@tearleads/client-sdk 0.1.44 → 0.1.45

package/data/sqlite/schema.js

@@ -5,7 +5,8 @@ import { containerSQLiteSchema, containerTableSchemas, } from "./containerSchema
 import { documentAttachmentBlobProjection, documentPendingAttachments, } from "./documentAttachmentSchema.js";
 import { documentDiscoveryHeads, documentDiscoverySequence, pendingDocumentDiscoveries, } from "./documentDiscoveryEvidenceSchema.js";
 import { documentOrphanBlobReclaims, documentOrphanBlobReclaimTable, } from "./documentOrphanBlobReclaims.js";
-import { documentIntentLinkTargets, documentMoveIntents, } from "./documentPlacementIntentSchema.js";
+import { documentIntentLinkTargets } from "./documentPlacementIntentSchema.js";
+import { localIntents } from "./localIntentSchema.js";
 import * as organizationDataUsage from "./organizationDataUsageSchema.js";
 import { organizationFounders } from "./organizationFounderSchema.js";
 import * as provisioningAttempt from "./organizationProvisioningAttemptSchema.js";
@@ -13,16 +14,16 @@ import { organizationReadModelSQLiteSchema, organizationReadModelTables, } from
 import { principalGrantRetirements } from "./principalGrantRetirementSchema.js";
 import { principalHistoryEntries, principalHistoryEvidenceTables, principalHistoryNodes, principalHistoryPrefixes, } from "./principalHistoryEvidenceSchema.js";
 import { principalHistoryNodeReferences, principalHistoryRootOwners, } from "./principalHistoryNodeRetentionSchema.js";
-import { principalHistoryStageScopes, principalKeyEnvelopeArchive, } from "./principalHistoryRetentionSchema.js";
+import { principalKeyEnvelopeArchive } from "./principalHistoryRetentionSchema.js";
 import { principalHistoryStages, principalHistoryStageTables, } from "./principalHistoryStageSchema.js";
 import { principalMutationJournal, principalMutationJournalTables, } from "./principalMutationJournalSchema.js";
 import { principalPolicies, principalPolicyBundleHistory, principalPolicyBundleReferences, principalPolicyCheckpoints, principalPolicyOrganizations, } from "./principalPolicySchema.js";
 import { securityIncidents, securityIncidentTable, } from "./securityIncidentSchema.js";
 import { defineSqlTableSchema } from "./sqlTableSchema.js";
 import { verifiedAccessManifestBundles, verifiedManifestBundleTables, } from "./verifiedManifestBundleSchema.js";
-export { containerHydrationTombstones, containerProjection, containers, dormantContainerMetadata, dormantMetadataSweepRequests, supersededContainerBindings, } from "./containerSchema.js";
+export { containerHydrationTombstones, containers, dormantContainerMetadata, dormantMetadataSweepRequests, supersededContainerBindings, } from "./containerSchema.js";
 export { documentAttachmentBlobProjection, documentPendingAttachments, } from "./documentAttachmentSchema.js";
-export { documentMoveIntents } from "./documentPlacementIntentSchema.js";
+export { inContainerIntentLanes, inLocalIntentLane, LOCAL_INTENT_LANES, LOCAL_INTENT_SUBJECT, localIntents, } from "./localIntentSchema.js";
 export { principalPolicies, principalPolicyBundleHistory, principalPolicyBundleReferences, principalPolicyCheckpoints, principalPolicyOrganizations, } from "./principalPolicySchema.js";
 export { securityIncidents } from "./securityIncidentSchema.js";
 export { containerDocumentTombstoneHolds, organizationReadModelTables };
@@ -64,6 +65,14 @@ const accessLevelColumn = "effective_access_level";
  * - `recoveryGeneration`: Atomic raw-history recovery writer fence.
  * - `recoveryDocumentId`: Former server id for cross-client post-purge recreation.
  * - `pullContinuation`: Durable progress for the next bounded remote pull.
+ * - `syncFailureStatus`, `syncFailureMessage`, `syncFailureAttemptedAt`: The
+ *   last terminal sync failure or quarantined incoming update for this scope.
+ *   The durable write queue (queued rows of `documentHistoryUpdates`) has no
+ *   status columns, so these let the write-queue view and footer explain why
+ *   the document is blocked. `syncFailureMessage` is non-null exactly when a
+ *   failure is recorded; a newer failure replaces the old, and a later fully
+ *   validated sync pass, a remote reset, or the scope's teardown clears all
+ *   three.
  * - `updatedAt`: Local timestamp for the last persisted runtime-state update.
  *
  * Indexes:
@@ -87,6 +96,9 @@ export const documents = sqliteTable("documents", {
     recoveryGeneration: integer("recovery_generation").notNull().default(0),
     recoveryDocumentId: text("recovery_document_id"),
     snapshotEndVersion: text("snapshot_end_version").notNull().default(""),
+    syncFailureStatus: integer("sync_failure_status"),
+    syncFailureMessage: text("sync_failure_message"),
+    syncFailureAttemptedAt: text("sync_failure_attempted_at"),
     updatedAt: text("updated_at").notNull(),
 }, (table) => [
     primaryKey({ columns: [table.appKind, table.localId] }),
@@ -94,33 +106,6 @@ export const documents = sqliteTable("documents", {
         .on(table.appKind, table.documentId)
         .where(sql `${table.documentId} IS NOT NULL`),
 ]);
-/**
- * Last terminal sync failure or quarantined incoming update per document scope.
- *
- * The durable write queue (queued rows of `documentHistoryUpdates`) has no
- * status columns — a row is either queued or settled. Terminal submissions and
- * incoming updates that cannot be decrypted or imported are recorded here so
- * the write-queue view and footer can surface why the document is blocked.
- * Rows are upserted per scope and deleted only after a later fully validated
- * sync pass succeeds or the scope's local state is torn down.
- *
- * Columns:
- * - `appKind`: Local document namespace matching `documents.appKind`.
- * - `localId`: Local document id matching `documents.localId`.
- * - `status`: HTTP status of the failed submission when known.
- * - `message`: Human-readable failure description for queue display.
- * - `attemptedAt`: Timestamp of the failed attempt.
- *
- * Indexes:
- * - `(appKind, localId)` is the primary key and keeps one failure per scope.
- */
-export const documentSyncFailures = sqliteTable("document_sync_failures", {
-    appKind: text("app_kind").notNull(),
-    localId: text("local_id").notNull(),
-    status: integer("status"),
-    message: text("message").notNull(),
-    attemptedAt: text("attempted_at").notNull(),
-}, (table) => [primaryKey({ columns: [table.appKind, table.localId] })]);
 /**
  * Full-history persistence for local documents (checkpoint + tail) — the ONLY
  * durable content source. Record rows in `documents` carry runtime metadata
@@ -365,92 +350,6 @@ export const documentProjectionText = sqliteTable("document_projection_text", {
     localId: text("local_id"),
     text: text("text").notNull(),
 }, (table) => [primaryKey({ columns: [table.localId] })]);
-/**
- * Offline create queue for containers.
- *
- * A user can create a local container before the API has assigned all remote
- * state for the container and its metadata document. This table keeps the sync
- * intent until container-create sync either records the remote ids or stores an
- * error for retry.
- *
- * Columns:
- * - `id`: Client-generated intent id.
- * - `containerId`: Local container id created optimistically.
- * - `parentContainerId`: Parent container id used when the intent is sent.
- * - `intentType`: Intent discriminator, currently `container.create`.
- * - `syncStatus`: Current sync state, currently `pending` or `synced`.
- * - `remoteContainerId`: Remote container id recorded after successful sync.
- * - `remoteMetadataDocumentId`: Remote metadata document id recorded after
- *   successful sync.
- * - `remoteMetadataAccessStateHash`: Access state hash for the synced metadata
- *   document.
- * - `lastError`: Last sync error message for retry/debug display.
- * - `createdAt`: Intent creation timestamp used for FIFO sync.
- * - `updatedAt`: Local timestamp for the latest status/error change.
- *
- * Indexes:
- * - `id` is the primary key.
- * - `containerId` is unique so each local container has one create intent.
- * - `(syncStatus, createdAt)` supports listing pending intents in creation
- *   order.
- */
-export const containerCreateIntents = sqliteTable("container_create_intents", {
-    id: text("id"),
-    containerId: text("container_id").notNull().unique(),
-    parentContainerId: text("parent_container_id").notNull(),
-    intentType: text("intent_type").notNull(),
-    syncStatus: text("sync_status").notNull(),
-    remoteContainerId: text("remote_container_id"),
-    remoteMetadataDocumentId: text("remote_metadata_document_id"),
-    remoteMetadataAccessStateHash: text("remote_metadata_access_state_hash"),
-    lastError: text("last_error"),
-    lastAttemptedAt: text("last_attempted_at"),
-    createdAt: text("created_at").notNull(),
-    updatedAt: text("updated_at").notNull(),
-}, (table) => [
-    primaryKey({ columns: [table.id] }),
-    index("container_create_intents_status_created_idx").on(table.syncStatus, table.createdAt),
-]);
-/**
- * Offline move queue for synced containers.
- *
- * A user can move a container whose server identity is already known while the
- * API or writer context is unavailable. This table stores only the desired
- * final parent and replay diagnostics; the signed move request is rebuilt from
- * current writer projections when sync resumes.
- *
- * Columns:
- * - `id`: Client-generated intent id.
- * - `containerId`: Synced container moved optimistically in the local tree.
- * - `parentContainerId`: Desired final parent container id.
- * - `previousParentContainerId`: Parent observed when the move was queued.
- * - `intentType`: Intent discriminator, currently `container.move`.
- * - `syncStatus`: Current sync state, currently `pending` or `blocked`.
- * - `lastError`: Last sync error message for retry/debug display.
- * - `lastAttemptedAt`: Timestamp of the last replay attempt.
- * - `createdAt`: Intent creation timestamp used for FIFO sync.
- * - `updatedAt`: Local timestamp for the latest target/status/error change.
- *
- * Indexes:
- * - `id` is the primary key.
- * - `containerId` is unique so same-container moves coalesce to one intent.
- * - `(syncStatus, createdAt)` supports listing pending intents in queue order.
- */
-export const containerMoveIntents = sqliteTable("container_move_intents", {
-    id: text("id"),
-    containerId: text("container_id").notNull().unique(),
-    parentContainerId: text("parent_container_id").notNull(),
-    previousParentContainerId: text("previous_parent_container_id"),
-    intentType: text("intent_type").notNull(),
-    syncStatus: text("sync_status").notNull(),
-    lastError: text("last_error"),
-    lastAttemptedAt: text("last_attempted_at"),
-    createdAt: text("created_at").notNull(),
-    updatedAt: text("updated_at").notNull(),
-}, (table) => [
-    primaryKey({ columns: [table.id] }),
-    index("container_move_intents_status_created_idx").on(table.syncStatus, table.createdAt),
-]);
 /**
  * Per-lane sync state for container data: the server cursor and the local
  * freshness marker share one row per lane.
@@ -493,9 +392,11 @@ export const documentTables = [
             "pull_continuation",
             "recovery_generation",
             "recovery_document_id",
+            "sync_failure_status",
+            "sync_failure_message",
+            "sync_failure_attempted_at",
         ],
     },
-    defineSqlTableSchema(documentSyncFailures),
     defineSqlTableSchema(documentHistoryCheckpoints),
     {
         ...defineSqlTableSchema(documentHistoryUpdates),
@@ -543,8 +444,11 @@ export const documentContainerProjectionTables = [
     },
     defineSqlTableSchema(documentDiscoverySequence),
 ];
-export const documentMoveIntentTables = [
-    defineSqlTableSchema(documentMoveIntents),
+export const localIntentTables = [
+    defineSqlTableSchema(localIntents),
+];
+export const documentPlacementIntentTables = [
+    ...localIntentTables,
     defineSqlTableSchema(documentIntentLinkTargets),
 ];
 export const documentProjectionTables = [
@@ -560,12 +464,6 @@ export const documentProjectionTables = [
     },
     documentOrphanBlobReclaimTable,
 ];
-export const containerCreateIntentTables = [
-    defineSqlTableSchema(containerCreateIntents),
-];
-export const containerMoveIntentTables = [
-    defineSqlTableSchema(containerMoveIntents),
-];
 export const containerSyncWatermarkTables = [
     {
         ...defineSqlTableSchema(containerSyncWatermarks),
@@ -582,10 +480,8 @@ export const clientSqlTables = [
     ...securityIncidentTables,
     ...containerTables,
     ...documentContainerProjectionTables,
-    ...documentMoveIntentTables,
+    ...documentPlacementIntentTables,
     ...documentProjectionTables,
-    ...containerCreateIntentTables,
-    ...containerMoveIntentTables,
     ...containerSyncWatermarkTables,
     ...organizationReadModelTables,
     ...organizationDataUsage.organizationDataUsageTables,
@@ -594,7 +490,6 @@ export const clientSqlTables = [
 export const clientSQLiteSchema = {
     principalHistoryNodeReferences,
     principalHistoryRootOwners,
-    principalHistoryStageScopes,
     principalKeyEnvelopeArchive,
     principalMutationJournal,
     principalHistoryEntries,
@@ -604,7 +499,6 @@ export const clientSQLiteSchema = {
     organizationFounders,
     principalGrantRetirements,
     documents,
-    documentSyncFailures,
     principalPolicies,
     principalPolicyBundleHistory,
     principalPolicyBundleReferences,
@@ -617,14 +511,12 @@ export const clientSQLiteSchema = {
     securityIncidents,
     ...containerSQLiteSchema,
     documentContainerProjection,
-    documentMoveIntents,
+    localIntents,
     documentIntentLinkTargets,
     documentProjection,
     documentPendingAttachments,
     documentAttachmentBlobProjection,
     documentOrphanBlobReclaims: documentOrphanBlobReclaims,
-    containerCreateIntents,
-    containerMoveIntents,
     containerSyncWatermarks,
     ...organizationReadModelSQLiteSchema,
     ...organizationDataUsage.organizationDataUsageSQLiteSchema,

package/data/sqlite/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,KAAK,EACL,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,EACJ,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,+BAA+B,EAAE,MAAM,wCAAwC,CAAC;AACzF,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,qBAAqB,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,mBAAmB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EACL,iCAAiC,EACjC,2BAA2B,GAC5B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EACL,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,+BAA+B,EAC/B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAuB,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,4BAA4B,EAC5B,mBAAmB,EACnB,UAAU,EACV,wBAAwB,EACxB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,+BAA+B,EAC/B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,CAAC;AAExE,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAClC,WAAW,EACX;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACvE,aAAa,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACtC,sBAAsB,EAAE,IAAI,CAAC,0BAA0B,CAAC;IACxD,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC;IAC5C,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC3C,kBAAkB,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACtE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,KAAK,CAAC,4BAA4B,CAAC;SAChC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC;SACnC,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,UAAU,cAAc,CAAC;CAC/C,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAC7C,wBAAwB,EACxB;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;IACzB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAClC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;CAC5C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACrE,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CACnD,8BAA8B,EAC9B;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;IACtD,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACrE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAC/C,0BAA0B,EAC1B;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;IACd,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,yBAAyB,EAAE,IAAI,CAAC,8BAA8B,CAAC;IAC/D,uBAAuB,EAAE,IAAI,CAAC,4BAA4B,CAAC;IAC3D,mBAAmB,EAAE,IAAI,CAAC,uBAAuB,CAAC;IAClD,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CACxD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IACnC,KAAK,CAAC,4CAA4C,CAAC,CAAC,EAAE,CACpD,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,SAAS,CAChB;IACD,WAAW,CAAC,wCAAwC,CAAC;SAClD,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;SAClB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,QAAQ,cAAc,CAAC;CAC7C,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAClD,6BAA6B,EAC7B;IACE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IACjC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC;QACT,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC;KAClE,CAAC;CACH,CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CACjD,4BAA4B,EAC5B;IACE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE;IAC5C,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,oBAAoB,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC,OAAO,EAAE;IAC9D,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE;IAClD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAChD,4BAA4B,EAC5B;IACE,mBAAmB,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE;IAC5D,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,aAAa,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAClD,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;IACtD,qBAAqB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,EAAE;IAChE,kBAAkB,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE;IACzD,sBAAsB,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC,OAAO,EAAE;IAClE,2BAA2B,EAAE,IAAI,CAC/B,+BAA+B,CAChC,CAAC,OAAO,EAAE;IACX,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;CAC7C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC;QACT,OAAO,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC;KACnD,CAAC;IACF,WAAW,CAAC,2DAA2D,CAAC,CAAC,EAAE,CACzE,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,qBAAqB,CAC5B;CACF,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CACpD,+BAA+B,EAC/B;IACE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAC5E,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAC3C,qBAAqB,EACrB;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IACzB,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7D,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IACvD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,KAAK,CAAC,mCAAmC,CAAC;SACvC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;SACrB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,WAAW,cAAc,CAAC;IAC/C,KAAK,CAAC,6CAA6C,CAAC;SACjD,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;SACxB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,WAAW,UAAU,CAAC;IAC3C,KAAK,CAAC,kCAAkC,CAAC;SACtC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;SACpB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,UAAU,cAAc,CAAC;CAC/C,CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAC/C,0BAA0B,EAC1B;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IACzB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;CAC7B,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACtD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAC/C,0BAA0B,EAC1B;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;IACd,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACpD,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE;IACxD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAAC;IAC9C,wBAAwB,EAAE,IAAI,CAAC,6BAA6B,CAAC;IAC7D,6BAA6B,EAAE,IAAI,CAAC,mCAAmC,CAAC;IACxE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IACnC,KAAK,CAAC,6CAA6C,CAAC,CAAC,EAAE,CACrD,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,SAAS,CAChB;CACF,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAC7C,wBAAwB,EACxB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;IACd,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACpD,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE;IACxD,yBAAyB,EAAE,IAAI,CAAC,8BAA8B,CAAC;IAC/D,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IACnC,KAAK,CAAC,2CAA2C,CAAC,CAAC,EAAE,CACnD,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,SAAS,CAChB;CACF,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAChD,2BAA2B,EAC3B;IACE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;CAC9B,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CACrE,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAkC;IAC3D;QACE,GAAG,oBAAoB,CAAC,SAAS,CAAC;QAClC,eAAe,EAAE;YACf,mBAAmB;YACnB,qBAAqB;YACrB,sBAAsB;SACvB;KACF;IACD,oBAAoB,CAAC,oBAAoB,CAAC;IAC1C,oBAAoB,CAAC,0BAA0B,CAAC;IAChD;QACE,GAAG,oBAAoB,CAAC,sBAAsB,CAAC;QAC/C,eAAe,EAAE,CAAC,WAAW,CAAC;KAC/B;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAClE;QACE,GAAG,oBAAoB,CAAC,iBAAiB,CAAC;QAC1C,eAAe,EAAE,CAAC,qBAAqB,CAAC;KACzC;IACD;QACE,GAAG,oBAAoB,CAAC,4BAA4B,CAAC;QACrD,eAAe,EAAE,CAAC,qBAAqB,CAAC;KACzC;IACD,oBAAoB,CAAC,+BAA+B,CAAC;IACrD,oBAAoB,CAAC,4BAA4B,CAAC;IAClD,GAAG,2BAA2B;IAC9B,GAAG,8BAA8B;CAClC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAkC;IACnE,oBAAoB,CAAC,oBAAoB,CAAC;IAC1C,oBAAoB,CAAC,yBAAyB,CAAC;IAC/C,oBAAoB,CAAC,yBAAyB,CAAC;IAC/C,oBAAoB,CAAC,wBAAwB,CAAC;IAC9C,oBAAoB,CAAC,0BAA0B,CAAC;CACjD,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAkC;IACzE,oBAAoB,CAAC,uBAAuB,CAAC;CAC9C,CAAC;AAEF,MAAM,sBAAsB,GAAkC;IAC5D,qBAAqB;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAErD,MAAM,CAAC,MAAM,iCAAiC,GAC5C;IACE,oBAAoB,CAAC,2BAA2B,CAAC;IACjD;QACE,GAAG,oBAAoB,CAAC,+BAA+B,CAAC;QACxD,eAAe,EAAE,CAAC,QAAQ,CAAC;KAC5B;IACD,oBAAoB,CAAC,0BAA0B,CAAC;IAChD;QACE,GAAG,oBAAoB,CAAC,sBAAsB,CAAC;QAC/C,eAAe,EAAE,CAAC,iBAAiB,CAAC;KACrC;IACD,oBAAoB,CAAC,yBAAyB,CAAC;CAChD,CAAC;AAEJ,MAAM,CAAC,MAAM,wBAAwB,GAAkC;IACrE,oBAAoB,CAAC,mBAAmB,CAAC;IACzC,oBAAoB,CAAC,yBAAyB,CAAC;CAChD,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAkC;IACrE,oBAAoB,CAAC,kBAAkB,CAAC;IACxC,oBAAoB,CAAC,sBAAsB,CAAC;IAC5C;QACE,GAAG,oBAAoB,CAAC,0BAA0B,CAAC;QACnD,eAAe,EAAE,CAAC,gBAAgB,CAAC;KACpC;IACD;QACE,GAAG,oBAAoB,CAAC,gCAAgC,CAAC;QACzD,eAAe,EAAE,CAAC,gBAAgB,CAAC;KACpC;IACD,8BAA8B;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAkC;IACxE,oBAAoB,CAAC,sBAAsB,CAAC;CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAkC;IACtE,oBAAoB,CAAC,oBAAoB,CAAC;CAC3C,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAkC;IACzE;QACE,GAAG,oBAAoB,CAAC,uBAAuB,CAAC;QAChD,eAAe,EAAE,CAAC,YAAY,CAAC;KAChC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAkC;IAC5D,GAAG,8BAA8B;IACjC,GAAG,cAAc;IACjB,GAAG,qBAAqB;IACxB,GAAG,sBAAsB;IACzB,GAAG,4BAA4B;IAC/B,GAAG,4BAA4B;IAC/B,GAAG,sBAAsB;IACzB,GAAG,eAAe;IAClB,GAAG,iCAAiC;IACpC,GAAG,wBAAwB;IAC3B,GAAG,wBAAwB;IAC3B,GAAG,2BAA2B;IAC9B,GAAG,yBAAyB;IAC5B,GAAG,4BAA4B;IAC/B,GAAG,2BAA2B;IAC9B,GAAG,qBAAqB,CAAC,2BAA2B;IACpD,GAAG,mBAAmB,CAAC,qCAAqC;CAC7D,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,8BAA8B;IAC9B,0BAA0B;IAC1B,2BAA2B;IAC3B,2BAA2B;IAC3B,wBAAwB;IACxB,uBAAuB;IACvB,qBAAqB;IACrB,wBAAwB;IACxB,sBAAsB;IACtB,oBAAoB;IACpB,yBAAyB;IACzB,SAAS;IACT,oBAAoB;IACpB,iBAAiB;IACjB,4BAA4B;IAC5B,+BAA+B;IAC/B,4BAA4B;IAC5B,yBAAyB;IACzB,wBAAwB;IACxB,0BAA0B;IAC1B,6BAA6B;IAC7B,uBAAuB;IACvB,iBAAiB;IACjB,GAAG,qBAAqB;IACxB,2BAA2B;IAC3B,mBAAmB;IACnB,yBAAyB;IACzB,kBAAkB;IAClB,0BAA0B;IAC1B,gCAAgC;IAChC,0BAA0B,EAAE,0BAA0B;IACtD,sBAAsB;IACtB,oBAAoB;IACpB,uBAAuB;IACvB,GAAG,iCAAiC;IACpC,GAAG,qBAAqB,CAAC,iCAAiC;IAC1D,GAAG,mBAAmB,CAAC,2CAA2C;CACnE,CAAC","sourcesContent":["import { sql } from \"drizzle-orm\";\nimport {\n  index,\n  integer,\n  primaryKey,\n  sqliteTable,\n  text,\n  uniqueIndex,\n} from \"drizzle-orm/sqlite-core\";\nimport { containerDocumentTombstoneHolds } from \"./containerDocumentTombstoneHoldSchema\";\nimport {\n  containerSQLiteSchema,\n  containerTableSchemas,\n} from \"./containerSchema\";\nimport {\n  documentAttachmentBlobProjection,\n  documentPendingAttachments,\n} from \"./documentAttachmentSchema\";\nimport {\n  documentDiscoveryHeads,\n  documentDiscoverySequence,\n  pendingDocumentDiscoveries,\n} from \"./documentDiscoveryEvidenceSchema\";\nimport {\n  documentOrphanBlobReclaims,\n  documentOrphanBlobReclaimTable,\n} from \"./documentOrphanBlobReclaims\";\nimport {\n  documentIntentLinkTargets,\n  documentMoveIntents,\n} from \"./documentPlacementIntentSchema\";\nimport * as organizationDataUsage from \"./organizationDataUsageSchema\";\nimport { organizationFounders } from \"./organizationFounderSchema\";\nimport * as provisioningAttempt from \"./organizationProvisioningAttemptSchema\";\nimport {\n  organizationReadModelSQLiteSchema,\n  organizationReadModelTables,\n} from \"./organizationReadModelTableRegistry\";\nimport { principalGrantRetirements } from \"./principalGrantRetirementSchema\";\nimport {\n  principalHistoryEntries,\n  principalHistoryEvidenceTables,\n  principalHistoryNodes,\n  principalHistoryPrefixes,\n} from \"./principalHistoryEvidenceSchema\";\nimport {\n  principalHistoryNodeReferences,\n  principalHistoryRootOwners,\n} from \"./principalHistoryNodeRetentionSchema\";\nimport {\n  principalHistoryStageScopes,\n  principalKeyEnvelopeArchive,\n} from \"./principalHistoryRetentionSchema\";\nimport {\n  principalHistoryStages,\n  principalHistoryStageTables,\n} from \"./principalHistoryStageSchema\";\nimport {\n  principalMutationJournal,\n  principalMutationJournalTables,\n} from \"./principalMutationJournalSchema\";\nimport {\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyBundleReferences,\n  principalPolicyCheckpoints,\n  principalPolicyOrganizations,\n} from \"./principalPolicySchema\";\nimport {\n  securityIncidents,\n  securityIncidentTable,\n} from \"./securityIncidentSchema\";\nimport { defineSqlTableSchema, type SqlTableSchema } from \"./sqlTableSchema\";\nimport {\n  verifiedAccessManifestBundles,\n  verifiedManifestBundleTables,\n} from \"./verifiedManifestBundleSchema\";\n\nexport {\n  containerHydrationTombstones,\n  containerProjection,\n  containers,\n  dormantContainerMetadata,\n  dormantMetadataSweepRequests,\n  supersededContainerBindings,\n} from \"./containerSchema\";\nexport {\n  documentAttachmentBlobProjection,\n  documentPendingAttachments,\n} from \"./documentAttachmentSchema\";\nexport { documentMoveIntents } from \"./documentPlacementIntentSchema\";\nexport {\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyBundleReferences,\n  principalPolicyCheckpoints,\n  principalPolicyOrganizations,\n} from \"./principalPolicySchema\";\nexport { securityIncidents } from \"./securityIncidentSchema\";\nexport { containerDocumentTombstoneHolds, organizationReadModelTables };\n\nconst accessLevelColumn = \"effective_access_level\";\n\n/**\n * Durable Loro-backed document records shared by app features.\n *\n * This table stores encrypted document runtime state for multiple app domains.\n * `appKind` namespaces records for documents and container metadata. User-facing\n * list data is projected into feature-specific read models.\n *\n * Columns:\n * - `appKind`: Local domain namespace for the row, such as `documents` or\n *   `container-metadata`.\n * - `localId`: Stable local id inside `appKind`. It may be created before a\n *   server `documentId` exists.\n * - `documentId`: Server document id once the record is known remotely, or\n *   `null` while the document is local-only.\n * - `accessEpoch`: Latest access epoch persisted for the document. Defaults to\n *   the initial epoch.\n * - `accessStateHash`: Current document access/manifest state hash returned by\n *   sync, when known.\n * - `lastCommitLsn`: Last remote commit cursor applied to this local document.\n * - `documentManifestBundle`: Serialized document manifest bundle used for\n *   encrypted document sync.\n * - `contentKeyBundle`: Serialized content-key material needed to open the\n *   local document.\n * - `documentKekTargets`: Serialized KEK target state for document key wraps.\n * - `pendingBaseVersion`: Encoded oplog version through which every persisted\n *   op is already enqueued or synced. Persisted so a restart restores the\n *   outgoing-delta marker instead of re-seeding it past a device-first\n *   `deferRemoteSync` write's un-advanced op. `null` when unset.\n * - `snapshotEndVersion`: Encoded end version vector of the persisted content\n *   (which lives in the durable-history tables, never on this row), written on\n *   every content persist. Lets the pending-write queue's deferred-tail scan\n *   compare version coverage without loading content. Empty string when the\n *   document has never hydrated content, which readers treat as \"no deferred\n *   tail claimable\".\n * - `recoveryGeneration`: Atomic raw-history recovery writer fence.\n * - `recoveryDocumentId`: Former server id for cross-client post-purge recreation.\n * - `pullContinuation`: Durable progress for the next bounded remote pull.\n * - `updatedAt`: Local timestamp for the last persisted runtime-state update.\n *\n * Indexes:\n * - `(appKind, localId)` is the primary key and scopes local document lookups.\n * - `(appKind, documentId) where documentId is not null` supports resolving a\n *   server document id back to the local row during discovery and relinking.\n */\nexport const documents = sqliteTable(\n  \"documents\",\n  {\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    documentId: text(\"document_id\"),\n    accessEpoch: integer(\"access_epoch\").notNull().default(1),\n    accessStateHash: text(\"access_state_hash\"),\n    effectiveAccessLevel: text(accessLevelColumn).notNull().default(\"read\"),\n    lastCommitLsn: text(\"last_commit_lsn\"),\n    documentManifestBundle: text(\"document_manifest_bundle\"),\n    contentKeyBundle: text(\"content_key_bundle\"),\n    documentKekTargets: text(\"document_kek_targets\"),\n    pendingBaseVersion: text(\"pending_base_version\"),\n    pullContinuation: text(\"pull_continuation\"),\n    recoveryGeneration: integer(\"recovery_generation\").notNull().default(0),\n    recoveryDocumentId: text(\"recovery_document_id\"),\n    snapshotEndVersion: text(\"snapshot_end_version\").notNull().default(\"\"),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.appKind, table.localId] }),\n    index(\"documents_app_document_idx\")\n      .on(table.appKind, table.documentId)\n      .where(sql`${table.documentId} IS NOT NULL`),\n  ],\n);\n\n/**\n * Last terminal sync failure or quarantined incoming update per document scope.\n *\n * The durable write queue (queued rows of `documentHistoryUpdates`) has no\n * status columns — a row is either queued or settled. Terminal submissions and\n * incoming updates that cannot be decrypted or imported are recorded here so\n * the write-queue view and footer can surface why the document is blocked.\n * Rows are upserted per scope and deleted only after a later fully validated\n * sync pass succeeds or the scope's local state is torn down.\n *\n * Columns:\n * - `appKind`: Local document namespace matching `documents.appKind`.\n * - `localId`: Local document id matching `documents.localId`.\n * - `status`: HTTP status of the failed submission when known.\n * - `message`: Human-readable failure description for queue display.\n * - `attemptedAt`: Timestamp of the failed attempt.\n *\n * Indexes:\n * - `(appKind, localId)` is the primary key and keeps one failure per scope.\n */\nexport const documentSyncFailures = sqliteTable(\n  \"document_sync_failures\",\n  {\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    status: integer(\"status\"),\n    message: text(\"message\").notNull(),\n    attemptedAt: text(\"attempted_at\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.appKind, table.localId] })],\n);\n\n/**\n * Full-history persistence for local documents (checkpoint + tail) — the ONLY\n * durable content source. Record rows in `documents` carry runtime metadata\n * and the content frontier (`snapshotEndVersion`), never content. The\n * checkpoint holds a full-history snapshot refreshed only at compaction, and\n * the tail appends every update (local deltas and decrypted remote updates)\n * written since. Restore = import checkpoint + replay tail; compaction =\n * export full history from the live doc, replace the checkpoint, clear the\n * tail — all bounded and amortized. Container metadata stores its content (an\n * exported-updates blob) as its checkpoint row, with no tail.\n */\nexport const documentHistoryCheckpoints = sqliteTable(\n  \"document_history_checkpoints\",\n  {\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    snapshot: text(\"snapshot\").notNull(),\n    endVersionVector: text(\"end_version_vector\").notNull(),\n    revision: text(\"revision\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.appKind, table.localId] })],\n);\n\n/**\n * The local update log: one row per Loro update, serving as both the history\n * tail (restore = checkpoint + tail) and the outbound write queue.\n *\n * Every locally authored update is stored once. While it waits for sync it\n * carries an `updateId` (the id submitted to the server) and the version-vector\n * metadata the submission needs; settlement clears them, leaving the row as\n * ordinary tail history until compaction folds it into a checkpoint.\n *\n * Columns:\n * - `id`: Row id; tail compaction deletes by it.\n * - `appKind`, `localId`: Document scope matching `documents`.\n * - `updateData`: Serialized Loro update payload.\n * - `origin`: \"local\" (authored on this device) or \"remote\" (decrypted\n *   pulled update) for tail rows. Restores use it to advance the\n *   outgoing-delta marker across remote rows — their ops are already\n *   server-side — while a local row left behind by a crash stays below the\n *   marker so the next edit re-derives and sends it. \"outbox\" marks a queued\n *   update with no tail role (container metadata, whose content is its\n *   checkpoint, and full-state re-uploads after a remote reset); restores and\n *   compaction never see it and settlement deletes it.\n * - `createdAt`: Insertion timestamp; with `rowid`, deterministic replay order.\n * - `updateId`: Present exactly while the row is queued for sync; rekeyed\n *   after a lost acknowledgement poisons the submitted id.\n * - `partialStartVersionVector` / `partialEndVersionVector`: Version vectors\n *   around a queued partial update.\n * - `sourceVersionVector`: Present on a queued rotation baseline checkpoint.\n * - `rekeyCount`: Durable bound on rekeys of a queued row.\n *\n * Invariant: compaction never deletes a queued row, so a checkpoint can cover\n * a queued update's operations without removing it from the queue.\n */\nexport const documentHistoryUpdates = sqliteTable(\n  \"document_history_updates\",\n  {\n    id: text(\"id\"),\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    updateData: text(\"update_data\").notNull(),\n    origin: text(\"origin\").notNull(),\n    createdAt: text(\"created_at\").notNull(),\n    updateId: text(\"update_id\"),\n    partialStartVersionVector: text(\"partial_start_version_vector\"),\n    partialEndVersionVector: text(\"partial_end_version_vector\"),\n    sourceVersionVector: text(\"source_version_vector\"),\n    rekeyCount: integer(\"rekey_count\").notNull().default(0),\n  },\n  (table) => [\n    primaryKey({ columns: [table.id] }),\n    index(\"document_history_updates_scope_created_idx\").on(\n      table.appKind,\n      table.localId,\n      table.createdAt,\n    ),\n    uniqueIndex(\"document_history_updates_update_id_idx\")\n      .on(table.updateId)\n      .where(sql`${table.updateId} IS NOT NULL`),\n  ],\n);\n\n/**\n * Anti-rollback pin for verified access manifests.\n *\n * Records the highest access-manifest epoch this client has verified for each\n * object, so a later projection that serves an older epoch (rollback) or a\n * conflicting manifest at the same epoch (equivocation) is detected before any\n * key is unwrapped. Updated monotonically after a projection verifies cleanly.\n *\n * Columns:\n * - `objectKind`: Access object kind (`container`, `document`, ...).\n * - `organizationId`: Organization boundary that owns the object.\n * - `objectId`: Stable object id.\n * - `epoch`: Highest verified manifest epoch.\n * - `manifestHash`: Manifest hash pinned at that epoch.\n * - `updatedAt`: Local timestamp for the pin.\n *\n * Indexes:\n * - `(objectKind, organizationId, objectId)` is the primary key and gives one\n *   pin per object.\n */\nexport const accessManifestCheckpoints = sqliteTable(\n  \"access_manifest_checkpoints\",\n  {\n    objectKind: text(\"object_kind\").notNull(),\n    organizationId: text(\"organization_id\").notNull(),\n    objectId: text(\"object_id\").notNull(),\n    epoch: integer(\"epoch\").notNull(),\n    manifestHash: text(\"manifest_hash\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({\n      columns: [table.objectKind, table.organizationId, table.objectId],\n    }),\n  ],\n);\n\n/**\n * Durable terminal pins for documents whose signed purge proof was verified.\n * These survive remote-state resets so a dishonest API cannot later replay the\n * pre-purge writer projection and resurrect locally deleted content.\n */\nexport const documentPurgeCheckpoints = sqliteTable(\n  \"document_purge_checkpoints\",\n  {\n    documentId: text(\"document_id\").primaryKey(),\n    organizationId: text(\"organization_id\").notNull(),\n    documentManifestHash: text(\"document_manifest_hash\").notNull(),\n    purgeEventHash: text(\"purge_event_hash\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n);\n\n/**\n * Durable trust-on-first-use pins for remote user identity bundles.\n *\n * The first validated identity observed for a user in a configured API trust\n * domain is inserted once. Later observations must match every suite, public\n * key, and fingerprint exactly; the persistence adapter never updates these\n * rows. `firstSeenAt` records when the local trust decision was made and is\n * likewise immutable.\n *\n * Indexes:\n * - `(identityTrustDomain, userId)` is the primary key and scopes a user pin to\n *   the host-configured API authority that supplied it.\n * - `(identityTrustDomain, signingKeyFingerprint)` binds the reverse identity\n *   mapping durably, including across session recreation. There is no\n *   migration for a table that already violates it. Earlier builds pinned a\n *   registration's user id before the server confirmed it, so a device that\n *   ran one may hold two users on one key; deployments are greenfield, and\n *   such a device clears its local data, which recreates this table empty. A\n *   device that used an environment before a reset does the same (see\n *   docs/developer/greenfield-reset.md).\n */\nexport const trustedUserIdentityPins = sqliteTable(\n  \"trusted_user_identity_pins\",\n  {\n    identityTrustDomain: text(\"identity_trust_domain\").notNull(),\n    userId: text(\"user_id\").notNull(),\n    formatVersion: integer(\"format_version\").notNull(),\n    signingSuite: text(\"signing_suite\").notNull(),\n    signingPublicKey: text(\"signing_public_key\").notNull(),\n    signingKeyFingerprint: text(\"signing_key_fingerprint\").notNull(),\n    encapsulationSuite: text(\"encapsulation_suite\").notNull(),\n    encapsulationPublicKey: text(\"encapsulation_public_key\").notNull(),\n    encapsulationKeyFingerprint: text(\n      \"encapsulation_key_fingerprint\",\n    ).notNull(),\n    firstSeenAt: text(\"first_seen_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({\n      columns: [table.identityTrustDomain, table.userId],\n    }),\n    uniqueIndex(\"trusted_user_identity_pins_domain_signing_fingerprint_idx\").on(\n      table.identityTrustDomain,\n      table.signingKeyFingerprint,\n    ),\n  ],\n);\n\n/**\n * Local many-to-many projection between documents and containers.\n *\n * The document summary row stores one selected `containerId` for primary list\n * placement, while this table keeps the full set of linked containers returned\n * by container/document sync. Removing a container deletes its links and may\n * repair affected document summary rows to point at another remaining link.\n *\n * Columns:\n * - `documentId`: Server document id whose container links are projected.\n * - `containerId`: Linked container id.\n * - `updatedAt`: Local timestamp for the last replacement of the link set.\n *\n * Indexes:\n * - `(documentId, containerId)` is the primary key and prevents duplicate\n *   links for the same document/container pair.\n */\nexport const documentContainerProjection = sqliteTable(\n  \"document_container_projection\",\n  {\n    documentId: text(\"document_id\").notNull(),\n    containerId: text(\"container_id\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.documentId, table.containerId] })],\n);\n\n/**\n * Queryable document summary and detail projection.\n *\n * The durable Loro state lives in `documents`. This table stores the fields the\n * app needs for document lists, summaries, and fast detail hydration without\n * opening the full Loro snapshot on every read.\n *\n * Columns:\n * - `localId`: Stable local document id. This joins to `documents.localId` for\n *   rows where `documents.appKind = documents`.\n * - `documentId`: Server document id when known.\n * - `containerId`: Selected container for primary document placement, or\n *   `null` if the document is not currently linked to a visible container.\n * - `organizationId`: Last-known owning organization. Stamped from the\n *   container row when the document is detached because its container was\n *   removed locally (e.g. access to a shared org was revoked and the container\n *   tombstoned), so pending writes keep their org attribution after the\n *   `containers` join source disappears. Read as a fallback only — a live\n *   container join always wins.\n * - `documentKind`: Stored document kind. Defaults to `note`.\n * - `title`: Plain projected title. Defaults to the note fallback title.\n * - `updatedAt`: Timestamp used for document list ordering.\n *\n * The projected full text lives in `documentProjectionText`, keyed by the same\n * `localId`. Keeping it out of this row keeps list/window scans narrow: the\n * sidebar and summary queries read titles and placement from rows whose size\n * does not grow with document content.\n *\n * Indexes:\n * - `localId` is the primary key for document projection lookups.\n * - `(containerId) where containerId is not null` serves container-scoped\n *   window/count scans without walking the whole table.\n * - `(organizationId) where containerId is null` serves the orphan-recovery\n *   existence and window scans.\n * - `(documentId) where documentId is not null` serves the linked-placement\n *   join from `documentContainerProjection` and server-id lookups.\n */\nexport const documentProjection = sqliteTable(\n  \"document_projection\",\n  {\n    localId: text(\"local_id\"),\n    documentId: text(\"document_id\"),\n    containerId: text(\"container_id\"),\n    organizationId: text(\"organization_id\"),\n    documentKind: text(\"document_kind\").notNull().default(\"note\"),\n    title: text(\"title\").notNull().default(\"Untitled note\"),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.localId] }),\n    index(\"document_projection_container_idx\")\n      .on(table.containerId)\n      .where(sql`${table.containerId} IS NOT NULL`),\n    index(\"document_projection_orphan_organization_idx\")\n      .on(table.organizationId)\n      .where(sql`${table.containerId} IS NULL`),\n    index(\"document_projection_document_idx\")\n      .on(table.documentId)\n      .where(sql`${table.documentId} IS NOT NULL`),\n  ],\n);\n\n/**\n * Projected document text, split from `documentProjection` so content size\n * never bloats the rows that list/window queries scan. Loaded only by detail\n * reads (`loadDocument`) and the save-timestamp change check.\n *\n * Columns:\n * - `localId`: Stable local document id, matching `documentProjection.localId`.\n * - `text`: Plain projected text used to rebuild summaries/details.\n */\nexport const documentProjectionText = sqliteTable(\n  \"document_projection_text\",\n  {\n    localId: text(\"local_id\"),\n    text: text(\"text\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.localId] })],\n);\n\n/**\n * Offline create queue for containers.\n *\n * A user can create a local container before the API has assigned all remote\n * state for the container and its metadata document. This table keeps the sync\n * intent until container-create sync either records the remote ids or stores an\n * error for retry.\n *\n * Columns:\n * - `id`: Client-generated intent id.\n * - `containerId`: Local container id created optimistically.\n * - `parentContainerId`: Parent container id used when the intent is sent.\n * - `intentType`: Intent discriminator, currently `container.create`.\n * - `syncStatus`: Current sync state, currently `pending` or `synced`.\n * - `remoteContainerId`: Remote container id recorded after successful sync.\n * - `remoteMetadataDocumentId`: Remote metadata document id recorded after\n *   successful sync.\n * - `remoteMetadataAccessStateHash`: Access state hash for the synced metadata\n *   document.\n * - `lastError`: Last sync error message for retry/debug display.\n * - `createdAt`: Intent creation timestamp used for FIFO sync.\n * - `updatedAt`: Local timestamp for the latest status/error change.\n *\n * Indexes:\n * - `id` is the primary key.\n * - `containerId` is unique so each local container has one create intent.\n * - `(syncStatus, createdAt)` supports listing pending intents in creation\n *   order.\n */\nexport const containerCreateIntents = sqliteTable(\n  \"container_create_intents\",\n  {\n    id: text(\"id\"),\n    containerId: text(\"container_id\").notNull().unique(),\n    parentContainerId: text(\"parent_container_id\").notNull(),\n    intentType: text(\"intent_type\").notNull(),\n    syncStatus: text(\"sync_status\").notNull(),\n    remoteContainerId: text(\"remote_container_id\"),\n    remoteMetadataDocumentId: text(\"remote_metadata_document_id\"),\n    remoteMetadataAccessStateHash: text(\"remote_metadata_access_state_hash\"),\n    lastError: text(\"last_error\"),\n    lastAttemptedAt: text(\"last_attempted_at\"),\n    createdAt: text(\"created_at\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.id] }),\n    index(\"container_create_intents_status_created_idx\").on(\n      table.syncStatus,\n      table.createdAt,\n    ),\n  ],\n);\n\n/**\n * Offline move queue for synced containers.\n *\n * A user can move a container whose server identity is already known while the\n * API or writer context is unavailable. This table stores only the desired\n * final parent and replay diagnostics; the signed move request is rebuilt from\n * current writer projections when sync resumes.\n *\n * Columns:\n * - `id`: Client-generated intent id.\n * - `containerId`: Synced container moved optimistically in the local tree.\n * - `parentContainerId`: Desired final parent container id.\n * - `previousParentContainerId`: Parent observed when the move was queued.\n * - `intentType`: Intent discriminator, currently `container.move`.\n * - `syncStatus`: Current sync state, currently `pending` or `blocked`.\n * - `lastError`: Last sync error message for retry/debug display.\n * - `lastAttemptedAt`: Timestamp of the last replay attempt.\n * - `createdAt`: Intent creation timestamp used for FIFO sync.\n * - `updatedAt`: Local timestamp for the latest target/status/error change.\n *\n * Indexes:\n * - `id` is the primary key.\n * - `containerId` is unique so same-container moves coalesce to one intent.\n * - `(syncStatus, createdAt)` supports listing pending intents in queue order.\n */\nexport const containerMoveIntents = sqliteTable(\n  \"container_move_intents\",\n  {\n    id: text(\"id\"),\n    containerId: text(\"container_id\").notNull().unique(),\n    parentContainerId: text(\"parent_container_id\").notNull(),\n    previousParentContainerId: text(\"previous_parent_container_id\"),\n    intentType: text(\"intent_type\").notNull(),\n    syncStatus: text(\"sync_status\").notNull(),\n    lastError: text(\"last_error\"),\n    lastAttemptedAt: text(\"last_attempted_at\"),\n    createdAt: text(\"created_at\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.id] }),\n    index(\"container_move_intents_status_created_idx\").on(\n      table.syncStatus,\n      table.createdAt,\n    ),\n  ],\n);\n\n/**\n * Per-lane sync state for container data: the server cursor and the local\n * freshness marker share one row per lane.\n *\n * Container sync is split into lanes, such as a parent-container child lane or\n * a container-document membership lane. The cursor lets the next request\n * resume without replaying the entire tree. The freshness marker records the\n * last fully drained check independently of the cursor: empty server\n * responses do not always carry a new watermark, but startup still needs to\n * know that it recently checked the lane before polling again.\n *\n * Columns:\n * - `laneKind`: Sync lane category, such as `container_parent` or\n *   `container_documents`.\n * - `laneId`: Lane identity. Root parent sync uses `root`, child sync uses a\n *   parent-prefixed container id, and document lanes use the container id.\n * - `watermarkUpdatedAt`: Server `updatedAt` value for the stored watermark;\n *   null until a watermark is saved.\n * - `watermarkId`: Server id tie-breaker for the stored watermark; null\n *   exactly when `watermarkUpdatedAt` is.\n * - `updatedAt`: Local timestamp for when the cursor was saved.\n * - `checkedAt`: Local timestamp for the most recent fully drained lane check;\n *   null until one completes.\n *\n * Indexes:\n * - `(laneKind, laneId)` is the primary key and stores one row per lane.\n */\nexport const containerSyncWatermarks = sqliteTable(\n  \"container_sync_watermarks\",\n  {\n    laneKind: text(\"lane_kind\").notNull(),\n    laneId: text(\"lane_id\").notNull(),\n    watermarkUpdatedAt: text(\"watermark_updated_at\"),\n    watermarkId: text(\"watermark_id\"),\n    updatedAt: text(\"updated_at\"),\n    checkedAt: text(\"checked_at\"),\n  },\n  (table) => [primaryKey({ columns: [table.laneKind, table.laneId] })],\n);\n\nexport const documentTables: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(documents),\n    requiredColumns: [\n      \"pull_continuation\",\n      \"recovery_generation\",\n      \"recovery_document_id\",\n    ],\n  },\n  defineSqlTableSchema(documentSyncFailures),\n  defineSqlTableSchema(documentHistoryCheckpoints),\n  {\n    ...defineSqlTableSchema(documentHistoryUpdates),\n    requiredColumns: [\"update_id\"],\n  },\n];\n\nexport const principalPolicyTables: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(principalPolicies),\n    requiredColumns: [\"current_grants_json\"],\n  },\n  {\n    ...defineSqlTableSchema(principalPolicyBundleHistory),\n    requiredColumns: [\"current_grants_json\"],\n  },\n  defineSqlTableSchema(principalPolicyBundleReferences),\n  defineSqlTableSchema(principalPolicyOrganizations),\n  ...principalHistoryStageTables,\n  ...principalHistoryEvidenceTables,\n];\n\nexport const keyingCheckpointTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(organizationFounders),\n  defineSqlTableSchema(accessManifestCheckpoints),\n  defineSqlTableSchema(principalGrantRetirements),\n  defineSqlTableSchema(documentPurgeCheckpoints),\n  defineSqlTableSchema(principalPolicyCheckpoints),\n];\n\nexport const trustedUserIdentityPinTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(trustedUserIdentityPins),\n];\n\nconst securityIncidentTables: ReadonlyArray<SqlTableSchema> = [\n  securityIncidentTable,\n];\n\nexport const containerTables = containerTableSchemas;\n\nexport const documentContainerProjectionTables: ReadonlyArray<SqlTableSchema> =\n  [\n    defineSqlTableSchema(documentContainerProjection),\n    {\n      ...defineSqlTableSchema(containerDocumentTombstoneHolds),\n      requiredColumns: [\"hidden\"],\n    },\n    defineSqlTableSchema(pendingDocumentDiscoveries),\n    {\n      ...defineSqlTableSchema(documentDiscoveryHeads),\n      requiredColumns: [\"organization_id\"],\n    },\n    defineSqlTableSchema(documentDiscoverySequence),\n  ];\n\nexport const documentMoveIntentTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(documentMoveIntents),\n  defineSqlTableSchema(documentIntentLinkTargets),\n];\n\nexport const documentProjectionTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(documentProjection),\n  defineSqlTableSchema(documentProjectionText),\n  {\n    ...defineSqlTableSchema(documentPendingAttachments),\n    requiredColumns: [\"content_sha256\"],\n  },\n  {\n    ...defineSqlTableSchema(documentAttachmentBlobProjection),\n    requiredColumns: [\"content_sha256\"],\n  },\n  documentOrphanBlobReclaimTable,\n];\n\nexport const containerCreateIntentTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(containerCreateIntents),\n];\n\nexport const containerMoveIntentTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(containerMoveIntents),\n];\n\nexport const containerSyncWatermarkTables: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(containerSyncWatermarks),\n    requiredColumns: [\"checked_at\"],\n  },\n];\n\nexport const clientSqlTables: ReadonlyArray<SqlTableSchema> = [\n  ...principalMutationJournalTables,\n  ...documentTables,\n  ...principalPolicyTables,\n  ...keyingCheckpointTables,\n  ...verifiedManifestBundleTables,\n  ...trustedUserIdentityPinTables,\n  ...securityIncidentTables,\n  ...containerTables,\n  ...documentContainerProjectionTables,\n  ...documentMoveIntentTables,\n  ...documentProjectionTables,\n  ...containerCreateIntentTables,\n  ...containerMoveIntentTables,\n  ...containerSyncWatermarkTables,\n  ...organizationReadModelTables,\n  ...organizationDataUsage.organizationDataUsageTables,\n  ...provisioningAttempt.organizationProvisioningAttemptTables,\n];\n\nexport const clientSQLiteSchema = {\n  principalHistoryNodeReferences,\n  principalHistoryRootOwners,\n  principalHistoryStageScopes,\n  principalKeyEnvelopeArchive,\n  principalMutationJournal,\n  principalHistoryEntries,\n  principalHistoryNodes,\n  principalHistoryPrefixes,\n  principalHistoryStages,\n  organizationFounders,\n  principalGrantRetirements,\n  documents,\n  documentSyncFailures,\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyBundleReferences,\n  principalPolicyOrganizations,\n  accessManifestCheckpoints,\n  documentPurgeCheckpoints,\n  principalPolicyCheckpoints,\n  verifiedAccessManifestBundles,\n  trustedUserIdentityPins,\n  securityIncidents,\n  ...containerSQLiteSchema,\n  documentContainerProjection,\n  documentMoveIntents,\n  documentIntentLinkTargets,\n  documentProjection,\n  documentPendingAttachments,\n  documentAttachmentBlobProjection,\n  documentOrphanBlobReclaims: documentOrphanBlobReclaims,\n  containerCreateIntents,\n  containerMoveIntents,\n  containerSyncWatermarks,\n  ...organizationReadModelSQLiteSchema,\n  ...organizationDataUsage.organizationDataUsageSQLiteSchema,\n  ...provisioningAttempt.organizationProvisioningAttemptSQLiteSchema,\n};\n"]}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,KAAK,EACL,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,EACJ,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,+BAA+B,EAAE,MAAM,wCAAwC,CAAC;AACzF,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,qBAAqB,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,mBAAmB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EACL,iCAAiC,EACjC,2BAA2B,GAC5B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EACL,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EACL,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,+BAA+B,EAC/B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAuB,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,4BAA4B,EAC5B,UAAU,EACV,wBAAwB,EACxB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,GACb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,+BAA+B,EAC/B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,CAAC;AAExE,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAClC,WAAW,EACX;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACvE,aAAa,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACtC,sBAAsB,EAAE,IAAI,CAAC,0BAA0B,CAAC;IACxD,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC;IAC5C,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC3C,kBAAkB,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACtE,iBAAiB,EAAE,OAAO,CAAC,qBAAqB,CAAC;IACjD,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,sBAAsB,EAAE,IAAI,CAAC,2BAA2B,CAAC;IACzD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,KAAK,CAAC,4BAA4B,CAAC;SAChC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC;SACnC,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,UAAU,cAAc,CAAC;CAC/C,CACF,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CACnD,8BAA8B,EAC9B;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;IACtD,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACrE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAC/C,0BAA0B,EAC1B;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;IACd,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,yBAAyB,EAAE,IAAI,CAAC,8BAA8B,CAAC;IAC/D,uBAAuB,EAAE,IAAI,CAAC,4BAA4B,CAAC;IAC3D,mBAAmB,EAAE,IAAI,CAAC,uBAAuB,CAAC;IAClD,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CACxD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IACnC,KAAK,CAAC,4CAA4C,CAAC,CAAC,EAAE,CACpD,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,SAAS,CAChB;IACD,WAAW,CAAC,wCAAwC,CAAC;SAClD,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;SAClB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,QAAQ,cAAc,CAAC;CAC7C,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAClD,6BAA6B,EAC7B;IACE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IACjC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC;QACT,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC;KAClE,CAAC;CACH,CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CACjD,4BAA4B,EAC5B;IACE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE;IAC5C,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,oBAAoB,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC,OAAO,EAAE;IAC9D,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE;IAClD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAChD,4BAA4B,EAC5B;IACE,mBAAmB,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE;IAC5D,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,aAAa,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAClD,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;IACtD,qBAAqB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,EAAE;IAChE,kBAAkB,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE;IACzD,sBAAsB,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC,OAAO,EAAE;IAClE,2BAA2B,EAAE,IAAI,CAC/B,+BAA+B,CAChC,CAAC,OAAO,EAAE;IACX,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;CAC7C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC;QACT,OAAO,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC;KACnD,CAAC;IACF,WAAW,CAAC,2DAA2D,CAAC,CAAC,EAAE,CACzE,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,qBAAqB,CAC5B;CACF,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CACpD,+BAA+B,EAC/B;IACE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAC5E,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAC3C,qBAAqB,EACrB;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IACzB,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7D,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IACvD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,KAAK,CAAC,mCAAmC,CAAC;SACvC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;SACrB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,WAAW,cAAc,CAAC;IAC/C,KAAK,CAAC,6CAA6C,CAAC;SACjD,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;SACxB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,WAAW,UAAU,CAAC;IAC3C,KAAK,CAAC,kCAAkC,CAAC;SACtC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;SACpB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,UAAU,cAAc,CAAC;CAC/C,CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAC/C,0BAA0B,EAC1B;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IACzB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;CAC7B,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACtD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAChD,2BAA2B,EAC3B;IACE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;CAC9B,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CACrE,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAkC;IAC3D;QACE,GAAG,oBAAoB,CAAC,SAAS,CAAC;QAClC,eAAe,EAAE;YACf,mBAAmB;YACnB,qBAAqB;YACrB,sBAAsB;YACtB,qBAAqB;YACrB,sBAAsB;YACtB,2BAA2B;SAC5B;KACF;IACD,oBAAoB,CAAC,0BAA0B,CAAC;IAChD;QACE,GAAG,oBAAoB,CAAC,sBAAsB,CAAC;QAC/C,eAAe,EAAE,CAAC,WAAW,CAAC;KAC/B;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAClE;QACE,GAAG,oBAAoB,CAAC,iBAAiB,CAAC;QAC1C,eAAe,EAAE,CAAC,qBAAqB,CAAC;KACzC;IACD;QACE,GAAG,oBAAoB,CAAC,4BAA4B,CAAC;QACrD,eAAe,EAAE,CAAC,qBAAqB,CAAC;KACzC;IACD,oBAAoB,CAAC,+BAA+B,CAAC;IACrD,oBAAoB,CAAC,4BAA4B,CAAC;IAClD,GAAG,2BAA2B;IAC9B,GAAG,8BAA8B;CAClC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAkC;IACnE,oBAAoB,CAAC,oBAAoB,CAAC;IAC1C,oBAAoB,CAAC,yBAAyB,CAAC;IAC/C,oBAAoB,CAAC,yBAAyB,CAAC;IAC/C,oBAAoB,CAAC,wBAAwB,CAAC;IAC9C,oBAAoB,CAAC,0BAA0B,CAAC;CACjD,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAkC;IACzE,oBAAoB,CAAC,uBAAuB,CAAC;CAC9C,CAAC;AAEF,MAAM,sBAAsB,GAAkC;IAC5D,qBAAqB;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAErD,MAAM,CAAC,MAAM,iCAAiC,GAC5C;IACE,oBAAoB,CAAC,2BAA2B,CAAC;IACjD;QACE,GAAG,oBAAoB,CAAC,+BAA+B,CAAC;QACxD,eAAe,EAAE,CAAC,QAAQ,CAAC;KAC5B;IACD,oBAAoB,CAAC,0BAA0B,CAAC;IAChD;QACE,GAAG,oBAAoB,CAAC,sBAAsB,CAAC;QAC/C,eAAe,EAAE,CAAC,iBAAiB,CAAC;KACrC;IACD,oBAAoB,CAAC,yBAAyB,CAAC;CAChD,CAAC;AAEJ,MAAM,CAAC,MAAM,iBAAiB,GAAkC;IAC9D,oBAAoB,CAAC,YAAY,CAAC;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAkC;IAC1E,GAAG,iBAAiB;IACpB,oBAAoB,CAAC,yBAAyB,CAAC;CAChD,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAkC;IACrE,oBAAoB,CAAC,kBAAkB,CAAC;IACxC,oBAAoB,CAAC,sBAAsB,CAAC;IAC5C;QACE,GAAG,oBAAoB,CAAC,0BAA0B,CAAC;QACnD,eAAe,EAAE,CAAC,gBAAgB,CAAC;KACpC;IACD;QACE,GAAG,oBAAoB,CAAC,gCAAgC,CAAC;QACzD,eAAe,EAAE,CAAC,gBAAgB,CAAC;KACpC;IACD,8BAA8B;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAkC;IACzE;QACE,GAAG,oBAAoB,CAAC,uBAAuB,CAAC;QAChD,eAAe,EAAE,CAAC,YAAY,CAAC;KAChC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAkC;IAC5D,GAAG,8BAA8B;IACjC,GAAG,cAAc;IACjB,GAAG,qBAAqB;IACxB,GAAG,sBAAsB;IACzB,GAAG,4BAA4B;IAC/B,GAAG,4BAA4B;IAC/B,GAAG,sBAAsB;IACzB,GAAG,eAAe;IAClB,GAAG,iCAAiC;IACpC,GAAG,6BAA6B;IAChC,GAAG,wBAAwB;IAC3B,GAAG,4BAA4B;IAC/B,GAAG,2BAA2B;IAC9B,GAAG,qBAAqB,CAAC,2BAA2B;IACpD,GAAG,mBAAmB,CAAC,qCAAqC;CAC7D,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,8BAA8B;IAC9B,0BAA0B;IAC1B,2BAA2B;IAC3B,wBAAwB;IACxB,uBAAuB;IACvB,qBAAqB;IACrB,wBAAwB;IACxB,sBAAsB;IACtB,oBAAoB;IACpB,yBAAyB;IACzB,SAAS;IACT,iBAAiB;IACjB,4BAA4B;IAC5B,+BAA+B;IAC/B,4BAA4B;IAC5B,yBAAyB;IACzB,wBAAwB;IACxB,0BAA0B;IAC1B,6BAA6B;IAC7B,uBAAuB;IACvB,iBAAiB;IACjB,GAAG,qBAAqB;IACxB,2BAA2B;IAC3B,YAAY;IACZ,yBAAyB;IACzB,kBAAkB;IAClB,0BAA0B;IAC1B,gCAAgC;IAChC,0BAA0B,EAAE,0BAA0B;IACtD,uBAAuB;IACvB,GAAG,iCAAiC;IACpC,GAAG,qBAAqB,CAAC,iCAAiC;IAC1D,GAAG,mBAAmB,CAAC,2CAA2C;CACnE,CAAC","sourcesContent":["import { sql } from \"drizzle-orm\";\nimport {\n  index,\n  integer,\n  primaryKey,\n  sqliteTable,\n  text,\n  uniqueIndex,\n} from \"drizzle-orm/sqlite-core\";\nimport { containerDocumentTombstoneHolds } from \"./containerDocumentTombstoneHoldSchema\";\nimport {\n  containerSQLiteSchema,\n  containerTableSchemas,\n} from \"./containerSchema\";\nimport {\n  documentAttachmentBlobProjection,\n  documentPendingAttachments,\n} from \"./documentAttachmentSchema\";\nimport {\n  documentDiscoveryHeads,\n  documentDiscoverySequence,\n  pendingDocumentDiscoveries,\n} from \"./documentDiscoveryEvidenceSchema\";\nimport {\n  documentOrphanBlobReclaims,\n  documentOrphanBlobReclaimTable,\n} from \"./documentOrphanBlobReclaims\";\nimport { documentIntentLinkTargets } from \"./documentPlacementIntentSchema\";\nimport { localIntents } from \"./localIntentSchema\";\nimport * as organizationDataUsage from \"./organizationDataUsageSchema\";\nimport { organizationFounders } from \"./organizationFounderSchema\";\nimport * as provisioningAttempt from \"./organizationProvisioningAttemptSchema\";\nimport {\n  organizationReadModelSQLiteSchema,\n  organizationReadModelTables,\n} from \"./organizationReadModelTableRegistry\";\nimport { principalGrantRetirements } from \"./principalGrantRetirementSchema\";\nimport {\n  principalHistoryEntries,\n  principalHistoryEvidenceTables,\n  principalHistoryNodes,\n  principalHistoryPrefixes,\n} from \"./principalHistoryEvidenceSchema\";\nimport {\n  principalHistoryNodeReferences,\n  principalHistoryRootOwners,\n} from \"./principalHistoryNodeRetentionSchema\";\nimport { principalKeyEnvelopeArchive } from \"./principalHistoryRetentionSchema\";\nimport {\n  principalHistoryStages,\n  principalHistoryStageTables,\n} from \"./principalHistoryStageSchema\";\nimport {\n  principalMutationJournal,\n  principalMutationJournalTables,\n} from \"./principalMutationJournalSchema\";\nimport {\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyBundleReferences,\n  principalPolicyCheckpoints,\n  principalPolicyOrganizations,\n} from \"./principalPolicySchema\";\nimport {\n  securityIncidents,\n  securityIncidentTable,\n} from \"./securityIncidentSchema\";\nimport { defineSqlTableSchema, type SqlTableSchema } from \"./sqlTableSchema\";\nimport {\n  verifiedAccessManifestBundles,\n  verifiedManifestBundleTables,\n} from \"./verifiedManifestBundleSchema\";\n\nexport {\n  containerHydrationTombstones,\n  containers,\n  dormantContainerMetadata,\n  dormantMetadataSweepRequests,\n  supersededContainerBindings,\n} from \"./containerSchema\";\nexport {\n  documentAttachmentBlobProjection,\n  documentPendingAttachments,\n} from \"./documentAttachmentSchema\";\nexport {\n  inContainerIntentLanes,\n  inLocalIntentLane,\n  LOCAL_INTENT_LANES,\n  LOCAL_INTENT_SUBJECT,\n  localIntents,\n} from \"./localIntentSchema\";\nexport {\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyBundleReferences,\n  principalPolicyCheckpoints,\n  principalPolicyOrganizations,\n} from \"./principalPolicySchema\";\nexport { securityIncidents } from \"./securityIncidentSchema\";\nexport { containerDocumentTombstoneHolds, organizationReadModelTables };\n\nconst accessLevelColumn = \"effective_access_level\";\n\n/**\n * Durable Loro-backed document records shared by app features.\n *\n * This table stores encrypted document runtime state for multiple app domains.\n * `appKind` namespaces records for documents and container metadata. User-facing\n * list data is projected into feature-specific read models.\n *\n * Columns:\n * - `appKind`: Local domain namespace for the row, such as `documents` or\n *   `container-metadata`.\n * - `localId`: Stable local id inside `appKind`. It may be created before a\n *   server `documentId` exists.\n * - `documentId`: Server document id once the record is known remotely, or\n *   `null` while the document is local-only.\n * - `accessEpoch`: Latest access epoch persisted for the document. Defaults to\n *   the initial epoch.\n * - `accessStateHash`: Current document access/manifest state hash returned by\n *   sync, when known.\n * - `lastCommitLsn`: Last remote commit cursor applied to this local document.\n * - `documentManifestBundle`: Serialized document manifest bundle used for\n *   encrypted document sync.\n * - `contentKeyBundle`: Serialized content-key material needed to open the\n *   local document.\n * - `documentKekTargets`: Serialized KEK target state for document key wraps.\n * - `pendingBaseVersion`: Encoded oplog version through which every persisted\n *   op is already enqueued or synced. Persisted so a restart restores the\n *   outgoing-delta marker instead of re-seeding it past a device-first\n *   `deferRemoteSync` write's un-advanced op. `null` when unset.\n * - `snapshotEndVersion`: Encoded end version vector of the persisted content\n *   (which lives in the durable-history tables, never on this row), written on\n *   every content persist. Lets the pending-write queue's deferred-tail scan\n *   compare version coverage without loading content. Empty string when the\n *   document has never hydrated content, which readers treat as \"no deferred\n *   tail claimable\".\n * - `recoveryGeneration`: Atomic raw-history recovery writer fence.\n * - `recoveryDocumentId`: Former server id for cross-client post-purge recreation.\n * - `pullContinuation`: Durable progress for the next bounded remote pull.\n * - `syncFailureStatus`, `syncFailureMessage`, `syncFailureAttemptedAt`: The\n *   last terminal sync failure or quarantined incoming update for this scope.\n *   The durable write queue (queued rows of `documentHistoryUpdates`) has no\n *   status columns, so these let the write-queue view and footer explain why\n *   the document is blocked. `syncFailureMessage` is non-null exactly when a\n *   failure is recorded; a newer failure replaces the old, and a later fully\n *   validated sync pass, a remote reset, or the scope's teardown clears all\n *   three.\n * - `updatedAt`: Local timestamp for the last persisted runtime-state update.\n *\n * Indexes:\n * - `(appKind, localId)` is the primary key and scopes local document lookups.\n * - `(appKind, documentId) where documentId is not null` supports resolving a\n *   server document id back to the local row during discovery and relinking.\n */\nexport const documents = sqliteTable(\n  \"documents\",\n  {\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    documentId: text(\"document_id\"),\n    accessEpoch: integer(\"access_epoch\").notNull().default(1),\n    accessStateHash: text(\"access_state_hash\"),\n    effectiveAccessLevel: text(accessLevelColumn).notNull().default(\"read\"),\n    lastCommitLsn: text(\"last_commit_lsn\"),\n    documentManifestBundle: text(\"document_manifest_bundle\"),\n    contentKeyBundle: text(\"content_key_bundle\"),\n    documentKekTargets: text(\"document_kek_targets\"),\n    pendingBaseVersion: text(\"pending_base_version\"),\n    pullContinuation: text(\"pull_continuation\"),\n    recoveryGeneration: integer(\"recovery_generation\").notNull().default(0),\n    recoveryDocumentId: text(\"recovery_document_id\"),\n    snapshotEndVersion: text(\"snapshot_end_version\").notNull().default(\"\"),\n    syncFailureStatus: integer(\"sync_failure_status\"),\n    syncFailureMessage: text(\"sync_failure_message\"),\n    syncFailureAttemptedAt: text(\"sync_failure_attempted_at\"),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.appKind, table.localId] }),\n    index(\"documents_app_document_idx\")\n      .on(table.appKind, table.documentId)\n      .where(sql`${table.documentId} IS NOT NULL`),\n  ],\n);\n\n/**\n * Full-history persistence for local documents (checkpoint + tail) — the ONLY\n * durable content source. Record rows in `documents` carry runtime metadata\n * and the content frontier (`snapshotEndVersion`), never content. The\n * checkpoint holds a full-history snapshot refreshed only at compaction, and\n * the tail appends every update (local deltas and decrypted remote updates)\n * written since. Restore = import checkpoint + replay tail; compaction =\n * export full history from the live doc, replace the checkpoint, clear the\n * tail — all bounded and amortized. Container metadata stores its content (an\n * exported-updates blob) as its checkpoint row, with no tail.\n */\nexport const documentHistoryCheckpoints = sqliteTable(\n  \"document_history_checkpoints\",\n  {\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    snapshot: text(\"snapshot\").notNull(),\n    endVersionVector: text(\"end_version_vector\").notNull(),\n    revision: text(\"revision\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.appKind, table.localId] })],\n);\n\n/**\n * The local update log: one row per Loro update, serving as both the history\n * tail (restore = checkpoint + tail) and the outbound write queue.\n *\n * Every locally authored update is stored once. While it waits for sync it\n * carries an `updateId` (the id submitted to the server) and the version-vector\n * metadata the submission needs; settlement clears them, leaving the row as\n * ordinary tail history until compaction folds it into a checkpoint.\n *\n * Columns:\n * - `id`: Row id; tail compaction deletes by it.\n * - `appKind`, `localId`: Document scope matching `documents`.\n * - `updateData`: Serialized Loro update payload.\n * - `origin`: \"local\" (authored on this device) or \"remote\" (decrypted\n *   pulled update) for tail rows. Restores use it to advance the\n *   outgoing-delta marker across remote rows — their ops are already\n *   server-side — while a local row left behind by a crash stays below the\n *   marker so the next edit re-derives and sends it. \"outbox\" marks a queued\n *   update with no tail role (container metadata, whose content is its\n *   checkpoint, and full-state re-uploads after a remote reset); restores and\n *   compaction never see it and settlement deletes it.\n * - `createdAt`: Insertion timestamp; with `rowid`, deterministic replay order.\n * - `updateId`: Present exactly while the row is queued for sync; rekeyed\n *   after a lost acknowledgement poisons the submitted id.\n * - `partialStartVersionVector` / `partialEndVersionVector`: Version vectors\n *   around a queued partial update.\n * - `sourceVersionVector`: Present on a queued rotation baseline checkpoint.\n * - `rekeyCount`: Durable bound on rekeys of a queued row.\n *\n * Invariant: compaction never deletes a queued row, so a checkpoint can cover\n * a queued update's operations without removing it from the queue.\n */\nexport const documentHistoryUpdates = sqliteTable(\n  \"document_history_updates\",\n  {\n    id: text(\"id\"),\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    updateData: text(\"update_data\").notNull(),\n    origin: text(\"origin\").notNull(),\n    createdAt: text(\"created_at\").notNull(),\n    updateId: text(\"update_id\"),\n    partialStartVersionVector: text(\"partial_start_version_vector\"),\n    partialEndVersionVector: text(\"partial_end_version_vector\"),\n    sourceVersionVector: text(\"source_version_vector\"),\n    rekeyCount: integer(\"rekey_count\").notNull().default(0),\n  },\n  (table) => [\n    primaryKey({ columns: [table.id] }),\n    index(\"document_history_updates_scope_created_idx\").on(\n      table.appKind,\n      table.localId,\n      table.createdAt,\n    ),\n    uniqueIndex(\"document_history_updates_update_id_idx\")\n      .on(table.updateId)\n      .where(sql`${table.updateId} IS NOT NULL`),\n  ],\n);\n\n/**\n * Anti-rollback pin for verified access manifests.\n *\n * Records the highest access-manifest epoch this client has verified for each\n * object, so a later projection that serves an older epoch (rollback) or a\n * conflicting manifest at the same epoch (equivocation) is detected before any\n * key is unwrapped. Updated monotonically after a projection verifies cleanly.\n *\n * Columns:\n * - `objectKind`: Access object kind (`container`, `document`, ...).\n * - `organizationId`: Organization boundary that owns the object.\n * - `objectId`: Stable object id.\n * - `epoch`: Highest verified manifest epoch.\n * - `manifestHash`: Manifest hash pinned at that epoch.\n * - `updatedAt`: Local timestamp for the pin.\n *\n * Indexes:\n * - `(objectKind, organizationId, objectId)` is the primary key and gives one\n *   pin per object.\n */\nexport const accessManifestCheckpoints = sqliteTable(\n  \"access_manifest_checkpoints\",\n  {\n    objectKind: text(\"object_kind\").notNull(),\n    organizationId: text(\"organization_id\").notNull(),\n    objectId: text(\"object_id\").notNull(),\n    epoch: integer(\"epoch\").notNull(),\n    manifestHash: text(\"manifest_hash\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({\n      columns: [table.objectKind, table.organizationId, table.objectId],\n    }),\n  ],\n);\n\n/**\n * Durable terminal pins for documents whose signed purge proof was verified.\n * These survive remote-state resets so a dishonest API cannot later replay the\n * pre-purge writer projection and resurrect locally deleted content.\n */\nexport const documentPurgeCheckpoints = sqliteTable(\n  \"document_purge_checkpoints\",\n  {\n    documentId: text(\"document_id\").primaryKey(),\n    organizationId: text(\"organization_id\").notNull(),\n    documentManifestHash: text(\"document_manifest_hash\").notNull(),\n    purgeEventHash: text(\"purge_event_hash\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n);\n\n/**\n * Durable trust-on-first-use pins for remote user identity bundles.\n *\n * The first validated identity observed for a user in a configured API trust\n * domain is inserted once. Later observations must match every suite, public\n * key, and fingerprint exactly; the persistence adapter never updates these\n * rows. `firstSeenAt` records when the local trust decision was made and is\n * likewise immutable.\n *\n * Indexes:\n * - `(identityTrustDomain, userId)` is the primary key and scopes a user pin to\n *   the host-configured API authority that supplied it.\n * - `(identityTrustDomain, signingKeyFingerprint)` binds the reverse identity\n *   mapping durably, including across session recreation. There is no\n *   migration for a table that already violates it. Earlier builds pinned a\n *   registration's user id before the server confirmed it, so a device that\n *   ran one may hold two users on one key; deployments are greenfield, and\n *   such a device clears its local data, which recreates this table empty. A\n *   device that used an environment before a reset does the same (see\n *   docs/developer/greenfield-reset.md).\n */\nexport const trustedUserIdentityPins = sqliteTable(\n  \"trusted_user_identity_pins\",\n  {\n    identityTrustDomain: text(\"identity_trust_domain\").notNull(),\n    userId: text(\"user_id\").notNull(),\n    formatVersion: integer(\"format_version\").notNull(),\n    signingSuite: text(\"signing_suite\").notNull(),\n    signingPublicKey: text(\"signing_public_key\").notNull(),\n    signingKeyFingerprint: text(\"signing_key_fingerprint\").notNull(),\n    encapsulationSuite: text(\"encapsulation_suite\").notNull(),\n    encapsulationPublicKey: text(\"encapsulation_public_key\").notNull(),\n    encapsulationKeyFingerprint: text(\n      \"encapsulation_key_fingerprint\",\n    ).notNull(),\n    firstSeenAt: text(\"first_seen_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({\n      columns: [table.identityTrustDomain, table.userId],\n    }),\n    uniqueIndex(\"trusted_user_identity_pins_domain_signing_fingerprint_idx\").on(\n      table.identityTrustDomain,\n      table.signingKeyFingerprint,\n    ),\n  ],\n);\n\n/**\n * Local many-to-many projection between documents and containers.\n *\n * The document summary row stores one selected `containerId` for primary list\n * placement, while this table keeps the full set of linked containers returned\n * by container/document sync. Removing a container deletes its links and may\n * repair affected document summary rows to point at another remaining link.\n *\n * Columns:\n * - `documentId`: Server document id whose container links are projected.\n * - `containerId`: Linked container id.\n * - `updatedAt`: Local timestamp for the last replacement of the link set.\n *\n * Indexes:\n * - `(documentId, containerId)` is the primary key and prevents duplicate\n *   links for the same document/container pair.\n */\nexport const documentContainerProjection = sqliteTable(\n  \"document_container_projection\",\n  {\n    documentId: text(\"document_id\").notNull(),\n    containerId: text(\"container_id\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.documentId, table.containerId] })],\n);\n\n/**\n * Queryable document summary and detail projection.\n *\n * The durable Loro state lives in `documents`. This table stores the fields the\n * app needs for document lists, summaries, and fast detail hydration without\n * opening the full Loro snapshot on every read.\n *\n * Columns:\n * - `localId`: Stable local document id. This joins to `documents.localId` for\n *   rows where `documents.appKind = documents`.\n * - `documentId`: Server document id when known.\n * - `containerId`: Selected container for primary document placement, or\n *   `null` if the document is not currently linked to a visible container.\n * - `organizationId`: Last-known owning organization. Stamped from the\n *   container row when the document is detached because its container was\n *   removed locally (e.g. access to a shared org was revoked and the container\n *   tombstoned), so pending writes keep their org attribution after the\n *   `containers` join source disappears. Read as a fallback only — a live\n *   container join always wins.\n * - `documentKind`: Stored document kind. Defaults to `note`.\n * - `title`: Plain projected title. Defaults to the note fallback title.\n * - `updatedAt`: Timestamp used for document list ordering.\n *\n * The projected full text lives in `documentProjectionText`, keyed by the same\n * `localId`. Keeping it out of this row keeps list/window scans narrow: the\n * sidebar and summary queries read titles and placement from rows whose size\n * does not grow with document content.\n *\n * Indexes:\n * - `localId` is the primary key for document projection lookups.\n * - `(containerId) where containerId is not null` serves container-scoped\n *   window/count scans without walking the whole table.\n * - `(organizationId) where containerId is null` serves the orphan-recovery\n *   existence and window scans.\n * - `(documentId) where documentId is not null` serves the linked-placement\n *   join from `documentContainerProjection` and server-id lookups.\n */\nexport const documentProjection = sqliteTable(\n  \"document_projection\",\n  {\n    localId: text(\"local_id\"),\n    documentId: text(\"document_id\"),\n    containerId: text(\"container_id\"),\n    organizationId: text(\"organization_id\"),\n    documentKind: text(\"document_kind\").notNull().default(\"note\"),\n    title: text(\"title\").notNull().default(\"Untitled note\"),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.localId] }),\n    index(\"document_projection_container_idx\")\n      .on(table.containerId)\n      .where(sql`${table.containerId} IS NOT NULL`),\n    index(\"document_projection_orphan_organization_idx\")\n      .on(table.organizationId)\n      .where(sql`${table.containerId} IS NULL`),\n    index(\"document_projection_document_idx\")\n      .on(table.documentId)\n      .where(sql`${table.documentId} IS NOT NULL`),\n  ],\n);\n\n/**\n * Projected document text, split from `documentProjection` so content size\n * never bloats the rows that list/window queries scan. Loaded only by detail\n * reads (`loadDocument`) and the save-timestamp change check.\n *\n * Columns:\n * - `localId`: Stable local document id, matching `documentProjection.localId`.\n * - `text`: Plain projected text used to rebuild summaries/details.\n */\nexport const documentProjectionText = sqliteTable(\n  \"document_projection_text\",\n  {\n    localId: text(\"local_id\"),\n    text: text(\"text\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.localId] })],\n);\n\n/**\n * Per-lane sync state for container data: the server cursor and the local\n * freshness marker share one row per lane.\n *\n * Container sync is split into lanes, such as a parent-container child lane or\n * a container-document membership lane. The cursor lets the next request\n * resume without replaying the entire tree. The freshness marker records the\n * last fully drained check independently of the cursor: empty server\n * responses do not always carry a new watermark, but startup still needs to\n * know that it recently checked the lane before polling again.\n *\n * Columns:\n * - `laneKind`: Sync lane category, such as `container_parent` or\n *   `container_documents`.\n * - `laneId`: Lane identity. Root parent sync uses `root`, child sync uses a\n *   parent-prefixed container id, and document lanes use the container id.\n * - `watermarkUpdatedAt`: Server `updatedAt` value for the stored watermark;\n *   null until a watermark is saved.\n * - `watermarkId`: Server id tie-breaker for the stored watermark; null\n *   exactly when `watermarkUpdatedAt` is.\n * - `updatedAt`: Local timestamp for when the cursor was saved.\n * - `checkedAt`: Local timestamp for the most recent fully drained lane check;\n *   null until one completes.\n *\n * Indexes:\n * - `(laneKind, laneId)` is the primary key and stores one row per lane.\n */\nexport const containerSyncWatermarks = sqliteTable(\n  \"container_sync_watermarks\",\n  {\n    laneKind: text(\"lane_kind\").notNull(),\n    laneId: text(\"lane_id\").notNull(),\n    watermarkUpdatedAt: text(\"watermark_updated_at\"),\n    watermarkId: text(\"watermark_id\"),\n    updatedAt: text(\"updated_at\"),\n    checkedAt: text(\"checked_at\"),\n  },\n  (table) => [primaryKey({ columns: [table.laneKind, table.laneId] })],\n);\n\nexport const documentTables: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(documents),\n    requiredColumns: [\n      \"pull_continuation\",\n      \"recovery_generation\",\n      \"recovery_document_id\",\n      \"sync_failure_status\",\n      \"sync_failure_message\",\n      \"sync_failure_attempted_at\",\n    ],\n  },\n  defineSqlTableSchema(documentHistoryCheckpoints),\n  {\n    ...defineSqlTableSchema(documentHistoryUpdates),\n    requiredColumns: [\"update_id\"],\n  },\n];\n\nexport const principalPolicyTables: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(principalPolicies),\n    requiredColumns: [\"current_grants_json\"],\n  },\n  {\n    ...defineSqlTableSchema(principalPolicyBundleHistory),\n    requiredColumns: [\"current_grants_json\"],\n  },\n  defineSqlTableSchema(principalPolicyBundleReferences),\n  defineSqlTableSchema(principalPolicyOrganizations),\n  ...principalHistoryStageTables,\n  ...principalHistoryEvidenceTables,\n];\n\nexport const keyingCheckpointTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(organizationFounders),\n  defineSqlTableSchema(accessManifestCheckpoints),\n  defineSqlTableSchema(principalGrantRetirements),\n  defineSqlTableSchema(documentPurgeCheckpoints),\n  defineSqlTableSchema(principalPolicyCheckpoints),\n];\n\nexport const trustedUserIdentityPinTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(trustedUserIdentityPins),\n];\n\nconst securityIncidentTables: ReadonlyArray<SqlTableSchema> = [\n  securityIncidentTable,\n];\n\nexport const containerTables = containerTableSchemas;\n\nexport const documentContainerProjectionTables: ReadonlyArray<SqlTableSchema> =\n  [\n    defineSqlTableSchema(documentContainerProjection),\n    {\n      ...defineSqlTableSchema(containerDocumentTombstoneHolds),\n      requiredColumns: [\"hidden\"],\n    },\n    defineSqlTableSchema(pendingDocumentDiscoveries),\n    {\n      ...defineSqlTableSchema(documentDiscoveryHeads),\n      requiredColumns: [\"organization_id\"],\n    },\n    defineSqlTableSchema(documentDiscoverySequence),\n  ];\n\nexport const localIntentTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(localIntents),\n];\n\nexport const documentPlacementIntentTables: ReadonlyArray<SqlTableSchema> = [\n  ...localIntentTables,\n  defineSqlTableSchema(documentIntentLinkTargets),\n];\n\nexport const documentProjectionTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(documentProjection),\n  defineSqlTableSchema(documentProjectionText),\n  {\n    ...defineSqlTableSchema(documentPendingAttachments),\n    requiredColumns: [\"content_sha256\"],\n  },\n  {\n    ...defineSqlTableSchema(documentAttachmentBlobProjection),\n    requiredColumns: [\"content_sha256\"],\n  },\n  documentOrphanBlobReclaimTable,\n];\n\nexport const containerSyncWatermarkTables: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(containerSyncWatermarks),\n    requiredColumns: [\"checked_at\"],\n  },\n];\n\nexport const clientSqlTables: ReadonlyArray<SqlTableSchema> = [\n  ...principalMutationJournalTables,\n  ...documentTables,\n  ...principalPolicyTables,\n  ...keyingCheckpointTables,\n  ...verifiedManifestBundleTables,\n  ...trustedUserIdentityPinTables,\n  ...securityIncidentTables,\n  ...containerTables,\n  ...documentContainerProjectionTables,\n  ...documentPlacementIntentTables,\n  ...documentProjectionTables,\n  ...containerSyncWatermarkTables,\n  ...organizationReadModelTables,\n  ...organizationDataUsage.organizationDataUsageTables,\n  ...provisioningAttempt.organizationProvisioningAttemptTables,\n];\n\nexport const clientSQLiteSchema = {\n  principalHistoryNodeReferences,\n  principalHistoryRootOwners,\n  principalKeyEnvelopeArchive,\n  principalMutationJournal,\n  principalHistoryEntries,\n  principalHistoryNodes,\n  principalHistoryPrefixes,\n  principalHistoryStages,\n  organizationFounders,\n  principalGrantRetirements,\n  documents,\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyBundleReferences,\n  principalPolicyOrganizations,\n  accessManifestCheckpoints,\n  documentPurgeCheckpoints,\n  principalPolicyCheckpoints,\n  verifiedAccessManifestBundles,\n  trustedUserIdentityPins,\n  securityIncidents,\n  ...containerSQLiteSchema,\n  documentContainerProjection,\n  localIntents,\n  documentIntentLinkTargets,\n  documentProjection,\n  documentPendingAttachments,\n  documentAttachmentBlobProjection,\n  documentOrphanBlobReclaims: documentOrphanBlobReclaims,\n  containerSyncWatermarks,\n  ...organizationReadModelSQLiteSchema,\n  ...organizationDataUsage.organizationDataUsageSQLiteSchema,\n  ...provisioningAttempt.organizationProvisioningAttemptSQLiteSchema,\n};\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tearleads/client-sdk",
-  "version": "0.1.44",
+  "version": "0.1.45",
   "description": "React-free Tearleads client runtime: local SQLite persistence, keys, sync, encrypted blobs, and domain workflows.",
   "license": "UNLICENSED",
   "repository": {

package/workflows/container-contents/documentPriming.js

@@ -1,4 +1,4 @@
-import { documentContainerProjectionTables, documentMoveIntentTables, documentProjectionTables, documentTables, } from "../../data/sqlite/schema.js";
+import { documentContainerProjectionTables, documentPlacementIntentTables, documentProjectionTables, documentTables, LOCAL_INTENT_LANES, } from "../../data/sqlite/schema.js";
 import { ensureSqlTables } from "../../data/sqlite/sqlSchema.js";
 import { requestDocumentRuntimeTargetSync } from "./documentRuntimeTargetSync.js";
 import { listDocumentRuntimeTargetsForContainerSubtreeFromRuntime } from "./documentSubtreeQueries.js";
@@ -30,12 +30,7 @@ const PENDING_PRIME_LOCAL_ID_SQL = `
           AND pending.local_id = stored.local_id
           AND pending.update_id IS NOT NULL
       )
-      OR EXISTS (
-        SELECT 1
-        FROM document_sync_failures failure
-        WHERE failure.app_kind = 'documents'
-          AND failure.local_id = stored.local_id
-      )
+      OR stored.sync_failure_message IS NOT NULL
       OR EXISTS (
         SELECT 1
         FROM document_pending_attachments attachment
@@ -55,14 +50,15 @@ const STARTUP_DOCUMENT_SYNC_WORK_SQL = `
   WHERE EXISTS (${PENDING_PRIME_LOCAL_ID_SQL})
     OR EXISTS (
       SELECT 1
-      FROM document_move_intents intent
+      FROM local_intents intent
       -- Blocked and parked denied moves count: blocked intents replay on
       -- every scan (the blocking condition can heal after hydration), and
       -- the once-per-launch replay makes denied moves retriable — so a
       -- relaunch whose only durable work is either kind must still schedule
       -- the structural pass that re-attempts it (row 7). Unavailable moves
       -- are excluded: no pass ever replays them (#2278 #4).
-      WHERE intent.sync_status IN ('pending', 'blocked', 'denied')
+      WHERE intent.lane = '${LOCAL_INTENT_LANES.documentPlacement}'
+        AND intent.sync_status IN ('pending', 'blocked', 'denied')
     )
   LIMIT 1
 `;
@@ -73,7 +69,7 @@ export async function hasStartupDocumentSyncWork(runtimeOrExecSql) {
     await ensureSqlTables(execSql, [
         ...documentTables,
         ...documentProjectionTables,
-        ...documentMoveIntentTables,
+        ...documentPlacementIntentTables,
     ]);
     const rows = await execSql(STARTUP_DOCUMENT_SYNC_WORK_SQL);
     return rows.length > 0;

package/workflows/container-contents/documentPriming.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentPriming.js","sourceRoot":"","sources":["documentPriming.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,wBAAwB,EACxB,wBAAwB,EACxB,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAO9D,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,wDAAwD,EAAE,MAAM,0BAA0B,CAAC;AACpG,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAc/B,8EAA8E;AAC9E,2EAA2E;AAC3E,gEAAgE;AAChE,0EAA0E;AAC1E,uEAAuE;AACvE,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,wDAAwD;AACxD,8EAA8E;AAC9E,wEAAwE;AACxE,MAAM,0BAA0B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BlC,CAAC;AAEF,MAAM,oCAAoC,GAAG;;UAEnC,0BAA0B;;CAEnC,CAAC;AAEF,6EAA6E;AAC7E,wEAAwE;AACxE,MAAM,8BAA8B,GAAG;;kBAErB,0BAA0B;;;;;;;;;;;;;CAa3C,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,gBAEuD;IAEvD,MAAM,OAAO,GACX,OAAO,gBAAgB,KAAK,UAAU;QACpC,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC;IACrC,MAAM,eAAe,CAAC,OAAO,EAAE;QAC7B,GAAG,cAAc;QACjB,GAAG,wBAAwB;QAC3B,GAAG,wBAAwB;KAC5B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,8CAA8C,CAC3D,OAAwC;IAExC,MAAM,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE;QAC3C,GAAG,cAAc;QACjB,GAAG,wBAAwB;KAC5B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CACtC,oCAAoC,CACrC,CAAC;IAEF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,yBAAyB;AACzB,KAAK,UAAU,oCAAoC,CACjD,OAAwC;IAExC,MAAM,UAAU,GACd,MAAM,8CAA8C,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,yBAAyB,GAAG;;;;;;UAMxB,2BAA2B,CAAC;IAChC,aAAa,EAAE,oBAAoB;IACnC,eAAe,EAAE,YAAY;CAC9B,CAAC;;CAEL,CAAC;AAEF;;;;GAIG;AACH,KAAK,UAAU,gCAAgC,CAC7C,OAAwC,EACxC,cAAsB;IAEtB,MAAM,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE;QAC3C,GAAG,cAAc;QACjB,GAAG,wBAAwB;QAC3B,GAAG,iCAAiC;KACrC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CACtC,yBAAyB,EACzB,4BAA4B,CAAC,cAAc,CAAC,CAC7C,CAAC;IACF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACnD,OAAO;YACL;gBACE,UAAU,EAAE,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;gBAC9D,OAAO;gBACP,kBAAkB,EAAE,IAAI;aACzB;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAW,KAOjE;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,CAAC,CAAC;IAC3B,MAAM,CAAC,OAAO,EAAE,qBAAqB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,wDAAwD,CAAC;YACvD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,KAAK,CAAC,qBAAqB;YACzB,oCAAoC,CAAC,KAAK,CAAC,OAAO,CAAC;KACtD,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC;QACpD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS;QACT,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACjC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAC1C;KACF,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAW,KAc5D;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,cAAc,EAAE,CAAC;YACjB,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,CAAC;YACZ,eAAe,EAAE,CAAC;SACnB,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,8CAA8C,CACrE,KAAK,CAAC,OAAO,CACd,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,cAAc,EAAE,UAAU,CAAC,MAAM;YACjC,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,CAAC;YACZ,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CACxE,CAAC,cAAc,EAAE,EAAE,CACjB,cAAc,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;QACxC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,CAAC,CAAC,EAAE,CACT,CAAC;IACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CACjD,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE;YAAE,MAAM;QACxB,MAAM,OAAO,GACX,MAAM,wDAAwD,CAAC;YAC7D,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe;YACf,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACL,IAAI,CAAC,SAAS,EAAE;YAAE,MAAM;QACxB,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC;YACpD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS;YACT,OAAO,EAAE,OAAO,CAAC,MAAM,CACrB,CAAC,MAAM,EAAE,EAAE,CACT,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;gBACpC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CACtC;SACF,CAAC,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,CACpB,SAAS,EAAE,IAAI,KAAK,CAAC,cAAc;QACjC,CAAC,CAAC,MAAM,gCAAgC,CACpC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,CACrB;QACH,CAAC,CAAC,EAAE,CACP,CAAC,MAAM,CACN,CAAC,MAAM,EAAE,EAAE,CACT,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QACpC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CACtC,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,gCAAgC,CAAC;QAC1D,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS;QACT,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;KAC1C,CAAC,CAAC;IACH,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO;QACL,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,iBAAiB,EAAE,YAAY,CAAC,IAAI;QACpC,WAAW,EAAE,cAAc,CAAC,IAAI;QAChC,SAAS,EAAE,gBAAgB,CAAC,MAAM;QAClC,eAAe,EAAE,UAAU,CAAC,MAAM,CAChC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CACtD,CAAC,MAAM;KACT,CAAC;AACJ,CAAC","sourcesContent":["import {\n  documentContainerProjectionTables,\n  documentMoveIntentTables,\n  documentProjectionTables,\n  documentTables,\n} from \"../../data/sqlite/schema\";\nimport { ensureSqlTables } from \"../../data/sqlite/sqlSchema\";\nimport type {\n  ContainerContentsContainerSubtreeState,\n  ContainerContentsDocumentRuntimeTarget,\n  ContainerDocumentPrimeHost,\n  ContainerDocumentQueriesRuntime,\n} from \"./documentQueries/types\";\nimport { requestDocumentRuntimeTargetSync } from \"./documentRuntimeTargetSync\";\nimport { listDocumentRuntimeTargetsForContainerSubtreeFromRuntime } from \"./documentSubtreeQueries\";\nimport {\n  getOrphanedDocumentQueryBind,\n  getOrphanedDocumentWhereSql,\n} from \"./orphanedDocumentSql\";\n\ninterface PrimeRequiredDocumentCandidate {\n  readonly localId: string;\n}\n\ninterface LoadedRootDocumentPrimeResult {\n  readonly candidateCount: number;\n  readonly orphanPrimedCount: number;\n  readonly primedCount: number;\n  readonly rootCount: number;\n  readonly unroutableCount: number;\n}\n\n// Documents that still NEED a store opened at prime time: local-only creates,\n// queued outbound updates/attachments, an outgoing-delta marker behind the\n// stored content frontier (a deferred tail; encoding inequality\n// over-approximates, which only re-primes a store the old behavior always\n// primed), a never-hydrated document (a freshly discovered share whose\n// content pull the primed lane performs), or a document with a recorded sync\n// failure (a refused revalidation leaves no queued work, so the failure row\n// is the only ticket that re-drives the store — the retry that clears on the\n// next clean pass). Fully-synced hydrated documents are\n// deliberately absent: priming exists to re-drive durable work, and opening a\n// store per settled document is what made a 1000-document boot a storm.\nconst PENDING_PRIME_LOCAL_ID_SQL = `\n  SELECT stored.local_id AS local_id\n  FROM documents stored\n  WHERE stored.app_kind = 'documents'\n    AND (\n      stored.document_id IS NULL\n      OR stored.snapshot_end_version = ''\n      OR stored.pull_continuation IS NOT NULL\n      OR COALESCE(stored.pending_base_version, '') <> stored.snapshot_end_version\n      OR EXISTS (\n        SELECT 1\n        FROM document_history_updates pending\n        WHERE pending.app_kind = 'documents'\n          AND pending.local_id = stored.local_id\n          AND pending.update_id IS NOT NULL\n      )\n      OR EXISTS (\n        SELECT 1\n        FROM document_sync_failures failure\n        WHERE failure.app_kind = 'documents'\n          AND failure.local_id = stored.local_id\n      )\n      OR EXISTS (\n        SELECT 1\n        FROM document_pending_attachments attachment\n        WHERE attachment.local_id = stored.local_id\n      )\n    )\n`;\n\nconst PENDING_PRIME_DOCUMENT_CANDIDATE_SQL = `\n  SELECT pending.local_id AS local_id\n  FROM (${PENDING_PRIME_LOCAL_ID_SQL}) pending\n  ORDER BY pending.local_id ASC\n`;\n\n// The structural startup probe and the priming worker share the same durable\n// predicate so they cannot disagree about what counts as document work.\nconst STARTUP_DOCUMENT_SYNC_WORK_SQL = `\n  SELECT 1 AS present\n  WHERE EXISTS (${PENDING_PRIME_LOCAL_ID_SQL})\n    OR EXISTS (\n      SELECT 1\n      FROM document_move_intents intent\n      -- Blocked and parked denied moves count: blocked intents replay on\n      -- every scan (the blocking condition can heal after hydration), and\n      -- the once-per-launch replay makes denied moves retriable — so a\n      -- relaunch whose only durable work is either kind must still schedule\n      -- the structural pass that re-attempts it (row 7). Unavailable moves\n      -- are excluded: no pass ever replays them (#2278 #4).\n      WHERE intent.sync_status IN ('pending', 'blocked', 'denied')\n    )\n  LIMIT 1\n`;\n\nexport async function hasStartupDocumentSyncWork(\n  runtimeOrExecSql:\n    | ContainerDocumentQueriesRuntime\n    | ContainerDocumentQueriesRuntime[\"infra\"][\"execSql\"],\n): Promise<boolean> {\n  const execSql =\n    typeof runtimeOrExecSql === \"function\"\n      ? runtimeOrExecSql\n      : runtimeOrExecSql.infra.execSql;\n  await ensureSqlTables(execSql, [\n    ...documentTables,\n    ...documentProjectionTables,\n    ...documentMoveIntentTables,\n  ]);\n  const rows = await execSql(STARTUP_DOCUMENT_SYNC_WORK_SQL);\n  return rows.length > 0;\n}\n\nasync function listPrimeRequiredDocumentCandidatesFromRuntime(\n  runtime: ContainerDocumentQueriesRuntime,\n): Promise<PrimeRequiredDocumentCandidate[]> {\n  await ensureSqlTables(runtime.infra.execSql, [\n    ...documentTables,\n    ...documentProjectionTables,\n  ]);\n  const rows = await runtime.infra.execSql(\n    PENDING_PRIME_DOCUMENT_CANDIDATE_SQL,\n  );\n\n  return rows.flatMap((row) => {\n    const localId = Reflect.get(row, \"local_id\");\n    if (typeof localId !== \"string\") {\n      return [];\n    }\n    return [{ localId }];\n  });\n}\n\n// A row with content but a NULL outgoing-delta marker is deliberately treated\n// as unsettled: the store persist path always sets the marker, so over-priming\n// is the safe direction.\nasync function listPrimeRequiredLocalIdsFromRuntime(\n  runtime: ContainerDocumentQueriesRuntime,\n): Promise<ReadonlySet<string>> {\n  const candidates =\n    await listPrimeRequiredDocumentCandidatesFromRuntime(runtime);\n  return new Set(candidates.map((candidate) => candidate.localId));\n}\n\n/**\n * Last-link orphans (docs/sync-edge-cases.md row 3): the container cascade\n * nulled their projection container and dropped their link rows, so no\n * subtree listing can route them. Placements held for unsigned tombstones\n * also qualify when every link is hidden; their link rows remain intact.\n * These documents are primed with a null container\n * scope instead — the documents runtime accepts one, and the document's own\n * sync pass then resolves its fate against the server: 403 parks it (row 8),\n * a coded 404 destroys it (row 1), and a local-only orphan's create attempt\n * records a terminal failure row. Hidden document kinds stay excluded, and\n * dangling non-null projections (a container row merely missing locally)\n * stay with stale-root recovery, exactly as before.\n *\n * Organization neutrality: the null scope changes only the runtime's\n * containerId — auth, crypto, and organization plumbing are identical to\n * every container-scoped runtime this store already primes with, the sync\n * pass derives billing and keying organizations from the document's own\n * plan and manifest, and a cross-organization author fails closed at the\n * sync layer's identity guard before anything is signed.\n */\nconst ORPHANED_PRIME_TARGET_SQL = `\n  SELECT stored.local_id AS local_id, stored.document_id AS document_id\n  FROM documents stored\n  INNER JOIN document_projection projection\n    ON projection.local_id = stored.local_id\n  WHERE stored.app_kind = 'documents'\n    AND ${getOrphanedDocumentWhereSql({\n      documentIdSql: \"stored.document_id\",\n      projectionAlias: \"projection\",\n    })}\n  ORDER BY stored.local_id ASC\n`;\n\n/**\n * Unattributed rows (empty/NULL organization) are always included: they are\n * device-first documents created before authentication, which belong to this\n * device's sole user and adopt the active organization when they create.\n */\nasync function listOrphanedDocumentPrimeTargets(\n  runtime: ContainerDocumentQueriesRuntime,\n  organizationId: string,\n): Promise<ContainerContentsDocumentRuntimeTarget[]> {\n  await ensureSqlTables(runtime.infra.execSql, [\n    ...documentTables,\n    ...documentProjectionTables,\n    ...documentContainerProjectionTables,\n  ]);\n  const rows = await runtime.infra.execSql(\n    ORPHANED_PRIME_TARGET_SQL,\n    getOrphanedDocumentQueryBind(organizationId),\n  );\n  return rows.flatMap((row) => {\n    const localId = Reflect.get(row, \"local_id\");\n    if (typeof localId !== \"string\") {\n      return [];\n    }\n    const documentId = Reflect.get(row, \"document_id\");\n    return [\n      {\n        documentId: typeof documentId === \"string\" ? documentId : null,\n        localId,\n        runtimeContainerId: null,\n      },\n    ];\n  });\n}\n\nexport async function primeDocumentsForContainerSubtree<TRuntime>(input: {\n  containersById: ReadonlyMap<string, ContainerContentsContainerSubtreeState>;\n  host: ContainerDocumentPrimeHost<TRuntime>;\n  isCurrent?: (() => boolean) | undefined;\n  primeRequiredLocalIds?: ReadonlySet<string>;\n  rootContainerId: string;\n  runtime: ContainerDocumentQueriesRuntime;\n}): Promise<number> {\n  const isCurrent = input.isCurrent ?? (() => true);\n  if (!isCurrent()) return 0;\n  const [targets, primeRequiredLocalIds] = await Promise.all([\n    listDocumentRuntimeTargetsForContainerSubtreeFromRuntime({\n      containersById: input.containersById,\n      rootContainerId: input.rootContainerId,\n      runtime: input.runtime,\n    }),\n    input.primeRequiredLocalIds ??\n      listPrimeRequiredLocalIdsFromRuntime(input.runtime),\n  ]);\n  if (!isCurrent()) return 0;\n  const primed = await requestDocumentRuntimeTargetSync({\n    host: input.host,\n    isCurrent,\n    targets: targets.filter((target) =>\n      primeRequiredLocalIds.has(target.localId),\n    ),\n  });\n  return primed.size;\n}\n\nexport async function primeDocumentsForLoadedRoots<TRuntime>(input: {\n  containersById: ReadonlyMap<string, ContainerContentsContainerSubtreeState>;\n  host: ContainerDocumentPrimeHost<TRuntime>;\n  isCurrent?: (() => boolean) | undefined;\n  /**\n   * The store scope's organization. Orphan priming is bounded to it: each\n   * organization-scoped store resolves only its own orphans, matching the\n   * per-organization invariant subtree routing provides implicitly (a pass\n   * signed under another organization would fail the sync identity guard\n   * instead of resolving). Absent — unauthenticated or scope-less callers —\n   * orphan priming is skipped entirely.\n   */\n  organizationId?: string | null;\n  runtime: ContainerDocumentQueriesRuntime;\n}): Promise<LoadedRootDocumentPrimeResult> {\n  const isCurrent = input.isCurrent ?? (() => true);\n  if (!isCurrent()) {\n    return {\n      candidateCount: 0,\n      orphanPrimedCount: 0,\n      primedCount: 0,\n      rootCount: 0,\n      unroutableCount: 0,\n    };\n  }\n  const candidates = await listPrimeRequiredDocumentCandidatesFromRuntime(\n    input.runtime,\n  );\n  if (!isCurrent()) {\n    return {\n      candidateCount: candidates.length,\n      orphanPrimedCount: 0,\n      primedCount: 0,\n      rootCount: 0,\n      unroutableCount: candidates.length,\n    };\n  }\n  const rootContainerIds = Array.from(input.containersById.values()).flatMap(\n    (containerState) =>\n      containerState.container.parentId === null\n        ? [containerState.container.id]\n        : [],\n  );\n  const requiredLocalIds = new Set(\n    candidates.map((candidate) => candidate.localId),\n  );\n  const primedLocalIds = new Set<string>();\n\n  for (const rootContainerId of rootContainerIds) {\n    if (!isCurrent()) break;\n    const targets =\n      await listDocumentRuntimeTargetsForContainerSubtreeFromRuntime({\n        containersById: input.containersById,\n        rootContainerId,\n        runtime: input.runtime,\n      });\n    if (!isCurrent()) break;\n    const primed = await requestDocumentRuntimeTargetSync({\n      host: input.host,\n      isCurrent,\n      targets: targets.filter(\n        (target) =>\n          requiredLocalIds.has(target.localId) &&\n          !primedLocalIds.has(target.localId),\n      ),\n    });\n    for (const localId of primed) {\n      primedLocalIds.add(localId);\n    }\n  }\n\n  const orphanTargets = (\n    isCurrent() && input.organizationId\n      ? await listOrphanedDocumentPrimeTargets(\n          input.runtime,\n          input.organizationId,\n        )\n      : []\n  ).filter(\n    (target) =>\n      requiredLocalIds.has(target.localId) &&\n      !primedLocalIds.has(target.localId),\n  );\n  const orphanPrimed = await requestDocumentRuntimeTargetSync({\n    host: input.host,\n    isCurrent,\n    targets: isCurrent() ? orphanTargets : [],\n  });\n  for (const localId of orphanPrimed) {\n    primedLocalIds.add(localId);\n  }\n\n  return {\n    candidateCount: candidates.length,\n    orphanPrimedCount: orphanPrimed.size,\n    primedCount: primedLocalIds.size,\n    rootCount: rootContainerIds.length,\n    unroutableCount: candidates.filter(\n      (candidate) => !primedLocalIds.has(candidate.localId),\n    ).length,\n  };\n}\n"]}
+{"version":3,"file":"documentPriming.js","sourceRoot":"","sources":["documentPriming.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,wBAAwB,EACxB,cAAc,EACd,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAO9D,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,wDAAwD,EAAE,MAAM,0BAA0B,CAAC;AACpG,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAc/B,8EAA8E;AAC9E,2EAA2E;AAC3E,gEAAgE;AAChE,0EAA0E;AAC1E,uEAAuE;AACvE,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,wDAAwD;AACxD,8EAA8E;AAC9E,wEAAwE;AACxE,MAAM,0BAA0B,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBlC,CAAC;AAEF,MAAM,oCAAoC,GAAG;;UAEnC,0BAA0B;;CAEnC,CAAC;AAEF,6EAA6E;AAC7E,wEAAwE;AACxE,MAAM,8BAA8B,GAAG;;kBAErB,0BAA0B;;;;;;;;;;6BAUf,kBAAkB,CAAC,iBAAiB;;;;CAIhE,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,gBAEuD;IAEvD,MAAM,OAAO,GACX,OAAO,gBAAgB,KAAK,UAAU;QACpC,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC;IACrC,MAAM,eAAe,CAAC,OAAO,EAAE;QAC7B,GAAG,cAAc;QACjB,GAAG,wBAAwB;QAC3B,GAAG,6BAA6B;KACjC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,8CAA8C,CAC3D,OAAwC;IAExC,MAAM,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE;QAC3C,GAAG,cAAc;QACjB,GAAG,wBAAwB;KAC5B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CACtC,oCAAoC,CACrC,CAAC;IAEF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,yBAAyB;AACzB,KAAK,UAAU,oCAAoC,CACjD,OAAwC;IAExC,MAAM,UAAU,GACd,MAAM,8CAA8C,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,yBAAyB,GAAG;;;;;;UAMxB,2BAA2B,CAAC;IAChC,aAAa,EAAE,oBAAoB;IACnC,eAAe,EAAE,YAAY;CAC9B,CAAC;;CAEL,CAAC;AAEF;;;;GAIG;AACH,KAAK,UAAU,gCAAgC,CAC7C,OAAwC,EACxC,cAAsB;IAEtB,MAAM,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE;QAC3C,GAAG,cAAc;QACjB,GAAG,wBAAwB;QAC3B,GAAG,iCAAiC;KACrC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CACtC,yBAAyB,EACzB,4BAA4B,CAAC,cAAc,CAAC,CAC7C,CAAC;IACF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACnD,OAAO;YACL;gBACE,UAAU,EAAE,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;gBAC9D,OAAO;gBACP,kBAAkB,EAAE,IAAI;aACzB;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAW,KAOjE;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,CAAC,CAAC;IAC3B,MAAM,CAAC,OAAO,EAAE,qBAAqB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,wDAAwD,CAAC;YACvD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,KAAK,CAAC,qBAAqB;YACzB,oCAAoC,CAAC,KAAK,CAAC,OAAO,CAAC;KACtD,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC;QACpD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS;QACT,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACjC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAC1C;KACF,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAW,KAc5D;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,cAAc,EAAE,CAAC;YACjB,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,CAAC;YACZ,eAAe,EAAE,CAAC;SACnB,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,8CAA8C,CACrE,KAAK,CAAC,OAAO,CACd,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,cAAc,EAAE,UAAU,CAAC,MAAM;YACjC,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,CAAC;YACZ,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CACxE,CAAC,cAAc,EAAE,EAAE,CACjB,cAAc,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;QACxC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,CAAC,CAAC,EAAE,CACT,CAAC;IACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CACjD,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE;YAAE,MAAM;QACxB,MAAM,OAAO,GACX,MAAM,wDAAwD,CAAC;YAC7D,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe;YACf,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACL,IAAI,CAAC,SAAS,EAAE;YAAE,MAAM;QACxB,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC;YACpD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS;YACT,OAAO,EAAE,OAAO,CAAC,MAAM,CACrB,CAAC,MAAM,EAAE,EAAE,CACT,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;gBACpC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CACtC;SACF,CAAC,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,CACpB,SAAS,EAAE,IAAI,KAAK,CAAC,cAAc;QACjC,CAAC,CAAC,MAAM,gCAAgC,CACpC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,CACrB;QACH,CAAC,CAAC,EAAE,CACP,CAAC,MAAM,CACN,CAAC,MAAM,EAAE,EAAE,CACT,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QACpC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CACtC,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,gCAAgC,CAAC;QAC1D,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS;QACT,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;KAC1C,CAAC,CAAC;IACH,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO;QACL,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,iBAAiB,EAAE,YAAY,CAAC,IAAI;QACpC,WAAW,EAAE,cAAc,CAAC,IAAI;QAChC,SAAS,EAAE,gBAAgB,CAAC,MAAM;QAClC,eAAe,EAAE,UAAU,CAAC,MAAM,CAChC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CACtD,CAAC,MAAM;KACT,CAAC;AACJ,CAAC","sourcesContent":["import {\n  documentContainerProjectionTables,\n  documentPlacementIntentTables,\n  documentProjectionTables,\n  documentTables,\n  LOCAL_INTENT_LANES,\n} from \"../../data/sqlite/schema\";\nimport { ensureSqlTables } from \"../../data/sqlite/sqlSchema\";\nimport type {\n  ContainerContentsContainerSubtreeState,\n  ContainerContentsDocumentRuntimeTarget,\n  ContainerDocumentPrimeHost,\n  ContainerDocumentQueriesRuntime,\n} from \"./documentQueries/types\";\nimport { requestDocumentRuntimeTargetSync } from \"./documentRuntimeTargetSync\";\nimport { listDocumentRuntimeTargetsForContainerSubtreeFromRuntime } from \"./documentSubtreeQueries\";\nimport {\n  getOrphanedDocumentQueryBind,\n  getOrphanedDocumentWhereSql,\n} from \"./orphanedDocumentSql\";\n\ninterface PrimeRequiredDocumentCandidate {\n  readonly localId: string;\n}\n\ninterface LoadedRootDocumentPrimeResult {\n  readonly candidateCount: number;\n  readonly orphanPrimedCount: number;\n  readonly primedCount: number;\n  readonly rootCount: number;\n  readonly unroutableCount: number;\n}\n\n// Documents that still NEED a store opened at prime time: local-only creates,\n// queued outbound updates/attachments, an outgoing-delta marker behind the\n// stored content frontier (a deferred tail; encoding inequality\n// over-approximates, which only re-primes a store the old behavior always\n// primed), a never-hydrated document (a freshly discovered share whose\n// content pull the primed lane performs), or a document with a recorded sync\n// failure (a refused revalidation leaves no queued work, so the failure row\n// is the only ticket that re-drives the store — the retry that clears on the\n// next clean pass). Fully-synced hydrated documents are\n// deliberately absent: priming exists to re-drive durable work, and opening a\n// store per settled document is what made a 1000-document boot a storm.\nconst PENDING_PRIME_LOCAL_ID_SQL = `\n  SELECT stored.local_id AS local_id\n  FROM documents stored\n  WHERE stored.app_kind = 'documents'\n    AND (\n      stored.document_id IS NULL\n      OR stored.snapshot_end_version = ''\n      OR stored.pull_continuation IS NOT NULL\n      OR COALESCE(stored.pending_base_version, '') <> stored.snapshot_end_version\n      OR EXISTS (\n        SELECT 1\n        FROM document_history_updates pending\n        WHERE pending.app_kind = 'documents'\n          AND pending.local_id = stored.local_id\n          AND pending.update_id IS NOT NULL\n      )\n      OR stored.sync_failure_message IS NOT NULL\n      OR EXISTS (\n        SELECT 1\n        FROM document_pending_attachments attachment\n        WHERE attachment.local_id = stored.local_id\n      )\n    )\n`;\n\nconst PENDING_PRIME_DOCUMENT_CANDIDATE_SQL = `\n  SELECT pending.local_id AS local_id\n  FROM (${PENDING_PRIME_LOCAL_ID_SQL}) pending\n  ORDER BY pending.local_id ASC\n`;\n\n// The structural startup probe and the priming worker share the same durable\n// predicate so they cannot disagree about what counts as document work.\nconst STARTUP_DOCUMENT_SYNC_WORK_SQL = `\n  SELECT 1 AS present\n  WHERE EXISTS (${PENDING_PRIME_LOCAL_ID_SQL})\n    OR EXISTS (\n      SELECT 1\n      FROM local_intents intent\n      -- Blocked and parked denied moves count: blocked intents replay on\n      -- every scan (the blocking condition can heal after hydration), and\n      -- the once-per-launch replay makes denied moves retriable — so a\n      -- relaunch whose only durable work is either kind must still schedule\n      -- the structural pass that re-attempts it (row 7). Unavailable moves\n      -- are excluded: no pass ever replays them (#2278 #4).\n      WHERE intent.lane = '${LOCAL_INTENT_LANES.documentPlacement}'\n        AND intent.sync_status IN ('pending', 'blocked', 'denied')\n    )\n  LIMIT 1\n`;\n\nexport async function hasStartupDocumentSyncWork(\n  runtimeOrExecSql:\n    | ContainerDocumentQueriesRuntime\n    | ContainerDocumentQueriesRuntime[\"infra\"][\"execSql\"],\n): Promise<boolean> {\n  const execSql =\n    typeof runtimeOrExecSql === \"function\"\n      ? runtimeOrExecSql\n      : runtimeOrExecSql.infra.execSql;\n  await ensureSqlTables(execSql, [\n    ...documentTables,\n    ...documentProjectionTables,\n    ...documentPlacementIntentTables,\n  ]);\n  const rows = await execSql(STARTUP_DOCUMENT_SYNC_WORK_SQL);\n  return rows.length > 0;\n}\n\nasync function listPrimeRequiredDocumentCandidatesFromRuntime(\n  runtime: ContainerDocumentQueriesRuntime,\n): Promise<PrimeRequiredDocumentCandidate[]> {\n  await ensureSqlTables(runtime.infra.execSql, [\n    ...documentTables,\n    ...documentProjectionTables,\n  ]);\n  const rows = await runtime.infra.execSql(\n    PENDING_PRIME_DOCUMENT_CANDIDATE_SQL,\n  );\n\n  return rows.flatMap((row) => {\n    const localId = Reflect.get(row, \"local_id\");\n    if (typeof localId !== \"string\") {\n      return [];\n    }\n    return [{ localId }];\n  });\n}\n\n// A row with content but a NULL outgoing-delta marker is deliberately treated\n// as unsettled: the store persist path always sets the marker, so over-priming\n// is the safe direction.\nasync function listPrimeRequiredLocalIdsFromRuntime(\n  runtime: ContainerDocumentQueriesRuntime,\n): Promise<ReadonlySet<string>> {\n  const candidates =\n    await listPrimeRequiredDocumentCandidatesFromRuntime(runtime);\n  return new Set(candidates.map((candidate) => candidate.localId));\n}\n\n/**\n * Last-link orphans (docs/sync-edge-cases.md row 3): the container cascade\n * nulled their projection container and dropped their link rows, so no\n * subtree listing can route them. Placements held for unsigned tombstones\n * also qualify when every link is hidden; their link rows remain intact.\n * These documents are primed with a null container\n * scope instead — the documents runtime accepts one, and the document's own\n * sync pass then resolves its fate against the server: 403 parks it (row 8),\n * a coded 404 destroys it (row 1), and a local-only orphan's create attempt\n * records a terminal failure row. Hidden document kinds stay excluded, and\n * dangling non-null projections (a container row merely missing locally)\n * stay with stale-root recovery, exactly as before.\n *\n * Organization neutrality: the null scope changes only the runtime's\n * containerId — auth, crypto, and organization plumbing are identical to\n * every container-scoped runtime this store already primes with, the sync\n * pass derives billing and keying organizations from the document's own\n * plan and manifest, and a cross-organization author fails closed at the\n * sync layer's identity guard before anything is signed.\n */\nconst ORPHANED_PRIME_TARGET_SQL = `\n  SELECT stored.local_id AS local_id, stored.document_id AS document_id\n  FROM documents stored\n  INNER JOIN document_projection projection\n    ON projection.local_id = stored.local_id\n  WHERE stored.app_kind = 'documents'\n    AND ${getOrphanedDocumentWhereSql({\n      documentIdSql: \"stored.document_id\",\n      projectionAlias: \"projection\",\n    })}\n  ORDER BY stored.local_id ASC\n`;\n\n/**\n * Unattributed rows (empty/NULL organization) are always included: they are\n * device-first documents created before authentication, which belong to this\n * device's sole user and adopt the active organization when they create.\n */\nasync function listOrphanedDocumentPrimeTargets(\n  runtime: ContainerDocumentQueriesRuntime,\n  organizationId: string,\n): Promise<ContainerContentsDocumentRuntimeTarget[]> {\n  await ensureSqlTables(runtime.infra.execSql, [\n    ...documentTables,\n    ...documentProjectionTables,\n    ...documentContainerProjectionTables,\n  ]);\n  const rows = await runtime.infra.execSql(\n    ORPHANED_PRIME_TARGET_SQL,\n    getOrphanedDocumentQueryBind(organizationId),\n  );\n  return rows.flatMap((row) => {\n    const localId = Reflect.get(row, \"local_id\");\n    if (typeof localId !== \"string\") {\n      return [];\n    }\n    const documentId = Reflect.get(row, \"document_id\");\n    return [\n      {\n        documentId: typeof documentId === \"string\" ? documentId : null,\n        localId,\n        runtimeContainerId: null,\n      },\n    ];\n  });\n}\n\nexport async function primeDocumentsForContainerSubtree<TRuntime>(input: {\n  containersById: ReadonlyMap<string, ContainerContentsContainerSubtreeState>;\n  host: ContainerDocumentPrimeHost<TRuntime>;\n  isCurrent?: (() => boolean) | undefined;\n  primeRequiredLocalIds?: ReadonlySet<string>;\n  rootContainerId: string;\n  runtime: ContainerDocumentQueriesRuntime;\n}): Promise<number> {\n  const isCurrent = input.isCurrent ?? (() => true);\n  if (!isCurrent()) return 0;\n  const [targets, primeRequiredLocalIds] = await Promise.all([\n    listDocumentRuntimeTargetsForContainerSubtreeFromRuntime({\n      containersById: input.containersById,\n      rootContainerId: input.rootContainerId,\n      runtime: input.runtime,\n    }),\n    input.primeRequiredLocalIds ??\n      listPrimeRequiredLocalIdsFromRuntime(input.runtime),\n  ]);\n  if (!isCurrent()) return 0;\n  const primed = await requestDocumentRuntimeTargetSync({\n    host: input.host,\n    isCurrent,\n    targets: targets.filter((target) =>\n      primeRequiredLocalIds.has(target.localId),\n    ),\n  });\n  return primed.size;\n}\n\nexport async function primeDocumentsForLoadedRoots<TRuntime>(input: {\n  containersById: ReadonlyMap<string, ContainerContentsContainerSubtreeState>;\n  host: ContainerDocumentPrimeHost<TRuntime>;\n  isCurrent?: (() => boolean) | undefined;\n  /**\n   * The store scope's organization. Orphan priming is bounded to it: each\n   * organization-scoped store resolves only its own orphans, matching the\n   * per-organization invariant subtree routing provides implicitly (a pass\n   * signed under another organization would fail the sync identity guard\n   * instead of resolving). Absent — unauthenticated or scope-less callers —\n   * orphan priming is skipped entirely.\n   */\n  organizationId?: string | null;\n  runtime: ContainerDocumentQueriesRuntime;\n}): Promise<LoadedRootDocumentPrimeResult> {\n  const isCurrent = input.isCurrent ?? (() => true);\n  if (!isCurrent()) {\n    return {\n      candidateCount: 0,\n      orphanPrimedCount: 0,\n      primedCount: 0,\n      rootCount: 0,\n      unroutableCount: 0,\n    };\n  }\n  const candidates = await listPrimeRequiredDocumentCandidatesFromRuntime(\n    input.runtime,\n  );\n  if (!isCurrent()) {\n    return {\n      candidateCount: candidates.length,\n      orphanPrimedCount: 0,\n      primedCount: 0,\n      rootCount: 0,\n      unroutableCount: candidates.length,\n    };\n  }\n  const rootContainerIds = Array.from(input.containersById.values()).flatMap(\n    (containerState) =>\n      containerState.container.parentId === null\n        ? [containerState.container.id]\n        : [],\n  );\n  const requiredLocalIds = new Set(\n    candidates.map((candidate) => candidate.localId),\n  );\n  const primedLocalIds = new Set<string>();\n\n  for (const rootContainerId of rootContainerIds) {\n    if (!isCurrent()) break;\n    const targets =\n      await listDocumentRuntimeTargetsForContainerSubtreeFromRuntime({\n        containersById: input.containersById,\n        rootContainerId,\n        runtime: input.runtime,\n      });\n    if (!isCurrent()) break;\n    const primed = await requestDocumentRuntimeTargetSync({\n      host: input.host,\n      isCurrent,\n      targets: targets.filter(\n        (target) =>\n          requiredLocalIds.has(target.localId) &&\n          !primedLocalIds.has(target.localId),\n      ),\n    });\n    for (const localId of primed) {\n      primedLocalIds.add(localId);\n    }\n  }\n\n  const orphanTargets = (\n    isCurrent() && input.organizationId\n      ? await listOrphanedDocumentPrimeTargets(\n          input.runtime,\n          input.organizationId,\n        )\n      : []\n  ).filter(\n    (target) =>\n      requiredLocalIds.has(target.localId) &&\n      !primedLocalIds.has(target.localId),\n  );\n  const orphanPrimed = await requestDocumentRuntimeTargetSync({\n    host: input.host,\n    isCurrent,\n    targets: isCurrent() ? orphanTargets : [],\n  });\n  for (const localId of orphanPrimed) {\n    primedLocalIds.add(localId);\n  }\n\n  return {\n    candidateCount: candidates.length,\n    orphanPrimedCount: orphanPrimed.size,\n    primedCount: primedLocalIds.size,\n    rootCount: rootContainerIds.length,\n    unroutableCount: candidates.filter(\n      (candidate) => !primedLocalIds.has(candidate.localId),\n    ).length,\n  };\n}\n"]}