@tearleads/client-sdk 0.1.44 → 0.1.46

package/data/sqlite/documentSyncFailurePersistence.js

@@ -1,79 +1,68 @@
 import { and, eq, isNotNull } from "drizzle-orm";
-import { containerCreateIntents, containerCreateIntentTables, containerMoveIntents, containerMoveIntentTables, documentMoveIntents, documentMoveIntentTables, documentSyncFailures, documentTables, } from "./schema.js";
-import { getClientSQLitePersistenceRuntime } from "./sqlitePersistenceRuntime.js";
+import { documents, documentTables, localIntents, localIntentTables, } from "./schema.js";
+import { getClientSQLitePersistenceRuntime, } from "./sqlitePersistenceRuntime.js";
 import { ensureSqlTables } from "./sqlSchema.js";
+/** The `documents` column values of a scope with no recorded failure. */
+export const CLEARED_DOCUMENT_SYNC_FAILURE = {
+    syncFailureAttemptedAt: null,
+    syncFailureMessage: null,
+    syncFailureStatus: null,
+};
+function scopeWhere(scope) {
+    return and(eq(documents.appKind, scope.appKind), eq(documents.localId, scope.localId));
+}
 /**
- * Upsert the last terminal failure or incoming-update quarantine for a document
- * scope. The durable pending-update queue has no status columns, so this row is
- * what lets the write-queue view explain a blocked document. One row per scope:
- * a newer failure replaces the old.
+ * Record the last terminal failure or incoming-update quarantine on a document
+ * scope's row. The durable pending-update queue has no status columns, so
+ * these columns let the write-queue view explain a blocked document. A newer
+ * failure replaces the old. A scope with no `documents` row has nothing left
+ * to explain, so the update is a no-op there.
  */
 export async function recordDocumentSyncFailure(execSql, scope, failure) {
     await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {
         await db
-            .insert(documentSyncFailures)
-            .values({
-            appKind: scope.appKind,
-            localId: scope.localId,
-            status: failure.status,
-            message: failure.message,
-            attemptedAt: failure.attemptedAt,
-        })
-            .onConflictDoUpdate({
-            target: [documentSyncFailures.appKind, documentSyncFailures.localId],
-            set: {
-                status: failure.status,
-                message: failure.message,
-                attemptedAt: failure.attemptedAt,
-            },
+            .update(documents)
+            .set({
+            syncFailureAttemptedAt: failure.attemptedAt,
+            syncFailureMessage: failure.message,
+            syncFailureStatus: failure.status,
         })
+            .where(scopeWhere(scope))
             .run();
     });
 }
 /**
- * Whether any queued local write has recorded a terminal failure — a
- * `document_sync_failures` row or an intent row carrying `last_error`. This is
+ * Whether any queued local write has recorded a terminal failure — a document
+ * row carrying a sync failure or an intent row carrying `last_error`. This is
  * the evidence gate for recovery triggers (e.g. re-arming write lanes when org
  * access is restored): without it a transient denial during bootstrap would
  * fire recovery work with nothing to recover, racing the startup sync passes.
  */
 export async function hasRecordedTerminalSyncFailures(execSql) {
-    await ensureSqlTables(execSql, [
-        ...documentTables,
-        ...containerCreateIntentTables,
-        ...containerMoveIntentTables,
-        ...documentMoveIntentTables,
-    ]);
+    await ensureSqlTables(execSql, [...documentTables, ...localIntentTables]);
     const { db } = getClientSQLitePersistenceRuntime(execSql);
     const [failure] = await db
-        .select({ localId: documentSyncFailures.localId })
-        .from(documentSyncFailures)
+        .select({ localId: documents.localId })
+        .from(documents)
+        .where(isNotNull(documents.syncFailureMessage))
         .limit(1);
     if (failure) {
         return true;
     }
-    const [createIntent] = await db
-        .select({ id: containerCreateIntents.id })
-        .from(containerCreateIntents)
-        .where(isNotNull(containerCreateIntents.lastError))
-        .limit(1);
-    if (createIntent) {
-        return true;
-    }
-    const [moveIntent] = await db
-        .select({ id: containerMoveIntents.id })
-        .from(containerMoveIntents)
-        .where(isNotNull(containerMoveIntents.lastError))
+    const [intent] = await db
+        .select({ id: localIntents.id })
+        .from(localIntents)
+        .where(isNotNull(localIntents.lastError))
         .limit(1);
-    if (moveIntent) {
-        return true;
-    }
-    const [documentMoveIntent] = await db
-        .select({ id: documentMoveIntents.id })
-        .from(documentMoveIntents)
-        .where(isNotNull(documentMoveIntents.lastError))
-        .limit(1);
-    return documentMoveIntent !== undefined;
+    return intent !== undefined;
+}
+/** Clear a scope's recorded failure inside a caller's transaction. */
+export async function clearDocumentSyncFailureInTransaction(tx, scope) {
+    await tx
+        .update(documents)
+        .set(CLEARED_DOCUMENT_SYNC_FAILURE)
+        .where(scopeWhere(scope))
+        .run();
 }
 /**
  * Drop the recorded failure for a scope. Called when a later sync pass for the
@@ -83,8 +72,9 @@ export async function hasRecordedTerminalSyncFailures(execSql) {
 export async function clearDocumentSyncFailure(execSql, scope) {
     await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {
         await db
-            .delete(documentSyncFailures)
-            .where(and(eq(documentSyncFailures.appKind, scope.appKind), eq(documentSyncFailures.localId, scope.localId)))
+            .update(documents)
+            .set(CLEARED_DOCUMENT_SYNC_FAILURE)
+            .where(scopeWhere(scope))
             .run();
     });
 }

package/data/sqlite/documentSyncFailurePersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentSyncFailurePersistence.js","sourceRoot":"","sources":["documentSyncFailurePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,cAAc,GACf,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAgB,eAAe,EAAE,MAAM,aAAa,CAAC;AAQ5D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAgB,EAChB,KAAoB,EACpB,OAAkC;IAElC,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,EAAE;aACL,MAAM,CAAC,oBAAoB,CAAC;aAC5B,MAAM,CAAC;YACN,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC;aACD,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC;YACpE,GAAG,EAAE;gBACH,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC;SACF,CAAC;aACD,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAgB;IAEhB,MAAM,eAAe,CAAC,OAAO,EAAE;QAC7B,GAAG,cAAc;QACjB,GAAG,2BAA2B;QAC9B,GAAG,yBAAyB;QAC5B,GAAG,wBAAwB;KAC5B,CAAC,CAAC;IACH,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;SACvB,MAAM,CAAC,EAAE,OAAO,EAAE,oBAAoB,CAAC,OAAO,EAAE,CAAC;SACjD,IAAI,CAAC,oBAAoB,CAAC;SAC1B,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,EAAE;SAC5B,MAAM,CAAC,EAAE,EAAE,EAAE,sBAAsB,CAAC,EAAE,EAAE,CAAC;SACzC,IAAI,CAAC,sBAAsB,CAAC;SAC5B,KAAK,CAAC,SAAS,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;SAClD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE;SAC1B,MAAM,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,EAAE,EAAE,CAAC;SACvC,IAAI,CAAC,oBAAoB,CAAC;SAC1B,KAAK,CAAC,SAAS,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;SAChD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,kBAAkB,CAAC,GAAG,MAAM,EAAE;SAClC,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;SACtC,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,SAAS,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;SAC/C,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,kBAAkB,KAAK,SAAS,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAgB,EAChB,KAAoB;IAEpB,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,EAAE;aACL,MAAM,CAAC,oBAAoB,CAAC;aAC5B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAC/C,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAChD,CACF;aACA,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { and, eq, isNotNull } from \"drizzle-orm\";\nimport type { DocumentScope } from \"./documentPersistenceTypes\";\nimport {\n  containerCreateIntents,\n  containerCreateIntentTables,\n  containerMoveIntents,\n  containerMoveIntentTables,\n  documentMoveIntents,\n  documentMoveIntentTables,\n  documentSyncFailures,\n  documentTables,\n} from \"./schema\";\nimport { getClientSQLitePersistenceRuntime } from \"./sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"./sqlSchema\";\n\ninterface DocumentSyncFailureFields {\n  readonly attemptedAt: string;\n  readonly message: string;\n  readonly status: number | null;\n}\n\n/**\n * Upsert the last terminal failure or incoming-update quarantine for a document\n * scope. The durable pending-update queue has no status columns, so this row is\n * what lets the write-queue view explain a blocked document. One row per scope:\n * a newer failure replaces the old.\n */\nexport async function recordDocumentSyncFailure(\n  execSql: ExecSql,\n  scope: DocumentScope,\n  failure: DocumentSyncFailureFields,\n): Promise<void> {\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    await db\n      .insert(documentSyncFailures)\n      .values({\n        appKind: scope.appKind,\n        localId: scope.localId,\n        status: failure.status,\n        message: failure.message,\n        attemptedAt: failure.attemptedAt,\n      })\n      .onConflictDoUpdate({\n        target: [documentSyncFailures.appKind, documentSyncFailures.localId],\n        set: {\n          status: failure.status,\n          message: failure.message,\n          attemptedAt: failure.attemptedAt,\n        },\n      })\n      .run();\n  });\n}\n\n/**\n * Whether any queued local write has recorded a terminal failure — a\n * `document_sync_failures` row or an intent row carrying `last_error`. This is\n * the evidence gate for recovery triggers (e.g. re-arming write lanes when org\n * access is restored): without it a transient denial during bootstrap would\n * fire recovery work with nothing to recover, racing the startup sync passes.\n */\nexport async function hasRecordedTerminalSyncFailures(\n  execSql: ExecSql,\n): Promise<boolean> {\n  await ensureSqlTables(execSql, [\n    ...documentTables,\n    ...containerCreateIntentTables,\n    ...containerMoveIntentTables,\n    ...documentMoveIntentTables,\n  ]);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const [failure] = await db\n    .select({ localId: documentSyncFailures.localId })\n    .from(documentSyncFailures)\n    .limit(1);\n  if (failure) {\n    return true;\n  }\n  const [createIntent] = await db\n    .select({ id: containerCreateIntents.id })\n    .from(containerCreateIntents)\n    .where(isNotNull(containerCreateIntents.lastError))\n    .limit(1);\n  if (createIntent) {\n    return true;\n  }\n  const [moveIntent] = await db\n    .select({ id: containerMoveIntents.id })\n    .from(containerMoveIntents)\n    .where(isNotNull(containerMoveIntents.lastError))\n    .limit(1);\n  if (moveIntent) {\n    return true;\n  }\n  const [documentMoveIntent] = await db\n    .select({ id: documentMoveIntents.id })\n    .from(documentMoveIntents)\n    .where(isNotNull(documentMoveIntents.lastError))\n    .limit(1);\n  return documentMoveIntent !== undefined;\n}\n\n/**\n * Drop the recorded failure for a scope. Called when a later sync pass for the\n * scope succeeds and whenever the scope's local sync state is torn down, so a\n * stale failure never outlives the condition it describes.\n */\nexport async function clearDocumentSyncFailure(\n  execSql: ExecSql,\n  scope: DocumentScope,\n): Promise<void> {\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    await db\n      .delete(documentSyncFailures)\n      .where(\n        and(\n          eq(documentSyncFailures.appKind, scope.appKind),\n          eq(documentSyncFailures.localId, scope.localId),\n        ),\n      )\n      .run();\n  });\n}\n"]}
+{"version":3,"file":"documentSyncFailurePersistence.js","sourceRoot":"","sources":["documentSyncFailurePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,EACL,SAAS,EACT,cAAc,EACd,YAAY,EACZ,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EAEL,iCAAiC,GAClC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAgB,eAAe,EAAE,MAAM,aAAa,CAAC;AAQ5D,yEAAyE;AACzE,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,sBAAsB,EAAE,IAAI;IAC5B,kBAAkB,EAAE,IAAI;IACxB,iBAAiB,EAAE,IAAI;CACf,CAAC;AAEX,SAAS,UAAU,CAAC,KAAoB;IACtC,OAAO,GAAG,CACR,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACpC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CACrC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAgB,EAChB,KAAoB,EACpB,OAAkC;IAElC,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,EAAE;aACL,MAAM,CAAC,SAAS,CAAC;aACjB,GAAG,CAAC;YACH,sBAAsB,EAAE,OAAO,CAAC,WAAW;YAC3C,kBAAkB,EAAE,OAAO,CAAC,OAAO;YACnC,iBAAiB,EAAE,OAAO,CAAC,MAAM;SAClC,CAAC;aACD,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;aACxB,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAgB;IAEhB,MAAM,eAAe,CAAC,OAAO,EAAE,CAAC,GAAG,cAAc,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC;IAC1E,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;SACvB,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;SACtC,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;SAC9C,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;SACtB,MAAM,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC;SAC/B,IAAI,CAAC,YAAY,CAAC;SAClB,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;SACxC,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,MAAM,KAAK,SAAS,CAAC;AAC9B,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,EAAgC,EAChC,KAAoB;IAEpB,MAAM,EAAE;SACL,MAAM,CAAC,SAAS,CAAC;SACjB,GAAG,CAAC,6BAA6B,CAAC;SAClC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;SACxB,GAAG,EAAE,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAgB,EAChB,KAAoB;IAEpB,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,EAAE;aACL,MAAM,CAAC,SAAS,CAAC;aACjB,GAAG,CAAC,6BAA6B,CAAC;aAClC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;aACxB,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { and, eq, isNotNull } from \"drizzle-orm\";\nimport type { DocumentScope } from \"./documentPersistenceTypes\";\nimport {\n  documents,\n  documentTables,\n  localIntents,\n  localIntentTables,\n} from \"./schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"./sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"./sqlSchema\";\n\ninterface DocumentSyncFailureFields {\n  readonly attemptedAt: string;\n  readonly message: string;\n  readonly status: number | null;\n}\n\n/** The `documents` column values of a scope with no recorded failure. */\nexport const CLEARED_DOCUMENT_SYNC_FAILURE = {\n  syncFailureAttemptedAt: null,\n  syncFailureMessage: null,\n  syncFailureStatus: null,\n} as const;\n\nfunction scopeWhere(scope: DocumentScope) {\n  return and(\n    eq(documents.appKind, scope.appKind),\n    eq(documents.localId, scope.localId),\n  );\n}\n\n/**\n * Record the last terminal failure or incoming-update quarantine on a document\n * scope's row. The durable pending-update queue has no status columns, so\n * these columns let the write-queue view explain a blocked document. A newer\n * failure replaces the old. A scope with no `documents` row has nothing left\n * to explain, so the update is a no-op there.\n */\nexport async function recordDocumentSyncFailure(\n  execSql: ExecSql,\n  scope: DocumentScope,\n  failure: DocumentSyncFailureFields,\n): Promise<void> {\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    await db\n      .update(documents)\n      .set({\n        syncFailureAttemptedAt: failure.attemptedAt,\n        syncFailureMessage: failure.message,\n        syncFailureStatus: failure.status,\n      })\n      .where(scopeWhere(scope))\n      .run();\n  });\n}\n\n/**\n * Whether any queued local write has recorded a terminal failure — a document\n * row carrying a sync failure or an intent row carrying `last_error`. This is\n * the evidence gate for recovery triggers (e.g. re-arming write lanes when org\n * access is restored): without it a transient denial during bootstrap would\n * fire recovery work with nothing to recover, racing the startup sync passes.\n */\nexport async function hasRecordedTerminalSyncFailures(\n  execSql: ExecSql,\n): Promise<boolean> {\n  await ensureSqlTables(execSql, [...documentTables, ...localIntentTables]);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const [failure] = await db\n    .select({ localId: documents.localId })\n    .from(documents)\n    .where(isNotNull(documents.syncFailureMessage))\n    .limit(1);\n  if (failure) {\n    return true;\n  }\n  const [intent] = await db\n    .select({ id: localIntents.id })\n    .from(localIntents)\n    .where(isNotNull(localIntents.lastError))\n    .limit(1);\n  return intent !== undefined;\n}\n\n/** Clear a scope's recorded failure inside a caller's transaction. */\nexport async function clearDocumentSyncFailureInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  scope: DocumentScope,\n): Promise<void> {\n  await tx\n    .update(documents)\n    .set(CLEARED_DOCUMENT_SYNC_FAILURE)\n    .where(scopeWhere(scope))\n    .run();\n}\n\n/**\n * Drop the recorded failure for a scope. Called when a later sync pass for the\n * scope succeeds and whenever the scope's local sync state is torn down, so a\n * stale failure never outlives the condition it describes.\n */\nexport async function clearDocumentSyncFailure(\n  execSql: ExecSql,\n  scope: DocumentScope,\n): Promise<void> {\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    await db\n      .update(documents)\n      .set(CLEARED_DOCUMENT_SYNC_FAILURE)\n      .where(scopeWhere(scope))\n      .run();\n  });\n}\n"]}

package/data/sqlite/{documentPlacementIntentSchema.d.ts → localIntentSchema.d.ts}

@@ -1,39 +1,61 @@
+import { type SQL } from "drizzle-orm";
 /**
- * Device-first document moves waiting for remote link-set replay.
+ * Lanes of the durable local outbox. Each lane keeps at most one intent per
+ * subject: a container may hold a create and a move at once, while a
+ * document's move and link coalesce into one placement intent.
+ */
+export declare const LOCAL_INTENT_LANES: {
+    readonly containerCreate: "container.create";
+    readonly containerMove: "container.move";
+    readonly documentPlacement: "document.placement";
+};
+export type LocalIntentLane = (typeof LOCAL_INTENT_LANES)[keyof typeof LOCAL_INTENT_LANES];
+/**
+ * Device-first structural writes waiting for remote replay: container creates,
+ * container moves, and document placement (move and link) intents.
  *
- * A document move is applied to local projections immediately, then replayed as
- * remote link/unlink mutations when writer context is available. Replays are
- * rebuilt from current writer projections so the queue stores only intent.
+ * Every lane shares one revision protocol: `id` is rewritten on each enqueue or
+ * repair, settlement compares `(id, updatedAt)` before acting, and replay runs
+ * in `createdAt` order. Remote reset deletes the scoped intents of every lane
+ * (and re-queues creates for surviving containers); nothing here survives a
+ * reset. Durable requests that must survive reset (the principal mutation
+ * journal and organization provisioning attempts) live in their own tables.
  *
  * Columns:
- * - `id`: Client-generated intent id.
- * - `localId`: Local document row to update after replay.
- * - `documentId`: Server document id whose link set should move.
- * - `targetContainerId`: Desired active/final container id.
- * - `sourceContainerId`: Original active container to unlink for move-style
- *   intents. Replace-style intents unlink every remote container except target.
- * - `replaceLinkedContainers`: Whether the final remote link set should be
+ * - `id`: Revision token and primary key.
+ * - `lane`: One of `LOCAL_INTENT_LANES`.
+ * - `intentType`: `container.create`, `container.move`, `document.move`, or
+ *   `document.link`. A placement intent switches between the last two in place.
+ * - `subjectId`: Container id for container lanes, server document id for the
+ *   placement lane.
+ * - `localId`: Local document row the placement intent updates; null for
+ *   container lanes.
+ * - `targetContainerId`: Desired parent (container lanes) or target container
+ *   (placement lane).
+ * - `sourceContainerId`: Parent observed when a container move was first
+ *   queued, or the source container a document move unlinks.
+ * - `replaceLinkedContainers`: Placement only — the final remote link set is
  *   only the target container.
- * - `intentType`: `document.move` requests placement; `document.link` requests
- *   only explicit additions/removals, even if preferred containers match.
- * - `syncStatus`: Current sync state, currently `pending` or `blocked`.
- * - `lastError`: Last sync error message for retry/debug display.
- * - `lastAttemptedAt`: Timestamp of the last replay attempt.
- * - `createdAt`: Intent creation timestamp used for FIFO sync.
- * - `updatedAt`: Local timestamp for the latest target/status/error change.
+ * - `remoteContainerId`, `remoteMetadataDocumentId`,
+ *   `remoteMetadataAccessStateHash`: Remote identities a container create
+ *   records once accepted.
+ * - `syncStatus`: Lane-specific state (`pending`/`synced` for creates,
+ *   `pending`/`blocked` for container moves, `pending`/`blocked`/`denied`/
+ *   `unavailable` for placements).
+ * - `lastError`, `lastAttemptedAt`: Replay diagnostics.
+ * - `createdAt`: FIFO replay order; `updatedAt`: last target/status change.
  *
  * Indexes:
- * - `id` is the primary key.
- * - `documentId` is unique so same-document moves coalesce to one intent.
- * - `(syncStatus, createdAt)` supports listing pending intents in queue order.
+ * - `(lane, subjectId)` is unique so repeated enqueues coalesce per lane.
+ * - `(lane, syncStatus, createdAt)` lists a lane's queue in order.
  */
-export declare const documentMoveIntents: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
-    name: "document_move_intents";
+export declare const localIntents: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "local_intents";
     schema: undefined;
     columns: {
         id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
             name: "id";
-            tableName: "document_move_intents";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
             data: string;
@@ -50,9 +72,9 @@ export declare const documentMoveIntents: import("drizzle-orm/sqlite-core").SQLi
         }, {}, {
             length: number | undefined;
         }>;
-        localId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "local_id";
-            tableName: "document_move_intents";
+        lane: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "lane";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
             data: string;
@@ -69,9 +91,9 @@ export declare const documentMoveIntents: import("drizzle-orm/sqlite-core").SQLi
         }, {}, {
             length: number | undefined;
         }>;
-        documentId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "document_id";
-            tableName: "document_move_intents";
+        intentType: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "intent_type";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
             data: string;
@@ -88,9 +110,9 @@ export declare const documentMoveIntents: import("drizzle-orm/sqlite-core").SQLi
         }, {}, {
             length: number | undefined;
         }>;
-        targetContainerId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "target_container_id";
-            tableName: "document_move_intents";
+        subjectId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "subject_id";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
             data: string;
@@ -107,9 +129,9 @@ export declare const documentMoveIntents: import("drizzle-orm/sqlite-core").SQLi
         }, {}, {
             length: number | undefined;
         }>;
-        sourceContainerId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "source_container_id";
-            tableName: "document_move_intents";
+        localId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "local_id";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
             data: string;
@@ -126,31 +148,33 @@ export declare const documentMoveIntents: import("drizzle-orm/sqlite-core").SQLi
         }, {}, {
             length: number | undefined;
         }>;
-        replaceLinkedContainers: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "replace_linked_containers";
-            tableName: "document_move_intents";
-            dataType: "boolean";
-            columnType: "SQLiteBoolean";
-            data: boolean;
-            driverParam: number;
+        targetContainerId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "target_container_id";
+            tableName: "local_intents";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
             notNull: true;
-            hasDefault: true;
+            hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: undefined;
+            enumValues: [string, ...string[]];
             baseColumn: never;
             identity: undefined;
             generated: undefined;
-        }, {}, {}>;
-        intentType: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "intent_type";
-            tableName: "document_move_intents";
+        }, {}, {
+            length: number | undefined;
+        }>;
+        sourceContainerId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "source_container_id";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
             data: string;
             driverParam: string;
-            notNull: true;
+            notNull: false;
             hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
@@ -162,14 +186,31 @@ export declare const documentMoveIntents: import("drizzle-orm/sqlite-core").SQLi
         }, {}, {
             length: number | undefined;
         }>;
-        syncStatus: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "sync_status";
-            tableName: "document_move_intents";
+        replaceLinkedContainers: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "replace_linked_containers";
+            tableName: "local_intents";
+            dataType: "boolean";
+            columnType: "SQLiteBoolean";
+            data: boolean;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        remoteContainerId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "remote_container_id";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
             data: string;
             driverParam: string;
-            notNull: true;
+            notNull: false;
             hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
@@ -181,9 +222,9 @@ export declare const documentMoveIntents: import("drizzle-orm/sqlite-core").SQLi
         }, {}, {
             length: number | undefined;
         }>;
-        lastError: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "last_error";
-            tableName: "document_move_intents";
+        remoteMetadataDocumentId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "remote_metadata_document_id";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
             data: string;
@@ -200,9 +241,9 @@ export declare const documentMoveIntents: import("drizzle-orm/sqlite-core").SQLi
         }, {}, {
             length: number | undefined;
         }>;
-        lastAttemptedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "last_attempted_at";
-            tableName: "document_move_intents";
+        remoteMetadataAccessStateHash: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "remote_metadata_access_state_hash";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
             data: string;
@@ -219,9 +260,9 @@ export declare const documentMoveIntents: import("drizzle-orm/sqlite-core").SQLi
         }, {}, {
             length: number | undefined;
         }>;
-        createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "created_at";
-            tableName: "document_move_intents";
+        syncStatus: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "sync_status";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
             data: string;
@@ -238,14 +279,14 @@ export declare const documentMoveIntents: import("drizzle-orm/sqlite-core").SQLi
         }, {}, {
             length: number | undefined;
         }>;
-        updatedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "updated_at";
-            tableName: "document_move_intents";
+        lastError: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "last_error";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
             data: string;
             driverParam: string;
-            notNull: true;
+            notNull: false;
             hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
@@ -257,22 +298,14 @@ export declare const documentMoveIntents: import("drizzle-orm/sqlite-core").SQLi
         }, {}, {
             length: number | undefined;
         }>;
-    };
-    dialect: "sqlite";
-}>;
-/** Additional links share the parent placement intent revision and settlement. */
-export declare const documentIntentLinkTargets: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
-    name: "document_intent_link_targets";
-    schema: undefined;
-    columns: {
-        intentId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "intent_id";
-            tableName: "document_intent_link_targets";
+        lastAttemptedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "last_attempted_at";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
             data: string;
             driverParam: string;
-            notNull: true;
+            notNull: false;
             hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
@@ -284,28 +317,28 @@ export declare const documentIntentLinkTargets: import("drizzle-orm/sqlite-core"
         }, {}, {
             length: number | undefined;
         }>;
-        operation: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "operation";
-            tableName: "document_intent_link_targets";
+        createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "created_at";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "link" | "unlink";
+            data: string;
             driverParam: string;
             notNull: true;
-            hasDefault: true;
+            hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: ["link", "unlink"];
+            enumValues: [string, ...string[]];
             baseColumn: never;
             identity: undefined;
             generated: undefined;
         }, {}, {
             length: number | undefined;
         }>;
-        containerId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "container_id";
-            tableName: "document_intent_link_targets";
+        updatedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "updated_at";
+            tableName: "local_intents";
             dataType: "string";
             columnType: "SQLiteText";
             data: string;
@@ -325,3 +358,44 @@ export declare const documentIntentLinkTargets: import("drizzle-orm/sqlite-core"
     };
     dialect: "sqlite";
 }>;
+/** The conflict target that coalesces repeated enqueues within a lane. */
+export declare const LOCAL_INTENT_SUBJECT: (import("drizzle-orm/sqlite-core").SQLiteColumn<{
+    name: "lane";
+    tableName: "local_intents";
+    dataType: "string";
+    columnType: "SQLiteText";
+    data: string;
+    driverParam: string;
+    notNull: true;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+}, {}, {
+    length: number | undefined;
+}> | import("drizzle-orm/sqlite-core").SQLiteColumn<{
+    name: "subject_id";
+    tableName: "local_intents";
+    dataType: "string";
+    columnType: "SQLiteText";
+    data: string;
+    driverParam: string;
+    notNull: true;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+}, {}, {
+    length: number | undefined;
+}>)[];
+export declare function inLocalIntentLane(lane: LocalIntentLane): SQL;
+/** Both container lanes: what a container's own removal or reset discards. */
+export declare function inContainerIntentLanes(): SQL;

package/data/sqlite/localIntentSchema.js

@@ -0,0 +1,90 @@
+import { eq, inArray } from "drizzle-orm";
+import { index, integer, primaryKey, sqliteTable, text, unique, } from "drizzle-orm/sqlite-core";
+/**
+ * Lanes of the durable local outbox. Each lane keeps at most one intent per
+ * subject: a container may hold a create and a move at once, while a
+ * document's move and link coalesce into one placement intent.
+ */
+export const LOCAL_INTENT_LANES = {
+    containerCreate: "container.create",
+    containerMove: "container.move",
+    documentPlacement: "document.placement",
+};
+/**
+ * Device-first structural writes waiting for remote replay: container creates,
+ * container moves, and document placement (move and link) intents.
+ *
+ * Every lane shares one revision protocol: `id` is rewritten on each enqueue or
+ * repair, settlement compares `(id, updatedAt)` before acting, and replay runs
+ * in `createdAt` order. Remote reset deletes the scoped intents of every lane
+ * (and re-queues creates for surviving containers); nothing here survives a
+ * reset. Durable requests that must survive reset (the principal mutation
+ * journal and organization provisioning attempts) live in their own tables.
+ *
+ * Columns:
+ * - `id`: Revision token and primary key.
+ * - `lane`: One of `LOCAL_INTENT_LANES`.
+ * - `intentType`: `container.create`, `container.move`, `document.move`, or
+ *   `document.link`. A placement intent switches between the last two in place.
+ * - `subjectId`: Container id for container lanes, server document id for the
+ *   placement lane.
+ * - `localId`: Local document row the placement intent updates; null for
+ *   container lanes.
+ * - `targetContainerId`: Desired parent (container lanes) or target container
+ *   (placement lane).
+ * - `sourceContainerId`: Parent observed when a container move was first
+ *   queued, or the source container a document move unlinks.
+ * - `replaceLinkedContainers`: Placement only — the final remote link set is
+ *   only the target container.
+ * - `remoteContainerId`, `remoteMetadataDocumentId`,
+ *   `remoteMetadataAccessStateHash`: Remote identities a container create
+ *   records once accepted.
+ * - `syncStatus`: Lane-specific state (`pending`/`synced` for creates,
+ *   `pending`/`blocked` for container moves, `pending`/`blocked`/`denied`/
+ *   `unavailable` for placements).
+ * - `lastError`, `lastAttemptedAt`: Replay diagnostics.
+ * - `createdAt`: FIFO replay order; `updatedAt`: last target/status change.
+ *
+ * Indexes:
+ * - `(lane, subjectId)` is unique so repeated enqueues coalesce per lane.
+ * - `(lane, syncStatus, createdAt)` lists a lane's queue in order.
+ */
+export const localIntents = sqliteTable("local_intents", {
+    id: text("id"),
+    lane: text("lane").notNull(),
+    intentType: text("intent_type").notNull(),
+    subjectId: text("subject_id").notNull(),
+    localId: text("local_id"),
+    targetContainerId: text("target_container_id").notNull(),
+    sourceContainerId: text("source_container_id"),
+    replaceLinkedContainers: integer("replace_linked_containers", {
+        mode: "boolean",
+    })
+        .notNull()
+        .default(false),
+    remoteContainerId: text("remote_container_id"),
+    remoteMetadataDocumentId: text("remote_metadata_document_id"),
+    remoteMetadataAccessStateHash: text("remote_metadata_access_state_hash"),
+    syncStatus: text("sync_status").notNull(),
+    lastError: text("last_error"),
+    lastAttemptedAt: text("last_attempted_at"),
+    createdAt: text("created_at").notNull(),
+    updatedAt: text("updated_at").notNull(),
+}, (table) => [
+    primaryKey({ columns: [table.id] }),
+    unique().on(table.lane, table.subjectId),
+    index("local_intents_lane_status_created_idx").on(table.lane, table.syncStatus, table.createdAt),
+]);
+/** The conflict target that coalesces repeated enqueues within a lane. */
+export const LOCAL_INTENT_SUBJECT = [localIntents.lane, localIntents.subjectId];
+export function inLocalIntentLane(lane) {
+    return eq(localIntents.lane, lane);
+}
+/** Both container lanes: what a container's own removal or reset discards. */
+export function inContainerIntentLanes() {
+    return inArray(localIntents.lane, [
+        LOCAL_INTENT_LANES.containerCreate,
+        LOCAL_INTENT_LANES.containerMove,
+    ]);
+}
+//# sourceMappingURL=localIntentSchema.js.map