@tearleads/client-sdk 0.1.62 → 0.1.64

package/stores/local-projection/localProjectionStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"localProjectionStore.js","sourceRoot":"","sources":["localProjectionStore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gDAAgD,EAAE,MAAM,mDAAmD,CAAC;AACrH,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,6CAA6C,CAAC;AAGrD,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EAEjB,sCAAsC,EACtC,8BAA8B,GAC/B,MAAM,gBAAgB,CAAC;AAqExB,MAAM,cAAc,GAA4B;IAC9C,KAAK,EAAE,KAAK;IACZ,UAAU,EAAE,EAAE;IACd,8BAA8B,EAAE,IAAI,GAAG,EAAE;IACzC,8BAA8B,EAAE,IAAI,GAAG,EAAE;CAC1C,CAAC;AAEF,SAAS,eAAe,CACtB,KAAgC;IAEhC,MAAM,iBAAiB,GAAG,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;IAC7D,OAAO;QACL,KAAK,EAAE,iBAAiB,CAAC,KAAK;QAC9B,UAAU,EAAE,iBAAiB,CAAC,KAAK;QACnC,8BAA8B,EAAE,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC;QAC3E,8BAA8B,EAAE,sCAAsC,CACpE,KAAK,CAAC,KAAK,CACZ;KACF,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAgC;IAC5C,KAAK,CAAC,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,QAAQ,EAAE,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,KAAgC,EAChC,MAAsC;IAEtC,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAgC,EAChC,WAAmB;IAEnB,IACE,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC;QACjD,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC;QAC1C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EACxC,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAuB;QACtC,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,KAAK;KACnB,CAAC;IACF,KAAK,gDAAgD,CAAC;QACpD,YAAY,EAAE,CAAC,WAAW,CAAC;QAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;SACC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAClB,uEAAuE;QACvE,kEAAkE;QAClE,IACE,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,WAAW;YAC1D,WAAW,CAAC,aAAa,EACzB,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,EAAE;YACnD,WAAW;YACX,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;YAC9C,8BAA8B,EAC5B,SAAS,CAAC,8BAA8B;SAC3C,CAAC,CAAC;QACH,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE;QACV,0EAA0E;IAC5E,CAAC,CAAC;SACD,OAAO,CAAC,GAAG,EAAE;QACZ,IAAI,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,WAAW,EAAE,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACrD,sBAAsB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,yBAAyB,CAChC,KAAgC,EAChC,WAAmB,EACnB,kBAAkB,GAAG,KAAK;IAE1B,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/D,IAAI,WAAW,EAAE,CAAC;QAChB,yEAAyE;QACzE,0EAA0E;QAC1E,WAAW,CAAC,WAAW,GAAG,IAAI,CAAC;QAC/B,WAAW,CAAC,aAAa,KAAK,kBAAkB,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,sBAAsB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAgC,EAChC,QAAyB,EACzB,gBAAgB,GAAG,KAAK;IAExB,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC5B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,IACE,KAAK,CAAC,iBAAiB;QACvB,KAAK,CAAC,iBAAiB,KAAK,QAAQ,CAAC,WAAW,EAChD,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,CAAC;QAC1E,IACE,WAAW,KAAK,QAAQ,CAAC,WAAW;YACpC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,EACvD,CAAC;YACD,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,yBAAyB,CAAC,KAAK,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAgC;IAC3D,IACE,KAAK,CAAC,0BAA0B;QAChC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QACxC,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,KAAK,EACzC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;IACxC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iCAAiC,CACxC,KAAgC;IAEhC,IACE,CAAC,KAAK,CAAC,4BAA4B;QACnC,CAAC,KAAK,CAAC,0BAA0B;QACjC,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,KAAK,EACzC,CAAC;QACD,OAAO;IACT,CAAC;IACD,KAAK,CAAC,4BAA4B,GAAG,KAAK,CAAC;IAC3C,eAAe,CAAC,KAAK,EAAE;QACrB,MAAM,EAAE,wBAAwB;QAChC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;KAC3C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAgC;IACxD,MAAM,eAAe,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,IAAI,eAAe,EAAE,CAAC;QACpB,eAAe,CAAC,KAAK,EAAE;YACrB,MAAM,EAAE,UAAU;YAClB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,4EAA4E;IAC5E,iCAAiC,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,KAAgC;IACvD,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC5B,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAClC,KAAK,CAAC,0BAA0B,GAAG,KAAK,CAAC;AAC3C,CAAC;AAED,SAAS,wCAAwC,CAC/C,QAA+C,EAC/C,IAA2C,EAC3C,kBAAiC,EACjC,iBAAgC;IAEhC,MAAM,oBAAoB,GAAG,CAC3B,SAAwD,EACxD,EAAE,CAAC,2BAA2B,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAC7B,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACtD,CACF,CAAC;IACF,IACE,IAAI,CAAC,IAAI,CACP,CAAC,SAAS,EAAE,EAAE,CACZ,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CACpE,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,qBAAqB,GAAG,QAAQ,CAAC,IAAI,CACzC,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,EAAE,KAAK,iBAAiB;QAClC,2BAA2B,CAAC,SAAS,CAAC,CACzC,CAAC;IACF,OAAO,CACL,CAAC,qBAAqB;QACtB,IAAI,CAAC,IAAI,CACP,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,EAAE,KAAK,iBAAiB;YAClC,2BAA2B,CAAC,SAAS,CAAC,CACzC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,KAAgC,EAChC,OAAe;IAEf,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC5B,6EAA6E;IAC7E,6EAA6E;IAC7E,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3D,yBAAyB,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAgC,EAChC,OAAsC;IAEtC,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC;IACtC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;IACxB,IACE,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,eAAe,CAAC,KAAK,CAAC,OAAO;QACvD,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,eAAe,CAAC,KAAK,CAAC,WAAW,EAC/D,CAAC;QACD,eAAe,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAE5C,uEAAuE;IACvE,kEAAkE;IAClE,uDAAuD;IACvD,IAAI,0BAA0B,CAAC,eAAe,EAAE,OAAO,CAAC,EAAE,CAAC;QACzD,KAAK,CAAC,4BAA4B,GAAG,IAAI,CAAC;IAC5C,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACvC,eAAe,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,CAAC;QACZ,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,wEAAwE;IACxE,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAG1C;IACC,MAAM,KAAK,GAA8B;QACvC,iBAAiB,EAAE,IAAI;QACvB,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,IAAI,OAAO,EAAE;QAC7B,KAAK,EAAE,kBAAkB,EAAE;QAC3B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,0BAA0B,EAAE,KAAK;QACjC,SAAS,EAAE,IAAI,GAAG,EAAE;QACpB,4BAA4B,EAAE,KAAK;QACnC,kBAAkB,EAAE,IAAI,GAAG,EAAE;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,cAAc;QACxB,mBAAmB,EAAE,IAAI,GAAG,EAAE;KAC/B,CAAC;IACF,KAAK,CAAC,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAExC,4EAA4E;IAC5E,0EAA0E;IAC1E,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,EAAE;QAClC,MAAM,kBAAkB,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QACrD,MAAM,eAAe,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAChD,mEAAmE;QACnE,yEAAyE;QACzE,4EAA4E;QAC5E,wEAAwE;QACxE,6CAA6C;QAC7C,IACE,CAAC,eAAe;YAChB,wCAAwC,CACtC,kBAAkB,EAClB,KAAK,CAAC,QAAQ,CAAC,UAAU,EACzB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EACjC,KAAK,CAAC,iBAAiB,CACxB,EACD,CAAC;YACD,eAAe,CAAC,KAAK,EAAE;gBACrB,MAAM,EAAE,yBAAyB;gBACjC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ;QACjC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;YACtB,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9B,OAAO,GAAG,EAAE;gBACV,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACnC,CAAC,CAAC;QACJ,CAAC;QACD,kBAAkB,EAAE,CAAC,WAAW,EAAE,EAAE;YAClC,IAAI,KAAK,CAAC,iBAAiB,KAAK,WAAW,EAAE,CAAC;gBAC5C,OAAO;YACT,CAAC;YACD,KAAK,CAAC,iBAAiB,GAAG,WAAW,CAAC;YACtC,IAAI,WAAW,EAAE,CAAC;gBAChB,yBAAyB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAChD,CAAC;YACD,eAAe,CAAC,KAAK,EAAE;gBACrB,MAAM,EAAE,gBAAgB;gBACxB,iBAAiB,EAAE,WAAW;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,oBAAoB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,iBAAiB;QACnD,kBAAkB,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CAAC;YACxC,MAAM,SAAS,GAAG,MAAM,gDAAgD,CAAC;gBACvE,YAAY,EAAE,CAAC,WAAW,CAAC;gBAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,CAAC;YAC5C,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAClE,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrD,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,uBAAuB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,CAAC;QACH,CAAC;QACD,uBAAuB,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,gCAAgC,CAAC,KAAK,EAAE,OAAO,CAAC;QAClD,wBAAwB,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,EAAE,CACvD,wBAAwB,CAAC,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC;QAC7D,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,4BAA4B,CAAC,KAAK,EAAE,OAAO,CAAC;QACxE,iBAAiB,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC9B,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvC,OAAO,GAAG,EAAE;gBACV,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5C,CAAC,CAAC;QACJ,CAAC;QACD,iBAAiB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc;KAC9C,CAAC;AACJ,CAAC","sourcesContent":["import type { DocumentSummary } from \"../../data/documents/documentSummary\";\nimport { loadLocalContainerProjectionDocumentsFromRuntime } from \"../../workflows/container-contents/projectionView\";\nimport { didRegainSyncPrerequisites } from \"../../workflows/container-contents/syncLane\";\nimport {\n  isReconcilableContainerNode,\n  isRemoteBackedContainerNode,\n} from \"../container-contents/reconcilableContainer\";\nimport type { ContainerContentsStoreRuntime } from \"../container-contents/syncAgent\";\nimport type { ContainerContentsStore } from \"../container-contents/types\";\nimport {\n  applyContainerSummaries,\n  createSummaryCache,\n  removeDocumentSummary,\n  resetSummaryCache,\n  type SummaryCache,\n  snapshotLinkedContainerIdsByDocumentId,\n  snapshotSummariesByContainerId,\n} from \"./summaryCache\";\nimport type {\n  LocalProjectionReconciledDelta,\n  LocalProjectionSnapshot,\n} from \"./types\";\n\n/**\n * Signals the local projection store raises so the background reconciler\n * (Layer B) knows what to sync. The store never performs remote I/O itself.\n */\nexport interface LocalProjectionReconcileSignal {\n  reason:\n    | \"hydrated\"\n    | \"active-changed\"\n    | \"prerequisites-regained\"\n    | \"remote-containers-added\";\n  activeContainerId: string | null;\n}\n\nexport type LocalProjectionReconcileListener = (\n  signal: LocalProjectionReconcileSignal,\n) => void;\n\nexport interface LocalProjectionStore {\n  getSnapshot: () => LocalProjectionSnapshot;\n  subscribe: (listener: () => void) => () => void;\n  setActiveContainer: (containerId: string | null) => void;\n  getActiveContainerId: () => string | null;\n  applyReconciled: (delta: LocalProjectionReconciledDelta) => void;\n  loadContainerDelta: (\n    containerId: string,\n  ) => Promise<LocalProjectionReconciledDelta>;\n  removePersistedDocument: (localId: string) => void;\n  refreshPersistedDocument: (\n    document: DocumentSummary,\n    placementChanged?: boolean,\n  ) => void;\n  updateRuntime: (runtime: ContainerContentsStoreRuntime) => void;\n  /** Registered by the reconciler; returns an unsubscribe handle. */\n  onReconcileSignal: (listener: LocalProjectionReconcileListener) => () => void;\n  getContainerStore: () => ContainerContentsStore;\n}\n\ninterface LocalProjectionStoreState {\n  activeContainerId: string | null;\n  documentRevision: number;\n  deltaRevisions: WeakMap<LocalProjectionReconciledDelta, number>;\n  cache: SummaryCache;\n  containerStore: ContainerContentsStore;\n  hydratedContainerSummaries: boolean;\n  listeners: Set<() => void>;\n  /**\n   * A sync-prerequisite regain (auth, connectivity, or key pair) that arrived\n   * before the container tree was ready. The signal's reset-and-backfill must\n   * not be lost to startup ordering, so it is latched here and flushed once\n   * hydration completes.\n   */\n  pendingPrerequisitesRegained: boolean;\n  reconcileListeners: Set<LocalProjectionReconcileListener>;\n  runtime: ContainerContentsStoreRuntime;\n  snapshot: LocalProjectionSnapshot;\n  pendingSummaryReads: Map<string, PendingSummaryRead>;\n}\n\ninterface PendingSummaryRead {\n  discardResult: boolean;\n  reloadAfter: boolean;\n}\n\nconst EMPTY_SNAPSHOT: LocalProjectionSnapshot = {\n  ready: false,\n  containers: [],\n  documentSummariesByContainerId: new Map(),\n  linkedContainerIdsByDocumentId: new Map(),\n};\n\nfunction computeSnapshot(\n  state: LocalProjectionStoreState,\n): LocalProjectionSnapshot {\n  const containerSnapshot = state.containerStore.getSnapshot();\n  return {\n    ready: containerSnapshot.ready,\n    containers: containerSnapshot.nodes,\n    documentSummariesByContainerId: snapshotSummariesByContainerId(state.cache),\n    linkedContainerIdsByDocumentId: snapshotLinkedContainerIdsByDocumentId(\n      state.cache,\n    ),\n  };\n}\n\nfunction emit(state: LocalProjectionStoreState): void {\n  state.snapshot = computeSnapshot(state);\n  for (const listener of state.listeners) {\n    try {\n      listener();\n    } catch {\n      // Keep one subscriber failure from blocking later subscribers.\n    }\n  }\n}\n\nfunction notifyReconcile(\n  state: LocalProjectionStoreState,\n  signal: LocalProjectionReconcileSignal,\n): void {\n  for (const listener of state.reconcileListeners) {\n    try {\n      listener(signal);\n    } catch {\n      // Reconciler failures must not break the read path.\n    }\n  }\n}\n\nfunction loadContainerSummaries(\n  state: LocalProjectionStoreState,\n  containerId: string,\n): void {\n  if (\n    state.cache.hydratedContainerIds.has(containerId) ||\n    state.pendingSummaryReads.has(containerId) ||\n    state.runtime.infra.dbStatus !== \"ready\"\n  ) {\n    return;\n  }\n\n  const pendingRead: PendingSummaryRead = {\n    discardResult: false,\n    reloadAfter: false,\n  };\n  void loadLocalContainerProjectionDocumentsFromRuntime({\n    containerIds: [containerId],\n    runtime: state.runtime,\n  })\n    .then((documents) => {\n      // A runtime reset (e.g. dbStatus loss) clears this entry and the cache\n      // mid-flight; do not apply a stale read to a freshly reset cache.\n      if (\n        state.pendingSummaryReads.get(containerId) !== pendingRead ||\n        pendingRead.discardResult\n      ) {\n        return;\n      }\n      const changed = applyContainerSummaries(state.cache, {\n        containerId,\n        documentSummaries: documents.documentSummaries,\n        linkedContainerIdsByDocumentId:\n          documents.linkedContainerIdsByDocumentId,\n      });\n      if (changed) {\n        emit(state);\n      }\n    })\n    .catch(() => {\n      // Local read failures fall back to an empty list; the reconciler retries.\n    })\n    .finally(() => {\n      if (state.pendingSummaryReads.get(containerId) !== pendingRead) {\n        return;\n      }\n      state.pendingSummaryReads.delete(containerId);\n      if (pendingRead.reloadAfter) {\n        state.cache.hydratedContainerIds.delete(containerId);\n        loadContainerSummaries(state, containerId);\n      }\n    });\n\n  state.pendingSummaryReads.set(containerId, pendingRead);\n}\n\nfunction refreshContainerSummaries(\n  state: LocalProjectionStoreState,\n  containerId: string,\n  discardPendingRead = false,\n): void {\n  state.cache.hydratedContainerIds.delete(containerId);\n  const pendingRead = state.pendingSummaryReads.get(containerId);\n  if (pendingRead) {\n    // Publish ordinary reads before the trailing refresh so autosaves cannot\n    // starve first paint. Deletion and reconciliation must reject older rows.\n    pendingRead.reloadAfter = true;\n    pendingRead.discardResult ||= discardPendingRead;\n  } else {\n    loadContainerSummaries(state, containerId);\n  }\n}\n\nfunction refreshPersistedDocument(\n  state: LocalProjectionStoreState,\n  document: DocumentSummary,\n  placementChanged = false,\n): void {\n  state.documentRevision += 1;\n  const containerIds = new Set(state.pendingSummaryReads.keys());\n  if (\n    state.activeContainerId &&\n    state.activeContainerId === document.containerId\n  ) {\n    containerIds.add(state.activeContainerId);\n  }\n  for (const [containerId, summaries] of state.cache.summariesByContainerId) {\n    if (\n      containerId === document.containerId ||\n      summaries.some((summary) => summary.id === document.id)\n    ) {\n      containerIds.add(containerId);\n    }\n  }\n  for (const containerId of containerIds) {\n    refreshContainerSummaries(state, containerId, placementChanged);\n  }\n}\n\nfunction markHydratedIfReady(state: LocalProjectionStoreState): boolean {\n  if (\n    state.hydratedContainerSummaries ||\n    state.runtime.infra.dbStatus !== \"ready\" ||\n    !state.containerStore.getSnapshot().ready\n  ) {\n    return false;\n  }\n\n  state.hydratedContainerSummaries = true;\n  if (state.activeContainerId) {\n    loadContainerSummaries(state, state.activeContainerId);\n  }\n  return true;\n}\n\nfunction flushPendingPrerequisitesRegained(\n  state: LocalProjectionStoreState,\n): void {\n  if (\n    !state.pendingPrerequisitesRegained ||\n    !state.hydratedContainerSummaries ||\n    !state.containerStore.getSnapshot().ready\n  ) {\n    return;\n  }\n  state.pendingPrerequisitesRegained = false;\n  notifyReconcile(state, {\n    reason: \"prerequisites-regained\",\n    activeContainerId: state.activeContainerId,\n  });\n}\n\nfunction publishHydration(state: LocalProjectionStoreState): boolean {\n  const didMarkHydrated = markHydratedIfReady(state);\n  emit(state);\n  if (didMarkHydrated) {\n    notifyReconcile(state, {\n      reason: \"hydrated\",\n      activeContainerId: state.activeContainerId,\n    });\n  }\n  // Backfills read getSnapshot(), so publish the tree before requesting them.\n  flushPendingPrerequisitesRegained(state);\n  return didMarkHydrated;\n}\n\nfunction resetProjection(state: LocalProjectionStoreState): void {\n  state.documentRevision += 1;\n  resetSummaryCache(state.cache);\n  state.pendingSummaryReads.clear();\n  state.hydratedContainerSummaries = false;\n}\n\nfunction hasRemoteBackedContainerMembershipGrowth(\n  previous: LocalProjectionSnapshot[\"containers\"],\n  next: LocalProjectionSnapshot[\"containers\"],\n  homeOrganizationId: string | null,\n  activeContainerId: string | null,\n): boolean {\n  const isRemoteReconcilable = (\n    container: LocalProjectionSnapshot[\"containers\"][number],\n  ) => isReconcilableContainerNode(container, homeOrganizationId);\n  const previousIds = new Set(\n    previous.flatMap((container) =>\n      isRemoteReconcilable(container) ? [container.id] : [],\n    ),\n  );\n  if (\n    next.some(\n      (container) =>\n        isRemoteReconcilable(container) && !previousIds.has(container.id),\n    )\n  ) {\n    return true;\n  }\n  if (!activeContainerId) {\n    return false;\n  }\n  const wasActiveRemoteBacked = previous.some(\n    (container) =>\n      container.id === activeContainerId &&\n      isRemoteBackedContainerNode(container),\n  );\n  return (\n    !wasActiveRemoteBacked &&\n    next.some(\n      (container) =>\n        container.id === activeContainerId &&\n        isRemoteBackedContainerNode(container),\n    )\n  );\n}\n\nfunction removePersistedDocumentFromCache(\n  state: LocalProjectionStoreState,\n  localId: string,\n): void {\n  state.documentRevision += 1;\n  // The deleted row may exist only in an in-flight first read, so invalidating\n  // just containers that already cached it would allow it to reappear offline.\n  for (const containerId of state.pendingSummaryReads.keys()) {\n    refreshContainerSummaries(state, containerId, true);\n  }\n  if (removeDocumentSummary(state.cache, localId)) {\n    emit(state);\n  }\n}\n\nfunction updateLocalProjectionRuntime(\n  state: LocalProjectionStoreState,\n  runtime: ContainerContentsStoreRuntime,\n): void {\n  const previousRuntime = state.runtime;\n  state.runtime = runtime;\n  if (\n    runtime.infra.execSql !== previousRuntime.infra.execSql ||\n    runtime.state.domainScope !== previousRuntime.state.domainScope\n  ) {\n    resetProjection(state);\n  }\n  state.containerStore.updateRuntime(runtime);\n\n  // Latch before the readiness checks so a regain that arrives while the\n  // database or container tree is still warming up is flushed after\n  // hydration instead of being lost to startup ordering.\n  if (didRegainSyncPrerequisites(previousRuntime, runtime)) {\n    state.pendingPrerequisitesRegained = true;\n  }\n\n  if (runtime.infra.dbStatus !== \"ready\") {\n    resetProjection(state);\n    emit(state);\n    return;\n  }\n\n  // Reload the active container's summaries when the local store becomes\n  // ready (e.g. first DB attach) so first paint reflects cached contents.\n  publishHydration(state);\n}\n\nexport function createLocalProjectionStore(input: {\n  containerStore: ContainerContentsStore;\n  runtime: ContainerContentsStoreRuntime;\n}): LocalProjectionStore {\n  const state: LocalProjectionStoreState = {\n    activeContainerId: null,\n    documentRevision: 0,\n    deltaRevisions: new WeakMap(),\n    cache: createSummaryCache(),\n    containerStore: input.containerStore,\n    hydratedContainerSummaries: false,\n    listeners: new Set(),\n    pendingPrerequisitesRegained: false,\n    reconcileListeners: new Set(),\n    runtime: input.runtime,\n    snapshot: EMPTY_SNAPSHOT,\n    pendingSummaryReads: new Map(),\n  };\n  state.snapshot = computeSnapshot(state);\n\n  // Re-emit whenever the underlying container tree changes (mutations, remote\n  // hydration). This keeps the merged snapshot in step with the tree store.\n  input.containerStore.subscribe(() => {\n    const previousContainers = state.snapshot.containers;\n    const didMarkHydrated = publishHydration(state);\n    // Authentication can schedule the initial idle backfill before the\n    // asynchronous remote tree crawl discovers this identity's real root and\n    // system children. Re-arm backfill after those remotely-listable ids become\n    // visible. Compare membership, not node objects, so metadata/sync-state\n    // churn cannot create a reconciliation loop.\n    if (\n      !didMarkHydrated &&\n      hasRemoteBackedContainerMembershipGrowth(\n        previousContainers,\n        state.snapshot.containers,\n        state.runtime.auth.organizationId,\n        state.activeContainerId,\n      )\n    ) {\n      notifyReconcile(state, {\n        reason: \"remote-containers-added\",\n        activeContainerId: state.activeContainerId,\n      });\n    }\n  });\n\n  return {\n    getSnapshot: () => state.snapshot,\n    subscribe: (listener) => {\n      state.listeners.add(listener);\n      return () => {\n        state.listeners.delete(listener);\n      };\n    },\n    setActiveContainer: (containerId) => {\n      if (state.activeContainerId === containerId) {\n        return;\n      }\n      state.activeContainerId = containerId;\n      if (containerId) {\n        refreshContainerSummaries(state, containerId);\n      }\n      notifyReconcile(state, {\n        reason: \"active-changed\",\n        activeContainerId: containerId,\n      });\n    },\n    getActiveContainerId: () => state.activeContainerId,\n    loadContainerDelta: async (containerId) => {\n      const revision = state.documentRevision;\n      const documents = await loadLocalContainerProjectionDocumentsFromRuntime({\n        containerIds: [containerId],\n        runtime: state.runtime,\n      });\n      const delta = { containerId, ...documents };\n      state.deltaRevisions.set(delta, revision);\n      return delta;\n    },\n    applyReconciled: (delta) => {\n      const revision = state.deltaRevisions.get(delta);\n      if (revision !== undefined && revision !== state.documentRevision) {\n        refreshContainerSummaries(state, delta.containerId, true);\n        return;\n      }\n      if (state.pendingSummaryReads.has(delta.containerId)) {\n        refreshContainerSummaries(state, delta.containerId, true);\n      }\n      if (applyContainerSummaries(state.cache, delta)) {\n        emit(state);\n      }\n    },\n    removePersistedDocument: (localId) =>\n      removePersistedDocumentFromCache(state, localId),\n    refreshPersistedDocument: (document, placementChanged) =>\n      refreshPersistedDocument(state, document, placementChanged),\n    updateRuntime: (runtime) => updateLocalProjectionRuntime(state, runtime),\n    onReconcileSignal: (listener) => {\n      state.reconcileListeners.add(listener);\n      return () => {\n        state.reconcileListeners.delete(listener);\n      };\n    },\n    getContainerStore: () => state.containerStore,\n  };\n}\n"]}
+{"version":3,"file":"localProjectionStore.js","sourceRoot":"","sources":["localProjectionStore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gDAAgD,EAAE,MAAM,mDAAmD,CAAC;AACrH,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,4DAA4D,CAAC;AAGpE,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EAEjB,sCAAsC,EACtC,8BAA8B,GAC/B,MAAM,gBAAgB,CAAC;AAqExB,MAAM,cAAc,GAA4B;IAC9C,KAAK,EAAE,KAAK;IACZ,UAAU,EAAE,EAAE;IACd,8BAA8B,EAAE,IAAI,GAAG,EAAE;IACzC,8BAA8B,EAAE,IAAI,GAAG,EAAE;CAC1C,CAAC;AAEF,SAAS,eAAe,CACtB,KAAgC;IAEhC,MAAM,iBAAiB,GAAG,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;IAC7D,OAAO;QACL,KAAK,EAAE,iBAAiB,CAAC,KAAK;QAC9B,UAAU,EAAE,iBAAiB,CAAC,KAAK;QACnC,8BAA8B,EAAE,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC;QAC3E,8BAA8B,EAAE,sCAAsC,CACpE,KAAK,CAAC,KAAK,CACZ;KACF,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAgC;IAC5C,KAAK,CAAC,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,QAAQ,EAAE,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,KAAgC,EAChC,MAAsC;IAEtC,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAgC,EAChC,WAAmB;IAEnB,IACE,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC;QACjD,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC;QAC1C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EACxC,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAuB;QACtC,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,KAAK;KACnB,CAAC;IACF,KAAK,gDAAgD,CAAC;QACpD,YAAY,EAAE,CAAC,WAAW,CAAC;QAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;SACC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAClB,uEAAuE;QACvE,kEAAkE;QAClE,IACE,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,WAAW;YAC1D,WAAW,CAAC,aAAa,EACzB,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,EAAE;YACnD,WAAW;YACX,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;YAC9C,8BAA8B,EAC5B,SAAS,CAAC,8BAA8B;SAC3C,CAAC,CAAC;QACH,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE;QACV,0EAA0E;IAC5E,CAAC,CAAC;SACD,OAAO,CAAC,GAAG,EAAE;QACZ,IAAI,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,WAAW,EAAE,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACrD,sBAAsB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,yBAAyB,CAChC,KAAgC,EAChC,WAAmB,EACnB,kBAAkB,GAAG,KAAK;IAE1B,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/D,IAAI,WAAW,EAAE,CAAC;QAChB,yEAAyE;QACzE,0EAA0E;QAC1E,WAAW,CAAC,WAAW,GAAG,IAAI,CAAC;QAC/B,WAAW,CAAC,aAAa,KAAK,kBAAkB,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,sBAAsB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAgC,EAChC,QAAyB,EACzB,gBAAgB,GAAG,KAAK;IAExB,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC5B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,IACE,KAAK,CAAC,iBAAiB;QACvB,KAAK,CAAC,iBAAiB,KAAK,QAAQ,CAAC,WAAW,EAChD,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,CAAC;QAC1E,IACE,WAAW,KAAK,QAAQ,CAAC,WAAW;YACpC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,EACvD,CAAC;YACD,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,yBAAyB,CAAC,KAAK,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAgC;IAC3D,IACE,KAAK,CAAC,0BAA0B;QAChC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QACxC,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,KAAK,EACzC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;IACxC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iCAAiC,CACxC,KAAgC;IAEhC,IACE,CAAC,KAAK,CAAC,4BAA4B;QACnC,CAAC,KAAK,CAAC,0BAA0B;QACjC,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,KAAK,EACzC,CAAC;QACD,OAAO;IACT,CAAC;IACD,KAAK,CAAC,4BAA4B,GAAG,KAAK,CAAC;IAC3C,eAAe,CAAC,KAAK,EAAE;QACrB,MAAM,EAAE,wBAAwB;QAChC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;KAC3C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAgC;IACxD,MAAM,eAAe,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,IAAI,eAAe,EAAE,CAAC;QACpB,eAAe,CAAC,KAAK,EAAE;YACrB,MAAM,EAAE,UAAU;YAClB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,4EAA4E;IAC5E,iCAAiC,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,KAAgC;IACvD,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC5B,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAClC,KAAK,CAAC,0BAA0B,GAAG,KAAK,CAAC;AAC3C,CAAC;AAED,SAAS,wCAAwC,CAC/C,QAA+C,EAC/C,IAA2C,EAC3C,kBAAiC,EACjC,iBAAgC;IAEhC,MAAM,oBAAoB,GAAG,CAC3B,SAAwD,EACxD,EAAE,CAAC,2BAA2B,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAC7B,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACtD,CACF,CAAC;IACF,IACE,IAAI,CAAC,IAAI,CACP,CAAC,SAAS,EAAE,EAAE,CACZ,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CACpE,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,qBAAqB,GAAG,QAAQ,CAAC,IAAI,CACzC,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,EAAE,KAAK,iBAAiB;QAClC,2BAA2B,CAAC,SAAS,CAAC,CACzC,CAAC;IACF,OAAO,CACL,CAAC,qBAAqB;QACtB,IAAI,CAAC,IAAI,CACP,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,EAAE,KAAK,iBAAiB;YAClC,2BAA2B,CAAC,SAAS,CAAC,CACzC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,KAAgC,EAChC,OAAe;IAEf,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC5B,6EAA6E;IAC7E,6EAA6E;IAC7E,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3D,yBAAyB,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAgC,EAChC,OAAsC;IAEtC,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC;IACtC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;IACxB,IACE,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,eAAe,CAAC,KAAK,CAAC,OAAO;QACvD,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,eAAe,CAAC,KAAK,CAAC,WAAW,EAC/D,CAAC;QACD,eAAe,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAE5C,uEAAuE;IACvE,kEAAkE;IAClE,uDAAuD;IACvD,IAAI,0BAA0B,CAAC,eAAe,EAAE,OAAO,CAAC,EAAE,CAAC;QACzD,KAAK,CAAC,4BAA4B,GAAG,IAAI,CAAC;IAC5C,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACvC,eAAe,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,CAAC;QACZ,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,wEAAwE;IACxE,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAG1C;IACC,MAAM,KAAK,GAA8B;QACvC,iBAAiB,EAAE,IAAI;QACvB,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,IAAI,OAAO,EAAE;QAC7B,KAAK,EAAE,kBAAkB,EAAE;QAC3B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,0BAA0B,EAAE,KAAK;QACjC,SAAS,EAAE,IAAI,GAAG,EAAE;QACpB,4BAA4B,EAAE,KAAK;QACnC,kBAAkB,EAAE,IAAI,GAAG,EAAE;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,cAAc;QACxB,mBAAmB,EAAE,IAAI,GAAG,EAAE;KAC/B,CAAC;IACF,KAAK,CAAC,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAExC,4EAA4E;IAC5E,0EAA0E;IAC1E,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,EAAE;QAClC,MAAM,kBAAkB,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QACrD,MAAM,eAAe,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAChD,mEAAmE;QACnE,yEAAyE;QACzE,4EAA4E;QAC5E,wEAAwE;QACxE,6CAA6C;QAC7C,IACE,CAAC,eAAe;YAChB,wCAAwC,CACtC,kBAAkB,EAClB,KAAK,CAAC,QAAQ,CAAC,UAAU,EACzB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EACjC,KAAK,CAAC,iBAAiB,CACxB,EACD,CAAC;YACD,eAAe,CAAC,KAAK,EAAE;gBACrB,MAAM,EAAE,yBAAyB;gBACjC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ;QACjC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;YACtB,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9B,OAAO,GAAG,EAAE;gBACV,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACnC,CAAC,CAAC;QACJ,CAAC;QACD,kBAAkB,EAAE,CAAC,WAAW,EAAE,EAAE;YAClC,IAAI,KAAK,CAAC,iBAAiB,KAAK,WAAW,EAAE,CAAC;gBAC5C,OAAO;YACT,CAAC;YACD,KAAK,CAAC,iBAAiB,GAAG,WAAW,CAAC;YACtC,IAAI,WAAW,EAAE,CAAC;gBAChB,yBAAyB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAChD,CAAC;YACD,eAAe,CAAC,KAAK,EAAE;gBACrB,MAAM,EAAE,gBAAgB;gBACxB,iBAAiB,EAAE,WAAW;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,oBAAoB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,iBAAiB;QACnD,kBAAkB,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CAAC;YACxC,MAAM,SAAS,GAAG,MAAM,gDAAgD,CAAC;gBACvE,YAAY,EAAE,CAAC,WAAW,CAAC;gBAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,CAAC;YAC5C,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAClE,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrD,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,uBAAuB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,CAAC;QACH,CAAC;QACD,uBAAuB,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,gCAAgC,CAAC,KAAK,EAAE,OAAO,CAAC;QAClD,wBAAwB,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,EAAE,CACvD,wBAAwB,CAAC,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC;QAC7D,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,4BAA4B,CAAC,KAAK,EAAE,OAAO,CAAC;QACxE,iBAAiB,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC9B,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvC,OAAO,GAAG,EAAE;gBACV,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5C,CAAC,CAAC;QACJ,CAAC;QACD,iBAAiB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc;KAC9C,CAAC;AACJ,CAAC","sourcesContent":["import type { DocumentSummary } from \"../../data/documents/documentSummary\";\nimport { loadLocalContainerProjectionDocumentsFromRuntime } from \"../../workflows/container-contents/projectionView\";\nimport { didRegainSyncPrerequisites } from \"../../workflows/container-contents/syncLane\";\nimport {\n  isReconcilableContainerNode,\n  isRemoteBackedContainerNode,\n} from \"../container-contents/containerState/reconcilableContainer\";\nimport type { ContainerContentsStoreRuntime } from \"../container-contents/syncAgent\";\nimport type { ContainerContentsStore } from \"../container-contents/types\";\nimport {\n  applyContainerSummaries,\n  createSummaryCache,\n  removeDocumentSummary,\n  resetSummaryCache,\n  type SummaryCache,\n  snapshotLinkedContainerIdsByDocumentId,\n  snapshotSummariesByContainerId,\n} from \"./summaryCache\";\nimport type {\n  LocalProjectionReconciledDelta,\n  LocalProjectionSnapshot,\n} from \"./types\";\n\n/**\n * Signals the local projection store raises so the background reconciler\n * (Layer B) knows what to sync. The store never performs remote I/O itself.\n */\nexport interface LocalProjectionReconcileSignal {\n  reason:\n    | \"hydrated\"\n    | \"active-changed\"\n    | \"prerequisites-regained\"\n    | \"remote-containers-added\";\n  activeContainerId: string | null;\n}\n\nexport type LocalProjectionReconcileListener = (\n  signal: LocalProjectionReconcileSignal,\n) => void;\n\nexport interface LocalProjectionStore {\n  getSnapshot: () => LocalProjectionSnapshot;\n  subscribe: (listener: () => void) => () => void;\n  setActiveContainer: (containerId: string | null) => void;\n  getActiveContainerId: () => string | null;\n  applyReconciled: (delta: LocalProjectionReconciledDelta) => void;\n  loadContainerDelta: (\n    containerId: string,\n  ) => Promise<LocalProjectionReconciledDelta>;\n  removePersistedDocument: (localId: string) => void;\n  refreshPersistedDocument: (\n    document: DocumentSummary,\n    placementChanged?: boolean,\n  ) => void;\n  updateRuntime: (runtime: ContainerContentsStoreRuntime) => void;\n  /** Registered by the reconciler; returns an unsubscribe handle. */\n  onReconcileSignal: (listener: LocalProjectionReconcileListener) => () => void;\n  getContainerStore: () => ContainerContentsStore;\n}\n\ninterface LocalProjectionStoreState {\n  activeContainerId: string | null;\n  documentRevision: number;\n  deltaRevisions: WeakMap<LocalProjectionReconciledDelta, number>;\n  cache: SummaryCache;\n  containerStore: ContainerContentsStore;\n  hydratedContainerSummaries: boolean;\n  listeners: Set<() => void>;\n  /**\n   * A sync-prerequisite regain (auth, connectivity, or key pair) that arrived\n   * before the container tree was ready. The signal's reset-and-backfill must\n   * not be lost to startup ordering, so it is latched here and flushed once\n   * hydration completes.\n   */\n  pendingPrerequisitesRegained: boolean;\n  reconcileListeners: Set<LocalProjectionReconcileListener>;\n  runtime: ContainerContentsStoreRuntime;\n  snapshot: LocalProjectionSnapshot;\n  pendingSummaryReads: Map<string, PendingSummaryRead>;\n}\n\ninterface PendingSummaryRead {\n  discardResult: boolean;\n  reloadAfter: boolean;\n}\n\nconst EMPTY_SNAPSHOT: LocalProjectionSnapshot = {\n  ready: false,\n  containers: [],\n  documentSummariesByContainerId: new Map(),\n  linkedContainerIdsByDocumentId: new Map(),\n};\n\nfunction computeSnapshot(\n  state: LocalProjectionStoreState,\n): LocalProjectionSnapshot {\n  const containerSnapshot = state.containerStore.getSnapshot();\n  return {\n    ready: containerSnapshot.ready,\n    containers: containerSnapshot.nodes,\n    documentSummariesByContainerId: snapshotSummariesByContainerId(state.cache),\n    linkedContainerIdsByDocumentId: snapshotLinkedContainerIdsByDocumentId(\n      state.cache,\n    ),\n  };\n}\n\nfunction emit(state: LocalProjectionStoreState): void {\n  state.snapshot = computeSnapshot(state);\n  for (const listener of state.listeners) {\n    try {\n      listener();\n    } catch {\n      // Keep one subscriber failure from blocking later subscribers.\n    }\n  }\n}\n\nfunction notifyReconcile(\n  state: LocalProjectionStoreState,\n  signal: LocalProjectionReconcileSignal,\n): void {\n  for (const listener of state.reconcileListeners) {\n    try {\n      listener(signal);\n    } catch {\n      // Reconciler failures must not break the read path.\n    }\n  }\n}\n\nfunction loadContainerSummaries(\n  state: LocalProjectionStoreState,\n  containerId: string,\n): void {\n  if (\n    state.cache.hydratedContainerIds.has(containerId) ||\n    state.pendingSummaryReads.has(containerId) ||\n    state.runtime.infra.dbStatus !== \"ready\"\n  ) {\n    return;\n  }\n\n  const pendingRead: PendingSummaryRead = {\n    discardResult: false,\n    reloadAfter: false,\n  };\n  void loadLocalContainerProjectionDocumentsFromRuntime({\n    containerIds: [containerId],\n    runtime: state.runtime,\n  })\n    .then((documents) => {\n      // A runtime reset (e.g. dbStatus loss) clears this entry and the cache\n      // mid-flight; do not apply a stale read to a freshly reset cache.\n      if (\n        state.pendingSummaryReads.get(containerId) !== pendingRead ||\n        pendingRead.discardResult\n      ) {\n        return;\n      }\n      const changed = applyContainerSummaries(state.cache, {\n        containerId,\n        documentSummaries: documents.documentSummaries,\n        linkedContainerIdsByDocumentId:\n          documents.linkedContainerIdsByDocumentId,\n      });\n      if (changed) {\n        emit(state);\n      }\n    })\n    .catch(() => {\n      // Local read failures fall back to an empty list; the reconciler retries.\n    })\n    .finally(() => {\n      if (state.pendingSummaryReads.get(containerId) !== pendingRead) {\n        return;\n      }\n      state.pendingSummaryReads.delete(containerId);\n      if (pendingRead.reloadAfter) {\n        state.cache.hydratedContainerIds.delete(containerId);\n        loadContainerSummaries(state, containerId);\n      }\n    });\n\n  state.pendingSummaryReads.set(containerId, pendingRead);\n}\n\nfunction refreshContainerSummaries(\n  state: LocalProjectionStoreState,\n  containerId: string,\n  discardPendingRead = false,\n): void {\n  state.cache.hydratedContainerIds.delete(containerId);\n  const pendingRead = state.pendingSummaryReads.get(containerId);\n  if (pendingRead) {\n    // Publish ordinary reads before the trailing refresh so autosaves cannot\n    // starve first paint. Deletion and reconciliation must reject older rows.\n    pendingRead.reloadAfter = true;\n    pendingRead.discardResult ||= discardPendingRead;\n  } else {\n    loadContainerSummaries(state, containerId);\n  }\n}\n\nfunction refreshPersistedDocument(\n  state: LocalProjectionStoreState,\n  document: DocumentSummary,\n  placementChanged = false,\n): void {\n  state.documentRevision += 1;\n  const containerIds = new Set(state.pendingSummaryReads.keys());\n  if (\n    state.activeContainerId &&\n    state.activeContainerId === document.containerId\n  ) {\n    containerIds.add(state.activeContainerId);\n  }\n  for (const [containerId, summaries] of state.cache.summariesByContainerId) {\n    if (\n      containerId === document.containerId ||\n      summaries.some((summary) => summary.id === document.id)\n    ) {\n      containerIds.add(containerId);\n    }\n  }\n  for (const containerId of containerIds) {\n    refreshContainerSummaries(state, containerId, placementChanged);\n  }\n}\n\nfunction markHydratedIfReady(state: LocalProjectionStoreState): boolean {\n  if (\n    state.hydratedContainerSummaries ||\n    state.runtime.infra.dbStatus !== \"ready\" ||\n    !state.containerStore.getSnapshot().ready\n  ) {\n    return false;\n  }\n\n  state.hydratedContainerSummaries = true;\n  if (state.activeContainerId) {\n    loadContainerSummaries(state, state.activeContainerId);\n  }\n  return true;\n}\n\nfunction flushPendingPrerequisitesRegained(\n  state: LocalProjectionStoreState,\n): void {\n  if (\n    !state.pendingPrerequisitesRegained ||\n    !state.hydratedContainerSummaries ||\n    !state.containerStore.getSnapshot().ready\n  ) {\n    return;\n  }\n  state.pendingPrerequisitesRegained = false;\n  notifyReconcile(state, {\n    reason: \"prerequisites-regained\",\n    activeContainerId: state.activeContainerId,\n  });\n}\n\nfunction publishHydration(state: LocalProjectionStoreState): boolean {\n  const didMarkHydrated = markHydratedIfReady(state);\n  emit(state);\n  if (didMarkHydrated) {\n    notifyReconcile(state, {\n      reason: \"hydrated\",\n      activeContainerId: state.activeContainerId,\n    });\n  }\n  // Backfills read getSnapshot(), so publish the tree before requesting them.\n  flushPendingPrerequisitesRegained(state);\n  return didMarkHydrated;\n}\n\nfunction resetProjection(state: LocalProjectionStoreState): void {\n  state.documentRevision += 1;\n  resetSummaryCache(state.cache);\n  state.pendingSummaryReads.clear();\n  state.hydratedContainerSummaries = false;\n}\n\nfunction hasRemoteBackedContainerMembershipGrowth(\n  previous: LocalProjectionSnapshot[\"containers\"],\n  next: LocalProjectionSnapshot[\"containers\"],\n  homeOrganizationId: string | null,\n  activeContainerId: string | null,\n): boolean {\n  const isRemoteReconcilable = (\n    container: LocalProjectionSnapshot[\"containers\"][number],\n  ) => isReconcilableContainerNode(container, homeOrganizationId);\n  const previousIds = new Set(\n    previous.flatMap((container) =>\n      isRemoteReconcilable(container) ? [container.id] : [],\n    ),\n  );\n  if (\n    next.some(\n      (container) =>\n        isRemoteReconcilable(container) && !previousIds.has(container.id),\n    )\n  ) {\n    return true;\n  }\n  if (!activeContainerId) {\n    return false;\n  }\n  const wasActiveRemoteBacked = previous.some(\n    (container) =>\n      container.id === activeContainerId &&\n      isRemoteBackedContainerNode(container),\n  );\n  return (\n    !wasActiveRemoteBacked &&\n    next.some(\n      (container) =>\n        container.id === activeContainerId &&\n        isRemoteBackedContainerNode(container),\n    )\n  );\n}\n\nfunction removePersistedDocumentFromCache(\n  state: LocalProjectionStoreState,\n  localId: string,\n): void {\n  state.documentRevision += 1;\n  // The deleted row may exist only in an in-flight first read, so invalidating\n  // just containers that already cached it would allow it to reappear offline.\n  for (const containerId of state.pendingSummaryReads.keys()) {\n    refreshContainerSummaries(state, containerId, true);\n  }\n  if (removeDocumentSummary(state.cache, localId)) {\n    emit(state);\n  }\n}\n\nfunction updateLocalProjectionRuntime(\n  state: LocalProjectionStoreState,\n  runtime: ContainerContentsStoreRuntime,\n): void {\n  const previousRuntime = state.runtime;\n  state.runtime = runtime;\n  if (\n    runtime.infra.execSql !== previousRuntime.infra.execSql ||\n    runtime.state.domainScope !== previousRuntime.state.domainScope\n  ) {\n    resetProjection(state);\n  }\n  state.containerStore.updateRuntime(runtime);\n\n  // Latch before the readiness checks so a regain that arrives while the\n  // database or container tree is still warming up is flushed after\n  // hydration instead of being lost to startup ordering.\n  if (didRegainSyncPrerequisites(previousRuntime, runtime)) {\n    state.pendingPrerequisitesRegained = true;\n  }\n\n  if (runtime.infra.dbStatus !== \"ready\") {\n    resetProjection(state);\n    emit(state);\n    return;\n  }\n\n  // Reload the active container's summaries when the local store becomes\n  // ready (e.g. first DB attach) so first paint reflects cached contents.\n  publishHydration(state);\n}\n\nexport function createLocalProjectionStore(input: {\n  containerStore: ContainerContentsStore;\n  runtime: ContainerContentsStoreRuntime;\n}): LocalProjectionStore {\n  const state: LocalProjectionStoreState = {\n    activeContainerId: null,\n    documentRevision: 0,\n    deltaRevisions: new WeakMap(),\n    cache: createSummaryCache(),\n    containerStore: input.containerStore,\n    hydratedContainerSummaries: false,\n    listeners: new Set(),\n    pendingPrerequisitesRegained: false,\n    reconcileListeners: new Set(),\n    runtime: input.runtime,\n    snapshot: EMPTY_SNAPSHOT,\n    pendingSummaryReads: new Map(),\n  };\n  state.snapshot = computeSnapshot(state);\n\n  // Re-emit whenever the underlying container tree changes (mutations, remote\n  // hydration). This keeps the merged snapshot in step with the tree store.\n  input.containerStore.subscribe(() => {\n    const previousContainers = state.snapshot.containers;\n    const didMarkHydrated = publishHydration(state);\n    // Authentication can schedule the initial idle backfill before the\n    // asynchronous remote tree crawl discovers this identity's real root and\n    // system children. Re-arm backfill after those remotely-listable ids become\n    // visible. Compare membership, not node objects, so metadata/sync-state\n    // churn cannot create a reconciliation loop.\n    if (\n      !didMarkHydrated &&\n      hasRemoteBackedContainerMembershipGrowth(\n        previousContainers,\n        state.snapshot.containers,\n        state.runtime.auth.organizationId,\n        state.activeContainerId,\n      )\n    ) {\n      notifyReconcile(state, {\n        reason: \"remote-containers-added\",\n        activeContainerId: state.activeContainerId,\n      });\n    }\n  });\n\n  return {\n    getSnapshot: () => state.snapshot,\n    subscribe: (listener) => {\n      state.listeners.add(listener);\n      return () => {\n        state.listeners.delete(listener);\n      };\n    },\n    setActiveContainer: (containerId) => {\n      if (state.activeContainerId === containerId) {\n        return;\n      }\n      state.activeContainerId = containerId;\n      if (containerId) {\n        refreshContainerSummaries(state, containerId);\n      }\n      notifyReconcile(state, {\n        reason: \"active-changed\",\n        activeContainerId: containerId,\n      });\n    },\n    getActiveContainerId: () => state.activeContainerId,\n    loadContainerDelta: async (containerId) => {\n      const revision = state.documentRevision;\n      const documents = await loadLocalContainerProjectionDocumentsFromRuntime({\n        containerIds: [containerId],\n        runtime: state.runtime,\n      });\n      const delta = { containerId, ...documents };\n      state.deltaRevisions.set(delta, revision);\n      return delta;\n    },\n    applyReconciled: (delta) => {\n      const revision = state.deltaRevisions.get(delta);\n      if (revision !== undefined && revision !== state.documentRevision) {\n        refreshContainerSummaries(state, delta.containerId, true);\n        return;\n      }\n      if (state.pendingSummaryReads.has(delta.containerId)) {\n        refreshContainerSummaries(state, delta.containerId, true);\n      }\n      if (applyContainerSummaries(state.cache, delta)) {\n        emit(state);\n      }\n    },\n    removePersistedDocument: (localId) =>\n      removePersistedDocumentFromCache(state, localId),\n    refreshPersistedDocument: (document, placementChanged) =>\n      refreshPersistedDocument(state, document, placementChanged),\n    updateRuntime: (runtime) => updateLocalProjectionRuntime(state, runtime),\n    onReconcileSignal: (listener) => {\n      state.reconcileListeners.add(listener);\n      return () => {\n        state.reconcileListeners.delete(listener);\n      };\n    },\n    getContainerStore: () => state.containerStore,\n  };\n}\n"]}

package/stores/local-projection/registry.d.ts

@@ -1,6 +1,6 @@
 import type { DomainScope } from "../../data/shared/domainScope.js";
 import { type ContainerContentsStoreOptions } from "../container-contents/index.js";
-import type { ContainerContentsStoreRuntime } from "../container-contents/syncAgent.js";
+import type { ContainerContentsStoreRuntime } from "../container-contents/syncAgent/index.js";
 import { type LocalProjectionStore } from "./localProjectionStore.js";
 /**
  * Get (or lazily create) the device-first local projection store for a domain

package/stores/local-projection/types.d.ts

@@ -1,5 +1,5 @@
 import type { DocumentSummary } from "../../data/documents/documentSummary.js";
-import type { ContainerContentsStoreRuntime } from "../container-contents/syncAgent.js";
+import type { ContainerContentsStoreRuntime } from "../container-contents/syncAgent/index.js";
 import type { ContainerNode } from "../container-contents/types.js";
 /**
  * Device-first, synchronously-readable view of one domain scope.

package/workflows/blobs/detach.js

@@ -4,7 +4,7 @@ import { authorizingContainerPathRefs } from "../../data/documents/shared/projec
 import { readCanonicalRecord } from "../../data/keying/canonicalJson.js";
 import { requireProjectionUserKeyResolver } from "../../data/keyingProjectionVerification/index.js";
 import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
-import { resolveBlobMutationWriterProjection } from "./writerProjection.js";
+import { resolveBlobMutationWriterProjection } from "./verification/writerProjection.js";
 export async function detachDocumentAttachment({ apiClient, author, bindingId, blobId, documentId, eventId = crypto.randomUUID(), execSql, isRemoteSyncBlocked, resolveProjectionUserKey, signedAt = new Date().toISOString(), slotId, stillCurrent, warmReferencedPrincipalPolicies, writerProjection, }) {
     const resolved = await resolveBlobMutationWriterProjection({
         apiClient,

package/workflows/blobs/detach.js.map

@@ -1 +1 @@
-{"version":3,"file":"detach.js","sourceRoot":"","sources":["detach.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EAAE,kCAAkC,EAAE,MAAM,4CAA4C,CAAC;AAKhG,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,gCAAgC,EAAE,MAAM,yCAAyC,CAAC;AAC3F,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,mCAAmC,EAAE,MAAM,oBAAoB,CAAC;AAEzE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,EAC7C,SAAS,EACT,MAAM,EACN,SAAS,EACT,MAAM,EACN,UAAU,EACV,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,EAC7B,OAAO,EACP,mBAAmB,EACnB,wBAAwB,EACxB,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACnC,MAAM,EACN,YAAY,EACZ,+BAA+B,EAC/B,gBAAgB,GACc;IAC9B,MAAM,QAAQ,GAAG,MAAM,mCAAmC,CAAC;QACzD,SAAS;QACT,UAAU;QACV,UAAU,EAAE,wBAAwB;QACpC,OAAO;QACP,mBAAmB;QACnB,YAAY;QACZ,+BAA+B;QAC/B,wBAAwB,EAAE,gCAAgC,CACxD,wBAAwB,EACxB,4BAA4B,CAC7B;QACD,gBAAgB;KACjB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,GACpE,QAAQ,CAAC;IAEX,MAAM,QAAQ,GAAG,4BAA4B,CAAC,wBAAwB,CAAC,CAAC;IACxE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,6BAA6B,CAAC;QAC1D,MAAM;QACN,SAAS;QACT,MAAM;QACN,UAAU;QACV,OAAO;QACP,gBAAgB;QAChB,QAAQ;QACR,MAAM;QACN,4BAA4B,EAAE,QAAQ;KACvC,CAAC,CAAC;IACH,MAAM,OAAO,GAAgC;QAC3C,KAAK,EAAE,mBAAmB,CAAC,KAAK,EAAE,8BAA8B,CAAC;QACjE,IAAI,EAAE,mBAAmB,CAAC,IAAI,EAAE,6BAA6B,CAAC;QAC9D,4BAA4B,EAAE,QAAQ;KACvC,CAAC;IACF,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,oBAAoB,CACnD,MAAM,EACN,SAAS,EACT,OAAO,EACP;QACE,qCAAqC,EAAE,gBAAgB,CAAC,cAAc;KACvE,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAElD,kCAAkC,CAAC;QACjC,SAAS;QACT,MAAM;QACN,UAAU;QACV,QAAQ;QACR,MAAM;KACP,CAAC,CAAC;IAEH,OAAO;QACL,OAAO;QACP,QAAQ;QACR,gBAAgB,EAAE,wBAAwB;KAC3C,CAAC;AACJ,CAAC","sourcesContent":["import type { BlobAttachmentDetachRequest } from \"@tearleads/validators/request\";\nimport { signBlobAttachmentDetachEvent } from \"../../data/documents/blob/shared/events\";\nimport { assertBlobAttachmentDetachResponse } from \"../../data/documents/blob/shared/responses\";\nimport type {\n  DetachDocumentAttachmentInput,\n  DetachDocumentAttachmentResult,\n} from \"../../data/documents/blob/shared/types\";\nimport { authorizingContainerPathRefs } from \"../../data/documents/shared/projection\";\nimport { readCanonicalRecord } from \"../../data/keying/canonicalJson\";\nimport { requireProjectionUserKeyResolver } from \"../../data/keyingProjectionVerification\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport { resolveBlobMutationWriterProjection } from \"./writerProjection\";\n\nexport async function detachDocumentAttachment({\n  apiClient,\n  author,\n  bindingId,\n  blobId,\n  documentId,\n  eventId = crypto.randomUUID(),\n  execSql,\n  isRemoteSyncBlocked,\n  resolveProjectionUserKey,\n  signedAt = new Date().toISOString(),\n  slotId,\n  stillCurrent,\n  warmReferencedPrincipalPolicies,\n  writerProjection,\n}: DetachDocumentAttachmentInput): Promise<DetachDocumentAttachmentResult | null> {\n  const resolved = await resolveBlobMutationWriterProjection({\n    apiClient,\n    documentId,\n    errorLabel: \"Blob attachment detach\",\n    execSql,\n    isRemoteSyncBlocked,\n    stillCurrent,\n    warmReferencedPrincipalPolicies,\n    resolveProjectionUserKey: requireProjectionUserKeyResolver(\n      resolveProjectionUserKey,\n      \"Document attachment detach\",\n    ),\n    writerProjection,\n  });\n  if (!resolved) {\n    return null;\n  }\n  const { manifestIdentity, writerProjection: resolvedWriterProjection } =\n    resolved;\n\n  const pathRefs = authorizingContainerPathRefs(resolvedWriterProjection);\n  const { body, event } = await signBlobAttachmentDetachEvent({\n    author,\n    bindingId,\n    blobId,\n    documentId,\n    eventId,\n    manifestIdentity,\n    signedAt,\n    slotId,\n    authorizingContainerPathRefs: pathRefs,\n  });\n  const request: BlobAttachmentDetachRequest = {\n    event: readCanonicalRecord(event, \"Blob attachment detach event\"),\n    body: readCanonicalRecord(body, \"Blob attachment detach body\"),\n    authorizingContainerPathRefs: pathRefs,\n  };\n  assertProjectionVerificationCurrent(stillCurrent);\n  const response = await apiClient.detachBlobAttachment(\n    blobId,\n    bindingId,\n    request,\n    {\n      expectedPaymentRequiredOrganizationId: manifestIdentity.organizationId,\n    },\n  );\n  if (!response) {\n    return null;\n  }\n  assertProjectionVerificationCurrent(stillCurrent);\n\n  assertBlobAttachmentDetachResponse({\n    bindingId,\n    blobId,\n    documentId,\n    response,\n    slotId,\n  });\n\n  return {\n    request,\n    response,\n    writerProjection: resolvedWriterProjection,\n  };\n}\n"]}
+{"version":3,"file":"detach.js","sourceRoot":"","sources":["detach.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EAAE,kCAAkC,EAAE,MAAM,4CAA4C,CAAC;AAKhG,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,gCAAgC,EAAE,MAAM,yCAAyC,CAAC;AAC3F,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AAEtF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,EAC7C,SAAS,EACT,MAAM,EACN,SAAS,EACT,MAAM,EACN,UAAU,EACV,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,EAC7B,OAAO,EACP,mBAAmB,EACnB,wBAAwB,EACxB,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACnC,MAAM,EACN,YAAY,EACZ,+BAA+B,EAC/B,gBAAgB,GACc;IAC9B,MAAM,QAAQ,GAAG,MAAM,mCAAmC,CAAC;QACzD,SAAS;QACT,UAAU;QACV,UAAU,EAAE,wBAAwB;QACpC,OAAO;QACP,mBAAmB;QACnB,YAAY;QACZ,+BAA+B;QAC/B,wBAAwB,EAAE,gCAAgC,CACxD,wBAAwB,EACxB,4BAA4B,CAC7B;QACD,gBAAgB;KACjB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,GACpE,QAAQ,CAAC;IAEX,MAAM,QAAQ,GAAG,4BAA4B,CAAC,wBAAwB,CAAC,CAAC;IACxE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,6BAA6B,CAAC;QAC1D,MAAM;QACN,SAAS;QACT,MAAM;QACN,UAAU;QACV,OAAO;QACP,gBAAgB;QAChB,QAAQ;QACR,MAAM;QACN,4BAA4B,EAAE,QAAQ;KACvC,CAAC,CAAC;IACH,MAAM,OAAO,GAAgC;QAC3C,KAAK,EAAE,mBAAmB,CAAC,KAAK,EAAE,8BAA8B,CAAC;QACjE,IAAI,EAAE,mBAAmB,CAAC,IAAI,EAAE,6BAA6B,CAAC;QAC9D,4BAA4B,EAAE,QAAQ;KACvC,CAAC;IACF,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,oBAAoB,CACnD,MAAM,EACN,SAAS,EACT,OAAO,EACP;QACE,qCAAqC,EAAE,gBAAgB,CAAC,cAAc;KACvE,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAElD,kCAAkC,CAAC;QACjC,SAAS;QACT,MAAM;QACN,UAAU;QACV,QAAQ;QACR,MAAM;KACP,CAAC,CAAC;IAEH,OAAO;QACL,OAAO;QACP,QAAQ;QACR,gBAAgB,EAAE,wBAAwB;KAC3C,CAAC;AACJ,CAAC","sourcesContent":["import type { BlobAttachmentDetachRequest } from \"@tearleads/validators/request\";\nimport { signBlobAttachmentDetachEvent } from \"../../data/documents/blob/shared/events\";\nimport { assertBlobAttachmentDetachResponse } from \"../../data/documents/blob/shared/responses\";\nimport type {\n  DetachDocumentAttachmentInput,\n  DetachDocumentAttachmentResult,\n} from \"../../data/documents/blob/shared/types\";\nimport { authorizingContainerPathRefs } from \"../../data/documents/shared/projection\";\nimport { readCanonicalRecord } from \"../../data/keying/canonicalJson\";\nimport { requireProjectionUserKeyResolver } from \"../../data/keyingProjectionVerification\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport { resolveBlobMutationWriterProjection } from \"./verification/writerProjection\";\n\nexport async function detachDocumentAttachment({\n  apiClient,\n  author,\n  bindingId,\n  blobId,\n  documentId,\n  eventId = crypto.randomUUID(),\n  execSql,\n  isRemoteSyncBlocked,\n  resolveProjectionUserKey,\n  signedAt = new Date().toISOString(),\n  slotId,\n  stillCurrent,\n  warmReferencedPrincipalPolicies,\n  writerProjection,\n}: DetachDocumentAttachmentInput): Promise<DetachDocumentAttachmentResult | null> {\n  const resolved = await resolveBlobMutationWriterProjection({\n    apiClient,\n    documentId,\n    errorLabel: \"Blob attachment detach\",\n    execSql,\n    isRemoteSyncBlocked,\n    stillCurrent,\n    warmReferencedPrincipalPolicies,\n    resolveProjectionUserKey: requireProjectionUserKeyResolver(\n      resolveProjectionUserKey,\n      \"Document attachment detach\",\n    ),\n    writerProjection,\n  });\n  if (!resolved) {\n    return null;\n  }\n  const { manifestIdentity, writerProjection: resolvedWriterProjection } =\n    resolved;\n\n  const pathRefs = authorizingContainerPathRefs(resolvedWriterProjection);\n  const { body, event } = await signBlobAttachmentDetachEvent({\n    author,\n    bindingId,\n    blobId,\n    documentId,\n    eventId,\n    manifestIdentity,\n    signedAt,\n    slotId,\n    authorizingContainerPathRefs: pathRefs,\n  });\n  const request: BlobAttachmentDetachRequest = {\n    event: readCanonicalRecord(event, \"Blob attachment detach event\"),\n    body: readCanonicalRecord(body, \"Blob attachment detach body\"),\n    authorizingContainerPathRefs: pathRefs,\n  };\n  assertProjectionVerificationCurrent(stillCurrent);\n  const response = await apiClient.detachBlobAttachment(\n    blobId,\n    bindingId,\n    request,\n    {\n      expectedPaymentRequiredOrganizationId: manifestIdentity.organizationId,\n    },\n  );\n  if (!response) {\n    return null;\n  }\n  assertProjectionVerificationCurrent(stillCurrent);\n\n  assertBlobAttachmentDetachResponse({\n    bindingId,\n    blobId,\n    documentId,\n    response,\n    slotId,\n  });\n\n  return {\n    request,\n    response,\n    writerProjection: resolvedWriterProjection,\n  };\n}\n"]}

package/workflows/blobs/hydration/blobChunkDecryption.js

@@ -0,0 +1,34 @@
+import { deriveBlobChunkIv } from "../../../internal/crypto/index.js";
+import { contentRecordAdditionalDataBytes } from "../../../data/documents/blob/shared/crypto.js";
+import { asWebCryptoBytes } from "../../../data/documents/shared/readers.js";
+export async function decryptBlobChunk(input) {
+    const { encrypted, expectedBlobId, organizationId, recordKey, chunk } = input;
+    const plaintext = new Uint8Array(await crypto.subtle.decrypt({
+        name: "AES-GCM",
+        iv: deriveBlobChunkIv(encrypted.iv, chunk.index),
+        additionalData: contentRecordAdditionalDataBytes({
+            blobId: expectedBlobId,
+            chunkCount: encrypted.chunkCount,
+            chunkIndex: chunk.index,
+            chunkPlaintextByteLength: chunk.plaintextByteLength,
+            chunkSize: encrypted.chunkSize,
+            contentKeyEpoch: encrypted.contentKeyEpoch,
+            contentRecordId: encrypted.contentRecordId,
+            metadataHash: encrypted.metadataHash,
+            nonceDomainHash: encrypted.nonceDomainHash,
+            organizationId,
+            plaintextByteLength: encrypted.byteLength,
+        }),
+    }, recordKey, asWebCryptoBytes(chunk.ciphertext)));
+    if (plaintext.byteLength !== chunk.plaintextByteLength)
+        throw new Error("Blob decrypted chunk byte length mismatch");
+    return plaintext;
+}
+export async function decryptBlobChunks(input) {
+    const decrypted = new Uint8Array(input.encrypted.byteLength);
+    for (const chunk of input.encrypted.chunks) {
+        decrypted.set(await decryptBlobChunk({ ...input, chunk }), chunk.index * input.encrypted.chunkSize);
+    }
+    return decrypted;
+}
+//# sourceMappingURL=blobChunkDecryption.js.map

package/workflows/blobs/hydration/blobChunkDecryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blobChunkDecryption.js","sourceRoot":"","sources":["blobChunkDecryption.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AAM9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAS1E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAEC;IAED,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9E,MAAM,SAAS,GAAG,IAAI,UAAU,CAC9B,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB;QACE,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;QAChD,cAAc,EAAE,gCAAgC,CAAC;YAC/C,MAAM,EAAE,cAAc;YACtB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU,EAAE,KAAK,CAAC,KAAK;YACvB,wBAAwB,EAAE,KAAK,CAAC,mBAAmB;YACnD,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,cAAc;YACd,mBAAmB,EAAE,SAAS,CAAC,UAAU;SAC1C,CAAC;KACH,EACD,SAAS,EACT,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CACnC,CACF,CAAC;IACF,IAAI,SAAS,CAAC,UAAU,KAAK,KAAK,CAAC,mBAAmB;QACpD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAEC;IAED,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QAC3C,SAAS,CAAC,GAAG,CACX,MAAM,gBAAgB,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,EAC3C,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CACxC,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["import { deriveBlobChunkIv } from \"@tearleads/crypto\";\nimport type { BlobBytes } from \"../../../data/blobs/blobContracts\";\nimport { contentRecordAdditionalDataBytes } from \"../../../data/documents/blob/shared/crypto\";\nimport type {\n  BlobEncryptedBytesHeader,\n  BlobEncryptedBytesRecord,\n  BlobEncryptedChunk,\n} from \"../../../data/documents/blob/shared/types\";\nimport { asWebCryptoBytes } from \"../../../data/documents/shared/readers\";\n\ninterface BlobChunkDecryption {\n  encrypted: BlobEncryptedBytesHeader;\n  expectedBlobId: string;\n  organizationId: string;\n  recordKey: CryptoKey;\n}\n\nexport async function decryptBlobChunk(\n  input: BlobChunkDecryption & {\n    chunk: BlobEncryptedChunk;\n  },\n): Promise<BlobBytes> {\n  const { encrypted, expectedBlobId, organizationId, recordKey, chunk } = input;\n  const plaintext = new Uint8Array(\n    await crypto.subtle.decrypt(\n      {\n        name: \"AES-GCM\",\n        iv: deriveBlobChunkIv(encrypted.iv, chunk.index),\n        additionalData: contentRecordAdditionalDataBytes({\n          blobId: expectedBlobId,\n          chunkCount: encrypted.chunkCount,\n          chunkIndex: chunk.index,\n          chunkPlaintextByteLength: chunk.plaintextByteLength,\n          chunkSize: encrypted.chunkSize,\n          contentKeyEpoch: encrypted.contentKeyEpoch,\n          contentRecordId: encrypted.contentRecordId,\n          metadataHash: encrypted.metadataHash,\n          nonceDomainHash: encrypted.nonceDomainHash,\n          organizationId,\n          plaintextByteLength: encrypted.byteLength,\n        }),\n      },\n      recordKey,\n      asWebCryptoBytes(chunk.ciphertext),\n    ),\n  );\n  if (plaintext.byteLength !== chunk.plaintextByteLength)\n    throw new Error(\"Blob decrypted chunk byte length mismatch\");\n  return plaintext;\n}\n\nexport async function decryptBlobChunks(\n  input: Omit<BlobChunkDecryption, \"encrypted\"> & {\n    encrypted: BlobEncryptedBytesRecord;\n  },\n): Promise<BlobBytes> {\n  const decrypted = new Uint8Array(input.encrypted.byteLength);\n  for (const chunk of input.encrypted.chunks) {\n    decrypted.set(\n      await decryptBlobChunk({ ...input, chunk }),\n      chunk.index * input.encrypted.chunkSize,\n    );\n  }\n  return decrypted;\n}\n"]}

package/workflows/blobs/hydration/decrypt.d.ts

@@ -0,0 +1,12 @@
+import type { BlobBytes } from "../../../data/blobs/blobContracts.js";
+import type { BlobEncryptedBytesHeader, DecryptDocumentAttachmentBlobInput } from "../../../data/documents/blob/shared/types.js";
+export type AttachmentBlobDecryptionInput = Omit<DecryptDocumentAttachmentBlobInput, "encryptedBytes"> & {
+    encrypted: BlobEncryptedBytesHeader;
+};
+/** Verifies metadata and authority; the caller must still authenticate ciphertext. */
+export declare function prepareDocumentAttachmentBlobDecryption({ binding, encrypted, expectedDocumentId, expectedSlotId, execSql, resolveProjectionUserKey, targetSecretKey, stillCurrent, warmReferencedPrincipalPolicies, writerProjection, }: AttachmentBlobDecryptionInput): Promise<{
+    contentKey: Uint8Array;
+    recordKey: CryptoKey;
+    organizationId: string;
+}>;
+export declare function decryptDocumentAttachmentBlob(input: DecryptDocumentAttachmentBlobInput): Promise<BlobBytes>;

package/workflows/blobs/hydration/decrypt.js

@@ -0,0 +1,246 @@
+import { blobContentMetadataHash, bytesToHex, CONTENT_RECORD_ENCRYPTION_SUITE, computeBlobAccessManifestHash, computeBlobContentKeyTargetHash, computeContentRecordNonceDomainHash, makeVerifiedBlobKekTargets, verifyWriteHeader, } from "../../../internal/crypto/index.js";
+import { deriveBlobContentRecordKey } from "../../../data/documents/blob/shared/crypto.js";
+import { unwrapBlobContentKey } from "../../../data/documents/blob/shared/projection.js";
+import { parseBlobEncryptedBytes, readBlobKekTarget, readDocumentManifestIdentity, sortBlobTargets, } from "../../../data/documents/blob/shared/readers.js";
+import { assertBlobContentKeyBundleTargetHash } from "../../../data/documents/blob/shared/responses.js";
+import { importContentKeyMaterial } from "../../../data/documents/shared/contentRecordKeys.js";
+import { assertDocumentWriterProjectionConsistent } from "../../../data/documents/shared/projection.js";
+import { asWebCryptoBytes, readWriteHeader, uniqueSortedStrings, } from "../../../data/documents/shared/readers.js";
+import { projectionVerificationOptions } from "../../../data/documents/shared/types.js";
+import { readCanonicalRecord } from "../../../data/keying/canonicalJson.js";
+import { readRecordString, requireProjectionUserKeyResolver, } from "../../../data/keyingProjectionVerification/index.js";
+import { resolveEventContainerPaths } from "../../../data/keyingProjectionVerification/document/documentDependencyPaths.js";
+import { assertAttachmentBindingVerified } from "../verification/attachmentBindingVerification.js";
+import { assertBlobWrapScopeVerified } from "../verification/verifiedWrapScope.js";
+import { decryptBlobChunks } from "./blobChunkDecryption.js";
+async function assertBlobEncryptionMetadata(input) {
+    const { contentKeyBundle, encrypted, expectedBlobId, organizationId } = input;
+    if (encrypted.blobId !== expectedBlobId ||
+        encrypted.contentRecordId !== expectedBlobId) {
+        throw new Error("Blob encrypted bytes blob id mismatch");
+    }
+    if (encrypted.contentKeyEpoch !== contentKeyBundle.contentKeyEpoch ||
+        contentKeyBundle.blobId !== expectedBlobId) {
+        throw new Error("Blob encrypted bytes content-key bundle mismatch");
+    }
+    await assertBlobContentKeyBundleTargetHash(contentKeyBundle);
+    const expectedNonceDomainHash = await computeContentRecordNonceDomainHash({
+        version: 1,
+        organizationId,
+        objectKind: "blob",
+        objectId: expectedBlobId,
+        contentKeyEpoch: encrypted.contentKeyEpoch,
+        encryptionSuite: CONTENT_RECORD_ENCRYPTION_SUITE,
+        contentRecordId: encrypted.contentRecordId,
+    });
+    if (encrypted.nonceDomainHash !== expectedNonceDomainHash) {
+        throw new Error("Blob encrypted bytes nonce domain mismatch");
+    }
+    const expectedMetadataHash = await blobContentMetadataHash({
+        blobId: expectedBlobId,
+        byteLength: encrypted.byteLength,
+        chunkCount: encrypted.chunkCount,
+        chunkSize: encrypted.chunkSize,
+        contentKeyEpoch: encrypted.contentKeyEpoch,
+    });
+    if (encrypted.metadataHash !== expectedMetadataHash) {
+        throw new Error("Blob encrypted bytes metadata hash mismatch");
+    }
+}
+/** Verifies metadata and authority; the caller must still authenticate ciphertext. */
+export async function prepareDocumentAttachmentBlobDecryption({ binding, encrypted, expectedDocumentId, expectedSlotId, execSql, resolveProjectionUserKey, targetSecretKey, stillCurrent, warmReferencedPrincipalPolicies, writerProjection, }) {
+    const requiredResolveProjectionUserKey = requireProjectionUserKeyResolver(resolveProjectionUserKey, "Document attachment blob decrypt");
+    const verificationOptions = projectionVerificationOptions({
+        execSql,
+        stillCurrent,
+        warmReferencedPrincipalPolicies,
+        resolveProjectionUserKey: requiredResolveProjectionUserKey,
+    });
+    let documentAuthorization;
+    await assertDocumentWriterProjectionConsistent(writerProjection, {
+        allowStaleContentKeyBundle: true,
+        execSql,
+        onVerifiedAuthorization: (authorization) => {
+            documentAuthorization = authorization;
+        },
+        ...verificationOptions,
+    });
+    const { documentId, organizationId } = readDocumentManifestIdentity(writerProjection);
+    await assertBlobEncryptionMetadata({
+        contentKeyBundle: binding.contentKeyBundle,
+        encrypted,
+        expectedBlobId: binding.blobId,
+        organizationId,
+    });
+    await assertAttachmentBindingVerified({
+        authorization: documentAuthorization,
+        binding,
+        expectedDocumentId,
+        expectedSlotId,
+        resolveProjectionUserKey: requiredResolveProjectionUserKey,
+    });
+    await assertBlobWriteHeaderVerified({
+        authorization: documentAuthorization,
+        binding,
+        encrypted,
+        organizationId,
+        resolveProjectionUserKey: requiredResolveProjectionUserKey,
+    });
+    if (!documentAuthorization)
+        throw new Error("Blob document authorization is unavailable");
+    assertBlobWrapScopeVerified({
+        authorization: documentAuthorization,
+        binding,
+        documentId,
+    });
+    const contentKey = await unwrapBlobContentKey({
+        blobId: binding.blobId,
+        contentKeyBundle: binding.contentKeyBundle,
+        documentId,
+        encrypted,
+        execSql,
+        expectedBindingId: binding.bindingId,
+        secretKey: targetSecretKey,
+        ...verificationOptions,
+        writerProjection,
+    });
+    const contentKeyMaterial = await importContentKeyMaterial(contentKey);
+    const recordKey = await deriveBlobContentRecordKey({
+        blobId: binding.blobId,
+        contentKeyEpoch: encrypted.contentKeyEpoch,
+        contentKeyMaterial,
+        contentRecordId: encrypted.contentRecordId,
+        organizationId,
+        usage: "decrypt",
+    });
+    return { contentKey, recordKey, organizationId };
+}
+async function decryptDocumentAttachmentBlobWithKey(input) {
+    const encrypted = parseBlobEncryptedBytes(input.encryptedBytes);
+    const context = await prepareDocumentAttachmentBlobDecryption({
+        ...input,
+        encrypted,
+    });
+    const header = readWriteHeader(input.binding.writeHeader, "Attachment blob write header");
+    const ciphertextHash = bytesToHex(new Uint8Array(await crypto.subtle.digest("SHA-256", asWebCryptoBytes(input.encryptedBytes))));
+    if (header.ciphertextHash !== ciphertextHash)
+        throw new Error("Attachment blob write header does not match ciphertext");
+    const bytes = await decryptBlobChunks({
+        ...context,
+        encrypted,
+        expectedBlobId: input.binding.blobId,
+    });
+    return { bytes, contentKey: context.contentKey };
+}
+export async function decryptDocumentAttachmentBlob(input) {
+    return (await decryptDocumentAttachmentBlobWithKey(input)).bytes;
+}
+function assertStringSetEquals(input) {
+    const actual = uniqueSortedStrings(input.actual);
+    const expected = uniqueSortedStrings(input.expected);
+    if (actual.length !== expected.length ||
+        actual.some((value, index) => value !== expected[index])) {
+        throw new Error(`${input.label} is inconsistent`);
+    }
+}
+async function verifiedBlobKekTargetsForBinding(input) {
+    const { binding, projection } = input;
+    if (!projection) {
+        throw new Error("Attachment binding lacks blob KEK verification material");
+    }
+    const targets = sortBlobTargets(projection.targets.map((target, index) => readBlobKekTarget(target, `Attachment blob KEK target[${index}]`)));
+    const targetHash = await computeBlobContentKeyTargetHash(targets);
+    if (targetHash !== projection.blobKeyTargetHash ||
+        projection.blobId !== binding.blobId) {
+        throw new Error("Attachment blob KEK target hash is inconsistent");
+    }
+    if (input.requireBindingMembership &&
+        (!projection.activeBindingIds.includes(binding.bindingId) ||
+            !targets.some((target) => target.bindingId === binding.bindingId &&
+                target.documentId === attachmentBindingDocumentId(binding)))) {
+        throw new Error("Attachment binding is absent from blob KEK targets");
+    }
+    assertStringSetEquals({
+        actual: projection.linkedContainerManifestHashes,
+        expected: targets.map((target) => target.containerManifestHash),
+        label: "Attachment blob container manifests",
+    });
+    assertStringSetEquals({
+        actual: projection.linkedContainerKeyEpochIds,
+        expected: targets.map((target) => target.containerKeyEpochId),
+        label: "Attachment blob container KEKs",
+    });
+    const accessManifestHash = await computeBlobAccessManifestHash({
+        version: 1,
+        blobId: projection.blobId,
+        organizationId: projection.organizationId,
+        activeBindingIds: projection.activeBindingIds,
+        documentManifestHashes: projection.documentManifestHashes,
+        linkedContainerManifestHashes: projection.linkedContainerManifestHashes,
+        linkedContainerKeyEpochIds: projection.linkedContainerKeyEpochIds,
+        blobKeyTargetHash: projection.blobKeyTargetHash,
+    });
+    if (accessManifestHash !== projection.blobAccessManifestHash) {
+        throw new Error("Attachment blob access manifest hash is inconsistent");
+    }
+    return makeVerifiedBlobKekTargets({ ...projection, targets });
+}
+function attachmentBindingDocumentId(binding) {
+    if (!binding.bindingEvent) {
+        throw new Error("Attachment binding lacks a signed event");
+    }
+    return readRecordString(readCanonicalRecord(binding.bindingEvent.body, "Attachment binding event body"), "documentId", "Attachment binding event body");
+}
+async function assertBlobWriteHeaderVerified(input) {
+    if (!input.authorization || !input.binding.writeHeader) {
+        throw new Error("Attachment blob lacks verified write authority");
+    }
+    const header = readWriteHeader(input.binding.writeHeader, "Attachment blob write header");
+    const writer = await input.resolveProjectionUserKey(header.writerUserId);
+    if (!writer) {
+        throw new Error("Attachment blob writer identity is unavailable");
+    }
+    await verifiedBlobKekTargetsForBinding({
+        binding: input.binding,
+        projection: input.binding.blobKekTargets,
+        requireBindingMembership: true,
+    });
+    const blobKekTargets = await verifiedBlobKekTargetsForBinding({
+        binding: input.binding,
+        projection: input.binding.writeAuthorization,
+        // The signed binding proves which slot exposes the blob now. Writer
+        // authorization describes the older target set committed when the bytes
+        // were written, so a later valid binding need not appear in that set.
+        requireBindingMembership: false,
+    });
+    if (header.metadataHash !== input.encrypted.metadataHash ||
+        header.contentKeyEpoch !== input.encrypted.contentKeyEpoch ||
+        header.contentRecordId !== input.encrypted.contentRecordId ||
+        header.nonceDomainHash !== input.encrypted.nonceDomainHash) {
+        throw new Error("Attachment blob write header does not match ciphertext");
+    }
+    const verified = await verifyWriteHeader({
+        authorizationMembership: "referenced",
+        blobAuthorization: {
+            authorizingContainerPaths: resolveEventContainerPaths({
+                containerPathByManifestHash: input.authorization.containerPathByManifestHash,
+                dependencyManifestHashes: header.dependencyManifestHashes,
+            }).dependencyContainerPaths,
+            blobKekTargets,
+            principalPolicies: input.authorization.principalPolicies,
+        },
+        expectedAccessManifestHash: blobKekTargets.blobAccessManifestHash,
+        expectedObject: {
+            objectKind: "blob",
+            objectId: input.binding.blobId,
+            organizationId: input.organizationId,
+        },
+        expectedTargetHash: blobKekTargets.blobKeyTargetHash,
+        header,
+        writerPublicKey: writer.signingPublicKey,
+    });
+    if (!verified.ok) {
+        throw verified.error;
+    }
+}
+//# sourceMappingURL=decrypt.js.map

package/workflows/blobs/hydration/decrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decrypt.js","sourceRoot":"","sources":["decrypt.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,UAAU,EACV,+BAA+B,EAC/B,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AACtF,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,4BAA4B,EAC5B,eAAe,GAChB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,oCAAoC,EAAE,MAAM,+CAA+C,CAAC;AAKrG,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EAAE,wCAAwC,EAAE,MAAM,2CAA2C,CAAC;AACrG,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,mBAAmB,GACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE,OAAO,EACL,gBAAgB,EAChB,gCAAgC,GACjC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,6EAA6E,CAAC;AAEzH,OAAO,EAAE,+BAA+B,EAAE,MAAM,+CAA+C,CAAC;AAChG,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,KAAK,UAAU,4BAA4B,CAAC,KAK3C;IACC,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;IAC9E,IACE,SAAS,CAAC,MAAM,KAAK,cAAc;QACnC,SAAS,CAAC,eAAe,KAAK,cAAc,EAC5C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IACE,SAAS,CAAC,eAAe,KAAK,gBAAgB,CAAC,eAAe;QAC9D,gBAAgB,CAAC,MAAM,KAAK,cAAc,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,oCAAoC,CAAC,gBAAgB,CAAC,CAAC;IAE7D,MAAM,uBAAuB,GAAG,MAAM,mCAAmC,CAAC;QACxE,OAAO,EAAE,CAAC;QACV,cAAc;QACd,UAAU,EAAE,MAAM;QAClB,QAAQ,EAAE,cAAc;QACxB,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,eAAe,EAAE,+BAA+B;QAChD,eAAe,EAAE,SAAS,CAAC,eAAe;KAC3C,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,eAAe,KAAK,uBAAuB,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,oBAAoB,GAAG,MAAM,uBAAuB,CAAC;QACzD,MAAM,EAAE,cAAc;QACtB,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,eAAe,EAAE,SAAS,CAAC,eAAe;KAC3C,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,YAAY,KAAK,oBAAoB,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AASD,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,EAC5D,OAAO,EACP,SAAS,EACT,kBAAkB,EAClB,cAAc,EACd,OAAO,EACP,wBAAwB,EACxB,eAAe,EACf,YAAY,EACZ,+BAA+B,EAC/B,gBAAgB,GACc;IAK9B,MAAM,gCAAgC,GAAG,gCAAgC,CACvE,wBAAwB,EACxB,kCAAkC,CACnC,CAAC;IACF,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;QACxD,OAAO;QACP,YAAY;QACZ,+BAA+B;QAC/B,wBAAwB,EAAE,gCAAgC;KAC3D,CAAC,CAAC;IACH,IAAI,qBAAwE,CAAC;IAC7E,MAAM,wCAAwC,CAAC,gBAAgB,EAAE;QAC/D,0BAA0B,EAAE,IAAI;QAChC,OAAO;QACP,uBAAuB,EAAE,CAAC,aAAa,EAAE,EAAE;YACzC,qBAAqB,GAAG,aAAa,CAAC;QACxC,CAAC;QACD,GAAG,mBAAmB;KACvB,CAAC,CAAC;IACH,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAClC,4BAA4B,CAAC,gBAAgB,CAAC,CAAC;IACjD,MAAM,4BAA4B,CAAC;QACjC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,SAAS;QACT,cAAc,EAAE,OAAO,CAAC,MAAM;QAC9B,cAAc;KACf,CAAC,CAAC;IACH,MAAM,+BAA+B,CAAC;QACpC,aAAa,EAAE,qBAAqB;QACpC,OAAO;QACP,kBAAkB;QAClB,cAAc;QACd,wBAAwB,EAAE,gCAAgC;KAC3D,CAAC,CAAC;IACH,MAAM,6BAA6B,CAAC;QAClC,aAAa,EAAE,qBAAqB;QACpC,OAAO;QACP,SAAS;QACT,cAAc;QACd,wBAAwB,EAAE,gCAAgC;KAC3D,CAAC,CAAC;IAEH,IAAI,CAAC,qBAAqB;QACxB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,2BAA2B,CAAC;QAC1B,aAAa,EAAE,qBAAqB;QACpC,OAAO;QACP,UAAU;KACX,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC;QAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,UAAU;QACV,SAAS;QACT,OAAO;QACP,iBAAiB,EAAE,OAAO,CAAC,SAAS;QACpC,SAAS,EAAE,eAAe;QAC1B,GAAG,mBAAmB;QACtB,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,MAAM,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC;QACjD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,kBAAkB;QAClB,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,cAAc;QACd,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,oCAAoC,CACjD,KAAyC;IAEzC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,uCAAuC,CAAC;QAC5D,GAAG,KAAK;QACR,SAAS;KACV,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,eAAe,CAC5B,KAAK,CAAC,OAAO,CAAC,WAAW,EACzB,8BAA8B,CAC/B,CAAC;IACF,MAAM,cAAc,GAAG,UAAU,CAC/B,IAAI,UAAU,CACZ,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACxB,SAAS,EACT,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC,CACvC,CACF,CACF,CAAC;IACF,IAAI,MAAM,CAAC,cAAc,KAAK,cAAc;QAC1C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC;QACpC,GAAG,OAAO;QACV,SAAS;QACT,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;KACrC,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAyC;IAEzC,OAAO,CAAC,MAAM,oCAAoC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AACnE,CAAC;AAED,SAAS,qBAAqB,CAAC,KAI9B;IACC,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrD,IACE,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACjC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EACxD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,kBAAkB,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gCAAgC,CAAC,KAI/C;IACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IACtC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,CAC7B,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvC,iBAAiB,CAAC,MAAM,EAAE,8BAA8B,KAAK,GAAG,CAAC,CAClE,CACF,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC;IAClE,IACE,UAAU,KAAK,UAAU,CAAC,iBAAiB;QAC3C,UAAU,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IACE,KAAK,CAAC,wBAAwB;QAC9B,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;YACvD,CAAC,OAAO,CAAC,IAAI,CACX,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;gBACtC,MAAM,CAAC,UAAU,KAAK,2BAA2B,CAAC,OAAO,CAAC,CAC7D,CAAC,EACJ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,qBAAqB,CAAC;QACpB,MAAM,EAAE,UAAU,CAAC,6BAA6B;QAChD,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC;QAC/D,KAAK,EAAE,qCAAqC;KAC7C,CAAC,CAAC;IACH,qBAAqB,CAAC;QACpB,MAAM,EAAE,UAAU,CAAC,0BAA0B;QAC7C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAC7D,KAAK,EAAE,gCAAgC;KACxC,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,MAAM,6BAA6B,CAAC;QAC7D,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;QACzD,6BAA6B,EAAE,UAAU,CAAC,6BAA6B;QACvE,0BAA0B,EAAE,UAAU,CAAC,0BAA0B;QACjE,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;KAChD,CAAC,CAAC;IACH,IAAI,kBAAkB,KAAK,UAAU,CAAC,sBAAsB,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,0BAA0B,CAAC,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,2BAA2B,CAClC,OAAsD;IAEtD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,gBAAgB,CACrB,mBAAmB,CACjB,OAAO,CAAC,YAAY,CAAC,IAAI,EACzB,+BAA+B,CAChC,EACD,YAAY,EACZ,+BAA+B,CAChC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,6BAA6B,CAAC,KAQ5C;IACC,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAC5B,KAAK,CAAC,OAAO,CAAC,WAAW,EACzB,8BAA8B,CAC/B,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,gCAAgC,CAAC;QACrC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;QACxC,wBAAwB,EAAE,IAAI;KAC/B,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,MAAM,gCAAgC,CAAC;QAC5D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,kBAAkB;QAC5C,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,wBAAwB,EAAE,KAAK;KAChC,CAAC,CAAC;IACH,IACE,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,SAAS,CAAC,YAAY;QACpD,MAAM,CAAC,eAAe,KAAK,KAAK,CAAC,SAAS,CAAC,eAAe;QAC1D,MAAM,CAAC,eAAe,KAAK,KAAK,CAAC,SAAS,CAAC,eAAe;QAC1D,MAAM,CAAC,eAAe,KAAK,KAAK,CAAC,SAAS,CAAC,eAAe,EAC1D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC;QACvC,uBAAuB,EAAE,YAAY;QACrC,iBAAiB,EAAE;YACjB,yBAAyB,EAAE,0BAA0B,CAAC;gBACpD,2BAA2B,EACzB,KAAK,CAAC,aAAa,CAAC,2BAA2B;gBACjD,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;aAC1D,CAAC,CAAC,wBAAwB;YAC3B,cAAc;YACd,iBAAiB,EAAE,KAAK,CAAC,aAAa,CAAC,iBAAiB;SACzD;QACD,0BAA0B,EAAE,cAAc,CAAC,sBAAsB;QACjE,cAAc,EAAE;YACd,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;YAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC;QACD,kBAAkB,EAAE,cAAc,CAAC,iBAAiB;QACpD,MAAM;QACN,eAAe,EAAE,MAAM,CAAC,gBAAgB;KACzC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvB,CAAC;AACH,CAAC","sourcesContent":["import {\n  blobContentMetadataHash,\n  bytesToHex,\n  CONTENT_RECORD_ENCRYPTION_SUITE,\n  computeBlobAccessManifestHash,\n  computeBlobContentKeyTargetHash,\n  computeContentRecordNonceDomainHash,\n  makeVerifiedBlobKekTargets,\n  verifyWriteHeader,\n} from \"@tearleads/crypto\";\nimport type { BlobKekTargetsResponse } from \"@tearleads/validators/response\";\nimport type { BlobBytes } from \"../../../data/blobs/blobContracts\";\nimport { deriveBlobContentRecordKey } from \"../../../data/documents/blob/shared/crypto\";\nimport { unwrapBlobContentKey } from \"../../../data/documents/blob/shared/projection\";\nimport {\n  parseBlobEncryptedBytes,\n  readBlobKekTarget,\n  readDocumentManifestIdentity,\n  sortBlobTargets,\n} from \"../../../data/documents/blob/shared/readers\";\nimport { assertBlobContentKeyBundleTargetHash } from \"../../../data/documents/blob/shared/responses\";\nimport type {\n  BlobEncryptedBytesHeader,\n  DecryptDocumentAttachmentBlobInput,\n} from \"../../../data/documents/blob/shared/types\";\nimport { importContentKeyMaterial } from \"../../../data/documents/shared/contentRecordKeys\";\nimport { assertDocumentWriterProjectionConsistent } from \"../../../data/documents/shared/projection\";\nimport {\n  asWebCryptoBytes,\n  readWriteHeader,\n  uniqueSortedStrings,\n} from \"../../../data/documents/shared/readers\";\nimport { projectionVerificationOptions } from \"../../../data/documents/shared/types\";\nimport { readCanonicalRecord } from \"../../../data/keying/canonicalJson\";\nimport type { DocumentWriterProjectionAuthorization } from \"../../../data/keyingProjectionVerification\";\nimport {\n  readRecordString,\n  requireProjectionUserKeyResolver,\n} from \"../../../data/keyingProjectionVerification\";\nimport { resolveEventContainerPaths } from \"../../../data/keyingProjectionVerification/document/documentDependencyPaths\";\n\nimport { assertAttachmentBindingVerified } from \"../verification/attachmentBindingVerification\";\nimport { assertBlobWrapScopeVerified } from \"../verification/verifiedWrapScope\";\nimport { decryptBlobChunks } from \"./blobChunkDecryption\";\n\nasync function assertBlobEncryptionMetadata(input: {\n  readonly contentKeyBundle: DecryptDocumentAttachmentBlobInput[\"binding\"][\"contentKeyBundle\"];\n  readonly encrypted: BlobEncryptedBytesHeader;\n  readonly expectedBlobId: string;\n  readonly organizationId: string;\n}): Promise<void> {\n  const { contentKeyBundle, encrypted, expectedBlobId, organizationId } = input;\n  if (\n    encrypted.blobId !== expectedBlobId ||\n    encrypted.contentRecordId !== expectedBlobId\n  ) {\n    throw new Error(\"Blob encrypted bytes blob id mismatch\");\n  }\n  if (\n    encrypted.contentKeyEpoch !== contentKeyBundle.contentKeyEpoch ||\n    contentKeyBundle.blobId !== expectedBlobId\n  ) {\n    throw new Error(\"Blob encrypted bytes content-key bundle mismatch\");\n  }\n  await assertBlobContentKeyBundleTargetHash(contentKeyBundle);\n\n  const expectedNonceDomainHash = await computeContentRecordNonceDomainHash({\n    version: 1,\n    organizationId,\n    objectKind: \"blob\",\n    objectId: expectedBlobId,\n    contentKeyEpoch: encrypted.contentKeyEpoch,\n    encryptionSuite: CONTENT_RECORD_ENCRYPTION_SUITE,\n    contentRecordId: encrypted.contentRecordId,\n  });\n  if (encrypted.nonceDomainHash !== expectedNonceDomainHash) {\n    throw new Error(\"Blob encrypted bytes nonce domain mismatch\");\n  }\n  const expectedMetadataHash = await blobContentMetadataHash({\n    blobId: expectedBlobId,\n    byteLength: encrypted.byteLength,\n    chunkCount: encrypted.chunkCount,\n    chunkSize: encrypted.chunkSize,\n    contentKeyEpoch: encrypted.contentKeyEpoch,\n  });\n  if (encrypted.metadataHash !== expectedMetadataHash) {\n    throw new Error(\"Blob encrypted bytes metadata hash mismatch\");\n  }\n}\n\nexport type AttachmentBlobDecryptionInput = Omit<\n  DecryptDocumentAttachmentBlobInput,\n  \"encryptedBytes\"\n> & {\n  encrypted: BlobEncryptedBytesHeader;\n};\n\n/** Verifies metadata and authority; the caller must still authenticate ciphertext. */\nexport async function prepareDocumentAttachmentBlobDecryption({\n  binding,\n  encrypted,\n  expectedDocumentId,\n  expectedSlotId,\n  execSql,\n  resolveProjectionUserKey,\n  targetSecretKey,\n  stillCurrent,\n  warmReferencedPrincipalPolicies,\n  writerProjection,\n}: AttachmentBlobDecryptionInput): Promise<{\n  contentKey: Uint8Array;\n  recordKey: CryptoKey;\n  organizationId: string;\n}> {\n  const requiredResolveProjectionUserKey = requireProjectionUserKeyResolver(\n    resolveProjectionUserKey,\n    \"Document attachment blob decrypt\",\n  );\n  const verificationOptions = projectionVerificationOptions({\n    execSql,\n    stillCurrent,\n    warmReferencedPrincipalPolicies,\n    resolveProjectionUserKey: requiredResolveProjectionUserKey,\n  });\n  let documentAuthorization: DocumentWriterProjectionAuthorization | undefined;\n  await assertDocumentWriterProjectionConsistent(writerProjection, {\n    allowStaleContentKeyBundle: true,\n    execSql,\n    onVerifiedAuthorization: (authorization) => {\n      documentAuthorization = authorization;\n    },\n    ...verificationOptions,\n  });\n  const { documentId, organizationId } =\n    readDocumentManifestIdentity(writerProjection);\n  await assertBlobEncryptionMetadata({\n    contentKeyBundle: binding.contentKeyBundle,\n    encrypted,\n    expectedBlobId: binding.blobId,\n    organizationId,\n  });\n  await assertAttachmentBindingVerified({\n    authorization: documentAuthorization,\n    binding,\n    expectedDocumentId,\n    expectedSlotId,\n    resolveProjectionUserKey: requiredResolveProjectionUserKey,\n  });\n  await assertBlobWriteHeaderVerified({\n    authorization: documentAuthorization,\n    binding,\n    encrypted,\n    organizationId,\n    resolveProjectionUserKey: requiredResolveProjectionUserKey,\n  });\n\n  if (!documentAuthorization)\n    throw new Error(\"Blob document authorization is unavailable\");\n  assertBlobWrapScopeVerified({\n    authorization: documentAuthorization,\n    binding,\n    documentId,\n  });\n  const contentKey = await unwrapBlobContentKey({\n    blobId: binding.blobId,\n    contentKeyBundle: binding.contentKeyBundle,\n    documentId,\n    encrypted,\n    execSql,\n    expectedBindingId: binding.bindingId,\n    secretKey: targetSecretKey,\n    ...verificationOptions,\n    writerProjection,\n  });\n  const contentKeyMaterial = await importContentKeyMaterial(contentKey);\n  const recordKey = await deriveBlobContentRecordKey({\n    blobId: binding.blobId,\n    contentKeyEpoch: encrypted.contentKeyEpoch,\n    contentKeyMaterial,\n    contentRecordId: encrypted.contentRecordId,\n    organizationId,\n    usage: \"decrypt\",\n  });\n  return { contentKey, recordKey, organizationId };\n}\n\nasync function decryptDocumentAttachmentBlobWithKey(\n  input: DecryptDocumentAttachmentBlobInput,\n): Promise<{ bytes: BlobBytes; contentKey: Uint8Array }> {\n  const encrypted = parseBlobEncryptedBytes(input.encryptedBytes);\n  const context = await prepareDocumentAttachmentBlobDecryption({\n    ...input,\n    encrypted,\n  });\n  const header = readWriteHeader(\n    input.binding.writeHeader,\n    \"Attachment blob write header\",\n  );\n  const ciphertextHash = bytesToHex(\n    new Uint8Array(\n      await crypto.subtle.digest(\n        \"SHA-256\",\n        asWebCryptoBytes(input.encryptedBytes),\n      ),\n    ),\n  );\n  if (header.ciphertextHash !== ciphertextHash)\n    throw new Error(\"Attachment blob write header does not match ciphertext\");\n  const bytes = await decryptBlobChunks({\n    ...context,\n    encrypted,\n    expectedBlobId: input.binding.blobId,\n  });\n  return { bytes, contentKey: context.contentKey };\n}\n\nexport async function decryptDocumentAttachmentBlob(\n  input: DecryptDocumentAttachmentBlobInput,\n): Promise<BlobBytes> {\n  return (await decryptDocumentAttachmentBlobWithKey(input)).bytes;\n}\n\nfunction assertStringSetEquals(input: {\n  readonly actual: readonly string[];\n  readonly expected: readonly string[];\n  readonly label: string;\n}): void {\n  const actual = uniqueSortedStrings(input.actual);\n  const expected = uniqueSortedStrings(input.expected);\n  if (\n    actual.length !== expected.length ||\n    actual.some((value, index) => value !== expected[index])\n  ) {\n    throw new Error(`${input.label} is inconsistent`);\n  }\n}\n\nasync function verifiedBlobKekTargetsForBinding(input: {\n  readonly binding: DecryptDocumentAttachmentBlobInput[\"binding\"];\n  readonly requireBindingMembership: boolean;\n  readonly projection: BlobKekTargetsResponse | undefined;\n}) {\n  const { binding, projection } = input;\n  if (!projection) {\n    throw new Error(\"Attachment binding lacks blob KEK verification material\");\n  }\n  const targets = sortBlobTargets(\n    projection.targets.map((target, index) =>\n      readBlobKekTarget(target, `Attachment blob KEK target[${index}]`),\n    ),\n  );\n  const targetHash = await computeBlobContentKeyTargetHash(targets);\n  if (\n    targetHash !== projection.blobKeyTargetHash ||\n    projection.blobId !== binding.blobId\n  ) {\n    throw new Error(\"Attachment blob KEK target hash is inconsistent\");\n  }\n  if (\n    input.requireBindingMembership &&\n    (!projection.activeBindingIds.includes(binding.bindingId) ||\n      !targets.some(\n        (target) =>\n          target.bindingId === binding.bindingId &&\n          target.documentId === attachmentBindingDocumentId(binding),\n      ))\n  ) {\n    throw new Error(\"Attachment binding is absent from blob KEK targets\");\n  }\n  assertStringSetEquals({\n    actual: projection.linkedContainerManifestHashes,\n    expected: targets.map((target) => target.containerManifestHash),\n    label: \"Attachment blob container manifests\",\n  });\n  assertStringSetEquals({\n    actual: projection.linkedContainerKeyEpochIds,\n    expected: targets.map((target) => target.containerKeyEpochId),\n    label: \"Attachment blob container KEKs\",\n  });\n  const accessManifestHash = await computeBlobAccessManifestHash({\n    version: 1,\n    blobId: projection.blobId,\n    organizationId: projection.organizationId,\n    activeBindingIds: projection.activeBindingIds,\n    documentManifestHashes: projection.documentManifestHashes,\n    linkedContainerManifestHashes: projection.linkedContainerManifestHashes,\n    linkedContainerKeyEpochIds: projection.linkedContainerKeyEpochIds,\n    blobKeyTargetHash: projection.blobKeyTargetHash,\n  });\n  if (accessManifestHash !== projection.blobAccessManifestHash) {\n    throw new Error(\"Attachment blob access manifest hash is inconsistent\");\n  }\n  return makeVerifiedBlobKekTargets({ ...projection, targets });\n}\n\nfunction attachmentBindingDocumentId(\n  binding: DecryptDocumentAttachmentBlobInput[\"binding\"],\n): string {\n  if (!binding.bindingEvent) {\n    throw new Error(\"Attachment binding lacks a signed event\");\n  }\n  return readRecordString(\n    readCanonicalRecord(\n      binding.bindingEvent.body,\n      \"Attachment binding event body\",\n    ),\n    \"documentId\",\n    \"Attachment binding event body\",\n  );\n}\n\nasync function assertBlobWriteHeaderVerified(input: {\n  readonly authorization: DocumentWriterProjectionAuthorization | undefined;\n  readonly binding: DecryptDocumentAttachmentBlobInput[\"binding\"];\n  readonly encrypted: BlobEncryptedBytesHeader;\n  readonly organizationId: string;\n  readonly resolveProjectionUserKey: ReturnType<\n    typeof requireProjectionUserKeyResolver\n  >;\n}): Promise<void> {\n  if (!input.authorization || !input.binding.writeHeader) {\n    throw new Error(\"Attachment blob lacks verified write authority\");\n  }\n  const header = readWriteHeader(\n    input.binding.writeHeader,\n    \"Attachment blob write header\",\n  );\n  const writer = await input.resolveProjectionUserKey(header.writerUserId);\n  if (!writer) {\n    throw new Error(\"Attachment blob writer identity is unavailable\");\n  }\n  await verifiedBlobKekTargetsForBinding({\n    binding: input.binding,\n    projection: input.binding.blobKekTargets,\n    requireBindingMembership: true,\n  });\n  const blobKekTargets = await verifiedBlobKekTargetsForBinding({\n    binding: input.binding,\n    projection: input.binding.writeAuthorization,\n    // The signed binding proves which slot exposes the blob now. Writer\n    // authorization describes the older target set committed when the bytes\n    // were written, so a later valid binding need not appear in that set.\n    requireBindingMembership: false,\n  });\n  if (\n    header.metadataHash !== input.encrypted.metadataHash ||\n    header.contentKeyEpoch !== input.encrypted.contentKeyEpoch ||\n    header.contentRecordId !== input.encrypted.contentRecordId ||\n    header.nonceDomainHash !== input.encrypted.nonceDomainHash\n  ) {\n    throw new Error(\"Attachment blob write header does not match ciphertext\");\n  }\n  const verified = await verifyWriteHeader({\n    authorizationMembership: \"referenced\",\n    blobAuthorization: {\n      authorizingContainerPaths: resolveEventContainerPaths({\n        containerPathByManifestHash:\n          input.authorization.containerPathByManifestHash,\n        dependencyManifestHashes: header.dependencyManifestHashes,\n      }).dependencyContainerPaths,\n      blobKekTargets,\n      principalPolicies: input.authorization.principalPolicies,\n    },\n    expectedAccessManifestHash: blobKekTargets.blobAccessManifestHash,\n    expectedObject: {\n      objectKind: \"blob\",\n      objectId: input.binding.blobId,\n      organizationId: input.organizationId,\n    },\n    expectedTargetHash: blobKekTargets.blobKeyTargetHash,\n    header,\n    writerPublicKey: writer.signingPublicKey,\n  });\n  if (!verified.ok) {\n    throw verified.error;\n  }\n}\n"]}

package/workflows/blobs/hydration/hydrate.d.ts

@@ -0,0 +1,56 @@
+import type { BlobBytesResponse, RequestResultOptions } from "../../../internal/api-client/index.js";
+import type { BlobAttachmentSummary, DocumentWriterProjectionResponse, ListDocumentAttachmentsResponse } from "../../../internal/validators/response/index.js";
+import type { BlobBytes } from "../../../data/blobs/blobContracts.js";
+import type { DocumentAttachment } from "../../../data/documents/documentContent.js";
+import type { ProjectionUserKeyResolver, ReferencedPrincipalPolicyWarmer } from "../../../data/keyingProjectionVerification/index.js";
+import type { SecurityIncidentReporter } from "../../../data/shared/securityIncidents.js";
+import type { ExecSql } from "../../../data/sqlite/sqlSchema.js";
+interface DocumentAttachmentHydrationApi {
+    evictDocumentWriterProjection?(documentId: string): void;
+    getBlobBytes(blobId: string, options?: RequestResultOptions): Promise<BlobBytesResponse | null>;
+    getDocumentWriterProjection(documentId: string): Promise<DocumentWriterProjectionResponse | null>;
+    listDocumentAttachments(documentId: string): Promise<ListDocumentAttachmentsResponse | null>;
+}
+interface HydratedDocumentAttachmentBlob {
+    attachment: DocumentAttachment;
+    binding: BlobAttachmentSummary;
+    bytes: BlobBytes;
+    /** Plaintext digest of `bytes`. */
+    contentSha256: string;
+    /**
+     * The served binding is validly signed but its plaintext digest differs
+     * from the digest the document content records for the slot. Set only when
+     * the slot held no local bytes: the bind and the content update carrying
+     * its digest are two server writes, and an uploader lost between them must
+     * not leave the attachment permanently invisible. Never a security incident;
+     * an honest crash window is indistinguishable from a served rollback.
+     */
+    intentMismatch: boolean;
+    storageKey: string;
+}
+interface DocumentAttachmentHydrationContext {
+    apiClient: DocumentAttachmentHydrationApi;
+    documentId: string;
+    execSql: ExecSql;
+    localBlobIdBySlotId?: Readonly<Record<string, string | null | undefined>> | undefined;
+    localStorageKeyBySlotId?: Readonly<Record<string, string | undefined>>;
+    log?: ((message: string) => void) | undefined;
+    logPrefix?: string | undefined;
+    /**
+     * Served bindings already downloaded and refused for a held copy, keyed per
+     * (slot, binding, intent). Populated here; a later pass skips the download
+     * until the binding or the document intent changes.
+     */
+    rejectedServedBindings?: Set<string> | undefined;
+    resolveProjectionUserKey: ProjectionUserKeyResolver;
+    reportSecurityIncident?: SecurityIncidentReporter | undefined;
+    targetSecretKey: Uint8Array;
+    stillCurrent?: (() => boolean) | undefined;
+    warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;
+}
+export declare function hydrateDocumentAttachmentBlobs(input: DocumentAttachmentHydrationContext & {
+    attachments: ReadonlyArray<DocumentAttachment>;
+    /** No binding target remains unchecked or unavailable in this pass. */
+    onBindingsChecked?: () => void;
+}): Promise<HydratedDocumentAttachmentBlob[] | null>;
+export {};