@tearleads/client-sdk 0.1.62 → 0.1.64

package/workflows/container-contents/remoteHydration/destination/replacementBinding.js

@@ -0,0 +1,75 @@
+import { KeyingVerificationError, verifyOrganizationReplacementAuthorization, } from "../../../../internal/crypto/index.js";
+import { assertHeldContainerBinding, } from "../../../../data/containers/containerBinding.js";
+import { ProjectionDependencyUnavailableError } from "../../../../data/keyingProjectionVerification/dependencyUnavailable.js";
+import { loadOrganizationFounder } from "../../../../data/persistence/organizationFounderPersistence.js";
+import { persistOrganizationReplacementCheckpoints } from "../../../../data/persistence/organizationReplacementCheckpointPersistence.js";
+async function acceptsSharedReplacement(input, oldOrganizationId) {
+    const { listed, role, runtime } = input;
+    const founder = await loadOrganizationFounder(runtime.infra.execSql, oldOrganizationId);
+    if (!founder || role.createSignerUserId !== founder.userId)
+        return false;
+    const identity = await runtime.resolveTrustedUserIdentity(founder.userId);
+    if (!identity)
+        throw new ProjectionDependencyUnavailableError("Replacement founder identity is unavailable");
+    if (identity.signingKeyFingerprint !== founder.signingKeyFingerprint)
+        throw new KeyingVerificationError("signer_mismatch", "Replacement founder differs from the held organization's pinned identity");
+    const response = await runtime.apiClient.getContainerReplacementAuthorizationsResult(listed.id, oldOrganizationId);
+    if (!response.ok) {
+        if (response.status === 404)
+            return false;
+        throw new ProjectionDependencyUnavailableError(response.message);
+    }
+    const last = verifyReplacementLineage(response.data.authorizations, oldOrganizationId, founder.userId, identity.signingPublicKey);
+    const replacementFounder = await loadOrganizationFounder(runtime.infra.execSql, listed.organizationId);
+    if (last?.organizationId !== listed.organizationId ||
+        replacementFounder?.userId !== founder.userId ||
+        replacementFounder.signingKeyFingerprint !==
+            founder.signingKeyFingerprint ||
+        replacementFounder.genesisStateHash !== last.organizationStateHash ||
+        role.rootContainerId !== last.rootContainerId ||
+        role.rootCreateManifestHash !== last.rootManifestHash ||
+        role.rootMetadataDocumentId !== last.rootMetadataDocumentId)
+        throw new KeyingVerificationError("object_mismatch", "Replacement authorization does not bind the destination genesis");
+    // The founder also commits the reserved groups' genesis. Pin those even
+    // when the readable folder's projection does not cite both groups yet.
+    await persistOrganizationReplacementCheckpoints({
+        authorization: last,
+        execSql: runtime.infra.execSql,
+        stillCurrent: input.stillCurrent,
+    });
+    return true;
+}
+function verifyReplacementLineage(authorizations, oldOrganizationId, userId, signingPublicKey) {
+    let expected = oldOrganizationId;
+    const visited = new Set([expected]);
+    let last;
+    for (const candidate of authorizations) {
+        const proof = verifyOrganizationReplacementAuthorization(candidate, signingPublicKey);
+        if (proof.replacesOrganizationId !== expected ||
+            proof.userId !== userId ||
+            visited.has(proof.organizationId))
+            throw new KeyingVerificationError("object_mismatch", "Replacement authorization lineage does not extend the held organization");
+        expected = proof.organizationId;
+        visited.add(expected);
+        last = proof;
+    }
+    return last;
+}
+/** A foreign creator needs the held organization's pinned founder to authorize rehome. */
+export async function assertPermittedDestinationBinding(input) {
+    const { heldBinding: held, listed, role, runtime } = input;
+    if (role.createSignerUserId === runtime.auth.userId)
+        return;
+    if (held?.metadataDocumentId === null)
+        throw new KeyingVerificationError("signer_mismatch", "a local folder can bind only to its own signed create");
+    if (held?.organizationId &&
+        held.organizationId !== listed.organizationId &&
+        role.systemSlot === null &&
+        (await acceptsSharedReplacement(input, held.organizationId)))
+        return;
+    assertHeldContainerBinding(held, {
+        organizationId: listed.organizationId,
+        metadataDocumentIds: [role.metadataDocumentId],
+    });
+}
+//# sourceMappingURL=replacementBinding.js.map

package/workflows/container-contents/remoteHydration/destination/replacementBinding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replacementBinding.js","sourceRoot":"","sources":["replacementBinding.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,0CAA0C,GAC3C,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,0BAA0B,GAE3B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,oCAAoC,EAAE,MAAM,qEAAqE,CAAC;AAC3H,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AACtG,OAAO,EAAE,yCAAyC,EAAE,MAAM,2EAA2E,CAAC;AAYtI,KAAK,UAAU,wBAAwB,CACrC,KAAmB,EACnB,iBAAyB;IAEzB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAC3C,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,kBAAkB,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ;QACX,MAAM,IAAI,oCAAoC,CAC5C,6CAA6C,CAC9C,CAAC;IACJ,IAAI,QAAQ,CAAC,qBAAqB,KAAK,OAAO,CAAC,qBAAqB;QAClE,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,0EAA0E,CAC3E,CAAC;IACJ,MAAM,QAAQ,GACZ,MAAM,OAAO,CAAC,SAAS,CAAC,2CAA2C,CACjE,MAAM,CAAC,EAAE,EACT,iBAAiB,CAClB,CAAC;IACJ,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,IAAI,oCAAoC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,wBAAwB,CACnC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAC5B,iBAAiB,EACjB,OAAO,CAAC,MAAM,EACd,QAAQ,CAAC,gBAAgB,CAC1B,CAAC;IACF,MAAM,kBAAkB,GAAG,MAAM,uBAAuB,CACtD,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,MAAM,CAAC,cAAc,CACtB,CAAC;IACF,IACE,IAAI,EAAE,cAAc,KAAK,MAAM,CAAC,cAAc;QAC9C,kBAAkB,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM;QAC7C,kBAAkB,CAAC,qBAAqB;YACtC,OAAO,CAAC,qBAAqB;QAC/B,kBAAkB,CAAC,gBAAgB,KAAK,IAAI,CAAC,qBAAqB;QAClE,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe;QAC7C,IAAI,CAAC,sBAAsB,KAAK,IAAI,CAAC,gBAAgB;QACrD,IAAI,CAAC,sBAAsB,KAAK,IAAI,CAAC,sBAAsB;QAE3D,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,iEAAiE,CAClE,CAAC;IACJ,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,yCAAyC,CAAC;QAC9C,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAC/B,cAAkC,EAClC,iBAAyB,EACzB,MAAc,EACd,gBAA4B;IAE5B,IAAI,QAAQ,GAAG,iBAAiB,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpC,IAAI,IAES,CAAC;IACd,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,0CAA0C,CACtD,SAAS,EACT,gBAAgB,CACjB,CAAC;QACF,IACE,KAAK,CAAC,sBAAsB,KAAK,QAAQ;YACzC,KAAK,CAAC,MAAM,KAAK,MAAM;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;YAEjC,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,yEAAyE,CAC1E,CAAC;QACJ,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,KAAmB;IAEnB,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC3D,IAAI,IAAI,CAAC,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO;IAC5D,IAAI,IAAI,EAAE,kBAAkB,KAAK,IAAI;QACnC,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,uDAAuD,CACxD,CAAC;IACJ,IACE,IAAI,EAAE,cAAc;QACpB,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;QAC7C,IAAI,CAAC,UAAU,KAAK,IAAI;QACxB,CAAC,MAAM,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAE5D,OAAO;IACT,0BAA0B,CAAC,IAAI,EAAE;QAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,mBAAmB,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC;KAC/C,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  verifyOrganizationReplacementAuthorization,\n} from \"@tearleads/crypto\";\nimport {\n  assertHeldContainerBinding,\n  type HeldContainerBinding,\n} from \"../../../../data/containers/containerBinding\";\nimport { ProjectionDependencyUnavailableError } from \"../../../../data/keyingProjectionVerification/dependencyUnavailable\";\nimport { loadOrganizationFounder } from \"../../../../data/persistence/organizationFounderPersistence\";\nimport { persistOrganizationReplacementCheckpoints } from \"../../../../data/persistence/organizationReplacementCheckpointPersistence\";\nimport type { RemoteContainer, RemoteContainerHydrationState } from \"../types\";\nimport type { DestinationRole } from \"./destinationRoleCache\";\n\nexport interface BindingInput {\n  readonly stillCurrent?: (() => boolean) | undefined;\n  readonly heldBinding: HeldContainerBinding | null;\n  readonly listed: Pick<RemoteContainer, \"id\" | \"organizationId\">;\n  readonly role: DestinationRole;\n  readonly runtime: RemoteContainerHydrationState[\"runtime\"];\n}\n\nasync function acceptsSharedReplacement(\n  input: BindingInput,\n  oldOrganizationId: string,\n): Promise<boolean> {\n  const { listed, role, runtime } = input;\n  const founder = await loadOrganizationFounder(\n    runtime.infra.execSql,\n    oldOrganizationId,\n  );\n  if (!founder || role.createSignerUserId !== founder.userId) return false;\n  const identity = await runtime.resolveTrustedUserIdentity(founder.userId);\n  if (!identity)\n    throw new ProjectionDependencyUnavailableError(\n      \"Replacement founder identity is unavailable\",\n    );\n  if (identity.signingKeyFingerprint !== founder.signingKeyFingerprint)\n    throw new KeyingVerificationError(\n      \"signer_mismatch\",\n      \"Replacement founder differs from the held organization's pinned identity\",\n    );\n  const response =\n    await runtime.apiClient.getContainerReplacementAuthorizationsResult(\n      listed.id,\n      oldOrganizationId,\n    );\n  if (!response.ok) {\n    if (response.status === 404) return false;\n    throw new ProjectionDependencyUnavailableError(response.message);\n  }\n  const last = verifyReplacementLineage(\n    response.data.authorizations,\n    oldOrganizationId,\n    founder.userId,\n    identity.signingPublicKey,\n  );\n  const replacementFounder = await loadOrganizationFounder(\n    runtime.infra.execSql,\n    listed.organizationId,\n  );\n  if (\n    last?.organizationId !== listed.organizationId ||\n    replacementFounder?.userId !== founder.userId ||\n    replacementFounder.signingKeyFingerprint !==\n      founder.signingKeyFingerprint ||\n    replacementFounder.genesisStateHash !== last.organizationStateHash ||\n    role.rootContainerId !== last.rootContainerId ||\n    role.rootCreateManifestHash !== last.rootManifestHash ||\n    role.rootMetadataDocumentId !== last.rootMetadataDocumentId\n  )\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Replacement authorization does not bind the destination genesis\",\n    );\n  // The founder also commits the reserved groups' genesis. Pin those even\n  // when the readable folder's projection does not cite both groups yet.\n  await persistOrganizationReplacementCheckpoints({\n    authorization: last,\n    execSql: runtime.infra.execSql,\n    stillCurrent: input.stillCurrent,\n  });\n  return true;\n}\n\nfunction verifyReplacementLineage(\n  authorizations: readonly unknown[],\n  oldOrganizationId: string,\n  userId: string,\n  signingPublicKey: Uint8Array,\n) {\n  let expected = oldOrganizationId;\n  const visited = new Set([expected]);\n  let last:\n    | ReturnType<typeof verifyOrganizationReplacementAuthorization>\n    | undefined;\n  for (const candidate of authorizations) {\n    const proof = verifyOrganizationReplacementAuthorization(\n      candidate,\n      signingPublicKey,\n    );\n    if (\n      proof.replacesOrganizationId !== expected ||\n      proof.userId !== userId ||\n      visited.has(proof.organizationId)\n    )\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"Replacement authorization lineage does not extend the held organization\",\n      );\n    expected = proof.organizationId;\n    visited.add(expected);\n    last = proof;\n  }\n  return last;\n}\n\n/** A foreign creator needs the held organization's pinned founder to authorize rehome. */\nexport async function assertPermittedDestinationBinding(\n  input: BindingInput,\n): Promise<void> {\n  const { heldBinding: held, listed, role, runtime } = input;\n  if (role.createSignerUserId === runtime.auth.userId) return;\n  if (held?.metadataDocumentId === null)\n    throw new KeyingVerificationError(\n      \"signer_mismatch\",\n      \"a local folder can bind only to its own signed create\",\n    );\n  if (\n    held?.organizationId &&\n    held.organizationId !== listed.organizationId &&\n    role.systemSlot === null &&\n    (await acceptsSharedReplacement(input, held.organizationId))\n  )\n    return;\n  assertHeldContainerBinding(held, {\n    organizationId: listed.organizationId,\n    metadataDocumentIds: [role.metadataDocumentId],\n  });\n}\n"]}

package/workflows/container-contents/remoteHydration/destination/verifiedDestination.js

@@ -0,0 +1,296 @@
+import { KeyingVerificationError, } from "../../../../internal/crypto/index.js";
+import { deriveOrganizationMetadataContainerSystemSlot } from "../../../../internal/validators/containerSystemSlot.js";
+import { listingRepeatsHeldOrdinaryBinding, } from "../../../../data/containers/containerBinding.js";
+import { verifiedContainerCreateManifest } from "../../../../data/keyingProjectionVerification/container/containerCreateManifest.js";
+import { verifyContainerDestinationProjection } from "../../../../data/keyingProjectionVerification/container/containerDestinationVerification.js";
+import { verifyContainerWriterProjection } from "../../../../data/keyingProjectionVerification/container/containerProjectionVerification.js";
+import { isKeyingVerificationError, reportKeyingVerificationErrorInCauseChain, runWithSecurityIncidentReporting, } from "../../../../data/keyingProjectionVerification/error.js";
+import { verifyRuntimeGroupMetadataAuthority } from "../../../organizations/groupMetadata/runtimeGroupMetadataAuthority.js";
+import { createRuntimePrincipalPolicyWarmer } from "../../../principals/runtimePolicyWarmer.js";
+import { cachedDestinationRole, rememberDestinationRole, } from "./destinationRoleCache.js";
+import { resolveWithMetadataRootReload } from "./destinationRootReload.js";
+import { assertPermittedDestinationBinding } from "./replacementBinding.js";
+async function destinationRoleFromPath(input) {
+    const { listed, path } = input;
+    const head = path.at(-1);
+    if (!head ||
+        head.state.containerId !== listed.id ||
+        head.state.organizationId !== listed.organizationId) {
+        throw new KeyingVerificationError("object_mismatch", "container destination manifest has the wrong identity");
+    }
+    const metadataSlot = await deriveOrganizationMetadataContainerSystemSlot({
+        organizationId: listed.organizationId,
+    });
+    if (head.state.systemSlot !== null &&
+        path.length !== (head.state.systemSlot === metadataSlot ? 1 : 2)) {
+        throw new KeyingVerificationError("invalid_shape", "system destination has the wrong signed topology");
+    }
+    // The head may be a later grant signed by any admin; only the epoch-1
+    // create names the creator, and roots are always created by the org owner.
+    const created = verifiedContainerCreateManifest({
+        head,
+        label: "Container destination",
+        verifiedByHash: input.verifiedByHash,
+    });
+    const root = path[0];
+    if (!root)
+        throw new Error("Destination root is unavailable");
+    const rootCreated = verifiedContainerCreateManifest({
+        head: root,
+        label: "Destination root",
+        verifiedByHash: input.verifiedByHash,
+    });
+    return {
+        parentId: head.state.parentContainerId,
+        role: {
+            createSignerUserId: created.event.event.signerUserId,
+            rootContainerId: rootCreated.state.containerId,
+            rootCreateManifestHash: rootCreated.manifestHash,
+            rootMetadataDocumentId: rootCreated.state.metadataDocumentId,
+            metadataDocumentId: head.state.metadataDocumentId,
+            ...(head.state.parentContainerId === null ||
+                head.state.systemSlot !== null
+                ? { parentId: head.state.parentContainerId }
+                : {}),
+            systemSlot: head.state.systemSlot,
+        },
+    };
+}
+/**
+ * The session's root id arrives in an unsigned login response, so the root it
+ * names must prove it belongs to this user: every acknowledged organization was
+ * created by the session user, whose device signed the root's `container.create`.
+ * A verified root created by anyone else is a substitution, never the merge
+ * target for pre-login local content, whatever grants it carries. The check
+ * runs on cache reuse too, since the cache is not scoped to the session user.
+ */
+function assertRootCreatedBySessionUser(role, runtime) {
+    if (role.systemSlot !== null) {
+        throw new KeyingVerificationError("object_mismatch", "acknowledged session root cannot be a system container");
+    }
+    if (role.createSignerUserId !== runtime.auth.userId) {
+        throw new KeyingVerificationError("signer_mismatch", "acknowledged session root was not created by the session user");
+    }
+}
+function assertAcknowledgedRootSigner(input) {
+    const { listed, role, runtime } = input;
+    if (role.parentId !== null || listed.id !== runtime.auth.rootContainerId) {
+        return;
+    }
+    assertRootCreatedBySessionUser(role, runtime);
+}
+/**
+ * Authenticate destination roles before admitting a binding or advancing any
+ * placement pin. Shared rehomes additionally require signed replacement evidence.
+ */
+async function verifyDestinationRole(input) {
+    const { isCurrent, listed, runtime } = input;
+    const projection = input.prefetched
+        ? input.prefetched.projection
+        : await runtime.apiClient.getContainerWriterProjection(listed.id);
+    if (!projection || isCurrent?.() === false)
+        return null;
+    if (projection.containerId !== listed.id ||
+        projection.organizationId !== listed.organizationId) {
+        throw new KeyingVerificationError("object_mismatch", "container destination projection has the wrong identity");
+    }
+    const verificationInput = {
+        execSql: runtime.infra.execSql,
+        projection,
+        resolveUserKey: runtime.resolveTrustedUserIdentity,
+        stillCurrent: isCurrent,
+        warmReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(runtime),
+    };
+    const { path, verifiedByHash } = await verifyContainerDestinationProjection(verificationInput);
+    if (isCurrent?.() === false)
+        return null;
+    const destination = await destinationRoleFromPath({
+        listed,
+        path,
+        verifiedByHash,
+    });
+    const { role } = destination;
+    // Refuse a rebinding before group checks or placement pins run for it.
+    await assertPermittedDestinationBinding({
+        stillCurrent: isCurrent,
+        heldBinding: input.heldBinding,
+        listed,
+        role,
+        runtime,
+    });
+    if (isCurrent?.() === false)
+        return null;
+    if (role.parentId === null && role.systemSlot !== null) {
+        const head = path.at(-1);
+        if (!head)
+            throw new Error("Metadata root manifest is unavailable");
+        await verifyRuntimeGroupMetadataAuthority({
+            runtime,
+            organizationId: listed.organizationId,
+            organizationReference: projection.policyEvidence.organization?.head,
+            state: head.state,
+            stillCurrent: isCurrent ?? (() => true),
+        });
+    }
+    if (isCurrent?.() === false)
+        return null;
+    if (input.verifyCurrentPlacement) {
+        // Check the immutable role before allowing current placement to advance pins.
+        assertAcknowledgedRootSigner({ listed, role, runtime });
+        const currentPath = await verifyContainerWriterProjection({
+            ...verificationInput,
+            stillCurrent: isCurrent,
+        });
+        const currentHead = currentPath.at(-1);
+        if (!currentHead)
+            throw new Error("Recovery placement manifest is unavailable");
+        input.onVerifiedCheckpoint?.(currentHead.checkpoint);
+    }
+    if (isCurrent?.() === false)
+        return null;
+    return destination;
+}
+/** A cached immutable role, or a freshly verified one with its signed parent. */
+async function resolveDestinationRole(input) {
+    const { remoteContainer: listed, isCurrent } = input;
+    const runtime = input.state.runtime;
+    const cached = input.refresh
+        ? undefined
+        : cachedDestinationRole(runtime.infra.execSql, listed);
+    // Ordinary parent edges are not immutable. A refresh authenticates current
+    // placement; a forged root hint must also be corrected from a signed path.
+    if (cached && !(cached.parentId === undefined && listed.parentId === null)) {
+        return { freshlyVerified: false, parentId: cached.parentId, role: cached };
+    }
+    const verified = await verifyDestinationRole({
+        heldBinding: input.heldBinding,
+        prefetched: input.refresh ? undefined : input.prefetchedProjection,
+        isCurrent,
+        listed,
+        runtime,
+        verifyCurrentPlacement: input.refresh === true,
+        onVerifiedCheckpoint: input.onVerifiedCheckpoint,
+    });
+    if (!verified)
+        return null;
+    return {
+        freshlyVerified: true,
+        parentId: input.refresh || listed.parentId === null
+            ? verified.parentId
+            : verified.role.parentId,
+        role: verified.role,
+    };
+}
+/**
+ * Listing hints never establish a metadata target or a system/root role, and a
+ * held folder keeps its organization and metadata target unless its own user
+ * re-created it or its pinned founder authorized a verified replacement.
+ * A conflicting proof is refused before placement pins
+ * advance or its role is cached.
+ */
+export async function verifyRemoteContainerDestination(input) {
+    const { remoteContainer: listed, state, isCurrent } = input;
+    const runtime = state.runtime;
+    return runWithSecurityIncidentReporting(runtime.util.reportSecurityIncident, {
+        objectId: listed.id,
+        objectKind: "container",
+        operation: "container.destination.verify",
+        organizationId: listed.organizationId,
+    }, async () => {
+        if (input.supersededListing) {
+            throw new KeyingVerificationError("object_mismatch", "container was re-homed away from the listed organization");
+        }
+        // A held ordinary binding was verified (or signed by this device) when
+        // it was stored; a listing that repeats it needs no second proof.
+        if (!input.refresh &&
+            listingRepeatsHeldOrdinaryBinding(input.heldBinding, listed)) {
+            return { ...listed, systemSlot: null };
+        }
+        if (input.refresh)
+            runtime.apiClient.evictContainerWriterProjection(listed.id);
+        // A metadata root read before a reserved-group commit is reloaded once.
+        const resolved = await resolveWithMetadataRootReload(input, resolveDestinationRole, () => runtime.apiClient.evictContainerWriterProjection(listed.id)).catch((error) => {
+            // Never re-serve a cached projection that failed verification.
+            if (isKeyingVerificationError(error))
+                runtime.apiClient.evictContainerWriterProjection(listed.id);
+            throw error;
+        });
+        if (!resolved || isCurrent?.() === false)
+            return null;
+        const { role, parentId } = resolved;
+        // Fresh verification checked this binding before any placement pins.
+        // A cached role still needs the held binding and replacement proof checked.
+        if (!resolved.freshlyVerified)
+            await assertPermittedDestinationBinding({
+                stillCurrent: isCurrent,
+                heldBinding: input.heldBinding,
+                listed,
+                role,
+                runtime,
+            });
+        if (isCurrent?.() === false)
+            return null;
+        if (resolved.freshlyVerified)
+            rememberDestinationRole(runtime.infra.execSql, listed, role);
+        assertAcknowledgedRootSigner({ listed, role, runtime });
+        return {
+            ...listed,
+            metadataDocumentId: role.metadataDocumentId,
+            parentId: parentId === undefined ? listed.parentId : parentId,
+            systemSlot: role.systemSlot,
+        };
+    });
+}
+/** The root the unsigned login answer named, in the expected organization. */
+export function isSessionRootState(remoteRootState, state) {
+    const { container } = remoteRootState;
+    const { auth } = state.runtime;
+    return (container.parentId === null &&
+        !container.systemSlot &&
+        container.id === auth.rootContainerId &&
+        container.organizationId === auth.organizationId);
+}
+/**
+ * Whether the session root may absorb the pre-login local roots. The unsigned
+ * login answer only names the root; the merge target must also be the verified
+ * root whose epoch-1 `container.create` the session user signed. A row persisted
+ * earlier as an ordinary shared container (another user's root this device once
+ * hydrated) never passed that check for this session, so the creator is checked
+ * here, at the reconciliation boundary itself, before any local content is
+ * re-parented. The role comes only from the cache remote hydration fills when
+ * it verifies the destination: this gate never fetches, so a local refresh stays
+ * independent of the network. Without a cached role the merge is left pending
+ * (no incident) until hydration verifies the root and reconciles from the
+ * cache. A different creator is a `signer_mismatch` incident and never a merge;
+ * the refusal is the "no merge" outcome, so the refresh that carried it
+ * completes with the local content left in place.
+ */
+export async function isVerifiedLocalRootReconciliationTarget(input) {
+    const { remoteRootState, state } = input;
+    const { container } = remoteRootState;
+    const runtime = state.runtime;
+    if (!isSessionRootState(remoteRootState, state))
+        return false;
+    const role = cachedDestinationRole(runtime.infra.execSql, container);
+    if (!role)
+        return false;
+    try {
+        if (role.parentId !== null) {
+            throw new KeyingVerificationError("object_mismatch", "session root reconciliation target is not a verified root");
+        }
+        assertRootCreatedBySessionUser(role, runtime);
+        return true;
+    }
+    catch (error) {
+        const reported = await reportKeyingVerificationErrorInCauseChain(error, runtime.util.reportSecurityIncident, {
+            objectId: container.id,
+            objectKind: "container",
+            operation: "container.root.reconcile",
+            organizationId: container.organizationId,
+        });
+        if (!reported)
+            throw error;
+        return false;
+    }
+}
+//# sourceMappingURL=verifiedDestination.js.map

package/workflows/container-contents/remoteHydration/destination/verifiedDestination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedDestination.js","sourceRoot":"","sources":["verifiedDestination.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,6CAA6C,EAAE,MAAM,2CAA2C,CAAC;AAC1G,OAAO,EAEL,iCAAiC,GAClC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,+BAA+B,EAAE,MAAM,iFAAiF,CAAC;AAClI,OAAO,EAAE,oCAAoC,EAAE,MAAM,0FAA0F,CAAC;AAChJ,OAAO,EAAE,+BAA+B,EAAE,MAAM,yFAAyF,CAAC;AAC1I,OAAO,EACL,yBAAyB,EACzB,yCAAyC,EACzC,gCAAgC,GACjC,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,mCAAmC,EAAE,MAAM,oEAAoE,CAAC;AACzH,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAO7F,OAAO,EACL,qBAAqB,EAErB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAKzE,KAAK,UAAU,uBAAuB,CAAC,KAItC;IACC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,IACE,CAAC,IAAI;QACL,IAAI,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,EAAE;QACpC,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EACnD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,6CAA6C,CAAC;QACvE,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC,CAAC;IACH,IACE,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI;QAC9B,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAChE,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,sEAAsE;IACtE,2EAA2E;IAC3E,MAAM,OAAO,GAAG,+BAA+B,CAAC;QAC9C,IAAI;QACJ,KAAK,EAAE,uBAAuB;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,+BAA+B,CAAC;QAClD,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,kBAAkB;QACzB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB;QACtC,IAAI,EAAE;YACJ,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY;YACpD,eAAe,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW;YAC9C,sBAAsB,EAAE,WAAW,CAAC,YAAY;YAChD,sBAAsB,EAAE,WAAW,CAAC,KAAK,CAAC,kBAAkB;YAC5D,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB;YACjD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,KAAK,IAAI;gBACzC,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI;gBAC5B,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;SAClC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,8BAA8B,CACrC,IAAqB,EACrB,OAAiD;IAEjD,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,+DAA+D,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,KAIrC;IACC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QACzE,OAAO;IACT,CAAC;IACD,8BAA8B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,qBAAqB,CAAC,KAUpC;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC7C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU;QACjC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;QAC7B,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACxD,IACE,UAAU,CAAC,WAAW,KAAK,MAAM,CAAC,EAAE;QACpC,UAAU,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EACnD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG;QACxB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,UAAU;QACV,cAAc,EAAE,OAAO,CAAC,0BAA0B;QAClD,YAAY,EAAE,SAAS;QACvB,+BAA+B,EAC7B,kCAAkC,CAAC,OAAO,CAAC;KAC9C,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAC5B,MAAM,oCAAoC,CAAC,iBAAiB,CAAC,CAAC;IAChE,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC;QAChD,MAAM;QACN,IAAI;QACJ,cAAc;KACf,CAAC,CAAC;IACH,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC;IAC7B,uEAAuE;IACvE,MAAM,iCAAiC,CAAC;QACtC,YAAY,EAAE,SAAS;QACvB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM;QACN,IAAI;QACJ,OAAO;KACR,CAAC,CAAC;IACH,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACpE,MAAM,mCAAmC,CAAC;YACxC,OAAO;YACP,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,qBAAqB,EAAE,UAAU,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI;YACnE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;SACxC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACjC,8EAA8E;QAC9E,4BAA4B,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,MAAM,+BAA+B,CAAC;YACxD,GAAG,iBAAiB;YACpB,YAAY,EAAE,SAAS;SACxB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,WAAW;YACd,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,KAAK,CAAC,oBAAoB,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,WAAW,CAAC;AACrB,CAAC;AAiBD,iFAAiF;AACjF,KAAK,UAAU,sBAAsB,CACnC,KAA4C;IAM5C,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACrD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO;QAC1B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzD,2EAA2E;IAC3E,2EAA2E;IAC3E,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;QAC3C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB;QAClE,SAAS;QACT,MAAM;QACN,OAAO;QACP,sBAAsB,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;QAC9C,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;KACjD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO;QACL,eAAe,EAAE,IAAI;QACrB,QAAQ,EACN,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;YACvC,CAAC,CAAC,QAAQ,CAAC,QAAQ;YACnB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ;QAC5B,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAA4C;IAE5C,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;QACE,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,8BAA8B;QACzC,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,EACD,KAAK,IAAI,EAAE;QACT,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,kEAAkE;QAClE,IACE,CAAC,KAAK,CAAC,OAAO;YACd,iCAAiC,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,EAC5D,CAAC;YACD,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;QACD,IAAI,KAAK,CAAC,OAAO;YACf,OAAO,CAAC,SAAS,CAAC,8BAA8B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,wEAAwE;QACxE,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAClD,KAAK,EACL,sBAAsB,EACtB,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,8BAA8B,CAAC,MAAM,CAAC,EAAE,CAAC,CAClE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACzB,+DAA+D;YAC/D,IAAI,yBAAyB,CAAC,KAAK,CAAC;gBAClC,OAAO,CAAC,SAAS,CAAC,8BAA8B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACtD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;QACpC,qEAAqE;QACrE,4EAA4E;QAC5E,IAAI,CAAC,QAAQ,CAAC,eAAe;YAC3B,MAAM,iCAAiC,CAAC;gBACtC,YAAY,EAAE,SAAS;gBACvB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM;gBACN,IAAI;gBACJ,OAAO;aACR,CAAC,CAAC;QACL,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,QAAQ,CAAC,eAAe;YAC1B,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/D,4BAA4B,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO;YACL,GAAG,MAAM;YACT,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,QAAQ,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;YAC7D,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAChC,eAA+B,EAC/B,KAAoC;IAEpC,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC;IACtC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IAC/B,OAAO,CACL,SAAS,CAAC,QAAQ,KAAK,IAAI;QAC3B,CAAC,SAAS,CAAC,UAAU;QACrB,SAAS,CAAC,EAAE,KAAK,IAAI,CAAC,eAAe;QACrC,SAAS,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc,CACjD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,KAG7D;IACC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACzC,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,8BAA8B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,MAAM,yCAAyC,CAC9D,KAAK,EACL,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,SAAS,CAAC,EAAE;YACtB,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,0BAA0B;YACrC,cAAc,EAAE,SAAS,CAAC,cAAc;SACzC,CACF,CAAC;QACF,IAAI,CAAC,QAAQ;YAAE,MAAM,KAAK,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["import {\n  type AccessManifestCheckpoint,\n  KeyingVerificationError,\n  type VerifiedContainerAccessManifest,\n} from \"@tearleads/crypto\";\nimport { deriveOrganizationMetadataContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport {\n  type HeldContainerBinding,\n  listingRepeatsHeldOrdinaryBinding,\n} from \"../../../../data/containers/containerBinding\";\nimport { verifiedContainerCreateManifest } from \"../../../../data/keyingProjectionVerification/container/containerCreateManifest\";\nimport { verifyContainerDestinationProjection } from \"../../../../data/keyingProjectionVerification/container/containerDestinationVerification\";\nimport { verifyContainerWriterProjection } from \"../../../../data/keyingProjectionVerification/container/containerProjectionVerification\";\nimport {\n  isKeyingVerificationError,\n  reportKeyingVerificationErrorInCauseChain,\n  runWithSecurityIncidentReporting,\n} from \"../../../../data/keyingProjectionVerification/error\";\nimport { verifyRuntimeGroupMetadataAuthority } from \"../../../organizations/groupMetadata/runtimeGroupMetadataAuthority\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../../principals/runtimePolicyWarmer\";\nimport type {\n  ContainerState,\n  RemoteContainer,\n  RemoteContainerHydrationState,\n} from \"../types\";\nimport type { PrefetchedDestinationProjection } from \"./destinationPrefetch\";\nimport {\n  cachedDestinationRole,\n  type DestinationRole,\n  rememberDestinationRole,\n} from \"./destinationRoleCache\";\nimport { resolveWithMetadataRootReload } from \"./destinationRootReload\";\nimport { assertPermittedDestinationBinding } from \"./replacementBinding\";\n\n/** The identity a role is verified and cached under. */\ntype DestinationIdentity = Pick<RemoteContainer, \"id\" | \"organizationId\">;\n\nasync function destinationRoleFromPath(input: {\n  listed: DestinationIdentity;\n  path: readonly VerifiedContainerAccessManifest[];\n  verifiedByHash: ReadonlyMap<string, VerifiedContainerAccessManifest>;\n}): Promise<{ role: DestinationRole; parentId: string | null }> {\n  const { listed, path } = input;\n  const head = path.at(-1);\n  if (\n    !head ||\n    head.state.containerId !== listed.id ||\n    head.state.organizationId !== listed.organizationId\n  ) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"container destination manifest has the wrong identity\",\n    );\n  }\n  const metadataSlot = await deriveOrganizationMetadataContainerSystemSlot({\n    organizationId: listed.organizationId,\n  });\n  if (\n    head.state.systemSlot !== null &&\n    path.length !== (head.state.systemSlot === metadataSlot ? 1 : 2)\n  ) {\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"system destination has the wrong signed topology\",\n    );\n  }\n  // The head may be a later grant signed by any admin; only the epoch-1\n  // create names the creator, and roots are always created by the org owner.\n  const created = verifiedContainerCreateManifest({\n    head,\n    label: \"Container destination\",\n    verifiedByHash: input.verifiedByHash,\n  });\n  const root = path[0];\n  if (!root) throw new Error(\"Destination root is unavailable\");\n  const rootCreated = verifiedContainerCreateManifest({\n    head: root,\n    label: \"Destination root\",\n    verifiedByHash: input.verifiedByHash,\n  });\n  return {\n    parentId: head.state.parentContainerId,\n    role: {\n      createSignerUserId: created.event.event.signerUserId,\n      rootContainerId: rootCreated.state.containerId,\n      rootCreateManifestHash: rootCreated.manifestHash,\n      rootMetadataDocumentId: rootCreated.state.metadataDocumentId,\n      metadataDocumentId: head.state.metadataDocumentId,\n      ...(head.state.parentContainerId === null ||\n      head.state.systemSlot !== null\n        ? { parentId: head.state.parentContainerId }\n        : {}),\n      systemSlot: head.state.systemSlot,\n    },\n  };\n}\n\n/**\n * The session's root id arrives in an unsigned login response, so the root it\n * names must prove it belongs to this user: every acknowledged organization was\n * created by the session user, whose device signed the root's `container.create`.\n * A verified root created by anyone else is a substitution, never the merge\n * target for pre-login local content, whatever grants it carries. The check\n * runs on cache reuse too, since the cache is not scoped to the session user.\n */\nfunction assertRootCreatedBySessionUser(\n  role: DestinationRole,\n  runtime: RemoteContainerHydrationState[\"runtime\"],\n): void {\n  if (role.systemSlot !== null) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"acknowledged session root cannot be a system container\",\n    );\n  }\n  if (role.createSignerUserId !== runtime.auth.userId) {\n    throw new KeyingVerificationError(\n      \"signer_mismatch\",\n      \"acknowledged session root was not created by the session user\",\n    );\n  }\n}\n\nfunction assertAcknowledgedRootSigner(input: {\n  listed: DestinationIdentity;\n  role: DestinationRole;\n  runtime: RemoteContainerHydrationState[\"runtime\"];\n}): void {\n  const { listed, role, runtime } = input;\n  if (role.parentId !== null || listed.id !== runtime.auth.rootContainerId) {\n    return;\n  }\n  assertRootCreatedBySessionUser(role, runtime);\n}\n\n/**\n * Authenticate destination roles before admitting a binding or advancing any\n * placement pin. Shared rehomes additionally require signed replacement evidence.\n */\nasync function verifyDestinationRole(input: {\n  heldBinding: HeldContainerBinding | null;\n  prefetched: PrefetchedDestinationProjection | undefined;\n  verifyCurrentPlacement: boolean;\n  onVerifiedCheckpoint:\n    | ((checkpoint: AccessManifestCheckpoint) => void)\n    | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  listed: DestinationIdentity;\n  runtime: RemoteContainerHydrationState[\"runtime\"];\n}): Promise<{ role: DestinationRole; parentId: string | null } | null> {\n  const { isCurrent, listed, runtime } = input;\n  const projection = input.prefetched\n    ? input.prefetched.projection\n    : await runtime.apiClient.getContainerWriterProjection(listed.id);\n  if (!projection || isCurrent?.() === false) return null;\n  if (\n    projection.containerId !== listed.id ||\n    projection.organizationId !== listed.organizationId\n  ) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"container destination projection has the wrong identity\",\n    );\n  }\n  const verificationInput = {\n    execSql: runtime.infra.execSql,\n    projection,\n    resolveUserKey: runtime.resolveTrustedUserIdentity,\n    stillCurrent: isCurrent,\n    warmReferencedPrincipalPolicies:\n      createRuntimePrincipalPolicyWarmer(runtime),\n  };\n  const { path, verifiedByHash } =\n    await verifyContainerDestinationProjection(verificationInput);\n  if (isCurrent?.() === false) return null;\n  const destination = await destinationRoleFromPath({\n    listed,\n    path,\n    verifiedByHash,\n  });\n  const { role } = destination;\n  // Refuse a rebinding before group checks or placement pins run for it.\n  await assertPermittedDestinationBinding({\n    stillCurrent: isCurrent,\n    heldBinding: input.heldBinding,\n    listed,\n    role,\n    runtime,\n  });\n  if (isCurrent?.() === false) return null;\n  if (role.parentId === null && role.systemSlot !== null) {\n    const head = path.at(-1);\n    if (!head) throw new Error(\"Metadata root manifest is unavailable\");\n    await verifyRuntimeGroupMetadataAuthority({\n      runtime,\n      organizationId: listed.organizationId,\n      organizationReference: projection.policyEvidence.organization?.head,\n      state: head.state,\n      stillCurrent: isCurrent ?? (() => true),\n    });\n  }\n  if (isCurrent?.() === false) return null;\n  if (input.verifyCurrentPlacement) {\n    // Check the immutable role before allowing current placement to advance pins.\n    assertAcknowledgedRootSigner({ listed, role, runtime });\n    const currentPath = await verifyContainerWriterProjection({\n      ...verificationInput,\n      stillCurrent: isCurrent,\n    });\n    const currentHead = currentPath.at(-1);\n    if (!currentHead)\n      throw new Error(\"Recovery placement manifest is unavailable\");\n    input.onVerifiedCheckpoint?.(currentHead.checkpoint);\n  }\n  if (isCurrent?.() === false) return null;\n  return destination;\n}\n\ntype VerifyRemoteContainerDestinationInput = {\n  heldBinding: HeldContainerBinding | null;\n  /** The held folder was re-homed away from the listed organization. */\n  supersededListing?: boolean | undefined;\n  /** Fetched ahead by page hydration; ignored when placement is refreshed. */\n  prefetchedProjection?: PrefetchedDestinationProjection | undefined;\n  refresh?: boolean;\n  onVerifiedCheckpoint?:\n    | ((checkpoint: AccessManifestCheckpoint) => void)\n    | undefined;\n  remoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n  isCurrent?: (() => boolean) | undefined;\n};\n\n/** A cached immutable role, or a freshly verified one with its signed parent. */\nasync function resolveDestinationRole(\n  input: VerifyRemoteContainerDestinationInput,\n): Promise<{\n  freshlyVerified: boolean;\n  parentId: string | null | undefined;\n  role: DestinationRole;\n} | null> {\n  const { remoteContainer: listed, isCurrent } = input;\n  const runtime = input.state.runtime;\n  const cached = input.refresh\n    ? undefined\n    : cachedDestinationRole(runtime.infra.execSql, listed);\n  // Ordinary parent edges are not immutable. A refresh authenticates current\n  // placement; a forged root hint must also be corrected from a signed path.\n  if (cached && !(cached.parentId === undefined && listed.parentId === null)) {\n    return { freshlyVerified: false, parentId: cached.parentId, role: cached };\n  }\n  const verified = await verifyDestinationRole({\n    heldBinding: input.heldBinding,\n    prefetched: input.refresh ? undefined : input.prefetchedProjection,\n    isCurrent,\n    listed,\n    runtime,\n    verifyCurrentPlacement: input.refresh === true,\n    onVerifiedCheckpoint: input.onVerifiedCheckpoint,\n  });\n  if (!verified) return null;\n  return {\n    freshlyVerified: true,\n    parentId:\n      input.refresh || listed.parentId === null\n        ? verified.parentId\n        : verified.role.parentId,\n    role: verified.role,\n  };\n}\n\n/**\n * Listing hints never establish a metadata target or a system/root role, and a\n * held folder keeps its organization and metadata target unless its own user\n * re-created it or its pinned founder authorized a verified replacement.\n * A conflicting proof is refused before placement pins\n * advance or its role is cached.\n */\nexport async function verifyRemoteContainerDestination(\n  input: VerifyRemoteContainerDestinationInput,\n): Promise<RemoteContainer | null> {\n  const { remoteContainer: listed, state, isCurrent } = input;\n  const runtime = state.runtime;\n  return runWithSecurityIncidentReporting(\n    runtime.util.reportSecurityIncident,\n    {\n      objectId: listed.id,\n      objectKind: \"container\",\n      operation: \"container.destination.verify\",\n      organizationId: listed.organizationId,\n    },\n    async () => {\n      if (input.supersededListing) {\n        throw new KeyingVerificationError(\n          \"object_mismatch\",\n          \"container was re-homed away from the listed organization\",\n        );\n      }\n      // A held ordinary binding was verified (or signed by this device) when\n      // it was stored; a listing that repeats it needs no second proof.\n      if (\n        !input.refresh &&\n        listingRepeatsHeldOrdinaryBinding(input.heldBinding, listed)\n      ) {\n        return { ...listed, systemSlot: null };\n      }\n      if (input.refresh)\n        runtime.apiClient.evictContainerWriterProjection(listed.id);\n      // A metadata root read before a reserved-group commit is reloaded once.\n      const resolved = await resolveWithMetadataRootReload(\n        input,\n        resolveDestinationRole,\n        () => runtime.apiClient.evictContainerWriterProjection(listed.id),\n      ).catch((error: unknown) => {\n        // Never re-serve a cached projection that failed verification.\n        if (isKeyingVerificationError(error))\n          runtime.apiClient.evictContainerWriterProjection(listed.id);\n        throw error;\n      });\n      if (!resolved || isCurrent?.() === false) return null;\n      const { role, parentId } = resolved;\n      // Fresh verification checked this binding before any placement pins.\n      // A cached role still needs the held binding and replacement proof checked.\n      if (!resolved.freshlyVerified)\n        await assertPermittedDestinationBinding({\n          stillCurrent: isCurrent,\n          heldBinding: input.heldBinding,\n          listed,\n          role,\n          runtime,\n        });\n      if (isCurrent?.() === false) return null;\n      if (resolved.freshlyVerified)\n        rememberDestinationRole(runtime.infra.execSql, listed, role);\n      assertAcknowledgedRootSigner({ listed, role, runtime });\n      return {\n        ...listed,\n        metadataDocumentId: role.metadataDocumentId,\n        parentId: parentId === undefined ? listed.parentId : parentId,\n        systemSlot: role.systemSlot,\n      };\n    },\n  );\n}\n\n/** The root the unsigned login answer named, in the expected organization. */\nexport function isSessionRootState(\n  remoteRootState: ContainerState,\n  state: RemoteContainerHydrationState,\n): boolean {\n  const { container } = remoteRootState;\n  const { auth } = state.runtime;\n  return (\n    container.parentId === null &&\n    !container.systemSlot &&\n    container.id === auth.rootContainerId &&\n    container.organizationId === auth.organizationId\n  );\n}\n\n/**\n * Whether the session root may absorb the pre-login local roots. The unsigned\n * login answer only names the root; the merge target must also be the verified\n * root whose epoch-1 `container.create` the session user signed. A row persisted\n * earlier as an ordinary shared container (another user's root this device once\n * hydrated) never passed that check for this session, so the creator is checked\n * here, at the reconciliation boundary itself, before any local content is\n * re-parented. The role comes only from the cache remote hydration fills when\n * it verifies the destination: this gate never fetches, so a local refresh stays\n * independent of the network. Without a cached role the merge is left pending\n * (no incident) until hydration verifies the root and reconciles from the\n * cache. A different creator is a `signer_mismatch` incident and never a merge;\n * the refusal is the \"no merge\" outcome, so the refresh that carried it\n * completes with the local content left in place.\n */\nexport async function isVerifiedLocalRootReconciliationTarget(input: {\n  remoteRootState: ContainerState;\n  state: RemoteContainerHydrationState;\n}): Promise<boolean> {\n  const { remoteRootState, state } = input;\n  const { container } = remoteRootState;\n  const runtime = state.runtime;\n  if (!isSessionRootState(remoteRootState, state)) return false;\n  const role = cachedDestinationRole(runtime.infra.execSql, container);\n  if (!role) return false;\n  try {\n    if (role.parentId !== null) {\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"session root reconciliation target is not a verified root\",\n      );\n    }\n    assertRootCreatedBySessionUser(role, runtime);\n    return true;\n  } catch (error) {\n    const reported = await reportKeyingVerificationErrorInCauseChain(\n      error,\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: container.id,\n        objectKind: \"container\",\n        operation: \"container.root.reconcile\",\n        organizationId: container.organizationId,\n      },\n    );\n    if (!reported) throw error;\n    return false;\n  }\n}\n"]}

package/workflows/container-contents/remoteHydration/index.js

@@ -1,10 +1,10 @@
 import { createRuntimePrincipalPolicyWarmer } from "../../principals/runtimePolicyWarmer.js";
-import { createContainerChildIndex } from "./childIndex.js";
 import { finishRemoteHydration } from "./completeHydration.js";
-import { createContainerParentHydrationQueue } from "./parentLaneQueue.js";
+import { createContainerChildIndex } from "./lanes/childIndex.js";
+import { createContainerParentHydrationQueue } from "./lanes/parentLaneQueue.js";
 import { cacheRemoteContainerPrincipalPolicies } from "./principalPolicyCache.js";
-import { canHydrateRemoteContainers, hydrateContainerParentLanes, } from "./remoteContainerPageHydration.js";
-import { listRemoteContainerIdsWithPendingMetadataUpdates, listRemoteContainerIdsWithPendingStructuralIntents, upsertIsolatedRemoteContainerState, } from "./remoteContainerState.js";
+import { canHydrateRemoteContainers, hydrateContainerParentLanes, } from "./remoteContainers/remoteContainerPageHydration.js";
+import { listRemoteContainerIdsWithPendingMetadataUpdates, listRemoteContainerIdsWithPendingStructuralIntents, upsertIsolatedRemoteContainerState, } from "./remoteContainers/remoteContainerState.js";
 export class StaleRemoteHydrationError extends Error {
 }
 export function createGenerationGuardedHydrationHost(input) {

package/workflows/container-contents/remoteHydration/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,mCAAmC,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,qCAAqC,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,gDAAgD,EAChD,kDAAkD,EAClD,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAgBhC,MAAM,OAAO,yBAA0B,SAAQ,KAAK;CAAG;AAEvD,MAAM,UAAU,oCAAoC,CAAC,KAGpD;IACC,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,yBAAyB,EAAE,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,qBAAqB,EAAE,KAAK,EAC1B,cAAc,EACd,KAAK,EACL,UAAU,EACV,WAAW,EACX,eAAe,EACf,EAAE;YACF,MAAM,eAAe,GAAG,eAAe,EAAE,SAAS,CAAC;YACnD,MAAM,SAAS,GAAG,eAAe;gBAC/B,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,eAAe,EAAE;gBAC9C,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;YACpB,aAAa,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,qBAAqB,CACnD,cAAc,EACd,KAAK,EACL,UAAU,EACV,WAAW,EACX,EAAE,GAAG,eAAe,EAAE,SAAS,EAAE,CAClC,CAAC;YACF,aAAa,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB;YACnC,CAAC,CAAC;gBACE,sBAAsB,EAAE,GAAG,EAAE;oBAC3B,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;wBACtB,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;oBACxC,CAAC;gBACH,CAAC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,cAAc,EAAE,GAAG,EAAE;YACnB,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAWD,SAAS,+BAA+B,CACtC,KAAoC;IAEpC,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,mBAAmB;QACpC,UAAU,EAAE,KAAK,CAAC,oBAAoB;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,qCAAqC,CAC5C,IAAiD,EACjD,KAAsC;IAEtC,OAAO,CACL,IAAI,KAAK,SAAS;QAClB,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QAClC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,UAA2C,EAC3C,uBAA2D,EAC3D,KAAiC,EACjC,eAAgC;IAEhC,OAAO,CACL,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,eAAe;QACjD,qCAAqC,CACnC,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAC/C,UAAU,CACX,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAU1C;IACC,MAAM,EACJ,sCAAsC,EACtC,wCAAwC,EACxC,UAAU,EACV,uBAAuB,EACvB,IAAI,EACJ,KAAK,EACL,qBAAqB,EACrB,KAAK,GACN,GAAG,KAAK,CAAC;IACV,IACE,CAAC,KAAK,CAAC,SAAS,EAAE;QAClB,CAAC,8BAA8B,CAC7B,UAAU,EACV,uBAAuB,EACvB,KAAK,EACL,qBAAqB,CACtB,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,gCAAgC,CACzE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAC5B,CAAC;IACF,sEAAsE;IACtE,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CAAC;QACxD,0BAA0B,EACxB,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,qBAAqB,CAAC,EAAE,CAAC;YACtE,IAAI;QACN,sCAAsC;QACtC,wCAAwC;QACxC,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,qBAAqB;QACtC,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qCAAqC,CAAC,KAM9C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,qBAAqB,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACjE,IACE,8BAA8B,CAC5B,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,uBAAuB,EAC7B,KAAK,CAAC,KAAK,EACX,qBAAqB,CACtB,EACD,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;YAC7C,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,KAO9C;IACC,MAAM,EAAE,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC1E,IAAI,oBAAoB,GAAG,KAAK,CAAC;IAEjC,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,MAAM,sBAAsB,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC9D,CAAC,eAAe,EAAE,EAAE,CAClB,qCAAqC,CACnC,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAC/C,UAAU,CACX,CACJ,CAAC;YACF,IAAI,sBAAsB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO;YACT,CAAC;YACD,MAAM,qCAAqC,CAAC;gBAC1C,gCAAgC,EAAE,kCAAkC,CAClE,KAAK,CAAC,OAAO,CACd;gBACD,gBAAgB,EAAE,sBAAsB;gBACxC,YAAY,EAAE,KAAK,CAAC,SAAS;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,MAAM,CACJ,sCAAsC,EACtC,wCAAwC,EACzC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACpB,gDAAgD,CAAC;oBAC/C,gBAAgB,EAAE,sBAAsB;oBACxC,KAAK;iBACN,CAAC;gBACF,kDAAkD,CAAC;oBACjD,gBAAgB,EAAE,sBAAsB;oBACxC,KAAK;iBACN,CAAC;aACH,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,KAAK,MAAM,qBAAqB,IAAI,sBAAsB,EAAE,CAAC;gBAC3D,oBAAoB;oBAClB,CAAC,MAAM,2BAA2B,CAAC;wBACjC,sCAAsC;wBACtC,wCAAwC;wBACxC,UAAU;wBACV,uBAAuB;wBACvB,IAAI;wBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,KAAK;wBACL,qBAAqB;wBACrB,KAAK;qBACN,CAAC,CAAC,IAAI,oBAAoB,CAAC;YAChC,CAAC;YACD,qCAAqC,CAAC;gBACpC,UAAU;gBACV,uBAAuB;gBACvB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK;gBACL,sBAAsB;aACvB,CAAC,CAAC;YAEH,IAAI,oBAAoB,EAAE,CAAC;gBACzB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,oBAAoB,GAAG,KAAK,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,oBAAoB,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,wCAAwC,CAC/C,KAAoC,EACpC,UAA2C;IAE3C,OAAO,qCAAqC,CAC1C,+BAA+B,CAAC,KAAK,CAAC,EACtC,UAAU,CACX,CAAC;AACJ,CAAC;AAED,SAAS,0CAA0C,CAAC,KAKnD;IACC,MAAM,iBAAiB,GAAG,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,YAAY,GAChB,iBAAiB,CAAC,SAAS,KAAK,KAAK,CAAC,UAAU,CAAC,SAAS;QAC1D,iBAAiB,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;IAC/D,KAAK,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,uBAAuB,EAAE,CAAC;QACtE,IAAI,CAAC,qCAAqC,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,SAAS;QACX,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAClD,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,2BAA2B,GAA+B,IAAI,GAAG,EAAE,CAAC;IAC1E,MAAM,uBAAuB,GAAuC,IAAI,GAAG,EAAE,CAAC;IAC9E,IAAI,6BAA6B,GAAyB,IAAI,CAAC;IAE/D,MAAM,iBAAiB,GAAG,GAAkB,EAAE;QAC5C,IAAI,6BAA6B,EAAE,CAAC;YAClC,OAAO,6BAA6B,CAAC,IAAI,CACvC,iBAAiB,EACjB,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC1C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EACxC,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,oBAAoB,GAAG,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC;QAC/D,IAAI,oBAAoB,EAAE,CAAC;YACzB,OAAO,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,eAAe,GAAG,2BAA2B,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACxE,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,2BAA2B,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACpD,OAAO,iBAAiB,EAAE,CAAC;QAC7B,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,wCAAwC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,oCAAoC,CAAC;YACvD,IAAI;YACJ,SAAS;SACV,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE;aAClC,IAAI,CAAC,GAAG,EAAE,CACT,+BAA+B,CAAC;YAC9B,UAAU;YACV,uBAAuB;YACvB,IAAI,EAAE,WAAW;YACjB,SAAS;YACT,KAAK,EAAE,2BAA2B;YAClC,KAAK;SACN,CAAC,CACH;aACA,IAAI,CAAC,GAAG,EAAE;YACT,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACjB,0CAA0C,CAAC;oBACzC,UAAU;oBACV,uBAAuB;oBACvB,KAAK,EAAE,2BAA2B;oBAClC,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,CAAC,SAAS,EAAE,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;gBAC/D,0CAA0C,CAAC;oBACzC,UAAU;oBACV,uBAAuB;oBACvB,KAAK,EAAE,2BAA2B;oBAClC,KAAK;iBACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,6BAA6B,KAAK,WAAW,EAAE,CAAC;gBAClD,6BAA6B,GAAG,IAAI,CAAC;YACvC,CAAC;QACH,CAAC,CAAC,CAAC;QACL,6BAA6B,GAAG,WAAW,CAAC;QAC5C,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAC3B,2BAA2B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,SAAS,CACvE,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,qBAAqB,GAAG,CAAC,eAAgC,EAAE,EAAE;QACjE,2BAA2B,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;QACrE,uBAAuB,CAAC,GAAG,CACzB,eAAe,CAAC,EAAE,EAClB,+BAA+B,CAAC,KAAK,CAAC,CACvC,CAAC;QACF,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC,CAAC;IACF,qBAAqB,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,GAAG,CAAC,CAAC;IAC9E,qBAAqB,CAAC,MAAM,GAAG,iBAAiB,CAAC;IACjD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAS7C;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9B,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACxE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3E,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,mCAAmC,CAAC;QACrE,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE;QACzC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;KACrD,CAAC,CAAC;IACH,gFAAgF;IAChF,gFAAgF;IAChF,gFAAgF;IAChF,MAAM,yBAAyB,GAA6B,CAAC,WAAW,EAAE,EAAE;QAC1E,IACE,KAAK,CAAC,2BAA2B;YACjC,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EACvE,CAAC;YACD,eAAe,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC;QAC/C,kBAAkB;QAClB,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;QACL,eAAe,EAAE,yBAAyB;QAC1C,gBAAgB;QAChB,KAAK;KACN,CAAC,CAAC;IACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAChC,MAAM,qBAAqB,CAAC;QAC1B,YAAY;QACZ,QAAQ,EACN,MAAM,CAAC,QAAQ;YACf,0BAA0B,CAAC,KAAK,CAAC;YACjC,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAC/B,2BAA2B;QAC3B,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,gBAAgB;QAChB,KAAK;KACN,CAAC,CAAC;IACH,OAAO,YAAY,CAAC;AACtB,CAAC","sourcesContent":["import { createRuntimePrincipalPolicyWarmer } from \"../../principals/runtimePolicyWarmer\";\nimport { createContainerChildIndex } from \"./childIndex\";\nimport { finishRemoteHydration } from \"./completeHydration\";\nimport { createContainerParentHydrationQueue } from \"./parentLaneQueue\";\nimport { cacheRemoteContainerPrincipalPolicies } from \"./principalPolicyCache\";\nimport {\n  canHydrateRemoteContainers,\n  hydrateContainerParentLanes,\n} from \"./remoteContainerPageHydration\";\nimport {\n  listRemoteContainerIdsWithPendingMetadataUpdates,\n  listRemoteContainerIdsWithPendingStructuralIntents,\n  upsertIsolatedRemoteContainerState,\n} from \"./remoteContainerState\";\nimport type {\n  QueueContainerParentLane,\n  RemoteContainer,\n  RemoteContainerHydrationHost,\n  RemoteContainerHydrationState,\n  RemoteContainerIngestQueue,\n} from \"./types\";\n\nexport type {\n  ContainerState,\n  PersistContainerStateResult,\n  RemoteContainer,\n  RemoteContainerHydrationHost,\n} from \"./types\";\n\nexport class StaleRemoteHydrationError extends Error {}\n\nexport function createGenerationGuardedHydrationHost(input: {\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n}): RemoteContainerHydrationHost {\n  const assertCurrent = () => {\n    if (!input.isCurrent()) {\n      throw new StaleRemoteHydrationError();\n    }\n  };\n\n  return {\n    persistContainerState: async (\n      containerState,\n      patch,\n      updateView,\n      saveOptions,\n      mutationOptions,\n    ) => {\n      const callerIsCurrent = mutationOptions?.isCurrent;\n      const isCurrent = callerIsCurrent\n        ? () => input.isCurrent() && callerIsCurrent()\n        : input.isCurrent;\n      assertCurrent();\n      const record = await input.host.persistContainerState(\n        containerState,\n        patch,\n        updateView,\n        saveOptions,\n        { ...mutationOptions, isCurrent },\n      );\n      assertCurrent();\n      return record;\n    },\n    ...(input.host.requestDocumentPriming\n      ? {\n          requestDocumentPriming: () => {\n            if (input.isCurrent()) {\n              input.host.requestDocumentPriming?.();\n            }\n          },\n        }\n      : {}),\n    updateSnapshot: () => {\n      if (input.isCurrent()) {\n        input.host.updateSnapshot();\n      }\n    },\n  };\n}\n\ninterface RemoteContainerIngestGeneration {\n  readonly lifecycle: number | undefined;\n  readonly structural: number | undefined;\n}\ntype RemoteContainerIngestGenerationMap = Map<\n  string,\n  RemoteContainerIngestGeneration\n>;\n\nfunction remoteContainerIngestGeneration(\n  state: RemoteContainerHydrationState,\n): RemoteContainerIngestGeneration {\n  return {\n    lifecycle: state.lifecycleGeneration,\n    structural: state.structuralGeneration,\n  };\n}\n\nfunction remoteContainerIngestGenerationsMatch(\n  left: RemoteContainerIngestGeneration | undefined,\n  right: RemoteContainerIngestGeneration,\n): boolean {\n  return (\n    left !== undefined &&\n    left.lifecycle === right.lifecycle &&\n    left.structural === right.structural\n  );\n}\n\nfunction isCurrentQueuedRemoteContainer(\n  generation: RemoteContainerIngestGeneration,\n  generationByContainerId: RemoteContainerIngestGenerationMap,\n  queue: RemoteContainerIngestQueue,\n  remoteContainer: RemoteContainer,\n): boolean {\n  return (\n    queue.get(remoteContainer.id) === remoteContainer &&\n    remoteContainerIngestGenerationsMatch(\n      generationByContainerId.get(remoteContainer.id),\n      generation,\n    )\n  );\n}\n\nasync function upsertQueuedRemoteContainer(input: {\n  containerIdsWithPendingMetadataUpdates: ReadonlySet<string>;\n  containerIdsWithPendingStructuralIntents: ReadonlySet<string>;\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  queuedRemoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}): Promise<boolean> {\n  const {\n    containerIdsWithPendingMetadataUpdates,\n    containerIdsWithPendingStructuralIntents,\n    generation,\n    generationByContainerId,\n    host,\n    queue,\n    queuedRemoteContainer,\n    state,\n  } = input;\n  if (\n    !input.isCurrent() ||\n    !isCurrentQueuedRemoteContainer(\n      generation,\n      generationByContainerId,\n      queue,\n      queuedRemoteContainer,\n    )\n  ) {\n    return false;\n  }\n\n  const tombstones = await state.persistence.loadContainerHydrationTombstones(\n    state.runtime.infra.execSql,\n  );\n  // A refused folder is reported and acknowledged; the batch continues.\n  const upserted = await upsertIsolatedRemoteContainerState({\n    expectedHydrationTombstone:\n      tombstones.find((row) => row.containerId === queuedRemoteContainer.id) ??\n      null,\n    containerIdsWithPendingMetadataUpdates,\n    containerIdsWithPendingStructuralIntents,\n    host,\n    isCurrent: input.isCurrent,\n    remoteContainer: queuedRemoteContainer,\n    state,\n  });\n  if (!upserted) {\n    return false;\n  }\n  return true;\n}\n\nfunction acknowledgeRemoteContainerIngestBatch(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  queuedRemoteContainers: ReadonlyArray<RemoteContainer>;\n}): void {\n  if (!input.isCurrent()) {\n    return;\n  }\n  for (const queuedRemoteContainer of input.queuedRemoteContainers) {\n    if (\n      isCurrentQueuedRemoteContainer(\n        input.generation,\n        input.generationByContainerId,\n        input.queue,\n        queuedRemoteContainer,\n      )\n    ) {\n      input.queue.delete(queuedRemoteContainer.id);\n      input.generationByContainerId.delete(queuedRemoteContainer.id);\n    }\n  }\n}\n\nasync function drainRemoteContainerIngestQueue(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  state: RemoteContainerHydrationState;\n}) {\n  const { generation, generationByContainerId, host, queue, state } = input;\n  let shouldUpdateSnapshot = false;\n\n  try {\n    while (input.isCurrent()) {\n      const queuedRemoteContainers = Array.from(queue.values()).filter(\n        (remoteContainer) =>\n          remoteContainerIngestGenerationsMatch(\n            generationByContainerId.get(remoteContainer.id),\n            generation,\n          ),\n      );\n      if (queuedRemoteContainers.length === 0) {\n        return;\n      }\n      await cacheRemoteContainerPrincipalPolicies({\n        cacheReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(\n          state.runtime,\n        ),\n        remoteContainers: queuedRemoteContainers,\n        stillCurrent: input.isCurrent,\n      });\n      if (!input.isCurrent()) {\n        return;\n      }\n      const [\n        containerIdsWithPendingMetadataUpdates,\n        containerIdsWithPendingStructuralIntents,\n      ] = await Promise.all([\n        listRemoteContainerIdsWithPendingMetadataUpdates({\n          remoteContainers: queuedRemoteContainers,\n          state,\n        }),\n        listRemoteContainerIdsWithPendingStructuralIntents({\n          remoteContainers: queuedRemoteContainers,\n          state,\n        }),\n      ]);\n      if (!input.isCurrent()) {\n        return;\n      }\n\n      for (const queuedRemoteContainer of queuedRemoteContainers) {\n        shouldUpdateSnapshot =\n          (await upsertQueuedRemoteContainer({\n            containerIdsWithPendingMetadataUpdates,\n            containerIdsWithPendingStructuralIntents,\n            generation,\n            generationByContainerId,\n            host,\n            isCurrent: input.isCurrent,\n            queue,\n            queuedRemoteContainer,\n            state,\n          })) || shouldUpdateSnapshot;\n      }\n      acknowledgeRemoteContainerIngestBatch({\n        generation,\n        generationByContainerId,\n        isCurrent: input.isCurrent,\n        queue,\n        queuedRemoteContainers,\n      });\n\n      if (shouldUpdateSnapshot) {\n        host.updateSnapshot();\n        shouldUpdateSnapshot = false;\n      }\n    }\n  } catch (error) {\n    if (shouldUpdateSnapshot) {\n      host.updateSnapshot();\n    }\n    throw error;\n  }\n}\n\nfunction isRemoteContainerIngestGenerationCurrent(\n  state: RemoteContainerHydrationState,\n  generation: RemoteContainerIngestGeneration,\n): boolean {\n  return remoteContainerIngestGenerationsMatch(\n    remoteContainerIngestGeneration(state),\n    generation,\n  );\n}\n\nfunction settleStaleRemoteContainerIngestGeneration(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  queue: RemoteContainerIngestQueue;\n  state: RemoteContainerHydrationState;\n}): void {\n  const currentGeneration = remoteContainerIngestGeneration(input.state);\n  const shouldReplay =\n    currentGeneration.lifecycle !== input.generation.lifecycle &&\n    currentGeneration.structural === input.generation.structural;\n  for (const [containerId, generation] of input.generationByContainerId) {\n    if (!remoteContainerIngestGenerationsMatch(generation, input.generation)) {\n      continue;\n    }\n    if (shouldReplay) {\n      input.generationByContainerId.set(containerId, currentGeneration);\n    } else {\n      input.generationByContainerId.delete(containerId);\n      input.queue.delete(containerId);\n    }\n  }\n}\n\ninterface RemoteContainerIngestor {\n  (remoteContainer: RemoteContainer): Promise<void>;\n  hasPending: () => boolean;\n  resume: () => Promise<void>;\n}\n\nexport function createRemoteContainerIngestor(input: {\n  getSerializationBarrier?: (() => Promise<void> | null) | undefined;\n  host: RemoteContainerHydrationHost;\n  state: RemoteContainerHydrationState;\n}): RemoteContainerIngestor {\n  const { host, state } = input;\n  const pendingRemoteContainersById: RemoteContainerIngestQueue = new Map();\n  const generationByContainerId: RemoteContainerIngestGenerationMap = new Map();\n  let ingestRemoteContainersPromise: Promise<void> | null = null;\n\n  const runNextGeneration = (): Promise<void> => {\n    if (ingestRemoteContainersPromise) {\n      return ingestRemoteContainersPromise.then(\n        runNextGeneration,\n        runNextGeneration,\n      );\n    }\n    if (\n      state.runtime.infra.dbStatus !== undefined &&\n      state.runtime.infra.dbStatus !== \"ready\"\n    ) {\n      return Promise.resolve();\n    }\n    const serializationBarrier = input.getSerializationBarrier?.();\n    if (serializationBarrier) {\n      return serializationBarrier.then(runNextGeneration);\n    }\n    const nextContainerId = pendingRemoteContainersById.keys().next().value;\n    if (typeof nextContainerId !== \"string\") {\n      return Promise.resolve();\n    }\n    const generation = generationByContainerId.get(nextContainerId);\n    if (!generation) {\n      pendingRemoteContainersById.delete(nextContainerId);\n      return runNextGeneration();\n    }\n    const isCurrent = () =>\n      isRemoteContainerIngestGenerationCurrent(state, generation);\n    const guardedHost = createGenerationGuardedHydrationHost({\n      host,\n      isCurrent,\n    });\n    const nextPromise = Promise.resolve()\n      .then(() =>\n        drainRemoteContainerIngestQueue({\n          generation,\n          generationByContainerId,\n          host: guardedHost,\n          isCurrent,\n          queue: pendingRemoteContainersById,\n          state,\n        }),\n      )\n      .then(() => {\n        if (!isCurrent()) {\n          settleStaleRemoteContainerIngestGeneration({\n            generation,\n            generationByContainerId,\n            queue: pendingRemoteContainersById,\n            state,\n          });\n        }\n      })\n      .catch((error: unknown) => {\n        if (!isCurrent() || error instanceof StaleRemoteHydrationError) {\n          settleStaleRemoteContainerIngestGeneration({\n            generation,\n            generationByContainerId,\n            queue: pendingRemoteContainersById,\n            state,\n          });\n          return;\n        }\n        throw error;\n      })\n      .finally(() => {\n        if (ingestRemoteContainersPromise === nextPromise) {\n          ingestRemoteContainersPromise = null;\n        }\n      });\n    ingestRemoteContainersPromise = nextPromise;\n    return nextPromise.then(() =>\n      pendingRemoteContainersById.size > 0 ? runNextGeneration() : undefined,\n    );\n  };\n\n  const ingestRemoteContainer = (remoteContainer: RemoteContainer) => {\n    pendingRemoteContainersById.set(remoteContainer.id, remoteContainer);\n    generationByContainerId.set(\n      remoteContainer.id,\n      remoteContainerIngestGeneration(state),\n    );\n    return runNextGeneration();\n  };\n  ingestRemoteContainer.hasPending = () => pendingRemoteContainersById.size > 0;\n  ingestRemoteContainer.resume = runNextGeneration;\n  return ingestRemoteContainer;\n}\n\nexport async function hydrateRemoteContainers(input: {\n  followDiscoveredParentLanes?: boolean | undefined;\n  host: RemoteContainerHydrationHost;\n  isCurrent?: (() => boolean) | undefined;\n  onFullyHydrated?: (() => Promise<void> | void) | undefined;\n  parentIds?: ReadonlyArray<string | null> | undefined;\n  resetAllLaneWatermarks?: boolean | undefined;\n  resetRootLaneWatermark?: boolean | undefined;\n  state: RemoteContainerHydrationState;\n}): Promise<number> {\n  const { host, state } = input;\n  if (!canHydrateRemoteContainers(state) || input.isCurrent?.() === false) {\n    return 0;\n  }\n\n  const seenContainerIds = new Set<string>();\n  const containerIdsBeforeHydration = new Set(state.containersById.keys());\n  const childIdsByParentId = createContainerChildIndex(state.containersById);\n  const { lanes, queueParentLane } = createContainerParentHydrationQueue({\n    containerIds: state.containersById.keys(),\n    parentIds: input.parentIds,\n    resetAllLaneWatermarks: input.resetAllLaneWatermarks,\n    resetRootLaneWatermark: input.resetRootLaneWatermark,\n  });\n  // Follow child lanes during an explicit recursive crawl or for containers first\n  // discovered in this pass. The latter lets a newly authorized root populate its\n  // descendants immediately, while routine ticks keep known subtrees cache-first.\n  const queueDiscoveredParentLane: QueueContainerParentLane = (containerId) => {\n    if (\n      input.followDiscoveredParentLanes ||\n      (containerId !== null && !containerIdsBeforeHydration.has(containerId))\n    ) {\n      queueParentLane(containerId);\n    }\n  };\n  const result = await hydrateContainerParentLanes({\n    childIdsByParentId,\n    host,\n    isCurrent: input.isCurrent,\n    lanes,\n    queueParentLane: queueDiscoveredParentLane,\n    seenContainerIds,\n    state,\n  });\n  const { changedCount } = result;\n  await finishRemoteHydration({\n    changedCount,\n    complete:\n      result.complete &&\n      canHydrateRemoteContainers(state) &&\n      input.isCurrent?.() !== false,\n    containerIdsBeforeHydration,\n    host,\n    isCurrent: input.isCurrent,\n    onFullyHydrated: input.onFullyHydrated,\n    seenContainerIds,\n    state,\n  });\n  return changedCount;\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,qCAAqC,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,gDAAgD,EAChD,kDAAkD,EAClD,kCAAkC,GACnC,MAAM,yCAAyC,CAAC;AAgBjD,MAAM,OAAO,yBAA0B,SAAQ,KAAK;CAAG;AAEvD,MAAM,UAAU,oCAAoC,CAAC,KAGpD;IACC,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,yBAAyB,EAAE,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,qBAAqB,EAAE,KAAK,EAC1B,cAAc,EACd,KAAK,EACL,UAAU,EACV,WAAW,EACX,eAAe,EACf,EAAE;YACF,MAAM,eAAe,GAAG,eAAe,EAAE,SAAS,CAAC;YACnD,MAAM,SAAS,GAAG,eAAe;gBAC/B,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,eAAe,EAAE;gBAC9C,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;YACpB,aAAa,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,qBAAqB,CACnD,cAAc,EACd,KAAK,EACL,UAAU,EACV,WAAW,EACX,EAAE,GAAG,eAAe,EAAE,SAAS,EAAE,CAClC,CAAC;YACF,aAAa,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB;YACnC,CAAC,CAAC;gBACE,sBAAsB,EAAE,GAAG,EAAE;oBAC3B,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;wBACtB,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;oBACxC,CAAC;gBACH,CAAC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,cAAc,EAAE,GAAG,EAAE;YACnB,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAWD,SAAS,+BAA+B,CACtC,KAAoC;IAEpC,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,mBAAmB;QACpC,UAAU,EAAE,KAAK,CAAC,oBAAoB;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,qCAAqC,CAC5C,IAAiD,EACjD,KAAsC;IAEtC,OAAO,CACL,IAAI,KAAK,SAAS;QAClB,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QAClC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,UAA2C,EAC3C,uBAA2D,EAC3D,KAAiC,EACjC,eAAgC;IAEhC,OAAO,CACL,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,eAAe;QACjD,qCAAqC,CACnC,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAC/C,UAAU,CACX,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAU1C;IACC,MAAM,EACJ,sCAAsC,EACtC,wCAAwC,EACxC,UAAU,EACV,uBAAuB,EACvB,IAAI,EACJ,KAAK,EACL,qBAAqB,EACrB,KAAK,GACN,GAAG,KAAK,CAAC;IACV,IACE,CAAC,KAAK,CAAC,SAAS,EAAE;QAClB,CAAC,8BAA8B,CAC7B,UAAU,EACV,uBAAuB,EACvB,KAAK,EACL,qBAAqB,CACtB,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,gCAAgC,CACzE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAC5B,CAAC;IACF,sEAAsE;IACtE,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CAAC;QACxD,0BAA0B,EACxB,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,qBAAqB,CAAC,EAAE,CAAC;YACtE,IAAI;QACN,sCAAsC;QACtC,wCAAwC;QACxC,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,qBAAqB;QACtC,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qCAAqC,CAAC,KAM9C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,qBAAqB,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACjE,IACE,8BAA8B,CAC5B,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,uBAAuB,EAC7B,KAAK,CAAC,KAAK,EACX,qBAAqB,CACtB,EACD,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;YAC7C,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,KAO9C;IACC,MAAM,EAAE,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC1E,IAAI,oBAAoB,GAAG,KAAK,CAAC;IAEjC,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,MAAM,sBAAsB,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC9D,CAAC,eAAe,EAAE,EAAE,CAClB,qCAAqC,CACnC,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAC/C,UAAU,CACX,CACJ,CAAC;YACF,IAAI,sBAAsB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO;YACT,CAAC;YACD,MAAM,qCAAqC,CAAC;gBAC1C,gCAAgC,EAAE,kCAAkC,CAClE,KAAK,CAAC,OAAO,CACd;gBACD,gBAAgB,EAAE,sBAAsB;gBACxC,YAAY,EAAE,KAAK,CAAC,SAAS;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,MAAM,CACJ,sCAAsC,EACtC,wCAAwC,EACzC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACpB,gDAAgD,CAAC;oBAC/C,gBAAgB,EAAE,sBAAsB;oBACxC,KAAK;iBACN,CAAC;gBACF,kDAAkD,CAAC;oBACjD,gBAAgB,EAAE,sBAAsB;oBACxC,KAAK;iBACN,CAAC;aACH,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,KAAK,MAAM,qBAAqB,IAAI,sBAAsB,EAAE,CAAC;gBAC3D,oBAAoB;oBAClB,CAAC,MAAM,2BAA2B,CAAC;wBACjC,sCAAsC;wBACtC,wCAAwC;wBACxC,UAAU;wBACV,uBAAuB;wBACvB,IAAI;wBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,KAAK;wBACL,qBAAqB;wBACrB,KAAK;qBACN,CAAC,CAAC,IAAI,oBAAoB,CAAC;YAChC,CAAC;YACD,qCAAqC,CAAC;gBACpC,UAAU;gBACV,uBAAuB;gBACvB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK;gBACL,sBAAsB;aACvB,CAAC,CAAC;YAEH,IAAI,oBAAoB,EAAE,CAAC;gBACzB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,oBAAoB,GAAG,KAAK,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,oBAAoB,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,wCAAwC,CAC/C,KAAoC,EACpC,UAA2C;IAE3C,OAAO,qCAAqC,CAC1C,+BAA+B,CAAC,KAAK,CAAC,EACtC,UAAU,CACX,CAAC;AACJ,CAAC;AAED,SAAS,0CAA0C,CAAC,KAKnD;IACC,MAAM,iBAAiB,GAAG,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,YAAY,GAChB,iBAAiB,CAAC,SAAS,KAAK,KAAK,CAAC,UAAU,CAAC,SAAS;QAC1D,iBAAiB,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;IAC/D,KAAK,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,uBAAuB,EAAE,CAAC;QACtE,IAAI,CAAC,qCAAqC,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,SAAS;QACX,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAClD,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,2BAA2B,GAA+B,IAAI,GAAG,EAAE,CAAC;IAC1E,MAAM,uBAAuB,GAAuC,IAAI,GAAG,EAAE,CAAC;IAC9E,IAAI,6BAA6B,GAAyB,IAAI,CAAC;IAE/D,MAAM,iBAAiB,GAAG,GAAkB,EAAE;QAC5C,IAAI,6BAA6B,EAAE,CAAC;YAClC,OAAO,6BAA6B,CAAC,IAAI,CACvC,iBAAiB,EACjB,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC1C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EACxC,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,oBAAoB,GAAG,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC;QAC/D,IAAI,oBAAoB,EAAE,CAAC;YACzB,OAAO,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,eAAe,GAAG,2BAA2B,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACxE,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,2BAA2B,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACpD,OAAO,iBAAiB,EAAE,CAAC;QAC7B,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,wCAAwC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,oCAAoC,CAAC;YACvD,IAAI;YACJ,SAAS;SACV,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE;aAClC,IAAI,CAAC,GAAG,EAAE,CACT,+BAA+B,CAAC;YAC9B,UAAU;YACV,uBAAuB;YACvB,IAAI,EAAE,WAAW;YACjB,SAAS;YACT,KAAK,EAAE,2BAA2B;YAClC,KAAK;SACN,CAAC,CACH;aACA,IAAI,CAAC,GAAG,EAAE;YACT,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACjB,0CAA0C,CAAC;oBACzC,UAAU;oBACV,uBAAuB;oBACvB,KAAK,EAAE,2BAA2B;oBAClC,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,CAAC,SAAS,EAAE,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;gBAC/D,0CAA0C,CAAC;oBACzC,UAAU;oBACV,uBAAuB;oBACvB,KAAK,EAAE,2BAA2B;oBAClC,KAAK;iBACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,6BAA6B,KAAK,WAAW,EAAE,CAAC;gBAClD,6BAA6B,GAAG,IAAI,CAAC;YACvC,CAAC;QACH,CAAC,CAAC,CAAC;QACL,6BAA6B,GAAG,WAAW,CAAC;QAC5C,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAC3B,2BAA2B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,SAAS,CACvE,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,qBAAqB,GAAG,CAAC,eAAgC,EAAE,EAAE;QACjE,2BAA2B,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;QACrE,uBAAuB,CAAC,GAAG,CACzB,eAAe,CAAC,EAAE,EAClB,+BAA+B,CAAC,KAAK,CAAC,CACvC,CAAC;QACF,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC,CAAC;IACF,qBAAqB,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,GAAG,CAAC,CAAC;IAC9E,qBAAqB,CAAC,MAAM,GAAG,iBAAiB,CAAC;IACjD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAS7C;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9B,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACxE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3E,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,mCAAmC,CAAC;QACrE,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE;QACzC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;KACrD,CAAC,CAAC;IACH,gFAAgF;IAChF,gFAAgF;IAChF,gFAAgF;IAChF,MAAM,yBAAyB,GAA6B,CAAC,WAAW,EAAE,EAAE;QAC1E,IACE,KAAK,CAAC,2BAA2B;YACjC,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EACvE,CAAC;YACD,eAAe,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC;QAC/C,kBAAkB;QAClB,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;QACL,eAAe,EAAE,yBAAyB;QAC1C,gBAAgB;QAChB,KAAK;KACN,CAAC,CAAC;IACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAChC,MAAM,qBAAqB,CAAC;QAC1B,YAAY;QACZ,QAAQ,EACN,MAAM,CAAC,QAAQ;YACf,0BAA0B,CAAC,KAAK,CAAC;YACjC,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAC/B,2BAA2B;QAC3B,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,gBAAgB;QAChB,KAAK;KACN,CAAC,CAAC;IACH,OAAO,YAAY,CAAC;AACtB,CAAC","sourcesContent":["import { createRuntimePrincipalPolicyWarmer } from \"../../principals/runtimePolicyWarmer\";\nimport { finishRemoteHydration } from \"./completeHydration\";\nimport { createContainerChildIndex } from \"./lanes/childIndex\";\nimport { createContainerParentHydrationQueue } from \"./lanes/parentLaneQueue\";\nimport { cacheRemoteContainerPrincipalPolicies } from \"./principalPolicyCache\";\nimport {\n  canHydrateRemoteContainers,\n  hydrateContainerParentLanes,\n} from \"./remoteContainers/remoteContainerPageHydration\";\nimport {\n  listRemoteContainerIdsWithPendingMetadataUpdates,\n  listRemoteContainerIdsWithPendingStructuralIntents,\n  upsertIsolatedRemoteContainerState,\n} from \"./remoteContainers/remoteContainerState\";\nimport type {\n  QueueContainerParentLane,\n  RemoteContainer,\n  RemoteContainerHydrationHost,\n  RemoteContainerHydrationState,\n  RemoteContainerIngestQueue,\n} from \"./types\";\n\nexport type {\n  ContainerState,\n  PersistContainerStateResult,\n  RemoteContainer,\n  RemoteContainerHydrationHost,\n} from \"./types\";\n\nexport class StaleRemoteHydrationError extends Error {}\n\nexport function createGenerationGuardedHydrationHost(input: {\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n}): RemoteContainerHydrationHost {\n  const assertCurrent = () => {\n    if (!input.isCurrent()) {\n      throw new StaleRemoteHydrationError();\n    }\n  };\n\n  return {\n    persistContainerState: async (\n      containerState,\n      patch,\n      updateView,\n      saveOptions,\n      mutationOptions,\n    ) => {\n      const callerIsCurrent = mutationOptions?.isCurrent;\n      const isCurrent = callerIsCurrent\n        ? () => input.isCurrent() && callerIsCurrent()\n        : input.isCurrent;\n      assertCurrent();\n      const record = await input.host.persistContainerState(\n        containerState,\n        patch,\n        updateView,\n        saveOptions,\n        { ...mutationOptions, isCurrent },\n      );\n      assertCurrent();\n      return record;\n    },\n    ...(input.host.requestDocumentPriming\n      ? {\n          requestDocumentPriming: () => {\n            if (input.isCurrent()) {\n              input.host.requestDocumentPriming?.();\n            }\n          },\n        }\n      : {}),\n    updateSnapshot: () => {\n      if (input.isCurrent()) {\n        input.host.updateSnapshot();\n      }\n    },\n  };\n}\n\ninterface RemoteContainerIngestGeneration {\n  readonly lifecycle: number | undefined;\n  readonly structural: number | undefined;\n}\ntype RemoteContainerIngestGenerationMap = Map<\n  string,\n  RemoteContainerIngestGeneration\n>;\n\nfunction remoteContainerIngestGeneration(\n  state: RemoteContainerHydrationState,\n): RemoteContainerIngestGeneration {\n  return {\n    lifecycle: state.lifecycleGeneration,\n    structural: state.structuralGeneration,\n  };\n}\n\nfunction remoteContainerIngestGenerationsMatch(\n  left: RemoteContainerIngestGeneration | undefined,\n  right: RemoteContainerIngestGeneration,\n): boolean {\n  return (\n    left !== undefined &&\n    left.lifecycle === right.lifecycle &&\n    left.structural === right.structural\n  );\n}\n\nfunction isCurrentQueuedRemoteContainer(\n  generation: RemoteContainerIngestGeneration,\n  generationByContainerId: RemoteContainerIngestGenerationMap,\n  queue: RemoteContainerIngestQueue,\n  remoteContainer: RemoteContainer,\n): boolean {\n  return (\n    queue.get(remoteContainer.id) === remoteContainer &&\n    remoteContainerIngestGenerationsMatch(\n      generationByContainerId.get(remoteContainer.id),\n      generation,\n    )\n  );\n}\n\nasync function upsertQueuedRemoteContainer(input: {\n  containerIdsWithPendingMetadataUpdates: ReadonlySet<string>;\n  containerIdsWithPendingStructuralIntents: ReadonlySet<string>;\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  queuedRemoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}): Promise<boolean> {\n  const {\n    containerIdsWithPendingMetadataUpdates,\n    containerIdsWithPendingStructuralIntents,\n    generation,\n    generationByContainerId,\n    host,\n    queue,\n    queuedRemoteContainer,\n    state,\n  } = input;\n  if (\n    !input.isCurrent() ||\n    !isCurrentQueuedRemoteContainer(\n      generation,\n      generationByContainerId,\n      queue,\n      queuedRemoteContainer,\n    )\n  ) {\n    return false;\n  }\n\n  const tombstones = await state.persistence.loadContainerHydrationTombstones(\n    state.runtime.infra.execSql,\n  );\n  // A refused folder is reported and acknowledged; the batch continues.\n  const upserted = await upsertIsolatedRemoteContainerState({\n    expectedHydrationTombstone:\n      tombstones.find((row) => row.containerId === queuedRemoteContainer.id) ??\n      null,\n    containerIdsWithPendingMetadataUpdates,\n    containerIdsWithPendingStructuralIntents,\n    host,\n    isCurrent: input.isCurrent,\n    remoteContainer: queuedRemoteContainer,\n    state,\n  });\n  if (!upserted) {\n    return false;\n  }\n  return true;\n}\n\nfunction acknowledgeRemoteContainerIngestBatch(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  queuedRemoteContainers: ReadonlyArray<RemoteContainer>;\n}): void {\n  if (!input.isCurrent()) {\n    return;\n  }\n  for (const queuedRemoteContainer of input.queuedRemoteContainers) {\n    if (\n      isCurrentQueuedRemoteContainer(\n        input.generation,\n        input.generationByContainerId,\n        input.queue,\n        queuedRemoteContainer,\n      )\n    ) {\n      input.queue.delete(queuedRemoteContainer.id);\n      input.generationByContainerId.delete(queuedRemoteContainer.id);\n    }\n  }\n}\n\nasync function drainRemoteContainerIngestQueue(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  state: RemoteContainerHydrationState;\n}) {\n  const { generation, generationByContainerId, host, queue, state } = input;\n  let shouldUpdateSnapshot = false;\n\n  try {\n    while (input.isCurrent()) {\n      const queuedRemoteContainers = Array.from(queue.values()).filter(\n        (remoteContainer) =>\n          remoteContainerIngestGenerationsMatch(\n            generationByContainerId.get(remoteContainer.id),\n            generation,\n          ),\n      );\n      if (queuedRemoteContainers.length === 0) {\n        return;\n      }\n      await cacheRemoteContainerPrincipalPolicies({\n        cacheReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(\n          state.runtime,\n        ),\n        remoteContainers: queuedRemoteContainers,\n        stillCurrent: input.isCurrent,\n      });\n      if (!input.isCurrent()) {\n        return;\n      }\n      const [\n        containerIdsWithPendingMetadataUpdates,\n        containerIdsWithPendingStructuralIntents,\n      ] = await Promise.all([\n        listRemoteContainerIdsWithPendingMetadataUpdates({\n          remoteContainers: queuedRemoteContainers,\n          state,\n        }),\n        listRemoteContainerIdsWithPendingStructuralIntents({\n          remoteContainers: queuedRemoteContainers,\n          state,\n        }),\n      ]);\n      if (!input.isCurrent()) {\n        return;\n      }\n\n      for (const queuedRemoteContainer of queuedRemoteContainers) {\n        shouldUpdateSnapshot =\n          (await upsertQueuedRemoteContainer({\n            containerIdsWithPendingMetadataUpdates,\n            containerIdsWithPendingStructuralIntents,\n            generation,\n            generationByContainerId,\n            host,\n            isCurrent: input.isCurrent,\n            queue,\n            queuedRemoteContainer,\n            state,\n          })) || shouldUpdateSnapshot;\n      }\n      acknowledgeRemoteContainerIngestBatch({\n        generation,\n        generationByContainerId,\n        isCurrent: input.isCurrent,\n        queue,\n        queuedRemoteContainers,\n      });\n\n      if (shouldUpdateSnapshot) {\n        host.updateSnapshot();\n        shouldUpdateSnapshot = false;\n      }\n    }\n  } catch (error) {\n    if (shouldUpdateSnapshot) {\n      host.updateSnapshot();\n    }\n    throw error;\n  }\n}\n\nfunction isRemoteContainerIngestGenerationCurrent(\n  state: RemoteContainerHydrationState,\n  generation: RemoteContainerIngestGeneration,\n): boolean {\n  return remoteContainerIngestGenerationsMatch(\n    remoteContainerIngestGeneration(state),\n    generation,\n  );\n}\n\nfunction settleStaleRemoteContainerIngestGeneration(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  queue: RemoteContainerIngestQueue;\n  state: RemoteContainerHydrationState;\n}): void {\n  const currentGeneration = remoteContainerIngestGeneration(input.state);\n  const shouldReplay =\n    currentGeneration.lifecycle !== input.generation.lifecycle &&\n    currentGeneration.structural === input.generation.structural;\n  for (const [containerId, generation] of input.generationByContainerId) {\n    if (!remoteContainerIngestGenerationsMatch(generation, input.generation)) {\n      continue;\n    }\n    if (shouldReplay) {\n      input.generationByContainerId.set(containerId, currentGeneration);\n    } else {\n      input.generationByContainerId.delete(containerId);\n      input.queue.delete(containerId);\n    }\n  }\n}\n\ninterface RemoteContainerIngestor {\n  (remoteContainer: RemoteContainer): Promise<void>;\n  hasPending: () => boolean;\n  resume: () => Promise<void>;\n}\n\nexport function createRemoteContainerIngestor(input: {\n  getSerializationBarrier?: (() => Promise<void> | null) | undefined;\n  host: RemoteContainerHydrationHost;\n  state: RemoteContainerHydrationState;\n}): RemoteContainerIngestor {\n  const { host, state } = input;\n  const pendingRemoteContainersById: RemoteContainerIngestQueue = new Map();\n  const generationByContainerId: RemoteContainerIngestGenerationMap = new Map();\n  let ingestRemoteContainersPromise: Promise<void> | null = null;\n\n  const runNextGeneration = (): Promise<void> => {\n    if (ingestRemoteContainersPromise) {\n      return ingestRemoteContainersPromise.then(\n        runNextGeneration,\n        runNextGeneration,\n      );\n    }\n    if (\n      state.runtime.infra.dbStatus !== undefined &&\n      state.runtime.infra.dbStatus !== \"ready\"\n    ) {\n      return Promise.resolve();\n    }\n    const serializationBarrier = input.getSerializationBarrier?.();\n    if (serializationBarrier) {\n      return serializationBarrier.then(runNextGeneration);\n    }\n    const nextContainerId = pendingRemoteContainersById.keys().next().value;\n    if (typeof nextContainerId !== \"string\") {\n      return Promise.resolve();\n    }\n    const generation = generationByContainerId.get(nextContainerId);\n    if (!generation) {\n      pendingRemoteContainersById.delete(nextContainerId);\n      return runNextGeneration();\n    }\n    const isCurrent = () =>\n      isRemoteContainerIngestGenerationCurrent(state, generation);\n    const guardedHost = createGenerationGuardedHydrationHost({\n      host,\n      isCurrent,\n    });\n    const nextPromise = Promise.resolve()\n      .then(() =>\n        drainRemoteContainerIngestQueue({\n          generation,\n          generationByContainerId,\n          host: guardedHost,\n          isCurrent,\n          queue: pendingRemoteContainersById,\n          state,\n        }),\n      )\n      .then(() => {\n        if (!isCurrent()) {\n          settleStaleRemoteContainerIngestGeneration({\n            generation,\n            generationByContainerId,\n            queue: pendingRemoteContainersById,\n            state,\n          });\n        }\n      })\n      .catch((error: unknown) => {\n        if (!isCurrent() || error instanceof StaleRemoteHydrationError) {\n          settleStaleRemoteContainerIngestGeneration({\n            generation,\n            generationByContainerId,\n            queue: pendingRemoteContainersById,\n            state,\n          });\n          return;\n        }\n        throw error;\n      })\n      .finally(() => {\n        if (ingestRemoteContainersPromise === nextPromise) {\n          ingestRemoteContainersPromise = null;\n        }\n      });\n    ingestRemoteContainersPromise = nextPromise;\n    return nextPromise.then(() =>\n      pendingRemoteContainersById.size > 0 ? runNextGeneration() : undefined,\n    );\n  };\n\n  const ingestRemoteContainer = (remoteContainer: RemoteContainer) => {\n    pendingRemoteContainersById.set(remoteContainer.id, remoteContainer);\n    generationByContainerId.set(\n      remoteContainer.id,\n      remoteContainerIngestGeneration(state),\n    );\n    return runNextGeneration();\n  };\n  ingestRemoteContainer.hasPending = () => pendingRemoteContainersById.size > 0;\n  ingestRemoteContainer.resume = runNextGeneration;\n  return ingestRemoteContainer;\n}\n\nexport async function hydrateRemoteContainers(input: {\n  followDiscoveredParentLanes?: boolean | undefined;\n  host: RemoteContainerHydrationHost;\n  isCurrent?: (() => boolean) | undefined;\n  onFullyHydrated?: (() => Promise<void> | void) | undefined;\n  parentIds?: ReadonlyArray<string | null> | undefined;\n  resetAllLaneWatermarks?: boolean | undefined;\n  resetRootLaneWatermark?: boolean | undefined;\n  state: RemoteContainerHydrationState;\n}): Promise<number> {\n  const { host, state } = input;\n  if (!canHydrateRemoteContainers(state) || input.isCurrent?.() === false) {\n    return 0;\n  }\n\n  const seenContainerIds = new Set<string>();\n  const containerIdsBeforeHydration = new Set(state.containersById.keys());\n  const childIdsByParentId = createContainerChildIndex(state.containersById);\n  const { lanes, queueParentLane } = createContainerParentHydrationQueue({\n    containerIds: state.containersById.keys(),\n    parentIds: input.parentIds,\n    resetAllLaneWatermarks: input.resetAllLaneWatermarks,\n    resetRootLaneWatermark: input.resetRootLaneWatermark,\n  });\n  // Follow child lanes during an explicit recursive crawl or for containers first\n  // discovered in this pass. The latter lets a newly authorized root populate its\n  // descendants immediately, while routine ticks keep known subtrees cache-first.\n  const queueDiscoveredParentLane: QueueContainerParentLane = (containerId) => {\n    if (\n      input.followDiscoveredParentLanes ||\n      (containerId !== null && !containerIdsBeforeHydration.has(containerId))\n    ) {\n      queueParentLane(containerId);\n    }\n  };\n  const result = await hydrateContainerParentLanes({\n    childIdsByParentId,\n    host,\n    isCurrent: input.isCurrent,\n    lanes,\n    queueParentLane: queueDiscoveredParentLane,\n    seenContainerIds,\n    state,\n  });\n  const { changedCount } = result;\n  await finishRemoteHydration({\n    changedCount,\n    complete:\n      result.complete &&\n      canHydrateRemoteContainers(state) &&\n      input.isCurrent?.() !== false,\n    containerIdsBeforeHydration,\n    host,\n    isCurrent: input.isCurrent,\n    onFullyHydrated: input.onFullyHydrated,\n    seenContainerIds,\n    state,\n  });\n  return changedCount;\n}\n"]}

package/workflows/container-contents/remoteHydration/lanes/childIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"childIndex.js","sourceRoot":"","sources":["childIndex.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,wBAAwB,CACtC,kBAAuC,EACvC,WAAmB,EACnB,QAAuB;IAEvB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;IACvE,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1B,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,kBAAuC,EACvC,WAAmB,EACnB,QAAuB;IAEvB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC7B,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACxB,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,kBAAmD,EACnD,WAAmB,EACnB,gBAA+B,EAC/B,YAA2B;IAE3B,IAAI,CAAC,kBAAkB,IAAI,gBAAgB,KAAK,YAAY,EAAE,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,2BAA2B,CACzB,kBAAkB,EAClB,WAAW,EACX,gBAAgB,CACjB,CAAC;IACF,wBAAwB,CAAC,kBAAkB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,cAAmD;IAEnD,MAAM,kBAAkB,GAAwB,IAAI,GAAG,EAAE,CAAC;IAE1D,KAAK,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,IAAI,cAAc,EAAE,CAAC;QAC3D,wBAAwB,CACtB,kBAAkB,EAClB,WAAW,EACX,cAAc,CAAC,SAAS,CAAC,QAAQ,CAClC,CAAC;IACJ,CAAC;IAED,OAAO,kBAAkB,CAAC;AAC5B,CAAC","sourcesContent":["import type { ContainerChildIndex, ContainerState } from \"../types\";\n\nexport function addIndexedContainerChild(\n  childIdsByParentId: ContainerChildIndex,\n  containerId: string,\n  parentId: string | null,\n) {\n  if (parentId === null) {\n    return;\n  }\n\n  const childIds = childIdsByParentId.get(parentId) ?? new Set<string>();\n  childIds.add(containerId);\n  childIdsByParentId.set(parentId, childIds);\n}\n\nexport function removeIndexedContainerChild(\n  childIdsByParentId: ContainerChildIndex,\n  containerId: string,\n  parentId: string | null,\n) {\n  if (parentId === null) {\n    return;\n  }\n\n  const childIds = childIdsByParentId.get(parentId);\n  if (!childIds) {\n    return;\n  }\n\n  childIds.delete(containerId);\n  if (childIds.size === 0) {\n    childIdsByParentId.delete(parentId);\n  }\n}\n\nexport function moveIndexedContainerChild(\n  childIdsByParentId: ContainerChildIndex | undefined,\n  containerId: string,\n  previousParentId: string | null,\n  nextParentId: string | null,\n) {\n  if (!childIdsByParentId || previousParentId === nextParentId) {\n    return;\n  }\n\n  removeIndexedContainerChild(\n    childIdsByParentId,\n    containerId,\n    previousParentId,\n  );\n  addIndexedContainerChild(childIdsByParentId, containerId, nextParentId);\n}\n\nexport function createContainerChildIndex(\n  containersById: ReadonlyMap<string, ContainerState>,\n): ContainerChildIndex {\n  const childIdsByParentId: ContainerChildIndex = new Map();\n\n  for (const [containerId, containerState] of containersById) {\n    addIndexedContainerChild(\n      childIdsByParentId,\n      containerId,\n      containerState.container.parentId,\n    );\n  }\n\n  return childIdsByParentId;\n}\n"]}

package/workflows/container-contents/remoteHydration/lanes/laneFetchMarkers.js

@@ -0,0 +1,21 @@
+import { recordContainerSyncLaneFetchIfCurrent, } from "../../containerPersistence.js";
+export async function markContainerParentLaneFetched(input) {
+    const { response, state, syncLane } = input;
+    if (response.hasMore && !response.nextWatermark) {
+        return false;
+    }
+    // A check marker suppresses startup polling, so record it only after the
+    // server confirms this parent lane is fully drained. The cursor and marker
+    // share one row and land in one guarded statement.
+    const recorded = await recordContainerSyncLaneFetchIfCurrent(state.runtime.infra.execSql, syncLane, { checked: !response.hasMore, watermark: response.nextWatermark }, input.isCurrent);
+    if (!recorded || input.isCurrent?.() === false) {
+        return false;
+    }
+    if (!response.hasMore &&
+        syncLane.kind === "container_parent" &&
+        syncLane.parentId === null) {
+        state.rootLaneHydrated = true;
+    }
+    return true;
+}
+//# sourceMappingURL=laneFetchMarkers.js.map

package/workflows/container-contents/remoteHydration/lanes/laneFetchMarkers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"laneFetchMarkers.js","sourceRoot":"","sources":["laneFetchMarkers.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,qCAAqC,GACtC,MAAM,4BAA4B,CAAC;AAGpC,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAKpD;IACC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC5C,IAAI,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yEAAyE;IACzE,2EAA2E;IAC3E,mDAAmD;IACnD,MAAM,QAAQ,GAAG,MAAM,qCAAqC,CAC1D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,QAAQ,EACR,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,aAAa,EAAE,EACjE,KAAK,CAAC,SAAS,CAChB,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,CAAC,QAAQ,CAAC,OAAO;QACjB,QAAQ,CAAC,IAAI,KAAK,kBAAkB;QACpC,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAC1B,CAAC;QACD,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAChC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { ListContainersResponse } from \"@tearleads/validators/response\";\nimport {\n  type ContainerSyncWatermarkLane,\n  recordContainerSyncLaneFetchIfCurrent,\n} from \"../../containerPersistence\";\nimport type { RemoteContainerHydrationState } from \"../types\";\n\nexport async function markContainerParentLaneFetched(input: {\n  isCurrent?: (() => boolean) | undefined;\n  response: ListContainersResponse;\n  state: RemoteContainerHydrationState;\n  syncLane: ContainerSyncWatermarkLane;\n}): Promise<boolean> {\n  const { response, state, syncLane } = input;\n  if (response.hasMore && !response.nextWatermark) {\n    return false;\n  }\n\n  // A check marker suppresses startup polling, so record it only after the\n  // server confirms this parent lane is fully drained. The cursor and marker\n  // share one row and land in one guarded statement.\n  const recorded = await recordContainerSyncLaneFetchIfCurrent(\n    state.runtime.infra.execSql,\n    syncLane,\n    { checked: !response.hasMore, watermark: response.nextWatermark },\n    input.isCurrent,\n  );\n  if (!recorded || input.isCurrent?.() === false) {\n    return false;\n  }\n  if (\n    !response.hasMore &&\n    syncLane.kind === \"container_parent\" &&\n    syncLane.parentId === null\n  ) {\n    state.rootLaneHydrated = true;\n  }\n\n  return true;\n}\n"]}