@tearleads/client-sdk 0.1.61 → 0.1.63

package/workflows/blobs/verification/writerProjection.js

@@ -0,0 +1,29 @@
+import { readDocumentManifestIdentity } from "../../../data/documents/blob/shared/readers.js";
+import { assertDocumentWriterProjectionConsistent } from "../../../data/documents/shared/projection.js";
+import { projectionVerificationOptions, } from "../../../data/documents/shared/types.js";
+/**
+ * Shared prologue for blob attachment mutations (upload/detach): resolve the
+ * document writer projection, verify its consistency, confirm it targets the
+ * mutated document, and gate on a blocked organization. Returns null when the
+ * projection is unavailable or the organization's remote sync is blocked.
+ */
+export async function resolveBlobMutationWriterProjection(input) {
+    const writerProjection = input.writerProjection ??
+        (await input.apiClient.getDocumentWriterProjection(input.documentId));
+    if (!writerProjection) {
+        return null;
+    }
+    await assertDocumentWriterProjectionConsistent(writerProjection, {
+        execSql: input.execSql,
+        ...projectionVerificationOptions(input),
+    });
+    const manifestIdentity = readDocumentManifestIdentity(writerProjection);
+    if (manifestIdentity.documentId !== input.documentId) {
+        throw new Error(`${input.errorLabel} writer projection targets wrong document`);
+    }
+    if (input.isRemoteSyncBlocked?.(manifestIdentity.organizationId)) {
+        return null;
+    }
+    return { manifestIdentity, writerProjection };
+}
+//# sourceMappingURL=writerProjection.js.map

package/workflows/blobs/verification/writerProjection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writerProjection.js","sourceRoot":"","sources":["writerProjection.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAK3F,OAAO,EAAE,wCAAwC,EAAE,MAAM,2CAA2C,CAAC;AACrG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAG9C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,KAQiC;IAKjC,MAAM,gBAAgB,GACpB,KAAK,CAAC,gBAAgB;QACtB,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,wCAAwC,CAAC,gBAAgB,EAAE;QAC/D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,6BAA6B,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,gBAAgB,CAAC,CAAC;IACxE,IAAI,gBAAgB,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,UAAU,2CAA2C,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC;AAChD,CAAC","sourcesContent":["import type { DocumentWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { readDocumentManifestIdentity } from \"../../../data/documents/blob/shared/readers\";\nimport type {\n  BlobAttachmentApi,\n  DocumentManifestIdentity,\n} from \"../../../data/documents/blob/shared/types\";\nimport { assertDocumentWriterProjectionConsistent } from \"../../../data/documents/shared/projection\";\nimport {\n  type ProjectionVerificationOptions,\n  projectionVerificationOptions,\n} from \"../../../data/documents/shared/types\";\nimport type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\n\n/**\n * Shared prologue for blob attachment mutations (upload/detach): resolve the\n * document writer projection, verify its consistency, confirm it targets the\n * mutated document, and gate on a blocked organization. Returns null when the\n * projection is unavailable or the organization's remote sync is blocked.\n */\nexport async function resolveBlobMutationWriterProjection(\n  input: {\n    apiClient: Pick<BlobAttachmentApi, \"getDocumentWriterProjection\">;\n    documentId: string;\n    /** Prefix for the wrong-document error, e.g. \"Blob attachment detach\". */\n    errorLabel: string;\n    execSql?: ExecSql | undefined;\n    isRemoteSyncBlocked?: ((organizationId: string) => boolean) | undefined;\n    writerProjection?: DocumentWriterProjectionResponse | undefined;\n  } & ProjectionVerificationOptions,\n): Promise<{\n  manifestIdentity: DocumentManifestIdentity;\n  writerProjection: DocumentWriterProjectionResponse;\n} | null> {\n  const writerProjection =\n    input.writerProjection ??\n    (await input.apiClient.getDocumentWriterProjection(input.documentId));\n  if (!writerProjection) {\n    return null;\n  }\n\n  await assertDocumentWriterProjectionConsistent(writerProjection, {\n    execSql: input.execSql,\n    ...projectionVerificationOptions(input),\n  });\n  const manifestIdentity = readDocumentManifestIdentity(writerProjection);\n  if (manifestIdentity.documentId !== input.documentId) {\n    throw new Error(\n      `${input.errorLabel} writer projection targets wrong document`,\n    );\n  }\n  if (input.isRemoteSyncBlocked?.(manifestIdentity.organizationId)) {\n    return null;\n  }\n\n  return { manifestIdentity, writerProjection };\n}\n"]}

package/workflows/container-contents/attribution/documentAttributionRanges.d.ts

@@ -0,0 +1,26 @@
+import type { DocumentEditAttributionRangeResponse, ListDocumentEditAttributionRangesResponse } from "../../../internal/validators/response/index.js";
+export interface DocumentAttributionRangesInput {
+    readonly cursor?: string | null | undefined;
+    readonly documentId: string;
+    readonly expectedRevision?: number | undefined;
+    readonly limit?: number | undefined;
+}
+export interface DocumentAttributionRangesPage {
+    readonly attributionRevision: number;
+    readonly documentId: string;
+    readonly hasMore: boolean;
+    readonly items: DocumentEditAttributionRangeResponse[];
+    readonly nextCursor: string | null;
+}
+interface DocumentAttributionRangesApi {
+    listDocumentEditAttributionRanges(documentId: string, options?: {
+        readonly cursor?: string | null | undefined;
+        readonly expectedRevision?: number | undefined;
+        readonly limit?: number | undefined;
+    }): Promise<ListDocumentEditAttributionRangesResponse | null>;
+}
+export declare function loadDocumentAttributionRanges(input: {
+    readonly apiClient: DocumentAttributionRangesApi;
+    readonly query: DocumentAttributionRangesInput;
+}): Promise<DocumentAttributionRangesPage>;
+export {};

package/workflows/container-contents/attribution/documentCharacterBlame.js

@@ -0,0 +1,33 @@
+import { base64ToBytes } from "../../../internal/encoding/index.js";
+import { listSnapshotCharBlameSource } from "../../../internal/loro/index.js";
+import { summarizeDocumentBlame, } from "../../../data/documents/editAttribution.js";
+// Op-id extraction is linear (~1.8µs/char — ~90ms for a 50k snapshot, flat per
+// char), so this cap is a soft guard against pathologically large prose, not a
+// quadratic cliff: above it blame surfaces null rather than doing unbounded
+// synchronous work when the Info panel opens.
+const MAX_BLAME_CHARACTER_COUNT = 50_000;
+/**
+ * Rebuild the document's per-character op ids from the locally persisted
+ * content snapshot and resolve them against the attribution segments — in a
+ * single snapshot reconstruction — into both the per-writer blame summary and
+ * the coalesced per-writer ranges. Returns null when blame can't be produced:
+ * no local snapshot, a snapshot too large to scan cheaply, or an unreadable
+ * snapshot — blame is supplementary and must never block (or blank) the rest
+ * of the Info panel, mirroring the attribution fetch's degrade-to-null.
+ */
+export function computeDocumentBlame(contentSnapshot, segments) {
+    if (!contentSnapshot || contentSnapshot.length === 0) {
+        return null;
+    }
+    try {
+        const source = listSnapshotCharBlameSource(base64ToBytes(contentSnapshot), MAX_BLAME_CHARACTER_COUNT);
+        if (source === null) {
+            return null;
+        }
+        return summarizeDocumentBlame(source, segments);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=documentCharacterBlame.js.map

package/workflows/container-contents/attribution/documentCharacterBlame.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentCharacterBlame.js","sourceRoot":"","sources":["documentCharacterBlame.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAE9D,OAAO,EAGL,sBAAsB,GACvB,MAAM,yCAAyC,CAAC;AAEjD,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,8CAA8C;AAC9C,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEzC;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,eAA8B,EAC9B,QAAqD;IAOrD,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,2BAA2B,CACxC,aAAa,CAAC,eAAe,CAAC,EAC9B,yBAAyB,CAC1B,CAAC;QACF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { base64ToBytes } from \"@tearleads/encoding\";\nimport { listSnapshotCharBlameSource } from \"@tearleads/loro\";\nimport type { DocumentEditAttributionResponse } from \"@tearleads/validators/response\";\nimport {\n  type DocumentBlameRange,\n  type DocumentCharacterBlameSummary,\n  summarizeDocumentBlame,\n} from \"../../../data/documents/editAttribution\";\n\n// Op-id extraction is linear (~1.8µs/char — ~90ms for a 50k snapshot, flat per\n// char), so this cap is a soft guard against pathologically large prose, not a\n// quadratic cliff: above it blame surfaces null rather than doing unbounded\n// synchronous work when the Info panel opens.\nconst MAX_BLAME_CHARACTER_COUNT = 50_000;\n\n/**\n * Rebuild the document's per-character op ids from the locally persisted\n * content snapshot and resolve them against the attribution segments — in a\n * single snapshot reconstruction — into both the per-writer blame summary and\n * the coalesced per-writer ranges. Returns null when blame can't be produced:\n * no local snapshot, a snapshot too large to scan cheaply, or an unreadable\n * snapshot — blame is supplementary and must never block (or blank) the rest\n * of the Info panel, mirroring the attribution fetch's degrade-to-null.\n */\nexport function computeDocumentBlame(\n  contentSnapshot: string | null,\n  segments: DocumentEditAttributionResponse[\"segments\"],\n): {\n  /** Per-writer live-character counts (the Contributors-style rollup). */\n  characterBlame: DocumentCharacterBlameSummary;\n  /** Contiguous per-writer runs of the current prose (the read-only blame view). */\n  blameRanges: DocumentBlameRange[];\n} | null {\n  if (!contentSnapshot || contentSnapshot.length === 0) {\n    return null;\n  }\n  try {\n    const source = listSnapshotCharBlameSource(\n      base64ToBytes(contentSnapshot),\n      MAX_BLAME_CHARACTER_COUNT,\n    );\n    if (source === null) {\n      return null;\n    }\n    return summarizeDocumentBlame(source, segments);\n  } catch {\n    return null;\n  }\n}\n"]}

package/workflows/container-contents/attribution/documentFieldBlame.js

@@ -0,0 +1,26 @@
+import { base64ToBytes } from "../../../internal/encoding/index.js";
+import { listSnapshotFieldEditors } from "../../../internal/loro/index.js";
+import { DOCUMENT_FIELDS_MAP_KEY } from "../../../data/documents/documentKinds.js";
+import { summarizeFieldBlame, } from "../../../data/documents/editAttribution.js";
+/**
+ * Per-field "blame" for a structured document: read the peer that last set each
+ * field from the locally persisted snapshot and resolve it against the
+ * attribution segments. Reconstructing the small `fields` map is cheap (no
+ * per-character sweep), so this runs its own reconstruction independent of the
+ * character-blame path. Returns null when it can't be produced — no local
+ * snapshot or an unreadable one — mirroring the character-blame degrade-to-null;
+ * a note (or any document without fields) yields an empty array, not null.
+ */
+export function computeFieldBlame(contentSnapshot, segments) {
+    if (!contentSnapshot || contentSnapshot.length === 0) {
+        return null;
+    }
+    try {
+        const fieldEditors = listSnapshotFieldEditors(base64ToBytes(contentSnapshot), DOCUMENT_FIELDS_MAP_KEY);
+        return summarizeFieldBlame(fieldEditors, segments);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=documentFieldBlame.js.map

package/workflows/container-contents/attribution/documentFieldBlame.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentFieldBlame.js","sourceRoot":"","sources":["documentFieldBlame.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAE3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAEL,mBAAmB,GACpB,MAAM,yCAAyC,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,eAA8B,EAC9B,QAAqD;IAErD,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,wBAAwB,CAC3C,aAAa,CAAC,eAAe,CAAC,EAC9B,uBAAuB,CACxB,CAAC;QACF,OAAO,mBAAmB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { base64ToBytes } from \"@tearleads/encoding\";\nimport { listSnapshotFieldEditors } from \"@tearleads/loro\";\nimport type { DocumentEditAttributionResponse } from \"@tearleads/validators/response\";\nimport { DOCUMENT_FIELDS_MAP_KEY } from \"../../../data/documents/documentKinds\";\nimport {\n  type DocumentFieldBlame,\n  summarizeFieldBlame,\n} from \"../../../data/documents/editAttribution\";\n\n/**\n * Per-field \"blame\" for a structured document: read the peer that last set each\n * field from the locally persisted snapshot and resolve it against the\n * attribution segments. Reconstructing the small `fields` map is cheap (no\n * per-character sweep), so this runs its own reconstruction independent of the\n * character-blame path. Returns null when it can't be produced — no local\n * snapshot or an unreadable one — mirroring the character-blame degrade-to-null;\n * a note (or any document without fields) yields an empty array, not null.\n */\nexport function computeFieldBlame(\n  contentSnapshot: string | null,\n  segments: DocumentEditAttributionResponse[\"segments\"],\n): DocumentFieldBlame[] | null {\n  if (!contentSnapshot || contentSnapshot.length === 0) {\n    return null;\n  }\n  try {\n    const fieldEditors = listSnapshotFieldEditors(\n      base64ToBytes(contentSnapshot),\n      DOCUMENT_FIELDS_MAP_KEY,\n    );\n    return summarizeFieldBlame(fieldEditors, segments);\n  } catch {\n    return null;\n  }\n}\n"]}

package/workflows/container-contents/container-state/createIntentSync.js

@@ -2,7 +2,7 @@ import { ContainerPathTooDeepError } from "../../../data/containers/shared/conta
 import { reportAndRethrowKeyingVerificationError } from "../../../data/keyingProjectionVerification/error.js";
 import { ContainerCreateIntentSupersededError } from "../../../data/persistence/container-contents/containerIntentPersistence.js";
 import { errorMessage } from "../../../data/shared/errorMessage.js";
-import { createDetachedContainerMetadataState, installDetachedContainerMetadataState, } from "../metadataStateIsolation.js";
+import { createDetachedContainerMetadataState, installDetachedContainerMetadataState, } from "../metadata/metadataStateIsolation.js";
 import { hasRemoteContainerMetadataState } from "../remoteHydration/reconciliation.js";
 import { syncListedContainerCreate } from "./createAdoption.js";
 import { deferTooDeepCreate, recordRefusedTooDeepCreate, } from "./createIntentDepth.js";

package/workflows/container-contents/container-state/createIntentSync.js.map

@@ -1 +1 @@
-{"version":3,"file":"createIntentSync.js","sourceRoot":"","sources":["createIntentSync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,uCAAuC,EAAE,MAAM,kDAAkD,CAAC;AAC3G,OAAO,EAAE,oCAAoC,EAAE,MAAM,yEAAyE,CAAC;AAC/H,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EACL,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EACL,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAQxE,MAAM,wCAAyC,SAAQ,KAAK;CAAG;AAI/D,SAAS,mBAAmB,CAE1B,SAAwB,EAAE,MAAc;IACxC,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,qCAAqC,CAAC,KAKpD;IACC,MAAM,uCAAuC,CAC3C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAC/C;QACE,QAAQ,EAAE,KAAK,CAAC,WAAW;QAC3B,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,yBAAyB;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAM3C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,qCAAqC,CAAC;QAC1C,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;QACrC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,+BAA+B,CAC3D,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EACjC;QACE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;QACrC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;QACjC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;QACzC,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,YAAY,wCAAwC,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,gCAAgC,KAAK,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QACtL,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CACF,CAAC;IACF,OAAO,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,4CAA4C,CAAC,KAO3D;IAOC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC/D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,WAAW,CAAC;IAC3C,MAAM,oBAAoB,GACxB,MAAM,oCAAoC,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,WAAW,CAAC;IAC3C,oBAAoB,CAAC,SAAS,GAAG;QAC/B,GAAG,oBAAoB,CAAC,SAAS;QACjC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,eAAe,EAAE,OAAO,CAAC,SAAS;QAClC,eAAe,EAAE,OAAO,CAAC,SAAS;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;IAEF,IAAI,iBAEH,CAAC;IACF,IAAI,CAAC;QACH,iBAAiB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAClD,oBAAoB,EACpB;YACE,WAAW,EAAE,CAAC;YACd,eAAe,EAAE,OAAO,CAAC,kBAAkB;YAC3C,aAAa,EAAE,IAAI;YACnB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,OAAO,CAAC,sBAAsB;SAClC,EACD,KAAK,EACL;YACE,gBAAgB,EAAE;gBAChB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B;SACF,EACD;YACE,sBAAsB,EAAE;gBACtB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;gBAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;gBACnC,iBAAiB,EAAE,OAAO,CAAC,WAAW;gBACtC,6BAA6B,EAAE,OAAO,CAAC,kBAAkB;gBACzD,wBAAwB,EAAE,OAAO,CAAC,kBAAkB;gBACpD,8BAA8B,EAAE,OAAO,CAAC,QAAQ;aACjD;YACD,wBAAwB,EAAE,cAAc;YACxC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,mCAAmC,EAAE,IAAI;SAC1C,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oCAAoC,EAAE,CAAC;YAC1D,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,iBAAiB,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC1E,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,iBAAiB,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC;IAC9E,IAAI,iBAAiB,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,IAAI,wCAAwC,CAChD,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,WAAW,CAAC;IAC3C,MAAM,qBAAqB,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3E,IAAI,CAAC,qBAAqB;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,qBAAqB,KAAK,cAAc;QAAE,OAAO,qBAAqB,CAAC;IAE3E,qCAAqC,CAAC,cAAc,EAAE,oBAAoB,EAAE;QAC1E,eAAe,EAAE,UAAU;QAC3B,8BAA8B,EAAE,IAAI;KACrC,CAAC,CAAC;IACH,cAAc,CAAC,SAAS,GAAG;QACzB,GAAG,cAAc,CAAC,SAAS;QAC3B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,QAAQ,EAAE,oBAAoB,CAAC,SAAS,CAAC,QAAQ;QACjD,eAAe,EAAE,OAAO,CAAC,SAAS;QAClC,eAAe,EAAE,OAAO,CAAC,SAAS;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;IACF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,KAI7C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC;QACjD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;QACtC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;QAC5C,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;KAC7B,CAAC,CAAC,IAAI,CACL,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gCAAgC,CAAC,EAChE,CAAC,KAAc,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CACxC,CAAC;IACF,IAAI,KAAK,CAAC,SAAS,EAAE,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QACjD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAC1B,mEAAmE,KAAK,CAAC,OAAO,CAAC,WAAW,wBAAwB,cAAc,EAAE,CACrI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAI1C;IACC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACrD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,2BAA2B,EAAE,CAAC;QAC5C,4EAA4E;QAC5E,uCAAuC;QACvC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,kDAAkD,MAAM,CAAC,WAAW,6DAA6D,CAClI,CAAC;QACF,SAAS,CAAC,2BAA2B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,KAAK,CAAC,WAAW,CAAC,+BAA+B,CACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B;YACE,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,OAAO,EAAE,qDAAqD;YAC9D,YAAY,EAAE,SAAS,CAAC,SAAS;SAClC,CACF,CAAC;QACF,OAAO,mBAAmB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAClD,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,8BAA8B,CAAC;YACnC,OAAO;YACP,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,KAAK;SACN,CAAC,CAAC;QACH,OAAO,mBAAmB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,4CAA4C,CAAC;QAC3E,cAAc;QACd,OAAO;QACP,IAAI;QACJ,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,MAAM;QACN,KAAK;KACN,CAAC,CAAC;IACH,IAAI,iBAAiB,KAAK,WAAW,EAAE,CAAC;QACtC,SAAS,CAAC,2BAA2B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAChE,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,8BAA8B,CAAC;YACnC,OAAO;YACP,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,KAAK;SACN,CAAC,CAAC;QACH,OAAO,mBAAmB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,iBAAiB,KAAK,qBAAqB,EAAE,CAAC;QAChD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,kDAAkD,MAAM,CAAC,WAAW,iDAAiD,CACtH,CAAC;QACF,SAAS,CAAC,2BAA2B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,iBAAiB,KAAK,mBAAmB,EAAE,CAAC;QAC9C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,kDAAkD,MAAM,CAAC,WAAW,8CAA8C,CACnH,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,qDAAqD,cAAc,CAAC,SAAS,CAAC,EAAE,EAAE,CACnF,CAAC;IACF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAI3C;IACC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IACpC,IAAI,OAA0D,CAAC;IAC/D,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,qBAAqB,CAAC;YACpC,UAAU,EAAE,cAAc,CAAC,SAAS,CAAC,UAAU;YAC/C,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE;YACxC,iBAAiB,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE;YAC3C,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,SAAS,CAAC,SAAS;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,yBAAyB;YAC5C,OAAO,0BAA0B,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,4BAA4B,CAAC;YAClC,KAAK;YACL,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM;YACN,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,cAAc;YACpD,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;QAC3B,SAAS,CAAC,2BAA2B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAChE,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,2BAA2B,CAAC;YACvC,cAAc;YACd,OAAO;YACP,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,wCAAwC,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,OAAO,4BAA4B,CAAC;YAClC,KAAK;YACL,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM;YACN,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,cAAc;YACpD,KAAK;SACN,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oDAAoD,CACjE,KAAqC;IAErC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAEvE,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5C,MAAM,KAAK,CAAC,WAAW,CAAC,+BAA+B,CAAC,OAAO,EAAE;YAC/D,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,OAAO,EAAE,8DAA8D;YACvE,YAAY,EAAE,KAAK,CAAC,SAAS;SAC9B,CAAC,CAAC;QACH,OAAO,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,WAAW,CAAC,8BAA8B,KAAK,UAAU,EAAE,CAAC;QAC3E,MAAM,KAAK,CAAC,WAAW,CAAC,+BAA+B,CACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B;YACE,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,OAAO,EAAE,2DAA2D;YACpE,YAAY,EAAE,KAAK,CAAC,SAAS;SAC9B,CACF,CAAC;QACF,OAAO,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;QACpE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,+BAA+B,CAAC,cAAc,CAAC,EAAE,CAAC;QACpD,OAAO,yBAAyB,CAAC;YAC/B,cAAc;YACd,WAAW;YACX,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,0EAA0E;IAC1E,IACE,CAAC,+BAA+B,CAAC,WAAW,CAAC;QAC7C,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,EAC/C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,4BAA4B,CAAC;QAClC,cAAc;QACd,WAAW;QACX,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAMvD;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,cAAc,GAClB,MAAM,KAAK,CAAC,WAAW,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CACnD,CAAC;IACF,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC7D,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,UAAU,GAAG,IAAI,CAAC;IAEtB,OAAO,UAAU,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvC,UAAU,GAAG,KAAK,CAAC;QAEnB,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnD,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,oDAAoD,CACvE;gBACE,IAAI;gBACJ,eAAe,EAAE,CAAC,WAAW,EAAE,EAAE,CAC/B,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC;gBACxC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,MAAM;gBACN,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;gBAC9D,KAAK;aACN,CACF,CAAC;YACF,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;gBAC3B,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YAED,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACjD,UAAU,GAAG,MAAM,KAAK,SAAS,IAAI,UAAU,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,YAAY,IAAI,CAAC,CAAC;gBAClB,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC","sourcesContent":["import { ContainerPathTooDeepError } from \"../../../data/containers/shared/containerPathLimits\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../../data/keyingProjectionVerification/error\";\nimport { ContainerCreateIntentSupersededError } from \"../../../data/persistence/container-contents/containerIntentPersistence\";\nimport { errorMessage } from \"../../../data/shared/errorMessage\";\nimport {\n  createDetachedContainerMetadataState,\n  installDetachedContainerMetadataState,\n} from \"../metadataStateIsolation\";\nimport type { ContainerState } from \"../remoteHydration\";\nimport { hasRemoteContainerMetadataState } from \"../remoteHydration/reconciliation\";\nimport { syncListedContainerCreate } from \"./createAdoption\";\nimport {\n  deferTooDeepCreate,\n  recordRefusedTooDeepCreate,\n} from \"./createIntentDepth\";\nimport { CONTAINER_ALREADY_COMMITTED } from \"./createWithMetadata\";\nimport { createRemoteContainer, deleteRemoteContainer } from \"./remote\";\nimport type {\n  ContainerCreateIntentSyncHost,\n  ContainerCreateIntentSyncInput,\n  ContainerCreateIntentSyncState,\n  CreatedRemoteContainerState,\n} from \"./types\";\n\nclass IncompleteContainerCreateSettlementError extends Error {}\n\ntype CreateIntentSyncResult = \"abandoned\" | \"blocked\" | \"created\" | \"failed\";\n\nfunction currentCreateResult<\n  Result extends Exclude<CreateIntentSyncResult, \"abandoned\">,\n>(isCurrent: () => boolean, result: Result): \"abandoned\" | Result {\n  return isCurrent() ? result : \"abandoned\";\n}\n\nasync function reportContainerCreateIntegrityFailure(input: {\n  readonly containerId: string;\n  readonly error: unknown;\n  readonly organizationId: string;\n  readonly state: ContainerCreateIntentSyncState;\n}): Promise<void> {\n  await reportAndRethrowKeyingVerificationError(\n    input.error,\n    input.state.runtime.util.reportSecurityIncident,\n    {\n      objectId: input.containerId,\n      objectKind: \"container\",\n      operation: \"container.create.replay\",\n      organizationId: input.organizationId,\n    },\n  );\n}\n\nasync function recordContainerCreateFailure(input: {\n  readonly error: unknown;\n  readonly isCurrent: () => boolean;\n  readonly intent: ContainerCreateIntentSyncInput[\"intent\"];\n  readonly organizationId: string;\n  readonly state: ContainerCreateIntentSyncState;\n}): Promise<\"abandoned\" | \"failed\"> {\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  await reportContainerCreateIntegrityFailure({\n    containerId: input.intent.containerId,\n    error: input.error,\n    organizationId: input.organizationId,\n    state: input.state,\n  });\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  await input.state.persistence.recordCreateIntentRevisionError(\n    input.state.runtime.infra.execSql,\n    {\n      containerId: input.intent.containerId,\n      expectedIntentId: input.intent.id,\n      expectedUpdatedAt: input.intent.updatedAt,\n      message: `${input.error instanceof IncompleteContainerCreateSettlementError ? \"Container create persistence failed\" : \"Remote container create failed\"}: ${errorMessage(input.error)}`,\n      stillCurrent: input.isCurrent,\n    },\n  );\n  return currentCreateResult(input.isCurrent, \"failed\");\n}\n\nasync function persistCreatedRemoteContainerStateFromIntent(input: {\n  containerState: ContainerState;\n  created: CreatedRemoteContainerState;\n  host: ContainerCreateIntentSyncHost;\n  isCurrent: () => boolean;\n  intent: ContainerCreateIntentSyncInput[\"intent\"];\n  state: ContainerCreateIntentSyncState;\n}): Promise<\n  | \"abandoned\"\n  | \"identity-superseded\"\n  | \"intent-superseded\"\n  | \"missing\"\n  | \"persisted\"\n> {\n  const { containerState, created, host, intent, state } = input;\n  if (!input.isCurrent()) return \"abandoned\";\n  const persistenceCandidate =\n    await createDetachedContainerMetadataState(containerState);\n  if (!input.isCurrent()) return \"abandoned\";\n  persistenceCandidate.container = {\n    ...persistenceCandidate.container,\n    createdAt: created.createdAt,\n    serverCreatedAt: created.createdAt,\n    serverUpdatedAt: created.updatedAt,\n    updatedAt: created.updatedAt,\n  };\n\n  let persistenceResult: Awaited<\n    ReturnType<ContainerCreateIntentSyncHost[\"persistContainerState\"]>\n  >;\n  try {\n    persistenceResult = await host.persistContainerState(\n      persistenceCandidate,\n      {\n        accessEpoch: 1,\n        accessStateHash: created.accessManifestHash,\n        lastCommitLsn: null,\n        metadataDocumentId: created.metadataDocumentId,\n        systemSlot: created.systemSlot,\n        organizationId: created.organizationId,\n        parentId: created.parentId,\n        ...created.persistedMetadataState,\n      },\n      false,\n      {\n        serverTimestamps: {\n          createdAt: created.createdAt,\n          updatedAt: created.updatedAt,\n        },\n      },\n      {\n        createIntentSettlement: {\n          containerId: intent.containerId,\n          expectedIntentId: intent.id,\n          expectedUpdatedAt: intent.updatedAt,\n          remoteContainerId: created.containerId,\n          remoteMetadataAccessStateHash: created.accessManifestHash,\n          remoteMetadataDocumentId: created.metadataDocumentId,\n          supersededMovePreviousParentId: created.parentId,\n        },\n        expectedStateWhenMissing: containerState,\n        isCurrent: input.isCurrent,\n        preserveDurableStructureWhenPending: true,\n      },\n    );\n  } catch (error) {\n    if (error instanceof ContainerCreateIntentSupersededError) {\n      return \"intent-superseded\";\n    }\n    throw error;\n  }\n  if (!input.isCurrent() || persistenceResult.status === \"stale-generation\") {\n    return \"abandoned\";\n  }\n  if (persistenceResult.status !== \"persisted\") return persistenceResult.status;\n  if (persistenceResult.createIntentSettled !== true) {\n    throw new IncompleteContainerCreateSettlementError(\n      \"Container create persistence must settle the intent atomically\",\n    );\n  }\n  const { record: nextRecord } = persistenceResult;\n  if (!input.isCurrent()) return \"abandoned\";\n  const currentContainerState = state.containersById.get(intent.containerId);\n  if (!currentContainerState) return \"missing\";\n  if (currentContainerState !== containerState) return \"identity-superseded\";\n\n  installDetachedContainerMetadataState(containerState, persistenceCandidate, {\n    candidateRecord: nextRecord,\n    preserveConcurrentMetadataEdit: true,\n  });\n  containerState.container = {\n    ...containerState.container,\n    metadataDocumentId: created.metadataDocumentId,\n    systemSlot: created.systemSlot,\n    organizationId: created.organizationId,\n    parentId: persistenceCandidate.container.parentId,\n    serverCreatedAt: created.createdAt,\n    serverUpdatedAt: created.updatedAt,\n    createdAt: created.createdAt,\n    updatedAt: created.updatedAt,\n  };\n  return \"persisted\";\n}\n\nasync function discardOrphanedRemoteContainer(input: {\n  created: CreatedRemoteContainerState;\n  isCurrent: () => boolean;\n  state: ContainerCreateIntentSyncState;\n}): Promise<void> {\n  if (!input.isCurrent()) {\n    return;\n  }\n  const discardFailure = await deleteRemoteContainer({\n    containerId: input.created.containerId,\n    organizationId: input.created.organizationId,\n    runtime: input.state.runtime,\n  }).then(\n    (deleted) => (deleted ? null : \"the server rejected the delete\"),\n    (error: unknown) => errorMessage(error),\n  );\n  if (input.isCurrent() && discardFailure !== null) {\n    input.state.runtime.util.log(\n      `Container contents: failed to discard orphaned remote container ${input.created.containerId} after local delete: ${discardFailure}`,\n    );\n  }\n}\n\nasync function settleRemoteContainerCreate(input: {\n  containerState: ContainerState;\n  created: Awaited<ReturnType<typeof createRemoteContainer>>;\n  syncInput: ContainerCreateIntentSyncInput;\n}): Promise<CreateIntentSyncResult> {\n  const { containerState, created, syncInput } = input;\n  const { host, intent, state } = syncInput;\n  if (created === CONTAINER_ALREADY_COMMITTED) {\n    // A lost create response leaves the intent pending until hydration installs\n    // the committed remote metadata state.\n    state.runtime.util.log(\n      `Container contents: deferred create intent for ${intent.containerId}; container already committed remotely, awaiting hydration.`,\n    );\n    syncInput.requestRemoteReconciliation(intent.parentContainerId);\n    return \"blocked\";\n  }\n  if (!created) {\n    await state.persistence.recordCreateIntentRevisionError(\n      state.runtime.infra.execSql,\n      {\n        containerId: intent.containerId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n        message: \"Remote container create was rejected or unavailable\",\n        stillCurrent: syncInput.isCurrent,\n      },\n    );\n    return currentCreateResult(syncInput.isCurrent, \"failed\");\n  }\n  if (!state.containersById.has(intent.containerId)) {\n    // A same-generation local delete wins; discard the remote orphan instead\n    // of resurrecting the deleted local container.\n    await discardOrphanedRemoteContainer({\n      created,\n      isCurrent: syncInput.isCurrent,\n      state,\n    });\n    return currentCreateResult(syncInput.isCurrent, \"failed\");\n  }\n\n  const persistenceStatus = await persistCreatedRemoteContainerStateFromIntent({\n    containerState,\n    created,\n    host,\n    isCurrent: syncInput.isCurrent,\n    intent,\n    state,\n  });\n  if (persistenceStatus === \"abandoned\") {\n    syncInput.requestRemoteReconciliation(intent.parentContainerId);\n    return \"abandoned\";\n  }\n  if (persistenceStatus === \"missing\") {\n    await discardOrphanedRemoteContainer({\n      created,\n      isCurrent: syncInput.isCurrent,\n      state,\n    });\n    return currentCreateResult(syncInput.isCurrent, \"failed\");\n  }\n  if (persistenceStatus === \"identity-superseded\") {\n    state.runtime.util.log(\n      `Container contents: deferred create intent for ${intent.containerId}; another writer persisted its remote identity.`,\n    );\n    syncInput.requestRemoteReconciliation(intent.parentContainerId);\n    return \"blocked\";\n  }\n  if (persistenceStatus === \"intent-superseded\") {\n    state.runtime.util.log(\n      `Container contents: deferred create intent for ${intent.containerId}; a newer local intent superseded this pass.`,\n    );\n    return \"blocked\";\n  }\n  state.runtime.util.log(\n    `Container contents: synced local container create ${containerState.container.id}`,\n  );\n  return \"created\";\n}\n\nasync function createPendingRemoteContainer(input: {\n  containerState: ContainerState;\n  parentState: ContainerState;\n  syncInput: ContainerCreateIntentSyncInput;\n}): Promise<CreateIntentSyncResult> {\n  const { containerState, parentState, syncInput } = input;\n  const { intent, state } = syncInput;\n  let created: Awaited<ReturnType<typeof createRemoteContainer>>;\n  try {\n    created = await createRemoteContainer({\n      systemSlot: containerState.container.systemSlot,\n      containerId: containerState.container.id,\n      parentContainerId: parentState.container.id,\n      resolveProjectionUserKey: state.resolveProjectionUserKey,\n      runtime: state.runtime,\n      stillCurrent: syncInput.isCurrent,\n    });\n  } catch (error) {\n    if (error instanceof ContainerPathTooDeepError)\n      return recordRefusedTooDeepCreate(syncInput);\n    return recordContainerCreateFailure({\n      error,\n      isCurrent: syncInput.isCurrent,\n      intent,\n      organizationId: parentState.container.organizationId,\n      state,\n    });\n  }\n  if (!syncInput.isCurrent()) {\n    syncInput.requestRemoteReconciliation(intent.parentContainerId);\n    return \"abandoned\";\n  }\n  try {\n    return await settleRemoteContainerCreate({\n      containerState,\n      created,\n      syncInput,\n    });\n  } catch (error) {\n    if (!(error instanceof IncompleteContainerCreateSettlementError))\n      throw error;\n    return recordContainerCreateFailure({\n      error,\n      isCurrent: syncInput.isCurrent,\n      intent,\n      organizationId: parentState.container.organizationId,\n      state,\n    });\n  }\n}\n\nasync function trySyncPendingContainerContentsContainerCreateIntent(\n  input: ContainerCreateIntentSyncInput,\n): Promise<CreateIntentSyncResult> {\n  const { intent, state } = input;\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  const containerState = state.containersById.get(intent.containerId);\n  const parentState = state.containersById.get(intent.parentContainerId);\n\n  if (!containerState || !parentState) {\n    const execSql = state.runtime.infra.execSql;\n    await state.persistence.recordCreateIntentRevisionError(execSql, {\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      message: \"Container create intent references a missing local container\",\n      stillCurrent: input.isCurrent,\n    });\n    return currentCreateResult(input.isCurrent, \"failed\");\n  }\n\n  if (typeof state.persistence.markCreateIntentRevisionSynced !== \"function\") {\n    await state.persistence.recordCreateIntentRevisionError(\n      state.runtime.infra.execSql,\n      {\n        containerId: intent.containerId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n        message: \"Container create replay requires revision-CAS persistence\",\n        stillCurrent: input.isCurrent,\n      },\n    );\n    return currentCreateResult(input.isCurrent, \"failed\");\n  }\n\n  if (input.isRemoteSyncBlocked(parentState.container.organizationId)) {\n    return \"blocked\";\n  }\n\n  if (hasRemoteContainerMetadataState(containerState)) {\n    return syncListedContainerCreate({\n      containerState,\n      parentState,\n      syncInput: input,\n    });\n  }\n\n  // A parent whose own create has not settled may carry a listed identity\n  // adoption has not verified, or has refused; nothing is created under it.\n  if (\n    !hasRemoteContainerMetadataState(parentState) ||\n    input.isCreatePending(parentState.container.id)\n  ) {\n    return \"blocked\";\n  }\n\n  if (await deferTooDeepCreate(input)) {\n    return currentCreateResult(input.isCurrent, \"blocked\");\n  }\n\n  return createPendingRemoteContainer({\n    containerState,\n    parentState,\n    syncInput: input,\n  });\n}\n\nexport async function syncPendingContainerCreateIntents(input: {\n  host: ContainerCreateIntentSyncHost;\n  isCurrent: () => boolean;\n  isRemoteSyncBlocked: (organizationId: string) => boolean;\n  requestRemoteReconciliation: (parentContainerId: string | null) => void;\n  state: ContainerCreateIntentSyncState;\n}): Promise<number> {\n  if (!input.isCurrent()) {\n    return 0;\n  }\n  const { host } = input;\n  const state = { ...input.state };\n  const execSql = state.runtime.infra.execSql;\n  const pendingIntents =\n    await state.persistence.listPendingCreateIntents(execSql);\n  if (!input.isCurrent()) {\n    return 0;\n  }\n  const remainingContainerIds = new Set(\n    pendingIntents.map((intent) => intent.containerId),\n  );\n  // Only a create that settles in this pass leaves the pending set; a failed\n  // or parked one stays pending even though this pass stops retrying it.\n  const unsettledContainerIds = new Set(remainingContainerIds);\n  let createdCount = 0;\n  let progressed = true;\n\n  while (progressed && input.isCurrent()) {\n    progressed = false;\n\n    for (const intent of pendingIntents) {\n      if (!remainingContainerIds.has(intent.containerId)) {\n        continue;\n      }\n\n      const result = await trySyncPendingContainerContentsContainerCreateIntent(\n        {\n          host,\n          isCreatePending: (containerId) =>\n            unsettledContainerIds.has(containerId),\n          isCurrent: input.isCurrent,\n          isRemoteSyncBlocked: input.isRemoteSyncBlocked,\n          intent,\n          requestRemoteReconciliation: input.requestRemoteReconciliation,\n          state,\n        },\n      );\n      if (result === \"abandoned\") {\n        return createdCount;\n      }\n\n      if (result === \"blocked\") {\n        continue;\n      }\n\n      remainingContainerIds.delete(intent.containerId);\n      progressed = result === \"created\" || progressed;\n      if (result === \"created\") {\n        createdCount += 1;\n        unsettledContainerIds.delete(intent.containerId);\n      }\n    }\n  }\n\n  return createdCount;\n}\n"]}
+{"version":3,"file":"createIntentSync.js","sourceRoot":"","sources":["createIntentSync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,uCAAuC,EAAE,MAAM,kDAAkD,CAAC;AAC3G,OAAO,EAAE,oCAAoC,EAAE,MAAM,yEAAyE,CAAC;AAC/H,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EACL,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EACL,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAQxE,MAAM,wCAAyC,SAAQ,KAAK;CAAG;AAI/D,SAAS,mBAAmB,CAE1B,SAAwB,EAAE,MAAc;IACxC,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,qCAAqC,CAAC,KAKpD;IACC,MAAM,uCAAuC,CAC3C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAC/C;QACE,QAAQ,EAAE,KAAK,CAAC,WAAW;QAC3B,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,yBAAyB;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAM3C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,qCAAqC,CAAC;QAC1C,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;QACrC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,+BAA+B,CAC3D,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EACjC;QACE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;QACrC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;QACjC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;QACzC,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,YAAY,wCAAwC,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,gCAAgC,KAAK,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QACtL,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CACF,CAAC;IACF,OAAO,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,4CAA4C,CAAC,KAO3D;IAOC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC/D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,WAAW,CAAC;IAC3C,MAAM,oBAAoB,GACxB,MAAM,oCAAoC,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,WAAW,CAAC;IAC3C,oBAAoB,CAAC,SAAS,GAAG;QAC/B,GAAG,oBAAoB,CAAC,SAAS;QACjC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,eAAe,EAAE,OAAO,CAAC,SAAS;QAClC,eAAe,EAAE,OAAO,CAAC,SAAS;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;IAEF,IAAI,iBAEH,CAAC;IACF,IAAI,CAAC;QACH,iBAAiB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAClD,oBAAoB,EACpB;YACE,WAAW,EAAE,CAAC;YACd,eAAe,EAAE,OAAO,CAAC,kBAAkB;YAC3C,aAAa,EAAE,IAAI;YACnB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,OAAO,CAAC,sBAAsB;SAClC,EACD,KAAK,EACL;YACE,gBAAgB,EAAE;gBAChB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B;SACF,EACD;YACE,sBAAsB,EAAE;gBACtB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;gBAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;gBACnC,iBAAiB,EAAE,OAAO,CAAC,WAAW;gBACtC,6BAA6B,EAAE,OAAO,CAAC,kBAAkB;gBACzD,wBAAwB,EAAE,OAAO,CAAC,kBAAkB;gBACpD,8BAA8B,EAAE,OAAO,CAAC,QAAQ;aACjD;YACD,wBAAwB,EAAE,cAAc;YACxC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,mCAAmC,EAAE,IAAI;SAC1C,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oCAAoC,EAAE,CAAC;YAC1D,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,iBAAiB,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC1E,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,iBAAiB,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC;IAC9E,IAAI,iBAAiB,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,IAAI,wCAAwC,CAChD,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,WAAW,CAAC;IAC3C,MAAM,qBAAqB,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3E,IAAI,CAAC,qBAAqB;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,qBAAqB,KAAK,cAAc;QAAE,OAAO,qBAAqB,CAAC;IAE3E,qCAAqC,CAAC,cAAc,EAAE,oBAAoB,EAAE;QAC1E,eAAe,EAAE,UAAU;QAC3B,8BAA8B,EAAE,IAAI;KACrC,CAAC,CAAC;IACH,cAAc,CAAC,SAAS,GAAG;QACzB,GAAG,cAAc,CAAC,SAAS;QAC3B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,QAAQ,EAAE,oBAAoB,CAAC,SAAS,CAAC,QAAQ;QACjD,eAAe,EAAE,OAAO,CAAC,SAAS;QAClC,eAAe,EAAE,OAAO,CAAC,SAAS;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;IACF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,KAI7C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC;QACjD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;QACtC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;QAC5C,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;KAC7B,CAAC,CAAC,IAAI,CACL,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gCAAgC,CAAC,EAChE,CAAC,KAAc,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CACxC,CAAC;IACF,IAAI,KAAK,CAAC,SAAS,EAAE,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QACjD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAC1B,mEAAmE,KAAK,CAAC,OAAO,CAAC,WAAW,wBAAwB,cAAc,EAAE,CACrI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAI1C;IACC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACrD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,2BAA2B,EAAE,CAAC;QAC5C,4EAA4E;QAC5E,uCAAuC;QACvC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,kDAAkD,MAAM,CAAC,WAAW,6DAA6D,CAClI,CAAC;QACF,SAAS,CAAC,2BAA2B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,KAAK,CAAC,WAAW,CAAC,+BAA+B,CACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B;YACE,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,OAAO,EAAE,qDAAqD;YAC9D,YAAY,EAAE,SAAS,CAAC,SAAS;SAClC,CACF,CAAC;QACF,OAAO,mBAAmB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAClD,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,8BAA8B,CAAC;YACnC,OAAO;YACP,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,KAAK;SACN,CAAC,CAAC;QACH,OAAO,mBAAmB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,4CAA4C,CAAC;QAC3E,cAAc;QACd,OAAO;QACP,IAAI;QACJ,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,MAAM;QACN,KAAK;KACN,CAAC,CAAC;IACH,IAAI,iBAAiB,KAAK,WAAW,EAAE,CAAC;QACtC,SAAS,CAAC,2BAA2B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAChE,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,8BAA8B,CAAC;YACnC,OAAO;YACP,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,KAAK;SACN,CAAC,CAAC;QACH,OAAO,mBAAmB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,iBAAiB,KAAK,qBAAqB,EAAE,CAAC;QAChD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,kDAAkD,MAAM,CAAC,WAAW,iDAAiD,CACtH,CAAC;QACF,SAAS,CAAC,2BAA2B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,iBAAiB,KAAK,mBAAmB,EAAE,CAAC;QAC9C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,kDAAkD,MAAM,CAAC,WAAW,8CAA8C,CACnH,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,qDAAqD,cAAc,CAAC,SAAS,CAAC,EAAE,EAAE,CACnF,CAAC;IACF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAI3C;IACC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IACpC,IAAI,OAA0D,CAAC;IAC/D,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,qBAAqB,CAAC;YACpC,UAAU,EAAE,cAAc,CAAC,SAAS,CAAC,UAAU;YAC/C,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE;YACxC,iBAAiB,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE;YAC3C,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,SAAS,CAAC,SAAS;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,yBAAyB;YAC5C,OAAO,0BAA0B,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,4BAA4B,CAAC;YAClC,KAAK;YACL,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM;YACN,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,cAAc;YACpD,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;QAC3B,SAAS,CAAC,2BAA2B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAChE,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,2BAA2B,CAAC;YACvC,cAAc;YACd,OAAO;YACP,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,wCAAwC,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,OAAO,4BAA4B,CAAC;YAClC,KAAK;YACL,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM;YACN,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,cAAc;YACpD,KAAK;SACN,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oDAAoD,CACjE,KAAqC;IAErC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAEvE,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5C,MAAM,KAAK,CAAC,WAAW,CAAC,+BAA+B,CAAC,OAAO,EAAE;YAC/D,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,OAAO,EAAE,8DAA8D;YACvE,YAAY,EAAE,KAAK,CAAC,SAAS;SAC9B,CAAC,CAAC;QACH,OAAO,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,WAAW,CAAC,8BAA8B,KAAK,UAAU,EAAE,CAAC;QAC3E,MAAM,KAAK,CAAC,WAAW,CAAC,+BAA+B,CACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B;YACE,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,OAAO,EAAE,2DAA2D;YACpE,YAAY,EAAE,KAAK,CAAC,SAAS;SAC9B,CACF,CAAC;QACF,OAAO,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;QACpE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,+BAA+B,CAAC,cAAc,CAAC,EAAE,CAAC;QACpD,OAAO,yBAAyB,CAAC;YAC/B,cAAc;YACd,WAAW;YACX,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,0EAA0E;IAC1E,IACE,CAAC,+BAA+B,CAAC,WAAW,CAAC;QAC7C,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,EAC/C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,4BAA4B,CAAC;QAClC,cAAc;QACd,WAAW;QACX,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAMvD;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,cAAc,GAClB,MAAM,KAAK,CAAC,WAAW,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CACnD,CAAC;IACF,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC7D,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,UAAU,GAAG,IAAI,CAAC;IAEtB,OAAO,UAAU,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvC,UAAU,GAAG,KAAK,CAAC;QAEnB,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnD,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,oDAAoD,CACvE;gBACE,IAAI;gBACJ,eAAe,EAAE,CAAC,WAAW,EAAE,EAAE,CAC/B,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC;gBACxC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,MAAM;gBACN,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;gBAC9D,KAAK;aACN,CACF,CAAC;YACF,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;gBAC3B,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YAED,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACjD,UAAU,GAAG,MAAM,KAAK,SAAS,IAAI,UAAU,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,YAAY,IAAI,CAAC,CAAC;gBAClB,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC","sourcesContent":["import { ContainerPathTooDeepError } from \"../../../data/containers/shared/containerPathLimits\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../../data/keyingProjectionVerification/error\";\nimport { ContainerCreateIntentSupersededError } from \"../../../data/persistence/container-contents/containerIntentPersistence\";\nimport { errorMessage } from \"../../../data/shared/errorMessage\";\nimport {\n  createDetachedContainerMetadataState,\n  installDetachedContainerMetadataState,\n} from \"../metadata/metadataStateIsolation\";\nimport type { ContainerState } from \"../remoteHydration\";\nimport { hasRemoteContainerMetadataState } from \"../remoteHydration/reconciliation\";\nimport { syncListedContainerCreate } from \"./createAdoption\";\nimport {\n  deferTooDeepCreate,\n  recordRefusedTooDeepCreate,\n} from \"./createIntentDepth\";\nimport { CONTAINER_ALREADY_COMMITTED } from \"./createWithMetadata\";\nimport { createRemoteContainer, deleteRemoteContainer } from \"./remote\";\nimport type {\n  ContainerCreateIntentSyncHost,\n  ContainerCreateIntentSyncInput,\n  ContainerCreateIntentSyncState,\n  CreatedRemoteContainerState,\n} from \"./types\";\n\nclass IncompleteContainerCreateSettlementError extends Error {}\n\ntype CreateIntentSyncResult = \"abandoned\" | \"blocked\" | \"created\" | \"failed\";\n\nfunction currentCreateResult<\n  Result extends Exclude<CreateIntentSyncResult, \"abandoned\">,\n>(isCurrent: () => boolean, result: Result): \"abandoned\" | Result {\n  return isCurrent() ? result : \"abandoned\";\n}\n\nasync function reportContainerCreateIntegrityFailure(input: {\n  readonly containerId: string;\n  readonly error: unknown;\n  readonly organizationId: string;\n  readonly state: ContainerCreateIntentSyncState;\n}): Promise<void> {\n  await reportAndRethrowKeyingVerificationError(\n    input.error,\n    input.state.runtime.util.reportSecurityIncident,\n    {\n      objectId: input.containerId,\n      objectKind: \"container\",\n      operation: \"container.create.replay\",\n      organizationId: input.organizationId,\n    },\n  );\n}\n\nasync function recordContainerCreateFailure(input: {\n  readonly error: unknown;\n  readonly isCurrent: () => boolean;\n  readonly intent: ContainerCreateIntentSyncInput[\"intent\"];\n  readonly organizationId: string;\n  readonly state: ContainerCreateIntentSyncState;\n}): Promise<\"abandoned\" | \"failed\"> {\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  await reportContainerCreateIntegrityFailure({\n    containerId: input.intent.containerId,\n    error: input.error,\n    organizationId: input.organizationId,\n    state: input.state,\n  });\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  await input.state.persistence.recordCreateIntentRevisionError(\n    input.state.runtime.infra.execSql,\n    {\n      containerId: input.intent.containerId,\n      expectedIntentId: input.intent.id,\n      expectedUpdatedAt: input.intent.updatedAt,\n      message: `${input.error instanceof IncompleteContainerCreateSettlementError ? \"Container create persistence failed\" : \"Remote container create failed\"}: ${errorMessage(input.error)}`,\n      stillCurrent: input.isCurrent,\n    },\n  );\n  return currentCreateResult(input.isCurrent, \"failed\");\n}\n\nasync function persistCreatedRemoteContainerStateFromIntent(input: {\n  containerState: ContainerState;\n  created: CreatedRemoteContainerState;\n  host: ContainerCreateIntentSyncHost;\n  isCurrent: () => boolean;\n  intent: ContainerCreateIntentSyncInput[\"intent\"];\n  state: ContainerCreateIntentSyncState;\n}): Promise<\n  | \"abandoned\"\n  | \"identity-superseded\"\n  | \"intent-superseded\"\n  | \"missing\"\n  | \"persisted\"\n> {\n  const { containerState, created, host, intent, state } = input;\n  if (!input.isCurrent()) return \"abandoned\";\n  const persistenceCandidate =\n    await createDetachedContainerMetadataState(containerState);\n  if (!input.isCurrent()) return \"abandoned\";\n  persistenceCandidate.container = {\n    ...persistenceCandidate.container,\n    createdAt: created.createdAt,\n    serverCreatedAt: created.createdAt,\n    serverUpdatedAt: created.updatedAt,\n    updatedAt: created.updatedAt,\n  };\n\n  let persistenceResult: Awaited<\n    ReturnType<ContainerCreateIntentSyncHost[\"persistContainerState\"]>\n  >;\n  try {\n    persistenceResult = await host.persistContainerState(\n      persistenceCandidate,\n      {\n        accessEpoch: 1,\n        accessStateHash: created.accessManifestHash,\n        lastCommitLsn: null,\n        metadataDocumentId: created.metadataDocumentId,\n        systemSlot: created.systemSlot,\n        organizationId: created.organizationId,\n        parentId: created.parentId,\n        ...created.persistedMetadataState,\n      },\n      false,\n      {\n        serverTimestamps: {\n          createdAt: created.createdAt,\n          updatedAt: created.updatedAt,\n        },\n      },\n      {\n        createIntentSettlement: {\n          containerId: intent.containerId,\n          expectedIntentId: intent.id,\n          expectedUpdatedAt: intent.updatedAt,\n          remoteContainerId: created.containerId,\n          remoteMetadataAccessStateHash: created.accessManifestHash,\n          remoteMetadataDocumentId: created.metadataDocumentId,\n          supersededMovePreviousParentId: created.parentId,\n        },\n        expectedStateWhenMissing: containerState,\n        isCurrent: input.isCurrent,\n        preserveDurableStructureWhenPending: true,\n      },\n    );\n  } catch (error) {\n    if (error instanceof ContainerCreateIntentSupersededError) {\n      return \"intent-superseded\";\n    }\n    throw error;\n  }\n  if (!input.isCurrent() || persistenceResult.status === \"stale-generation\") {\n    return \"abandoned\";\n  }\n  if (persistenceResult.status !== \"persisted\") return persistenceResult.status;\n  if (persistenceResult.createIntentSettled !== true) {\n    throw new IncompleteContainerCreateSettlementError(\n      \"Container create persistence must settle the intent atomically\",\n    );\n  }\n  const { record: nextRecord } = persistenceResult;\n  if (!input.isCurrent()) return \"abandoned\";\n  const currentContainerState = state.containersById.get(intent.containerId);\n  if (!currentContainerState) return \"missing\";\n  if (currentContainerState !== containerState) return \"identity-superseded\";\n\n  installDetachedContainerMetadataState(containerState, persistenceCandidate, {\n    candidateRecord: nextRecord,\n    preserveConcurrentMetadataEdit: true,\n  });\n  containerState.container = {\n    ...containerState.container,\n    metadataDocumentId: created.metadataDocumentId,\n    systemSlot: created.systemSlot,\n    organizationId: created.organizationId,\n    parentId: persistenceCandidate.container.parentId,\n    serverCreatedAt: created.createdAt,\n    serverUpdatedAt: created.updatedAt,\n    createdAt: created.createdAt,\n    updatedAt: created.updatedAt,\n  };\n  return \"persisted\";\n}\n\nasync function discardOrphanedRemoteContainer(input: {\n  created: CreatedRemoteContainerState;\n  isCurrent: () => boolean;\n  state: ContainerCreateIntentSyncState;\n}): Promise<void> {\n  if (!input.isCurrent()) {\n    return;\n  }\n  const discardFailure = await deleteRemoteContainer({\n    containerId: input.created.containerId,\n    organizationId: input.created.organizationId,\n    runtime: input.state.runtime,\n  }).then(\n    (deleted) => (deleted ? null : \"the server rejected the delete\"),\n    (error: unknown) => errorMessage(error),\n  );\n  if (input.isCurrent() && discardFailure !== null) {\n    input.state.runtime.util.log(\n      `Container contents: failed to discard orphaned remote container ${input.created.containerId} after local delete: ${discardFailure}`,\n    );\n  }\n}\n\nasync function settleRemoteContainerCreate(input: {\n  containerState: ContainerState;\n  created: Awaited<ReturnType<typeof createRemoteContainer>>;\n  syncInput: ContainerCreateIntentSyncInput;\n}): Promise<CreateIntentSyncResult> {\n  const { containerState, created, syncInput } = input;\n  const { host, intent, state } = syncInput;\n  if (created === CONTAINER_ALREADY_COMMITTED) {\n    // A lost create response leaves the intent pending until hydration installs\n    // the committed remote metadata state.\n    state.runtime.util.log(\n      `Container contents: deferred create intent for ${intent.containerId}; container already committed remotely, awaiting hydration.`,\n    );\n    syncInput.requestRemoteReconciliation(intent.parentContainerId);\n    return \"blocked\";\n  }\n  if (!created) {\n    await state.persistence.recordCreateIntentRevisionError(\n      state.runtime.infra.execSql,\n      {\n        containerId: intent.containerId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n        message: \"Remote container create was rejected or unavailable\",\n        stillCurrent: syncInput.isCurrent,\n      },\n    );\n    return currentCreateResult(syncInput.isCurrent, \"failed\");\n  }\n  if (!state.containersById.has(intent.containerId)) {\n    // A same-generation local delete wins; discard the remote orphan instead\n    // of resurrecting the deleted local container.\n    await discardOrphanedRemoteContainer({\n      created,\n      isCurrent: syncInput.isCurrent,\n      state,\n    });\n    return currentCreateResult(syncInput.isCurrent, \"failed\");\n  }\n\n  const persistenceStatus = await persistCreatedRemoteContainerStateFromIntent({\n    containerState,\n    created,\n    host,\n    isCurrent: syncInput.isCurrent,\n    intent,\n    state,\n  });\n  if (persistenceStatus === \"abandoned\") {\n    syncInput.requestRemoteReconciliation(intent.parentContainerId);\n    return \"abandoned\";\n  }\n  if (persistenceStatus === \"missing\") {\n    await discardOrphanedRemoteContainer({\n      created,\n      isCurrent: syncInput.isCurrent,\n      state,\n    });\n    return currentCreateResult(syncInput.isCurrent, \"failed\");\n  }\n  if (persistenceStatus === \"identity-superseded\") {\n    state.runtime.util.log(\n      `Container contents: deferred create intent for ${intent.containerId}; another writer persisted its remote identity.`,\n    );\n    syncInput.requestRemoteReconciliation(intent.parentContainerId);\n    return \"blocked\";\n  }\n  if (persistenceStatus === \"intent-superseded\") {\n    state.runtime.util.log(\n      `Container contents: deferred create intent for ${intent.containerId}; a newer local intent superseded this pass.`,\n    );\n    return \"blocked\";\n  }\n  state.runtime.util.log(\n    `Container contents: synced local container create ${containerState.container.id}`,\n  );\n  return \"created\";\n}\n\nasync function createPendingRemoteContainer(input: {\n  containerState: ContainerState;\n  parentState: ContainerState;\n  syncInput: ContainerCreateIntentSyncInput;\n}): Promise<CreateIntentSyncResult> {\n  const { containerState, parentState, syncInput } = input;\n  const { intent, state } = syncInput;\n  let created: Awaited<ReturnType<typeof createRemoteContainer>>;\n  try {\n    created = await createRemoteContainer({\n      systemSlot: containerState.container.systemSlot,\n      containerId: containerState.container.id,\n      parentContainerId: parentState.container.id,\n      resolveProjectionUserKey: state.resolveProjectionUserKey,\n      runtime: state.runtime,\n      stillCurrent: syncInput.isCurrent,\n    });\n  } catch (error) {\n    if (error instanceof ContainerPathTooDeepError)\n      return recordRefusedTooDeepCreate(syncInput);\n    return recordContainerCreateFailure({\n      error,\n      isCurrent: syncInput.isCurrent,\n      intent,\n      organizationId: parentState.container.organizationId,\n      state,\n    });\n  }\n  if (!syncInput.isCurrent()) {\n    syncInput.requestRemoteReconciliation(intent.parentContainerId);\n    return \"abandoned\";\n  }\n  try {\n    return await settleRemoteContainerCreate({\n      containerState,\n      created,\n      syncInput,\n    });\n  } catch (error) {\n    if (!(error instanceof IncompleteContainerCreateSettlementError))\n      throw error;\n    return recordContainerCreateFailure({\n      error,\n      isCurrent: syncInput.isCurrent,\n      intent,\n      organizationId: parentState.container.organizationId,\n      state,\n    });\n  }\n}\n\nasync function trySyncPendingContainerContentsContainerCreateIntent(\n  input: ContainerCreateIntentSyncInput,\n): Promise<CreateIntentSyncResult> {\n  const { intent, state } = input;\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  const containerState = state.containersById.get(intent.containerId);\n  const parentState = state.containersById.get(intent.parentContainerId);\n\n  if (!containerState || !parentState) {\n    const execSql = state.runtime.infra.execSql;\n    await state.persistence.recordCreateIntentRevisionError(execSql, {\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      message: \"Container create intent references a missing local container\",\n      stillCurrent: input.isCurrent,\n    });\n    return currentCreateResult(input.isCurrent, \"failed\");\n  }\n\n  if (typeof state.persistence.markCreateIntentRevisionSynced !== \"function\") {\n    await state.persistence.recordCreateIntentRevisionError(\n      state.runtime.infra.execSql,\n      {\n        containerId: intent.containerId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n        message: \"Container create replay requires revision-CAS persistence\",\n        stillCurrent: input.isCurrent,\n      },\n    );\n    return currentCreateResult(input.isCurrent, \"failed\");\n  }\n\n  if (input.isRemoteSyncBlocked(parentState.container.organizationId)) {\n    return \"blocked\";\n  }\n\n  if (hasRemoteContainerMetadataState(containerState)) {\n    return syncListedContainerCreate({\n      containerState,\n      parentState,\n      syncInput: input,\n    });\n  }\n\n  // A parent whose own create has not settled may carry a listed identity\n  // adoption has not verified, or has refused; nothing is created under it.\n  if (\n    !hasRemoteContainerMetadataState(parentState) ||\n    input.isCreatePending(parentState.container.id)\n  ) {\n    return \"blocked\";\n  }\n\n  if (await deferTooDeepCreate(input)) {\n    return currentCreateResult(input.isCurrent, \"blocked\");\n  }\n\n  return createPendingRemoteContainer({\n    containerState,\n    parentState,\n    syncInput: input,\n  });\n}\n\nexport async function syncPendingContainerCreateIntents(input: {\n  host: ContainerCreateIntentSyncHost;\n  isCurrent: () => boolean;\n  isRemoteSyncBlocked: (organizationId: string) => boolean;\n  requestRemoteReconciliation: (parentContainerId: string | null) => void;\n  state: ContainerCreateIntentSyncState;\n}): Promise<number> {\n  if (!input.isCurrent()) {\n    return 0;\n  }\n  const { host } = input;\n  const state = { ...input.state };\n  const execSql = state.runtime.infra.execSql;\n  const pendingIntents =\n    await state.persistence.listPendingCreateIntents(execSql);\n  if (!input.isCurrent()) {\n    return 0;\n  }\n  const remainingContainerIds = new Set(\n    pendingIntents.map((intent) => intent.containerId),\n  );\n  // Only a create that settles in this pass leaves the pending set; a failed\n  // or parked one stays pending even though this pass stops retrying it.\n  const unsettledContainerIds = new Set(remainingContainerIds);\n  let createdCount = 0;\n  let progressed = true;\n\n  while (progressed && input.isCurrent()) {\n    progressed = false;\n\n    for (const intent of pendingIntents) {\n      if (!remainingContainerIds.has(intent.containerId)) {\n        continue;\n      }\n\n      const result = await trySyncPendingContainerContentsContainerCreateIntent(\n        {\n          host,\n          isCreatePending: (containerId) =>\n            unsettledContainerIds.has(containerId),\n          isCurrent: input.isCurrent,\n          isRemoteSyncBlocked: input.isRemoteSyncBlocked,\n          intent,\n          requestRemoteReconciliation: input.requestRemoteReconciliation,\n          state,\n        },\n      );\n      if (result === \"abandoned\") {\n        return createdCount;\n      }\n\n      if (result === \"blocked\") {\n        continue;\n      }\n\n      remainingContainerIds.delete(intent.containerId);\n      progressed = result === \"created\" || progressed;\n      if (result === \"created\") {\n        createdCount += 1;\n        unsettledContainerIds.delete(intent.containerId);\n      }\n    }\n  }\n\n  return createdCount;\n}\n"]}

package/workflows/container-contents/container-state/moveIntentSync.js

@@ -2,7 +2,7 @@ import { ContainerPathTooDeepError } from "../../../data/containers/shared/conta
 import { reportAndRethrowKeyingVerificationError } from "../../../data/keyingProjectionVerification/error.js";
 import { errorMessage } from "../../../data/shared/errorMessage.js";
 import { createRuntimePrincipalPolicyWarmer } from "../../principals/runtimePolicyWarmer.js";
-import { createDetachedContainerMetadataState, installDetachedContainerMetadataState, } from "../metadataStateIsolation.js";
+import { createDetachedContainerMetadataState, installDetachedContainerMetadataState, } from "../metadata/metadataStateIsolation.js";
 import { hasRemoteContainerMetadataState } from "../remoteHydration/reconciliation.js";
 import { moveRemoteContainer } from "./remote.js";
 function currentMoveResult(isCurrent, result) {

package/workflows/container-contents/container-state/moveIntentSync.js.map

@@ -1 +1 @@
-{"version":3,"file":"moveIntentSync.js","sourceRoot":"","sources":["moveIntentSync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,uCAAuC,EAAE,MAAM,kDAAkD,CAAC;AAC3G,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EACL,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAS/C,SAAS,iBAAiB,CAExB,SAAwB,EAAE,MAAc;IACxC,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAQ3C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAClD,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,EAAE;QAC3D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,KAK9C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,sBAAsB,GAC1B,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,SAAS;SACzD,cAAc,IAAI,IAAI,CAAC;IAC5B,IACE,CAAC,sBAAsB;QACvB,sBAAsB,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAChE,CAAC;QACD,OAAO,KAAK,CAAC,eAAe,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAClD,MAAM,oCAAoC,GACxC,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,kCAAkC,CAAC,OAAO,EAAE;QACxE,KAAK,CAAC,WAAW;KAClB,CAAC,CAAC;IACL,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,oCAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QACrE,CAAC,CAAC,sBAAsB;QACxB,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAO/C;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,KAAK,CAAC,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,OAAO,EAAE,CAAC;IACzC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,kCAAkC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,4BAA4B;QAC9C,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,+BAA+B,CAAC;QAC3D,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,oBAAoB,GACxB,MAAM,oCAAoC,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,oBAAoB,CAAC,SAAS,GAAG;QAC/B,GAAG,oBAAoB,CAAC,SAAS;QACjC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CACxD,oBAAoB,EACpB;QACE,WAAW,EAAE,KAAK,CAAC,mBAAmB;QACtC,eAAe,EAAE,KAAK,CAAC,uBAAuB;QAC9C,UAAU,EAAE,KAAK,CAAC,kBAAkB;QACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;KACrC,EACD,KAAK,EACL;QACE,cAAc;QACd,gBAAgB,EAAE;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B;KACF,EACD;QACE,wBAAwB,EAAE,cAAc;QACxC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,oBAAoB,EAAE;YACpB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;SACpC;KACF,CACF,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,iBAAiB,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnE,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,iBAAiB,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,OAAO,EAAE,CAAC;IACzC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC;IACjD,qCAAqC,CAAC,cAAc,EAAE,oBAAoB,EAAE;QAC1E,eAAe,EAAE,UAAU;QAC3B,8BAA8B,EAAE,IAAI;KACrC,CAAC,CAAC;IACH,cAAc,CAAC,SAAS,GAAG;QACzB,GAAG,cAAc,CAAC,SAAS;QAC3B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAC/B,SAAuC;IAEvC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IAC1C,MAAM,gBAAgB,GAAG,MAAM,CAAC,yBAAyB,CAAC;IAC1D,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,yBAAyB,CACjE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B;QACE,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;QAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,yBAAyB,EAAE,gBAAgB;QAC3C,YAAY,EAAE,SAAS,CAAC,SAAS;KAClC,CACF,CAAC;IACF,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE;QAAE,OAAO,WAAW,CAAC;IAC/C,sEAAsE;IACtE,IAAI,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IAChC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpE,IAAI,cAAc,EAAE,CAAC;QACnB,cAAc,CAAC,SAAS,GAAG;YACzB,GAAG,cAAc,CAAC,SAAS;YAC3B,QAAQ,EAAE,gBAAgB;SAC3B,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;IACtB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,gDAAgD,MAAM,CAAC,WAAW,2CAA2C,CAC9G,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAGzC;IACC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IAC1C,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,cAAc,GAAkB,MAAM,CAAC,iBAAiB,CAAC;IAC7D,MAAM,kBAAkB,GAAG,GAAG,EAAE;QAC9B,IAAI,iBAAiB,EAAE,CAAC;YACtB,SAAS,CAAC,2BAA2B,CAAC,cAAc,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,WAAoB,CAAC;IAC9B,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,SAAS,CAAC,SAAS;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC3B,SAAS,CAAC,2BAA2B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAChE,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,MAAM,4BAA4B,CAAC;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;gBAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;gBACnC,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,OAAO,EAAE,mDAAmD;gBAC5D,KAAK;aACN,CAAC,CAAC;YACH,OAAO,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QACD,iBAAiB,GAAG,IAAI,CAAC;QACzB,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE;YAAE,OAAO,kBAAkB,EAAE,CAAC;QAExD,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC;YAChD,IAAI;YACJ,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM;YACN,KAAK;YACL,2BAA2B,EAAE,SAAS,CAAC,2BAA2B;YAClE,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,oDAAoD,MAAM,CAAC,WAAW,EAAE,CACzE,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;YAC3B,OAAO,kBAAkB,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,YAAY,yBAAyB;YAC5C,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,uCAAuC,CAC3C,KAAK,EACL,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACzC;YACE,QAAQ,EAAE,MAAM,CAAC,WAAW;YAC5B,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,uBAAuB;YAClC,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,cAAc;SACrD,CACF,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;YAC3B,OAAO,kBAAkB,EAAE,CAAC;QAC9B,CAAC;QACD,MAAM,4BAA4B,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,OAAO,EAAE,kCAAkC,YAAY,CAAC,KAAK,CAAC,EAAE;YAChE,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,KAAmC;IAEnC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAEvE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,4BAA4B,CAAC;YACjC,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,4DAA4D;YACrE,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,4BAA4B,CAAC;YACjC,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EACL,yEAAyE;YAC3E,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,CAAC,+BAA+B,CAAC,cAAc,CAAC;QAChD,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,EACzC,CAAC;QACD,wEAAwE;QACxE,2EAA2E;QAC3E,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,yBAAyB;QACzB,MAAM,4BAA4B,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,yCAAyC;YAClD,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IACD,IACE,CAAC,+BAA+B,CAAC,WAAW,CAAC;QAC7C,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAC/C,CAAC;QACD,MAAM,4BAA4B,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,qDAAqD;YAC9D,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,0BAA0B,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAOrD;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,cAAc,GAClB,MAAM,KAAK,CAAC,WAAW,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACvB,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC;YACrD,IAAI;YACJ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,MAAM;YACN,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;YAC9D,KAAK;SACN,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import { ContainerPathTooDeepError } from \"../../../data/containers/shared/containerPathLimits\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../../data/keyingProjectionVerification/error\";\nimport { errorMessage } from \"../../../data/shared/errorMessage\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../principals/runtimePolicyWarmer\";\nimport {\n  createDetachedContainerMetadataState,\n  installDetachedContainerMetadataState,\n} from \"../metadataStateIsolation\";\nimport type { ContainerState, RemoteContainer } from \"../remoteHydration\";\nimport { hasRemoteContainerMetadataState } from \"../remoteHydration/reconciliation\";\nimport { moveRemoteContainer } from \"./remote\";\nimport type {\n  ContainerMoveIntentSyncHost,\n  ContainerMoveIntentSyncInput,\n  ContainerMoveIntentSyncState,\n} from \"./types\";\n\ntype MoveIntentSyncResult = \"abandoned\" | \"blocked\" | \"failed\" | \"moved\";\n\nfunction currentMoveResult<\n  Result extends Exclude<MoveIntentSyncResult, \"abandoned\">,\n>(isCurrent: () => boolean, result: Result): \"abandoned\" | Result {\n  return isCurrent() ? result : \"abandoned\";\n}\n\nasync function recordPendingMoveIntentError(input: {\n  blocked?: boolean | undefined;\n  containerId: string;\n  expectedIntentId: string;\n  expectedUpdatedAt: string;\n  isCurrent: () => boolean;\n  message: string;\n  state: ContainerMoveIntentSyncState;\n}): Promise<boolean> {\n  if (!input.isCurrent()) {\n    return false;\n  }\n  const execSql = input.state.runtime.infra.execSql;\n  await input.state.persistence.recordMoveIntentError(execSql, {\n    blocked: input.blocked,\n    containerId: input.containerId,\n    expectedIntentId: input.expectedIntentId,\n    expectedUpdatedAt: input.expectedUpdatedAt,\n    message: input.message,\n    stillCurrent: input.isCurrent,\n  });\n  return input.isCurrent();\n}\n\nasync function resolveMoveIntentLocalUpdatedAt(input: {\n  containerId: string;\n  isCurrent: () => boolean;\n  remoteUpdatedAt: string;\n  state: ContainerMoveIntentSyncState;\n}): Promise<string | null> {\n  if (!input.isCurrent()) {\n    return null;\n  }\n  const previousLocalUpdatedAt =\n    input.state.containersById.get(input.containerId)?.container\n      .localUpdatedAt ?? null;\n  if (\n    !previousLocalUpdatedAt ||\n    previousLocalUpdatedAt.localeCompare(input.remoteUpdatedAt) <= 0\n  ) {\n    return input.remoteUpdatedAt;\n  }\n\n  const execSql = input.state.runtime.infra.execSql;\n  const containersWithPendingMetadataUpdates =\n    await input.state.persistence.listContainerIdsWithPendingUpdates(execSql, [\n      input.containerId,\n    ]);\n  if (!input.isCurrent()) {\n    return null;\n  }\n\n  return containersWithPendingMetadataUpdates.includes(input.containerId)\n    ? previousLocalUpdatedAt\n    : input.remoteUpdatedAt;\n}\n\nexport async function persistAcceptedMoveIntent(input: {\n  host: ContainerMoveIntentSyncHost;\n  isCurrent: () => boolean;\n  intent: ContainerMoveIntentSyncInput[\"intent\"];\n  moved: RemoteContainer;\n  requestRemoteReconciliation: (parentContainerId: string | null) => void;\n  state: ContainerMoveIntentSyncState;\n}): Promise<boolean> {\n  const { host, intent, moved, state } = input;\n  const abandon = () => {\n    input.requestRemoteReconciliation(moved.parentId);\n    return false;\n  };\n  if (!input.isCurrent()) return abandon();\n  const containerState = state.containersById.get(intent.containerId);\n  if (!containerState) {\n    return false;\n  }\n\n  await createRuntimePrincipalPolicyWarmer(state.runtime)({\n    organizationId: moved.organizationId,\n    references: moved.metadataReferencedPrincipals,\n    stillCurrent: input.isCurrent,\n  });\n  if (!input.isCurrent()) {\n    return abandon();\n  }\n  const localUpdatedAt = await resolveMoveIntentLocalUpdatedAt({\n    containerId: intent.containerId,\n    isCurrent: input.isCurrent,\n    remoteUpdatedAt: moved.updatedAt,\n    state,\n  });\n  if (!input.isCurrent() || localUpdatedAt === null) {\n    return abandon();\n  }\n  const persistenceCandidate =\n    await createDetachedContainerMetadataState(containerState);\n  if (!input.isCurrent()) {\n    return abandon();\n  }\n  persistenceCandidate.container = {\n    ...persistenceCandidate.container,\n    createdAt: moved.createdAt,\n    serverCreatedAt: moved.createdAt,\n    serverUpdatedAt: moved.updatedAt,\n    updatedAt: moved.updatedAt,\n  };\n  const persistenceResult = await host.persistContainerState(\n    persistenceCandidate,\n    {\n      accessEpoch: moved.metadataAccessEpoch,\n      accessStateHash: moved.metadataAccessStateHash,\n      documentId: moved.metadataDocumentId,\n      metadataDocumentId: moved.metadataDocumentId,\n      organizationId: moved.organizationId,\n      parentId: moved.parentId,\n      systemSlot: moved.systemSlot ?? null,\n    },\n    false,\n    {\n      localUpdatedAt,\n      serverTimestamps: {\n        createdAt: moved.createdAt,\n        updatedAt: moved.updatedAt,\n      },\n    },\n    {\n      expectedStateWhenMissing: containerState,\n      isCurrent: input.isCurrent,\n      moveIntentSettlement: {\n        containerId: intent.containerId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n      },\n    },\n  );\n  if (!input.isCurrent() || persistenceResult.status !== \"persisted\") {\n    return abandon();\n  }\n  if (persistenceResult.moveIntentSettled !== true) {\n    throw new Error(\n      \"Container move persistence must settle the intent atomically\",\n    );\n  }\n  if (!input.isCurrent()) return abandon();\n  const { record: nextRecord } = persistenceResult;\n  installDetachedContainerMetadataState(containerState, persistenceCandidate, {\n    candidateRecord: nextRecord,\n    preserveConcurrentMetadataEdit: true,\n  });\n  containerState.container = {\n    ...containerState.container,\n    metadataDocumentId: moved.metadataDocumentId,\n    organizationId: moved.organizationId,\n    parentId: moved.parentId,\n  };\n  return true;\n}\n\n/**\n * A move refused for path length never succeeds; the queue-time check saw only\n * the descendants this device holds. Drop the queued move and restore the\n * previous parent together: the server row never changed, so no listing would\n * ever put the folder back.\n */\nasync function abandonTooDeepMove(\n  syncInput: ContainerMoveIntentSyncInput,\n): Promise<MoveIntentSyncResult> {\n  const { host, intent, state } = syncInput;\n  const previousParentId = intent.previousParentContainerId;\n  if (previousParentId === null) {\n    throw new Error(\"A queued container move must name its previous parent\");\n  }\n  const abandoned = await state.persistence.abandonMoveIntentRevision(\n    state.runtime.infra.execSql,\n    {\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      previousParentContainerId: previousParentId,\n      stillCurrent: syncInput.isCurrent,\n    },\n  );\n  if (!syncInput.isCurrent()) return \"abandoned\";\n  // A newer local move superseded this revision; it replays on its own.\n  if (!abandoned) return \"failed\";\n  const containerState = state.containersById.get(intent.containerId);\n  if (containerState) {\n    containerState.container = {\n      ...containerState.container,\n      parentId: previousParentId,\n    };\n  }\n  host.updateSnapshot();\n  state.runtime.util.log(\n    `Container contents: abandoned queued move of ${intent.containerId}; its path would exceed the maximum depth`,\n  );\n  return \"failed\";\n}\n\nasync function movePendingRemoteContainer(input: {\n  parentState: ContainerState;\n  syncInput: ContainerMoveIntentSyncInput;\n}): Promise<MoveIntentSyncResult> {\n  const { parentState, syncInput } = input;\n  const { host, intent, state } = syncInput;\n  let remoteMoveApplied = false;\n  let remoteParentId: string | null = intent.parentContainerId;\n  const abandonAppliedMove = () => {\n    if (remoteMoveApplied) {\n      syncInput.requestRemoteReconciliation(remoteParentId);\n    }\n    return \"abandoned\" as const;\n  };\n  try {\n    const moved = await moveRemoteContainer({\n      containerId: intent.containerId,\n      parentContainerId: intent.parentContainerId,\n      resolveProjectionUserKey: state.resolveProjectionUserKey,\n      runtime: state.runtime,\n      stillCurrent: syncInput.isCurrent,\n    });\n    if (!moved) {\n      if (!syncInput.isCurrent()) {\n        syncInput.requestRemoteReconciliation(intent.parentContainerId);\n        return \"abandoned\";\n      }\n      await recordPendingMoveIntentError({\n        containerId: intent.containerId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n        isCurrent: syncInput.isCurrent,\n        message: \"Remote container move was rejected or unavailable\",\n        state,\n      });\n      return currentMoveResult(syncInput.isCurrent, \"failed\");\n    }\n    remoteMoveApplied = true;\n    remoteParentId = moved.parentId;\n    if (!syncInput.isCurrent()) return abandonAppliedMove();\n\n    const persisted = await persistAcceptedMoveIntent({\n      host,\n      isCurrent: syncInput.isCurrent,\n      intent,\n      moved,\n      requestRemoteReconciliation: syncInput.requestRemoteReconciliation,\n      state,\n    });\n    if (!persisted) {\n      return currentMoveResult(syncInput.isCurrent, \"failed\");\n    }\n    state.runtime.util.log(\n      `Container contents: synced queued container move ${intent.containerId}`,\n    );\n    return \"moved\";\n  } catch (error: unknown) {\n    if (!syncInput.isCurrent()) {\n      return abandonAppliedMove();\n    }\n    if (error instanceof ContainerPathTooDeepError)\n      return abandonTooDeepMove(syncInput);\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      state.runtime.util.reportSecurityIncident,\n      {\n        objectId: intent.containerId,\n        objectKind: \"container\",\n        operation: \"container.move.replay\",\n        organizationId: parentState.container.organizationId,\n      },\n    );\n    if (!syncInput.isCurrent()) {\n      return abandonAppliedMove();\n    }\n    await recordPendingMoveIntentError({\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: syncInput.isCurrent,\n      message: `Failed to sync container move: ${errorMessage(error)}`,\n      state,\n    });\n    return currentMoveResult(syncInput.isCurrent, \"failed\");\n  }\n}\n\nasync function trySyncPendingContainerMoveIntent(\n  input: ContainerMoveIntentSyncInput,\n): Promise<MoveIntentSyncResult> {\n  const { intent, state } = input;\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  const containerState = state.containersById.get(intent.containerId);\n  const parentState = state.containersById.get(intent.parentContainerId);\n\n  if (!containerState) {\n    await recordPendingMoveIntentError({\n      blocked: true,\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Container move intent references a missing local container\",\n      state,\n    });\n    return currentMoveResult(input.isCurrent, \"failed\");\n  }\n  if (!parentState) {\n    await recordPendingMoveIntentError({\n      blocked: true,\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message:\n        \"Container move intent references a missing destination parent container\",\n      state,\n    });\n    return currentMoveResult(input.isCurrent, \"failed\");\n  }\n  if (input.isRemoteSyncBlocked(containerState.container.organizationId)) {\n    return \"blocked\";\n  }\n  if (\n    !hasRemoteContainerMetadataState(containerState) ||\n    input.isCreatePending(intent.containerId)\n  ) {\n    // Source not synced yet is TRANSIENT, exactly like the destination case\n    // below: the source's own create intent syncs first (createIntentSync runs\n    // before moveIntentSync in a pass), but if that create fails on this pass\n    // the source still lacks remote metadata here. Keep the intent 'pending'\n    // (not 'blocked') so the queue reports a retryable failure rather than a\n    // missing-dependency block; either way listUnsyncedMoveIntents replays it\n    // once the create lands.\n    await recordPendingMoveIntentError({\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Container move source is not synced yet\",\n      state,\n    });\n    return currentMoveResult(input.isCurrent, \"blocked\");\n  }\n  if (\n    !hasRemoteContainerMetadataState(parentState) ||\n    input.isCreatePending(intent.parentContainerId)\n  ) {\n    await recordPendingMoveIntentError({\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Container move destination parent is not synced yet\",\n      state,\n    });\n    return currentMoveResult(input.isCurrent, \"blocked\");\n  }\n\n  return movePendingRemoteContainer({ parentState, syncInput: input });\n}\n\nexport async function syncPendingContainerMoveIntents(input: {\n  host: ContainerMoveIntentSyncHost;\n  isCreatePending: (containerId: string) => boolean;\n  isCurrent: () => boolean;\n  isRemoteSyncBlocked: (organizationId: string) => boolean;\n  requestRemoteReconciliation: (parentContainerId: string | null) => void;\n  state: ContainerMoveIntentSyncState;\n}): Promise<number> {\n  if (!input.isCurrent()) {\n    return 0;\n  }\n  const { host } = input;\n  const state = { ...input.state };\n  const execSql = state.runtime.infra.execSql;\n  const pendingIntents =\n    await state.persistence.listUnsyncedMoveIntents(execSql);\n  if (!input.isCurrent()) {\n    return 0;\n  }\n  let movedCount = 0;\n\n  for (const intent of pendingIntents) {\n    if (!input.isCurrent()) {\n      return movedCount;\n    }\n    const result = await trySyncPendingContainerMoveIntent({\n      host,\n      isCurrent: input.isCurrent,\n      isCreatePending: input.isCreatePending,\n      isRemoteSyncBlocked: input.isRemoteSyncBlocked,\n      intent,\n      requestRemoteReconciliation: input.requestRemoteReconciliation,\n      state,\n    });\n    if (result === \"abandoned\") {\n      return movedCount;\n    }\n\n    if (result === \"moved\") {\n      movedCount += 1;\n    }\n  }\n\n  return movedCount;\n}\n"]}
+{"version":3,"file":"moveIntentSync.js","sourceRoot":"","sources":["moveIntentSync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,uCAAuC,EAAE,MAAM,kDAAkD,CAAC;AAC3G,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EACL,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAS/C,SAAS,iBAAiB,CAExB,SAAwB,EAAE,MAAc;IACxC,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAQ3C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAClD,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,EAAE;QAC3D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,KAK9C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,sBAAsB,GAC1B,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,SAAS;SACzD,cAAc,IAAI,IAAI,CAAC;IAC5B,IACE,CAAC,sBAAsB;QACvB,sBAAsB,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAChE,CAAC;QACD,OAAO,KAAK,CAAC,eAAe,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAClD,MAAM,oCAAoC,GACxC,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,kCAAkC,CAAC,OAAO,EAAE;QACxE,KAAK,CAAC,WAAW;KAClB,CAAC,CAAC;IACL,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,oCAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QACrE,CAAC,CAAC,sBAAsB;QACxB,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAO/C;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,KAAK,CAAC,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,OAAO,EAAE,CAAC;IACzC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,kCAAkC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,4BAA4B;QAC9C,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,+BAA+B,CAAC;QAC3D,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,oBAAoB,GACxB,MAAM,oCAAoC,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,oBAAoB,CAAC,SAAS,GAAG;QAC/B,GAAG,oBAAoB,CAAC,SAAS;QACjC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CACxD,oBAAoB,EACpB;QACE,WAAW,EAAE,KAAK,CAAC,mBAAmB;QACtC,eAAe,EAAE,KAAK,CAAC,uBAAuB;QAC9C,UAAU,EAAE,KAAK,CAAC,kBAAkB;QACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;KACrC,EACD,KAAK,EACL;QACE,cAAc;QACd,gBAAgB,EAAE;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B;KACF,EACD;QACE,wBAAwB,EAAE,cAAc;QACxC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,oBAAoB,EAAE;YACpB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;SACpC;KACF,CACF,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,iBAAiB,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnE,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,iBAAiB,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,OAAO,EAAE,CAAC;IACzC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC;IACjD,qCAAqC,CAAC,cAAc,EAAE,oBAAoB,EAAE;QAC1E,eAAe,EAAE,UAAU;QAC3B,8BAA8B,EAAE,IAAI;KACrC,CAAC,CAAC;IACH,cAAc,CAAC,SAAS,GAAG;QACzB,GAAG,cAAc,CAAC,SAAS;QAC3B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAC/B,SAAuC;IAEvC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IAC1C,MAAM,gBAAgB,GAAG,MAAM,CAAC,yBAAyB,CAAC;IAC1D,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,yBAAyB,CACjE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B;QACE,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;QAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,yBAAyB,EAAE,gBAAgB;QAC3C,YAAY,EAAE,SAAS,CAAC,SAAS;KAClC,CACF,CAAC;IACF,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE;QAAE,OAAO,WAAW,CAAC;IAC/C,sEAAsE;IACtE,IAAI,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IAChC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpE,IAAI,cAAc,EAAE,CAAC;QACnB,cAAc,CAAC,SAAS,GAAG;YACzB,GAAG,cAAc,CAAC,SAAS;YAC3B,QAAQ,EAAE,gBAAgB;SAC3B,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;IACtB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,gDAAgD,MAAM,CAAC,WAAW,2CAA2C,CAC9G,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAGzC;IACC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IAC1C,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,cAAc,GAAkB,MAAM,CAAC,iBAAiB,CAAC;IAC7D,MAAM,kBAAkB,GAAG,GAAG,EAAE;QAC9B,IAAI,iBAAiB,EAAE,CAAC;YACtB,SAAS,CAAC,2BAA2B,CAAC,cAAc,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,WAAoB,CAAC;IAC9B,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,SAAS,CAAC,SAAS;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC3B,SAAS,CAAC,2BAA2B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAChE,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,MAAM,4BAA4B,CAAC;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;gBAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;gBACnC,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,OAAO,EAAE,mDAAmD;gBAC5D,KAAK;aACN,CAAC,CAAC;YACH,OAAO,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QACD,iBAAiB,GAAG,IAAI,CAAC;QACzB,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE;YAAE,OAAO,kBAAkB,EAAE,CAAC;QAExD,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC;YAChD,IAAI;YACJ,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM;YACN,KAAK;YACL,2BAA2B,EAAE,SAAS,CAAC,2BAA2B;YAClE,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,oDAAoD,MAAM,CAAC,WAAW,EAAE,CACzE,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;YAC3B,OAAO,kBAAkB,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,YAAY,yBAAyB;YAC5C,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,uCAAuC,CAC3C,KAAK,EACL,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACzC;YACE,QAAQ,EAAE,MAAM,CAAC,WAAW;YAC5B,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,uBAAuB;YAClC,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,cAAc;SACrD,CACF,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;YAC3B,OAAO,kBAAkB,EAAE,CAAC;QAC9B,CAAC;QACD,MAAM,4BAA4B,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,OAAO,EAAE,kCAAkC,YAAY,CAAC,KAAK,CAAC,EAAE;YAChE,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,KAAmC;IAEnC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAEvE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,4BAA4B,CAAC;YACjC,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,4DAA4D;YACrE,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,4BAA4B,CAAC;YACjC,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EACL,yEAAyE;YAC3E,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,CAAC,+BAA+B,CAAC,cAAc,CAAC;QAChD,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,EACzC,CAAC;QACD,wEAAwE;QACxE,2EAA2E;QAC3E,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,yBAAyB;QACzB,MAAM,4BAA4B,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,yCAAyC;YAClD,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IACD,IACE,CAAC,+BAA+B,CAAC,WAAW,CAAC;QAC7C,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAC/C,CAAC;QACD,MAAM,4BAA4B,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,qDAAqD;YAC9D,KAAK;SACN,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,0BAA0B,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAOrD;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,cAAc,GAClB,MAAM,KAAK,CAAC,WAAW,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACvB,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC;YACrD,IAAI;YACJ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,MAAM;YACN,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;YAC9D,KAAK;SACN,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import { ContainerPathTooDeepError } from \"../../../data/containers/shared/containerPathLimits\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../../data/keyingProjectionVerification/error\";\nimport { errorMessage } from \"../../../data/shared/errorMessage\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../principals/runtimePolicyWarmer\";\nimport {\n  createDetachedContainerMetadataState,\n  installDetachedContainerMetadataState,\n} from \"../metadata/metadataStateIsolation\";\nimport type { ContainerState, RemoteContainer } from \"../remoteHydration\";\nimport { hasRemoteContainerMetadataState } from \"../remoteHydration/reconciliation\";\nimport { moveRemoteContainer } from \"./remote\";\nimport type {\n  ContainerMoveIntentSyncHost,\n  ContainerMoveIntentSyncInput,\n  ContainerMoveIntentSyncState,\n} from \"./types\";\n\ntype MoveIntentSyncResult = \"abandoned\" | \"blocked\" | \"failed\" | \"moved\";\n\nfunction currentMoveResult<\n  Result extends Exclude<MoveIntentSyncResult, \"abandoned\">,\n>(isCurrent: () => boolean, result: Result): \"abandoned\" | Result {\n  return isCurrent() ? result : \"abandoned\";\n}\n\nasync function recordPendingMoveIntentError(input: {\n  blocked?: boolean | undefined;\n  containerId: string;\n  expectedIntentId: string;\n  expectedUpdatedAt: string;\n  isCurrent: () => boolean;\n  message: string;\n  state: ContainerMoveIntentSyncState;\n}): Promise<boolean> {\n  if (!input.isCurrent()) {\n    return false;\n  }\n  const execSql = input.state.runtime.infra.execSql;\n  await input.state.persistence.recordMoveIntentError(execSql, {\n    blocked: input.blocked,\n    containerId: input.containerId,\n    expectedIntentId: input.expectedIntentId,\n    expectedUpdatedAt: input.expectedUpdatedAt,\n    message: input.message,\n    stillCurrent: input.isCurrent,\n  });\n  return input.isCurrent();\n}\n\nasync function resolveMoveIntentLocalUpdatedAt(input: {\n  containerId: string;\n  isCurrent: () => boolean;\n  remoteUpdatedAt: string;\n  state: ContainerMoveIntentSyncState;\n}): Promise<string | null> {\n  if (!input.isCurrent()) {\n    return null;\n  }\n  const previousLocalUpdatedAt =\n    input.state.containersById.get(input.containerId)?.container\n      .localUpdatedAt ?? null;\n  if (\n    !previousLocalUpdatedAt ||\n    previousLocalUpdatedAt.localeCompare(input.remoteUpdatedAt) <= 0\n  ) {\n    return input.remoteUpdatedAt;\n  }\n\n  const execSql = input.state.runtime.infra.execSql;\n  const containersWithPendingMetadataUpdates =\n    await input.state.persistence.listContainerIdsWithPendingUpdates(execSql, [\n      input.containerId,\n    ]);\n  if (!input.isCurrent()) {\n    return null;\n  }\n\n  return containersWithPendingMetadataUpdates.includes(input.containerId)\n    ? previousLocalUpdatedAt\n    : input.remoteUpdatedAt;\n}\n\nexport async function persistAcceptedMoveIntent(input: {\n  host: ContainerMoveIntentSyncHost;\n  isCurrent: () => boolean;\n  intent: ContainerMoveIntentSyncInput[\"intent\"];\n  moved: RemoteContainer;\n  requestRemoteReconciliation: (parentContainerId: string | null) => void;\n  state: ContainerMoveIntentSyncState;\n}): Promise<boolean> {\n  const { host, intent, moved, state } = input;\n  const abandon = () => {\n    input.requestRemoteReconciliation(moved.parentId);\n    return false;\n  };\n  if (!input.isCurrent()) return abandon();\n  const containerState = state.containersById.get(intent.containerId);\n  if (!containerState) {\n    return false;\n  }\n\n  await createRuntimePrincipalPolicyWarmer(state.runtime)({\n    organizationId: moved.organizationId,\n    references: moved.metadataReferencedPrincipals,\n    stillCurrent: input.isCurrent,\n  });\n  if (!input.isCurrent()) {\n    return abandon();\n  }\n  const localUpdatedAt = await resolveMoveIntentLocalUpdatedAt({\n    containerId: intent.containerId,\n    isCurrent: input.isCurrent,\n    remoteUpdatedAt: moved.updatedAt,\n    state,\n  });\n  if (!input.isCurrent() || localUpdatedAt === null) {\n    return abandon();\n  }\n  const persistenceCandidate =\n    await createDetachedContainerMetadataState(containerState);\n  if (!input.isCurrent()) {\n    return abandon();\n  }\n  persistenceCandidate.container = {\n    ...persistenceCandidate.container,\n    createdAt: moved.createdAt,\n    serverCreatedAt: moved.createdAt,\n    serverUpdatedAt: moved.updatedAt,\n    updatedAt: moved.updatedAt,\n  };\n  const persistenceResult = await host.persistContainerState(\n    persistenceCandidate,\n    {\n      accessEpoch: moved.metadataAccessEpoch,\n      accessStateHash: moved.metadataAccessStateHash,\n      documentId: moved.metadataDocumentId,\n      metadataDocumentId: moved.metadataDocumentId,\n      organizationId: moved.organizationId,\n      parentId: moved.parentId,\n      systemSlot: moved.systemSlot ?? null,\n    },\n    false,\n    {\n      localUpdatedAt,\n      serverTimestamps: {\n        createdAt: moved.createdAt,\n        updatedAt: moved.updatedAt,\n      },\n    },\n    {\n      expectedStateWhenMissing: containerState,\n      isCurrent: input.isCurrent,\n      moveIntentSettlement: {\n        containerId: intent.containerId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n      },\n    },\n  );\n  if (!input.isCurrent() || persistenceResult.status !== \"persisted\") {\n    return abandon();\n  }\n  if (persistenceResult.moveIntentSettled !== true) {\n    throw new Error(\n      \"Container move persistence must settle the intent atomically\",\n    );\n  }\n  if (!input.isCurrent()) return abandon();\n  const { record: nextRecord } = persistenceResult;\n  installDetachedContainerMetadataState(containerState, persistenceCandidate, {\n    candidateRecord: nextRecord,\n    preserveConcurrentMetadataEdit: true,\n  });\n  containerState.container = {\n    ...containerState.container,\n    metadataDocumentId: moved.metadataDocumentId,\n    organizationId: moved.organizationId,\n    parentId: moved.parentId,\n  };\n  return true;\n}\n\n/**\n * A move refused for path length never succeeds; the queue-time check saw only\n * the descendants this device holds. Drop the queued move and restore the\n * previous parent together: the server row never changed, so no listing would\n * ever put the folder back.\n */\nasync function abandonTooDeepMove(\n  syncInput: ContainerMoveIntentSyncInput,\n): Promise<MoveIntentSyncResult> {\n  const { host, intent, state } = syncInput;\n  const previousParentId = intent.previousParentContainerId;\n  if (previousParentId === null) {\n    throw new Error(\"A queued container move must name its previous parent\");\n  }\n  const abandoned = await state.persistence.abandonMoveIntentRevision(\n    state.runtime.infra.execSql,\n    {\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      previousParentContainerId: previousParentId,\n      stillCurrent: syncInput.isCurrent,\n    },\n  );\n  if (!syncInput.isCurrent()) return \"abandoned\";\n  // A newer local move superseded this revision; it replays on its own.\n  if (!abandoned) return \"failed\";\n  const containerState = state.containersById.get(intent.containerId);\n  if (containerState) {\n    containerState.container = {\n      ...containerState.container,\n      parentId: previousParentId,\n    };\n  }\n  host.updateSnapshot();\n  state.runtime.util.log(\n    `Container contents: abandoned queued move of ${intent.containerId}; its path would exceed the maximum depth`,\n  );\n  return \"failed\";\n}\n\nasync function movePendingRemoteContainer(input: {\n  parentState: ContainerState;\n  syncInput: ContainerMoveIntentSyncInput;\n}): Promise<MoveIntentSyncResult> {\n  const { parentState, syncInput } = input;\n  const { host, intent, state } = syncInput;\n  let remoteMoveApplied = false;\n  let remoteParentId: string | null = intent.parentContainerId;\n  const abandonAppliedMove = () => {\n    if (remoteMoveApplied) {\n      syncInput.requestRemoteReconciliation(remoteParentId);\n    }\n    return \"abandoned\" as const;\n  };\n  try {\n    const moved = await moveRemoteContainer({\n      containerId: intent.containerId,\n      parentContainerId: intent.parentContainerId,\n      resolveProjectionUserKey: state.resolveProjectionUserKey,\n      runtime: state.runtime,\n      stillCurrent: syncInput.isCurrent,\n    });\n    if (!moved) {\n      if (!syncInput.isCurrent()) {\n        syncInput.requestRemoteReconciliation(intent.parentContainerId);\n        return \"abandoned\";\n      }\n      await recordPendingMoveIntentError({\n        containerId: intent.containerId,\n        expectedIntentId: intent.id,\n        expectedUpdatedAt: intent.updatedAt,\n        isCurrent: syncInput.isCurrent,\n        message: \"Remote container move was rejected or unavailable\",\n        state,\n      });\n      return currentMoveResult(syncInput.isCurrent, \"failed\");\n    }\n    remoteMoveApplied = true;\n    remoteParentId = moved.parentId;\n    if (!syncInput.isCurrent()) return abandonAppliedMove();\n\n    const persisted = await persistAcceptedMoveIntent({\n      host,\n      isCurrent: syncInput.isCurrent,\n      intent,\n      moved,\n      requestRemoteReconciliation: syncInput.requestRemoteReconciliation,\n      state,\n    });\n    if (!persisted) {\n      return currentMoveResult(syncInput.isCurrent, \"failed\");\n    }\n    state.runtime.util.log(\n      `Container contents: synced queued container move ${intent.containerId}`,\n    );\n    return \"moved\";\n  } catch (error: unknown) {\n    if (!syncInput.isCurrent()) {\n      return abandonAppliedMove();\n    }\n    if (error instanceof ContainerPathTooDeepError)\n      return abandonTooDeepMove(syncInput);\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      state.runtime.util.reportSecurityIncident,\n      {\n        objectId: intent.containerId,\n        objectKind: \"container\",\n        operation: \"container.move.replay\",\n        organizationId: parentState.container.organizationId,\n      },\n    );\n    if (!syncInput.isCurrent()) {\n      return abandonAppliedMove();\n    }\n    await recordPendingMoveIntentError({\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: syncInput.isCurrent,\n      message: `Failed to sync container move: ${errorMessage(error)}`,\n      state,\n    });\n    return currentMoveResult(syncInput.isCurrent, \"failed\");\n  }\n}\n\nasync function trySyncPendingContainerMoveIntent(\n  input: ContainerMoveIntentSyncInput,\n): Promise<MoveIntentSyncResult> {\n  const { intent, state } = input;\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  const containerState = state.containersById.get(intent.containerId);\n  const parentState = state.containersById.get(intent.parentContainerId);\n\n  if (!containerState) {\n    await recordPendingMoveIntentError({\n      blocked: true,\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Container move intent references a missing local container\",\n      state,\n    });\n    return currentMoveResult(input.isCurrent, \"failed\");\n  }\n  if (!parentState) {\n    await recordPendingMoveIntentError({\n      blocked: true,\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message:\n        \"Container move intent references a missing destination parent container\",\n      state,\n    });\n    return currentMoveResult(input.isCurrent, \"failed\");\n  }\n  if (input.isRemoteSyncBlocked(containerState.container.organizationId)) {\n    return \"blocked\";\n  }\n  if (\n    !hasRemoteContainerMetadataState(containerState) ||\n    input.isCreatePending(intent.containerId)\n  ) {\n    // Source not synced yet is TRANSIENT, exactly like the destination case\n    // below: the source's own create intent syncs first (createIntentSync runs\n    // before moveIntentSync in a pass), but if that create fails on this pass\n    // the source still lacks remote metadata here. Keep the intent 'pending'\n    // (not 'blocked') so the queue reports a retryable failure rather than a\n    // missing-dependency block; either way listUnsyncedMoveIntents replays it\n    // once the create lands.\n    await recordPendingMoveIntentError({\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Container move source is not synced yet\",\n      state,\n    });\n    return currentMoveResult(input.isCurrent, \"blocked\");\n  }\n  if (\n    !hasRemoteContainerMetadataState(parentState) ||\n    input.isCreatePending(intent.parentContainerId)\n  ) {\n    await recordPendingMoveIntentError({\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      isCurrent: input.isCurrent,\n      message: \"Container move destination parent is not synced yet\",\n      state,\n    });\n    return currentMoveResult(input.isCurrent, \"blocked\");\n  }\n\n  return movePendingRemoteContainer({ parentState, syncInput: input });\n}\n\nexport async function syncPendingContainerMoveIntents(input: {\n  host: ContainerMoveIntentSyncHost;\n  isCreatePending: (containerId: string) => boolean;\n  isCurrent: () => boolean;\n  isRemoteSyncBlocked: (organizationId: string) => boolean;\n  requestRemoteReconciliation: (parentContainerId: string | null) => void;\n  state: ContainerMoveIntentSyncState;\n}): Promise<number> {\n  if (!input.isCurrent()) {\n    return 0;\n  }\n  const { host } = input;\n  const state = { ...input.state };\n  const execSql = state.runtime.infra.execSql;\n  const pendingIntents =\n    await state.persistence.listUnsyncedMoveIntents(execSql);\n  if (!input.isCurrent()) {\n    return 0;\n  }\n  let movedCount = 0;\n\n  for (const intent of pendingIntents) {\n    if (!input.isCurrent()) {\n      return movedCount;\n    }\n    const result = await trySyncPendingContainerMoveIntent({\n      host,\n      isCurrent: input.isCurrent,\n      isCreatePending: input.isCreatePending,\n      isRemoteSyncBlocked: input.isRemoteSyncBlocked,\n      intent,\n      requestRemoteReconciliation: input.requestRemoteReconciliation,\n      state,\n    });\n    if (result === \"abandoned\") {\n      return movedCount;\n    }\n\n    if (result === \"moved\") {\n      movedCount += 1;\n    }\n  }\n\n  return movedCount;\n}\n"]}

package/workflows/container-contents/container-state/purgeTree.js

@@ -1,8 +1,8 @@
 import { DEFAULT_DOCUMENT_KIND } from "../../../data/documents/documentConstants.js";
 import { sqlDocumentContainerProjectionPersistence } from "../../../data/persistence/containers/documentContainerProjectionPersistence.js";
 import { listDocumentsByContainerIdsOrDocumentIds } from "../../../data/persistence/documents/documentsPersistence.js";
-import { unlinkRemoteContainerDocument } from "../documentLinks.js";
-import { purgeLocalContainerDocument, purgeRemoteContainerDocument, } from "../documentPurge.js";
+import { unlinkRemoteContainerDocument } from "../documentLinks/index.js";
+import { purgeLocalContainerDocument, purgeRemoteContainerDocument, } from "../tombstones/documentPurge.js";
 import { collectSubtreeLeafFirst, snapshotContainerStates, } from "./purgeTreeCollection.js";
 import { deleteSubtreeContainers } from "./purgeTreeContainerDeletion.js";
 import { createSubtreePurgeScope } from "./purgeTreeScope.js";

package/workflows/container-contents/container-state/purgeTree.js.map

@@ -1 +1 @@
-{"version":3,"file":"purgeTree.js","sourceRoot":"","sources":["purgeTree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAGlF,OAAO,EAAE,yCAAyC,EAAE,MAAM,6EAA6E,CAAC;AACxI,OAAO,EAAE,wCAAwC,EAAE,MAAM,0DAA0D,CAAC;AAGpH,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AA4DhE,+EAA+E;AAC/E,gFAAgF;AAChF,uEAAuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,KAKvC;IACC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,kBAAkB,CAAC,IAAI,CACnD,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CAC7D,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CACnC,IAAI,GAAG,CACL,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAC9C,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CAC3C,CACF,CACF,CAAC;QACF,MAAM,mBAAmB,GACvB,KAAK,CAAC,oBAAoB;YAC1B,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC;YACrD,CAAC,CAAC,KAAK,CAAC,oBAAoB;YAC5B,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,OAAO;YACb,kBAAkB,EAAE,kBAAkB,CAAC,MAAM,CAC3C,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,KAAK,mBAAmB,CACrD;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAC5D,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CAC3C;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAGnC;IACC,MAAM,SAAS,GAAG,MAAM,wCAAwC,CAC9D,KAAK,CAAC,OAAO,EACb;QACE,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,mBAAmB,CAAC;QAC5C,WAAW,EAAE,EAAE;KAChB,CACF,CAAC;IACF,MAAM,iBAAiB,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CACvD,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;IACF,MAAM,8BAA8B,GAClC,MAAM,yCAAyC,CAAC,mCAAmC,CACjF,KAAK,CAAC,OAAO,EACb,iBAAiB,CAClB,CAAC;IAEJ,MAAM,KAAK,GAGN,EAAE,CAAC;IACR,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAG7B,CAAC;IACJ,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,uBAAuB,CAAC;YAC1C,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,IAAI;YACvC,kBAAkB,EAAE,QAAQ,CAAC,UAAU;gBACrC,CAAC,CAAC,CAAC,8BAA8B,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACjE,CAAC,CAAC,EAAE;YACN,oBAAoB,EAAE,QAAQ,CAAC,WAAW;YAC1C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC/C,CAAC,CAAC;QACH,IAAI,WAAW,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACvC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ;gBACR,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;aACnD,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC/B,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE;gBACxC,QAAQ;gBACR,YAAY,EAAE,WAAW,CAAC,YAAY;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,KAUpC;IACC,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,gBAAmC,CAAC;IACxC,IAAI,CAAC;QACH,gBAAgB,GAAG,MAAM,KAAK,CAAC,+BAA+B,CAC5D,KAAK,CAAC,QAAQ,CACf,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC;YACjD,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC;YACnD,UAAU;YACV,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,SAAS,EAAE,KAAK,CAAC,YAAY;YAC7B,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YACzB,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,gBAAgB;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAWD,SAAS,gCAAgC,CACvC,KAA8B,EAC9B,KAAiD;IAEjD,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,UAAU,GAA8B,KAAK,CAAC,kBAAkB,IAAI;QACxE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAC7B,CAAC,MAAM,2BAA2B,CAAC;YACjC,yBAAyB,EAAE,CAAC,OAAO,EAAE,EAAE,CACrC,KAAK,CAAC,6BAA6B,CACjC,OAAO,EACP,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,EAAE,CACZ;YACH,MAAM,EAAE,QAAQ,CAAC,EAAE;YACnB,mBAAmB,EAAE,QAAQ,CAAC,WAAW;YACzC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC,KAAK,IAAI;QACd,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAC9B,OAAO,CACL,QAAQ,CAAC,UAAU;YACjB,CAAC,MAAM,4BAA4B,CAAC;gBAClC,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC;gBAClD,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,mBAAmB;gBACnB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,qBAAqB;gBAC5D,MAAM,EAAE,QAAQ,CAAC,EAAE;gBACnB,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;gBACxD,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC,CACN;QACH,MAAM,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,CACjC,qBAAqB,CAAC;YACpB,iEAAiE;YACjE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAClC,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACtC,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YAC5C,YAAY;YACZ,QAAQ;YACR,mBAAmB;YACnB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;YACtE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;KACL,CAAC;IACF,OAAO;QACL,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAC7B,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAC9B,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;YACvC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1D,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;gBACvC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;YAChE,CAAC;YACD,OAAO,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC;AAMD,2EAA2E;AAC3E,4EAA4E;AAC5E,SAAS,mBAAmB,CAC1B,KAA0E;IAE1E,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,eAAe;QACzB,QAAQ,EACN,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,QAAQ;YACnE,IAAI;KACP,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAG1B;IACC,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,CAAC;AAC5E,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,qEAAqE;AACrE,KAAK,UAAU,wBAAwB,CAAC,KAMvC;IACC,KAAK,MAAM,EACT,QAAQ,EACR,YAAY,GACb,IAAI,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,MAAM,CACpD,QAAQ,EACR,YAAY,CACb,CAAC;QACF,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IACD,KAAK,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChE,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,IACE,kBAAkB,CAAC,MAAM,GAAG,CAAC;YAC7B,CAAC,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,EACtE,CAAC;YACD,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7C,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,kFAAkF;AAClF,8EAA8E;AAC9E,4EAA4E;AAC5E,iFAAiF;AACjF,kFAAkF;AAClF,4EAA4E;AAC5E,qCAAqC;AACrC,EAAE;AACF,uEAAuE;AACvE,iFAAiF;AACjF,iFAAiF;AACjF,4EAA4E;AAC5E,6EAA6E;AAC7E,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAgC;IAEhC,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG;QACZ,GAAG,OAAO;QACV,cAAc,EAAE,uBAAuB,CAAC,OAAO,CAAC,cAAc,CAAC;KAChE,CAAC;IACF,MAAM,aAAa,GAAG,uBAAuB,CAC3C,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,eAAe,CACtB,CAAC;IACF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,aAAa,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CACnE,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC;QACtC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QACpC,mBAAmB;KACpB,CAAC,CAAC;IACH,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,6BAA6B;IAC7B,MAAM,uBAAuB,GAAG,KAAK,CAAC,iBAAiB;QACrD,CAAC,CAAC,aAAa,CAAC,MAAM,CAClB,CAAC,cAAc,EAAE,EAAE,CACjB,cAAc,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,eAAe,CACxD;QACH,CAAC,CAAC,aAAa,CAAC;IAElB,gFAAgF;IAChF,+EAA+E;IAC/E,6EAA6E;IAC7E,oBAAoB;IACpB,MAAM,UAAU,GACd,IAAI,CAAC,gBAAgB,CAAC,IAAI;QAC1B,IAAI,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,UAAU,CAAC,MAAM;QACtB,uBAAuB,CAAC,MAAM,CAAC;IAEjC,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,EAAW,EAAE,EAAE;QACjC,IAAI,EAAE,EAAE,CAAC;YACP,cAAc,IAAI,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,WAAW,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,YAAY,EAAE,CAAC;IACjB,CAAC,CAAC;IACF,gFAAgF;IAChF,wCAAwC;IACxC,YAAY,EAAE,CAAC;IAEf,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC;QAC9C,kBAAkB,EAAE,gCAAgC,CAAC,KAAK,EAAE,KAAK,CAAC;QAClE,IAAI;QACJ,UAAU;QACV,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IAEH,IAAI,kBAAkB,GAAsB,EAAE,CAAC;IAC/C,IAAI,yBAAyB,GAAsB,EAAE,CAAC;IACtD,IAAI,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC/B,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC;YAC7C,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,6BAA6B,EAAE,KAAK,CAAC,6BAA6B;YAClE,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU;YACV,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,aAAa,EAAE,uBAAuB;SACvC,CAAC,CAAC;QACH,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB,CAAC;QACjD,yBAAyB,GAAG,QAAQ,CAAC,yBAAyB,CAAC;QAC/D,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,OAAO;QACP,cAAc;QACd,WAAW;QACX,kBAAkB;QAClB,yBAAyB;QACzB,UAAU;KACX,CAAC;AACJ,CAAC","sourcesContent":["import { DEFAULT_DOCUMENT_KIND } from \"../../../data/documents/documentConstants\";\nimport type { DocumentSummary } from \"../../../data/documents/documentSummary\";\nimport type { ProjectionUserKeyResolver } from \"../../../data/keyingProjectionVerification\";\nimport { sqlDocumentContainerProjectionPersistence } from \"../../../data/persistence/containers/documentContainerProjectionPersistence\";\nimport { listDocumentsByContainerIdsOrDocumentIds } from \"../../../data/persistence/documents/documentsPersistence\";\nimport type { SubtreePurgeRoot } from \"../../documents/subtreePurgeScope\";\nimport type { ContainerContentsPersistence } from \"../containerPersistence\";\nimport { unlinkRemoteContainerDocument } from \"../documentLinks\";\nimport {\n  purgeLocalContainerDocument,\n  purgeRemoteContainerDocument,\n} from \"../documentPurge\";\nimport type { ContainerState } from \"../remoteHydration\";\nimport type { ContainerContentsWorkflowRuntime } from \"../runtime\";\nimport type { PurgeProgress } from \"./purgeProgress\";\nimport {\n  collectSubtreeLeafFirst,\n  snapshotContainerStates,\n} from \"./purgeTreeCollection\";\nimport { deleteSubtreeContainers } from \"./purgeTreeContainerDeletion\";\nimport { createSubtreePurgeScope } from \"./purgeTreeScope\";\n\nexport { collectSubtreeLeafFirst } from \"./purgeTreeCollection\";\n\n// The store runtime satisfies the per-document purge/unlink workflows, so the\n// cascade reuses it verbatim.\ntype PurgeContainerTreeRuntime = ContainerContentsWorkflowRuntime;\n\ninterface PurgeContainerTreeInput {\n  readonly containersById: ReadonlyMap<string, ContainerState>;\n  readonly documentOperations?: SubtreeDocumentOperations | undefined;\n  // When true, tear down everything UNDER the root (its documents plus every\n  // descendant container) but never delete the root container itself. This is\n  // how \"Empty Trash\" reuses the same engine: the Trash bin is a protected system\n  // container that must survive while its whole contents are destroyed.\n  readonly keepRootContainer?: boolean;\n  readonly onProgress?: ((progress: PurgeProgress) => void) | undefined;\n  readonly persistence: ContainerContentsPersistence;\n  readonly prepareDocumentRotationSnapshot: (\n    document: DocumentSummary,\n  ) => Promise<Uint8Array | null>;\n  readonly resolveProjectionUserKey: ProjectionUserKeyResolver;\n  readonly rootContainerId: string;\n  readonly runtime: PurgeContainerTreeRuntime;\n  /** Stops a stale store generation between complete destructive units. */\n  readonly stillCurrent?: (() => boolean) | undefined;\n  // Checked at each unit boundary (between whole documents / whole containers),\n  // never mid-remote-call, so a cancelled run stops on a consistent prefix.\n  readonly signal?: AbortSignal | undefined;\n}\n\ninterface PurgeContainerTreeResult {\n  readonly aborted: boolean;\n  readonly completedCount: number;\n  readonly failedCount: number;\n  readonly purgedContainerIds: readonly string[];\n  readonly remoteDeletedContainerIds: readonly string[];\n  readonly totalCount: number;\n}\n\ninterface SubtreeDocumentPlan {\n  // Synced documents whose every link falls inside the subtree: reduce them to\n  // one retained link, as required by the purge endpoint, then destroy them.\n  readonly purge: readonly {\n    document: DocumentSummary;\n    unlinkContainerIds: readonly string[];\n  }[];\n  // Synced documents also linked outside the subtree: keep them, but unlink\n  // from each in-subtree container so the containers can be deleted.\n  readonly unlinkByDocument: ReadonlyMap<\n    string,\n    { document: DocumentSummary; containerIds: readonly string[] }\n  >;\n  // Never-synced documents (no remote id): destroy locally only.\n  readonly purgeLocal: readonly DocumentSummary[];\n}\n\ntype SubtreeDocumentDisposition =\n  | { kind: \"purge\"; unlinkContainerIds: readonly string[] }\n  | { kind: \"purge-local\" }\n  | { kind: \"unlink\"; containerIds: readonly string[] };\n\n// Destroy local-only documents locally. Destroy synced documents only when all\n// links are in the subtree; preserve documents with an external link. The purge\n// plan reduces owned documents to the server-required sole link first.\nexport function classifySubtreeDocument(input: {\n  readonly documentId: string | null;\n  readonly linkedContainerIds: readonly string[];\n  readonly preferredContainerId?: string | null | undefined;\n  readonly subtreeContainerIds: ReadonlySet<string>;\n}): SubtreeDocumentDisposition {\n  if (!input.documentId) {\n    return { kind: \"purge-local\" };\n  }\n  const hasExternalLink = input.linkedContainerIds.some(\n    (containerId) => !input.subtreeContainerIds.has(containerId),\n  );\n  if (!hasExternalLink) {\n    const linkedContainerIds = Array.from(\n      new Set(\n        input.linkedContainerIds.filter((containerId) =>\n          input.subtreeContainerIds.has(containerId),\n        ),\n      ),\n    );\n    const retainedContainerId =\n      input.preferredContainerId &&\n      linkedContainerIds.includes(input.preferredContainerId)\n        ? input.preferredContainerId\n        : linkedContainerIds[0];\n    return {\n      kind: \"purge\",\n      unlinkContainerIds: linkedContainerIds.filter(\n        (containerId) => containerId !== retainedContainerId,\n      ),\n    };\n  }\n  return {\n    kind: \"unlink\",\n    containerIds: input.linkedContainerIds.filter((containerId) =>\n      input.subtreeContainerIds.has(containerId),\n    ),\n  };\n}\n\nasync function planSubtreeDocuments(input: {\n  readonly execSql: PurgeContainerTreeRuntime[\"infra\"][\"execSql\"];\n  readonly subtreeContainerIds: ReadonlySet<string>;\n}): Promise<SubtreeDocumentPlan> {\n  const documents = await listDocumentsByContainerIdsOrDocumentIds(\n    input.execSql,\n    {\n      containerIds: [...input.subtreeContainerIds],\n      documentIds: [],\n    },\n  );\n  const remoteDocumentIds = documents.flatMap((document) =>\n    document.documentId ? [document.documentId] : [],\n  );\n  const linkedContainerIdsByDocumentId =\n    await sqlDocumentContainerProjectionPersistence.listLinkedContainerIdsByDocumentIds(\n      input.execSql,\n      remoteDocumentIds,\n    );\n\n  const purge: Array<{\n    document: DocumentSummary;\n    unlinkContainerIds: readonly string[];\n  }> = [];\n  const purgeLocal: DocumentSummary[] = [];\n  const unlinkByDocument = new Map<\n    string,\n    { document: DocumentSummary; containerIds: readonly string[] }\n  >();\n  for (const document of documents) {\n    const disposition = classifySubtreeDocument({\n      documentId: document.documentId ?? null,\n      linkedContainerIds: document.documentId\n        ? (linkedContainerIdsByDocumentId.get(document.documentId) ?? [])\n        : [],\n      preferredContainerId: document.containerId,\n      subtreeContainerIds: input.subtreeContainerIds,\n    });\n    if (disposition.kind === \"purge-local\") {\n      purgeLocal.push(document);\n    } else if (disposition.kind === \"purge\") {\n      purge.push({\n        document,\n        unlinkContainerIds: disposition.unlinkContainerIds,\n      });\n    } else if (document.documentId) {\n      unlinkByDocument.set(document.documentId, {\n        document,\n        containerIds: disposition.containerIds,\n      });\n    }\n  }\n\n  return { purge, purgeLocal, unlinkByDocument };\n}\n\nasync function unlinkSubtreeDocument(input: {\n  /** Rechecks the document and this exact unlink target before dispatch. */\n  readonly beforeSubmit: (targetContainerId: string) => Promise<boolean>;\n  readonly expectedSubtreeRoot: SubtreePurgeRoot;\n  readonly stillCurrent?: (() => boolean) | undefined;\n  readonly containerIds: readonly string[];\n  readonly document: DocumentSummary;\n  readonly prepareDocumentRotationSnapshot: PurgeContainerTreeInput[\"prepareDocumentRotationSnapshot\"];\n  readonly resolveProjectionUserKey: ProjectionUserKeyResolver;\n  readonly runtime: PurgeContainerTreeRuntime;\n}): Promise<boolean> {\n  const documentId = input.document.documentId;\n  if (!documentId) {\n    return true;\n  }\n  let rotationSnapshot: Uint8Array | null;\n  try {\n    rotationSnapshot = await input.prepareDocumentRotationSnapshot(\n      input.document,\n    );\n  } catch {\n    return false;\n  }\n  if (!rotationSnapshot) {\n    return false;\n  }\n  for (const containerId of input.containerIds) {\n    const result = await unlinkRemoteContainerDocument({\n      beforeSubmit: () => input.beforeSubmit(containerId),\n      documentId,\n      expectedSubtreeRoot: input.expectedSubtreeRoot,\n      isCurrent: input.stillCurrent,\n      noteId: input.document.id,\n      resolveProjectionUserKey: input.resolveProjectionUserKey,\n      rotationSnapshot,\n      runtime: input.runtime,\n      targetContainerId: containerId,\n    });\n    if (result === null) {\n      return false;\n    }\n  }\n  return true;\n}\n\ninterface SubtreeDocumentOperations {\n  readonly purgeLocal: (document: DocumentSummary) => Promise<boolean>;\n  readonly purgeRemote: (document: DocumentSummary) => Promise<boolean>;\n  readonly unlink: (\n    document: DocumentSummary,\n    containerIds: readonly string[],\n  ) => Promise<boolean>;\n}\n\nfunction resolveSubtreeDocumentOperations(\n  input: PurgeContainerTreeInput,\n  scope: ReturnType<typeof createSubtreePurgeScope>,\n): SubtreeDocumentOperations {\n  const expectedSubtreeRoot = selectedSubtreeRoot(input);\n  const operations: SubtreeDocumentOperations = input.documentOperations ?? {\n    purgeLocal: async (document) =>\n      (await purgeLocalContainerDocument({\n        beforeDeleteInTransaction: (execSql) =>\n          scope.assertLocalScopeInTransaction(\n            execSql,\n            document.containerId,\n            document.id,\n          ),\n        noteId: document.id,\n        expectedContainerId: document.containerId,\n        runtime: input.runtime,\n      })) !== null,\n    purgeRemote: async (document) =>\n      Boolean(\n        document.documentId &&\n          (await purgeRemoteContainerDocument({\n            beforeSubmit: () => scope.allowsDocument(document),\n            documentId: document.documentId,\n            expectedSubtreeRoot,\n            stillCurrent: input.stillCurrent,\n            documentKind: document.documentKind ?? DEFAULT_DOCUMENT_KIND,\n            noteId: document.id,\n            resolveProjectionUserKey: input.resolveProjectionUserKey,\n            runtime: input.runtime,\n          })),\n      ),\n    unlink: (document, containerIds) =>\n      unlinkSubtreeDocument({\n        // Target preparation and signing can outlast the upfront checks.\n        beforeSubmit: async (containerId) =>\n          (await scope.allowsDocument(document)) &&\n          (await scope.allowsContainer(containerId)),\n        containerIds,\n        document,\n        expectedSubtreeRoot,\n        stillCurrent: input.stillCurrent,\n        prepareDocumentRotationSnapshot: input.prepareDocumentRotationSnapshot,\n        resolveProjectionUserKey: input.resolveProjectionUserKey,\n        runtime: input.runtime,\n      }),\n  };\n  return {\n    purgeLocal: async (document) =>\n      (await scope.allowsDocument(document)) &&\n      (await operations.purgeLocal(document)),\n    purgeRemote: async (document) =>\n      (await scope.allowsDocument(document)) &&\n      (await operations.purgeRemote(document)),\n    unlink: async (document, containerIds) => {\n      if (!(await scope.allowsDocument(document))) return false;\n      for (const containerId of containerIds) {\n        if (!(await scope.allowsContainer(containerId))) return false;\n      }\n      return operations.unlink(document, containerIds);\n    },\n  };\n}\n\ninterface SubtreeTeardownResult {\n  readonly aborted: boolean;\n}\n\n// Signed request paths must keep the root under the parent it was selected\n// from; a settled restore elsewhere preserves the root's own documents too.\nfunction selectedSubtreeRoot(\n  input: Pick<PurgeContainerTreeInput, \"containersById\" | \"rootContainerId\">,\n): SubtreePurgeRoot {\n  return {\n    id: input.rootContainerId,\n    parentId:\n      input.containersById.get(input.rootContainerId)?.container.parentId ??\n      null,\n  };\n}\n\nfunction purgeWasCancelled(input: {\n  readonly signal?: AbortSignal | undefined;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): boolean {\n  return input.signal?.aborted === true || input.stillCurrent?.() === false;\n}\n\n// Tear down one whole document per progress step. A failed document is skipped,\n// leaving its container undeletable while the remaining subtree work continues.\n// Cancellation is honored only between complete document operations.\nasync function teardownSubtreeDocuments(input: {\n  readonly documentOperations: SubtreeDocumentOperations;\n  readonly plan: SubtreeDocumentPlan;\n  readonly reportStep: (ok: boolean) => void;\n  readonly signal?: AbortSignal | undefined;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<SubtreeTeardownResult> {\n  for (const {\n    document,\n    containerIds,\n  } of input.plan.unlinkByDocument.values()) {\n    if (purgeWasCancelled(input)) {\n      return { aborted: true };\n    }\n    const unlinked = await input.documentOperations.unlink(\n      document,\n      containerIds,\n    );\n    input.reportStep(unlinked);\n  }\n  for (const { document, unlinkContainerIds } of input.plan.purge) {\n    if (purgeWasCancelled(input)) {\n      return { aborted: true };\n    }\n    if (\n      unlinkContainerIds.length > 0 &&\n      !(await input.documentOperations.unlink(document, unlinkContainerIds))\n    ) {\n      input.reportStep(false);\n      continue;\n    }\n    input.reportStep(await input.documentOperations.purgeRemote(document));\n  }\n  for (const document of input.plan.purgeLocal) {\n    if (purgeWasCancelled(input)) {\n      return { aborted: true };\n    }\n    input.reportStep(await input.documentOperations.purgeLocal(document));\n  }\n  return { aborted: false };\n}\n\n// Permanently destroy a folder that lives inside Trash, including everything\n// under it (or, with keepRootContainer, everything under the Trash bin while\n// leaving the bin in place — this is \"Empty Trash\"). Documents are destroyed only\n// when the subtree holds their last link; multi-folder documents are unlinked\n// from the subtree and preserved. Containers are deleted leaf-first so each\n// delete obeys the leaf-only constraint the store and server enforce. Every step\n// is remote-first then local (the per-document and per-container workflows handle\n// that internally), so a cancel between steps leaves local state reflecting\n// exactly the completed remote work.\n//\n// Progress is determinate: the plan (a pure read) completes before any\n// destructive step, so onProgress reports completed/failed against a total known\n// up front. A failed item is skipped rather than aborting the run, so the result\n// reports whatever prefix was actually destroyed alongside completed/failed\n// counts and whether a cancellation cut it short. Returns null only when the\n// target container is absent from the snapshot.\nexport async function purgeContainerTree(\n  request: PurgeContainerTreeInput,\n): Promise<PurgeContainerTreeResult | null> {\n  if (purgeWasCancelled(request)) {\n    return null;\n  }\n  const input = {\n    ...request,\n    containersById: snapshotContainerStates(request.containersById),\n  };\n  const subtreeStates = collectSubtreeLeafFirst(\n    input.containersById,\n    input.rootContainerId,\n  );\n  if (subtreeStates.length === 0) {\n    return null;\n  }\n  const subtreeContainerIds = new Set(\n    subtreeStates.map((containerState) => containerState.container.id),\n  );\n\n  const plan = await planSubtreeDocuments({\n    execSql: input.runtime.infra.execSql,\n    subtreeContainerIds,\n  });\n  if (purgeWasCancelled(input)) {\n    return null;\n  }\n\n  // Empty Trash keeps the Trash bin itself: tear down everything it holds, but\n  // exclude the root from the container deletions (deleting a system container\n  // would be rejected anyway).\n  const containerStatesToDelete = input.keepRootContainer\n    ? subtreeStates.filter(\n        (containerState) =>\n          containerState.container.id !== input.rootContainerId,\n      )\n    : subtreeStates;\n\n  // The total is fully known here — planning is a pure read that completes before\n  // any destructive step. Unlink work is counted per document (not per container\n  // link) so completed can never exceed total even when a document has several\n  // in-subtree links.\n  const totalCount =\n    plan.unlinkByDocument.size +\n    plan.purge.length +\n    plan.purgeLocal.length +\n    containerStatesToDelete.length;\n\n  let completedCount = 0;\n  let failedCount = 0;\n  const emitProgress = () => {\n    input.onProgress?.({ completedCount, failedCount, totalCount });\n  };\n  const reportStep = (ok: boolean) => {\n    if (ok) {\n      completedCount += 1;\n    } else {\n      failedCount += 1;\n    }\n    emitProgress();\n  };\n  // Emit the initial 0/total so a determinate bar renders immediately, before the\n  // first (potentially slow) remote call.\n  emitProgress();\n\n  const scope = createSubtreePurgeScope(input);\n  const teardown = await teardownSubtreeDocuments({\n    documentOperations: resolveSubtreeDocumentOperations(input, scope),\n    plan,\n    reportStep,\n    signal: input.signal,\n    stillCurrent: input.stillCurrent,\n  });\n\n  let purgedContainerIds: readonly string[] = [];\n  let remoteDeletedContainerIds: readonly string[] = [];\n  let aborted = teardown.aborted;\n  if (!teardown.aborted) {\n    const deletion = await deleteSubtreeContainers({\n      allowsContainer: scope.allowsContainer,\n      allowsLocalScopeInTransaction: scope.allowsLocalScopeInTransaction,\n      root: selectedSubtreeRoot(input),\n      persistence: input.persistence,\n      reportStep,\n      runtime: input.runtime,\n      signal: input.signal,\n      stillCurrent: input.stillCurrent,\n      subtreeStates: containerStatesToDelete,\n    });\n    purgedContainerIds = deletion.purgedContainerIds;\n    remoteDeletedContainerIds = deletion.remoteDeletedContainerIds;\n    aborted = deletion.aborted;\n  }\n\n  return {\n    aborted,\n    completedCount,\n    failedCount,\n    purgedContainerIds,\n    remoteDeletedContainerIds,\n    totalCount,\n  };\n}\n"]}
+{"version":3,"file":"purgeTree.js","sourceRoot":"","sources":["purgeTree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAGlF,OAAO,EAAE,yCAAyC,EAAE,MAAM,6EAA6E,CAAC;AACxI,OAAO,EAAE,wCAAwC,EAAE,MAAM,0DAA0D,CAAC;AAGpH,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAGjE,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AA4DhE,+EAA+E;AAC/E,gFAAgF;AAChF,uEAAuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,KAKvC;IACC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,kBAAkB,CAAC,IAAI,CACnD,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CAC7D,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CACnC,IAAI,GAAG,CACL,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAC9C,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CAC3C,CACF,CACF,CAAC;QACF,MAAM,mBAAmB,GACvB,KAAK,CAAC,oBAAoB;YAC1B,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC;YACrD,CAAC,CAAC,KAAK,CAAC,oBAAoB;YAC5B,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,OAAO;YACb,kBAAkB,EAAE,kBAAkB,CAAC,MAAM,CAC3C,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,KAAK,mBAAmB,CACrD;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAC5D,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CAC3C;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAGnC;IACC,MAAM,SAAS,GAAG,MAAM,wCAAwC,CAC9D,KAAK,CAAC,OAAO,EACb;QACE,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,mBAAmB,CAAC;QAC5C,WAAW,EAAE,EAAE;KAChB,CACF,CAAC;IACF,MAAM,iBAAiB,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CACvD,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;IACF,MAAM,8BAA8B,GAClC,MAAM,yCAAyC,CAAC,mCAAmC,CACjF,KAAK,CAAC,OAAO,EACb,iBAAiB,CAClB,CAAC;IAEJ,MAAM,KAAK,GAGN,EAAE,CAAC;IACR,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAG7B,CAAC;IACJ,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,uBAAuB,CAAC;YAC1C,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,IAAI;YACvC,kBAAkB,EAAE,QAAQ,CAAC,UAAU;gBACrC,CAAC,CAAC,CAAC,8BAA8B,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACjE,CAAC,CAAC,EAAE;YACN,oBAAoB,EAAE,QAAQ,CAAC,WAAW;YAC1C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC/C,CAAC,CAAC;QACH,IAAI,WAAW,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACvC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ;gBACR,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;aACnD,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC/B,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE;gBACxC,QAAQ;gBACR,YAAY,EAAE,WAAW,CAAC,YAAY;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,KAUpC;IACC,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,gBAAmC,CAAC;IACxC,IAAI,CAAC;QACH,gBAAgB,GAAG,MAAM,KAAK,CAAC,+BAA+B,CAC5D,KAAK,CAAC,QAAQ,CACf,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC;YACjD,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC;YACnD,UAAU;YACV,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,SAAS,EAAE,KAAK,CAAC,YAAY;YAC7B,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YACzB,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,gBAAgB;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAWD,SAAS,gCAAgC,CACvC,KAA8B,EAC9B,KAAiD;IAEjD,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,UAAU,GAA8B,KAAK,CAAC,kBAAkB,IAAI;QACxE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAC7B,CAAC,MAAM,2BAA2B,CAAC;YACjC,yBAAyB,EAAE,CAAC,OAAO,EAAE,EAAE,CACrC,KAAK,CAAC,6BAA6B,CACjC,OAAO,EACP,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,EAAE,CACZ;YACH,MAAM,EAAE,QAAQ,CAAC,EAAE;YACnB,mBAAmB,EAAE,QAAQ,CAAC,WAAW;YACzC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC,KAAK,IAAI;QACd,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAC9B,OAAO,CACL,QAAQ,CAAC,UAAU;YACjB,CAAC,MAAM,4BAA4B,CAAC;gBAClC,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC;gBAClD,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,mBAAmB;gBACnB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,qBAAqB;gBAC5D,MAAM,EAAE,QAAQ,CAAC,EAAE;gBACnB,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;gBACxD,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC,CACN;QACH,MAAM,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,CACjC,qBAAqB,CAAC;YACpB,iEAAiE;YACjE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAClC,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACtC,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YAC5C,YAAY;YACZ,QAAQ;YACR,mBAAmB;YACnB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;YACtE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;KACL,CAAC;IACF,OAAO;QACL,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAC7B,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAC9B,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;YACvC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1D,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;gBACvC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;YAChE,CAAC;YACD,OAAO,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC;AAMD,2EAA2E;AAC3E,4EAA4E;AAC5E,SAAS,mBAAmB,CAC1B,KAA0E;IAE1E,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,eAAe;QACzB,QAAQ,EACN,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,QAAQ;YACnE,IAAI;KACP,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAG1B;IACC,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,CAAC;AAC5E,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,qEAAqE;AACrE,KAAK,UAAU,wBAAwB,CAAC,KAMvC;IACC,KAAK,MAAM,EACT,QAAQ,EACR,YAAY,GACb,IAAI,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,MAAM,CACpD,QAAQ,EACR,YAAY,CACb,CAAC;QACF,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IACD,KAAK,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChE,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,IACE,kBAAkB,CAAC,MAAM,GAAG,CAAC;YAC7B,CAAC,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,EACtE,CAAC;YACD,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7C,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,kFAAkF;AAClF,8EAA8E;AAC9E,4EAA4E;AAC5E,iFAAiF;AACjF,kFAAkF;AAClF,4EAA4E;AAC5E,qCAAqC;AACrC,EAAE;AACF,uEAAuE;AACvE,iFAAiF;AACjF,iFAAiF;AACjF,4EAA4E;AAC5E,6EAA6E;AAC7E,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAgC;IAEhC,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG;QACZ,GAAG,OAAO;QACV,cAAc,EAAE,uBAAuB,CAAC,OAAO,CAAC,cAAc,CAAC;KAChE,CAAC;IACF,MAAM,aAAa,GAAG,uBAAuB,CAC3C,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,eAAe,CACtB,CAAC;IACF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,aAAa,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CACnE,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC;QACtC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QACpC,mBAAmB;KACpB,CAAC,CAAC;IACH,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,6BAA6B;IAC7B,MAAM,uBAAuB,GAAG,KAAK,CAAC,iBAAiB;QACrD,CAAC,CAAC,aAAa,CAAC,MAAM,CAClB,CAAC,cAAc,EAAE,EAAE,CACjB,cAAc,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,eAAe,CACxD;QACH,CAAC,CAAC,aAAa,CAAC;IAElB,gFAAgF;IAChF,+EAA+E;IAC/E,6EAA6E;IAC7E,oBAAoB;IACpB,MAAM,UAAU,GACd,IAAI,CAAC,gBAAgB,CAAC,IAAI;QAC1B,IAAI,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,UAAU,CAAC,MAAM;QACtB,uBAAuB,CAAC,MAAM,CAAC;IAEjC,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,EAAW,EAAE,EAAE;QACjC,IAAI,EAAE,EAAE,CAAC;YACP,cAAc,IAAI,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,WAAW,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,YAAY,EAAE,CAAC;IACjB,CAAC,CAAC;IACF,gFAAgF;IAChF,wCAAwC;IACxC,YAAY,EAAE,CAAC;IAEf,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC;QAC9C,kBAAkB,EAAE,gCAAgC,CAAC,KAAK,EAAE,KAAK,CAAC;QAClE,IAAI;QACJ,UAAU;QACV,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IAEH,IAAI,kBAAkB,GAAsB,EAAE,CAAC;IAC/C,IAAI,yBAAyB,GAAsB,EAAE,CAAC;IACtD,IAAI,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC/B,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC;YAC7C,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,6BAA6B,EAAE,KAAK,CAAC,6BAA6B;YAClE,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU;YACV,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,aAAa,EAAE,uBAAuB;SACvC,CAAC,CAAC;QACH,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB,CAAC;QACjD,yBAAyB,GAAG,QAAQ,CAAC,yBAAyB,CAAC;QAC/D,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,OAAO;QACP,cAAc;QACd,WAAW;QACX,kBAAkB;QAClB,yBAAyB;QACzB,UAAU;KACX,CAAC;AACJ,CAAC","sourcesContent":["import { DEFAULT_DOCUMENT_KIND } from \"../../../data/documents/documentConstants\";\nimport type { DocumentSummary } from \"../../../data/documents/documentSummary\";\nimport type { ProjectionUserKeyResolver } from \"../../../data/keyingProjectionVerification\";\nimport { sqlDocumentContainerProjectionPersistence } from \"../../../data/persistence/containers/documentContainerProjectionPersistence\";\nimport { listDocumentsByContainerIdsOrDocumentIds } from \"../../../data/persistence/documents/documentsPersistence\";\nimport type { SubtreePurgeRoot } from \"../../documents/purge/subtreePurgeScope\";\nimport type { ContainerContentsPersistence } from \"../containerPersistence\";\nimport { unlinkRemoteContainerDocument } from \"../documentLinks\";\nimport type { ContainerState } from \"../remoteHydration\";\nimport type { ContainerContentsWorkflowRuntime } from \"../runtime\";\nimport {\n  purgeLocalContainerDocument,\n  purgeRemoteContainerDocument,\n} from \"../tombstones/documentPurge\";\nimport type { PurgeProgress } from \"./purgeProgress\";\nimport {\n  collectSubtreeLeafFirst,\n  snapshotContainerStates,\n} from \"./purgeTreeCollection\";\nimport { deleteSubtreeContainers } from \"./purgeTreeContainerDeletion\";\nimport { createSubtreePurgeScope } from \"./purgeTreeScope\";\n\nexport { collectSubtreeLeafFirst } from \"./purgeTreeCollection\";\n\n// The store runtime satisfies the per-document purge/unlink workflows, so the\n// cascade reuses it verbatim.\ntype PurgeContainerTreeRuntime = ContainerContentsWorkflowRuntime;\n\ninterface PurgeContainerTreeInput {\n  readonly containersById: ReadonlyMap<string, ContainerState>;\n  readonly documentOperations?: SubtreeDocumentOperations | undefined;\n  // When true, tear down everything UNDER the root (its documents plus every\n  // descendant container) but never delete the root container itself. This is\n  // how \"Empty Trash\" reuses the same engine: the Trash bin is a protected system\n  // container that must survive while its whole contents are destroyed.\n  readonly keepRootContainer?: boolean;\n  readonly onProgress?: ((progress: PurgeProgress) => void) | undefined;\n  readonly persistence: ContainerContentsPersistence;\n  readonly prepareDocumentRotationSnapshot: (\n    document: DocumentSummary,\n  ) => Promise<Uint8Array | null>;\n  readonly resolveProjectionUserKey: ProjectionUserKeyResolver;\n  readonly rootContainerId: string;\n  readonly runtime: PurgeContainerTreeRuntime;\n  /** Stops a stale store generation between complete destructive units. */\n  readonly stillCurrent?: (() => boolean) | undefined;\n  // Checked at each unit boundary (between whole documents / whole containers),\n  // never mid-remote-call, so a cancelled run stops on a consistent prefix.\n  readonly signal?: AbortSignal | undefined;\n}\n\ninterface PurgeContainerTreeResult {\n  readonly aborted: boolean;\n  readonly completedCount: number;\n  readonly failedCount: number;\n  readonly purgedContainerIds: readonly string[];\n  readonly remoteDeletedContainerIds: readonly string[];\n  readonly totalCount: number;\n}\n\ninterface SubtreeDocumentPlan {\n  // Synced documents whose every link falls inside the subtree: reduce them to\n  // one retained link, as required by the purge endpoint, then destroy them.\n  readonly purge: readonly {\n    document: DocumentSummary;\n    unlinkContainerIds: readonly string[];\n  }[];\n  // Synced documents also linked outside the subtree: keep them, but unlink\n  // from each in-subtree container so the containers can be deleted.\n  readonly unlinkByDocument: ReadonlyMap<\n    string,\n    { document: DocumentSummary; containerIds: readonly string[] }\n  >;\n  // Never-synced documents (no remote id): destroy locally only.\n  readonly purgeLocal: readonly DocumentSummary[];\n}\n\ntype SubtreeDocumentDisposition =\n  | { kind: \"purge\"; unlinkContainerIds: readonly string[] }\n  | { kind: \"purge-local\" }\n  | { kind: \"unlink\"; containerIds: readonly string[] };\n\n// Destroy local-only documents locally. Destroy synced documents only when all\n// links are in the subtree; preserve documents with an external link. The purge\n// plan reduces owned documents to the server-required sole link first.\nexport function classifySubtreeDocument(input: {\n  readonly documentId: string | null;\n  readonly linkedContainerIds: readonly string[];\n  readonly preferredContainerId?: string | null | undefined;\n  readonly subtreeContainerIds: ReadonlySet<string>;\n}): SubtreeDocumentDisposition {\n  if (!input.documentId) {\n    return { kind: \"purge-local\" };\n  }\n  const hasExternalLink = input.linkedContainerIds.some(\n    (containerId) => !input.subtreeContainerIds.has(containerId),\n  );\n  if (!hasExternalLink) {\n    const linkedContainerIds = Array.from(\n      new Set(\n        input.linkedContainerIds.filter((containerId) =>\n          input.subtreeContainerIds.has(containerId),\n        ),\n      ),\n    );\n    const retainedContainerId =\n      input.preferredContainerId &&\n      linkedContainerIds.includes(input.preferredContainerId)\n        ? input.preferredContainerId\n        : linkedContainerIds[0];\n    return {\n      kind: \"purge\",\n      unlinkContainerIds: linkedContainerIds.filter(\n        (containerId) => containerId !== retainedContainerId,\n      ),\n    };\n  }\n  return {\n    kind: \"unlink\",\n    containerIds: input.linkedContainerIds.filter((containerId) =>\n      input.subtreeContainerIds.has(containerId),\n    ),\n  };\n}\n\nasync function planSubtreeDocuments(input: {\n  readonly execSql: PurgeContainerTreeRuntime[\"infra\"][\"execSql\"];\n  readonly subtreeContainerIds: ReadonlySet<string>;\n}): Promise<SubtreeDocumentPlan> {\n  const documents = await listDocumentsByContainerIdsOrDocumentIds(\n    input.execSql,\n    {\n      containerIds: [...input.subtreeContainerIds],\n      documentIds: [],\n    },\n  );\n  const remoteDocumentIds = documents.flatMap((document) =>\n    document.documentId ? [document.documentId] : [],\n  );\n  const linkedContainerIdsByDocumentId =\n    await sqlDocumentContainerProjectionPersistence.listLinkedContainerIdsByDocumentIds(\n      input.execSql,\n      remoteDocumentIds,\n    );\n\n  const purge: Array<{\n    document: DocumentSummary;\n    unlinkContainerIds: readonly string[];\n  }> = [];\n  const purgeLocal: DocumentSummary[] = [];\n  const unlinkByDocument = new Map<\n    string,\n    { document: DocumentSummary; containerIds: readonly string[] }\n  >();\n  for (const document of documents) {\n    const disposition = classifySubtreeDocument({\n      documentId: document.documentId ?? null,\n      linkedContainerIds: document.documentId\n        ? (linkedContainerIdsByDocumentId.get(document.documentId) ?? [])\n        : [],\n      preferredContainerId: document.containerId,\n      subtreeContainerIds: input.subtreeContainerIds,\n    });\n    if (disposition.kind === \"purge-local\") {\n      purgeLocal.push(document);\n    } else if (disposition.kind === \"purge\") {\n      purge.push({\n        document,\n        unlinkContainerIds: disposition.unlinkContainerIds,\n      });\n    } else if (document.documentId) {\n      unlinkByDocument.set(document.documentId, {\n        document,\n        containerIds: disposition.containerIds,\n      });\n    }\n  }\n\n  return { purge, purgeLocal, unlinkByDocument };\n}\n\nasync function unlinkSubtreeDocument(input: {\n  /** Rechecks the document and this exact unlink target before dispatch. */\n  readonly beforeSubmit: (targetContainerId: string) => Promise<boolean>;\n  readonly expectedSubtreeRoot: SubtreePurgeRoot;\n  readonly stillCurrent?: (() => boolean) | undefined;\n  readonly containerIds: readonly string[];\n  readonly document: DocumentSummary;\n  readonly prepareDocumentRotationSnapshot: PurgeContainerTreeInput[\"prepareDocumentRotationSnapshot\"];\n  readonly resolveProjectionUserKey: ProjectionUserKeyResolver;\n  readonly runtime: PurgeContainerTreeRuntime;\n}): Promise<boolean> {\n  const documentId = input.document.documentId;\n  if (!documentId) {\n    return true;\n  }\n  let rotationSnapshot: Uint8Array | null;\n  try {\n    rotationSnapshot = await input.prepareDocumentRotationSnapshot(\n      input.document,\n    );\n  } catch {\n    return false;\n  }\n  if (!rotationSnapshot) {\n    return false;\n  }\n  for (const containerId of input.containerIds) {\n    const result = await unlinkRemoteContainerDocument({\n      beforeSubmit: () => input.beforeSubmit(containerId),\n      documentId,\n      expectedSubtreeRoot: input.expectedSubtreeRoot,\n      isCurrent: input.stillCurrent,\n      noteId: input.document.id,\n      resolveProjectionUserKey: input.resolveProjectionUserKey,\n      rotationSnapshot,\n      runtime: input.runtime,\n      targetContainerId: containerId,\n    });\n    if (result === null) {\n      return false;\n    }\n  }\n  return true;\n}\n\ninterface SubtreeDocumentOperations {\n  readonly purgeLocal: (document: DocumentSummary) => Promise<boolean>;\n  readonly purgeRemote: (document: DocumentSummary) => Promise<boolean>;\n  readonly unlink: (\n    document: DocumentSummary,\n    containerIds: readonly string[],\n  ) => Promise<boolean>;\n}\n\nfunction resolveSubtreeDocumentOperations(\n  input: PurgeContainerTreeInput,\n  scope: ReturnType<typeof createSubtreePurgeScope>,\n): SubtreeDocumentOperations {\n  const expectedSubtreeRoot = selectedSubtreeRoot(input);\n  const operations: SubtreeDocumentOperations = input.documentOperations ?? {\n    purgeLocal: async (document) =>\n      (await purgeLocalContainerDocument({\n        beforeDeleteInTransaction: (execSql) =>\n          scope.assertLocalScopeInTransaction(\n            execSql,\n            document.containerId,\n            document.id,\n          ),\n        noteId: document.id,\n        expectedContainerId: document.containerId,\n        runtime: input.runtime,\n      })) !== null,\n    purgeRemote: async (document) =>\n      Boolean(\n        document.documentId &&\n          (await purgeRemoteContainerDocument({\n            beforeSubmit: () => scope.allowsDocument(document),\n            documentId: document.documentId,\n            expectedSubtreeRoot,\n            stillCurrent: input.stillCurrent,\n            documentKind: document.documentKind ?? DEFAULT_DOCUMENT_KIND,\n            noteId: document.id,\n            resolveProjectionUserKey: input.resolveProjectionUserKey,\n            runtime: input.runtime,\n          })),\n      ),\n    unlink: (document, containerIds) =>\n      unlinkSubtreeDocument({\n        // Target preparation and signing can outlast the upfront checks.\n        beforeSubmit: async (containerId) =>\n          (await scope.allowsDocument(document)) &&\n          (await scope.allowsContainer(containerId)),\n        containerIds,\n        document,\n        expectedSubtreeRoot,\n        stillCurrent: input.stillCurrent,\n        prepareDocumentRotationSnapshot: input.prepareDocumentRotationSnapshot,\n        resolveProjectionUserKey: input.resolveProjectionUserKey,\n        runtime: input.runtime,\n      }),\n  };\n  return {\n    purgeLocal: async (document) =>\n      (await scope.allowsDocument(document)) &&\n      (await operations.purgeLocal(document)),\n    purgeRemote: async (document) =>\n      (await scope.allowsDocument(document)) &&\n      (await operations.purgeRemote(document)),\n    unlink: async (document, containerIds) => {\n      if (!(await scope.allowsDocument(document))) return false;\n      for (const containerId of containerIds) {\n        if (!(await scope.allowsContainer(containerId))) return false;\n      }\n      return operations.unlink(document, containerIds);\n    },\n  };\n}\n\ninterface SubtreeTeardownResult {\n  readonly aborted: boolean;\n}\n\n// Signed request paths must keep the root under the parent it was selected\n// from; a settled restore elsewhere preserves the root's own documents too.\nfunction selectedSubtreeRoot(\n  input: Pick<PurgeContainerTreeInput, \"containersById\" | \"rootContainerId\">,\n): SubtreePurgeRoot {\n  return {\n    id: input.rootContainerId,\n    parentId:\n      input.containersById.get(input.rootContainerId)?.container.parentId ??\n      null,\n  };\n}\n\nfunction purgeWasCancelled(input: {\n  readonly signal?: AbortSignal | undefined;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): boolean {\n  return input.signal?.aborted === true || input.stillCurrent?.() === false;\n}\n\n// Tear down one whole document per progress step. A failed document is skipped,\n// leaving its container undeletable while the remaining subtree work continues.\n// Cancellation is honored only between complete document operations.\nasync function teardownSubtreeDocuments(input: {\n  readonly documentOperations: SubtreeDocumentOperations;\n  readonly plan: SubtreeDocumentPlan;\n  readonly reportStep: (ok: boolean) => void;\n  readonly signal?: AbortSignal | undefined;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<SubtreeTeardownResult> {\n  for (const {\n    document,\n    containerIds,\n  } of input.plan.unlinkByDocument.values()) {\n    if (purgeWasCancelled(input)) {\n      return { aborted: true };\n    }\n    const unlinked = await input.documentOperations.unlink(\n      document,\n      containerIds,\n    );\n    input.reportStep(unlinked);\n  }\n  for (const { document, unlinkContainerIds } of input.plan.purge) {\n    if (purgeWasCancelled(input)) {\n      return { aborted: true };\n    }\n    if (\n      unlinkContainerIds.length > 0 &&\n      !(await input.documentOperations.unlink(document, unlinkContainerIds))\n    ) {\n      input.reportStep(false);\n      continue;\n    }\n    input.reportStep(await input.documentOperations.purgeRemote(document));\n  }\n  for (const document of input.plan.purgeLocal) {\n    if (purgeWasCancelled(input)) {\n      return { aborted: true };\n    }\n    input.reportStep(await input.documentOperations.purgeLocal(document));\n  }\n  return { aborted: false };\n}\n\n// Permanently destroy a folder that lives inside Trash, including everything\n// under it (or, with keepRootContainer, everything under the Trash bin while\n// leaving the bin in place — this is \"Empty Trash\"). Documents are destroyed only\n// when the subtree holds their last link; multi-folder documents are unlinked\n// from the subtree and preserved. Containers are deleted leaf-first so each\n// delete obeys the leaf-only constraint the store and server enforce. Every step\n// is remote-first then local (the per-document and per-container workflows handle\n// that internally), so a cancel between steps leaves local state reflecting\n// exactly the completed remote work.\n//\n// Progress is determinate: the plan (a pure read) completes before any\n// destructive step, so onProgress reports completed/failed against a total known\n// up front. A failed item is skipped rather than aborting the run, so the result\n// reports whatever prefix was actually destroyed alongside completed/failed\n// counts and whether a cancellation cut it short. Returns null only when the\n// target container is absent from the snapshot.\nexport async function purgeContainerTree(\n  request: PurgeContainerTreeInput,\n): Promise<PurgeContainerTreeResult | null> {\n  if (purgeWasCancelled(request)) {\n    return null;\n  }\n  const input = {\n    ...request,\n    containersById: snapshotContainerStates(request.containersById),\n  };\n  const subtreeStates = collectSubtreeLeafFirst(\n    input.containersById,\n    input.rootContainerId,\n  );\n  if (subtreeStates.length === 0) {\n    return null;\n  }\n  const subtreeContainerIds = new Set(\n    subtreeStates.map((containerState) => containerState.container.id),\n  );\n\n  const plan = await planSubtreeDocuments({\n    execSql: input.runtime.infra.execSql,\n    subtreeContainerIds,\n  });\n  if (purgeWasCancelled(input)) {\n    return null;\n  }\n\n  // Empty Trash keeps the Trash bin itself: tear down everything it holds, but\n  // exclude the root from the container deletions (deleting a system container\n  // would be rejected anyway).\n  const containerStatesToDelete = input.keepRootContainer\n    ? subtreeStates.filter(\n        (containerState) =>\n          containerState.container.id !== input.rootContainerId,\n      )\n    : subtreeStates;\n\n  // The total is fully known here — planning is a pure read that completes before\n  // any destructive step. Unlink work is counted per document (not per container\n  // link) so completed can never exceed total even when a document has several\n  // in-subtree links.\n  const totalCount =\n    plan.unlinkByDocument.size +\n    plan.purge.length +\n    plan.purgeLocal.length +\n    containerStatesToDelete.length;\n\n  let completedCount = 0;\n  let failedCount = 0;\n  const emitProgress = () => {\n    input.onProgress?.({ completedCount, failedCount, totalCount });\n  };\n  const reportStep = (ok: boolean) => {\n    if (ok) {\n      completedCount += 1;\n    } else {\n      failedCount += 1;\n    }\n    emitProgress();\n  };\n  // Emit the initial 0/total so a determinate bar renders immediately, before the\n  // first (potentially slow) remote call.\n  emitProgress();\n\n  const scope = createSubtreePurgeScope(input);\n  const teardown = await teardownSubtreeDocuments({\n    documentOperations: resolveSubtreeDocumentOperations(input, scope),\n    plan,\n    reportStep,\n    signal: input.signal,\n    stillCurrent: input.stillCurrent,\n  });\n\n  let purgedContainerIds: readonly string[] = [];\n  let remoteDeletedContainerIds: readonly string[] = [];\n  let aborted = teardown.aborted;\n  if (!teardown.aborted) {\n    const deletion = await deleteSubtreeContainers({\n      allowsContainer: scope.allowsContainer,\n      allowsLocalScopeInTransaction: scope.allowsLocalScopeInTransaction,\n      root: selectedSubtreeRoot(input),\n      persistence: input.persistence,\n      reportStep,\n      runtime: input.runtime,\n      signal: input.signal,\n      stillCurrent: input.stillCurrent,\n      subtreeStates: containerStatesToDelete,\n    });\n    purgedContainerIds = deletion.purgedContainerIds;\n    remoteDeletedContainerIds = deletion.remoteDeletedContainerIds;\n    aborted = deletion.aborted;\n  }\n\n  return {\n    aborted,\n    completedCount,\n    failedCount,\n    purgedContainerIds,\n    remoteDeletedContainerIds,\n    totalCount,\n  };\n}\n"]}