@tearleads/client-sdk 0.1.33 → 0.1.35

package/workflows/documents/syncLane.js

@@ -12,6 +12,7 @@ export function registerDocumentSyncLane(input) {
             console.error(`Failed to sync document ${input.localId}:`, error);
         },
         phase: "document",
+        priority: input.priority,
         // Fixed literal: the local id stays in the console line above, never in
         // a report. The mapped stack identifies which lane body threw. Returning
         // the host's result hands a rejection to the lane reporter's wrapper;

package/workflows/documents/syncLane.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncLane.js","sourceRoot":"","sources":["syncLane.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gCAAgC,EAChC,0BAA0B,GAE3B,MAAM,iCAAiC,CAAC;AAEzC,uEAAuE;AACvE,uEAAuE;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAI7D,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,aAAa,OAAO,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAMxC;IACC,OAAO,gCAAgC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,YAAY,CACrE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,EACrC;QACE,KAAK,EAAE,YAAY,KAAK,CAAC,OAAO,EAAE;QAClC,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,OAAO,CAAC,KAAK,CAAC,2BAA2B,KAAK,CAAC,OAAO,GAAG,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,EAAE,UAAU;QACjB,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,iEAAiE;QACjE,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC/B,KAAK,CAAC,QAAQ,EAAE,CAAC,6BAA6B,EAAE,KAAK,CAAC;QACxD,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,iBAAiB,EAAE,0BAA0B;KAC9C,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAO9C;IACC,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC1B,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,WAAW,GAAG,gCAAgC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,WAAW;SAC5B,WAAW,EAAE;SACb,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,gBAAgB,GAAG,WAAW,CAAC,QAAQ,CAAC;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAAW,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;QAC9C,MAAM,MAAM,GAAG,CAAC,SAAkB,EAAE,EAAE;YACpC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,WAAW,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACxD,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;YACxB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC;gBAC7B,WAAW,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,WAAW;iBACrB,WAAW,EAAE;iBACb,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,WAAW,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,WAAW,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,IAAI,gBAAgB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACxE,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACpE,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,WAAW,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC;YACxE,CAAC;QACH,CAAC,CAAC;QACF,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,WAAW,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { DomainScope } from \"../../data/domainScope\";\nimport {\n  getOrCreateDomainSyncCoordinator,\n  isDatabaseUnavailableError,\n  type SyncLane,\n} from \"../../data/sync/syncCoordinator\";\n\n// Facade re-export: document stores must reach this shared sync helper\n// through this workflow boundary, not by importing data/sync directly.\nexport { sequenceUnchanged } from \"../../data/sync/sequence\";\n\nexport type DocumentSyncLane = SyncLane;\n\nfunction getDocumentSyncLaneKey(localId: string): string {\n  return `documents:${localId}`;\n}\n\nexport function registerDocumentSyncLane(input: {\n  readonly domainScope: DomainScope;\n  readonly localId: string;\n  /** Host diagnostics sink; bare runtimes do not structure errors. */\n  readonly logError?: ((message: string, error: unknown) => void) | undefined;\n  readonly run: () => Promise<void>;\n}): DocumentSyncLane {\n  return getOrCreateDomainSyncCoordinator(input.domainScope).registerLane(\n    getDocumentSyncLaneKey(input.localId),\n    {\n      label: `Document ${input.localId}`,\n      onUnexpectedError: (error) => {\n        console.error(`Failed to sync document ${input.localId}:`, error);\n      },\n      phase: \"document\",\n      // Fixed literal: the local id stays in the console line above, never in\n      // a report. The mapped stack identifies which lane body threw. Returning\n      // the host's result hands a rejection to the lane reporter's wrapper;\n      // discarding it would surface as an unhandled rejection instead.\n      reportUnexpectedError: (error) =>\n        input.logError?.(\"Documents: sync lane failed\", error),\n      run: input.run,\n      shouldIgnoreError: isDatabaseUnavailableError,\n    },\n  );\n}\n\nexport function requestDocumentSyncLaneAndWait(input: {\n  readonly didCompleteRequest: () => boolean;\n  readonly domainScope: DomainScope;\n  readonly localId: string;\n  readonly onInvalidated?: (() => void) | undefined;\n  readonly request: () => void;\n  readonly signal?: AbortSignal | undefined;\n}): Promise<boolean> {\n  if (input.signal?.aborted) {\n    input.onInvalidated?.();\n    return Promise.resolve(false);\n  }\n  const coordinator = getOrCreateDomainSyncCoordinator(input.domainScope);\n  const laneKey = getDocumentSyncLaneKey(input.localId);\n  const initialLane = coordinator\n    .getSnapshot()\n    .lanes.find((lane) => lane.key === laneKey);\n  if (!initialLane) {\n    return Promise.resolve(false);\n  }\n  if (initialLane.runAbandoned) {\n    return Promise.resolve(false);\n  }\n  const baselineRunCount = initialLane.runCount;\n  return new Promise((resolve) => {\n    let settled = false;\n    let unsubscribe: () => void = () => undefined;\n    const finish = (completed: boolean) => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      unsubscribe();\n      input.signal?.removeEventListener(\"abort\", handleAbort);\n      resolve(completed);\n    };\n    const handleAbort = () => {\n      if (settled) {\n        return;\n      }\n      input.onInvalidated?.();\n      finish(false);\n    };\n    const inspect = () => {\n      if (coordinator.isDisposed()) {\n        handleAbort();\n        return;\n      }\n      const lane = coordinator\n        .getSnapshot()\n        .lanes.find((candidate) => candidate.key === laneKey);\n      if (!lane) {\n        handleAbort();\n        return;\n      }\n      if (lane.runAbandoned) {\n        handleAbort();\n        return;\n      }\n      if (lane.runCount <= baselineRunCount || lane.running || lane.requested) {\n        return;\n      }\n      if (lane.lastAction === \"completed\" || lane.lastAction === \"failed\") {\n        finish(lane.lastAction === \"completed\" && input.didCompleteRequest());\n      }\n    };\n    unsubscribe = coordinator.subscribe(inspect);\n    input.signal?.addEventListener(\"abort\", handleAbort, { once: true });\n    if (input.signal?.aborted) {\n      handleAbort();\n      return;\n    }\n    input.request();\n    inspect();\n  });\n}\n"]}
+{"version":3,"file":"syncLane.js","sourceRoot":"","sources":["syncLane.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gCAAgC,EAChC,0BAA0B,GAE3B,MAAM,iCAAiC,CAAC;AAEzC,uEAAuE;AACvE,uEAAuE;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAI7D,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,aAAa,OAAO,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAOxC;IACC,OAAO,gCAAgC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,YAAY,CACrE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,EACrC;QACE,KAAK,EAAE,YAAY,KAAK,CAAC,OAAO,EAAE;QAClC,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,OAAO,CAAC,KAAK,CAAC,2BAA2B,KAAK,CAAC,OAAO,GAAG,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,iEAAiE;QACjE,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC/B,KAAK,CAAC,QAAQ,EAAE,CAAC,6BAA6B,EAAE,KAAK,CAAC;QACxD,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,iBAAiB,EAAE,0BAA0B;KAC9C,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAO9C;IACC,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC1B,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,WAAW,GAAG,gCAAgC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,WAAW;SAC5B,WAAW,EAAE;SACb,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,gBAAgB,GAAG,WAAW,CAAC,QAAQ,CAAC;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAAW,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;QAC9C,MAAM,MAAM,GAAG,CAAC,SAAkB,EAAE,EAAE;YACpC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,WAAW,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACxD,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;YACxB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC;gBAC7B,WAAW,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,WAAW;iBACrB,WAAW,EAAE;iBACb,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,WAAW,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,WAAW,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,IAAI,gBAAgB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACxE,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACpE,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,WAAW,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC;YACxE,CAAC;QACH,CAAC,CAAC;QACF,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,WAAW,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { DomainScope } from \"../../data/domainScope\";\nimport {\n  getOrCreateDomainSyncCoordinator,\n  isDatabaseUnavailableError,\n  type SyncLane,\n} from \"../../data/sync/syncCoordinator\";\n\n// Facade re-export: document stores must reach this shared sync helper\n// through this workflow boundary, not by importing data/sync directly.\nexport { sequenceUnchanged } from \"../../data/sync/sequence\";\n\nexport type DocumentSyncLane = SyncLane;\n\nfunction getDocumentSyncLaneKey(localId: string): string {\n  return `documents:${localId}`;\n}\n\nexport function registerDocumentSyncLane(input: {\n  readonly domainScope: DomainScope;\n  readonly localId: string;\n  /** Host diagnostics sink; bare runtimes do not structure errors. */\n  readonly logError?: ((message: string, error: unknown) => void) | undefined;\n  readonly run: () => Promise<void>;\n  readonly priority?: (() => number) | undefined;\n}): DocumentSyncLane {\n  return getOrCreateDomainSyncCoordinator(input.domainScope).registerLane(\n    getDocumentSyncLaneKey(input.localId),\n    {\n      label: `Document ${input.localId}`,\n      onUnexpectedError: (error) => {\n        console.error(`Failed to sync document ${input.localId}:`, error);\n      },\n      phase: \"document\",\n      priority: input.priority,\n      // Fixed literal: the local id stays in the console line above, never in\n      // a report. The mapped stack identifies which lane body threw. Returning\n      // the host's result hands a rejection to the lane reporter's wrapper;\n      // discarding it would surface as an unhandled rejection instead.\n      reportUnexpectedError: (error) =>\n        input.logError?.(\"Documents: sync lane failed\", error),\n      run: input.run,\n      shouldIgnoreError: isDatabaseUnavailableError,\n    },\n  );\n}\n\nexport function requestDocumentSyncLaneAndWait(input: {\n  readonly didCompleteRequest: () => boolean;\n  readonly domainScope: DomainScope;\n  readonly localId: string;\n  readonly onInvalidated?: (() => void) | undefined;\n  readonly request: () => void;\n  readonly signal?: AbortSignal | undefined;\n}): Promise<boolean> {\n  if (input.signal?.aborted) {\n    input.onInvalidated?.();\n    return Promise.resolve(false);\n  }\n  const coordinator = getOrCreateDomainSyncCoordinator(input.domainScope);\n  const laneKey = getDocumentSyncLaneKey(input.localId);\n  const initialLane = coordinator\n    .getSnapshot()\n    .lanes.find((lane) => lane.key === laneKey);\n  if (!initialLane) {\n    return Promise.resolve(false);\n  }\n  if (initialLane.runAbandoned) {\n    return Promise.resolve(false);\n  }\n  const baselineRunCount = initialLane.runCount;\n  return new Promise((resolve) => {\n    let settled = false;\n    let unsubscribe: () => void = () => undefined;\n    const finish = (completed: boolean) => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      unsubscribe();\n      input.signal?.removeEventListener(\"abort\", handleAbort);\n      resolve(completed);\n    };\n    const handleAbort = () => {\n      if (settled) {\n        return;\n      }\n      input.onInvalidated?.();\n      finish(false);\n    };\n    const inspect = () => {\n      if (coordinator.isDisposed()) {\n        handleAbort();\n        return;\n      }\n      const lane = coordinator\n        .getSnapshot()\n        .lanes.find((candidate) => candidate.key === laneKey);\n      if (!lane) {\n        handleAbort();\n        return;\n      }\n      if (lane.runAbandoned) {\n        handleAbort();\n        return;\n      }\n      if (lane.runCount <= baselineRunCount || lane.running || lane.requested) {\n        return;\n      }\n      if (lane.lastAction === \"completed\" || lane.lastAction === \"failed\") {\n        finish(lane.lastAction === \"completed\" && input.didCompleteRequest());\n      }\n    };\n    unsubscribe = coordinator.subscribe(inspect);\n    input.signal?.addEventListener(\"abort\", handleAbort, { once: true });\n    if (input.signal?.aborted) {\n      handleAbort();\n      return;\n    }\n    input.request();\n    inspect();\n  });\n}\n"]}

package/workflows/registration/persistRegistrationBootstrap.js

@@ -139,6 +139,9 @@ export async function persistInitialDocumentBootstrap(execSql, input) {
             containerId: input.containerId,
             contentKeyBundle: input.documentState.contentKeyBundle ?? null,
             documentId: input.documentId,
+            // Successful provisioning makes this device's user the founding admin.
+            // Stores can open before discovery returns the same access level.
+            effectiveAccessLevel: "admin",
             documentKekTargets: input.documentState.documentKekTargets ?? null,
             documentKind: input.documentKind,
             documentManifestBundle: input.documentState.documentManifestBundle ?? null,

package/workflows/registration/persistRegistrationBootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"persistRegistrationBootstrap.js","sourceRoot":"","sources":["persistRegistrationBootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAEL,+BAA+B,GAChC,MAAM,wEAAwE,CAAC;AAChF,OAAO,EACL,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EACL,uDAAuD,GAExD,MAAM,iEAAiE,CAAC;AAEzE,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAC/F,OAAO,EACL,aAAa,EAGb,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EACL,oCAAoC,EACpC,0CAA0C,EAC1C,4BAA4B,GAC7B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,qCAAqC,EAAE,MAAM,uCAAuC,CAAC;AAC9F,OAAO,EAAE,oCAAoC,EAAE,MAAM,0CAA0C,CAAC;AA+EhG,KAAK,UAAU,oCAAoC,CACjD,OAAgB,EAChB,KAMC;IAED,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5B,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC;IAC9C,MAAM,MAAM,GAA4B;QACtC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,UAAU,EAAE,SAAS,CAAC,kBAAkB;QACxC,EAAE,EAAE,SAAS,CAAC,WAAW;QACzB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,SAAS,CAAC,gBAAgB;QAC3C,kBAAkB,EAAE,EAAE;QACtB,gBAAgB,EAAE,aAAa,CAAC,gBAAgB,IAAI,IAAI;QACxD,kBAAkB,EAAE,aAAa,CAAC,kBAAkB,IAAI,IAAI;QAC5D,sBAAsB,EAAE,aAAa,CAAC,sBAAsB,IAAI,IAAI;KACrE,CAAC;IACF,MAAM,+BAA+B,CAAC,aAAa,CACjD,OAAO,EACP;QACE,EAAE,EAAE,SAAS,CAAC,WAAW;QACzB,oBAAoB,EAAE,OAAO;QAC7B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;QAChD,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,EACD,MAAM,EACN;QACE,cAAc,EAAE,SAAS,CAAC,SAAS;QACnC,gBAAgB,EAAE;YAChB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B;KACF,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,OAAgB,EAChB,KAAiC;IAEjC,MAAM,UAAU,GAA4B;QAC1C,WAAW,EAAE,KAAK,CAAC,uBAAuB;QAC1C,eAAe,EAAE,KAAK,CAAC,2BAA2B;QAClD,UAAU,EAAE,KAAK,CAAC,sBAAsB;QACxC,EAAE,EAAE,KAAK,CAAC,WAAW;QACrB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,KAAK,CAAC,oBAAoB;QAC3C,kBAAkB,EAAE,EAAE;QACtB,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,CAAC,gBAAgB,IAAI,IAAI;QAClE,kBAAkB,EAAE,KAAK,CAAC,iBAAiB,CAAC,kBAAkB,IAAI,IAAI;QACtE,sBAAsB,EACpB,KAAK,CAAC,iBAAiB,CAAC,sBAAsB,IAAI,IAAI;KACzD,CAAC;IACF,MAAM,+BAA+B,CAAC,aAAa,CACjD,OAAO,EACP;QACE,EAAE,EAAE,KAAK,CAAC,WAAW;QACrB,oBAAoB,EAAE,OAAO;QAC7B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE,KAAK,CAAC,sBAAsB;QAChD,IAAI,EAAE,GAAG;QACT,IAAI,EAAE,IAAI;KACX,EACD,UAAU,EACV;QACE,cAAc,EAAE,KAAK,CAAC,4BAA4B;QAClD,gBAAgB,EAAE;YAChB,SAAS,EAAE,KAAK,CAAC,4BAA4B;YAC7C,SAAS,EAAE,KAAK,CAAC,4BAA4B;SAC9C;KACF,CACF,CAAC;IACF,MAAM,qCAAqC,CACzC,OAAO,EACP,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,yBAAyB,EAC/B,KAAK,CAAC,kCAAkC,CACzC,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,mFAAmF;AACnF,KAAK,UAAU,mCAAmC,CAChD,OAAgB,EAChB,KAAiC,EACjC,SAA+D,EAC/D,IAAY;IAEZ,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,MAAM,oCAAoC,CAAC,OAAO,EAAE;QAClD,SAAS;QACT,IAAI,EAAE,IAAI;QACV,IAAI;QACJ,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EACN,SAAS,KAAK,KAAK,CAAC,6BAA6B;YAC/C,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,KAAK,CAAC,WAAW;KACxB,CAAC,CAAC;IACH,MAAM,qCAAqC,CACzC,OAAO,EACP,SAAS,CAAC,WAAW,EACrB,SAAS,CAAC,qBAAqB,EAC/B,SAAS,CAAC,8BAA8B,CACzC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,OAAgB,EAChB,KAAiC;IAEjC,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAChD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;QAC/C,MAAM,oCAAoC,CAAC,OAAO,EAAE;YAClD,SAAS,EAAE,eAAe;YAC1B,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,QAAQ,EAAE,KAAK,CAAC,WAAW;SAC5B,CAAC,CAAC;QACH,yEAAyE;QACzE,0EAA0E;QAC1E,8DAA8D;IAChE,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,uEAAuE;AACvE,uEAAuE;AACvE,KAAK,UAAU,+BAA+B,CAC5C,OAAgB,EAChB,KAAiC,EACjC,eAAqE,EACrE,YAAoB;IAEpB,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,+BAA+B,CAAC,OAAO,EAAE;QAC7C,GAAG,eAAe;QAClB,YAAY;QACZ,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAgB,EAChB,KAcC;IAED,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC9E,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,CAAC,sBAAsB;QAChD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,CAAC;IAElE,MAAM,oBAAoB,CAAC;QACzB,UAAU,EAAE,GAAG;QACf,aAAa,EAAE,IAAI;QACnB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE;QAClD,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,gBAAgB,EAAE,KAAK,CAAC,aAAa,CAAC,gBAAgB,IAAI,IAAI;YAC9D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,kBAAkB,EAAE,KAAK,CAAC,aAAa,CAAC,kBAAkB,IAAI,IAAI;YAClE,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,sBAAsB,EACpB,KAAK,CAAC,aAAa,CAAC,sBAAsB,IAAI,IAAI;YACpD,qEAAqE;YACrE,8CAA8C;YAC9C,kBAAkB,EAAE,mBAAmB,CAAC,GAAG,CAAC;SAC7C;QACD,aAAa;QACb,WAAW,EAAE,uBAAuB;KACrC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,OAAgB,EAChB,KAAiC;IAEjC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC;IAC1B,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,qEAAqE;QACrE,sEAAsE;QACtE,qEAAqE;QACrE,sDAAsD;QACtD,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,oDAAoD;QACpD,MAAM,+BAA+B,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAClE,MAAM,uBAAuB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC1D,qEAAqE;QACrE,4DAA4D;QAC5D,uEAAuE;QACvE,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,iCAAiC,CAC3D,aAAa,CACd,CAAC,kBAAkB,CAClB,KAAK,IAAI,EAAE;YACT,MAAM,uDAAuD,CAAC;gBAC5D,OAAO,EAAE,aAAa;gBACtB,KAAK,EAAE,KAAK,CAAC,uBAAuB;aACrC,CAAC,CAAC;YACH,MAAM,oCAAoC,CAAC;gBACzC,UAAU,EAAE,KAAK,CAAC,uBAAuB;gBACzC,OAAO,EAAE,aAAa;gBACtB,WAAW,EAAE,KAAK,CAAC,wBAAwB;gBAC3C,YAAY,EAAE,KAAK,CAAC,yBAAyB;aAC9C,CAAC,CAAC;YACH,MAAM,6BAA6B,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,mCAAmC,CACvC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,sBAAsB,EAC5B,0CAA0C,CAC3C,CAAC;YACF,MAAM,+BAA+B,CACnC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,qBAAqB,EAC3B,4BAA4B,CAC7B,CAAC;YACF,MAAM,mCAAmC,CACvC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,6BAA6B,EACnC,oCAAoC,CACrC,CAAC;YACF,MAAM,+BAA+B,CACnC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,2BAA2B,EACjC,kCAAkC,CACnC,CAAC;YACF,MAAM,gCAAgC,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC,EACD,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,IAAI,KAAK,CAAC,uBAAuB,EAAE,CACxE,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAyB,EACzB,KAAiC;IAEjC,MAAM,uCAAuC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["import {\n  createDocument,\n  encodeVersionVector,\n  importUpdates,\n} from \"@tearleads/loro\";\nimport type { ContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { getScopedPeerSeed } from \"../../data/crdtPeerSeed\";\nimport type { DocumentProjectorRegistryInput } from \"../../data/documents/documentKinds\";\nimport { createPendingUpdateFields } from \"../../data/documents/documentSync\";\nimport {\n  type ContainerMetadataRecord,\n  sqlContainerContentsPersistence,\n} from \"../../data/persistence/container-contents/containerContentsPersistence\";\nimport {\n  DOCUMENTS_APP_KIND,\n  sqlDocumentsPersistence,\n} from \"../../data/persistence/documents/documentsPersistence\";\nimport {\n  advanceLocallyAcknowledgedAccessManifestHeadsAtomically,\n  type LocallyAcknowledgedAccessManifestHead,\n} from \"../../data/persistence/locallyAcknowledgedCheckpointPersistence\";\nimport type { DocumentRecord } from \"../../data/sqlite/documentPersistence\";\nimport { getClientSQLitePersistenceRuntime } from \"../../data/sqlite/sqlitePersistenceRuntime\";\nimport {\n  createExecSql,\n  type ExecSql,\n  type ExecSqlClientLike,\n  runSerializedSqlMutation,\n} from \"../../data/sqlite/sqlSchema\";\nimport { persistDocumentState } from \"../documents/persistence\";\nimport { ORGANIZATION_PROFILE_DOCUMENT_KIND } from \"../organizations/organizationProfile\";\nimport {\n  ORGANIZATION_METADATA_CONTAINER_NAME,\n  ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME,\n  ROSTER_PROFILE_DOCUMENT_KIND,\n} from \"../organizations/rosterProfileContainer\";\nimport { enqueueInitialContainerMetadataUpdate } from \"./registrationBootstrapPendingUpdates\";\nimport { persistRegistrationPrincipalPolicies } from \"./registrationPrincipalPolicyPersistence\";\n\ninterface ProvisionedContainerBootstrapInput {\n  accessEpoch: number;\n  accessStateHash: string;\n  containerId: string;\n  createdAt: string;\n  metadataDocumentId: string;\n  metadataSnapshot: string;\n  metadataState: Pick<\n    DocumentRecord,\n    | \"documentId\"\n    | \"contentKeyBundle\"\n    | \"documentKekTargets\"\n    | \"documentManifestBundle\"\n  >;\n  systemSlot: ContainerSystemSlot;\n  updatedAt: string;\n}\n\ninterface ProvisionedProfileDocumentBootstrapInput {\n  accessEpoch: number;\n  accessStateHash: string;\n  containerId: string;\n  documentId: string;\n  documentState: ProvisionedContainerBootstrapInput[\"metadataState\"];\n  initialUpdate: Uint8Array;\n  initialUpdateCommitted: boolean;\n  localId: string;\n}\n\nexport interface RegistrationBootstrapInput {\n  acknowledgedAccessHeads: readonly LocallyAcknowledgedAccessManifestHead[];\n  /** Checked inside the mutation queue claim; false skips every write. */\n  canStartDurableMutation?: (() => boolean) | undefined;\n  /**\n   * @internal Test-only synchronization seam. Invoked synchronously,\n   * immediately before this persist joins the serialized mutation queue —\n   * no interleaving can separate the two. Lets identity-race tests\n   * deterministically place an identity replacement inside the queue-wait\n   * window instead of sleeping.\n   */\n  onPersistQueued?: (() => void) | undefined;\n  containerId: string;\n  initialAdminGroupPolicy: PrincipalPolicyBundleResponse;\n  initialMemberGroupPolicy: PrincipalPolicyBundleResponse;\n  initialOrganizationPolicy: PrincipalPolicyBundleResponse;\n  rootMetadataAccessEpoch: number;\n  rootMetadataAccessStateHash: string;\n  rootContainerServerTimestamp: string;\n  rootMetadataDocumentId: string;\n  rootMetadataInitialUpdate: Uint8Array;\n  rootMetadataInitialUpdateCommitted?: boolean | undefined;\n  rootMetadataSnapshot: string;\n  rootMetadataState: ProvisionedContainerBootstrapInput[\"metadataState\"];\n  rosterProfileContainer?: ProvisionedContainerBootstrapInput & {\n    metadataInitialUpdate: Uint8Array;\n    metadataInitialUpdateCommitted?: boolean | undefined;\n  };\n  organizationMetadataContainer?: ProvisionedContainerBootstrapInput & {\n    metadataInitialUpdate: Uint8Array;\n    metadataInitialUpdateCommitted?: boolean | undefined;\n  };\n  organizationProfileDocument?: ProvisionedProfileDocumentBootstrapInput;\n  rosterProfileDocument?: ProvisionedProfileDocumentBootstrapInput;\n  // Additional app-owned system containers provisioned with the organization\n  // (e.g. a trash bin). Each carries its own display name and icon (unlike the\n  // roster/organization-metadata containers, whose names are fixed), since the\n  // caller declares them.\n  systemContainers?: Array<\n    ProvisionedContainerBootstrapInput & {\n      icon: string | null;\n      name: string;\n    }\n  >;\n  documentProjectors?: DocumentProjectorRegistryInput | undefined;\n  organizationId: string;\n  userId: string;\n}\nasync function persistProvisionedContainerBootstrap(\n  execSql: ExecSql,\n  input: {\n    container: ProvisionedContainerBootstrapInput;\n    icon: string | null;\n    name: string;\n    organizationId: string;\n    parentId: string | null;\n  },\n): Promise<void> {\n  const { container } = input;\n  const metadataState = container.metadataState;\n  const record: ContainerMetadataRecord = {\n    accessEpoch: container.accessEpoch,\n    accessStateHash: container.accessStateHash,\n    documentId: container.metadataDocumentId,\n    id: container.containerId,\n    lastCommitLsn: null,\n    metadataUpdates: container.metadataSnapshot,\n    snapshotEndVersion: \"\",\n    contentKeyBundle: metadataState.contentKeyBundle ?? null,\n    documentKekTargets: metadataState.documentKekTargets ?? null,\n    documentManifestBundle: metadataState.documentManifestBundle ?? null,\n  };\n  await sqlContainerContentsPersistence.saveContainer(\n    execSql,\n    {\n      id: container.containerId,\n      effectiveAccessLevel: \"admin\",\n      organizationId: input.organizationId,\n      parentId: input.parentId,\n      metadataDocumentId: container.metadataDocumentId,\n      systemSlot: container.systemSlot,\n      name: input.name,\n      icon: input.icon,\n    },\n    record,\n    {\n      localUpdatedAt: container.updatedAt,\n      serverTimestamps: {\n        createdAt: container.createdAt,\n        updatedAt: container.updatedAt,\n      },\n    },\n  );\n}\n\nasync function persistRootContainerBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n): Promise<void> {\n  const rootRecord: ContainerMetadataRecord = {\n    accessEpoch: input.rootMetadataAccessEpoch,\n    accessStateHash: input.rootMetadataAccessStateHash,\n    documentId: input.rootMetadataDocumentId,\n    id: input.containerId,\n    lastCommitLsn: null,\n    metadataUpdates: input.rootMetadataSnapshot,\n    snapshotEndVersion: \"\",\n    contentKeyBundle: input.rootMetadataState.contentKeyBundle ?? null,\n    documentKekTargets: input.rootMetadataState.documentKekTargets ?? null,\n    documentManifestBundle:\n      input.rootMetadataState.documentManifestBundle ?? null,\n  };\n  await sqlContainerContentsPersistence.saveContainer(\n    execSql,\n    {\n      id: input.containerId,\n      effectiveAccessLevel: \"admin\",\n      organizationId: input.organizationId,\n      parentId: null,\n      metadataDocumentId: input.rootMetadataDocumentId,\n      name: \"/\",\n      icon: null,\n    },\n    rootRecord,\n    {\n      localUpdatedAt: input.rootContainerServerTimestamp,\n      serverTimestamps: {\n        createdAt: input.rootContainerServerTimestamp,\n        updatedAt: input.rootContainerServerTimestamp,\n      },\n    },\n  );\n  await enqueueInitialContainerMetadataUpdate(\n    execSql,\n    input.containerId,\n    input.rootMetadataInitialUpdate,\n    input.rootMetadataInitialUpdateCommitted,\n  );\n}\n\n// Persist reserved profile containers using their fixed topology: roster profiles\n// inherit the personal root; shared organization metadata has an independent root.\nasync function persistNamedChildContainerBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n  container: RegistrationBootstrapInput[\"rosterProfileContainer\"],\n  name: string,\n): Promise<void> {\n  if (!container) {\n    return;\n  }\n\n  await persistProvisionedContainerBootstrap(execSql, {\n    container,\n    icon: null,\n    name,\n    organizationId: input.organizationId,\n    parentId:\n      container === input.organizationMetadataContainer\n        ? null\n        : input.containerId,\n  });\n  await enqueueInitialContainerMetadataUpdate(\n    execSql,\n    container.containerId,\n    container.metadataInitialUpdate,\n    container.metadataInitialUpdateCommitted,\n  );\n}\n\nasync function persistSystemContainersBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n): Promise<void> {\n  const systemContainers = input.systemContainers;\n  if (!systemContainers) {\n    return;\n  }\n\n  for (const systemContainer of systemContainers) {\n    await persistProvisionedContainerBootstrap(execSql, {\n      container: systemContainer,\n      icon: systemContainer.icon,\n      name: systemContainer.name,\n      organizationId: input.organizationId,\n      parentId: input.containerId,\n    });\n    // Provisioned system-container metadata is already committed remotely in\n    // the organization transaction. Persist the initialized snapshot locally,\n    // but do not queue a duplicate write with a second update id.\n  }\n}\n\n// The ONE persist shape for the provisioned profile documents (organization\n// profile and roster profile): the input carries exactly the bootstrap\n// fields, so only the document kind and the host's projectors join it.\nasync function persistProfileDocumentBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n  profileDocument: ProvisionedProfileDocumentBootstrapInput | undefined,\n  documentKind: string,\n): Promise<void> {\n  if (!profileDocument) {\n    return;\n  }\n\n  await persistInitialDocumentBootstrap(execSql, {\n    ...profileDocument,\n    documentKind,\n    documentProjectors: input.documentProjectors,\n  });\n}\n\nexport async function persistInitialDocumentBootstrap(\n  execSql: ExecSql,\n  input: {\n    accessEpoch: number;\n    accessStateHash: string;\n    containerId: string;\n    documentId: string;\n    documentKind: string;\n    documentProjectors: DocumentProjectorRegistryInput | undefined;\n    documentState: Pick<\n      DocumentRecord,\n      \"contentKeyBundle\" | \"documentKekTargets\" | \"documentManifestBundle\"\n    >;\n    initialUpdate: Uint8Array;\n    initialUpdateCommitted: boolean;\n    localId: string;\n  },\n): Promise<void> {\n  const doc = await createDocument(await getScopedPeerSeed(DOCUMENTS_APP_KIND));\n  importUpdates(doc, [input.initialUpdate]);\n  const pendingUpdate = input.initialUpdateCommitted\n    ? undefined\n    : (createPendingUpdateFields(input.initialUpdate) ?? undefined);\n\n  await persistDocumentState({\n    currentDoc: doc,\n    currentRecord: null,\n    documentProjectors: input.documentProjectors ?? [],\n    execSql,\n    localId: input.localId,\n    patch: {\n      accessEpoch: input.accessEpoch,\n      accessStateHash: input.accessStateHash,\n      containerId: input.containerId,\n      contentKeyBundle: input.documentState.contentKeyBundle ?? null,\n      documentId: input.documentId,\n      documentKekTargets: input.documentState.documentKekTargets ?? null,\n      documentKind: input.documentKind,\n      documentManifestBundle:\n        input.documentState.documentManifestBundle ?? null,\n      // The create-only persistence primitive stores this frontier and the\n      // full-history checkpoint in one transaction.\n      snapshotEndVersion: encodeVersionVector(doc),\n    },\n    pendingUpdate,\n    persistence: sqlDocumentsPersistence,\n  });\n}\n\n/**\n * Persists the local root-container bootstrap created during successful\n * registration so container contents can initialize from SQLite on first\n * login — atomically: every write lands inside ONE transaction whose last\n * act re-checks identity currency, so an identity replaced anywhere between\n * the queue claim and the commit rolls the entire bootstrap back instead of\n * leaving a partial one. Resolves false when either currency check rejected\n * the write, so callers do not report a bootstrap that was never persisted.\n */\nexport async function persistRegistrationBootstrapFromExecSql(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n): Promise<boolean> {\n  input.onPersistQueued?.();\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    // In-mutex currency check, adjacent to the serialized-mutation claim\n    // (see persistDocumentState): the identity can be replaced while this\n    // persist waits for the queue, and its bootstrap must not be written\n    // through a client the replacement closed or renewed.\n    if (input.canStartDurableMutation && !input.canStartDurableMutation()) {\n      return false;\n    }\n    // Idempotent DDL stays outside the atomic boundary.\n    await sqlContainerContentsPersistence.ensureSchema(lockedExecSql);\n    await sqlDocumentsPersistence.ensureSchema(lockedExecSql);\n    // Pre-commit currency guard: the write sequence awaits real work, so\n    // the identity can be replaced mid-sequence. The guard runs\n    // synchronously with the COMMIT dispatch, so a refusal rolls the whole\n    // write set back and a pass cannot go stale before the commit is sent —\n    // the partial-persist window a single entry check leaves open.\n    const { committed } = await getClientSQLitePersistenceRuntime(\n      lockedExecSql,\n    ).guardedTransaction(\n      async () => {\n        await advanceLocallyAcknowledgedAccessManifestHeadsAtomically({\n          execSql: lockedExecSql,\n          heads: input.acknowledgedAccessHeads,\n        });\n        await persistRegistrationPrincipalPolicies({\n          adminGroup: input.initialAdminGroupPolicy,\n          execSql: lockedExecSql,\n          memberGroup: input.initialMemberGroupPolicy,\n          organization: input.initialOrganizationPolicy,\n        });\n        await persistRootContainerBootstrap(lockedExecSql, input);\n        await persistNamedChildContainerBootstrap(\n          lockedExecSql,\n          input,\n          input.rosterProfileContainer,\n          ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME,\n        );\n        await persistProfileDocumentBootstrap(\n          lockedExecSql,\n          input,\n          input.rosterProfileDocument,\n          ROSTER_PROFILE_DOCUMENT_KIND,\n        );\n        await persistNamedChildContainerBootstrap(\n          lockedExecSql,\n          input,\n          input.organizationMetadataContainer,\n          ORGANIZATION_METADATA_CONTAINER_NAME,\n        );\n        await persistProfileDocumentBootstrap(\n          lockedExecSql,\n          input,\n          input.organizationProfileDocument,\n          ORGANIZATION_PROFILE_DOCUMENT_KIND,\n        );\n        await persistSystemContainersBootstrap(lockedExecSql, input);\n      },\n      () => !input.canStartDurableMutation || input.canStartDurableMutation(),\n    );\n    return committed;\n  });\n}\n\nexport async function persistRegistrationBootstrap(\n  client: ExecSqlClientLike,\n  input: RegistrationBootstrapInput,\n): Promise<void> {\n  await persistRegistrationBootstrapFromExecSql(createExecSql(client), input);\n}\n"]}
+{"version":3,"file":"persistRegistrationBootstrap.js","sourceRoot":"","sources":["persistRegistrationBootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAEL,+BAA+B,GAChC,MAAM,wEAAwE,CAAC;AAChF,OAAO,EACL,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EACL,uDAAuD,GAExD,MAAM,iEAAiE,CAAC;AAEzE,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAC/F,OAAO,EACL,aAAa,EAGb,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EACL,oCAAoC,EACpC,0CAA0C,EAC1C,4BAA4B,GAC7B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,qCAAqC,EAAE,MAAM,uCAAuC,CAAC;AAC9F,OAAO,EAAE,oCAAoC,EAAE,MAAM,0CAA0C,CAAC;AA+EhG,KAAK,UAAU,oCAAoC,CACjD,OAAgB,EAChB,KAMC;IAED,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5B,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC;IAC9C,MAAM,MAAM,GAA4B;QACtC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,UAAU,EAAE,SAAS,CAAC,kBAAkB;QACxC,EAAE,EAAE,SAAS,CAAC,WAAW;QACzB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,SAAS,CAAC,gBAAgB;QAC3C,kBAAkB,EAAE,EAAE;QACtB,gBAAgB,EAAE,aAAa,CAAC,gBAAgB,IAAI,IAAI;QACxD,kBAAkB,EAAE,aAAa,CAAC,kBAAkB,IAAI,IAAI;QAC5D,sBAAsB,EAAE,aAAa,CAAC,sBAAsB,IAAI,IAAI;KACrE,CAAC;IACF,MAAM,+BAA+B,CAAC,aAAa,CACjD,OAAO,EACP;QACE,EAAE,EAAE,SAAS,CAAC,WAAW;QACzB,oBAAoB,EAAE,OAAO;QAC7B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;QAChD,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,EACD,MAAM,EACN;QACE,cAAc,EAAE,SAAS,CAAC,SAAS;QACnC,gBAAgB,EAAE;YAChB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B;KACF,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,OAAgB,EAChB,KAAiC;IAEjC,MAAM,UAAU,GAA4B;QAC1C,WAAW,EAAE,KAAK,CAAC,uBAAuB;QAC1C,eAAe,EAAE,KAAK,CAAC,2BAA2B;QAClD,UAAU,EAAE,KAAK,CAAC,sBAAsB;QACxC,EAAE,EAAE,KAAK,CAAC,WAAW;QACrB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,KAAK,CAAC,oBAAoB;QAC3C,kBAAkB,EAAE,EAAE;QACtB,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,CAAC,gBAAgB,IAAI,IAAI;QAClE,kBAAkB,EAAE,KAAK,CAAC,iBAAiB,CAAC,kBAAkB,IAAI,IAAI;QACtE,sBAAsB,EACpB,KAAK,CAAC,iBAAiB,CAAC,sBAAsB,IAAI,IAAI;KACzD,CAAC;IACF,MAAM,+BAA+B,CAAC,aAAa,CACjD,OAAO,EACP;QACE,EAAE,EAAE,KAAK,CAAC,WAAW;QACrB,oBAAoB,EAAE,OAAO;QAC7B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE,KAAK,CAAC,sBAAsB;QAChD,IAAI,EAAE,GAAG;QACT,IAAI,EAAE,IAAI;KACX,EACD,UAAU,EACV;QACE,cAAc,EAAE,KAAK,CAAC,4BAA4B;QAClD,gBAAgB,EAAE;YAChB,SAAS,EAAE,KAAK,CAAC,4BAA4B;YAC7C,SAAS,EAAE,KAAK,CAAC,4BAA4B;SAC9C;KACF,CACF,CAAC;IACF,MAAM,qCAAqC,CACzC,OAAO,EACP,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,yBAAyB,EAC/B,KAAK,CAAC,kCAAkC,CACzC,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,mFAAmF;AACnF,KAAK,UAAU,mCAAmC,CAChD,OAAgB,EAChB,KAAiC,EACjC,SAA+D,EAC/D,IAAY;IAEZ,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,MAAM,oCAAoC,CAAC,OAAO,EAAE;QAClD,SAAS;QACT,IAAI,EAAE,IAAI;QACV,IAAI;QACJ,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EACN,SAAS,KAAK,KAAK,CAAC,6BAA6B;YAC/C,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,KAAK,CAAC,WAAW;KACxB,CAAC,CAAC;IACH,MAAM,qCAAqC,CACzC,OAAO,EACP,SAAS,CAAC,WAAW,EACrB,SAAS,CAAC,qBAAqB,EAC/B,SAAS,CAAC,8BAA8B,CACzC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,OAAgB,EAChB,KAAiC;IAEjC,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAChD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;QAC/C,MAAM,oCAAoC,CAAC,OAAO,EAAE;YAClD,SAAS,EAAE,eAAe;YAC1B,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,QAAQ,EAAE,KAAK,CAAC,WAAW;SAC5B,CAAC,CAAC;QACH,yEAAyE;QACzE,0EAA0E;QAC1E,8DAA8D;IAChE,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,uEAAuE;AACvE,uEAAuE;AACvE,KAAK,UAAU,+BAA+B,CAC5C,OAAgB,EAChB,KAAiC,EACjC,eAAqE,EACrE,YAAoB;IAEpB,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,+BAA+B,CAAC,OAAO,EAAE;QAC7C,GAAG,eAAe;QAClB,YAAY;QACZ,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAgB,EAChB,KAcC;IAED,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC9E,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,CAAC,sBAAsB;QAChD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,CAAC;IAElE,MAAM,oBAAoB,CAAC;QACzB,UAAU,EAAE,GAAG;QACf,aAAa,EAAE,IAAI;QACnB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE;QAClD,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,gBAAgB,EAAE,KAAK,CAAC,aAAa,CAAC,gBAAgB,IAAI,IAAI;YAC9D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,uEAAuE;YACvE,kEAAkE;YAClE,oBAAoB,EAAE,OAAO;YAC7B,kBAAkB,EAAE,KAAK,CAAC,aAAa,CAAC,kBAAkB,IAAI,IAAI;YAClE,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,sBAAsB,EACpB,KAAK,CAAC,aAAa,CAAC,sBAAsB,IAAI,IAAI;YACpD,qEAAqE;YACrE,8CAA8C;YAC9C,kBAAkB,EAAE,mBAAmB,CAAC,GAAG,CAAC;SAC7C;QACD,aAAa;QACb,WAAW,EAAE,uBAAuB;KACrC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,OAAgB,EAChB,KAAiC;IAEjC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC;IAC1B,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,qEAAqE;QACrE,sEAAsE;QACtE,qEAAqE;QACrE,sDAAsD;QACtD,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,oDAAoD;QACpD,MAAM,+BAA+B,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAClE,MAAM,uBAAuB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC1D,qEAAqE;QACrE,4DAA4D;QAC5D,uEAAuE;QACvE,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,iCAAiC,CAC3D,aAAa,CACd,CAAC,kBAAkB,CAClB,KAAK,IAAI,EAAE;YACT,MAAM,uDAAuD,CAAC;gBAC5D,OAAO,EAAE,aAAa;gBACtB,KAAK,EAAE,KAAK,CAAC,uBAAuB;aACrC,CAAC,CAAC;YACH,MAAM,oCAAoC,CAAC;gBACzC,UAAU,EAAE,KAAK,CAAC,uBAAuB;gBACzC,OAAO,EAAE,aAAa;gBACtB,WAAW,EAAE,KAAK,CAAC,wBAAwB;gBAC3C,YAAY,EAAE,KAAK,CAAC,yBAAyB;aAC9C,CAAC,CAAC;YACH,MAAM,6BAA6B,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,mCAAmC,CACvC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,sBAAsB,EAC5B,0CAA0C,CAC3C,CAAC;YACF,MAAM,+BAA+B,CACnC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,qBAAqB,EAC3B,4BAA4B,CAC7B,CAAC;YACF,MAAM,mCAAmC,CACvC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,6BAA6B,EACnC,oCAAoC,CACrC,CAAC;YACF,MAAM,+BAA+B,CACnC,aAAa,EACb,KAAK,EACL,KAAK,CAAC,2BAA2B,EACjC,kCAAkC,CACnC,CAAC;YACF,MAAM,gCAAgC,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC,EACD,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,IAAI,KAAK,CAAC,uBAAuB,EAAE,CACxE,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAyB,EACzB,KAAiC;IAEjC,MAAM,uCAAuC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["import {\n  createDocument,\n  encodeVersionVector,\n  importUpdates,\n} from \"@tearleads/loro\";\nimport type { ContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { getScopedPeerSeed } from \"../../data/crdtPeerSeed\";\nimport type { DocumentProjectorRegistryInput } from \"../../data/documents/documentKinds\";\nimport { createPendingUpdateFields } from \"../../data/documents/documentSync\";\nimport {\n  type ContainerMetadataRecord,\n  sqlContainerContentsPersistence,\n} from \"../../data/persistence/container-contents/containerContentsPersistence\";\nimport {\n  DOCUMENTS_APP_KIND,\n  sqlDocumentsPersistence,\n} from \"../../data/persistence/documents/documentsPersistence\";\nimport {\n  advanceLocallyAcknowledgedAccessManifestHeadsAtomically,\n  type LocallyAcknowledgedAccessManifestHead,\n} from \"../../data/persistence/locallyAcknowledgedCheckpointPersistence\";\nimport type { DocumentRecord } from \"../../data/sqlite/documentPersistence\";\nimport { getClientSQLitePersistenceRuntime } from \"../../data/sqlite/sqlitePersistenceRuntime\";\nimport {\n  createExecSql,\n  type ExecSql,\n  type ExecSqlClientLike,\n  runSerializedSqlMutation,\n} from \"../../data/sqlite/sqlSchema\";\nimport { persistDocumentState } from \"../documents/persistence\";\nimport { ORGANIZATION_PROFILE_DOCUMENT_KIND } from \"../organizations/organizationProfile\";\nimport {\n  ORGANIZATION_METADATA_CONTAINER_NAME,\n  ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME,\n  ROSTER_PROFILE_DOCUMENT_KIND,\n} from \"../organizations/rosterProfileContainer\";\nimport { enqueueInitialContainerMetadataUpdate } from \"./registrationBootstrapPendingUpdates\";\nimport { persistRegistrationPrincipalPolicies } from \"./registrationPrincipalPolicyPersistence\";\n\ninterface ProvisionedContainerBootstrapInput {\n  accessEpoch: number;\n  accessStateHash: string;\n  containerId: string;\n  createdAt: string;\n  metadataDocumentId: string;\n  metadataSnapshot: string;\n  metadataState: Pick<\n    DocumentRecord,\n    | \"documentId\"\n    | \"contentKeyBundle\"\n    | \"documentKekTargets\"\n    | \"documentManifestBundle\"\n  >;\n  systemSlot: ContainerSystemSlot;\n  updatedAt: string;\n}\n\ninterface ProvisionedProfileDocumentBootstrapInput {\n  accessEpoch: number;\n  accessStateHash: string;\n  containerId: string;\n  documentId: string;\n  documentState: ProvisionedContainerBootstrapInput[\"metadataState\"];\n  initialUpdate: Uint8Array;\n  initialUpdateCommitted: boolean;\n  localId: string;\n}\n\nexport interface RegistrationBootstrapInput {\n  acknowledgedAccessHeads: readonly LocallyAcknowledgedAccessManifestHead[];\n  /** Checked inside the mutation queue claim; false skips every write. */\n  canStartDurableMutation?: (() => boolean) | undefined;\n  /**\n   * @internal Test-only synchronization seam. Invoked synchronously,\n   * immediately before this persist joins the serialized mutation queue —\n   * no interleaving can separate the two. Lets identity-race tests\n   * deterministically place an identity replacement inside the queue-wait\n   * window instead of sleeping.\n   */\n  onPersistQueued?: (() => void) | undefined;\n  containerId: string;\n  initialAdminGroupPolicy: PrincipalPolicyBundleResponse;\n  initialMemberGroupPolicy: PrincipalPolicyBundleResponse;\n  initialOrganizationPolicy: PrincipalPolicyBundleResponse;\n  rootMetadataAccessEpoch: number;\n  rootMetadataAccessStateHash: string;\n  rootContainerServerTimestamp: string;\n  rootMetadataDocumentId: string;\n  rootMetadataInitialUpdate: Uint8Array;\n  rootMetadataInitialUpdateCommitted?: boolean | undefined;\n  rootMetadataSnapshot: string;\n  rootMetadataState: ProvisionedContainerBootstrapInput[\"metadataState\"];\n  rosterProfileContainer?: ProvisionedContainerBootstrapInput & {\n    metadataInitialUpdate: Uint8Array;\n    metadataInitialUpdateCommitted?: boolean | undefined;\n  };\n  organizationMetadataContainer?: ProvisionedContainerBootstrapInput & {\n    metadataInitialUpdate: Uint8Array;\n    metadataInitialUpdateCommitted?: boolean | undefined;\n  };\n  organizationProfileDocument?: ProvisionedProfileDocumentBootstrapInput;\n  rosterProfileDocument?: ProvisionedProfileDocumentBootstrapInput;\n  // Additional app-owned system containers provisioned with the organization\n  // (e.g. a trash bin). Each carries its own display name and icon (unlike the\n  // roster/organization-metadata containers, whose names are fixed), since the\n  // caller declares them.\n  systemContainers?: Array<\n    ProvisionedContainerBootstrapInput & {\n      icon: string | null;\n      name: string;\n    }\n  >;\n  documentProjectors?: DocumentProjectorRegistryInput | undefined;\n  organizationId: string;\n  userId: string;\n}\nasync function persistProvisionedContainerBootstrap(\n  execSql: ExecSql,\n  input: {\n    container: ProvisionedContainerBootstrapInput;\n    icon: string | null;\n    name: string;\n    organizationId: string;\n    parentId: string | null;\n  },\n): Promise<void> {\n  const { container } = input;\n  const metadataState = container.metadataState;\n  const record: ContainerMetadataRecord = {\n    accessEpoch: container.accessEpoch,\n    accessStateHash: container.accessStateHash,\n    documentId: container.metadataDocumentId,\n    id: container.containerId,\n    lastCommitLsn: null,\n    metadataUpdates: container.metadataSnapshot,\n    snapshotEndVersion: \"\",\n    contentKeyBundle: metadataState.contentKeyBundle ?? null,\n    documentKekTargets: metadataState.documentKekTargets ?? null,\n    documentManifestBundle: metadataState.documentManifestBundle ?? null,\n  };\n  await sqlContainerContentsPersistence.saveContainer(\n    execSql,\n    {\n      id: container.containerId,\n      effectiveAccessLevel: \"admin\",\n      organizationId: input.organizationId,\n      parentId: input.parentId,\n      metadataDocumentId: container.metadataDocumentId,\n      systemSlot: container.systemSlot,\n      name: input.name,\n      icon: input.icon,\n    },\n    record,\n    {\n      localUpdatedAt: container.updatedAt,\n      serverTimestamps: {\n        createdAt: container.createdAt,\n        updatedAt: container.updatedAt,\n      },\n    },\n  );\n}\n\nasync function persistRootContainerBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n): Promise<void> {\n  const rootRecord: ContainerMetadataRecord = {\n    accessEpoch: input.rootMetadataAccessEpoch,\n    accessStateHash: input.rootMetadataAccessStateHash,\n    documentId: input.rootMetadataDocumentId,\n    id: input.containerId,\n    lastCommitLsn: null,\n    metadataUpdates: input.rootMetadataSnapshot,\n    snapshotEndVersion: \"\",\n    contentKeyBundle: input.rootMetadataState.contentKeyBundle ?? null,\n    documentKekTargets: input.rootMetadataState.documentKekTargets ?? null,\n    documentManifestBundle:\n      input.rootMetadataState.documentManifestBundle ?? null,\n  };\n  await sqlContainerContentsPersistence.saveContainer(\n    execSql,\n    {\n      id: input.containerId,\n      effectiveAccessLevel: \"admin\",\n      organizationId: input.organizationId,\n      parentId: null,\n      metadataDocumentId: input.rootMetadataDocumentId,\n      name: \"/\",\n      icon: null,\n    },\n    rootRecord,\n    {\n      localUpdatedAt: input.rootContainerServerTimestamp,\n      serverTimestamps: {\n        createdAt: input.rootContainerServerTimestamp,\n        updatedAt: input.rootContainerServerTimestamp,\n      },\n    },\n  );\n  await enqueueInitialContainerMetadataUpdate(\n    execSql,\n    input.containerId,\n    input.rootMetadataInitialUpdate,\n    input.rootMetadataInitialUpdateCommitted,\n  );\n}\n\n// Persist reserved profile containers using their fixed topology: roster profiles\n// inherit the personal root; shared organization metadata has an independent root.\nasync function persistNamedChildContainerBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n  container: RegistrationBootstrapInput[\"rosterProfileContainer\"],\n  name: string,\n): Promise<void> {\n  if (!container) {\n    return;\n  }\n\n  await persistProvisionedContainerBootstrap(execSql, {\n    container,\n    icon: null,\n    name,\n    organizationId: input.organizationId,\n    parentId:\n      container === input.organizationMetadataContainer\n        ? null\n        : input.containerId,\n  });\n  await enqueueInitialContainerMetadataUpdate(\n    execSql,\n    container.containerId,\n    container.metadataInitialUpdate,\n    container.metadataInitialUpdateCommitted,\n  );\n}\n\nasync function persistSystemContainersBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n): Promise<void> {\n  const systemContainers = input.systemContainers;\n  if (!systemContainers) {\n    return;\n  }\n\n  for (const systemContainer of systemContainers) {\n    await persistProvisionedContainerBootstrap(execSql, {\n      container: systemContainer,\n      icon: systemContainer.icon,\n      name: systemContainer.name,\n      organizationId: input.organizationId,\n      parentId: input.containerId,\n    });\n    // Provisioned system-container metadata is already committed remotely in\n    // the organization transaction. Persist the initialized snapshot locally,\n    // but do not queue a duplicate write with a second update id.\n  }\n}\n\n// The ONE persist shape for the provisioned profile documents (organization\n// profile and roster profile): the input carries exactly the bootstrap\n// fields, so only the document kind and the host's projectors join it.\nasync function persistProfileDocumentBootstrap(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n  profileDocument: ProvisionedProfileDocumentBootstrapInput | undefined,\n  documentKind: string,\n): Promise<void> {\n  if (!profileDocument) {\n    return;\n  }\n\n  await persistInitialDocumentBootstrap(execSql, {\n    ...profileDocument,\n    documentKind,\n    documentProjectors: input.documentProjectors,\n  });\n}\n\nexport async function persistInitialDocumentBootstrap(\n  execSql: ExecSql,\n  input: {\n    accessEpoch: number;\n    accessStateHash: string;\n    containerId: string;\n    documentId: string;\n    documentKind: string;\n    documentProjectors: DocumentProjectorRegistryInput | undefined;\n    documentState: Pick<\n      DocumentRecord,\n      \"contentKeyBundle\" | \"documentKekTargets\" | \"documentManifestBundle\"\n    >;\n    initialUpdate: Uint8Array;\n    initialUpdateCommitted: boolean;\n    localId: string;\n  },\n): Promise<void> {\n  const doc = await createDocument(await getScopedPeerSeed(DOCUMENTS_APP_KIND));\n  importUpdates(doc, [input.initialUpdate]);\n  const pendingUpdate = input.initialUpdateCommitted\n    ? undefined\n    : (createPendingUpdateFields(input.initialUpdate) ?? undefined);\n\n  await persistDocumentState({\n    currentDoc: doc,\n    currentRecord: null,\n    documentProjectors: input.documentProjectors ?? [],\n    execSql,\n    localId: input.localId,\n    patch: {\n      accessEpoch: input.accessEpoch,\n      accessStateHash: input.accessStateHash,\n      containerId: input.containerId,\n      contentKeyBundle: input.documentState.contentKeyBundle ?? null,\n      documentId: input.documentId,\n      // Successful provisioning makes this device's user the founding admin.\n      // Stores can open before discovery returns the same access level.\n      effectiveAccessLevel: \"admin\",\n      documentKekTargets: input.documentState.documentKekTargets ?? null,\n      documentKind: input.documentKind,\n      documentManifestBundle:\n        input.documentState.documentManifestBundle ?? null,\n      // The create-only persistence primitive stores this frontier and the\n      // full-history checkpoint in one transaction.\n      snapshotEndVersion: encodeVersionVector(doc),\n    },\n    pendingUpdate,\n    persistence: sqlDocumentsPersistence,\n  });\n}\n\n/**\n * Persists the local root-container bootstrap created during successful\n * registration so container contents can initialize from SQLite on first\n * login — atomically: every write lands inside ONE transaction whose last\n * act re-checks identity currency, so an identity replaced anywhere between\n * the queue claim and the commit rolls the entire bootstrap back instead of\n * leaving a partial one. Resolves false when either currency check rejected\n * the write, so callers do not report a bootstrap that was never persisted.\n */\nexport async function persistRegistrationBootstrapFromExecSql(\n  execSql: ExecSql,\n  input: RegistrationBootstrapInput,\n): Promise<boolean> {\n  input.onPersistQueued?.();\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    // In-mutex currency check, adjacent to the serialized-mutation claim\n    // (see persistDocumentState): the identity can be replaced while this\n    // persist waits for the queue, and its bootstrap must not be written\n    // through a client the replacement closed or renewed.\n    if (input.canStartDurableMutation && !input.canStartDurableMutation()) {\n      return false;\n    }\n    // Idempotent DDL stays outside the atomic boundary.\n    await sqlContainerContentsPersistence.ensureSchema(lockedExecSql);\n    await sqlDocumentsPersistence.ensureSchema(lockedExecSql);\n    // Pre-commit currency guard: the write sequence awaits real work, so\n    // the identity can be replaced mid-sequence. The guard runs\n    // synchronously with the COMMIT dispatch, so a refusal rolls the whole\n    // write set back and a pass cannot go stale before the commit is sent —\n    // the partial-persist window a single entry check leaves open.\n    const { committed } = await getClientSQLitePersistenceRuntime(\n      lockedExecSql,\n    ).guardedTransaction(\n      async () => {\n        await advanceLocallyAcknowledgedAccessManifestHeadsAtomically({\n          execSql: lockedExecSql,\n          heads: input.acknowledgedAccessHeads,\n        });\n        await persistRegistrationPrincipalPolicies({\n          adminGroup: input.initialAdminGroupPolicy,\n          execSql: lockedExecSql,\n          memberGroup: input.initialMemberGroupPolicy,\n          organization: input.initialOrganizationPolicy,\n        });\n        await persistRootContainerBootstrap(lockedExecSql, input);\n        await persistNamedChildContainerBootstrap(\n          lockedExecSql,\n          input,\n          input.rosterProfileContainer,\n          ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME,\n        );\n        await persistProfileDocumentBootstrap(\n          lockedExecSql,\n          input,\n          input.rosterProfileDocument,\n          ROSTER_PROFILE_DOCUMENT_KIND,\n        );\n        await persistNamedChildContainerBootstrap(\n          lockedExecSql,\n          input,\n          input.organizationMetadataContainer,\n          ORGANIZATION_METADATA_CONTAINER_NAME,\n        );\n        await persistProfileDocumentBootstrap(\n          lockedExecSql,\n          input,\n          input.organizationProfileDocument,\n          ORGANIZATION_PROFILE_DOCUMENT_KIND,\n        );\n        await persistSystemContainersBootstrap(lockedExecSql, input);\n      },\n      () => !input.canStartDurableMutation || input.canStartDurableMutation(),\n    );\n    return committed;\n  });\n}\n\nexport async function persistRegistrationBootstrap(\n  client: ExecSqlClientLike,\n  input: RegistrationBootstrapInput,\n): Promise<void> {\n  await persistRegistrationBootstrapFromExecSql(createExecSql(client), input);\n}\n"]}