@tearleads/client-sdk 0.1.61 → 0.1.63

package/workflows/container-contents/documentPriming.js

@@ -1,245 +0,0 @@
-import { documentContainerProjectionTables, documentPlacementIntentTables, documentProjectionTables, documentTables, LOCAL_INTENT_LANES, } from "../../data/sqlite/schema.js";
-import { ensureSqlTables } from "../../data/sqlite/sqlSchema.js";
-import { requestDocumentRuntimeTargetSync } from "./documentRuntimeTargetSync.js";
-import { listDocumentRuntimeTargetsForContainerSubtreeFromRuntime } from "./documentSubtreeQueries.js";
-import { getOrphanedDocumentQueryBind, getOrphanedDocumentWhereSql, } from "./orphanedDocumentSql.js";
-// Documents that still NEED a store opened at prime time: local-only creates,
-// queued outbound updates/attachments, an outgoing-delta marker behind the
-// stored content frontier (a deferred tail; encoding inequality
-// over-approximates, which only re-primes a store the old behavior always
-// primed), a never-hydrated document (a freshly discovered share whose
-// content pull the primed lane performs), or a document with a recorded sync
-// failure (a refused revalidation leaves no queued work, so the failure row
-// is the only ticket that re-drives the store — the retry that clears on the
-// next clean pass). Fully-synced hydrated documents are
-// deliberately absent: priming exists to re-drive durable work, and opening a
-// store per settled document is what made a 1000-document boot a storm.
-const PENDING_PRIME_LOCAL_ID_SQL = `
-  SELECT stored.local_id AS local_id
-  FROM documents stored
-  WHERE stored.app_kind = 'documents'
-    AND (
-      stored.document_id IS NULL
-      OR stored.snapshot_end_version = ''
-      OR stored.pull_continuation IS NOT NULL
-      OR COALESCE(stored.pending_base_version, '') <> stored.snapshot_end_version
-      OR EXISTS (
-        SELECT 1
-        FROM document_history_updates pending
-        WHERE pending.app_kind = 'documents'
-          AND pending.local_id = stored.local_id
-          AND pending.update_id IS NOT NULL
-      )
-      OR stored.sync_failure_message IS NOT NULL
-      OR EXISTS (
-        SELECT 1
-        FROM document_pending_attachments attachment
-        WHERE attachment.local_id = stored.local_id
-      )
-    )
-`;
-const PENDING_PRIME_DOCUMENT_CANDIDATE_SQL = `
-  SELECT pending.local_id AS local_id
-  FROM (${PENDING_PRIME_LOCAL_ID_SQL}) pending
-  ORDER BY pending.local_id ASC
-`;
-// The structural startup probe and the priming worker share the same durable
-// predicate so they cannot disagree about what counts as document work.
-const STARTUP_DOCUMENT_SYNC_WORK_SQL = `
-  SELECT 1 AS present
-  WHERE EXISTS (${PENDING_PRIME_LOCAL_ID_SQL})
-    OR EXISTS (
-      SELECT 1
-      FROM local_intents intent
-      -- Blocked and parked denied moves count: blocked intents replay on
-      -- every scan (the blocking condition can heal after hydration), and
-      -- the once-per-launch replay makes denied moves retriable — so a
-      -- relaunch whose only durable work is either kind must still schedule
-      -- the structural pass that re-attempts it (row 7). Unavailable moves
-      -- are excluded: no pass ever replays them (#2278 #4).
-      WHERE intent.lane = '${LOCAL_INTENT_LANES.documentPlacement}'
-        AND intent.sync_status IN ('pending', 'blocked', 'denied')
-    )
-  LIMIT 1
-`;
-export async function hasStartupDocumentSyncWork(runtimeOrExecSql) {
-    const execSql = typeof runtimeOrExecSql === "function"
-        ? runtimeOrExecSql
-        : runtimeOrExecSql.infra.execSql;
-    await ensureSqlTables(execSql, [
-        ...documentTables,
-        ...documentProjectionTables,
-        ...documentPlacementIntentTables,
-    ]);
-    const rows = await execSql(STARTUP_DOCUMENT_SYNC_WORK_SQL);
-    return rows.length > 0;
-}
-async function listPrimeRequiredDocumentCandidatesFromRuntime(runtime) {
-    await ensureSqlTables(runtime.infra.execSql, [
-        ...documentTables,
-        ...documentProjectionTables,
-    ]);
-    const rows = await runtime.infra.execSql(PENDING_PRIME_DOCUMENT_CANDIDATE_SQL);
-    return rows.flatMap((row) => {
-        const localId = Reflect.get(row, "local_id");
-        if (typeof localId !== "string") {
-            return [];
-        }
-        return [{ localId }];
-    });
-}
-// A row with content but a NULL outgoing-delta marker is deliberately treated
-// as unsettled: the store persist path always sets the marker, so over-priming
-// is the safe direction.
-async function listPrimeRequiredLocalIdsFromRuntime(runtime) {
-    const candidates = await listPrimeRequiredDocumentCandidatesFromRuntime(runtime);
-    return new Set(candidates.map((candidate) => candidate.localId));
-}
-/**
- * Last-link orphans (docs/sync-edge-cases.md row 3): the container cascade
- * nulled their projection container and dropped their link rows, so no
- * subtree listing can route them. Placements held for unsigned tombstones
- * also qualify when every link is hidden; their link rows remain intact.
- * These documents are primed with a null container
- * scope instead — the documents runtime accepts one, and the document's own
- * sync pass then resolves its fate against the server: 403 parks it (row 8),
- * a coded 404 destroys it (row 1), and a local-only orphan's create attempt
- * records a terminal failure row. Hidden document kinds stay excluded, and
- * dangling non-null projections (a container row merely missing locally)
- * stay with stale-root recovery, exactly as before.
- *
- * Organization neutrality: the null scope changes only the runtime's
- * containerId — auth, crypto, and organization plumbing are identical to
- * every container-scoped runtime this store already primes with, the sync
- * pass derives billing and keying organizations from the document's own
- * plan and manifest, and a cross-organization author fails closed at the
- * sync layer's identity guard before anything is signed.
- */
-const ORPHANED_PRIME_TARGET_SQL = `
-  SELECT stored.local_id AS local_id, stored.document_id AS document_id
-  FROM documents stored
-  INNER JOIN document_projection projection
-    ON projection.local_id = stored.local_id
-  WHERE stored.app_kind = 'documents'
-    AND ${getOrphanedDocumentWhereSql({
-    documentIdSql: "stored.document_id",
-    projectionAlias: "projection",
-})}
-  ORDER BY stored.local_id ASC
-`;
-/**
- * Unattributed rows (empty/NULL organization) are always included: they are
- * device-first documents created before authentication, which belong to this
- * device's sole user and adopt the active organization when they create.
- */
-async function listOrphanedDocumentPrimeTargets(runtime, organizationId) {
-    await ensureSqlTables(runtime.infra.execSql, [
-        ...documentTables,
-        ...documentProjectionTables,
-        ...documentContainerProjectionTables,
-    ]);
-    const rows = await runtime.infra.execSql(ORPHANED_PRIME_TARGET_SQL, getOrphanedDocumentQueryBind(organizationId));
-    return rows.flatMap((row) => {
-        const localId = Reflect.get(row, "local_id");
-        if (typeof localId !== "string") {
-            return [];
-        }
-        const documentId = Reflect.get(row, "document_id");
-        return [
-            {
-                documentId: typeof documentId === "string" ? documentId : null,
-                localId,
-                runtimeContainerId: null,
-            },
-        ];
-    });
-}
-export async function primeDocumentsForContainerSubtree(input) {
-    const isCurrent = input.isCurrent ?? (() => true);
-    if (!isCurrent())
-        return 0;
-    const [targets, primeRequiredLocalIds] = await Promise.all([
-        listDocumentRuntimeTargetsForContainerSubtreeFromRuntime({
-            containersById: input.containersById,
-            rootContainerId: input.rootContainerId,
-            runtime: input.runtime,
-        }),
-        input.primeRequiredLocalIds ??
-            listPrimeRequiredLocalIdsFromRuntime(input.runtime),
-    ]);
-    if (!isCurrent())
-        return 0;
-    const primed = await requestDocumentRuntimeTargetSync({
-        host: input.host,
-        isCurrent,
-        targets: targets.filter((target) => primeRequiredLocalIds.has(target.localId)),
-    });
-    return primed.size;
-}
-export async function primeDocumentsForLoadedRoots(input) {
-    const isCurrent = input.isCurrent ?? (() => true);
-    if (!isCurrent()) {
-        return {
-            candidateCount: 0,
-            orphanPrimedCount: 0,
-            primedCount: 0,
-            rootCount: 0,
-            unroutableCount: 0,
-        };
-    }
-    const candidates = await listPrimeRequiredDocumentCandidatesFromRuntime(input.runtime);
-    if (!isCurrent()) {
-        return {
-            candidateCount: candidates.length,
-            orphanPrimedCount: 0,
-            primedCount: 0,
-            rootCount: 0,
-            unroutableCount: candidates.length,
-        };
-    }
-    const rootContainerIds = Array.from(input.containersById.values()).flatMap((containerState) => containerState.container.parentId === null
-        ? [containerState.container.id]
-        : []);
-    const requiredLocalIds = new Set(candidates.map((candidate) => candidate.localId));
-    const primedLocalIds = new Set();
-    for (const rootContainerId of rootContainerIds) {
-        if (!isCurrent())
-            break;
-        const targets = await listDocumentRuntimeTargetsForContainerSubtreeFromRuntime({
-            containersById: input.containersById,
-            rootContainerId,
-            runtime: input.runtime,
-        });
-        if (!isCurrent())
-            break;
-        const primed = await requestDocumentRuntimeTargetSync({
-            host: input.host,
-            isCurrent,
-            targets: targets.filter((target) => requiredLocalIds.has(target.localId) &&
-                !primedLocalIds.has(target.localId)),
-        });
-        for (const localId of primed) {
-            primedLocalIds.add(localId);
-        }
-    }
-    const orphanTargets = (isCurrent() && input.organizationId
-        ? await listOrphanedDocumentPrimeTargets(input.runtime, input.organizationId)
-        : []).filter((target) => requiredLocalIds.has(target.localId) &&
-        !primedLocalIds.has(target.localId));
-    const orphanPrimed = await requestDocumentRuntimeTargetSync({
-        host: input.host,
-        isCurrent,
-        targets: isCurrent() ? orphanTargets : [],
-    });
-    for (const localId of orphanPrimed) {
-        primedLocalIds.add(localId);
-    }
-    return {
-        candidateCount: candidates.length,
-        orphanPrimedCount: orphanPrimed.size,
-        primedCount: primedLocalIds.size,
-        rootCount: rootContainerIds.length,
-        unroutableCount: candidates.filter((candidate) => !primedLocalIds.has(candidate.localId)).length,
-    };
-}
-//# sourceMappingURL=documentPriming.js.map

package/workflows/container-contents/documentPriming.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"documentPriming.js","sourceRoot":"","sources":["documentPriming.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,wBAAwB,EACxB,cAAc,EACd,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAO9D,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,wDAAwD,EAAE,MAAM,0BAA0B,CAAC;AACpG,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAc/B,8EAA8E;AAC9E,2EAA2E;AAC3E,gEAAgE;AAChE,0EAA0E;AAC1E,uEAAuE;AACvE,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,wDAAwD;AACxD,8EAA8E;AAC9E,wEAAwE;AACxE,MAAM,0BAA0B,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBlC,CAAC;AAEF,MAAM,oCAAoC,GAAG;;UAEnC,0BAA0B;;CAEnC,CAAC;AAEF,6EAA6E;AAC7E,wEAAwE;AACxE,MAAM,8BAA8B,GAAG;;kBAErB,0BAA0B;;;;;;;;;;6BAUf,kBAAkB,CAAC,iBAAiB;;;;CAIhE,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,gBAEuD;IAEvD,MAAM,OAAO,GACX,OAAO,gBAAgB,KAAK,UAAU;QACpC,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC;IACrC,MAAM,eAAe,CAAC,OAAO,EAAE;QAC7B,GAAG,cAAc;QACjB,GAAG,wBAAwB;QAC3B,GAAG,6BAA6B;KACjC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,8CAA8C,CAC3D,OAAwC;IAExC,MAAM,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE;QAC3C,GAAG,cAAc;QACjB,GAAG,wBAAwB;KAC5B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CACtC,oCAAoC,CACrC,CAAC;IAEF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,yBAAyB;AACzB,KAAK,UAAU,oCAAoC,CACjD,OAAwC;IAExC,MAAM,UAAU,GACd,MAAM,8CAA8C,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,yBAAyB,GAAG;;;;;;UAMxB,2BAA2B,CAAC;IAChC,aAAa,EAAE,oBAAoB;IACnC,eAAe,EAAE,YAAY;CAC9B,CAAC;;CAEL,CAAC;AAEF;;;;GAIG;AACH,KAAK,UAAU,gCAAgC,CAC7C,OAAwC,EACxC,cAAsB;IAEtB,MAAM,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE;QAC3C,GAAG,cAAc;QACjB,GAAG,wBAAwB;QAC3B,GAAG,iCAAiC;KACrC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CACtC,yBAAyB,EACzB,4BAA4B,CAAC,cAAc,CAAC,CAC7C,CAAC;IACF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACnD,OAAO;YACL;gBACE,UAAU,EAAE,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;gBAC9D,OAAO;gBACP,kBAAkB,EAAE,IAAI;aACzB;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAW,KAOjE;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,CAAC,CAAC;IAC3B,MAAM,CAAC,OAAO,EAAE,qBAAqB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,wDAAwD,CAAC;YACvD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,KAAK,CAAC,qBAAqB;YACzB,oCAAoC,CAAC,KAAK,CAAC,OAAO,CAAC;KACtD,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC;QACpD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS;QACT,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACjC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAC1C;KACF,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAW,KAc5D;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,cAAc,EAAE,CAAC;YACjB,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,CAAC;YACZ,eAAe,EAAE,CAAC;SACnB,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,8CAA8C,CACrE,KAAK,CAAC,OAAO,CACd,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,cAAc,EAAE,UAAU,CAAC,MAAM;YACjC,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,CAAC;YACZ,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CACxE,CAAC,cAAc,EAAE,EAAE,CACjB,cAAc,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;QACxC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,CAAC,CAAC,EAAE,CACT,CAAC;IACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CACjD,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE;YAAE,MAAM;QACxB,MAAM,OAAO,GACX,MAAM,wDAAwD,CAAC;YAC7D,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe;YACf,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACL,IAAI,CAAC,SAAS,EAAE;YAAE,MAAM;QACxB,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC;YACpD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS;YACT,OAAO,EAAE,OAAO,CAAC,MAAM,CACrB,CAAC,MAAM,EAAE,EAAE,CACT,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;gBACpC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CACtC;SACF,CAAC,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,CACpB,SAAS,EAAE,IAAI,KAAK,CAAC,cAAc;QACjC,CAAC,CAAC,MAAM,gCAAgC,CACpC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,CACrB;QACH,CAAC,CAAC,EAAE,CACP,CAAC,MAAM,CACN,CAAC,MAAM,EAAE,EAAE,CACT,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QACpC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CACtC,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,gCAAgC,CAAC;QAC1D,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS;QACT,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;KAC1C,CAAC,CAAC;IACH,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO;QACL,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,iBAAiB,EAAE,YAAY,CAAC,IAAI;QACpC,WAAW,EAAE,cAAc,CAAC,IAAI;QAChC,SAAS,EAAE,gBAAgB,CAAC,MAAM;QAClC,eAAe,EAAE,UAAU,CAAC,MAAM,CAChC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CACtD,CAAC,MAAM;KACT,CAAC;AACJ,CAAC","sourcesContent":["import {\n  documentContainerProjectionTables,\n  documentPlacementIntentTables,\n  documentProjectionTables,\n  documentTables,\n  LOCAL_INTENT_LANES,\n} from \"../../data/sqlite/schema\";\nimport { ensureSqlTables } from \"../../data/sqlite/sqlSchema\";\nimport type {\n  ContainerContentsContainerSubtreeState,\n  ContainerContentsDocumentRuntimeTarget,\n  ContainerDocumentPrimeHost,\n  ContainerDocumentQueriesRuntime,\n} from \"./documentQueries/types\";\nimport { requestDocumentRuntimeTargetSync } from \"./documentRuntimeTargetSync\";\nimport { listDocumentRuntimeTargetsForContainerSubtreeFromRuntime } from \"./documentSubtreeQueries\";\nimport {\n  getOrphanedDocumentQueryBind,\n  getOrphanedDocumentWhereSql,\n} from \"./orphanedDocumentSql\";\n\ninterface PrimeRequiredDocumentCandidate {\n  readonly localId: string;\n}\n\ninterface LoadedRootDocumentPrimeResult {\n  readonly candidateCount: number;\n  readonly orphanPrimedCount: number;\n  readonly primedCount: number;\n  readonly rootCount: number;\n  readonly unroutableCount: number;\n}\n\n// Documents that still NEED a store opened at prime time: local-only creates,\n// queued outbound updates/attachments, an outgoing-delta marker behind the\n// stored content frontier (a deferred tail; encoding inequality\n// over-approximates, which only re-primes a store the old behavior always\n// primed), a never-hydrated document (a freshly discovered share whose\n// content pull the primed lane performs), or a document with a recorded sync\n// failure (a refused revalidation leaves no queued work, so the failure row\n// is the only ticket that re-drives the store — the retry that clears on the\n// next clean pass). Fully-synced hydrated documents are\n// deliberately absent: priming exists to re-drive durable work, and opening a\n// store per settled document is what made a 1000-document boot a storm.\nconst PENDING_PRIME_LOCAL_ID_SQL = `\n  SELECT stored.local_id AS local_id\n  FROM documents stored\n  WHERE stored.app_kind = 'documents'\n    AND (\n      stored.document_id IS NULL\n      OR stored.snapshot_end_version = ''\n      OR stored.pull_continuation IS NOT NULL\n      OR COALESCE(stored.pending_base_version, '') <> stored.snapshot_end_version\n      OR EXISTS (\n        SELECT 1\n        FROM document_history_updates pending\n        WHERE pending.app_kind = 'documents'\n          AND pending.local_id = stored.local_id\n          AND pending.update_id IS NOT NULL\n      )\n      OR stored.sync_failure_message IS NOT NULL\n      OR EXISTS (\n        SELECT 1\n        FROM document_pending_attachments attachment\n        WHERE attachment.local_id = stored.local_id\n      )\n    )\n`;\n\nconst PENDING_PRIME_DOCUMENT_CANDIDATE_SQL = `\n  SELECT pending.local_id AS local_id\n  FROM (${PENDING_PRIME_LOCAL_ID_SQL}) pending\n  ORDER BY pending.local_id ASC\n`;\n\n// The structural startup probe and the priming worker share the same durable\n// predicate so they cannot disagree about what counts as document work.\nconst STARTUP_DOCUMENT_SYNC_WORK_SQL = `\n  SELECT 1 AS present\n  WHERE EXISTS (${PENDING_PRIME_LOCAL_ID_SQL})\n    OR EXISTS (\n      SELECT 1\n      FROM local_intents intent\n      -- Blocked and parked denied moves count: blocked intents replay on\n      -- every scan (the blocking condition can heal after hydration), and\n      -- the once-per-launch replay makes denied moves retriable — so a\n      -- relaunch whose only durable work is either kind must still schedule\n      -- the structural pass that re-attempts it (row 7). Unavailable moves\n      -- are excluded: no pass ever replays them (#2278 #4).\n      WHERE intent.lane = '${LOCAL_INTENT_LANES.documentPlacement}'\n        AND intent.sync_status IN ('pending', 'blocked', 'denied')\n    )\n  LIMIT 1\n`;\n\nexport async function hasStartupDocumentSyncWork(\n  runtimeOrExecSql:\n    | ContainerDocumentQueriesRuntime\n    | ContainerDocumentQueriesRuntime[\"infra\"][\"execSql\"],\n): Promise<boolean> {\n  const execSql =\n    typeof runtimeOrExecSql === \"function\"\n      ? runtimeOrExecSql\n      : runtimeOrExecSql.infra.execSql;\n  await ensureSqlTables(execSql, [\n    ...documentTables,\n    ...documentProjectionTables,\n    ...documentPlacementIntentTables,\n  ]);\n  const rows = await execSql(STARTUP_DOCUMENT_SYNC_WORK_SQL);\n  return rows.length > 0;\n}\n\nasync function listPrimeRequiredDocumentCandidatesFromRuntime(\n  runtime: ContainerDocumentQueriesRuntime,\n): Promise<PrimeRequiredDocumentCandidate[]> {\n  await ensureSqlTables(runtime.infra.execSql, [\n    ...documentTables,\n    ...documentProjectionTables,\n  ]);\n  const rows = await runtime.infra.execSql(\n    PENDING_PRIME_DOCUMENT_CANDIDATE_SQL,\n  );\n\n  return rows.flatMap((row) => {\n    const localId = Reflect.get(row, \"local_id\");\n    if (typeof localId !== \"string\") {\n      return [];\n    }\n    return [{ localId }];\n  });\n}\n\n// A row with content but a NULL outgoing-delta marker is deliberately treated\n// as unsettled: the store persist path always sets the marker, so over-priming\n// is the safe direction.\nasync function listPrimeRequiredLocalIdsFromRuntime(\n  runtime: ContainerDocumentQueriesRuntime,\n): Promise<ReadonlySet<string>> {\n  const candidates =\n    await listPrimeRequiredDocumentCandidatesFromRuntime(runtime);\n  return new Set(candidates.map((candidate) => candidate.localId));\n}\n\n/**\n * Last-link orphans (docs/sync-edge-cases.md row 3): the container cascade\n * nulled their projection container and dropped their link rows, so no\n * subtree listing can route them. Placements held for unsigned tombstones\n * also qualify when every link is hidden; their link rows remain intact.\n * These documents are primed with a null container\n * scope instead — the documents runtime accepts one, and the document's own\n * sync pass then resolves its fate against the server: 403 parks it (row 8),\n * a coded 404 destroys it (row 1), and a local-only orphan's create attempt\n * records a terminal failure row. Hidden document kinds stay excluded, and\n * dangling non-null projections (a container row merely missing locally)\n * stay with stale-root recovery, exactly as before.\n *\n * Organization neutrality: the null scope changes only the runtime's\n * containerId — auth, crypto, and organization plumbing are identical to\n * every container-scoped runtime this store already primes with, the sync\n * pass derives billing and keying organizations from the document's own\n * plan and manifest, and a cross-organization author fails closed at the\n * sync layer's identity guard before anything is signed.\n */\nconst ORPHANED_PRIME_TARGET_SQL = `\n  SELECT stored.local_id AS local_id, stored.document_id AS document_id\n  FROM documents stored\n  INNER JOIN document_projection projection\n    ON projection.local_id = stored.local_id\n  WHERE stored.app_kind = 'documents'\n    AND ${getOrphanedDocumentWhereSql({\n      documentIdSql: \"stored.document_id\",\n      projectionAlias: \"projection\",\n    })}\n  ORDER BY stored.local_id ASC\n`;\n\n/**\n * Unattributed rows (empty/NULL organization) are always included: they are\n * device-first documents created before authentication, which belong to this\n * device's sole user and adopt the active organization when they create.\n */\nasync function listOrphanedDocumentPrimeTargets(\n  runtime: ContainerDocumentQueriesRuntime,\n  organizationId: string,\n): Promise<ContainerContentsDocumentRuntimeTarget[]> {\n  await ensureSqlTables(runtime.infra.execSql, [\n    ...documentTables,\n    ...documentProjectionTables,\n    ...documentContainerProjectionTables,\n  ]);\n  const rows = await runtime.infra.execSql(\n    ORPHANED_PRIME_TARGET_SQL,\n    getOrphanedDocumentQueryBind(organizationId),\n  );\n  return rows.flatMap((row) => {\n    const localId = Reflect.get(row, \"local_id\");\n    if (typeof localId !== \"string\") {\n      return [];\n    }\n    const documentId = Reflect.get(row, \"document_id\");\n    return [\n      {\n        documentId: typeof documentId === \"string\" ? documentId : null,\n        localId,\n        runtimeContainerId: null,\n      },\n    ];\n  });\n}\n\nexport async function primeDocumentsForContainerSubtree<TRuntime>(input: {\n  containersById: ReadonlyMap<string, ContainerContentsContainerSubtreeState>;\n  host: ContainerDocumentPrimeHost<TRuntime>;\n  isCurrent?: (() => boolean) | undefined;\n  primeRequiredLocalIds?: ReadonlySet<string>;\n  rootContainerId: string;\n  runtime: ContainerDocumentQueriesRuntime;\n}): Promise<number> {\n  const isCurrent = input.isCurrent ?? (() => true);\n  if (!isCurrent()) return 0;\n  const [targets, primeRequiredLocalIds] = await Promise.all([\n    listDocumentRuntimeTargetsForContainerSubtreeFromRuntime({\n      containersById: input.containersById,\n      rootContainerId: input.rootContainerId,\n      runtime: input.runtime,\n    }),\n    input.primeRequiredLocalIds ??\n      listPrimeRequiredLocalIdsFromRuntime(input.runtime),\n  ]);\n  if (!isCurrent()) return 0;\n  const primed = await requestDocumentRuntimeTargetSync({\n    host: input.host,\n    isCurrent,\n    targets: targets.filter((target) =>\n      primeRequiredLocalIds.has(target.localId),\n    ),\n  });\n  return primed.size;\n}\n\nexport async function primeDocumentsForLoadedRoots<TRuntime>(input: {\n  containersById: ReadonlyMap<string, ContainerContentsContainerSubtreeState>;\n  host: ContainerDocumentPrimeHost<TRuntime>;\n  isCurrent?: (() => boolean) | undefined;\n  /**\n   * The store scope's organization. Orphan priming is bounded to it: each\n   * organization-scoped store resolves only its own orphans, matching the\n   * per-organization invariant subtree routing provides implicitly (a pass\n   * signed under another organization would fail the sync identity guard\n   * instead of resolving). Absent — unauthenticated or scope-less callers —\n   * orphan priming is skipped entirely.\n   */\n  organizationId?: string | null;\n  runtime: ContainerDocumentQueriesRuntime;\n}): Promise<LoadedRootDocumentPrimeResult> {\n  const isCurrent = input.isCurrent ?? (() => true);\n  if (!isCurrent()) {\n    return {\n      candidateCount: 0,\n      orphanPrimedCount: 0,\n      primedCount: 0,\n      rootCount: 0,\n      unroutableCount: 0,\n    };\n  }\n  const candidates = await listPrimeRequiredDocumentCandidatesFromRuntime(\n    input.runtime,\n  );\n  if (!isCurrent()) {\n    return {\n      candidateCount: candidates.length,\n      orphanPrimedCount: 0,\n      primedCount: 0,\n      rootCount: 0,\n      unroutableCount: candidates.length,\n    };\n  }\n  const rootContainerIds = Array.from(input.containersById.values()).flatMap(\n    (containerState) =>\n      containerState.container.parentId === null\n        ? [containerState.container.id]\n        : [],\n  );\n  const requiredLocalIds = new Set(\n    candidates.map((candidate) => candidate.localId),\n  );\n  const primedLocalIds = new Set<string>();\n\n  for (const rootContainerId of rootContainerIds) {\n    if (!isCurrent()) break;\n    const targets =\n      await listDocumentRuntimeTargetsForContainerSubtreeFromRuntime({\n        containersById: input.containersById,\n        rootContainerId,\n        runtime: input.runtime,\n      });\n    if (!isCurrent()) break;\n    const primed = await requestDocumentRuntimeTargetSync({\n      host: input.host,\n      isCurrent,\n      targets: targets.filter(\n        (target) =>\n          requiredLocalIds.has(target.localId) &&\n          !primedLocalIds.has(target.localId),\n      ),\n    });\n    for (const localId of primed) {\n      primedLocalIds.add(localId);\n    }\n  }\n\n  const orphanTargets = (\n    isCurrent() && input.organizationId\n      ? await listOrphanedDocumentPrimeTargets(\n          input.runtime,\n          input.organizationId,\n        )\n      : []\n  ).filter(\n    (target) =>\n      requiredLocalIds.has(target.localId) &&\n      !primedLocalIds.has(target.localId),\n  );\n  const orphanPrimed = await requestDocumentRuntimeTargetSync({\n    host: input.host,\n    isCurrent,\n    targets: isCurrent() ? orphanTargets : [],\n  });\n  for (const localId of orphanPrimed) {\n    primedLocalIds.add(localId);\n  }\n\n  return {\n    candidateCount: candidates.length,\n    orphanPrimedCount: orphanPrimed.size,\n    primedCount: primedLocalIds.size,\n    rootCount: rootContainerIds.length,\n    unroutableCount: candidates.filter(\n      (candidate) => !primedLocalIds.has(candidate.localId),\n    ).length,\n  };\n}\n"]}

package/workflows/container-contents/documentPurge.d.ts

@@ -1,37 +0,0 @@
-import type { DocumentPurgeResponse } from "../../internal/validators/response/index.js";
-import type { StoredDocumentKind } from "../../data/documents/documentKinds.js";
-import type { ProjectionUserKeyResolver } from "../../data/keyingProjectionVerification/index.js";
-import { type DocumentsPersistence, deletePersistedDocument } from "../documents/index.js";
-import type { SubtreePurgeRoot } from "../documents/subtreePurgeScope.js";
-import type { ContainerContentsWorkflowRuntime } from "./runtime.js";
-type ContainerDocumentPurgeApi = Pick<ContainerContentsWorkflowRuntime["apiClient"], "getPrincipalPolicyPages" | "getProjectionPolicyHistoryPages" | "getDocumentPurgeProof" | "getDocumentWriterProjectionResult" | "purgeDocument">;
-type DocumentPurgeResult = DocumentPurgeResponse | {
-    readonly documentId: string;
-    readonly purgedAt: string;
-    readonly reclaimedBlobStorageKeys: readonly string[];
-} | null;
-interface ContainerDocumentPurgeRuntime extends Pick<ContainerContentsWorkflowRuntime, "auth" | "crypto" | "infra" | "resolveTrustedUserIdentity" | "state" | "util"> {
-    apiClient: ContainerDocumentPurgeApi;
-}
-interface PurgeRemoteContainerDocumentInput {
-    beforeSubmit?: (() => Promise<boolean>) | undefined;
-    documentId: string;
-    expectedSubtreeRoot?: SubtreePurgeRoot | undefined;
-    stillCurrent?: (() => boolean) | undefined;
-    documentKind: StoredDocumentKind;
-    noteId: string;
-    persistence?: DocumentsPersistence | undefined;
-    resolveProjectionUserKey: ProjectionUserKeyResolver;
-    runtime: ContainerDocumentPurgeRuntime;
-}
-export declare function purgeRemoteContainerDocument(input: PurgeRemoteContainerDocumentInput): Promise<DocumentPurgeResult>;
-interface ContainerDocumentLocalPurgeRuntime extends Pick<ContainerContentsWorkflowRuntime, "infra" | "util"> {
-}
-export declare function purgeLocalContainerDocument(input: {
-    beforeDeleteInTransaction?: Parameters<typeof deletePersistedDocument>[0]["beforeDeleteInTransaction"];
-    noteId: string;
-    expectedContainerId?: string | null | undefined;
-    persistence?: DocumentsPersistence | undefined;
-    runtime: ContainerDocumentLocalPurgeRuntime;
-}): Promise<DocumentPurgeResult>;
-export {};

package/workflows/container-contents/documentPurge.js

@@ -1,136 +0,0 @@
-import { reportAndRethrowKeyingVerificationError } from "../../data/keyingProjectionVerification/error.js";
-import { rethrowProjectionVerificationCancelled } from "../../data/keyingProjectionVerification/types.js";
-import { errorMessage } from "../../data/shared/errorMessage.js";
-import { defaultDocumentsPersistence, deletePersistedDocument, purgeRemoteDocument, reclaimDocumentOrphanBlobs, resolveDocumentCreateAuthor, } from "../documents/index.js";
-import { ensureDocumentClientProjectionTables } from "../documents/persistence.js";
-import { createRuntimePrincipalPolicyWarmer } from "../principals/runtimePolicyWarmer.js";
-async function deleteAbsentDocumentState(input) {
-    return input.persistence.deleteDocumentSideRowsIfAbsent(input.runtime.infra.execSql, input.noteId, input.documentId, async (transactionExecSql) => {
-        await input.runtime.infra.documentProjectors.deleteStoredDocumentClientProjection({
-            documentKind: input.documentKind,
-            execSql: transactionExecSql,
-            localId: input.noteId,
-        });
-        await input.commitPurgeProof(transactionExecSql);
-    });
-}
-async function commitVerifiedDocumentPurge(input) {
-    await input.persistence.ensureSchema(input.runtime.infra.execSql);
-    await ensureDocumentClientProjectionTables({
-        documentProjectors: input.runtime.infra.documentProjectors,
-        execSql: input.runtime.infra.execSql,
-    });
-    const expectedRecord = await input.persistence.loadDocument(input.runtime.infra.execSql, input.noteId);
-    if (expectedRecord && expectedRecord.documentId !== input.documentId) {
-        throw new Error("Local document identity changed while its remote purge was committing");
-    }
-    const deleted = expectedRecord
-        ? await deletePersistedDocument({
-            beforeDeleteInTransaction: input.commitPurgeProof,
-            documentProjectors: input.runtime.infra.documentProjectors,
-            execSql: input.runtime.infra.execSql,
-            expectedRecord,
-            localId: input.noteId,
-            persistence: input.persistence,
-        })
-        : await deleteAbsentDocumentState(input);
-    if (!deleted) {
-        throw new Error("Local document state changed while its remote purge was committing");
-    }
-    return true;
-}
-export async function purgeRemoteContainerDocument(input) {
-    const { documentId, noteId, runtime } = input;
-    const persistence = input.persistence ?? defaultDocumentsPersistence;
-    try {
-        const author = resolveDocumentCreateAuthor(runtime);
-        if (!author) {
-            runtime.util.log(`Container contents: failed to purge note ${noteId} because the local signing context is unavailable`);
-            return null;
-        }
-        let deleted = false;
-        const response = await purgeRemoteDocument({
-            apiClient: runtime.apiClient,
-            beforeSubmit: input.beforeSubmit,
-            author,
-            documentId,
-            expectedSubtreeRoot: input.expectedSubtreeRoot,
-            stillCurrent: input.stillCurrent,
-            execSql: runtime.infra.execSql,
-            onVerifiedPurge: async ({ commitPurgeProof }) => {
-                deleted = await commitVerifiedDocumentPurge({
-                    commitPurgeProof,
-                    documentId,
-                    documentKind: input.documentKind,
-                    noteId,
-                    persistence,
-                    runtime,
-                });
-            },
-            resolveProjectionUserKey: input.resolveProjectionUserKey,
-            warmReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(runtime),
-        });
-        if (!response) {
-            runtime.util.log(`Container contents: failed to purge note ${noteId} (document ${documentId})`);
-            return null;
-        }
-        if (deleted) {
-            void reclaimDocumentOrphanBlobs(runtime, persistence);
-        }
-        runtime.util.log(`Container contents: purged note ${noteId} (document ${documentId})`);
-        return response;
-    }
-    catch (error) {
-        // A cancelled verification is neither a failure nor a completed purge; the
-        // caller that owns the generation decides what to do with it.
-        rethrowProjectionVerificationCancelled(error);
-        await reportAndRethrowKeyingVerificationError(error, runtime.util.reportSecurityIncident, {
-            objectId: documentId,
-            objectKind: "document",
-            operation: "document.purge",
-        });
-        runtime.util.log(`Container contents: failed to purge note ${noteId} (document ${documentId}): ${errorMessage(error)}`);
-        return null;
-    }
-}
-export async function purgeLocalContainerDocument(input) {
-    const { noteId, runtime } = input;
-    const persistence = input.persistence ?? defaultDocumentsPersistence;
-    try {
-        await persistence.ensureSchema(runtime.infra.execSql);
-        const expectedRecord = await persistence.loadDocument(runtime.infra.execSql, noteId);
-        if (!expectedRecord ||
-            expectedRecord.documentId !== null ||
-            (input.expectedContainerId !== undefined &&
-                expectedRecord.containerId !== input.expectedContainerId)) {
-            runtime.util.log(`Container contents: local-only purge refused for note ${noteId} because it is absent or remote-backed`);
-            return null;
-        }
-        const deleted = await deletePersistedDocument({
-            beforeDeleteInTransaction: input.beforeDeleteInTransaction,
-            documentProjectors: runtime.infra.documentProjectors,
-            execSql: runtime.infra.execSql,
-            expectedRecord,
-            localId: noteId,
-            persistence,
-        });
-        if (!deleted) {
-            runtime.util.log(`Container contents: local-only purge refused for note ${noteId} because its identity changed`);
-            return null;
-        }
-        if (deleted) {
-            void reclaimDocumentOrphanBlobs(runtime, persistence);
-        }
-        runtime.util.log(`Container contents: purged local-only note ${noteId}`);
-        return {
-            documentId: noteId,
-            purgedAt: new Date().toISOString(),
-            reclaimedBlobStorageKeys: [],
-        };
-    }
-    catch (error) {
-        runtime.util.log(`Container contents: failed to purge local-only note ${noteId}: ${errorMessage(error)}`);
-        return null;
-    }
-}
-//# sourceMappingURL=documentPurge.js.map

package/workflows/container-contents/documentPurge.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"documentPurge.js","sourceRoot":"","sources":["documentPurge.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,sCAAsC,EAAE,MAAM,+CAA+C,CAAC;AACvG,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAEL,2BAA2B,EAC3B,uBAAuB,EACvB,mBAAmB,EACnB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oCAAoC,EAAE,MAAM,0BAA0B,CAAC;AAEhF,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC;AA6CvF,KAAK,UAAU,yBAAyB,CAAC,KASxC;IACC,OAAO,KAAK,CAAC,WAAW,CAAC,8BAA8B,CACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,EAChB,KAAK,EAAE,kBAAkB,EAAE,EAAE;QAC3B,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,oCAAoC,CAC/E;YACE,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,KAAK,CAAC,MAAM;SACtB,CACF,CAAC;QACF,MAAM,KAAK,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACnD,CAAC,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAS1C;IACC,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,oCAAoC,CAAC;QACzC,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB;QAC1D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;KACrC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CACzD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,KAAK,CAAC,MAAM,CACb,CAAC;IACF,IAAI,cAAc,IAAI,cAAc,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,cAAc;QAC5B,CAAC,CAAC,MAAM,uBAAuB,CAAC;YAC5B,yBAAyB,EAAE,KAAK,CAAC,gBAAgB;YACjD,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB;YAC1D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACpC,cAAc;YACd,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;QACJ,CAAC,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAAwC;IAExC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC9C,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,2BAA2B,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,mDAAmD,CACtG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;YACzC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM;YACN,UAAU;YACV,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,eAAe,EAAE,KAAK,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE;gBAC9C,OAAO,GAAG,MAAM,2BAA2B,CAAC;oBAC1C,gBAAgB;oBAChB,UAAU;oBACV,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,MAAM;oBACN,WAAW;oBACX,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YACD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,+BAA+B,EAC7B,kCAAkC,CAAC,OAAO,CAAC;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,cAAc,UAAU,GAAG,CAC9E,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,mCAAmC,MAAM,cAAc,UAAU,GAAG,CACrE,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,8DAA8D;QAC9D,sCAAsC,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,uCAAuC,CAC3C,KAAK,EACL,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,gBAAgB;SAC5B,CACF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,cAAc,UAAU,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAQjD;IACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAClC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,2BAA2B,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,MAAM,WAAW,CAAC,YAAY,CACnD,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,MAAM,CACP,CAAC;QACF,IACE,CAAC,cAAc;YACf,cAAc,CAAC,UAAU,KAAK,IAAI;YAClC,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS;gBACtC,cAAc,CAAC,WAAW,KAAK,KAAK,CAAC,mBAAmB,CAAC,EAC3D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,yDAAyD,MAAM,wCAAwC,CACxG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;YAC5C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;YAC1D,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,kBAAkB;YACpD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,cAAc;YACd,OAAO,EAAE,MAAM;YACf,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,yDAAyD,MAAM,+BAA+B,CAC/F,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAC;QACzE,OAAO;YACL,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,wBAAwB,EAAE,EAAE;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,uDAAuD,MAAM,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CACxF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import type { DocumentPurgeResponse } from \"@tearleads/validators/response\";\nimport type { StoredDocumentKind } from \"../../data/documents/documentKinds\";\nimport type { ProjectionUserKeyResolver } from \"../../data/keyingProjectionVerification\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../data/keyingProjectionVerification/error\";\nimport { rethrowProjectionVerificationCancelled } from \"../../data/keyingProjectionVerification/types\";\nimport { errorMessage } from \"../../data/shared/errorMessage\";\nimport {\n  type DocumentsPersistence,\n  defaultDocumentsPersistence,\n  deletePersistedDocument,\n  purgeRemoteDocument,\n  reclaimDocumentOrphanBlobs,\n  resolveDocumentCreateAuthor,\n} from \"../documents\";\nimport { ensureDocumentClientProjectionTables } from \"../documents/persistence\";\nimport type { SubtreePurgeRoot } from \"../documents/subtreePurgeScope\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../principals/runtimePolicyWarmer\";\nimport type { ContainerContentsWorkflowRuntime } from \"./runtime\";\n\ntype ContainerDocumentPurgeApi = Pick<\n  ContainerContentsWorkflowRuntime[\"apiClient\"],\n  | \"getPrincipalPolicyPages\"\n  | \"getProjectionPolicyHistoryPages\"\n  | \"getDocumentPurgeProof\"\n  | \"getDocumentWriterProjectionResult\"\n  | \"purgeDocument\"\n>;\ntype DocumentPurgeResult =\n  | DocumentPurgeResponse\n  | {\n      readonly documentId: string;\n      readonly purgedAt: string;\n      readonly reclaimedBlobStorageKeys: readonly string[];\n    }\n  | null;\n\ninterface ContainerDocumentPurgeRuntime\n  extends Pick<\n    ContainerContentsWorkflowRuntime,\n    | \"auth\"\n    | \"crypto\"\n    | \"infra\"\n    | \"resolveTrustedUserIdentity\"\n    | \"state\"\n    | \"util\"\n  > {\n  apiClient: ContainerDocumentPurgeApi;\n}\n\ninterface PurgeRemoteContainerDocumentInput {\n  beforeSubmit?: (() => Promise<boolean>) | undefined;\n  documentId: string;\n  expectedSubtreeRoot?: SubtreePurgeRoot | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  documentKind: StoredDocumentKind;\n  noteId: string;\n  persistence?: DocumentsPersistence | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  runtime: ContainerDocumentPurgeRuntime;\n}\n\nasync function deleteAbsentDocumentState(input: {\n  readonly commitPurgeProof: (\n    transactionExecSql: ContainerDocumentPurgeRuntime[\"infra\"][\"execSql\"],\n  ) => Promise<void>;\n  readonly documentId: string;\n  readonly documentKind: StoredDocumentKind;\n  readonly noteId: string;\n  readonly persistence: DocumentsPersistence;\n  readonly runtime: ContainerDocumentPurgeRuntime;\n}): Promise<boolean> {\n  return input.persistence.deleteDocumentSideRowsIfAbsent(\n    input.runtime.infra.execSql,\n    input.noteId,\n    input.documentId,\n    async (transactionExecSql) => {\n      await input.runtime.infra.documentProjectors.deleteStoredDocumentClientProjection(\n        {\n          documentKind: input.documentKind,\n          execSql: transactionExecSql,\n          localId: input.noteId,\n        },\n      );\n      await input.commitPurgeProof(transactionExecSql);\n    },\n  );\n}\n\nasync function commitVerifiedDocumentPurge(input: {\n  readonly commitPurgeProof: (\n    transactionExecSql: ContainerDocumentPurgeRuntime[\"infra\"][\"execSql\"],\n  ) => Promise<void>;\n  readonly documentId: string;\n  readonly documentKind: StoredDocumentKind;\n  readonly noteId: string;\n  readonly persistence: DocumentsPersistence;\n  readonly runtime: ContainerDocumentPurgeRuntime;\n}): Promise<boolean> {\n  await input.persistence.ensureSchema(input.runtime.infra.execSql);\n  await ensureDocumentClientProjectionTables({\n    documentProjectors: input.runtime.infra.documentProjectors,\n    execSql: input.runtime.infra.execSql,\n  });\n  const expectedRecord = await input.persistence.loadDocument(\n    input.runtime.infra.execSql,\n    input.noteId,\n  );\n  if (expectedRecord && expectedRecord.documentId !== input.documentId) {\n    throw new Error(\n      \"Local document identity changed while its remote purge was committing\",\n    );\n  }\n  const deleted = expectedRecord\n    ? await deletePersistedDocument({\n        beforeDeleteInTransaction: input.commitPurgeProof,\n        documentProjectors: input.runtime.infra.documentProjectors,\n        execSql: input.runtime.infra.execSql,\n        expectedRecord,\n        localId: input.noteId,\n        persistence: input.persistence,\n      })\n    : await deleteAbsentDocumentState(input);\n  if (!deleted) {\n    throw new Error(\n      \"Local document state changed while its remote purge was committing\",\n    );\n  }\n  return true;\n}\n\nexport async function purgeRemoteContainerDocument(\n  input: PurgeRemoteContainerDocumentInput,\n): Promise<DocumentPurgeResult> {\n  const { documentId, noteId, runtime } = input;\n  const persistence = input.persistence ?? defaultDocumentsPersistence;\n  try {\n    const author = resolveDocumentCreateAuthor(runtime);\n    if (!author) {\n      runtime.util.log(\n        `Container contents: failed to purge note ${noteId} because the local signing context is unavailable`,\n      );\n      return null;\n    }\n    let deleted = false;\n    const response = await purgeRemoteDocument({\n      apiClient: runtime.apiClient,\n      beforeSubmit: input.beforeSubmit,\n      author,\n      documentId,\n      expectedSubtreeRoot: input.expectedSubtreeRoot,\n      stillCurrent: input.stillCurrent,\n      execSql: runtime.infra.execSql,\n      onVerifiedPurge: async ({ commitPurgeProof }) => {\n        deleted = await commitVerifiedDocumentPurge({\n          commitPurgeProof,\n          documentId,\n          documentKind: input.documentKind,\n          noteId,\n          persistence,\n          runtime,\n        });\n      },\n      resolveProjectionUserKey: input.resolveProjectionUserKey,\n      warmReferencedPrincipalPolicies:\n        createRuntimePrincipalPolicyWarmer(runtime),\n    });\n    if (!response) {\n      runtime.util.log(\n        `Container contents: failed to purge note ${noteId} (document ${documentId})`,\n      );\n      return null;\n    }\n    if (deleted) {\n      void reclaimDocumentOrphanBlobs(runtime, persistence);\n    }\n    runtime.util.log(\n      `Container contents: purged note ${noteId} (document ${documentId})`,\n    );\n    return response;\n  } catch (error) {\n    // A cancelled verification is neither a failure nor a completed purge; the\n    // caller that owns the generation decides what to do with it.\n    rethrowProjectionVerificationCancelled(error);\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: documentId,\n        objectKind: \"document\",\n        operation: \"document.purge\",\n      },\n    );\n    runtime.util.log(\n      `Container contents: failed to purge note ${noteId} (document ${documentId}): ${errorMessage(error)}`,\n    );\n    return null;\n  }\n}\n\ninterface ContainerDocumentLocalPurgeRuntime\n  extends Pick<ContainerContentsWorkflowRuntime, \"infra\" | \"util\"> {}\n\nexport async function purgeLocalContainerDocument(input: {\n  beforeDeleteInTransaction?: Parameters<\n    typeof deletePersistedDocument\n  >[0][\"beforeDeleteInTransaction\"];\n  noteId: string;\n  expectedContainerId?: string | null | undefined;\n  persistence?: DocumentsPersistence | undefined;\n  runtime: ContainerDocumentLocalPurgeRuntime;\n}): Promise<DocumentPurgeResult> {\n  const { noteId, runtime } = input;\n  const persistence = input.persistence ?? defaultDocumentsPersistence;\n  try {\n    await persistence.ensureSchema(runtime.infra.execSql);\n    const expectedRecord = await persistence.loadDocument(\n      runtime.infra.execSql,\n      noteId,\n    );\n    if (\n      !expectedRecord ||\n      expectedRecord.documentId !== null ||\n      (input.expectedContainerId !== undefined &&\n        expectedRecord.containerId !== input.expectedContainerId)\n    ) {\n      runtime.util.log(\n        `Container contents: local-only purge refused for note ${noteId} because it is absent or remote-backed`,\n      );\n      return null;\n    }\n    const deleted = await deletePersistedDocument({\n      beforeDeleteInTransaction: input.beforeDeleteInTransaction,\n      documentProjectors: runtime.infra.documentProjectors,\n      execSql: runtime.infra.execSql,\n      expectedRecord,\n      localId: noteId,\n      persistence,\n    });\n    if (!deleted) {\n      runtime.util.log(\n        `Container contents: local-only purge refused for note ${noteId} because its identity changed`,\n      );\n      return null;\n    }\n    if (deleted) {\n      void reclaimDocumentOrphanBlobs(runtime, persistence);\n    }\n    runtime.util.log(`Container contents: purged local-only note ${noteId}`);\n    return {\n      documentId: noteId,\n      purgedAt: new Date().toISOString(),\n      reclaimedBlobStorageKeys: [],\n    };\n  } catch (error) {\n    runtime.util.log(\n      `Container contents: failed to purge local-only note ${noteId}: ${errorMessage(error)}`,\n    );\n    return null;\n  }\n}\n"]}

package/workflows/container-contents/documentQueries.d.ts

@@ -1,62 +0,0 @@
-import type { ContainerSystemSlot } from "../../internal/validators/containerSystemSlot.js";
-import type { SyncWatermark } from "../../internal/validators/response/index.js";
-import type { DiscoveredDocumentInput, DocumentSummary } from "../../data/documents/documentSummary.js";
-import type { ContainerDocumentLinkInput, ContainerDocumentQueriesRuntime, ContainerDocumentSidebarWindow, ContainerDocumentTombstone, ContainerItemSort, ContainerItemWindow } from "./documentQueries/types.js";
-import { type RecoveryFolder } from "./folderRecovery.js";
-import { type PendingDownloadQueueItem } from "./pendingDownloads.js";
-import { type PendingWriteQueueItem } from "./pendingWrites.js";
-import type { ContainerDocumentObjectSyncState } from "./syncState.js";
-export type { ContainerDocumentLinkInput, ContainerDocumentSidebarRow, ContainerDocumentTombstone, ContainerItemRow, ContainerItemSort, ContainerItemSortDirection, ContainerItemSortKey, } from "./documentQueries/types.js";
-interface ListContainerItemWindowInput {
-    /** Null selects the virtual orphaned-documents recovery collection. */
-    containerId: string | null;
-    currentOrganizationId?: string | null | undefined;
-    limit: number;
-    offset: number;
-    sort: ContainerItemSort;
-    visibleForeignSystemContainerNames?: ReadonlyArray<string> | undefined;
-    visibleSystemSlots?: ReadonlyArray<ContainerSystemSlot> | undefined;
-}
-export interface ContainerDocumentQueries {
-    listRecoveryFolderMoveIds(input: {
-        currentOrganizationId: string | null;
-    }): Promise<string[]>;
-    listRecoveryFolders(input: {
-        currentOrganizationId: string | null;
-    }): Promise<RecoveryFolder[]>;
-    discardRecoveryFolder(input: Pick<RecoveryFolder, "containerId" | "organizationId" | "revision">): Promise<boolean>;
-    applyContainerDocumentTombstones(tombstones: ReadonlyArray<ContainerDocumentTombstone>): Promise<ReadonlyArray<DocumentSummary>>;
-    hasOrphanedDocuments(input: {
-        currentOrganizationId: string | null;
-    }): Promise<boolean>;
-    listContainerDocumentSidebarWindow(input: {
-        /** Null selects the virtual orphaned-documents recovery collection. */
-        containerId: string | null;
-        currentOrganizationId?: string | null | undefined;
-        limit: number;
-        offset: number;
-    }): Promise<ContainerDocumentSidebarWindow>;
-    listContainerItemWindow(input: ListContainerItemWindowInput): Promise<ContainerItemWindow>;
-    loadDocumentSyncState(localId: string): Promise<ContainerDocumentObjectSyncState | null>;
-    loadDocumentSummary(localId: string, options?: {
-        requireHydrated?: boolean;
-    }): Promise<DocumentSummary | null>;
-    loadOrphanedDocumentSummary(input: {
-        requireHydrated?: boolean;
-        currentOrganizationId: string | null;
-        localId: string;
-    }): Promise<DocumentSummary | null>;
-    loadContainerDocumentWatermark(containerId: string): Promise<SyncWatermark | null>;
-    listLinkedContainerIdsByDocumentIds(documentIds: ReadonlyArray<string>): Promise<ReadonlyMap<string, ReadonlyArray<string>>>;
-    listPendingDownloads(): Promise<ReadonlyArray<PendingDownloadQueueItem>>;
-    listPendingWrites(): Promise<ReadonlyArray<PendingWriteQueueItem>>;
-    retryPendingWriteItem(input: {
-        localId: string;
-        namespace: string | null;
-        objectKind: PendingWriteQueueItem["objectKind"];
-    }): Promise<void>;
-    replaceDocumentLinksBatch(inputs: ReadonlyArray<ContainerDocumentLinkInput>): Promise<void>;
-    saveContainerDocumentWatermark(containerId: string, watermark: SyncWatermark): Promise<void>;
-    upsertDiscoveredDocuments(inputs: ReadonlyArray<DiscoveredDocumentInput>): Promise<ReadonlyArray<DocumentSummary>>;
-}
-export declare function createContainerDocumentQueriesFromRuntime(runtime: ContainerDocumentQueriesRuntime): ContainerDocumentQueries;