@tearleads/client-sdk 0.1.61 → 0.1.63

package/workflows/container-contents/remoteHydration.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"remoteHydration.js","sourceRoot":"","sources":["remoteHydration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC;AACvF,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,gDAAgD,EAChD,kDAAkD,EAClD,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,mCAAmC,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,EAAE,qCAAqC,EAAE,MAAM,wCAAwC,CAAC;AAgB/F,MAAM,OAAO,yBAA0B,SAAQ,KAAK;CAAG;AAEvD,MAAM,UAAU,oCAAoC,CAAC,KAGpD;IACC,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,yBAAyB,EAAE,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,qBAAqB,EAAE,KAAK,EAC1B,cAAc,EACd,KAAK,EACL,UAAU,EACV,WAAW,EACX,eAAe,EACf,EAAE;YACF,MAAM,eAAe,GAAG,eAAe,EAAE,SAAS,CAAC;YACnD,MAAM,SAAS,GAAG,eAAe;gBAC/B,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,eAAe,EAAE;gBAC9C,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;YACpB,aAAa,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,qBAAqB,CACnD,cAAc,EACd,KAAK,EACL,UAAU,EACV,WAAW,EACX,EAAE,GAAG,eAAe,EAAE,SAAS,EAAE,CAClC,CAAC;YACF,aAAa,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB;YACnC,CAAC,CAAC;gBACE,sBAAsB,EAAE,GAAG,EAAE;oBAC3B,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;wBACtB,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;oBACxC,CAAC;gBACH,CAAC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,cAAc,EAAE,GAAG,EAAE;YACnB,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAWD,SAAS,+BAA+B,CACtC,KAAoC;IAEpC,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,mBAAmB;QACpC,UAAU,EAAE,KAAK,CAAC,oBAAoB;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,qCAAqC,CAC5C,IAAiD,EACjD,KAAsC;IAEtC,OAAO,CACL,IAAI,KAAK,SAAS;QAClB,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QAClC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,UAA2C,EAC3C,uBAA2D,EAC3D,KAAiC,EACjC,eAAgC;IAEhC,OAAO,CACL,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,eAAe;QACjD,qCAAqC,CACnC,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAC/C,UAAU,CACX,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAU1C;IACC,MAAM,EACJ,sCAAsC,EACtC,wCAAwC,EACxC,UAAU,EACV,uBAAuB,EACvB,IAAI,EACJ,KAAK,EACL,qBAAqB,EACrB,KAAK,GACN,GAAG,KAAK,CAAC;IACV,IACE,CAAC,KAAK,CAAC,SAAS,EAAE;QAClB,CAAC,8BAA8B,CAC7B,UAAU,EACV,uBAAuB,EACvB,KAAK,EACL,qBAAqB,CACtB,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,gCAAgC,CACzE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAC5B,CAAC;IACF,sEAAsE;IACtE,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CAAC;QACxD,0BAA0B,EACxB,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,qBAAqB,CAAC,EAAE,CAAC;YACtE,IAAI;QACN,sCAAsC;QACtC,wCAAwC;QACxC,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,qBAAqB;QACtC,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qCAAqC,CAAC,KAM9C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,qBAAqB,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACjE,IACE,8BAA8B,CAC5B,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,uBAAuB,EAC7B,KAAK,CAAC,KAAK,EACX,qBAAqB,CACtB,EACD,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;YAC7C,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,KAO9C;IACC,MAAM,EAAE,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC1E,IAAI,oBAAoB,GAAG,KAAK,CAAC;IAEjC,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,MAAM,sBAAsB,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC9D,CAAC,eAAe,EAAE,EAAE,CAClB,qCAAqC,CACnC,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAC/C,UAAU,CACX,CACJ,CAAC;YACF,IAAI,sBAAsB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO;YACT,CAAC;YACD,MAAM,qCAAqC,CAAC;gBAC1C,gCAAgC,EAAE,kCAAkC,CAClE,KAAK,CAAC,OAAO,CACd;gBACD,gBAAgB,EAAE,sBAAsB;gBACxC,YAAY,EAAE,KAAK,CAAC,SAAS;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,MAAM,CACJ,sCAAsC,EACtC,wCAAwC,EACzC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACpB,gDAAgD,CAAC;oBAC/C,gBAAgB,EAAE,sBAAsB;oBACxC,KAAK;iBACN,CAAC;gBACF,kDAAkD,CAAC;oBACjD,gBAAgB,EAAE,sBAAsB;oBACxC,KAAK;iBACN,CAAC;aACH,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,KAAK,MAAM,qBAAqB,IAAI,sBAAsB,EAAE,CAAC;gBAC3D,oBAAoB;oBAClB,CAAC,MAAM,2BAA2B,CAAC;wBACjC,sCAAsC;wBACtC,wCAAwC;wBACxC,UAAU;wBACV,uBAAuB;wBACvB,IAAI;wBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,KAAK;wBACL,qBAAqB;wBACrB,KAAK;qBACN,CAAC,CAAC,IAAI,oBAAoB,CAAC;YAChC,CAAC;YACD,qCAAqC,CAAC;gBACpC,UAAU;gBACV,uBAAuB;gBACvB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK;gBACL,sBAAsB;aACvB,CAAC,CAAC;YAEH,IAAI,oBAAoB,EAAE,CAAC;gBACzB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,oBAAoB,GAAG,KAAK,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,oBAAoB,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,wCAAwC,CAC/C,KAAoC,EACpC,UAA2C;IAE3C,OAAO,qCAAqC,CAC1C,+BAA+B,CAAC,KAAK,CAAC,EACtC,UAAU,CACX,CAAC;AACJ,CAAC;AAED,SAAS,0CAA0C,CAAC,KAKnD;IACC,MAAM,iBAAiB,GAAG,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,YAAY,GAChB,iBAAiB,CAAC,SAAS,KAAK,KAAK,CAAC,UAAU,CAAC,SAAS;QAC1D,iBAAiB,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;IAC/D,KAAK,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,uBAAuB,EAAE,CAAC;QACtE,IAAI,CAAC,qCAAqC,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,SAAS;QACX,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAClD,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,2BAA2B,GAA+B,IAAI,GAAG,EAAE,CAAC;IAC1E,MAAM,uBAAuB,GAAuC,IAAI,GAAG,EAAE,CAAC;IAC9E,IAAI,6BAA6B,GAAyB,IAAI,CAAC;IAE/D,MAAM,iBAAiB,GAAG,GAAkB,EAAE;QAC5C,IAAI,6BAA6B,EAAE,CAAC;YAClC,OAAO,6BAA6B,CAAC,IAAI,CACvC,iBAAiB,EACjB,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC1C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EACxC,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,oBAAoB,GAAG,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC;QAC/D,IAAI,oBAAoB,EAAE,CAAC;YACzB,OAAO,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,eAAe,GAAG,2BAA2B,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACxE,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,2BAA2B,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACpD,OAAO,iBAAiB,EAAE,CAAC;QAC7B,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,wCAAwC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,oCAAoC,CAAC;YACvD,IAAI;YACJ,SAAS;SACV,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE;aAClC,IAAI,CAAC,GAAG,EAAE,CACT,+BAA+B,CAAC;YAC9B,UAAU;YACV,uBAAuB;YACvB,IAAI,EAAE,WAAW;YACjB,SAAS;YACT,KAAK,EAAE,2BAA2B;YAClC,KAAK;SACN,CAAC,CACH;aACA,IAAI,CAAC,GAAG,EAAE;YACT,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACjB,0CAA0C,CAAC;oBACzC,UAAU;oBACV,uBAAuB;oBACvB,KAAK,EAAE,2BAA2B;oBAClC,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,CAAC,SAAS,EAAE,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;gBAC/D,0CAA0C,CAAC;oBACzC,UAAU;oBACV,uBAAuB;oBACvB,KAAK,EAAE,2BAA2B;oBAClC,KAAK;iBACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,6BAA6B,KAAK,WAAW,EAAE,CAAC;gBAClD,6BAA6B,GAAG,IAAI,CAAC;YACvC,CAAC;QACH,CAAC,CAAC,CAAC;QACL,6BAA6B,GAAG,WAAW,CAAC;QAC5C,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAC3B,2BAA2B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,SAAS,CACvE,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,qBAAqB,GAAG,CAAC,eAAgC,EAAE,EAAE;QACjE,2BAA2B,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;QACrE,uBAAuB,CAAC,GAAG,CACzB,eAAe,CAAC,EAAE,EAClB,+BAA+B,CAAC,KAAK,CAAC,CACvC,CAAC;QACF,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC,CAAC;IACF,qBAAqB,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,GAAG,CAAC,CAAC;IAC9E,qBAAqB,CAAC,MAAM,GAAG,iBAAiB,CAAC;IACjD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAS7C;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9B,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACxE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3E,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,mCAAmC,CAAC;QACrE,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE;QACzC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;KACrD,CAAC,CAAC;IACH,gFAAgF;IAChF,gFAAgF;IAChF,gFAAgF;IAChF,MAAM,yBAAyB,GAA6B,CAAC,WAAW,EAAE,EAAE;QAC1E,IACE,KAAK,CAAC,2BAA2B;YACjC,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EACvE,CAAC;YACD,eAAe,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC;QAC/C,kBAAkB;QAClB,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;QACL,eAAe,EAAE,yBAAyB;QAC1C,gBAAgB;QAChB,KAAK;KACN,CAAC,CAAC;IACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAChC,MAAM,qBAAqB,CAAC;QAC1B,YAAY;QACZ,QAAQ,EACN,MAAM,CAAC,QAAQ;YACf,0BAA0B,CAAC,KAAK,CAAC;YACjC,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAC/B,2BAA2B;QAC3B,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,gBAAgB;QAChB,KAAK;KACN,CAAC,CAAC;IACH,OAAO,YAAY,CAAC;AACtB,CAAC","sourcesContent":["import { createRuntimePrincipalPolicyWarmer } from \"../principals/runtimePolicyWarmer\";\nimport {\n  canHydrateRemoteContainers,\n  hydrateContainerParentLanes,\n} from \"./remoteContainerPageHydration\";\nimport {\n  listRemoteContainerIdsWithPendingMetadataUpdates,\n  listRemoteContainerIdsWithPendingStructuralIntents,\n  upsertIsolatedRemoteContainerState,\n} from \"./remoteContainerState\";\nimport { createContainerChildIndex } from \"./remoteHydration/childIndex\";\nimport { finishRemoteHydration } from \"./remoteHydration/completeHydration\";\nimport { createContainerParentHydrationQueue } from \"./remoteHydration/parentLaneQueue\";\nimport { cacheRemoteContainerPrincipalPolicies } from \"./remoteHydration/principalPolicyCache\";\nimport type {\n  QueueContainerParentLane,\n  RemoteContainer,\n  RemoteContainerHydrationHost,\n  RemoteContainerHydrationState,\n  RemoteContainerIngestQueue,\n} from \"./remoteHydration/types\";\n\nexport type {\n  ContainerState,\n  PersistContainerStateResult,\n  RemoteContainer,\n  RemoteContainerHydrationHost,\n} from \"./remoteHydration/types\";\n\nexport class StaleRemoteHydrationError extends Error {}\n\nexport function createGenerationGuardedHydrationHost(input: {\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n}): RemoteContainerHydrationHost {\n  const assertCurrent = () => {\n    if (!input.isCurrent()) {\n      throw new StaleRemoteHydrationError();\n    }\n  };\n\n  return {\n    persistContainerState: async (\n      containerState,\n      patch,\n      updateView,\n      saveOptions,\n      mutationOptions,\n    ) => {\n      const callerIsCurrent = mutationOptions?.isCurrent;\n      const isCurrent = callerIsCurrent\n        ? () => input.isCurrent() && callerIsCurrent()\n        : input.isCurrent;\n      assertCurrent();\n      const record = await input.host.persistContainerState(\n        containerState,\n        patch,\n        updateView,\n        saveOptions,\n        { ...mutationOptions, isCurrent },\n      );\n      assertCurrent();\n      return record;\n    },\n    ...(input.host.requestDocumentPriming\n      ? {\n          requestDocumentPriming: () => {\n            if (input.isCurrent()) {\n              input.host.requestDocumentPriming?.();\n            }\n          },\n        }\n      : {}),\n    updateSnapshot: () => {\n      if (input.isCurrent()) {\n        input.host.updateSnapshot();\n      }\n    },\n  };\n}\n\ninterface RemoteContainerIngestGeneration {\n  readonly lifecycle: number | undefined;\n  readonly structural: number | undefined;\n}\ntype RemoteContainerIngestGenerationMap = Map<\n  string,\n  RemoteContainerIngestGeneration\n>;\n\nfunction remoteContainerIngestGeneration(\n  state: RemoteContainerHydrationState,\n): RemoteContainerIngestGeneration {\n  return {\n    lifecycle: state.lifecycleGeneration,\n    structural: state.structuralGeneration,\n  };\n}\n\nfunction remoteContainerIngestGenerationsMatch(\n  left: RemoteContainerIngestGeneration | undefined,\n  right: RemoteContainerIngestGeneration,\n): boolean {\n  return (\n    left !== undefined &&\n    left.lifecycle === right.lifecycle &&\n    left.structural === right.structural\n  );\n}\n\nfunction isCurrentQueuedRemoteContainer(\n  generation: RemoteContainerIngestGeneration,\n  generationByContainerId: RemoteContainerIngestGenerationMap,\n  queue: RemoteContainerIngestQueue,\n  remoteContainer: RemoteContainer,\n): boolean {\n  return (\n    queue.get(remoteContainer.id) === remoteContainer &&\n    remoteContainerIngestGenerationsMatch(\n      generationByContainerId.get(remoteContainer.id),\n      generation,\n    )\n  );\n}\n\nasync function upsertQueuedRemoteContainer(input: {\n  containerIdsWithPendingMetadataUpdates: ReadonlySet<string>;\n  containerIdsWithPendingStructuralIntents: ReadonlySet<string>;\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  queuedRemoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}): Promise<boolean> {\n  const {\n    containerIdsWithPendingMetadataUpdates,\n    containerIdsWithPendingStructuralIntents,\n    generation,\n    generationByContainerId,\n    host,\n    queue,\n    queuedRemoteContainer,\n    state,\n  } = input;\n  if (\n    !input.isCurrent() ||\n    !isCurrentQueuedRemoteContainer(\n      generation,\n      generationByContainerId,\n      queue,\n      queuedRemoteContainer,\n    )\n  ) {\n    return false;\n  }\n\n  const tombstones = await state.persistence.loadContainerHydrationTombstones(\n    state.runtime.infra.execSql,\n  );\n  // A refused folder is reported and acknowledged; the batch continues.\n  const upserted = await upsertIsolatedRemoteContainerState({\n    expectedHydrationTombstone:\n      tombstones.find((row) => row.containerId === queuedRemoteContainer.id) ??\n      null,\n    containerIdsWithPendingMetadataUpdates,\n    containerIdsWithPendingStructuralIntents,\n    host,\n    isCurrent: input.isCurrent,\n    remoteContainer: queuedRemoteContainer,\n    state,\n  });\n  if (!upserted) {\n    return false;\n  }\n  return true;\n}\n\nfunction acknowledgeRemoteContainerIngestBatch(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  queuedRemoteContainers: ReadonlyArray<RemoteContainer>;\n}): void {\n  if (!input.isCurrent()) {\n    return;\n  }\n  for (const queuedRemoteContainer of input.queuedRemoteContainers) {\n    if (\n      isCurrentQueuedRemoteContainer(\n        input.generation,\n        input.generationByContainerId,\n        input.queue,\n        queuedRemoteContainer,\n      )\n    ) {\n      input.queue.delete(queuedRemoteContainer.id);\n      input.generationByContainerId.delete(queuedRemoteContainer.id);\n    }\n  }\n}\n\nasync function drainRemoteContainerIngestQueue(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  state: RemoteContainerHydrationState;\n}) {\n  const { generation, generationByContainerId, host, queue, state } = input;\n  let shouldUpdateSnapshot = false;\n\n  try {\n    while (input.isCurrent()) {\n      const queuedRemoteContainers = Array.from(queue.values()).filter(\n        (remoteContainer) =>\n          remoteContainerIngestGenerationsMatch(\n            generationByContainerId.get(remoteContainer.id),\n            generation,\n          ),\n      );\n      if (queuedRemoteContainers.length === 0) {\n        return;\n      }\n      await cacheRemoteContainerPrincipalPolicies({\n        cacheReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(\n          state.runtime,\n        ),\n        remoteContainers: queuedRemoteContainers,\n        stillCurrent: input.isCurrent,\n      });\n      if (!input.isCurrent()) {\n        return;\n      }\n      const [\n        containerIdsWithPendingMetadataUpdates,\n        containerIdsWithPendingStructuralIntents,\n      ] = await Promise.all([\n        listRemoteContainerIdsWithPendingMetadataUpdates({\n          remoteContainers: queuedRemoteContainers,\n          state,\n        }),\n        listRemoteContainerIdsWithPendingStructuralIntents({\n          remoteContainers: queuedRemoteContainers,\n          state,\n        }),\n      ]);\n      if (!input.isCurrent()) {\n        return;\n      }\n\n      for (const queuedRemoteContainer of queuedRemoteContainers) {\n        shouldUpdateSnapshot =\n          (await upsertQueuedRemoteContainer({\n            containerIdsWithPendingMetadataUpdates,\n            containerIdsWithPendingStructuralIntents,\n            generation,\n            generationByContainerId,\n            host,\n            isCurrent: input.isCurrent,\n            queue,\n            queuedRemoteContainer,\n            state,\n          })) || shouldUpdateSnapshot;\n      }\n      acknowledgeRemoteContainerIngestBatch({\n        generation,\n        generationByContainerId,\n        isCurrent: input.isCurrent,\n        queue,\n        queuedRemoteContainers,\n      });\n\n      if (shouldUpdateSnapshot) {\n        host.updateSnapshot();\n        shouldUpdateSnapshot = false;\n      }\n    }\n  } catch (error) {\n    if (shouldUpdateSnapshot) {\n      host.updateSnapshot();\n    }\n    throw error;\n  }\n}\n\nfunction isRemoteContainerIngestGenerationCurrent(\n  state: RemoteContainerHydrationState,\n  generation: RemoteContainerIngestGeneration,\n): boolean {\n  return remoteContainerIngestGenerationsMatch(\n    remoteContainerIngestGeneration(state),\n    generation,\n  );\n}\n\nfunction settleStaleRemoteContainerIngestGeneration(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  queue: RemoteContainerIngestQueue;\n  state: RemoteContainerHydrationState;\n}): void {\n  const currentGeneration = remoteContainerIngestGeneration(input.state);\n  const shouldReplay =\n    currentGeneration.lifecycle !== input.generation.lifecycle &&\n    currentGeneration.structural === input.generation.structural;\n  for (const [containerId, generation] of input.generationByContainerId) {\n    if (!remoteContainerIngestGenerationsMatch(generation, input.generation)) {\n      continue;\n    }\n    if (shouldReplay) {\n      input.generationByContainerId.set(containerId, currentGeneration);\n    } else {\n      input.generationByContainerId.delete(containerId);\n      input.queue.delete(containerId);\n    }\n  }\n}\n\ninterface RemoteContainerIngestor {\n  (remoteContainer: RemoteContainer): Promise<void>;\n  hasPending: () => boolean;\n  resume: () => Promise<void>;\n}\n\nexport function createRemoteContainerIngestor(input: {\n  getSerializationBarrier?: (() => Promise<void> | null) | undefined;\n  host: RemoteContainerHydrationHost;\n  state: RemoteContainerHydrationState;\n}): RemoteContainerIngestor {\n  const { host, state } = input;\n  const pendingRemoteContainersById: RemoteContainerIngestQueue = new Map();\n  const generationByContainerId: RemoteContainerIngestGenerationMap = new Map();\n  let ingestRemoteContainersPromise: Promise<void> | null = null;\n\n  const runNextGeneration = (): Promise<void> => {\n    if (ingestRemoteContainersPromise) {\n      return ingestRemoteContainersPromise.then(\n        runNextGeneration,\n        runNextGeneration,\n      );\n    }\n    if (\n      state.runtime.infra.dbStatus !== undefined &&\n      state.runtime.infra.dbStatus !== \"ready\"\n    ) {\n      return Promise.resolve();\n    }\n    const serializationBarrier = input.getSerializationBarrier?.();\n    if (serializationBarrier) {\n      return serializationBarrier.then(runNextGeneration);\n    }\n    const nextContainerId = pendingRemoteContainersById.keys().next().value;\n    if (typeof nextContainerId !== \"string\") {\n      return Promise.resolve();\n    }\n    const generation = generationByContainerId.get(nextContainerId);\n    if (!generation) {\n      pendingRemoteContainersById.delete(nextContainerId);\n      return runNextGeneration();\n    }\n    const isCurrent = () =>\n      isRemoteContainerIngestGenerationCurrent(state, generation);\n    const guardedHost = createGenerationGuardedHydrationHost({\n      host,\n      isCurrent,\n    });\n    const nextPromise = Promise.resolve()\n      .then(() =>\n        drainRemoteContainerIngestQueue({\n          generation,\n          generationByContainerId,\n          host: guardedHost,\n          isCurrent,\n          queue: pendingRemoteContainersById,\n          state,\n        }),\n      )\n      .then(() => {\n        if (!isCurrent()) {\n          settleStaleRemoteContainerIngestGeneration({\n            generation,\n            generationByContainerId,\n            queue: pendingRemoteContainersById,\n            state,\n          });\n        }\n      })\n      .catch((error: unknown) => {\n        if (!isCurrent() || error instanceof StaleRemoteHydrationError) {\n          settleStaleRemoteContainerIngestGeneration({\n            generation,\n            generationByContainerId,\n            queue: pendingRemoteContainersById,\n            state,\n          });\n          return;\n        }\n        throw error;\n      })\n      .finally(() => {\n        if (ingestRemoteContainersPromise === nextPromise) {\n          ingestRemoteContainersPromise = null;\n        }\n      });\n    ingestRemoteContainersPromise = nextPromise;\n    return nextPromise.then(() =>\n      pendingRemoteContainersById.size > 0 ? runNextGeneration() : undefined,\n    );\n  };\n\n  const ingestRemoteContainer = (remoteContainer: RemoteContainer) => {\n    pendingRemoteContainersById.set(remoteContainer.id, remoteContainer);\n    generationByContainerId.set(\n      remoteContainer.id,\n      remoteContainerIngestGeneration(state),\n    );\n    return runNextGeneration();\n  };\n  ingestRemoteContainer.hasPending = () => pendingRemoteContainersById.size > 0;\n  ingestRemoteContainer.resume = runNextGeneration;\n  return ingestRemoteContainer;\n}\n\nexport async function hydrateRemoteContainers(input: {\n  followDiscoveredParentLanes?: boolean | undefined;\n  host: RemoteContainerHydrationHost;\n  isCurrent?: (() => boolean) | undefined;\n  onFullyHydrated?: (() => Promise<void> | void) | undefined;\n  parentIds?: ReadonlyArray<string | null> | undefined;\n  resetAllLaneWatermarks?: boolean | undefined;\n  resetRootLaneWatermark?: boolean | undefined;\n  state: RemoteContainerHydrationState;\n}): Promise<number> {\n  const { host, state } = input;\n  if (!canHydrateRemoteContainers(state) || input.isCurrent?.() === false) {\n    return 0;\n  }\n\n  const seenContainerIds = new Set<string>();\n  const containerIdsBeforeHydration = new Set(state.containersById.keys());\n  const childIdsByParentId = createContainerChildIndex(state.containersById);\n  const { lanes, queueParentLane } = createContainerParentHydrationQueue({\n    containerIds: state.containersById.keys(),\n    parentIds: input.parentIds,\n    resetAllLaneWatermarks: input.resetAllLaneWatermarks,\n    resetRootLaneWatermark: input.resetRootLaneWatermark,\n  });\n  // Follow child lanes during an explicit recursive crawl or for containers first\n  // discovered in this pass. The latter lets a newly authorized root populate its\n  // descendants immediately, while routine ticks keep known subtrees cache-first.\n  const queueDiscoveredParentLane: QueueContainerParentLane = (containerId) => {\n    if (\n      input.followDiscoveredParentLanes ||\n      (containerId !== null && !containerIdsBeforeHydration.has(containerId))\n    ) {\n      queueParentLane(containerId);\n    }\n  };\n  const result = await hydrateContainerParentLanes({\n    childIdsByParentId,\n    host,\n    isCurrent: input.isCurrent,\n    lanes,\n    queueParentLane: queueDiscoveredParentLane,\n    seenContainerIds,\n    state,\n  });\n  const { changedCount } = result;\n  await finishRemoteHydration({\n    changedCount,\n    complete:\n      result.complete &&\n      canHydrateRemoteContainers(state) &&\n      input.isCurrent?.() !== false,\n    containerIdsBeforeHydration,\n    host,\n    isCurrent: input.isCurrent,\n    onFullyHydrated: input.onFullyHydrated,\n    seenContainerIds,\n    state,\n  });\n  return changedCount;\n}\n"]}

package/workflows/container-contents/staleRootRecovery.js

@@ -1,111 +0,0 @@
-import { hasRemoteContainerMetadataState } from "./remoteHydration/reconciliation.js";
-function hasSameRecoveryContext(state, input) {
-    return (state.runtime.auth.isAuthenticated &&
-        state.runtime.auth.defaultOrganizationId === input.defaultOrganizationId &&
-        state.runtime.auth.organizationId === input.organizationId &&
-        state.runtime.auth.userId === input.userId &&
-        state.runtime.auth.rootContainerId === input.rootContainerId &&
-        state.runtime.state.containerId === input.staleContainerId &&
-        state.runtime.state.domainScope === input.domainScope);
-}
-function listAuthoritativeRootCandidates(state, organizationId) {
-    return Array.from(state.containersById.values()).filter((containerState) => containerState.container.id === state.runtime.auth.rootContainerId &&
-        containerState.container.parentId === null &&
-        containerState.container.organizationId === organizationId &&
-        (containerState.container.systemSlot ?? null) === null &&
-        containerState.container.effectiveAccessLevel === "admin" &&
-        hasRemoteContainerMetadataState(containerState));
-}
-/**
- * Repairs the root identity left by a cold-cache login.
- *
- * Root reconciliation can delete the device-first local root without updating
- * the session's default container. Documents created afterward are projected
- * beneath that deleted id, so startup priming detects their writes but cannot
- * route them. Recovery is intentionally narrow: the stale id must be absent
- * from both the loaded topology and durable storage, and the active
- * organization must contain the session-acknowledged root after the root lane
- * has hydrated and verified its signed destination role. This recovery path only repairs document
- * references; structural container descendants remain owned by normal root
- * reconciliation. Durable reassignment deliberately precedes live session
- * adoption so consumers never observe the new root before its documents move.
- * If the live-session guard rejects that adoption, the idempotent reassignment
- * remains applied and the sync lane is re-armed to retry under the next runtime
- * snapshot.
- */
-export async function recoverStaleSessionRoot(state, isCurrent = () => true) {
-    const staleContainerId = state.runtime.state.containerId;
-    const domainScope = state.runtime.state.domainScope;
-    const defaultOrganizationId = state.runtime.auth.defaultOrganizationId;
-    const organizationId = state.runtime.auth.organizationId;
-    const userId = state.runtime.auth.userId;
-    if (!isCurrent() ||
-        !state.runtime.auth.isAuthenticated ||
-        !staleContainerId ||
-        !defaultOrganizationId ||
-        !organizationId ||
-        !userId ||
-        organizationId !== defaultOrganizationId ||
-        !state.rootLaneHydrated ||
-        state.containersById.has(staleContainerId)) {
-        return { candidateCount: 0, reassigned: false, status: "not-needed" };
-    }
-    const recoveryContext = {
-        domainScope,
-        defaultOrganizationId,
-        organizationId,
-        staleContainerId,
-        userId,
-        rootContainerId: state.runtime.auth.rootContainerId,
-    };
-    const storedContainerExists = await state.persistence.containerExists(state.runtime.infra.execSql, staleContainerId);
-    if (storedContainerExists) {
-        return { candidateCount: 0, reassigned: false, status: "not-needed" };
-    }
-    if (!isCurrent() || !hasSameRecoveryContext(state, recoveryContext)) {
-        return { candidateCount: 0, reassigned: false, status: "context-changed" };
-    }
-    if (state.containersById.has(staleContainerId)) {
-        return { candidateCount: 0, reassigned: false, status: "not-needed" };
-    }
-    const candidates = listAuthoritativeRootCandidates(state, defaultOrganizationId);
-    const [remoteRootState] = candidates;
-    if (!remoteRootState || candidates.length > 1) {
-        return {
-            candidateCount: candidates.length,
-            reassigned: false,
-            status: "ambiguous",
-        };
-    }
-    if (!state.runtime.adoptRootContainer) {
-        return { candidateCount: 1, reassigned: false, status: "unsupported" };
-    }
-    if (!isCurrent() || !hasSameRecoveryContext(state, recoveryContext)) {
-        return { candidateCount: 0, reassigned: false, status: "context-changed" };
-    }
-    await state.persistence.reassignContainerDocuments(state.runtime.infra.execSql, {
-        fromContainerId: staleContainerId,
-        stillCurrent: isCurrent,
-        toContainerId: remoteRootState.container.id,
-    });
-    if (!isCurrent() || !hasSameRecoveryContext(state, recoveryContext)) {
-        return { candidateCount: 1, reassigned: false, status: "context-changed" };
-    }
-    const adoptionResult = state.runtime.adoptRootContainer({
-        domainScope,
-        expectedContainerId: staleContainerId,
-        nextContainerId: remoteRootState.container.id,
-        organizationId,
-        userId,
-    });
-    return {
-        candidateCount: 1,
-        reassigned: true,
-        status: adoptionResult === "already-adopted"
-            ? "already-adopted"
-            : adoptionResult
-                ? "reassigned"
-                : "context-changed",
-    };
-}
-//# sourceMappingURL=staleRootRecovery.js.map

package/workflows/container-contents/staleRootRecovery.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"staleRootRecovery.js","sourceRoot":"","sources":["staleRootRecovery.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AA6CnF,SAAS,sBAAsB,CAC7B,KAA6B,EAC7B,KAOC;IAED,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QAClC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,KAAK,KAAK,CAAC,qBAAqB;QACxE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;QAC1D,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC1C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;QAC5D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,gBAAgB;QAC1D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CACtD,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,KAA6B,EAC7B,cAAsB;IAEtB,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACrD,CAAC,cAAc,EAAE,EAAE,CACjB,cAAc,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QAClE,cAAc,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;QAC1C,cAAc,CAAC,SAAS,CAAC,cAAc,KAAK,cAAc;QAC1D,CAAC,cAAc,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,IAAI;QACtD,cAAc,CAAC,SAAS,CAAC,oBAAoB,KAAK,OAAO;QACzD,+BAA+B,CAAC,cAAc,CAAC,CAClD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAA6B,EAC7B,YAA2B,GAAG,EAAE,CAAC,IAAI;IAErC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;IACzD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;IACpD,MAAM,qBAAqB,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC;IACvE,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;IACzD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IACzC,IACE,CAAC,SAAS,EAAE;QACZ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QACnC,CAAC,gBAAgB;QACjB,CAAC,qBAAqB;QACtB,CAAC,cAAc;QACf,CAAC,MAAM;QACP,cAAc,KAAK,qBAAqB;QACxC,CAAC,KAAK,CAAC,gBAAgB;QACvB,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAC1C,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,eAAe,GAAG;QACtB,WAAW;QACX,qBAAqB;QACrB,cAAc;QACd,gBAAgB;QAChB,MAAM;QACN,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;KACpD,CAAC;IAEF,MAAM,qBAAqB,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,eAAe,CACnE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,gBAAgB,CACjB,CAAC;IACF,IAAI,qBAAqB,EAAE,CAAC;QAC1B,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,UAAU,GAAG,+BAA+B,CAChD,KAAK,EACL,qBAAqB,CACtB,CAAC;IACF,MAAM,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC;IACrC,IAAI,CAAC,eAAe,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,cAAc,EAAE,UAAU,CAAC,MAAM;YACjC,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,WAAW;SACpB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACtC,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,KAAK,CAAC,WAAW,CAAC,0BAA0B,CAChD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B;QACE,eAAe,EAAE,gBAAgB;QACjC,YAAY,EAAE,SAAS;QACvB,aAAa,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE;KAC5C,CACF,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC;QACtD,WAAW;QACX,mBAAmB,EAAE,gBAAgB;QACrC,eAAe,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE;QAC7C,cAAc;QACd,MAAM;KACP,CAAC,CAAC;IAEH,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,UAAU,EAAE,IAAI;QAChB,MAAM,EACJ,cAAc,KAAK,iBAAiB;YAClC,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,cAAc;gBACd,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,iBAAiB;KAC1B,CAAC;AACJ,CAAC","sourcesContent":["import type { ContainerContentsPersistence } from \"./containerPersistence\";\nimport type { ContainerState } from \"./remoteHydration\";\nimport { hasRemoteContainerMetadataState } from \"./remoteHydration/reconciliation\";\nimport type {\n  ContainerContentsRootAdopter,\n  ContainerContentsWorkflowRuntime,\n} from \"./runtime\";\n\nexport type StaleRootRecoveryStatus =\n  | \"already-adopted\"\n  | \"ambiguous\"\n  | \"context-changed\"\n  | \"not-needed\"\n  | \"reassigned\"\n  | \"unsupported\";\n\ninterface StaleRootRecoveryResult {\n  readonly candidateCount: number;\n  readonly reassigned: boolean;\n  readonly status: StaleRootRecoveryStatus;\n}\n\ninterface StaleRootRecoveryState {\n  readonly containersById: ReadonlyMap<string, ContainerState>;\n  readonly persistence: Pick<\n    ContainerContentsPersistence,\n    \"containerExists\" | \"reassignContainerDocuments\"\n  >;\n  readonly rootLaneHydrated: boolean;\n  readonly runtime: {\n    readonly adoptRootContainer?: ContainerContentsRootAdopter | undefined;\n    readonly auth: Pick<\n      ContainerContentsWorkflowRuntime[\"auth\"],\n      | \"defaultOrganizationId\"\n      | \"isAuthenticated\"\n      | \"organizationId\"\n      | \"userId\"\n      | \"rootContainerId\"\n    >;\n    readonly infra: Pick<ContainerContentsWorkflowRuntime[\"infra\"], \"execSql\">;\n    readonly state: Pick<\n      ContainerContentsWorkflowRuntime[\"state\"],\n      \"containerId\" | \"domainScope\"\n    >;\n  };\n}\n\nfunction hasSameRecoveryContext(\n  state: StaleRootRecoveryState,\n  input: {\n    domainScope: ContainerContentsWorkflowRuntime[\"state\"][\"domainScope\"];\n    defaultOrganizationId: string;\n    organizationId: string;\n    staleContainerId: string;\n    rootContainerId: string | null | undefined;\n    userId: string;\n  },\n): boolean {\n  return (\n    state.runtime.auth.isAuthenticated &&\n    state.runtime.auth.defaultOrganizationId === input.defaultOrganizationId &&\n    state.runtime.auth.organizationId === input.organizationId &&\n    state.runtime.auth.userId === input.userId &&\n    state.runtime.auth.rootContainerId === input.rootContainerId &&\n    state.runtime.state.containerId === input.staleContainerId &&\n    state.runtime.state.domainScope === input.domainScope\n  );\n}\n\nfunction listAuthoritativeRootCandidates(\n  state: StaleRootRecoveryState,\n  organizationId: string,\n): ContainerState[] {\n  return Array.from(state.containersById.values()).filter(\n    (containerState) =>\n      containerState.container.id === state.runtime.auth.rootContainerId &&\n      containerState.container.parentId === null &&\n      containerState.container.organizationId === organizationId &&\n      (containerState.container.systemSlot ?? null) === null &&\n      containerState.container.effectiveAccessLevel === \"admin\" &&\n      hasRemoteContainerMetadataState(containerState),\n  );\n}\n\n/**\n * Repairs the root identity left by a cold-cache login.\n *\n * Root reconciliation can delete the device-first local root without updating\n * the session's default container. Documents created afterward are projected\n * beneath that deleted id, so startup priming detects their writes but cannot\n * route them. Recovery is intentionally narrow: the stale id must be absent\n * from both the loaded topology and durable storage, and the active\n * organization must contain the session-acknowledged root after the root lane\n * has hydrated and verified its signed destination role. This recovery path only repairs document\n * references; structural container descendants remain owned by normal root\n * reconciliation. Durable reassignment deliberately precedes live session\n * adoption so consumers never observe the new root before its documents move.\n * If the live-session guard rejects that adoption, the idempotent reassignment\n * remains applied and the sync lane is re-armed to retry under the next runtime\n * snapshot.\n */\nexport async function recoverStaleSessionRoot(\n  state: StaleRootRecoveryState,\n  isCurrent: () => boolean = () => true,\n): Promise<StaleRootRecoveryResult> {\n  const staleContainerId = state.runtime.state.containerId;\n  const domainScope = state.runtime.state.domainScope;\n  const defaultOrganizationId = state.runtime.auth.defaultOrganizationId;\n  const organizationId = state.runtime.auth.organizationId;\n  const userId = state.runtime.auth.userId;\n  if (\n    !isCurrent() ||\n    !state.runtime.auth.isAuthenticated ||\n    !staleContainerId ||\n    !defaultOrganizationId ||\n    !organizationId ||\n    !userId ||\n    organizationId !== defaultOrganizationId ||\n    !state.rootLaneHydrated ||\n    state.containersById.has(staleContainerId)\n  ) {\n    return { candidateCount: 0, reassigned: false, status: \"not-needed\" };\n  }\n  const recoveryContext = {\n    domainScope,\n    defaultOrganizationId,\n    organizationId,\n    staleContainerId,\n    userId,\n    rootContainerId: state.runtime.auth.rootContainerId,\n  };\n\n  const storedContainerExists = await state.persistence.containerExists(\n    state.runtime.infra.execSql,\n    staleContainerId,\n  );\n  if (storedContainerExists) {\n    return { candidateCount: 0, reassigned: false, status: \"not-needed\" };\n  }\n  if (!isCurrent() || !hasSameRecoveryContext(state, recoveryContext)) {\n    return { candidateCount: 0, reassigned: false, status: \"context-changed\" };\n  }\n  if (state.containersById.has(staleContainerId)) {\n    return { candidateCount: 0, reassigned: false, status: \"not-needed\" };\n  }\n\n  const candidates = listAuthoritativeRootCandidates(\n    state,\n    defaultOrganizationId,\n  );\n  const [remoteRootState] = candidates;\n  if (!remoteRootState || candidates.length > 1) {\n    return {\n      candidateCount: candidates.length,\n      reassigned: false,\n      status: \"ambiguous\",\n    };\n  }\n  if (!state.runtime.adoptRootContainer) {\n    return { candidateCount: 1, reassigned: false, status: \"unsupported\" };\n  }\n  if (!isCurrent() || !hasSameRecoveryContext(state, recoveryContext)) {\n    return { candidateCount: 0, reassigned: false, status: \"context-changed\" };\n  }\n\n  await state.persistence.reassignContainerDocuments(\n    state.runtime.infra.execSql,\n    {\n      fromContainerId: staleContainerId,\n      stillCurrent: isCurrent,\n      toContainerId: remoteRootState.container.id,\n    },\n  );\n  if (!isCurrent() || !hasSameRecoveryContext(state, recoveryContext)) {\n    return { candidateCount: 1, reassigned: false, status: \"context-changed\" };\n  }\n  const adoptionResult = state.runtime.adoptRootContainer({\n    domainScope,\n    expectedContainerId: staleContainerId,\n    nextContainerId: remoteRootState.container.id,\n    organizationId,\n    userId,\n  });\n\n  return {\n    candidateCount: 1,\n    reassigned: true,\n    status:\n      adoptionResult === \"already-adopted\"\n        ? \"already-adopted\"\n        : adoptionResult\n          ? \"reassigned\"\n          : \"context-changed\",\n  };\n}\n"]}

package/workflows/documents/attachmentPersistence.d.ts

@@ -1,58 +0,0 @@
-/**
- * Attachment-slot persistence for stored documents.
- *
- * These are the workflow-level seams the document store writes attachment rows
- * through: the pending-upload queue, the local blob projection, and the detach
- * marker that keeps an unlinked slot's row alive for the next sync.
- */
-import type { DocumentsPersistence, LocalAttachmentRecord, PendingAttachmentRecord } from "../../data/persistence/documents/documentsPersistence.js";
-import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
-export declare function saveLocalDocumentAttachments(input: {
-    attachments: ReadonlyArray<LocalAttachmentRecord>;
-    execSql: ExecSql;
-    persistence: DocumentsPersistence;
-}): Promise<void>;
-export declare function deleteLocalDocumentAttachment(input: {
-    execSql: ExecSql;
-    localId: string;
-    persistence: DocumentsPersistence;
-    slotId: string;
-    storageKey: string;
-}): Promise<void>;
-/**
- * Mark a slot's local blob row detached without dropping it.
- *
- * Unlinking an attachment from a synced document cannot delete the row: it is
- * also the marker `syncDetachedAttachments` needs to detach the remote binding
- * on the next sync (and to survive a restart before that sync runs). Marking it
- * keeps that marker while taking the slot out of the local blob read models
- * right away, so the blob browser stops listing a reference the document no
- * longer has.
- */
-export declare function markLocalDocumentAttachmentDetached(input: {
-    execSql: ExecSql;
-    localId: string;
-    persistence: DocumentsPersistence;
-    slotId: string;
-    storageKey: string;
-}): Promise<void>;
-export declare function savePendingDocumentAttachment(input: {
-    attachment: PendingAttachmentRecord;
-    execSql: ExecSql;
-    persistence: DocumentsPersistence;
-}): Promise<void>;
-export declare function deletePendingDocumentAttachment(input: {
-    execSql: ExecSql;
-    localId: string;
-    persistence: DocumentsPersistence;
-    slotId: string;
-    storageKey: string;
-}): Promise<void>;
-export declare function saveHydratedDocumentAttachment(input: {
-    execSql: ExecSql;
-    persistence: DocumentsPersistence;
-    attachment: LocalAttachmentRecord;
-    expectedStorageKey: string | null;
-    expectedSnapshotEndVersion: string | null;
-    stillCurrent: () => boolean;
-}): Promise<boolean>;

package/workflows/documents/attachmentPersistence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"attachmentPersistence.js","sourceRoot":"","sources":["attachmentPersistence.ts"],"names":[],"mappings":"AAcA,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAIlD;IACC,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,KAAK,CAAC,WAAW,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAMnD;IACC,MAAM,KAAK,CAAC,WAAW,CAAC,qBAAqB,CAC3C,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,CACjB,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,KAMzD;IACC,MAAM,KAAK,CAAC,WAAW,CAAC,2BAA2B,CACjD,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAInD;IACC,MAAM,KAAK,CAAC,WAAW,CAAC,qBAAqB,CAC3C,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,UAAU,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAMrD;IACC,MAAM,KAAK,CAAC,WAAW,CAAC,uBAAuB,CAC7C,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAO9C;IACC,OAAO,KAAK,CAAC,WAAW,CAAC,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACxE,CAAC","sourcesContent":["/**\n * Attachment-slot persistence for stored documents.\n *\n * These are the workflow-level seams the document store writes attachment rows\n * through: the pending-upload queue, the local blob projection, and the detach\n * marker that keeps an unlinked slot's row alive for the next sync.\n */\nimport type {\n  DocumentsPersistence,\n  LocalAttachmentRecord,\n  PendingAttachmentRecord,\n} from \"../../data/persistence/documents/documentsPersistence\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\n\nexport async function saveLocalDocumentAttachments(input: {\n  attachments: ReadonlyArray<LocalAttachmentRecord>;\n  execSql: ExecSql;\n  persistence: DocumentsPersistence;\n}): Promise<void> {\n  for (const attachment of input.attachments) {\n    await input.persistence.saveLocalAttachment(input.execSql, attachment);\n  }\n}\n\nexport async function deleteLocalDocumentAttachment(input: {\n  execSql: ExecSql;\n  localId: string;\n  persistence: DocumentsPersistence;\n  slotId: string;\n  storageKey: string;\n}): Promise<void> {\n  await input.persistence.deleteLocalAttachment(\n    input.execSql,\n    input.localId,\n    input.slotId,\n    input.storageKey,\n  );\n}\n\n/**\n * Mark a slot's local blob row detached without dropping it.\n *\n * Unlinking an attachment from a synced document cannot delete the row: it is\n * also the marker `syncDetachedAttachments` needs to detach the remote binding\n * on the next sync (and to survive a restart before that sync runs). Marking it\n * keeps that marker while taking the slot out of the local blob read models\n * right away, so the blob browser stops listing a reference the document no\n * longer has.\n */\nexport async function markLocalDocumentAttachmentDetached(input: {\n  execSql: ExecSql;\n  localId: string;\n  persistence: DocumentsPersistence;\n  slotId: string;\n  storageKey: string;\n}): Promise<void> {\n  await input.persistence.markLocalAttachmentDetached(\n    input.execSql,\n    input.localId,\n    input.slotId,\n    input.storageKey,\n  );\n}\n\nexport async function savePendingDocumentAttachment(input: {\n  attachment: PendingAttachmentRecord;\n  execSql: ExecSql;\n  persistence: DocumentsPersistence;\n}): Promise<void> {\n  await input.persistence.savePendingAttachment(\n    input.execSql,\n    input.attachment,\n  );\n}\n\nexport async function deletePendingDocumentAttachment(input: {\n  execSql: ExecSql;\n  localId: string;\n  persistence: DocumentsPersistence;\n  slotId: string;\n  storageKey: string;\n}): Promise<void> {\n  await input.persistence.deletePendingAttachment(\n    input.execSql,\n    input.localId,\n    input.slotId,\n    input.storageKey,\n  );\n}\n\nexport function saveHydratedDocumentAttachment(input: {\n  execSql: ExecSql;\n  persistence: DocumentsPersistence;\n  attachment: LocalAttachmentRecord;\n  expectedStorageKey: string | null;\n  expectedSnapshotEndVersion: string | null;\n  stillCurrent: () => boolean;\n}): Promise<boolean> {\n  return input.persistence.saveHydratedAttachment(input.execSql, input);\n}\n"]}

package/workflows/documents/blobMutationLock.d.ts

@@ -1,8 +0,0 @@
-import { type ExecSql } from "../../data/sqlite/sqlSchema.js";
-/**
- * Serialize byte-store mutations that address the same document blob key.
- *
- * Lock order is blob key, then the connection-wide SQL mutation lock. Callers
- * must not acquire this lock from inside `runSerializedSqlMutation`.
- */
-export declare function runSerializedDocumentBlobMutation<T>(execSql: ExecSql, storageKey: string, operation: () => Promise<T> | T): Promise<T>;

package/workflows/documents/blobMutationLock.js

@@ -1,35 +0,0 @@
-import { resolveCanonicalExecSql, } from "../../data/sqlite/sqlSchema.js";
-const mutationQueuesByExecSql = new WeakMap();
-/**
- * Serialize byte-store mutations that address the same document blob key.
- *
- * Lock order is blob key, then the connection-wide SQL mutation lock. Callers
- * must not acquire this lock from inside `runSerializedSqlMutation`.
- */
-export async function runSerializedDocumentBlobMutation(execSql, storageKey, operation) {
-    const canonicalExecSql = resolveCanonicalExecSql(execSql);
-    const queues = mutationQueuesByExecSql.get(canonicalExecSql) ?? new Map();
-    mutationQueuesByExecSql.set(canonicalExecSql, queues);
-    const previous = queues.get(storageKey) ?? Promise.resolve();
-    let releaseCurrent = () => undefined;
-    const current = new Promise((resolve) => {
-        releaseCurrent = resolve;
-    });
-    const waitForPrevious = previous.catch(() => undefined);
-    const queuedCurrent = waitForPrevious.then(() => current);
-    queues.set(storageKey, queuedCurrent);
-    await waitForPrevious;
-    try {
-        return await operation();
-    }
-    finally {
-        releaseCurrent();
-        if (queues.get(storageKey) === queuedCurrent) {
-            queues.delete(storageKey);
-            if (queues.size === 0) {
-                mutationQueuesByExecSql.delete(canonicalExecSql);
-            }
-        }
-    }
-}
-//# sourceMappingURL=blobMutationLock.js.map

package/workflows/documents/blobMutationLock.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"blobMutationLock.js","sourceRoot":"","sources":["blobMutationLock.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,uBAAuB,GACxB,MAAM,6BAA6B,CAAC;AAErC,MAAM,uBAAuB,GAAG,IAAI,OAAO,EAGxC,CAAC;AAEJ;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,OAAgB,EAChB,UAAkB,EAClB,SAA+B;IAE/B,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;IAC1E,uBAAuB,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7D,IAAI,cAAc,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5C,cAAc,GAAG,OAAO,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACtC,MAAM,eAAe,CAAC;IAEtB,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,cAAc,EAAE,CAAC;QACjB,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,aAAa,EAAE,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,uBAAuB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import {\n  type ExecSql,\n  resolveCanonicalExecSql,\n} from \"../../data/sqlite/sqlSchema\";\n\nconst mutationQueuesByExecSql = new WeakMap<\n  ExecSql,\n  Map<string, Promise<void>>\n>();\n\n/**\n * Serialize byte-store mutations that address the same document blob key.\n *\n * Lock order is blob key, then the connection-wide SQL mutation lock. Callers\n * must not acquire this lock from inside `runSerializedSqlMutation`.\n */\nexport async function runSerializedDocumentBlobMutation<T>(\n  execSql: ExecSql,\n  storageKey: string,\n  operation: () => Promise<T> | T,\n): Promise<T> {\n  const canonicalExecSql = resolveCanonicalExecSql(execSql);\n  const queues = mutationQueuesByExecSql.get(canonicalExecSql) ?? new Map();\n  mutationQueuesByExecSql.set(canonicalExecSql, queues);\n\n  const previous = queues.get(storageKey) ?? Promise.resolve();\n  let releaseCurrent: () => void = () => undefined;\n  const current = new Promise<void>((resolve) => {\n    releaseCurrent = resolve;\n  });\n  const waitForPrevious = previous.catch(() => undefined);\n  const queuedCurrent = waitForPrevious.then(() => current);\n  queues.set(storageKey, queuedCurrent);\n  await waitForPrevious;\n\n  try {\n    return await operation();\n  } finally {\n    releaseCurrent();\n    if (queues.get(storageKey) === queuedCurrent) {\n      queues.delete(storageKey);\n      if (queues.size === 0) {\n        mutationQueuesByExecSql.delete(canonicalExecSql);\n      }\n    }\n  }\n}\n"]}

package/workflows/documents/create.d.ts

@@ -1,56 +0,0 @@
-import { type ContainerWriterProjectionResponse, type DocumentCreateResponse } from "../../internal/validators/response/index.js";
-import type { CreateRemoteDocumentResult, DocumentCreateApi, DocumentCreateAuthor, MaterializedDocumentCreatePlan, ProjectionVerificationOptions } from "../../data/documents/shared/types.js";
-import type { ProjectionUserKeyResolver, ReferencedPrincipalPolicyWarmer } from "../../data/keyingProjectionVerification/index.js";
-import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
-import type { DocumentCreateTerminalFailureHandler } from "./createProjectionFetch.js";
-export declare function buildMaterializedDocumentCreatePlan(input: {
-    author: DocumentCreateAuthor;
-    containerProjection: ContainerWriterProjectionResponse;
-    contentKey?: Uint8Array | undefined;
-    contentKeyEpoch?: number | undefined;
-    documentId?: string | undefined;
-    eventId?: string | undefined;
-    execSql?: ExecSql | undefined;
-    knownContainerKeks?: ReadonlyMap<string, Uint8Array> | undefined;
-    persistVerificationCheckpoints?: boolean | undefined;
-    signedAt?: string | undefined;
-    targetSecretKey: Uint8Array;
-} & ProjectionVerificationOptions): Promise<MaterializedDocumentCreatePlan>;
-export { documentWriterProjectionFromCreateResponse } from "./createProjection.js";
-interface RemoteDocumentCreateInput {
-    apiClient: DocumentCreateApi;
-    author: DocumentCreateAuthor;
-    containerId: string;
-    containerProjection?: ContainerWriterProjectionResponse | undefined;
-    contentKey?: Uint8Array | undefined;
-    contentKeyEpoch?: number | undefined;
-    documentId?: string | undefined;
-    eventId?: string | undefined;
-    execSql: ExecSql;
-    expectedOrganizationId?: string | undefined;
-    isRemoteSyncBlocked?: ((organizationId: string) => boolean) | undefined;
-    knownContainerKeks?: ReadonlyMap<string, Uint8Array> | undefined;
-    /**
-     * Invoked when the create submission fails terminally (not a benign
-     * adopt/stale-target conflict) — e.g. the server denies the write. Callers
-     * persist the failure so the write queue can surface it.
-     */
-    onTerminalSubmitFailure?: DocumentCreateTerminalFailureHandler | undefined;
-    resolveProjectionUserKey: ProjectionUserKeyResolver;
-    signedAt?: string | undefined;
-    stillCurrent?: (() => boolean) | undefined;
-    targetSecretKey: Uint8Array;
-    warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;
-}
-export declare function createRemoteDocument(input: RemoteDocumentCreateInput): Promise<CreateRemoteDocumentResult | null>;
-type DocumentCreateSubmission = {
-    readonly data: DocumentCreateResponse;
-    readonly ok: true;
-} | {
-    readonly code?: string | undefined;
-    readonly message: string;
-    readonly ok: false;
-    readonly report?: (() => void) | undefined;
-    readonly status: number | null;
-};
-export declare function isStaleDocumentCreateTargetConflict(submission: DocumentCreateSubmission): boolean;

package/workflows/documents/create.js

@@ -1,258 +0,0 @@
-import { DOCUMENT_SYNC_ERROR_CODES, } from "../../internal/validators/response/index.js";
-import { assertContainerAuthorAccess } from "../../data/containers/shared/authorAccess.js";
-import { buildDocumentCreatePlan } from "../../data/documents/shared/events.js";
-import { wrapDocumentContentKeyForCreate } from "../../data/documents/shared/projection.js";
-import { projectionVerificationOptions } from "../../data/documents/shared/types.js";
-import { collectContainerWriterProjectionPrincipalPolicies, nullOnProjectionVerificationCancellation, requireProjectionUserKeyResolver, } from "../../data/keyingProjectionVerification/index.js";
-import { isContainerCreatePending } from "../../data/persistence/container-contents/pendingContainerCreate.js";
-import { recordDocumentAuthorAccessFailure } from "./authorAccessFailure.js";
-import { adoptExistingRemoteDocument } from "./createAdoption.js";
-import { fetchContainerWriterProjectionForCreate } from "./createProjectionFetch.js";
-import { acknowledgeRemoteDocumentCreate } from "./createResponse.js";
-import { isDocumentManifestAlreadyExistsConflict, shouldRetryWithFreshProjection, } from "./syncFailureClassification.js";
-export async function buildMaterializedDocumentCreatePlan(input) {
-    const contentKey = input.contentKey ?? crypto.getRandomValues(new Uint8Array(32));
-    if (contentKey.byteLength !== 32) {
-        throw new Error("Document content key must be 32 bytes");
-    }
-    // Resolved before wrapping: each envelope is sealed to its document and
-    // content-key epoch.
-    const documentId = input.documentId ?? crypto.randomUUID();
-    const contentKeyEpoch = input.contentKeyEpoch ?? 1;
-    const targetEnvelopes = await wrapDocumentContentKeyForCreate({
-        contentKey,
-        contentKeyEpoch,
-        documentId,
-        execSql: input.execSql,
-        knownContainerKeks: input.knownContainerKeks,
-        persistVerificationCheckpoints: input.persistVerificationCheckpoints,
-        projection: input.containerProjection,
-        secretKey: input.targetSecretKey,
-        ...projectionVerificationOptions(input),
-    });
-    if (input.resolveProjectionUserKey) {
-        const principalPolicies = await collectContainerWriterProjectionPrincipalPolicies({
-            ...projectionVerificationOptions(input),
-            execSql: input.execSql,
-            projection: input.containerProjection,
-            resolveUserKey: input.resolveProjectionUserKey,
-        });
-        assertContainerAuthorAccess({
-            // Document signing derives its organization from the verified target.
-            author: {
-                ...input.author,
-                organizationId: input.containerProjection.organizationId,
-            },
-            projection: input.containerProjection,
-            principalPolicies,
-            minimumAccess: "write",
-        });
-    }
-    // The explicit local-trust variant builds provisioning artifacts before
-    // their new principal policies exist remotely; remote creates cannot use it.
-    const plan = await buildDocumentCreatePlan({
-        author: input.author,
-        containerProjection: input.containerProjection,
-        contentKeyEpoch,
-        documentId,
-        ...(input.eventId === undefined ? {} : { eventId: input.eventId }),
-        ...(input.signedAt === undefined ? {} : { signedAt: input.signedAt }),
-        targetEnvelopes,
-    });
-    return {
-        contentKey,
-        plan,
-    };
-}
-export { documentWriterProjectionFromCreateResponse } from "./createProjection.js";
-async function buildMaterializedDocumentCreatePlanWithFreshProjection(input) {
-    const buildWithProjection = async (containerProjection) => {
-        if (containerProjection.containerId !== input.containerId ||
-            (input.expectedOrganizationId !== undefined &&
-                containerProjection.organizationId !== input.expectedOrganizationId)) {
-            throw new Error("Container writer projection belongs to another container or organization");
-        }
-        return {
-            containerProjection,
-            materializedPlan: await buildMaterializedDocumentCreatePlan({
-                author: input.author,
-                containerProjection,
-                contentKey: input.contentKey,
-                contentKeyEpoch: input.contentKeyEpoch,
-                documentId: input.documentId,
-                eventId: input.eventId,
-                execSql: input.execSql,
-                knownContainerKeks: input.knownContainerKeks,
-                persistVerificationCheckpoints: input.persistVerificationCheckpoints,
-                resolveProjectionUserKey: input.resolveProjectionUserKey,
-                signedAt: input.signedAt,
-                stillCurrent: input.stillCurrent,
-                targetSecretKey: input.targetSecretKey,
-                warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,
-            }),
-        };
-    };
-    const containerProjection = input.containerProjection ??
-        (await fetchContainerWriterProjectionForCreate({
-            apiClient: input.apiClient,
-            containerId: input.containerId,
-            onTerminalSubmitFailure: input.onTerminalSubmitFailure,
-        }));
-    if (!containerProjection) {
-        return null;
-    }
-    try {
-        return await buildWithProjection(containerProjection);
-    }
-    catch (error) {
-        if (!shouldRetryWithFreshProjection(error, (message) => message.includes("could not be unwrapped"))) {
-            throw error;
-        }
-    }
-    // Only this container's projection was stale; evict just it rather than
-    // wiping every cached projection.
-    input.apiClient.evictContainerWriterProjection(input.containerId);
-    const refreshedProjection = await fetchContainerWriterProjectionForCreate({
-        apiClient: input.apiClient,
-        containerId: input.containerId,
-        onTerminalSubmitFailure: input.onTerminalSubmitFailure,
-    });
-    return refreshedProjection ? buildWithProjection(refreshedProjection) : null;
-}
-function isRemoteDocumentCreatePlanBlocked(input, createPlan) {
-    const organizationId = createPlan.containerProjection.organizationId;
-    return input.isRemoteSyncBlocked?.(organizationId) ?? false;
-}
-async function submitPlannedDocumentCreate(input, resolveProjectionUserKey) {
-    const verificationOptions = { stillCurrent: input.stillCurrent };
-    const warmReferencedPrincipalPolicies = input.warmReferencedPrincipalPolicies;
-    let createPlan = await buildMaterializedDocumentCreatePlanWithFreshProjection({
-        apiClient: input.apiClient,
-        author: input.author,
-        containerId: input.containerId,
-        containerProjection: input.containerProjection,
-        contentKey: input.contentKey,
-        contentKeyEpoch: input.contentKeyEpoch,
-        documentId: input.documentId,
-        eventId: input.eventId,
-        execSql: input.execSql,
-        expectedOrganizationId: input.expectedOrganizationId,
-        knownContainerKeks: input.knownContainerKeks,
-        onTerminalSubmitFailure: input.onTerminalSubmitFailure,
-        resolveProjectionUserKey,
-        signedAt: input.signedAt,
-        targetSecretKey: input.targetSecretKey,
-        warmReferencedPrincipalPolicies,
-        ...verificationOptions,
-    });
-    if (!createPlan) {
-        return null;
-    }
-    if (isRemoteDocumentCreatePlanBlocked(input, createPlan))
-        return null;
-    if (input.stillCurrent?.() === false)
-        return null;
-    let submission = await submitDocumentCreate(input.apiClient, createPlan.materializedPlan.plan.request, createPlan.containerProjection.organizationId);
-    if (isStaleDocumentCreateTargetConflict(submission)) {
-        if (input.stillCurrent?.() === false) {
-            return { createPlan, submission };
-        }
-        input.apiClient.evictContainerWriterProjection(input.containerId);
-        const firstPlan = createPlan.materializedPlan;
-        const refreshedPlan = await buildMaterializedDocumentCreatePlanWithFreshProjection({
-            apiClient: input.apiClient,
-            author: input.author,
-            containerId: input.containerId,
-            contentKey: firstPlan.contentKey,
-            contentKeyEpoch: firstPlan.plan.request.contentKeyBundle.contentKeyEpoch,
-            documentId: firstPlan.plan.documentId,
-            eventId: firstPlan.plan.event.eventId,
-            execSql: input.execSql,
-            expectedOrganizationId: input.expectedOrganizationId,
-            knownContainerKeks: input.knownContainerKeks,
-            onTerminalSubmitFailure: input.onTerminalSubmitFailure,
-            resolveProjectionUserKey,
-            signedAt: firstPlan.plan.event.signedAt,
-            targetSecretKey: input.targetSecretKey,
-            warmReferencedPrincipalPolicies,
-            ...verificationOptions,
-        });
-        if (!refreshedPlan) {
-            return null;
-        }
-        if (isRemoteDocumentCreatePlanBlocked(input, refreshedPlan))
-            return null;
-        createPlan = refreshedPlan;
-        if (input.stillCurrent?.() === false)
-            return null;
-        submission = await submitDocumentCreate(input.apiClient, createPlan.materializedPlan.plan.request, createPlan.containerProjection.organizationId);
-    }
-    return { createPlan, submission };
-}
-export async function createRemoteDocument(input) {
-    // The store retries once the folder's own create settles.
-    if (await isContainerCreatePending(input.execSql, input.containerId)) {
-        return null;
-    }
-    const resolveProjectionUserKey = requireProjectionUserKeyResolver(input.resolveProjectionUserKey, "Remote document create");
-    const plannedSubmission = await recordDocumentAuthorAccessFailure(() => nullOnProjectionVerificationCancellation(() => submitPlannedDocumentCreate(input, resolveProjectionUserKey)), input.onTerminalSubmitFailure);
-    if (!plannedSubmission) {
-        return null;
-    }
-    const { createPlan, submission } = plannedSubmission;
-    if (input.stillCurrent?.() === false)
-        return null;
-    if (submission.ok)
-        return acknowledgeRemoteDocumentCreate({
-            ...input,
-            ...createPlan,
-            resolveProjectionUserKey,
-            response: submission.data,
-        });
-    // A stable documentId means a retry after a lost create response re-submits
-    // the same id; the server then reports the manifest already exists. That is
-    // not a failure — the first attempt committed. Adopt the existing remote
-    // document instead of leaking a duplicate. Requires the stable id we sent, so
-    // we can fetch its projection back.
-    const stableDocumentId = input.documentId;
-    if (stableDocumentId && isDocumentManifestAlreadyExistsConflict(submission)) {
-        if (input.stillCurrent?.() === false)
-            return null;
-        const adopted = await nullOnProjectionVerificationCancellation(() => adoptExistingRemoteDocument({
-            apiClient: input.apiClient,
-            documentId: stableDocumentId,
-            execSql: input.execSql,
-            expectedContainerId: input.containerId,
-            expectedOrganizationId: input.expectedOrganizationId ??
-                createPlan.containerProjection.organizationId,
-            expectedSignerUserId: input.author.signerUserId,
-            resolveProjectionUserKey,
-            stillCurrent: input.stillCurrent,
-            targetSecretKey: input.targetSecretKey,
-            warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,
-        }));
-        if (adopted) {
-            return adopted;
-        }
-        // A conflict is the expected, benign outcome of an idempotent retry after a
-        // lost create response. If adoption cannot complete yet (e.g. the writer
-        // projection fetch failed transiently), do not surface the conflict as a UI
-        // error — the sync engine retries and adopts it on a later tick.
-        return null;
-    }
-    submission.report?.();
-    await input.onTerminalSubmitFailure?.(submission);
-    return null;
-}
-export function isStaleDocumentCreateTargetConflict(submission) {
-    return (!submission.ok &&
-        submission.status === 409 &&
-        submission.code === DOCUMENT_SYNC_ERROR_CODES.stateStale);
-}
-async function submitDocumentCreate(apiClient, request, expectedOrganizationId) {
-    return apiClient.createDocumentResult(request, {
-        expectedPaymentRequiredOrganizationId: expectedOrganizationId,
-        reportErrors: false,
-    });
-}
-//# sourceMappingURL=create.js.map