@tearleads/client-sdk 0.1.44 → 0.1.46

package/workflows/container-contents/pendingWrites/sources.js

@@ -1,9 +1,7 @@
+import { LOCAL_INTENT_LANES } from "../../../data/sqlite/schema.js";
 import { getContainerDisplayNameSql, getContainerOrganizationAttributionSql, } from "../documentQueries/sql.js";
 import { readNumber, readString } from "./rowReaders.js";
-const CONTAINER_DISPLAY_NAME_SQL = getContainerDisplayNameSql({
-    containerAlias: "container",
-    projectionAlias: "container_projection",
-});
+const CONTAINER_DISPLAY_NAME_SQL = getContainerDisplayNameSql("container");
 const DOCUMENT_ORGANIZATION_SQL = getContainerOrganizationAttributionSql({
     containerAlias: "container",
     projectionAlias: "projection",
@@ -35,8 +33,8 @@ const PENDING_WRITE_SOURCE_SQL = `
     updates.updated_at AS updated_at,
     NULL AS target_container_id,
     'pending' AS operation_status,
-    failure.message AS last_error,
-    failure.attempted_at AS last_attempted_at,
+    stored.sync_failure_message AS last_error,
+    stored.sync_failure_attempted_at AS last_attempted_at,
     'always' AS inclusion
   FROM pending_update_groups updates
   LEFT JOIN documents stored
@@ -46,9 +44,6 @@ const PENDING_WRITE_SOURCE_SQL = `
     ON projection.local_id = updates.local_id
   LEFT JOIN containers container
     ON container.id = projection.container_id
-  LEFT JOIN document_sync_failures failure
-    ON failure.app_kind = 'documents'
-    AND failure.local_id = updates.local_id
   WHERE updates.app_kind = 'documents'
 
   UNION ALL
@@ -62,7 +57,7 @@ const PENDING_WRITE_SOURCE_SQL = `
   SELECT
     'document' AS object_kind,
     NULL AS namespace,
-    failure.local_id AS local_id,
+    stored.local_id AS local_id,
     stored.document_id AS remote_id,
     projection.title AS name,
     projection.container_id AS container_id,
@@ -70,22 +65,20 @@ const PENDING_WRITE_SOURCE_SQL = `
     'revalidation' AS operation_kind,
     0 AS operation_count,
     0 AS byte_length,
-    failure.attempted_at AS created_at,
-    failure.attempted_at AS updated_at,
+    stored.sync_failure_attempted_at AS created_at,
+    stored.sync_failure_attempted_at AS updated_at,
     NULL AS target_container_id,
     'pending' AS operation_status,
-    failure.message AS last_error,
-    failure.attempted_at AS last_attempted_at,
+    stored.sync_failure_message AS last_error,
+    stored.sync_failure_attempted_at AS last_attempted_at,
     'unless-item-covered' AS inclusion
-  FROM document_sync_failures failure
-  LEFT JOIN documents stored
-    ON stored.app_kind = failure.app_kind
-    AND stored.local_id = failure.local_id
+  FROM documents stored
   LEFT JOIN document_projection projection
-    ON projection.local_id = failure.local_id
+    ON projection.local_id = stored.local_id
   LEFT JOIN containers container
     ON container.id = projection.container_id
-  WHERE failure.app_kind = 'documents'
+  WHERE stored.app_kind = 'documents'
+    AND stored.sync_failure_message IS NOT NULL
 
   UNION ALL
 
@@ -104,16 +97,14 @@ const PENDING_WRITE_SOURCE_SQL = `
     updates.updated_at AS updated_at,
     NULL AS target_container_id,
     'pending' AS operation_status,
-    failure.message AS last_error,
-    failure.attempted_at AS last_attempted_at,
+    metadata.sync_failure_message AS last_error,
+    metadata.sync_failure_attempted_at AS last_attempted_at,
     'always' AS inclusion
   FROM pending_update_groups updates
   LEFT JOIN containers container ON container.id = updates.local_id
-  LEFT JOIN container_projection
-    ON container_projection.container_id = updates.local_id
-  LEFT JOIN document_sync_failures failure
-    ON failure.app_kind = 'container-metadata'
-    AND failure.local_id = updates.local_id
+  LEFT JOIN documents metadata
+    ON metadata.app_kind = 'container-metadata'
+    AND metadata.local_id = updates.local_id
   WHERE updates.app_kind = 'container-metadata'
     -- Dormant retained metadata (container tombstoned access_revoked, row 4)
     -- has no containers row; keep it unsurfaced until rehydration re-attaches
@@ -128,7 +119,7 @@ const PENDING_WRITE_SOURCE_SQL = `
   SELECT
     'container' AS object_kind,
     NULL AS namespace,
-    failure.local_id AS local_id,
+    metadata.local_id AS local_id,
     CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END AS remote_id,
     ${CONTAINER_DISPLAY_NAME_SQL} AS name,
     container.id AS container_id,
@@ -136,18 +127,17 @@ const PENDING_WRITE_SOURCE_SQL = `
     'revalidation' AS operation_kind,
     0 AS operation_count,
     0 AS byte_length,
-    failure.attempted_at AS created_at,
-    failure.attempted_at AS updated_at,
+    metadata.sync_failure_attempted_at AS created_at,
+    metadata.sync_failure_attempted_at AS updated_at,
     NULL AS target_container_id,
     'pending' AS operation_status,
-    failure.message AS last_error,
-    failure.attempted_at AS last_attempted_at,
+    metadata.sync_failure_message AS last_error,
+    metadata.sync_failure_attempted_at AS last_attempted_at,
     'unless-item-covered' AS inclusion
-  FROM document_sync_failures failure
-  JOIN containers container ON container.id = failure.local_id
-  LEFT JOIN container_projection
-    ON container_projection.container_id = failure.local_id
-  WHERE failure.app_kind = 'container-metadata'
+  FROM documents metadata
+  JOIN containers container ON container.id = metadata.local_id
+  WHERE metadata.app_kind = 'container-metadata'
+    AND metadata.sync_failure_message IS NOT NULL
 
   UNION ALL
 
@@ -166,16 +156,13 @@ const PENDING_WRITE_SOURCE_SQL = `
     updates.updated_at AS updated_at,
     NULL AS target_container_id,
     'pending' AS operation_status,
-    failure.message AS last_error,
-    failure.attempted_at AS last_attempted_at,
+    stored.sync_failure_message AS last_error,
+    stored.sync_failure_attempted_at AS last_attempted_at,
     'always' AS inclusion
   FROM pending_update_groups updates
   LEFT JOIN documents stored
     ON stored.app_kind = updates.app_kind
     AND stored.local_id = updates.local_id
-  LEFT JOIN document_sync_failures failure
-    ON failure.app_kind = updates.app_kind
-    AND failure.local_id = updates.local_id
   WHERE updates.app_kind NOT IN ('documents', 'container-metadata')
 
   UNION ALL
@@ -195,8 +182,8 @@ const PENDING_WRITE_SOURCE_SQL = `
     MAX(attachment.created_at) AS updated_at,
     NULL AS target_container_id,
     'pending' AS operation_status,
-    failure.message AS last_error,
-    failure.attempted_at AS last_attempted_at,
+    stored.sync_failure_message AS last_error,
+    stored.sync_failure_attempted_at AS last_attempted_at,
     'always' AS inclusion
   FROM document_pending_attachments attachment
   LEFT JOIN documents stored
@@ -206,9 +193,6 @@ const PENDING_WRITE_SOURCE_SQL = `
     ON projection.local_id = attachment.local_id
   LEFT JOIN containers container
     ON container.id = projection.container_id
-  LEFT JOIN document_sync_failures failure
-    ON failure.app_kind = 'documents'
-    AND failure.local_id = attachment.local_id
   GROUP BY attachment.local_id
 
   UNION ALL
@@ -216,26 +200,25 @@ const PENDING_WRITE_SOURCE_SQL = `
   SELECT
     'container' AS object_kind,
     NULL AS namespace,
-    intent.container_id AS local_id,
+    intent.subject_id AS local_id,
     COALESCE(intent.remote_container_id, CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END) AS remote_id,
     ${CONTAINER_DISPLAY_NAME_SQL} AS name,
-    intent.container_id AS container_id,
+    intent.subject_id AS container_id,
     NULLIF(container.organization_id, '') AS organization_id,
     'create' AS operation_kind,
     1 AS operation_count,
     0 AS byte_length,
     intent.created_at AS created_at,
     intent.updated_at AS updated_at,
-    intent.parent_container_id AS target_container_id,
+    intent.target_container_id AS target_container_id,
     'pending' AS operation_status,
     intent.last_error AS last_error,
     intent.last_attempted_at AS last_attempted_at,
     'always' AS inclusion
-  FROM container_create_intents intent
-  LEFT JOIN containers container ON container.id = intent.container_id
-  LEFT JOIN container_projection
-    ON container_projection.container_id = intent.container_id
-  WHERE intent.intent_type = 'container.create'
+  FROM local_intents intent
+  LEFT JOIN containers container ON container.id = intent.subject_id
+  WHERE intent.lane = '${LOCAL_INTENT_LANES.containerCreate}'
+    AND intent.intent_type = 'container.create'
     AND intent.sync_status = 'pending'
 
   UNION ALL
@@ -243,26 +226,25 @@ const PENDING_WRITE_SOURCE_SQL = `
   SELECT
     'container' AS object_kind,
     NULL AS namespace,
-    intent.container_id AS local_id,
+    intent.subject_id AS local_id,
     CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END AS remote_id,
     ${CONTAINER_DISPLAY_NAME_SQL} AS name,
-    intent.container_id AS container_id,
+    intent.subject_id AS container_id,
     NULLIF(container.organization_id, '') AS organization_id,
     'move' AS operation_kind,
     1 AS operation_count,
     0 AS byte_length,
     intent.created_at AS created_at,
     intent.updated_at AS updated_at,
-    intent.parent_container_id AS target_container_id,
+    intent.target_container_id AS target_container_id,
     CASE WHEN intent.sync_status = 'blocked' THEN 'blocked' ELSE 'pending' END AS operation_status,
     intent.last_error AS last_error,
     intent.last_attempted_at AS last_attempted_at,
     'always' AS inclusion
-  FROM container_move_intents intent
-  LEFT JOIN containers container ON container.id = intent.container_id
-  LEFT JOIN container_projection
-    ON container_projection.container_id = intent.container_id
-  WHERE intent.intent_type = 'container.move'
+  FROM local_intents intent
+  LEFT JOIN containers container ON container.id = intent.subject_id
+  WHERE intent.lane = '${LOCAL_INTENT_LANES.containerMove}'
+    AND intent.intent_type = 'container.move'
 
   UNION ALL
 
@@ -270,7 +252,7 @@ const PENDING_WRITE_SOURCE_SQL = `
     'document' AS object_kind,
     NULL AS namespace,
     intent.local_id AS local_id,
-    intent.document_id AS remote_id,
+    intent.subject_id AS remote_id,
     projection.title AS name,
     COALESCE(projection.container_id, intent.target_container_id) AS container_id,
     ${DOCUMENT_ORGANIZATION_SQL} AS organization_id,
@@ -281,18 +263,19 @@ const PENDING_WRITE_SOURCE_SQL = `
     intent.updated_at AS updated_at,
     intent.target_container_id AS target_container_id,
     CASE WHEN intent.sync_status IN ('blocked', 'unavailable') THEN 'blocked' ELSE 'pending' END AS operation_status,
-    COALESCE(NULLIF(intent.last_error, ''), failure.message) AS last_error,
-    COALESCE(intent.last_attempted_at, failure.attempted_at) AS last_attempted_at,
+    COALESCE(NULLIF(intent.last_error, ''), stored.sync_failure_message) AS last_error,
+    COALESCE(intent.last_attempted_at, stored.sync_failure_attempted_at) AS last_attempted_at,
     'always' AS inclusion
-  FROM document_move_intents intent
+  FROM local_intents intent
+  LEFT JOIN documents stored
+    ON stored.app_kind = 'documents'
+    AND stored.local_id = intent.local_id
   LEFT JOIN document_projection projection
     ON projection.local_id = intent.local_id
   LEFT JOIN containers container
     ON container.id = COALESCE(projection.container_id, intent.target_container_id)
-  LEFT JOIN document_sync_failures failure
-    ON failure.app_kind = 'documents'
-    AND failure.local_id = intent.local_id
-  WHERE intent.intent_type IN ('document.move', 'document.link')
+  WHERE intent.lane = '${LOCAL_INTENT_LANES.documentPlacement}'
+    AND intent.intent_type IN ('document.move', 'document.link')
 
   UNION ALL
 
@@ -311,17 +294,14 @@ const PENDING_WRITE_SOURCE_SQL = `
     stored.updated_at AS updated_at,
     projection.container_id AS target_container_id,
     'pending' AS operation_status,
-    failure.message AS last_error,
-    failure.attempted_at AS last_attempted_at,
+    stored.sync_failure_message AS last_error,
+    stored.sync_failure_attempted_at AS last_attempted_at,
     'unless-operation-covered' AS inclusion
   FROM documents stored
   LEFT JOIN document_projection projection
     ON projection.local_id = stored.local_id
   LEFT JOIN containers container
     ON container.id = projection.container_id
-  LEFT JOIN document_sync_failures failure
-    ON failure.app_kind = 'documents'
-    AND failure.local_id = stored.local_id
   WHERE stored.app_kind = 'documents'
     AND stored.document_id IS NULL
 
@@ -346,8 +326,6 @@ const PENDING_WRITE_SOURCE_SQL = `
     NULL AS last_attempted_at,
     'unless-operation-covered' AS inclusion
   FROM containers container
-  LEFT JOIN container_projection
-    ON container_projection.container_id = container.id
   LEFT JOIN documents metadata
     ON metadata.app_kind = 'container-metadata'
     AND metadata.local_id = container.id
@@ -376,8 +354,6 @@ const PENDING_WRITE_SOURCE_SQL = `
     NULL AS last_attempted_at,
     'unless-item-covered' AS inclusion
   FROM containers container
-  LEFT JOIN container_projection
-    ON container_projection.container_id = container.id
   WHERE container.local_updated_at IS NOT NULL
     AND (
       container.server_updated_at IS NULL

package/workflows/container-contents/pendingWrites/sources.js.map

@@ -1 +1 @@
-{"version":3,"file":"sources.js","sourceRoot":"","sources":["sources.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,EAC1B,sCAAsC,GACvC,MAAM,wBAAwB,CAAC;AAKhC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,0BAA0B,GAAG,0BAA0B,CAAC;IAC5D,cAAc,EAAE,WAAW;IAC3B,eAAe,EAAE,sBAAsB;CACxC,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,sCAAsC,CAAC;IACvE,cAAc,EAAE,WAAW;IAC3B,eAAe,EAAE,YAAY;CAC9B,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;MAmB3B,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAuCzB,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA4BzB,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAoC1B,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAyD1B,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA+BzB,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;MA2B1B,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA4B1B,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA8BzB,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA6BzB,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA8B1B,0BAA0B;;;;;;;;;;;;;;;;;;;;;CAqB/B,CAAC;AAEF,SAAS,wBAAwB,CAC/B,GAA4B;IAE5B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACxD,IACE,CAAC,OAAO;QACR,CAAC,aAAa,KAAK,YAAY;YAC7B,aAAa,KAAK,QAAQ;YAC1B,aAAa,KAAK,MAAM;YACxB,aAAa,KAAK,cAAc;YAChC,aAAa,KAAK,QAAQ,CAAC,EAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,UAAU,GACd,aAAa,KAAK,WAAW,IAAI,aAAa,KAAK,UAAU;QAC3D,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,SAAS,GACb,YAAY,KAAK,qBAAqB;QACtC,YAAY,KAAK,0BAA0B;QACzC,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,QAAQ,CAAC;IAEf,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC;QAC1C,WAAW,EAAE,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC;QAC5C,yEAAyE;QACzE,qDAAqD;QACrD,KAAK,EACH,aAAa,KAAK,cAAc;YAC9B,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACrD,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC;QACxC,SAAS;QACT,IAAI,EAAE,aAAa;QACnB,eAAe,EAAE,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC;QACrD,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC;QACxC,OAAO;QACP,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;QAC7B,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC;QACvC,UAAU;QACV,cAAc,EAAE,UAAU,CAAC,GAAG,EAAE,iBAAiB,CAAC;QAClD,QAAQ,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC;QACtC,MAAM,EACJ,UAAU,CAAC,GAAG,EAAE,kBAAkB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAC3E,iBAAiB,EAAE,UAAU,CAAC,GAAG,EAAE,qBAAqB,CAAC;QACzD,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,OAAgB;IAEhB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,SAAS,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\nimport {\n  getContainerDisplayNameSql,\n  getContainerOrganizationAttributionSql,\n} from \"../documentQueries/sql\";\nimport type {\n  PendingWriteCandidate,\n  PendingWriteCandidateInclusion,\n} from \"./aggregation\";\nimport { readNumber, readString } from \"./rowReaders\";\n\nconst CONTAINER_DISPLAY_NAME_SQL = getContainerDisplayNameSql({\n  containerAlias: \"container\",\n  projectionAlias: \"container_projection\",\n});\nconst DOCUMENT_ORGANIZATION_SQL = getContainerOrganizationAttributionSql({\n  containerAlias: \"container\",\n  projectionAlias: \"projection\",\n});\n\nconst PENDING_WRITE_SOURCE_SQL = `\n  WITH pending_update_groups AS (\n    SELECT\n      app_kind,\n      local_id,\n      COUNT(*) AS operation_count,\n      MIN(created_at) AS created_at,\n      MAX(created_at) AS updated_at\n    FROM document_history_updates\n    WHERE update_id IS NOT NULL\n    GROUP BY app_kind, local_id\n  )\n  SELECT\n    'document' AS object_kind,\n    NULL AS namespace,\n    updates.local_id AS local_id,\n    stored.document_id AS remote_id,\n    projection.title AS name,\n    projection.container_id AS container_id,\n    ${DOCUMENT_ORGANIZATION_SQL} AS organization_id,\n    'update' AS operation_kind,\n    updates.operation_count AS operation_count,\n    0 AS byte_length,\n    updates.created_at AS created_at,\n    updates.updated_at AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    failure.message AS last_error,\n    failure.attempted_at AS last_attempted_at,\n    'always' AS inclusion\n  FROM pending_update_groups updates\n  LEFT JOIN documents stored\n    ON stored.app_kind = 'documents'\n    AND stored.local_id = updates.local_id\n  LEFT JOIN document_projection projection\n    ON projection.local_id = updates.local_id\n  LEFT JOIN containers container\n    ON container.id = projection.container_id\n  LEFT JOIN document_sync_failures failure\n    ON failure.app_kind = 'documents'\n    AND failure.local_id = updates.local_id\n  WHERE updates.app_kind = 'documents'\n\n  UNION ALL\n\n  -- Failure-only surface (edge-case row 13): a refused read-only\n  -- revalidation records a durable failure row with NO pending work, so\n  -- without this branch the refusal would never reach the queue view. The\n  -- 'unless-item-covered' inclusion keeps it out whenever the document\n  -- already has real operations — those candidates carry the same failure\n  -- message through their own joins.\n  SELECT\n    'document' AS object_kind,\n    NULL AS namespace,\n    failure.local_id AS local_id,\n    stored.document_id AS remote_id,\n    projection.title AS name,\n    projection.container_id AS container_id,\n    ${DOCUMENT_ORGANIZATION_SQL} AS organization_id,\n    'revalidation' AS operation_kind,\n    0 AS operation_count,\n    0 AS byte_length,\n    failure.attempted_at AS created_at,\n    failure.attempted_at AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    failure.message AS last_error,\n    failure.attempted_at AS last_attempted_at,\n    'unless-item-covered' AS inclusion\n  FROM document_sync_failures failure\n  LEFT JOIN documents stored\n    ON stored.app_kind = failure.app_kind\n    AND stored.local_id = failure.local_id\n  LEFT JOIN document_projection projection\n    ON projection.local_id = failure.local_id\n  LEFT JOIN containers container\n    ON container.id = projection.container_id\n  WHERE failure.app_kind = 'documents'\n\n  UNION ALL\n\n  SELECT\n    'container' AS object_kind,\n    NULL AS namespace,\n    updates.local_id AS local_id,\n    CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END AS remote_id,\n    ${CONTAINER_DISPLAY_NAME_SQL} AS name,\n    container.id AS container_id,\n    NULLIF(container.organization_id, '') AS organization_id,\n    'update' AS operation_kind,\n    updates.operation_count AS operation_count,\n    0 AS byte_length,\n    updates.created_at AS created_at,\n    updates.updated_at AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    failure.message AS last_error,\n    failure.attempted_at AS last_attempted_at,\n    'always' AS inclusion\n  FROM pending_update_groups updates\n  LEFT JOIN containers container ON container.id = updates.local_id\n  LEFT JOIN container_projection\n    ON container_projection.container_id = updates.local_id\n  LEFT JOIN document_sync_failures failure\n    ON failure.app_kind = 'container-metadata'\n    AND failure.local_id = updates.local_id\n  WHERE updates.app_kind = 'container-metadata'\n    -- Dormant retained metadata (container tombstoned access_revoked, row 4)\n    -- has no containers row; keep it unsurfaced until rehydration re-attaches\n    -- the container, or it renders as an anonymous phantom item.\n    AND container.id IS NOT NULL\n\n  UNION ALL\n\n  -- An incoming metadata quarantine can exist without outbound updates. Keep\n  -- it visible as a zero-operation diagnostic while the container is live;\n  -- dormant retained metadata stays hidden until rehydration re-attaches it.\n  SELECT\n    'container' AS object_kind,\n    NULL AS namespace,\n    failure.local_id AS local_id,\n    CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END AS remote_id,\n    ${CONTAINER_DISPLAY_NAME_SQL} AS name,\n    container.id AS container_id,\n    NULLIF(container.organization_id, '') AS organization_id,\n    'revalidation' AS operation_kind,\n    0 AS operation_count,\n    0 AS byte_length,\n    failure.attempted_at AS created_at,\n    failure.attempted_at AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    failure.message AS last_error,\n    failure.attempted_at AS last_attempted_at,\n    'unless-item-covered' AS inclusion\n  FROM document_sync_failures failure\n  JOIN containers container ON container.id = failure.local_id\n  LEFT JOIN container_projection\n    ON container_projection.container_id = failure.local_id\n  WHERE failure.app_kind = 'container-metadata'\n\n  UNION ALL\n\n  SELECT\n    'unknown' AS object_kind,\n    updates.app_kind AS namespace,\n    updates.local_id AS local_id,\n    stored.document_id AS remote_id,\n    NULL AS name,\n    NULL AS container_id,\n    NULL AS organization_id,\n    'update' AS operation_kind,\n    updates.operation_count AS operation_count,\n    0 AS byte_length,\n    updates.created_at AS created_at,\n    updates.updated_at AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    failure.message AS last_error,\n    failure.attempted_at AS last_attempted_at,\n    'always' AS inclusion\n  FROM pending_update_groups updates\n  LEFT JOIN documents stored\n    ON stored.app_kind = updates.app_kind\n    AND stored.local_id = updates.local_id\n  LEFT JOIN document_sync_failures failure\n    ON failure.app_kind = updates.app_kind\n    AND failure.local_id = updates.local_id\n  WHERE updates.app_kind NOT IN ('documents', 'container-metadata')\n\n  UNION ALL\n\n  SELECT\n    'document' AS object_kind,\n    NULL AS namespace,\n    attachment.local_id AS local_id,\n    stored.document_id AS remote_id,\n    projection.title AS name,\n    projection.container_id AS container_id,\n    ${DOCUMENT_ORGANIZATION_SQL} AS organization_id,\n    'attachment' AS operation_kind,\n    COUNT(*) AS operation_count,\n    COALESCE(SUM(attachment.byte_length), 0) AS byte_length,\n    MIN(attachment.created_at) AS created_at,\n    MAX(attachment.created_at) AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    failure.message AS last_error,\n    failure.attempted_at AS last_attempted_at,\n    'always' AS inclusion\n  FROM document_pending_attachments attachment\n  LEFT JOIN documents stored\n    ON stored.app_kind = 'documents'\n    AND stored.local_id = attachment.local_id\n  LEFT JOIN document_projection projection\n    ON projection.local_id = attachment.local_id\n  LEFT JOIN containers container\n    ON container.id = projection.container_id\n  LEFT JOIN document_sync_failures failure\n    ON failure.app_kind = 'documents'\n    AND failure.local_id = attachment.local_id\n  GROUP BY attachment.local_id\n\n  UNION ALL\n\n  SELECT\n    'container' AS object_kind,\n    NULL AS namespace,\n    intent.container_id AS local_id,\n    COALESCE(intent.remote_container_id, CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END) AS remote_id,\n    ${CONTAINER_DISPLAY_NAME_SQL} AS name,\n    intent.container_id AS container_id,\n    NULLIF(container.organization_id, '') AS organization_id,\n    'create' AS operation_kind,\n    1 AS operation_count,\n    0 AS byte_length,\n    intent.created_at AS created_at,\n    intent.updated_at AS updated_at,\n    intent.parent_container_id AS target_container_id,\n    'pending' AS operation_status,\n    intent.last_error AS last_error,\n    intent.last_attempted_at AS last_attempted_at,\n    'always' AS inclusion\n  FROM container_create_intents intent\n  LEFT JOIN containers container ON container.id = intent.container_id\n  LEFT JOIN container_projection\n    ON container_projection.container_id = intent.container_id\n  WHERE intent.intent_type = 'container.create'\n    AND intent.sync_status = 'pending'\n\n  UNION ALL\n\n  SELECT\n    'container' AS object_kind,\n    NULL AS namespace,\n    intent.container_id AS local_id,\n    CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END AS remote_id,\n    ${CONTAINER_DISPLAY_NAME_SQL} AS name,\n    intent.container_id AS container_id,\n    NULLIF(container.organization_id, '') AS organization_id,\n    'move' AS operation_kind,\n    1 AS operation_count,\n    0 AS byte_length,\n    intent.created_at AS created_at,\n    intent.updated_at AS updated_at,\n    intent.parent_container_id AS target_container_id,\n    CASE WHEN intent.sync_status = 'blocked' THEN 'blocked' ELSE 'pending' END AS operation_status,\n    intent.last_error AS last_error,\n    intent.last_attempted_at AS last_attempted_at,\n    'always' AS inclusion\n  FROM container_move_intents intent\n  LEFT JOIN containers container ON container.id = intent.container_id\n  LEFT JOIN container_projection\n    ON container_projection.container_id = intent.container_id\n  WHERE intent.intent_type = 'container.move'\n\n  UNION ALL\n\n  SELECT\n    'document' AS object_kind,\n    NULL AS namespace,\n    intent.local_id AS local_id,\n    intent.document_id AS remote_id,\n    projection.title AS name,\n    COALESCE(projection.container_id, intent.target_container_id) AS container_id,\n    ${DOCUMENT_ORGANIZATION_SQL} AS organization_id,\n    'move' AS operation_kind,\n    1 AS operation_count,\n    0 AS byte_length,\n    intent.created_at AS created_at,\n    intent.updated_at AS updated_at,\n    intent.target_container_id AS target_container_id,\n    CASE WHEN intent.sync_status IN ('blocked', 'unavailable') THEN 'blocked' ELSE 'pending' END AS operation_status,\n    COALESCE(NULLIF(intent.last_error, ''), failure.message) AS last_error,\n    COALESCE(intent.last_attempted_at, failure.attempted_at) AS last_attempted_at,\n    'always' AS inclusion\n  FROM document_move_intents intent\n  LEFT JOIN document_projection projection\n    ON projection.local_id = intent.local_id\n  LEFT JOIN containers container\n    ON container.id = COALESCE(projection.container_id, intent.target_container_id)\n  LEFT JOIN document_sync_failures failure\n    ON failure.app_kind = 'documents'\n    AND failure.local_id = intent.local_id\n  WHERE intent.intent_type IN ('document.move', 'document.link')\n\n  UNION ALL\n\n  SELECT\n    'document' AS object_kind,\n    NULL AS namespace,\n    stored.local_id AS local_id,\n    NULL AS remote_id,\n    projection.title AS name,\n    projection.container_id AS container_id,\n    ${DOCUMENT_ORGANIZATION_SQL} AS organization_id,\n    'create' AS operation_kind,\n    1 AS operation_count,\n    0 AS byte_length,\n    stored.updated_at AS created_at,\n    stored.updated_at AS updated_at,\n    projection.container_id AS target_container_id,\n    'pending' AS operation_status,\n    failure.message AS last_error,\n    failure.attempted_at AS last_attempted_at,\n    'unless-operation-covered' AS inclusion\n  FROM documents stored\n  LEFT JOIN document_projection projection\n    ON projection.local_id = stored.local_id\n  LEFT JOIN containers container\n    ON container.id = projection.container_id\n  LEFT JOIN document_sync_failures failure\n    ON failure.app_kind = 'documents'\n    AND failure.local_id = stored.local_id\n  WHERE stored.app_kind = 'documents'\n    AND stored.document_id IS NULL\n\n  UNION ALL\n\n  SELECT\n    'container' AS object_kind,\n    NULL AS namespace,\n    container.id AS local_id,\n    CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END AS remote_id,\n    ${CONTAINER_DISPLAY_NAME_SQL} AS name,\n    container.id AS container_id,\n    NULLIF(container.organization_id, '') AS organization_id,\n    'create' AS operation_kind,\n    1 AS operation_count,\n    0 AS byte_length,\n    container.local_created_at AS created_at,\n    container.local_updated_at AS updated_at,\n    container.parent_id AS target_container_id,\n    'pending' AS operation_status,\n    NULL AS last_error,\n    NULL AS last_attempted_at,\n    'unless-operation-covered' AS inclusion\n  FROM containers container\n  LEFT JOIN container_projection\n    ON container_projection.container_id = container.id\n  LEFT JOIN documents metadata\n    ON metadata.app_kind = 'container-metadata'\n    AND metadata.local_id = container.id\n  WHERE container.server_created_at IS NULL\n    OR container.metadata_document_id IS NULL\n    OR metadata.document_id IS NULL\n\n  UNION ALL\n\n  SELECT\n    'container' AS object_kind,\n    NULL AS namespace,\n    container.id AS local_id,\n    CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END AS remote_id,\n    ${CONTAINER_DISPLAY_NAME_SQL} AS name,\n    container.id AS container_id,\n    NULLIF(container.organization_id, '') AS organization_id,\n    'update' AS operation_kind,\n    1 AS operation_count,\n    0 AS byte_length,\n    NULL AS created_at,\n    container.local_updated_at AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    NULL AS last_error,\n    NULL AS last_attempted_at,\n    'unless-item-covered' AS inclusion\n  FROM containers container\n  LEFT JOIN container_projection\n    ON container_projection.container_id = container.id\n  WHERE container.local_updated_at IS NOT NULL\n    AND (\n      container.server_updated_at IS NULL\n      OR container.local_updated_at > container.server_updated_at\n    )\n`;\n\nfunction mapPendingWriteSourceRow(\n  row: Record<string, unknown>,\n): PendingWriteCandidate | null {\n  const localId = readString(row, \"local_id\");\n  const operationKind = readString(row, \"operation_kind\");\n  if (\n    !localId ||\n    (operationKind !== \"attachment\" &&\n      operationKind !== \"create\" &&\n      operationKind !== \"move\" &&\n      operationKind !== \"revalidation\" &&\n      operationKind !== \"update\")\n  ) {\n    return null;\n  }\n  const rawObjectKind = readString(row, \"object_kind\");\n  const objectKind =\n    rawObjectKind === \"container\" || rawObjectKind === \"document\"\n      ? rawObjectKind\n      : \"unknown\";\n  const rawInclusion = readString(row, \"inclusion\");\n  const inclusion: PendingWriteCandidateInclusion =\n    rawInclusion === \"unless-item-covered\" ||\n    rawInclusion === \"unless-operation-covered\"\n      ? rawInclusion\n      : \"always\";\n\n  return {\n    byteLength: readNumber(row, \"byte_length\"),\n    containerId: readString(row, \"container_id\"),\n    // Diagnostic-only revalidation items carry NO local operations; clamping\n    // them to 1 would falsely report pending local data.\n    count:\n      operationKind === \"revalidation\"\n        ? 0\n        : Math.max(1, readNumber(row, \"operation_count\")),\n    createdAt: readString(row, \"created_at\"),\n    inclusion,\n    kind: operationKind,\n    lastAttemptedAt: readString(row, \"last_attempted_at\"),\n    lastError: readString(row, \"last_error\"),\n    localId,\n    name: readString(row, \"name\"),\n    namespace: readString(row, \"namespace\"),\n    objectKind,\n    organizationId: readString(row, \"organization_id\"),\n    remoteId: readString(row, \"remote_id\"),\n    status:\n      readString(row, \"operation_status\") === \"blocked\" ? \"blocked\" : \"pending\",\n    targetContainerId: readString(row, \"target_container_id\"),\n    updatedAt: readString(row, \"updated_at\"),\n  };\n}\n\nexport async function listPersistedPendingWriteCandidates(\n  execSql: ExecSql,\n): Promise<PendingWriteCandidate[]> {\n  const rows = await execSql(PENDING_WRITE_SOURCE_SQL);\n  return rows.flatMap((row) => {\n    const candidate = mapPendingWriteSourceRow(row);\n    return candidate ? [candidate] : [];\n  });\n}\n"]}
+{"version":3,"file":"sources.js","sourceRoot":"","sources":["sources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EACL,0BAA0B,EAC1B,sCAAsC,GACvC,MAAM,wBAAwB,CAAC;AAKhC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,0BAA0B,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;AAC3E,MAAM,yBAAyB,GAAG,sCAAsC,CAAC;IACvE,cAAc,EAAE,WAAW;IAC3B,eAAe,EAAE,YAAY;CAC9B,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;MAmB3B,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAoCzB,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;MA0BzB,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAkC1B,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAqD1B,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA4BzB,0BAA0B;;;;;;;;;;;;;;;yBAeP,kBAAkB,CAAC,eAAe;;;;;;;;;;;MAWrD,0BAA0B;;;;;;;;;;;;;;;yBAeP,kBAAkB,CAAC,aAAa;;;;;;;;;;;;MAYnD,yBAAyB;;;;;;;;;;;;;;;;;;;yBAmBN,kBAAkB,CAAC,iBAAiB;;;;;;;;;;;;MAYvD,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;MA0BzB,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA4B1B,0BAA0B;;;;;;;;;;;;;;;;;;;CAmB/B,CAAC;AAEF,SAAS,wBAAwB,CAC/B,GAA4B;IAE5B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACxD,IACE,CAAC,OAAO;QACR,CAAC,aAAa,KAAK,YAAY;YAC7B,aAAa,KAAK,QAAQ;YAC1B,aAAa,KAAK,MAAM;YACxB,aAAa,KAAK,cAAc;YAChC,aAAa,KAAK,QAAQ,CAAC,EAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,UAAU,GACd,aAAa,KAAK,WAAW,IAAI,aAAa,KAAK,UAAU;QAC3D,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,SAAS,GACb,YAAY,KAAK,qBAAqB;QACtC,YAAY,KAAK,0BAA0B;QACzC,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,QAAQ,CAAC;IAEf,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC;QAC1C,WAAW,EAAE,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC;QAC5C,yEAAyE;QACzE,qDAAqD;QACrD,KAAK,EACH,aAAa,KAAK,cAAc;YAC9B,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACrD,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC;QACxC,SAAS;QACT,IAAI,EAAE,aAAa;QACnB,eAAe,EAAE,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC;QACrD,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC;QACxC,OAAO;QACP,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;QAC7B,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC;QACvC,UAAU;QACV,cAAc,EAAE,UAAU,CAAC,GAAG,EAAE,iBAAiB,CAAC;QAClD,QAAQ,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC;QACtC,MAAM,EACJ,UAAU,CAAC,GAAG,EAAE,kBAAkB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAC3E,iBAAiB,EAAE,UAAU,CAAC,GAAG,EAAE,qBAAqB,CAAC;QACzD,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,OAAgB;IAEhB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,SAAS,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { LOCAL_INTENT_LANES } from \"../../../data/sqlite/schema\";\nimport type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\nimport {\n  getContainerDisplayNameSql,\n  getContainerOrganizationAttributionSql,\n} from \"../documentQueries/sql\";\nimport type {\n  PendingWriteCandidate,\n  PendingWriteCandidateInclusion,\n} from \"./aggregation\";\nimport { readNumber, readString } from \"./rowReaders\";\n\nconst CONTAINER_DISPLAY_NAME_SQL = getContainerDisplayNameSql(\"container\");\nconst DOCUMENT_ORGANIZATION_SQL = getContainerOrganizationAttributionSql({\n  containerAlias: \"container\",\n  projectionAlias: \"projection\",\n});\n\nconst PENDING_WRITE_SOURCE_SQL = `\n  WITH pending_update_groups AS (\n    SELECT\n      app_kind,\n      local_id,\n      COUNT(*) AS operation_count,\n      MIN(created_at) AS created_at,\n      MAX(created_at) AS updated_at\n    FROM document_history_updates\n    WHERE update_id IS NOT NULL\n    GROUP BY app_kind, local_id\n  )\n  SELECT\n    'document' AS object_kind,\n    NULL AS namespace,\n    updates.local_id AS local_id,\n    stored.document_id AS remote_id,\n    projection.title AS name,\n    projection.container_id AS container_id,\n    ${DOCUMENT_ORGANIZATION_SQL} AS organization_id,\n    'update' AS operation_kind,\n    updates.operation_count AS operation_count,\n    0 AS byte_length,\n    updates.created_at AS created_at,\n    updates.updated_at AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    stored.sync_failure_message AS last_error,\n    stored.sync_failure_attempted_at AS last_attempted_at,\n    'always' AS inclusion\n  FROM pending_update_groups updates\n  LEFT JOIN documents stored\n    ON stored.app_kind = 'documents'\n    AND stored.local_id = updates.local_id\n  LEFT JOIN document_projection projection\n    ON projection.local_id = updates.local_id\n  LEFT JOIN containers container\n    ON container.id = projection.container_id\n  WHERE updates.app_kind = 'documents'\n\n  UNION ALL\n\n  -- Failure-only surface (edge-case row 13): a refused read-only\n  -- revalidation records a durable failure row with NO pending work, so\n  -- without this branch the refusal would never reach the queue view. The\n  -- 'unless-item-covered' inclusion keeps it out whenever the document\n  -- already has real operations — those candidates carry the same failure\n  -- message through their own joins.\n  SELECT\n    'document' AS object_kind,\n    NULL AS namespace,\n    stored.local_id AS local_id,\n    stored.document_id AS remote_id,\n    projection.title AS name,\n    projection.container_id AS container_id,\n    ${DOCUMENT_ORGANIZATION_SQL} AS organization_id,\n    'revalidation' AS operation_kind,\n    0 AS operation_count,\n    0 AS byte_length,\n    stored.sync_failure_attempted_at AS created_at,\n    stored.sync_failure_attempted_at AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    stored.sync_failure_message AS last_error,\n    stored.sync_failure_attempted_at AS last_attempted_at,\n    'unless-item-covered' AS inclusion\n  FROM documents stored\n  LEFT JOIN document_projection projection\n    ON projection.local_id = stored.local_id\n  LEFT JOIN containers container\n    ON container.id = projection.container_id\n  WHERE stored.app_kind = 'documents'\n    AND stored.sync_failure_message IS NOT NULL\n\n  UNION ALL\n\n  SELECT\n    'container' AS object_kind,\n    NULL AS namespace,\n    updates.local_id AS local_id,\n    CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END AS remote_id,\n    ${CONTAINER_DISPLAY_NAME_SQL} AS name,\n    container.id AS container_id,\n    NULLIF(container.organization_id, '') AS organization_id,\n    'update' AS operation_kind,\n    updates.operation_count AS operation_count,\n    0 AS byte_length,\n    updates.created_at AS created_at,\n    updates.updated_at AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    metadata.sync_failure_message AS last_error,\n    metadata.sync_failure_attempted_at AS last_attempted_at,\n    'always' AS inclusion\n  FROM pending_update_groups updates\n  LEFT JOIN containers container ON container.id = updates.local_id\n  LEFT JOIN documents metadata\n    ON metadata.app_kind = 'container-metadata'\n    AND metadata.local_id = updates.local_id\n  WHERE updates.app_kind = 'container-metadata'\n    -- Dormant retained metadata (container tombstoned access_revoked, row 4)\n    -- has no containers row; keep it unsurfaced until rehydration re-attaches\n    -- the container, or it renders as an anonymous phantom item.\n    AND container.id IS NOT NULL\n\n  UNION ALL\n\n  -- An incoming metadata quarantine can exist without outbound updates. Keep\n  -- it visible as a zero-operation diagnostic while the container is live;\n  -- dormant retained metadata stays hidden until rehydration re-attaches it.\n  SELECT\n    'container' AS object_kind,\n    NULL AS namespace,\n    metadata.local_id AS local_id,\n    CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END AS remote_id,\n    ${CONTAINER_DISPLAY_NAME_SQL} AS name,\n    container.id AS container_id,\n    NULLIF(container.organization_id, '') AS organization_id,\n    'revalidation' AS operation_kind,\n    0 AS operation_count,\n    0 AS byte_length,\n    metadata.sync_failure_attempted_at AS created_at,\n    metadata.sync_failure_attempted_at AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    metadata.sync_failure_message AS last_error,\n    metadata.sync_failure_attempted_at AS last_attempted_at,\n    'unless-item-covered' AS inclusion\n  FROM documents metadata\n  JOIN containers container ON container.id = metadata.local_id\n  WHERE metadata.app_kind = 'container-metadata'\n    AND metadata.sync_failure_message IS NOT NULL\n\n  UNION ALL\n\n  SELECT\n    'unknown' AS object_kind,\n    updates.app_kind AS namespace,\n    updates.local_id AS local_id,\n    stored.document_id AS remote_id,\n    NULL AS name,\n    NULL AS container_id,\n    NULL AS organization_id,\n    'update' AS operation_kind,\n    updates.operation_count AS operation_count,\n    0 AS byte_length,\n    updates.created_at AS created_at,\n    updates.updated_at AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    stored.sync_failure_message AS last_error,\n    stored.sync_failure_attempted_at AS last_attempted_at,\n    'always' AS inclusion\n  FROM pending_update_groups updates\n  LEFT JOIN documents stored\n    ON stored.app_kind = updates.app_kind\n    AND stored.local_id = updates.local_id\n  WHERE updates.app_kind NOT IN ('documents', 'container-metadata')\n\n  UNION ALL\n\n  SELECT\n    'document' AS object_kind,\n    NULL AS namespace,\n    attachment.local_id AS local_id,\n    stored.document_id AS remote_id,\n    projection.title AS name,\n    projection.container_id AS container_id,\n    ${DOCUMENT_ORGANIZATION_SQL} AS organization_id,\n    'attachment' AS operation_kind,\n    COUNT(*) AS operation_count,\n    COALESCE(SUM(attachment.byte_length), 0) AS byte_length,\n    MIN(attachment.created_at) AS created_at,\n    MAX(attachment.created_at) AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    stored.sync_failure_message AS last_error,\n    stored.sync_failure_attempted_at AS last_attempted_at,\n    'always' AS inclusion\n  FROM document_pending_attachments attachment\n  LEFT JOIN documents stored\n    ON stored.app_kind = 'documents'\n    AND stored.local_id = attachment.local_id\n  LEFT JOIN document_projection projection\n    ON projection.local_id = attachment.local_id\n  LEFT JOIN containers container\n    ON container.id = projection.container_id\n  GROUP BY attachment.local_id\n\n  UNION ALL\n\n  SELECT\n    'container' AS object_kind,\n    NULL AS namespace,\n    intent.subject_id AS local_id,\n    COALESCE(intent.remote_container_id, CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END) AS remote_id,\n    ${CONTAINER_DISPLAY_NAME_SQL} AS name,\n    intent.subject_id AS container_id,\n    NULLIF(container.organization_id, '') AS organization_id,\n    'create' AS operation_kind,\n    1 AS operation_count,\n    0 AS byte_length,\n    intent.created_at AS created_at,\n    intent.updated_at AS updated_at,\n    intent.target_container_id AS target_container_id,\n    'pending' AS operation_status,\n    intent.last_error AS last_error,\n    intent.last_attempted_at AS last_attempted_at,\n    'always' AS inclusion\n  FROM local_intents intent\n  LEFT JOIN containers container ON container.id = intent.subject_id\n  WHERE intent.lane = '${LOCAL_INTENT_LANES.containerCreate}'\n    AND intent.intent_type = 'container.create'\n    AND intent.sync_status = 'pending'\n\n  UNION ALL\n\n  SELECT\n    'container' AS object_kind,\n    NULL AS namespace,\n    intent.subject_id AS local_id,\n    CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END AS remote_id,\n    ${CONTAINER_DISPLAY_NAME_SQL} AS name,\n    intent.subject_id AS container_id,\n    NULLIF(container.organization_id, '') AS organization_id,\n    'move' AS operation_kind,\n    1 AS operation_count,\n    0 AS byte_length,\n    intent.created_at AS created_at,\n    intent.updated_at AS updated_at,\n    intent.target_container_id AS target_container_id,\n    CASE WHEN intent.sync_status = 'blocked' THEN 'blocked' ELSE 'pending' END AS operation_status,\n    intent.last_error AS last_error,\n    intent.last_attempted_at AS last_attempted_at,\n    'always' AS inclusion\n  FROM local_intents intent\n  LEFT JOIN containers container ON container.id = intent.subject_id\n  WHERE intent.lane = '${LOCAL_INTENT_LANES.containerMove}'\n    AND intent.intent_type = 'container.move'\n\n  UNION ALL\n\n  SELECT\n    'document' AS object_kind,\n    NULL AS namespace,\n    intent.local_id AS local_id,\n    intent.subject_id AS remote_id,\n    projection.title AS name,\n    COALESCE(projection.container_id, intent.target_container_id) AS container_id,\n    ${DOCUMENT_ORGANIZATION_SQL} AS organization_id,\n    'move' AS operation_kind,\n    1 AS operation_count,\n    0 AS byte_length,\n    intent.created_at AS created_at,\n    intent.updated_at AS updated_at,\n    intent.target_container_id AS target_container_id,\n    CASE WHEN intent.sync_status IN ('blocked', 'unavailable') THEN 'blocked' ELSE 'pending' END AS operation_status,\n    COALESCE(NULLIF(intent.last_error, ''), stored.sync_failure_message) AS last_error,\n    COALESCE(intent.last_attempted_at, stored.sync_failure_attempted_at) AS last_attempted_at,\n    'always' AS inclusion\n  FROM local_intents intent\n  LEFT JOIN documents stored\n    ON stored.app_kind = 'documents'\n    AND stored.local_id = intent.local_id\n  LEFT JOIN document_projection projection\n    ON projection.local_id = intent.local_id\n  LEFT JOIN containers container\n    ON container.id = COALESCE(projection.container_id, intent.target_container_id)\n  WHERE intent.lane = '${LOCAL_INTENT_LANES.documentPlacement}'\n    AND intent.intent_type IN ('document.move', 'document.link')\n\n  UNION ALL\n\n  SELECT\n    'document' AS object_kind,\n    NULL AS namespace,\n    stored.local_id AS local_id,\n    NULL AS remote_id,\n    projection.title AS name,\n    projection.container_id AS container_id,\n    ${DOCUMENT_ORGANIZATION_SQL} AS organization_id,\n    'create' AS operation_kind,\n    1 AS operation_count,\n    0 AS byte_length,\n    stored.updated_at AS created_at,\n    stored.updated_at AS updated_at,\n    projection.container_id AS target_container_id,\n    'pending' AS operation_status,\n    stored.sync_failure_message AS last_error,\n    stored.sync_failure_attempted_at AS last_attempted_at,\n    'unless-operation-covered' AS inclusion\n  FROM documents stored\n  LEFT JOIN document_projection projection\n    ON projection.local_id = stored.local_id\n  LEFT JOIN containers container\n    ON container.id = projection.container_id\n  WHERE stored.app_kind = 'documents'\n    AND stored.document_id IS NULL\n\n  UNION ALL\n\n  SELECT\n    'container' AS object_kind,\n    NULL AS namespace,\n    container.id AS local_id,\n    CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END AS remote_id,\n    ${CONTAINER_DISPLAY_NAME_SQL} AS name,\n    container.id AS container_id,\n    NULLIF(container.organization_id, '') AS organization_id,\n    'create' AS operation_kind,\n    1 AS operation_count,\n    0 AS byte_length,\n    container.local_created_at AS created_at,\n    container.local_updated_at AS updated_at,\n    container.parent_id AS target_container_id,\n    'pending' AS operation_status,\n    NULL AS last_error,\n    NULL AS last_attempted_at,\n    'unless-operation-covered' AS inclusion\n  FROM containers container\n  LEFT JOIN documents metadata\n    ON metadata.app_kind = 'container-metadata'\n    AND metadata.local_id = container.id\n  WHERE container.server_created_at IS NULL\n    OR container.metadata_document_id IS NULL\n    OR metadata.document_id IS NULL\n\n  UNION ALL\n\n  SELECT\n    'container' AS object_kind,\n    NULL AS namespace,\n    container.id AS local_id,\n    CASE WHEN container.server_created_at IS NULL THEN NULL ELSE container.id END AS remote_id,\n    ${CONTAINER_DISPLAY_NAME_SQL} AS name,\n    container.id AS container_id,\n    NULLIF(container.organization_id, '') AS organization_id,\n    'update' AS operation_kind,\n    1 AS operation_count,\n    0 AS byte_length,\n    NULL AS created_at,\n    container.local_updated_at AS updated_at,\n    NULL AS target_container_id,\n    'pending' AS operation_status,\n    NULL AS last_error,\n    NULL AS last_attempted_at,\n    'unless-item-covered' AS inclusion\n  FROM containers container\n  WHERE container.local_updated_at IS NOT NULL\n    AND (\n      container.server_updated_at IS NULL\n      OR container.local_updated_at > container.server_updated_at\n    )\n`;\n\nfunction mapPendingWriteSourceRow(\n  row: Record<string, unknown>,\n): PendingWriteCandidate | null {\n  const localId = readString(row, \"local_id\");\n  const operationKind = readString(row, \"operation_kind\");\n  if (\n    !localId ||\n    (operationKind !== \"attachment\" &&\n      operationKind !== \"create\" &&\n      operationKind !== \"move\" &&\n      operationKind !== \"revalidation\" &&\n      operationKind !== \"update\")\n  ) {\n    return null;\n  }\n  const rawObjectKind = readString(row, \"object_kind\");\n  const objectKind =\n    rawObjectKind === \"container\" || rawObjectKind === \"document\"\n      ? rawObjectKind\n      : \"unknown\";\n  const rawInclusion = readString(row, \"inclusion\");\n  const inclusion: PendingWriteCandidateInclusion =\n    rawInclusion === \"unless-item-covered\" ||\n    rawInclusion === \"unless-operation-covered\"\n      ? rawInclusion\n      : \"always\";\n\n  return {\n    byteLength: readNumber(row, \"byte_length\"),\n    containerId: readString(row, \"container_id\"),\n    // Diagnostic-only revalidation items carry NO local operations; clamping\n    // them to 1 would falsely report pending local data.\n    count:\n      operationKind === \"revalidation\"\n        ? 0\n        : Math.max(1, readNumber(row, \"operation_count\")),\n    createdAt: readString(row, \"created_at\"),\n    inclusion,\n    kind: operationKind,\n    lastAttemptedAt: readString(row, \"last_attempted_at\"),\n    lastError: readString(row, \"last_error\"),\n    localId,\n    name: readString(row, \"name\"),\n    namespace: readString(row, \"namespace\"),\n    objectKind,\n    organizationId: readString(row, \"organization_id\"),\n    remoteId: readString(row, \"remote_id\"),\n    status:\n      readString(row, \"operation_status\") === \"blocked\" ? \"blocked\" : \"pending\",\n    targetContainerId: readString(row, \"target_container_id\"),\n    updatedAt: readString(row, \"updated_at\"),\n  };\n}\n\nexport async function listPersistedPendingWriteCandidates(\n  execSql: ExecSql,\n): Promise<PendingWriteCandidate[]> {\n  const rows = await execSql(PENDING_WRITE_SOURCE_SQL);\n  return rows.flatMap((row) => {\n    const candidate = mapPendingWriteSourceRow(row);\n    return candidate ? [candidate] : [];\n  });\n}\n"]}

package/workflows/container-contents/pendingWrites.js

@@ -3,7 +3,7 @@ import { sqlDocumentMoveIntentPersistence } from "../../data/persistence/contain
 import { sqlDocumentsPersistence } from "../../data/persistence/documents/documentsPersistence.js";
 import { DOCUMENTS_APP_KIND } from "../../data/persistence/documents/internal/constants.js";
 import { clearDocumentSyncFailure, resetDocumentPendingUpdateRekeyBudget, } from "../../data/sqlite/documentPersistence.js";
-import { documentMoveIntentTables, documentTables, } from "../../data/sqlite/schema.js";
+import { documentPlacementIntentTables, documentTables, LOCAL_INTENT_LANES, } from "../../data/sqlite/schema.js";
 import { ensureSqlTables } from "../../data/sqlite/sqlSchema.js";
 import { defaultContainerContentsPersistence } from "./containerPersistence.js";
 import { groupPendingWriteCandidates } from "./pendingWrites/aggregation.js";
@@ -74,7 +74,7 @@ export async function resetPendingWriteRetryState(execSql, input) {
 async function hasQueuedScopeWork(execSql, scope) {
     await ensureSqlTables(execSql, [
         ...documentTables,
-        ...documentMoveIntentTables,
+        ...documentPlacementIntentTables,
     ]);
     const rows = await execSql(`SELECT 1 AS present
      WHERE EXISTS (
@@ -87,8 +87,10 @@ async function hasQueuedScopeWork(execSql, scope) {
          WHERE attachment.local_id = ?
        )
        OR EXISTS (
-         SELECT 1 FROM document_move_intents intent
-         WHERE intent.local_id = ? AND intent.intent_type IN ('document.move', 'document.link')
+         SELECT 1 FROM local_intents intent
+         WHERE intent.lane = '${LOCAL_INTENT_LANES.documentPlacement}'
+           AND intent.local_id = ?
+           AND intent.intent_type IN ('document.move', 'document.link')
        )
        OR EXISTS (
          SELECT 1 FROM documents stored

package/workflows/container-contents/pendingWrites.js.map

@@ -1 +1 @@
-{"version":3,"file":"pendingWrites.js","sourceRoot":"","sources":["pendingWrites.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,wEAAwE,CAAC;AACrH,OAAO,EAAE,gCAAgC,EAAE,MAAM,yEAAyE,CAAC;AAC3H,OAAO,EAAE,uBAAuB,EAAE,MAAM,uDAAuD,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,qDAAqD,CAAC;AACzF,OAAO,EACL,wBAAwB,EACxB,qCAAqC,GACtC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,wBAAwB,EACxB,cAAc,GACf,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,mCAAmC,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EACL,wBAAwB,EACxB,kCAAkC,GACnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAY9E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB;IAEhB,MAAM,mCAAmC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,uBAAuB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,gCAAgC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAE7D,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,mCAAmC,CAAC,OAAO,CAAC;QAC5C,kCAAkC,CAAC,OAAO,CAAC;KAC5C,CAAC,CAAC;IACH,OAAO,2BAA2B,CAAC,CAAC,GAAG,SAAS,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAgB,EAChB,KAKC;IAED,MAAM,OAAO,GACX,KAAK,CAAC,UAAU,KAAK,WAAW;QAC9B,CAAC,CAAC,2BAA2B;QAC7B,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS;YAChB,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,wEAAwE;QACxE,uEAAuE;QACvE,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,qCAAqC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;QACnC,yEAAyE;QACzE,sEAAsE;QACtE,uBAAuB;QACvB,MAAM,gCAAgC,CAAC,sBAAsB,CAAC,OAAO,EAAE;YACrE,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;IACD,yEAAyE;IACzE,0EAA0E;IAC1E,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,MAAM,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,wBAAwB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAgB,EAChB,KAA2C;IAE3C,MAAM,eAAe,CAAC,OAAO,EAAE;QAC7B,GAAG,cAAc;QACjB,GAAG,wBAAwB;KAC5B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB;;;;;;;;;;;;;;;;;;;aAmBS,EACT;QACE,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,OAAO;KACd,CACF,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,sEAAsE;IACtE,kEAAkE;IAClE,iCAAiC;IACjC,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAClD,CAAC","sourcesContent":["import { CONTAINER_METADATA_APP_KIND } from \"../../data/persistence/container-contents/containerContentsPersistence\";\nimport { sqlDocumentMoveIntentPersistence } from \"../../data/persistence/container-contents/documentMoveIntentPersistence\";\nimport { sqlDocumentsPersistence } from \"../../data/persistence/documents/documentsPersistence\";\nimport { DOCUMENTS_APP_KIND } from \"../../data/persistence/documents/internal/constants\";\nimport {\n  clearDocumentSyncFailure,\n  resetDocumentPendingUpdateRekeyBudget,\n} from \"../../data/sqlite/documentPersistence\";\nimport {\n  documentMoveIntentTables,\n  documentTables,\n} from \"../../data/sqlite/schema\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport { ensureSqlTables } from \"../../data/sqlite/sqlSchema\";\nimport { defaultContainerContentsPersistence } from \"./containerPersistence\";\nimport { groupPendingWriteCandidates } from \"./pendingWrites/aggregation\";\nimport {\n  hasDeferredTailScopeWork,\n  listDeferredPendingWriteCandidates,\n} from \"./pendingWrites/deferredTails\";\nimport { listPersistedPendingWriteCandidates } from \"./pendingWrites/sources\";\nimport type { PendingWriteQueueItem } from \"./pendingWritesTypes\";\n\nexport type {\n  PendingWriteQueueItem,\n  PendingWriteQueueItemStatus,\n  PendingWriteQueueObjectKind,\n  PendingWriteQueueOperation,\n  PendingWriteQueueOperationKind,\n  PendingWriteQueueOperationStatus,\n} from \"./pendingWritesTypes\";\n\n/**\n * List identity-wide local state that still requires a remote write. The\n * returned diagnostic contains only navigation/display metadata and aggregate\n * counts; serialized updates, local storage keys, and upload crypto stay below\n * the workflow boundary.\n */\nexport async function listPendingWrites(\n  execSql: ExecSql,\n): Promise<ReadonlyArray<PendingWriteQueueItem>> {\n  await defaultContainerContentsPersistence.ensureSchema(execSql);\n  await sqlDocumentsPersistence.ensureSchema(execSql);\n  await sqlDocumentMoveIntentPersistence.ensureSchema(execSql);\n\n  const [persisted, deferred] = await Promise.all([\n    listPersistedPendingWriteCandidates(execSql),\n    listDeferredPendingWriteCandidates(execSql),\n  ]);\n  return groupPendingWriteCandidates([...persisted, ...deferred]);\n}\n\n/**\n * Explicit manual retry for one write-queue item: reset the durable re-key\n * budget for the item's ACTUAL pending-update scope (container metadata and\n * unknown document namespaces re-key through the same recovery path as\n * ordinary documents) and clear the recorded terminal failure — the next\n * pass re-records both if they still hold. The cap protects against a\n * server driving a network-speed re-key loop; a deliberate user retry is\n * the rate-limited signal that conditions have changed (e.g. an outage that\n * burned the budget has healed). The caller re-arms the sync lanes.\n */\nexport async function resetPendingWriteRetryState(\n  execSql: ExecSql,\n  input: {\n    localId: string;\n    /** The item's `namespace` — the unrecognized documents.app_kind, if any. */\n    namespace: string | null;\n    objectKind: PendingWriteQueueItem[\"objectKind\"];\n  },\n): Promise<void> {\n  const appKind =\n    input.objectKind === \"container\"\n      ? CONTAINER_METADATA_APP_KIND\n      : (input.namespace ??\n        (input.objectKind === \"document\" ? DOCUMENTS_APP_KIND : null));\n  if (appKind === null) {\n    // An unknown object kind with no namespace: there is no scope to reset,\n    // and guessing one could clear an unrelated scope sharing the localId.\n    return;\n  }\n  const scope = { appKind, localId: input.localId };\n  await resetDocumentPendingUpdateRekeyBudget(execSql, scope);\n  if (appKind === DOCUMENTS_APP_KIND) {\n    // A deliberate retry is the rate-limited signal that conditions changed:\n    // a parked permission-denied move (row 7) replays once, like row 11's\n    // re-key budget reset.\n    await sqlDocumentMoveIntentPersistence.resetDeniedMoveIntents(execSql, {\n      localId: input.localId,\n    });\n  }\n  // Clearing the failure row is part of the re-key budget reset (edge-case\n  // row 11) and only makes sense alongside queued work. A failure-only item\n  // (a refused revalidation, row 13) has no queued work: its row is the\n  // priming ticket that re-drives the store, so it must survive the retry\n  // and clear on the next clean pass instead of vanishing with no request.\n  if (await hasQueuedScopeWork(execSql, scope)) {\n    await clearDocumentSyncFailure(execSql, scope);\n  }\n}\n\n/**\n * Whether ANY durable outbound work exists for the scope — CRDT updates,\n * staged attachment uploads, move intents, a never-created local document, or\n * a deferred write whose only durable content is the history tail ahead of\n * its covered frontier. Mirrors the queue's own document candidate sources,\n * so \"failure-only\" here agrees with the item the panel rendered.\n */\nasync function hasQueuedScopeWork(\n  execSql: ExecSql,\n  scope: { appKind: string; localId: string },\n): Promise<boolean> {\n  await ensureSqlTables(execSql, [\n    ...documentTables,\n    ...documentMoveIntentTables,\n  ]);\n  const rows = await execSql(\n    `SELECT 1 AS present\n     WHERE EXISTS (\n         SELECT 1 FROM document_history_updates pending\n         WHERE pending.app_kind = ? AND pending.local_id = ?\n           AND pending.update_id IS NOT NULL\n       )\n       OR EXISTS (\n         SELECT 1 FROM document_pending_attachments attachment\n         WHERE attachment.local_id = ?\n       )\n       OR EXISTS (\n         SELECT 1 FROM document_move_intents intent\n         WHERE intent.local_id = ? AND intent.intent_type IN ('document.move', 'document.link')\n       )\n       OR EXISTS (\n         SELECT 1 FROM documents stored\n         WHERE stored.app_kind = ? AND stored.local_id = ?\n           AND stored.document_id IS NULL\n       )\n     LIMIT 1`,\n    [\n      scope.appKind,\n      scope.localId,\n      scope.localId,\n      scope.localId,\n      scope.appKind,\n      scope.localId,\n    ],\n  );\n  if (rows.length > 0) {\n    return true;\n  }\n  // The queue's deferred-update source has no queued rows to probe: the\n  // write lives in the durable history tail, detectable only by the\n  // version-vector coverage check.\n  return hasDeferredTailScopeWork(execSql, scope);\n}\n"]}
+{"version":3,"file":"pendingWrites.js","sourceRoot":"","sources":["pendingWrites.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,wEAAwE,CAAC;AACrH,OAAO,EAAE,gCAAgC,EAAE,MAAM,yEAAyE,CAAC;AAC3H,OAAO,EAAE,uBAAuB,EAAE,MAAM,uDAAuD,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,qDAAqD,CAAC;AACzF,OAAO,EACL,wBAAwB,EACxB,qCAAqC,GACtC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,6BAA6B,EAC7B,cAAc,EACd,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,mCAAmC,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EACL,wBAAwB,EACxB,kCAAkC,GACnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAY9E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB;IAEhB,MAAM,mCAAmC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,uBAAuB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,gCAAgC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAE7D,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,mCAAmC,CAAC,OAAO,CAAC;QAC5C,kCAAkC,CAAC,OAAO,CAAC;KAC5C,CAAC,CAAC;IACH,OAAO,2BAA2B,CAAC,CAAC,GAAG,SAAS,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAgB,EAChB,KAKC;IAED,MAAM,OAAO,GACX,KAAK,CAAC,UAAU,KAAK,WAAW;QAC9B,CAAC,CAAC,2BAA2B;QAC7B,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS;YAChB,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,wEAAwE;QACxE,uEAAuE;QACvE,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,qCAAqC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;QACnC,yEAAyE;QACzE,sEAAsE;QACtE,uBAAuB;QACvB,MAAM,gCAAgC,CAAC,sBAAsB,CAAC,OAAO,EAAE;YACrE,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;IACD,yEAAyE;IACzE,0EAA0E;IAC1E,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,MAAM,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,wBAAwB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAgB,EAChB,KAA2C;IAE3C,MAAM,eAAe,CAAC,OAAO,EAAE;QAC7B,GAAG,cAAc;QACjB,GAAG,6BAA6B;KACjC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB;;;;;;;;;;;;gCAY4B,kBAAkB,CAAC,iBAAiB;;;;;;;;;aASvD,EACT;QACE,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,OAAO;KACd,CACF,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,sEAAsE;IACtE,kEAAkE;IAClE,iCAAiC;IACjC,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAClD,CAAC","sourcesContent":["import { CONTAINER_METADATA_APP_KIND } from \"../../data/persistence/container-contents/containerContentsPersistence\";\nimport { sqlDocumentMoveIntentPersistence } from \"../../data/persistence/container-contents/documentMoveIntentPersistence\";\nimport { sqlDocumentsPersistence } from \"../../data/persistence/documents/documentsPersistence\";\nimport { DOCUMENTS_APP_KIND } from \"../../data/persistence/documents/internal/constants\";\nimport {\n  clearDocumentSyncFailure,\n  resetDocumentPendingUpdateRekeyBudget,\n} from \"../../data/sqlite/documentPersistence\";\nimport {\n  documentPlacementIntentTables,\n  documentTables,\n  LOCAL_INTENT_LANES,\n} from \"../../data/sqlite/schema\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport { ensureSqlTables } from \"../../data/sqlite/sqlSchema\";\nimport { defaultContainerContentsPersistence } from \"./containerPersistence\";\nimport { groupPendingWriteCandidates } from \"./pendingWrites/aggregation\";\nimport {\n  hasDeferredTailScopeWork,\n  listDeferredPendingWriteCandidates,\n} from \"./pendingWrites/deferredTails\";\nimport { listPersistedPendingWriteCandidates } from \"./pendingWrites/sources\";\nimport type { PendingWriteQueueItem } from \"./pendingWritesTypes\";\n\nexport type {\n  PendingWriteQueueItem,\n  PendingWriteQueueItemStatus,\n  PendingWriteQueueObjectKind,\n  PendingWriteQueueOperation,\n  PendingWriteQueueOperationKind,\n  PendingWriteQueueOperationStatus,\n} from \"./pendingWritesTypes\";\n\n/**\n * List identity-wide local state that still requires a remote write. The\n * returned diagnostic contains only navigation/display metadata and aggregate\n * counts; serialized updates, local storage keys, and upload crypto stay below\n * the workflow boundary.\n */\nexport async function listPendingWrites(\n  execSql: ExecSql,\n): Promise<ReadonlyArray<PendingWriteQueueItem>> {\n  await defaultContainerContentsPersistence.ensureSchema(execSql);\n  await sqlDocumentsPersistence.ensureSchema(execSql);\n  await sqlDocumentMoveIntentPersistence.ensureSchema(execSql);\n\n  const [persisted, deferred] = await Promise.all([\n    listPersistedPendingWriteCandidates(execSql),\n    listDeferredPendingWriteCandidates(execSql),\n  ]);\n  return groupPendingWriteCandidates([...persisted, ...deferred]);\n}\n\n/**\n * Explicit manual retry for one write-queue item: reset the durable re-key\n * budget for the item's ACTUAL pending-update scope (container metadata and\n * unknown document namespaces re-key through the same recovery path as\n * ordinary documents) and clear the recorded terminal failure — the next\n * pass re-records both if they still hold. The cap protects against a\n * server driving a network-speed re-key loop; a deliberate user retry is\n * the rate-limited signal that conditions have changed (e.g. an outage that\n * burned the budget has healed). The caller re-arms the sync lanes.\n */\nexport async function resetPendingWriteRetryState(\n  execSql: ExecSql,\n  input: {\n    localId: string;\n    /** The item's `namespace` — the unrecognized documents.app_kind, if any. */\n    namespace: string | null;\n    objectKind: PendingWriteQueueItem[\"objectKind\"];\n  },\n): Promise<void> {\n  const appKind =\n    input.objectKind === \"container\"\n      ? CONTAINER_METADATA_APP_KIND\n      : (input.namespace ??\n        (input.objectKind === \"document\" ? DOCUMENTS_APP_KIND : null));\n  if (appKind === null) {\n    // An unknown object kind with no namespace: there is no scope to reset,\n    // and guessing one could clear an unrelated scope sharing the localId.\n    return;\n  }\n  const scope = { appKind, localId: input.localId };\n  await resetDocumentPendingUpdateRekeyBudget(execSql, scope);\n  if (appKind === DOCUMENTS_APP_KIND) {\n    // A deliberate retry is the rate-limited signal that conditions changed:\n    // a parked permission-denied move (row 7) replays once, like row 11's\n    // re-key budget reset.\n    await sqlDocumentMoveIntentPersistence.resetDeniedMoveIntents(execSql, {\n      localId: input.localId,\n    });\n  }\n  // Clearing the failure row is part of the re-key budget reset (edge-case\n  // row 11) and only makes sense alongside queued work. A failure-only item\n  // (a refused revalidation, row 13) has no queued work: its row is the\n  // priming ticket that re-drives the store, so it must survive the retry\n  // and clear on the next clean pass instead of vanishing with no request.\n  if (await hasQueuedScopeWork(execSql, scope)) {\n    await clearDocumentSyncFailure(execSql, scope);\n  }\n}\n\n/**\n * Whether ANY durable outbound work exists for the scope — CRDT updates,\n * staged attachment uploads, move intents, a never-created local document, or\n * a deferred write whose only durable content is the history tail ahead of\n * its covered frontier. Mirrors the queue's own document candidate sources,\n * so \"failure-only\" here agrees with the item the panel rendered.\n */\nasync function hasQueuedScopeWork(\n  execSql: ExecSql,\n  scope: { appKind: string; localId: string },\n): Promise<boolean> {\n  await ensureSqlTables(execSql, [\n    ...documentTables,\n    ...documentPlacementIntentTables,\n  ]);\n  const rows = await execSql(\n    `SELECT 1 AS present\n     WHERE EXISTS (\n         SELECT 1 FROM document_history_updates pending\n         WHERE pending.app_kind = ? AND pending.local_id = ?\n           AND pending.update_id IS NOT NULL\n       )\n       OR EXISTS (\n         SELECT 1 FROM document_pending_attachments attachment\n         WHERE attachment.local_id = ?\n       )\n       OR EXISTS (\n         SELECT 1 FROM local_intents intent\n         WHERE intent.lane = '${LOCAL_INTENT_LANES.documentPlacement}'\n           AND intent.local_id = ?\n           AND intent.intent_type IN ('document.move', 'document.link')\n       )\n       OR EXISTS (\n         SELECT 1 FROM documents stored\n         WHERE stored.app_kind = ? AND stored.local_id = ?\n           AND stored.document_id IS NULL\n       )\n     LIMIT 1`,\n    [\n      scope.appKind,\n      scope.localId,\n      scope.localId,\n      scope.localId,\n      scope.appKind,\n      scope.localId,\n    ],\n  );\n  if (rows.length > 0) {\n    return true;\n  }\n  // The queue's deferred-update source has no queued rows to probe: the\n  // write lives in the durable history tail, detectable only by the\n  // version-vector coverage check.\n  return hasDeferredTailScopeWork(execSql, scope);\n}\n"]}

package/workflows/container-contents/remoteContainerState.js

@@ -18,7 +18,8 @@ import { verifyRemoteContainerDestination } from "./remoteHydration/verifiedDest
 // move — one whose destination parent has not synced yet, the common boot-time
 // case — is protected too. Pending *metadata*
 // updates are handled separately (listRemoteContainerIdsWithPendingMetadataUpdates);
-// these live in dedicated create/move intent tables that that query does not cover.
+// structural intents live in the local outbox's container lanes, which that
+// query does not cover.
 export async function listRemoteContainerIdsWithPendingStructuralIntents(input) {
     if (input.remoteContainers.length === 0) {
         return new Set();

package/workflows/container-contents/remoteContainerState.js.map

@@ -1 +1 @@
-{"version":3,"file":"remoteContainerState.js","sourceRoot":"","sources":["remoteContainerState.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,iCAAiC,GAClC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,sCAAsC,EAAE,MAAM,+CAA+C,CAAC;AAEvG,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EACL,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EACL,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,mCAAmC,EACnC,6CAA6C,GAC9C,MAAM,6CAA6C,CAAC;AAQrD,OAAO,EAAE,gCAAgC,EAAE,MAAM,uCAAuC,CAAC;AAEzF,8EAA8E;AAC9E,gFAAgF;AAChF,6EAA6E;AAC7E,sEAAsE;AACtE,4EAA4E;AAC5E,2EAA2E;AAC3E,+EAA+E;AAC/E,8CAA8C;AAC9C,qFAAqF;AACrF,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,kDAAkD,CAAC,KAGxE;IACC,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CACpE,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAClD,MAAM,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,wBAAwB,CAAC,OAAO,CAAC;QACzD,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,uBAAuB,CAAC,OAAO,CAAC;KACzD,CAAC,CAAC;IACH,MAAM,wCAAwC,GAAG,IAAI,GAAG,EAAU,CAAC;IACnE,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;QAC1C,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,wCAAwC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACzC,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,wCAAwC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,OAAO,wCAAwC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gDAAgD,CAAC,KAGtE;IACC,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,EAAE;QACtE,MAAM,sBAAsB,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAC3D,eAAe,CAAC,EAAE,CACnB,EAAE,SAAS,CAAC,cAAc,CAAC;QAE5B,OAAO,sBAAsB;YAC3B,sBAAsB,CAAC,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC;YACnE,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC;YACtB,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAClD,OAAO,IAAI,GAAG,CACZ,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,kCAAkC,CAC9D,OAAO,EACP,YAAY,CACb,CACF,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,KAOvC;IACC,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,aAAa,EAAE,CAAC;QACnE,OAAO;IACT,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,2BAA2B,CACzB,KAAK,CAAC,kBAAkB,EACxB,eAAe,CAAC,EAAE,EAClB,KAAK,CAAC,gBAAgB,CACvB,CAAC;QACF,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,iCAAiC,CACxC,aAA6B,EAC7B,eAAgC;IAEhC,OAAO;QACL,GAAG,aAAa;QAChB,SAAS,EAAE,8BAA8B,CACvC,aAAa,CAAC,SAAS,EACvB,eAAe,CAChB;QACD,yBAAyB,EAAE,IAAI;QAC/B,4BAA4B,EAAE,eAAe,CAAC,4BAA4B;KAC3E,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CACzC,aAA6B,EAC7B,SAAyB,EACzB,IAAkC;IAElC,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,CAAC,eAAe,IAAI,IAAI,CAAC;IACrE,aAAa,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;IAC9C,aAAa,CAAC,yBAAyB,GAAG,SAAS,CAAC,yBAAyB,CAAC;IAC9E,aAAa,CAAC,4BAA4B;QACxC,SAAS,CAAC,4BAA4B,CAAC;IACzC,yEAAyE;IACzE,yEAAyE;IACzE,IAAI,oBAAoB,CAAC,aAAa,CAAC,KAAK,oBAAoB,CAAC,SAAS,CAAC;QACzE,aAAa,CAAC,wBAAwB,GAAG,SAAS,CAAC,wBAAwB,CAAC;IAC9E,8BAA8B,CAAC,aAAa,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAChE,wEAAwE;IACxE,+EAA+E;IAC/E,IAAI,YAAY,IAAI,aAAa,CAAC,SAAS,CAAC,eAAe,IAAI,IAAI;QACjE,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,kCAAkC,CAAC,KASjD;IACC,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,GACvE,KAAK,CAAC;IACR,MAAM,gBAAgB,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC;IAC1D,MAAM,sBAAsB,GAAG,aAAa,CAAC,SAAS,CAAC,cAAc,CAAC;IACtE,0EAA0E;IAC1E,8EAA8E;IAC9E,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,0BAA0B,GAC9B,KAAK,CAAC,wCAAwC,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,0BAA0B;QAC7C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC;IAC7B,MAAM,cAAc,GAAG,6CAA6C,CAAC;QACnE,sCAAsC,EACpC,KAAK,CAAC,sCAAsC;QAC9C,0BAA0B;QAC1B,sBAAsB;QACtB,eAAe;KAChB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,iCAAiC,CACjD,aAAa,EACb,eAAe,CAChB,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CACxD,SAAS,EACT;QACE,WAAW,EAAE,eAAe,CAAC,mBAAmB;QAChD,eAAe,EAAE,eAAe,CAAC,uBAAuB;QACxD,UAAU,EAAE,eAAe,CAAC,kBAAkB;QAC9C,oBAAoB,EAAE,eAAe,CAAC,oBAAoB;QAC1D,kBAAkB,EAAE,eAAe,CAAC,kBAAkB;QACtD,UAAU,EAAE,eAAe,CAAC,UAAU,IAAI,IAAI;QAC9C,cAAc,EAAE,eAAe,CAAC,cAAc;QAC9C,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,EACD,KAAK,EACL,mCAAmC,CAAC;QAClC,cAAc;QACd,eAAe;KAChB,CAAC,EACF;QACE,mCAAmC,EAAE,IAAI;KAC1C,CACF,CAAC;IACF,IAAI,iBAAiB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3C,0EAA0E;QAC1E,4EAA4E;QAC5E,6EAA6E;QAC7E,8BAA8B,CAAC;YAC7B,kBAAkB;YAClB,aAAa;YACb,IAAI;YACJ,gBAAgB;YAChB,eAAe;YACf,KAAK;SACN,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,iBAAiB,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC;IACjD,8BAA8B,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,SAAS,CAAC,SAAS,GAAG;QACpB,GAAG,SAAS,CAAC,SAAS;QACtB,kBAAkB,EAAE,eAAe,CAAC,kBAAkB;QACtD,cAAc,EAAE,eAAe,CAAC,cAAc;QAC9C,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ;KACvC,CAAC;IAEF,kCAAkC,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACnE,yBAAyB,CACvB,kBAAkB,EAClB,eAAe,CAAC,EAAE,EAClB,gBAAgB,EAChB,aAAa,CAAC,SAAS,CAAC,QAAQ,CACjC,CAAC;IACF,MAAM,gCAAgC,CAAC;QACrC,kBAAkB;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,aAAa;QAC9B,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,KAAK;KACN,CAAC,CAAC;IACH,OAAO,aAAa,CAAC;AACvB,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAsC;IAEtC,IAAI,2BAAiE,CAAC;IACtE,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,SAAS;QAC3B,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC;QACjC,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,wBAAwB,CACpD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EACjC,KAAK,CAAC,eAAe,CAAC,EAAE,CACzB,CAAC;IACN,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC;IACrC,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,iBAAiB,GACrB,CAAC,iCAAiC,CAAC,WAAW,EAAE,MAAM,CAAC;QACvD,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,4BAA4B,CACzD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EACjC,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAClE,CAAC,CAAC;IACL,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CAAC;QACtD,GAAG,KAAK;QACR,WAAW;QACX,iBAAiB;QACjB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B;QAC3C,oBAAoB,EAAE,CAAC,UAAU,EAAE,EAAE;YACnC,2BAA2B,GAAG,UAAU,CAAC;QAC3C,CAAC;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC5D,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;IAChD,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAClD,KAAK,CAAC,eAAe,CAAC,EAAE,CACzB,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,gCAAgC,CACxD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAC/C;QACE,QAAQ,EAAE,QAAQ,CAAC,EAAE;QACrB,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,2BAA2B;QACtC,cAAc,EAAE,QAAQ,CAAC,cAAc;KACxC,EACD,KAAK,IAAI,EAAE,CACT,CAAC,MAAM,sBAAsB,CAAC;QAC5B,aAAa;QACb,WAAW;QACX,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ;KACT,CAAC,CAAC;QACD,CAAC,CAAC,8BAA8B,CAAC;YAC7B,GAAG,KAAK;YACR,aAAa;YACb,2BAA2B;SAC5B,CAAC;QACJ,CAAC,CAAC,IAAI,CACX,CAAC;IACF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,kCAAkC,CAAC;QACvC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB;QACzD,iBAAiB,EAAE,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,KAAsC;IAEtC,IAAI,CAAC;QACH,OAAO,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,CAAC,yBAAyB,CAAC,KAAK,CAAC;YACjC,CAAC,sCAAsC,CAAC,KAAK,CAAC;YAE9C,MAAM,KAAK,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CACrC,KAGC;IAED,MAAM,EAAE,aAAa,EAAE,2BAA2B,EAAE,GAAG,KAAK,CAAC;IAC7D,OAAO,aAAa;QAClB,CAAC,CAAC,kCAAkC,CAAC;YACjC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,sCAAsC,EACpC,KAAK,CAAC,sCAAsC;YAC9C,wCAAwC,EACtC,KAAK,CAAC,wCAAwC;YAChD,aAAa;YACb,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;QACJ,CAAC,CAAC,0BAA0B,CAAC;YACzB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,0BAA0B,EAAE,KAAK,CAAC,0BAA0B,IAAI,IAAI;YACpE,2BAA2B;YAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;AACT,CAAC","sourcesContent":["import type { AccessManifestCheckpoint } from \"@tearleads/crypto\";\nimport {\n  heldContainerBinding,\n  listingRepeatsHeldOrdinaryBinding,\n} from \"../../data/containers/containerBinding\";\nimport {\n  isKeyingVerificationError,\n  runWithSecurityIncidentReporting,\n} from \"../../data/keyingProjectionVerification/error\";\nimport { isProjectionVerificationCancelledError } from \"../../data/keyingProjectionVerification/types\";\nimport type { ContainerHydrationTombstone } from \"./containerPersistence\";\nimport { installContainerMetadataRecord } from \"./metadataPersistence\";\nimport { projectionGeneration } from \"./projectionGeneration\";\nimport {\n  moveIndexedContainerChild,\n  removeIndexedContainerChild,\n} from \"./remoteHydration/childIndex\";\nimport type { PrefetchedDestinationProjection } from \"./remoteHydration/destinationPrefetch\";\nimport { rebindReHomedContainer } from \"./remoteHydration/heldContainerRebind\";\nimport { insertRemoteContainerState } from \"./remoteHydration/insertRemoteContainer\";\nimport {\n  reconcileLocalOnlyRootContainers,\n  reconcileLocalOnlySystemContainers,\n} from \"./remoteHydration/reconciliation\";\nimport {\n  applyRemoteContainerTimestamps,\n  remoteContainerHydrationSaveOptions,\n  resolveRemoteContainerHydrationLocalUpdatedAt,\n} from \"./remoteHydration/remoteContainerTimestamps\";\nimport type {\n  ContainerChildIndex,\n  ContainerState,\n  RemoteContainer,\n  RemoteContainerHydrationHost,\n  RemoteContainerHydrationState,\n} from \"./remoteHydration/types\";\nimport { verifyRemoteContainerDestination } from \"./remoteHydration/verifiedDestination\";\n\n// Container ids (restricted to the inbound page) that carry an unsynced local\n// create or move intent. Such a container's parent and local-edit timestamp are\n// owned by its structural-intent lane until that lane reconciles, so inbound\n// hydration must not revert parentId to the server value nor collapse\n// localUpdatedAt — doing so silently undoes a queued move and falsely reads\n// \"synced\". Move intents are read via listUnsyncedMoveIntents so a blocked\n// move — one whose destination parent has not synced yet, the common boot-time\n// case — is protected too. Pending *metadata*\n// updates are handled separately (listRemoteContainerIdsWithPendingMetadataUpdates);\n// these live in dedicated create/move intent tables that that query does not cover.\nexport async function listRemoteContainerIdsWithPendingStructuralIntents(input: {\n  remoteContainers: ReadonlyArray<RemoteContainer>;\n  state: RemoteContainerHydrationState;\n}): Promise<Set<string>> {\n  if (input.remoteContainers.length === 0) {\n    return new Set();\n  }\n  const remoteContainerIds = new Set(\n    input.remoteContainers.map((remoteContainer) => remoteContainer.id),\n  );\n\n  const execSql = input.state.runtime.infra.execSql;\n  const [pendingCreateIntents, unsyncedMoveIntents] = await Promise.all([\n    input.state.persistence.listPendingCreateIntents(execSql),\n    input.state.persistence.listUnsyncedMoveIntents(execSql),\n  ]);\n  const containerIdsWithPendingStructuralIntents = new Set<string>();\n  for (const intent of pendingCreateIntents) {\n    if (remoteContainerIds.has(intent.containerId)) {\n      containerIdsWithPendingStructuralIntents.add(intent.containerId);\n    }\n  }\n  for (const intent of unsyncedMoveIntents) {\n    if (remoteContainerIds.has(intent.containerId)) {\n      containerIdsWithPendingStructuralIntents.add(intent.containerId);\n    }\n  }\n  return containerIdsWithPendingStructuralIntents;\n}\n\nexport async function listRemoteContainerIdsWithPendingMetadataUpdates(input: {\n  remoteContainers: ReadonlyArray<RemoteContainer>;\n  state: RemoteContainerHydrationState;\n}): Promise<Set<string>> {\n  const containerIds = input.remoteContainers.flatMap((remoteContainer) => {\n    const previousLocalUpdatedAt = input.state.containersById.get(\n      remoteContainer.id,\n    )?.container.localUpdatedAt;\n\n    return previousLocalUpdatedAt &&\n      previousLocalUpdatedAt.localeCompare(remoteContainer.updatedAt) > 0\n      ? [remoteContainer.id]\n      : [];\n  });\n  if (containerIds.length === 0) {\n    return new Set();\n  }\n\n  const execSql = input.state.runtime.infra.execSql;\n  return new Set(\n    await input.state.persistence.listContainerIdsWithPendingUpdates(\n      execSql,\n      containerIds,\n    ),\n  );\n}\n\nfunction removeMissingHydratedContainer(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  existingState: ContainerState;\n  host: RemoteContainerHydrationHost;\n  previousParentId: string | null;\n  remoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}): void {\n  const { existingState, remoteContainer, state } = input;\n  if (state.containersById.get(remoteContainer.id) !== existingState) {\n    return;\n  }\n\n  state.containersById.delete(remoteContainer.id);\n  if (input.childIdsByParentId) {\n    removeIndexedContainerChild(\n      input.childIdsByParentId,\n      remoteContainer.id,\n      input.previousParentId,\n    );\n    input.childIdsByParentId.delete(remoteContainer.id);\n  }\n  input.host.updateSnapshot();\n}\n\nfunction createUpdatedRemoteContainerState(\n  existingState: ContainerState,\n  remoteContainer: RemoteContainer,\n): ContainerState {\n  return {\n    ...existingState,\n    container: applyRemoteContainerTimestamps(\n      existingState.container,\n      remoteContainer,\n    ),\n    containerWriterProjection: null,\n    metadataReferencedPrincipals: remoteContainer.metadataReferencedPrincipals,\n  };\n}\n\nfunction installUpdatedRemoteContainerState(\n  existingState: ContainerState,\n  nextState: ContainerState,\n  host: RemoteContainerHydrationHost,\n): void {\n  const wasLocalOnly = existingState.container.serverCreatedAt == null;\n  existingState.container = nextState.container;\n  existingState.containerWriterProjection = nextState.containerWriterProjection;\n  existingState.metadataReferencedPrincipals =\n    nextState.metadataReferencedPrincipals;\n  // The snapshot copied the live generation when it was taken; a hint that\n  // landed during the persist leaves the live metadata projection dropped.\n  if (projectionGeneration(existingState) === projectionGeneration(nextState))\n    existingState.metadataWriterProjection = nextState.metadataWriterProjection;\n  installContainerMetadataRecord(existingState, nextState.record);\n  // A document pass may have deferred while this root was awaiting proof.\n  // The first durable remote acknowledgement makes its pending creates runnable.\n  if (wasLocalOnly && existingState.container.serverCreatedAt != null)\n    host.requestDocumentPriming?.();\n}\n\nasync function updateExistingRemoteContainerState(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  containerIdsWithPendingMetadataUpdates: ReadonlySet<string>;\n  containerIdsWithPendingStructuralIntents: ReadonlySet<string>;\n  host: RemoteContainerHydrationHost;\n  isCurrent?: (() => boolean) | undefined;\n  existingState: ContainerState;\n  remoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}): Promise<ContainerState | null> {\n  const { childIdsByParentId, existingState, host, remoteContainer, state } =\n    input;\n  const previousParentId = existingState.container.parentId;\n  const previousLocalUpdatedAt = existingState.container.localUpdatedAt;\n  // A queued, not-yet-synced local move/create owns this container's parent\n  // until its intent lane reconciles. Omit the remote parent when the page scan\n  // saw one; persistence also rechecks the intent transactionally so a move\n  // created after that scan wins. Both paths preserve the durable local clock.\n  const hasPendingStructuralIntent =\n    input.containerIdsWithPendingStructuralIntents.has(remoteContainer.id);\n  const nextParentId = hasPendingStructuralIntent\n    ? undefined\n    : remoteContainer.parentId;\n  const localUpdatedAt = resolveRemoteContainerHydrationLocalUpdatedAt({\n    containerIdsWithPendingMetadataUpdates:\n      input.containerIdsWithPendingMetadataUpdates,\n    hasPendingStructuralIntent,\n    previousLocalUpdatedAt,\n    remoteContainer,\n  });\n  const nextState = createUpdatedRemoteContainerState(\n    existingState,\n    remoteContainer,\n  );\n  const persistenceResult = await host.persistContainerState(\n    nextState,\n    {\n      accessEpoch: remoteContainer.metadataAccessEpoch,\n      accessStateHash: remoteContainer.metadataAccessStateHash,\n      documentId: remoteContainer.metadataDocumentId,\n      effectiveAccessLevel: remoteContainer.effectiveAccessLevel,\n      metadataDocumentId: remoteContainer.metadataDocumentId,\n      systemSlot: remoteContainer.systemSlot ?? null,\n      organizationId: remoteContainer.organizationId,\n      ...(nextParentId !== undefined ? { parentId: nextParentId } : {}),\n    },\n    false,\n    remoteContainerHydrationSaveOptions({\n      localUpdatedAt,\n      remoteContainer,\n    }),\n    {\n      preserveDurableStructureWhenPending: true,\n    },\n  );\n  if (persistenceResult.status === \"missing\") {\n    // Hydration persists a detached candidate so an in-flight response cannot\n    // mutate mapped state before its guards settle. Retire the exact state this\n    // hydration read because store-level reference cleanup cannot see the clone.\n    removeMissingHydratedContainer({\n      childIdsByParentId,\n      existingState,\n      host,\n      previousParentId,\n      remoteContainer,\n      state,\n    });\n    return null;\n  }\n  if (persistenceResult.status !== \"persisted\") return null;\n  const { record: nextRecord } = persistenceResult;\n  installContainerMetadataRecord(nextState, nextRecord);\n  if (input.isCurrent?.() === false) {\n    return existingState;\n  }\n  nextState.container = {\n    ...nextState.container,\n    metadataDocumentId: remoteContainer.metadataDocumentId,\n    organizationId: remoteContainer.organizationId,\n    parentId: nextState.container.parentId,\n  };\n\n  installUpdatedRemoteContainerState(existingState, nextState, host);\n  moveIndexedContainerChild(\n    childIdsByParentId,\n    remoteContainer.id,\n    previousParentId,\n    existingState.container.parentId,\n  );\n  await reconcileLocalOnlyRootContainers({\n    childIdsByParentId,\n    isCurrent: input.isCurrent,\n    remoteRootState: existingState,\n    requestDocumentPriming: host.requestDocumentPriming,\n    state,\n  });\n  return existingState;\n}\n\ninterface UpsertRemoteContainerStateInput {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  containerIdsWithPendingMetadataUpdates: ReadonlySet<string>;\n  containerIdsWithPendingStructuralIntents: ReadonlySet<string>;\n  host: RemoteContainerHydrationHost;\n  expectedHydrationTombstone?: ContainerHydrationTombstone | null | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  prefetchedProjection?: PrefetchedDestinationProjection | undefined;\n  remoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}\n\nexport async function upsertRemoteContainerState(\n  input: UpsertRemoteContainerStateInput,\n): Promise<ContainerState | null> {\n  let expectedPlacementCheckpoint: AccessManifestCheckpoint | undefined;\n  const heldState = input.state.containersById.get(input.remoteContainer.id);\n  const heldBinding = heldState\n    ? heldContainerBinding(heldState)\n    : await input.state.persistence.loadHeldContainerBinding(\n        input.state.runtime.infra.execSql,\n        input.remoteContainer.id,\n      );\n  const listed = input.remoteContainer;\n  // A folder re-homed away from the listed organization never returns there,\n  // whatever binding (possibly none, after a reset) the device holds now.\n  const supersededListing =\n    !listingRepeatsHeldOrdinaryBinding(heldBinding, listed) &&\n    (await input.state.persistence.isSupersededContainerBinding(\n      input.state.runtime.infra.execSql,\n      { containerId: listed.id, organizationId: listed.organizationId },\n    ));\n  if (input.isCurrent?.() === false) return null;\n  const verified = await verifyRemoteContainerDestination({\n    ...input,\n    heldBinding,\n    supersededListing,\n    refresh: !!input.expectedHydrationTombstone,\n    onVerifiedCheckpoint: (checkpoint) => {\n      expectedPlacementCheckpoint = checkpoint;\n    },\n  });\n  if (!verified || input.isCurrent?.() === false) return null;\n  input = { ...input, remoteContainer: verified };\n  const existingState = input.state.containersById.get(\n    input.remoteContainer.id,\n  );\n  const remoteState = await runWithSecurityIncidentReporting(\n    input.state.runtime.util.reportSecurityIncident,\n    {\n      objectId: verified.id,\n      objectKind: \"container\",\n      operation: \"container.binding.persist\",\n      organizationId: verified.organizationId,\n    },\n    async () =>\n      (await rebindReHomedContainer({\n        existingState,\n        heldBinding,\n        isCurrent: input.isCurrent,\n        state: input.state,\n        verified,\n      }))\n        ? persistVerifiedRemoteContainer({\n            ...input,\n            existingState,\n            expectedPlacementCheckpoint,\n          })\n        : null,\n  );\n  if (!remoteState) {\n    return null;\n  }\n  await reconcileLocalOnlySystemContainers({\n    childIdsByParentId: input.childIdsByParentId,\n    isCurrent: input.isCurrent,\n    requestDocumentPriming: input.host.requestDocumentPriming,\n    remoteSystemState: remoteState,\n    state: input.state,\n  });\n  return remoteState;\n}\n\n/**\n * Upsert one listed folder, isolating a rejected proof or binding. The refusal\n * was already reported; returning no state leaves the item unapplied without\n * blocking independent folders.\n */\nexport async function upsertIsolatedRemoteContainerState(\n  input: UpsertRemoteContainerStateInput,\n): Promise<ContainerState | null> {\n  try {\n    return await upsertRemoteContainerState(input);\n  } catch (error) {\n    if (\n      !isKeyingVerificationError(error) &&\n      !isProjectionVerificationCancelledError(error)\n    )\n      throw error;\n    return null;\n  }\n}\n\nfunction persistVerifiedRemoteContainer(\n  input: UpsertRemoteContainerStateInput & {\n    existingState: ContainerState | undefined;\n    expectedPlacementCheckpoint: AccessManifestCheckpoint | undefined;\n  },\n): Promise<ContainerState | null> {\n  const { existingState, expectedPlacementCheckpoint } = input;\n  return existingState\n    ? updateExistingRemoteContainerState({\n        childIdsByParentId: input.childIdsByParentId,\n        containerIdsWithPendingMetadataUpdates:\n          input.containerIdsWithPendingMetadataUpdates,\n        containerIdsWithPendingStructuralIntents:\n          input.containerIdsWithPendingStructuralIntents,\n        existingState,\n        host: input.host,\n        isCurrent: input.isCurrent,\n        remoteContainer: input.remoteContainer,\n        state: input.state,\n      })\n    : insertRemoteContainerState({\n        childIdsByParentId: input.childIdsByParentId,\n        host: input.host,\n        expectedHydrationTombstone: input.expectedHydrationTombstone ?? null,\n        expectedPlacementCheckpoint,\n        isCurrent: input.isCurrent,\n        remoteContainer: input.remoteContainer,\n        state: input.state,\n      });\n}\n"]}
+{"version":3,"file":"remoteContainerState.js","sourceRoot":"","sources":["remoteContainerState.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,iCAAiC,GAClC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,sCAAsC,EAAE,MAAM,+CAA+C,CAAC;AAEvG,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EACL,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EACL,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,mCAAmC,EACnC,6CAA6C,GAC9C,MAAM,6CAA6C,CAAC;AAQrD,OAAO,EAAE,gCAAgC,EAAE,MAAM,uCAAuC,CAAC;AAEzF,8EAA8E;AAC9E,gFAAgF;AAChF,6EAA6E;AAC7E,sEAAsE;AACtE,4EAA4E;AAC5E,2EAA2E;AAC3E,+EAA+E;AAC/E,8CAA8C;AAC9C,qFAAqF;AACrF,4EAA4E;AAC5E,wBAAwB;AACxB,MAAM,CAAC,KAAK,UAAU,kDAAkD,CAAC,KAGxE;IACC,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CACpE,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAClD,MAAM,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,wBAAwB,CAAC,OAAO,CAAC;QACzD,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,uBAAuB,CAAC,OAAO,CAAC;KACzD,CAAC,CAAC;IACH,MAAM,wCAAwC,GAAG,IAAI,GAAG,EAAU,CAAC;IACnE,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;QAC1C,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,wCAAwC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACzC,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,wCAAwC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,OAAO,wCAAwC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gDAAgD,CAAC,KAGtE;IACC,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,EAAE;QACtE,MAAM,sBAAsB,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAC3D,eAAe,CAAC,EAAE,CACnB,EAAE,SAAS,CAAC,cAAc,CAAC;QAE5B,OAAO,sBAAsB;YAC3B,sBAAsB,CAAC,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC;YACnE,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC;YACtB,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAClD,OAAO,IAAI,GAAG,CACZ,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,kCAAkC,CAC9D,OAAO,EACP,YAAY,CACb,CACF,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,KAOvC;IACC,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,aAAa,EAAE,CAAC;QACnE,OAAO;IACT,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,2BAA2B,CACzB,KAAK,CAAC,kBAAkB,EACxB,eAAe,CAAC,EAAE,EAClB,KAAK,CAAC,gBAAgB,CACvB,CAAC;QACF,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,iCAAiC,CACxC,aAA6B,EAC7B,eAAgC;IAEhC,OAAO;QACL,GAAG,aAAa;QAChB,SAAS,EAAE,8BAA8B,CACvC,aAAa,CAAC,SAAS,EACvB,eAAe,CAChB;QACD,yBAAyB,EAAE,IAAI;QAC/B,4BAA4B,EAAE,eAAe,CAAC,4BAA4B;KAC3E,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CACzC,aAA6B,EAC7B,SAAyB,EACzB,IAAkC;IAElC,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,CAAC,eAAe,IAAI,IAAI,CAAC;IACrE,aAAa,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;IAC9C,aAAa,CAAC,yBAAyB,GAAG,SAAS,CAAC,yBAAyB,CAAC;IAC9E,aAAa,CAAC,4BAA4B;QACxC,SAAS,CAAC,4BAA4B,CAAC;IACzC,yEAAyE;IACzE,yEAAyE;IACzE,IAAI,oBAAoB,CAAC,aAAa,CAAC,KAAK,oBAAoB,CAAC,SAAS,CAAC;QACzE,aAAa,CAAC,wBAAwB,GAAG,SAAS,CAAC,wBAAwB,CAAC;IAC9E,8BAA8B,CAAC,aAAa,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAChE,wEAAwE;IACxE,+EAA+E;IAC/E,IAAI,YAAY,IAAI,aAAa,CAAC,SAAS,CAAC,eAAe,IAAI,IAAI;QACjE,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,kCAAkC,CAAC,KASjD;IACC,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,GACvE,KAAK,CAAC;IACR,MAAM,gBAAgB,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC;IAC1D,MAAM,sBAAsB,GAAG,aAAa,CAAC,SAAS,CAAC,cAAc,CAAC;IACtE,0EAA0E;IAC1E,8EAA8E;IAC9E,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,0BAA0B,GAC9B,KAAK,CAAC,wCAAwC,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,0BAA0B;QAC7C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC;IAC7B,MAAM,cAAc,GAAG,6CAA6C,CAAC;QACnE,sCAAsC,EACpC,KAAK,CAAC,sCAAsC;QAC9C,0BAA0B;QAC1B,sBAAsB;QACtB,eAAe;KAChB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,iCAAiC,CACjD,aAAa,EACb,eAAe,CAChB,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CACxD,SAAS,EACT;QACE,WAAW,EAAE,eAAe,CAAC,mBAAmB;QAChD,eAAe,EAAE,eAAe,CAAC,uBAAuB;QACxD,UAAU,EAAE,eAAe,CAAC,kBAAkB;QAC9C,oBAAoB,EAAE,eAAe,CAAC,oBAAoB;QAC1D,kBAAkB,EAAE,eAAe,CAAC,kBAAkB;QACtD,UAAU,EAAE,eAAe,CAAC,UAAU,IAAI,IAAI;QAC9C,cAAc,EAAE,eAAe,CAAC,cAAc;QAC9C,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,EACD,KAAK,EACL,mCAAmC,CAAC;QAClC,cAAc;QACd,eAAe;KAChB,CAAC,EACF;QACE,mCAAmC,EAAE,IAAI;KAC1C,CACF,CAAC;IACF,IAAI,iBAAiB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3C,0EAA0E;QAC1E,4EAA4E;QAC5E,6EAA6E;QAC7E,8BAA8B,CAAC;YAC7B,kBAAkB;YAClB,aAAa;YACb,IAAI;YACJ,gBAAgB;YAChB,eAAe;YACf,KAAK;SACN,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,iBAAiB,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC;IACjD,8BAA8B,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,SAAS,CAAC,SAAS,GAAG;QACpB,GAAG,SAAS,CAAC,SAAS;QACtB,kBAAkB,EAAE,eAAe,CAAC,kBAAkB;QACtD,cAAc,EAAE,eAAe,CAAC,cAAc;QAC9C,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ;KACvC,CAAC;IAEF,kCAAkC,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACnE,yBAAyB,CACvB,kBAAkB,EAClB,eAAe,CAAC,EAAE,EAClB,gBAAgB,EAChB,aAAa,CAAC,SAAS,CAAC,QAAQ,CACjC,CAAC;IACF,MAAM,gCAAgC,CAAC;QACrC,kBAAkB;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,aAAa;QAC9B,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,KAAK;KACN,CAAC,CAAC;IACH,OAAO,aAAa,CAAC;AACvB,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAsC;IAEtC,IAAI,2BAAiE,CAAC;IACtE,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,SAAS;QAC3B,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC;QACjC,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,wBAAwB,CACpD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EACjC,KAAK,CAAC,eAAe,CAAC,EAAE,CACzB,CAAC;IACN,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC;IACrC,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,iBAAiB,GACrB,CAAC,iCAAiC,CAAC,WAAW,EAAE,MAAM,CAAC;QACvD,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,4BAA4B,CACzD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EACjC,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAClE,CAAC,CAAC;IACL,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CAAC;QACtD,GAAG,KAAK;QACR,WAAW;QACX,iBAAiB;QACjB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B;QAC3C,oBAAoB,EAAE,CAAC,UAAU,EAAE,EAAE;YACnC,2BAA2B,GAAG,UAAU,CAAC;QAC3C,CAAC;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC5D,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;IAChD,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAClD,KAAK,CAAC,eAAe,CAAC,EAAE,CACzB,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,gCAAgC,CACxD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAC/C;QACE,QAAQ,EAAE,QAAQ,CAAC,EAAE;QACrB,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,2BAA2B;QACtC,cAAc,EAAE,QAAQ,CAAC,cAAc;KACxC,EACD,KAAK,IAAI,EAAE,CACT,CAAC,MAAM,sBAAsB,CAAC;QAC5B,aAAa;QACb,WAAW;QACX,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ;KACT,CAAC,CAAC;QACD,CAAC,CAAC,8BAA8B,CAAC;YAC7B,GAAG,KAAK;YACR,aAAa;YACb,2BAA2B;SAC5B,CAAC;QACJ,CAAC,CAAC,IAAI,CACX,CAAC;IACF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,kCAAkC,CAAC;QACvC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB;QACzD,iBAAiB,EAAE,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,KAAsC;IAEtC,IAAI,CAAC;QACH,OAAO,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,CAAC,yBAAyB,CAAC,KAAK,CAAC;YACjC,CAAC,sCAAsC,CAAC,KAAK,CAAC;YAE9C,MAAM,KAAK,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CACrC,KAGC;IAED,MAAM,EAAE,aAAa,EAAE,2BAA2B,EAAE,GAAG,KAAK,CAAC;IAC7D,OAAO,aAAa;QAClB,CAAC,CAAC,kCAAkC,CAAC;YACjC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,sCAAsC,EACpC,KAAK,CAAC,sCAAsC;YAC9C,wCAAwC,EACtC,KAAK,CAAC,wCAAwC;YAChD,aAAa;YACb,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;QACJ,CAAC,CAAC,0BAA0B,CAAC;YACzB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,0BAA0B,EAAE,KAAK,CAAC,0BAA0B,IAAI,IAAI;YACpE,2BAA2B;YAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;AACT,CAAC","sourcesContent":["import type { AccessManifestCheckpoint } from \"@tearleads/crypto\";\nimport {\n  heldContainerBinding,\n  listingRepeatsHeldOrdinaryBinding,\n} from \"../../data/containers/containerBinding\";\nimport {\n  isKeyingVerificationError,\n  runWithSecurityIncidentReporting,\n} from \"../../data/keyingProjectionVerification/error\";\nimport { isProjectionVerificationCancelledError } from \"../../data/keyingProjectionVerification/types\";\nimport type { ContainerHydrationTombstone } from \"./containerPersistence\";\nimport { installContainerMetadataRecord } from \"./metadataPersistence\";\nimport { projectionGeneration } from \"./projectionGeneration\";\nimport {\n  moveIndexedContainerChild,\n  removeIndexedContainerChild,\n} from \"./remoteHydration/childIndex\";\nimport type { PrefetchedDestinationProjection } from \"./remoteHydration/destinationPrefetch\";\nimport { rebindReHomedContainer } from \"./remoteHydration/heldContainerRebind\";\nimport { insertRemoteContainerState } from \"./remoteHydration/insertRemoteContainer\";\nimport {\n  reconcileLocalOnlyRootContainers,\n  reconcileLocalOnlySystemContainers,\n} from \"./remoteHydration/reconciliation\";\nimport {\n  applyRemoteContainerTimestamps,\n  remoteContainerHydrationSaveOptions,\n  resolveRemoteContainerHydrationLocalUpdatedAt,\n} from \"./remoteHydration/remoteContainerTimestamps\";\nimport type {\n  ContainerChildIndex,\n  ContainerState,\n  RemoteContainer,\n  RemoteContainerHydrationHost,\n  RemoteContainerHydrationState,\n} from \"./remoteHydration/types\";\nimport { verifyRemoteContainerDestination } from \"./remoteHydration/verifiedDestination\";\n\n// Container ids (restricted to the inbound page) that carry an unsynced local\n// create or move intent. Such a container's parent and local-edit timestamp are\n// owned by its structural-intent lane until that lane reconciles, so inbound\n// hydration must not revert parentId to the server value nor collapse\n// localUpdatedAt — doing so silently undoes a queued move and falsely reads\n// \"synced\". Move intents are read via listUnsyncedMoveIntents so a blocked\n// move — one whose destination parent has not synced yet, the common boot-time\n// case — is protected too. Pending *metadata*\n// updates are handled separately (listRemoteContainerIdsWithPendingMetadataUpdates);\n// structural intents live in the local outbox's container lanes, which that\n// query does not cover.\nexport async function listRemoteContainerIdsWithPendingStructuralIntents(input: {\n  remoteContainers: ReadonlyArray<RemoteContainer>;\n  state: RemoteContainerHydrationState;\n}): Promise<Set<string>> {\n  if (input.remoteContainers.length === 0) {\n    return new Set();\n  }\n  const remoteContainerIds = new Set(\n    input.remoteContainers.map((remoteContainer) => remoteContainer.id),\n  );\n\n  const execSql = input.state.runtime.infra.execSql;\n  const [pendingCreateIntents, unsyncedMoveIntents] = await Promise.all([\n    input.state.persistence.listPendingCreateIntents(execSql),\n    input.state.persistence.listUnsyncedMoveIntents(execSql),\n  ]);\n  const containerIdsWithPendingStructuralIntents = new Set<string>();\n  for (const intent of pendingCreateIntents) {\n    if (remoteContainerIds.has(intent.containerId)) {\n      containerIdsWithPendingStructuralIntents.add(intent.containerId);\n    }\n  }\n  for (const intent of unsyncedMoveIntents) {\n    if (remoteContainerIds.has(intent.containerId)) {\n      containerIdsWithPendingStructuralIntents.add(intent.containerId);\n    }\n  }\n  return containerIdsWithPendingStructuralIntents;\n}\n\nexport async function listRemoteContainerIdsWithPendingMetadataUpdates(input: {\n  remoteContainers: ReadonlyArray<RemoteContainer>;\n  state: RemoteContainerHydrationState;\n}): Promise<Set<string>> {\n  const containerIds = input.remoteContainers.flatMap((remoteContainer) => {\n    const previousLocalUpdatedAt = input.state.containersById.get(\n      remoteContainer.id,\n    )?.container.localUpdatedAt;\n\n    return previousLocalUpdatedAt &&\n      previousLocalUpdatedAt.localeCompare(remoteContainer.updatedAt) > 0\n      ? [remoteContainer.id]\n      : [];\n  });\n  if (containerIds.length === 0) {\n    return new Set();\n  }\n\n  const execSql = input.state.runtime.infra.execSql;\n  return new Set(\n    await input.state.persistence.listContainerIdsWithPendingUpdates(\n      execSql,\n      containerIds,\n    ),\n  );\n}\n\nfunction removeMissingHydratedContainer(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  existingState: ContainerState;\n  host: RemoteContainerHydrationHost;\n  previousParentId: string | null;\n  remoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}): void {\n  const { existingState, remoteContainer, state } = input;\n  if (state.containersById.get(remoteContainer.id) !== existingState) {\n    return;\n  }\n\n  state.containersById.delete(remoteContainer.id);\n  if (input.childIdsByParentId) {\n    removeIndexedContainerChild(\n      input.childIdsByParentId,\n      remoteContainer.id,\n      input.previousParentId,\n    );\n    input.childIdsByParentId.delete(remoteContainer.id);\n  }\n  input.host.updateSnapshot();\n}\n\nfunction createUpdatedRemoteContainerState(\n  existingState: ContainerState,\n  remoteContainer: RemoteContainer,\n): ContainerState {\n  return {\n    ...existingState,\n    container: applyRemoteContainerTimestamps(\n      existingState.container,\n      remoteContainer,\n    ),\n    containerWriterProjection: null,\n    metadataReferencedPrincipals: remoteContainer.metadataReferencedPrincipals,\n  };\n}\n\nfunction installUpdatedRemoteContainerState(\n  existingState: ContainerState,\n  nextState: ContainerState,\n  host: RemoteContainerHydrationHost,\n): void {\n  const wasLocalOnly = existingState.container.serverCreatedAt == null;\n  existingState.container = nextState.container;\n  existingState.containerWriterProjection = nextState.containerWriterProjection;\n  existingState.metadataReferencedPrincipals =\n    nextState.metadataReferencedPrincipals;\n  // The snapshot copied the live generation when it was taken; a hint that\n  // landed during the persist leaves the live metadata projection dropped.\n  if (projectionGeneration(existingState) === projectionGeneration(nextState))\n    existingState.metadataWriterProjection = nextState.metadataWriterProjection;\n  installContainerMetadataRecord(existingState, nextState.record);\n  // A document pass may have deferred while this root was awaiting proof.\n  // The first durable remote acknowledgement makes its pending creates runnable.\n  if (wasLocalOnly && existingState.container.serverCreatedAt != null)\n    host.requestDocumentPriming?.();\n}\n\nasync function updateExistingRemoteContainerState(input: {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  containerIdsWithPendingMetadataUpdates: ReadonlySet<string>;\n  containerIdsWithPendingStructuralIntents: ReadonlySet<string>;\n  host: RemoteContainerHydrationHost;\n  isCurrent?: (() => boolean) | undefined;\n  existingState: ContainerState;\n  remoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}): Promise<ContainerState | null> {\n  const { childIdsByParentId, existingState, host, remoteContainer, state } =\n    input;\n  const previousParentId = existingState.container.parentId;\n  const previousLocalUpdatedAt = existingState.container.localUpdatedAt;\n  // A queued, not-yet-synced local move/create owns this container's parent\n  // until its intent lane reconciles. Omit the remote parent when the page scan\n  // saw one; persistence also rechecks the intent transactionally so a move\n  // created after that scan wins. Both paths preserve the durable local clock.\n  const hasPendingStructuralIntent =\n    input.containerIdsWithPendingStructuralIntents.has(remoteContainer.id);\n  const nextParentId = hasPendingStructuralIntent\n    ? undefined\n    : remoteContainer.parentId;\n  const localUpdatedAt = resolveRemoteContainerHydrationLocalUpdatedAt({\n    containerIdsWithPendingMetadataUpdates:\n      input.containerIdsWithPendingMetadataUpdates,\n    hasPendingStructuralIntent,\n    previousLocalUpdatedAt,\n    remoteContainer,\n  });\n  const nextState = createUpdatedRemoteContainerState(\n    existingState,\n    remoteContainer,\n  );\n  const persistenceResult = await host.persistContainerState(\n    nextState,\n    {\n      accessEpoch: remoteContainer.metadataAccessEpoch,\n      accessStateHash: remoteContainer.metadataAccessStateHash,\n      documentId: remoteContainer.metadataDocumentId,\n      effectiveAccessLevel: remoteContainer.effectiveAccessLevel,\n      metadataDocumentId: remoteContainer.metadataDocumentId,\n      systemSlot: remoteContainer.systemSlot ?? null,\n      organizationId: remoteContainer.organizationId,\n      ...(nextParentId !== undefined ? { parentId: nextParentId } : {}),\n    },\n    false,\n    remoteContainerHydrationSaveOptions({\n      localUpdatedAt,\n      remoteContainer,\n    }),\n    {\n      preserveDurableStructureWhenPending: true,\n    },\n  );\n  if (persistenceResult.status === \"missing\") {\n    // Hydration persists a detached candidate so an in-flight response cannot\n    // mutate mapped state before its guards settle. Retire the exact state this\n    // hydration read because store-level reference cleanup cannot see the clone.\n    removeMissingHydratedContainer({\n      childIdsByParentId,\n      existingState,\n      host,\n      previousParentId,\n      remoteContainer,\n      state,\n    });\n    return null;\n  }\n  if (persistenceResult.status !== \"persisted\") return null;\n  const { record: nextRecord } = persistenceResult;\n  installContainerMetadataRecord(nextState, nextRecord);\n  if (input.isCurrent?.() === false) {\n    return existingState;\n  }\n  nextState.container = {\n    ...nextState.container,\n    metadataDocumentId: remoteContainer.metadataDocumentId,\n    organizationId: remoteContainer.organizationId,\n    parentId: nextState.container.parentId,\n  };\n\n  installUpdatedRemoteContainerState(existingState, nextState, host);\n  moveIndexedContainerChild(\n    childIdsByParentId,\n    remoteContainer.id,\n    previousParentId,\n    existingState.container.parentId,\n  );\n  await reconcileLocalOnlyRootContainers({\n    childIdsByParentId,\n    isCurrent: input.isCurrent,\n    remoteRootState: existingState,\n    requestDocumentPriming: host.requestDocumentPriming,\n    state,\n  });\n  return existingState;\n}\n\ninterface UpsertRemoteContainerStateInput {\n  childIdsByParentId?: ContainerChildIndex | undefined;\n  containerIdsWithPendingMetadataUpdates: ReadonlySet<string>;\n  containerIdsWithPendingStructuralIntents: ReadonlySet<string>;\n  host: RemoteContainerHydrationHost;\n  expectedHydrationTombstone?: ContainerHydrationTombstone | null | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  prefetchedProjection?: PrefetchedDestinationProjection | undefined;\n  remoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}\n\nexport async function upsertRemoteContainerState(\n  input: UpsertRemoteContainerStateInput,\n): Promise<ContainerState | null> {\n  let expectedPlacementCheckpoint: AccessManifestCheckpoint | undefined;\n  const heldState = input.state.containersById.get(input.remoteContainer.id);\n  const heldBinding = heldState\n    ? heldContainerBinding(heldState)\n    : await input.state.persistence.loadHeldContainerBinding(\n        input.state.runtime.infra.execSql,\n        input.remoteContainer.id,\n      );\n  const listed = input.remoteContainer;\n  // A folder re-homed away from the listed organization never returns there,\n  // whatever binding (possibly none, after a reset) the device holds now.\n  const supersededListing =\n    !listingRepeatsHeldOrdinaryBinding(heldBinding, listed) &&\n    (await input.state.persistence.isSupersededContainerBinding(\n      input.state.runtime.infra.execSql,\n      { containerId: listed.id, organizationId: listed.organizationId },\n    ));\n  if (input.isCurrent?.() === false) return null;\n  const verified = await verifyRemoteContainerDestination({\n    ...input,\n    heldBinding,\n    supersededListing,\n    refresh: !!input.expectedHydrationTombstone,\n    onVerifiedCheckpoint: (checkpoint) => {\n      expectedPlacementCheckpoint = checkpoint;\n    },\n  });\n  if (!verified || input.isCurrent?.() === false) return null;\n  input = { ...input, remoteContainer: verified };\n  const existingState = input.state.containersById.get(\n    input.remoteContainer.id,\n  );\n  const remoteState = await runWithSecurityIncidentReporting(\n    input.state.runtime.util.reportSecurityIncident,\n    {\n      objectId: verified.id,\n      objectKind: \"container\",\n      operation: \"container.binding.persist\",\n      organizationId: verified.organizationId,\n    },\n    async () =>\n      (await rebindReHomedContainer({\n        existingState,\n        heldBinding,\n        isCurrent: input.isCurrent,\n        state: input.state,\n        verified,\n      }))\n        ? persistVerifiedRemoteContainer({\n            ...input,\n            existingState,\n            expectedPlacementCheckpoint,\n          })\n        : null,\n  );\n  if (!remoteState) {\n    return null;\n  }\n  await reconcileLocalOnlySystemContainers({\n    childIdsByParentId: input.childIdsByParentId,\n    isCurrent: input.isCurrent,\n    requestDocumentPriming: input.host.requestDocumentPriming,\n    remoteSystemState: remoteState,\n    state: input.state,\n  });\n  return remoteState;\n}\n\n/**\n * Upsert one listed folder, isolating a rejected proof or binding. The refusal\n * was already reported; returning no state leaves the item unapplied without\n * blocking independent folders.\n */\nexport async function upsertIsolatedRemoteContainerState(\n  input: UpsertRemoteContainerStateInput,\n): Promise<ContainerState | null> {\n  try {\n    return await upsertRemoteContainerState(input);\n  } catch (error) {\n    if (\n      !isKeyingVerificationError(error) &&\n      !isProjectionVerificationCancelledError(error)\n    )\n      throw error;\n    return null;\n  }\n}\n\nfunction persistVerifiedRemoteContainer(\n  input: UpsertRemoteContainerStateInput & {\n    existingState: ContainerState | undefined;\n    expectedPlacementCheckpoint: AccessManifestCheckpoint | undefined;\n  },\n): Promise<ContainerState | null> {\n  const { existingState, expectedPlacementCheckpoint } = input;\n  return existingState\n    ? updateExistingRemoteContainerState({\n        childIdsByParentId: input.childIdsByParentId,\n        containerIdsWithPendingMetadataUpdates:\n          input.containerIdsWithPendingMetadataUpdates,\n        containerIdsWithPendingStructuralIntents:\n          input.containerIdsWithPendingStructuralIntents,\n        existingState,\n        host: input.host,\n        isCurrent: input.isCurrent,\n        remoteContainer: input.remoteContainer,\n        state: input.state,\n      })\n    : insertRemoteContainerState({\n        childIdsByParentId: input.childIdsByParentId,\n        host: input.host,\n        expectedHydrationTombstone: input.expectedHydrationTombstone ?? null,\n        expectedPlacementCheckpoint,\n        isCurrent: input.isCurrent,\n        remoteContainer: input.remoteContainer,\n        state: input.state,\n      });\n}\n"]}