@tearleads/client-sdk 0.1.61 → 0.1.63

package/workflows/documents/purge/persistedDocumentRemoval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistedDocumentRemoval.js","sourceRoot":"","sources":["persistedDocumentRemoval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAEL,gCAAgC,GACjC,MAAM,uCAAuC,CAAC;AAM/C,OAAO,EAEL,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,oCAAoC,EAAE,MAAM,gBAAgB,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAqB7C;IACC,MAAM,kBAAkB,GAAG,gCAAgC,CACzD,KAAK,CAAC,kBAAkB,CACzB,CAAC;IACF,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,oCAAoC,CAAC;QACzC,kBAAkB;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IACH,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QACpE,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,mDAAmD;QACnD,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACtE,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,eAAe,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,uBAAuB,CACrE,aAAa,EACb,KAAK,CAAC,cAAc,EACpB,CAAC,kBAAkB,EAAE,EAAE,CACrB,CAAC,KAAK,IAAI,EAAE;gBACV,MAAM,kBAAkB,CAAC,oCAAoC,CAAC;oBAC5D,YAAY,EACV,KAAK,CAAC,cAAc,EAAE,YAAY,IAAI,qBAAqB;oBAC7D,OAAO,EAAE,kBAAkB;oBAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC,yBAAyB,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC9D,CAAC,CAAC,EAAE,CACP,CAAC;YACF,IAAI,CAAC,eAAe;gBAAE,OAAO;QAC/B,CAAC;aAAM,CAAC;YACN,IAAI,KAAK,CAAC,yBAAyB,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CACnD,aAAa,EACb,KAAK,CAAC,OAAO,CACd,CAAC;YACF,MAAM,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACrE,MAAM,kBAAkB,CAAC,oCAAoC,CAAC;gBAC5D,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,qBAAqB;gBAC7D,OAAO,EAAE,aAAa;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC9B,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAID;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAMrD;IACC,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,sBAAsB,EAAE,CAAC;QAC9C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,CAAC,sBAAsB,CAC7C,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,kBAAkB,EACxB,KAAK,CAAC,kBAAkB,CACzB,CAAC;AACJ,CAAC","sourcesContent":["import { DEFAULT_DOCUMENT_KIND } from \"../../../data/documents/documentConstants\";\nimport {\n  type DocumentProjectorRegistryInput,\n  resolveDocumentProjectorRegistry,\n} from \"../../../data/documents/documentKinds\";\nimport type {\n  DiscardDocumentToShellResult,\n  DocumentsPersistence,\n  StoredDocumentRecord,\n} from \"../../../data/persistence/documents/documentsPersistence\";\nimport {\n  type ExecSql,\n  runSerializedSqlMutation,\n} from \"../../../data/sqlite/sqlSchema\";\nimport { ensureDocumentClientProjectionTables } from \"../persistence\";\n\nexport async function deletePersistedDocument(input: {\n  /**\n   * Runs in the same SQLite transaction as the matched document teardown.\n   * Used to atomically pin a verified terminal purge proof.\n   */\n  beforeDeleteInTransaction?:\n    | ((transactionExecSql: ExecSql) => Promise<void>)\n    | undefined;\n  canStartDurableMutation?: (() => boolean) | undefined;\n  documentProjectors: DocumentProjectorRegistryInput;\n  execSql: ExecSql;\n  expectedRecord?: StoredDocumentRecord | undefined;\n  localId: string;\n  /**\n   * Runs INSIDE the serialized mutation, after the deletes commit: callers\n   * invalidate their in-memory store generation here so any failure handler\n   * queued behind this mutation observes the invalidation and cannot\n   * resurrect a row the deletion just removed.\n   */\n  onDeletedInMutation?: (() => void) | undefined;\n  persistence: DocumentsPersistence;\n}): Promise<boolean> {\n  const documentProjectors = resolveDocumentProjectorRegistry(\n    input.documentProjectors,\n  );\n  await input.persistence.ensureSchema(input.execSql);\n  await ensureDocumentClientProjectionTables({\n    documentProjectors,\n    execSql: input.execSql,\n  });\n  let deleted = false;\n  await runSerializedSqlMutation(input.execSql, async (lockedExecSql) => {\n    // The guard runs INSIDE the claimed mutation: the pre-claim answer can go\n    // stale while the deletion waits behind another mutation (a store reset,\n    // a replacement generation's persist), and deleting on the stale answer\n    // would wipe rows the newer generation just wrote.\n    if (input.canStartDurableMutation && !input.canStartDurableMutation()) {\n      return;\n    }\n    if (input.expectedRecord) {\n      const identityMatched = await input.persistence.deleteDocumentIfMatches(\n        lockedExecSql,\n        input.expectedRecord,\n        (transactionExecSql) =>\n          (async () => {\n            await documentProjectors.deleteStoredDocumentClientProjection({\n              documentKind:\n                input.expectedRecord?.documentKind ?? DEFAULT_DOCUMENT_KIND,\n              execSql: transactionExecSql,\n              localId: input.localId,\n            });\n            await input.beforeDeleteInTransaction?.(transactionExecSql);\n          })(),\n      );\n      if (!identityMatched) return;\n    } else {\n      if (input.beforeDeleteInTransaction) {\n        throw new Error(\n          \"Atomic document purge checkpointing requires an expected document record\",\n        );\n      }\n      const existing = await input.persistence.loadDocument(\n        lockedExecSql,\n        input.localId,\n      );\n      await input.persistence.deleteDocument(lockedExecSql, input.localId);\n      await documentProjectors.deleteStoredDocumentClientProjection({\n        documentKind: existing?.documentKind ?? DEFAULT_DOCUMENT_KIND,\n        execSql: lockedExecSql,\n        localId: input.localId,\n      });\n    }\n    input.onDeletedInMutation?.();\n    deleted = true;\n  });\n  return deleted;\n}\n\nexport type DiscardedDocumentShellResult = DiscardDocumentToShellResult;\n\n/**\n * Convert a stuck document's local state to the freshly-discovered-share\n * shell. The persistence implementation owns the whole sequence — the\n * eligibility checks (local-only, unlinked, or move-pending documents are\n * refused), the row teardown, the document-kind client-projection clear, and\n * the shell upsert — and commits it as ONE transaction, so an interruption\n * leaves either the fully old or the fully shelled document (never, e.g., a\n * discarded contact whose projected fields stay visible). Implementations\n * without the full document schema do not offer the operation and refuse.\n *\n * Returns the reclaimable storage keys on success — the deleted rows were\n * the only durable pointers to those bytes, so the caller reclaims them.\n */\nexport async function discardPersistedDocumentToShell(input: {\n  documentProjectors: DocumentProjectorRegistryInput;\n  execSql: ExecSql;\n  expectedDocumentId: string;\n  localId: string;\n  persistence: DocumentsPersistence;\n}): Promise<DiscardedDocumentShellResult> {\n  await input.persistence.ensureSchema(input.execSql);\n  if (!input.persistence.discardDocumentToShell) {\n    return { discarded: false };\n  }\n  return input.persistence.discardDocumentToShell(\n    input.execSql,\n    input.localId,\n    input.expectedDocumentId,\n    input.documentProjectors,\n  );\n}\n"]}

package/workflows/documents/purge/subtreePurgeScope.d.ts

@@ -0,0 +1,8 @@
+import type { AccessManifestBundleWireResponse } from "../../../internal/validators/response/index.js";
+/** The selected purge root and the parent the user selected it under. */
+export interface SubtreePurgeRoot {
+    readonly id: string;
+    readonly parentId: string | null;
+}
+/** Check the exact verified path that the destructive request will cite. */
+export declare function assertSubtreePurgePath(path: readonly AccessManifestBundleWireResponse[], root: SubtreePurgeRoot | undefined): void;

package/workflows/documents/purge/subtreePurgeScope.js

@@ -0,0 +1,18 @@
+import { isPlainObject } from "../../../internal/validators/isPlainObject.js";
+import { readManifestContainerId } from "../../../data/documents/shared/readers.js";
+function readSignedParentContainerId(bundle) {
+    return isPlainObject(bundle.state)
+        ? Reflect.get(bundle.state, "parentContainerId")
+        : undefined;
+}
+/** Check the exact verified path that the destructive request will cite. */
+export function assertSubtreePurgePath(path, root) {
+    if (root === undefined)
+        return;
+    const rootBundle = path.find((bundle) => readManifestContainerId(bundle) === root.id);
+    // A valid move out of the selected subtree, or a settled restore of the
+    // selected root itself, is ordinary concurrent work.
+    if (!rootBundle || readSignedParentContainerId(rootBundle) !== root.parentId)
+        throw new Error("Document placement is outside the requested purge subtree");
+}
+//# sourceMappingURL=subtreePurgeScope.js.map

package/workflows/documents/purge/subtreePurgeScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subtreePurgeScope.js","sourceRoot":"","sources":["subtreePurgeScope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAQjF,SAAS,2BAA2B,CAClC,MAAwC;IAExC,OAAO,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;QAChC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CACpC,IAAiD,EACjD,IAAkC;IAElC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAC1B,CAAC,MAAM,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CACxD,CAAC;IACF,wEAAwE;IACxE,qDAAqD;IACrD,IAAI,CAAC,UAAU,IAAI,2BAA2B,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,QAAQ;QAC1E,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;AACN,CAAC","sourcesContent":["import { isPlainObject } from \"@tearleads/validators/isPlainObject\";\nimport type { AccessManifestBundleWireResponse } from \"@tearleads/validators/response\";\nimport { readManifestContainerId } from \"../../../data/documents/shared/readers\";\n\n/** The selected purge root and the parent the user selected it under. */\nexport interface SubtreePurgeRoot {\n  readonly id: string;\n  readonly parentId: string | null;\n}\n\nfunction readSignedParentContainerId(\n  bundle: AccessManifestBundleWireResponse,\n): unknown {\n  return isPlainObject(bundle.state)\n    ? Reflect.get(bundle.state, \"parentContainerId\")\n    : undefined;\n}\n\n/** Check the exact verified path that the destructive request will cite. */\nexport function assertSubtreePurgePath(\n  path: readonly AccessManifestBundleWireResponse[],\n  root: SubtreePurgeRoot | undefined,\n): void {\n  if (root === undefined) return;\n  const rootBundle = path.find(\n    (bundle) => readManifestContainerId(bundle) === root.id,\n  );\n  // A valid move out of the selected subtree, or a settled restore of the\n  // selected root itself, is ordinary concurrent work.\n  if (!rootBundle || readSignedParentContainerId(rootBundle) !== root.parentId)\n    throw new Error(\n      \"Document placement is outside the requested purge subtree\",\n    );\n}\n"]}

package/workflows/documents/rotationBaseline.js

@@ -2,7 +2,7 @@ import { emptyVersionVector, getImportBlobMetadata, versionVectorsEqual, } from
 import { createPendingUpdateFields } from "../../data/documents/documentSync.js";
 import { importContentKeyMaterial } from "../../data/documents/shared/contentRecordKeys.js";
 import { encryptDocumentPendingUpdate } from "../../data/documents/shared/crypto.js";
-import { signDocumentOutgoingUpdate } from "./syncPlanIdentity.js";
+import { signDocumentOutgoingUpdate } from "./syncPlan/syncPlanIdentity.js";
 // A zero-span snapshot (empty document) yields no baseline; the unlink is
 // sent without one and the server verifies the committed frontier is empty.
 export async function completeLinkSetMutationRequest(input) {

package/workflows/documents/rotationBaseline.js.map

@@ -1 +1 @@
-{"version":3,"file":"rotationBaseline.js","sourceRoot":"","sources":["rotationBaseline.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAKzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAMlF,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAEhE,0EAA0E;AAC1E,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAMpD;IACC,MAAM,gBAAgB,GACpB,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,gBAAgB;QACpD,CAAC,CAAC,MAAM,6BAA6B,CAAC;YAClC,4BAA4B,EAC1B,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B;YAClE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,UAAU;YAC7C,eAAe,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe;YAC5D,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU;YAClD,2BAA2B,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY;YACrE,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU;YAC1D,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc;YAChE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,gBAAgB;SACjC,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,gBAAgB;QACrB,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE;QAC9D,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAWnD;IACC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvD,IACE,QAAQ,CAAC,IAAI,KAAK,UAAU;QAC5B,CAAC,mBAAmB,CAClB,QAAQ,CAAC,yBAAyB,EAClC,kBAAkB,EAAE,CACrB,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,yBAAyB,CAC7C,KAAK,CAAC,QAAQ,EACd,QAAQ,CAAC,uBAAuB,CACjC,CAAC;IACF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,mDAAmD;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,aAAa,GAAG;QACpB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,GAAG,aAAa;KACjB,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;QACnD,kBAAkB,EAAE,MAAM,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC;QACpE,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IAEH,OAAO,0BAA0B,CAAC;QAChC,4BAA4B,EAAE,KAAK,CAAC,4BAA4B;QAChE,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;QAC9D,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE;YACN,cAAc,EAAE,iBAAiB;YACjC,qBAAqB,EAAE,uBAAuB;YAC9C,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,uBAAuB,EAAE,aAAa,CAAC,uBAAuB;YAC9D,yBAAyB,EAAE,aAAa,CAAC,yBAAyB;YAClE,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,mBAAmB,EAAE,QAAQ,CAAC,uBAAuB;SACtD;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  emptyVersionVector,\n  getImportBlobMetadata,\n  versionVectorsEqual,\n} from \"@tearleads/loro\";\nimport type {\n  ContainerManifestRef,\n  DocumentOutgoingUpdate,\n} from \"@tearleads/validators/request\";\nimport { createPendingUpdateFields } from \"../../data/documents/documentSync\";\nimport { importContentKeyMaterial } from \"../../data/documents/shared/contentRecordKeys\";\nimport { encryptDocumentPendingUpdate } from \"../../data/documents/shared/crypto\";\nimport type {\n  DocumentCreateAuthor,\n  DocumentLinkSetMutationOperation,\n  MaterializedDocumentLinkSetMutationPlan,\n} from \"../../data/documents/shared/types\";\nimport { signDocumentOutgoingUpdate } from \"./syncPlanIdentity\";\n\n// A zero-span snapshot (empty document) yields no baseline; the unlink is\n// sent without one and the server verifies the committed frontier is empty.\nexport async function completeLinkSetMutationRequest(input: {\n  author: DocumentCreateAuthor;\n  materializedPlan: MaterializedDocumentLinkSetMutationPlan;\n  operation: DocumentLinkSetMutationOperation;\n  rotationSnapshot: Uint8Array | undefined;\n  signedAt: string;\n}) {\n  const rotationBaseline =\n    input.operation === \"unlink\" && input.rotationSnapshot\n      ? await buildDocumentRotationBaseline({\n          authorizingContainerPathRefs:\n            input.materializedPlan.plan.request.authorizingContainerPathRefs,\n          author: input.author,\n          contentKey: input.materializedPlan.contentKey,\n          contentKeyEpoch: input.materializedPlan.plan.contentKeyEpoch,\n          documentId: input.materializedPlan.plan.documentId,\n          expectedLinkSetManifestHash: input.materializedPlan.plan.manifestHash,\n          expectedTargetHash: input.materializedPlan.plan.targetHash,\n          organizationId: input.materializedPlan.plan.state.organizationId,\n          signedAt: input.signedAt,\n          snapshot: input.rotationSnapshot,\n        })\n      : null;\n  return rotationBaseline\n    ? { ...input.materializedPlan.plan.request, rotationBaseline }\n    : input.materializedPlan.plan.request;\n}\n\nexport async function buildDocumentRotationBaseline(input: {\n  readonly authorizingContainerPathRefs: readonly (readonly ContainerManifestRef[])[];\n  readonly author: DocumentCreateAuthor;\n  readonly contentKey: Uint8Array;\n  readonly contentKeyEpoch: number;\n  readonly documentId: string;\n  readonly expectedLinkSetManifestHash: string;\n  readonly expectedTargetHash: string;\n  readonly organizationId: string;\n  readonly signedAt: string;\n  readonly snapshot: Uint8Array;\n}): Promise<DocumentOutgoingUpdate | null> {\n  const metadata = getImportBlobMetadata(input.snapshot);\n  if (\n    metadata.mode !== \"snapshot\" ||\n    !versionVectorsEqual(\n      metadata.partialStartVersionVector,\n      emptyVersionVector(),\n    )\n  ) {\n    throw new Error(\n      \"Document unlink requires a full-history rotation snapshot\",\n    );\n  }\n  const pendingFields = createPendingUpdateFields(\n    input.snapshot,\n    metadata.partialEndVersionVector,\n  );\n  if (!pendingFields) {\n    // A document with no history serializes to a zero-span full-history\n    // snapshot. There is nothing for a rotation baseline to cover, so the\n    // unlink is submitted without one; the server independently proves the\n    // committed frontier is empty before accepting it.\n    return null;\n  }\n  const pendingUpdate = {\n    id: crypto.randomUUID(),\n    ...pendingFields,\n  };\n  const encrypted = await encryptDocumentPendingUpdate({\n    contentKeyMaterial: await importContentKeyMaterial(input.contentKey),\n    contentKeyEpoch: input.contentKeyEpoch,\n    documentId: input.documentId,\n    organizationId: input.organizationId,\n    update: pendingUpdate,\n  });\n\n  return signDocumentOutgoingUpdate({\n    authorizingContainerPathRefs: input.authorizingContainerPathRefs,\n    author: input.author,\n    contentKeyEpoch: input.contentKeyEpoch,\n    documentId: input.documentId,\n    expectedLinkSetManifestHash: input.expectedLinkSetManifestHash,\n    expectedTargetHash: input.expectedTargetHash,\n    organizationId: input.organizationId,\n    signedAt: input.signedAt,\n    update: {\n      checkpointKind: \"rotate_baseline\",\n      checkpointPayloadKind: \"full_history_snapshot\",\n      ciphertextHash: encrypted.ciphertextHash,\n      contentRecordId: encrypted.contentRecordId,\n      encryptedData: encrypted.encryptedData,\n      id: pendingUpdate.id,\n      metadataHash: encrypted.metadataHash,\n      partialEndVersionVector: pendingFields.partialEndVersionVector,\n      partialStartVersionVector: pendingFields.partialStartVersionVector,\n      plaintextHash: encrypted.plaintextHash,\n      sourceVersionVector: metadata.partialEndVersionVector,\n    },\n  });\n}\n"]}
+{"version":3,"file":"rotationBaseline.js","sourceRoot":"","sources":["rotationBaseline.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAKzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAMlF,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAEzE,0EAA0E;AAC1E,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAMpD;IACC,MAAM,gBAAgB,GACpB,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,gBAAgB;QACpD,CAAC,CAAC,MAAM,6BAA6B,CAAC;YAClC,4BAA4B,EAC1B,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B;YAClE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,UAAU;YAC7C,eAAe,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe;YAC5D,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU;YAClD,2BAA2B,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY;YACrE,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU;YAC1D,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc;YAChE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,gBAAgB;SACjC,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,gBAAgB;QACrB,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE;QAC9D,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAWnD;IACC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvD,IACE,QAAQ,CAAC,IAAI,KAAK,UAAU;QAC5B,CAAC,mBAAmB,CAClB,QAAQ,CAAC,yBAAyB,EAClC,kBAAkB,EAAE,CACrB,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,yBAAyB,CAC7C,KAAK,CAAC,QAAQ,EACd,QAAQ,CAAC,uBAAuB,CACjC,CAAC;IACF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,mDAAmD;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,aAAa,GAAG;QACpB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,GAAG,aAAa;KACjB,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;QACnD,kBAAkB,EAAE,MAAM,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC;QACpE,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IAEH,OAAO,0BAA0B,CAAC;QAChC,4BAA4B,EAAE,KAAK,CAAC,4BAA4B;QAChE,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;QAC9D,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE;YACN,cAAc,EAAE,iBAAiB;YACjC,qBAAqB,EAAE,uBAAuB;YAC9C,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,uBAAuB,EAAE,aAAa,CAAC,uBAAuB;YAC9D,yBAAyB,EAAE,aAAa,CAAC,yBAAyB;YAClE,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,mBAAmB,EAAE,QAAQ,CAAC,uBAAuB;SACtD;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  emptyVersionVector,\n  getImportBlobMetadata,\n  versionVectorsEqual,\n} from \"@tearleads/loro\";\nimport type {\n  ContainerManifestRef,\n  DocumentOutgoingUpdate,\n} from \"@tearleads/validators/request\";\nimport { createPendingUpdateFields } from \"../../data/documents/documentSync\";\nimport { importContentKeyMaterial } from \"../../data/documents/shared/contentRecordKeys\";\nimport { encryptDocumentPendingUpdate } from \"../../data/documents/shared/crypto\";\nimport type {\n  DocumentCreateAuthor,\n  DocumentLinkSetMutationOperation,\n  MaterializedDocumentLinkSetMutationPlan,\n} from \"../../data/documents/shared/types\";\nimport { signDocumentOutgoingUpdate } from \"./syncPlan/syncPlanIdentity\";\n\n// A zero-span snapshot (empty document) yields no baseline; the unlink is\n// sent without one and the server verifies the committed frontier is empty.\nexport async function completeLinkSetMutationRequest(input: {\n  author: DocumentCreateAuthor;\n  materializedPlan: MaterializedDocumentLinkSetMutationPlan;\n  operation: DocumentLinkSetMutationOperation;\n  rotationSnapshot: Uint8Array | undefined;\n  signedAt: string;\n}) {\n  const rotationBaseline =\n    input.operation === \"unlink\" && input.rotationSnapshot\n      ? await buildDocumentRotationBaseline({\n          authorizingContainerPathRefs:\n            input.materializedPlan.plan.request.authorizingContainerPathRefs,\n          author: input.author,\n          contentKey: input.materializedPlan.contentKey,\n          contentKeyEpoch: input.materializedPlan.plan.contentKeyEpoch,\n          documentId: input.materializedPlan.plan.documentId,\n          expectedLinkSetManifestHash: input.materializedPlan.plan.manifestHash,\n          expectedTargetHash: input.materializedPlan.plan.targetHash,\n          organizationId: input.materializedPlan.plan.state.organizationId,\n          signedAt: input.signedAt,\n          snapshot: input.rotationSnapshot,\n        })\n      : null;\n  return rotationBaseline\n    ? { ...input.materializedPlan.plan.request, rotationBaseline }\n    : input.materializedPlan.plan.request;\n}\n\nexport async function buildDocumentRotationBaseline(input: {\n  readonly authorizingContainerPathRefs: readonly (readonly ContainerManifestRef[])[];\n  readonly author: DocumentCreateAuthor;\n  readonly contentKey: Uint8Array;\n  readonly contentKeyEpoch: number;\n  readonly documentId: string;\n  readonly expectedLinkSetManifestHash: string;\n  readonly expectedTargetHash: string;\n  readonly organizationId: string;\n  readonly signedAt: string;\n  readonly snapshot: Uint8Array;\n}): Promise<DocumentOutgoingUpdate | null> {\n  const metadata = getImportBlobMetadata(input.snapshot);\n  if (\n    metadata.mode !== \"snapshot\" ||\n    !versionVectorsEqual(\n      metadata.partialStartVersionVector,\n      emptyVersionVector(),\n    )\n  ) {\n    throw new Error(\n      \"Document unlink requires a full-history rotation snapshot\",\n    );\n  }\n  const pendingFields = createPendingUpdateFields(\n    input.snapshot,\n    metadata.partialEndVersionVector,\n  );\n  if (!pendingFields) {\n    // A document with no history serializes to a zero-span full-history\n    // snapshot. There is nothing for a rotation baseline to cover, so the\n    // unlink is submitted without one; the server independently proves the\n    // committed frontier is empty before accepting it.\n    return null;\n  }\n  const pendingUpdate = {\n    id: crypto.randomUUID(),\n    ...pendingFields,\n  };\n  const encrypted = await encryptDocumentPendingUpdate({\n    contentKeyMaterial: await importContentKeyMaterial(input.contentKey),\n    contentKeyEpoch: input.contentKeyEpoch,\n    documentId: input.documentId,\n    organizationId: input.organizationId,\n    update: pendingUpdate,\n  });\n\n  return signDocumentOutgoingUpdate({\n    authorizingContainerPathRefs: input.authorizingContainerPathRefs,\n    author: input.author,\n    contentKeyEpoch: input.contentKeyEpoch,\n    documentId: input.documentId,\n    expectedLinkSetManifestHash: input.expectedLinkSetManifestHash,\n    expectedTargetHash: input.expectedTargetHash,\n    organizationId: input.organizationId,\n    signedAt: input.signedAt,\n    update: {\n      checkpointKind: \"rotate_baseline\",\n      checkpointPayloadKind: \"full_history_snapshot\",\n      ciphertextHash: encrypted.ciphertextHash,\n      contentRecordId: encrypted.contentRecordId,\n      encryptedData: encrypted.encryptedData,\n      id: pendingUpdate.id,\n      metadataHash: encrypted.metadataHash,\n      partialEndVersionVector: pendingFields.partialEndVersionVector,\n      partialStartVersionVector: pendingFields.partialStartVersionVector,\n      plaintextHash: encrypted.plaintextHash,\n      sourceVersionVector: metadata.partialEndVersionVector,\n    },\n  });\n}\n"]}

package/workflows/documents/sync/index.d.ts

@@ -0,0 +1,4 @@
+import type { SyncRemoteDocumentResult } from "../../../data/documents/shared/types.js";
+import { type SyncRemoteDocumentInput } from "./readOnlySync.js";
+export declare function hasDocumentUpdateEvent(events: ReadonlyArray<unknown>, documentId: string | null | undefined): boolean;
+export declare function syncRemoteDocument(input: SyncRemoteDocumentInput): Promise<SyncRemoteDocumentResult | null>;

package/workflows/documents/sync/index.js

@@ -0,0 +1,287 @@
+import { KeyingVerificationError } from "../../../internal/crypto/index.js";
+import { isDocumentUpdateCreatedEvent } from "../../../data/documents/documentSync.js";
+import { isDocumentSyncUpdateIsolationError } from "../../../data/documents/shared/documentSyncUpdateIsolation.js";
+import { InvalidDocumentSyncPullContinuationError, } from "../../../data/documents/shared/syncPagination.js";
+import { isProjectionVerificationCancelledError, requireProjectionUserKeyResolver, } from "../../../data/keyingProjectionVerification/index.js";
+import { createVerifiedRemoteDocumentDeletionHandler } from "../purge/index.js";
+import { assertRawContinuationCanRetry, resolveSyncAttemptWriterProjection, submitDocumentSyncAttemptIfAllowed, } from "../syncFailures/index.js";
+import { abandonAfterRetryableConflicts, abandonBlockedSync, } from "../syncFailures/syncAbandon.js";
+import { recoverablePendingUpdates } from "../syncPlan/syncPlanRequestBounds.js";
+import { requireStandaloneAncestorRepairs } from "../syncRekeys/syncContainerRekeyPreparation.js";
+import { tryPersistedReadOnlyDocumentSync, } from "./readOnlySync.js";
+import { planDocumentSyncAttempt, projectionFailureHandler, } from "./syncAttemptPlanning.js";
+import { resolveSubmittedDocumentSyncResult } from "./syncSubmittedResult.js";
+export function hasDocumentUpdateEvent(events, documentId) {
+    if (!documentId)
+        return false;
+    return events.some((event) => isDocumentUpdateCreatedEvent(event) && event.documentId === documentId);
+}
+/**
+ * A retryable stale-projection conflict means this writer projection is behind
+ * the server. Evict only this document so the next attempt re-derives targets.
+ */
+function evictStaleProjectionForRetry(input) {
+    input.apiClient.evictDocumentWriterProjection?.(input.documentId);
+}
+/**
+ * A pass may repair a covering-baseline rejection by regenerating queued
+ * rotation checkpoints — but only when there is something to regenerate FROM
+ * (a snapshot provider and queued checkpoint rows), the failed pass was not
+ * already a heal or a regeneration (whose fresh baseline proves this device
+ * is simply behind), and an attempt remains.
+ */
+function canRegenerateQueuedCheckpoints(input) {
+    return (!input.regenerateQueuedCheckpoints &&
+        !input.materializedPlan.healedStaleContentKeyBundle &&
+        input.sync.buildRotationSnapshot !== undefined &&
+        input.pendingUpdates.some((update) => update.sourceVersionVector != null));
+}
+async function submitPlannedSyncAttempt(args) {
+    try {
+        return await submitDocumentSyncAttemptIfAllowed({
+            apiClient: args.sync.apiClient,
+            attempt: args.attempt,
+            canRegenerateQueuedCheckpoints: canRegenerateQueuedCheckpoints({
+                materializedPlan: args.materializedPlan,
+                pendingUpdates: args.pendingUpdates,
+                regenerateQueuedCheckpoints: args.regenerateQueuedCheckpoints,
+                sync: args.sync,
+            }),
+            documentId: args.sync.documentId,
+            expectedCommitLsnMode: args.pullContinuation?.commitLsnMode,
+            isRemoteSyncBlocked: args.sync.isRemoteSyncBlocked,
+            maxAttempts: args.maxAttempts,
+            onInlineRepairRefused: () => requireStandaloneAncestorRepairs(args.sync),
+            onRemoteDocumentDeleted: args.sync.onRemoteDocumentDeleted,
+            onOutgoingUpdatesMaterialized: args.sync.onOutgoingUpdatesMaterialized,
+            onSyncTrace: args.sync.onSyncTrace,
+            onTerminalSubmitFailure: args.sync.onTerminalSubmitFailure,
+            pendingUpdates: args.pendingUpdates,
+            plan: args.materializedPlan.plan,
+            failureBlocksQueuedWrites: args.failureBlocksQueuedWrites,
+            stillCurrent: args.sync.stillCurrent,
+            warmReferencedPrincipalPolicies: args.sync.warmReferencedPrincipalPolicies,
+        });
+    }
+    catch (error) {
+        if (error instanceof InvalidDocumentSyncPullContinuationError &&
+            args.pullContinuation !== undefined &&
+            args.sync.historyMode !== "raw") {
+            return "retry";
+        }
+        throw error;
+    }
+}
+function resolveAttemptProjection(input, failureBlocksQueuedWrites, reusableWriterProjection) {
+    return resolveSyncAttemptWriterProjection({
+        apiClient: input.apiClient,
+        documentId: input.documentId,
+        onRemoteDocumentDeleted: input.onRemoteDocumentDeleted,
+        onSyncAbandoned: input.onSyncAbandoned,
+        onSyncTrace: input.onSyncTrace,
+        onTerminalFailure: projectionFailureHandler(input, failureBlocksQueuedWrites),
+        reusableWriterProjection,
+        stillCurrent: input.stillCurrent,
+    });
+}
+function resolveRemoteSyncProjectionUserKey(input) {
+    return requireProjectionUserKeyResolver(input.resolveProjectionUserKey, "Remote document sync");
+}
+async function invalidatePullCursor(input, pullContinuation) {
+    if (pullContinuation !== undefined) {
+        await input.onPullContinuationInvalidated?.(pullContinuation);
+    }
+    return undefined;
+}
+async function preparePersistedDocumentSync(input, resolveProjectionUserKey) {
+    let pullContinuation = input.pullContinuation;
+    try {
+        const persisted = await tryPersistedReadOnlyDocumentSync(input, resolveProjectionUserKey);
+        if (persisted?.kind === "completed")
+            return persisted;
+        if (persisted?.kind === "not_completed" && input.historyMode !== "raw") {
+            pullContinuation = await invalidatePullCursor(input, pullContinuation);
+        }
+    }
+    catch (error) {
+        if (!(error instanceof InvalidDocumentSyncPullContinuationError) ||
+            pullContinuation === undefined ||
+            input.historyMode === "raw") {
+            throw error;
+        }
+        pullContinuation = await invalidatePullCursor(input, pullContinuation);
+    }
+    return { kind: "continue", pullContinuation };
+}
+function failureBlocksQueuedWrites(input) {
+    return (input.pendingUpdates.length > 0 || input.recoveryPendingUpdateCount > 0);
+}
+async function retryRemoteSyncAttempt(sync, continuation) {
+    evictStaleProjectionForRetry(sync);
+    return {
+        kind: "retry",
+        pullContinuation: await invalidatePullCursor(sync, continuation),
+    };
+}
+async function runRemoteDocumentSyncAttempt(input) {
+    if (input.sync.stillCurrent?.() === false) {
+        return { kind: "complete", result: null };
+    }
+    const blocksQueuedWrites = failureBlocksQueuedWrites({
+        pendingUpdates: input.state.pendingUpdates,
+        recoveryPendingUpdateCount: input.state.recoveryPendingUpdatesById.size,
+    });
+    const writerProjection = await resolveAttemptProjection(input.sync, blocksQueuedWrites, input.state.reusableWriterProjection);
+    if (input.sync.stillCurrent?.() === false || !writerProjection) {
+        return { kind: "complete", result: null };
+    }
+    const planned = await planDocumentSyncAttempt({
+        pendingUpdates: input.state.pendingUpdates,
+        pullContinuation: input.state.pullContinuation,
+        regenerateQueuedCheckpoints: input.state.regenerateQueuedCheckpoints,
+        sync: input.sync,
+        failureBlocksQueuedWrites: blocksQueuedWrites,
+        writerProjection,
+    });
+    if (planned === "retry") {
+        return retryRemoteSyncAttempt(input.sync, input.state.pullContinuation);
+    }
+    if (!planned || input.sync.stillCurrent?.() === false) {
+        return { kind: "complete", result: null };
+    }
+    const [materializedPlan] = planned;
+    const submitted = await submitPlannedSyncAttempt({
+        attempt: input.attempt,
+        materializedPlan,
+        maxAttempts: input.maxAttempts,
+        pendingUpdates: recoverablePendingUpdates(input.state.pendingUpdates, materializedPlan),
+        pullContinuation: input.state.pullContinuation,
+        regenerateQueuedCheckpoints: input.state.regenerateQueuedCheckpoints,
+        sync: input.sync,
+        failureBlocksQueuedWrites: blocksQueuedWrites,
+    });
+    if (input.sync.stillCurrent?.() === false || submitted === "cancelled") {
+        return { kind: "complete", result: null };
+    }
+    if (submitted === "retry") {
+        assertRawContinuationCanRetry(input.sync.historyMode, input.state.pullContinuation);
+        return retryRemoteSyncAttempt(input.sync, input.state.pullContinuation);
+    }
+    if (submitted === "blocked") {
+        abandonBlockedSync(input.sync);
+        return { kind: "complete", result: null };
+    }
+    if (submitted === "stop") {
+        input.sync.onSyncAbandoned?.("the sync submit failed terminally");
+        return { kind: "complete", result: null };
+    }
+    if (submitted.kind === "regenerate_queued_checkpoints") {
+        return { kind: "regenerate" };
+    }
+    if (submitted.kind === "recover_update_id_conflict") {
+        // A lost response may mean the server committed both this update id and an
+        // inline container rekey. Force the read-only recovery pass to observe that
+        // committed successor projection instead of reusing a cached predecessor.
+        evictStaleProjectionForRetry(input.sync);
+        return { kind: "recover", updates: submitted.recoveryPendingUpdatesById };
+    }
+    const result = await resolveSubmittedDocumentSyncResult({
+        materializedPlan,
+        pendingUpdateIds: input.pendingUpdateIds,
+        pullComplete: submitted.pullComplete,
+        recoveryPendingUpdatesById: input.state.recoveryPendingUpdatesById,
+        resolveProjectionUserKey: input.resolveProjectionUserKey,
+        response: submitted.response,
+        sync: input.sync,
+        writerProjection: materializedPlan.writerProjection,
+    });
+    return {
+        kind: "complete",
+        result: input.sync.stillCurrent?.() === false ? null : result,
+    };
+}
+async function syncRemoteDocumentInternal(input) {
+    if (input.stillCurrent?.() === false)
+        return null;
+    const resolveProjectionUserKey = resolveRemoteSyncProjectionUserKey(input);
+    const maxAttempts = 3;
+    let pendingUpdates = input.pendingUpdates ?? [];
+    const pendingUpdateIds = pendingUpdates.map((update) => update.id);
+    let recoveryPendingUpdatesById = new Map();
+    let regenerateQueuedCheckpoints = false;
+    let reusableWriterProjection = input.writerProjection ?? null;
+    const persistedSync = await preparePersistedDocumentSync(input, resolveProjectionUserKey);
+    if (input.stillCurrent?.() === false)
+        return null;
+    if (persistedSync.kind === "completed")
+        return persistedSync.result;
+    let pullContinuation = persistedSync.pullContinuation;
+    for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {
+        const outcome = await runRemoteDocumentSyncAttempt({
+            attempt,
+            maxAttempts,
+            pendingUpdateIds,
+            resolveProjectionUserKey,
+            state: {
+                pendingUpdates,
+                pullContinuation,
+                recoveryPendingUpdatesById,
+                regenerateQueuedCheckpoints,
+                reusableWriterProjection,
+            },
+            sync: input,
+        });
+        reusableWriterProjection = null;
+        if (outcome.kind === "complete")
+            return outcome.result;
+        if (outcome.kind === "retry") {
+            pullContinuation = outcome.pullContinuation;
+            if (input.stillCurrent?.() === false)
+                return null;
+            continue;
+        }
+        if (outcome.kind === "regenerate") {
+            regenerateQueuedCheckpoints = true;
+            continue;
+        }
+        recoveryPendingUpdatesById = outcome.updates;
+        pendingUpdates = [];
+    }
+    return abandonAfterRetryableConflicts(input);
+}
+export async function syncRemoteDocument(input) {
+    try {
+        return await syncRemoteDocumentInternal({
+            ...input,
+            onRemoteDocumentDeleted: createVerifiedRemoteDocumentDeletionHandler({
+                apiClient: input.apiClient,
+                execSql: input.execSql,
+                expectedOrganizationId: input.author.organizationId,
+                onVerifiedDeletion: ({ commitPurgeProof, documentId }) => {
+                    if (input.stillCurrent?.() === false)
+                        return;
+                    if (!input.onRemoteDocumentDeleted) {
+                        throw new KeyingVerificationError("missing_dependency", "Remote document deletion requires atomic local teardown");
+                    }
+                    return input.onRemoteDocumentDeleted({
+                        commitPurgeProof,
+                        documentId,
+                    });
+                },
+                resolveProjectionUserKey: input.resolveProjectionUserKey,
+                stillCurrent: input.stillCurrent,
+                warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,
+            }),
+        });
+    }
+    catch (error) {
+        if (isProjectionVerificationCancelledError(error))
+            return null;
+        if (input.stillCurrent?.() !== false &&
+            isDocumentSyncUpdateIsolationError(error)) {
+            await input.onIncomingUpdateIsolationFailure?.(error);
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=index.js.map

package/workflows/documents/sync/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,kCAAkC,EAAE,MAAM,4DAA4D,CAAC;AAChH,OAAO,EAEL,wCAAwC,GACzC,MAAM,+CAA+C,CAAC;AAKvD,OAAO,EACL,sCAAsC,EAEtC,gCAAgC,GACjC,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,2CAA2C,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAClC,kCAAkC,GACnC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,EAEL,gCAAgC,GACjC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EAAE,kCAAkC,EAAE,MAAM,uBAAuB,CAAC;AAE3E,MAAM,UAAU,sBAAsB,CACpC,MAA8B,EAC9B,UAAqC;IAErC,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,KAAK,EAAE,EAAE,CACR,4BAA4B,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,CACzE,CAAC;AACJ,CAAC;AACD;;;GAGG;AACH,SAAS,4BAA4B,CAAC,KAA8B;IAClE,KAAK,CAAC,SAAS,CAAC,6BAA6B,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,8BAA8B,CAAC,KAKvC;IACC,OAAO,CACL,CAAC,KAAK,CAAC,2BAA2B;QAClC,CAAC,KAAK,CAAC,gBAAgB,CAAC,2BAA2B;QACnD,KAAK,CAAC,IAAI,CAAC,qBAAqB,KAAK,SAAS;QAC9C,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,IASvC;IACC,IAAI,CAAC;QACH,OAAO,MAAM,kCAAkC,CAAC;YAC9C,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,8BAA8B,EAAE,8BAA8B,CAAC;gBAC7D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;gBAC7D,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC;YACF,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;YAChC,qBAAqB,EAAE,IAAI,CAAC,gBAAgB,EAAE,aAAa;YAC3D,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB;YAClD,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,qBAAqB,EAAE,GAAG,EAAE,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;YACxE,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,uBAAuB;YAC1D,6BAA6B,EAAE,IAAI,CAAC,IAAI,CAAC,6BAA6B;YACtE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YAClC,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,uBAAuB;YAC1D,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI;YAChC,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;YACzD,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;YACpC,+BAA+B,EAC7B,IAAI,CAAC,IAAI,CAAC,+BAA+B;SAC5C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,wCAAwC;YACzD,IAAI,CAAC,gBAAgB,KAAK,SAAS;YACnC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,EAC/B,CAAC;YACD,OAAO,OAAgB,CAAC;QAC1B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAA8B,EAC9B,yBAAkC,EAClC,wBAAiE;IAEjE,OAAO,kCAAkC,CAAC;QACxC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,iBAAiB,EAAE,wBAAwB,CACzC,KAAK,EACL,yBAAyB,CAC1B;QACD,wBAAwB;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC;AACD,SAAS,kCAAkC,CAAC,KAA8B;IACxE,OAAO,gCAAgC,CACrC,KAAK,CAAC,wBAAwB,EAC9B,sBAAsB,CACvB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAA8B,EAC9B,gBAA0D;IAE1D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,KAAK,CAAC,6BAA6B,EAAE,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,KAA8B,EAC9B,wBAAmD;IAQnD,IAAI,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,gCAAgC,CACtD,KAAK,EACL,wBAAwB,CACzB,CAAC;QACF,IAAI,SAAS,EAAE,IAAI,KAAK,WAAW;YAAE,OAAO,SAAS,CAAC;QACtD,IAAI,SAAS,EAAE,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YACvE,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,CAAC,CAAC,KAAK,YAAY,wCAAwC,CAAC;YAC5D,gBAAgB,KAAK,SAAS;YAC9B,KAAK,CAAC,WAAW,KAAK,KAAK,EAC3B,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,yBAAyB,CAAC,KAGlC;IACC,OAAO,CACL,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,IAA6B,EAC7B,YAAsD;IAEtD,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,OAAO;QACb,gBAAgB,EAAE,MAAM,oBAAoB,CAAC,IAAI,EAAE,YAAY,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAO3C;IACC,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;QACnD,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;QAC1C,0BAA0B,EAAE,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAI;KACxE,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,MAAM,wBAAwB,CACrD,KAAK,CAAC,IAAI,EACV,kBAAkB,EAClB,KAAK,CAAC,KAAK,CAAC,wBAAwB,CACrC,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;QAC5C,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;QAC1C,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;QAC9C,2BAA2B,EAAE,KAAK,CAAC,KAAK,CAAC,2BAA2B;QACpE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,yBAAyB,EAAE,kBAAkB;QAC7C,gBAAgB;KACjB,CAAC,CAAC;IACH,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC;QAC/C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,yBAAyB,CACvC,KAAK,CAAC,KAAK,CAAC,cAAc,EAC1B,gBAAgB,CACjB;QACD,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;QAC9C,2BAA2B,EAAE,KAAK,CAAC,KAAK,CAAC,2BAA2B;QACpE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,yBAAyB,EAAE,kBAAkB;KAC9C,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QACvE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,6BAA6B,CAC3B,KAAK,CAAC,IAAI,CAAC,WAAW,EACtB,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAC7B,CAAC;QACF,OAAO,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,mCAAmC,CAAC,CAAC;QAClE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;QACpD,2EAA2E;QAC3E,4EAA4E;QAC5E,0EAA0E;QAC1E,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,0BAA0B,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC;QACtD,gBAAgB;QAChB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,0BAA0B,EAAE,KAAK,CAAC,KAAK,CAAC,0BAA0B;QAClE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,gBAAgB,EAAE,gBAAgB,CAAC,gBAAgB;KACpD,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;KAC9D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,KAA8B;IAE9B,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,wBAAwB,GAAG,kCAAkC,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,CAAC,CAAC;IACtB,IAAI,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;IAChD,MAAM,gBAAgB,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnE,IAAI,0BAA0B,GAAG,IAAI,GAAG,EAA+B,CAAC;IACxE,IAAI,2BAA2B,GAAG,KAAK,CAAC;IACxC,IAAI,wBAAwB,GAAG,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC;IAC9D,MAAM,aAAa,GAAG,MAAM,4BAA4B,CACtD,KAAK,EACL,wBAAwB,CACzB,CAAC;IACF,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,aAAa,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC;IACpE,IAAI,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAC;IACtD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC;YACjD,OAAO;YACP,WAAW;YACX,gBAAgB;YAChB,wBAAwB;YACxB,KAAK,EAAE;gBACL,cAAc;gBACd,gBAAgB;gBAChB,0BAA0B;gBAC1B,2BAA2B;gBAC3B,wBAAwB;aACzB;YACD,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,wBAAwB,GAAG,IAAI,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAC5C,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC;YAClD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClC,2BAA2B,GAAG,IAAI,CAAC;YACnC,SAAS;QACX,CAAC;QACD,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC;QAC7C,cAAc,GAAG,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,8BAA8B,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA8B;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,0BAA0B,CAAC;YACtC,GAAG,KAAK;YACR,uBAAuB,EAAE,2CAA2C,CAAC;gBACnE,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,sBAAsB,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;gBACnD,kBAAkB,EAAE,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,EAAE;oBACvD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;wBAAE,OAAO;oBAC7C,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC;wBACnC,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,yDAAyD,CAC1D,CAAC;oBACJ,CAAC;oBACD,OAAO,KAAK,CAAC,uBAAuB,CAAC;wBACnC,gBAAgB;wBAChB,UAAU;qBACX,CAAC,CAAC;gBACL,CAAC;gBACD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;gBACxD,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;aACvE,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,sCAAsC,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/D,IACE,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;YAChC,kCAAkC,CAAC,KAAK,CAAC,EACzC,CAAC;YACD,MAAM,KAAK,CAAC,gCAAgC,EAAE,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type { DocumentWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { isDocumentUpdateCreatedEvent } from \"../../../data/documents/documentSync\";\nimport { isDocumentSyncUpdateIsolationError } from \"../../../data/documents/shared/documentSyncUpdateIsolation\";\nimport {\n  type DocumentSyncPullContinuation,\n  InvalidDocumentSyncPullContinuationError,\n} from \"../../../data/documents/shared/syncPagination\";\nimport type {\n  MaterializedDocumentSyncPlan,\n  SyncRemoteDocumentResult,\n} from \"../../../data/documents/shared/types\";\nimport {\n  isProjectionVerificationCancelledError,\n  type ProjectionUserKeyResolver,\n  requireProjectionUserKeyResolver,\n} from \"../../../data/keyingProjectionVerification\";\nimport type { PendingUpdateRecord } from \"../../../data/sqlite/documentPersistence\";\nimport { createVerifiedRemoteDocumentDeletionHandler } from \"../purge\";\nimport {\n  assertRawContinuationCanRetry,\n  resolveSyncAttemptWriterProjection,\n  submitDocumentSyncAttemptIfAllowed,\n} from \"../syncFailures\";\nimport {\n  abandonAfterRetryableConflicts,\n  abandonBlockedSync,\n} from \"../syncFailures/syncAbandon\";\nimport { recoverablePendingUpdates } from \"../syncPlan/syncPlanRequestBounds\";\nimport { requireStandaloneAncestorRepairs } from \"../syncRekeys/syncContainerRekeyPreparation\";\nimport {\n  type SyncRemoteDocumentInput,\n  tryPersistedReadOnlyDocumentSync,\n} from \"./readOnlySync\";\nimport {\n  planDocumentSyncAttempt,\n  projectionFailureHandler,\n} from \"./syncAttemptPlanning\";\nimport type {\n  RemoteDocumentSyncAttemptOutcome,\n  RemoteDocumentSyncAttemptState,\n} from \"./syncAttemptState\";\nimport { resolveSubmittedDocumentSyncResult } from \"./syncSubmittedResult\";\n\nexport function hasDocumentUpdateEvent(\n  events: ReadonlyArray<unknown>,\n  documentId: string | null | undefined,\n): boolean {\n  if (!documentId) return false;\n  return events.some(\n    (event) =>\n      isDocumentUpdateCreatedEvent(event) && event.documentId === documentId,\n  );\n}\n/**\n * A retryable stale-projection conflict means this writer projection is behind\n * the server. Evict only this document so the next attempt re-derives targets.\n */\nfunction evictStaleProjectionForRetry(input: SyncRemoteDocumentInput): void {\n  input.apiClient.evictDocumentWriterProjection?.(input.documentId);\n}\n\n/**\n * A pass may repair a covering-baseline rejection by regenerating queued\n * rotation checkpoints — but only when there is something to regenerate FROM\n * (a snapshot provider and queued checkpoint rows), the failed pass was not\n * already a heal or a regeneration (whose fresh baseline proves this device\n * is simply behind), and an attempt remains.\n */\nfunction canRegenerateQueuedCheckpoints(input: {\n  materializedPlan: MaterializedDocumentSyncPlan;\n  pendingUpdates: readonly PendingUpdateRecord[];\n  regenerateQueuedCheckpoints: boolean;\n  sync: SyncRemoteDocumentInput;\n}): boolean {\n  return (\n    !input.regenerateQueuedCheckpoints &&\n    !input.materializedPlan.healedStaleContentKeyBundle &&\n    input.sync.buildRotationSnapshot !== undefined &&\n    input.pendingUpdates.some((update) => update.sourceVersionVector != null)\n  );\n}\n\nasync function submitPlannedSyncAttempt(args: {\n  attempt: number;\n  materializedPlan: MaterializedDocumentSyncPlan;\n  maxAttempts: number;\n  pendingUpdates: readonly PendingUpdateRecord[];\n  pullContinuation?: DocumentSyncPullContinuation | undefined;\n  regenerateQueuedCheckpoints: boolean;\n  sync: SyncRemoteDocumentInput;\n  failureBlocksQueuedWrites: boolean;\n}) {\n  try {\n    return await submitDocumentSyncAttemptIfAllowed({\n      apiClient: args.sync.apiClient,\n      attempt: args.attempt,\n      canRegenerateQueuedCheckpoints: canRegenerateQueuedCheckpoints({\n        materializedPlan: args.materializedPlan,\n        pendingUpdates: args.pendingUpdates,\n        regenerateQueuedCheckpoints: args.regenerateQueuedCheckpoints,\n        sync: args.sync,\n      }),\n      documentId: args.sync.documentId,\n      expectedCommitLsnMode: args.pullContinuation?.commitLsnMode,\n      isRemoteSyncBlocked: args.sync.isRemoteSyncBlocked,\n      maxAttempts: args.maxAttempts,\n      onInlineRepairRefused: () => requireStandaloneAncestorRepairs(args.sync),\n      onRemoteDocumentDeleted: args.sync.onRemoteDocumentDeleted,\n      onOutgoingUpdatesMaterialized: args.sync.onOutgoingUpdatesMaterialized,\n      onSyncTrace: args.sync.onSyncTrace,\n      onTerminalSubmitFailure: args.sync.onTerminalSubmitFailure,\n      pendingUpdates: args.pendingUpdates,\n      plan: args.materializedPlan.plan,\n      failureBlocksQueuedWrites: args.failureBlocksQueuedWrites,\n      stillCurrent: args.sync.stillCurrent,\n      warmReferencedPrincipalPolicies:\n        args.sync.warmReferencedPrincipalPolicies,\n    });\n  } catch (error) {\n    if (\n      error instanceof InvalidDocumentSyncPullContinuationError &&\n      args.pullContinuation !== undefined &&\n      args.sync.historyMode !== \"raw\"\n    ) {\n      return \"retry\" as const;\n    }\n    throw error;\n  }\n}\n\nfunction resolveAttemptProjection(\n  input: SyncRemoteDocumentInput,\n  failureBlocksQueuedWrites: boolean,\n  reusableWriterProjection: DocumentWriterProjectionResponse | null,\n) {\n  return resolveSyncAttemptWriterProjection({\n    apiClient: input.apiClient,\n    documentId: input.documentId,\n    onRemoteDocumentDeleted: input.onRemoteDocumentDeleted,\n    onSyncAbandoned: input.onSyncAbandoned,\n    onSyncTrace: input.onSyncTrace,\n    onTerminalFailure: projectionFailureHandler(\n      input,\n      failureBlocksQueuedWrites,\n    ),\n    reusableWriterProjection,\n    stillCurrent: input.stillCurrent,\n  });\n}\nfunction resolveRemoteSyncProjectionUserKey(input: SyncRemoteDocumentInput) {\n  return requireProjectionUserKeyResolver(\n    input.resolveProjectionUserKey,\n    \"Remote document sync\",\n  );\n}\n\nasync function invalidatePullCursor(\n  input: SyncRemoteDocumentInput,\n  pullContinuation: DocumentSyncPullContinuation | undefined,\n): Promise<undefined> {\n  if (pullContinuation !== undefined) {\n    await input.onPullContinuationInvalidated?.(pullContinuation);\n  }\n  return undefined;\n}\n\nasync function preparePersistedDocumentSync(\n  input: SyncRemoteDocumentInput,\n  resolveProjectionUserKey: ProjectionUserKeyResolver,\n): Promise<\n  | { readonly kind: \"completed\"; result: SyncRemoteDocumentResult | null }\n  | {\n      readonly kind: \"continue\";\n      pullContinuation: DocumentSyncPullContinuation | undefined;\n    }\n> {\n  let pullContinuation = input.pullContinuation;\n  try {\n    const persisted = await tryPersistedReadOnlyDocumentSync(\n      input,\n      resolveProjectionUserKey,\n    );\n    if (persisted?.kind === \"completed\") return persisted;\n    if (persisted?.kind === \"not_completed\" && input.historyMode !== \"raw\") {\n      pullContinuation = await invalidatePullCursor(input, pullContinuation);\n    }\n  } catch (error) {\n    if (\n      !(error instanceof InvalidDocumentSyncPullContinuationError) ||\n      pullContinuation === undefined ||\n      input.historyMode === \"raw\"\n    ) {\n      throw error;\n    }\n    pullContinuation = await invalidatePullCursor(input, pullContinuation);\n  }\n  return { kind: \"continue\", pullContinuation };\n}\n\nfunction failureBlocksQueuedWrites(input: {\n  readonly pendingUpdates: readonly PendingUpdateRecord[];\n  readonly recoveryPendingUpdateCount: number;\n}): boolean {\n  return (\n    input.pendingUpdates.length > 0 || input.recoveryPendingUpdateCount > 0\n  );\n}\n\nasync function retryRemoteSyncAttempt(\n  sync: SyncRemoteDocumentInput,\n  continuation: DocumentSyncPullContinuation | undefined,\n): Promise<RemoteDocumentSyncAttemptOutcome> {\n  evictStaleProjectionForRetry(sync);\n  return {\n    kind: \"retry\",\n    pullContinuation: await invalidatePullCursor(sync, continuation),\n  };\n}\n\nasync function runRemoteDocumentSyncAttempt(input: {\n  attempt: number;\n  maxAttempts: number;\n  pendingUpdateIds: readonly string[];\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  state: RemoteDocumentSyncAttemptState;\n  sync: SyncRemoteDocumentInput;\n}): Promise<RemoteDocumentSyncAttemptOutcome> {\n  if (input.sync.stillCurrent?.() === false) {\n    return { kind: \"complete\", result: null };\n  }\n  const blocksQueuedWrites = failureBlocksQueuedWrites({\n    pendingUpdates: input.state.pendingUpdates,\n    recoveryPendingUpdateCount: input.state.recoveryPendingUpdatesById.size,\n  });\n  const writerProjection = await resolveAttemptProjection(\n    input.sync,\n    blocksQueuedWrites,\n    input.state.reusableWriterProjection,\n  );\n  if (input.sync.stillCurrent?.() === false || !writerProjection) {\n    return { kind: \"complete\", result: null };\n  }\n  const planned = await planDocumentSyncAttempt({\n    pendingUpdates: input.state.pendingUpdates,\n    pullContinuation: input.state.pullContinuation,\n    regenerateQueuedCheckpoints: input.state.regenerateQueuedCheckpoints,\n    sync: input.sync,\n    failureBlocksQueuedWrites: blocksQueuedWrites,\n    writerProjection,\n  });\n  if (planned === \"retry\") {\n    return retryRemoteSyncAttempt(input.sync, input.state.pullContinuation);\n  }\n  if (!planned || input.sync.stillCurrent?.() === false) {\n    return { kind: \"complete\", result: null };\n  }\n  const [materializedPlan] = planned;\n  const submitted = await submitPlannedSyncAttempt({\n    attempt: input.attempt,\n    materializedPlan,\n    maxAttempts: input.maxAttempts,\n    pendingUpdates: recoverablePendingUpdates(\n      input.state.pendingUpdates,\n      materializedPlan,\n    ),\n    pullContinuation: input.state.pullContinuation,\n    regenerateQueuedCheckpoints: input.state.regenerateQueuedCheckpoints,\n    sync: input.sync,\n    failureBlocksQueuedWrites: blocksQueuedWrites,\n  });\n  if (input.sync.stillCurrent?.() === false || submitted === \"cancelled\") {\n    return { kind: \"complete\", result: null };\n  }\n  if (submitted === \"retry\") {\n    assertRawContinuationCanRetry(\n      input.sync.historyMode,\n      input.state.pullContinuation,\n    );\n    return retryRemoteSyncAttempt(input.sync, input.state.pullContinuation);\n  }\n  if (submitted === \"blocked\") {\n    abandonBlockedSync(input.sync);\n    return { kind: \"complete\", result: null };\n  }\n  if (submitted === \"stop\") {\n    input.sync.onSyncAbandoned?.(\"the sync submit failed terminally\");\n    return { kind: \"complete\", result: null };\n  }\n  if (submitted.kind === \"regenerate_queued_checkpoints\") {\n    return { kind: \"regenerate\" };\n  }\n  if (submitted.kind === \"recover_update_id_conflict\") {\n    // A lost response may mean the server committed both this update id and an\n    // inline container rekey. Force the read-only recovery pass to observe that\n    // committed successor projection instead of reusing a cached predecessor.\n    evictStaleProjectionForRetry(input.sync);\n    return { kind: \"recover\", updates: submitted.recoveryPendingUpdatesById };\n  }\n  const result = await resolveSubmittedDocumentSyncResult({\n    materializedPlan,\n    pendingUpdateIds: input.pendingUpdateIds,\n    pullComplete: submitted.pullComplete,\n    recoveryPendingUpdatesById: input.state.recoveryPendingUpdatesById,\n    resolveProjectionUserKey: input.resolveProjectionUserKey,\n    response: submitted.response,\n    sync: input.sync,\n    writerProjection: materializedPlan.writerProjection,\n  });\n  return {\n    kind: \"complete\",\n    result: input.sync.stillCurrent?.() === false ? null : result,\n  };\n}\n\nasync function syncRemoteDocumentInternal(\n  input: SyncRemoteDocumentInput,\n): Promise<SyncRemoteDocumentResult | null> {\n  if (input.stillCurrent?.() === false) return null;\n  const resolveProjectionUserKey = resolveRemoteSyncProjectionUserKey(input);\n  const maxAttempts = 3;\n  let pendingUpdates = input.pendingUpdates ?? [];\n  const pendingUpdateIds = pendingUpdates.map((update) => update.id);\n  let recoveryPendingUpdatesById = new Map<string, PendingUpdateRecord>();\n  let regenerateQueuedCheckpoints = false;\n  let reusableWriterProjection = input.writerProjection ?? null;\n  const persistedSync = await preparePersistedDocumentSync(\n    input,\n    resolveProjectionUserKey,\n  );\n  if (input.stillCurrent?.() === false) return null;\n  if (persistedSync.kind === \"completed\") return persistedSync.result;\n  let pullContinuation = persistedSync.pullContinuation;\n  for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {\n    const outcome = await runRemoteDocumentSyncAttempt({\n      attempt,\n      maxAttempts,\n      pendingUpdateIds,\n      resolveProjectionUserKey,\n      state: {\n        pendingUpdates,\n        pullContinuation,\n        recoveryPendingUpdatesById,\n        regenerateQueuedCheckpoints,\n        reusableWriterProjection,\n      },\n      sync: input,\n    });\n    reusableWriterProjection = null;\n    if (outcome.kind === \"complete\") return outcome.result;\n    if (outcome.kind === \"retry\") {\n      pullContinuation = outcome.pullContinuation;\n      if (input.stillCurrent?.() === false) return null;\n      continue;\n    }\n    if (outcome.kind === \"regenerate\") {\n      regenerateQueuedCheckpoints = true;\n      continue;\n    }\n    recoveryPendingUpdatesById = outcome.updates;\n    pendingUpdates = [];\n  }\n  return abandonAfterRetryableConflicts(input);\n}\n\nexport async function syncRemoteDocument(\n  input: SyncRemoteDocumentInput,\n): Promise<SyncRemoteDocumentResult | null> {\n  try {\n    return await syncRemoteDocumentInternal({\n      ...input,\n      onRemoteDocumentDeleted: createVerifiedRemoteDocumentDeletionHandler({\n        apiClient: input.apiClient,\n        execSql: input.execSql,\n        expectedOrganizationId: input.author.organizationId,\n        onVerifiedDeletion: ({ commitPurgeProof, documentId }) => {\n          if (input.stillCurrent?.() === false) return;\n          if (!input.onRemoteDocumentDeleted) {\n            throw new KeyingVerificationError(\n              \"missing_dependency\",\n              \"Remote document deletion requires atomic local teardown\",\n            );\n          }\n          return input.onRemoteDocumentDeleted({\n            commitPurgeProof,\n            documentId,\n          });\n        },\n        resolveProjectionUserKey: input.resolveProjectionUserKey,\n        stillCurrent: input.stillCurrent,\n        warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,\n      }),\n    });\n  } catch (error) {\n    if (isProjectionVerificationCancelledError(error)) return null;\n    if (\n      input.stillCurrent?.() !== false &&\n      isDocumentSyncUpdateIsolationError(error)\n    ) {\n      await input.onIncomingUpdateIsolationFailure?.(error);\n    }\n    throw error;\n  }\n}\n"]}

package/workflows/documents/sync/initialSync.js

@@ -0,0 +1,65 @@
+import { createPendingUpdateFields } from "../../../data/documents/documentSync.js";
+import { importContentKeyMaterial } from "../../../data/documents/shared/contentRecordKeys.js";
+import { encryptDocumentPendingUpdate } from "../../../data/documents/shared/crypto.js";
+import { containerPathRefs } from "../../../data/documents/shared/projection.js";
+import { signDocumentOutgoingUpdate } from "../syncPlan/syncPlanIdentity.js";
+/**
+ * Builds the single encrypted initial write for a provisioned document. The
+ * server commits it with the organization and document manifest transaction.
+ */
+export async function buildInitialDocumentSyncRequest(input) {
+    const pendingFields = createPendingUpdateFields(input.initialUpdate);
+    if (!pendingFields) {
+        throw new Error("Initial document sync update is empty");
+    }
+    const documentId = input.materializedDocument.plan.documentId;
+    const contentKeyBundle = input.materializedDocument.plan.request.contentKeyBundle;
+    const pendingUpdate = {
+        id: crypto.randomUUID(),
+        ...pendingFields,
+    };
+    const encrypted = await encryptDocumentPendingUpdate({
+        contentKeyMaterial: await importContentKeyMaterial(input.materializedDocument.contentKey),
+        contentKeyEpoch: contentKeyBundle.contentKeyEpoch,
+        documentId,
+        organizationId: input.containerProjection.organizationId,
+        update: pendingUpdate,
+    });
+    const outgoingUpdate = await signDocumentOutgoingUpdate({
+        authorizingContainerPathRefs: [
+            containerPathRefs(input.containerProjection.path),
+        ],
+        author: input.author,
+        contentKeyEpoch: contentKeyBundle.contentKeyEpoch,
+        documentId,
+        expectedLinkSetManifestHash: contentKeyBundle.linkSetManifestHash,
+        expectedTargetHash: contentKeyBundle.targetHash,
+        organizationId: input.containerProjection.organizationId,
+        signedAt: new Date().toISOString(),
+        update: {
+            contentRecordId: encrypted.contentRecordId,
+            encryptedData: encrypted.encryptedData,
+            id: pendingUpdate.id,
+            partialEndVersionVector: pendingUpdate.partialEndVersionVector,
+            partialStartVersionVector: pendingUpdate.partialStartVersionVector,
+            metadataHash: encrypted.metadataHash,
+            ciphertextHash: encrypted.ciphertextHash,
+            plaintextHash: encrypted.plaintextHash,
+        },
+    });
+    return {
+        authorizingContainerPathRefs: [
+            containerPathRefs(input.containerProjection.path),
+        ],
+        contentKeyBundle,
+        contentKeyEpoch: contentKeyBundle.contentKeyEpoch,
+        expectedLinkSetManifestHash: contentKeyBundle.linkSetManifestHash,
+        expectedTargetHash: contentKeyBundle.targetHash,
+        // The provisioning device already holds this exact initialized snapshot,
+        // so it does not need the transaction response to echo the update back.
+        localVersionVector: pendingUpdate.partialEndVersionVector,
+        outgoingUpdates: [outgoingUpdate],
+        supportsPullPagination: true,
+    };
+}
+//# sourceMappingURL=initialSync.js.map

package/workflows/documents/sync/initialSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialSync.js","sourceRoot":"","sources":["initialSync.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAM9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAKrD;IACC,MAAM,aAAa,GAAG,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACrE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC;IAC9D,MAAM,gBAAgB,GACpB,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC3D,MAAM,aAAa,GAAwB;QACzC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,GAAG,aAAa;KACjB,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;QACnD,kBAAkB,EAAE,MAAM,wBAAwB,CAChD,KAAK,CAAC,oBAAoB,CAAC,UAAU,CACtC;QACD,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,mBAAmB,CAAC,cAAc;QACxD,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,MAAM,0BAA0B,CAAC;QACtD,4BAA4B,EAAE;YAC5B,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC;SAClD;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,UAAU;QACV,2BAA2B,EAAE,gBAAgB,CAAC,mBAAmB;QACjE,kBAAkB,EAAE,gBAAgB,CAAC,UAAU;QAC/C,cAAc,EAAE,KAAK,CAAC,mBAAmB,CAAC,cAAc;QACxD,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,MAAM,EAAE;YACN,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,uBAAuB,EAAE,aAAa,CAAC,uBAAuB;YAC9D,yBAAyB,EAAE,aAAa,CAAC,yBAAyB;YAClE,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,aAAa,EAAE,SAAS,CAAC,aAAa;SACvC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,4BAA4B,EAAE;YAC5B,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC;SAClD;QACD,gBAAgB;QAChB,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,2BAA2B,EAAE,gBAAgB,CAAC,mBAAmB;QACjE,kBAAkB,EAAE,gBAAgB,CAAC,UAAU;QAC/C,yEAAyE;QACzE,wEAAwE;QACxE,kBAAkB,EAAE,aAAa,CAAC,uBAAuB;QACzD,eAAe,EAAE,CAAC,cAAc,CAAC;QACjC,sBAAsB,EAAE,IAAI;KAC7B,CAAC;AACJ,CAAC","sourcesContent":["import type { DocumentSyncRequest } from \"@tearleads/validators/request\";\nimport type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { createPendingUpdateFields } from \"../../../data/documents/documentSync\";\nimport { importContentKeyMaterial } from \"../../../data/documents/shared/contentRecordKeys\";\nimport { encryptDocumentPendingUpdate } from \"../../../data/documents/shared/crypto\";\nimport { containerPathRefs } from \"../../../data/documents/shared/projection\";\nimport type {\n  DocumentCreateAuthor,\n  MaterializedDocumentCreatePlan,\n} from \"../../../data/documents/shared/types\";\nimport type { PendingUpdateRecord } from \"../../../data/sqlite/documentPersistence\";\nimport { signDocumentOutgoingUpdate } from \"../syncPlan/syncPlanIdentity\";\n\n/**\n * Builds the single encrypted initial write for a provisioned document. The\n * server commits it with the organization and document manifest transaction.\n */\nexport async function buildInitialDocumentSyncRequest(input: {\n  readonly author: DocumentCreateAuthor;\n  readonly containerProjection: ContainerWriterProjectionResponse;\n  readonly initialUpdate: Uint8Array;\n  readonly materializedDocument: MaterializedDocumentCreatePlan;\n}): Promise<DocumentSyncRequest> {\n  const pendingFields = createPendingUpdateFields(input.initialUpdate);\n  if (!pendingFields) {\n    throw new Error(\"Initial document sync update is empty\");\n  }\n\n  const documentId = input.materializedDocument.plan.documentId;\n  const contentKeyBundle =\n    input.materializedDocument.plan.request.contentKeyBundle;\n  const pendingUpdate: PendingUpdateRecord = {\n    id: crypto.randomUUID(),\n    ...pendingFields,\n  };\n  const encrypted = await encryptDocumentPendingUpdate({\n    contentKeyMaterial: await importContentKeyMaterial(\n      input.materializedDocument.contentKey,\n    ),\n    contentKeyEpoch: contentKeyBundle.contentKeyEpoch,\n    documentId,\n    organizationId: input.containerProjection.organizationId,\n    update: pendingUpdate,\n  });\n  const outgoingUpdate = await signDocumentOutgoingUpdate({\n    authorizingContainerPathRefs: [\n      containerPathRefs(input.containerProjection.path),\n    ],\n    author: input.author,\n    contentKeyEpoch: contentKeyBundle.contentKeyEpoch,\n    documentId,\n    expectedLinkSetManifestHash: contentKeyBundle.linkSetManifestHash,\n    expectedTargetHash: contentKeyBundle.targetHash,\n    organizationId: input.containerProjection.organizationId,\n    signedAt: new Date().toISOString(),\n    update: {\n      contentRecordId: encrypted.contentRecordId,\n      encryptedData: encrypted.encryptedData,\n      id: pendingUpdate.id,\n      partialEndVersionVector: pendingUpdate.partialEndVersionVector,\n      partialStartVersionVector: pendingUpdate.partialStartVersionVector,\n      metadataHash: encrypted.metadataHash,\n      ciphertextHash: encrypted.ciphertextHash,\n      plaintextHash: encrypted.plaintextHash,\n    },\n  });\n\n  return {\n    authorizingContainerPathRefs: [\n      containerPathRefs(input.containerProjection.path),\n    ],\n    contentKeyBundle,\n    contentKeyEpoch: contentKeyBundle.contentKeyEpoch,\n    expectedLinkSetManifestHash: contentKeyBundle.linkSetManifestHash,\n    expectedTargetHash: contentKeyBundle.targetHash,\n    // The provisioning device already holds this exact initialized snapshot,\n    // so it does not need the transaction response to echo the update back.\n    localVersionVector: pendingUpdate.partialEndVersionVector,\n    outgoingUpdates: [outgoingUpdate],\n    supportsPullPagination: true,\n  };\n}\n"]}

package/workflows/documents/sync/readOnlyProjectionFailure.js

@@ -0,0 +1,30 @@
+import { KeyingVerificationError } from "../../../internal/crypto/index.js";
+import { isDocumentSyncUpdateIsolationError } from "../../../data/documents/shared/documentSyncUpdateIsolation.js";
+import { rethrowKeyingVerificationError } from "../../../data/keyingProjectionVerification/error.js";
+import { projectionIntegrityErrorCode } from "../syncFailures/syncFailureClassification.js";
+import { DocumentRawHistoryUnavailableError } from "../syncPlan/syncContentKeys.js";
+export const REFRESH_CACHED_PROJECTION = Symbol("refresh cached projection");
+export function handleReadOnlyProjectionCompletionError(error, input) {
+    if (isDocumentSyncUpdateIsolationError(error)) {
+        throw error;
+    }
+    if (error instanceof DocumentRawHistoryUnavailableError) {
+        if (input.allowCachedProjectionRefresh) {
+            return error;
+        }
+        throw error;
+    }
+    if (input.allowCachedProjectionRefresh &&
+        error instanceof KeyingVerificationError &&
+        error.code === "invalid_shape") {
+        return REFRESH_CACHED_PROJECTION;
+    }
+    // The document-store `document.sync` boundary owns durable reporting; this
+    // helper only decides whether an ordinary projection miss is retryable.
+    rethrowKeyingVerificationError(error);
+    if (projectionIntegrityErrorCode(error) || input.historyMode === "raw") {
+        throw error;
+    }
+    return null;
+}
+//# sourceMappingURL=readOnlyProjectionFailure.js.map

package/workflows/documents/sync/readOnlyProjectionFailure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readOnlyProjectionFailure.js","sourceRoot":"","sources":["readOnlyProjectionFailure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,kCAAkC,EAAE,MAAM,4DAA4D,CAAC;AAChH,OAAO,EAAE,8BAA8B,EAAE,MAAM,kDAAkD,CAAC;AAClG,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AAEjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,2BAA2B,CAAC,CAAC;AAE7E,MAAM,UAAU,uCAAuC,CACrD,KAAc,EACd,KAGC;IAKD,IAAI,kCAAkC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,YAAY,kCAAkC,EAAE,CAAC;QACxD,IAAI,KAAK,CAAC,4BAA4B,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IACE,KAAK,CAAC,4BAA4B;QAClC,KAAK,YAAY,uBAAuB;QACxC,KAAK,CAAC,IAAI,KAAK,eAAe,EAC9B,CAAC;QACD,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,2EAA2E;IAC3E,wEAAwE;IACxE,8BAA8B,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,4BAA4B,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QACvE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport { isDocumentSyncUpdateIsolationError } from \"../../../data/documents/shared/documentSyncUpdateIsolation\";\nimport { rethrowKeyingVerificationError } from \"../../../data/keyingProjectionVerification/error\";\nimport { projectionIntegrityErrorCode } from \"../syncFailures/syncFailureClassification\";\nimport { DocumentRawHistoryUnavailableError } from \"../syncPlan/syncContentKeys\";\n\nexport const REFRESH_CACHED_PROJECTION = Symbol(\"refresh cached projection\");\n\nexport function handleReadOnlyProjectionCompletionError(\n  error: unknown,\n  input: {\n    allowCachedProjectionRefresh: boolean;\n    historyMode?: \"raw\" | undefined;\n  },\n):\n  | DocumentRawHistoryUnavailableError\n  | null\n  | typeof REFRESH_CACHED_PROJECTION {\n  if (isDocumentSyncUpdateIsolationError(error)) {\n    throw error;\n  }\n  if (error instanceof DocumentRawHistoryUnavailableError) {\n    if (input.allowCachedProjectionRefresh) {\n      return error;\n    }\n    throw error;\n  }\n  if (\n    input.allowCachedProjectionRefresh &&\n    error instanceof KeyingVerificationError &&\n    error.code === \"invalid_shape\"\n  ) {\n    return REFRESH_CACHED_PROJECTION;\n  }\n  // The document-store `document.sync` boundary owns durable reporting; this\n  // helper only decides whether an ordinary projection miss is retryable.\n  rethrowKeyingVerificationError(error);\n  if (projectionIntegrityErrorCode(error) || input.historyMode === \"raw\") {\n    throw error;\n  }\n  return null;\n}\n"]}