@tearleads/client-sdk 0.1.23 → 0.1.25

package/data/persistence/container-contents/containerContentsPersistenceTypes.d.ts

@@ -153,6 +153,8 @@ export interface ContainerContentsPersistence extends DormantMetadataSweepPersis
         updatedAt?: string;
     }) => Promise<void>;
     deleteContainers: (execSql: ExecSql, removals: ReadonlyArray<ContainerRemoval>, options?: {
+        /** Must run inside the deletion transaction before any row is removed. */
+        beforeDeleteInTransaction?: ((transactionExecSql: ExecSql) => Promise<boolean>) | undefined;
         /** Unsigned discovery removes listings but preserves metadata and local intent. */
         discoveryOnly?: boolean;
         /**

package/data/persistence/container-contents/containerContentsPersistenceTypes.js.map

@@ -1 +1 @@
-{"version":3,"file":"containerContentsPersistenceTypes.js","sourceRoot":"","sources":["containerContentsPersistenceTypes.ts"],"names":[],"mappings":"AAYA,MAAM,CAAC,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AAC/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,gBAAgB,CAAC","sourcesContent":["import type { AccessManifestCheckpoint } from \"@tearleads/crypto\";\nimport type { HeldContainerBinding } from \"../../containers/containerBinding\";\nimport type { DocumentSyncPullContinuation } from \"../../documents/shared/pullContinuation\";\nimport type {\n  DocumentRecord,\n  PendingUpdateFields,\n  PendingUpdateRecord,\n} from \"../../sqlite/documentPersistence\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport type { ContainerRecord } from \"../containers/containerPersistence\";\nimport type { DormantMetadataSweepPersistence } from \"./dormantMetadataSweep\";\n\nexport const CONTAINER_CREATE_INTENT_TYPE = \"container.create\";\nexport const CONTAINER_MOVE_INTENT_TYPE = \"container.move\";\n\nexport type ContainerCreateIntentSyncStatus = \"pending\" | \"synced\";\nexport type ContainerMoveIntentSyncStatus = \"pending\" | \"blocked\";\n\nexport interface ContainerCreateIntentRecord {\n  id: string;\n  containerId: string;\n  parentContainerId: string;\n  intentType: typeof CONTAINER_CREATE_INTENT_TYPE;\n  syncStatus: ContainerCreateIntentSyncStatus;\n  remoteContainerId: string | null;\n  remoteMetadataDocumentId: string | null;\n  remoteMetadataAccessStateHash: string | null;\n  lastError: string | null;\n  lastAttemptedAt: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface ContainerMoveIntentRecord {\n  id: string;\n  containerId: string;\n  parentContainerId: string;\n  previousParentContainerId: string | null;\n  intentType: typeof CONTAINER_MOVE_INTENT_TYPE;\n  syncStatus: ContainerMoveIntentSyncStatus;\n  lastError: string | null;\n  lastAttemptedAt: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface ContainerCreateIntentInput {\n  id?: string;\n  parentContainerId: string;\n}\n\nexport interface ContainerMoveIntentInput {\n  id?: string;\n  parentContainerId: string;\n  previousParentContainerId?: string | null | undefined;\n}\n\nexport interface ContainerCreateIntentErrorInput {\n  containerId: string;\n  expectedIntentId: string;\n  expectedUpdatedAt: string;\n  message: string;\n  stillCurrent?: (() => boolean) | undefined;\n}\n\nexport type ContainerCreateIntentErrorInputRecorder = (\n  execSql: ExecSql,\n  input: ContainerCreateIntentErrorInput,\n) => Promise<void>;\n\nexport interface ContainerMoveIntentRevisionInput {\n  containerId: string;\n  expectedIntentId: string;\n  expectedUpdatedAt: string;\n  stillCurrent: () => boolean;\n}\n\nexport interface ContainerCreateIntentRevisionInput\n  extends ContainerMoveIntentRevisionInput {\n  remoteContainerId: string;\n  remoteMetadataAccessStateHash: string;\n  remoteMetadataDocumentId: string;\n  /** The remote parent now; a move settlement queues cites it as previous. */\n  supersededMovePreviousParentId?: string | undefined;\n  /**\n   * The parent the create committed under. A desired parent equal to it, or\n   * to the current one, owes no move: the user never moved the folder away,\n   * and a later remote move by another writer stands.\n   */\n  createdParentContainerId?: string | undefined;\n  /** The parent the settled intent wants. */\n  desiredParentContainerId?: string | undefined;\n}\n\nexport interface LocalRootDescendantReparentInput {\n  containerId: string;\n  parentContainerId: string | null;\n  updateCreateIntent?: boolean | undefined;\n}\n\n/**\n * A container's metadata document record plus its durable content: the full\n * Loro updates export of the metadata document, stored in the shared\n * history-checkpoint table under the container-metadata app kind. Metadata\n * documents are tiny registries, so the whole update log is the checkpoint.\n */\nexport interface ContainerMetadataRecord extends DocumentRecord {\n  metadataUpdates: string;\n}\n\nexport interface StoredContainerState {\n  container: ContainerRecord;\n  record: ContainerMetadataRecord | null;\n}\n\nexport interface ContainerRemoval {\n  containerId: string;\n  reason: \"access_revoked\" | \"deleted\";\n  updatedAt: string;\n}\n\nexport interface ContainerHydrationTombstone extends ContainerRemoval {\n  generation: number;\n}\n\nexport interface ContainerDeletionGuard {\n  containerId: string;\n  expectedContainer: ContainerRecord | null;\n}\n\nexport interface SaveContainerOptions {\n  createIntent?: ContainerCreateIntentInput;\n  stillCurrent?: (() => boolean) | undefined;\n  localUpdatedAt?: string;\n  moveIntent?: ContainerMoveIntentInput | undefined;\n  serverTimestamps?:\n    | {\n        createdAt?: string | null;\n        updatedAt?: string | null;\n      }\n    | undefined;\n  updatedAt?: string;\n}\n\nexport interface SaveContainerWithPendingUpdateOptions\n  extends SaveContainerOptions {\n  pendingUpdate: PendingUpdateFields;\n}\n\nexport interface ContainerContentsPersistence\n  extends DormantMetadataSweepPersistence {\n  containerExists: (execSql: ExecSql, containerId: string) => Promise<boolean>;\n  /**\n   * Create an absent remotely hydrated container only when no newer durable\n   * tombstone or concurrent container/dormant-metadata mutation won first.\n   */\n  commitHydratedContainer: (\n    execSql: ExecSql,\n    input: {\n      container: ContainerRecord;\n      expectedDormantRecord: ContainerMetadataRecord | null;\n      /** Tombstone observed before the remote request began, or null. */\n      expectedHydrationTombstone?:\n        | ContainerHydrationTombstone\n        | null\n        | undefined;\n      /** Current placement verified and pinned before recovery insertion. */\n      expectedPlacementCheckpoint?: AccessManifestCheckpoint | undefined;\n      record: ContainerMetadataRecord;\n      remoteUpdatedAt: string;\n      saveOptions: {\n        localUpdatedAt?: string;\n        serverTimestamps?:\n          | {\n              createdAt?: string | null;\n              updatedAt?: string | null;\n            }\n          | undefined;\n      };\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<\n    { committed: true; container: ContainerRecord } | { committed: false }\n  >;\n  /** Capture anti-resurrection fences immediately before a remote fetch. */\n  loadContainerHydrationTombstones: (\n    execSql: ExecSql,\n  ) => Promise<ReadonlyArray<ContainerHydrationTombstone>>;\n  deleteContainer: (\n    execSql: ExecSql,\n    containerId: string,\n    options?: {\n      reason?: ContainerRemoval[\"reason\"];\n      updatedAt?: string;\n    },\n  ) => Promise<void>;\n  deleteContainers: (\n    execSql: ExecSql,\n    removals: ReadonlyArray<ContainerRemoval>,\n    options?: {\n      /** Unsigned discovery removes listings but preserves metadata and local intent. */\n      discoveryOnly?: boolean;\n      /**\n       * Request-time states rechecked inside the deletion transaction. An\n       * absent or changed row means another pane won and aborts the cascade.\n       */\n      expectedContainers?: ReadonlyArray<ContainerDeletionGuard>;\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<ReadonlyArray<string>>;\n  deletePendingUpdates: (\n    execSql: ExecSql,\n    containerId: string,\n  ) => Promise<void>;\n  deletePendingUpdate: (execSql: ExecSql, id: string) => Promise<void>;\n  ensureSchema: (execSql: ExecSql) => Promise<void>;\n  enqueuePendingUpdate: (\n    execSql: ExecSql,\n    input: PendingUpdateFields & { containerId: string },\n  ) => Promise<string>;\n  listPendingCreateIntents: (\n    execSql: ExecSql,\n  ) => Promise<ContainerCreateIntentRecord[]>;\n  // Every move intent that has not yet synced, regardless of syncStatus —\n  // a blocked move (destination parent not synced yet) is still unsynced, and\n  // synced moves are deleted (see markMoveIntentRevisionSynced), so every surviving\n  // row qualifies. Blocked intents replay too: \"blocked\" names the reason the\n  // last attempt could not proceed, not a terminal verdict.\n  listUnsyncedMoveIntents: (\n    execSql: ExecSql,\n  ) => Promise<ContainerMoveIntentRecord[]>;\n  listContainerIdsWithPendingUpdates: (\n    execSql: ExecSql,\n    containerIds: ReadonlyArray<string>,\n  ) => Promise<string[]>;\n  listContainerIdsWithPullContinuations: (\n    execSql: ExecSql,\n    containerIds: ReadonlyArray<string>,\n  ) => Promise<string[]>;\n  listPendingUpdates: (\n    execSql: ExecSql,\n    containerId: string,\n  ) => Promise<PendingUpdateRecord[]>;\n  rekeyPendingUpdate: (execSql: ExecSql, id: string) => Promise<string | null>;\n  /** Revision-CAS error recorder used by asynchronous create replay. */\n  recordCreateIntentRevisionError: ContainerCreateIntentErrorInputRecorder;\n  recordMoveIntentError: (\n    execSql: ExecSql,\n    input: {\n      blocked?: boolean | undefined;\n      containerId: string;\n      expectedIntentId?: string | undefined;\n      expectedUpdatedAt?: string | undefined;\n      message: string;\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<void>;\n  reassignContainerDocuments: (\n    execSql: ExecSql,\n    input: {\n      fromContainerId: string;\n      stillCurrent?: (() => boolean) | undefined;\n      toContainerId: string;\n      updatedAt?: string | undefined;\n    },\n  ) => Promise<void>;\n  reconcileLocalRootContainer: (\n    execSql: ExecSql,\n    input: {\n      descendantReparents: ReadonlyArray<LocalRootDescendantReparentInput>;\n      localRootContainerId: string;\n      remoteOrganizationId: string;\n      remoteRootContainerId: string;\n      stillCurrent?: (() => boolean) | undefined;\n      updatedAt?: string | undefined;\n    },\n  ) => Promise<void>;\n  reconcileLocalSystemContainer: (\n    execSql: ExecSql,\n    input: {\n      localContainerId: string;\n      remoteContainerId: string;\n      remoteOrganizationId: string;\n      stillCurrent?: (() => boolean) | undefined;\n      updatedAt?: string | undefined;\n    },\n  ) => Promise<void>;\n  loadContainers: (\n    execSql: ExecSql,\n  ) => Promise<ReadonlyArray<StoredContainerState>>;\n  loadContainerMetadataState: (\n    execSql: ExecSql,\n    containerId: string,\n  ) => Promise<StoredContainerState | null>;\n  /**\n   * The organization and metadata target this device holds for a container,\n   * from its live row or retained dormant metadata; null when never held.\n   */\n  loadHeldContainerBinding: (\n    execSql: ExecSql,\n    containerId: string,\n  ) => Promise<HeldContainerBinding | null>;\n  /** Whether a held folder was re-homed away from this organization. */\n  isSupersededContainerBinding: (\n    execSql: ExecSql,\n    input: { containerId: string; organizationId: string },\n  ) => Promise<boolean>;\n  /**\n   * Move a held folder to the binding its own user re-created it under,\n   * resetting the metadata record's remote stream; false if the held binding\n   * changed since it was read.\n   */\n  rebindHeldContainer: (\n    execSql: ExecSql,\n    input: {\n      containerId: string;\n      expected: HeldContainerBinding;\n      next: { metadataDocumentId: string; organizationId: string };\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<boolean>;\n  /**\n   * Load a container-metadata record by container id alone, without\n   * requiring a containers row — the dormant shape row 4's access_revoked\n   * branch leaves behind, re-attached on rehydration.\n   */\n  loadContainerMetadataRecord: (\n    execSql: ExecSql,\n    containerId: string,\n  ) => Promise<ContainerMetadataRecord | null>;\n  /**\n   * Atomically replace the exact rejected metadata pull continuation with its\n   * durable recovery marker and return the authoritative current record.\n   */\n  invalidateMetadataPullContinuation: (\n    execSql: ExecSql,\n    input: {\n      accessEpoch: number;\n      accessStateHash: string | null;\n      continuation: DocumentSyncPullContinuation;\n      containerId: string;\n      contentKeyBundle: string | null;\n      documentId: string;\n      documentKekTargets: string | null;\n      documentManifestBundle: string | null;\n      lastCommitLsn: string | null;\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<ContainerMetadataRecord | null>;\n  /**\n   * Conditionally commit metadata content, its outgoing row, accepted queue\n   * settlement, container fields, and the canonical record in one transaction.\n   */\n  commitMetadataMutation: (\n    execSql: ExecSql,\n    input: {\n      acceptedPendingUpdateIds: readonly string[];\n      clearSyncFailure?: boolean | undefined;\n      container: ContainerRecord;\n      expectedContainer: ContainerRecord;\n      expectedRecord: ContainerMetadataRecord;\n      createIntentSettlement?:\n        | {\n            containerId: string;\n            expectedIntentId: string;\n            expectedUpdatedAt: string;\n            remoteContainerId: string;\n            remoteMetadataAccessStateHash: string;\n            remoteMetadataDocumentId: string;\n            /**\n             * When present, an overtaking create revision is adopted as the\n             * desired local parent and converted to a move from this remotely\n             * committed parent instead of rejecting the remote identity.\n             */\n            supersededMovePreviousParentId?: string | undefined;\n          }\n        | undefined;\n      moveIntentSettlement?:\n        | {\n            containerId: string;\n            expectedIntentId: string;\n            expectedUpdatedAt: string;\n          }\n        | undefined;\n      pendingUpdate?: PendingUpdateFields | undefined;\n      preserveDurableStructureWhenPending?: boolean | undefined;\n      record: ContainerMetadataRecord;\n      saveOptions?:\n        | {\n            createIntent?: ContainerCreateIntentInput;\n            localUpdatedAt?: string;\n            moveIntent?: ContainerMoveIntentInput | undefined;\n            serverTimestamps?:\n              | {\n                  createdAt?: string | null;\n                  updatedAt?: string | null;\n                }\n              | undefined;\n            updatedAt?: string;\n          }\n        | undefined;\n      settleAcceptedPendingOnConflict: boolean;\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<\n    | {\n        committed: true;\n        container: ContainerRecord;\n        createIntentSettled?: true | undefined;\n        moveIntentSettled?: true | undefined;\n      }\n    | {\n        committed: false;\n        currentState: StoredContainerState | null;\n        staleServerState?: true;\n      }\n  >;\n  settleAcceptedMetadataPendingUpdates: (\n    execSql: ExecSql,\n    input: {\n      containerId: string;\n      expectedRecord: ContainerMetadataRecord;\n      pendingUpdateIds: readonly string[];\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<StoredContainerState | null>;\n  saveContainer: (\n    execSql: ExecSql,\n    container: ContainerRecord,\n    record: ContainerMetadataRecord | null,\n    options?: SaveContainerOptions,\n  ) => Promise<ContainerRecord>;\n  /**\n   * Atomically saves a container and enqueues its first metadata update.\n   * Host adapters must implement the compound write in their own transaction.\n   */\n  saveContainerWithPendingUpdate: (\n    execSql: ExecSql,\n    container: ContainerRecord,\n    record: ContainerMetadataRecord,\n    options: SaveContainerWithPendingUpdateOptions,\n  ) => Promise<ContainerRecord>;\n  saveContainerAndDeletePendingUpdates: (\n    execSql: ExecSql,\n    container: ContainerRecord,\n    record: ContainerMetadataRecord,\n    pendingUpdateIds: readonly string[],\n  ) => Promise<ContainerRecord>;\n  /**\n   * Revision-CAS settlement used by asynchronous create replay. Invalid\n   * adapters are rejected before the remote mutation begins.\n   */\n  markCreateIntentRevisionSynced: (\n    execSql: ExecSql,\n    input: ContainerCreateIntentRevisionInput,\n  ) => Promise<boolean>;\n  /**\n   * Explicit revision-CAS settlement. Move replay instead settles inside\n   * commitMetadataMutation and requires its atomic acknowledgment.\n   */\n  markMoveIntentRevisionSynced: (\n    execSql: ExecSql,\n    input: ContainerMoveIntentRevisionInput,\n  ) => Promise<boolean>;\n  /**\n   * Drop a move revision the server refuses for good and restore the\n   * folder's previous parent in the same transaction; false if superseded.\n   */\n  abandonMoveIntentRevision: (\n    execSql: ExecSql,\n    input: ContainerMoveIntentRevisionInput & {\n      previousParentContainerId: string;\n    },\n  ) => Promise<boolean>;\n}\n"]}
+{"version":3,"file":"containerContentsPersistenceTypes.js","sourceRoot":"","sources":["containerContentsPersistenceTypes.ts"],"names":[],"mappings":"AAYA,MAAM,CAAC,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AAC/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,gBAAgB,CAAC","sourcesContent":["import type { AccessManifestCheckpoint } from \"@tearleads/crypto\";\nimport type { HeldContainerBinding } from \"../../containers/containerBinding\";\nimport type { DocumentSyncPullContinuation } from \"../../documents/shared/pullContinuation\";\nimport type {\n  DocumentRecord,\n  PendingUpdateFields,\n  PendingUpdateRecord,\n} from \"../../sqlite/documentPersistence\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport type { ContainerRecord } from \"../containers/containerPersistence\";\nimport type { DormantMetadataSweepPersistence } from \"./dormantMetadataSweep\";\n\nexport const CONTAINER_CREATE_INTENT_TYPE = \"container.create\";\nexport const CONTAINER_MOVE_INTENT_TYPE = \"container.move\";\n\nexport type ContainerCreateIntentSyncStatus = \"pending\" | \"synced\";\nexport type ContainerMoveIntentSyncStatus = \"pending\" | \"blocked\";\n\nexport interface ContainerCreateIntentRecord {\n  id: string;\n  containerId: string;\n  parentContainerId: string;\n  intentType: typeof CONTAINER_CREATE_INTENT_TYPE;\n  syncStatus: ContainerCreateIntentSyncStatus;\n  remoteContainerId: string | null;\n  remoteMetadataDocumentId: string | null;\n  remoteMetadataAccessStateHash: string | null;\n  lastError: string | null;\n  lastAttemptedAt: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface ContainerMoveIntentRecord {\n  id: string;\n  containerId: string;\n  parentContainerId: string;\n  previousParentContainerId: string | null;\n  intentType: typeof CONTAINER_MOVE_INTENT_TYPE;\n  syncStatus: ContainerMoveIntentSyncStatus;\n  lastError: string | null;\n  lastAttemptedAt: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface ContainerCreateIntentInput {\n  id?: string;\n  parentContainerId: string;\n}\n\nexport interface ContainerMoveIntentInput {\n  id?: string;\n  parentContainerId: string;\n  previousParentContainerId?: string | null | undefined;\n}\n\nexport interface ContainerCreateIntentErrorInput {\n  containerId: string;\n  expectedIntentId: string;\n  expectedUpdatedAt: string;\n  message: string;\n  stillCurrent?: (() => boolean) | undefined;\n}\n\nexport type ContainerCreateIntentErrorInputRecorder = (\n  execSql: ExecSql,\n  input: ContainerCreateIntentErrorInput,\n) => Promise<void>;\n\nexport interface ContainerMoveIntentRevisionInput {\n  containerId: string;\n  expectedIntentId: string;\n  expectedUpdatedAt: string;\n  stillCurrent: () => boolean;\n}\n\nexport interface ContainerCreateIntentRevisionInput\n  extends ContainerMoveIntentRevisionInput {\n  remoteContainerId: string;\n  remoteMetadataAccessStateHash: string;\n  remoteMetadataDocumentId: string;\n  /** The remote parent now; a move settlement queues cites it as previous. */\n  supersededMovePreviousParentId?: string | undefined;\n  /**\n   * The parent the create committed under. A desired parent equal to it, or\n   * to the current one, owes no move: the user never moved the folder away,\n   * and a later remote move by another writer stands.\n   */\n  createdParentContainerId?: string | undefined;\n  /** The parent the settled intent wants. */\n  desiredParentContainerId?: string | undefined;\n}\n\nexport interface LocalRootDescendantReparentInput {\n  containerId: string;\n  parentContainerId: string | null;\n  updateCreateIntent?: boolean | undefined;\n}\n\n/**\n * A container's metadata document record plus its durable content: the full\n * Loro updates export of the metadata document, stored in the shared\n * history-checkpoint table under the container-metadata app kind. Metadata\n * documents are tiny registries, so the whole update log is the checkpoint.\n */\nexport interface ContainerMetadataRecord extends DocumentRecord {\n  metadataUpdates: string;\n}\n\nexport interface StoredContainerState {\n  container: ContainerRecord;\n  record: ContainerMetadataRecord | null;\n}\n\nexport interface ContainerRemoval {\n  containerId: string;\n  reason: \"access_revoked\" | \"deleted\";\n  updatedAt: string;\n}\n\nexport interface ContainerHydrationTombstone extends ContainerRemoval {\n  generation: number;\n}\n\nexport interface ContainerDeletionGuard {\n  containerId: string;\n  expectedContainer: ContainerRecord | null;\n}\n\nexport interface SaveContainerOptions {\n  createIntent?: ContainerCreateIntentInput;\n  stillCurrent?: (() => boolean) | undefined;\n  localUpdatedAt?: string;\n  moveIntent?: ContainerMoveIntentInput | undefined;\n  serverTimestamps?:\n    | {\n        createdAt?: string | null;\n        updatedAt?: string | null;\n      }\n    | undefined;\n  updatedAt?: string;\n}\n\nexport interface SaveContainerWithPendingUpdateOptions\n  extends SaveContainerOptions {\n  pendingUpdate: PendingUpdateFields;\n}\n\nexport interface ContainerContentsPersistence\n  extends DormantMetadataSweepPersistence {\n  containerExists: (execSql: ExecSql, containerId: string) => Promise<boolean>;\n  /**\n   * Create an absent remotely hydrated container only when no newer durable\n   * tombstone or concurrent container/dormant-metadata mutation won first.\n   */\n  commitHydratedContainer: (\n    execSql: ExecSql,\n    input: {\n      container: ContainerRecord;\n      expectedDormantRecord: ContainerMetadataRecord | null;\n      /** Tombstone observed before the remote request began, or null. */\n      expectedHydrationTombstone?:\n        | ContainerHydrationTombstone\n        | null\n        | undefined;\n      /** Current placement verified and pinned before recovery insertion. */\n      expectedPlacementCheckpoint?: AccessManifestCheckpoint | undefined;\n      record: ContainerMetadataRecord;\n      remoteUpdatedAt: string;\n      saveOptions: {\n        localUpdatedAt?: string;\n        serverTimestamps?:\n          | {\n              createdAt?: string | null;\n              updatedAt?: string | null;\n            }\n          | undefined;\n      };\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<\n    { committed: true; container: ContainerRecord } | { committed: false }\n  >;\n  /** Capture anti-resurrection fences immediately before a remote fetch. */\n  loadContainerHydrationTombstones: (\n    execSql: ExecSql,\n  ) => Promise<ReadonlyArray<ContainerHydrationTombstone>>;\n  deleteContainer: (\n    execSql: ExecSql,\n    containerId: string,\n    options?: {\n      reason?: ContainerRemoval[\"reason\"];\n      updatedAt?: string;\n    },\n  ) => Promise<void>;\n  deleteContainers: (\n    execSql: ExecSql,\n    removals: ReadonlyArray<ContainerRemoval>,\n    options?: {\n      /** Must run inside the deletion transaction before any row is removed. */\n      beforeDeleteInTransaction?:\n        | ((transactionExecSql: ExecSql) => Promise<boolean>)\n        | undefined;\n      /** Unsigned discovery removes listings but preserves metadata and local intent. */\n      discoveryOnly?: boolean;\n      /**\n       * Request-time states rechecked inside the deletion transaction. An\n       * absent or changed row means another pane won and aborts the cascade.\n       */\n      expectedContainers?: ReadonlyArray<ContainerDeletionGuard>;\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<ReadonlyArray<string>>;\n  deletePendingUpdates: (\n    execSql: ExecSql,\n    containerId: string,\n  ) => Promise<void>;\n  deletePendingUpdate: (execSql: ExecSql, id: string) => Promise<void>;\n  ensureSchema: (execSql: ExecSql) => Promise<void>;\n  enqueuePendingUpdate: (\n    execSql: ExecSql,\n    input: PendingUpdateFields & { containerId: string },\n  ) => Promise<string>;\n  listPendingCreateIntents: (\n    execSql: ExecSql,\n  ) => Promise<ContainerCreateIntentRecord[]>;\n  // Every move intent that has not yet synced, regardless of syncStatus —\n  // a blocked move (destination parent not synced yet) is still unsynced, and\n  // synced moves are deleted (see markMoveIntentRevisionSynced), so every surviving\n  // row qualifies. Blocked intents replay too: \"blocked\" names the reason the\n  // last attempt could not proceed, not a terminal verdict.\n  listUnsyncedMoveIntents: (\n    execSql: ExecSql,\n  ) => Promise<ContainerMoveIntentRecord[]>;\n  listContainerIdsWithPendingUpdates: (\n    execSql: ExecSql,\n    containerIds: ReadonlyArray<string>,\n  ) => Promise<string[]>;\n  listContainerIdsWithPullContinuations: (\n    execSql: ExecSql,\n    containerIds: ReadonlyArray<string>,\n  ) => Promise<string[]>;\n  listPendingUpdates: (\n    execSql: ExecSql,\n    containerId: string,\n  ) => Promise<PendingUpdateRecord[]>;\n  rekeyPendingUpdate: (execSql: ExecSql, id: string) => Promise<string | null>;\n  /** Revision-CAS error recorder used by asynchronous create replay. */\n  recordCreateIntentRevisionError: ContainerCreateIntentErrorInputRecorder;\n  recordMoveIntentError: (\n    execSql: ExecSql,\n    input: {\n      blocked?: boolean | undefined;\n      containerId: string;\n      expectedIntentId?: string | undefined;\n      expectedUpdatedAt?: string | undefined;\n      message: string;\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<void>;\n  reassignContainerDocuments: (\n    execSql: ExecSql,\n    input: {\n      fromContainerId: string;\n      stillCurrent?: (() => boolean) | undefined;\n      toContainerId: string;\n      updatedAt?: string | undefined;\n    },\n  ) => Promise<void>;\n  reconcileLocalRootContainer: (\n    execSql: ExecSql,\n    input: {\n      descendantReparents: ReadonlyArray<LocalRootDescendantReparentInput>;\n      localRootContainerId: string;\n      remoteOrganizationId: string;\n      remoteRootContainerId: string;\n      stillCurrent?: (() => boolean) | undefined;\n      updatedAt?: string | undefined;\n    },\n  ) => Promise<void>;\n  reconcileLocalSystemContainer: (\n    execSql: ExecSql,\n    input: {\n      localContainerId: string;\n      remoteContainerId: string;\n      remoteOrganizationId: string;\n      stillCurrent?: (() => boolean) | undefined;\n      updatedAt?: string | undefined;\n    },\n  ) => Promise<void>;\n  loadContainers: (\n    execSql: ExecSql,\n  ) => Promise<ReadonlyArray<StoredContainerState>>;\n  loadContainerMetadataState: (\n    execSql: ExecSql,\n    containerId: string,\n  ) => Promise<StoredContainerState | null>;\n  /**\n   * The organization and metadata target this device holds for a container,\n   * from its live row or retained dormant metadata; null when never held.\n   */\n  loadHeldContainerBinding: (\n    execSql: ExecSql,\n    containerId: string,\n  ) => Promise<HeldContainerBinding | null>;\n  /** Whether a held folder was re-homed away from this organization. */\n  isSupersededContainerBinding: (\n    execSql: ExecSql,\n    input: { containerId: string; organizationId: string },\n  ) => Promise<boolean>;\n  /**\n   * Move a held folder to the binding its own user re-created it under,\n   * resetting the metadata record's remote stream; false if the held binding\n   * changed since it was read.\n   */\n  rebindHeldContainer: (\n    execSql: ExecSql,\n    input: {\n      containerId: string;\n      expected: HeldContainerBinding;\n      next: { metadataDocumentId: string; organizationId: string };\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<boolean>;\n  /**\n   * Load a container-metadata record by container id alone, without\n   * requiring a containers row — the dormant shape row 4's access_revoked\n   * branch leaves behind, re-attached on rehydration.\n   */\n  loadContainerMetadataRecord: (\n    execSql: ExecSql,\n    containerId: string,\n  ) => Promise<ContainerMetadataRecord | null>;\n  /**\n   * Atomically replace the exact rejected metadata pull continuation with its\n   * durable recovery marker and return the authoritative current record.\n   */\n  invalidateMetadataPullContinuation: (\n    execSql: ExecSql,\n    input: {\n      accessEpoch: number;\n      accessStateHash: string | null;\n      continuation: DocumentSyncPullContinuation;\n      containerId: string;\n      contentKeyBundle: string | null;\n      documentId: string;\n      documentKekTargets: string | null;\n      documentManifestBundle: string | null;\n      lastCommitLsn: string | null;\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<ContainerMetadataRecord | null>;\n  /**\n   * Conditionally commit metadata content, its outgoing row, accepted queue\n   * settlement, container fields, and the canonical record in one transaction.\n   */\n  commitMetadataMutation: (\n    execSql: ExecSql,\n    input: {\n      acceptedPendingUpdateIds: readonly string[];\n      clearSyncFailure?: boolean | undefined;\n      container: ContainerRecord;\n      expectedContainer: ContainerRecord;\n      expectedRecord: ContainerMetadataRecord;\n      createIntentSettlement?:\n        | {\n            containerId: string;\n            expectedIntentId: string;\n            expectedUpdatedAt: string;\n            remoteContainerId: string;\n            remoteMetadataAccessStateHash: string;\n            remoteMetadataDocumentId: string;\n            /**\n             * When present, an overtaking create revision is adopted as the\n             * desired local parent and converted to a move from this remotely\n             * committed parent instead of rejecting the remote identity.\n             */\n            supersededMovePreviousParentId?: string | undefined;\n          }\n        | undefined;\n      moveIntentSettlement?:\n        | {\n            containerId: string;\n            expectedIntentId: string;\n            expectedUpdatedAt: string;\n          }\n        | undefined;\n      pendingUpdate?: PendingUpdateFields | undefined;\n      preserveDurableStructureWhenPending?: boolean | undefined;\n      record: ContainerMetadataRecord;\n      saveOptions?:\n        | {\n            createIntent?: ContainerCreateIntentInput;\n            localUpdatedAt?: string;\n            moveIntent?: ContainerMoveIntentInput | undefined;\n            serverTimestamps?:\n              | {\n                  createdAt?: string | null;\n                  updatedAt?: string | null;\n                }\n              | undefined;\n            updatedAt?: string;\n          }\n        | undefined;\n      settleAcceptedPendingOnConflict: boolean;\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<\n    | {\n        committed: true;\n        container: ContainerRecord;\n        createIntentSettled?: true | undefined;\n        moveIntentSettled?: true | undefined;\n      }\n    | {\n        committed: false;\n        currentState: StoredContainerState | null;\n        staleServerState?: true;\n      }\n  >;\n  settleAcceptedMetadataPendingUpdates: (\n    execSql: ExecSql,\n    input: {\n      containerId: string;\n      expectedRecord: ContainerMetadataRecord;\n      pendingUpdateIds: readonly string[];\n      stillCurrent?: (() => boolean) | undefined;\n    },\n  ) => Promise<StoredContainerState | null>;\n  saveContainer: (\n    execSql: ExecSql,\n    container: ContainerRecord,\n    record: ContainerMetadataRecord | null,\n    options?: SaveContainerOptions,\n  ) => Promise<ContainerRecord>;\n  /**\n   * Atomically saves a container and enqueues its first metadata update.\n   * Host adapters must implement the compound write in their own transaction.\n   */\n  saveContainerWithPendingUpdate: (\n    execSql: ExecSql,\n    container: ContainerRecord,\n    record: ContainerMetadataRecord,\n    options: SaveContainerWithPendingUpdateOptions,\n  ) => Promise<ContainerRecord>;\n  saveContainerAndDeletePendingUpdates: (\n    execSql: ExecSql,\n    container: ContainerRecord,\n    record: ContainerMetadataRecord,\n    pendingUpdateIds: readonly string[],\n  ) => Promise<ContainerRecord>;\n  /**\n   * Revision-CAS settlement used by asynchronous create replay. Invalid\n   * adapters are rejected before the remote mutation begins.\n   */\n  markCreateIntentRevisionSynced: (\n    execSql: ExecSql,\n    input: ContainerCreateIntentRevisionInput,\n  ) => Promise<boolean>;\n  /**\n   * Explicit revision-CAS settlement. Move replay instead settles inside\n   * commitMetadataMutation and requires its atomic acknowledgment.\n   */\n  markMoveIntentRevisionSynced: (\n    execSql: ExecSql,\n    input: ContainerMoveIntentRevisionInput,\n  ) => Promise<boolean>;\n  /**\n   * Drop a move revision the server refuses for good and restore the\n   * folder's previous parent in the same transaction; false if superseded.\n   */\n  abandonMoveIntentRevision: (\n    execSql: ExecSql,\n    input: ContainerMoveIntentRevisionInput & {\n      previousParentContainerId: string;\n    },\n  ) => Promise<boolean>;\n}\n"]}

package/data/persistence/container-contents/containerDeletionPersistence.js

@@ -138,6 +138,9 @@ export async function deleteStoredContainers(execSql, removals, options) {
         await sqlContainerSyncWatermarkPersistence.ensureSchema(lockedExecSql);
         const runtime = getClientSQLitePersistenceRuntime(lockedExecSql);
         const remove = async (tx) => {
+            if (options?.beforeDeleteInTransaction &&
+                !(await options.beforeDeleteInTransaction(lockedExecSql)))
+                return [];
             if (!(await canApplyContainerRemovals({
                 expectedContainers: options?.expectedContainers,
                 removals: uniqueRemovals,

package/data/persistence/container-contents/containerDeletionPersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"containerDeletionPersistence.js","sourceRoot":"","sources":["containerDeletionPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,oBAAoB,EACpB,yBAAyB,EACzB,UAAU,EACV,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,eAAe,EACf,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,sCAAsC,EACtC,oCAAoC,GACrC,MAAM,iDAAiD,CAAC;AAMzD,OAAO,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACrF,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,gDAAgD,EAAE,MAAM,6BAA6B,CAAC;AAC/F,OAAO,EACL,mCAAmC,EACnC,qCAAqC,GACtC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,gDAAgD,EAChD,2CAA2C,GAC5C,MAAM,4BAA4B,CAAC;AAMpC,SAAS,0BAA0B,CACjC,QAAyC;IAEzC,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAA4B,CAAC;IACjE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9D,IACE,CAAC,OAAO;YACR,CAAC,OAAO,CAAC,MAAM,KAAK,gBAAgB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC;YACrE,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;gBAChC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,EACxC,CAAC;YACD,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,wBAAwB,CAC/B,EAAgC,EAChC,YAAmC;IAEnC,OAAO,EAAE;SACN,MAAM,CAAC;QACN,oBAAoB,EAAE,UAAU,CAAC,oBAAoB;QACrD,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,eAAe,EAAE,UAAU,CAAC,eAAe;QAC3C,eAAe,EAAE,UAAU,CAAC,eAAe;QAC3C,UAAU,EAAE,UAAU,CAAC,UAAU;KAClC,CAAC;SACD,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAMD,SAAS,uBAAuB,CAC9B,GAAoC,EACpC,KAA6B;IAE7B,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACzC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,CAAC;IACrE,OAAO,CACL,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;QACtB,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;QAC9C,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAClC,GAAG,CAAC,kBAAkB,KAAK,QAAQ,CAAC,kBAAkB;QACtD,GAAG,CAAC,UAAU,KAAK,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC;QAChD,GAAG,CAAC,oBAAoB,KAAK,CAAC,QAAQ,CAAC,oBAAoB,IAAI,MAAM,CAAC;QACtE,GAAG,CAAC,eAAe,KAAK,CAAC,QAAQ,CAAC,eAAe,IAAI,IAAI,CAAC;QAC1D,GAAG,CAAC,eAAe,KAAK,CAAC,QAAQ,CAAC,eAAe,IAAI,IAAI,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,KAIxC;IACC,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAChD,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CACrD,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CACzE,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAC3E,CAAC;IACF,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE;QACtC,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACjD,OAAO,CACL,CAAC,CAAC,KAAK,IAAI,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC,UAAU,EAAE,eAAe,IAAI,IAAI;gBAClC,UAAU,CAAC,eAAe,IAAI,OAAO,CAAC,SAAS,CAAC,CACnD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,KAI7C;IACC,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC5C,MAAM,kBAAkB,GAAG,MAAM,KAAK,CAAC,EAAE;SACtC,MAAM,CAAC;QACN,WAAW,EAAE,UAAU,CAAC,EAAE;QAC1B,cAAc,EAAE,UAAU,CAAC,cAAc;KAC1C,CAAC;SACD,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,2CAA2C,CAC/C,KAAK,CAAC,EAAE,EACR,kBAAkB,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CACvC,SAAS,CAAC,WAAW;QACnB,CAAC,CAAC;YACE;gBACE,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,cAAc,EAAE,SAAS,CAAC,cAAc;gBACxC,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B;SACF;QACH,CAAC,CAAC,EAAE,CACP,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAMrC;IACC,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1E,MAAM,kCAAkC,CAAC;QACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,MAAM,8BAA8B,CAAC;QACnC,YAAY,EAAE,KAAK,CAAC,mBAAmB;QACvC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,6EAA6E;IAC7E,MAAM,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,gDAAgD,CAAC;QACrD,QAAQ,EAAE,KAAK,CAAC,aAAa;YAC3B,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC/B,GAAG,OAAO;gBACV,SAAS,EAAE,eAAe;aAC3B,CAAC,CAAC;YACL,CAAC,CAAC,KAAK,CAAC,QAAQ;QAClB,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,mCAAmC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,MAAM,qCAAqC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,sBAAsB,CAAC;aAC9B,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;aAChE,GAAG,EAAE,CAAC;QACT,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,oBAAoB,CAAC;aAC5B,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;aAC9D,GAAG,EAAE,CAAC;IACX,CAAC;IACD,MAAM,gCAAgC,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAC/D,MAAM,gDAAgD,CACpD,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,iBAAiB,CACxB,CAAC;IACF,MAAM,sCAAsC,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACrE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAwE,EACxE,QAAyE,EACzE,OAAyE;IAEzE,MAAM,cAAc,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3C,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,eAAe,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;QACxE,MAAM,eAAe,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;QAC/D,MAAM,qBAAqB,CAAC,aAAa,CAAC,CAAC;QAC3C,MAAM,eAAe,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;QAClE,MAAM,eAAe,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;QAChE,MAAM,8BAA8B,CAAC,aAAa,CAAC,CAAC;QACpD,MAAM,oCAAoC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,iCAAiC,CAAC,aAAa,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,KAAK,EAAE,EAAgC,EAAE,EAAE;YACxD,IACE,CAAC,CAAC,MAAM,yBAAyB,CAAC;gBAChC,kBAAkB,EAAE,OAAO,EAAE,kBAAkB;gBAC/C,QAAQ,EAAE,cAAc;gBACxB,EAAE;aACH,CAAC,CAAC,EACH,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,mBAAmB,GAAG,OAAO,EAAE,aAAa;gBAChD,CAAC,CAAC,MAAM,2BAA2B,CAC/B,EAAE,EACF,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CACrD;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,sBAAsB,CAAC;gBAC5B,aAAa,EAAE,OAAO,EAAE,aAAa;gBACrC,iBAAiB,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACpD,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC;oBAC/C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAC1B;gBACD,QAAQ,EAAE,cAAc;gBACxB,mBAAmB;gBACnB,EAAE;aACH,CAAC,CAAC;QACL,CAAC,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAC9C,MAAM,EACN,OAAO,CAAC,YAAY,EACpB,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;QACF,OAAO,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { inArray } from \"drizzle-orm\";\nimport { ensureDocumentProjectionTables } from \"../../sqlite/documentPersistence\";\nimport {\n  containerCreateIntents,\n  containerCreateIntentTables,\n  containerMoveIntents,\n  containerMoveIntentTables,\n  containers,\n  documentContainerProjectionTables,\n  documentMoveIntentTables,\n} from \"../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport {\n  ensureSqlTables,\n  runSerializedSqlMutation,\n} from \"../../sqlite/sqlSchema\";\nimport {\n  deleteContainerRowsInTransaction,\n  ensureContainerTables,\n} from \"../containers/containerPersistence\";\nimport {\n  deleteContainerWatermarksInTransaction,\n  sqlContainerSyncWatermarkPersistence,\n} from \"../containers/containerSyncWatermarkPersistence\";\nimport type {\n  ContainerContentsPersistence,\n  ContainerDeletionGuard,\n  ContainerRemoval,\n} from \"./containerContentsPersistenceTypes\";\nimport { recordContainerHydrationTombstones } from \"./containerHydrationPersistence\";\nimport { containerIdsWithRemovalWork } from \"./containerRemovalWork\";\nimport { repairDocumentsForRemovedContainersInTransaction } from \"./containerStructuralRepair\";\nimport {\n  refreshPlacementIntentsAfterRemoval,\n  repairLinkIntentsForRemovedContainers,\n} from \"./documentLinkRemovalRepair\";\nimport {\n  deleteContainerMetadataDocumentRowsInTransaction,\n  retainDormantContainerMetadataInTransaction,\n} from \"./dormantContainerMetadata\";\n\ntype DeleteContainerOptions = NonNullable<\n  Parameters<ContainerContentsPersistence[\"deleteContainers\"]>[2]\n>;\n\nfunction normalizeContainerRemovals(\n  removals: ReadonlyArray<ContainerRemoval>,\n): ContainerRemoval[] {\n  const removalByContainerId = new Map<string, ContainerRemoval>();\n  for (const removal of removals) {\n    const current = removalByContainerId.get(removal.containerId);\n    if (\n      !current ||\n      (current.reason === \"access_revoked\" && removal.reason === \"deleted\") ||\n      (current.reason === removal.reason &&\n        current.updatedAt < removal.updatedAt)\n    ) {\n      removalByContainerId.set(removal.containerId, removal);\n    }\n  }\n  return Array.from(removalByContainerId.values());\n}\n\nfunction loadGuardedContainerRows(\n  tx: ClientSQLiteTransactionScope,\n  containerIds: ReadonlyArray<string>,\n) {\n  return tx\n    .select({\n      effectiveAccessLevel: containers.effectiveAccessLevel,\n      id: containers.id,\n      metadataDocumentId: containers.metadataDocumentId,\n      organizationId: containers.organizationId,\n      parentId: containers.parentId,\n      serverCreatedAt: containers.serverCreatedAt,\n      serverUpdatedAt: containers.serverUpdatedAt,\n      systemSlot: containers.systemSlot,\n    })\n    .from(containers)\n    .where(inArray(containers.id, [...containerIds]));\n}\n\ntype GuardedContainerRow = Awaited<\n  ReturnType<typeof loadGuardedContainerRows>\n>[number];\n\nfunction sameGuardedContainerRow(\n  row: GuardedContainerRow | undefined,\n  guard: ContainerDeletionGuard,\n): boolean {\n  const expected = guard.expectedContainer;\n  if (!row || !expected) return row === undefined && expected === null;\n  return (\n    row.id === expected.id &&\n    row.organizationId === expected.organizationId &&\n    row.parentId === expected.parentId &&\n    row.metadataDocumentId === expected.metadataDocumentId &&\n    row.systemSlot === (expected.systemSlot ?? null) &&\n    row.effectiveAccessLevel === (expected.effectiveAccessLevel ?? \"read\") &&\n    row.serverCreatedAt === (expected.serverCreatedAt ?? null) &&\n    row.serverUpdatedAt === (expected.serverUpdatedAt ?? null)\n  );\n}\n\nasync function canApplyContainerRemovals(input: {\n  expectedContainers: DeleteContainerOptions[\"expectedContainers\"];\n  removals: ReadonlyArray<ContainerRemoval>;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<boolean> {\n  const currentRows = await loadGuardedContainerRows(\n    input.tx,\n    input.removals.map((removal) => removal.containerId),\n  );\n  const currentRowById = new Map(\n    currentRows.flatMap((row) => (row.id ? ([[row.id, row]] as const) : [])),\n  );\n  const guardById = new Map(\n    input.expectedContainers?.map((guard) => [guard.containerId, guard]) ?? [],\n  );\n  return input.removals.every((removal) => {\n    const currentRow = currentRowById.get(removal.containerId);\n    const guard = guardById.get(removal.containerId);\n    return (\n      (!guard || sameGuardedContainerRow(currentRow, guard)) &&\n      (currentRow?.serverUpdatedAt == null ||\n        currentRow.serverUpdatedAt <= removal.updatedAt)\n    );\n  });\n}\n\nasync function retainRemovedContainerMetadata(input: {\n  containerIds: ReadonlyArray<string>;\n  retainedAt: string;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  if (input.containerIds.length === 0) return;\n  const retainedContainers = await input.tx\n    .select({\n      containerId: containers.id,\n      organizationId: containers.organizationId,\n    })\n    .from(containers)\n    .where(inArray(containers.id, [...input.containerIds]));\n  await retainDormantContainerMetadataInTransaction(\n    input.tx,\n    retainedContainers.flatMap((container) =>\n      container.containerId\n        ? [\n            {\n              containerId: container.containerId,\n              organizationId: container.organizationId,\n              retainedAt: input.retainedAt,\n            },\n          ]\n        : [],\n    ),\n  );\n}\n\nasync function applyContainerRemovals(input: {\n  discoveryOnly: DeleteContainerOptions[\"discoveryOnly\"];\n  metadataDeleteIds: ReadonlyArray<string>;\n  removals: ReadonlyArray<ContainerRemoval>;\n  retainedMetadataIds: ReadonlyArray<string>;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<ReadonlyArray<string>> {\n  const containerIds = input.removals.map((removal) => removal.containerId);\n  await recordContainerHydrationTombstones({\n    removals: input.removals,\n    tx: input.tx,\n  });\n  await retainRemovedContainerMetadata({\n    containerIds: input.retainedMetadataIds,\n    retainedAt: new Date().toISOString(),\n    tx: input.tx,\n  });\n  // Listing clocks are untrusted; they cannot advance local projection clocks.\n  const localObservedAt = new Date().toISOString();\n  await repairDocumentsForRemovedContainersInTransaction({\n    removals: input.discoveryOnly\n      ? input.removals.map((removal) => ({\n          ...removal,\n          updatedAt: localObservedAt,\n        }))\n      : input.removals,\n    tx: input.tx,\n  });\n  if (input.discoveryOnly) {\n    await refreshPlacementIntentsAfterRemoval({ containerIds, tx: input.tx });\n  } else {\n    await repairLinkIntentsForRemovedContainers({ containerIds, tx: input.tx });\n    await input.tx\n      .delete(containerCreateIntents)\n      .where(inArray(containerCreateIntents.containerId, containerIds))\n      .run();\n    await input.tx\n      .delete(containerMoveIntents)\n      .where(inArray(containerMoveIntents.containerId, containerIds))\n      .run();\n  }\n  await deleteContainerRowsInTransaction(input.tx, containerIds);\n  await deleteContainerMetadataDocumentRowsInTransaction(\n    input.tx,\n    input.metadataDeleteIds,\n  );\n  await deleteContainerWatermarksInTransaction(input.tx, containerIds);\n  return containerIds;\n}\n\nexport async function deleteStoredContainers(\n  execSql: Parameters<ContainerContentsPersistence[\"deleteContainers\"]>[0],\n  removals: Parameters<ContainerContentsPersistence[\"deleteContainers\"]>[1],\n  options?: Parameters<ContainerContentsPersistence[\"deleteContainers\"]>[2],\n): Promise<ReadonlyArray<string>> {\n  const uniqueRemovals = normalizeContainerRemovals(removals);\n  if (uniqueRemovals.length === 0) return [];\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await ensureSqlTables(lockedExecSql, documentContainerProjectionTables);\n    await ensureSqlTables(lockedExecSql, documentMoveIntentTables);\n    await ensureContainerTables(lockedExecSql);\n    await ensureSqlTables(lockedExecSql, containerCreateIntentTables);\n    await ensureSqlTables(lockedExecSql, containerMoveIntentTables);\n    await ensureDocumentProjectionTables(lockedExecSql);\n    await sqlContainerSyncWatermarkPersistence.ensureSchema(lockedExecSql);\n    const runtime = getClientSQLitePersistenceRuntime(lockedExecSql);\n    const remove = async (tx: ClientSQLiteTransactionScope) => {\n      if (\n        !(await canApplyContainerRemovals({\n          expectedContainers: options?.expectedContainers,\n          removals: uniqueRemovals,\n          tx,\n        }))\n      ) {\n        return [];\n      }\n      const retainedMetadataIds = options?.discoveryOnly\n        ? await containerIdsWithRemovalWork(\n            tx,\n            uniqueRemovals.map((removal) => removal.containerId),\n          )\n        : [];\n      return applyContainerRemovals({\n        discoveryOnly: options?.discoveryOnly,\n        metadataDeleteIds: uniqueRemovals.flatMap((removal) =>\n          retainedMetadataIds.includes(removal.containerId)\n            ? []\n            : [removal.containerId],\n        ),\n        removals: uniqueRemovals,\n        retainedMetadataIds,\n        tx,\n      });\n    };\n    if (!options?.stillCurrent) {\n      return runtime.transaction(remove, { behavior: \"immediate\" });\n    }\n    const outcome = await runtime.guardedTransaction(\n      remove,\n      options.stillCurrent,\n      { behavior: \"immediate\" },\n    );\n    return outcome.result ?? [];\n  });\n}\n"]}
+{"version":3,"file":"containerDeletionPersistence.js","sourceRoot":"","sources":["containerDeletionPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,oBAAoB,EACpB,yBAAyB,EACzB,UAAU,EACV,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,eAAe,EACf,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,sCAAsC,EACtC,oCAAoC,GACrC,MAAM,iDAAiD,CAAC;AAMzD,OAAO,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACrF,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,gDAAgD,EAAE,MAAM,6BAA6B,CAAC;AAC/F,OAAO,EACL,mCAAmC,EACnC,qCAAqC,GACtC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,gDAAgD,EAChD,2CAA2C,GAC5C,MAAM,4BAA4B,CAAC;AAMpC,SAAS,0BAA0B,CACjC,QAAyC;IAEzC,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAA4B,CAAC;IACjE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9D,IACE,CAAC,OAAO;YACR,CAAC,OAAO,CAAC,MAAM,KAAK,gBAAgB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC;YACrE,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;gBAChC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,EACxC,CAAC;YACD,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,wBAAwB,CAC/B,EAAgC,EAChC,YAAmC;IAEnC,OAAO,EAAE;SACN,MAAM,CAAC;QACN,oBAAoB,EAAE,UAAU,CAAC,oBAAoB;QACrD,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,eAAe,EAAE,UAAU,CAAC,eAAe;QAC3C,eAAe,EAAE,UAAU,CAAC,eAAe;QAC3C,UAAU,EAAE,UAAU,CAAC,UAAU;KAClC,CAAC;SACD,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAMD,SAAS,uBAAuB,CAC9B,GAAoC,EACpC,KAA6B;IAE7B,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACzC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,CAAC;IACrE,OAAO,CACL,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;QACtB,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;QAC9C,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAClC,GAAG,CAAC,kBAAkB,KAAK,QAAQ,CAAC,kBAAkB;QACtD,GAAG,CAAC,UAAU,KAAK,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC;QAChD,GAAG,CAAC,oBAAoB,KAAK,CAAC,QAAQ,CAAC,oBAAoB,IAAI,MAAM,CAAC;QACtE,GAAG,CAAC,eAAe,KAAK,CAAC,QAAQ,CAAC,eAAe,IAAI,IAAI,CAAC;QAC1D,GAAG,CAAC,eAAe,KAAK,CAAC,QAAQ,CAAC,eAAe,IAAI,IAAI,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,KAIxC;IACC,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAChD,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CACrD,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CACzE,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAC3E,CAAC;IACF,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE;QACtC,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACjD,OAAO,CACL,CAAC,CAAC,KAAK,IAAI,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC,UAAU,EAAE,eAAe,IAAI,IAAI;gBAClC,UAAU,CAAC,eAAe,IAAI,OAAO,CAAC,SAAS,CAAC,CACnD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,KAI7C;IACC,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC5C,MAAM,kBAAkB,GAAG,MAAM,KAAK,CAAC,EAAE;SACtC,MAAM,CAAC;QACN,WAAW,EAAE,UAAU,CAAC,EAAE;QAC1B,cAAc,EAAE,UAAU,CAAC,cAAc;KAC1C,CAAC;SACD,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,2CAA2C,CAC/C,KAAK,CAAC,EAAE,EACR,kBAAkB,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CACvC,SAAS,CAAC,WAAW;QACnB,CAAC,CAAC;YACE;gBACE,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,cAAc,EAAE,SAAS,CAAC,cAAc;gBACxC,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B;SACF;QACH,CAAC,CAAC,EAAE,CACP,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAMrC;IACC,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1E,MAAM,kCAAkC,CAAC;QACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,MAAM,8BAA8B,CAAC;QACnC,YAAY,EAAE,KAAK,CAAC,mBAAmB;QACvC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,6EAA6E;IAC7E,MAAM,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,gDAAgD,CAAC;QACrD,QAAQ,EAAE,KAAK,CAAC,aAAa;YAC3B,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC/B,GAAG,OAAO;gBACV,SAAS,EAAE,eAAe;aAC3B,CAAC,CAAC;YACL,CAAC,CAAC,KAAK,CAAC,QAAQ;QAClB,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,mCAAmC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,MAAM,qCAAqC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,sBAAsB,CAAC;aAC9B,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;aAChE,GAAG,EAAE,CAAC;QACT,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,oBAAoB,CAAC;aAC5B,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;aAC9D,GAAG,EAAE,CAAC;IACX,CAAC;IACD,MAAM,gCAAgC,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAC/D,MAAM,gDAAgD,CACpD,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,iBAAiB,CACxB,CAAC;IACF,MAAM,sCAAsC,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACrE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAwE,EACxE,QAAyE,EACzE,OAAyE;IAEzE,MAAM,cAAc,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3C,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,eAAe,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;QACxE,MAAM,eAAe,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;QAC/D,MAAM,qBAAqB,CAAC,aAAa,CAAC,CAAC;QAC3C,MAAM,eAAe,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;QAClE,MAAM,eAAe,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;QAChE,MAAM,8BAA8B,CAAC,aAAa,CAAC,CAAC;QACpD,MAAM,oCAAoC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,iCAAiC,CAAC,aAAa,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,KAAK,EAAE,EAAgC,EAAE,EAAE;YACxD,IACE,OAAO,EAAE,yBAAyB;gBAClC,CAAC,CAAC,MAAM,OAAO,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAC;gBAEzD,OAAO,EAAE,CAAC;YACZ,IACE,CAAC,CAAC,MAAM,yBAAyB,CAAC;gBAChC,kBAAkB,EAAE,OAAO,EAAE,kBAAkB;gBAC/C,QAAQ,EAAE,cAAc;gBACxB,EAAE;aACH,CAAC,CAAC,EACH,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,mBAAmB,GAAG,OAAO,EAAE,aAAa;gBAChD,CAAC,CAAC,MAAM,2BAA2B,CAC/B,EAAE,EACF,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CACrD;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,sBAAsB,CAAC;gBAC5B,aAAa,EAAE,OAAO,EAAE,aAAa;gBACrC,iBAAiB,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACpD,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC;oBAC/C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAC1B;gBACD,QAAQ,EAAE,cAAc;gBACxB,mBAAmB;gBACnB,EAAE;aACH,CAAC,CAAC;QACL,CAAC,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAC9C,MAAM,EACN,OAAO,CAAC,YAAY,EACpB,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;QACF,OAAO,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { inArray } from \"drizzle-orm\";\nimport { ensureDocumentProjectionTables } from \"../../sqlite/documentPersistence\";\nimport {\n  containerCreateIntents,\n  containerCreateIntentTables,\n  containerMoveIntents,\n  containerMoveIntentTables,\n  containers,\n  documentContainerProjectionTables,\n  documentMoveIntentTables,\n} from \"../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport {\n  ensureSqlTables,\n  runSerializedSqlMutation,\n} from \"../../sqlite/sqlSchema\";\nimport {\n  deleteContainerRowsInTransaction,\n  ensureContainerTables,\n} from \"../containers/containerPersistence\";\nimport {\n  deleteContainerWatermarksInTransaction,\n  sqlContainerSyncWatermarkPersistence,\n} from \"../containers/containerSyncWatermarkPersistence\";\nimport type {\n  ContainerContentsPersistence,\n  ContainerDeletionGuard,\n  ContainerRemoval,\n} from \"./containerContentsPersistenceTypes\";\nimport { recordContainerHydrationTombstones } from \"./containerHydrationPersistence\";\nimport { containerIdsWithRemovalWork } from \"./containerRemovalWork\";\nimport { repairDocumentsForRemovedContainersInTransaction } from \"./containerStructuralRepair\";\nimport {\n  refreshPlacementIntentsAfterRemoval,\n  repairLinkIntentsForRemovedContainers,\n} from \"./documentLinkRemovalRepair\";\nimport {\n  deleteContainerMetadataDocumentRowsInTransaction,\n  retainDormantContainerMetadataInTransaction,\n} from \"./dormantContainerMetadata\";\n\ntype DeleteContainerOptions = NonNullable<\n  Parameters<ContainerContentsPersistence[\"deleteContainers\"]>[2]\n>;\n\nfunction normalizeContainerRemovals(\n  removals: ReadonlyArray<ContainerRemoval>,\n): ContainerRemoval[] {\n  const removalByContainerId = new Map<string, ContainerRemoval>();\n  for (const removal of removals) {\n    const current = removalByContainerId.get(removal.containerId);\n    if (\n      !current ||\n      (current.reason === \"access_revoked\" && removal.reason === \"deleted\") ||\n      (current.reason === removal.reason &&\n        current.updatedAt < removal.updatedAt)\n    ) {\n      removalByContainerId.set(removal.containerId, removal);\n    }\n  }\n  return Array.from(removalByContainerId.values());\n}\n\nfunction loadGuardedContainerRows(\n  tx: ClientSQLiteTransactionScope,\n  containerIds: ReadonlyArray<string>,\n) {\n  return tx\n    .select({\n      effectiveAccessLevel: containers.effectiveAccessLevel,\n      id: containers.id,\n      metadataDocumentId: containers.metadataDocumentId,\n      organizationId: containers.organizationId,\n      parentId: containers.parentId,\n      serverCreatedAt: containers.serverCreatedAt,\n      serverUpdatedAt: containers.serverUpdatedAt,\n      systemSlot: containers.systemSlot,\n    })\n    .from(containers)\n    .where(inArray(containers.id, [...containerIds]));\n}\n\ntype GuardedContainerRow = Awaited<\n  ReturnType<typeof loadGuardedContainerRows>\n>[number];\n\nfunction sameGuardedContainerRow(\n  row: GuardedContainerRow | undefined,\n  guard: ContainerDeletionGuard,\n): boolean {\n  const expected = guard.expectedContainer;\n  if (!row || !expected) return row === undefined && expected === null;\n  return (\n    row.id === expected.id &&\n    row.organizationId === expected.organizationId &&\n    row.parentId === expected.parentId &&\n    row.metadataDocumentId === expected.metadataDocumentId &&\n    row.systemSlot === (expected.systemSlot ?? null) &&\n    row.effectiveAccessLevel === (expected.effectiveAccessLevel ?? \"read\") &&\n    row.serverCreatedAt === (expected.serverCreatedAt ?? null) &&\n    row.serverUpdatedAt === (expected.serverUpdatedAt ?? null)\n  );\n}\n\nasync function canApplyContainerRemovals(input: {\n  expectedContainers: DeleteContainerOptions[\"expectedContainers\"];\n  removals: ReadonlyArray<ContainerRemoval>;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<boolean> {\n  const currentRows = await loadGuardedContainerRows(\n    input.tx,\n    input.removals.map((removal) => removal.containerId),\n  );\n  const currentRowById = new Map(\n    currentRows.flatMap((row) => (row.id ? ([[row.id, row]] as const) : [])),\n  );\n  const guardById = new Map(\n    input.expectedContainers?.map((guard) => [guard.containerId, guard]) ?? [],\n  );\n  return input.removals.every((removal) => {\n    const currentRow = currentRowById.get(removal.containerId);\n    const guard = guardById.get(removal.containerId);\n    return (\n      (!guard || sameGuardedContainerRow(currentRow, guard)) &&\n      (currentRow?.serverUpdatedAt == null ||\n        currentRow.serverUpdatedAt <= removal.updatedAt)\n    );\n  });\n}\n\nasync function retainRemovedContainerMetadata(input: {\n  containerIds: ReadonlyArray<string>;\n  retainedAt: string;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  if (input.containerIds.length === 0) return;\n  const retainedContainers = await input.tx\n    .select({\n      containerId: containers.id,\n      organizationId: containers.organizationId,\n    })\n    .from(containers)\n    .where(inArray(containers.id, [...input.containerIds]));\n  await retainDormantContainerMetadataInTransaction(\n    input.tx,\n    retainedContainers.flatMap((container) =>\n      container.containerId\n        ? [\n            {\n              containerId: container.containerId,\n              organizationId: container.organizationId,\n              retainedAt: input.retainedAt,\n            },\n          ]\n        : [],\n    ),\n  );\n}\n\nasync function applyContainerRemovals(input: {\n  discoveryOnly: DeleteContainerOptions[\"discoveryOnly\"];\n  metadataDeleteIds: ReadonlyArray<string>;\n  removals: ReadonlyArray<ContainerRemoval>;\n  retainedMetadataIds: ReadonlyArray<string>;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<ReadonlyArray<string>> {\n  const containerIds = input.removals.map((removal) => removal.containerId);\n  await recordContainerHydrationTombstones({\n    removals: input.removals,\n    tx: input.tx,\n  });\n  await retainRemovedContainerMetadata({\n    containerIds: input.retainedMetadataIds,\n    retainedAt: new Date().toISOString(),\n    tx: input.tx,\n  });\n  // Listing clocks are untrusted; they cannot advance local projection clocks.\n  const localObservedAt = new Date().toISOString();\n  await repairDocumentsForRemovedContainersInTransaction({\n    removals: input.discoveryOnly\n      ? input.removals.map((removal) => ({\n          ...removal,\n          updatedAt: localObservedAt,\n        }))\n      : input.removals,\n    tx: input.tx,\n  });\n  if (input.discoveryOnly) {\n    await refreshPlacementIntentsAfterRemoval({ containerIds, tx: input.tx });\n  } else {\n    await repairLinkIntentsForRemovedContainers({ containerIds, tx: input.tx });\n    await input.tx\n      .delete(containerCreateIntents)\n      .where(inArray(containerCreateIntents.containerId, containerIds))\n      .run();\n    await input.tx\n      .delete(containerMoveIntents)\n      .where(inArray(containerMoveIntents.containerId, containerIds))\n      .run();\n  }\n  await deleteContainerRowsInTransaction(input.tx, containerIds);\n  await deleteContainerMetadataDocumentRowsInTransaction(\n    input.tx,\n    input.metadataDeleteIds,\n  );\n  await deleteContainerWatermarksInTransaction(input.tx, containerIds);\n  return containerIds;\n}\n\nexport async function deleteStoredContainers(\n  execSql: Parameters<ContainerContentsPersistence[\"deleteContainers\"]>[0],\n  removals: Parameters<ContainerContentsPersistence[\"deleteContainers\"]>[1],\n  options?: Parameters<ContainerContentsPersistence[\"deleteContainers\"]>[2],\n): Promise<ReadonlyArray<string>> {\n  const uniqueRemovals = normalizeContainerRemovals(removals);\n  if (uniqueRemovals.length === 0) return [];\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await ensureSqlTables(lockedExecSql, documentContainerProjectionTables);\n    await ensureSqlTables(lockedExecSql, documentMoveIntentTables);\n    await ensureContainerTables(lockedExecSql);\n    await ensureSqlTables(lockedExecSql, containerCreateIntentTables);\n    await ensureSqlTables(lockedExecSql, containerMoveIntentTables);\n    await ensureDocumentProjectionTables(lockedExecSql);\n    await sqlContainerSyncWatermarkPersistence.ensureSchema(lockedExecSql);\n    const runtime = getClientSQLitePersistenceRuntime(lockedExecSql);\n    const remove = async (tx: ClientSQLiteTransactionScope) => {\n      if (\n        options?.beforeDeleteInTransaction &&\n        !(await options.beforeDeleteInTransaction(lockedExecSql))\n      )\n        return [];\n      if (\n        !(await canApplyContainerRemovals({\n          expectedContainers: options?.expectedContainers,\n          removals: uniqueRemovals,\n          tx,\n        }))\n      ) {\n        return [];\n      }\n      const retainedMetadataIds = options?.discoveryOnly\n        ? await containerIdsWithRemovalWork(\n            tx,\n            uniqueRemovals.map((removal) => removal.containerId),\n          )\n        : [];\n      return applyContainerRemovals({\n        discoveryOnly: options?.discoveryOnly,\n        metadataDeleteIds: uniqueRemovals.flatMap((removal) =>\n          retainedMetadataIds.includes(removal.containerId)\n            ? []\n            : [removal.containerId],\n        ),\n        removals: uniqueRemovals,\n        retainedMetadataIds,\n        tx,\n      });\n    };\n    if (!options?.stillCurrent) {\n      return runtime.transaction(remove, { behavior: \"immediate\" });\n    }\n    const outcome = await runtime.guardedTransaction(\n      remove,\n      options.stillCurrent,\n      { behavior: \"immediate\" },\n    );\n    return outcome.result ?? [];\n  });\n}\n"]}

package/data/persistence/container-contents/documentPurgePlacement.js

@@ -0,0 +1,15 @@
+import { eq } from "drizzle-orm";
+import { documentMoveIntents, documentMoveIntentTables, } from "../../sqlite/schema.js";
+import { getClientSQLitePersistenceRuntime } from "../../sqlite/sqlitePersistenceRuntime.js";
+import { ensureSqlTables } from "../../sqlite/sqlSchema.js";
+/** Even denied or unavailable placement intent belongs to the local user. */
+export async function hasUnsettledDocumentPlacement(execSql, localId) {
+    await ensureSqlTables(execSql, documentMoveIntentTables);
+    const [intent] = await getClientSQLitePersistenceRuntime(execSql)
+        .db.select({ id: documentMoveIntents.id })
+        .from(documentMoveIntents)
+        .where(eq(documentMoveIntents.localId, localId))
+        .limit(1);
+    return intent !== undefined;
+}
+//# sourceMappingURL=documentPurgePlacement.js.map

package/data/persistence/container-contents/documentPurgePlacement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentPurgePlacement.js","sourceRoot":"","sources":["documentPurgePlacement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEvE,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAgB,EAChB,OAAe;IAEf,MAAM,eAAe,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IACzD,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,iCAAiC,CAAC,OAAO,CAAC;SAC9D,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;SACzC,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC/C,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,MAAM,KAAK,SAAS,CAAC;AAC9B,CAAC","sourcesContent":["import { eq } from \"drizzle-orm\";\nimport {\n  documentMoveIntents,\n  documentMoveIntentTables,\n} from \"../../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\n\n/** Even denied or unavailable placement intent belongs to the local user. */\nexport async function hasUnsettledDocumentPlacement(\n  execSql: ExecSql,\n  localId: string,\n): Promise<boolean> {\n  await ensureSqlTables(execSql, documentMoveIntentTables);\n  const [intent] = await getClientSQLitePersistenceRuntime(execSql)\n    .db.select({ id: documentMoveIntents.id })\n    .from(documentMoveIntents)\n    .where(eq(documentMoveIntents.localId, localId))\n    .limit(1);\n  return intent !== undefined;\n}\n"]}

package/data/persistence/documents/documentsPersistence.js

@@ -22,6 +22,7 @@ import { loadStoredDocumentStoreState } from "./internal/documentStoreStatePersi
 import { listDocumentSummaries } from "./internal/documentSummaryQueries.js";
 import { ensureDocumentsSchema } from "./internal/ensureDocumentsSchema.js";
 import { saveHydratedAttachment } from "./internal/hydratedAttachmentPersistence.js";
+import { acknowledgeDocumentOrphanBlobReclaim, deleteOrphanedDocumentSideRows, isDocumentBlobStorageKeyReferenced, listDocumentOrphanBlobReclaims, } from "./internal/orphanSideRows.js";
 import { loadPendingCreateSummary, mapPendingCreateLocalIds, } from "./internal/pendingCreateAdoption.js";
 import { documentRowQueryPersistence } from "./internal/rowQueryPersistence.js";
 import { documentSyncQueuePersistence } from "./internal/syncQueuePersistence.js";
@@ -152,6 +153,12 @@ export async function listDocumentsByContainerIdsOrDocumentIds(execSql, input) {
     return rows.map(mapDocumentSummary);
 }
 export const sqlDocumentsPersistence = {
+    orphanBlobs: {
+        acknowledge: acknowledgeDocumentOrphanBlobReclaim,
+        isReferenced: isDocumentBlobStorageKeyReferenced,
+        list: listDocumentOrphanBlobReclaims,
+        sweep: deleteOrphanedDocumentSideRows,
+    },
     ...documentRowQueryPersistence,
     ...documentSyncQueuePersistence,
     supportsAtomicRecoveryHistoryPruning: true,

package/data/persistence/documents/documentsPersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentsPersistence.js","sourceRoot":"","sources":["documentsPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAY,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAGL,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAgB,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,wCAAwC,EAAE,MAAM,wCAAwC,CAAC;AAClG,OAAO,EAAE,yCAAyC,EAAE,MAAM,gDAAgD,CAAC;AAC3G,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,kCAAkC,EAAE,MAAM,wCAAwC,CAAC;AAC5F,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,oCAAoC,GACrC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,yCAAyC,EAAE,MAAM,4CAA4C,CAAC;AACvG,OAAO,EACL,4BAA4B,EAC5B,kCAAkC,GACnC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,EACL,4BAA4B,EAC5B,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,GACrC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EACL,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAS/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAgB1D,MAAM,qCAAqC,GAAG,qBAAqB,CAAC;AAEpE,KAAK,UAAU,gCAAgC,CAC7C,OAAgB,EAChB,KAA8B,EAC9B,cAA2C,EAC3C,EAAgC;IAEhC,MAAM,CAAC,eAAe,CAAC,GAAG,MAAM,EAAE;SAC/B,MAAM,CAAC,EAAE,UAAU,EAAE,wBAAwB,CAAC,UAAU,EAAE,CAAC;SAC3D,IAAI,CAAC,wBAAwB,CAAC;SAC9B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;SAChE,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAC/B,UAAU,EACV,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,uBAAuB,CACnD,OAAO,EACP,kBAAkB,EAClB,KAAK,CAAC,UAAU,CACjB,CAAC;IACF,MAAM,OAAO,GAAG,eAAe,IAAI,KAAK,CAAC,UAAU,CAAC;IACpD,MAAM,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,CAAC,eAAe,IAAI,cAAc,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,YAAY,CACjE,OAAO,EACP,OAAO,CACR,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,kCAAkC,CACxD,EAAE,EACF,gBAAgB,EAChB,KAAK,CACN,CAAC;IAEF,MAAM,YAAY,GAAyB;QACzC,EAAE,EAAE,OAAO;QACX,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,gBAAgB,EAAE,YAAY,IAAI,qBAAqB;QACrE,IAAI,EAAE,gBAAgB,EAAE,IAAI,IAAI,EAAE;QAClC,KAAK,EAAE,gBAAgB,EAAE,KAAK,IAAI,qCAAqC;QACvE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,IAAI,EAAE;QAC9D,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,IAAI,CAAC;QAC7D,GAAG,SAAS;QACZ,oBAAoB,EAClB,KAAK,CAAC,oBAAoB;YAC1B,gBAAgB,EAAE,oBAAoB;YACtC,IAAI;QACN,GAAG,oCAAoC,CAAC,gBAAgB,EAAE;YACxD,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;KACH,CAAC;IAEF,MAAM,WAAW,GACf,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,SAAS;QACzD,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;QAChC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;QACnD,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,WAAW;QACpB,EAAE;KACH,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,OAAgB,EAChB,KAAmC;IAEnC,MAAM,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,YAAY,CACjE,OAAO,EACP,KAAK,CAAC,OAAO,CACd,CAAC;IACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAC9B,gBAAgB,CAAC,WAAW,EAC5B,KAAK,CAAC,WAAW,CAClB,CAAC;IACF,MAAM,YAAY,GAAyB;QACzC,GAAG,gBAAgB;QACnB,WAAW,EAAE,eAAe;QAC5B,eAAe,EAAE,+BAA+B,CAAC,gBAAgB,EAAE;YACjE,WAAW,EAAE,eAAe;YAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;QACF,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,oCAAoC,CAAC,gBAAgB,EAAE;YACxD,WAAW,EAAE,eAAe;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;KACH,CAAC;IAEF,MAAM,uBAAuB,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAElE,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,MAAM,EAAE;SAC3B,MAAM,CAAC,EAAE,SAAS,EAAE,kBAAkB,CAAC,SAAS,EAAE,CAAC;SACnD,IAAI,CAAC,kBAAkB,CAAC;SACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;SACpD,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,OAAO,iBAAiB,CACtB,YAAY,EACZ,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAgB,EAChB,MAA8C;IAE9C,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,uBAAuB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC1D,OAAO,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CACjE,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,cAAc,GAAG,MAAM,wBAAwB,CAAC,aAAa,CAAC,CAAC;YACrE,MAAM,aAAa,GAAsB,EAAE,CAAC;YAE5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,aAAa,CAAC,IAAI,CAChB,MAAM,gCAAgC,CACpC,aAAa,EACb,KAAK,EACL,cAAc,EACd,EAAE,CACH,CACF,CAAC;YACJ,CAAC;YAED,OAAO,aAAa,CAAC;QACvB,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAgB,EAChB,UAA0D;IAE1D,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,uBAAuB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC1D,OAAO,wCAAwC,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,OAAgB,EAChB,KAGC;IAED,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACjE,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAU,EAAE,CAAC;IAC1B,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC;IAC1E,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,wBAAwB,CAAC;SAChC,IAAI,CAAC,kBAAkB,CAAC;SACxB,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;SACxC,KAAK,CACJ,GAAG,CACD,cAAc,EACd,UAAU,CAAC,kBAAkB,CAAC,YAAY,EAAE;QAC1C,GAAG,6BAA6B;KACjC,CAAC,CACH,CACF;SACA,OAAO,CACN,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAClC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CACjC,CAAC;IAEJ,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAyB;IAC3D,GAAG,2BAA2B;IAC9B,GAAG,4BAA4B;IAC/B,oCAAoC,EAAE,IAAI;IAC1C,sBAAsB;IACtB,mCAAmC,EACjC,yCAAyC;IAC3C,sBAAsB,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAC/D,4BAA4B,CAC1B,OAAO,EACP,KAAK,EACL,oBAAoB,EACpB,uBAAuB,CAAC,YAAY,CACrC;IACH,4BAA4B,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAC/C,kCAAkC,CAChC,OAAO,EACP,KAAK,EACL,uBAAuB,CAAC,YAAY,CACrC;IACH,YAAY,EAAE,qBAAqB;IACnC,qBAAqB;IACrB,wCAAwC;IACxC,0BAA0B,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAC7C,wCAAwC,CACtC,OAAO,EACP,KAAK,EACL,uBAAuB,CAAC,YAAY,EACpC,uBAAuB,CAAC,uBAAuB,CAChD;IACH,mCAAmC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CACxD,yCAAyC,CACvC,OAAO,EACP,OAAO,EACP,uBAAuB,CACxB;IACH,sBAAsB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAC3C,4BAA4B,CAAC,OAAO,EAAE,OAAO,EAAE,uBAAuB,CAAC;IACzE,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO;QAC3C,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAC/D,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CAC1D,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;gBACnD,QAAQ;gBACR,OAAO;gBACP,EAAE;aACH,CAAC,CAAC;YACH,MAAM,gBAAgB,CAAC;gBACrB,QAAQ;gBACR,EAAE;gBACF,SAAS;aACV,CAAC,CAAC;YAEH,OAAO,SAAS,CAAC;QACnB,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CACF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,mCAAmC,CACvC,OAAO,EACP,QAAQ,EACR,gBAAgB,EAChB,OAAO;QAEP,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAE9D,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAC/D,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CAC1D,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;gBACnD,QAAQ;gBACR,OAAO;gBACP,EAAE;aACH,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC;gBACnC,QAAQ;gBACR,EAAE;gBACF,SAAS;aACV,CAAC,CAAC;YACH,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,MAAM,EAAE;qBACL,MAAM,CAAC,sBAAsB,CAAC;qBAC9B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,kBAAkB,CAAC,EACtD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,EAC/C,OAAO,CAAC,sBAAsB,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAC3D,CACF;qBACA,GAAG,EAAE,CAAC;YACX,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CACF,CAAC;IACJ,CAAC;IACD,cAAc,EAAE,oBAAoB;IACpC,uBAAuB,EAAE,6BAA6B;IACtD,8BAA8B,EAAE,oCAAoC;IACpE,KAAK,CAAC,sBAAsB,CAC1B,OAAO,EACP,OAAO,EACP,kBAAkB,EAClB,kBAAkB;QAElB,OAAO,4BAA4B,CAAC;YAClC,kBAAkB;YAClB,OAAO;YACP,kBAAkB;YAClB,OAAO;YACP,WAAW,EAAE,uBAAuB;SACrC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,wBAAwB,CAAC,OAAO,EAAE,KAAK;QAC3C,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,uBAAuB,CAAC,OAAO,EAAE,KAAK;QAC1C,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YAC/D,MAAM,uBAAuB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;YAC1D,OAAO,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CACjE,GAAG,EAAE,CAAC,+BAA+B,CAAC,aAAa,EAAE,KAAK,CAAC,EAC3D,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport { and, desc, eq, inArray, notInArray, or, type SQL } from \"drizzle-orm\";\nimport { DEFAULT_DOCUMENT_KIND } from \"../../documents/documentConstants\";\nimport {\n  type DiscoveredDocumentInput,\n  type DocumentSummary,\n  HIDDEN_DOCUMENT_SUMMARY_KINDS,\n} from \"../../documents/documentSummary\";\nimport { findLocalIdByDocumentId } from \"../../sqlite/documentPersistence\";\nimport {\n  documentPendingUpdates,\n  documentProjection,\n  documentPurgeCheckpoints,\n  documents,\n} from \"../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, runSerializedSqlMutation } from \"../../sqlite/sqlSchema\";\nimport { DOCUMENTS_APP_KIND } from \"./internal/constants\";\nimport { applyContainerDocumentTombstonesWithExec } from \"./internal/containerDocumentTombstones\";\nimport { createStoredDocumentWithHistoryCheckpoint } from \"./internal/createDocumentWithHistoryCheckpoint\";\nimport { discardStoredDocumentToShell } from \"./internal/discardDocument\";\nimport { resolveDiscoveredDocumentPlacement } from \"./internal/discoveredDocumentPlacement\";\nimport {\n  deleteStoredDocument,\n  deleteStoredDocumentIfMatches,\n  deleteStoredDocumentSideRowsIfAbsent,\n} from \"./internal/documentDeletionPersistence\";\nimport { loadStoredDocumentWithHistoryRestoreState } from \"./internal/documentHistoryStatePersistence\";\nimport {\n  commitStoredDocumentMutation,\n  settleStoredDocumentPendingUpdates,\n} from \"./internal/documentMutationPersistence\";\nimport {\n  documentSummaryJoin,\n  documentSummarySelection,\n  getProjectionUpdatedAt,\n  mapDocumentSummary,\n  toDocumentSummary,\n} from \"./internal/documentProjectionRows\";\nimport { invalidateStoredDocumentPullContinuation } from \"./internal/documentPullContinuationPersistence\";\nimport {\n  resolveDocumentSaveTimestamp,\n  saveDocumentRows,\n} from \"./internal/documentRows\";\nimport {\n  resolvePersistedAccessStateHash,\n  resolvePersistedDocumentRuntimeState,\n} from \"./internal/documentRuntimeState\";\nimport { loadStoredDocumentStoreState } from \"./internal/documentStoreStatePersistence\";\nimport { listDocumentSummaries } from \"./internal/documentSummaryQueries\";\nimport { ensureDocumentsSchema } from \"./internal/ensureDocumentsSchema\";\nimport { saveHydratedAttachment } from \"./internal/hydratedAttachmentPersistence\";\nimport {\n  loadPendingCreateSummary,\n  mapPendingCreateLocalIds,\n} from \"./internal/pendingCreateAdoption\";\nimport { documentRowQueryPersistence } from \"./internal/rowQueryPersistence\";\nimport { documentSyncQueuePersistence } from \"./internal/syncQueuePersistence\";\nimport type {\n  ContainerDocumentTombstoneInput,\n  DiscardDocumentToShellResult,\n  DocumentsPersistence,\n  RelinkPersistedDocumentInput,\n  StoredDocumentRecord,\n} from \"./types\";\n\nexport { DOCUMENTS_APP_KIND } from \"./internal/constants\";\nexport type {\n  AttachmentRemovalRows,\n  AttachmentStagingRows,\n  ContainerDocumentTombstoneInput,\n  DiscardDocumentToShellResult,\n  DocumentsPersistence,\n  LocalAttachmentRecord,\n  PendingAttachmentRecord,\n  PendingAttachmentUploadIdentity,\n  PendingUpdateInsert,\n  PendingUpdateRecord,\n  RelinkPersistedDocumentInput,\n  StoredDocumentRecord,\n} from \"./types\";\n\nconst DISCOVERED_DOCUMENT_PLACEHOLDER_TITLE = \"Syncing document...\";\n\nasync function upsertDiscoveredDocumentWithExec(\n  execSql: ExecSql,\n  input: DiscoveredDocumentInput,\n  pendingCreates: ReadonlyMap<string, string>,\n  tx: ClientSQLiteTransactionScope,\n): Promise<DocumentSummary> {\n  const [purgeCheckpoint] = await tx\n    .select({ documentId: documentPurgeCheckpoints.documentId })\n    .from(documentPurgeCheckpoints)\n    .where(eq(documentPurgeCheckpoints.documentId, input.documentId))\n    .limit(1);\n  if (purgeCheckpoint) {\n    throw new KeyingVerificationError(\n      \"rollback\",\n      \"Document discovery targets a permanently purged document\",\n    );\n  }\n  const existingLocalId = await findLocalIdByDocumentId(\n    execSql,\n    DOCUMENTS_APP_KIND,\n    input.documentId,\n  );\n  const localId = existingLocalId ?? input.documentId;\n  const pendingLocalId = pendingCreates.get(input.documentId);\n  if (!existingLocalId && pendingLocalId) {\n    const pending = await loadPendingCreateSummary(execSql, pendingLocalId);\n    if (!pending) throw new Error(\"Pending create projection is unavailable\");\n    return pending;\n  }\n  const existingDocument = await sqlDocumentsPersistence.loadDocument(\n    execSql,\n    localId,\n  );\n  const placement = await resolveDiscoveredDocumentPlacement(\n    tx,\n    existingDocument,\n    input,\n  );\n\n  const nextDocument: StoredDocumentRecord = {\n    id: localId,\n    documentId: input.documentId,\n    documentKind: existingDocument?.documentKind ?? DEFAULT_DOCUMENT_KIND,\n    text: existingDocument?.text ?? \"\",\n    title: existingDocument?.title ?? DISCOVERED_DOCUMENT_PLACEHOLDER_TITLE,\n    snapshotEndVersion: existingDocument?.snapshotEndVersion ?? \"\",\n    recoveryGeneration: existingDocument?.recoveryGeneration ?? 0,\n    ...placement,\n    effectiveAccessLevel:\n      input.effectiveAccessLevel ??\n      existingDocument?.effectiveAccessLevel ??\n      null,\n    ...resolvePersistedDocumentRuntimeState(existingDocument, {\n      accessEpoch: placement.accessEpoch,\n      documentId: input.documentId,\n    }),\n  };\n\n  const saveOptions =\n    existingDocument === null || existingDocument === undefined\n      ? { updatedAt: input.createdAt }\n      : undefined;\n  const updatedAt = await resolveDocumentSaveTimestamp({\n    document: nextDocument,\n    options: saveOptions,\n    tx,\n  });\n  if (!(await saveDocumentRows({ document: nextDocument, tx, updatedAt }))) {\n    throw new Error(\"Document recovery generation changed during discovery\");\n  }\n\n  return toDocumentSummary(nextDocument, updatedAt);\n}\n\nasync function relinkPersistedDocumentWithExec(\n  execSql: ExecSql,\n  input: RelinkPersistedDocumentInput,\n): Promise<DocumentSummary | null> {\n  const existingDocument = await sqlDocumentsPersistence.loadDocument(\n    execSql,\n    input.localId,\n  );\n  if (!existingDocument) {\n    return null;\n  }\n\n  const nextAccessEpoch = Math.max(\n    existingDocument.accessEpoch,\n    input.accessEpoch,\n  );\n  const nextDocument: StoredDocumentRecord = {\n    ...existingDocument,\n    accessEpoch: nextAccessEpoch,\n    accessStateHash: resolvePersistedAccessStateHash(existingDocument, {\n      accessEpoch: nextAccessEpoch,\n      accessStateHash: input.accessStateHash,\n      documentId: input.documentId,\n    }),\n    containerId: input.containerId,\n    documentId: input.documentId,\n    ...resolvePersistedDocumentRuntimeState(existingDocument, {\n      accessEpoch: nextAccessEpoch,\n      documentId: input.documentId,\n    }),\n  };\n\n  await sqlDocumentsPersistence.saveDocument(execSql, nextDocument);\n\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const updatedAtRows = await db\n    .select({ updatedAt: documentProjection.updatedAt })\n    .from(documentProjection)\n    .where(eq(documentProjection.localId, input.localId))\n    .limit(1);\n\n  return toDocumentSummary(\n    nextDocument,\n    getProjectionUpdatedAt(updatedAtRows[0]),\n  );\n}\n\nexport async function upsertDiscoveredDocuments(\n  execSql: ExecSql,\n  inputs: ReadonlyArray<DiscoveredDocumentInput>,\n): Promise<DocumentSummary[]> {\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await sqlDocumentsPersistence.ensureSchema(lockedExecSql);\n    return getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n      async (tx) => {\n        const pendingCreates = await mapPendingCreateLocalIds(lockedExecSql);\n        const nextSummaries: DocumentSummary[] = [];\n\n        for (const input of inputs) {\n          nextSummaries.push(\n            await upsertDiscoveredDocumentWithExec(\n              lockedExecSql,\n              input,\n              pendingCreates,\n              tx,\n            ),\n          );\n        }\n\n        return nextSummaries;\n      },\n      { behavior: \"immediate\" },\n    );\n  });\n}\n\nexport async function applyContainerDocumentTombstones(\n  execSql: ExecSql,\n  tombstones: ReadonlyArray<ContainerDocumentTombstoneInput>,\n): Promise<DocumentSummary[]> {\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await sqlDocumentsPersistence.ensureSchema(lockedExecSql);\n    return applyContainerDocumentTombstonesWithExec(lockedExecSql, tombstones);\n  });\n}\n\nexport async function listDocumentsByContainerIdsOrDocumentIds(\n  execSql: ExecSql,\n  input: {\n    containerIds: ReadonlyArray<string>;\n    documentIds: ReadonlyArray<string>;\n  },\n): Promise<DocumentSummary[]> {\n  const uniqueContainerIds = Array.from(new Set(input.containerIds));\n  const uniqueDocumentIds = Array.from(new Set(input.documentIds));\n  if (uniqueContainerIds.length === 0 && uniqueDocumentIds.length === 0) {\n    return [];\n  }\n\n  const filters: SQL[] = [];\n  if (uniqueContainerIds.length > 0) {\n    filters.push(inArray(documentProjection.containerId, uniqueContainerIds));\n  }\n\n  if (uniqueDocumentIds.length > 0) {\n    filters.push(inArray(documentProjection.documentId, uniqueDocumentIds));\n  }\n\n  const whereCondition = filters.length === 1 ? filters[0] : or(...filters);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select(documentSummarySelection)\n    .from(documentProjection)\n    .leftJoin(documents, documentSummaryJoin)\n    .where(\n      and(\n        whereCondition,\n        notInArray(documentProjection.documentKind, [\n          ...HIDDEN_DOCUMENT_SUMMARY_KINDS,\n        ]),\n      ),\n    )\n    .orderBy(\n      desc(documentProjection.updatedAt),\n      desc(documentProjection.localId),\n    );\n\n  return rows.map(mapDocumentSummary);\n}\n\nexport const sqlDocumentsPersistence: DocumentsPersistence = {\n  ...documentRowQueryPersistence,\n  ...documentSyncQueuePersistence,\n  supportsAtomicRecoveryHistoryPruning: true,\n  saveHydratedAttachment,\n  createDocumentWithHistoryCheckpoint:\n    createStoredDocumentWithHistoryCheckpoint,\n  commitDocumentMutation: (execSql, input, saveClientProjection) =>\n    commitStoredDocumentMutation(\n      execSql,\n      input,\n      saveClientProjection,\n      sqlDocumentsPersistence.loadDocument,\n    ),\n  settleAcceptedPendingUpdates: (execSql, input) =>\n    settleStoredDocumentPendingUpdates(\n      execSql,\n      input,\n      sqlDocumentsPersistence.loadDocument,\n    ),\n  ensureSchema: ensureDocumentsSchema,\n  listDocumentSummaries,\n  listDocumentsByContainerIdsOrDocumentIds,\n  invalidatePullContinuation: (execSql, input) =>\n    invalidateStoredDocumentPullContinuation(\n      execSql,\n      input,\n      sqlDocumentsPersistence.loadDocument,\n      sqlDocumentsPersistence.loadHistoryRestoreState,\n    ),\n  loadDocumentWithHistoryRestoreState: (execSql, localId) =>\n    loadStoredDocumentWithHistoryRestoreState(\n      execSql,\n      localId,\n      sqlDocumentsPersistence,\n    ),\n  loadDocumentStoreState: (execSql, localId) =>\n    loadStoredDocumentStoreState(execSql, localId, sqlDocumentsPersistence),\n  async saveDocument(execSql, document, options) {\n    return runSerializedSqlMutation(execSql, async (lockedExecSql) =>\n      getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n        async (tx) => {\n          const updatedAt = await resolveDocumentSaveTimestamp({\n            document,\n            options,\n            tx,\n          });\n          await saveDocumentRows({\n            document,\n            tx,\n            updatedAt,\n          });\n\n          return updatedAt;\n        },\n        { behavior: \"immediate\" },\n      ),\n    );\n  },\n  async saveDocumentAndDeletePendingUpdates(\n    execSql,\n    document,\n    pendingUpdateIds,\n    options,\n  ) {\n    const uniquePendingUpdateIds = [...new Set(pendingUpdateIds)];\n\n    return runSerializedSqlMutation(execSql, async (lockedExecSql) =>\n      getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n        async (tx) => {\n          const updatedAt = await resolveDocumentSaveTimestamp({\n            document,\n            options,\n            tx,\n          });\n          const saved = await saveDocumentRows({\n            document,\n            tx,\n            updatedAt,\n          });\n          if (!saved) return updatedAt;\n          if (uniquePendingUpdateIds.length > 0) {\n            await tx\n              .delete(documentPendingUpdates)\n              .where(\n                and(\n                  eq(documentPendingUpdates.appKind, DOCUMENTS_APP_KIND),\n                  eq(documentPendingUpdates.localId, document.id),\n                  inArray(documentPendingUpdates.id, uniquePendingUpdateIds),\n                ),\n              )\n              .run();\n          }\n          return updatedAt;\n        },\n        { behavior: \"immediate\" },\n      ),\n    );\n  },\n  deleteDocument: deleteStoredDocument,\n  deleteDocumentIfMatches: deleteStoredDocumentIfMatches,\n  deleteDocumentSideRowsIfAbsent: deleteStoredDocumentSideRowsIfAbsent,\n  async discardDocumentToShell(\n    execSql,\n    localId,\n    expectedDocumentId,\n    documentProjectors,\n  ): Promise<DiscardDocumentToShellResult> {\n    return discardStoredDocumentToShell({\n      documentProjectors,\n      execSql,\n      expectedDocumentId,\n      localId,\n      persistence: sqlDocumentsPersistence,\n    });\n  },\n  async upsertDiscoveredDocument(execSql, input) {\n    const [nextSummary] = await upsertDiscoveredDocuments(execSql, [input]);\n    if (!nextSummary) {\n      throw new Error(\"Failed to upsert discovered document\");\n    }\n\n    return nextSummary;\n  },\n  async relinkPersistedDocument(execSql, input) {\n    return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n      await sqlDocumentsPersistence.ensureSchema(lockedExecSql);\n      return getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n        () => relinkPersistedDocumentWithExec(lockedExecSql, input),\n        { behavior: \"immediate\" },\n      );\n    });\n  },\n};\n"]}
+{"version":3,"file":"documentsPersistence.js","sourceRoot":"","sources":["documentsPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAY,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAGL,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAgB,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,wCAAwC,EAAE,MAAM,wCAAwC,CAAC;AAClG,OAAO,EAAE,yCAAyC,EAAE,MAAM,gDAAgD,CAAC;AAC3G,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,kCAAkC,EAAE,MAAM,wCAAwC,CAAC;AAC5F,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,oCAAoC,GACrC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,yCAAyC,EAAE,MAAM,4CAA4C,CAAC;AACvG,OAAO,EACL,4BAA4B,EAC5B,kCAAkC,GACnC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,EACL,4BAA4B,EAC5B,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,GACrC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EACL,oCAAoC,EACpC,8BAA8B,EAC9B,kCAAkC,EAClC,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAS/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAgB1D,MAAM,qCAAqC,GAAG,qBAAqB,CAAC;AAEpE,KAAK,UAAU,gCAAgC,CAC7C,OAAgB,EAChB,KAA8B,EAC9B,cAA2C,EAC3C,EAAgC;IAEhC,MAAM,CAAC,eAAe,CAAC,GAAG,MAAM,EAAE;SAC/B,MAAM,CAAC,EAAE,UAAU,EAAE,wBAAwB,CAAC,UAAU,EAAE,CAAC;SAC3D,IAAI,CAAC,wBAAwB,CAAC;SAC9B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;SAChE,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAC/B,UAAU,EACV,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,uBAAuB,CACnD,OAAO,EACP,kBAAkB,EAClB,KAAK,CAAC,UAAU,CACjB,CAAC;IACF,MAAM,OAAO,GAAG,eAAe,IAAI,KAAK,CAAC,UAAU,CAAC;IACpD,MAAM,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,CAAC,eAAe,IAAI,cAAc,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,YAAY,CACjE,OAAO,EACP,OAAO,CACR,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,kCAAkC,CACxD,EAAE,EACF,gBAAgB,EAChB,KAAK,CACN,CAAC;IAEF,MAAM,YAAY,GAAyB;QACzC,EAAE,EAAE,OAAO;QACX,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,gBAAgB,EAAE,YAAY,IAAI,qBAAqB;QACrE,IAAI,EAAE,gBAAgB,EAAE,IAAI,IAAI,EAAE;QAClC,KAAK,EAAE,gBAAgB,EAAE,KAAK,IAAI,qCAAqC;QACvE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,IAAI,EAAE;QAC9D,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,IAAI,CAAC;QAC7D,GAAG,SAAS;QACZ,oBAAoB,EAClB,KAAK,CAAC,oBAAoB;YAC1B,gBAAgB,EAAE,oBAAoB;YACtC,IAAI;QACN,GAAG,oCAAoC,CAAC,gBAAgB,EAAE;YACxD,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;KACH,CAAC;IAEF,MAAM,WAAW,GACf,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,SAAS;QACzD,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;QAChC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;QACnD,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,WAAW;QACpB,EAAE;KACH,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,OAAgB,EAChB,KAAmC;IAEnC,MAAM,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,YAAY,CACjE,OAAO,EACP,KAAK,CAAC,OAAO,CACd,CAAC;IACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAC9B,gBAAgB,CAAC,WAAW,EAC5B,KAAK,CAAC,WAAW,CAClB,CAAC;IACF,MAAM,YAAY,GAAyB;QACzC,GAAG,gBAAgB;QACnB,WAAW,EAAE,eAAe;QAC5B,eAAe,EAAE,+BAA+B,CAAC,gBAAgB,EAAE;YACjE,WAAW,EAAE,eAAe;YAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;QACF,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,oCAAoC,CAAC,gBAAgB,EAAE;YACxD,WAAW,EAAE,eAAe;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;KACH,CAAC;IAEF,MAAM,uBAAuB,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAElE,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,MAAM,EAAE;SAC3B,MAAM,CAAC,EAAE,SAAS,EAAE,kBAAkB,CAAC,SAAS,EAAE,CAAC;SACnD,IAAI,CAAC,kBAAkB,CAAC;SACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;SACpD,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,OAAO,iBAAiB,CACtB,YAAY,EACZ,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAgB,EAChB,MAA8C;IAE9C,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,uBAAuB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC1D,OAAO,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CACjE,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,cAAc,GAAG,MAAM,wBAAwB,CAAC,aAAa,CAAC,CAAC;YACrE,MAAM,aAAa,GAAsB,EAAE,CAAC;YAE5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,aAAa,CAAC,IAAI,CAChB,MAAM,gCAAgC,CACpC,aAAa,EACb,KAAK,EACL,cAAc,EACd,EAAE,CACH,CACF,CAAC;YACJ,CAAC;YAED,OAAO,aAAa,CAAC;QACvB,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAgB,EAChB,UAA0D;IAE1D,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,uBAAuB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC1D,OAAO,wCAAwC,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,OAAgB,EAChB,KAGC;IAED,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACjE,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAU,EAAE,CAAC;IAC1B,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC;IAC1E,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,wBAAwB,CAAC;SAChC,IAAI,CAAC,kBAAkB,CAAC;SACxB,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;SACxC,KAAK,CACJ,GAAG,CACD,cAAc,EACd,UAAU,CAAC,kBAAkB,CAAC,YAAY,EAAE;QAC1C,GAAG,6BAA6B;KACjC,CAAC,CACH,CACF;SACA,OAAO,CACN,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAClC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CACjC,CAAC;IAEJ,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAyB;IAC3D,WAAW,EAAE;QACX,WAAW,EAAE,oCAAoC;QACjD,YAAY,EAAE,kCAAkC;QAChD,IAAI,EAAE,8BAA8B;QACpC,KAAK,EAAE,8BAA8B;KACtC;IACD,GAAG,2BAA2B;IAC9B,GAAG,4BAA4B;IAC/B,oCAAoC,EAAE,IAAI;IAC1C,sBAAsB;IACtB,mCAAmC,EACjC,yCAAyC;IAC3C,sBAAsB,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAC/D,4BAA4B,CAC1B,OAAO,EACP,KAAK,EACL,oBAAoB,EACpB,uBAAuB,CAAC,YAAY,CACrC;IACH,4BAA4B,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAC/C,kCAAkC,CAChC,OAAO,EACP,KAAK,EACL,uBAAuB,CAAC,YAAY,CACrC;IACH,YAAY,EAAE,qBAAqB;IACnC,qBAAqB;IACrB,wCAAwC;IACxC,0BAA0B,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAC7C,wCAAwC,CACtC,OAAO,EACP,KAAK,EACL,uBAAuB,CAAC,YAAY,EACpC,uBAAuB,CAAC,uBAAuB,CAChD;IACH,mCAAmC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CACxD,yCAAyC,CACvC,OAAO,EACP,OAAO,EACP,uBAAuB,CACxB;IACH,sBAAsB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAC3C,4BAA4B,CAAC,OAAO,EAAE,OAAO,EAAE,uBAAuB,CAAC;IACzE,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO;QAC3C,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAC/D,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CAC1D,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;gBACnD,QAAQ;gBACR,OAAO;gBACP,EAAE;aACH,CAAC,CAAC;YACH,MAAM,gBAAgB,CAAC;gBACrB,QAAQ;gBACR,EAAE;gBACF,SAAS;aACV,CAAC,CAAC;YAEH,OAAO,SAAS,CAAC;QACnB,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CACF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,mCAAmC,CACvC,OAAO,EACP,QAAQ,EACR,gBAAgB,EAChB,OAAO;QAEP,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAE9D,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAC/D,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CAC1D,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;gBACnD,QAAQ;gBACR,OAAO;gBACP,EAAE;aACH,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC;gBACnC,QAAQ;gBACR,EAAE;gBACF,SAAS;aACV,CAAC,CAAC;YACH,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,MAAM,EAAE;qBACL,MAAM,CAAC,sBAAsB,CAAC;qBAC9B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,kBAAkB,CAAC,EACtD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,EAC/C,OAAO,CAAC,sBAAsB,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAC3D,CACF;qBACA,GAAG,EAAE,CAAC;YACX,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CACF,CAAC;IACJ,CAAC;IACD,cAAc,EAAE,oBAAoB;IACpC,uBAAuB,EAAE,6BAA6B;IACtD,8BAA8B,EAAE,oCAAoC;IACpE,KAAK,CAAC,sBAAsB,CAC1B,OAAO,EACP,OAAO,EACP,kBAAkB,EAClB,kBAAkB;QAElB,OAAO,4BAA4B,CAAC;YAClC,kBAAkB;YAClB,OAAO;YACP,kBAAkB;YAClB,OAAO;YACP,WAAW,EAAE,uBAAuB;SACrC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,wBAAwB,CAAC,OAAO,EAAE,KAAK;QAC3C,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,uBAAuB,CAAC,OAAO,EAAE,KAAK;QAC1C,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YAC/D,MAAM,uBAAuB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;YAC1D,OAAO,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CACjE,GAAG,EAAE,CAAC,+BAA+B,CAAC,aAAa,EAAE,KAAK,CAAC,EAC3D,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport { and, desc, eq, inArray, notInArray, or, type SQL } from \"drizzle-orm\";\nimport { DEFAULT_DOCUMENT_KIND } from \"../../documents/documentConstants\";\nimport {\n  type DiscoveredDocumentInput,\n  type DocumentSummary,\n  HIDDEN_DOCUMENT_SUMMARY_KINDS,\n} from \"../../documents/documentSummary\";\nimport { findLocalIdByDocumentId } from \"../../sqlite/documentPersistence\";\nimport {\n  documentPendingUpdates,\n  documentProjection,\n  documentPurgeCheckpoints,\n  documents,\n} from \"../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, runSerializedSqlMutation } from \"../../sqlite/sqlSchema\";\nimport { DOCUMENTS_APP_KIND } from \"./internal/constants\";\nimport { applyContainerDocumentTombstonesWithExec } from \"./internal/containerDocumentTombstones\";\nimport { createStoredDocumentWithHistoryCheckpoint } from \"./internal/createDocumentWithHistoryCheckpoint\";\nimport { discardStoredDocumentToShell } from \"./internal/discardDocument\";\nimport { resolveDiscoveredDocumentPlacement } from \"./internal/discoveredDocumentPlacement\";\nimport {\n  deleteStoredDocument,\n  deleteStoredDocumentIfMatches,\n  deleteStoredDocumentSideRowsIfAbsent,\n} from \"./internal/documentDeletionPersistence\";\nimport { loadStoredDocumentWithHistoryRestoreState } from \"./internal/documentHistoryStatePersistence\";\nimport {\n  commitStoredDocumentMutation,\n  settleStoredDocumentPendingUpdates,\n} from \"./internal/documentMutationPersistence\";\nimport {\n  documentSummaryJoin,\n  documentSummarySelection,\n  getProjectionUpdatedAt,\n  mapDocumentSummary,\n  toDocumentSummary,\n} from \"./internal/documentProjectionRows\";\nimport { invalidateStoredDocumentPullContinuation } from \"./internal/documentPullContinuationPersistence\";\nimport {\n  resolveDocumentSaveTimestamp,\n  saveDocumentRows,\n} from \"./internal/documentRows\";\nimport {\n  resolvePersistedAccessStateHash,\n  resolvePersistedDocumentRuntimeState,\n} from \"./internal/documentRuntimeState\";\nimport { loadStoredDocumentStoreState } from \"./internal/documentStoreStatePersistence\";\nimport { listDocumentSummaries } from \"./internal/documentSummaryQueries\";\nimport { ensureDocumentsSchema } from \"./internal/ensureDocumentsSchema\";\nimport { saveHydratedAttachment } from \"./internal/hydratedAttachmentPersistence\";\nimport {\n  acknowledgeDocumentOrphanBlobReclaim,\n  deleteOrphanedDocumentSideRows,\n  isDocumentBlobStorageKeyReferenced,\n  listDocumentOrphanBlobReclaims,\n} from \"./internal/orphanSideRows\";\nimport {\n  loadPendingCreateSummary,\n  mapPendingCreateLocalIds,\n} from \"./internal/pendingCreateAdoption\";\nimport { documentRowQueryPersistence } from \"./internal/rowQueryPersistence\";\nimport { documentSyncQueuePersistence } from \"./internal/syncQueuePersistence\";\nimport type {\n  ContainerDocumentTombstoneInput,\n  DiscardDocumentToShellResult,\n  DocumentsPersistence,\n  RelinkPersistedDocumentInput,\n  StoredDocumentRecord,\n} from \"./types\";\n\nexport { DOCUMENTS_APP_KIND } from \"./internal/constants\";\nexport type {\n  AttachmentRemovalRows,\n  AttachmentStagingRows,\n  ContainerDocumentTombstoneInput,\n  DiscardDocumentToShellResult,\n  DocumentsPersistence,\n  LocalAttachmentRecord,\n  PendingAttachmentRecord,\n  PendingAttachmentUploadIdentity,\n  PendingUpdateInsert,\n  PendingUpdateRecord,\n  RelinkPersistedDocumentInput,\n  StoredDocumentRecord,\n} from \"./types\";\n\nconst DISCOVERED_DOCUMENT_PLACEHOLDER_TITLE = \"Syncing document...\";\n\nasync function upsertDiscoveredDocumentWithExec(\n  execSql: ExecSql,\n  input: DiscoveredDocumentInput,\n  pendingCreates: ReadonlyMap<string, string>,\n  tx: ClientSQLiteTransactionScope,\n): Promise<DocumentSummary> {\n  const [purgeCheckpoint] = await tx\n    .select({ documentId: documentPurgeCheckpoints.documentId })\n    .from(documentPurgeCheckpoints)\n    .where(eq(documentPurgeCheckpoints.documentId, input.documentId))\n    .limit(1);\n  if (purgeCheckpoint) {\n    throw new KeyingVerificationError(\n      \"rollback\",\n      \"Document discovery targets a permanently purged document\",\n    );\n  }\n  const existingLocalId = await findLocalIdByDocumentId(\n    execSql,\n    DOCUMENTS_APP_KIND,\n    input.documentId,\n  );\n  const localId = existingLocalId ?? input.documentId;\n  const pendingLocalId = pendingCreates.get(input.documentId);\n  if (!existingLocalId && pendingLocalId) {\n    const pending = await loadPendingCreateSummary(execSql, pendingLocalId);\n    if (!pending) throw new Error(\"Pending create projection is unavailable\");\n    return pending;\n  }\n  const existingDocument = await sqlDocumentsPersistence.loadDocument(\n    execSql,\n    localId,\n  );\n  const placement = await resolveDiscoveredDocumentPlacement(\n    tx,\n    existingDocument,\n    input,\n  );\n\n  const nextDocument: StoredDocumentRecord = {\n    id: localId,\n    documentId: input.documentId,\n    documentKind: existingDocument?.documentKind ?? DEFAULT_DOCUMENT_KIND,\n    text: existingDocument?.text ?? \"\",\n    title: existingDocument?.title ?? DISCOVERED_DOCUMENT_PLACEHOLDER_TITLE,\n    snapshotEndVersion: existingDocument?.snapshotEndVersion ?? \"\",\n    recoveryGeneration: existingDocument?.recoveryGeneration ?? 0,\n    ...placement,\n    effectiveAccessLevel:\n      input.effectiveAccessLevel ??\n      existingDocument?.effectiveAccessLevel ??\n      null,\n    ...resolvePersistedDocumentRuntimeState(existingDocument, {\n      accessEpoch: placement.accessEpoch,\n      documentId: input.documentId,\n    }),\n  };\n\n  const saveOptions =\n    existingDocument === null || existingDocument === undefined\n      ? { updatedAt: input.createdAt }\n      : undefined;\n  const updatedAt = await resolveDocumentSaveTimestamp({\n    document: nextDocument,\n    options: saveOptions,\n    tx,\n  });\n  if (!(await saveDocumentRows({ document: nextDocument, tx, updatedAt }))) {\n    throw new Error(\"Document recovery generation changed during discovery\");\n  }\n\n  return toDocumentSummary(nextDocument, updatedAt);\n}\n\nasync function relinkPersistedDocumentWithExec(\n  execSql: ExecSql,\n  input: RelinkPersistedDocumentInput,\n): Promise<DocumentSummary | null> {\n  const existingDocument = await sqlDocumentsPersistence.loadDocument(\n    execSql,\n    input.localId,\n  );\n  if (!existingDocument) {\n    return null;\n  }\n\n  const nextAccessEpoch = Math.max(\n    existingDocument.accessEpoch,\n    input.accessEpoch,\n  );\n  const nextDocument: StoredDocumentRecord = {\n    ...existingDocument,\n    accessEpoch: nextAccessEpoch,\n    accessStateHash: resolvePersistedAccessStateHash(existingDocument, {\n      accessEpoch: nextAccessEpoch,\n      accessStateHash: input.accessStateHash,\n      documentId: input.documentId,\n    }),\n    containerId: input.containerId,\n    documentId: input.documentId,\n    ...resolvePersistedDocumentRuntimeState(existingDocument, {\n      accessEpoch: nextAccessEpoch,\n      documentId: input.documentId,\n    }),\n  };\n\n  await sqlDocumentsPersistence.saveDocument(execSql, nextDocument);\n\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const updatedAtRows = await db\n    .select({ updatedAt: documentProjection.updatedAt })\n    .from(documentProjection)\n    .where(eq(documentProjection.localId, input.localId))\n    .limit(1);\n\n  return toDocumentSummary(\n    nextDocument,\n    getProjectionUpdatedAt(updatedAtRows[0]),\n  );\n}\n\nexport async function upsertDiscoveredDocuments(\n  execSql: ExecSql,\n  inputs: ReadonlyArray<DiscoveredDocumentInput>,\n): Promise<DocumentSummary[]> {\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await sqlDocumentsPersistence.ensureSchema(lockedExecSql);\n    return getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n      async (tx) => {\n        const pendingCreates = await mapPendingCreateLocalIds(lockedExecSql);\n        const nextSummaries: DocumentSummary[] = [];\n\n        for (const input of inputs) {\n          nextSummaries.push(\n            await upsertDiscoveredDocumentWithExec(\n              lockedExecSql,\n              input,\n              pendingCreates,\n              tx,\n            ),\n          );\n        }\n\n        return nextSummaries;\n      },\n      { behavior: \"immediate\" },\n    );\n  });\n}\n\nexport async function applyContainerDocumentTombstones(\n  execSql: ExecSql,\n  tombstones: ReadonlyArray<ContainerDocumentTombstoneInput>,\n): Promise<DocumentSummary[]> {\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await sqlDocumentsPersistence.ensureSchema(lockedExecSql);\n    return applyContainerDocumentTombstonesWithExec(lockedExecSql, tombstones);\n  });\n}\n\nexport async function listDocumentsByContainerIdsOrDocumentIds(\n  execSql: ExecSql,\n  input: {\n    containerIds: ReadonlyArray<string>;\n    documentIds: ReadonlyArray<string>;\n  },\n): Promise<DocumentSummary[]> {\n  const uniqueContainerIds = Array.from(new Set(input.containerIds));\n  const uniqueDocumentIds = Array.from(new Set(input.documentIds));\n  if (uniqueContainerIds.length === 0 && uniqueDocumentIds.length === 0) {\n    return [];\n  }\n\n  const filters: SQL[] = [];\n  if (uniqueContainerIds.length > 0) {\n    filters.push(inArray(documentProjection.containerId, uniqueContainerIds));\n  }\n\n  if (uniqueDocumentIds.length > 0) {\n    filters.push(inArray(documentProjection.documentId, uniqueDocumentIds));\n  }\n\n  const whereCondition = filters.length === 1 ? filters[0] : or(...filters);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select(documentSummarySelection)\n    .from(documentProjection)\n    .leftJoin(documents, documentSummaryJoin)\n    .where(\n      and(\n        whereCondition,\n        notInArray(documentProjection.documentKind, [\n          ...HIDDEN_DOCUMENT_SUMMARY_KINDS,\n        ]),\n      ),\n    )\n    .orderBy(\n      desc(documentProjection.updatedAt),\n      desc(documentProjection.localId),\n    );\n\n  return rows.map(mapDocumentSummary);\n}\n\nexport const sqlDocumentsPersistence: DocumentsPersistence = {\n  orphanBlobs: {\n    acknowledge: acknowledgeDocumentOrphanBlobReclaim,\n    isReferenced: isDocumentBlobStorageKeyReferenced,\n    list: listDocumentOrphanBlobReclaims,\n    sweep: deleteOrphanedDocumentSideRows,\n  },\n  ...documentRowQueryPersistence,\n  ...documentSyncQueuePersistence,\n  supportsAtomicRecoveryHistoryPruning: true,\n  saveHydratedAttachment,\n  createDocumentWithHistoryCheckpoint:\n    createStoredDocumentWithHistoryCheckpoint,\n  commitDocumentMutation: (execSql, input, saveClientProjection) =>\n    commitStoredDocumentMutation(\n      execSql,\n      input,\n      saveClientProjection,\n      sqlDocumentsPersistence.loadDocument,\n    ),\n  settleAcceptedPendingUpdates: (execSql, input) =>\n    settleStoredDocumentPendingUpdates(\n      execSql,\n      input,\n      sqlDocumentsPersistence.loadDocument,\n    ),\n  ensureSchema: ensureDocumentsSchema,\n  listDocumentSummaries,\n  listDocumentsByContainerIdsOrDocumentIds,\n  invalidatePullContinuation: (execSql, input) =>\n    invalidateStoredDocumentPullContinuation(\n      execSql,\n      input,\n      sqlDocumentsPersistence.loadDocument,\n      sqlDocumentsPersistence.loadHistoryRestoreState,\n    ),\n  loadDocumentWithHistoryRestoreState: (execSql, localId) =>\n    loadStoredDocumentWithHistoryRestoreState(\n      execSql,\n      localId,\n      sqlDocumentsPersistence,\n    ),\n  loadDocumentStoreState: (execSql, localId) =>\n    loadStoredDocumentStoreState(execSql, localId, sqlDocumentsPersistence),\n  async saveDocument(execSql, document, options) {\n    return runSerializedSqlMutation(execSql, async (lockedExecSql) =>\n      getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n        async (tx) => {\n          const updatedAt = await resolveDocumentSaveTimestamp({\n            document,\n            options,\n            tx,\n          });\n          await saveDocumentRows({\n            document,\n            tx,\n            updatedAt,\n          });\n\n          return updatedAt;\n        },\n        { behavior: \"immediate\" },\n      ),\n    );\n  },\n  async saveDocumentAndDeletePendingUpdates(\n    execSql,\n    document,\n    pendingUpdateIds,\n    options,\n  ) {\n    const uniquePendingUpdateIds = [...new Set(pendingUpdateIds)];\n\n    return runSerializedSqlMutation(execSql, async (lockedExecSql) =>\n      getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n        async (tx) => {\n          const updatedAt = await resolveDocumentSaveTimestamp({\n            document,\n            options,\n            tx,\n          });\n          const saved = await saveDocumentRows({\n            document,\n            tx,\n            updatedAt,\n          });\n          if (!saved) return updatedAt;\n          if (uniquePendingUpdateIds.length > 0) {\n            await tx\n              .delete(documentPendingUpdates)\n              .where(\n                and(\n                  eq(documentPendingUpdates.appKind, DOCUMENTS_APP_KIND),\n                  eq(documentPendingUpdates.localId, document.id),\n                  inArray(documentPendingUpdates.id, uniquePendingUpdateIds),\n                ),\n              )\n              .run();\n          }\n          return updatedAt;\n        },\n        { behavior: \"immediate\" },\n      ),\n    );\n  },\n  deleteDocument: deleteStoredDocument,\n  deleteDocumentIfMatches: deleteStoredDocumentIfMatches,\n  deleteDocumentSideRowsIfAbsent: deleteStoredDocumentSideRowsIfAbsent,\n  async discardDocumentToShell(\n    execSql,\n    localId,\n    expectedDocumentId,\n    documentProjectors,\n  ): Promise<DiscardDocumentToShellResult> {\n    return discardStoredDocumentToShell({\n      documentProjectors,\n      execSql,\n      expectedDocumentId,\n      localId,\n      persistence: sqlDocumentsPersistence,\n    });\n  },\n  async upsertDiscoveredDocument(execSql, input) {\n    const [nextSummary] = await upsertDiscoveredDocuments(execSql, [input]);\n    if (!nextSummary) {\n      throw new Error(\"Failed to upsert discovered document\");\n    }\n\n    return nextSummary;\n  },\n  async relinkPersistedDocument(execSql, input) {\n    return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n      await sqlDocumentsPersistence.ensureSchema(lockedExecSql);\n      return getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n        () => relinkPersistedDocumentWithExec(lockedExecSql, input),\n        { behavior: \"immediate\" },\n      );\n    });\n  },\n};\n"]}

package/data/persistence/documents/internal/documentDeletionPersistence.js

@@ -101,6 +101,13 @@ export async function deleteStoredDocumentIfMatches(execSql, expectedRecord, del
                 !sameCanonicalDocumentSecurityIdentity(existingDocument, expectedRecord)) {
                 return false;
             }
+            const [placement] = await tx
+                .select({ containerId: documentProjection.containerId })
+                .from(documentProjection)
+                .where(eq(documentProjection.localId, expectedRecord.id))
+                .limit(1);
+            if ((placement?.containerId ?? null) !== expectedRecord.containerId)
+                return false;
             if (existingDocument.documentId &&
                 (await hasAnotherDocumentAlias({
                     documentId: existingDocument.documentId,

package/data/persistence/documents/internal/documentDeletionPersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentDeletionPersistence.js","sourceRoot":"","sources":["documentDeletionPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAC1F,OAAO,EACL,gCAAgC,EAChC,2BAA2B,EAC3B,mBAAmB,EACnB,wBAAwB,EACxB,0BAA0B,EAC1B,kBAAkB,EAClB,sBAAsB,EACtB,SAAS,GACV,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,iCAAiC,GAClC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAEL,eAAe,EACf,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iDAAiD,EAAE,MAAM,mCAAmC,CAAC;AACtG,OAAO,EAAE,qCAAqC,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mCAAmC,EAAE,MAAM,kBAAkB,CAAC;AAEvE,KAAK,UAAU,wBAAwB,CAAC,KAKvC;IACC,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACjE,MAAM,mCAAmC,CAAC;QACxC,UAAU,EAAE,EAAE,CAAC,gCAAgC,CAAC,OAAO,EAAE,OAAO,CAAC;QACjE,YAAY,EAAE,EAAE,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC;QAC7D,EAAE;KACH,CAAC,CAAC;IACH,MAAM,EAAE;SACL,MAAM,CAAC,kBAAkB,CAAC;SAC1B,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC9C,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,sBAAsB,CAAC;SAC9B,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAClD,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,0BAA0B,CAAC;SAClC,KAAK,CAAC,EAAE,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SACtD,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,gCAAgC,CAAC;SACxC,KAAK,CAAC,EAAE,CAAC,gCAAgC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC5D,GAAG,EAAE,CAAC;IACT,IAAI,kBAAkB,EAAE,CAAC;QACvB,MAAM,EAAE;aACL,MAAM,CAAC,2BAA2B,CAAC;aACnC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;aACrE,GAAG,EAAE,CAAC;QACT,MAAM,iDAAiD,CAAC,EAAE,EAAE;YAC1D,kBAAkB;SACnB,CAAC,CAAC;QACH,MAAM,EAAE;aACL,MAAM,CAAC,yBAAyB,CAAC;aACjC,KAAK,CACJ,OAAO,CACL,yBAAyB,CAAC,QAAQ,EAClC,EAAE;aACC,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;aACtC,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC,CACjE,CACF;aACA,GAAG,EAAE,CAAC;QACT,MAAM,EAAE;aACL,MAAM,CAAC,mBAAmB,CAAC;aAC3B,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;aAC7D,GAAG,EAAE,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,4BAA4B,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACzD,MAAM,qBAAqB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,wBAAwB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,oBAAoB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,OAAgB;IAC1D,0EAA0E;IAC1E,wCAAwC;IACxC,MAAM,eAAe,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,KAItC;IACC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,EAAE;SACxB,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;SACtC,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC,EACzC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAC1C,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CACrC,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAgB,EAChB,OAAe;IAEf,MAAM,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC9D,MAAM,4BAA4B,CAAC,aAAa,CAAC,CAAC;QAClD,MAAM,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CAChE,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,gBAAgB,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE;gBAC/D,OAAO,EAAE,kBAAkB;gBAC3B,OAAO;aACR,CAAC,CAAC;YACH,MAAM,wBAAwB,CAAC;gBAC7B,kBAAkB,EAAE,gBAAgB,EAAE,UAAU,IAAI,IAAI;gBACxD,OAAO;gBACP,aAAa;gBACb,EAAE;aACH,CAAC,CAAC;QACL,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAgB,EAChB,cAAoC,EACpC,sBAAsE;IAEtE,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,4BAA4B,CAAC,aAAa,CAAC,CAAC;QAClD,OAAO,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CACjE,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,gBAAgB,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE;gBAC/D,OAAO,EAAE,kBAAkB;gBAC3B,OAAO,EAAE,cAAc,CAAC,EAAE;aAC3B,CAAC,CAAC;YACH,IACE,CAAC,gBAAgB;gBACjB,CAAC,qCAAqC,CACpC,gBAAgB,EAChB,cAAc,CACf,EACD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IACE,gBAAgB,CAAC,UAAU;gBAC3B,CAAC,MAAM,uBAAuB,CAAC;oBAC7B,UAAU,EAAE,gBAAgB,CAAC,UAAU;oBACvC,OAAO,EAAE,cAAc,CAAC,EAAE;oBAC1B,EAAE;iBACH,CAAC,CAAC,EACH,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,wBAAwB,CAAC;gBAC7B,kBAAkB,EAAE,gBAAgB,CAAC,UAAU,IAAI,IAAI;gBACvD,OAAO,EAAE,cAAc,CAAC,EAAE;gBAC1B,aAAa;gBACb,EAAE;aACH,CAAC,CAAC;YACH,MAAM,sBAAsB,CAAC,aAAa,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,OAAgB,EAChB,OAAe,EACf,kBAAiC,EACjC,sBAAsE;IAEtE,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,4BAA4B,CAAC,aAAa,CAAC,CAAC;QAClD,OAAO,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CACjE,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,gBAAgB,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE;gBAC/D,OAAO,EAAE,kBAAkB;gBAC3B,OAAO;aACR,CAAC,CAAC;YACH,IAAI,gBAAgB;gBAAE,OAAO,KAAK,CAAC;YACnC,IACE,kBAAkB;gBAClB,CAAC,MAAM,uBAAuB,CAAC;oBAC7B,UAAU,EAAE,kBAAkB;oBAC9B,OAAO;oBACP,EAAE;iBACH,CAAC,CAAC,EACH,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,wBAAwB,CAAC;gBAC7B,kBAAkB,EAAE,kBAAkB;gBACtC,OAAO;gBACP,aAAa;gBACb,EAAE;aACH,CAAC,CAAC;YACH,MAAM,sBAAsB,CAAC,aAAa,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { and, eq, inArray, ne } from \"drizzle-orm\";\nimport { deleteDocumentHistory } from \"../../../sqlite/documentHistoryPersistence\";\nimport {\n  clearDocumentSyncFailure,\n  deleteDocumentPendingUpdates,\n  deleteDocumentRecord,\n  loadDocumentRecord,\n} from \"../../../sqlite/documentPersistence\";\nimport { documentIntentLinkTargets } from \"../../../sqlite/documentPlacementIntentSchema\";\nimport {\n  documentAttachmentBlobProjection,\n  documentContainerProjection,\n  documentMoveIntents,\n  documentMoveIntentTables,\n  documentPendingAttachments,\n  documentProjection,\n  documentProjectionText,\n  documents,\n} from \"../../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../../sqlite/sqlitePersistenceRuntime\";\nimport {\n  type ExecSql,\n  ensureSqlTables,\n  runSerializedSqlMutation,\n} from \"../../../sqlite/sqlSchema\";\nimport type { StoredDocumentRecord } from \"../types\";\nimport { DOCUMENTS_APP_KIND } from \"./constants\";\nimport { deleteContainerDocumentTombstoneHoldsForDocuments } from \"./containerDocumentTombstoneHolds\";\nimport { sameCanonicalDocumentSecurityIdentity } from \"./documentRecordIdentity\";\nimport { getDocumentScope } from \"./documentRows\";\nimport { queueDocumentAttachmentBlobReclaims } from \"./orphanSideRows\";\n\nasync function deleteStoredDocumentRows(input: {\n  existingDocumentId: string | null;\n  localId: string;\n  lockedExecSql: ExecSql;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  const { existingDocumentId, localId, lockedExecSql, tx } = input;\n  await queueDocumentAttachmentBlobReclaims({\n    localWhere: eq(documentAttachmentBlobProjection.localId, localId),\n    pendingWhere: eq(documentPendingAttachments.localId, localId),\n    tx,\n  });\n  await tx\n    .delete(documentProjection)\n    .where(eq(documentProjection.localId, localId))\n    .run();\n  await tx\n    .delete(documentProjectionText)\n    .where(eq(documentProjectionText.localId, localId))\n    .run();\n  await tx\n    .delete(documentPendingAttachments)\n    .where(eq(documentPendingAttachments.localId, localId))\n    .run();\n  await tx\n    .delete(documentAttachmentBlobProjection)\n    .where(eq(documentAttachmentBlobProjection.localId, localId))\n    .run();\n  if (existingDocumentId) {\n    await tx\n      .delete(documentContainerProjection)\n      .where(eq(documentContainerProjection.documentId, existingDocumentId))\n      .run();\n    await deleteContainerDocumentTombstoneHoldsForDocuments(tx, [\n      existingDocumentId,\n    ]);\n    await tx\n      .delete(documentIntentLinkTargets)\n      .where(\n        inArray(\n          documentIntentLinkTargets.intentId,\n          tx\n            .select({ id: documentMoveIntents.id })\n            .from(documentMoveIntents)\n            .where(eq(documentMoveIntents.documentId, existingDocumentId)),\n        ),\n      )\n      .run();\n    await tx\n      .delete(documentMoveIntents)\n      .where(eq(documentMoveIntents.documentId, existingDocumentId))\n      .run();\n  }\n  const scope = getDocumentScope(localId);\n  await deleteDocumentPendingUpdates(lockedExecSql, scope);\n  await deleteDocumentHistory(lockedExecSql, scope);\n  await clearDocumentSyncFailure(lockedExecSql, scope);\n  await deleteDocumentRecord(lockedExecSql, scope);\n}\n\nasync function ensureDocumentDeletionTables(execSql: ExecSql): Promise<void> {\n  // Move intents live in the container-contents schema, which document-only\n  // callers may not have initialized yet.\n  await ensureSqlTables(execSql, documentMoveIntentTables);\n}\n\nasync function hasAnotherDocumentAlias(input: {\n  documentId: string;\n  localId: string;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<boolean> {\n  const rows = await input.tx\n    .select({ localId: documents.localId })\n    .from(documents)\n    .where(\n      and(\n        eq(documents.appKind, DOCUMENTS_APP_KIND),\n        eq(documents.documentId, input.documentId),\n        ne(documents.localId, input.localId),\n      ),\n    )\n    .limit(1);\n  return rows.length > 0;\n}\n\nexport async function deleteStoredDocument(\n  execSql: ExecSql,\n  localId: string,\n): Promise<void> {\n  await runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await ensureDocumentDeletionTables(lockedExecSql);\n    await getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n      async (tx) => {\n        const existingDocument = await loadDocumentRecord(lockedExecSql, {\n          appKind: DOCUMENTS_APP_KIND,\n          localId,\n        });\n        await deleteStoredDocumentRows({\n          existingDocumentId: existingDocument?.documentId ?? null,\n          localId,\n          lockedExecSql,\n          tx,\n        });\n      },\n      { behavior: \"immediate\" },\n    );\n  });\n}\n\nexport async function deleteStoredDocumentIfMatches(\n  execSql: ExecSql,\n  expectedRecord: StoredDocumentRecord,\n  deleteClientProjection: (transactionExecSql: ExecSql) => Promise<void>,\n): Promise<boolean> {\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await ensureDocumentDeletionTables(lockedExecSql);\n    return getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n      async (tx) => {\n        const existingDocument = await loadDocumentRecord(lockedExecSql, {\n          appKind: DOCUMENTS_APP_KIND,\n          localId: expectedRecord.id,\n        });\n        if (\n          !existingDocument ||\n          !sameCanonicalDocumentSecurityIdentity(\n            existingDocument,\n            expectedRecord,\n          )\n        ) {\n          return false;\n        }\n        if (\n          existingDocument.documentId &&\n          (await hasAnotherDocumentAlias({\n            documentId: existingDocument.documentId,\n            localId: expectedRecord.id,\n            tx,\n          }))\n        ) {\n          return false;\n        }\n        await deleteStoredDocumentRows({\n          existingDocumentId: existingDocument.documentId ?? null,\n          localId: expectedRecord.id,\n          lockedExecSql,\n          tx,\n        });\n        await deleteClientProjection(lockedExecSql);\n        return true;\n      },\n      { behavior: \"immediate\" },\n    );\n  });\n}\n\nexport async function deleteStoredDocumentSideRowsIfAbsent(\n  execSql: ExecSql,\n  localId: string,\n  expectedDocumentId: string | null,\n  deleteClientProjection: (transactionExecSql: ExecSql) => Promise<void>,\n): Promise<boolean> {\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await ensureDocumentDeletionTables(lockedExecSql);\n    return getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n      async (tx) => {\n        const existingDocument = await loadDocumentRecord(lockedExecSql, {\n          appKind: DOCUMENTS_APP_KIND,\n          localId,\n        });\n        if (existingDocument) return false;\n        if (\n          expectedDocumentId &&\n          (await hasAnotherDocumentAlias({\n            documentId: expectedDocumentId,\n            localId,\n            tx,\n          }))\n        ) {\n          return false;\n        }\n\n        await deleteStoredDocumentRows({\n          existingDocumentId: expectedDocumentId,\n          localId,\n          lockedExecSql,\n          tx,\n        });\n        await deleteClientProjection(lockedExecSql);\n        return true;\n      },\n      { behavior: \"immediate\" },\n    );\n  });\n}\n"]}
+{"version":3,"file":"documentDeletionPersistence.js","sourceRoot":"","sources":["documentDeletionPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAC1F,OAAO,EACL,gCAAgC,EAChC,2BAA2B,EAC3B,mBAAmB,EACnB,wBAAwB,EACxB,0BAA0B,EAC1B,kBAAkB,EAClB,sBAAsB,EACtB,SAAS,GACV,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,iCAAiC,GAClC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAEL,eAAe,EACf,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iDAAiD,EAAE,MAAM,mCAAmC,CAAC;AACtG,OAAO,EAAE,qCAAqC,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mCAAmC,EAAE,MAAM,kBAAkB,CAAC;AAEvE,KAAK,UAAU,wBAAwB,CAAC,KAKvC;IACC,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACjE,MAAM,mCAAmC,CAAC;QACxC,UAAU,EAAE,EAAE,CAAC,gCAAgC,CAAC,OAAO,EAAE,OAAO,CAAC;QACjE,YAAY,EAAE,EAAE,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC;QAC7D,EAAE;KACH,CAAC,CAAC;IACH,MAAM,EAAE;SACL,MAAM,CAAC,kBAAkB,CAAC;SAC1B,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC9C,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,sBAAsB,CAAC;SAC9B,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAClD,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,0BAA0B,CAAC;SAClC,KAAK,CAAC,EAAE,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SACtD,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,gCAAgC,CAAC;SACxC,KAAK,CAAC,EAAE,CAAC,gCAAgC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC5D,GAAG,EAAE,CAAC;IACT,IAAI,kBAAkB,EAAE,CAAC;QACvB,MAAM,EAAE;aACL,MAAM,CAAC,2BAA2B,CAAC;aACnC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;aACrE,GAAG,EAAE,CAAC;QACT,MAAM,iDAAiD,CAAC,EAAE,EAAE;YAC1D,kBAAkB;SACnB,CAAC,CAAC;QACH,MAAM,EAAE;aACL,MAAM,CAAC,yBAAyB,CAAC;aACjC,KAAK,CACJ,OAAO,CACL,yBAAyB,CAAC,QAAQ,EAClC,EAAE;aACC,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;aACtC,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC,CACjE,CACF;aACA,GAAG,EAAE,CAAC;QACT,MAAM,EAAE;aACL,MAAM,CAAC,mBAAmB,CAAC;aAC3B,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;aAC7D,GAAG,EAAE,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,4BAA4B,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACzD,MAAM,qBAAqB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,wBAAwB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,oBAAoB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,OAAgB;IAC1D,0EAA0E;IAC1E,wCAAwC;IACxC,MAAM,eAAe,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,KAItC;IACC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,EAAE;SACxB,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;SACtC,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC,EACzC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAC1C,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CACrC,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAgB,EAChB,OAAe;IAEf,MAAM,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC9D,MAAM,4BAA4B,CAAC,aAAa,CAAC,CAAC;QAClD,MAAM,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CAChE,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,gBAAgB,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE;gBAC/D,OAAO,EAAE,kBAAkB;gBAC3B,OAAO;aACR,CAAC,CAAC;YACH,MAAM,wBAAwB,CAAC;gBAC7B,kBAAkB,EAAE,gBAAgB,EAAE,UAAU,IAAI,IAAI;gBACxD,OAAO;gBACP,aAAa;gBACb,EAAE;aACH,CAAC,CAAC;QACL,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAgB,EAChB,cAAoC,EACpC,sBAAsE;IAEtE,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,4BAA4B,CAAC,aAAa,CAAC,CAAC;QAClD,OAAO,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CACjE,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,gBAAgB,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE;gBAC/D,OAAO,EAAE,kBAAkB;gBAC3B,OAAO,EAAE,cAAc,CAAC,EAAE;aAC3B,CAAC,CAAC;YACH,IACE,CAAC,gBAAgB;gBACjB,CAAC,qCAAqC,CACpC,gBAAgB,EAChB,cAAc,CACf,EACD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE;iBACzB,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,CAAC,WAAW,EAAE,CAAC;iBACvD,IAAI,CAAC,kBAAkB,CAAC;iBACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;iBACxD,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,SAAS,EAAE,WAAW,IAAI,IAAI,CAAC,KAAK,cAAc,CAAC,WAAW;gBACjE,OAAO,KAAK,CAAC;YACf,IACE,gBAAgB,CAAC,UAAU;gBAC3B,CAAC,MAAM,uBAAuB,CAAC;oBAC7B,UAAU,EAAE,gBAAgB,CAAC,UAAU;oBACvC,OAAO,EAAE,cAAc,CAAC,EAAE;oBAC1B,EAAE;iBACH,CAAC,CAAC,EACH,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,wBAAwB,CAAC;gBAC7B,kBAAkB,EAAE,gBAAgB,CAAC,UAAU,IAAI,IAAI;gBACvD,OAAO,EAAE,cAAc,CAAC,EAAE;gBAC1B,aAAa;gBACb,EAAE;aACH,CAAC,CAAC;YACH,MAAM,sBAAsB,CAAC,aAAa,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,OAAgB,EAChB,OAAe,EACf,kBAAiC,EACjC,sBAAsE;IAEtE,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,4BAA4B,CAAC,aAAa,CAAC,CAAC;QAClD,OAAO,iCAAiC,CAAC,aAAa,CAAC,CAAC,WAAW,CACjE,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,gBAAgB,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE;gBAC/D,OAAO,EAAE,kBAAkB;gBAC3B,OAAO;aACR,CAAC,CAAC;YACH,IAAI,gBAAgB;gBAAE,OAAO,KAAK,CAAC;YACnC,IACE,kBAAkB;gBAClB,CAAC,MAAM,uBAAuB,CAAC;oBAC7B,UAAU,EAAE,kBAAkB;oBAC9B,OAAO;oBACP,EAAE;iBACH,CAAC,CAAC,EACH,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,wBAAwB,CAAC;gBAC7B,kBAAkB,EAAE,kBAAkB;gBACtC,OAAO;gBACP,aAAa;gBACb,EAAE;aACH,CAAC,CAAC;YACH,MAAM,sBAAsB,CAAC,aAAa,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { and, eq, inArray, ne } from \"drizzle-orm\";\nimport { deleteDocumentHistory } from \"../../../sqlite/documentHistoryPersistence\";\nimport {\n  clearDocumentSyncFailure,\n  deleteDocumentPendingUpdates,\n  deleteDocumentRecord,\n  loadDocumentRecord,\n} from \"../../../sqlite/documentPersistence\";\nimport { documentIntentLinkTargets } from \"../../../sqlite/documentPlacementIntentSchema\";\nimport {\n  documentAttachmentBlobProjection,\n  documentContainerProjection,\n  documentMoveIntents,\n  documentMoveIntentTables,\n  documentPendingAttachments,\n  documentProjection,\n  documentProjectionText,\n  documents,\n} from \"../../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../../sqlite/sqlitePersistenceRuntime\";\nimport {\n  type ExecSql,\n  ensureSqlTables,\n  runSerializedSqlMutation,\n} from \"../../../sqlite/sqlSchema\";\nimport type { StoredDocumentRecord } from \"../types\";\nimport { DOCUMENTS_APP_KIND } from \"./constants\";\nimport { deleteContainerDocumentTombstoneHoldsForDocuments } from \"./containerDocumentTombstoneHolds\";\nimport { sameCanonicalDocumentSecurityIdentity } from \"./documentRecordIdentity\";\nimport { getDocumentScope } from \"./documentRows\";\nimport { queueDocumentAttachmentBlobReclaims } from \"./orphanSideRows\";\n\nasync function deleteStoredDocumentRows(input: {\n  existingDocumentId: string | null;\n  localId: string;\n  lockedExecSql: ExecSql;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  const { existingDocumentId, localId, lockedExecSql, tx } = input;\n  await queueDocumentAttachmentBlobReclaims({\n    localWhere: eq(documentAttachmentBlobProjection.localId, localId),\n    pendingWhere: eq(documentPendingAttachments.localId, localId),\n    tx,\n  });\n  await tx\n    .delete(documentProjection)\n    .where(eq(documentProjection.localId, localId))\n    .run();\n  await tx\n    .delete(documentProjectionText)\n    .where(eq(documentProjectionText.localId, localId))\n    .run();\n  await tx\n    .delete(documentPendingAttachments)\n    .where(eq(documentPendingAttachments.localId, localId))\n    .run();\n  await tx\n    .delete(documentAttachmentBlobProjection)\n    .where(eq(documentAttachmentBlobProjection.localId, localId))\n    .run();\n  if (existingDocumentId) {\n    await tx\n      .delete(documentContainerProjection)\n      .where(eq(documentContainerProjection.documentId, existingDocumentId))\n      .run();\n    await deleteContainerDocumentTombstoneHoldsForDocuments(tx, [\n      existingDocumentId,\n    ]);\n    await tx\n      .delete(documentIntentLinkTargets)\n      .where(\n        inArray(\n          documentIntentLinkTargets.intentId,\n          tx\n            .select({ id: documentMoveIntents.id })\n            .from(documentMoveIntents)\n            .where(eq(documentMoveIntents.documentId, existingDocumentId)),\n        ),\n      )\n      .run();\n    await tx\n      .delete(documentMoveIntents)\n      .where(eq(documentMoveIntents.documentId, existingDocumentId))\n      .run();\n  }\n  const scope = getDocumentScope(localId);\n  await deleteDocumentPendingUpdates(lockedExecSql, scope);\n  await deleteDocumentHistory(lockedExecSql, scope);\n  await clearDocumentSyncFailure(lockedExecSql, scope);\n  await deleteDocumentRecord(lockedExecSql, scope);\n}\n\nasync function ensureDocumentDeletionTables(execSql: ExecSql): Promise<void> {\n  // Move intents live in the container-contents schema, which document-only\n  // callers may not have initialized yet.\n  await ensureSqlTables(execSql, documentMoveIntentTables);\n}\n\nasync function hasAnotherDocumentAlias(input: {\n  documentId: string;\n  localId: string;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<boolean> {\n  const rows = await input.tx\n    .select({ localId: documents.localId })\n    .from(documents)\n    .where(\n      and(\n        eq(documents.appKind, DOCUMENTS_APP_KIND),\n        eq(documents.documentId, input.documentId),\n        ne(documents.localId, input.localId),\n      ),\n    )\n    .limit(1);\n  return rows.length > 0;\n}\n\nexport async function deleteStoredDocument(\n  execSql: ExecSql,\n  localId: string,\n): Promise<void> {\n  await runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await ensureDocumentDeletionTables(lockedExecSql);\n    await getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n      async (tx) => {\n        const existingDocument = await loadDocumentRecord(lockedExecSql, {\n          appKind: DOCUMENTS_APP_KIND,\n          localId,\n        });\n        await deleteStoredDocumentRows({\n          existingDocumentId: existingDocument?.documentId ?? null,\n          localId,\n          lockedExecSql,\n          tx,\n        });\n      },\n      { behavior: \"immediate\" },\n    );\n  });\n}\n\nexport async function deleteStoredDocumentIfMatches(\n  execSql: ExecSql,\n  expectedRecord: StoredDocumentRecord,\n  deleteClientProjection: (transactionExecSql: ExecSql) => Promise<void>,\n): Promise<boolean> {\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await ensureDocumentDeletionTables(lockedExecSql);\n    return getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n      async (tx) => {\n        const existingDocument = await loadDocumentRecord(lockedExecSql, {\n          appKind: DOCUMENTS_APP_KIND,\n          localId: expectedRecord.id,\n        });\n        if (\n          !existingDocument ||\n          !sameCanonicalDocumentSecurityIdentity(\n            existingDocument,\n            expectedRecord,\n          )\n        ) {\n          return false;\n        }\n        const [placement] = await tx\n          .select({ containerId: documentProjection.containerId })\n          .from(documentProjection)\n          .where(eq(documentProjection.localId, expectedRecord.id))\n          .limit(1);\n        if ((placement?.containerId ?? null) !== expectedRecord.containerId)\n          return false;\n        if (\n          existingDocument.documentId &&\n          (await hasAnotherDocumentAlias({\n            documentId: existingDocument.documentId,\n            localId: expectedRecord.id,\n            tx,\n          }))\n        ) {\n          return false;\n        }\n        await deleteStoredDocumentRows({\n          existingDocumentId: existingDocument.documentId ?? null,\n          localId: expectedRecord.id,\n          lockedExecSql,\n          tx,\n        });\n        await deleteClientProjection(lockedExecSql);\n        return true;\n      },\n      { behavior: \"immediate\" },\n    );\n  });\n}\n\nexport async function deleteStoredDocumentSideRowsIfAbsent(\n  execSql: ExecSql,\n  localId: string,\n  expectedDocumentId: string | null,\n  deleteClientProjection: (transactionExecSql: ExecSql) => Promise<void>,\n): Promise<boolean> {\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await ensureDocumentDeletionTables(lockedExecSql);\n    return getClientSQLitePersistenceRuntime(lockedExecSql).transaction(\n      async (tx) => {\n        const existingDocument = await loadDocumentRecord(lockedExecSql, {\n          appKind: DOCUMENTS_APP_KIND,\n          localId,\n        });\n        if (existingDocument) return false;\n        if (\n          expectedDocumentId &&\n          (await hasAnotherDocumentAlias({\n            documentId: expectedDocumentId,\n            localId,\n            tx,\n          }))\n        ) {\n          return false;\n        }\n\n        await deleteStoredDocumentRows({\n          existingDocumentId: expectedDocumentId,\n          localId,\n          lockedExecSql,\n          tx,\n        });\n        await deleteClientProjection(lockedExecSql);\n        return true;\n      },\n      { behavior: \"immediate\" },\n    );\n  });\n}\n"]}

package/data/persistence/documents/orphanBlobPersistence.d.ts

@@ -0,0 +1,13 @@
+import type { ExecSql } from "../../sqlite/sqlSchema.js";
+/**
+ * Attachment removals queue keys in the same commit that removes their rows.
+ * References include every pending upload and held copy sharing this byte store.
+ * Reference publication must use the SDK's per-key blob mutation lock.
+ */
+export interface DocumentOrphanBlobPersistence {
+    acknowledge: (execSql: ExecSql, storageKey: string) => Promise<void>;
+    isReferenced: (execSql: ExecSql, storageKey: string) => Promise<boolean>;
+    list: (execSql: ExecSql, limit: number) => Promise<readonly string[]>;
+    /** Sweep one bounded batch of abandoned side rows; true means more remain. */
+    sweep: (execSql: ExecSql) => Promise<boolean>;
+}

package/data/persistence/documents/orphanBlobPersistence.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=orphanBlobPersistence.js.map

package/data/persistence/documents/orphanBlobPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orphanBlobPersistence.js","sourceRoot":"","sources":["orphanBlobPersistence.ts"],"names":[],"mappings":"","sourcesContent":["import type { ExecSql } from \"../../sqlite/sqlSchema\";\n\n/**\n * Attachment removals queue keys in the same commit that removes their rows.\n * References include every pending upload and held copy sharing this byte store.\n * Reference publication must use the SDK's per-key blob mutation lock.\n */\nexport interface DocumentOrphanBlobPersistence {\n  acknowledge: (execSql: ExecSql, storageKey: string) => Promise<void>;\n  isReferenced: (execSql: ExecSql, storageKey: string) => Promise<boolean>;\n  list: (execSql: ExecSql, limit: number) => Promise<readonly string[]>;\n  /** Sweep one bounded batch of abandoned side rows; true means more remain. */\n  sweep: (execSql: ExecSql) => Promise<boolean>;\n}\n"]}

package/data/persistence/documents/types.d.ts

@@ -3,6 +3,7 @@ import type { DiscoveredDocumentInput, DocumentSummary } from "../../documents/d
 import type { DocumentSyncPullContinuation } from "../../documents/shared/pullContinuation.js";
 import type { DocumentRecord as BaseDocumentRecord, PendingUpdateFields, PendingUpdateRecord } from "../../sqlite/documentPersistence.js";
 import type { ExecSql } from "../../sqlite/sqlSchema.js";
+import type { DocumentOrphanBlobPersistence } from "./orphanBlobPersistence.js";
 export type { PendingUpdateRecord } from "../../sqlite/documentPersistence.js";
 export interface StoredDocumentRecord extends BaseDocumentRecord {
     containerId: string | null;
@@ -104,6 +105,7 @@ export interface DocumentSummaryList {
     readonly totalCount: number;
 }
 export interface DocumentsPersistence {
+    readonly orphanBlobs: DocumentOrphanBlobPersistence;
     /**
      * The adapter guarantees that recovery checkpoint replacement, selection of
      * covered local history, rejection of unproven ordinary pending rows, and
@@ -260,7 +262,8 @@ export interface DocumentsPersistence {
     deleteDocument: (execSql: ExecSql, localId: string) => Promise<void>;
     /**
      * Delete the canonical row and every side row only when its security identity
-     * still matches the captured record. The comparison, deletes, and client
+     * and container placement still match the captured record. The comparison,
+     * deletes, and client
      * projection callback must share one write transaction.
      */
     deleteDocumentIfMatches: (execSql: ExecSql, expectedRecord: StoredDocumentRecord, deleteClientProjection: (transactionExecSql: ExecSql) => Promise<void>) => Promise<boolean>;

package/data/persistence/documents/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  DocumentProjectorRegistryInput,\n  StoredDocumentKind,\n} from \"../../documents/documentKinds\";\nimport type {\n  DiscoveredDocumentInput,\n  DocumentSummary,\n} from \"../../documents/documentSummary\";\nimport type { DocumentSyncPullContinuation } from \"../../documents/shared/pullContinuation\";\nimport type {\n  DocumentRecord as BaseDocumentRecord,\n  PendingUpdateFields,\n  PendingUpdateRecord,\n} from \"../../sqlite/documentPersistence\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\n\nexport type { PendingUpdateRecord } from \"../../sqlite/documentPersistence\";\n\nexport interface StoredDocumentRecord extends BaseDocumentRecord {\n  containerId: string | null;\n  documentKind?: StoredDocumentKind;\n  text: string;\n  title?: string;\n}\n\nexport type DiscardDocumentToShellResult =\n  | { discarded: false }\n  | {\n      discarded: true;\n      documentKind: StoredDocumentKind;\n    };\n\nexport interface PendingUpdateInsert extends PendingUpdateFields {\n  localId: string;\n}\n\n/**\n * The identity a pending attachment upload reuses across attempts so a retry\n * (next sync pass or after a restart) reproduces byte-identical encrypted bytes\n * and resumes the same multipart stage instead of orphaning it. `contentKey` and\n * the chunk `nonceSeed` are base64. `partSize`/`stageId` are filled in once the\n * multipart stage has been opened and remain null before that.\n */\nexport interface PendingAttachmentUploadIdentity {\n  blobId: string;\n  contentKey: string;\n  contentKeyEpoch: number;\n  nonceSeed: string;\n  partSize: number | null;\n  plaintextSha256: string;\n  stageId: string | null;\n}\n\nexport interface PendingAttachmentRecord {\n  byteLength: number;\n  contentSha256: string;\n  localId: string;\n  mimeType: string | null;\n  name: string;\n  slotId: string;\n  storageKey: string;\n  upload?: PendingAttachmentUploadIdentity | null;\n}\n\nexport interface LocalAttachmentRecord {\n  blobId: string | null;\n  byteLength: number;\n  // Plaintext digest of the bytes at `storageKey`. Compared with the digest\n  // the document content records for the slot: a held copy that differs is a\n  // validly signed served binding the document has not recorded (yet).\n  contentSha256: string;\n  // Set once the slot is unlinked from a synced document and cleared when the\n  // slot is written again. The record survives the unlink so the next sync can\n  // still detach the remote binding; `detachedAt` is what keeps the local read\n  // models from reporting the slot as a live blob reference in the meantime.\n  detachedAt: string | null;\n  localId: string;\n  mimeType: string | null;\n  slotId: string;\n  storageKey: string;\n}\n\nexport interface AttachmentStagingRows {\n  localAttachments: ReadonlyArray<LocalAttachmentRecord>;\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>;\n}\n\nexport interface AttachmentRemovalRows {\n  mode: \"delete\" | \"detach\";\n  slotId: string;\n  storageKey: string;\n}\n\nexport interface DocumentHistoryRestoreState {\n  snapshot: string;\n  tailUpdates: readonly {\n    origin: \"local\" | \"remote\";\n    updateData: string;\n  }[];\n}\n\nexport interface RelinkPersistedDocumentInput {\n  accessEpoch: number;\n  accessStateHash?: string | null;\n  containerId: string;\n  documentId: string | null;\n  localId: string;\n}\n\nexport interface ContainerDocumentTombstoneInput {\n  containerId: string;\n  documentId: string;\n  /** Epoch of the verified head; apply refuses a head below local state. */\n  accessEpoch: number;\n  /** Verified head link set (omits `containerId`); apply needs signed evidence. */\n  linkedContainerIds: ReadonlyArray<string>;\n  updatedAt: string;\n}\n\nexport type DocumentSummarySortDirection = \"asc\" | \"desc\";\nexport type DocumentSummarySortKey = \"kind\" | \"title\" | \"updated\";\n\nexport interface DocumentSummarySort {\n  readonly direction: DocumentSummarySortDirection;\n  readonly key: DocumentSummarySortKey;\n}\n\nexport interface ListDocumentSummariesInput {\n  documentKind?: StoredDocumentKind | undefined;\n  limit?: number | undefined;\n  offset?: number | undefined;\n  sort?: DocumentSummarySort | undefined;\n}\n\nexport interface DocumentSummaryList {\n  readonly rows: ReadonlyArray<DocumentSummary>;\n  readonly totalCount: number;\n}\n\nexport interface DocumentsPersistence {\n  /**\n   * The adapter guarantees that recovery checkpoint replacement, selection of\n   * covered local history, rejection of unproven ordinary pending rows, and\n   * quarantine of every queued checkpoint artifact share the guarded\n   * `commitDocumentMutation` transaction, which also advances the canonical\n   * recovery generation. An unrelated history tail not covered by the rebuild\n   * must abort that transaction.\n   */\n  readonly supportsAtomicRecoveryHistoryPruning: boolean;\n  /**\n   * Atomically create the canonical row, standard projections, and birth\n   * checkpoint. Returns null when another initializer already owns localId.\n   */\n  createDocumentWithHistoryCheckpoint: (\n    execSql: ExecSql,\n    document: StoredDocumentRecord,\n    historyCheckpoint: {\n      endVersionVector: string;\n      snapshot: string;\n    },\n    options:\n      | {\n          pendingUpdate?: PendingUpdateFields;\n          /** Recheck volatile caller ownership inside the create transaction. */\n          stillCurrent?: (() => boolean) | undefined;\n          updatedAt?: string;\n        }\n      | undefined,\n    saveClientProjection: (\n      transactionExecSql: ExecSql,\n      updatedAt: string,\n    ) => Promise<void>,\n  ) => Promise<string | null>;\n  /**\n   * Conditionally commit one already-prepared mutation against the exact\n   * durable record it was derived from. The identity/progress comparison,\n   * attachment and history writes, accepted-queue settlement,\n   * canonical/projection save, and client projection callback must share one\n   * adapter transaction.\n   */\n  commitDocumentMutation: (\n    execSql: ExecSql,\n    input: {\n      acceptedPendingUpdateIds: readonly string[];\n      attachmentRemoval?: AttachmentRemovalRows | undefined;\n      attachmentStaging?: AttachmentStagingRows | undefined;\n      clearSyncFailure?: boolean | undefined;\n      document: StoredDocumentRecord;\n      expectedRecord: StoredDocumentRecord;\n      historyCheckpoint?:\n        | {\n            coveredTailIds: readonly string[];\n            endVersionVector: string;\n            pruneCoveredLocalState: boolean;\n            snapshot: string;\n          }\n        | undefined;\n      historyUpdateOrigin?: \"local\" | \"remote\" | undefined;\n      historyUpdates?: readonly string[] | undefined;\n      pendingUpdate?: PendingUpdateFields | undefined;\n      settleAcceptedPendingOnConflict: boolean;\n      /**\n       * Recheck volatile caller ownership inside the adapter transaction,\n       * before any durable side effect. A false result aborts the commit.\n       */\n      stillCurrent?: (() => boolean) | undefined;\n      updatedAt?: string | undefined;\n    },\n    saveClientProjection: (\n      transactionExecSql: ExecSql,\n      updatedAt: string,\n    ) => Promise<void>,\n  ) => Promise<\n    | { committed: true; updatedAt: string }\n    | { committed: false; currentRecord: StoredDocumentRecord | null }\n  >;\n  /** Settle acknowledged rows only while the response's security identity survives. */\n  settleAcceptedPendingUpdates: (\n    execSql: ExecSql,\n    input: {\n      expectedRecord: StoredDocumentRecord;\n      pendingUpdateIds: readonly string[];\n    },\n  ) => Promise<StoredDocumentRecord | null>;\n  ensureSchema: (execSql: ExecSql) => Promise<void>;\n  listDocuments: (execSql: ExecSql) => Promise<DocumentSummary[]>;\n  listDocumentSummaries: (\n    execSql: ExecSql,\n    input?: ListDocumentSummariesInput,\n  ) => Promise<DocumentSummaryList>;\n  listDocumentsByContainerIdsOrDocumentIds: (\n    execSql: ExecSql,\n    input: {\n      containerIds: ReadonlyArray<string>;\n      documentIds: ReadonlyArray<string>;\n    },\n  ) => Promise<DocumentSummary[]>;\n  findDocumentLocalIdsByContainerId: (\n    execSql: ExecSql,\n    containerId: string,\n  ) => Promise<string[]>;\n  /**\n   * Select one local row for a remote document identity. Prefer any row with\n   * queued updates or a deferred-sync frontier, then break duplicates by\n   * updatedAt and localId descending.\n   */\n  findLocalIdByDocumentId: (\n    execSql: ExecSql,\n    documentId: string,\n  ) => Promise<string | null>;\n  /** Canonical-row probe; false authorizes destructive orphan teardown. */\n  hasDocument: (execSql: ExecSql, localId: string) => Promise<boolean>;\n  /** Observe whether the canonical row still names the expected remote stream. */\n  documentIdentityMatches: (\n    execSql: ExecSql,\n    localId: string,\n    expectedDocumentId: string | null,\n    expectedRecoveryGeneration: number,\n  ) => Promise<boolean>;\n  loadDocument: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<StoredDocumentRecord | null>;\n  /** Read the canonical record and its history from one database snapshot. */\n  loadDocumentWithHistoryRestoreState: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<{\n    document: StoredDocumentRecord | null;\n    historyRestoreState: DocumentHistoryRestoreState | null;\n  }>;\n  /** Read every document-store startup row from one database snapshot. */\n  loadDocumentStoreState: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<{\n    document: StoredDocumentRecord | null;\n    historyRestoreState: DocumentHistoryRestoreState | null;\n    localAttachments: LocalAttachmentRecord[];\n    pendingAttachments: PendingAttachmentRecord[];\n  }>;\n  /**\n   * Atomically replace the exact rejected pull continuation with the durable\n   * recovery marker when every supplied sync-identity field still matches.\n   * Return the authoritative current record after the compare-and-set, or\n   * null when the canonical row no longer exists. A CAS loss returns the\n   * winning record so the live store can adopt its newer progress.\n   */\n  invalidatePullContinuation: (\n    execSql: ExecSql,\n    input: {\n      accessEpoch: number;\n      accessStateHash: string | null;\n      continuation: DocumentSyncPullContinuation;\n      contentKeyBundle: string | null;\n      documentId: string;\n      documentKekTargets: string | null;\n      documentManifestBundle: string | null;\n      lastCommitLsn: string | null;\n      localId: string;\n    },\n  ) => Promise<{\n    historyRestoreState: DocumentHistoryRestoreState | null;\n    record: StoredDocumentRecord;\n  } | null>;\n  // Read the authoritative container placement for a locally persisted document\n  // straight from its projection row. Returns `undefined` when no projection row\n  // exists yet (a first create/discovery persist), so a caller can distinguish\n  // that from a row that legitimately carries a null container (a document\n  // unlinked from every container). Container placement is owned by the\n  // link/tombstone/discovery layer, so a content-metadata persist reads this to\n  // avoid republishing a stale in-memory container.\n  loadDocumentContainer: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<{ containerId: string | null } | undefined>;\n  saveDocument: (\n    execSql: ExecSql,\n    document: StoredDocumentRecord,\n    options?: {\n      updatedAt?: string;\n    },\n  ) => Promise<string>;\n  /**\n   * Durable full-history support (checkpoint + append-only tail) — the ONLY\n   * persisted content source. REQUIRED: a persistence without these could\n   * report successful writes whose documents reopen empty.\n   */\n  appendHistoryUpdates: (\n    execSql: ExecSql,\n    input: {\n      localId: string;\n      origin: \"local\" | \"remote\";\n      updates: readonly string[];\n    },\n  ) => Promise<void>;\n  loadHistoryRestoreState: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<DocumentHistoryRestoreState | null>;\n  readHistoryTailSize: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<{\n    byteLength: number;\n    hasCheckpoint: boolean;\n    rowCount: number;\n  }>;\n  listHistoryTailEntries: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<{ id: string; updateData: string }[]>;\n  replaceHistoryCheckpoint: (\n    execSql: ExecSql,\n    input: {\n      coveredTailIds: readonly string[];\n      endVersionVector: string;\n      force?: boolean;\n      localId: string;\n      snapshot: string;\n      stillCurrent?: () => boolean;\n    },\n  ) => Promise<void>;\n  saveDocumentAndDeletePendingUpdates: (\n    execSql: ExecSql,\n    document: StoredDocumentRecord,\n    pendingUpdateIds: readonly string[],\n    options?: {\n      updatedAt?: string;\n    },\n  ) => Promise<string>;\n  deleteDocument: (execSql: ExecSql, localId: string) => Promise<void>;\n  /**\n   * Delete the canonical row and every side row only when its security identity\n   * still matches the captured record. The comparison, deletes, and client\n   * projection callback must share one write transaction.\n   */\n  deleteDocumentIfMatches: (\n    execSql: ExecSql,\n    expectedRecord: StoredDocumentRecord,\n    deleteClientProjection: (transactionExecSql: ExecSql) => Promise<void>,\n  ) => Promise<boolean>;\n  /**\n   * Delete orphaned side rows only if the canonical document is still absent.\n   * The absence check, row cleanup, and client projection callback must share\n   * one write transaction so a concurrent create is preserved.\n   */\n  deleteDocumentSideRowsIfAbsent: (\n    execSql: ExecSql,\n    localId: string,\n    expectedDocumentId: string | null,\n    deleteClientProjection: (transactionExecSql: ExecSql) => Promise<void>,\n  ) => Promise<boolean>;\n  upsertDiscoveredDocument: (\n    execSql: ExecSql,\n    input: DiscoveredDocumentInput,\n  ) => Promise<DocumentSummary>;\n  relinkPersistedDocument: (\n    execSql: ExecSql,\n    input: RelinkPersistedDocumentInput,\n  ) => Promise<DocumentSummary | null>;\n  listPendingUpdates: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<PendingUpdateRecord[]>;\n  rekeyPendingUpdate: (execSql: ExecSql, id: string) => Promise<string | null>;\n  listPendingAttachments: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<PendingAttachmentRecord[]>;\n  listLocalAttachments: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<LocalAttachmentRecord[]>;\n  /**\n   * Durably append the outgoing row and matching local-history tail entry.\n   * When expectations are supplied, compare the document identity and recovery\n   * generation with the canonical row inside that same mutation and return\n   * false on absence or mismatch. Adapters must not insert either row.\n   */\n  enqueuePendingUpdate: (\n    execSql: ExecSql,\n    pendingUpdate: PendingUpdateInsert,\n    options?: {\n      expectedDocumentId: string | null;\n      expectedRecoveryGeneration: number;\n    },\n  ) => Promise<boolean>;\n  /** Replace a hydrated copy only if its observed durable slot and live document still match. */\n  saveHydratedAttachment: (\n    execSql: ExecSql,\n    input: {\n      attachment: LocalAttachmentRecord;\n      expectedStorageKey: string | null;\n      expectedSnapshotEndVersion: string | null;\n      stillCurrent: () => boolean;\n    },\n  ) => Promise<boolean>;\n  saveLocalAttachment: (\n    execSql: ExecSql,\n    attachment: LocalAttachmentRecord,\n  ) => Promise<void>;\n  deleteLocalAttachment: (\n    execSql: ExecSql,\n    localId: string,\n    slotId: string,\n    storageKey: string,\n  ) => Promise<void>;\n  markLocalAttachmentDetached: (\n    execSql: ExecSql,\n    localId: string,\n    slotId: string,\n    storageKey: string,\n  ) => Promise<void>;\n  savePendingAttachment: (\n    execSql: ExecSql,\n    attachment: PendingAttachmentRecord,\n  ) => Promise<void>;\n  deletePendingUpdate: (execSql: ExecSql, id: string) => Promise<void>;\n  deletePendingUpdates: (execSql: ExecSql, localId: string) => Promise<void>;\n  deletePendingAttachment: (\n    execSql: ExecSql,\n    localId: string,\n    slotId: string,\n    storageKey: string,\n  ) => Promise<void>;\n  deletePendingAttachments: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<void>;\n  /**\n   * Atomically convert a stuck document's local state to the\n   * freshly-discovered-share shell (see the SQL implementation's doc\n   * comment). The projector registry clears the document-kind client\n   * projection in the same transaction — those tables live with the app's\n   * projector definitions, so the CALLER'S registry is required (the default\n   * registry knows no app kinds, and a discard that silently kept a\n   * contact's or card's projected fields would leak the discarded values).\n   * The method itself is optional: implementations without the full document\n   * schema (container metadata, simple doubles) simply do not offer the\n   * discard escape hatch.\n   */\n  /**\n   * `expectedDocumentId` is revalidated against the loaded record inside the\n   * serialized mutation: a stale caller (or a relink that raced the request)\n   * must never discard a different identity's edits.\n   */\n  discardDocumentToShell?: (\n    execSql: ExecSql,\n    localId: string,\n    expectedDocumentId: string,\n    documentProjectors: DocumentProjectorRegistryInput,\n  ) => Promise<DiscardDocumentToShellResult>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  DocumentProjectorRegistryInput,\n  StoredDocumentKind,\n} from \"../../documents/documentKinds\";\nimport type {\n  DiscoveredDocumentInput,\n  DocumentSummary,\n} from \"../../documents/documentSummary\";\nimport type { DocumentSyncPullContinuation } from \"../../documents/shared/pullContinuation\";\nimport type {\n  DocumentRecord as BaseDocumentRecord,\n  PendingUpdateFields,\n  PendingUpdateRecord,\n} from \"../../sqlite/documentPersistence\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport type { DocumentOrphanBlobPersistence } from \"./orphanBlobPersistence\";\n\nexport type { PendingUpdateRecord } from \"../../sqlite/documentPersistence\";\n\nexport interface StoredDocumentRecord extends BaseDocumentRecord {\n  containerId: string | null;\n  documentKind?: StoredDocumentKind;\n  text: string;\n  title?: string;\n}\n\nexport type DiscardDocumentToShellResult =\n  | { discarded: false }\n  | {\n      discarded: true;\n      documentKind: StoredDocumentKind;\n    };\n\nexport interface PendingUpdateInsert extends PendingUpdateFields {\n  localId: string;\n}\n\n/**\n * The identity a pending attachment upload reuses across attempts so a retry\n * (next sync pass or after a restart) reproduces byte-identical encrypted bytes\n * and resumes the same multipart stage instead of orphaning it. `contentKey` and\n * the chunk `nonceSeed` are base64. `partSize`/`stageId` are filled in once the\n * multipart stage has been opened and remain null before that.\n */\nexport interface PendingAttachmentUploadIdentity {\n  blobId: string;\n  contentKey: string;\n  contentKeyEpoch: number;\n  nonceSeed: string;\n  partSize: number | null;\n  plaintextSha256: string;\n  stageId: string | null;\n}\n\nexport interface PendingAttachmentRecord {\n  byteLength: number;\n  contentSha256: string;\n  localId: string;\n  mimeType: string | null;\n  name: string;\n  slotId: string;\n  storageKey: string;\n  upload?: PendingAttachmentUploadIdentity | null;\n}\n\nexport interface LocalAttachmentRecord {\n  blobId: string | null;\n  byteLength: number;\n  // Plaintext digest of the bytes at `storageKey`. Compared with the digest\n  // the document content records for the slot: a held copy that differs is a\n  // validly signed served binding the document has not recorded (yet).\n  contentSha256: string;\n  // Set once the slot is unlinked from a synced document and cleared when the\n  // slot is written again. The record survives the unlink so the next sync can\n  // still detach the remote binding; `detachedAt` is what keeps the local read\n  // models from reporting the slot as a live blob reference in the meantime.\n  detachedAt: string | null;\n  localId: string;\n  mimeType: string | null;\n  slotId: string;\n  storageKey: string;\n}\n\nexport interface AttachmentStagingRows {\n  localAttachments: ReadonlyArray<LocalAttachmentRecord>;\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>;\n}\n\nexport interface AttachmentRemovalRows {\n  mode: \"delete\" | \"detach\";\n  slotId: string;\n  storageKey: string;\n}\n\nexport interface DocumentHistoryRestoreState {\n  snapshot: string;\n  tailUpdates: readonly {\n    origin: \"local\" | \"remote\";\n    updateData: string;\n  }[];\n}\n\nexport interface RelinkPersistedDocumentInput {\n  accessEpoch: number;\n  accessStateHash?: string | null;\n  containerId: string;\n  documentId: string | null;\n  localId: string;\n}\n\nexport interface ContainerDocumentTombstoneInput {\n  containerId: string;\n  documentId: string;\n  /** Epoch of the verified head; apply refuses a head below local state. */\n  accessEpoch: number;\n  /** Verified head link set (omits `containerId`); apply needs signed evidence. */\n  linkedContainerIds: ReadonlyArray<string>;\n  updatedAt: string;\n}\n\nexport type DocumentSummarySortDirection = \"asc\" | \"desc\";\nexport type DocumentSummarySortKey = \"kind\" | \"title\" | \"updated\";\n\nexport interface DocumentSummarySort {\n  readonly direction: DocumentSummarySortDirection;\n  readonly key: DocumentSummarySortKey;\n}\n\nexport interface ListDocumentSummariesInput {\n  documentKind?: StoredDocumentKind | undefined;\n  limit?: number | undefined;\n  offset?: number | undefined;\n  sort?: DocumentSummarySort | undefined;\n}\n\nexport interface DocumentSummaryList {\n  readonly rows: ReadonlyArray<DocumentSummary>;\n  readonly totalCount: number;\n}\n\nexport interface DocumentsPersistence {\n  readonly orphanBlobs: DocumentOrphanBlobPersistence;\n  /**\n   * The adapter guarantees that recovery checkpoint replacement, selection of\n   * covered local history, rejection of unproven ordinary pending rows, and\n   * quarantine of every queued checkpoint artifact share the guarded\n   * `commitDocumentMutation` transaction, which also advances the canonical\n   * recovery generation. An unrelated history tail not covered by the rebuild\n   * must abort that transaction.\n   */\n  readonly supportsAtomicRecoveryHistoryPruning: boolean;\n  /**\n   * Atomically create the canonical row, standard projections, and birth\n   * checkpoint. Returns null when another initializer already owns localId.\n   */\n  createDocumentWithHistoryCheckpoint: (\n    execSql: ExecSql,\n    document: StoredDocumentRecord,\n    historyCheckpoint: {\n      endVersionVector: string;\n      snapshot: string;\n    },\n    options:\n      | {\n          pendingUpdate?: PendingUpdateFields;\n          /** Recheck volatile caller ownership inside the create transaction. */\n          stillCurrent?: (() => boolean) | undefined;\n          updatedAt?: string;\n        }\n      | undefined,\n    saveClientProjection: (\n      transactionExecSql: ExecSql,\n      updatedAt: string,\n    ) => Promise<void>,\n  ) => Promise<string | null>;\n  /**\n   * Conditionally commit one already-prepared mutation against the exact\n   * durable record it was derived from. The identity/progress comparison,\n   * attachment and history writes, accepted-queue settlement,\n   * canonical/projection save, and client projection callback must share one\n   * adapter transaction.\n   */\n  commitDocumentMutation: (\n    execSql: ExecSql,\n    input: {\n      acceptedPendingUpdateIds: readonly string[];\n      attachmentRemoval?: AttachmentRemovalRows | undefined;\n      attachmentStaging?: AttachmentStagingRows | undefined;\n      clearSyncFailure?: boolean | undefined;\n      document: StoredDocumentRecord;\n      expectedRecord: StoredDocumentRecord;\n      historyCheckpoint?:\n        | {\n            coveredTailIds: readonly string[];\n            endVersionVector: string;\n            pruneCoveredLocalState: boolean;\n            snapshot: string;\n          }\n        | undefined;\n      historyUpdateOrigin?: \"local\" | \"remote\" | undefined;\n      historyUpdates?: readonly string[] | undefined;\n      pendingUpdate?: PendingUpdateFields | undefined;\n      settleAcceptedPendingOnConflict: boolean;\n      /**\n       * Recheck volatile caller ownership inside the adapter transaction,\n       * before any durable side effect. A false result aborts the commit.\n       */\n      stillCurrent?: (() => boolean) | undefined;\n      updatedAt?: string | undefined;\n    },\n    saveClientProjection: (\n      transactionExecSql: ExecSql,\n      updatedAt: string,\n    ) => Promise<void>,\n  ) => Promise<\n    | { committed: true; updatedAt: string }\n    | { committed: false; currentRecord: StoredDocumentRecord | null }\n  >;\n  /** Settle acknowledged rows only while the response's security identity survives. */\n  settleAcceptedPendingUpdates: (\n    execSql: ExecSql,\n    input: {\n      expectedRecord: StoredDocumentRecord;\n      pendingUpdateIds: readonly string[];\n    },\n  ) => Promise<StoredDocumentRecord | null>;\n  ensureSchema: (execSql: ExecSql) => Promise<void>;\n  listDocuments: (execSql: ExecSql) => Promise<DocumentSummary[]>;\n  listDocumentSummaries: (\n    execSql: ExecSql,\n    input?: ListDocumentSummariesInput,\n  ) => Promise<DocumentSummaryList>;\n  listDocumentsByContainerIdsOrDocumentIds: (\n    execSql: ExecSql,\n    input: {\n      containerIds: ReadonlyArray<string>;\n      documentIds: ReadonlyArray<string>;\n    },\n  ) => Promise<DocumentSummary[]>;\n  findDocumentLocalIdsByContainerId: (\n    execSql: ExecSql,\n    containerId: string,\n  ) => Promise<string[]>;\n  /**\n   * Select one local row for a remote document identity. Prefer any row with\n   * queued updates or a deferred-sync frontier, then break duplicates by\n   * updatedAt and localId descending.\n   */\n  findLocalIdByDocumentId: (\n    execSql: ExecSql,\n    documentId: string,\n  ) => Promise<string | null>;\n  /** Canonical-row probe; false authorizes destructive orphan teardown. */\n  hasDocument: (execSql: ExecSql, localId: string) => Promise<boolean>;\n  /** Observe whether the canonical row still names the expected remote stream. */\n  documentIdentityMatches: (\n    execSql: ExecSql,\n    localId: string,\n    expectedDocumentId: string | null,\n    expectedRecoveryGeneration: number,\n  ) => Promise<boolean>;\n  loadDocument: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<StoredDocumentRecord | null>;\n  /** Read the canonical record and its history from one database snapshot. */\n  loadDocumentWithHistoryRestoreState: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<{\n    document: StoredDocumentRecord | null;\n    historyRestoreState: DocumentHistoryRestoreState | null;\n  }>;\n  /** Read every document-store startup row from one database snapshot. */\n  loadDocumentStoreState: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<{\n    document: StoredDocumentRecord | null;\n    historyRestoreState: DocumentHistoryRestoreState | null;\n    localAttachments: LocalAttachmentRecord[];\n    pendingAttachments: PendingAttachmentRecord[];\n  }>;\n  /**\n   * Atomically replace the exact rejected pull continuation with the durable\n   * recovery marker when every supplied sync-identity field still matches.\n   * Return the authoritative current record after the compare-and-set, or\n   * null when the canonical row no longer exists. A CAS loss returns the\n   * winning record so the live store can adopt its newer progress.\n   */\n  invalidatePullContinuation: (\n    execSql: ExecSql,\n    input: {\n      accessEpoch: number;\n      accessStateHash: string | null;\n      continuation: DocumentSyncPullContinuation;\n      contentKeyBundle: string | null;\n      documentId: string;\n      documentKekTargets: string | null;\n      documentManifestBundle: string | null;\n      lastCommitLsn: string | null;\n      localId: string;\n    },\n  ) => Promise<{\n    historyRestoreState: DocumentHistoryRestoreState | null;\n    record: StoredDocumentRecord;\n  } | null>;\n  // Read the authoritative container placement for a locally persisted document\n  // straight from its projection row. Returns `undefined` when no projection row\n  // exists yet (a first create/discovery persist), so a caller can distinguish\n  // that from a row that legitimately carries a null container (a document\n  // unlinked from every container). Container placement is owned by the\n  // link/tombstone/discovery layer, so a content-metadata persist reads this to\n  // avoid republishing a stale in-memory container.\n  loadDocumentContainer: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<{ containerId: string | null } | undefined>;\n  saveDocument: (\n    execSql: ExecSql,\n    document: StoredDocumentRecord,\n    options?: {\n      updatedAt?: string;\n    },\n  ) => Promise<string>;\n  /**\n   * Durable full-history support (checkpoint + append-only tail) — the ONLY\n   * persisted content source. REQUIRED: a persistence without these could\n   * report successful writes whose documents reopen empty.\n   */\n  appendHistoryUpdates: (\n    execSql: ExecSql,\n    input: {\n      localId: string;\n      origin: \"local\" | \"remote\";\n      updates: readonly string[];\n    },\n  ) => Promise<void>;\n  loadHistoryRestoreState: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<DocumentHistoryRestoreState | null>;\n  readHistoryTailSize: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<{\n    byteLength: number;\n    hasCheckpoint: boolean;\n    rowCount: number;\n  }>;\n  listHistoryTailEntries: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<{ id: string; updateData: string }[]>;\n  replaceHistoryCheckpoint: (\n    execSql: ExecSql,\n    input: {\n      coveredTailIds: readonly string[];\n      endVersionVector: string;\n      force?: boolean;\n      localId: string;\n      snapshot: string;\n      stillCurrent?: () => boolean;\n    },\n  ) => Promise<void>;\n  saveDocumentAndDeletePendingUpdates: (\n    execSql: ExecSql,\n    document: StoredDocumentRecord,\n    pendingUpdateIds: readonly string[],\n    options?: {\n      updatedAt?: string;\n    },\n  ) => Promise<string>;\n  deleteDocument: (execSql: ExecSql, localId: string) => Promise<void>;\n  /**\n   * Delete the canonical row and every side row only when its security identity\n   * and container placement still match the captured record. The comparison,\n   * deletes, and client\n   * projection callback must share one write transaction.\n   */\n  deleteDocumentIfMatches: (\n    execSql: ExecSql,\n    expectedRecord: StoredDocumentRecord,\n    deleteClientProjection: (transactionExecSql: ExecSql) => Promise<void>,\n  ) => Promise<boolean>;\n  /**\n   * Delete orphaned side rows only if the canonical document is still absent.\n   * The absence check, row cleanup, and client projection callback must share\n   * one write transaction so a concurrent create is preserved.\n   */\n  deleteDocumentSideRowsIfAbsent: (\n    execSql: ExecSql,\n    localId: string,\n    expectedDocumentId: string | null,\n    deleteClientProjection: (transactionExecSql: ExecSql) => Promise<void>,\n  ) => Promise<boolean>;\n  upsertDiscoveredDocument: (\n    execSql: ExecSql,\n    input: DiscoveredDocumentInput,\n  ) => Promise<DocumentSummary>;\n  relinkPersistedDocument: (\n    execSql: ExecSql,\n    input: RelinkPersistedDocumentInput,\n  ) => Promise<DocumentSummary | null>;\n  listPendingUpdates: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<PendingUpdateRecord[]>;\n  rekeyPendingUpdate: (execSql: ExecSql, id: string) => Promise<string | null>;\n  listPendingAttachments: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<PendingAttachmentRecord[]>;\n  listLocalAttachments: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<LocalAttachmentRecord[]>;\n  /**\n   * Durably append the outgoing row and matching local-history tail entry.\n   * When expectations are supplied, compare the document identity and recovery\n   * generation with the canonical row inside that same mutation and return\n   * false on absence or mismatch. Adapters must not insert either row.\n   */\n  enqueuePendingUpdate: (\n    execSql: ExecSql,\n    pendingUpdate: PendingUpdateInsert,\n    options?: {\n      expectedDocumentId: string | null;\n      expectedRecoveryGeneration: number;\n    },\n  ) => Promise<boolean>;\n  /** Replace a hydrated copy only if its observed durable slot and live document still match. */\n  saveHydratedAttachment: (\n    execSql: ExecSql,\n    input: {\n      attachment: LocalAttachmentRecord;\n      expectedStorageKey: string | null;\n      expectedSnapshotEndVersion: string | null;\n      stillCurrent: () => boolean;\n    },\n  ) => Promise<boolean>;\n  saveLocalAttachment: (\n    execSql: ExecSql,\n    attachment: LocalAttachmentRecord,\n  ) => Promise<void>;\n  deleteLocalAttachment: (\n    execSql: ExecSql,\n    localId: string,\n    slotId: string,\n    storageKey: string,\n  ) => Promise<void>;\n  markLocalAttachmentDetached: (\n    execSql: ExecSql,\n    localId: string,\n    slotId: string,\n    storageKey: string,\n  ) => Promise<void>;\n  savePendingAttachment: (\n    execSql: ExecSql,\n    attachment: PendingAttachmentRecord,\n  ) => Promise<void>;\n  deletePendingUpdate: (execSql: ExecSql, id: string) => Promise<void>;\n  deletePendingUpdates: (execSql: ExecSql, localId: string) => Promise<void>;\n  deletePendingAttachment: (\n    execSql: ExecSql,\n    localId: string,\n    slotId: string,\n    storageKey: string,\n  ) => Promise<void>;\n  deletePendingAttachments: (\n    execSql: ExecSql,\n    localId: string,\n  ) => Promise<void>;\n  /**\n   * Atomically convert a stuck document's local state to the\n   * freshly-discovered-share shell (see the SQL implementation's doc\n   * comment). The projector registry clears the document-kind client\n   * projection in the same transaction — those tables live with the app's\n   * projector definitions, so the CALLER'S registry is required (the default\n   * registry knows no app kinds, and a discard that silently kept a\n   * contact's or card's projected fields would leak the discarded values).\n   * The method itself is optional: implementations without the full document\n   * schema (container metadata, simple doubles) simply do not offer the\n   * discard escape hatch.\n   */\n  /**\n   * `expectedDocumentId` is revalidated against the loaded record inside the\n   * serialized mutation: a stale caller (or a relink that raced the request)\n   * must never discard a different identity's edits.\n   */\n  discardDocumentToShell?: (\n    execSql: ExecSql,\n    localId: string,\n    expectedDocumentId: string,\n    documentProjectors: DocumentProjectorRegistryInput,\n  ) => Promise<DiscardDocumentToShellResult>;\n}\n"]}