGeneration,\n                options.expectedRecoveryGeneration,\n              ),\n            ),\n          )\n          .limit(1);\n        if (matchingDocuments.length === 0) {\n          return null;\n        }\n      }\n\n      return insertDocumentPendingUpdateWithHistoryInTransaction({\n        createdAt,\n        pendingUpdate,\n        scope,\n        tx,\n      });\n    },\n    { behavior: \"immediate\" },\n  );\n}\n\nexport async function insertDocumentPendingUpdateWithHistoryInTransaction(input: {\n  createdAt: string;\n  pendingUpdate: PendingUpdateFields;\n  scope: DocumentScope;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<string> {\n  const id = crypto.randomUUID();\n  await input.tx\n    .insert(documentHistoryUpdates)\n    .values({\n      id: crypto.randomUUID(),\n      appKind: input.scope.appKind,\n      localId: input.scope.localId,\n      updateData: input.pendingUpdate.updateData,\n      origin: \"local\",\n      createdAt: input.createdAt,\n    })\n    .run();\n  await input.tx\n    .insert(documentPendingUpdates)\n    .values(\n      pendingUpdateRow(input.scope, input.pendingUpdate, input.createdAt, id),\n    )\n    .run();\n  return id;\n}\n\n/**\n * Assign a fresh id to a pending update, keeping every other column. A lost\n * sync ack leaves the server holding the update under the original id with\n * ciphertext a rebuilt submission can never reproduce (each rebuild encrypts\n * with a fresh IV), so the id is permanently poisoned: every resubmission\n * 409s and the whole outgoing batch rolls back. Re-keying lets the next sync\n * pass submit the same ops under a conflict-free id; the server-side copy is\n * harmless because CRDT update import is idempotent.\n *\n * Returns null when no row carries the id, so callers never report progress\n * for a row that lives in some other queue (or nowhere). The UPDATE's own\n * RETURNING row is the progress signal — a pre-flight SELECT would race a\n * second tab sharing the SQLite file, which can settle-delete the row between\n * the read and the write and turn \"rekeyed\" into a spurious re-arm.\n *\n * The persisted per-row bound is enforced here as well: a row already at\n * MAX_PENDING_UPDATE_REKEYS is left untouched and reported as no progress.\n * The in-memory lane counter bounds a busy-loop within one session; this\n * bound survives restarts, so a poisoned row cannot re-key forever at three\n * passes per launch.\n */\nexport const MAX_PENDING_UPDATE_REKEYS = 5;\n\n/**\n * Reset the durable re-key budget for every pending update in a scope. The\n * cap exists to stop a server that keeps conflicting fresh ids from driving\n * a network-speed loop — but a budget burned during an unrelated outage\n * (e.g. yesterday's stale-bundle deadlock 409ing every submit) should not be\n * terminal forever. An explicit manual retry is the deliberate, rate-limited\n * signal that conditions changed, so it gets a fresh budget.\n */\nexport async function resetDocumentPendingUpdateRekeyBudget(\n  execSql: ExecSql,\n  scope: DocumentScope,\n): Promise<void> {\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    await db\n      .update(documentPendingUpdates)\n      .set({ rekeyCount: 0 })\n      .where(\n        and(\n          eq(documentPendingUpdates.appKind, scope.appKind),\n          eq(documentPendingUpdates.localId, scope.localId),\n        ),\n      );\n  });\n}\n\nexport async function rekeyDocumentPendingUpdate(\n  execSql: ExecSql,\n  id: string,\n): Promise<string | null> {\n  const nextId = crypto.randomUUID();\n  let rekeyed = false;\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    const updated = await db\n      .update(documentPendingUpdates)\n      .set({\n        id: nextId,\n        rekeyCount: sql`${documentPendingUpdates.rekeyCount} + 1`,\n      })\n      .where(\n        and(\n          eq(documentPendingUpdates.id, id),\n          lt(documentPendingUpdates.rekeyCount, MAX_PENDING_UPDATE_REKEYS),\n        ),\n      )\n      .returning({ id: documentPendingUpdates.id });\n    rekeyed = updated.length > 0;\n  });\n  return rekeyed ? nextId : null;\n}\n\nexport async function deleteDocumentPendingUpdate(\n  execSql: ExecSql,\n  id: string,\n): Promise<void> {\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    await db\n      .delete(documentPendingUpdates)\n      .where(eq(documentPendingUpdates.id, id))\n      .run();\n  });\n}\n\nexport async function deleteDocumentPendingUpdates(\n  execSql: ExecSql,\n  scope: DocumentScope,\n): Promise<void> {\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    await db\n      .delete(documentPendingUpdates)\n      .where(\n        and(\n          eq(documentPendingUpdates.appKind, scope.appKind),\n          eq(documentPendingUpdates.localId, scope.localId),\n        ),\n      )\n      .run();\n  });\n}\n"]}

package/data/sqlite/documentPersistence.d.ts

@@ -0,0 +1,22 @@
+import { type DocumentSyncPullContinuation } from "../documents/shared/pullContinuation.js";
+import type { DocumentRecord } from "./documentPersistenceTypes.js";
+import { type ExecSql } from "./sqlSchema.js";
+export declare function ensureDocumentTables(execSql: ExecSql): Promise<void>;
+export declare function ensureDocumentProjectionTables(execSql: ExecSql): Promise<void>;
+/** Replace only the exact rejected continuation with a durable recovery marker. */
+export declare function invalidateDocumentSyncPullContinuation(execSql: ExecSql, input: {
+    accessEpoch: number;
+    accessStateHash: string | null;
+    appKind: string;
+    continuation: DocumentSyncPullContinuation;
+    contentKeyBundle: string | null;
+    documentId: string;
+    documentKekTargets: string | null;
+    documentManifestBundle: string | null;
+    lastCommitLsn: string | null;
+    localId: string;
+}): Promise<DocumentRecord | null>;
+export { deleteDocumentPendingUpdate, deleteDocumentPendingUpdates, enqueueDocumentPendingUpdate, enqueueDocumentPendingUpdateWithHistory, listDocumentPendingUpdates, MAX_PENDING_UPDATE_REKEYS, rekeyDocumentPendingUpdate, resetDocumentPendingUpdateRekeyBudget, } from "./documentPendingUpdatePersistence.js";
+export type { DocumentRecord, DocumentScope, PendingUpdateFields, PendingUpdateRecord, } from "./documentPersistenceTypes.js";
+export { deleteDocumentRecord, documentRecordSelection, findLocalIdByDocumentId, loadDocumentRecord, mapSelectedDocumentRecord, } from "./documentRecordPersistence.js";
+export { clearDocumentSyncFailure, hasRecordedTerminalSyncFailures, recordDocumentSyncFailure, } from "./documentSyncFailurePersistence.js";

package/data/sqlite/documentPersistence.js

@@ -0,0 +1,35 @@
+import { and, eq, sql } from "drizzle-orm";
+import { DOCUMENT_SYNC_PULL_RECOVERY_REQUIRED, serializeDocumentSyncPullContinuation, } from "../documents/shared/pullContinuation.js";
+import { loadDocumentRecord } from "./documentRecordPersistence.js";
+import { documentProjectionTables, documents, documentTables } from "./schema.js";
+import { getClientSQLitePersistenceRuntime } from "./sqlitePersistenceRuntime.js";
+import { ensureSqlTables, runSerializedSqlMutation, } from "./sqlSchema.js";
+export function ensureDocumentTables(execSql) {
+    return ensureSqlTables(execSql, documentTables);
+}
+export function ensureDocumentProjectionTables(execSql) {
+    return ensureSqlTables(execSql, documentProjectionTables);
+}
+/** Replace only the exact rejected continuation with a durable recovery marker. */
+export async function invalidateDocumentSyncPullContinuation(execSql, input) {
+    await ensureDocumentTables(execSql);
+    const expectedContinuation = serializeDocumentSyncPullContinuation(input.continuation);
+    if (expectedContinuation === null)
+        return null;
+    return runSerializedSqlMutation(execSql, async (lockedExecSql) => {
+        const { db } = getClientSQLitePersistenceRuntime(lockedExecSql);
+        await db
+            .update(documents)
+            .set({ pullContinuation: DOCUMENT_SYNC_PULL_RECOVERY_REQUIRED })
+            .where(and(eq(documents.appKind, input.appKind), eq(documents.localId, input.localId), eq(documents.documentId, input.documentId), eq(documents.accessEpoch, input.accessEpoch), sql `${documents.accessStateHash} IS ${input.accessStateHash}`, sql `${documents.contentKeyBundle} IS ${input.contentKeyBundle}`, sql `${documents.documentKekTargets} IS ${input.documentKekTargets}`, sql `${documents.documentManifestBundle} IS ${input.documentManifestBundle}`, sql `${documents.lastCommitLsn} IS ${input.lastCommitLsn}`, eq(documents.pullContinuation, expectedContinuation)))
+            .run();
+        return loadDocumentRecord(lockedExecSql, {
+            appKind: input.appKind,
+            localId: input.localId,
+        });
+    });
+}
+export { deleteDocumentPendingUpdate, deleteDocumentPendingUpdates, enqueueDocumentPendingUpdate, enqueueDocumentPendingUpdateWithHistory, listDocumentPendingUpdates, MAX_PENDING_UPDATE_REKEYS, rekeyDocumentPendingUpdate, resetDocumentPendingUpdateRekeyBudget, } from "./documentPendingUpdatePersistence.js";
+export { deleteDocumentRecord, documentRecordSelection, findLocalIdByDocumentId, loadDocumentRecord, mapSelectedDocumentRecord, } from "./documentRecordPersistence.js";
+export { clearDocumentSyncFailure, hasRecordedTerminalSyncFailures, recordDocumentSyncFailure, } from "./documentSyncFailurePersistence.js";
+//# sourceMappingURL=documentPersistence.js.map

package/data/sqlite/documentPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentPersistence.js","sourceRoot":"","sources":["documentPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,oCAAoC,EAEpC,qCAAqC,GACtC,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/E,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAEL,eAAe,EACf,wBAAwB,GACzB,MAAM,aAAa,CAAC;AAErB,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAAgB;IAEhB,OAAO,eAAe,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;AAC5D,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,OAAgB,EAChB,KAWC;IAED,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,oBAAoB,GAAG,qCAAqC,CAChE,KAAK,CAAC,YAAY,CACnB,CAAC;IACF,IAAI,oBAAoB,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,aAAa,CAAC,CAAC;QAChE,MAAM,EAAE;aACL,MAAM,CAAC,SAAS,CAAC;aACjB,GAAG,CAAC,EAAE,gBAAgB,EAAE,oCAAoC,EAAE,CAAC;aAC/D,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACpC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACpC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAC1C,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAC5C,GAAG,CAAA,GAAG,SAAS,CAAC,eAAe,OAAO,KAAK,CAAC,eAAe,EAAE,EAC7D,GAAG,CAAA,GAAG,SAAS,CAAC,gBAAgB,OAAO,KAAK,CAAC,gBAAgB,EAAE,EAC/D,GAAG,CAAA,GAAG,SAAS,CAAC,kBAAkB,OAAO,KAAK,CAAC,kBAAkB,EAAE,EACnE,GAAG,CAAA,GAAG,SAAS,CAAC,sBAAsB,OAAO,KAAK,CAAC,sBAAsB,EAAE,EAC3E,GAAG,CAAA,GAAG,SAAS,CAAC,aAAa,OAAO,KAAK,CAAC,aAAa,EAAE,EACzD,EAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CACrD,CACF;aACA,GAAG,EAAE,CAAC;QACT,OAAO,kBAAkB,CAAC,aAAa,EAAE;YACvC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,4BAA4B,EAC5B,uCAAuC,EACvC,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,qCAAqC,GACtC,MAAM,oCAAoC,CAAC;AAO5C,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,wBAAwB,EACxB,+BAA+B,EAC/B,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC","sourcesContent":["import { and, eq, sql } from \"drizzle-orm\";\nimport {\n  DOCUMENT_SYNC_PULL_RECOVERY_REQUIRED,\n  type DocumentSyncPullContinuation,\n  serializeDocumentSyncPullContinuation,\n} from \"../documents/shared/pullContinuation\";\nimport type { DocumentRecord } from \"./documentPersistenceTypes\";\nimport { loadDocumentRecord } from \"./documentRecordPersistence\";\nimport { documentProjectionTables, documents, documentTables } from \"./schema\";\nimport { getClientSQLitePersistenceRuntime } from \"./sqlitePersistenceRuntime\";\nimport {\n  type ExecSql,\n  ensureSqlTables,\n  runSerializedSqlMutation,\n} from \"./sqlSchema\";\n\nexport function ensureDocumentTables(execSql: ExecSql): Promise<void> {\n  return ensureSqlTables(execSql, documentTables);\n}\n\nexport function ensureDocumentProjectionTables(\n  execSql: ExecSql,\n): Promise<void> {\n  return ensureSqlTables(execSql, documentProjectionTables);\n}\n\n/** Replace only the exact rejected continuation with a durable recovery marker. */\nexport async function invalidateDocumentSyncPullContinuation(\n  execSql: ExecSql,\n  input: {\n    accessEpoch: number;\n    accessStateHash: string | null;\n    appKind: string;\n    continuation: DocumentSyncPullContinuation;\n    contentKeyBundle: string | null;\n    documentId: string;\n    documentKekTargets: string | null;\n    documentManifestBundle: string | null;\n    lastCommitLsn: string | null;\n    localId: string;\n  },\n): Promise<DocumentRecord | null> {\n  await ensureDocumentTables(execSql);\n  const expectedContinuation = serializeDocumentSyncPullContinuation(\n    input.continuation,\n  );\n  if (expectedContinuation === null) return null;\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    const { db } = getClientSQLitePersistenceRuntime(lockedExecSql);\n    await db\n      .update(documents)\n      .set({ pullContinuation: DOCUMENT_SYNC_PULL_RECOVERY_REQUIRED })\n      .where(\n        and(\n          eq(documents.appKind, input.appKind),\n          eq(documents.localId, input.localId),\n          eq(documents.documentId, input.documentId),\n          eq(documents.accessEpoch, input.accessEpoch),\n          sql`${documents.accessStateHash} IS ${input.accessStateHash}`,\n          sql`${documents.contentKeyBundle} IS ${input.contentKeyBundle}`,\n          sql`${documents.documentKekTargets} IS ${input.documentKekTargets}`,\n          sql`${documents.documentManifestBundle} IS ${input.documentManifestBundle}`,\n          sql`${documents.lastCommitLsn} IS ${input.lastCommitLsn}`,\n          eq(documents.pullContinuation, expectedContinuation),\n        ),\n      )\n      .run();\n    return loadDocumentRecord(lockedExecSql, {\n      appKind: input.appKind,\n      localId: input.localId,\n    });\n  });\n}\n\nexport {\n  deleteDocumentPendingUpdate,\n  deleteDocumentPendingUpdates,\n  enqueueDocumentPendingUpdate,\n  enqueueDocumentPendingUpdateWithHistory,\n  listDocumentPendingUpdates,\n  MAX_PENDING_UPDATE_REKEYS,\n  rekeyDocumentPendingUpdate,\n  resetDocumentPendingUpdateRekeyBudget,\n} from \"./documentPendingUpdatePersistence\";\nexport type {\n  DocumentRecord,\n  DocumentScope,\n  PendingUpdateFields,\n  PendingUpdateRecord,\n} from \"./documentPersistenceTypes\";\nexport {\n  deleteDocumentRecord,\n  documentRecordSelection,\n  findLocalIdByDocumentId,\n  loadDocumentRecord,\n  mapSelectedDocumentRecord,\n} from \"./documentRecordPersistence\";\nexport {\n  clearDocumentSyncFailure,\n  hasRecordedTerminalSyncFailures,\n  recordDocumentSyncFailure,\n} from \"./documentSyncFailurePersistence\";\n"]}

package/data/sqlite/documentPersistenceTypes.d.ts

@@ -0,0 +1,79 @@
+import type { ContainerAccessLevel } from "../../internal/crypto/index.js";
+import type { DocumentSyncPullContinuation } from "../documents/shared/pullContinuation.js";
+export interface DocumentRecord {
+    id: string;
+    documentId: string | null;
+    /**
+     * Durable fence advanced by an atomic raw-history recovery install. Writers
+     * capture this before waiting for the mutation queue and must refuse to
+     * publish when recovery advanced it first.
+     */
+    recoveryGeneration?: number;
+    /** Former server id reserved for deterministic post-purge recreation. */
+    recoveryDocumentId?: string | null;
+    /**
+     * Encoded end version vector of the persisted content frontier. Content
+     * itself lives in the durable history (checkpoint + tail); this column
+     * exists so priming and coverage predicates can compare versions from a
+     * narrow indexed column. Empty string means "never hydrated".
+     */
+    snapshotEndVersion: string;
+    accessEpoch: number;
+    accessStateHash?: string | null;
+    effectiveAccessLevel?: ContainerAccessLevel | null;
+    lastCommitLsn?: string | null;
+    contentKeyBundle?: string | null;
+    documentKekTargets?: string | null;
+    documentManifestBundle?: string | null;
+    pendingBaseVersion?: string | null;
+    pullContinuation?: DocumentSyncPullContinuation | null;
+    /**
+     * The durable continuation column was non-null but could not be decoded.
+     * Keep forcing a page-one pull until a successful settlement replaces the
+     * malformed value; ordinary local saves must preserve that recovery signal.
+     */
+    pullContinuationRecoveryRequired?: true;
+}
+export interface PendingUpdateFields {
+    updateData: string;
+    partialStartVersionVector: string;
+    partialEndVersionVector: string;
+    sourceVersionVector?: string | null;
+}
+export interface PendingUpdateRecord extends PendingUpdateFields {
+    id: string;
+    /**
+     * Times this row was assigned a fresh id by lost-ack conflict recovery.
+     * Persisted so the bound survives restarts; absent means zero (rows from
+     * simple test doubles).
+     */
+    rekeyCount?: number | undefined;
+}
+export interface DocumentScope {
+    appKind: string;
+    localId: string;
+}
+export interface SelectedDocumentRecordRow {
+    id: string;
+    documentId: string | null;
+    recoveryGeneration: number;
+    recoveryDocumentId: string | null;
+    snapshotEndVersion: string;
+    accessEpoch: number;
+    accessStateHash: string | null;
+    effectiveAccessLevel: string | null;
+    lastCommitLsn: string | null;
+    contentKeyBundle: string | null;
+    documentKekTargets: string | null;
+    documentManifestBundle: string | null;
+    pendingBaseVersion: string | null;
+    pullContinuation: string | null;
+}
+export interface SelectedPendingUpdateRow {
+    id: string | null;
+    updateData: string;
+    partialStartVersionVector: string;
+    partialEndVersionVector: string;
+    sourceVersionVector: string | null;
+    rekeyCount: number;
+}

package/data/sqlite/documentPersistenceTypes.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=documentPersistenceTypes.js.map

package/data/sqlite/documentPersistenceTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentPersistenceTypes.js","sourceRoot":"","sources":["documentPersistenceTypes.ts"],"names":[],"mappings":"","sourcesContent":["import type { ContainerAccessLevel } from \"@tearleads/crypto\";\nimport type { DocumentSyncPullContinuation } from \"../documents/shared/pullContinuation\";\n\nexport interface DocumentRecord {\n  id: string;\n  documentId: string | null;\n  /**\n   * Durable fence advanced by an atomic raw-history recovery install. Writers\n   * capture this before waiting for the mutation queue and must refuse to\n   * publish when recovery advanced it first.\n   */\n  recoveryGeneration?: number;\n  /** Former server id reserved for deterministic post-purge recreation. */\n  recoveryDocumentId?: string | null;\n  /**\n   * Encoded end version vector of the persisted content frontier. Content\n   * itself lives in the durable history (checkpoint + tail); this column\n   * exists so priming and coverage predicates can compare versions from a\n   * narrow indexed column. Empty string means \"never hydrated\".\n   */\n  snapshotEndVersion: string;\n  accessEpoch: number;\n  accessStateHash?: string | null;\n  effectiveAccessLevel?: ContainerAccessLevel | null;\n  lastCommitLsn?: string | null;\n  contentKeyBundle?: string | null;\n  documentKekTargets?: string | null;\n  documentManifestBundle?: string | null;\n  pendingBaseVersion?: string | null;\n  pullContinuation?: DocumentSyncPullContinuation | null;\n  /**\n   * The durable continuation column was non-null but could not be decoded.\n   * Keep forcing a page-one pull until a successful settlement replaces the\n   * malformed value; ordinary local saves must preserve that recovery signal.\n   */\n  pullContinuationRecoveryRequired?: true;\n}\n\nexport interface PendingUpdateFields {\n  updateData: string;\n  partialStartVersionVector: string;\n  partialEndVersionVector: string;\n  sourceVersionVector?: string | null;\n}\n\nexport interface PendingUpdateRecord extends PendingUpdateFields {\n  id: string;\n  /**\n   * Times this row was assigned a fresh id by lost-ack conflict recovery.\n   * Persisted so the bound survives restarts; absent means zero (rows from\n   * simple test doubles).\n   */\n  rekeyCount?: number | undefined;\n}\n\nexport interface DocumentScope {\n  appKind: string;\n  localId: string;\n}\n\nexport interface SelectedDocumentRecordRow {\n  id: string;\n  documentId: string | null;\n  recoveryGeneration: number;\n  recoveryDocumentId: string | null;\n  snapshotEndVersion: string;\n  accessEpoch: number;\n  accessStateHash: string | null;\n  effectiveAccessLevel: string | null;\n  lastCommitLsn: string | null;\n  contentKeyBundle: string | null;\n  documentKekTargets: string | null;\n  documentManifestBundle: string | null;\n  pendingBaseVersion: string | null;\n  pullContinuation: string | null;\n}\n\nexport interface SelectedPendingUpdateRow {\n  id: string | null;\n  updateData: string;\n  partialStartVersionVector: string;\n  partialEndVersionVector: string;\n  sourceVersionVector: string | null;\n  rekeyCount: number;\n}\n"]}