@tearleads/client-sdk 0.1.62 → 0.1.64

package/stores/documents/documentStore/mutations.js.map

@@ -1 +1 @@
-{"version":3,"file":"mutations.js","sourceRoot":"","sources":["mutations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EACL,0BAA0B,EAE1B,yBAAyB,GAC1B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAKvD,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kCAAkC,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EACL,gBAAgB,EAIhB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,kCAAkC,EAAE,MAAM,kBAAkB,CAAC;AAEtE,4EAA4E;AAC5E,MAAM,oBAAoB,GAAG,sCAAsC,CAAC;AACpE,MAAM,qBAAqB,GAAG,uCAAuC,CAAC;AAEtE,SAAS,mCAAmC,CAC1C,OAAgC,EAChC,MAAkB;IAElB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,OAAO,EAAE,cAAc,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,aAAa,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAyB,EACzB,eAAuB,EACvB,QAAuB;IAEvB,OAAO,CACL,KAAK,CAAC,oBAAoB,KAAK,eAAe,IAAI,KAAK,CAAC,GAAG,KAAK,QAAQ,CACzE,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAyB,EACzB,eAAuB;IAEvB,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,KAAK,CAAC,oBAAoB,KAAK,eAAe,EAAE,CAAC;QACnD,OAAO;IACT,CAAC;IAED,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACjD,OAAO;IACT,CAAC;IAED,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAyB,EACzB,KAAa;IAEb,mBAAmB,CAAC,KAAK,EAAE;QACzB,GAAG,KAAK,CAAC,QAAQ;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,0BAA0B,CAC/B;YACE,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;YACzC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;YACjD,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACtC,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC,CAAC;SACJ,EACD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CACvC,CAAC,KAAK;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAyB,EACzB,KAAa;IAEb,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,oBAAoB,CAAC;IAEnD,2EAA2E;IAC3E,6EAA6E;IAC7E,wEAAwE;IACxE,KAAK,CAAC,kBAAkB,IAAI,CAAC,CAAC;IAC9B,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU;SAChC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;SACtB,IAAI,CAAC,KAAK,IAAI,EAAE;QACf,IACE,KAAK,CAAC,oBAAoB,KAAK,eAAe;YAC9C,CAAC,KAAK,CAAC,GAAG;YACV,CAAC,gBAAgB,CAAC,KAAK,CAAC,EACxB,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC;QAC3B,MAAM,cAAc,GAAG,kCAAkC,CACvD,KAAK,EACL,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE,CAAC;YACrC,MAAM,kCAAkC,CAAC;gBACvC,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,cAAc;gBAC1B,KAAK;aACN,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtD,sEAAsE;QACtE,mEAAmE;QACnE,qEAAqE;QACrE,MAAM,cAAc,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,aAAa,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,eAAe,CACrC,KAAK,EACL,QAAQ,EACR,EAAE,kBAAkB,EAAE,cAAc,EAAE,EACtC,EAAE,aAAa,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAC7C,cAAc,CACf,CAAC;QACF,IACE,CAAC,SAAS;YACV,CAAC,2BAA2B,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,CAAC,EAC9D,CAAC;YACD,OAAO;QACT,CAAC;QACD,yBAAyB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3C,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC;QACF,4EAA4E;QAC5E,sEAAsE;SACrE,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,+BAA+B,CAAC,KAAK,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC,CAAC;QACF,6EAA6E;QAC7E,yEAAyE;QACzE,kEAAkE;SACjE,OAAO,CAAC,GAAG,EAAE;QACZ,wBAAwB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACL,OAAO,KAAK,CAAC,UAAU,CAAC;AAC1B,CAAC;AAED,SAAS,sCAAsC,CAC7C,KAAyB,EACzB,IAAyC,EACzC,KAAmC;IAEnC,MAAM,oBAAoB,GAA4B;QACpD,GAAG,KAAK,CAAC,QAAQ,CAAC,gBAAgB;KACnC,CAAC;IACF,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,oBAAoB,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QACtC,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,0BAA0B,CAC/C;QACE,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE,oBAAoB;QACtC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;QACzB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtC,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;KACJ,EACD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CACvC,CAAC;IAEF,mBAAmB,CAAC,KAAK,EAAE;QACzB,GAAG,KAAK,CAAC,QAAQ;QACjB,YAAY,EAAE,cAAc,CAAC,YAAY;QACzC,qBAAqB,EAAE,cAAc,CAAC,qBAAqB;QAC3D,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;QACjD,KAAK,EAAE,cAAc,CAAC,KAAK;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iCAAiC,CACxC,KAAyB,EACzB,IAAyC,EACzC,KAAmC,EACnC,UAAmC,EAAE;IAErC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,oBAAoB,CAAC;IAEnD,8EAA8E;IAC9E,4EAA4E;IAC5E,KAAK,CAAC,kBAAkB,IAAI,CAAC,CAAC;IAC9B,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU;SAChC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;SACtB,IAAI,CAAC,KAAK,IAAI,EAAE;QACf,IACE,KAAK,CAAC,oBAAoB,KAAK,eAAe;YAC9C,CAAC,KAAK,CAAC,GAAG;YACV,CAAC,gBAAgB,CAAC,KAAK,CAAC,EACxB,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC;QAC3B,MAAM,cAAc,GAAG,kCAAkC,CACvD,KAAK,EACL,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,yBAAyB,CACvB,QAAQ,EACR,IAAI,EACJ,KAAK,EACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CACvC,CAAC;QACF,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,kCAAkC,CAAC;gBACvC,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,cAAc;gBAC1B,KAAK;aACN,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,+DAA+D;QAC/D,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,cAAc,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAG,mCAAmC,CAC3D,OAAO,EACP,MAAM,CACP,CAAC;QACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,kCAAkC,CAAC;gBACvC,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,cAAc;gBAC1B,KAAK;aACN,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,uEAAuE;QACvE,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,mEAAmE;QACnE,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,SAAS,GAAG,MAAM,eAAe,CACrC,KAAK,EACL,QAAQ,EACR,EAAE,kBAAkB,EAAE,cAAc,EAAE,EACtC;YACE,gCAAgC,EAAE,IAAI;YACtC,oBAAoB,EAAE,IAAI;YAC1B,GAAG,iBAAiB;SACrB,EACD,cAAc,CACf,CAAC;QACF,IACE,CAAC,SAAS;YACV,CAAC,2BAA2B,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,CAAC,EAC9D,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC7B,yBAAyB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC3C,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,+BAA+B,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC,CAAC;QACF,sEAAsE;QACtE,4EAA4E;SAC3E,OAAO,CAAC,GAAG,EAAE;QACZ,wBAAwB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACL,OAAO,KAAK,CAAC,UAAU,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAyB,EACzB,YAAwB,EACxB,KAAa;IAEb,8BAA8B,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,OAAO,wBAAwB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YAClE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,2BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,OAAO,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,2BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAyB,EACzB,YAAwB,EACxB,IAAyC,EACzC,KAAmC,EACnC,UAAmC,EAAE;IAErC,8BAA8B,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,OAAO,wBAAwB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YAClE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,sCAAsC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,iCAAiC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,sCAAsC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3D,OAAO,iCAAiC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import { bytesToBase64 } from \"@tearleads/encoding\";\nimport { encodeVersionVector, getTextValue } from \"@tearleads/loro\";\nimport {\n  projectStoredDocumentState,\n  type StoredDocumentKind,\n  writeStoredDocumentFields,\n} from \"../../../data/documents/documentKinds\";\nimport { createPendingUpdateFields } from \"../../../data/documents/documentSync\";\nimport { requestDocumentStoreSync } from \"../registry\";\nimport type {\n  DocumentMutationOptions,\n  DocumentStructuredFieldPatch,\n} from \"../types\";\nimport {\n  ensureDocumentStoreInitialized,\n  ensureDocumentStoreReady,\n} from \"./initialization\";\nimport { revalidateDocumentMutationIdentity } from \"./mutationIdentityRevalidation\";\nimport {\n  advancePendingBaseVersion,\n  pendingDeltaSinceBase,\n  persistDocument,\n} from \"./persistence\";\nimport { reportDocumentStoreWriteFailure } from \"./reportWriteFailure\";\nimport {\n  canWriteDocument,\n  type DocumentState,\n  type DocumentStoreState,\n  type SaveDocumentRecordOptions,\n  setDocumentSnapshot,\n  setReadySnapshot,\n} from \"./state\";\nimport { captureDocumentStoreSyncGeneration } from \"./syncGeneration\";\n\n// Fixed literals: a reported message must never carry document text or ids.\nconst TEXT_FAILURE_MESSAGE = \"Documents: local text persist failed\";\nconst FIELD_FAILURE_MESSAGE = \"Documents: local field persist failed\";\n\nfunction structuredMutationDurabilityOptions(\n  options: DocumentMutationOptions,\n  update: Uint8Array,\n): Pick<SaveDocumentRecordOptions, \"historyUpdates\" | \"pendingUpdate\"> | null {\n  if (options.deferRemoteSync) {\n    return { historyUpdates: [bytesToBase64(update)] };\n  }\n  const pendingUpdate = createPendingUpdateFields(update);\n  return pendingUpdate ? { pendingUpdate } : null;\n}\n\nfunction isDocumentLocalWriteCurrent(\n  state: DocumentStoreState,\n  writeGeneration: number,\n  writeDoc: DocumentState,\n): boolean {\n  return (\n    state.localWriteGeneration === writeGeneration && state.doc === writeDoc\n  );\n}\n\nfunction settleDocumentLocalWrite(\n  state: DocumentStoreState,\n  writeGeneration: number,\n): void {\n  // Reset/reinitialization owns the new generation's counter. A write queued\n  // against the prior document must touch neither it nor the replacement doc.\n  if (state.localWriteGeneration !== writeGeneration) {\n    return;\n  }\n\n  state.pendingLocalWrites = Math.max(0, state.pendingLocalWrites - 1);\n  if (state.pendingLocalWrites !== 0 || !state.doc) {\n    return;\n  }\n\n  // A sync pass or rotation may merge remote content while preserving the\n  // controlled editor value. Publish the authoritative doc once typing drains;\n  // setReadySnapshot is a no-op when the optimistic projection already matches.\n  setReadySnapshot(state, state.doc, state.snapshot.syncing);\n}\n\nfunction publishDocumentTextSnapshot(\n  state: DocumentStoreState,\n  value: string,\n): void {\n  setDocumentSnapshot(state, {\n    ...state.snapshot,\n    text: value,\n    title: projectStoredDocumentState(\n      {\n        documentKind: state.snapshot.documentKind,\n        structuredFields: state.snapshot.structuredFields,\n        text: value,\n        rows: state.snapshot.rows.map((row) => ({\n          id: row.id,\n          fields: row.fields,\n        })),\n      },\n      state.runtime.infra.documentProjectors,\n    ).title,\n  });\n}\n\nfunction queueDocumentTextWrite(\n  state: DocumentStoreState,\n  value: string,\n): Promise<void> {\n  if (!state.doc) {\n    return Promise.resolve();\n  }\n  const writeGeneration = state.localWriteGeneration;\n\n  // Mark a local edit as in flight SYNCHRONOUSLY, before chaining, so a sync\n  // pass that runs during this burst sees pendingLocalWrites > 0 and preserves\n  // the optimistic snapshot instead of regressing it to a stale doc read.\n  state.pendingLocalWrites += 1;\n  state.writeChain = state.writeChain\n    .catch(() => undefined)\n    .then(async () => {\n      if (\n        state.localWriteGeneration !== writeGeneration ||\n        !state.doc ||\n        !canWriteDocument(state)\n      ) {\n        return;\n      }\n      const writeDoc = state.doc;\n      const syncGeneration = captureDocumentStoreSyncGeneration(\n        state,\n        writeDoc,\n      );\n      if (!syncGeneration) {\n        return;\n      }\n\n      if (getTextValue(writeDoc) === value) {\n        await revalidateDocumentMutationIdentity({\n          currentDoc: writeDoc,\n          generation: syncGeneration,\n          state,\n        });\n        return;\n      }\n\n      writeDoc.getText(\"text\").update(value);\n      const update = pendingDeltaSinceBase(state, writeDoc);\n      // Captured at delta time: the enqueued row proves durable coverage up\n      // to exactly this version, so this is the frontier the persist may\n      // publish (a raced later edit publishes its own on its own persist).\n      const coveredVersion = encodeVersionVector(writeDoc);\n      const pendingUpdate = createPendingUpdateFields(update);\n      if (!pendingUpdate) {\n        return;\n      }\n      const persisted = await persistDocument(\n        state,\n        writeDoc,\n        { snapshotEndVersion: coveredVersion },\n        { pendingUpdate, preserveSnapshotText: true },\n        syncGeneration,\n      );\n      if (\n        !persisted ||\n        !isDocumentLocalWriteCurrent(state, writeGeneration, writeDoc)\n      ) {\n        return;\n      }\n      advancePendingBaseVersion(state, writeDoc);\n      requestDocumentStoreSync(state);\n    })\n    // The user is already looking at this text: publishDocumentTextSnapshot ran\n    // before the chain, and nothing downstream surfaces a failed persist.\n    .catch((error: unknown) => {\n      reportDocumentStoreWriteFailure(state, TEXT_FAILURE_MESSAGE, error);\n    })\n    // Always settle, even on the value-equality short-circuit or a throw, so the\n    // current document's counter cannot stick non-zero. The generation guard\n    // keeps a reset write from decrementing a replacement generation.\n    .finally(() => {\n      settleDocumentLocalWrite(state, writeGeneration);\n    });\n  return state.writeChain;\n}\n\nfunction publishDocumentStructuredFieldSnapshot(\n  state: DocumentStoreState,\n  kind: Exclude<StoredDocumentKind, \"note\">,\n  patch: DocumentStructuredFieldPatch,\n): void {\n  const nextStructuredFields: Record<string, unknown> = {\n    ...state.snapshot.structuredFields,\n  };\n  for (const [field, value] of Object.entries(patch)) {\n    if (value === undefined) {\n      delete nextStructuredFields[field];\n    } else {\n      nextStructuredFields[field] = value;\n    }\n  }\n  const projectedState = projectStoredDocumentState(\n    {\n      documentKind: kind,\n      structuredFields: nextStructuredFields,\n      text: state.snapshot.text,\n      rows: state.snapshot.rows.map((row) => ({\n        id: row.id,\n        fields: row.fields,\n      })),\n    },\n    state.runtime.infra.documentProjectors,\n  );\n\n  setDocumentSnapshot(state, {\n    ...state.snapshot,\n    documentKind: projectedState.documentKind,\n    fieldValidationIssues: projectedState.fieldValidationIssues,\n    structuredFields: projectedState.structuredFields,\n    title: projectedState.title,\n  });\n}\n\nfunction queueDocumentStructuredFieldWrite(\n  state: DocumentStoreState,\n  kind: Exclude<StoredDocumentKind, \"note\">,\n  patch: DocumentStructuredFieldPatch,\n  options: DocumentMutationOptions = {},\n): Promise<void> {\n  if (!state.doc) {\n    return Promise.resolve();\n  }\n  const writeGeneration = state.localWriteGeneration;\n\n  // See queueDocumentTextWrite: gate sync-lane text/field republish on the same\n  // in-flight-write counter so structured edits get the identical protection.\n  state.pendingLocalWrites += 1;\n  state.writeChain = state.writeChain\n    .catch(() => undefined)\n    .then(async () => {\n      if (\n        state.localWriteGeneration !== writeGeneration ||\n        !state.doc ||\n        !canWriteDocument(state)\n      ) {\n        return;\n      }\n      const writeDoc = state.doc;\n      const syncGeneration = captureDocumentStoreSyncGeneration(\n        state,\n        writeDoc,\n      );\n      if (!syncGeneration) {\n        return;\n      }\n\n      writeStoredDocumentFields(\n        writeDoc,\n        kind,\n        patch,\n        state.runtime.infra.documentProjectors,\n      );\n      const update = pendingDeltaSinceBase(state, writeDoc);\n      if (update.byteLength === 0) {\n        await revalidateDocumentMutationIdentity({\n          currentDoc: writeDoc,\n          generation: syncGeneration,\n          state,\n        });\n        return;\n      }\n      // Captured at delta time: the durable row written below (queue\n      // dual-write or in-mutation tail append) proves coverage up to exactly\n      // this version, so it is the frontier this persist may publish.\n      const coveredVersion = encodeVersionVector(writeDoc);\n      const durabilityOptions = structuredMutationDurabilityOptions(\n        options,\n        update,\n      );\n      if (!durabilityOptions) {\n        await revalidateDocumentMutationIdentity({\n          currentDoc: writeDoc,\n          generation: syncGeneration,\n          state,\n        });\n        return;\n      }\n      // A deferred write advances the record's content frontier AHEAD of the\n      // outgoing queue (the op is re-derived by the next edit). Its delta\n      // rides in the persist's own claimed mutation as a durable-history tail\n      // row written before the record — the tail is the only content store,\n      // so the record frontier must never durably lead the tail row that\n      // holds its content. Passed as an option (no pre-persist await) so this\n      // write adds no extra hop that would change cross-store interleaving.\n      const persisted = await persistDocument(\n        state,\n        writeDoc,\n        { snapshotEndVersion: coveredVersion },\n        {\n          preserveSnapshotStructuredFields: true,\n          preserveSnapshotText: true,\n          ...durabilityOptions,\n        },\n        syncGeneration,\n      );\n      if (\n        !persisted ||\n        !isDocumentLocalWriteCurrent(state, writeGeneration, writeDoc)\n      ) {\n        return;\n      }\n      if (!options.deferRemoteSync) {\n        advancePendingBaseVersion(state, writeDoc);\n        requestDocumentStoreSync(state);\n      }\n    })\n    .catch((error: unknown) => {\n      reportDocumentStoreWriteFailure(state, FIELD_FAILURE_MESSAGE, error);\n    })\n    // See queueDocumentTextWrite: the final current-generation write also\n    // republishes any remote content that was held during the optimistic burst.\n    .finally(() => {\n      settleDocumentLocalWrite(state, writeGeneration);\n    });\n  return state.writeChain;\n}\n\nexport function setDocumentText(\n  state: DocumentStoreState,\n  scheduleSync: () => void,\n  value: string,\n): Promise<void> {\n  ensureDocumentStoreInitialized(state, scheduleSync);\n\n  if (!state.initialized || !state.doc) {\n    return ensureDocumentStoreReady(state, scheduleSync).then((ready) => {\n      if (!ready || !state.doc || !canWriteDocument(state)) {\n        return;\n      }\n\n      publishDocumentTextSnapshot(state, value);\n      return queueDocumentTextWrite(state, value);\n    });\n  }\n\n  if (!canWriteDocument(state)) {\n    return Promise.resolve();\n  }\n\n  publishDocumentTextSnapshot(state, value);\n  return queueDocumentTextWrite(state, value);\n}\n\nexport function setDocumentStructuredFields(\n  state: DocumentStoreState,\n  scheduleSync: () => void,\n  kind: Exclude<StoredDocumentKind, \"note\">,\n  patch: DocumentStructuredFieldPatch,\n  options: DocumentMutationOptions = {},\n): Promise<void> {\n  ensureDocumentStoreInitialized(state, scheduleSync);\n\n  if (!state.initialized || !state.doc) {\n    return ensureDocumentStoreReady(state, scheduleSync).then((ready) => {\n      if (!ready || !state.doc || !canWriteDocument(state)) {\n        return;\n      }\n\n      publishDocumentStructuredFieldSnapshot(state, kind, patch);\n      return queueDocumentStructuredFieldWrite(state, kind, patch, options);\n    });\n  }\n\n  if (!canWriteDocument(state)) {\n    return Promise.resolve();\n  }\n\n  publishDocumentStructuredFieldSnapshot(state, kind, patch);\n  return queueDocumentStructuredFieldWrite(state, kind, patch, options);\n}\n"]}
+{"version":3,"file":"mutations.js","sourceRoot":"","sources":["mutations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EACL,0BAA0B,EAE1B,yBAAyB,GAC1B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAKvD,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kCAAkC,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EACL,gBAAgB,EAIhB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,kCAAkC,EAAE,MAAM,uBAAuB,CAAC;AAE3E,4EAA4E;AAC5E,MAAM,oBAAoB,GAAG,sCAAsC,CAAC;AACpE,MAAM,qBAAqB,GAAG,uCAAuC,CAAC;AAEtE,SAAS,mCAAmC,CAC1C,OAAgC,EAChC,MAAkB;IAElB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,OAAO,EAAE,cAAc,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,aAAa,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAyB,EACzB,eAAuB,EACvB,QAAuB;IAEvB,OAAO,CACL,KAAK,CAAC,oBAAoB,KAAK,eAAe,IAAI,KAAK,CAAC,GAAG,KAAK,QAAQ,CACzE,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAyB,EACzB,eAAuB;IAEvB,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,KAAK,CAAC,oBAAoB,KAAK,eAAe,EAAE,CAAC;QACnD,OAAO;IACT,CAAC;IAED,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACjD,OAAO;IACT,CAAC;IAED,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAyB,EACzB,KAAa;IAEb,mBAAmB,CAAC,KAAK,EAAE;QACzB,GAAG,KAAK,CAAC,QAAQ;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,0BAA0B,CAC/B;YACE,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;YACzC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;YACjD,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACtC,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC,CAAC;SACJ,EACD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CACvC,CAAC,KAAK;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAyB,EACzB,KAAa;IAEb,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,oBAAoB,CAAC;IAEnD,2EAA2E;IAC3E,6EAA6E;IAC7E,wEAAwE;IACxE,KAAK,CAAC,kBAAkB,IAAI,CAAC,CAAC;IAC9B,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU;SAChC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;SACtB,IAAI,CAAC,KAAK,IAAI,EAAE;QACf,IACE,KAAK,CAAC,oBAAoB,KAAK,eAAe;YAC9C,CAAC,KAAK,CAAC,GAAG;YACV,CAAC,gBAAgB,CAAC,KAAK,CAAC,EACxB,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC;QAC3B,MAAM,cAAc,GAAG,kCAAkC,CACvD,KAAK,EACL,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE,CAAC;YACrC,MAAM,kCAAkC,CAAC;gBACvC,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,cAAc;gBAC1B,KAAK;aACN,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtD,sEAAsE;QACtE,mEAAmE;QACnE,qEAAqE;QACrE,MAAM,cAAc,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,aAAa,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,eAAe,CACrC,KAAK,EACL,QAAQ,EACR,EAAE,kBAAkB,EAAE,cAAc,EAAE,EACtC,EAAE,aAAa,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAC7C,cAAc,CACf,CAAC;QACF,IACE,CAAC,SAAS;YACV,CAAC,2BAA2B,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,CAAC,EAC9D,CAAC;YACD,OAAO;QACT,CAAC;QACD,yBAAyB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3C,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC;QACF,4EAA4E;QAC5E,sEAAsE;SACrE,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,+BAA+B,CAAC,KAAK,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC,CAAC;QACF,6EAA6E;QAC7E,yEAAyE;QACzE,kEAAkE;SACjE,OAAO,CAAC,GAAG,EAAE;QACZ,wBAAwB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACL,OAAO,KAAK,CAAC,UAAU,CAAC;AAC1B,CAAC;AAED,SAAS,sCAAsC,CAC7C,KAAyB,EACzB,IAAyC,EACzC,KAAmC;IAEnC,MAAM,oBAAoB,GAA4B;QACpD,GAAG,KAAK,CAAC,QAAQ,CAAC,gBAAgB;KACnC,CAAC;IACF,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,oBAAoB,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QACtC,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,0BAA0B,CAC/C;QACE,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE,oBAAoB;QACtC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;QACzB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtC,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;KACJ,EACD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CACvC,CAAC;IAEF,mBAAmB,CAAC,KAAK,EAAE;QACzB,GAAG,KAAK,CAAC,QAAQ;QACjB,YAAY,EAAE,cAAc,CAAC,YAAY;QACzC,qBAAqB,EAAE,cAAc,CAAC,qBAAqB;QAC3D,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;QACjD,KAAK,EAAE,cAAc,CAAC,KAAK;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iCAAiC,CACxC,KAAyB,EACzB,IAAyC,EACzC,KAAmC,EACnC,UAAmC,EAAE;IAErC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,oBAAoB,CAAC;IAEnD,8EAA8E;IAC9E,4EAA4E;IAC5E,KAAK,CAAC,kBAAkB,IAAI,CAAC,CAAC;IAC9B,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU;SAChC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;SACtB,IAAI,CAAC,KAAK,IAAI,EAAE;QACf,IACE,KAAK,CAAC,oBAAoB,KAAK,eAAe;YAC9C,CAAC,KAAK,CAAC,GAAG;YACV,CAAC,gBAAgB,CAAC,KAAK,CAAC,EACxB,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC;QAC3B,MAAM,cAAc,GAAG,kCAAkC,CACvD,KAAK,EACL,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,yBAAyB,CACvB,QAAQ,EACR,IAAI,EACJ,KAAK,EACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CACvC,CAAC;QACF,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,kCAAkC,CAAC;gBACvC,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,cAAc;gBAC1B,KAAK;aACN,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,+DAA+D;QAC/D,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,cAAc,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAG,mCAAmC,CAC3D,OAAO,EACP,MAAM,CACP,CAAC;QACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,kCAAkC,CAAC;gBACvC,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,cAAc;gBAC1B,KAAK;aACN,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,uEAAuE;QACvE,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,mEAAmE;QACnE,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,SAAS,GAAG,MAAM,eAAe,CACrC,KAAK,EACL,QAAQ,EACR,EAAE,kBAAkB,EAAE,cAAc,EAAE,EACtC;YACE,gCAAgC,EAAE,IAAI;YACtC,oBAAoB,EAAE,IAAI;YAC1B,GAAG,iBAAiB;SACrB,EACD,cAAc,CACf,CAAC;QACF,IACE,CAAC,SAAS;YACV,CAAC,2BAA2B,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,CAAC,EAC9D,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC7B,yBAAyB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC3C,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,+BAA+B,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC,CAAC;QACF,sEAAsE;QACtE,4EAA4E;SAC3E,OAAO,CAAC,GAAG,EAAE;QACZ,wBAAwB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACL,OAAO,KAAK,CAAC,UAAU,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAyB,EACzB,YAAwB,EACxB,KAAa;IAEb,8BAA8B,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,OAAO,wBAAwB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YAClE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,2BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,OAAO,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,2BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAyB,EACzB,YAAwB,EACxB,IAAyC,EACzC,KAAmC,EACnC,UAAmC,EAAE;IAErC,8BAA8B,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,OAAO,wBAAwB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YAClE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,sCAAsC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,iCAAiC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,sCAAsC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3D,OAAO,iCAAiC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import { bytesToBase64 } from \"@tearleads/encoding\";\nimport { encodeVersionVector, getTextValue } from \"@tearleads/loro\";\nimport {\n  projectStoredDocumentState,\n  type StoredDocumentKind,\n  writeStoredDocumentFields,\n} from \"../../../data/documents/documentKinds\";\nimport { createPendingUpdateFields } from \"../../../data/documents/documentSync\";\nimport { requestDocumentStoreSync } from \"../registry\";\nimport type {\n  DocumentMutationOptions,\n  DocumentStructuredFieldPatch,\n} from \"../types\";\nimport {\n  ensureDocumentStoreInitialized,\n  ensureDocumentStoreReady,\n} from \"./initialization\";\nimport { revalidateDocumentMutationIdentity } from \"./mutationIdentityRevalidation\";\nimport {\n  advancePendingBaseVersion,\n  pendingDeltaSinceBase,\n  persistDocument,\n} from \"./persistence\";\nimport { reportDocumentStoreWriteFailure } from \"./reportWriteFailure\";\nimport {\n  canWriteDocument,\n  type DocumentState,\n  type DocumentStoreState,\n  type SaveDocumentRecordOptions,\n  setDocumentSnapshot,\n  setReadySnapshot,\n} from \"./state\";\nimport { captureDocumentStoreSyncGeneration } from \"./sync/syncGeneration\";\n\n// Fixed literals: a reported message must never carry document text or ids.\nconst TEXT_FAILURE_MESSAGE = \"Documents: local text persist failed\";\nconst FIELD_FAILURE_MESSAGE = \"Documents: local field persist failed\";\n\nfunction structuredMutationDurabilityOptions(\n  options: DocumentMutationOptions,\n  update: Uint8Array,\n): Pick<SaveDocumentRecordOptions, \"historyUpdates\" | \"pendingUpdate\"> | null {\n  if (options.deferRemoteSync) {\n    return { historyUpdates: [bytesToBase64(update)] };\n  }\n  const pendingUpdate = createPendingUpdateFields(update);\n  return pendingUpdate ? { pendingUpdate } : null;\n}\n\nfunction isDocumentLocalWriteCurrent(\n  state: DocumentStoreState,\n  writeGeneration: number,\n  writeDoc: DocumentState,\n): boolean {\n  return (\n    state.localWriteGeneration === writeGeneration && state.doc === writeDoc\n  );\n}\n\nfunction settleDocumentLocalWrite(\n  state: DocumentStoreState,\n  writeGeneration: number,\n): void {\n  // Reset/reinitialization owns the new generation's counter. A write queued\n  // against the prior document must touch neither it nor the replacement doc.\n  if (state.localWriteGeneration !== writeGeneration) {\n    return;\n  }\n\n  state.pendingLocalWrites = Math.max(0, state.pendingLocalWrites - 1);\n  if (state.pendingLocalWrites !== 0 || !state.doc) {\n    return;\n  }\n\n  // A sync pass or rotation may merge remote content while preserving the\n  // controlled editor value. Publish the authoritative doc once typing drains;\n  // setReadySnapshot is a no-op when the optimistic projection already matches.\n  setReadySnapshot(state, state.doc, state.snapshot.syncing);\n}\n\nfunction publishDocumentTextSnapshot(\n  state: DocumentStoreState,\n  value: string,\n): void {\n  setDocumentSnapshot(state, {\n    ...state.snapshot,\n    text: value,\n    title: projectStoredDocumentState(\n      {\n        documentKind: state.snapshot.documentKind,\n        structuredFields: state.snapshot.structuredFields,\n        text: value,\n        rows: state.snapshot.rows.map((row) => ({\n          id: row.id,\n          fields: row.fields,\n        })),\n      },\n      state.runtime.infra.documentProjectors,\n    ).title,\n  });\n}\n\nfunction queueDocumentTextWrite(\n  state: DocumentStoreState,\n  value: string,\n): Promise<void> {\n  if (!state.doc) {\n    return Promise.resolve();\n  }\n  const writeGeneration = state.localWriteGeneration;\n\n  // Mark a local edit as in flight SYNCHRONOUSLY, before chaining, so a sync\n  // pass that runs during this burst sees pendingLocalWrites > 0 and preserves\n  // the optimistic snapshot instead of regressing it to a stale doc read.\n  state.pendingLocalWrites += 1;\n  state.writeChain = state.writeChain\n    .catch(() => undefined)\n    .then(async () => {\n      if (\n        state.localWriteGeneration !== writeGeneration ||\n        !state.doc ||\n        !canWriteDocument(state)\n      ) {\n        return;\n      }\n      const writeDoc = state.doc;\n      const syncGeneration = captureDocumentStoreSyncGeneration(\n        state,\n        writeDoc,\n      );\n      if (!syncGeneration) {\n        return;\n      }\n\n      if (getTextValue(writeDoc) === value) {\n        await revalidateDocumentMutationIdentity({\n          currentDoc: writeDoc,\n          generation: syncGeneration,\n          state,\n        });\n        return;\n      }\n\n      writeDoc.getText(\"text\").update(value);\n      const update = pendingDeltaSinceBase(state, writeDoc);\n      // Captured at delta time: the enqueued row proves durable coverage up\n      // to exactly this version, so this is the frontier the persist may\n      // publish (a raced later edit publishes its own on its own persist).\n      const coveredVersion = encodeVersionVector(writeDoc);\n      const pendingUpdate = createPendingUpdateFields(update);\n      if (!pendingUpdate) {\n        return;\n      }\n      const persisted = await persistDocument(\n        state,\n        writeDoc,\n        { snapshotEndVersion: coveredVersion },\n        { pendingUpdate, preserveSnapshotText: true },\n        syncGeneration,\n      );\n      if (\n        !persisted ||\n        !isDocumentLocalWriteCurrent(state, writeGeneration, writeDoc)\n      ) {\n        return;\n      }\n      advancePendingBaseVersion(state, writeDoc);\n      requestDocumentStoreSync(state);\n    })\n    // The user is already looking at this text: publishDocumentTextSnapshot ran\n    // before the chain, and nothing downstream surfaces a failed persist.\n    .catch((error: unknown) => {\n      reportDocumentStoreWriteFailure(state, TEXT_FAILURE_MESSAGE, error);\n    })\n    // Always settle, even on the value-equality short-circuit or a throw, so the\n    // current document's counter cannot stick non-zero. The generation guard\n    // keeps a reset write from decrementing a replacement generation.\n    .finally(() => {\n      settleDocumentLocalWrite(state, writeGeneration);\n    });\n  return state.writeChain;\n}\n\nfunction publishDocumentStructuredFieldSnapshot(\n  state: DocumentStoreState,\n  kind: Exclude<StoredDocumentKind, \"note\">,\n  patch: DocumentStructuredFieldPatch,\n): void {\n  const nextStructuredFields: Record<string, unknown> = {\n    ...state.snapshot.structuredFields,\n  };\n  for (const [field, value] of Object.entries(patch)) {\n    if (value === undefined) {\n      delete nextStructuredFields[field];\n    } else {\n      nextStructuredFields[field] = value;\n    }\n  }\n  const projectedState = projectStoredDocumentState(\n    {\n      documentKind: kind,\n      structuredFields: nextStructuredFields,\n      text: state.snapshot.text,\n      rows: state.snapshot.rows.map((row) => ({\n        id: row.id,\n        fields: row.fields,\n      })),\n    },\n    state.runtime.infra.documentProjectors,\n  );\n\n  setDocumentSnapshot(state, {\n    ...state.snapshot,\n    documentKind: projectedState.documentKind,\n    fieldValidationIssues: projectedState.fieldValidationIssues,\n    structuredFields: projectedState.structuredFields,\n    title: projectedState.title,\n  });\n}\n\nfunction queueDocumentStructuredFieldWrite(\n  state: DocumentStoreState,\n  kind: Exclude<StoredDocumentKind, \"note\">,\n  patch: DocumentStructuredFieldPatch,\n  options: DocumentMutationOptions = {},\n): Promise<void> {\n  if (!state.doc) {\n    return Promise.resolve();\n  }\n  const writeGeneration = state.localWriteGeneration;\n\n  // See queueDocumentTextWrite: gate sync-lane text/field republish on the same\n  // in-flight-write counter so structured edits get the identical protection.\n  state.pendingLocalWrites += 1;\n  state.writeChain = state.writeChain\n    .catch(() => undefined)\n    .then(async () => {\n      if (\n        state.localWriteGeneration !== writeGeneration ||\n        !state.doc ||\n        !canWriteDocument(state)\n      ) {\n        return;\n      }\n      const writeDoc = state.doc;\n      const syncGeneration = captureDocumentStoreSyncGeneration(\n        state,\n        writeDoc,\n      );\n      if (!syncGeneration) {\n        return;\n      }\n\n      writeStoredDocumentFields(\n        writeDoc,\n        kind,\n        patch,\n        state.runtime.infra.documentProjectors,\n      );\n      const update = pendingDeltaSinceBase(state, writeDoc);\n      if (update.byteLength === 0) {\n        await revalidateDocumentMutationIdentity({\n          currentDoc: writeDoc,\n          generation: syncGeneration,\n          state,\n        });\n        return;\n      }\n      // Captured at delta time: the durable row written below (queue\n      // dual-write or in-mutation tail append) proves coverage up to exactly\n      // this version, so it is the frontier this persist may publish.\n      const coveredVersion = encodeVersionVector(writeDoc);\n      const durabilityOptions = structuredMutationDurabilityOptions(\n        options,\n        update,\n      );\n      if (!durabilityOptions) {\n        await revalidateDocumentMutationIdentity({\n          currentDoc: writeDoc,\n          generation: syncGeneration,\n          state,\n        });\n        return;\n      }\n      // A deferred write advances the record's content frontier AHEAD of the\n      // outgoing queue (the op is re-derived by the next edit). Its delta\n      // rides in the persist's own claimed mutation as a durable-history tail\n      // row written before the record — the tail is the only content store,\n      // so the record frontier must never durably lead the tail row that\n      // holds its content. Passed as an option (no pre-persist await) so this\n      // write adds no extra hop that would change cross-store interleaving.\n      const persisted = await persistDocument(\n        state,\n        writeDoc,\n        { snapshotEndVersion: coveredVersion },\n        {\n          preserveSnapshotStructuredFields: true,\n          preserveSnapshotText: true,\n          ...durabilityOptions,\n        },\n        syncGeneration,\n      );\n      if (\n        !persisted ||\n        !isDocumentLocalWriteCurrent(state, writeGeneration, writeDoc)\n      ) {\n        return;\n      }\n      if (!options.deferRemoteSync) {\n        advancePendingBaseVersion(state, writeDoc);\n        requestDocumentStoreSync(state);\n      }\n    })\n    .catch((error: unknown) => {\n      reportDocumentStoreWriteFailure(state, FIELD_FAILURE_MESSAGE, error);\n    })\n    // See queueDocumentTextWrite: the final current-generation write also\n    // republishes any remote content that was held during the optimistic burst.\n    .finally(() => {\n      settleDocumentLocalWrite(state, writeGeneration);\n    });\n  return state.writeChain;\n}\n\nexport function setDocumentText(\n  state: DocumentStoreState,\n  scheduleSync: () => void,\n  value: string,\n): Promise<void> {\n  ensureDocumentStoreInitialized(state, scheduleSync);\n\n  if (!state.initialized || !state.doc) {\n    return ensureDocumentStoreReady(state, scheduleSync).then((ready) => {\n      if (!ready || !state.doc || !canWriteDocument(state)) {\n        return;\n      }\n\n      publishDocumentTextSnapshot(state, value);\n      return queueDocumentTextWrite(state, value);\n    });\n  }\n\n  if (!canWriteDocument(state)) {\n    return Promise.resolve();\n  }\n\n  publishDocumentTextSnapshot(state, value);\n  return queueDocumentTextWrite(state, value);\n}\n\nexport function setDocumentStructuredFields(\n  state: DocumentStoreState,\n  scheduleSync: () => void,\n  kind: Exclude<StoredDocumentKind, \"note\">,\n  patch: DocumentStructuredFieldPatch,\n  options: DocumentMutationOptions = {},\n): Promise<void> {\n  ensureDocumentStoreInitialized(state, scheduleSync);\n\n  if (!state.initialized || !state.doc) {\n    return ensureDocumentStoreReady(state, scheduleSync).then((ready) => {\n      if (!ready || !state.doc || !canWriteDocument(state)) {\n        return;\n      }\n\n      publishDocumentStructuredFieldSnapshot(state, kind, patch);\n      return queueDocumentStructuredFieldWrite(state, kind, patch, options);\n    });\n  }\n\n  if (!canWriteDocument(state)) {\n    return Promise.resolve();\n  }\n\n  publishDocumentStructuredFieldSnapshot(state, kind, patch);\n  return queueDocumentStructuredFieldWrite(state, kind, patch, options);\n}\n"]}

package/stores/documents/documentStore/pendingUpdateRefusal.js

@@ -1,4 +1,4 @@
-import { reloadDocumentFromDurableHistory } from "./durableDocumentReload.js";
+import { reloadDocumentFromDurableHistory } from "./history/durableDocumentReload.js";
 /**
  * An enqueue identity CAS can lose before the following record persist gets a
  * chance to observe the replacement. Rebuild from durable history immediately

package/stores/documents/documentStore/pendingUpdateRefusal.js.map

@@ -1 +1 @@
-{"version":3,"file":"pendingUpdateRefusal.js","sourceRoot":"","sources":["pendingUpdateRefusal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAI3E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,KAAyB,EACzB,kBAA+C;IAE/C,OAAO,gCAAgC,CAAC;QACtC,kBAAkB;QAClB,uCAAuC,EAAE,KAAK;QAC9C,KAAK;KACN,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { reloadDocumentFromDurableHistory } from \"./durableDocumentReload\";\nimport type { DocumentStoreState } from \"./state\";\nimport type { DocumentStoreSyncGeneration } from \"./syncGeneration\";\n\n/**\n * An enqueue identity CAS can lose before the following record persist gets a\n * chance to observe the replacement. Rebuild from durable history immediately\n * and invalidate every local write that was queued against the old live doc;\n * none of those mutations may be replayed into the replacement identity.\n */\nexport async function rebaseDocumentAfterPendingUpdateRefusal(\n  state: DocumentStoreState,\n  expectedGeneration: DocumentStoreSyncGeneration,\n): Promise<boolean> {\n  return reloadDocumentFromDurableHistory({\n    expectedGeneration,\n    preserveQueuedWritesWhenIdentityMatches: false,\n    state,\n  });\n}\n"]}
+{"version":3,"file":"pendingUpdateRefusal.js","sourceRoot":"","sources":["pendingUpdateRefusal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AAInF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,KAAyB,EACzB,kBAA+C;IAE/C,OAAO,gCAAgC,CAAC;QACtC,kBAAkB;QAClB,uCAAuC,EAAE,KAAK;QAC9C,KAAK;KACN,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { reloadDocumentFromDurableHistory } from \"./history/durableDocumentReload\";\nimport type { DocumentStoreState } from \"./state\";\nimport type { DocumentStoreSyncGeneration } from \"./sync/syncGeneration\";\n\n/**\n * An enqueue identity CAS can lose before the following record persist gets a\n * chance to observe the replacement. Rebuild from durable history immediately\n * and invalidate every local write that was queued against the old live doc;\n * none of those mutations may be replayed into the replacement identity.\n */\nexport async function rebaseDocumentAfterPendingUpdateRefusal(\n  state: DocumentStoreState,\n  expectedGeneration: DocumentStoreSyncGeneration,\n): Promise<boolean> {\n  return reloadDocumentFromDurableHistory({\n    expectedGeneration,\n    preserveQueuedWritesWhenIdentityMatches: false,\n    state,\n  });\n}\n"]}

package/stores/documents/documentStore/persistence.js

@@ -5,12 +5,12 @@ import { normalizeEffectiveAccessLevel } from "../../../data/keying/accessLevel.
 import { errorMessage } from "../../../data/shared/errorMessage.js";
 import { enqueuePendingDocumentUpdate, listPendingDocumentUpdates, persistDocumentState, runSerializedSqlMutation, } from "../../../workflows/documents/index.js";
 import { requestDocumentStoreSync } from "../registry.js";
-import { maybeCompactDocumentHistory } from "./documentHistoryCompaction.js";
-import { importDurableDocumentHistory, installDurableDocumentReload, } from "./durableDocumentReload.js";
+import { maybeCompactDocumentHistory } from "./history/documentHistoryCompaction.js";
+import { importDurableDocumentHistory, installDurableDocumentReload, } from "./history/durableDocumentReload.js";
 import { runDocumentOrphanMaintenance } from "./orphanMaintenance.js";
 import { markDocumentStoreRemoved, setReadySnapshot, } from "./state.js";
 import { createFreshPeerStoredDocument } from "./storedDocument.js";
-import { isDocumentStoreSyncGenerationCurrent as isSyncGenerationCurrent, } from "./syncGeneration.js";
+import { isDocumentStoreSyncGenerationCurrent as isSyncGenerationCurrent, } from "./sync/syncGeneration.js";
 export function documentSummaryFromRecord(record, updatedAt, documentProjectors) {
     return {
         accessStateHash: record.accessStateHash ?? null,

package/stores/documents/documentStore/persistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"persistence.js","sourceRoot":"","sources":["persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAEL,0BAA0B,GAC3B,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAGL,4BAA4B,EAC5B,0BAA0B,EAE1B,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAGL,wBAAwB,EAGxB,gBAAgB,GACjB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAEL,oCAAoC,IAAI,uBAAuB,GAChE,MAAM,kBAAkB,CAAC;AAE1B,MAAM,UAAU,yBAAyB,CACvC,MAAsB,EACtB,SAAiB,EACjB,kBAA6C;IAE7C,OAAO;QACL,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QAC/C,oBAAoB,EAAE,6BAA6B,CACjD,MAAM,CAAC,oBAAoB,CAC5B;QACD,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,qBAAqB;QAC1D,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EACH,MAAM,CAAC,KAAK;YACZ,0BAA0B,CACxB;gBACE,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,qBAAqB;gBAC1D,gBAAgB,EAAE,EAAE;gBACpB,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,EACD,kBAAkB,CACnB,CAAC,KAAK;QACT,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,SAAwE;IAExE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO;QACL,GAAG,CAAC,SAAS,CAAC,kBAAkB;YAC9B,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAa,EAAE;YACvC,CAAC,CAAC,EAAE,CAAC;QACP,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;QAClD,GAAG,CAAC,SAAS,CAAC,0BAA0B;YACtC,CAAC,CAAC,EAAE,0BAA0B,EAAE,IAAa,EAAE;YAC/C,CAAC,CAAC,EAAE,CAAC;QACP,MAAM;QACN,GAAG,CAAC,SAAS,CAAC,sBAAsB;YAClC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAa,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,4EAA4E;AAC5E,2EAA2E;AAC3E,yBAAyB;AACzB,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAyB,EACzB,UAAyB,EACzB,QAAiC,EAAE,EACnC,UAAqC,EAAE,EACvC,kBAAgD,EAChD,gBAAiE;IAEjE,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,CAAC,CAAC,kBAAkB;QAClB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QACrD,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,CAAC;IACrC,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC;IAC/C,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC;IAC5D,MAAM,kBAAkB,GACtB,OAAO,CAAC,0BAA0B,KAAK,SAAS;QAC9C,CAAC,CAAC,KAAK,CAAC,kBAAkB;QAC1B,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACzC,MAAM,gBAAgB,GAAG;QACvB,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;QAC1D,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW;QAC5C,UAAU;QACV,aAAa,EAAE,KAAK,CAAC,MAAM;QAC3B,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB;QAC1D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,2EAA2E;QAC3E,oEAAoE;QACpE,0EAA0E;QAC1E,qEAAqE;QACrE,qEAAqE;QACrE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,kBAAkB,EAAE;QACvC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IACF,MAAM,sBAAsB,GAC1B,kBAAkB,IAAI,OAAO,CAAC,YAAY;QACxC,CAAC,CAAC,MAAM,oBAAoB,CAAC;YACzB,GAAG,gBAAgB;YACnB,uEAAuE;YACvE,sEAAsE;YACtE,0EAA0E;YAC1E,uBAAuB,EAAE,SAAS;SACnC,CAAC;QACJ,CAAC,CAAC,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IACnD,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,oEAAoE;QACpE,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,oEAAoE;QACpE,iDAAiD;QACjD,IAAI,SAAS,EAAE,EAAE,CAAC;YAChB,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,KAAK,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,sBAAsB,CAAC;IACjE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC;IAC7C,KAAK,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,IAAI,IAAI,CAAC;IAC7D,IAAI,sBAAsB,CAAC,0BAA0B,EAAE,CAAC;QACtD,KAAK,CAAC,kBAAkB;YACtB,UAAU,CAAC,kBAAkB,IAAI,UAAU,CAAC,kBAAkB,CAAC;IACnE,CAAC;IACD,IAAI,kBAAkB,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;QACjD,KAAK,CAAC,OAAO,CAAC,wBAAwB,CACpC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAC/B,UAAU,CAAC,EAAE,EACb,UAAU,CAAC,UAAU,CACtB,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,KAAK,CAAC,OAAO,CAAC,qBAAqB,CACjC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAC/B,yBAAyB,CACvB,UAAU,EACV,SAAS,EACT,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CACvC,EACD,gBAAgB;YACd,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC;YACnC,kBAAkB,KAAK,UAAU,CAAC,UAAU,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,KAAyB,EACzB,SAAwB,EACxB,mBAAmE,EACnE,kBAAiC,EACjC,aAA6B;IAE7B,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,6BAA6B,EAAE,CAAC;IAC7D,4BAA4B,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,4BAA4B,CAAC;QAC3B,aAAa;QACb,kBAAkB;QAClB,uCAAuC,EAAE,IAAI;QAC7C,sBAAsB,EAAE,KAAK;QAC7B,cAAc;QACd,KAAK;KACN,CAAC,CAAC;IACH,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAyB,EACzB,UAAyB,EACzB,QAAiC,EAAE,EACnC,UAAqC,EAAE,EACvC,kBAAgD,EAChD,gBAAiE;IAEjE,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,CAAC,CAAC,kBAAkB;QAClB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QACrD,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,CAAC;IACrC,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC;IAC5D,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAC9C,KAAK,EACL,UAAU,EACV,KAAK,EACL,OAAO,EACP,kBAAkB,EAClB,gBAAgB,CACjB,CAAC;IACF,OAAO,wBAAwB,CAC7B,KAAK,EACL,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,OAAO,EACP,SAAS,CACV,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAyB,EACzB,UAAyB,EACzB,eAA+C,EAC/C,kBAAiC,EACjC,OAAkC,EAClC,SAAwB;IAExB,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAE9B,IACE,eAAe,CAAC,sBAAsB;QACtC,eAAe,CAAC,0BAA0B,EAC1C,CAAC;QACD,0EAA0E;QAC1E,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,cAAc,GAAG,MAAM,6BAA6B,CACxD,KAAK,EACL,SAAS,EACT,eAAe,CAAC,mBAAmB,EACnC,kBAAkB,EAClB,eAAe,CAAC,MAAM,CACvB,CAAC;QACF,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QACjC,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,gBAAgB,CACd,KAAK,EACL,UAAU,EACV,KAAK,CAAC,QAAQ,CAAC,OAAO,EACtB,OAAO,CAAC,oBAAoB,IAAI,CAAC,eAAe,CAAC,0BAA0B;QACzE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI;QACrB,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,EAC/B,OAAO,CAAC,gCAAgC;QACtC,CAAC,eAAe,CAAC,0BAA0B;QAC3C,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB;QACjC,CAAC,CAAC,SAAS,CACd,CAAC;IACF,sEAAsE;IACtE,oEAAoE;IACpE,sDAAsD;IACtD,IAAI,CAAC;QACH,MAAM,2BAA2B,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,0CAA0C,YAAY,CAAC,KAAK,CAAC,EAAE,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAyB;IAEzB,OAAO,0BAA0B,CAAC;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAyB,EACzB,GAAkB;IAElB,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAyB,EACzB,GAAkB;IAElB,KAAK,CAAC,kBAAkB,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACpD,0EAA0E;IAC1E,yEAAyE;IACzE,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC;QACjC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAyB,EACzB,kBAA2D,EAC3D,KAA0C;IAE1C,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,MAAM,wBAAwB,CAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,KAAK,EAAE,aAAa,EAAE,EAAE;QACtB,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAAE,CAAC;YACxD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3B,GAAG,GAAG,IAAI,CAAC;IACb,CAAC,CACF,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAyB,EACzB,MAAkB,EAClB,mBAAmC,EACnC,kBAAgD;IAEhD,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC;IACpD,MAAM,0BAA0B,GAAG,KAAK,CAAC,MAAM,EAAE,kBAAkB,IAAI,CAAC,CAAC;IACzE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,GAAG,GAAG,MAAM,6BAA6B,CAC7C,KAAK,EACL,kBAAkB,EAClB,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,QAAQ,GAAG,MAAM,4BAA4B,CAAC;YAC5C,OAAO;YACP,kBAAkB;YAClB,0BAA0B;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC;YACrE,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IACF,OAAO,GAAG,IAAI,QAAQ,CAAC;AACzB,CAAC","sourcesContent":["import { encodeVersionVector, exportUpdatesSince } from \"@tearleads/loro\";\nimport { DEFAULT_DOCUMENT_KIND } from \"../../../data/documents/documentConstants\";\nimport {\n  type DocumentProjectorRegistry,\n  projectStoredDocumentState,\n} from \"../../../data/documents/documentKinds\";\nimport type { DocumentSummary } from \"../../../data/documents/documentSummary\";\nimport { normalizeEffectiveAccessLevel } from \"../../../data/keying/accessLevel\";\nimport { errorMessage } from \"../../../data/shared/errorMessage\";\nimport {\n  type DocumentRecord,\n  type ExecSql,\n  enqueuePendingDocumentUpdate,\n  listPendingDocumentUpdates,\n  type PendingUpdateRecord,\n  persistDocumentState,\n  runSerializedSqlMutation,\n} from \"../../../workflows/documents\";\nimport { requestDocumentStoreSync } from \"../registry\";\nimport { maybeCompactDocumentHistory } from \"./documentHistoryCompaction\";\nimport {\n  importDurableDocumentHistory,\n  installDurableDocumentReload,\n} from \"./durableDocumentReload\";\nimport { runDocumentOrphanMaintenance } from \"./orphanMaintenance\";\nimport {\n  type DocumentState,\n  type DocumentStoreState,\n  markDocumentStoreRemoved,\n  type PersistedDocumentRecord,\n  type SaveDocumentRecordOptions,\n  setReadySnapshot,\n} from \"./state\";\nimport { createFreshPeerStoredDocument } from \"./storedDocument\";\nimport {\n  type DocumentStoreSyncGeneration,\n  isDocumentStoreSyncGenerationCurrent as isSyncGenerationCurrent,\n} from \"./syncGeneration\";\n\nexport function documentSummaryFromRecord(\n  record: DocumentRecord,\n  updatedAt: string,\n  documentProjectors: DocumentProjectorRegistry,\n): DocumentSummary {\n  return {\n    accessStateHash: record.accessStateHash ?? null,\n    effectiveAccessLevel: normalizeEffectiveAccessLevel(\n      record.effectiveAccessLevel,\n    ),\n    id: record.id,\n    containerId: record.containerId,\n    documentKind: record.documentKind ?? DEFAULT_DOCUMENT_KIND,\n    documentId: record.documentId,\n    title:\n      record.title ??\n      projectStoredDocumentState(\n        {\n          documentKind: record.documentKind ?? DEFAULT_DOCUMENT_KIND,\n          structuredFields: {},\n          text: record.text,\n        },\n        documentProjectors,\n      ).title,\n    updatedAt,\n  };\n}\n\nfunction toPersistedDocumentRecord(\n  persisted: NonNullable<Awaited<ReturnType<typeof persistDocumentState>>>,\n): PersistedDocumentRecord {\n  const { record, updatedAt } = persisted;\n  return {\n    ...(persisted.creationSuperseded\n      ? { creationSuperseded: true as const }\n      : {}),\n    historyRestoreState: persisted.historyRestoreState,\n    ...(persisted.pullContinuationSuperseded\n      ? { pullContinuationSuperseded: true as const }\n      : {}),\n    record,\n    ...(persisted.syncIdentitySuperseded\n      ? { syncIdentitySuperseded: true as const }\n      : {}),\n    ...(updatedAt !== undefined ? { updatedAt } : {}),\n  };\n}\n\n// Nullable without a generation too: an update-persist refuses (returns\n// null) when the durable row was deleted while the persist was queued — the\n// resurrect guard in persistDocumentState — so callers must stop follow-up\n// state changes on null.\nexport async function saveDocumentRecord(\n  state: DocumentStoreState,\n  currentDoc: DocumentState,\n  patch: Partial<DocumentRecord> = {},\n  options: SaveDocumentRecordOptions = {},\n  expectedGeneration?: DocumentStoreSyncGeneration,\n  commitSideEffect?: (transactionExecSql: ExecSql) => Promise<void>,\n): Promise<PersistedDocumentRecord | null> {\n  const isCurrent = () =>\n    (!expectedGeneration ||\n      isSyncGenerationCurrent(state, expectedGeneration)) &&\n    options.stillCurrent?.() !== false;\n  const createsPlacement = state.record === null;\n  const previousDocumentId = state.record?.documentId ?? null;\n  const pendingBaseVersion =\n    options.pendingBaseVersionOverride === undefined\n      ? state.pendingBaseVersion\n      : options.pendingBaseVersionOverride;\n  const persistenceInput = {\n    acceptedPendingUpdateIds: options.acceptedPendingUpdateIds,\n    attachmentRemoval: options.attachmentRemoval,\n    attachmentStaging: options.attachmentStaging,\n    clearSyncFailure: options.clearSyncFailure,\n    ...(commitSideEffect ? { commitSideEffect } : {}),\n    containerId: state.runtime.state.containerId,\n    currentDoc,\n    currentRecord: state.record,\n    documentProjectors: state.runtime.infra.documentProjectors,\n    execSql: state.runtime.infra.execSql,\n    expectedSyncState: options.expectedSyncState,\n    historyCheckpoint: options.historyCheckpoint,\n    historyUpdateOrigin: options.historyUpdateOrigin,\n    historyUpdates: options.historyUpdates,\n    pendingUpdate: options.pendingUpdate,\n    localId: state.localId,\n    // Persist the durable outgoing-delta marker with every snapshot write so a\n    // restart restores it (see initializeDocumentStore). A device-first\n    // deferRemoteSync write leaves it BEHIND the snapshot version on purpose;\n    // capturing state.pendingBaseVersion here is what lets the next edit\n    // re-derive that deferred op after a restart instead of dropping it.\n    patch: { ...patch, pendingBaseVersion },\n    persistence: state.persistence,\n  };\n  const persistedDocumentState =\n    expectedGeneration || options.stillCurrent\n      ? await persistDocumentState({\n          ...persistenceInput,\n          // persistDocumentState rechecks after its own pre-save awaits and then\n          // immediately claims the executor mutation queue. A reset before that\n          // point aborts; a reset afterward cannot let replacement writes overtake.\n          canStartDurableMutation: isCurrent,\n        })\n      : await persistDocumentState(persistenceInput);\n  if (!persistedDocumentState) {\n    // With a stale generation the teardown that invalidated it owns the\n    // state. With a current (or absent) generation, the refusal means the\n    // durable row was deleted by ANOTHER subsystem while this persist was\n    // queued (the resurrect guard): this store is a zombie — clear it so\n    // callers that ignore the result stop advancing state or scheduling\n    // sync against a document that no longer exists.\n    if (isCurrent()) {\n      markDocumentStoreRemoved(state);\n    }\n    void runDocumentOrphanMaintenance(state);\n    return null;\n  }\n  const { record: nextRecord, updatedAt } = persistedDocumentState;\n  if (!isCurrent()) {\n    return null;\n  }\n\n  state.record = persistedDocumentState.record;\n  state.pullContinuation = nextRecord.pullContinuation ?? null;\n  if (persistedDocumentState.pullContinuationSuperseded) {\n    state.pendingBaseVersion =\n      nextRecord.pendingBaseVersion ?? nextRecord.snapshotEndVersion;\n  }\n  if (previousDocumentId !== nextRecord.documentId) {\n    state.effects.registerDocumentIdentity(\n      state.runtime.state.domainScope,\n      nextRecord.id,\n      nextRecord.documentId,\n    );\n  }\n  if (updatedAt !== undefined) {\n    state.effects.emitPersistedDocument(\n      state.runtime.state.domainScope,\n      documentSummaryFromRecord(\n        nextRecord,\n        updatedAt,\n        state.runtime.infra.documentProjectors,\n      ),\n      createsPlacement ||\n        Object.hasOwn(patch, \"containerId\") ||\n        previousDocumentId !== nextRecord.documentId,\n    );\n  }\n  return toPersistedDocumentRecord(persistedDocumentState);\n}\n\nasync function reloadSupersededDocumentState(\n  state: DocumentStoreState,\n  isCurrent: () => boolean,\n  historyRestoreState: PersistedDocumentRecord[\"historyRestoreState\"],\n  previousDocumentId: string | null,\n  durableRecord: DocumentRecord,\n): Promise<DocumentState | null> {\n  if (historyRestoreState === undefined) {\n    throw new Error(\"Superseded document state omitted its durable history\");\n  }\n  const replacementDoc = await createFreshPeerStoredDocument();\n  importDurableDocumentHistory(replacementDoc, historyRestoreState);\n  if (!isCurrent()) {\n    return null;\n  }\n  installDurableDocumentReload({\n    durableRecord,\n    previousDocumentId,\n    preserveQueuedWritesWhenIdentityMatches: true,\n    registerIdentityChange: false,\n    replacementDoc,\n    state,\n  });\n  return replacementDoc;\n}\n\nexport async function persistDocument(\n  state: DocumentStoreState,\n  currentDoc: DocumentState,\n  patch: Partial<DocumentRecord> = {},\n  options: SaveDocumentRecordOptions = {},\n  expectedGeneration?: DocumentStoreSyncGeneration,\n  commitSideEffect?: (transactionExecSql: ExecSql) => Promise<void>,\n): Promise<PersistedDocumentRecord | null> {\n  const isCurrent = () =>\n    (!expectedGeneration ||\n      isSyncGenerationCurrent(state, expectedGeneration)) &&\n    options.stillCurrent?.() !== false;\n  const previousDocumentId = state.record?.documentId ?? null;\n  const persistedRecord = await saveDocumentRecord(\n    state,\n    currentDoc,\n    patch,\n    options,\n    expectedGeneration,\n    commitSideEffect,\n  );\n  return publishPersistedDocument(\n    state,\n    currentDoc,\n    persistedRecord,\n    previousDocumentId,\n    options,\n    isCurrent,\n  );\n}\n\n/** Publish only after the durable claim succeeds and its live context remains. */\nexport async function publishPersistedDocument(\n  state: DocumentStoreState,\n  currentDoc: DocumentState,\n  persistedRecord: PersistedDocumentRecord | null,\n  previousDocumentId: string | null,\n  options: SaveDocumentRecordOptions,\n  isCurrent: () => boolean,\n): Promise<PersistedDocumentRecord | null> {\n  if (!persistedRecord) return null;\n  if (!isCurrent()) return null;\n\n  if (\n    persistedRecord.syncIdentitySuperseded ||\n    persistedRecord.pullContinuationSuperseded\n  ) {\n    // Reload the winning durable checkpoint/tail on every CAS loss, including\n    // another pane's history or security-context changes. A rejected sync\n    // candidate remains isolated from the live document and editor.\n    const replacementDoc = await reloadSupersededDocumentState(\n      state,\n      isCurrent,\n      persistedRecord.historyRestoreState,\n      previousDocumentId,\n      persistedRecord.record,\n    );\n    if (!replacementDoc) return null;\n    return persistedRecord;\n  }\n\n  setReadySnapshot(\n    state,\n    currentDoc,\n    state.snapshot.syncing,\n    options.preserveSnapshotText && !persistedRecord.pullContinuationSuperseded\n      ? state.snapshot.text\n      : persistedRecord.record.text,\n    options.preserveSnapshotStructuredFields &&\n      !persistedRecord.pullContinuationSuperseded\n      ? state.snapshot.structuredFields\n      : undefined,\n  );\n  // Compaction never fails the persist that triggered it: an unexpected\n  // compaction error simply keeps the tail growing until a later pass\n  // succeeds, and the content stays durable either way.\n  try {\n    await maybeCompactDocumentHistory(state, currentDoc, options.stillCurrent);\n  } catch (error) {\n    state.runtime.util.log(\n      `Documents: history compaction skipped: ${errorMessage(error)}`,\n    );\n  }\n  return persistedRecord;\n}\n\nexport async function listPendingUpdates(\n  state: DocumentStoreState,\n): Promise<PendingUpdateRecord[]> {\n  return listPendingDocumentUpdates({\n    execSql: state.runtime.infra.execSql,\n    localId: state.localId,\n    persistence: state.persistence,\n  });\n}\n\n/**\n * Export the outgoing delta for the current edit. The base is `pendingBaseVersion`\n * (the version through which ops are already durably enqueued or synced), NOT the\n * live doc version, so any delta orphaned by a prior failed enqueue is folded back\n * in here. In the success path the marker equals the pre-edit version, so this is\n * identical to exporting \"since the last edit\".\n *\n * Initialization sets `pendingBaseVersion` whenever it sets `doc`, and every\n * caller checks `doc` first, so the marker is non-null here. Assert that rather\n * than falling back to the live version: callers invoke this AFTER mutating the\n * doc, so a live-version fallback would export an empty (post-mutation) delta and\n * silently drop the edit.\n */\nexport function pendingDeltaSinceBase(\n  state: DocumentStoreState,\n  doc: DocumentState,\n): Uint8Array {\n  if (state.pendingBaseVersion === null) {\n    throw new Error(\n      \"pendingDeltaSinceBase requires an initialized pendingBaseVersion\",\n    );\n  }\n  return exportUpdatesSince(doc, state.pendingBaseVersion);\n}\n\n/**\n * Advance the durable marker to the doc's current version. Call this ONLY after\n * an edit's delta has been durably enqueued and persisted, or after remote\n * updates have been imported (those ops are already on the server).\n */\nexport function advancePendingBaseVersion(\n  state: DocumentStoreState,\n  doc: DocumentState,\n): void {\n  state.pendingBaseVersion = encodeVersionVector(doc);\n  // Every op through here is enqueued or remote, so a deferred birth is now\n  // covered: lift its scheduled-sync hold and request the pass it skipped.\n  if (state.deferInitialUpdate) {\n    state.deferInitialUpdate = false;\n    requestDocumentStoreSync(state);\n  }\n}\n\n/**\n * Runs a durable write either ungated — no generation: the caller serializes\n * with teardown via the write-chain drain, and the persistence implementation\n * may legitimately park inside the write WITHOUT holding the global mutation\n * mutex — or inside the serialized mutation with an in-mutex currency check:\n * a teardown (reset/discard) that already ran was ordered strictly before the\n * mutation claim and invalidated the generation, so a stale caller can no\n * longer slip its write in after the teardown's wipe; a write that wins the\n * ordering instead lands before the teardown and is wiped by it. Returns\n * whether the write ran.\n */\nexport async function withGenerationGuardedMutation(\n  state: DocumentStoreState,\n  expectedGeneration: DocumentStoreSyncGeneration | undefined,\n  write: (execSql: ExecSql) => Promise<void>,\n): Promise<boolean> {\n  if (!expectedGeneration) {\n    await write(state.runtime.infra.execSql);\n    return true;\n  }\n\n  let ran = false;\n  await runSerializedSqlMutation(\n    state.runtime.infra.execSql,\n    async (lockedExecSql) => {\n      if (!isSyncGenerationCurrent(state, expectedGeneration)) {\n        return;\n      }\n      await write(lockedExecSql);\n      ran = true;\n    },\n  );\n  return ran;\n}\n\nexport async function enqueuePendingUpdate(\n  state: DocumentStoreState,\n  update: Uint8Array,\n  sourceVersionVector?: string | null,\n  expectedGeneration?: DocumentStoreSyncGeneration,\n): Promise<boolean> {\n  const expectedDocumentId = state.record?.documentId;\n  const expectedRecoveryGeneration = state.record?.recoveryGeneration ?? 0;\n  if (expectedDocumentId === undefined) {\n    return false;\n  }\n  let enqueued = false;\n  const ran = await withGenerationGuardedMutation(\n    state,\n    expectedGeneration,\n    async (execSql) => {\n      enqueued = await enqueuePendingDocumentUpdate({\n        execSql,\n        expectedDocumentId,\n        expectedRecoveryGeneration,\n        localId: state.localId,\n        persistence: state.persistence,\n        ...(sourceVersionVector === undefined ? {} : { sourceVersionVector }),\n        update,\n      });\n    },\n  );\n  return ran && enqueued;\n}\n"]}
+{"version":3,"file":"persistence.js","sourceRoot":"","sources":["persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAEL,0BAA0B,GAC3B,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAGL,4BAA4B,EAC5B,0BAA0B,EAE1B,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAGL,wBAAwB,EAGxB,gBAAgB,GACjB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAEL,oCAAoC,IAAI,uBAAuB,GAChE,MAAM,uBAAuB,CAAC;AAE/B,MAAM,UAAU,yBAAyB,CACvC,MAAsB,EACtB,SAAiB,EACjB,kBAA6C;IAE7C,OAAO;QACL,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QAC/C,oBAAoB,EAAE,6BAA6B,CACjD,MAAM,CAAC,oBAAoB,CAC5B;QACD,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,qBAAqB;QAC1D,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EACH,MAAM,CAAC,KAAK;YACZ,0BAA0B,CACxB;gBACE,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,qBAAqB;gBAC1D,gBAAgB,EAAE,EAAE;gBACpB,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,EACD,kBAAkB,CACnB,CAAC,KAAK;QACT,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,SAAwE;IAExE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO;QACL,GAAG,CAAC,SAAS,CAAC,kBAAkB;YAC9B,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAa,EAAE;YACvC,CAAC,CAAC,EAAE,CAAC;QACP,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;QAClD,GAAG,CAAC,SAAS,CAAC,0BAA0B;YACtC,CAAC,CAAC,EAAE,0BAA0B,EAAE,IAAa,EAAE;YAC/C,CAAC,CAAC,EAAE,CAAC;QACP,MAAM;QACN,GAAG,CAAC,SAAS,CAAC,sBAAsB;YAClC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAa,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,4EAA4E;AAC5E,2EAA2E;AAC3E,yBAAyB;AACzB,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAyB,EACzB,UAAyB,EACzB,QAAiC,EAAE,EACnC,UAAqC,EAAE,EACvC,kBAAgD,EAChD,gBAAiE;IAEjE,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,CAAC,CAAC,kBAAkB;QAClB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QACrD,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,CAAC;IACrC,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC;IAC/C,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC;IAC5D,MAAM,kBAAkB,GACtB,OAAO,CAAC,0BAA0B,KAAK,SAAS;QAC9C,CAAC,CAAC,KAAK,CAAC,kBAAkB;QAC1B,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACzC,MAAM,gBAAgB,GAAG;QACvB,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;QAC1D,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW;QAC5C,UAAU;QACV,aAAa,EAAE,KAAK,CAAC,MAAM;QAC3B,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB;QAC1D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,2EAA2E;QAC3E,oEAAoE;QACpE,0EAA0E;QAC1E,qEAAqE;QACrE,qEAAqE;QACrE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,kBAAkB,EAAE;QACvC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IACF,MAAM,sBAAsB,GAC1B,kBAAkB,IAAI,OAAO,CAAC,YAAY;QACxC,CAAC,CAAC,MAAM,oBAAoB,CAAC;YACzB,GAAG,gBAAgB;YACnB,uEAAuE;YACvE,sEAAsE;YACtE,0EAA0E;YAC1E,uBAAuB,EAAE,SAAS;SACnC,CAAC;QACJ,CAAC,CAAC,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IACnD,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,oEAAoE;QACpE,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,oEAAoE;QACpE,iDAAiD;QACjD,IAAI,SAAS,EAAE,EAAE,CAAC;YAChB,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,KAAK,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,sBAAsB,CAAC;IACjE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC;IAC7C,KAAK,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,IAAI,IAAI,CAAC;IAC7D,IAAI,sBAAsB,CAAC,0BAA0B,EAAE,CAAC;QACtD,KAAK,CAAC,kBAAkB;YACtB,UAAU,CAAC,kBAAkB,IAAI,UAAU,CAAC,kBAAkB,CAAC;IACnE,CAAC;IACD,IAAI,kBAAkB,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;QACjD,KAAK,CAAC,OAAO,CAAC,wBAAwB,CACpC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAC/B,UAAU,CAAC,EAAE,EACb,UAAU,CAAC,UAAU,CACtB,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,KAAK,CAAC,OAAO,CAAC,qBAAqB,CACjC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAC/B,yBAAyB,CACvB,UAAU,EACV,SAAS,EACT,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CACvC,EACD,gBAAgB;YACd,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC;YACnC,kBAAkB,KAAK,UAAU,CAAC,UAAU,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,KAAyB,EACzB,SAAwB,EACxB,mBAAmE,EACnE,kBAAiC,EACjC,aAA6B;IAE7B,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,6BAA6B,EAAE,CAAC;IAC7D,4BAA4B,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,4BAA4B,CAAC;QAC3B,aAAa;QACb,kBAAkB;QAClB,uCAAuC,EAAE,IAAI;QAC7C,sBAAsB,EAAE,KAAK;QAC7B,cAAc;QACd,KAAK;KACN,CAAC,CAAC;IACH,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAyB,EACzB,UAAyB,EACzB,QAAiC,EAAE,EACnC,UAAqC,EAAE,EACvC,kBAAgD,EAChD,gBAAiE;IAEjE,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,CAAC,CAAC,kBAAkB;QAClB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QACrD,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,CAAC;IACrC,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC;IAC5D,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAC9C,KAAK,EACL,UAAU,EACV,KAAK,EACL,OAAO,EACP,kBAAkB,EAClB,gBAAgB,CACjB,CAAC;IACF,OAAO,wBAAwB,CAC7B,KAAK,EACL,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,OAAO,EACP,SAAS,CACV,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAyB,EACzB,UAAyB,EACzB,eAA+C,EAC/C,kBAAiC,EACjC,OAAkC,EAClC,SAAwB;IAExB,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAE9B,IACE,eAAe,CAAC,sBAAsB;QACtC,eAAe,CAAC,0BAA0B,EAC1C,CAAC;QACD,0EAA0E;QAC1E,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,cAAc,GAAG,MAAM,6BAA6B,CACxD,KAAK,EACL,SAAS,EACT,eAAe,CAAC,mBAAmB,EACnC,kBAAkB,EAClB,eAAe,CAAC,MAAM,CACvB,CAAC;QACF,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QACjC,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,gBAAgB,CACd,KAAK,EACL,UAAU,EACV,KAAK,CAAC,QAAQ,CAAC,OAAO,EACtB,OAAO,CAAC,oBAAoB,IAAI,CAAC,eAAe,CAAC,0BAA0B;QACzE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI;QACrB,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,EAC/B,OAAO,CAAC,gCAAgC;QACtC,CAAC,eAAe,CAAC,0BAA0B;QAC3C,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB;QACjC,CAAC,CAAC,SAAS,CACd,CAAC;IACF,sEAAsE;IACtE,oEAAoE;IACpE,sDAAsD;IACtD,IAAI,CAAC;QACH,MAAM,2BAA2B,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,0CAA0C,YAAY,CAAC,KAAK,CAAC,EAAE,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAyB;IAEzB,OAAO,0BAA0B,CAAC;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAyB,EACzB,GAAkB;IAElB,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAyB,EACzB,GAAkB;IAElB,KAAK,CAAC,kBAAkB,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACpD,0EAA0E;IAC1E,yEAAyE;IACzE,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC;QACjC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAyB,EACzB,kBAA2D,EAC3D,KAA0C;IAE1C,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,MAAM,wBAAwB,CAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,KAAK,EAAE,aAAa,EAAE,EAAE;QACtB,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAAE,CAAC;YACxD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3B,GAAG,GAAG,IAAI,CAAC;IACb,CAAC,CACF,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAyB,EACzB,MAAkB,EAClB,mBAAmC,EACnC,kBAAgD;IAEhD,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC;IACpD,MAAM,0BAA0B,GAAG,KAAK,CAAC,MAAM,EAAE,kBAAkB,IAAI,CAAC,CAAC;IACzE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,GAAG,GAAG,MAAM,6BAA6B,CAC7C,KAAK,EACL,kBAAkB,EAClB,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,QAAQ,GAAG,MAAM,4BAA4B,CAAC;YAC5C,OAAO;YACP,kBAAkB;YAClB,0BAA0B;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC;YACrE,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IACF,OAAO,GAAG,IAAI,QAAQ,CAAC;AACzB,CAAC","sourcesContent":["import { encodeVersionVector, exportUpdatesSince } from \"@tearleads/loro\";\nimport { DEFAULT_DOCUMENT_KIND } from \"../../../data/documents/documentConstants\";\nimport {\n  type DocumentProjectorRegistry,\n  projectStoredDocumentState,\n} from \"../../../data/documents/documentKinds\";\nimport type { DocumentSummary } from \"../../../data/documents/documentSummary\";\nimport { normalizeEffectiveAccessLevel } from \"../../../data/keying/accessLevel\";\nimport { errorMessage } from \"../../../data/shared/errorMessage\";\nimport {\n  type DocumentRecord,\n  type ExecSql,\n  enqueuePendingDocumentUpdate,\n  listPendingDocumentUpdates,\n  type PendingUpdateRecord,\n  persistDocumentState,\n  runSerializedSqlMutation,\n} from \"../../../workflows/documents\";\nimport { requestDocumentStoreSync } from \"../registry\";\nimport { maybeCompactDocumentHistory } from \"./history/documentHistoryCompaction\";\nimport {\n  importDurableDocumentHistory,\n  installDurableDocumentReload,\n} from \"./history/durableDocumentReload\";\nimport { runDocumentOrphanMaintenance } from \"./orphanMaintenance\";\nimport {\n  type DocumentState,\n  type DocumentStoreState,\n  markDocumentStoreRemoved,\n  type PersistedDocumentRecord,\n  type SaveDocumentRecordOptions,\n  setReadySnapshot,\n} from \"./state\";\nimport { createFreshPeerStoredDocument } from \"./storedDocument\";\nimport {\n  type DocumentStoreSyncGeneration,\n  isDocumentStoreSyncGenerationCurrent as isSyncGenerationCurrent,\n} from \"./sync/syncGeneration\";\n\nexport function documentSummaryFromRecord(\n  record: DocumentRecord,\n  updatedAt: string,\n  documentProjectors: DocumentProjectorRegistry,\n): DocumentSummary {\n  return {\n    accessStateHash: record.accessStateHash ?? null,\n    effectiveAccessLevel: normalizeEffectiveAccessLevel(\n      record.effectiveAccessLevel,\n    ),\n    id: record.id,\n    containerId: record.containerId,\n    documentKind: record.documentKind ?? DEFAULT_DOCUMENT_KIND,\n    documentId: record.documentId,\n    title:\n      record.title ??\n      projectStoredDocumentState(\n        {\n          documentKind: record.documentKind ?? DEFAULT_DOCUMENT_KIND,\n          structuredFields: {},\n          text: record.text,\n        },\n        documentProjectors,\n      ).title,\n    updatedAt,\n  };\n}\n\nfunction toPersistedDocumentRecord(\n  persisted: NonNullable<Awaited<ReturnType<typeof persistDocumentState>>>,\n): PersistedDocumentRecord {\n  const { record, updatedAt } = persisted;\n  return {\n    ...(persisted.creationSuperseded\n      ? { creationSuperseded: true as const }\n      : {}),\n    historyRestoreState: persisted.historyRestoreState,\n    ...(persisted.pullContinuationSuperseded\n      ? { pullContinuationSuperseded: true as const }\n      : {}),\n    record,\n    ...(persisted.syncIdentitySuperseded\n      ? { syncIdentitySuperseded: true as const }\n      : {}),\n    ...(updatedAt !== undefined ? { updatedAt } : {}),\n  };\n}\n\n// Nullable without a generation too: an update-persist refuses (returns\n// null) when the durable row was deleted while the persist was queued — the\n// resurrect guard in persistDocumentState — so callers must stop follow-up\n// state changes on null.\nexport async function saveDocumentRecord(\n  state: DocumentStoreState,\n  currentDoc: DocumentState,\n  patch: Partial<DocumentRecord> = {},\n  options: SaveDocumentRecordOptions = {},\n  expectedGeneration?: DocumentStoreSyncGeneration,\n  commitSideEffect?: (transactionExecSql: ExecSql) => Promise<void>,\n): Promise<PersistedDocumentRecord | null> {\n  const isCurrent = () =>\n    (!expectedGeneration ||\n      isSyncGenerationCurrent(state, expectedGeneration)) &&\n    options.stillCurrent?.() !== false;\n  const createsPlacement = state.record === null;\n  const previousDocumentId = state.record?.documentId ?? null;\n  const pendingBaseVersion =\n    options.pendingBaseVersionOverride === undefined\n      ? state.pendingBaseVersion\n      : options.pendingBaseVersionOverride;\n  const persistenceInput = {\n    acceptedPendingUpdateIds: options.acceptedPendingUpdateIds,\n    attachmentRemoval: options.attachmentRemoval,\n    attachmentStaging: options.attachmentStaging,\n    clearSyncFailure: options.clearSyncFailure,\n    ...(commitSideEffect ? { commitSideEffect } : {}),\n    containerId: state.runtime.state.containerId,\n    currentDoc,\n    currentRecord: state.record,\n    documentProjectors: state.runtime.infra.documentProjectors,\n    execSql: state.runtime.infra.execSql,\n    expectedSyncState: options.expectedSyncState,\n    historyCheckpoint: options.historyCheckpoint,\n    historyUpdateOrigin: options.historyUpdateOrigin,\n    historyUpdates: options.historyUpdates,\n    pendingUpdate: options.pendingUpdate,\n    localId: state.localId,\n    // Persist the durable outgoing-delta marker with every snapshot write so a\n    // restart restores it (see initializeDocumentStore). A device-first\n    // deferRemoteSync write leaves it BEHIND the snapshot version on purpose;\n    // capturing state.pendingBaseVersion here is what lets the next edit\n    // re-derive that deferred op after a restart instead of dropping it.\n    patch: { ...patch, pendingBaseVersion },\n    persistence: state.persistence,\n  };\n  const persistedDocumentState =\n    expectedGeneration || options.stillCurrent\n      ? await persistDocumentState({\n          ...persistenceInput,\n          // persistDocumentState rechecks after its own pre-save awaits and then\n          // immediately claims the executor mutation queue. A reset before that\n          // point aborts; a reset afterward cannot let replacement writes overtake.\n          canStartDurableMutation: isCurrent,\n        })\n      : await persistDocumentState(persistenceInput);\n  if (!persistedDocumentState) {\n    // With a stale generation the teardown that invalidated it owns the\n    // state. With a current (or absent) generation, the refusal means the\n    // durable row was deleted by ANOTHER subsystem while this persist was\n    // queued (the resurrect guard): this store is a zombie — clear it so\n    // callers that ignore the result stop advancing state or scheduling\n    // sync against a document that no longer exists.\n    if (isCurrent()) {\n      markDocumentStoreRemoved(state);\n    }\n    void runDocumentOrphanMaintenance(state);\n    return null;\n  }\n  const { record: nextRecord, updatedAt } = persistedDocumentState;\n  if (!isCurrent()) {\n    return null;\n  }\n\n  state.record = persistedDocumentState.record;\n  state.pullContinuation = nextRecord.pullContinuation ?? null;\n  if (persistedDocumentState.pullContinuationSuperseded) {\n    state.pendingBaseVersion =\n      nextRecord.pendingBaseVersion ?? nextRecord.snapshotEndVersion;\n  }\n  if (previousDocumentId !== nextRecord.documentId) {\n    state.effects.registerDocumentIdentity(\n      state.runtime.state.domainScope,\n      nextRecord.id,\n      nextRecord.documentId,\n    );\n  }\n  if (updatedAt !== undefined) {\n    state.effects.emitPersistedDocument(\n      state.runtime.state.domainScope,\n      documentSummaryFromRecord(\n        nextRecord,\n        updatedAt,\n        state.runtime.infra.documentProjectors,\n      ),\n      createsPlacement ||\n        Object.hasOwn(patch, \"containerId\") ||\n        previousDocumentId !== nextRecord.documentId,\n    );\n  }\n  return toPersistedDocumentRecord(persistedDocumentState);\n}\n\nasync function reloadSupersededDocumentState(\n  state: DocumentStoreState,\n  isCurrent: () => boolean,\n  historyRestoreState: PersistedDocumentRecord[\"historyRestoreState\"],\n  previousDocumentId: string | null,\n  durableRecord: DocumentRecord,\n): Promise<DocumentState | null> {\n  if (historyRestoreState === undefined) {\n    throw new Error(\"Superseded document state omitted its durable history\");\n  }\n  const replacementDoc = await createFreshPeerStoredDocument();\n  importDurableDocumentHistory(replacementDoc, historyRestoreState);\n  if (!isCurrent()) {\n    return null;\n  }\n  installDurableDocumentReload({\n    durableRecord,\n    previousDocumentId,\n    preserveQueuedWritesWhenIdentityMatches: true,\n    registerIdentityChange: false,\n    replacementDoc,\n    state,\n  });\n  return replacementDoc;\n}\n\nexport async function persistDocument(\n  state: DocumentStoreState,\n  currentDoc: DocumentState,\n  patch: Partial<DocumentRecord> = {},\n  options: SaveDocumentRecordOptions = {},\n  expectedGeneration?: DocumentStoreSyncGeneration,\n  commitSideEffect?: (transactionExecSql: ExecSql) => Promise<void>,\n): Promise<PersistedDocumentRecord | null> {\n  const isCurrent = () =>\n    (!expectedGeneration ||\n      isSyncGenerationCurrent(state, expectedGeneration)) &&\n    options.stillCurrent?.() !== false;\n  const previousDocumentId = state.record?.documentId ?? null;\n  const persistedRecord = await saveDocumentRecord(\n    state,\n    currentDoc,\n    patch,\n    options,\n    expectedGeneration,\n    commitSideEffect,\n  );\n  return publishPersistedDocument(\n    state,\n    currentDoc,\n    persistedRecord,\n    previousDocumentId,\n    options,\n    isCurrent,\n  );\n}\n\n/** Publish only after the durable claim succeeds and its live context remains. */\nexport async function publishPersistedDocument(\n  state: DocumentStoreState,\n  currentDoc: DocumentState,\n  persistedRecord: PersistedDocumentRecord | null,\n  previousDocumentId: string | null,\n  options: SaveDocumentRecordOptions,\n  isCurrent: () => boolean,\n): Promise<PersistedDocumentRecord | null> {\n  if (!persistedRecord) return null;\n  if (!isCurrent()) return null;\n\n  if (\n    persistedRecord.syncIdentitySuperseded ||\n    persistedRecord.pullContinuationSuperseded\n  ) {\n    // Reload the winning durable checkpoint/tail on every CAS loss, including\n    // another pane's history or security-context changes. A rejected sync\n    // candidate remains isolated from the live document and editor.\n    const replacementDoc = await reloadSupersededDocumentState(\n      state,\n      isCurrent,\n      persistedRecord.historyRestoreState,\n      previousDocumentId,\n      persistedRecord.record,\n    );\n    if (!replacementDoc) return null;\n    return persistedRecord;\n  }\n\n  setReadySnapshot(\n    state,\n    currentDoc,\n    state.snapshot.syncing,\n    options.preserveSnapshotText && !persistedRecord.pullContinuationSuperseded\n      ? state.snapshot.text\n      : persistedRecord.record.text,\n    options.preserveSnapshotStructuredFields &&\n      !persistedRecord.pullContinuationSuperseded\n      ? state.snapshot.structuredFields\n      : undefined,\n  );\n  // Compaction never fails the persist that triggered it: an unexpected\n  // compaction error simply keeps the tail growing until a later pass\n  // succeeds, and the content stays durable either way.\n  try {\n    await maybeCompactDocumentHistory(state, currentDoc, options.stillCurrent);\n  } catch (error) {\n    state.runtime.util.log(\n      `Documents: history compaction skipped: ${errorMessage(error)}`,\n    );\n  }\n  return persistedRecord;\n}\n\nexport async function listPendingUpdates(\n  state: DocumentStoreState,\n): Promise<PendingUpdateRecord[]> {\n  return listPendingDocumentUpdates({\n    execSql: state.runtime.infra.execSql,\n    localId: state.localId,\n    persistence: state.persistence,\n  });\n}\n\n/**\n * Export the outgoing delta for the current edit. The base is `pendingBaseVersion`\n * (the version through which ops are already durably enqueued or synced), NOT the\n * live doc version, so any delta orphaned by a prior failed enqueue is folded back\n * in here. In the success path the marker equals the pre-edit version, so this is\n * identical to exporting \"since the last edit\".\n *\n * Initialization sets `pendingBaseVersion` whenever it sets `doc`, and every\n * caller checks `doc` first, so the marker is non-null here. Assert that rather\n * than falling back to the live version: callers invoke this AFTER mutating the\n * doc, so a live-version fallback would export an empty (post-mutation) delta and\n * silently drop the edit.\n */\nexport function pendingDeltaSinceBase(\n  state: DocumentStoreState,\n  doc: DocumentState,\n): Uint8Array {\n  if (state.pendingBaseVersion === null) {\n    throw new Error(\n      \"pendingDeltaSinceBase requires an initialized pendingBaseVersion\",\n    );\n  }\n  return exportUpdatesSince(doc, state.pendingBaseVersion);\n}\n\n/**\n * Advance the durable marker to the doc's current version. Call this ONLY after\n * an edit's delta has been durably enqueued and persisted, or after remote\n * updates have been imported (those ops are already on the server).\n */\nexport function advancePendingBaseVersion(\n  state: DocumentStoreState,\n  doc: DocumentState,\n): void {\n  state.pendingBaseVersion = encodeVersionVector(doc);\n  // Every op through here is enqueued or remote, so a deferred birth is now\n  // covered: lift its scheduled-sync hold and request the pass it skipped.\n  if (state.deferInitialUpdate) {\n    state.deferInitialUpdate = false;\n    requestDocumentStoreSync(state);\n  }\n}\n\n/**\n * Runs a durable write either ungated — no generation: the caller serializes\n * with teardown via the write-chain drain, and the persistence implementation\n * may legitimately park inside the write WITHOUT holding the global mutation\n * mutex — or inside the serialized mutation with an in-mutex currency check:\n * a teardown (reset/discard) that already ran was ordered strictly before the\n * mutation claim and invalidated the generation, so a stale caller can no\n * longer slip its write in after the teardown's wipe; a write that wins the\n * ordering instead lands before the teardown and is wiped by it. Returns\n * whether the write ran.\n */\nexport async function withGenerationGuardedMutation(\n  state: DocumentStoreState,\n  expectedGeneration: DocumentStoreSyncGeneration | undefined,\n  write: (execSql: ExecSql) => Promise<void>,\n): Promise<boolean> {\n  if (!expectedGeneration) {\n    await write(state.runtime.infra.execSql);\n    return true;\n  }\n\n  let ran = false;\n  await runSerializedSqlMutation(\n    state.runtime.infra.execSql,\n    async (lockedExecSql) => {\n      if (!isSyncGenerationCurrent(state, expectedGeneration)) {\n        return;\n      }\n      await write(lockedExecSql);\n      ran = true;\n    },\n  );\n  return ran;\n}\n\nexport async function enqueuePendingUpdate(\n  state: DocumentStoreState,\n  update: Uint8Array,\n  sourceVersionVector?: string | null,\n  expectedGeneration?: DocumentStoreSyncGeneration,\n): Promise<boolean> {\n  const expectedDocumentId = state.record?.documentId;\n  const expectedRecoveryGeneration = state.record?.recoveryGeneration ?? 0;\n  if (expectedDocumentId === undefined) {\n    return false;\n  }\n  let enqueued = false;\n  const ran = await withGenerationGuardedMutation(\n    state,\n    expectedGeneration,\n    async (execSql) => {\n      enqueued = await enqueuePendingDocumentUpdate({\n        execSql,\n        expectedDocumentId,\n        expectedRecoveryGeneration,\n        localId: state.localId,\n        persistence: state.persistence,\n        ...(sourceVersionVector === undefined ? {} : { sourceVersionVector }),\n        update,\n      });\n    },\n  );\n  return ran && enqueued;\n}\n"]}

package/stores/documents/documentStore/rotation/index.js

@@ -0,0 +1,307 @@
+import { encodeVersionVector, versionVectorsEqual } from "../../../../internal/loro/index.js";
+import { createDocumentWriterPublicKeyResolver, readPullContinuation, resolveDocumentCreateAuthor, syncRemoteDocument, validateDocumentSyncUpdateImports, } from "../../../../workflows/documents/index.js";
+import { createRuntimePrincipalPolicyWarmer } from "../../../../workflows/principals/runtimePolicyWarmer.js";
+import { requestDocumentStoreSync } from "../../registry.js";
+import { installRebuiltDocument } from "../history/historyRebuild.js";
+import { chainIdentityWrite } from "../identityWriteChain.js";
+import { listPendingUpdates } from "../persistence.js";
+import { createStoredDocument } from "../storedDocument.js";
+import { runDocumentRemoteWork } from "../sync/remoteWork.js";
+import { captureDocumentStoreAttachmentSyncGeneration, captureDocumentStoreSyncLaneGeneration, isDocumentStoreSyncGenerationCurrent, } from "../sync/syncGeneration.js";
+import { deleteUpstreamDeletedDocument } from "../sync/syncRequest.js";
+import { documentIncomingUpdateIsolationFailureHandler } from "../sync/syncShared.js";
+import { importSyncedDocumentUpdates } from "../sync/syncUpdateImport.js";
+import { assertExactDocumentHistory, importProvenOrdinaryPendingHistory, } from "./rotationProvenance.js";
+import { invalidatePullContinuationBeforeRotation, RotationPendingUpdatesChangedError, settleOrdinaryDocumentUpdatesBeforeRotation, } from "./rotationSettlement.js";
+function ordinaryRawHistoryUpdates(updates) {
+    return updates.filter((update) => update.checkpointKind === undefined);
+}
+function assertRotationRecoveryPrerequisites(state) {
+    if (state.persistence.supportsAtomicRecoveryHistoryPruning !== true) {
+        throw new Error("Rotation raw-history recovery requires an adapter with atomic local-history pruning");
+    }
+    const author = resolveDocumentCreateAuthor(state.runtime);
+    const encapsulationKeyPair = state.runtime.crypto.encapsulationKeyPair;
+    const documentId = state.record?.documentId;
+    if (!author ||
+        !encapsulationKeyPair ||
+        !documentId ||
+        !state.runtime.auth.isAuthenticated ||
+        !state.runtime.state.online) {
+        throw new Error("Rotation requires verified full-history recovery, but remote sync prerequisites are unavailable");
+    }
+    return { author, documentId, encapsulationKeyPair };
+}
+function assertRotationRecoveryGeneration(input) {
+    if (!isDocumentStoreSyncGenerationCurrent(input.state, input.generation)) {
+        throw new Error("Document changed during rotation recovery; retry key rotation");
+    }
+}
+function rotationIncomingUpdateIsolation(input) {
+    return {
+        onIncomingUpdateIsolationFailure: documentIncomingUpdateIsolationFailureHandler(input.state, input.generation),
+        validateIncomingUpdates: async (result) => {
+            await validateDocumentSyncUpdateImports({
+                currentDocument: input.currentDocument,
+                decryptedUpdates: result.decryptedUpdates,
+                responseUpdates: result.response.updates,
+            });
+            const decryptedUpdates = ordinaryRawHistoryUpdates(result.decryptedUpdates);
+            const ordinaryUpdateIds = new Set(decryptedUpdates.map((update) => update.id));
+            await validateDocumentSyncUpdateImports({
+                currentDocument: input.currentDocument,
+                decryptedUpdates,
+                responseUpdates: result.response.updates.filter((update) => ordinaryUpdateIds.has(update.id)),
+            });
+        },
+    };
+}
+async function pullVerifiedRawHistoryForRotation(input) {
+    const { author, documentId, encapsulationKeyPair } = assertRotationRecoveryPrerequisites(input.state);
+    let pullContinuation;
+    const seenPullCursors = new Set();
+    let planningRecord = input.currentRecord;
+    let writerProjection = input.state.writerProjection?.documentId === documentId
+        ? input.state.writerProjection
+        : undefined;
+    while (true) {
+        let abandonReason = null;
+        const synced = await syncRemoteDocument({
+            apiClient: input.state.runtime.apiClient,
+            author,
+            documentId,
+            execSql: input.state.runtime.infra.execSql,
+            historyMode: "raw",
+            isRemoteSyncBlocked: input.state.runtime.util.isRemoteSyncBlocked,
+            localVersionVector: null,
+            minLsn: input.currentRecord.lastCommitLsn ?? undefined,
+            onRemoteDocumentDeleted: ({ commitPurgeProof, documentId }) => deleteUpstreamDeletedDocument(input.state, input.generation, input.currentRecord, documentId, commitPurgeProof),
+            // Recorded, never parked: this pass submits no writes, so it plans no
+            // ancestor repair and cannot abandon as `inaccessible`.
+            onSyncAbandoned: (reason) => {
+                abandonReason = reason;
+            },
+            ...rotationIncomingUpdateIsolation({
+                currentDocument: input.rebuiltDocument,
+                generation: input.generation,
+                state: input.state,
+            }),
+            onSyncTrace: (line) => input.state.runtime.util.log(`Documents: ${line}`),
+            pendingUpdates: [],
+            persistedState: planningRecord,
+            pullContinuation,
+            resolveProjectionUserKey: input.state.resolveProjectionUserKey,
+            resolveWriterPublicKey: createDocumentWriterPublicKeyResolver({
+                logPrefix: "Documents",
+                runtime: input.state.runtime,
+                writerKeyLabel: "writer key",
+            }),
+            targetSecretKey: encapsulationKeyPair.secretKey,
+            warmReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(input.state.runtime),
+            writerProjection,
+        });
+        if (!synced) {
+            throw new Error(`Rotation raw-history recovery could not complete (${abandonReason ?? "sync did not finish"}); key rotation was not started`);
+        }
+        assertRotationRecoveryGeneration(input);
+        importSyncedDocumentUpdates(input.rebuiltDocument, ordinaryRawHistoryUpdates(synced.decryptedUpdates));
+        if (!synced.hasIncompletePull)
+            return synced;
+        const nextContinuation = readPullContinuation(synced.response);
+        if (!nextContinuation) {
+            throw new Error("Rotation raw-history recovery ended before the retained history was complete");
+        }
+        if (seenPullCursors.has(nextContinuation.cursor)) {
+            throw new Error("Rotation raw-history recovery encountered a repeated pull cursor");
+        }
+        seenPullCursors.add(nextContinuation.cursor);
+        pullContinuation = nextContinuation;
+        planningRecord = { ...planningRecord, ...synced.persistedState };
+        writerProjection = synced.writerProjection;
+    }
+}
+async function collectVerifiedRawHistoryForRotation(input) {
+    const consumedPullContinuation = input.state.pullContinuation;
+    const writerProjectionGeneration = input.state.writerProjectionGeneration;
+    const rebuiltDocument = await createStoredDocument(input.state);
+    try {
+        const synced = await pullVerifiedRawHistoryForRotation({
+            ...input,
+            rebuiltDocument,
+        });
+        return {
+            consumedPullContinuation,
+            currentRecord: input.currentRecord,
+            rebuiltDocument,
+            synced,
+            writerProjectionGeneration,
+        };
+    }
+    catch (error) {
+        rebuiltDocument.free();
+        throw error;
+    }
+}
+class RotationDocumentChangedError extends Error {
+}
+function assertCapturedDocumentCurrent(input) {
+    assertRotationRecoveryGeneration(input);
+    if (!versionVectorsEqual(encodeVersionVector(input.currentDocument), input.capturedVersion)) {
+        throw new RotationDocumentChangedError("Document changed during rotation recovery; retry key rotation");
+    }
+}
+function currentRotationRecoveryRecord(state) {
+    if (state.record)
+        return state.record;
+    throw new Error("Document changed during rotation recovery; retry key rotation");
+}
+function installRotationRecovery(input) {
+    const { capturedVersion, collection, currentDoc, generation, state } = input;
+    const installation = state.writeChain
+        .catch(() => undefined)
+        .then(() => chainIdentityWrite(state, async () => {
+        assertCapturedDocumentCurrent({
+            capturedVersion,
+            currentDocument: currentDoc,
+            generation,
+            state,
+        });
+        assertExactDocumentHistory({
+            currentDocument: currentDoc,
+            rebuiltDocument: collection.rebuiltDocument,
+        });
+        return installRebuiltDocument({
+            consumedPullContinuation: collection.consumedPullContinuation,
+            currentRecord: collection.currentRecord,
+            generation,
+            rebuiltDoc: collection.rebuiltDocument,
+            state,
+            synced: collection.synced,
+            writerProjectionGeneration: collection.writerProjectionGeneration,
+        });
+    }));
+    // Only the checked local install occupies the write queue. Network recovery
+    // uses the remote queue, so an outage cannot hold new edits hostage.
+    state.writeChain = installation.then(() => undefined, () => undefined);
+    return installation;
+}
+async function recoverFullHistoryForRotation(state, laneGeneration) {
+    assertRotationRecoveryPrerequisites(state);
+    await invalidatePullContinuationBeforeRotation(state);
+    const currentDoc = state.doc;
+    const currentRecord = state.record;
+    if (!currentDoc || !currentRecord) {
+        throw new Error("Document must finish loading before its content key can rotate");
+    }
+    // The teardown guard for the recovery's terminal-failure handler: captured
+    // before the pull so a discard (row 21) racing this preflight invalidates
+    // it, and the stale handler cannot resurrect a deleted failure row.
+    const generation = captureDocumentStoreAttachmentSyncGeneration(state, currentDoc, laneGeneration);
+    if (!generation) {
+        throw new Error("Document changed during rotation recovery; retry key rotation");
+    }
+    const capturedVersion = encodeVersionVector(currentDoc);
+    let settlementRequiresRetry = false;
+    // A raw recovery starts from an empty scratch document, bypasses untrusted
+    // rotation-baseline redirects, drains every retained page in memory, and
+    // publishes nothing until all response updates have validated. Checkpoints
+    // are authenticated and decrypted but are not reconstruction inputs: the
+    // original ordinary update stream is the source of truth in this mode.
+    let collection = await collectVerifiedRawHistoryForRotation({
+        currentRecord,
+        generation,
+        state,
+    });
+    try {
+        assertCapturedDocumentCurrent({
+            capturedVersion,
+            currentDocument: currentDoc,
+            generation,
+            state,
+        });
+        const pendingUpdates = await listPendingUpdates(state);
+        assertCapturedDocumentCurrent({
+            capturedVersion,
+            currentDocument: currentDoc,
+            generation,
+            state,
+        });
+        const verifiedOrdinaryVersion = importProvenOrdinaryPendingHistory({
+            currentDocument: currentDoc,
+            pendingUpdates,
+            rebuiltDocument: collection.rebuiltDocument,
+        });
+        if (pendingUpdates.some((update) => update.sourceVersionVector == null)) {
+            // The first raw pass proves the exact ordinary frontier before any local
+            // row can be published. Pull raw history again after settlement so the
+            // installed snapshot also includes remote work that raced that submit.
+            await settleOrdinaryDocumentUpdatesBeforeRotation(state, verifiedOrdinaryVersion, pendingUpdates, generation);
+            assertCapturedDocumentCurrent({
+                capturedVersion,
+                currentDocument: currentDoc,
+                generation,
+                state,
+            });
+            const definitiveCollection = await collectVerifiedRawHistoryForRotation({
+                currentRecord: currentRotationRecoveryRecord(state),
+                generation,
+                state,
+            });
+            collection.rebuiltDocument.free();
+            collection = definitiveCollection;
+        }
+        const installed = await installRotationRecovery({
+            capturedVersion,
+            collection,
+            currentDoc,
+            generation,
+            state,
+        });
+        settlementRequiresRetry = installed.settlementRequiresRetry;
+        if (settlementRequiresRetry) {
+            throw new Error("Rotation raw-history recovery was superseded during its atomic install; retry key rotation");
+        }
+        return installed.fullHistorySnapshot;
+    }
+    finally {
+        if (state.doc !== collection.rebuiltDocument) {
+            collection.rebuiltDocument.free();
+        }
+        if (settlementRequiresRetry) {
+            requestDocumentStoreSync(state);
+        }
+    }
+}
+/**
+ * Wait for prior local writes and serialize with other remote work. Edits can
+ * continue during the pull; the checked install rejects a changed document so
+ * a stale recovery cannot replace them. This preflight can then be retried.
+ */
+export function assertDocumentStoreCanRotateContentKey(state) {
+    const laneGeneration = captureDocumentStoreSyncLaneGeneration(state);
+    const generation = captureDocumentStoreAttachmentSyncGeneration(state, state.doc, laneGeneration);
+    return runDocumentRemoteWork(state, async () => {
+        await state.writeChain.catch(() => undefined);
+        if (!generation ||
+            !isDocumentStoreSyncGenerationCurrent(state, generation)) {
+            throw new Error("Document changed before rotation recovery; retry key rotation");
+        }
+        for (let attempt = 0;; attempt += 1) {
+            try {
+                return await recoverFullHistoryForRotation(state, laneGeneration);
+            }
+            catch (error) {
+                // Autosaves and conflict re-keying can invalidate the proven frontier.
+                // Repeat the complete proof without blocking new local edits; repeated
+                // changes remain bounded and leave the durable queue retryable.
+                if (!(error instanceof RotationPendingUpdatesChangedError ||
+                    error instanceof RotationDocumentChangedError) ||
+                    attempt >= 2 ||
+                    !isDocumentStoreSyncGenerationCurrent(state, generation)) {
+                    throw error;
+                }
+            }
+        }
+    });
+}
+//# sourceMappingURL=index.js.map

package/stores/documents/documentStore/rotation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EACL,qCAAqC,EAErC,oBAAoB,EACpB,2BAA2B,EAC3B,kBAAkB,EAClB,iCAAiC,GAClC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,kCAAkC,EAAE,MAAM,sDAAsD,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EACL,4CAA4C,EAC5C,sCAAsC,EAGtC,oCAAoC,GACrC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,6CAA6C,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EACL,0BAA0B,EAC1B,kCAAkC,GACnC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,wCAAwC,EACxC,kCAAkC,EAClC,2CAA2C,GAC5C,MAAM,sBAAsB,CAAC;AAE9B,SAAS,yBAAyB,CAChC,OAAqB;IAErB,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,mCAAmC,CAAC,KAAyB;IACpE,IAAI,KAAK,CAAC,WAAW,CAAC,oCAAoC,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC;IACvE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5C,IACE,CAAC,MAAM;QACP,CAAC,oBAAoB;QACrB,CAAC,UAAU;QACX,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,gCAAgC,CAAC,KAGzC;IACC,IAAI,CAAC,oCAAoC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CAAC,KAIxC;IACC,OAAO;QACL,gCAAgC,EAC9B,6CAA6C,CAC3C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,UAAU,CACjB;QACH,uBAAuB,EAAE,KAAK,EAC5B,MAGC,EACD,EAAE;YACF,MAAM,iCAAiC,CAAC;gBACtC,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;aACzC,CAAC,CAAC;YACH,MAAM,gBAAgB,GAAG,yBAAyB,CAChD,MAAM,CAAC,gBAAgB,CACxB,CAAC;YACF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAC5C,CAAC;YACF,MAAM,iCAAiC,CAAC;gBACtC,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,gBAAgB;gBAChB,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACzD,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CACjC;aACF,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iCAAiC,CAAC,KAKhD;IACC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,GAChD,mCAAmC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,gBAA0D,CAAC;IAC/D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,IAAI,cAAc,GAAG,KAAK,CAAC,aAAa,CAAC;IACzC,IAAI,gBAAgB,GAClB,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,UAAU,KAAK,UAAU;QACrD,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB;QAC9B,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,aAAa,GAAkB,IAAI,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;YACtC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS;YACxC,MAAM;YACN,UAAU;YACV,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YAC1C,WAAW,EAAE,KAAK;YAClB,mBAAmB,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB;YACjE,kBAAkB,EAAE,IAAI;YACxB,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,aAAa,IAAI,SAAS;YACtD,uBAAuB,EAAE,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,EAAE,CAC5D,6BAA6B,CAC3B,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,aAAa,EACnB,UAAU,EACV,gBAAgB,CACjB;YACH,sEAAsE;YACtE,wDAAwD;YACxD,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE;gBAC1B,aAAa,GAAG,MAAM,CAAC;YACzB,CAAC;YACD,GAAG,+BAA+B,CAAC;gBACjC,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC;YACF,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;YACzE,cAAc,EAAE,EAAE;YAClB,cAAc,EAAE,cAAc;YAC9B,gBAAgB;YAChB,wBAAwB,EAAE,KAAK,CAAC,KAAK,CAAC,wBAAwB;YAC9D,sBAAsB,EAAE,qCAAqC,CAAC;gBAC5D,SAAS,EAAE,WAAW;gBACtB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;gBAC5B,cAAc,EAAE,YAAY;aAC7B,CAAC;YACF,eAAe,EAAE,oBAAoB,CAAC,SAAS;YAC/C,+BAA+B,EAAE,kCAAkC,CACjE,KAAK,CAAC,KAAK,CAAC,OAAO,CACpB;YACD,gBAAgB;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,qDAAqD,aAAa,IAAI,qBAAqB,iCAAiC,CAC7H,CAAC;QACJ,CAAC;QAED,gCAAgC,CAAC,KAAK,CAAC,CAAC;QAExC,2BAA2B,CACzB,KAAK,CAAC,eAAe,EACrB,yBAAyB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CACnD,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAAE,OAAO,MAAM,CAAC;QAE7C,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QACD,IAAI,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,gBAAgB,GAAG,gBAAgB,CAAC;QACpC,cAAc,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QACjE,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oCAAoC,CAAC,KAInD;IACC,MAAM,wBAAwB,GAAG,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC9D,MAAM,0BAA0B,GAAG,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC;IAC1E,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC;YACrD,GAAG,KAAK;YACR,eAAe;SAChB,CAAC,CAAC;QACH,OAAO;YACL,wBAAwB;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,eAAe;YACf,MAAM;YACN,0BAA0B;SAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAe,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,4BAA6B,SAAQ,KAAK;CAAG;AAEnD,SAAS,6BAA6B,CAAC,KAKtC;IACC,gCAAgC,CAAC,KAAK,CAAC,CAAC;IACxC,IACE,CAAC,mBAAmB,CAClB,mBAAmB,CAAC,KAAK,CAAC,eAAe,CAAC,EAC1C,KAAK,CAAC,eAAe,CACtB,EACD,CAAC;QACD,MAAM,IAAI,4BAA4B,CACpC,+DAA+D,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CACpC,KAAyB;IAEzB,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IACtC,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAMhC;IACC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7E,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU;SAClC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;SACtB,IAAI,CAAC,GAAG,EAAE,CACT,kBAAkB,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QACnC,6BAA6B,CAAC;YAC5B,eAAe;YACf,eAAe,EAAE,UAAU;YAC3B,UAAU;YACV,KAAK;SACN,CAAC,CAAC;QACH,0BAA0B,CAAC;YACzB,eAAe,EAAE,UAAU;YAC3B,eAAe,EAAE,UAAU,CAAC,eAAe;SAC5C,CAAC,CAAC;QACH,OAAO,sBAAsB,CAAC;YAC5B,wBAAwB,EAAE,UAAU,CAAC,wBAAwB;YAC7D,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,UAAU;YACV,UAAU,EAAE,UAAU,CAAC,eAAe;YACtC,KAAK;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,0BAA0B,EAAE,UAAU,CAAC,0BAA0B;SAClE,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IACJ,4EAA4E;IAC5E,qEAAqE;IACrE,KAAK,CAAC,UAAU,GAAG,YAAY,CAAC,IAAI,CAClC,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IACF,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,KAAyB,EACzB,cAA+C;IAE/C,mCAAmC,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,wCAAwC,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC;IAC7B,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC;IACnC,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,UAAU,GAAG,4CAA4C,CAC7D,KAAK,EACL,UAAU,EACV,cAAc,CACf,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,uBAAuB,GAAG,KAAK,CAAC;IAEpC,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,IAAI,UAAU,GAAG,MAAM,oCAAoC,CAAC;QAC1D,aAAa;QACb,UAAU;QACV,KAAK;KACN,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,6BAA6B,CAAC;YAC5B,eAAe;YACf,eAAe,EAAE,UAAU;YAC3B,UAAU;YACV,KAAK;SACN,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACvD,6BAA6B,CAAC;YAC5B,eAAe;YACf,eAAe,EAAE,UAAU;YAC3B,UAAU;YACV,KAAK;SACN,CAAC,CAAC;QACH,MAAM,uBAAuB,GAAG,kCAAkC,CAAC;YACjE,eAAe,EAAE,UAAU;YAC3B,cAAc;YACd,eAAe,EAAE,UAAU,CAAC,eAAe;SAC5C,CAAC,CAAC;QACH,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,EAAE,CAAC;YACxE,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,MAAM,2CAA2C,CAC/C,KAAK,EACL,uBAAuB,EACvB,cAAc,EACd,UAAU,CACX,CAAC;YACF,6BAA6B,CAAC;gBAC5B,eAAe;gBACf,eAAe,EAAE,UAAU;gBAC3B,UAAU;gBACV,KAAK;aACN,CAAC,CAAC;YACH,MAAM,oBAAoB,GAAG,MAAM,oCAAoC,CAAC;gBACtE,aAAa,EAAE,6BAA6B,CAAC,KAAK,CAAC;gBACnD,UAAU;gBACV,KAAK;aACN,CAAC,CAAC;YACH,UAAU,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;YAClC,UAAU,GAAG,oBAAoB,CAAC;QACpC,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC;YAC9C,eAAe;YACf,UAAU;YACV,UAAU;YACV,UAAU;YACV,KAAK;SACN,CAAC,CAAC;QACH,uBAAuB,GAAG,SAAS,CAAC,uBAAuB,CAAC;QAC5D,IAAI,uBAAuB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,mBAAmB,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU,CAAC,eAAe,EAAE,CAAC;YAC7C,UAAU,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,uBAAuB,EAAE,CAAC;YAC5B,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sCAAsC,CACpD,KAAyB;IAEzB,MAAM,cAAc,GAAG,sCAAsC,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,4CAA4C,CAC7D,KAAK,EACL,KAAK,CAAC,GAAG,EACT,cAAc,CACf,CAAC;IACF,OAAO,qBAAqB,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9C,IACE,CAAC,UAAU;YACX,CAAC,oCAAoC,CAAC,KAAK,EAAE,UAAU,CAAC,EACxD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,OAAO,MAAM,6BAA6B,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YACpE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,uEAAuE;gBACvE,uEAAuE;gBACvE,gEAAgE;gBAChE,IACE,CAAC,CACC,KAAK,YAAY,kCAAkC;oBACnD,KAAK,YAAY,4BAA4B,CAC9C;oBACD,OAAO,IAAI,CAAC;oBACZ,CAAC,oCAAoC,CAAC,KAAK,EAAE,UAAU,CAAC,EACxD,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { encodeVersionVector, versionVectorsEqual } from \"@tearleads/loro\";\nimport {\n  createDocumentWriterPublicKeyResolver,\n  type DocumentSyncPullContinuation,\n  readPullContinuation,\n  resolveDocumentCreateAuthor,\n  syncRemoteDocument,\n  validateDocumentSyncUpdateImports,\n} from \"../../../../workflows/documents\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../../../workflows/principals/runtimePolicyWarmer\";\nimport { requestDocumentStoreSync } from \"../../registry\";\nimport { installRebuiltDocument } from \"../history/historyRebuild\";\nimport { chainIdentityWrite } from \"../identityWriteChain\";\nimport { listPendingUpdates } from \"../persistence\";\nimport type { DocumentState, DocumentStoreState } from \"../state\";\nimport { createStoredDocument } from \"../storedDocument\";\nimport { runDocumentRemoteWork } from \"../sync/remoteWork\";\nimport {\n  captureDocumentStoreAttachmentSyncGeneration,\n  captureDocumentStoreSyncLaneGeneration,\n  type DocumentStoreSyncGeneration,\n  type DocumentStoreSyncLaneGeneration,\n  isDocumentStoreSyncGenerationCurrent,\n} from \"../sync/syncGeneration\";\nimport { deleteUpstreamDeletedDocument } from \"../sync/syncRequest\";\nimport { documentIncomingUpdateIsolationFailureHandler } from \"../sync/syncShared\";\nimport { importSyncedDocumentUpdates } from \"../sync/syncUpdateImport\";\nimport {\n  assertExactDocumentHistory,\n  importProvenOrdinaryPendingHistory,\n} from \"./rotationProvenance\";\nimport {\n  invalidatePullContinuationBeforeRotation,\n  RotationPendingUpdatesChangedError,\n  settleOrdinaryDocumentUpdatesBeforeRotation,\n} from \"./rotationSettlement\";\n\nfunction ordinaryRawHistoryUpdates<T extends { checkpointKind?: string }>(\n  updates: readonly T[],\n): T[] {\n  return updates.filter((update) => update.checkpointKind === undefined);\n}\n\nfunction assertRotationRecoveryPrerequisites(state: DocumentStoreState) {\n  if (state.persistence.supportsAtomicRecoveryHistoryPruning !== true) {\n    throw new Error(\n      \"Rotation raw-history recovery requires an adapter with atomic local-history pruning\",\n    );\n  }\n  const author = resolveDocumentCreateAuthor(state.runtime);\n  const encapsulationKeyPair = state.runtime.crypto.encapsulationKeyPair;\n  const documentId = state.record?.documentId;\n  if (\n    !author ||\n    !encapsulationKeyPair ||\n    !documentId ||\n    !state.runtime.auth.isAuthenticated ||\n    !state.runtime.state.online\n  ) {\n    throw new Error(\n      \"Rotation requires verified full-history recovery, but remote sync prerequisites are unavailable\",\n    );\n  }\n  return { author, documentId, encapsulationKeyPair };\n}\n\nfunction assertRotationRecoveryGeneration(input: {\n  generation: DocumentStoreSyncGeneration;\n  state: DocumentStoreState;\n}): void {\n  if (!isDocumentStoreSyncGenerationCurrent(input.state, input.generation)) {\n    throw new Error(\n      \"Document changed during rotation recovery; retry key rotation\",\n    );\n  }\n}\n\nfunction rotationIncomingUpdateIsolation(input: {\n  currentDocument: DocumentState;\n  generation: DocumentStoreSyncGeneration;\n  state: DocumentStoreState;\n}) {\n  return {\n    onIncomingUpdateIsolationFailure:\n      documentIncomingUpdateIsolationFailureHandler(\n        input.state,\n        input.generation,\n      ),\n    validateIncomingUpdates: async (\n      result: Pick<\n        NonNullable<Awaited<ReturnType<typeof syncRemoteDocument>>>,\n        \"decryptedUpdates\" | \"response\"\n      >,\n    ) => {\n      await validateDocumentSyncUpdateImports({\n        currentDocument: input.currentDocument,\n        decryptedUpdates: result.decryptedUpdates,\n        responseUpdates: result.response.updates,\n      });\n      const decryptedUpdates = ordinaryRawHistoryUpdates(\n        result.decryptedUpdates,\n      );\n      const ordinaryUpdateIds = new Set(\n        decryptedUpdates.map((update) => update.id),\n      );\n      await validateDocumentSyncUpdateImports({\n        currentDocument: input.currentDocument,\n        decryptedUpdates,\n        responseUpdates: result.response.updates.filter((update) =>\n          ordinaryUpdateIds.has(update.id),\n        ),\n      });\n    },\n  };\n}\n\nasync function pullVerifiedRawHistoryForRotation(input: {\n  currentRecord: NonNullable<DocumentStoreState[\"record\"]>;\n  generation: DocumentStoreSyncGeneration;\n  rebuiltDocument: DocumentState;\n  state: DocumentStoreState;\n}) {\n  const { author, documentId, encapsulationKeyPair } =\n    assertRotationRecoveryPrerequisites(input.state);\n  let pullContinuation: DocumentSyncPullContinuation | undefined;\n  const seenPullCursors = new Set<string>();\n  let planningRecord = input.currentRecord;\n  let writerProjection =\n    input.state.writerProjection?.documentId === documentId\n      ? input.state.writerProjection\n      : undefined;\n\n  while (true) {\n    let abandonReason: string | null = null;\n    const synced = await syncRemoteDocument({\n      apiClient: input.state.runtime.apiClient,\n      author,\n      documentId,\n      execSql: input.state.runtime.infra.execSql,\n      historyMode: \"raw\",\n      isRemoteSyncBlocked: input.state.runtime.util.isRemoteSyncBlocked,\n      localVersionVector: null,\n      minLsn: input.currentRecord.lastCommitLsn ?? undefined,\n      onRemoteDocumentDeleted: ({ commitPurgeProof, documentId }) =>\n        deleteUpstreamDeletedDocument(\n          input.state,\n          input.generation,\n          input.currentRecord,\n          documentId,\n          commitPurgeProof,\n        ),\n      // Recorded, never parked: this pass submits no writes, so it plans no\n      // ancestor repair and cannot abandon as `inaccessible`.\n      onSyncAbandoned: (reason) => {\n        abandonReason = reason;\n      },\n      ...rotationIncomingUpdateIsolation({\n        currentDocument: input.rebuiltDocument,\n        generation: input.generation,\n        state: input.state,\n      }),\n      onSyncTrace: (line) => input.state.runtime.util.log(`Documents: ${line}`),\n      pendingUpdates: [],\n      persistedState: planningRecord,\n      pullContinuation,\n      resolveProjectionUserKey: input.state.resolveProjectionUserKey,\n      resolveWriterPublicKey: createDocumentWriterPublicKeyResolver({\n        logPrefix: \"Documents\",\n        runtime: input.state.runtime,\n        writerKeyLabel: \"writer key\",\n      }),\n      targetSecretKey: encapsulationKeyPair.secretKey,\n      warmReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(\n        input.state.runtime,\n      ),\n      writerProjection,\n    });\n    if (!synced) {\n      throw new Error(\n        `Rotation raw-history recovery could not complete (${abandonReason ?? \"sync did not finish\"}); key rotation was not started`,\n      );\n    }\n\n    assertRotationRecoveryGeneration(input);\n\n    importSyncedDocumentUpdates(\n      input.rebuiltDocument,\n      ordinaryRawHistoryUpdates(synced.decryptedUpdates),\n    );\n    if (!synced.hasIncompletePull) return synced;\n\n    const nextContinuation = readPullContinuation(synced.response);\n    if (!nextContinuation) {\n      throw new Error(\n        \"Rotation raw-history recovery ended before the retained history was complete\",\n      );\n    }\n    if (seenPullCursors.has(nextContinuation.cursor)) {\n      throw new Error(\n        \"Rotation raw-history recovery encountered a repeated pull cursor\",\n      );\n    }\n    seenPullCursors.add(nextContinuation.cursor);\n    pullContinuation = nextContinuation;\n    planningRecord = { ...planningRecord, ...synced.persistedState };\n    writerProjection = synced.writerProjection;\n  }\n}\n\nasync function collectVerifiedRawHistoryForRotation(input: {\n  currentRecord: NonNullable<DocumentStoreState[\"record\"]>;\n  generation: DocumentStoreSyncGeneration;\n  state: DocumentStoreState;\n}) {\n  const consumedPullContinuation = input.state.pullContinuation;\n  const writerProjectionGeneration = input.state.writerProjectionGeneration;\n  const rebuiltDocument = await createStoredDocument(input.state);\n  try {\n    const synced = await pullVerifiedRawHistoryForRotation({\n      ...input,\n      rebuiltDocument,\n    });\n    return {\n      consumedPullContinuation,\n      currentRecord: input.currentRecord,\n      rebuiltDocument,\n      synced,\n      writerProjectionGeneration,\n    };\n  } catch (error) {\n    rebuiltDocument.free();\n    throw error;\n  }\n}\n\nclass RotationDocumentChangedError extends Error {}\n\nfunction assertCapturedDocumentCurrent(input: {\n  capturedVersion: string;\n  currentDocument: DocumentState;\n  generation: DocumentStoreSyncGeneration;\n  state: DocumentStoreState;\n}): void {\n  assertRotationRecoveryGeneration(input);\n  if (\n    !versionVectorsEqual(\n      encodeVersionVector(input.currentDocument),\n      input.capturedVersion,\n    )\n  ) {\n    throw new RotationDocumentChangedError(\n      \"Document changed during rotation recovery; retry key rotation\",\n    );\n  }\n}\n\nfunction currentRotationRecoveryRecord(\n  state: DocumentStoreState,\n): NonNullable<DocumentStoreState[\"record\"]> {\n  if (state.record) return state.record;\n  throw new Error(\n    \"Document changed during rotation recovery; retry key rotation\",\n  );\n}\n\nfunction installRotationRecovery(input: {\n  capturedVersion: string;\n  collection: Awaited<ReturnType<typeof collectVerifiedRawHistoryForRotation>>;\n  currentDoc: DocumentState;\n  generation: DocumentStoreSyncGeneration;\n  state: DocumentStoreState;\n}) {\n  const { capturedVersion, collection, currentDoc, generation, state } = input;\n  const installation = state.writeChain\n    .catch(() => undefined)\n    .then(() =>\n      chainIdentityWrite(state, async () => {\n        assertCapturedDocumentCurrent({\n          capturedVersion,\n          currentDocument: currentDoc,\n          generation,\n          state,\n        });\n        assertExactDocumentHistory({\n          currentDocument: currentDoc,\n          rebuiltDocument: collection.rebuiltDocument,\n        });\n        return installRebuiltDocument({\n          consumedPullContinuation: collection.consumedPullContinuation,\n          currentRecord: collection.currentRecord,\n          generation,\n          rebuiltDoc: collection.rebuiltDocument,\n          state,\n          synced: collection.synced,\n          writerProjectionGeneration: collection.writerProjectionGeneration,\n        });\n      }),\n    );\n  // Only the checked local install occupies the write queue. Network recovery\n  // uses the remote queue, so an outage cannot hold new edits hostage.\n  state.writeChain = installation.then(\n    () => undefined,\n    () => undefined,\n  );\n  return installation;\n}\n\nasync function recoverFullHistoryForRotation(\n  state: DocumentStoreState,\n  laneGeneration: DocumentStoreSyncLaneGeneration,\n): Promise<Uint8Array> {\n  assertRotationRecoveryPrerequisites(state);\n  await invalidatePullContinuationBeforeRotation(state);\n  const currentDoc = state.doc;\n  const currentRecord = state.record;\n  if (!currentDoc || !currentRecord) {\n    throw new Error(\n      \"Document must finish loading before its content key can rotate\",\n    );\n  }\n  // The teardown guard for the recovery's terminal-failure handler: captured\n  // before the pull so a discard (row 21) racing this preflight invalidates\n  // it, and the stale handler cannot resurrect a deleted failure row.\n  const generation = captureDocumentStoreAttachmentSyncGeneration(\n    state,\n    currentDoc,\n    laneGeneration,\n  );\n  if (!generation) {\n    throw new Error(\n      \"Document changed during rotation recovery; retry key rotation\",\n    );\n  }\n\n  const capturedVersion = encodeVersionVector(currentDoc);\n  let settlementRequiresRetry = false;\n\n  // A raw recovery starts from an empty scratch document, bypasses untrusted\n  // rotation-baseline redirects, drains every retained page in memory, and\n  // publishes nothing until all response updates have validated. Checkpoints\n  // are authenticated and decrypted but are not reconstruction inputs: the\n  // original ordinary update stream is the source of truth in this mode.\n  let collection = await collectVerifiedRawHistoryForRotation({\n    currentRecord,\n    generation,\n    state,\n  });\n\n  try {\n    assertCapturedDocumentCurrent({\n      capturedVersion,\n      currentDocument: currentDoc,\n      generation,\n      state,\n    });\n    const pendingUpdates = await listPendingUpdates(state);\n    assertCapturedDocumentCurrent({\n      capturedVersion,\n      currentDocument: currentDoc,\n      generation,\n      state,\n    });\n    const verifiedOrdinaryVersion = importProvenOrdinaryPendingHistory({\n      currentDocument: currentDoc,\n      pendingUpdates,\n      rebuiltDocument: collection.rebuiltDocument,\n    });\n    if (pendingUpdates.some((update) => update.sourceVersionVector == null)) {\n      // The first raw pass proves the exact ordinary frontier before any local\n      // row can be published. Pull raw history again after settlement so the\n      // installed snapshot also includes remote work that raced that submit.\n      await settleOrdinaryDocumentUpdatesBeforeRotation(\n        state,\n        verifiedOrdinaryVersion,\n        pendingUpdates,\n        generation,\n      );\n      assertCapturedDocumentCurrent({\n        capturedVersion,\n        currentDocument: currentDoc,\n        generation,\n        state,\n      });\n      const definitiveCollection = await collectVerifiedRawHistoryForRotation({\n        currentRecord: currentRotationRecoveryRecord(state),\n        generation,\n        state,\n      });\n      collection.rebuiltDocument.free();\n      collection = definitiveCollection;\n    }\n    const installed = await installRotationRecovery({\n      capturedVersion,\n      collection,\n      currentDoc,\n      generation,\n      state,\n    });\n    settlementRequiresRetry = installed.settlementRequiresRetry;\n    if (settlementRequiresRetry) {\n      throw new Error(\n        \"Rotation raw-history recovery was superseded during its atomic install; retry key rotation\",\n      );\n    }\n    return installed.fullHistorySnapshot;\n  } finally {\n    if (state.doc !== collection.rebuiltDocument) {\n      collection.rebuiltDocument.free();\n    }\n    if (settlementRequiresRetry) {\n      requestDocumentStoreSync(state);\n    }\n  }\n}\n\n/**\n * Wait for prior local writes and serialize with other remote work. Edits can\n * continue during the pull; the checked install rejects a changed document so\n * a stale recovery cannot replace them. This preflight can then be retried.\n */\nexport function assertDocumentStoreCanRotateContentKey(\n  state: DocumentStoreState,\n): Promise<Uint8Array> {\n  const laneGeneration = captureDocumentStoreSyncLaneGeneration(state);\n  const generation = captureDocumentStoreAttachmentSyncGeneration(\n    state,\n    state.doc,\n    laneGeneration,\n  );\n  return runDocumentRemoteWork(state, async () => {\n    await state.writeChain.catch(() => undefined);\n    if (\n      !generation ||\n      !isDocumentStoreSyncGenerationCurrent(state, generation)\n    ) {\n      throw new Error(\n        \"Document changed before rotation recovery; retry key rotation\",\n      );\n    }\n    for (let attempt = 0; ; attempt += 1) {\n      try {\n        return await recoverFullHistoryForRotation(state, laneGeneration);\n      } catch (error) {\n        // Autosaves and conflict re-keying can invalidate the proven frontier.\n        // Repeat the complete proof without blocking new local edits; repeated\n        // changes remain bounded and leave the durable queue retryable.\n        if (\n          !(\n            error instanceof RotationPendingUpdatesChangedError ||\n            error instanceof RotationDocumentChangedError\n          ) ||\n          attempt >= 2 ||\n          !isDocumentStoreSyncGenerationCurrent(state, generation)\n        ) {\n          throw error;\n        }\n      }\n    }\n  });\n}\n"]}