@tearleads/client-sdk 0.1.57 → 0.1.59

package/workflows/container-contents/documentDiscoveryInputs.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentDiscoveryInputs.js","sourceRoot":"","sources":["documentDiscoveryInputs.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAS1E,SAAS,6BAA6B,CACpC,OAAoC,EACpC,IAAiC;IAEjC,0EAA0E;IAC1E,4EAA4E;IAC5E,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5D,kBAAkB,EAAE,mBAAmB,CAAC;gBACtC,GAAG,OAAO,CAAC,kBAAkB;gBAC7B,GAAG,IAAI,CAAC,kBAAkB;aAC3B,CAAC;SACH,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GACnB,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW;QACrC,CAAC,CAAC,IAAI,CAAC,eAAe;QACtB,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAE9B,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC;QAC5D,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;QAC7D,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,kBAAkB,EAAE,mBAAmB,CAAC;YACtC,GAAG,OAAO,CAAC,kBAAkB;YAC7B,GAAG,IAAI,CAAC,kBAAkB;SAC3B,CAAC;QACF,SAAS,EACP,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClD,CAAC,CAAC,OAAO,CAAC,SAAS;YACnB,CAAC,CAAC,IAAI,CAAC,SAAS;QACpB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,oBAAoB,EAAE,uBAAuB,CAC3C,6BAA6B,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAC3D,6BAA6B,CAAC,IAAI,CAAC,oBAAoB,CAAC,CACzD;QACD,kBAAkB,EAAE,mBAAmB,CAAC;YACtC,OAAO,CAAC,WAAW;YACnB,IAAI,CAAC,WAAW;YAChB,GAAG,OAAO,CAAC,kBAAkB;YAC7B,GAAG,IAAI,CAAC,kBAAkB;SAC3B,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,0BAAuE;IAEvE,MAAM,oCAAoC,GAAG,IAAI,GAAG,EAGjD,CAAC;IAEJ,KAAK,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,0BAA0B,EAAE,CAAC;QAC1E,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;YAC7C,MAAM,uBAAuB,GAAgC;gBAC3D,WAAW,EAAE,QAAQ,CAAC,kBAAkB;gBACxC,eAAe,EAAE,QAAQ,CAAC,sBAAsB;gBAChD,WAAW;gBACX,kBAAkB,EAAE,CAAC,WAAW,CAAC;gBACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,oBAAoB,EAAE,6BAA6B,CACjD,QAAQ,CAAC,oBAAoB,CAC9B;gBACD,kBAAkB,EAAE,mBAAmB,CAAC;oBACtC,WAAW;oBACX,GAAG,QAAQ,CAAC,kBAAkB;iBAC/B,CAAC;aACH,CAAC;YACF,MAAM,kCAAkC,GACtC,oCAAoC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACxD,oCAAoC,CAAC,GAAG,CACtC,QAAQ,CAAC,EAAE,EACX,kCAAkC;gBAChC,CAAC,CAAC,6BAA6B,CAC3B,kCAAkC,EAClC,uBAAuB,CACxB;gBACH,CAAC,CAAC,uBAAuB,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,eAAyC;IAEzC,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC3E,KAAK,MAAM,QAAQ,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7C,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClE,IACE,CAAC,gBAAgB;YACjB,gBAAgB,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,EAChE,CAAC;YACD,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/D,OAAO,CACL,CAAC,IAAI,EAAE,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC;YACzD,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CACtD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,KAAkD;IAElD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAC3C,eAAe,CAAC,CAAC,CAAC,+BAA+B,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CACxE,CAAC;AACJ,CAAC","sourcesContent":["import {\n  maxEffectiveAccessLevel,\n  normalizeEffectiveAccessLevel,\n} from \"../../data/accessLevel\";\nimport { uniqueSortedStrings } from \"../../data/documents/shared/readers\";\nimport type { DiscoveredDocumentCandidate } from \"../../data/persistence/documents/documentDiscoveryEvidencePersistence\";\nimport type {\n  ContainerDocumentTombstone,\n  ListedContainerDocument,\n  ListedContainerDocuments,\n  ListedContainerDocumentsLane,\n} from \"./documentDiscoveryTypes\";\n\nfunction mergeDiscoveredDocumentInputs(\n  current: DiscoveredDocumentCandidate,\n  next: DiscoveredDocumentCandidate,\n): DiscoveredDocumentCandidate {\n  // A lane page carries a complete link set for its epoch. Combining an old\n  // root page with a newer trash page must not manufacture a newer root link.\n  if (next.accessEpoch !== current.accessEpoch) {\n    return {\n      ...(next.accessEpoch > current.accessEpoch ? next : current),\n      listedContainerIds: uniqueSortedStrings([\n        ...current.listedContainerIds,\n        ...next.listedContainerIds,\n      ]),\n    };\n  }\n  const accessStateHash =\n    next.accessEpoch >= current.accessEpoch\n      ? next.accessStateHash\n      : current.accessStateHash;\n\n  return {\n    accessEpoch: Math.max(current.accessEpoch, next.accessEpoch),\n    ...(accessStateHash === undefined ? {} : { accessStateHash }),\n    containerId: current.containerId,\n    listedContainerIds: uniqueSortedStrings([\n      ...current.listedContainerIds,\n      ...next.listedContainerIds,\n    ]),\n    createdAt:\n      current.createdAt.localeCompare(next.createdAt) <= 0\n        ? current.createdAt\n        : next.createdAt,\n    documentId: current.documentId,\n    effectiveAccessLevel: maxEffectiveAccessLevel(\n      normalizeEffectiveAccessLevel(current.effectiveAccessLevel),\n      normalizeEffectiveAccessLevel(next.effectiveAccessLevel),\n    ),\n    linkedContainerIds: uniqueSortedStrings([\n      current.containerId,\n      next.containerId,\n      ...current.linkedContainerIds,\n      ...next.linkedContainerIds,\n    ]),\n  };\n}\n\nexport function collectDiscoveredDocumentInputs(\n  listedDocumentsByContainer: ReadonlyArray<ListedContainerDocumentsLane>,\n): DiscoveredDocumentCandidate[] {\n  const discoveredDocumentInputsByDocumentId = new Map<\n    string,\n    DiscoveredDocumentCandidate\n  >();\n\n  for (const { containerId, listedDocuments } of listedDocumentsByContainer) {\n    if (!listedDocuments) {\n      continue;\n    }\n\n    for (const document of listedDocuments.items) {\n      const discoveredDocumentInput: DiscoveredDocumentCandidate = {\n        accessEpoch: document.currentAccessEpoch,\n        accessStateHash: document.currentAccessStateHash,\n        containerId,\n        listedContainerIds: [containerId],\n        createdAt: document.createdAt,\n        documentId: document.id,\n        effectiveAccessLevel: normalizeEffectiveAccessLevel(\n          document.effectiveAccessLevel,\n        ),\n        linkedContainerIds: uniqueSortedStrings([\n          containerId,\n          ...document.linkedContainerIds,\n        ]),\n      };\n      const currentDiscoveredDocumentCandidate =\n        discoveredDocumentInputsByDocumentId.get(document.id);\n      discoveredDocumentInputsByDocumentId.set(\n        document.id,\n        currentDiscoveredDocumentCandidate\n          ? mergeDiscoveredDocumentInputs(\n              currentDiscoveredDocumentCandidate,\n              discoveredDocumentInput,\n            )\n          : discoveredDocumentInput,\n      );\n    }\n  }\n\n  return Array.from(discoveredDocumentInputsByDocumentId.values());\n}\n\nexport function getApplicableDocumentTombstones(\n  listedDocuments: ListedContainerDocuments,\n): ContainerDocumentTombstone[] {\n  const latestItemsByDocumentId = new Map<string, ListedContainerDocument>();\n  for (const document of listedDocuments.items) {\n    const existingDocument = latestItemsByDocumentId.get(document.id);\n    if (\n      !existingDocument ||\n      existingDocument.updatedAt.localeCompare(document.updatedAt) < 0\n    ) {\n      latestItemsByDocumentId.set(document.id, document);\n    }\n  }\n\n  return listedDocuments.tombstones.filter((tombstone) => {\n    const item = latestItemsByDocumentId.get(tombstone.documentId);\n    return (\n      !item?.linkedContainerIds.includes(tombstone.containerId) ||\n      item.updatedAt.localeCompare(tombstone.updatedAt) < 0\n    );\n  });\n}\n\nexport function collectApplicableDocumentTombstones(\n  lanes: ReadonlyArray<ListedContainerDocumentsLane>,\n): ContainerDocumentTombstone[] {\n  return lanes.flatMap(({ listedDocuments }) =>\n    listedDocuments ? getApplicableDocumentTombstones(listedDocuments) : [],\n  );\n}\n"]}
+{"version":3,"file":"documentDiscoveryInputs.js","sourceRoot":"","sources":["documentDiscoveryInputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EACL,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AASvC,SAAS,6BAA6B,CACpC,OAAoC,EACpC,IAAiC;IAEjC,0EAA0E;IAC1E,4EAA4E;IAC5E,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5D,kBAAkB,EAAE,mBAAmB,CAAC;gBACtC,GAAG,OAAO,CAAC,kBAAkB;gBAC7B,GAAG,IAAI,CAAC,kBAAkB;aAC3B,CAAC;SACH,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GACnB,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW;QACrC,CAAC,CAAC,IAAI,CAAC,eAAe;QACtB,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAE9B,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC;QAC5D,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;QAC7D,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,kBAAkB,EAAE,mBAAmB,CAAC;YACtC,GAAG,OAAO,CAAC,kBAAkB;YAC7B,GAAG,IAAI,CAAC,kBAAkB;SAC3B,CAAC;QACF,SAAS,EACP,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClD,CAAC,CAAC,OAAO,CAAC,SAAS;YACnB,CAAC,CAAC,IAAI,CAAC,SAAS;QACpB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,oBAAoB,EAAE,uBAAuB,CAC3C,6BAA6B,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAC3D,6BAA6B,CAAC,IAAI,CAAC,oBAAoB,CAAC,CACzD;QACD,kBAAkB,EAAE,mBAAmB,CAAC;YACtC,OAAO,CAAC,WAAW;YACnB,IAAI,CAAC,WAAW;YAChB,GAAG,OAAO,CAAC,kBAAkB;YAC7B,GAAG,IAAI,CAAC,kBAAkB;SAC3B,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,0BAAuE;IAEvE,MAAM,oCAAoC,GAAG,IAAI,GAAG,EAGjD,CAAC;IAEJ,KAAK,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,0BAA0B,EAAE,CAAC;QAC1E,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;YAC7C,MAAM,uBAAuB,GAAgC;gBAC3D,WAAW,EAAE,QAAQ,CAAC,kBAAkB;gBACxC,eAAe,EAAE,QAAQ,CAAC,sBAAsB;gBAChD,WAAW;gBACX,kBAAkB,EAAE,CAAC,WAAW,CAAC;gBACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,oBAAoB,EAAE,6BAA6B,CACjD,QAAQ,CAAC,oBAAoB,CAC9B;gBACD,kBAAkB,EAAE,mBAAmB,CAAC;oBACtC,WAAW;oBACX,GAAG,QAAQ,CAAC,kBAAkB;iBAC/B,CAAC;aACH,CAAC;YACF,MAAM,kCAAkC,GACtC,oCAAoC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACxD,oCAAoC,CAAC,GAAG,CACtC,QAAQ,CAAC,EAAE,EACX,kCAAkC;gBAChC,CAAC,CAAC,6BAA6B,CAC3B,kCAAkC,EAClC,uBAAuB,CACxB;gBACH,CAAC,CAAC,uBAAuB,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,eAAyC;IAEzC,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC3E,KAAK,MAAM,QAAQ,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7C,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClE,IACE,CAAC,gBAAgB;YACjB,gBAAgB,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,EAChE,CAAC;YACD,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/D,OAAO,CACL,CAAC,IAAI,EAAE,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC;YACzD,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CACtD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,KAAkD;IAElD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAC3C,eAAe,CAAC,CAAC,CAAC,+BAA+B,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CACxE,CAAC;AACJ,CAAC","sourcesContent":["import { uniqueSortedStrings } from \"../../data/documents/shared/readers\";\nimport {\n  maxEffectiveAccessLevel,\n  normalizeEffectiveAccessLevel,\n} from \"../../data/keying/accessLevel\";\nimport type { DiscoveredDocumentCandidate } from \"../../data/persistence/documents/documentDiscoveryEvidencePersistence\";\nimport type {\n  ContainerDocumentTombstone,\n  ListedContainerDocument,\n  ListedContainerDocuments,\n  ListedContainerDocumentsLane,\n} from \"./documentDiscoveryTypes\";\n\nfunction mergeDiscoveredDocumentInputs(\n  current: DiscoveredDocumentCandidate,\n  next: DiscoveredDocumentCandidate,\n): DiscoveredDocumentCandidate {\n  // A lane page carries a complete link set for its epoch. Combining an old\n  // root page with a newer trash page must not manufacture a newer root link.\n  if (next.accessEpoch !== current.accessEpoch) {\n    return {\n      ...(next.accessEpoch > current.accessEpoch ? next : current),\n      listedContainerIds: uniqueSortedStrings([\n        ...current.listedContainerIds,\n        ...next.listedContainerIds,\n      ]),\n    };\n  }\n  const accessStateHash =\n    next.accessEpoch >= current.accessEpoch\n      ? next.accessStateHash\n      : current.accessStateHash;\n\n  return {\n    accessEpoch: Math.max(current.accessEpoch, next.accessEpoch),\n    ...(accessStateHash === undefined ? {} : { accessStateHash }),\n    containerId: current.containerId,\n    listedContainerIds: uniqueSortedStrings([\n      ...current.listedContainerIds,\n      ...next.listedContainerIds,\n    ]),\n    createdAt:\n      current.createdAt.localeCompare(next.createdAt) <= 0\n        ? current.createdAt\n        : next.createdAt,\n    documentId: current.documentId,\n    effectiveAccessLevel: maxEffectiveAccessLevel(\n      normalizeEffectiveAccessLevel(current.effectiveAccessLevel),\n      normalizeEffectiveAccessLevel(next.effectiveAccessLevel),\n    ),\n    linkedContainerIds: uniqueSortedStrings([\n      current.containerId,\n      next.containerId,\n      ...current.linkedContainerIds,\n      ...next.linkedContainerIds,\n    ]),\n  };\n}\n\nexport function collectDiscoveredDocumentInputs(\n  listedDocumentsByContainer: ReadonlyArray<ListedContainerDocumentsLane>,\n): DiscoveredDocumentCandidate[] {\n  const discoveredDocumentInputsByDocumentId = new Map<\n    string,\n    DiscoveredDocumentCandidate\n  >();\n\n  for (const { containerId, listedDocuments } of listedDocumentsByContainer) {\n    if (!listedDocuments) {\n      continue;\n    }\n\n    for (const document of listedDocuments.items) {\n      const discoveredDocumentInput: DiscoveredDocumentCandidate = {\n        accessEpoch: document.currentAccessEpoch,\n        accessStateHash: document.currentAccessStateHash,\n        containerId,\n        listedContainerIds: [containerId],\n        createdAt: document.createdAt,\n        documentId: document.id,\n        effectiveAccessLevel: normalizeEffectiveAccessLevel(\n          document.effectiveAccessLevel,\n        ),\n        linkedContainerIds: uniqueSortedStrings([\n          containerId,\n          ...document.linkedContainerIds,\n        ]),\n      };\n      const currentDiscoveredDocumentCandidate =\n        discoveredDocumentInputsByDocumentId.get(document.id);\n      discoveredDocumentInputsByDocumentId.set(\n        document.id,\n        currentDiscoveredDocumentCandidate\n          ? mergeDiscoveredDocumentInputs(\n              currentDiscoveredDocumentCandidate,\n              discoveredDocumentInput,\n            )\n          : discoveredDocumentInput,\n      );\n    }\n  }\n\n  return Array.from(discoveredDocumentInputsByDocumentId.values());\n}\n\nexport function getApplicableDocumentTombstones(\n  listedDocuments: ListedContainerDocuments,\n): ContainerDocumentTombstone[] {\n  const latestItemsByDocumentId = new Map<string, ListedContainerDocument>();\n  for (const document of listedDocuments.items) {\n    const existingDocument = latestItemsByDocumentId.get(document.id);\n    if (\n      !existingDocument ||\n      existingDocument.updatedAt.localeCompare(document.updatedAt) < 0\n    ) {\n      latestItemsByDocumentId.set(document.id, document);\n    }\n  }\n\n  return listedDocuments.tombstones.filter((tombstone) => {\n    const item = latestItemsByDocumentId.get(tombstone.documentId);\n    return (\n      !item?.linkedContainerIds.includes(tombstone.containerId) ||\n      item.updatedAt.localeCompare(tombstone.updatedAt) < 0\n    );\n  });\n}\n\nexport function collectApplicableDocumentTombstones(\n  lanes: ReadonlyArray<ListedContainerDocumentsLane>,\n): ContainerDocumentTombstone[] {\n  return lanes.flatMap(({ listedDocuments }) =>\n    listedDocuments ? getApplicableDocumentTombstones(listedDocuments) : [],\n  );\n}\n"]}

package/workflows/container-contents/documentInfo.d.ts

@@ -1,5 +1,5 @@
 import type { DocumentEditAttributionResponse, DocumentWriterProjectionResponse, ListDocumentAttachmentsResponse } from "../../internal/validators/response/index.js";
-import type { SecurityIncidentReporter } from "../../data/securityIncidents.js";
+import type { SecurityIncidentReporter } from "../../data/shared/securityIncidents.js";
 import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
 import type { DocumentInfo, DocumentInfoRemoteMode } from "./documentInfoTypes.js";
 export type { DocumentInfo, DocumentInfoAttachment, DocumentInfoAuthorizingContainerPath, DocumentInfoLocalDetails, DocumentInfoRemoteAttachmentBinding, DocumentInfoRemoteDetails, DocumentInfoRemoteMode, } from "./documentInfoTypes.js";

package/workflows/container-contents/documentInfo.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentInfo.js","sourceRoot":"","sources":["documentInfo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAQ5D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAKL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,uBAAuB,EAAE,MAAM,uDAAuD,CAAC;AAEhG,OAAO,EACL,gCAAgC,EAChC,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAE/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAsDzD,SAAS,gBAAgB,CAAC,KAAc,EAAE,GAAW;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,GAAW;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,GAAW;IACxD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAgC;IAEhC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,GAA6B;IAE7B,OAAO;QACL,cAAc,EAAE,SAAS;QACzB,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAA2B;IAE3B,OAAO;QACL,cAAc,EAAE,OAAO;QACvB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAG1C;IACC,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,EAAE;aACC,MAAM,CAAC;YACN,UAAU,EAAE,0BAA0B,CAAC,UAAU;YACjD,SAAS,EAAE,0BAA0B,CAAC,SAAS;YAC/C,OAAO,EAAE,0BAA0B,CAAC,OAAO;YAC3C,QAAQ,EAAE,0BAA0B,CAAC,QAAQ;YAC7C,IAAI,EAAE,0BAA0B,CAAC,IAAI;YACrC,MAAM,EAAE,0BAA0B,CAAC,MAAM;YACzC,UAAU,EAAE,0BAA0B,CAAC,UAAU;SAClD,CAAC;aACD,IAAI,CAAC,0BAA0B,CAAC;aAChC,KAAK,CAAC,EAAE,CAAC,0BAA0B,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;aAC5D,OAAO,CACN,0BAA0B,CAAC,SAAS,EACpC,0BAA0B,CAAC,MAAM,CAClC;QACH,EAAE;aACC,MAAM,CAAC;YACN,MAAM,EAAE,gCAAgC,CAAC,MAAM;YAC/C,UAAU,EAAE,gCAAgC,CAAC,UAAU;YACvD,OAAO,EAAE,gCAAgC,CAAC,OAAO;YACjD,QAAQ,EAAE,gCAAgC,CAAC,QAAQ;YACnD,MAAM,EAAE,gCAAgC,CAAC,MAAM;YAC/C,UAAU,EAAE,gCAAgC,CAAC,UAAU;YACvD,SAAS,EAAE,gCAAgC,CAAC,SAAS;SACtD,CAAC;aACD,IAAI,CAAC,gCAAgC,CAAC;aACtC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gCAAgC,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;QAC3D,gEAAgE;QAChE,8DAA8D;QAC9D,MAAM,CAAC,gCAAgC,CAAC,UAAU,CAAC,CACpD,CACF;aACA,OAAO,CACN,gCAAgC,CAAC,SAAS,EAC1C,gCAAgC,CAAC,MAAM,CACxC;KACJ,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,WAAW,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAC3C,GAAG,SAAS,CAAC,GAAG,CAAC,qBAAqB,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,KAGpC;IAKC,MAAM,QAAQ,GAAG;QACf,WAAW,EAAE,EAAE;QACf,eAAe,EAAE,IAAI;QACrB,KAAK,EAAE;YACL,WAAW,EAAE,IAAI;YACjB,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,mBAAmB,EAAE,KAAK;YAC1B,qBAAqB,EAAE,KAAK;YAC5B,yBAAyB,EAAE,KAAK;YAChC,aAAa,EAAE,IAAI;YACnB,yBAAyB,EAAE,IAAI;YAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,2BAA2B,EAAE,CAAC;YAC9B,sBAAsB,EAAE,CAAC;YACzB,kBAAkB,EAAE,CAAC;YACrB,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI;SAChB;KACF,CAAC;IAEF,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,uBAAuB,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,CAAC,GACvE,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,uBAAuB,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;QAClE,uBAAuB,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;QACxE,2BAA2B,CAAC;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,EAAE;aACC,MAAM,CAAC,EAAE,SAAS,EAAE,kBAAkB,CAAC,SAAS,EAAE,CAAC;aACnD,IAAI,CAAC,kBAAkB,CAAC;aACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;aACpD,KAAK,CAAC,CAAC,CAAC;QACX,4BAA4B,CAAC;YAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,uBAAuB;SACrC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;KACrB,CAAC,CAAC;IAEL,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,kBAAkB,GAAG,WAAW,CAAC,MAAM,CAC3C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,KAAK,SAAS,CACxD,CAAC;IAEF,OAAO;QACL,WAAW;QACX,2EAA2E;QAC3E,uEAAuE;QACvE,sCAAsC;QACtC,eAAe,EAAE,UAAU;YACzB,CAAC,CAAC,aAAa,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC;YACtD,CAAC,CAAC,IAAI;QACR,KAAK,EAAE;YACL,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,eAAe,EAAE,QAAQ,CAAC,eAAe,IAAI,IAAI;YACjD,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,qBAAqB;YAC5D,mBAAmB,EAAE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACvD,qBAAqB,EAAE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC3D,yBAAyB,EAAE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YACnE,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,IAAI;YAC7C,yBAAyB,EAAE,sBAAsB,CAC/C,QAAQ,CAAC,sBAAsB,CAChC;YACD,OAAO,EAAE,QAAQ,CAAC,EAAE;YACpB,2BAA2B,EAAE,kBAAkB,CAAC,MAAM,CACpD,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,KAAK,GAAG,UAAU,CAAC,UAAU,EACpD,CAAC,CACF;YACD,sBAAsB,EAAE,kBAAkB,CAAC,MAAM;YACjD,kBAAkB,EAAE,cAAc,CAAC,MAAM;YACzC,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI;YAC7B,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI;SAChD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,KAGrC;IACC,OAAO,KAAK,CAAC,cAAc,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAA8B;IAE9B,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,UAAuC;IAEvC,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhD,OAAO;QACL,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,IAAI,IAAI;QACrD,mBAAmB,EAAE,OAAO,EAAE,mBAAmB,IAAI,IAAI;QACzD,gBAAgB,EAAE,UAAU,EAAE,YAAY,IAAI,IAAI;QAClD,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,KAQrC;IACC,MAAM,EACJ,kBAAkB,EAClB,WAAW,EACX,WAAW,EACX,cAAc,EACd,YAAY,EACZ,UAAU,EACV,UAAU,GACX,GAAG,KAAK,CAAC;IACV,MAAM,aAAa,GAAG,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC;IACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC;IAEtD,OAAO;QACL,wBAAwB,EAAE,kBAAkB,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACtE,mBAAmB,EAAE,WAAW,EAAE,mBAAmB,IAAI,IAAI;QAC7D,iBAAiB,EAAE,WAAW;YAC5B,CAAC,CAAC,WAAW,CAAC,SAAS;gBACrB,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,WAAW;YACf,CAAC,CAAC,aAAa;QACjB,mBAAmB,EAAE,WAAW,EAAE,QAAQ,IAAI,EAAE;QAChD,yBAAyB,EAAE,UAAU,CAAC,yBAAyB,CAAC,GAAG,CACjE,2BAA2B,CAC5B;QACD,WAAW;QACX,cAAc;QACd,UAAU;QACV,eAAe,EAAE,UAAU,CAAC,gBAAgB,CAAC,eAAe;QAC5D,qBAAqB,EAAE,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM;QACjE,oBAAoB,EAAE,UAAU,CAAC,gBAAgB,CAAC,UAAU;QAC5D,YAAY;QACZ,mBAAmB,EAAE,UAAU,CAAC,gBAAgB,CAAC,YAAY;QAC7D,qCAAqC,EACnC,UAAU,CAAC,gCAAgC,CAAC,MAAM;QACpD,sBAAsB,EAAE,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM;QACpE,qBAAqB,EAAE,UAAU,CAAC,kBAAkB,CAAC,qBAAqB;QAC1E,kCAAkC,EAChC,UAAU,CAAC,8BAA8B,CAAC,MAAM;QAClD,4BAA4B,EAAE,UAAU,CAAC,uBAAuB,CAAC,MAAM;QACvE,4BAA4B,EAC1B,UAAU,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,MAAM;QACjE,4BAA4B,EAC1B,UAAU,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,MAAM;QACpE,mBAAmB,EAAE,UAAU,CAAC,kBAAkB,CAAC,mBAAmB;QACtE,aAAa,EAAE,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC;QAClD,oBAAoB,EAAE,gBAAgB,CACpC,aAAa,EACb,sBAAsB,CACvB;QACD,wBAAwB,EAAE,qBAAqB,CAC7C,QAAQ,EACR,0BAA0B,CAC3B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAOtC;IACC,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,MAAM,qBAAqB,CAAC;QAC1E,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IAEH,IACE,CAAC,4BAA4B,CAAC;QAC5B,KAAK;QACL,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,WAAW;KACpD,CAAC;QACF,CAAC,KAAK,CAAC,UAAU,EACjB,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS;SACvC,0BAA0B,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,qBAAqB,CAAC;SACzE,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QAC9B,MAAM,uCAAuC,CAC3C,KAAK,EACL,KAAK,CAAC,sBAAsB,EAC5B;YACE,QAAQ,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO;YAC3C,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,2BAA2B;SACvC,CACF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACL,MAAM,CAAC,UAAU,EAAE,kBAAkB,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtE,KAAK,CAAC,SAAS,CAAC,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC;QAC7D,KAAK,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC;QACzD,4EAA4E;QAC5E,+EAA+E;QAC/E,kBAAkB;KACnB,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,+DAA+D,KAAK,CAAC,OAAO,yBAAyB,KAAK,CAAC,UAAU,GAAG,CACzH,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,WAAW,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;IAClE,MAAM,mBAAmB,GAAG,WAAW,EAAE,QAAQ,IAAI,EAAE,CAAC;IACxD,MAAM,KAAK,GAAG,mBAAmB;QAC/B,CAAC,CAAC,oBAAoB,CAAC,eAAe,EAAE,mBAAmB,CAAC;QAC5D,CAAC,CAAC,IAAI,CAAC;IACT,OAAO;QACL,WAAW;QACX,KAAK;QACL,UAAU,EAAE,4BAA4B,CAAC;YACvC,kBAAkB,EAAE,kBAAkB,IAAI,EAAE;YAC5C,WAAW;YACX,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,IAAI;YACvC,cAAc,EAAE,KAAK,EAAE,cAAc,IAAI,IAAI;YAC7C,YAAY,EAAE,mBAAmB;gBAC/B,CAAC,CAAC,6BAA6B,CAAC,mBAAmB,CAAC;gBACpD,CAAC,CAAC,EAAE;YACN,UAAU,EAAE,mBAAmB;gBAC7B,CAAC,CAAC,iBAAiB,CAAC,eAAe,EAAE,mBAAmB,CAAC;gBACzD,CAAC,CAAC,IAAI;YACR,UAAU;SACX,CAAC;KACH,CAAC;AACJ,CAAC","sourcesContent":["import { bytesToBase64 } from \"@tearleads/encoding\";\nimport { exportFullHistorySnapshot } from \"@tearleads/loro\";\nimport type {\n  BlobAttachmentSummary,\n  ContainerKeyingPathResponse,\n  DocumentEditAttributionResponse,\n  DocumentWriterProjectionResponse,\n  ListDocumentAttachmentsResponse,\n} from \"@tearleads/validators/response\";\nimport { and, eq, isNull } from \"drizzle-orm\";\nimport { DEFAULT_DOCUMENT_KIND } from \"../../data/documents/documentConstants\";\nimport {\n  type DocumentBlameRange,\n  type DocumentCharacterBlameSummary,\n  type DocumentContributor,\n  type DocumentFieldBlame,\n  summarizeDocumentContributors,\n} from \"../../data/documents/editAttribution\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../data/keyingProjectionVerification/error\";\nimport { sqlDocumentsPersistence } from \"../../data/persistence/documents/documentsPersistence\";\nimport type { SecurityIncidentReporter } from \"../../data/securityIncidents\";\nimport {\n  documentAttachmentBlobProjection,\n  documentPendingAttachments,\n  documentProjection,\n} from \"../../data/sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../data/sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport { loadPersistedDocumentContent } from \"../documents/historyContent\";\nimport { computeDocumentBlame } from \"./documentCharacterBlame\";\nimport { computeFieldBlame } from \"./documentFieldBlame\";\nimport type {\n  DocumentInfo,\n  DocumentInfoAttachment,\n  DocumentInfoAuthorizingContainerPath,\n  DocumentInfoLocalDetails,\n  DocumentInfoRemoteAttachmentBinding,\n  DocumentInfoRemoteDetails,\n  DocumentInfoRemoteMode,\n} from \"./documentInfoTypes\";\n\nexport type {\n  DocumentInfo,\n  DocumentInfoAttachment,\n  DocumentInfoAuthorizingContainerPath,\n  DocumentInfoLocalDetails,\n  DocumentInfoRemoteAttachmentBinding,\n  DocumentInfoRemoteDetails,\n  DocumentInfoRemoteMode,\n} from \"./documentInfoTypes\";\n\ninterface DocumentInfoApi {\n  getDocumentEditAttribution: (\n    documentId: string,\n    requestKey?: string,\n  ) => Promise<DocumentEditAttributionResponse | null>;\n  getDocumentWriterProjection: (\n    documentId: string,\n  ) => Promise<DocumentWriterProjectionResponse | null>;\n  listDocumentAttachments: (\n    documentId: string,\n  ) => Promise<ListDocumentAttachmentsResponse | null>;\n}\n\ninterface PendingAttachmentInfoRow {\n  byteLength: number;\n  createdAt: string;\n  localId: string;\n  mimeType: string | null;\n  name: string;\n  slotId: string;\n  storageKey: string;\n}\n\ninterface LocalAttachmentInfoRow {\n  blobId: string | null;\n  byteLength: number;\n  localId: string;\n  mimeType: string | null;\n  slotId: string;\n  storageKey: string;\n  updatedAt: string;\n}\n\nfunction readRecordString(value: unknown, key: string): string | null {\n  if (!value || typeof value !== \"object\") {\n    return null;\n  }\n\n  const nextValue = Reflect.get(value, key);\n  return typeof nextValue === \"string\" && nextValue.length > 0\n    ? nextValue\n    : null;\n}\n\nfunction readRecordNumber(value: unknown, key: string): number | null {\n  if (!value || typeof value !== \"object\") {\n    return null;\n  }\n\n  const nextValue = Reflect.get(value, key);\n  return typeof nextValue === \"number\" && Number.isFinite(nextValue)\n    ? nextValue\n    : null;\n}\n\nfunction readRecordArrayLength(value: unknown, key: string): number | null {\n  if (!value || typeof value !== \"object\") {\n    return null;\n  }\n\n  const nextValue = Reflect.get(value, key);\n  return Array.isArray(nextValue) ? nextValue.length : null;\n}\n\nfunction readStoredManifestHash(\n  value: string | null | undefined,\n): string | null {\n  if (!value) {\n    return null;\n  }\n\n  try {\n    const parsed: unknown = JSON.parse(value);\n    return readRecordString(parsed, \"manifestHash\");\n  } catch {\n    return null;\n  }\n}\n\nfunction mapPendingAttachmentRow(\n  row: PendingAttachmentInfoRow,\n): DocumentInfoAttachment {\n  return {\n    attachmentKind: \"pending\",\n    blobId: null,\n    byteLength: row.byteLength,\n    createdAt: row.createdAt,\n    localId: row.localId,\n    mimeType: row.mimeType,\n    name: row.name,\n    slotId: row.slotId,\n    storageKey: row.storageKey,\n    updatedAt: null,\n  };\n}\n\nfunction mapLocalAttachmentRow(\n  row: LocalAttachmentInfoRow,\n): DocumentInfoAttachment {\n  return {\n    attachmentKind: \"local\",\n    blobId: row.blobId,\n    byteLength: row.byteLength,\n    createdAt: null,\n    localId: row.localId,\n    mimeType: row.mimeType,\n    name: null,\n    slotId: row.slotId,\n    storageKey: row.storageKey,\n    updatedAt: row.updatedAt,\n  };\n}\n\nasync function loadDocumentInfoAttachments(input: {\n  execSql: ExecSql;\n  localId: string;\n}): Promise<DocumentInfoAttachment[]> {\n  const { db } = getClientSQLitePersistenceRuntime(input.execSql);\n  const [pendingRows, localRows] = await Promise.all([\n    db\n      .select({\n        byteLength: documentPendingAttachments.byteLength,\n        createdAt: documentPendingAttachments.createdAt,\n        localId: documentPendingAttachments.localId,\n        mimeType: documentPendingAttachments.mimeType,\n        name: documentPendingAttachments.name,\n        slotId: documentPendingAttachments.slotId,\n        storageKey: documentPendingAttachments.storageKey,\n      })\n      .from(documentPendingAttachments)\n      .where(eq(documentPendingAttachments.localId, input.localId))\n      .orderBy(\n        documentPendingAttachments.createdAt,\n        documentPendingAttachments.slotId,\n      ),\n    db\n      .select({\n        blobId: documentAttachmentBlobProjection.blobId,\n        byteLength: documentAttachmentBlobProjection.byteLength,\n        localId: documentAttachmentBlobProjection.localId,\n        mimeType: documentAttachmentBlobProjection.mimeType,\n        slotId: documentAttachmentBlobProjection.slotId,\n        storageKey: documentAttachmentBlobProjection.storageKey,\n        updatedAt: documentAttachmentBlobProjection.updatedAt,\n      })\n      .from(documentAttachmentBlobProjection)\n      .where(\n        and(\n          eq(documentAttachmentBlobProjection.localId, input.localId),\n          // Unlinked slots keep their row as a pending-detach marker; the\n          // document no longer has the attachment, so do not report it.\n          isNull(documentAttachmentBlobProjection.detachedAt),\n        ),\n      )\n      .orderBy(\n        documentAttachmentBlobProjection.updatedAt,\n        documentAttachmentBlobProjection.slotId,\n      ),\n  ]);\n\n  return [\n    ...pendingRows.map(mapPendingAttachmentRow),\n    ...localRows.map(mapLocalAttachmentRow),\n  ];\n}\n\nasync function loadLocalDocumentInfo(input: {\n  execSql: ExecSql | null;\n  localId: string;\n}): Promise<{\n  attachments: DocumentInfoAttachment[];\n  contentSnapshot: string | null;\n  local: DocumentInfoLocalDetails;\n}> {\n  const fallback = {\n    attachments: [],\n    contentSnapshot: null,\n    local: {\n      accessEpoch: null,\n      accessStateHash: null,\n      containerId: null,\n      documentId: null,\n      documentKind: null,\n      hasContentKeyBundle: false,\n      hasDocumentKekTargets: false,\n      hasDocumentManifestBundle: false,\n      lastCommitLsn: null,\n      localDocumentManifestHash: null,\n      localId: input.localId,\n      pendingAttachmentByteLength: 0,\n      pendingAttachmentCount: 0,\n      pendingUpdateCount: 0,\n      title: null,\n      updatedAt: null,\n    },\n  };\n\n  if (!input.execSql) {\n    return fallback;\n  }\n\n  await sqlDocumentsPersistence.ensureSchema(input.execSql);\n  const { db } = getClientSQLitePersistenceRuntime(input.execSql);\n  const [document, pendingUpdates, attachments, projectionRows, contentDoc] =\n    await Promise.all([\n      sqlDocumentsPersistence.loadDocument(input.execSql, input.localId),\n      sqlDocumentsPersistence.listPendingUpdates(input.execSql, input.localId),\n      loadDocumentInfoAttachments({\n        execSql: input.execSql,\n        localId: input.localId,\n      }),\n      db\n        .select({ updatedAt: documentProjection.updatedAt })\n        .from(documentProjection)\n        .where(eq(documentProjection.localId, input.localId))\n        .limit(1),\n      loadPersistedDocumentContent({\n        execSql: input.execSql,\n        localId: input.localId,\n        persistence: sqlDocumentsPersistence,\n      }).catch(() => null),\n    ]);\n\n  if (!document) {\n    return fallback;\n  }\n\n  const pendingAttachments = attachments.filter(\n    (attachment) => attachment.attachmentKind === \"pending\",\n  );\n\n  return {\n    attachments,\n    // Blame reads op-level provenance out of a serialized snapshot; export the\n    // durable-history content for it. Degrades to null (blame unavailable)\n    // rather than failing the Info panel.\n    contentSnapshot: contentDoc\n      ? bytesToBase64(exportFullHistorySnapshot(contentDoc))\n      : null,\n    local: {\n      accessEpoch: document.accessEpoch,\n      accessStateHash: document.accessStateHash ?? null,\n      containerId: document.containerId,\n      documentId: document.documentId,\n      documentKind: document.documentKind ?? DEFAULT_DOCUMENT_KIND,\n      hasContentKeyBundle: Boolean(document.contentKeyBundle),\n      hasDocumentKekTargets: Boolean(document.documentKekTargets),\n      hasDocumentManifestBundle: Boolean(document.documentManifestBundle),\n      lastCommitLsn: document.lastCommitLsn ?? null,\n      localDocumentManifestHash: readStoredManifestHash(\n        document.documentManifestBundle,\n      ),\n      localId: document.id,\n      pendingAttachmentByteLength: pendingAttachments.reduce(\n        (total, attachment) => total + attachment.byteLength,\n        0,\n      ),\n      pendingAttachmentCount: pendingAttachments.length,\n      pendingUpdateCount: pendingUpdates.length,\n      title: document.title ?? null,\n      updatedAt: projectionRows[0]?.updatedAt ?? null,\n    },\n  };\n}\n\nfunction shouldLoadRemoteDocumentInfo(input: {\n  local: DocumentInfoLocalDetails;\n  remoteInfoMode: DocumentInfoRemoteMode;\n}): boolean {\n  return input.remoteInfoMode !== \"never\" && Boolean(input.local.documentId);\n}\n\nfunction mapAttachmentBinding(\n  binding: BlobAttachmentSummary,\n): DocumentInfoRemoteAttachmentBinding {\n  return {\n    bindingId: binding.bindingId,\n    blobId: binding.blobId,\n    slotId: binding.slotId,\n  };\n}\n\nfunction mapAuthorizingContainerPath(\n  projection: ContainerKeyingPathResponse,\n): DocumentInfoAuthorizingContainerPath {\n  const leafBundle = projection.path.at(-1);\n  const leafKek = projection.containerKeks.at(-1);\n\n  return {\n    containerId: projection.containerId,\n    containerKeyEpoch: leafKek?.containerKeyEpoch ?? null,\n    containerKeyEpochId: leafKek?.containerKeyEpochId ?? null,\n    leafManifestHash: leafBundle?.manifestHash ?? null,\n    organizationId: projection.organizationId,\n    pathLength: projection.path.length,\n  };\n}\n\nfunction getDocumentInfoRemoteDetails(input: {\n  attachmentBindings: ReadonlyArray<BlobAttachmentSummary>;\n  attribution: DocumentEditAttributionResponse | null;\n  blameRanges: DocumentBlameRange[] | null;\n  characterBlame: DocumentCharacterBlameSummary | null;\n  contributors: DocumentContributor[];\n  fieldBlame: DocumentFieldBlame[] | null;\n  projection: DocumentWriterProjectionResponse;\n}): DocumentInfoRemoteDetails {\n  const {\n    attachmentBindings,\n    attribution,\n    blameRanges,\n    characterBlame,\n    contributors,\n    fieldBlame,\n    projection,\n  } = input;\n  const manifestState = projection.documentManifest.state;\n  const manifest = projection.documentManifest.manifest;\n\n  return {\n    activeAttachmentBindings: attachmentBindings.map(mapAttachmentBinding),\n    attributionRevision: attribution?.attributionRevision ?? null,\n    attributionStatus: attribution\n      ? attribution.truncated\n        ? \"truncated\"\n        : \"available\"\n      : \"unavailable\",\n    attributionSegments: attribution?.segments ?? [],\n    authorizingContainerPaths: projection.authorizingContainerPaths.map(\n      mapAuthorizingContainerPath,\n    ),\n    blameRanges,\n    characterBlame,\n    fieldBlame,\n    contentKeyEpoch: projection.contentKeyBundle.contentKeyEpoch,\n    contentKeyTargetCount: projection.contentKeyBundle.targets.length,\n    contentKeyTargetHash: projection.contentKeyBundle.targetHash,\n    contributors,\n    currentManifestHash: projection.documentManifest.manifestHash,\n    documentContainerManifestHistoryCount:\n      projection.documentContainerManifestHistory.length,\n    documentKekTargetCount: projection.documentKekTargets.targets.length,\n    documentKeyTargetHash: projection.documentKekTargets.documentKeyTargetHash,\n    documentManifestContainerPathCount:\n      projection.documentManifestContainerPaths.length,\n    documentManifestHistoryCount: projection.documentManifestHistory.length,\n    linkedContainerKeyEpochCount:\n      projection.documentKekTargets.linkedContainerKeyEpochIds.length,\n    linkedContainerManifestCount:\n      projection.documentKekTargets.linkedContainerManifestHashes.length,\n    linkSetManifestHash: projection.documentKekTargets.linkSetManifestHash,\n    manifestEpoch: readRecordNumber(manifest, \"epoch\"),\n    previousManifestHash: readRecordString(\n      manifestState,\n      \"previousManifestHash\",\n    ),\n    referencedPrincipalCount: readRecordArrayLength(\n      manifest,\n      \"referencedPrincipalHeads\",\n    ),\n  };\n}\n\nexport async function loadDocumentInfo(input: {\n  apiClient: DocumentInfoApi;\n  attributionRequestKey?: string | undefined;\n  execSql?: ExecSql | null;\n  localId: string;\n  reportSecurityIncident: SecurityIncidentReporter;\n  remoteInfoMode?: DocumentInfoRemoteMode | undefined;\n}): Promise<DocumentInfo> {\n  const { attachments, contentSnapshot, local } = await loadLocalDocumentInfo({\n    execSql: input.execSql ?? null,\n    localId: input.localId,\n  });\n\n  if (\n    !shouldLoadRemoteDocumentInfo({\n      local,\n      remoteInfoMode: input.remoteInfoMode ?? \"if-synced\",\n    }) ||\n    !local.documentId\n  ) {\n    return { attachments, local, remoteInfo: null };\n  }\n\n  const attributionPromise = input.apiClient\n    .getDocumentEditAttribution(local.documentId, input.attributionRequestKey)\n    .catch(async (error: unknown) => {\n      await reportAndRethrowKeyingVerificationError(\n        error,\n        input.reportSecurityIncident,\n        {\n          objectId: local.documentId ?? input.localId,\n          objectKind: \"document\",\n          operation: \"document.info.attribution\",\n        },\n      );\n      return null;\n    });\n  const [projection, attachmentBindings, attribution] = await Promise.all([\n    input.apiClient.getDocumentWriterProjection(local.documentId),\n    input.apiClient.listDocumentAttachments(local.documentId),\n    // Attribution is supplementary: a rejection (network/server) must not block\n    // the rest of the document-info load, so swallow it to null (no contributors).\n    attributionPromise,\n  ]);\n\n  if (!projection) {\n    throw new Error(\n      `Document info projection was unavailable for local document ${input.localId} with remote document ${local.documentId}.`,\n    );\n  }\n\n  const attributionComplete = attribution && !attribution.truncated;\n  const attributionSegments = attribution?.segments ?? [];\n  const blame = attributionComplete\n    ? computeDocumentBlame(contentSnapshot, attributionSegments)\n    : null;\n  return {\n    attachments,\n    local,\n    remoteInfo: getDocumentInfoRemoteDetails({\n      attachmentBindings: attachmentBindings ?? [],\n      attribution,\n      blameRanges: blame?.blameRanges ?? null,\n      characterBlame: blame?.characterBlame ?? null,\n      contributors: attributionComplete\n        ? summarizeDocumentContributors(attributionSegments)\n        : [],\n      fieldBlame: attributionComplete\n        ? computeFieldBlame(contentSnapshot, attributionSegments)\n        : null,\n      projection,\n    }),\n  };\n}\n"]}
+{"version":3,"file":"documentInfo.js","sourceRoot":"","sources":["documentInfo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAQ5D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAKL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,uBAAuB,EAAE,MAAM,uDAAuD,CAAC;AAEhG,OAAO,EACL,gCAAgC,EAChC,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAE/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAsDzD,SAAS,gBAAgB,CAAC,KAAc,EAAE,GAAW;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,GAAW;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,GAAW;IACxD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAgC;IAEhC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,GAA6B;IAE7B,OAAO;QACL,cAAc,EAAE,SAAS;QACzB,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAA2B;IAE3B,OAAO;QACL,cAAc,EAAE,OAAO;QACvB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAG1C;IACC,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,EAAE;aACC,MAAM,CAAC;YACN,UAAU,EAAE,0BAA0B,CAAC,UAAU;YACjD,SAAS,EAAE,0BAA0B,CAAC,SAAS;YAC/C,OAAO,EAAE,0BAA0B,CAAC,OAAO;YAC3C,QAAQ,EAAE,0BAA0B,CAAC,QAAQ;YAC7C,IAAI,EAAE,0BAA0B,CAAC,IAAI;YACrC,MAAM,EAAE,0BAA0B,CAAC,MAAM;YACzC,UAAU,EAAE,0BAA0B,CAAC,UAAU;SAClD,CAAC;aACD,IAAI,CAAC,0BAA0B,CAAC;aAChC,KAAK,CAAC,EAAE,CAAC,0BAA0B,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;aAC5D,OAAO,CACN,0BAA0B,CAAC,SAAS,EACpC,0BAA0B,CAAC,MAAM,CAClC;QACH,EAAE;aACC,MAAM,CAAC;YACN,MAAM,EAAE,gCAAgC,CAAC,MAAM;YAC/C,UAAU,EAAE,gCAAgC,CAAC,UAAU;YACvD,OAAO,EAAE,gCAAgC,CAAC,OAAO;YACjD,QAAQ,EAAE,gCAAgC,CAAC,QAAQ;YACnD,MAAM,EAAE,gCAAgC,CAAC,MAAM;YAC/C,UAAU,EAAE,gCAAgC,CAAC,UAAU;YACvD,SAAS,EAAE,gCAAgC,CAAC,SAAS;SACtD,CAAC;aACD,IAAI,CAAC,gCAAgC,CAAC;aACtC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gCAAgC,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;QAC3D,gEAAgE;QAChE,8DAA8D;QAC9D,MAAM,CAAC,gCAAgC,CAAC,UAAU,CAAC,CACpD,CACF;aACA,OAAO,CACN,gCAAgC,CAAC,SAAS,EAC1C,gCAAgC,CAAC,MAAM,CACxC;KACJ,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,WAAW,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAC3C,GAAG,SAAS,CAAC,GAAG,CAAC,qBAAqB,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,KAGpC;IAKC,MAAM,QAAQ,GAAG;QACf,WAAW,EAAE,EAAE;QACf,eAAe,EAAE,IAAI;QACrB,KAAK,EAAE;YACL,WAAW,EAAE,IAAI;YACjB,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,mBAAmB,EAAE,KAAK;YAC1B,qBAAqB,EAAE,KAAK;YAC5B,yBAAyB,EAAE,KAAK;YAChC,aAAa,EAAE,IAAI;YACnB,yBAAyB,EAAE,IAAI;YAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,2BAA2B,EAAE,CAAC;YAC9B,sBAAsB,EAAE,CAAC;YACzB,kBAAkB,EAAE,CAAC;YACrB,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI;SAChB;KACF,CAAC;IAEF,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,uBAAuB,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,CAAC,GACvE,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,uBAAuB,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;QAClE,uBAAuB,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;QACxE,2BAA2B,CAAC;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,EAAE;aACC,MAAM,CAAC,EAAE,SAAS,EAAE,kBAAkB,CAAC,SAAS,EAAE,CAAC;aACnD,IAAI,CAAC,kBAAkB,CAAC;aACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;aACpD,KAAK,CAAC,CAAC,CAAC;QACX,4BAA4B,CAAC;YAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,uBAAuB;SACrC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;KACrB,CAAC,CAAC;IAEL,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,kBAAkB,GAAG,WAAW,CAAC,MAAM,CAC3C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,KAAK,SAAS,CACxD,CAAC;IAEF,OAAO;QACL,WAAW;QACX,2EAA2E;QAC3E,uEAAuE;QACvE,sCAAsC;QACtC,eAAe,EAAE,UAAU;YACzB,CAAC,CAAC,aAAa,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC;YACtD,CAAC,CAAC,IAAI;QACR,KAAK,EAAE;YACL,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,eAAe,EAAE,QAAQ,CAAC,eAAe,IAAI,IAAI;YACjD,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,qBAAqB;YAC5D,mBAAmB,EAAE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACvD,qBAAqB,EAAE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC3D,yBAAyB,EAAE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YACnE,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,IAAI;YAC7C,yBAAyB,EAAE,sBAAsB,CAC/C,QAAQ,CAAC,sBAAsB,CAChC;YACD,OAAO,EAAE,QAAQ,CAAC,EAAE;YACpB,2BAA2B,EAAE,kBAAkB,CAAC,MAAM,CACpD,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,KAAK,GAAG,UAAU,CAAC,UAAU,EACpD,CAAC,CACF;YACD,sBAAsB,EAAE,kBAAkB,CAAC,MAAM;YACjD,kBAAkB,EAAE,cAAc,CAAC,MAAM;YACzC,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI;YAC7B,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI;SAChD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,KAGrC;IACC,OAAO,KAAK,CAAC,cAAc,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAA8B;IAE9B,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,UAAuC;IAEvC,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhD,OAAO;QACL,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,IAAI,IAAI;QACrD,mBAAmB,EAAE,OAAO,EAAE,mBAAmB,IAAI,IAAI;QACzD,gBAAgB,EAAE,UAAU,EAAE,YAAY,IAAI,IAAI;QAClD,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,KAQrC;IACC,MAAM,EACJ,kBAAkB,EAClB,WAAW,EACX,WAAW,EACX,cAAc,EACd,YAAY,EACZ,UAAU,EACV,UAAU,GACX,GAAG,KAAK,CAAC;IACV,MAAM,aAAa,GAAG,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC;IACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC;IAEtD,OAAO;QACL,wBAAwB,EAAE,kBAAkB,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACtE,mBAAmB,EAAE,WAAW,EAAE,mBAAmB,IAAI,IAAI;QAC7D,iBAAiB,EAAE,WAAW;YAC5B,CAAC,CAAC,WAAW,CAAC,SAAS;gBACrB,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,WAAW;YACf,CAAC,CAAC,aAAa;QACjB,mBAAmB,EAAE,WAAW,EAAE,QAAQ,IAAI,EAAE;QAChD,yBAAyB,EAAE,UAAU,CAAC,yBAAyB,CAAC,GAAG,CACjE,2BAA2B,CAC5B;QACD,WAAW;QACX,cAAc;QACd,UAAU;QACV,eAAe,EAAE,UAAU,CAAC,gBAAgB,CAAC,eAAe;QAC5D,qBAAqB,EAAE,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM;QACjE,oBAAoB,EAAE,UAAU,CAAC,gBAAgB,CAAC,UAAU;QAC5D,YAAY;QACZ,mBAAmB,EAAE,UAAU,CAAC,gBAAgB,CAAC,YAAY;QAC7D,qCAAqC,EACnC,UAAU,CAAC,gCAAgC,CAAC,MAAM;QACpD,sBAAsB,EAAE,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM;QACpE,qBAAqB,EAAE,UAAU,CAAC,kBAAkB,CAAC,qBAAqB;QAC1E,kCAAkC,EAChC,UAAU,CAAC,8BAA8B,CAAC,MAAM;QAClD,4BAA4B,EAAE,UAAU,CAAC,uBAAuB,CAAC,MAAM;QACvE,4BAA4B,EAC1B,UAAU,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,MAAM;QACjE,4BAA4B,EAC1B,UAAU,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,MAAM;QACpE,mBAAmB,EAAE,UAAU,CAAC,kBAAkB,CAAC,mBAAmB;QACtE,aAAa,EAAE,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC;QAClD,oBAAoB,EAAE,gBAAgB,CACpC,aAAa,EACb,sBAAsB,CACvB;QACD,wBAAwB,EAAE,qBAAqB,CAC7C,QAAQ,EACR,0BAA0B,CAC3B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAOtC;IACC,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,MAAM,qBAAqB,CAAC;QAC1E,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IAEH,IACE,CAAC,4BAA4B,CAAC;QAC5B,KAAK;QACL,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,WAAW;KACpD,CAAC;QACF,CAAC,KAAK,CAAC,UAAU,EACjB,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS;SACvC,0BAA0B,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,qBAAqB,CAAC;SACzE,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QAC9B,MAAM,uCAAuC,CAC3C,KAAK,EACL,KAAK,CAAC,sBAAsB,EAC5B;YACE,QAAQ,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO;YAC3C,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,2BAA2B;SACvC,CACF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACL,MAAM,CAAC,UAAU,EAAE,kBAAkB,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtE,KAAK,CAAC,SAAS,CAAC,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC;QAC7D,KAAK,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC;QACzD,4EAA4E;QAC5E,+EAA+E;QAC/E,kBAAkB;KACnB,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,+DAA+D,KAAK,CAAC,OAAO,yBAAyB,KAAK,CAAC,UAAU,GAAG,CACzH,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,WAAW,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;IAClE,MAAM,mBAAmB,GAAG,WAAW,EAAE,QAAQ,IAAI,EAAE,CAAC;IACxD,MAAM,KAAK,GAAG,mBAAmB;QAC/B,CAAC,CAAC,oBAAoB,CAAC,eAAe,EAAE,mBAAmB,CAAC;QAC5D,CAAC,CAAC,IAAI,CAAC;IACT,OAAO;QACL,WAAW;QACX,KAAK;QACL,UAAU,EAAE,4BAA4B,CAAC;YACvC,kBAAkB,EAAE,kBAAkB,IAAI,EAAE;YAC5C,WAAW;YACX,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,IAAI;YACvC,cAAc,EAAE,KAAK,EAAE,cAAc,IAAI,IAAI;YAC7C,YAAY,EAAE,mBAAmB;gBAC/B,CAAC,CAAC,6BAA6B,CAAC,mBAAmB,CAAC;gBACpD,CAAC,CAAC,EAAE;YACN,UAAU,EAAE,mBAAmB;gBAC7B,CAAC,CAAC,iBAAiB,CAAC,eAAe,EAAE,mBAAmB,CAAC;gBACzD,CAAC,CAAC,IAAI;YACR,UAAU;SACX,CAAC;KACH,CAAC;AACJ,CAAC","sourcesContent":["import { bytesToBase64 } from \"@tearleads/encoding\";\nimport { exportFullHistorySnapshot } from \"@tearleads/loro\";\nimport type {\n  BlobAttachmentSummary,\n  ContainerKeyingPathResponse,\n  DocumentEditAttributionResponse,\n  DocumentWriterProjectionResponse,\n  ListDocumentAttachmentsResponse,\n} from \"@tearleads/validators/response\";\nimport { and, eq, isNull } from \"drizzle-orm\";\nimport { DEFAULT_DOCUMENT_KIND } from \"../../data/documents/documentConstants\";\nimport {\n  type DocumentBlameRange,\n  type DocumentCharacterBlameSummary,\n  type DocumentContributor,\n  type DocumentFieldBlame,\n  summarizeDocumentContributors,\n} from \"../../data/documents/editAttribution\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../data/keyingProjectionVerification/error\";\nimport { sqlDocumentsPersistence } from \"../../data/persistence/documents/documentsPersistence\";\nimport type { SecurityIncidentReporter } from \"../../data/shared/securityIncidents\";\nimport {\n  documentAttachmentBlobProjection,\n  documentPendingAttachments,\n  documentProjection,\n} from \"../../data/sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../data/sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport { loadPersistedDocumentContent } from \"../documents/historyContent\";\nimport { computeDocumentBlame } from \"./documentCharacterBlame\";\nimport { computeFieldBlame } from \"./documentFieldBlame\";\nimport type {\n  DocumentInfo,\n  DocumentInfoAttachment,\n  DocumentInfoAuthorizingContainerPath,\n  DocumentInfoLocalDetails,\n  DocumentInfoRemoteAttachmentBinding,\n  DocumentInfoRemoteDetails,\n  DocumentInfoRemoteMode,\n} from \"./documentInfoTypes\";\n\nexport type {\n  DocumentInfo,\n  DocumentInfoAttachment,\n  DocumentInfoAuthorizingContainerPath,\n  DocumentInfoLocalDetails,\n  DocumentInfoRemoteAttachmentBinding,\n  DocumentInfoRemoteDetails,\n  DocumentInfoRemoteMode,\n} from \"./documentInfoTypes\";\n\ninterface DocumentInfoApi {\n  getDocumentEditAttribution: (\n    documentId: string,\n    requestKey?: string,\n  ) => Promise<DocumentEditAttributionResponse | null>;\n  getDocumentWriterProjection: (\n    documentId: string,\n  ) => Promise<DocumentWriterProjectionResponse | null>;\n  listDocumentAttachments: (\n    documentId: string,\n  ) => Promise<ListDocumentAttachmentsResponse | null>;\n}\n\ninterface PendingAttachmentInfoRow {\n  byteLength: number;\n  createdAt: string;\n  localId: string;\n  mimeType: string | null;\n  name: string;\n  slotId: string;\n  storageKey: string;\n}\n\ninterface LocalAttachmentInfoRow {\n  blobId: string | null;\n  byteLength: number;\n  localId: string;\n  mimeType: string | null;\n  slotId: string;\n  storageKey: string;\n  updatedAt: string;\n}\n\nfunction readRecordString(value: unknown, key: string): string | null {\n  if (!value || typeof value !== \"object\") {\n    return null;\n  }\n\n  const nextValue = Reflect.get(value, key);\n  return typeof nextValue === \"string\" && nextValue.length > 0\n    ? nextValue\n    : null;\n}\n\nfunction readRecordNumber(value: unknown, key: string): number | null {\n  if (!value || typeof value !== \"object\") {\n    return null;\n  }\n\n  const nextValue = Reflect.get(value, key);\n  return typeof nextValue === \"number\" && Number.isFinite(nextValue)\n    ? nextValue\n    : null;\n}\n\nfunction readRecordArrayLength(value: unknown, key: string): number | null {\n  if (!value || typeof value !== \"object\") {\n    return null;\n  }\n\n  const nextValue = Reflect.get(value, key);\n  return Array.isArray(nextValue) ? nextValue.length : null;\n}\n\nfunction readStoredManifestHash(\n  value: string | null | undefined,\n): string | null {\n  if (!value) {\n    return null;\n  }\n\n  try {\n    const parsed: unknown = JSON.parse(value);\n    return readRecordString(parsed, \"manifestHash\");\n  } catch {\n    return null;\n  }\n}\n\nfunction mapPendingAttachmentRow(\n  row: PendingAttachmentInfoRow,\n): DocumentInfoAttachment {\n  return {\n    attachmentKind: \"pending\",\n    blobId: null,\n    byteLength: row.byteLength,\n    createdAt: row.createdAt,\n    localId: row.localId,\n    mimeType: row.mimeType,\n    name: row.name,\n    slotId: row.slotId,\n    storageKey: row.storageKey,\n    updatedAt: null,\n  };\n}\n\nfunction mapLocalAttachmentRow(\n  row: LocalAttachmentInfoRow,\n): DocumentInfoAttachment {\n  return {\n    attachmentKind: \"local\",\n    blobId: row.blobId,\n    byteLength: row.byteLength,\n    createdAt: null,\n    localId: row.localId,\n    mimeType: row.mimeType,\n    name: null,\n    slotId: row.slotId,\n    storageKey: row.storageKey,\n    updatedAt: row.updatedAt,\n  };\n}\n\nasync function loadDocumentInfoAttachments(input: {\n  execSql: ExecSql;\n  localId: string;\n}): Promise<DocumentInfoAttachment[]> {\n  const { db } = getClientSQLitePersistenceRuntime(input.execSql);\n  const [pendingRows, localRows] = await Promise.all([\n    db\n      .select({\n        byteLength: documentPendingAttachments.byteLength,\n        createdAt: documentPendingAttachments.createdAt,\n        localId: documentPendingAttachments.localId,\n        mimeType: documentPendingAttachments.mimeType,\n        name: documentPendingAttachments.name,\n        slotId: documentPendingAttachments.slotId,\n        storageKey: documentPendingAttachments.storageKey,\n      })\n      .from(documentPendingAttachments)\n      .where(eq(documentPendingAttachments.localId, input.localId))\n      .orderBy(\n        documentPendingAttachments.createdAt,\n        documentPendingAttachments.slotId,\n      ),\n    db\n      .select({\n        blobId: documentAttachmentBlobProjection.blobId,\n        byteLength: documentAttachmentBlobProjection.byteLength,\n        localId: documentAttachmentBlobProjection.localId,\n        mimeType: documentAttachmentBlobProjection.mimeType,\n        slotId: documentAttachmentBlobProjection.slotId,\n        storageKey: documentAttachmentBlobProjection.storageKey,\n        updatedAt: documentAttachmentBlobProjection.updatedAt,\n      })\n      .from(documentAttachmentBlobProjection)\n      .where(\n        and(\n          eq(documentAttachmentBlobProjection.localId, input.localId),\n          // Unlinked slots keep their row as a pending-detach marker; the\n          // document no longer has the attachment, so do not report it.\n          isNull(documentAttachmentBlobProjection.detachedAt),\n        ),\n      )\n      .orderBy(\n        documentAttachmentBlobProjection.updatedAt,\n        documentAttachmentBlobProjection.slotId,\n      ),\n  ]);\n\n  return [\n    ...pendingRows.map(mapPendingAttachmentRow),\n    ...localRows.map(mapLocalAttachmentRow),\n  ];\n}\n\nasync function loadLocalDocumentInfo(input: {\n  execSql: ExecSql | null;\n  localId: string;\n}): Promise<{\n  attachments: DocumentInfoAttachment[];\n  contentSnapshot: string | null;\n  local: DocumentInfoLocalDetails;\n}> {\n  const fallback = {\n    attachments: [],\n    contentSnapshot: null,\n    local: {\n      accessEpoch: null,\n      accessStateHash: null,\n      containerId: null,\n      documentId: null,\n      documentKind: null,\n      hasContentKeyBundle: false,\n      hasDocumentKekTargets: false,\n      hasDocumentManifestBundle: false,\n      lastCommitLsn: null,\n      localDocumentManifestHash: null,\n      localId: input.localId,\n      pendingAttachmentByteLength: 0,\n      pendingAttachmentCount: 0,\n      pendingUpdateCount: 0,\n      title: null,\n      updatedAt: null,\n    },\n  };\n\n  if (!input.execSql) {\n    return fallback;\n  }\n\n  await sqlDocumentsPersistence.ensureSchema(input.execSql);\n  const { db } = getClientSQLitePersistenceRuntime(input.execSql);\n  const [document, pendingUpdates, attachments, projectionRows, contentDoc] =\n    await Promise.all([\n      sqlDocumentsPersistence.loadDocument(input.execSql, input.localId),\n      sqlDocumentsPersistence.listPendingUpdates(input.execSql, input.localId),\n      loadDocumentInfoAttachments({\n        execSql: input.execSql,\n        localId: input.localId,\n      }),\n      db\n        .select({ updatedAt: documentProjection.updatedAt })\n        .from(documentProjection)\n        .where(eq(documentProjection.localId, input.localId))\n        .limit(1),\n      loadPersistedDocumentContent({\n        execSql: input.execSql,\n        localId: input.localId,\n        persistence: sqlDocumentsPersistence,\n      }).catch(() => null),\n    ]);\n\n  if (!document) {\n    return fallback;\n  }\n\n  const pendingAttachments = attachments.filter(\n    (attachment) => attachment.attachmentKind === \"pending\",\n  );\n\n  return {\n    attachments,\n    // Blame reads op-level provenance out of a serialized snapshot; export the\n    // durable-history content for it. Degrades to null (blame unavailable)\n    // rather than failing the Info panel.\n    contentSnapshot: contentDoc\n      ? bytesToBase64(exportFullHistorySnapshot(contentDoc))\n      : null,\n    local: {\n      accessEpoch: document.accessEpoch,\n      accessStateHash: document.accessStateHash ?? null,\n      containerId: document.containerId,\n      documentId: document.documentId,\n      documentKind: document.documentKind ?? DEFAULT_DOCUMENT_KIND,\n      hasContentKeyBundle: Boolean(document.contentKeyBundle),\n      hasDocumentKekTargets: Boolean(document.documentKekTargets),\n      hasDocumentManifestBundle: Boolean(document.documentManifestBundle),\n      lastCommitLsn: document.lastCommitLsn ?? null,\n      localDocumentManifestHash: readStoredManifestHash(\n        document.documentManifestBundle,\n      ),\n      localId: document.id,\n      pendingAttachmentByteLength: pendingAttachments.reduce(\n        (total, attachment) => total + attachment.byteLength,\n        0,\n      ),\n      pendingAttachmentCount: pendingAttachments.length,\n      pendingUpdateCount: pendingUpdates.length,\n      title: document.title ?? null,\n      updatedAt: projectionRows[0]?.updatedAt ?? null,\n    },\n  };\n}\n\nfunction shouldLoadRemoteDocumentInfo(input: {\n  local: DocumentInfoLocalDetails;\n  remoteInfoMode: DocumentInfoRemoteMode;\n}): boolean {\n  return input.remoteInfoMode !== \"never\" && Boolean(input.local.documentId);\n}\n\nfunction mapAttachmentBinding(\n  binding: BlobAttachmentSummary,\n): DocumentInfoRemoteAttachmentBinding {\n  return {\n    bindingId: binding.bindingId,\n    blobId: binding.blobId,\n    slotId: binding.slotId,\n  };\n}\n\nfunction mapAuthorizingContainerPath(\n  projection: ContainerKeyingPathResponse,\n): DocumentInfoAuthorizingContainerPath {\n  const leafBundle = projection.path.at(-1);\n  const leafKek = projection.containerKeks.at(-1);\n\n  return {\n    containerId: projection.containerId,\n    containerKeyEpoch: leafKek?.containerKeyEpoch ?? null,\n    containerKeyEpochId: leafKek?.containerKeyEpochId ?? null,\n    leafManifestHash: leafBundle?.manifestHash ?? null,\n    organizationId: projection.organizationId,\n    pathLength: projection.path.length,\n  };\n}\n\nfunction getDocumentInfoRemoteDetails(input: {\n  attachmentBindings: ReadonlyArray<BlobAttachmentSummary>;\n  attribution: DocumentEditAttributionResponse | null;\n  blameRanges: DocumentBlameRange[] | null;\n  characterBlame: DocumentCharacterBlameSummary | null;\n  contributors: DocumentContributor[];\n  fieldBlame: DocumentFieldBlame[] | null;\n  projection: DocumentWriterProjectionResponse;\n}): DocumentInfoRemoteDetails {\n  const {\n    attachmentBindings,\n    attribution,\n    blameRanges,\n    characterBlame,\n    contributors,\n    fieldBlame,\n    projection,\n  } = input;\n  const manifestState = projection.documentManifest.state;\n  const manifest = projection.documentManifest.manifest;\n\n  return {\n    activeAttachmentBindings: attachmentBindings.map(mapAttachmentBinding),\n    attributionRevision: attribution?.attributionRevision ?? null,\n    attributionStatus: attribution\n      ? attribution.truncated\n        ? \"truncated\"\n        : \"available\"\n      : \"unavailable\",\n    attributionSegments: attribution?.segments ?? [],\n    authorizingContainerPaths: projection.authorizingContainerPaths.map(\n      mapAuthorizingContainerPath,\n    ),\n    blameRanges,\n    characterBlame,\n    fieldBlame,\n    contentKeyEpoch: projection.contentKeyBundle.contentKeyEpoch,\n    contentKeyTargetCount: projection.contentKeyBundle.targets.length,\n    contentKeyTargetHash: projection.contentKeyBundle.targetHash,\n    contributors,\n    currentManifestHash: projection.documentManifest.manifestHash,\n    documentContainerManifestHistoryCount:\n      projection.documentContainerManifestHistory.length,\n    documentKekTargetCount: projection.documentKekTargets.targets.length,\n    documentKeyTargetHash: projection.documentKekTargets.documentKeyTargetHash,\n    documentManifestContainerPathCount:\n      projection.documentManifestContainerPaths.length,\n    documentManifestHistoryCount: projection.documentManifestHistory.length,\n    linkedContainerKeyEpochCount:\n      projection.documentKekTargets.linkedContainerKeyEpochIds.length,\n    linkedContainerManifestCount:\n      projection.documentKekTargets.linkedContainerManifestHashes.length,\n    linkSetManifestHash: projection.documentKekTargets.linkSetManifestHash,\n    manifestEpoch: readRecordNumber(manifest, \"epoch\"),\n    previousManifestHash: readRecordString(\n      manifestState,\n      \"previousManifestHash\",\n    ),\n    referencedPrincipalCount: readRecordArrayLength(\n      manifest,\n      \"referencedPrincipalHeads\",\n    ),\n  };\n}\n\nexport async function loadDocumentInfo(input: {\n  apiClient: DocumentInfoApi;\n  attributionRequestKey?: string | undefined;\n  execSql?: ExecSql | null;\n  localId: string;\n  reportSecurityIncident: SecurityIncidentReporter;\n  remoteInfoMode?: DocumentInfoRemoteMode | undefined;\n}): Promise<DocumentInfo> {\n  const { attachments, contentSnapshot, local } = await loadLocalDocumentInfo({\n    execSql: input.execSql ?? null,\n    localId: input.localId,\n  });\n\n  if (\n    !shouldLoadRemoteDocumentInfo({\n      local,\n      remoteInfoMode: input.remoteInfoMode ?? \"if-synced\",\n    }) ||\n    !local.documentId\n  ) {\n    return { attachments, local, remoteInfo: null };\n  }\n\n  const attributionPromise = input.apiClient\n    .getDocumentEditAttribution(local.documentId, input.attributionRequestKey)\n    .catch(async (error: unknown) => {\n      await reportAndRethrowKeyingVerificationError(\n        error,\n        input.reportSecurityIncident,\n        {\n          objectId: local.documentId ?? input.localId,\n          objectKind: \"document\",\n          operation: \"document.info.attribution\",\n        },\n      );\n      return null;\n    });\n  const [projection, attachmentBindings, attribution] = await Promise.all([\n    input.apiClient.getDocumentWriterProjection(local.documentId),\n    input.apiClient.listDocumentAttachments(local.documentId),\n    // Attribution is supplementary: a rejection (network/server) must not block\n    // the rest of the document-info load, so swallow it to null (no contributors).\n    attributionPromise,\n  ]);\n\n  if (!projection) {\n    throw new Error(\n      `Document info projection was unavailable for local document ${input.localId} with remote document ${local.documentId}.`,\n    );\n  }\n\n  const attributionComplete = attribution && !attribution.truncated;\n  const attributionSegments = attribution?.segments ?? [];\n  const blame = attributionComplete\n    ? computeDocumentBlame(contentSnapshot, attributionSegments)\n    : null;\n  return {\n    attachments,\n    local,\n    remoteInfo: getDocumentInfoRemoteDetails({\n      attachmentBindings: attachmentBindings ?? [],\n      attribution,\n      blameRanges: blame?.blameRanges ?? null,\n      characterBlame: blame?.characterBlame ?? null,\n      contributors: attributionComplete\n        ? summarizeDocumentContributors(attributionSegments)\n        : [],\n      fieldBlame: attributionComplete\n        ? computeFieldBlame(contentSnapshot, attributionSegments)\n        : null,\n      projection,\n    }),\n  };\n}\n"]}

package/workflows/container-contents/documentLinks.d.ts

@@ -1,4 +1,4 @@
-import type { ProjectionUserKeyResolver } from "../../data/keyingProjectionVerification.js";
+import type { ProjectionUserKeyResolver } from "../../data/keyingProjectionVerification/index.js";
 import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
 import { type DocumentLinkSetFailureHandler, type RelinkRemoteDocumentResult, relinkRemoteDocument } from "../documents/index.js";
 import type { SubtreePurgeRoot } from "../documents/subtreePurgeScope.js";

package/workflows/container-contents/documentLinks.js

@@ -1,8 +1,8 @@
 import { assertDocumentWriterProjectionConsistent, readLinkedContainerIdsFromDocumentManifest, } from "../../data/documents/shared/projection.js";
 import { persistedDocumentCreateStateFromWriterProjection } from "../../data/documents/shared/responses.js";
-import { errorMessage } from "../../data/errorMessage.js";
 import { reportAndRethrowKeyingVerificationError } from "../../data/keyingProjectionVerification/error.js";
 import { sqlDocumentContainerProjectionPersistence } from "../../data/persistence/containers/documentContainerProjectionPersistence.js";
+import { errorMessage } from "../../data/shared/errorMessage.js";
 import { isDatabaseUnavailableError } from "../../data/sync/databaseUnavailable.js";
 import { relinkRemoteDocument, resolveDocumentCreateAuthor, } from "../documents/index.js";
 import { createRuntimePrincipalPolicyWarmer } from "../principals/runtimePolicyWarmer.js";

package/workflows/container-contents/documentLinks.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentLinks.js","sourceRoot":"","sources":["documentLinks.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,wCAAwC,EACxC,0CAA0C,GAC3C,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,gDAAgD,EAAE,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,yCAAyC,EAAE,MAAM,0EAA0E,CAAC;AAErI,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAGL,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC;AACvF,OAAO,EAAE,qCAAqC,EAAE,MAAM,yBAAyB,CAAC;AAYhF,0EAA0E;AAC1E,2EAA2E;AAC3E,6CAA6C;AAC7C,KAAK,UAAU,yBAAyB,CAAC,KAIxC;IAGC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,iCAAiC,CAC9D,KAAK,CAAC,UAAU,EAChB,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB,CAAC;IACF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAgCD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAgB;IAEhB,MAAM,yCAAyC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAgB,EAChB,UAAkB;IAElB,OAAO,yCAAyC,CAAC,sBAAsB,CACrE,OAAO,EACP,UAAU,CACX,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAgB,EAChB,UAAkB,EAClB,YAAmC;IAEnC,MAAM,yCAAyC,CAAC,oBAAoB,CAClE,OAAO,EACP,UAAU,EACV,YAAY,CACb,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,kBAAyC,EACzC,oBAA4B;IAE5B,IAAI,kBAAkB,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACtD,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,OAAO,kBAAkB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,2BAA2B,CAAC,KAIpC;IACC,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK;QAC5C,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,YAAY;QACpE,kBAAkB,EAAE,KAAK,CAAC,QAAQ,CAAC,kBAAkB;QACrD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mCAAmC,CAAC,KAQlD;IACC,MAAM,QAAQ,GAA2D,EAAE,CAAC;IAC5E,MAAM,wCAAwC,CAAC,KAAK,CAAC,gBAAgB,EAAE;QACrE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QACpC,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,YAAY,EAAE,KAAK,CAAC,SAAS;QAC7B,+BAA+B,EAAE,kCAAkC,CACjE,KAAK,CAAC,OAAO,CACd;QACD,uBAAuB,EAAE,CAAC,aAAa,EAAE,EAAE;YACzC,QAAQ,CAAC,IAAI,GAAG,aAAa,CAAC,sBAAsB,CAAC,GAAG,CACtD,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,YAAY,CACrD,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,IAAI;QAChB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK;QACtC,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;QAC3C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,WAAW,EAAE,gDAAgD,CAC3D,KAAK,CAAC,gBAAgB,CACvB;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,iCAAiC,CACxC,IAA0C,EAC1C,KAAc;IAEd,uEAAuE;IACvE,8EAA8E;IAC9E,+EAA+E;IAC/E,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,0BAA0B,CAAC,KAAK,CAAC;QAAE,OAAO;IAChE,IAAI,CAAC;QACH,2EAA2E;QAC3E,kCAAkC;QAClC,KAAK,OAAO,CAAC,OAAO,CAClB,IAAI,CAAC,QAAQ,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAC1E,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAYnD;IACC,MAAM,EACJ,UAAU,EACV,MAAM,EACN,SAAS,EACT,wBAAwB,EACxB,OAAO,EACP,iBAAiB,GAClB,GAAG,KAAK,CAAC;IACV,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,SAAS,CAAC;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IACtC,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4FAA4F,CAC7F,CAAC;QACF,KAAK,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,EAAE,sCAAsC;YAC/C,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC;YACxC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM;YACN,UAAU;YACV,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS;YACT,wBAAwB;YACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,YAAY,EAAE,KAAK,CAAC,SAAS;YAC7B,iBAAiB;YACjB,eAAe;YACf,+BAA+B,EAC7B,kCAAkC,CAAC,OAAO,CAAC;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,iCAAiC,SAAS,SAAS,MAAM,IAAI,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,cAAc,iBAAiB,EAAE,CACnI,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAE/C,MAAM,yCAAyC,CAAC,oBAAoB,CAClE,OAAO,EACP,UAAU,EACV,MAAM,CAAC,kBAAkB,EACzB,EAAE,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,CAClC,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,uCAAuC,CAC3C,KAAK,EACL,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,YAAY,SAAS,EAAE;SACnC,CACF,CAAC;QACF,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,iCAAiC,SAAS,SAAS,MAAM,IAAI,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,cAAc,iBAAiB,KAAK,OAAO,EAAE,CAC/I,CAAC;QACF,sEAAsE;QACtE,4EAA4E;QAC5E,oEAAoE;QACpE,iCAAiC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvD,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAQ1C;IACC,OAAO,6BAA6B,CAAC;QACnC,GAAG,KAAK;QACR,SAAS,EAAE,MAAM;KAClB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAWnD;IACC,OAAO,6BAA6B,CAAC;QACnC,GAAG,KAAK;QACR,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAcjD;IACC,MAAM,EACJ,UAAU,EACV,MAAM,EACN,wBAAwB,EACxB,OAAO,EACP,iBAAiB,GAClB,GAAG,KAAK,CAAC;IACV,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,gBAAgB,GAAG,MAAM,yBAAyB,CAAC;QACvD,UAAU;QACV,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO;KACR,CAAC,CAAC;IACH,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,gBAAgB,CAAC,UAAU,KAAK,UAAU;QAC5C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,MAAM,yBAAyB,GAC7B,0CAA0C,CAAC,gBAAgB,CAAC,CAAC;IAE/D,IAAI,wBAAwB,GAAsB,yBAAyB,CAAC;IAC5E,IAAI,cAAc,GAAsC,IAAI,CAAC;IAC7D,KAAK,MAAM,UAAU,IAAI,IAAI,GAAG,CAAC;QAC/B,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC;KAC5C,CAAC,EAAE,CAAC;QACH,IAAI,wBAAwB,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,SAAS;QAC5D,MAAM,cAAc,GAAG,MAAM,2BAA2B,CAAC;YACvD,UAAU;YACV,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,wBAAwB;YACxB,OAAO;YACP,iBAAiB,EAAE,UAAU;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,cAAc,GAAG,cAAc,CAAC;QAChC,wBAAwB,GAAG,cAAc,CAAC,kBAAkB,CAAC;IAC/D,CAAC;IAED,MAAM,kBAAkB,GAAG,qCAAqC,CAAC;QAC/D,GAAG,KAAK;QACR,kBAAkB,EAAE,wBAAwB;KAC7C,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC;QAChD,GAAG,KAAK;QACR,cAAc;QACd,wBAAwB;QACxB,kBAAkB;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAC;IACzC,wBAAwB,GAAG,QAAQ,CAAC,wBAAwB,CAAC;IAE7D,MAAM,eAAe,GAAG,gCAAgC,CACtD,wBAAwB,EACxB,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GACV,QAAQ,CAAC,wBAAwB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IACxE,OAAO,cAAc;QACnB,CAAC,CAAC,2BAA2B,CAAC;YAC1B,QAAQ,EAAE,cAAc;YACxB,eAAe;YACf,MAAM;SACP,CAAC;QACJ,CAAC,CAAC,mCAAmC,CAAC;YAClC,gBAAgB;YAChB,wBAAwB;YACxB,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,kBAAkB,EAAE,wBAAwB;YAC5C,eAAe;YACf,MAAM;SACP,CAAC,CAAC;AACT,CAAC;AAED,4EAA4E;AAC5E,0EAA0E;AAC1E,oDAAoD;AACpD,KAAK,UAAU,0BAA0B,CAAC,KAYzC;IAKC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;IACrD,IAAI,EAAE,cAAc,EAAE,wBAAwB,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,wBAAwB,GAAa,EAAE,CAAC;IAC9C,KAAK,MAAM,iBAAiB,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACzD,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,gBAAgB,GAAG,MAAM,6BAA6B,CAAC;YAC3D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,OAAO;YACP,iBAAiB,EAAE,iBAAiB;SACrC,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,wBAAwB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4BAA4B,MAAM,kBAAkB,iBAAiB,8BAA8B,iBAAiB,EAAE,CACvH,CAAC;YACF,SAAS;QACX,CAAC;QAED,cAAc,GAAG,gBAAgB,CAAC;QAClC,wBAAwB,GAAG,gBAAgB,CAAC,kBAAkB,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,wBAAwB,EAAE,CAAC;AAChF,CAAC","sourcesContent":["import type { VerifiedDocumentLinkSetManifest } from \"@tearleads/crypto\";\nimport type { DocumentWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport {\n  assertDocumentWriterProjectionConsistent,\n  readLinkedContainerIdsFromDocumentManifest,\n} from \"../../data/documents/shared/projection\";\nimport { persistedDocumentCreateStateFromWriterProjection } from \"../../data/documents/shared/responses\";\nimport { errorMessage } from \"../../data/errorMessage\";\nimport type { ProjectionUserKeyResolver } from \"../../data/keyingProjectionVerification\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../data/keyingProjectionVerification/error\";\nimport { sqlDocumentContainerProjectionPersistence } from \"../../data/persistence/containers/documentContainerProjectionPersistence\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport { isDatabaseUnavailableError } from \"../../data/sync/databaseUnavailable\";\nimport {\n  type DocumentLinkSetFailureHandler,\n  type RelinkRemoteDocumentResult,\n  relinkRemoteDocument,\n  resolveDocumentCreateAuthor,\n} from \"../documents\";\nimport type { SubtreePurgeRoot } from \"../documents/subtreePurgeScope\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../principals/runtimePolicyWarmer\";\nimport { resolveContainerDocumentMoveUnlinkIds } from \"./documentMoveUnlinkIds\";\nimport type { ContainerContentsWorkflowRuntime } from \"./runtime\";\n\ntype ContainerDocumentLinkApi = Parameters<\n  typeof relinkRemoteDocument\n>[0][\"apiClient\"];\ntype ContainerDocumentLinkOperation = Parameters<\n  typeof relinkRemoteDocument\n>[0][\"operation\"];\ntype RemoteDocumentPersistedState =\n  RelinkRemoteDocumentResult[\"persistedState\"];\n\n// A cold-cache denial must keep its HTTP status: collapsing a 403 to null\n// would leave an access-denied move routinely retriable instead of parking\n// it for the access-restored signal (row 7).\nasync function fetchMoveWriterProjection(input: {\n  documentId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  runtime: ContainerDocumentLinkRuntime;\n}): Promise<Awaited<\n  ReturnType<ContainerDocumentLinkApi[\"getDocumentWriterProjection\"]>\n> | null> {\n  const { apiClient } = input.runtime;\n  const result = await apiClient.getDocumentWriterProjectionResult(\n    input.documentId,\n    { reportErrors: false },\n  );\n  if (result.ok) {\n    return result.data;\n  }\n  result.report();\n  input.onFailure?.({ message: result.message, status: result.status });\n  return null;\n}\n\ninterface ContainerDocumentLinkRuntime\n  extends Pick<\n    ContainerContentsWorkflowRuntime,\n    | \"auth\"\n    | \"crypto\"\n    | \"infra\"\n    | \"resolveTrustedUserIdentity\"\n    | \"state\"\n    | \"util\"\n  > {\n  apiClient: ContainerDocumentLinkApi &\n    Pick<\n      ContainerContentsWorkflowRuntime[\"apiClient\"],\n      \"getPrincipalPolicyPages\" | \"getProjectionPolicyHistoryPages\"\n    >;\n}\n\ntype MoveRemoteContainerDocumentStatus = \"complete\" | \"partial\";\n\ninterface MoveRemoteContainerDocumentResult {\n  accessEpoch: number | null;\n  accessStateHash: string | null;\n  linkedContainerIds: readonly string[];\n  nextContainerId: string;\n  remoteState: RemoteDocumentPersistedState | null;\n  status: MoveRemoteContainerDocumentStatus;\n}\n\nexport type { RemoteDocumentPersistedState };\n\nexport async function initializeDocumentLinksSchema(\n  execSql: ExecSql,\n): Promise<void> {\n  await sqlDocumentContainerProjectionPersistence.ensureSchema(execSql);\n}\n\nexport async function listDocumentLinkedContainerIds(\n  execSql: ExecSql,\n  documentId: string,\n): Promise<ReadonlyArray<string>> {\n  return sqlDocumentContainerProjectionPersistence.listLinkedContainerIds(\n    execSql,\n    documentId,\n  );\n}\n\nexport async function replaceDocumentLinks(\n  execSql: ExecSql,\n  documentId: string,\n  containerIds: ReadonlyArray<string>,\n): Promise<void> {\n  await sqlDocumentContainerProjectionPersistence.replaceDocumentLinks(\n    execSql,\n    documentId,\n    containerIds,\n  );\n}\n\nfunction resolveActiveDocumentContainerId(\n  linkedContainerIds: ReadonlyArray<string>,\n  preferredContainerId: string,\n): string | null {\n  if (linkedContainerIds.includes(preferredContainerId)) {\n    return preferredContainerId;\n  }\n\n  return linkedContainerIds[0] ?? null;\n}\n\nfunction containerDocumentMoveResult(input: {\n  document: RelinkRemoteDocumentResult;\n  nextContainerId: string;\n  status: MoveRemoteContainerDocumentStatus;\n}): MoveRemoteContainerDocumentResult {\n  return {\n    accessEpoch: input.document.plan.state.epoch,\n    accessStateHash: input.document.response.accessManifest.manifestHash,\n    linkedContainerIds: input.document.linkedContainerIds,\n    nextContainerId: input.nextContainerId,\n    remoteState: input.document.persistedState,\n    status: input.status,\n  };\n}\n\nasync function containerDocumentAlreadyMovedResult(input: {\n  writerProjection: DocumentWriterProjectionResponse;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  runtime: ContainerDocumentLinkRuntime;\n  isCurrent?: (() => boolean) | undefined;\n  linkedContainerIds: readonly string[];\n  nextContainerId: string;\n  status: MoveRemoteContainerDocumentStatus;\n}): Promise<MoveRemoteContainerDocumentResult> {\n  const verified: { head?: VerifiedDocumentLinkSetManifest | undefined } = {};\n  await assertDocumentWriterProjectionConsistent(input.writerProjection, {\n    execSql: input.runtime.infra.execSql,\n    resolveProjectionUserKey: input.resolveProjectionUserKey,\n    stillCurrent: input.isCurrent,\n    warmReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(\n      input.runtime,\n    ),\n    onVerifiedAuthorization: (authorization) => {\n      verified.head = authorization.documentManifestByHash.get(\n        input.writerProjection.documentManifest.manifestHash,\n      );\n    },\n  });\n  if (!verified.head)\n    throw new Error(\"Move replay lacks a verified document head\");\n  return {\n    accessEpoch: verified.head.state.epoch,\n    accessStateHash: verified.head.manifestHash,\n    linkedContainerIds: input.linkedContainerIds,\n    nextContainerId: input.nextContainerId,\n    remoteState: persistedDocumentCreateStateFromWriterProjection(\n      input.writerProjection,\n    ),\n    status: input.status,\n  };\n}\n\n/**\n * Hand a link/unlink/move/purge failure to host diagnostics as a real `Error`.\n * The caller's string-only log line stays the fallback for a host without\n * `logError`, so this never logs a second copy of the same failure.\n */\nfunction reportDocumentLinkMutationFailure(\n  util: ContainerDocumentLinkRuntime[\"util\"],\n  error: unknown,\n): void {\n  // `ApiClient` returns `RequestFailure` objects instead of throwing, so\n  // offline and 403/404/409 already left through the `!result` branch: a status\n  // filter here would be dead code. Only a database lost mid-flight stays quiet.\n  if (!util.logError || isDatabaseUnavailableError(error)) return;\n  try {\n    // A host logger that throws or rejects must not replace the null result or\n    // skip the failure handler below.\n    void Promise.resolve(\n      util.logError(\"Container contents: document link mutation failed\", error),\n    ).catch(() => undefined);\n  } catch {\n    // Hosts may throw synchronously or return a rejected promise.\n  }\n}\n\nexport async function relinkRemoteContainerDocument(input: {\n  beforeSubmit?: (() => Promise<boolean>) | undefined;\n  documentId: string;\n  expectedSubtreeRoot?: SubtreePurgeRoot | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  noteId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  operation: ContainerDocumentLinkOperation;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  rotationSnapshot?: Uint8Array | undefined;\n  runtime: ContainerDocumentLinkRuntime;\n  targetContainerId: string;\n}): Promise<RelinkRemoteDocumentResult | null> {\n  const {\n    documentId,\n    noteId,\n    operation,\n    resolveProjectionUserKey,\n    runtime,\n    targetContainerId,\n  } = input;\n  const author = resolveDocumentCreateAuthor(runtime);\n  const targetSecretKey = runtime.crypto.encapsulationKeyPair?.secretKey;\n  const execSql = runtime.infra.execSql;\n  if (input.isCurrent?.() === false) return null;\n  if (!author || !targetSecretKey) {\n    runtime.util.log(\n      \"Container contents: document mutation skipped because the local key context is unavailable\",\n    );\n    input.onFailure?.({\n      message: \"the local key context is unavailable\",\n      status: null,\n    });\n    return null;\n  }\n\n  try {\n    const result = await relinkRemoteDocument({\n      beforeSubmit: input.beforeSubmit,\n      apiClient: runtime.apiClient,\n      author,\n      documentId,\n      expectedSubtreeRoot: input.expectedSubtreeRoot,\n      execSql,\n      onFailure: input.onFailure,\n      operation,\n      resolveProjectionUserKey,\n      rotationSnapshot: input.rotationSnapshot,\n      stillCurrent: input.isCurrent,\n      targetContainerId,\n      targetSecretKey,\n      warmReferencedPrincipalPolicies:\n        createRuntimePrincipalPolicyWarmer(runtime),\n    });\n    if (!result) {\n      runtime.util.log(\n        `Container contents: failed to ${operation} note ${noteId} ${operation === \"link\" ? \"to\" : \"from\"} container ${targetContainerId}`,\n      );\n      return null;\n    }\n    if (input.isCurrent?.() === false) return null;\n\n    await sqlDocumentContainerProjectionPersistence.replaceDocumentLinks(\n      execSql,\n      documentId,\n      result.linkedContainerIds,\n      { stillCurrent: input.isCurrent },\n    );\n\n    return result;\n  } catch (error) {\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: documentId,\n        objectKind: \"document\",\n        operation: `document.${operation}`,\n      },\n    );\n    const message = errorMessage(error);\n    runtime.util.log(\n      `Container contents: failed to ${operation} note ${noteId} ${operation === \"link\" ? \"to\" : \"from\"} container ${targetContainerId}: ${message}`,\n    );\n    // After the keying rethrow above, so a verification failure keeps its\n    // security incident instead of being reported twice, and before the failure\n    // handler, so a throwing caller callback cannot swallow the report.\n    reportDocumentLinkMutationFailure(runtime.util, error);\n    input.onFailure?.({ message, status: null });\n    return null;\n  }\n}\n\nasync function linkRemoteContainerDocument(input: {\n  documentId: string;\n  isCurrent?: (() => boolean) | undefined;\n  noteId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  runtime: ContainerDocumentLinkRuntime;\n  targetContainerId: string;\n}): Promise<RelinkRemoteDocumentResult | null> {\n  return relinkRemoteContainerDocument({\n    ...input,\n    operation: \"link\",\n  });\n}\n\nexport async function unlinkRemoteContainerDocument(input: {\n  beforeSubmit?: (() => Promise<boolean>) | undefined;\n  documentId: string;\n  expectedSubtreeRoot?: SubtreePurgeRoot | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  noteId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  rotationSnapshot: Uint8Array;\n  runtime: ContainerDocumentLinkRuntime;\n  targetContainerId: string;\n}): Promise<RelinkRemoteDocumentResult | null> {\n  return relinkRemoteContainerDocument({\n    ...input,\n    operation: \"unlink\",\n  });\n}\n\nexport async function moveRemoteContainerDocument(input: {\n  linkOnly?: boolean | undefined;\n  additionalLinkContainerIds?: readonly string[] | undefined;\n  removedLinkContainerIds?: readonly string[] | undefined;\n  currentContainerId: string;\n  documentId: string;\n  isCurrent?: (() => boolean) | undefined;\n  noteId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  replaceLinkedContainers?: boolean | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  rotationSnapshot: Uint8Array;\n  runtime: ContainerDocumentLinkRuntime;\n  targetContainerId: string;\n}): Promise<MoveRemoteContainerDocumentResult | null> {\n  const {\n    documentId,\n    noteId,\n    resolveProjectionUserKey,\n    runtime,\n    targetContainerId,\n  } = input;\n  if (input.isCurrent?.() === false) return null;\n  const writerProjection = await fetchMoveWriterProjection({\n    documentId,\n    onFailure: input.onFailure,\n    runtime,\n  });\n  if (!writerProjection || input.isCurrent?.() === false) {\n    return null;\n  }\n  if (writerProjection.documentId !== documentId)\n    throw new Error(\"Move replay document id mismatch\");\n  const initialLinkedContainerIds =\n    readLinkedContainerIdsFromDocumentManifest(writerProjection);\n\n  let latestLinkedContainerIds: readonly string[] = initialLinkedContainerIds;\n  let latestDocument: RelinkRemoteDocumentResult | null = null;\n  for (const linkTarget of new Set([\n    ...(input.linkOnly ? [] : [targetContainerId]),\n    ...(input.additionalLinkContainerIds ?? []),\n  ])) {\n    if (latestLinkedContainerIds.includes(linkTarget)) continue;\n    const linkedDocument = await linkRemoteContainerDocument({\n      documentId,\n      isCurrent: input.isCurrent,\n      noteId,\n      onFailure: input.onFailure,\n      resolveProjectionUserKey,\n      runtime,\n      targetContainerId: linkTarget,\n    });\n    if (!linkedDocument || input.isCurrent?.() === false) {\n      return null;\n    }\n\n    latestDocument = linkedDocument;\n    latestLinkedContainerIds = linkedDocument.linkedContainerIds;\n  }\n\n  const unlinkContainerIds = resolveContainerDocumentMoveUnlinkIds({\n    ...input,\n    linkedContainerIds: latestLinkedContainerIds,\n  });\n\n  const unlinked = await unlinkMovedDocumentSources({\n    ...input,\n    latestDocument,\n    latestLinkedContainerIds,\n    unlinkContainerIds,\n  });\n  if (!unlinked) return null;\n  latestDocument = unlinked.latestDocument;\n  latestLinkedContainerIds = unlinked.latestLinkedContainerIds;\n\n  const nextContainerId = resolveActiveDocumentContainerId(\n    latestLinkedContainerIds,\n    targetContainerId,\n  );\n  if (!nextContainerId) {\n    return null;\n  }\n\n  const status =\n    unlinked.failedUnlinkContainerIds.length > 0 ? \"partial\" : \"complete\";\n  return latestDocument\n    ? containerDocumentMoveResult({\n        document: latestDocument,\n        nextContainerId,\n        status,\n      })\n    : containerDocumentAlreadyMovedResult({\n        writerProjection,\n        resolveProjectionUserKey,\n        runtime,\n        isCurrent: input.isCurrent,\n        linkedContainerIds: latestLinkedContainerIds,\n        nextContainerId,\n        status,\n      });\n}\n\n// The unlink half of a move: every source is attempted even when an earlier\n// one fails, so one dead source cannot strand the others; a failed unlink\n// leaves the move \"partial\" for the queue to retry.\nasync function unlinkMovedDocumentSources(input: {\n  documentId: string;\n  isCurrent?: (() => boolean) | undefined;\n  latestDocument: RelinkRemoteDocumentResult | null;\n  latestLinkedContainerIds: readonly string[];\n  noteId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  rotationSnapshot: Uint8Array;\n  runtime: ContainerDocumentLinkRuntime;\n  targetContainerId: string;\n  unlinkContainerIds: readonly string[];\n}): Promise<{\n  failedUnlinkContainerIds: readonly string[];\n  latestDocument: RelinkRemoteDocumentResult | null;\n  latestLinkedContainerIds: readonly string[];\n} | null> {\n  const { noteId, runtime, targetContainerId } = input;\n  let { latestDocument, latestLinkedContainerIds } = input;\n  const failedUnlinkContainerIds: string[] = [];\n  for (const unlinkContainerId of input.unlinkContainerIds) {\n    if (input.isCurrent?.() === false) return null;\n    const unlinkedDocument = await unlinkRemoteContainerDocument({\n      documentId: input.documentId,\n      isCurrent: input.isCurrent,\n      noteId,\n      onFailure: input.onFailure,\n      resolveProjectionUserKey: input.resolveProjectionUserKey,\n      rotationSnapshot: input.rotationSnapshot,\n      runtime,\n      targetContainerId: unlinkContainerId,\n    });\n    if (input.isCurrent?.() === false) return null;\n    if (!unlinkedDocument) {\n      failedUnlinkContainerIds.push(unlinkContainerId);\n      runtime.util.log(\n        `Container contents: note ${noteId} was linked to ${targetContainerId} but failed to unlink from ${unlinkContainerId}`,\n      );\n      continue;\n    }\n\n    latestDocument = unlinkedDocument;\n    latestLinkedContainerIds = unlinkedDocument.linkedContainerIds;\n  }\n  return { failedUnlinkContainerIds, latestDocument, latestLinkedContainerIds };\n}\n"]}
+{"version":3,"file":"documentLinks.js","sourceRoot":"","sources":["documentLinks.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,wCAAwC,EACxC,0CAA0C,GAC3C,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,gDAAgD,EAAE,MAAM,uCAAuC,CAAC;AAEzG,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,yCAAyC,EAAE,MAAM,0EAA0E,CAAC;AACrI,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAE9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAGL,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC;AACvF,OAAO,EAAE,qCAAqC,EAAE,MAAM,yBAAyB,CAAC;AAYhF,0EAA0E;AAC1E,2EAA2E;AAC3E,6CAA6C;AAC7C,KAAK,UAAU,yBAAyB,CAAC,KAIxC;IAGC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,iCAAiC,CAC9D,KAAK,CAAC,UAAU,EAChB,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB,CAAC;IACF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAgCD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAgB;IAEhB,MAAM,yCAAyC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAgB,EAChB,UAAkB;IAElB,OAAO,yCAAyC,CAAC,sBAAsB,CACrE,OAAO,EACP,UAAU,CACX,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAgB,EAChB,UAAkB,EAClB,YAAmC;IAEnC,MAAM,yCAAyC,CAAC,oBAAoB,CAClE,OAAO,EACP,UAAU,EACV,YAAY,CACb,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,kBAAyC,EACzC,oBAA4B;IAE5B,IAAI,kBAAkB,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACtD,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,OAAO,kBAAkB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,2BAA2B,CAAC,KAIpC;IACC,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK;QAC5C,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,YAAY;QACpE,kBAAkB,EAAE,KAAK,CAAC,QAAQ,CAAC,kBAAkB;QACrD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mCAAmC,CAAC,KAQlD;IACC,MAAM,QAAQ,GAA2D,EAAE,CAAC;IAC5E,MAAM,wCAAwC,CAAC,KAAK,CAAC,gBAAgB,EAAE;QACrE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QACpC,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,YAAY,EAAE,KAAK,CAAC,SAAS;QAC7B,+BAA+B,EAAE,kCAAkC,CACjE,KAAK,CAAC,OAAO,CACd;QACD,uBAAuB,EAAE,CAAC,aAAa,EAAE,EAAE;YACzC,QAAQ,CAAC,IAAI,GAAG,aAAa,CAAC,sBAAsB,CAAC,GAAG,CACtD,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,YAAY,CACrD,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,IAAI;QAChB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK;QACtC,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;QAC3C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,WAAW,EAAE,gDAAgD,CAC3D,KAAK,CAAC,gBAAgB,CACvB;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,iCAAiC,CACxC,IAA0C,EAC1C,KAAc;IAEd,uEAAuE;IACvE,8EAA8E;IAC9E,+EAA+E;IAC/E,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,0BAA0B,CAAC,KAAK,CAAC;QAAE,OAAO;IAChE,IAAI,CAAC;QACH,2EAA2E;QAC3E,kCAAkC;QAClC,KAAK,OAAO,CAAC,OAAO,CAClB,IAAI,CAAC,QAAQ,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAC1E,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAYnD;IACC,MAAM,EACJ,UAAU,EACV,MAAM,EACN,SAAS,EACT,wBAAwB,EACxB,OAAO,EACP,iBAAiB,GAClB,GAAG,KAAK,CAAC;IACV,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,SAAS,CAAC;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IACtC,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4FAA4F,CAC7F,CAAC;QACF,KAAK,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,EAAE,sCAAsC;YAC/C,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC;YACxC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM;YACN,UAAU;YACV,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS;YACT,wBAAwB;YACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,YAAY,EAAE,KAAK,CAAC,SAAS;YAC7B,iBAAiB;YACjB,eAAe;YACf,+BAA+B,EAC7B,kCAAkC,CAAC,OAAO,CAAC;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,iCAAiC,SAAS,SAAS,MAAM,IAAI,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,cAAc,iBAAiB,EAAE,CACnI,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAE/C,MAAM,yCAAyC,CAAC,oBAAoB,CAClE,OAAO,EACP,UAAU,EACV,MAAM,CAAC,kBAAkB,EACzB,EAAE,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,CAClC,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,uCAAuC,CAC3C,KAAK,EACL,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,YAAY,SAAS,EAAE;SACnC,CACF,CAAC;QACF,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,iCAAiC,SAAS,SAAS,MAAM,IAAI,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,cAAc,iBAAiB,KAAK,OAAO,EAAE,CAC/I,CAAC;QACF,sEAAsE;QACtE,4EAA4E;QAC5E,oEAAoE;QACpE,iCAAiC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvD,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAQ1C;IACC,OAAO,6BAA6B,CAAC;QACnC,GAAG,KAAK;QACR,SAAS,EAAE,MAAM;KAClB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAWnD;IACC,OAAO,6BAA6B,CAAC;QACnC,GAAG,KAAK;QACR,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAcjD;IACC,MAAM,EACJ,UAAU,EACV,MAAM,EACN,wBAAwB,EACxB,OAAO,EACP,iBAAiB,GAClB,GAAG,KAAK,CAAC;IACV,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,gBAAgB,GAAG,MAAM,yBAAyB,CAAC;QACvD,UAAU;QACV,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO;KACR,CAAC,CAAC;IACH,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,gBAAgB,CAAC,UAAU,KAAK,UAAU;QAC5C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,MAAM,yBAAyB,GAC7B,0CAA0C,CAAC,gBAAgB,CAAC,CAAC;IAE/D,IAAI,wBAAwB,GAAsB,yBAAyB,CAAC;IAC5E,IAAI,cAAc,GAAsC,IAAI,CAAC;IAC7D,KAAK,MAAM,UAAU,IAAI,IAAI,GAAG,CAAC;QAC/B,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC;KAC5C,CAAC,EAAE,CAAC;QACH,IAAI,wBAAwB,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,SAAS;QAC5D,MAAM,cAAc,GAAG,MAAM,2BAA2B,CAAC;YACvD,UAAU;YACV,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,wBAAwB;YACxB,OAAO;YACP,iBAAiB,EAAE,UAAU;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,cAAc,GAAG,cAAc,CAAC;QAChC,wBAAwB,GAAG,cAAc,CAAC,kBAAkB,CAAC;IAC/D,CAAC;IAED,MAAM,kBAAkB,GAAG,qCAAqC,CAAC;QAC/D,GAAG,KAAK;QACR,kBAAkB,EAAE,wBAAwB;KAC7C,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC;QAChD,GAAG,KAAK;QACR,cAAc;QACd,wBAAwB;QACxB,kBAAkB;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAC;IACzC,wBAAwB,GAAG,QAAQ,CAAC,wBAAwB,CAAC;IAE7D,MAAM,eAAe,GAAG,gCAAgC,CACtD,wBAAwB,EACxB,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GACV,QAAQ,CAAC,wBAAwB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IACxE,OAAO,cAAc;QACnB,CAAC,CAAC,2BAA2B,CAAC;YAC1B,QAAQ,EAAE,cAAc;YACxB,eAAe;YACf,MAAM;SACP,CAAC;QACJ,CAAC,CAAC,mCAAmC,CAAC;YAClC,gBAAgB;YAChB,wBAAwB;YACxB,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,kBAAkB,EAAE,wBAAwB;YAC5C,eAAe;YACf,MAAM;SACP,CAAC,CAAC;AACT,CAAC;AAED,4EAA4E;AAC5E,0EAA0E;AAC1E,oDAAoD;AACpD,KAAK,UAAU,0BAA0B,CAAC,KAYzC;IAKC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;IACrD,IAAI,EAAE,cAAc,EAAE,wBAAwB,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,wBAAwB,GAAa,EAAE,CAAC;IAC9C,KAAK,MAAM,iBAAiB,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACzD,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,gBAAgB,GAAG,MAAM,6BAA6B,CAAC;YAC3D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,OAAO;YACP,iBAAiB,EAAE,iBAAiB;SACrC,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,wBAAwB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4BAA4B,MAAM,kBAAkB,iBAAiB,8BAA8B,iBAAiB,EAAE,CACvH,CAAC;YACF,SAAS;QACX,CAAC;QAED,cAAc,GAAG,gBAAgB,CAAC;QAClC,wBAAwB,GAAG,gBAAgB,CAAC,kBAAkB,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,wBAAwB,EAAE,CAAC;AAChF,CAAC","sourcesContent":["import type { VerifiedDocumentLinkSetManifest } from \"@tearleads/crypto\";\nimport type { DocumentWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport {\n  assertDocumentWriterProjectionConsistent,\n  readLinkedContainerIdsFromDocumentManifest,\n} from \"../../data/documents/shared/projection\";\nimport { persistedDocumentCreateStateFromWriterProjection } from \"../../data/documents/shared/responses\";\nimport type { ProjectionUserKeyResolver } from \"../../data/keyingProjectionVerification\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../data/keyingProjectionVerification/error\";\nimport { sqlDocumentContainerProjectionPersistence } from \"../../data/persistence/containers/documentContainerProjectionPersistence\";\nimport { errorMessage } from \"../../data/shared/errorMessage\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport { isDatabaseUnavailableError } from \"../../data/sync/databaseUnavailable\";\nimport {\n  type DocumentLinkSetFailureHandler,\n  type RelinkRemoteDocumentResult,\n  relinkRemoteDocument,\n  resolveDocumentCreateAuthor,\n} from \"../documents\";\nimport type { SubtreePurgeRoot } from \"../documents/subtreePurgeScope\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../principals/runtimePolicyWarmer\";\nimport { resolveContainerDocumentMoveUnlinkIds } from \"./documentMoveUnlinkIds\";\nimport type { ContainerContentsWorkflowRuntime } from \"./runtime\";\n\ntype ContainerDocumentLinkApi = Parameters<\n  typeof relinkRemoteDocument\n>[0][\"apiClient\"];\ntype ContainerDocumentLinkOperation = Parameters<\n  typeof relinkRemoteDocument\n>[0][\"operation\"];\ntype RemoteDocumentPersistedState =\n  RelinkRemoteDocumentResult[\"persistedState\"];\n\n// A cold-cache denial must keep its HTTP status: collapsing a 403 to null\n// would leave an access-denied move routinely retriable instead of parking\n// it for the access-restored signal (row 7).\nasync function fetchMoveWriterProjection(input: {\n  documentId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  runtime: ContainerDocumentLinkRuntime;\n}): Promise<Awaited<\n  ReturnType<ContainerDocumentLinkApi[\"getDocumentWriterProjection\"]>\n> | null> {\n  const { apiClient } = input.runtime;\n  const result = await apiClient.getDocumentWriterProjectionResult(\n    input.documentId,\n    { reportErrors: false },\n  );\n  if (result.ok) {\n    return result.data;\n  }\n  result.report();\n  input.onFailure?.({ message: result.message, status: result.status });\n  return null;\n}\n\ninterface ContainerDocumentLinkRuntime\n  extends Pick<\n    ContainerContentsWorkflowRuntime,\n    | \"auth\"\n    | \"crypto\"\n    | \"infra\"\n    | \"resolveTrustedUserIdentity\"\n    | \"state\"\n    | \"util\"\n  > {\n  apiClient: ContainerDocumentLinkApi &\n    Pick<\n      ContainerContentsWorkflowRuntime[\"apiClient\"],\n      \"getPrincipalPolicyPages\" | \"getProjectionPolicyHistoryPages\"\n    >;\n}\n\ntype MoveRemoteContainerDocumentStatus = \"complete\" | \"partial\";\n\ninterface MoveRemoteContainerDocumentResult {\n  accessEpoch: number | null;\n  accessStateHash: string | null;\n  linkedContainerIds: readonly string[];\n  nextContainerId: string;\n  remoteState: RemoteDocumentPersistedState | null;\n  status: MoveRemoteContainerDocumentStatus;\n}\n\nexport type { RemoteDocumentPersistedState };\n\nexport async function initializeDocumentLinksSchema(\n  execSql: ExecSql,\n): Promise<void> {\n  await sqlDocumentContainerProjectionPersistence.ensureSchema(execSql);\n}\n\nexport async function listDocumentLinkedContainerIds(\n  execSql: ExecSql,\n  documentId: string,\n): Promise<ReadonlyArray<string>> {\n  return sqlDocumentContainerProjectionPersistence.listLinkedContainerIds(\n    execSql,\n    documentId,\n  );\n}\n\nexport async function replaceDocumentLinks(\n  execSql: ExecSql,\n  documentId: string,\n  containerIds: ReadonlyArray<string>,\n): Promise<void> {\n  await sqlDocumentContainerProjectionPersistence.replaceDocumentLinks(\n    execSql,\n    documentId,\n    containerIds,\n  );\n}\n\nfunction resolveActiveDocumentContainerId(\n  linkedContainerIds: ReadonlyArray<string>,\n  preferredContainerId: string,\n): string | null {\n  if (linkedContainerIds.includes(preferredContainerId)) {\n    return preferredContainerId;\n  }\n\n  return linkedContainerIds[0] ?? null;\n}\n\nfunction containerDocumentMoveResult(input: {\n  document: RelinkRemoteDocumentResult;\n  nextContainerId: string;\n  status: MoveRemoteContainerDocumentStatus;\n}): MoveRemoteContainerDocumentResult {\n  return {\n    accessEpoch: input.document.plan.state.epoch,\n    accessStateHash: input.document.response.accessManifest.manifestHash,\n    linkedContainerIds: input.document.linkedContainerIds,\n    nextContainerId: input.nextContainerId,\n    remoteState: input.document.persistedState,\n    status: input.status,\n  };\n}\n\nasync function containerDocumentAlreadyMovedResult(input: {\n  writerProjection: DocumentWriterProjectionResponse;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  runtime: ContainerDocumentLinkRuntime;\n  isCurrent?: (() => boolean) | undefined;\n  linkedContainerIds: readonly string[];\n  nextContainerId: string;\n  status: MoveRemoteContainerDocumentStatus;\n}): Promise<MoveRemoteContainerDocumentResult> {\n  const verified: { head?: VerifiedDocumentLinkSetManifest | undefined } = {};\n  await assertDocumentWriterProjectionConsistent(input.writerProjection, {\n    execSql: input.runtime.infra.execSql,\n    resolveProjectionUserKey: input.resolveProjectionUserKey,\n    stillCurrent: input.isCurrent,\n    warmReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(\n      input.runtime,\n    ),\n    onVerifiedAuthorization: (authorization) => {\n      verified.head = authorization.documentManifestByHash.get(\n        input.writerProjection.documentManifest.manifestHash,\n      );\n    },\n  });\n  if (!verified.head)\n    throw new Error(\"Move replay lacks a verified document head\");\n  return {\n    accessEpoch: verified.head.state.epoch,\n    accessStateHash: verified.head.manifestHash,\n    linkedContainerIds: input.linkedContainerIds,\n    nextContainerId: input.nextContainerId,\n    remoteState: persistedDocumentCreateStateFromWriterProjection(\n      input.writerProjection,\n    ),\n    status: input.status,\n  };\n}\n\n/**\n * Hand a link/unlink/move/purge failure to host diagnostics as a real `Error`.\n * The caller's string-only log line stays the fallback for a host without\n * `logError`, so this never logs a second copy of the same failure.\n */\nfunction reportDocumentLinkMutationFailure(\n  util: ContainerDocumentLinkRuntime[\"util\"],\n  error: unknown,\n): void {\n  // `ApiClient` returns `RequestFailure` objects instead of throwing, so\n  // offline and 403/404/409 already left through the `!result` branch: a status\n  // filter here would be dead code. Only a database lost mid-flight stays quiet.\n  if (!util.logError || isDatabaseUnavailableError(error)) return;\n  try {\n    // A host logger that throws or rejects must not replace the null result or\n    // skip the failure handler below.\n    void Promise.resolve(\n      util.logError(\"Container contents: document link mutation failed\", error),\n    ).catch(() => undefined);\n  } catch {\n    // Hosts may throw synchronously or return a rejected promise.\n  }\n}\n\nexport async function relinkRemoteContainerDocument(input: {\n  beforeSubmit?: (() => Promise<boolean>) | undefined;\n  documentId: string;\n  expectedSubtreeRoot?: SubtreePurgeRoot | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  noteId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  operation: ContainerDocumentLinkOperation;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  rotationSnapshot?: Uint8Array | undefined;\n  runtime: ContainerDocumentLinkRuntime;\n  targetContainerId: string;\n}): Promise<RelinkRemoteDocumentResult | null> {\n  const {\n    documentId,\n    noteId,\n    operation,\n    resolveProjectionUserKey,\n    runtime,\n    targetContainerId,\n  } = input;\n  const author = resolveDocumentCreateAuthor(runtime);\n  const targetSecretKey = runtime.crypto.encapsulationKeyPair?.secretKey;\n  const execSql = runtime.infra.execSql;\n  if (input.isCurrent?.() === false) return null;\n  if (!author || !targetSecretKey) {\n    runtime.util.log(\n      \"Container contents: document mutation skipped because the local key context is unavailable\",\n    );\n    input.onFailure?.({\n      message: \"the local key context is unavailable\",\n      status: null,\n    });\n    return null;\n  }\n\n  try {\n    const result = await relinkRemoteDocument({\n      beforeSubmit: input.beforeSubmit,\n      apiClient: runtime.apiClient,\n      author,\n      documentId,\n      expectedSubtreeRoot: input.expectedSubtreeRoot,\n      execSql,\n      onFailure: input.onFailure,\n      operation,\n      resolveProjectionUserKey,\n      rotationSnapshot: input.rotationSnapshot,\n      stillCurrent: input.isCurrent,\n      targetContainerId,\n      targetSecretKey,\n      warmReferencedPrincipalPolicies:\n        createRuntimePrincipalPolicyWarmer(runtime),\n    });\n    if (!result) {\n      runtime.util.log(\n        `Container contents: failed to ${operation} note ${noteId} ${operation === \"link\" ? \"to\" : \"from\"} container ${targetContainerId}`,\n      );\n      return null;\n    }\n    if (input.isCurrent?.() === false) return null;\n\n    await sqlDocumentContainerProjectionPersistence.replaceDocumentLinks(\n      execSql,\n      documentId,\n      result.linkedContainerIds,\n      { stillCurrent: input.isCurrent },\n    );\n\n    return result;\n  } catch (error) {\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: documentId,\n        objectKind: \"document\",\n        operation: `document.${operation}`,\n      },\n    );\n    const message = errorMessage(error);\n    runtime.util.log(\n      `Container contents: failed to ${operation} note ${noteId} ${operation === \"link\" ? \"to\" : \"from\"} container ${targetContainerId}: ${message}`,\n    );\n    // After the keying rethrow above, so a verification failure keeps its\n    // security incident instead of being reported twice, and before the failure\n    // handler, so a throwing caller callback cannot swallow the report.\n    reportDocumentLinkMutationFailure(runtime.util, error);\n    input.onFailure?.({ message, status: null });\n    return null;\n  }\n}\n\nasync function linkRemoteContainerDocument(input: {\n  documentId: string;\n  isCurrent?: (() => boolean) | undefined;\n  noteId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  runtime: ContainerDocumentLinkRuntime;\n  targetContainerId: string;\n}): Promise<RelinkRemoteDocumentResult | null> {\n  return relinkRemoteContainerDocument({\n    ...input,\n    operation: \"link\",\n  });\n}\n\nexport async function unlinkRemoteContainerDocument(input: {\n  beforeSubmit?: (() => Promise<boolean>) | undefined;\n  documentId: string;\n  expectedSubtreeRoot?: SubtreePurgeRoot | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  noteId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  rotationSnapshot: Uint8Array;\n  runtime: ContainerDocumentLinkRuntime;\n  targetContainerId: string;\n}): Promise<RelinkRemoteDocumentResult | null> {\n  return relinkRemoteContainerDocument({\n    ...input,\n    operation: \"unlink\",\n  });\n}\n\nexport async function moveRemoteContainerDocument(input: {\n  linkOnly?: boolean | undefined;\n  additionalLinkContainerIds?: readonly string[] | undefined;\n  removedLinkContainerIds?: readonly string[] | undefined;\n  currentContainerId: string;\n  documentId: string;\n  isCurrent?: (() => boolean) | undefined;\n  noteId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  replaceLinkedContainers?: boolean | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  rotationSnapshot: Uint8Array;\n  runtime: ContainerDocumentLinkRuntime;\n  targetContainerId: string;\n}): Promise<MoveRemoteContainerDocumentResult | null> {\n  const {\n    documentId,\n    noteId,\n    resolveProjectionUserKey,\n    runtime,\n    targetContainerId,\n  } = input;\n  if (input.isCurrent?.() === false) return null;\n  const writerProjection = await fetchMoveWriterProjection({\n    documentId,\n    onFailure: input.onFailure,\n    runtime,\n  });\n  if (!writerProjection || input.isCurrent?.() === false) {\n    return null;\n  }\n  if (writerProjection.documentId !== documentId)\n    throw new Error(\"Move replay document id mismatch\");\n  const initialLinkedContainerIds =\n    readLinkedContainerIdsFromDocumentManifest(writerProjection);\n\n  let latestLinkedContainerIds: readonly string[] = initialLinkedContainerIds;\n  let latestDocument: RelinkRemoteDocumentResult | null = null;\n  for (const linkTarget of new Set([\n    ...(input.linkOnly ? [] : [targetContainerId]),\n    ...(input.additionalLinkContainerIds ?? []),\n  ])) {\n    if (latestLinkedContainerIds.includes(linkTarget)) continue;\n    const linkedDocument = await linkRemoteContainerDocument({\n      documentId,\n      isCurrent: input.isCurrent,\n      noteId,\n      onFailure: input.onFailure,\n      resolveProjectionUserKey,\n      runtime,\n      targetContainerId: linkTarget,\n    });\n    if (!linkedDocument || input.isCurrent?.() === false) {\n      return null;\n    }\n\n    latestDocument = linkedDocument;\n    latestLinkedContainerIds = linkedDocument.linkedContainerIds;\n  }\n\n  const unlinkContainerIds = resolveContainerDocumentMoveUnlinkIds({\n    ...input,\n    linkedContainerIds: latestLinkedContainerIds,\n  });\n\n  const unlinked = await unlinkMovedDocumentSources({\n    ...input,\n    latestDocument,\n    latestLinkedContainerIds,\n    unlinkContainerIds,\n  });\n  if (!unlinked) return null;\n  latestDocument = unlinked.latestDocument;\n  latestLinkedContainerIds = unlinked.latestLinkedContainerIds;\n\n  const nextContainerId = resolveActiveDocumentContainerId(\n    latestLinkedContainerIds,\n    targetContainerId,\n  );\n  if (!nextContainerId) {\n    return null;\n  }\n\n  const status =\n    unlinked.failedUnlinkContainerIds.length > 0 ? \"partial\" : \"complete\";\n  return latestDocument\n    ? containerDocumentMoveResult({\n        document: latestDocument,\n        nextContainerId,\n        status,\n      })\n    : containerDocumentAlreadyMovedResult({\n        writerProjection,\n        resolveProjectionUserKey,\n        runtime,\n        isCurrent: input.isCurrent,\n        linkedContainerIds: latestLinkedContainerIds,\n        nextContainerId,\n        status,\n      });\n}\n\n// The unlink half of a move: every source is attempted even when an earlier\n// one fails, so one dead source cannot strand the others; a failed unlink\n// leaves the move \"partial\" for the queue to retry.\nasync function unlinkMovedDocumentSources(input: {\n  documentId: string;\n  isCurrent?: (() => boolean) | undefined;\n  latestDocument: RelinkRemoteDocumentResult | null;\n  latestLinkedContainerIds: readonly string[];\n  noteId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  rotationSnapshot: Uint8Array;\n  runtime: ContainerDocumentLinkRuntime;\n  targetContainerId: string;\n  unlinkContainerIds: readonly string[];\n}): Promise<{\n  failedUnlinkContainerIds: readonly string[];\n  latestDocument: RelinkRemoteDocumentResult | null;\n  latestLinkedContainerIds: readonly string[];\n} | null> {\n  const { noteId, runtime, targetContainerId } = input;\n  let { latestDocument, latestLinkedContainerIds } = input;\n  const failedUnlinkContainerIds: string[] = [];\n  for (const unlinkContainerId of input.unlinkContainerIds) {\n    if (input.isCurrent?.() === false) return null;\n    const unlinkedDocument = await unlinkRemoteContainerDocument({\n      documentId: input.documentId,\n      isCurrent: input.isCurrent,\n      noteId,\n      onFailure: input.onFailure,\n      resolveProjectionUserKey: input.resolveProjectionUserKey,\n      rotationSnapshot: input.rotationSnapshot,\n      runtime,\n      targetContainerId: unlinkContainerId,\n    });\n    if (input.isCurrent?.() === false) return null;\n    if (!unlinkedDocument) {\n      failedUnlinkContainerIds.push(unlinkContainerId);\n      runtime.util.log(\n        `Container contents: note ${noteId} was linked to ${targetContainerId} but failed to unlink from ${unlinkContainerId}`,\n      );\n      continue;\n    }\n\n    latestDocument = unlinkedDocument;\n    latestLinkedContainerIds = unlinkedDocument.linkedContainerIds;\n  }\n  return { failedUnlinkContainerIds, latestDocument, latestLinkedContainerIds };\n}\n"]}

package/workflows/container-contents/documentMoveIntentSync.js

@@ -1,6 +1,6 @@
-import { errorMessage } from "../../data/errorMessage.js";
 import { reportAndRethrowKeyingVerificationError } from "../../data/keyingProjectionVerification/error.js";
 import { DOCUMENT_LINK_INTENT_TYPE, sqlDocumentMoveIntentPersistence, } from "../../data/persistence/container-contents/documentMoveIntentPersistence.js";
+import { errorMessage } from "../../data/shared/errorMessage.js";
 import { defaultDocumentsPersistence, } from "../documents/index.js";
 import { availableDocumentLinkIntent } from "./availableDocumentLinkIntent.js";
 import { moveRemoteContainerDocument } from "./documentLinks.js";

package/workflows/container-contents/documentMoveIntentSync.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentMoveIntentSync.js","sourceRoot":"","sources":["documentMoveIntentSync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EACL,yBAAyB,EAEzB,gCAAgC,GACjC,MAAM,yEAAyE,CAAC;AACjF,OAAO,EAGL,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,+BAA+B,CAAC;AAOjF,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AA0BnF,KAAK,UAAU,wBAAwB,CAAW,KAMjD;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC;QACjD,WAAW,EAAE,KAAK,CAAC,iBAAiB;QACpC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;QACnC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC;QAC1C,GAAG,KAAK,CAAC,WAAW;QACpB,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa,CAAC,aAAa,CACzB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAC5D,CAAC;IACF,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAW,KAMnD;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7C,MAAM,gBAAgB,GAAG,MAAM,2BAA2B,CAAC,YAAY,CACrE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,MAAM,CAAC,OAAO,CACf,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,iBAAiB,GACrB,MAAM,CAAC,UAAU,KAAK,yBAAyB;QAC/C,gBAAgB,CAAC,WAAW;QAC5B,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,WAAW,CAAC;QAC7D,CAAC,CAAC,gBAAgB,CAAC,WAAW;QAC9B,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAE5B,MAAM,WAAW,GAA0C;QACzD,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,gBAAgB,CAAC,WAAW;QAC9D,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,IAAI;YAChC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;QAC/C,WAAW,EAAE,iBAAiB;QAC9B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;QAC5B,gBAAgB,EAAE,CAAC,kBAAkB,EAAE,EAAE,CACvC,wBAAwB,CAAC;YACvB,OAAO,EAAE,kBAAkB;YAC3B,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS;SACpC,CAAC;KACL,CAAC;IAEF,OAAO,wBAAwB,CAAC;QAC9B,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM;QACN,WAAW;QACX,iBAAiB;KAClB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iCAAiC,CAAW,KAK1D;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAClD,yEAAyE;QACzE,4EAA4E;QAC5E,sEAAsE;QACtE,WAAW,EAAE,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,MAAM,CAAC,iBAAiB;QACxE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;QACnC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAAC,yBAAyB,EAAE,CAAC;IAC1E,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAW,KAOlD;IACC,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,yBAAyB,CAAC;IACvE,MAAM,gBAAgB,GACpB,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM;QACvD,CAAC,CAAC,IAAI,UAAU,EAAE;QAClB,CAAC,CAAC,MAAM,iCAAiC,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,WAAoB,CAAC;IACzE,OAAO,2BAA2B,CAAC;QACjC,QAAQ;QACR,0BAA0B,EAAE,KAAK,CAAC,MAAM,CAAC,0BAA0B;QACnE,uBAAuB,EAAE,KAAK,CAAC,MAAM,CAAC,uBAAuB;QAC7D,kBAAkB,EAChB,KAAK,CAAC,MAAM,CAAC,iBAAiB;YAC9B,KAAK,CAAC,mBAAmB;YACzB,KAAK,CAAC,MAAM,CAAC,iBAAiB;QAChC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;QACnC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,uBAAuB,EAAE,KAAK,CAAC,MAAM,CAAC,uBAAuB;QAC7D,wBAAwB,EAAE,KAAK,CAAC,KAAK,CAAC,wBAAwB;QAC9D,gBAAgB;QAChB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;QAC5B,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,iBAAiB;KAClD,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAMzC;IAIC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,gBAAgB,GAAG,MAAM,2BAA2B,CAAC,YAAY,CACrE,OAAO,EACP,MAAM,CAAC,OAAO,CACf,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACvD,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3E,MAAM,oCAAoC,CAAC;YACzC,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,0DAA0D;YACnE,KAAK;SACN,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,IAAI,GAAG,CAAC;QAC7B,MAAM,CAAC,iBAAiB;QACxB,GAAG,CAAC,MAAM,CAAC,0BAA0B,IAAI,EAAE,CAAC;KAC7C,CAAC,EAAE,CAAC;QACH,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,oCAAoC,CAAC;gBACzC,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,gBAAgB,EAAE,MAAM,CAAC,EAAE;gBAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;gBACnC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EACL,iEAAiE;gBACnE,KAAK;aACN,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;YACpE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,CAAC;QACD,IACE,CAAC,+BAA+B,CAAC,WAAW,CAAC;YAC7C,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,EAC/B,CAAC;YACD,MAAM,oCAAoC,CAAC;gBACzC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,gBAAgB,EAAE,MAAM,CAAC,EAAE;gBAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;gBACnC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,uDAAuD;gBAChE,KAAK;aACN,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAMzC;IACC,MAAM,oCAAoC,CAAC;QACzC,sEAAsE;QACtE,yDAAyD;QACzD,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB;QACzC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;QACnC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;QACjC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;QACzC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC;QACpD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,gEAAgE;QAChE,sEAAsE;QACtE,0EAA0E;QAC1E,kEAAkE;QAClE,wEAAwE;QACxE,gEAAgE;QAChE,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAgC,EAChC,KAAkC;IAElC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,mDAAmD,MAAM,CAAC,UAAU,EAAE,CACvE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAW,KAQlD;IACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACvC,IACE,CAAC,CAAC,MAAM,0BAA0B,CAAC;QACjC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM;QACN,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;QACL,KAAK;KACN,CAAC,CAAC,EACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;YAAE,OAAO,WAAW,CAAC;QAC3C,MAAM,oCAAoC,CAAC;YACzC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,0DAA0D;YACnE,KAAK;SACN,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,oCAAoC,CAAC;YACzC,gEAAgE;YAChE,qDAAqD;YACrD,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB;YACzC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,wDAAwD;YACjE,KAAK;YACL,oEAAoE;YACpE,mEAAmE;YACnE,0DAA0D;YAC1D,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,gCAAgC,CAAW,KAOzD;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACtC,MAAM,SAAS,GAAG,2BAA2B,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAC3D,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAC7B,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC;QACjD,GAAG,KAAK;QACR,MAAM,EAAE,SAAS,CAAC,MAAM;KACzB,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC,MAAM,CAAC;IAC1B,CAAC;IACD,MAAM,EAAE,gBAAgB,EAAE,GAAG,SAAS,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gCAAgC,CAAC;YACrD,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YAClC,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CACrB,yBAAyB,CAAC;gBACxB,mBAAmB,EAAE,gBAAgB,CAAC,WAAW;gBACjD,IAAI;gBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,SAAS;gBACT,KAAK;aACN,CAAC;YACJ,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACpC,mBAAmB,EAAE,gBAAgB,CAAC,WAAW;YACjD,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;YAAE,OAAO,WAAW,CAAC;QACtE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,0BAA0B,CAAC;gBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM;gBACN,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK;gBACL,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,MAAM,yBAAyB,CAAC;YACrC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI;YACJ,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,SAAS,CAAC,QAAQ;gBACvB,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE;gBACzC,CAAC,CAAC,OAAO,CAAC,KAAK;YACjB,KAAK;YACL,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;YAAE,OAAO,WAAW,CAAC;QAC3C,MAAM,uCAAuC,CAC3C,KAAK,EACL,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACzC;YACE,QAAQ,EAAE,MAAM,CAAC,UAAU;YAC3B,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,sBAAsB;SAClC,CACF,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;YAAE,OAAO,WAAW,CAAC;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,oCAAoC,CAAC;YACzC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,iCAAiC,OAAO,EAAE;YACnD,KAAK;SACN,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAW,KAO9D;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,CAAC,CAAC;IACjC,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC;IACnC,MAAM,KAAK,GAAG,EAAE,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,IAAI,CAAC,6BAA6B,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,gCAAgC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;YAAE,OAAO,CAAC,CAAC;QACjC,0BAA0B,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,cAAc,GAClB,MAAM,gCAAgC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,CAAC,CAAC;IACjC,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;YAAE,OAAO,UAAU,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC;YACpD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,MAAM;YACN,KAAK;SACN,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,WAAW;YAAE,OAAO,UAAU,CAAC;QAC9C,0EAA0E;QAC1E,qEAAqE;QACrE,sEAAsE;QACtE,yEAAyE;QACzE,kCAAkC;QAClC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import { errorMessage } from \"../../data/errorMessage\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../data/keyingProjectionVerification/error\";\nimport {\n  DOCUMENT_LINK_INTENT_TYPE,\n  type DocumentMoveIntentRecord,\n  sqlDocumentMoveIntentPersistence,\n} from \"../../data/persistence/container-contents/documentMoveIntentPersistence\";\nimport {\n  type DocumentLinkSetFailureHandler,\n  type DocumentRecord,\n  defaultDocumentsPersistence,\n} from \"../documents\";\nimport { availableDocumentLinkIntent } from \"./availableDocumentLinkIntent\";\nimport { moveRemoteContainerDocument } from \"./documentLinks\";\nimport {\n  deniedReplayMatchesGeneration,\n  markDeniedReplayGeneration,\n} from \"./documentMoveDeniedReplay\";\nimport {\n  type DocumentMoveFailureState,\n  describeRejectedDocumentMove,\n} from \"./documentMoveFailure\";\nimport { recordPendingDocumentMoveIntentError } from \"./documentMoveIntentErrors\";\nimport { settleDocumentMoveIntent } from \"./documentMoveIntentSettlement\";\nimport { moveWithVanishedContainerRefresh } from \"./documentMoveVanishedRefresh\";\nimport type {\n  DocumentStructuralMutationLocalStore,\n  DocumentStructuralMutationRelinkInput,\n} from \"./documentStructureTypes\";\nimport type { ContainerContentsProjectionUserKeyResolver } from \"./projectionKeys\";\nimport type { ContainerState } from \"./remoteHydration\";\nimport { hasRemoteContainerMetadataState } from \"./remoteHydration/reconciliation\";\nimport type { ContainerContentsWorkflowRuntime } from \"./runtime\";\n\ntype DocumentMoveIntentReplayResult =\n  | \"abandoned\"\n  | \"moved\"\n  | \"partial\"\n  | \"blocked\"\n  | \"failed\";\n\nexport interface DocumentMoveIntentSyncHost<TRuntime> {\n  documentWorkflowRuntime: (containerId: string) => TRuntime;\n  openDocumentStore: (input: {\n    containerId: string;\n    documentId: string | null;\n    localId: string;\n  }) => DocumentStructuralMutationLocalStore<TRuntime>;\n}\n\ninterface DocumentMoveIntentSyncState {\n  containersById: ReadonlyMap<string, ContainerState>;\n  lifecycleGeneration?: number | undefined;\n  resolveProjectionUserKey: ContainerContentsProjectionUserKeyResolver;\n  runtime: ContainerContentsWorkflowRuntime;\n}\n\nasync function relinkMovedDocumentStore<TRuntime>(input: {\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  isCurrent: () => boolean;\n  intent: DocumentMoveIntentRecord;\n  relinkInput: DocumentStructuralMutationRelinkInput;\n  targetContainerId: string;\n}): Promise<boolean> {\n  if (!input.isCurrent()) return false;\n  const documentStore = input.host.openDocumentStore({\n    containerId: input.targetContainerId,\n    documentId: input.intent.documentId,\n    localId: input.intent.localId,\n  });\n  if (!(await documentStore.ensureInitialized()) || !input.isCurrent()) {\n    return false;\n  }\n\n  const relinked = await documentStore.relink({\n    ...input.relinkInput,\n    stillCurrent: input.isCurrent,\n  });\n  if (!relinked || !input.isCurrent()) {\n    return false;\n  }\n\n  documentStore.updateRuntime(\n    input.host.documentWorkflowRuntime(input.targetContainerId),\n  );\n  return input.isCurrent();\n}\n\nasync function persistMovedDocumentReplay<TRuntime>(input: {\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  intent: DocumentMoveIntentRecord;\n  isCurrent: () => boolean;\n  moved: NonNullable<Awaited<ReturnType<typeof moveRemoteContainerDocument>>>;\n  state: DocumentMoveIntentSyncState;\n}): Promise<boolean> {\n  const { host, intent, moved, state } = input;\n  const existingDocument = await defaultDocumentsPersistence.loadDocument(\n    state.runtime.infra.execSql,\n    intent.localId,\n  );\n  if (!input.isCurrent() || !existingDocument) {\n    return false;\n  }\n\n  const targetContainerId =\n    intent.intentType === DOCUMENT_LINK_INTENT_TYPE &&\n    existingDocument.containerId &&\n    moved.linkedContainerIds.includes(existingDocument.containerId)\n      ? existingDocument.containerId\n      : moved.nextContainerId;\n\n  const relinkInput: DocumentStructuralMutationRelinkInput = {\n    accessEpoch: moved.accessEpoch ?? existingDocument.accessEpoch,\n    ...(moved.accessStateHash === null\n      ? {}\n      : { accessStateHash: moved.accessStateHash }),\n    containerId: targetContainerId,\n    documentId: intent.documentId,\n    localId: intent.localId,\n    ...(moved.remoteState ?? {}),\n    commitSideEffect: (transactionExecSql) =>\n      settleDocumentMoveIntent({\n        execSql: transactionExecSql,\n        intent,\n        isCurrent: input.isCurrent,\n        linkedContainerIds: moved.linkedContainerIds,\n        partial: moved.status === \"partial\",\n      }),\n  };\n\n  return relinkMovedDocumentStore({\n    host,\n    isCurrent: input.isCurrent,\n    intent,\n    relinkInput,\n    targetContainerId,\n  });\n}\n\nasync function assertMoveIntentRotationPreflight<TRuntime>(input: {\n  existingContainerId: string | null | undefined;\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  isCurrent: () => boolean;\n  intent: DocumentMoveIntentRecord;\n}): Promise<Uint8Array | null> {\n  if (!input.isCurrent()) return null;\n  const preflightStore = input.host.openDocumentStore({\n    // The optimistic move already changed local placement. Use that scope so\n    // opening the destination view cannot invalidate this shared store's proof.\n    // Remote link-set authorization still uses the intent's source below.\n    containerId: input.existingContainerId ?? input.intent.targetContainerId,\n    documentId: input.intent.documentId,\n    localId: input.intent.localId,\n  });\n  if (!(await preflightStore.ensureInitialized())) {\n    throw new Error(\"Document rotation preflight could not load the document\");\n  }\n  if (!input.isCurrent()) return null;\n  const rotationSnapshot = await preflightStore.assertCanRotateContentKey();\n  return input.isCurrent() ? rotationSnapshot : null;\n}\n\nasync function movePendingDocumentIntent<TRuntime>(input: {\n  existingContainerId: string | null | undefined;\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  isCurrent: () => boolean;\n  intent: DocumentMoveIntentRecord;\n  onFailure: DocumentLinkSetFailureHandler;\n  state: DocumentMoveIntentSyncState;\n}) {\n  // Adding links keeps the content key and needs no full-history rotation proof.\n  const linkOnly = input.intent.intentType === DOCUMENT_LINK_INTENT_TYPE;\n  const rotationSnapshot =\n    linkOnly && !input.intent.removedLinkContainerIds?.length\n      ? new Uint8Array()\n      : await assertMoveIntentRotationPreflight(input);\n  if (!rotationSnapshot || !input.isCurrent()) return \"abandoned\" as const;\n  return moveRemoteContainerDocument({\n    linkOnly,\n    additionalLinkContainerIds: input.intent.additionalLinkContainerIds,\n    removedLinkContainerIds: input.intent.removedLinkContainerIds,\n    currentContainerId:\n      input.intent.sourceContainerId ??\n      input.existingContainerId ??\n      input.intent.targetContainerId,\n    documentId: input.intent.documentId,\n    isCurrent: input.isCurrent,\n    noteId: input.intent.localId,\n    onFailure: input.onFailure,\n    replaceLinkedContainers: input.intent.replaceLinkedContainers,\n    resolveProjectionUserKey: input.state.resolveProjectionUserKey,\n    rotationSnapshot,\n    runtime: input.state.runtime,\n    targetContainerId: input.intent.targetContainerId,\n  });\n}\n\nasync function resolveMoveIntentPreflight(input: {\n  isCreatePending: (containerId: string) => boolean;\n  isRemoteSyncBlocked: (organizationId: string) => boolean;\n  isCurrent: () => boolean;\n  intent: DocumentMoveIntentRecord;\n  state: DocumentMoveIntentSyncState;\n}): Promise<\n  | { existingDocument: DocumentRecord; result?: undefined }\n  | { existingDocument?: undefined; result: DocumentMoveIntentReplayResult }\n> {\n  const { intent, state } = input;\n  const execSql = state.runtime.infra.execSql;\n  const existingDocument = await defaultDocumentsPersistence.loadDocument(\n    execSql,\n    intent.localId,\n  );\n  if (!input.isCurrent()) return { result: \"abandoned\" };\n  if (!existingDocument || existingDocument.documentId !== intent.documentId) {\n    await recordPendingDocumentMoveIntentError({\n      blocked: true,\n      documentId: intent.documentId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Document move intent references a missing local document\",\n      state,\n    });\n    return { result: \"blocked\" };\n  }\n\n  for (const targetId of new Set([\n    intent.targetContainerId,\n    ...(intent.additionalLinkContainerIds ?? []),\n  ])) {\n    const targetState = state.containersById.get(targetId);\n    if (!targetState) {\n      await recordPendingDocumentMoveIntentError({\n        blocked: true,\n        documentId: intent.documentId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n        isCurrent: input.isCurrent,\n        message:\n          \"Document move intent references a missing destination container\",\n        state,\n      });\n      return { result: \"blocked\" };\n    }\n    if (input.isRemoteSyncBlocked(targetState.container.organizationId)) {\n      return { result: \"blocked\" };\n    }\n    if (\n      !hasRemoteContainerMetadataState(targetState) ||\n      input.isCreatePending(targetId)\n    ) {\n      await recordPendingDocumentMoveIntentError({\n        documentId: intent.documentId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n        isCurrent: input.isCurrent,\n        message: \"Document move destination container is not synced yet\",\n        state,\n      });\n      return { result: \"failed\" };\n    }\n  }\n  return { existingDocument };\n}\n\nasync function recordRejectedDocumentMove(input: {\n  failure: DocumentMoveFailureState;\n  intent: DocumentMoveIntentRecord;\n  isCurrent: () => boolean;\n  state: DocumentMoveIntentSyncState;\n  unavailable: boolean;\n}): Promise<void> {\n  await recordPendingDocumentMoveIntentError({\n    // A permission denial parks the intent for the access-restored signal\n    // instead of replaying on every structural pass (row 7).\n    denied: input.failure.sawPermissionDenial,\n    documentId: input.intent.documentId,\n    expectedIntentId: input.intent.id,\n    expectedUpdatedAt: input.intent.updatedAt,\n    isCurrent: input.isCurrent,\n    message: describeRejectedDocumentMove(input.failure),\n    state: input.state,\n    // Terminal only after the vanished-container refresh proved the\n    // destination itself gone: the intent can never commit as written and\n    // nothing on this device can heal it, so it leaves the replay set instead\n    // of re-issuing doomed requests every pass. The tombstone cascade\n    // retargets it once hydration tears the deleted container down locally.\n    // Every other vanished verdict stays pending for the next pass.\n    unavailable: input.unavailable,\n  });\n}\n\nfunction logSyncedDocumentMove(\n  intent: DocumentMoveIntentRecord,\n  state: DocumentMoveIntentSyncState,\n): void {\n  state.runtime.util.log(\n    `Container contents: synced queued document move ${intent.documentId}`,\n  );\n}\n\nasync function settleMovedDocumentIntent<TRuntime>(input: {\n  failure: DocumentMoveFailureState;\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  intent: DocumentMoveIntentRecord;\n  isCurrent: () => boolean;\n  moved: NonNullable<Awaited<ReturnType<typeof moveRemoteContainerDocument>>>;\n  state: DocumentMoveIntentSyncState;\n  unavailable: boolean;\n}): Promise<DocumentMoveIntentReplayResult> {\n  const { intent, moved, state } = input;\n  if (\n    !(await persistMovedDocumentReplay({\n      host: input.host,\n      intent,\n      isCurrent: input.isCurrent,\n      moved,\n      state,\n    }))\n  ) {\n    if (!input.isCurrent()) return \"abandoned\";\n    await recordPendingDocumentMoveIntentError({\n      documentId: intent.documentId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Document move replay could not relink the local document\",\n      state,\n    });\n    return \"failed\";\n  }\n  if (moved.status === \"partial\") {\n    await recordPendingDocumentMoveIntentError({\n      // An unlink refused for permissions parks like any other denied\n      // move (row 7); other partials keep row 15's replay.\n      denied: input.failure.sawPermissionDenial,\n      documentId: intent.documentId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Remote document move partially applied; retry required\",\n      state,\n      // Terminal only when the refresh proved the destination itself gone\n      // after the link had already landed; a vanished unlink alone stays\n      // pending with its live link for the next pass to revoke.\n      unavailable: input.unavailable,\n    });\n    return \"partial\";\n  }\n\n  logSyncedDocumentMove(intent, state);\n  return \"moved\";\n}\n\nasync function trySyncPendingDocumentMoveIntent<TRuntime>(input: {\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  isCreatePending: (containerId: string) => boolean;\n  isRemoteSyncBlocked: (organizationId: string) => boolean;\n  isCurrent: () => boolean;\n  intent: DocumentMoveIntentRecord;\n  state: DocumentMoveIntentSyncState;\n}): Promise<DocumentMoveIntentReplayResult> {\n  const { host, intent, state } = input;\n  const available = availableDocumentLinkIntent(intent, (id) =>\n    state.containersById.has(id),\n  );\n  const preflight = await resolveMoveIntentPreflight({\n    ...input,\n    intent: available.intent,\n  });\n  if (preflight.result !== undefined) {\n    return preflight.result;\n  }\n  const { existingDocument } = preflight;\n\n  try {\n    const outcome = await moveWithVanishedContainerRefresh({\n      apiClient: state.runtime.apiClient,\n      attempt: (onFailure) =>\n        movePendingDocumentIntent({\n          existingContainerId: existingDocument.containerId,\n          host,\n          isCurrent: input.isCurrent,\n          intent: available.intent,\n          onFailure,\n          state,\n        }),\n      execSql: state.runtime.infra.execSql,\n      existingContainerId: existingDocument.containerId,\n      intent: available.intent,\n      isCurrent: input.isCurrent,\n    });\n    if (outcome === \"abandoned\" || !input.isCurrent()) return \"abandoned\";\n    if (!outcome.moved) {\n      await recordRejectedDocumentMove({\n        failure: outcome.failure,\n        intent,\n        isCurrent: input.isCurrent,\n        state,\n        unavailable: outcome.unavailable,\n      });\n      return \"failed\";\n    }\n    return await settleMovedDocumentIntent({\n      failure: outcome.failure,\n      host,\n      intent,\n      isCurrent: input.isCurrent,\n      moved: available.deferred\n        ? { ...outcome.moved, status: \"partial\" }\n        : outcome.moved,\n      state,\n      unavailable: outcome.unavailable,\n    });\n  } catch (error: unknown) {\n    if (!input.isCurrent()) return \"abandoned\";\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      state.runtime.util.reportSecurityIncident,\n      {\n        objectId: intent.documentId,\n        objectKind: \"document\",\n        operation: \"document.move.replay\",\n      },\n    );\n    if (!input.isCurrent()) return \"abandoned\";\n    const message = errorMessage(error);\n    await recordPendingDocumentMoveIntentError({\n      documentId: intent.documentId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: `Failed to sync document move: ${message}`,\n      state,\n    });\n    return \"failed\";\n  }\n}\n\nexport async function syncPendingDocumentMoveIntents<TRuntime>(input: {\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  /** A destination whose create has not settled takes no document yet. */\n  isCreatePending: (containerId: string) => boolean;\n  isCurrent: () => boolean;\n  isRemoteSyncBlocked: (organizationId: string) => boolean;\n  state: DocumentMoveIntentSyncState;\n}): Promise<number> {\n  if (!input.isCurrent()) return 0;\n  const lifecycleState = input.state;\n  const state = { ...lifecycleState };\n  const execSql = state.runtime.infra.execSql;\n  if (!deniedReplayMatchesGeneration(lifecycleState, execSql)) {\n    await sqlDocumentMoveIntentPersistence.resetDeniedMoveIntents(execSql);\n    if (!input.isCurrent()) return 0;\n    markDeniedReplayGeneration(lifecycleState, execSql);\n  }\n  const pendingIntents =\n    await sqlDocumentMoveIntentPersistence.listPendingMoveIntents(execSql);\n  if (!input.isCurrent()) return 0;\n  let movedCount = 0;\n\n  for (const intent of pendingIntents) {\n    if (!input.isCurrent()) return movedCount;\n    const result = await trySyncPendingDocumentMoveIntent({\n      host: input.host,\n      isCreatePending: input.isCreatePending,\n      isCurrent: input.isCurrent,\n      isRemoteSyncBlocked: input.isRemoteSyncBlocked,\n      intent,\n      state,\n    });\n    if (result === \"abandoned\") return movedCount;\n    // A \"partial\" result (link applied, unlink still pending) must not count:\n    // the caller re-arms this same structural lane whenever the count is\n    // positive, so a deterministically failing unlink hot-looped the pump\n    // (issue #1744). The intent row stays pending; event-driven, manual, and\n    // startup lane requests retry it.\n    if (result === \"moved\") {\n      movedCount += 1;\n    }\n  }\n\n  return movedCount;\n}\n"]}
+{"version":3,"file":"documentMoveIntentSync.js","sourceRoot":"","sources":["documentMoveIntentSync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EACL,yBAAyB,EAEzB,gCAAgC,GACjC,MAAM,yEAAyE,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAGL,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,+BAA+B,CAAC;AAOjF,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AA0BnF,KAAK,UAAU,wBAAwB,CAAW,KAMjD;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC;QACjD,WAAW,EAAE,KAAK,CAAC,iBAAiB;QACpC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;QACnC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC;QAC1C,GAAG,KAAK,CAAC,WAAW;QACpB,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa,CAAC,aAAa,CACzB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAC5D,CAAC;IACF,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAW,KAMnD;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7C,MAAM,gBAAgB,GAAG,MAAM,2BAA2B,CAAC,YAAY,CACrE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,MAAM,CAAC,OAAO,CACf,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,iBAAiB,GACrB,MAAM,CAAC,UAAU,KAAK,yBAAyB;QAC/C,gBAAgB,CAAC,WAAW;QAC5B,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,WAAW,CAAC;QAC7D,CAAC,CAAC,gBAAgB,CAAC,WAAW;QAC9B,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAE5B,MAAM,WAAW,GAA0C;QACzD,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,gBAAgB,CAAC,WAAW;QAC9D,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,IAAI;YAChC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;QAC/C,WAAW,EAAE,iBAAiB;QAC9B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;QAC5B,gBAAgB,EAAE,CAAC,kBAAkB,EAAE,EAAE,CACvC,wBAAwB,CAAC;YACvB,OAAO,EAAE,kBAAkB;YAC3B,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS;SACpC,CAAC;KACL,CAAC;IAEF,OAAO,wBAAwB,CAAC;QAC9B,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM;QACN,WAAW;QACX,iBAAiB;KAClB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iCAAiC,CAAW,KAK1D;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAClD,yEAAyE;QACzE,4EAA4E;QAC5E,sEAAsE;QACtE,WAAW,EAAE,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,MAAM,CAAC,iBAAiB;QACxE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;QACnC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAAC,yBAAyB,EAAE,CAAC;IAC1E,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAW,KAOlD;IACC,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,yBAAyB,CAAC;IACvE,MAAM,gBAAgB,GACpB,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM;QACvD,CAAC,CAAC,IAAI,UAAU,EAAE;QAClB,CAAC,CAAC,MAAM,iCAAiC,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,WAAoB,CAAC;IACzE,OAAO,2BAA2B,CAAC;QACjC,QAAQ;QACR,0BAA0B,EAAE,KAAK,CAAC,MAAM,CAAC,0BAA0B;QACnE,uBAAuB,EAAE,KAAK,CAAC,MAAM,CAAC,uBAAuB;QAC7D,kBAAkB,EAChB,KAAK,CAAC,MAAM,CAAC,iBAAiB;YAC9B,KAAK,CAAC,mBAAmB;YACzB,KAAK,CAAC,MAAM,CAAC,iBAAiB;QAChC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;QACnC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,uBAAuB,EAAE,KAAK,CAAC,MAAM,CAAC,uBAAuB;QAC7D,wBAAwB,EAAE,KAAK,CAAC,KAAK,CAAC,wBAAwB;QAC9D,gBAAgB;QAChB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;QAC5B,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,iBAAiB;KAClD,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAMzC;IAIC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,gBAAgB,GAAG,MAAM,2BAA2B,CAAC,YAAY,CACrE,OAAO,EACP,MAAM,CAAC,OAAO,CACf,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACvD,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3E,MAAM,oCAAoC,CAAC;YACzC,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,0DAA0D;YACnE,KAAK;SACN,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,IAAI,GAAG,CAAC;QAC7B,MAAM,CAAC,iBAAiB;QACxB,GAAG,CAAC,MAAM,CAAC,0BAA0B,IAAI,EAAE,CAAC;KAC7C,CAAC,EAAE,CAAC;QACH,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,oCAAoC,CAAC;gBACzC,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,gBAAgB,EAAE,MAAM,CAAC,EAAE;gBAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;gBACnC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EACL,iEAAiE;gBACnE,KAAK;aACN,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;YACpE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,CAAC;QACD,IACE,CAAC,+BAA+B,CAAC,WAAW,CAAC;YAC7C,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,EAC/B,CAAC;YACD,MAAM,oCAAoC,CAAC;gBACzC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,gBAAgB,EAAE,MAAM,CAAC,EAAE;gBAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;gBACnC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,uDAAuD;gBAChE,KAAK;aACN,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAMzC;IACC,MAAM,oCAAoC,CAAC;QACzC,sEAAsE;QACtE,yDAAyD;QACzD,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB;QACzC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;QACnC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;QACjC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;QACzC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC;QACpD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,gEAAgE;QAChE,sEAAsE;QACtE,0EAA0E;QAC1E,kEAAkE;QAClE,wEAAwE;QACxE,gEAAgE;QAChE,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAgC,EAChC,KAAkC;IAElC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,mDAAmD,MAAM,CAAC,UAAU,EAAE,CACvE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAW,KAQlD;IACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACvC,IACE,CAAC,CAAC,MAAM,0BAA0B,CAAC;QACjC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM;QACN,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;QACL,KAAK;KACN,CAAC,CAAC,EACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;YAAE,OAAO,WAAW,CAAC;QAC3C,MAAM,oCAAoC,CAAC;YACzC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,0DAA0D;YACnE,KAAK;SACN,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,oCAAoC,CAAC;YACzC,gEAAgE;YAChE,qDAAqD;YACrD,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB;YACzC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,wDAAwD;YACjE,KAAK;YACL,oEAAoE;YACpE,mEAAmE;YACnE,0DAA0D;YAC1D,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,gCAAgC,CAAW,KAOzD;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACtC,MAAM,SAAS,GAAG,2BAA2B,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAC3D,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAC7B,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC;QACjD,GAAG,KAAK;QACR,MAAM,EAAE,SAAS,CAAC,MAAM;KACzB,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC,MAAM,CAAC;IAC1B,CAAC;IACD,MAAM,EAAE,gBAAgB,EAAE,GAAG,SAAS,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gCAAgC,CAAC;YACrD,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YAClC,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CACrB,yBAAyB,CAAC;gBACxB,mBAAmB,EAAE,gBAAgB,CAAC,WAAW;gBACjD,IAAI;gBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,SAAS;gBACT,KAAK;aACN,CAAC;YACJ,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACpC,mBAAmB,EAAE,gBAAgB,CAAC,WAAW;YACjD,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;YAAE,OAAO,WAAW,CAAC;QACtE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,0BAA0B,CAAC;gBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM;gBACN,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK;gBACL,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,MAAM,yBAAyB,CAAC;YACrC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI;YACJ,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,SAAS,CAAC,QAAQ;gBACvB,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE;gBACzC,CAAC,CAAC,OAAO,CAAC,KAAK;YACjB,KAAK;YACL,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;YAAE,OAAO,WAAW,CAAC;QAC3C,MAAM,uCAAuC,CAC3C,KAAK,EACL,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACzC;YACE,QAAQ,EAAE,MAAM,CAAC,UAAU;YAC3B,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,sBAAsB;SAClC,CACF,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;YAAE,OAAO,WAAW,CAAC;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,oCAAoC,CAAC;YACzC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,iCAAiC,OAAO,EAAE;YACnD,KAAK;SACN,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAW,KAO9D;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,CAAC,CAAC;IACjC,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC;IACnC,MAAM,KAAK,GAAG,EAAE,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,IAAI,CAAC,6BAA6B,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,gCAAgC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;YAAE,OAAO,CAAC,CAAC;QACjC,0BAA0B,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,cAAc,GAClB,MAAM,gCAAgC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,CAAC,CAAC;IACjC,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;YAAE,OAAO,UAAU,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC;YACpD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,MAAM;YACN,KAAK;SACN,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,WAAW;YAAE,OAAO,UAAU,CAAC;QAC9C,0EAA0E;QAC1E,qEAAqE;QACrE,sEAAsE;QACtE,yEAAyE;QACzE,kCAAkC;QAClC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import { reportAndRethrowKeyingVerificationError } from \"../../data/keyingProjectionVerification/error\";\nimport {\n  DOCUMENT_LINK_INTENT_TYPE,\n  type DocumentMoveIntentRecord,\n  sqlDocumentMoveIntentPersistence,\n} from \"../../data/persistence/container-contents/documentMoveIntentPersistence\";\nimport { errorMessage } from \"../../data/shared/errorMessage\";\nimport {\n  type DocumentLinkSetFailureHandler,\n  type DocumentRecord,\n  defaultDocumentsPersistence,\n} from \"../documents\";\nimport { availableDocumentLinkIntent } from \"./availableDocumentLinkIntent\";\nimport { moveRemoteContainerDocument } from \"./documentLinks\";\nimport {\n  deniedReplayMatchesGeneration,\n  markDeniedReplayGeneration,\n} from \"./documentMoveDeniedReplay\";\nimport {\n  type DocumentMoveFailureState,\n  describeRejectedDocumentMove,\n} from \"./documentMoveFailure\";\nimport { recordPendingDocumentMoveIntentError } from \"./documentMoveIntentErrors\";\nimport { settleDocumentMoveIntent } from \"./documentMoveIntentSettlement\";\nimport { moveWithVanishedContainerRefresh } from \"./documentMoveVanishedRefresh\";\nimport type {\n  DocumentStructuralMutationLocalStore,\n  DocumentStructuralMutationRelinkInput,\n} from \"./documentStructureTypes\";\nimport type { ContainerContentsProjectionUserKeyResolver } from \"./projectionKeys\";\nimport type { ContainerState } from \"./remoteHydration\";\nimport { hasRemoteContainerMetadataState } from \"./remoteHydration/reconciliation\";\nimport type { ContainerContentsWorkflowRuntime } from \"./runtime\";\n\ntype DocumentMoveIntentReplayResult =\n  | \"abandoned\"\n  | \"moved\"\n  | \"partial\"\n  | \"blocked\"\n  | \"failed\";\n\nexport interface DocumentMoveIntentSyncHost<TRuntime> {\n  documentWorkflowRuntime: (containerId: string) => TRuntime;\n  openDocumentStore: (input: {\n    containerId: string;\n    documentId: string | null;\n    localId: string;\n  }) => DocumentStructuralMutationLocalStore<TRuntime>;\n}\n\ninterface DocumentMoveIntentSyncState {\n  containersById: ReadonlyMap<string, ContainerState>;\n  lifecycleGeneration?: number | undefined;\n  resolveProjectionUserKey: ContainerContentsProjectionUserKeyResolver;\n  runtime: ContainerContentsWorkflowRuntime;\n}\n\nasync function relinkMovedDocumentStore<TRuntime>(input: {\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  isCurrent: () => boolean;\n  intent: DocumentMoveIntentRecord;\n  relinkInput: DocumentStructuralMutationRelinkInput;\n  targetContainerId: string;\n}): Promise<boolean> {\n  if (!input.isCurrent()) return false;\n  const documentStore = input.host.openDocumentStore({\n    containerId: input.targetContainerId,\n    documentId: input.intent.documentId,\n    localId: input.intent.localId,\n  });\n  if (!(await documentStore.ensureInitialized()) || !input.isCurrent()) {\n    return false;\n  }\n\n  const relinked = await documentStore.relink({\n    ...input.relinkInput,\n    stillCurrent: input.isCurrent,\n  });\n  if (!relinked || !input.isCurrent()) {\n    return false;\n  }\n\n  documentStore.updateRuntime(\n    input.host.documentWorkflowRuntime(input.targetContainerId),\n  );\n  return input.isCurrent();\n}\n\nasync function persistMovedDocumentReplay<TRuntime>(input: {\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  intent: DocumentMoveIntentRecord;\n  isCurrent: () => boolean;\n  moved: NonNullable<Awaited<ReturnType<typeof moveRemoteContainerDocument>>>;\n  state: DocumentMoveIntentSyncState;\n}): Promise<boolean> {\n  const { host, intent, moved, state } = input;\n  const existingDocument = await defaultDocumentsPersistence.loadDocument(\n    state.runtime.infra.execSql,\n    intent.localId,\n  );\n  if (!input.isCurrent() || !existingDocument) {\n    return false;\n  }\n\n  const targetContainerId =\n    intent.intentType === DOCUMENT_LINK_INTENT_TYPE &&\n    existingDocument.containerId &&\n    moved.linkedContainerIds.includes(existingDocument.containerId)\n      ? existingDocument.containerId\n      : moved.nextContainerId;\n\n  const relinkInput: DocumentStructuralMutationRelinkInput = {\n    accessEpoch: moved.accessEpoch ?? existingDocument.accessEpoch,\n    ...(moved.accessStateHash === null\n      ? {}\n      : { accessStateHash: moved.accessStateHash }),\n    containerId: targetContainerId,\n    documentId: intent.documentId,\n    localId: intent.localId,\n    ...(moved.remoteState ?? {}),\n    commitSideEffect: (transactionExecSql) =>\n      settleDocumentMoveIntent({\n        execSql: transactionExecSql,\n        intent,\n        isCurrent: input.isCurrent,\n        linkedContainerIds: moved.linkedContainerIds,\n        partial: moved.status === \"partial\",\n      }),\n  };\n\n  return relinkMovedDocumentStore({\n    host,\n    isCurrent: input.isCurrent,\n    intent,\n    relinkInput,\n    targetContainerId,\n  });\n}\n\nasync function assertMoveIntentRotationPreflight<TRuntime>(input: {\n  existingContainerId: string | null | undefined;\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  isCurrent: () => boolean;\n  intent: DocumentMoveIntentRecord;\n}): Promise<Uint8Array | null> {\n  if (!input.isCurrent()) return null;\n  const preflightStore = input.host.openDocumentStore({\n    // The optimistic move already changed local placement. Use that scope so\n    // opening the destination view cannot invalidate this shared store's proof.\n    // Remote link-set authorization still uses the intent's source below.\n    containerId: input.existingContainerId ?? input.intent.targetContainerId,\n    documentId: input.intent.documentId,\n    localId: input.intent.localId,\n  });\n  if (!(await preflightStore.ensureInitialized())) {\n    throw new Error(\"Document rotation preflight could not load the document\");\n  }\n  if (!input.isCurrent()) return null;\n  const rotationSnapshot = await preflightStore.assertCanRotateContentKey();\n  return input.isCurrent() ? rotationSnapshot : null;\n}\n\nasync function movePendingDocumentIntent<TRuntime>(input: {\n  existingContainerId: string | null | undefined;\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  isCurrent: () => boolean;\n  intent: DocumentMoveIntentRecord;\n  onFailure: DocumentLinkSetFailureHandler;\n  state: DocumentMoveIntentSyncState;\n}) {\n  // Adding links keeps the content key and needs no full-history rotation proof.\n  const linkOnly = input.intent.intentType === DOCUMENT_LINK_INTENT_TYPE;\n  const rotationSnapshot =\n    linkOnly && !input.intent.removedLinkContainerIds?.length\n      ? new Uint8Array()\n      : await assertMoveIntentRotationPreflight(input);\n  if (!rotationSnapshot || !input.isCurrent()) return \"abandoned\" as const;\n  return moveRemoteContainerDocument({\n    linkOnly,\n    additionalLinkContainerIds: input.intent.additionalLinkContainerIds,\n    removedLinkContainerIds: input.intent.removedLinkContainerIds,\n    currentContainerId:\n      input.intent.sourceContainerId ??\n      input.existingContainerId ??\n      input.intent.targetContainerId,\n    documentId: input.intent.documentId,\n    isCurrent: input.isCurrent,\n    noteId: input.intent.localId,\n    onFailure: input.onFailure,\n    replaceLinkedContainers: input.intent.replaceLinkedContainers,\n    resolveProjectionUserKey: input.state.resolveProjectionUserKey,\n    rotationSnapshot,\n    runtime: input.state.runtime,\n    targetContainerId: input.intent.targetContainerId,\n  });\n}\n\nasync function resolveMoveIntentPreflight(input: {\n  isCreatePending: (containerId: string) => boolean;\n  isRemoteSyncBlocked: (organizationId: string) => boolean;\n  isCurrent: () => boolean;\n  intent: DocumentMoveIntentRecord;\n  state: DocumentMoveIntentSyncState;\n}): Promise<\n  | { existingDocument: DocumentRecord; result?: undefined }\n  | { existingDocument?: undefined; result: DocumentMoveIntentReplayResult }\n> {\n  const { intent, state } = input;\n  const execSql = state.runtime.infra.execSql;\n  const existingDocument = await defaultDocumentsPersistence.loadDocument(\n    execSql,\n    intent.localId,\n  );\n  if (!input.isCurrent()) return { result: \"abandoned\" };\n  if (!existingDocument || existingDocument.documentId !== intent.documentId) {\n    await recordPendingDocumentMoveIntentError({\n      blocked: true,\n      documentId: intent.documentId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Document move intent references a missing local document\",\n      state,\n    });\n    return { result: \"blocked\" };\n  }\n\n  for (const targetId of new Set([\n    intent.targetContainerId,\n    ...(intent.additionalLinkContainerIds ?? []),\n  ])) {\n    const targetState = state.containersById.get(targetId);\n    if (!targetState) {\n      await recordPendingDocumentMoveIntentError({\n        blocked: true,\n        documentId: intent.documentId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n        isCurrent: input.isCurrent,\n        message:\n          \"Document move intent references a missing destination container\",\n        state,\n      });\n      return { result: \"blocked\" };\n    }\n    if (input.isRemoteSyncBlocked(targetState.container.organizationId)) {\n      return { result: \"blocked\" };\n    }\n    if (\n      !hasRemoteContainerMetadataState(targetState) ||\n      input.isCreatePending(targetId)\n    ) {\n      await recordPendingDocumentMoveIntentError({\n        documentId: intent.documentId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n        isCurrent: input.isCurrent,\n        message: \"Document move destination container is not synced yet\",\n        state,\n      });\n      return { result: \"failed\" };\n    }\n  }\n  return { existingDocument };\n}\n\nasync function recordRejectedDocumentMove(input: {\n  failure: DocumentMoveFailureState;\n  intent: DocumentMoveIntentRecord;\n  isCurrent: () => boolean;\n  state: DocumentMoveIntentSyncState;\n  unavailable: boolean;\n}): Promise<void> {\n  await recordPendingDocumentMoveIntentError({\n    // A permission denial parks the intent for the access-restored signal\n    // instead of replaying on every structural pass (row 7).\n    denied: input.failure.sawPermissionDenial,\n    documentId: input.intent.documentId,\n    expectedIntentId: input.intent.id,\n    expectedUpdatedAt: input.intent.updatedAt,\n    isCurrent: input.isCurrent,\n    message: describeRejectedDocumentMove(input.failure),\n    state: input.state,\n    // Terminal only after the vanished-container refresh proved the\n    // destination itself gone: the intent can never commit as written and\n    // nothing on this device can heal it, so it leaves the replay set instead\n    // of re-issuing doomed requests every pass. The tombstone cascade\n    // retargets it once hydration tears the deleted container down locally.\n    // Every other vanished verdict stays pending for the next pass.\n    unavailable: input.unavailable,\n  });\n}\n\nfunction logSyncedDocumentMove(\n  intent: DocumentMoveIntentRecord,\n  state: DocumentMoveIntentSyncState,\n): void {\n  state.runtime.util.log(\n    `Container contents: synced queued document move ${intent.documentId}`,\n  );\n}\n\nasync function settleMovedDocumentIntent<TRuntime>(input: {\n  failure: DocumentMoveFailureState;\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  intent: DocumentMoveIntentRecord;\n  isCurrent: () => boolean;\n  moved: NonNullable<Awaited<ReturnType<typeof moveRemoteContainerDocument>>>;\n  state: DocumentMoveIntentSyncState;\n  unavailable: boolean;\n}): Promise<DocumentMoveIntentReplayResult> {\n  const { intent, moved, state } = input;\n  if (\n    !(await persistMovedDocumentReplay({\n      host: input.host,\n      intent,\n      isCurrent: input.isCurrent,\n      moved,\n      state,\n    }))\n  ) {\n    if (!input.isCurrent()) return \"abandoned\";\n    await recordPendingDocumentMoveIntentError({\n      documentId: intent.documentId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Document move replay could not relink the local document\",\n      state,\n    });\n    return \"failed\";\n  }\n  if (moved.status === \"partial\") {\n    await recordPendingDocumentMoveIntentError({\n      // An unlink refused for permissions parks like any other denied\n      // move (row 7); other partials keep row 15's replay.\n      denied: input.failure.sawPermissionDenial,\n      documentId: intent.documentId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Remote document move partially applied; retry required\",\n      state,\n      // Terminal only when the refresh proved the destination itself gone\n      // after the link had already landed; a vanished unlink alone stays\n      // pending with its live link for the next pass to revoke.\n      unavailable: input.unavailable,\n    });\n    return \"partial\";\n  }\n\n  logSyncedDocumentMove(intent, state);\n  return \"moved\";\n}\n\nasync function trySyncPendingDocumentMoveIntent<TRuntime>(input: {\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  isCreatePending: (containerId: string) => boolean;\n  isRemoteSyncBlocked: (organizationId: string) => boolean;\n  isCurrent: () => boolean;\n  intent: DocumentMoveIntentRecord;\n  state: DocumentMoveIntentSyncState;\n}): Promise<DocumentMoveIntentReplayResult> {\n  const { host, intent, state } = input;\n  const available = availableDocumentLinkIntent(intent, (id) =>\n    state.containersById.has(id),\n  );\n  const preflight = await resolveMoveIntentPreflight({\n    ...input,\n    intent: available.intent,\n  });\n  if (preflight.result !== undefined) {\n    return preflight.result;\n  }\n  const { existingDocument } = preflight;\n\n  try {\n    const outcome = await moveWithVanishedContainerRefresh({\n      apiClient: state.runtime.apiClient,\n      attempt: (onFailure) =>\n        movePendingDocumentIntent({\n          existingContainerId: existingDocument.containerId,\n          host,\n          isCurrent: input.isCurrent,\n          intent: available.intent,\n          onFailure,\n          state,\n        }),\n      execSql: state.runtime.infra.execSql,\n      existingContainerId: existingDocument.containerId,\n      intent: available.intent,\n      isCurrent: input.isCurrent,\n    });\n    if (outcome === \"abandoned\" || !input.isCurrent()) return \"abandoned\";\n    if (!outcome.moved) {\n      await recordRejectedDocumentMove({\n        failure: outcome.failure,\n        intent,\n        isCurrent: input.isCurrent,\n        state,\n        unavailable: outcome.unavailable,\n      });\n      return \"failed\";\n    }\n    return await settleMovedDocumentIntent({\n      failure: outcome.failure,\n      host,\n      intent,\n      isCurrent: input.isCurrent,\n      moved: available.deferred\n        ? { ...outcome.moved, status: \"partial\" }\n        : outcome.moved,\n      state,\n      unavailable: outcome.unavailable,\n    });\n  } catch (error: unknown) {\n    if (!input.isCurrent()) return \"abandoned\";\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      state.runtime.util.reportSecurityIncident,\n      {\n        objectId: intent.documentId,\n        objectKind: \"document\",\n        operation: \"document.move.replay\",\n      },\n    );\n    if (!input.isCurrent()) return \"abandoned\";\n    const message = errorMessage(error);\n    await recordPendingDocumentMoveIntentError({\n      documentId: intent.documentId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: `Failed to sync document move: ${message}`,\n      state,\n    });\n    return \"failed\";\n  }\n}\n\nexport async function syncPendingDocumentMoveIntents<TRuntime>(input: {\n  host: DocumentMoveIntentSyncHost<TRuntime>;\n  /** A destination whose create has not settled takes no document yet. */\n  isCreatePending: (containerId: string) => boolean;\n  isCurrent: () => boolean;\n  isRemoteSyncBlocked: (organizationId: string) => boolean;\n  state: DocumentMoveIntentSyncState;\n}): Promise<number> {\n  if (!input.isCurrent()) return 0;\n  const lifecycleState = input.state;\n  const state = { ...lifecycleState };\n  const execSql = state.runtime.infra.execSql;\n  if (!deniedReplayMatchesGeneration(lifecycleState, execSql)) {\n    await sqlDocumentMoveIntentPersistence.resetDeniedMoveIntents(execSql);\n    if (!input.isCurrent()) return 0;\n    markDeniedReplayGeneration(lifecycleState, execSql);\n  }\n  const pendingIntents =\n    await sqlDocumentMoveIntentPersistence.listPendingMoveIntents(execSql);\n  if (!input.isCurrent()) return 0;\n  let movedCount = 0;\n\n  for (const intent of pendingIntents) {\n    if (!input.isCurrent()) return movedCount;\n    const result = await trySyncPendingDocumentMoveIntent({\n      host: input.host,\n      isCreatePending: input.isCreatePending,\n      isCurrent: input.isCurrent,\n      isRemoteSyncBlocked: input.isRemoteSyncBlocked,\n      intent,\n      state,\n    });\n    if (result === \"abandoned\") return movedCount;\n    // A \"partial\" result (link applied, unlink still pending) must not count:\n    // the caller re-arms this same structural lane whenever the count is\n    // positive, so a deterministically failing unlink hot-looped the pump\n    // (issue #1744). The intent row stays pending; event-driven, manual, and\n    // startup lane requests retry it.\n    if (result === \"moved\") {\n      movedCount += 1;\n    }\n  }\n\n  return movedCount;\n}\n"]}

package/workflows/container-contents/documentPurge.d.ts

@@ -1,6 +1,6 @@
 import type { DocumentPurgeResponse } from "../../internal/validators/response/index.js";
 import type { StoredDocumentKind } from "../../data/documents/documentKinds.js";
-import type { ProjectionUserKeyResolver } from "../../data/keyingProjectionVerification.js";
+import type { ProjectionUserKeyResolver } from "../../data/keyingProjectionVerification/index.js";
 import { type DocumentsPersistence, deletePersistedDocument } from "../documents/index.js";
 import type { SubtreePurgeRoot } from "../documents/subtreePurgeScope.js";
 import type { ContainerContentsWorkflowRuntime } from "./runtime.js";

package/workflows/container-contents/documentPurge.js

@@ -1,6 +1,6 @@
-import { errorMessage } from "../../data/errorMessage.js";
 import { reportAndRethrowKeyingVerificationError } from "../../data/keyingProjectionVerification/error.js";
 import { rethrowProjectionVerificationCancelled } from "../../data/keyingProjectionVerification/types.js";
+import { errorMessage } from "../../data/shared/errorMessage.js";
 import { defaultDocumentsPersistence, deletePersistedDocument, purgeRemoteDocument, reclaimDocumentOrphanBlobs, resolveDocumentCreateAuthor, } from "../documents/index.js";
 import { ensureDocumentClientProjectionTables } from "../documents/persistence.js";
 import { createRuntimePrincipalPolicyWarmer } from "../principals/runtimePolicyWarmer.js";

package/workflows/container-contents/documentPurge.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentPurge.js","sourceRoot":"","sources":["documentPurge.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,sCAAsC,EAAE,MAAM,+CAA+C,CAAC;AACvG,OAAO,EAEL,2BAA2B,EAC3B,uBAAuB,EACvB,mBAAmB,EACnB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oCAAoC,EAAE,MAAM,0BAA0B,CAAC;AAEhF,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC;AA6CvF,KAAK,UAAU,yBAAyB,CAAC,KASxC;IACC,OAAO,KAAK,CAAC,WAAW,CAAC,8BAA8B,CACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,EAChB,KAAK,EAAE,kBAAkB,EAAE,EAAE;QAC3B,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,oCAAoC,CAC/E;YACE,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,KAAK,CAAC,MAAM;SACtB,CACF,CAAC;QACF,MAAM,KAAK,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACnD,CAAC,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAS1C;IACC,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,oCAAoC,CAAC;QACzC,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB;QAC1D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;KACrC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CACzD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,KAAK,CAAC,MAAM,CACb,CAAC;IACF,IAAI,cAAc,IAAI,cAAc,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,cAAc;QAC5B,CAAC,CAAC,MAAM,uBAAuB,CAAC;YAC5B,yBAAyB,EAAE,KAAK,CAAC,gBAAgB;YACjD,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB;YAC1D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACpC,cAAc;YACd,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;QACJ,CAAC,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAAwC;IAExC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC9C,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,2BAA2B,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,mDAAmD,CACtG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;YACzC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM;YACN,UAAU;YACV,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,eAAe,EAAE,KAAK,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE;gBAC9C,OAAO,GAAG,MAAM,2BAA2B,CAAC;oBAC1C,gBAAgB;oBAChB,UAAU;oBACV,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,MAAM;oBACN,WAAW;oBACX,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YACD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,+BAA+B,EAC7B,kCAAkC,CAAC,OAAO,CAAC;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,cAAc,UAAU,GAAG,CAC9E,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,mCAAmC,MAAM,cAAc,UAAU,GAAG,CACrE,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,8DAA8D;QAC9D,sCAAsC,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,uCAAuC,CAC3C,KAAK,EACL,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,gBAAgB;SAC5B,CACF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,cAAc,UAAU,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAQjD;IACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAClC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,2BAA2B,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,MAAM,WAAW,CAAC,YAAY,CACnD,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,MAAM,CACP,CAAC;QACF,IACE,CAAC,cAAc;YACf,cAAc,CAAC,UAAU,KAAK,IAAI;YAClC,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS;gBACtC,cAAc,CAAC,WAAW,KAAK,KAAK,CAAC,mBAAmB,CAAC,EAC3D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,yDAAyD,MAAM,wCAAwC,CACxG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;YAC5C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;YAC1D,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,kBAAkB;YACpD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,cAAc;YACd,OAAO,EAAE,MAAM;YACf,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,yDAAyD,MAAM,+BAA+B,CAC/F,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAC;QACzE,OAAO;YACL,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,wBAAwB,EAAE,EAAE;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,uDAAuD,MAAM,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CACxF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import type { DocumentPurgeResponse } from \"@tearleads/validators/response\";\nimport type { StoredDocumentKind } from \"../../data/documents/documentKinds\";\nimport { errorMessage } from \"../../data/errorMessage\";\nimport type { ProjectionUserKeyResolver } from \"../../data/keyingProjectionVerification\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../data/keyingProjectionVerification/error\";\nimport { rethrowProjectionVerificationCancelled } from \"../../data/keyingProjectionVerification/types\";\nimport {\n  type DocumentsPersistence,\n  defaultDocumentsPersistence,\n  deletePersistedDocument,\n  purgeRemoteDocument,\n  reclaimDocumentOrphanBlobs,\n  resolveDocumentCreateAuthor,\n} from \"../documents\";\nimport { ensureDocumentClientProjectionTables } from \"../documents/persistence\";\nimport type { SubtreePurgeRoot } from \"../documents/subtreePurgeScope\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../principals/runtimePolicyWarmer\";\nimport type { ContainerContentsWorkflowRuntime } from \"./runtime\";\n\ntype ContainerDocumentPurgeApi = Pick<\n  ContainerContentsWorkflowRuntime[\"apiClient\"],\n  | \"getPrincipalPolicyPages\"\n  | \"getProjectionPolicyHistoryPages\"\n  | \"getDocumentPurgeProof\"\n  | \"getDocumentWriterProjectionResult\"\n  | \"purgeDocument\"\n>;\ntype DocumentPurgeResult =\n  | DocumentPurgeResponse\n  | {\n      readonly documentId: string;\n      readonly purgedAt: string;\n      readonly reclaimedBlobStorageKeys: readonly string[];\n    }\n  | null;\n\ninterface ContainerDocumentPurgeRuntime\n  extends Pick<\n    ContainerContentsWorkflowRuntime,\n    | \"auth\"\n    | \"crypto\"\n    | \"infra\"\n    | \"resolveTrustedUserIdentity\"\n    | \"state\"\n    | \"util\"\n  > {\n  apiClient: ContainerDocumentPurgeApi;\n}\n\ninterface PurgeRemoteContainerDocumentInput {\n  beforeSubmit?: (() => Promise<boolean>) | undefined;\n  documentId: string;\n  expectedSubtreeRoot?: SubtreePurgeRoot | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  documentKind: StoredDocumentKind;\n  noteId: string;\n  persistence?: DocumentsPersistence | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  runtime: ContainerDocumentPurgeRuntime;\n}\n\nasync function deleteAbsentDocumentState(input: {\n  readonly commitPurgeProof: (\n    transactionExecSql: ContainerDocumentPurgeRuntime[\"infra\"][\"execSql\"],\n  ) => Promise<void>;\n  readonly documentId: string;\n  readonly documentKind: StoredDocumentKind;\n  readonly noteId: string;\n  readonly persistence: DocumentsPersistence;\n  readonly runtime: ContainerDocumentPurgeRuntime;\n}): Promise<boolean> {\n  return input.persistence.deleteDocumentSideRowsIfAbsent(\n    input.runtime.infra.execSql,\n    input.noteId,\n    input.documentId,\n    async (transactionExecSql) => {\n      await input.runtime.infra.documentProjectors.deleteStoredDocumentClientProjection(\n        {\n          documentKind: input.documentKind,\n          execSql: transactionExecSql,\n          localId: input.noteId,\n        },\n      );\n      await input.commitPurgeProof(transactionExecSql);\n    },\n  );\n}\n\nasync function commitVerifiedDocumentPurge(input: {\n  readonly commitPurgeProof: (\n    transactionExecSql: ContainerDocumentPurgeRuntime[\"infra\"][\"execSql\"],\n  ) => Promise<void>;\n  readonly documentId: string;\n  readonly documentKind: StoredDocumentKind;\n  readonly noteId: string;\n  readonly persistence: DocumentsPersistence;\n  readonly runtime: ContainerDocumentPurgeRuntime;\n}): Promise<boolean> {\n  await input.persistence.ensureSchema(input.runtime.infra.execSql);\n  await ensureDocumentClientProjectionTables({\n    documentProjectors: input.runtime.infra.documentProjectors,\n    execSql: input.runtime.infra.execSql,\n  });\n  const expectedRecord = await input.persistence.loadDocument(\n    input.runtime.infra.execSql,\n    input.noteId,\n  );\n  if (expectedRecord && expectedRecord.documentId !== input.documentId) {\n    throw new Error(\n      \"Local document identity changed while its remote purge was committing\",\n    );\n  }\n  const deleted = expectedRecord\n    ? await deletePersistedDocument({\n        beforeDeleteInTransaction: input.commitPurgeProof,\n        documentProjectors: input.runtime.infra.documentProjectors,\n        execSql: input.runtime.infra.execSql,\n        expectedRecord,\n        localId: input.noteId,\n        persistence: input.persistence,\n      })\n    : await deleteAbsentDocumentState(input);\n  if (!deleted) {\n    throw new Error(\n      \"Local document state changed while its remote purge was committing\",\n    );\n  }\n  return true;\n}\n\nexport async function purgeRemoteContainerDocument(\n  input: PurgeRemoteContainerDocumentInput,\n): Promise<DocumentPurgeResult> {\n  const { documentId, noteId, runtime } = input;\n  const persistence = input.persistence ?? defaultDocumentsPersistence;\n  try {\n    const author = resolveDocumentCreateAuthor(runtime);\n    if (!author) {\n      runtime.util.log(\n        `Container contents: failed to purge note ${noteId} because the local signing context is unavailable`,\n      );\n      return null;\n    }\n    let deleted = false;\n    const response = await purgeRemoteDocument({\n      apiClient: runtime.apiClient,\n      beforeSubmit: input.beforeSubmit,\n      author,\n      documentId,\n      expectedSubtreeRoot: input.expectedSubtreeRoot,\n      stillCurrent: input.stillCurrent,\n      execSql: runtime.infra.execSql,\n      onVerifiedPurge: async ({ commitPurgeProof }) => {\n        deleted = await commitVerifiedDocumentPurge({\n          commitPurgeProof,\n          documentId,\n          documentKind: input.documentKind,\n          noteId,\n          persistence,\n          runtime,\n        });\n      },\n      resolveProjectionUserKey: input.resolveProjectionUserKey,\n      warmReferencedPrincipalPolicies:\n        createRuntimePrincipalPolicyWarmer(runtime),\n    });\n    if (!response) {\n      runtime.util.log(\n        `Container contents: failed to purge note ${noteId} (document ${documentId})`,\n      );\n      return null;\n    }\n    if (deleted) {\n      void reclaimDocumentOrphanBlobs(runtime, persistence);\n    }\n    runtime.util.log(\n      `Container contents: purged note ${noteId} (document ${documentId})`,\n    );\n    return response;\n  } catch (error) {\n    // A cancelled verification is neither a failure nor a completed purge; the\n    // caller that owns the generation decides what to do with it.\n    rethrowProjectionVerificationCancelled(error);\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: documentId,\n        objectKind: \"document\",\n        operation: \"document.purge\",\n      },\n    );\n    runtime.util.log(\n      `Container contents: failed to purge note ${noteId} (document ${documentId}): ${errorMessage(error)}`,\n    );\n    return null;\n  }\n}\n\ninterface ContainerDocumentLocalPurgeRuntime\n  extends Pick<ContainerContentsWorkflowRuntime, \"infra\" | \"util\"> {}\n\nexport async function purgeLocalContainerDocument(input: {\n  beforeDeleteInTransaction?: Parameters<\n    typeof deletePersistedDocument\n  >[0][\"beforeDeleteInTransaction\"];\n  noteId: string;\n  expectedContainerId?: string | null | undefined;\n  persistence?: DocumentsPersistence | undefined;\n  runtime: ContainerDocumentLocalPurgeRuntime;\n}): Promise<DocumentPurgeResult> {\n  const { noteId, runtime } = input;\n  const persistence = input.persistence ?? defaultDocumentsPersistence;\n  try {\n    await persistence.ensureSchema(runtime.infra.execSql);\n    const expectedRecord = await persistence.loadDocument(\n      runtime.infra.execSql,\n      noteId,\n    );\n    if (\n      !expectedRecord ||\n      expectedRecord.documentId !== null ||\n      (input.expectedContainerId !== undefined &&\n        expectedRecord.containerId !== input.expectedContainerId)\n    ) {\n      runtime.util.log(\n        `Container contents: local-only purge refused for note ${noteId} because it is absent or remote-backed`,\n      );\n      return null;\n    }\n    const deleted = await deletePersistedDocument({\n      beforeDeleteInTransaction: input.beforeDeleteInTransaction,\n      documentProjectors: runtime.infra.documentProjectors,\n      execSql: runtime.infra.execSql,\n      expectedRecord,\n      localId: noteId,\n      persistence,\n    });\n    if (!deleted) {\n      runtime.util.log(\n        `Container contents: local-only purge refused for note ${noteId} because its identity changed`,\n      );\n      return null;\n    }\n    if (deleted) {\n      void reclaimDocumentOrphanBlobs(runtime, persistence);\n    }\n    runtime.util.log(`Container contents: purged local-only note ${noteId}`);\n    return {\n      documentId: noteId,\n      purgedAt: new Date().toISOString(),\n      reclaimedBlobStorageKeys: [],\n    };\n  } catch (error) {\n    runtime.util.log(\n      `Container contents: failed to purge local-only note ${noteId}: ${errorMessage(error)}`,\n    );\n    return null;\n  }\n}\n"]}
+{"version":3,"file":"documentPurge.js","sourceRoot":"","sources":["documentPurge.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,sCAAsC,EAAE,MAAM,+CAA+C,CAAC;AACvG,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAEL,2BAA2B,EAC3B,uBAAuB,EACvB,mBAAmB,EACnB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oCAAoC,EAAE,MAAM,0BAA0B,CAAC;AAEhF,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC;AA6CvF,KAAK,UAAU,yBAAyB,CAAC,KASxC;IACC,OAAO,KAAK,CAAC,WAAW,CAAC,8BAA8B,CACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,EAChB,KAAK,EAAE,kBAAkB,EAAE,EAAE;QAC3B,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,oCAAoC,CAC/E;YACE,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,KAAK,CAAC,MAAM;SACtB,CACF,CAAC;QACF,MAAM,KAAK,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACnD,CAAC,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAS1C;IACC,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,oCAAoC,CAAC;QACzC,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB;QAC1D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;KACrC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CACzD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,KAAK,CAAC,MAAM,CACb,CAAC;IACF,IAAI,cAAc,IAAI,cAAc,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,cAAc;QAC5B,CAAC,CAAC,MAAM,uBAAuB,CAAC;YAC5B,yBAAyB,EAAE,KAAK,CAAC,gBAAgB;YACjD,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB;YAC1D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACpC,cAAc;YACd,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;QACJ,CAAC,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAAwC;IAExC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC9C,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,2BAA2B,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,mDAAmD,CACtG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;YACzC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM;YACN,UAAU;YACV,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,eAAe,EAAE,KAAK,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE;gBAC9C,OAAO,GAAG,MAAM,2BAA2B,CAAC;oBAC1C,gBAAgB;oBAChB,UAAU;oBACV,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,MAAM;oBACN,WAAW;oBACX,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YACD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,+BAA+B,EAC7B,kCAAkC,CAAC,OAAO,CAAC;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,cAAc,UAAU,GAAG,CAC9E,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,mCAAmC,MAAM,cAAc,UAAU,GAAG,CACrE,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,8DAA8D;QAC9D,sCAAsC,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,uCAAuC,CAC3C,KAAK,EACL,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,gBAAgB;SAC5B,CACF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,cAAc,UAAU,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAQjD;IACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAClC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,2BAA2B,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,MAAM,WAAW,CAAC,YAAY,CACnD,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,MAAM,CACP,CAAC;QACF,IACE,CAAC,cAAc;YACf,cAAc,CAAC,UAAU,KAAK,IAAI;YAClC,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS;gBACtC,cAAc,CAAC,WAAW,KAAK,KAAK,CAAC,mBAAmB,CAAC,EAC3D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,yDAAyD,MAAM,wCAAwC,CACxG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;YAC5C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;YAC1D,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,kBAAkB;YACpD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,cAAc;YACd,OAAO,EAAE,MAAM;YACf,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,yDAAyD,MAAM,+BAA+B,CAC/F,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAC;QACzE,OAAO;YACL,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,wBAAwB,EAAE,EAAE;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,uDAAuD,MAAM,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CACxF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import type { DocumentPurgeResponse } from \"@tearleads/validators/response\";\nimport type { StoredDocumentKind } from \"../../data/documents/documentKinds\";\nimport type { ProjectionUserKeyResolver } from \"../../data/keyingProjectionVerification\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../data/keyingProjectionVerification/error\";\nimport { rethrowProjectionVerificationCancelled } from \"../../data/keyingProjectionVerification/types\";\nimport { errorMessage } from \"../../data/shared/errorMessage\";\nimport {\n  type DocumentsPersistence,\n  defaultDocumentsPersistence,\n  deletePersistedDocument,\n  purgeRemoteDocument,\n  reclaimDocumentOrphanBlobs,\n  resolveDocumentCreateAuthor,\n} from \"../documents\";\nimport { ensureDocumentClientProjectionTables } from \"../documents/persistence\";\nimport type { SubtreePurgeRoot } from \"../documents/subtreePurgeScope\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../principals/runtimePolicyWarmer\";\nimport type { ContainerContentsWorkflowRuntime } from \"./runtime\";\n\ntype ContainerDocumentPurgeApi = Pick<\n  ContainerContentsWorkflowRuntime[\"apiClient\"],\n  | \"getPrincipalPolicyPages\"\n  | \"getProjectionPolicyHistoryPages\"\n  | \"getDocumentPurgeProof\"\n  | \"getDocumentWriterProjectionResult\"\n  | \"purgeDocument\"\n>;\ntype DocumentPurgeResult =\n  | DocumentPurgeResponse\n  | {\n      readonly documentId: string;\n      readonly purgedAt: string;\n      readonly reclaimedBlobStorageKeys: readonly string[];\n    }\n  | null;\n\ninterface ContainerDocumentPurgeRuntime\n  extends Pick<\n    ContainerContentsWorkflowRuntime,\n    | \"auth\"\n    | \"crypto\"\n    | \"infra\"\n    | \"resolveTrustedUserIdentity\"\n    | \"state\"\n    | \"util\"\n  > {\n  apiClient: ContainerDocumentPurgeApi;\n}\n\ninterface PurgeRemoteContainerDocumentInput {\n  beforeSubmit?: (() => Promise<boolean>) | undefined;\n  documentId: string;\n  expectedSubtreeRoot?: SubtreePurgeRoot | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  documentKind: StoredDocumentKind;\n  noteId: string;\n  persistence?: DocumentsPersistence | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  runtime: ContainerDocumentPurgeRuntime;\n}\n\nasync function deleteAbsentDocumentState(input: {\n  readonly commitPurgeProof: (\n    transactionExecSql: ContainerDocumentPurgeRuntime[\"infra\"][\"execSql\"],\n  ) => Promise<void>;\n  readonly documentId: string;\n  readonly documentKind: StoredDocumentKind;\n  readonly noteId: string;\n  readonly persistence: DocumentsPersistence;\n  readonly runtime: ContainerDocumentPurgeRuntime;\n}): Promise<boolean> {\n  return input.persistence.deleteDocumentSideRowsIfAbsent(\n    input.runtime.infra.execSql,\n    input.noteId,\n    input.documentId,\n    async (transactionExecSql) => {\n      await input.runtime.infra.documentProjectors.deleteStoredDocumentClientProjection(\n        {\n          documentKind: input.documentKind,\n          execSql: transactionExecSql,\n          localId: input.noteId,\n        },\n      );\n      await input.commitPurgeProof(transactionExecSql);\n    },\n  );\n}\n\nasync function commitVerifiedDocumentPurge(input: {\n  readonly commitPurgeProof: (\n    transactionExecSql: ContainerDocumentPurgeRuntime[\"infra\"][\"execSql\"],\n  ) => Promise<void>;\n  readonly documentId: string;\n  readonly documentKind: StoredDocumentKind;\n  readonly noteId: string;\n  readonly persistence: DocumentsPersistence;\n  readonly runtime: ContainerDocumentPurgeRuntime;\n}): Promise<boolean> {\n  await input.persistence.ensureSchema(input.runtime.infra.execSql);\n  await ensureDocumentClientProjectionTables({\n    documentProjectors: input.runtime.infra.documentProjectors,\n    execSql: input.runtime.infra.execSql,\n  });\n  const expectedRecord = await input.persistence.loadDocument(\n    input.runtime.infra.execSql,\n    input.noteId,\n  );\n  if (expectedRecord && expectedRecord.documentId !== input.documentId) {\n    throw new Error(\n      \"Local document identity changed while its remote purge was committing\",\n    );\n  }\n  const deleted = expectedRecord\n    ? await deletePersistedDocument({\n        beforeDeleteInTransaction: input.commitPurgeProof,\n        documentProjectors: input.runtime.infra.documentProjectors,\n        execSql: input.runtime.infra.execSql,\n        expectedRecord,\n        localId: input.noteId,\n        persistence: input.persistence,\n      })\n    : await deleteAbsentDocumentState(input);\n  if (!deleted) {\n    throw new Error(\n      \"Local document state changed while its remote purge was committing\",\n    );\n  }\n  return true;\n}\n\nexport async function purgeRemoteContainerDocument(\n  input: PurgeRemoteContainerDocumentInput,\n): Promise<DocumentPurgeResult> {\n  const { documentId, noteId, runtime } = input;\n  const persistence = input.persistence ?? defaultDocumentsPersistence;\n  try {\n    const author = resolveDocumentCreateAuthor(runtime);\n    if (!author) {\n      runtime.util.log(\n        `Container contents: failed to purge note ${noteId} because the local signing context is unavailable`,\n      );\n      return null;\n    }\n    let deleted = false;\n    const response = await purgeRemoteDocument({\n      apiClient: runtime.apiClient,\n      beforeSubmit: input.beforeSubmit,\n      author,\n      documentId,\n      expectedSubtreeRoot: input.expectedSubtreeRoot,\n      stillCurrent: input.stillCurrent,\n      execSql: runtime.infra.execSql,\n      onVerifiedPurge: async ({ commitPurgeProof }) => {\n        deleted = await commitVerifiedDocumentPurge({\n          commitPurgeProof,\n          documentId,\n          documentKind: input.documentKind,\n          noteId,\n          persistence,\n          runtime,\n        });\n      },\n      resolveProjectionUserKey: input.resolveProjectionUserKey,\n      warmReferencedPrincipalPolicies:\n        createRuntimePrincipalPolicyWarmer(runtime),\n    });\n    if (!response) {\n      runtime.util.log(\n        `Container contents: failed to purge note ${noteId} (document ${documentId})`,\n      );\n      return null;\n    }\n    if (deleted) {\n      void reclaimDocumentOrphanBlobs(runtime, persistence);\n    }\n    runtime.util.log(\n      `Container contents: purged note ${noteId} (document ${documentId})`,\n    );\n    return response;\n  } catch (error) {\n    // A cancelled verification is neither a failure nor a completed purge; the\n    // caller that owns the generation decides what to do with it.\n    rethrowProjectionVerificationCancelled(error);\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: documentId,\n        objectKind: \"document\",\n        operation: \"document.purge\",\n      },\n    );\n    runtime.util.log(\n      `Container contents: failed to purge note ${noteId} (document ${documentId}): ${errorMessage(error)}`,\n    );\n    return null;\n  }\n}\n\ninterface ContainerDocumentLocalPurgeRuntime\n  extends Pick<ContainerContentsWorkflowRuntime, \"infra\" | \"util\"> {}\n\nexport async function purgeLocalContainerDocument(input: {\n  beforeDeleteInTransaction?: Parameters<\n    typeof deletePersistedDocument\n  >[0][\"beforeDeleteInTransaction\"];\n  noteId: string;\n  expectedContainerId?: string | null | undefined;\n  persistence?: DocumentsPersistence | undefined;\n  runtime: ContainerDocumentLocalPurgeRuntime;\n}): Promise<DocumentPurgeResult> {\n  const { noteId, runtime } = input;\n  const persistence = input.persistence ?? defaultDocumentsPersistence;\n  try {\n    await persistence.ensureSchema(runtime.infra.execSql);\n    const expectedRecord = await persistence.loadDocument(\n      runtime.infra.execSql,\n      noteId,\n    );\n    if (\n      !expectedRecord ||\n      expectedRecord.documentId !== null ||\n      (input.expectedContainerId !== undefined &&\n        expectedRecord.containerId !== input.expectedContainerId)\n    ) {\n      runtime.util.log(\n        `Container contents: local-only purge refused for note ${noteId} because it is absent or remote-backed`,\n      );\n      return null;\n    }\n    const deleted = await deletePersistedDocument({\n      beforeDeleteInTransaction: input.beforeDeleteInTransaction,\n      documentProjectors: runtime.infra.documentProjectors,\n      execSql: runtime.infra.execSql,\n      expectedRecord,\n      localId: noteId,\n      persistence,\n    });\n    if (!deleted) {\n      runtime.util.log(\n        `Container contents: local-only purge refused for note ${noteId} because its identity changed`,\n      );\n      return null;\n    }\n    if (deleted) {\n      void reclaimDocumentOrphanBlobs(runtime, persistence);\n    }\n    runtime.util.log(`Container contents: purged local-only note ${noteId}`);\n    return {\n      documentId: noteId,\n      purgedAt: new Date().toISOString(),\n      reclaimedBlobStorageKeys: [],\n    };\n  } catch (error) {\n    runtime.util.log(\n      `Container contents: failed to purge local-only note ${noteId}: ${errorMessage(error)}`,\n    );\n    return null;\n  }\n}\n"]}

package/workflows/container-contents/documentQueries/rows.js

@@ -1,5 +1,5 @@
-import { normalizeEffectiveAccessLevel } from "../../../data/accessLevel.js";
 import { DEFAULT_DOCUMENT_KIND } from "../../../data/documents/documentConstants.js";
+import { normalizeEffectiveAccessLevel } from "../../../data/keying/accessLevel.js";
 import { createContainerDocumentObjectSyncState, } from "../syncState.js";
 export function compareContainerContentsDocumentSummaries(left, right) {
     if (right.updatedAt !== left.updatedAt) {