@tearleads/client-sdk 0.1.62 → 0.1.64

package/workflows/container-contents/remoteHydration/tombstoneApplication.js.map

@@ -1 +1 @@
-{"version":3,"file":"tombstoneApplication.js","sourceRoot":"","sources":["tombstoneApplication.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAQ9D,SAAS,wBAAwB,CAC/B,KAAmD;IAEnD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAyC,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACnD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,6BAA6B,CACpC,UAAiD;IAEjD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkC,CAAC;IACnE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,SAAS,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC5D,IACE,CAAC,OAAO;YACR,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS;YACvC,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;gBACxC,OAAO,CAAC,MAAM,KAAK,gBAAgB;gBACnC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,EACjC,CAAC;YACD,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAS,gCAAgC,CACvC,QAAgC;IAEhC,MAAM,WAAW,GAAG,wBAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,KAAK,CAAC,IAAI,CACf,6BAA6B,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAC5D,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QACrB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACpD,OAAO,CACL,CAAC,IAAI;YACL,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS;YACpC,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAC3E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,QAAgC;IAEhC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5E,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChD,OAAO,CACL,CAAC,SAAS;YACV,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YACpC,CAAC,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;gBACrC,SAAS,CAAC,MAAM,KAAK,gBAAgB,CAAC,CACzC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,KAO7C;IACC,MAAM,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,EACL,SAAS,GACV,GAAG,KAAK,CAAC;IACV,MAAM,EACJ,qBAAqB,EACrB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,GACpB,GAAG,wBAAwB,CAAC;QAC3B,kBAAkB;QAClB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,qBAAqB;QACrB,UAAU,EAAE,CAAC,SAAS,CAAC;KACxB,CAAC,CAAC;IACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;QACnC,GAAG,mBAAmB;QACtB,GAAG,yBAAyB;QAC5B,GAAG,qBAAqB;KACzB,CAAC,CAAC;IACH,KAAK,MAAM,WAAW,IAAI,oBAAoB,EAAE,CAAC;QAC/C,IACE,CAAC,gCAAgC,CAAC;YAChC,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC;YACnD,mBAAmB,EACjB,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,WAAW;SACxD,CAAC,EACF,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAClE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B;QACE,GAAG,mBAAmB;QACtB,GAAG,yBAAyB;QAC5B,GAAG,qBAAqB;KACzB,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;QACxB,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,CAAC,CAAC,EACF;QACE,aAAa,EAAE,IAAI;QACnB,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACrE,WAAW;YACX,iBAAiB,EACf,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,IAAI,IAAI;SAC9D,CAAC,CAAC;QACH,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CACF,CAAC;IACF,IAAI,mBAAmB,CAAC,MAAM,KAAK,oBAAoB,CAAC,IAAI,EAAE,CAAC;QAC7D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,mBAAmB,EAAE,CAAC;QAC9C,MAAM,QAAQ,GACZ,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC;QACpE,2BAA2B,CAAC,kBAAkB,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACvE,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,mBAAmB,CAAC,MAAM;QACxC,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAO9C;IACC,MAAM,UAAU,GAAG,gCAAgC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAC7D,OAAO;YACL,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;SACvC,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CACrD,CAAC;IACF,MAAM,gBAAgB,GAAG,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;YAClC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5D,CAAC;QACD,yEAAyE;QACzE,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;YACpC,GAAG,gBAAgB;YACnB,GAAG,gBAAgB;YACnB,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CACxD,KAAK,CAAC,SAAS,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CACxD,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC;SAC5C,CAAC,CAAC;QACH,IACE,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,SAAS;aAC7D,kBAAkB,KAAK,IAAI,EAC9B,CAAC;YACD,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC;YAClD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,qBAAqB;YACrB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS;SACV,CAAC,CAAC;QACH,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;QACpC,SAAS,GAAG,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC","sourcesContent":["import type {\n  ContainerSyncTombstone,\n  ListContainersResponse,\n} from \"@tearleads/validators/response\";\nimport { isCanonicalSignedAt } from \"@tearleads/validators/util\";\nimport { removeIndexedContainerChild } from \"./childIndex\";\nimport { containerStateMatchesFingerprint } from \"./containerStateFingerprint\";\nimport { collectRemovedContainers } from \"./tombstoneReasons\";\nimport type {\n  ContainerChildIndex,\n  ExpectedContainerState,\n  ListedRemoteContainerPageItem,\n  RemoteContainerHydrationState,\n} from \"./types\";\n\nfunction latestContainerItemsById(\n  items: ReadonlyArray<ListedRemoteContainerPageItem>,\n): Map<string, ListedRemoteContainerPageItem> {\n  const latestItems = new Map<string, ListedRemoteContainerPageItem>();\n  for (const item of items) {\n    const current = latestItems.get(item.id);\n    if (!current || current.updatedAt < item.updatedAt) {\n      latestItems.set(item.id, item);\n    }\n  }\n\n  return latestItems;\n}\n\nfunction latestContainerTombstonesById(\n  tombstones: ReadonlyArray<ContainerSyncTombstone>,\n): Map<string, ContainerSyncTombstone> {\n  const latestTombstones = new Map<string, ContainerSyncTombstone>();\n  for (const tombstone of tombstones) {\n    if (!isCanonicalSignedAt(tombstone.updatedAt))\n      throw new Error(\"Container tombstone timestamp is not canonical\");\n    const current = latestTombstones.get(tombstone.containerId);\n    if (\n      !current ||\n      current.updatedAt < tombstone.updatedAt ||\n      (current.updatedAt === tombstone.updatedAt &&\n        current.reason === \"access_revoked\" &&\n        tombstone.reason === \"deleted\")\n    ) {\n      latestTombstones.set(tombstone.containerId, tombstone);\n    }\n  }\n\n  return latestTombstones;\n}\n\nfunction getApplicableContainerTombstones(\n  response: ListContainersResponse,\n): ContainerSyncTombstone[] {\n  const latestItems = latestContainerItemsById(response.items);\n  return Array.from(\n    latestContainerTombstonesById(response.tombstones).values(),\n  ).filter((tombstone) => {\n    const item = latestItems.get(tombstone.containerId);\n    return (\n      !item ||\n      item.updatedAt < tombstone.updatedAt ||\n      (item.updatedAt === tombstone.updatedAt && tombstone.reason === \"deleted\")\n    );\n  });\n}\n\nexport function getApplicableRemoteContainerItems(\n  response: ListContainersResponse,\n): ListedRemoteContainerPageItem[] {\n  const latestTombstones = latestContainerTombstonesById(response.tombstones);\n  return response.items.filter((item) => {\n    const tombstone = latestTombstones.get(item.id);\n    return (\n      !tombstone ||\n      tombstone.updatedAt < item.updatedAt ||\n      (tombstone.updatedAt === item.updatedAt &&\n        tombstone.reason === \"access_revoked\")\n    );\n  });\n}\n\nasync function applyContainerTombstoneCascade(input: {\n  childIdsByParentId: ContainerChildIndex;\n  expectedContainerStates: ReadonlyMap<string, ExpectedContainerState>;\n  isCurrent?: (() => boolean) | undefined;\n  preservedContainerIds: ReadonlySet<string>;\n  state: RemoteContainerHydrationState;\n  tombstone: ContainerSyncTombstone;\n}): Promise<{ current: boolean; removedCount: number; settled: boolean }> {\n  const {\n    childIdsByParentId,\n    expectedContainerStates,\n    preservedContainerIds,\n    state,\n    tombstone,\n  } = input;\n  const {\n    fenceOnlyContainerIds,\n    absentDeletedContainerIds,\n    removalByContainerId,\n    removedContainerIds,\n  } = collectRemovedContainers({\n    childIdsByParentId,\n    containersById: state.containersById,\n    preservedContainerIds,\n    tombstones: [tombstone],\n  });\n  const affectedContainerIds = new Set([\n    ...removedContainerIds,\n    ...absentDeletedContainerIds,\n    ...fenceOnlyContainerIds,\n  ]);\n  for (const containerId of affectedContainerIds) {\n    if (\n      !containerStateMatchesFingerprint({\n        currentState: state.containersById.get(containerId),\n        expectedFingerprint:\n          expectedContainerStates.get(containerId)?.fingerprint,\n      })\n    ) {\n      return { current: true, removedCount: 0, settled: false };\n    }\n  }\n\n  const deletedContainerIds = await state.persistence.deleteContainers(\n    state.runtime.infra.execSql,\n    [\n      ...removedContainerIds,\n      ...absentDeletedContainerIds,\n      ...fenceOnlyContainerIds,\n    ].flatMap((containerId) => {\n      const removal = removalByContainerId.get(containerId);\n      return removal ? [{ containerId, ...removal }] : [];\n    }),\n    {\n      discoveryOnly: true,\n      expectedContainers: Array.from(affectedContainerIds, (containerId) => ({\n        containerId,\n        expectedContainer:\n          expectedContainerStates.get(containerId)?.container ?? null,\n      })),\n      stillCurrent: input.isCurrent,\n    },\n  );\n  if (deletedContainerIds.length !== affectedContainerIds.size) {\n    return { current: true, removedCount: 0, settled: false };\n  }\n  if (input.isCurrent?.() === false) {\n    return { current: false, removedCount: 0, settled: false };\n  }\n  for (const containerId of removedContainerIds) {\n    const parentId =\n      state.containersById.get(containerId)?.container.parentId ?? null;\n    removeIndexedContainerChild(childIdsByParentId, containerId, parentId);\n    childIdsByParentId.delete(containerId);\n    state.containersById.delete(containerId);\n  }\n\n  return {\n    current: true,\n    removedCount: removedContainerIds.length,\n    settled: true,\n  };\n}\n\nexport async function applyContainerTombstones(input: {\n  childIdsByParentId: ContainerChildIndex;\n  expectedContainerStates: ReadonlyMap<string, ExpectedContainerState>;\n  isCurrent?: (() => boolean) | undefined;\n  remoteContainerItems: ReadonlyArray<ListedRemoteContainerPageItem>;\n  response: ListContainersResponse;\n  state: RemoteContainerHydrationState;\n}): Promise<{ changedCount: number; completed: boolean; current: boolean }> {\n  const tombstones = getApplicableContainerTombstones(input.response);\n  if (tombstones.length === 0 || input.isCurrent?.() === false) {\n    return {\n      changedCount: 0,\n      completed: true,\n      current: input.isCurrent?.() !== false,\n    };\n  }\n\n  const tombstoneRootIds = new Set(\n    tombstones.map((tombstone) => tombstone.containerId),\n  );\n  const liveContainerIds = input.remoteContainerItems.map((item) => item.id);\n  let changedCount = 0;\n  let completed = true;\n  for (const tombstone of tombstones) {\n    if (input.isCurrent?.() === false) {\n      return { changedCount, completed: false, current: false };\n    }\n    // Apply each root as its own CAS-protected cascade. Other explicit roots\n    // stay out of this cascade so their own reason wins and one stale root\n    // cannot block independent tombstones or live items on the page.\n    const preservedContainerIds = new Set([\n      ...liveContainerIds,\n      ...tombstoneRootIds,\n      ...Array.from(input.state.containersById, ([id, state]) =>\n        state.container.metadataDocumentId === null ? id : null,\n      ).filter((id): id is string => id !== null),\n    ]);\n    if (\n      input.state.containersById.get(tombstone.containerId)?.container\n        .metadataDocumentId !== null\n    ) {\n      preservedContainerIds.delete(tombstone.containerId);\n    }\n    const result = await applyContainerTombstoneCascade({\n      childIdsByParentId: input.childIdsByParentId,\n      expectedContainerStates: input.expectedContainerStates,\n      isCurrent: input.isCurrent,\n      preservedContainerIds,\n      state: input.state,\n      tombstone,\n    });\n    changedCount += result.removedCount;\n    completed = completed && result.settled;\n    if (!result.current) {\n      return { changedCount, completed: false, current: false };\n    }\n  }\n\n  return { changedCount, completed, current: true };\n}\n"]}
+{"version":3,"file":"tombstoneApplication.js","sourceRoot":"","sources":["tombstoneApplication.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,gCAAgC,EAAE,MAAM,8CAA8C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAQ9D,SAAS,wBAAwB,CAC/B,KAAmD;IAEnD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAyC,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACnD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,6BAA6B,CACpC,UAAiD;IAEjD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkC,CAAC;IACnE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,SAAS,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC5D,IACE,CAAC,OAAO;YACR,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS;YACvC,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;gBACxC,OAAO,CAAC,MAAM,KAAK,gBAAgB;gBACnC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,EACjC,CAAC;YACD,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAS,gCAAgC,CACvC,QAAgC;IAEhC,MAAM,WAAW,GAAG,wBAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,KAAK,CAAC,IAAI,CACf,6BAA6B,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAC5D,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QACrB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACpD,OAAO,CACL,CAAC,IAAI;YACL,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS;YACpC,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAC3E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,QAAgC;IAEhC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5E,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChD,OAAO,CACL,CAAC,SAAS;YACV,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YACpC,CAAC,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;gBACrC,SAAS,CAAC,MAAM,KAAK,gBAAgB,CAAC,CACzC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,KAO7C;IACC,MAAM,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,EACL,SAAS,GACV,GAAG,KAAK,CAAC;IACV,MAAM,EACJ,qBAAqB,EACrB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,GACpB,GAAG,wBAAwB,CAAC;QAC3B,kBAAkB;QAClB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,qBAAqB;QACrB,UAAU,EAAE,CAAC,SAAS,CAAC;KACxB,CAAC,CAAC;IACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;QACnC,GAAG,mBAAmB;QACtB,GAAG,yBAAyB;QAC5B,GAAG,qBAAqB;KACzB,CAAC,CAAC;IACH,KAAK,MAAM,WAAW,IAAI,oBAAoB,EAAE,CAAC;QAC/C,IACE,CAAC,gCAAgC,CAAC;YAChC,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC;YACnD,mBAAmB,EACjB,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,WAAW;SACxD,CAAC,EACF,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAClE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B;QACE,GAAG,mBAAmB;QACtB,GAAG,yBAAyB;QAC5B,GAAG,qBAAqB;KACzB,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;QACxB,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,CAAC,CAAC,EACF;QACE,aAAa,EAAE,IAAI;QACnB,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACrE,WAAW;YACX,iBAAiB,EACf,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,IAAI,IAAI;SAC9D,CAAC,CAAC;QACH,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CACF,CAAC;IACF,IAAI,mBAAmB,CAAC,MAAM,KAAK,oBAAoB,CAAC,IAAI,EAAE,CAAC;QAC7D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,mBAAmB,EAAE,CAAC;QAC9C,MAAM,QAAQ,GACZ,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC;QACpE,2BAA2B,CAAC,kBAAkB,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACvE,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,mBAAmB,CAAC,MAAM;QACxC,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAO9C;IACC,MAAM,UAAU,GAAG,gCAAgC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAC7D,OAAO;YACL,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;SACvC,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CACrD,CAAC;IACF,MAAM,gBAAgB,GAAG,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;YAClC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5D,CAAC;QACD,yEAAyE;QACzE,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;YACpC,GAAG,gBAAgB;YACnB,GAAG,gBAAgB;YACnB,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CACxD,KAAK,CAAC,SAAS,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CACxD,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC;SAC5C,CAAC,CAAC;QACH,IACE,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,SAAS;aAC7D,kBAAkB,KAAK,IAAI,EAC9B,CAAC;YACD,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC;YAClD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,qBAAqB;YACrB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS;SACV,CAAC,CAAC;QACH,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;QACpC,SAAS,GAAG,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC","sourcesContent":["import type {\n  ContainerSyncTombstone,\n  ListContainersResponse,\n} from \"@tearleads/validators/response\";\nimport { isCanonicalSignedAt } from \"@tearleads/validators/util\";\nimport { removeIndexedContainerChild } from \"./lanes/childIndex\";\nimport { containerStateMatchesFingerprint } from \"./remoteContainers/containerStateFingerprint\";\nimport { collectRemovedContainers } from \"./tombstoneReasons\";\nimport type {\n  ContainerChildIndex,\n  ExpectedContainerState,\n  ListedRemoteContainerPageItem,\n  RemoteContainerHydrationState,\n} from \"./types\";\n\nfunction latestContainerItemsById(\n  items: ReadonlyArray<ListedRemoteContainerPageItem>,\n): Map<string, ListedRemoteContainerPageItem> {\n  const latestItems = new Map<string, ListedRemoteContainerPageItem>();\n  for (const item of items) {\n    const current = latestItems.get(item.id);\n    if (!current || current.updatedAt < item.updatedAt) {\n      latestItems.set(item.id, item);\n    }\n  }\n\n  return latestItems;\n}\n\nfunction latestContainerTombstonesById(\n  tombstones: ReadonlyArray<ContainerSyncTombstone>,\n): Map<string, ContainerSyncTombstone> {\n  const latestTombstones = new Map<string, ContainerSyncTombstone>();\n  for (const tombstone of tombstones) {\n    if (!isCanonicalSignedAt(tombstone.updatedAt))\n      throw new Error(\"Container tombstone timestamp is not canonical\");\n    const current = latestTombstones.get(tombstone.containerId);\n    if (\n      !current ||\n      current.updatedAt < tombstone.updatedAt ||\n      (current.updatedAt === tombstone.updatedAt &&\n        current.reason === \"access_revoked\" &&\n        tombstone.reason === \"deleted\")\n    ) {\n      latestTombstones.set(tombstone.containerId, tombstone);\n    }\n  }\n\n  return latestTombstones;\n}\n\nfunction getApplicableContainerTombstones(\n  response: ListContainersResponse,\n): ContainerSyncTombstone[] {\n  const latestItems = latestContainerItemsById(response.items);\n  return Array.from(\n    latestContainerTombstonesById(response.tombstones).values(),\n  ).filter((tombstone) => {\n    const item = latestItems.get(tombstone.containerId);\n    return (\n      !item ||\n      item.updatedAt < tombstone.updatedAt ||\n      (item.updatedAt === tombstone.updatedAt && tombstone.reason === \"deleted\")\n    );\n  });\n}\n\nexport function getApplicableRemoteContainerItems(\n  response: ListContainersResponse,\n): ListedRemoteContainerPageItem[] {\n  const latestTombstones = latestContainerTombstonesById(response.tombstones);\n  return response.items.filter((item) => {\n    const tombstone = latestTombstones.get(item.id);\n    return (\n      !tombstone ||\n      tombstone.updatedAt < item.updatedAt ||\n      (tombstone.updatedAt === item.updatedAt &&\n        tombstone.reason === \"access_revoked\")\n    );\n  });\n}\n\nasync function applyContainerTombstoneCascade(input: {\n  childIdsByParentId: ContainerChildIndex;\n  expectedContainerStates: ReadonlyMap<string, ExpectedContainerState>;\n  isCurrent?: (() => boolean) | undefined;\n  preservedContainerIds: ReadonlySet<string>;\n  state: RemoteContainerHydrationState;\n  tombstone: ContainerSyncTombstone;\n}): Promise<{ current: boolean; removedCount: number; settled: boolean }> {\n  const {\n    childIdsByParentId,\n    expectedContainerStates,\n    preservedContainerIds,\n    state,\n    tombstone,\n  } = input;\n  const {\n    fenceOnlyContainerIds,\n    absentDeletedContainerIds,\n    removalByContainerId,\n    removedContainerIds,\n  } = collectRemovedContainers({\n    childIdsByParentId,\n    containersById: state.containersById,\n    preservedContainerIds,\n    tombstones: [tombstone],\n  });\n  const affectedContainerIds = new Set([\n    ...removedContainerIds,\n    ...absentDeletedContainerIds,\n    ...fenceOnlyContainerIds,\n  ]);\n  for (const containerId of affectedContainerIds) {\n    if (\n      !containerStateMatchesFingerprint({\n        currentState: state.containersById.get(containerId),\n        expectedFingerprint:\n          expectedContainerStates.get(containerId)?.fingerprint,\n      })\n    ) {\n      return { current: true, removedCount: 0, settled: false };\n    }\n  }\n\n  const deletedContainerIds = await state.persistence.deleteContainers(\n    state.runtime.infra.execSql,\n    [\n      ...removedContainerIds,\n      ...absentDeletedContainerIds,\n      ...fenceOnlyContainerIds,\n    ].flatMap((containerId) => {\n      const removal = removalByContainerId.get(containerId);\n      return removal ? [{ containerId, ...removal }] : [];\n    }),\n    {\n      discoveryOnly: true,\n      expectedContainers: Array.from(affectedContainerIds, (containerId) => ({\n        containerId,\n        expectedContainer:\n          expectedContainerStates.get(containerId)?.container ?? null,\n      })),\n      stillCurrent: input.isCurrent,\n    },\n  );\n  if (deletedContainerIds.length !== affectedContainerIds.size) {\n    return { current: true, removedCount: 0, settled: false };\n  }\n  if (input.isCurrent?.() === false) {\n    return { current: false, removedCount: 0, settled: false };\n  }\n  for (const containerId of removedContainerIds) {\n    const parentId =\n      state.containersById.get(containerId)?.container.parentId ?? null;\n    removeIndexedContainerChild(childIdsByParentId, containerId, parentId);\n    childIdsByParentId.delete(containerId);\n    state.containersById.delete(containerId);\n  }\n\n  return {\n    current: true,\n    removedCount: removedContainerIds.length,\n    settled: true,\n  };\n}\n\nexport async function applyContainerTombstones(input: {\n  childIdsByParentId: ContainerChildIndex;\n  expectedContainerStates: ReadonlyMap<string, ExpectedContainerState>;\n  isCurrent?: (() => boolean) | undefined;\n  remoteContainerItems: ReadonlyArray<ListedRemoteContainerPageItem>;\n  response: ListContainersResponse;\n  state: RemoteContainerHydrationState;\n}): Promise<{ changedCount: number; completed: boolean; current: boolean }> {\n  const tombstones = getApplicableContainerTombstones(input.response);\n  if (tombstones.length === 0 || input.isCurrent?.() === false) {\n    return {\n      changedCount: 0,\n      completed: true,\n      current: input.isCurrent?.() !== false,\n    };\n  }\n\n  const tombstoneRootIds = new Set(\n    tombstones.map((tombstone) => tombstone.containerId),\n  );\n  const liveContainerIds = input.remoteContainerItems.map((item) => item.id);\n  let changedCount = 0;\n  let completed = true;\n  for (const tombstone of tombstones) {\n    if (input.isCurrent?.() === false) {\n      return { changedCount, completed: false, current: false };\n    }\n    // Apply each root as its own CAS-protected cascade. Other explicit roots\n    // stay out of this cascade so their own reason wins and one stale root\n    // cannot block independent tombstones or live items on the page.\n    const preservedContainerIds = new Set([\n      ...liveContainerIds,\n      ...tombstoneRootIds,\n      ...Array.from(input.state.containersById, ([id, state]) =>\n        state.container.metadataDocumentId === null ? id : null,\n      ).filter((id): id is string => id !== null),\n    ]);\n    if (\n      input.state.containersById.get(tombstone.containerId)?.container\n        .metadataDocumentId !== null\n    ) {\n      preservedContainerIds.delete(tombstone.containerId);\n    }\n    const result = await applyContainerTombstoneCascade({\n      childIdsByParentId: input.childIdsByParentId,\n      expectedContainerStates: input.expectedContainerStates,\n      isCurrent: input.isCurrent,\n      preservedContainerIds,\n      state: input.state,\n      tombstone,\n    });\n    changedCount += result.removedCount;\n    completed = completed && result.settled;\n    if (!result.current) {\n      return { changedCount, completed: false, current: false };\n    }\n  }\n\n  return { changedCount, completed, current: true };\n}\n"]}

package/workflows/container-contents/tombstones/documentPurge.d.ts

@@ -2,7 +2,7 @@ import type { DocumentPurgeResponse } from "../../../internal/validators/respons
 import type { StoredDocumentKind } from "../../../data/documents/documentKinds.js";
 import type { ProjectionUserKeyResolver } from "../../../data/keyingProjectionVerification/index.js";
 import { type DocumentsPersistence, deletePersistedDocument } from "../../documents/index.js";
-import type { SubtreePurgeRoot } from "../../documents/subtreePurgeScope.js";
+import type { SubtreePurgeRoot } from "../../documents/purge/subtreePurgeScope.js";
 import type { ContainerContentsWorkflowRuntime } from "../runtime.js";
 type ContainerDocumentPurgeApi = Pick<ContainerContentsWorkflowRuntime["apiClient"], "getPrincipalPolicyPages" | "getProjectionPolicyHistoryPages" | "getDocumentPurgeProof" | "getDocumentWriterProjectionResult" | "purgeDocument">;
 type DocumentPurgeResult = DocumentPurgeResponse | {

package/workflows/container-contents/tombstones/documentPurge.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentPurge.js","sourceRoot":"","sources":["documentPurge.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,uCAAuC,EAAE,MAAM,kDAAkD,CAAC;AAC3G,OAAO,EAAE,sCAAsC,EAAE,MAAM,kDAAkD,CAAC;AAC1G,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAEL,2BAA2B,EAC3B,uBAAuB,EACvB,mBAAmB,EACnB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,oCAAoC,EAAE,MAAM,6BAA6B,CAAC;AAEnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AA6C1F,KAAK,UAAU,yBAAyB,CAAC,KASxC;IACC,OAAO,KAAK,CAAC,WAAW,CAAC,8BAA8B,CACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,EAChB,KAAK,EAAE,kBAAkB,EAAE,EAAE;QAC3B,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,oCAAoC,CAC/E;YACE,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,KAAK,CAAC,MAAM;SACtB,CACF,CAAC;QACF,MAAM,KAAK,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACnD,CAAC,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAS1C;IACC,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,oCAAoC,CAAC;QACzC,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB;QAC1D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;KACrC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CACzD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,KAAK,CAAC,MAAM,CACb,CAAC;IACF,IAAI,cAAc,IAAI,cAAc,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,cAAc;QAC5B,CAAC,CAAC,MAAM,uBAAuB,CAAC;YAC5B,yBAAyB,EAAE,KAAK,CAAC,gBAAgB;YACjD,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB;YAC1D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACpC,cAAc;YACd,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;QACJ,CAAC,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAAwC;IAExC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC9C,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,2BAA2B,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,mDAAmD,CACtG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;YACzC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM;YACN,UAAU;YACV,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,eAAe,EAAE,KAAK,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE;gBAC9C,OAAO,GAAG,MAAM,2BAA2B,CAAC;oBAC1C,gBAAgB;oBAChB,UAAU;oBACV,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,MAAM;oBACN,WAAW;oBACX,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YACD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,+BAA+B,EAC7B,kCAAkC,CAAC,OAAO,CAAC;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,cAAc,UAAU,GAAG,CAC9E,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,mCAAmC,MAAM,cAAc,UAAU,GAAG,CACrE,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,8DAA8D;QAC9D,sCAAsC,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,uCAAuC,CAC3C,KAAK,EACL,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,gBAAgB;SAC5B,CACF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,cAAc,UAAU,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAQjD;IACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAClC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,2BAA2B,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,MAAM,WAAW,CAAC,YAAY,CACnD,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,MAAM,CACP,CAAC;QACF,IACE,CAAC,cAAc;YACf,cAAc,CAAC,UAAU,KAAK,IAAI;YAClC,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS;gBACtC,cAAc,CAAC,WAAW,KAAK,KAAK,CAAC,mBAAmB,CAAC,EAC3D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,yDAAyD,MAAM,wCAAwC,CACxG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;YAC5C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;YAC1D,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,kBAAkB;YACpD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,cAAc;YACd,OAAO,EAAE,MAAM;YACf,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,yDAAyD,MAAM,+BAA+B,CAC/F,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAC;QACzE,OAAO;YACL,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,wBAAwB,EAAE,EAAE;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,uDAAuD,MAAM,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CACxF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import type { DocumentPurgeResponse } from \"@tearleads/validators/response\";\nimport type { StoredDocumentKind } from \"../../../data/documents/documentKinds\";\nimport type { ProjectionUserKeyResolver } from \"../../../data/keyingProjectionVerification\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../../data/keyingProjectionVerification/error\";\nimport { rethrowProjectionVerificationCancelled } from \"../../../data/keyingProjectionVerification/types\";\nimport { errorMessage } from \"../../../data/shared/errorMessage\";\nimport {\n  type DocumentsPersistence,\n  defaultDocumentsPersistence,\n  deletePersistedDocument,\n  purgeRemoteDocument,\n  reclaimDocumentOrphanBlobs,\n  resolveDocumentCreateAuthor,\n} from \"../../documents\";\nimport { ensureDocumentClientProjectionTables } from \"../../documents/persistence\";\nimport type { SubtreePurgeRoot } from \"../../documents/subtreePurgeScope\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../principals/runtimePolicyWarmer\";\nimport type { ContainerContentsWorkflowRuntime } from \"../runtime\";\n\ntype ContainerDocumentPurgeApi = Pick<\n  ContainerContentsWorkflowRuntime[\"apiClient\"],\n  | \"getPrincipalPolicyPages\"\n  | \"getProjectionPolicyHistoryPages\"\n  | \"getDocumentPurgeProof\"\n  | \"getDocumentWriterProjectionResult\"\n  | \"purgeDocument\"\n>;\ntype DocumentPurgeResult =\n  | DocumentPurgeResponse\n  | {\n      readonly documentId: string;\n      readonly purgedAt: string;\n      readonly reclaimedBlobStorageKeys: readonly string[];\n    }\n  | null;\n\ninterface ContainerDocumentPurgeRuntime\n  extends Pick<\n    ContainerContentsWorkflowRuntime,\n    | \"auth\"\n    | \"crypto\"\n    | \"infra\"\n    | \"resolveTrustedUserIdentity\"\n    | \"state\"\n    | \"util\"\n  > {\n  apiClient: ContainerDocumentPurgeApi;\n}\n\ninterface PurgeRemoteContainerDocumentInput {\n  beforeSubmit?: (() => Promise<boolean>) | undefined;\n  documentId: string;\n  expectedSubtreeRoot?: SubtreePurgeRoot | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  documentKind: StoredDocumentKind;\n  noteId: string;\n  persistence?: DocumentsPersistence | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  runtime: ContainerDocumentPurgeRuntime;\n}\n\nasync function deleteAbsentDocumentState(input: {\n  readonly commitPurgeProof: (\n    transactionExecSql: ContainerDocumentPurgeRuntime[\"infra\"][\"execSql\"],\n  ) => Promise<void>;\n  readonly documentId: string;\n  readonly documentKind: StoredDocumentKind;\n  readonly noteId: string;\n  readonly persistence: DocumentsPersistence;\n  readonly runtime: ContainerDocumentPurgeRuntime;\n}): Promise<boolean> {\n  return input.persistence.deleteDocumentSideRowsIfAbsent(\n    input.runtime.infra.execSql,\n    input.noteId,\n    input.documentId,\n    async (transactionExecSql) => {\n      await input.runtime.infra.documentProjectors.deleteStoredDocumentClientProjection(\n        {\n          documentKind: input.documentKind,\n          execSql: transactionExecSql,\n          localId: input.noteId,\n        },\n      );\n      await input.commitPurgeProof(transactionExecSql);\n    },\n  );\n}\n\nasync function commitVerifiedDocumentPurge(input: {\n  readonly commitPurgeProof: (\n    transactionExecSql: ContainerDocumentPurgeRuntime[\"infra\"][\"execSql\"],\n  ) => Promise<void>;\n  readonly documentId: string;\n  readonly documentKind: StoredDocumentKind;\n  readonly noteId: string;\n  readonly persistence: DocumentsPersistence;\n  readonly runtime: ContainerDocumentPurgeRuntime;\n}): Promise<boolean> {\n  await input.persistence.ensureSchema(input.runtime.infra.execSql);\n  await ensureDocumentClientProjectionTables({\n    documentProjectors: input.runtime.infra.documentProjectors,\n    execSql: input.runtime.infra.execSql,\n  });\n  const expectedRecord = await input.persistence.loadDocument(\n    input.runtime.infra.execSql,\n    input.noteId,\n  );\n  if (expectedRecord && expectedRecord.documentId !== input.documentId) {\n    throw new Error(\n      \"Local document identity changed while its remote purge was committing\",\n    );\n  }\n  const deleted = expectedRecord\n    ? await deletePersistedDocument({\n        beforeDeleteInTransaction: input.commitPurgeProof,\n        documentProjectors: input.runtime.infra.documentProjectors,\n        execSql: input.runtime.infra.execSql,\n        expectedRecord,\n        localId: input.noteId,\n        persistence: input.persistence,\n      })\n    : await deleteAbsentDocumentState(input);\n  if (!deleted) {\n    throw new Error(\n      \"Local document state changed while its remote purge was committing\",\n    );\n  }\n  return true;\n}\n\nexport async function purgeRemoteContainerDocument(\n  input: PurgeRemoteContainerDocumentInput,\n): Promise<DocumentPurgeResult> {\n  const { documentId, noteId, runtime } = input;\n  const persistence = input.persistence ?? defaultDocumentsPersistence;\n  try {\n    const author = resolveDocumentCreateAuthor(runtime);\n    if (!author) {\n      runtime.util.log(\n        `Container contents: failed to purge note ${noteId} because the local signing context is unavailable`,\n      );\n      return null;\n    }\n    let deleted = false;\n    const response = await purgeRemoteDocument({\n      apiClient: runtime.apiClient,\n      beforeSubmit: input.beforeSubmit,\n      author,\n      documentId,\n      expectedSubtreeRoot: input.expectedSubtreeRoot,\n      stillCurrent: input.stillCurrent,\n      execSql: runtime.infra.execSql,\n      onVerifiedPurge: async ({ commitPurgeProof }) => {\n        deleted = await commitVerifiedDocumentPurge({\n          commitPurgeProof,\n          documentId,\n          documentKind: input.documentKind,\n          noteId,\n          persistence,\n          runtime,\n        });\n      },\n      resolveProjectionUserKey: input.resolveProjectionUserKey,\n      warmReferencedPrincipalPolicies:\n        createRuntimePrincipalPolicyWarmer(runtime),\n    });\n    if (!response) {\n      runtime.util.log(\n        `Container contents: failed to purge note ${noteId} (document ${documentId})`,\n      );\n      return null;\n    }\n    if (deleted) {\n      void reclaimDocumentOrphanBlobs(runtime, persistence);\n    }\n    runtime.util.log(\n      `Container contents: purged note ${noteId} (document ${documentId})`,\n    );\n    return response;\n  } catch (error) {\n    // A cancelled verification is neither a failure nor a completed purge; the\n    // caller that owns the generation decides what to do with it.\n    rethrowProjectionVerificationCancelled(error);\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: documentId,\n        objectKind: \"document\",\n        operation: \"document.purge\",\n      },\n    );\n    runtime.util.log(\n      `Container contents: failed to purge note ${noteId} (document ${documentId}): ${errorMessage(error)}`,\n    );\n    return null;\n  }\n}\n\ninterface ContainerDocumentLocalPurgeRuntime\n  extends Pick<ContainerContentsWorkflowRuntime, \"infra\" | \"util\"> {}\n\nexport async function purgeLocalContainerDocument(input: {\n  beforeDeleteInTransaction?: Parameters<\n    typeof deletePersistedDocument\n  >[0][\"beforeDeleteInTransaction\"];\n  noteId: string;\n  expectedContainerId?: string | null | undefined;\n  persistence?: DocumentsPersistence | undefined;\n  runtime: ContainerDocumentLocalPurgeRuntime;\n}): Promise<DocumentPurgeResult> {\n  const { noteId, runtime } = input;\n  const persistence = input.persistence ?? defaultDocumentsPersistence;\n  try {\n    await persistence.ensureSchema(runtime.infra.execSql);\n    const expectedRecord = await persistence.loadDocument(\n      runtime.infra.execSql,\n      noteId,\n    );\n    if (\n      !expectedRecord ||\n      expectedRecord.documentId !== null ||\n      (input.expectedContainerId !== undefined &&\n        expectedRecord.containerId !== input.expectedContainerId)\n    ) {\n      runtime.util.log(\n        `Container contents: local-only purge refused for note ${noteId} because it is absent or remote-backed`,\n      );\n      return null;\n    }\n    const deleted = await deletePersistedDocument({\n      beforeDeleteInTransaction: input.beforeDeleteInTransaction,\n      documentProjectors: runtime.infra.documentProjectors,\n      execSql: runtime.infra.execSql,\n      expectedRecord,\n      localId: noteId,\n      persistence,\n    });\n    if (!deleted) {\n      runtime.util.log(\n        `Container contents: local-only purge refused for note ${noteId} because its identity changed`,\n      );\n      return null;\n    }\n    if (deleted) {\n      void reclaimDocumentOrphanBlobs(runtime, persistence);\n    }\n    runtime.util.log(`Container contents: purged local-only note ${noteId}`);\n    return {\n      documentId: noteId,\n      purgedAt: new Date().toISOString(),\n      reclaimedBlobStorageKeys: [],\n    };\n  } catch (error) {\n    runtime.util.log(\n      `Container contents: failed to purge local-only note ${noteId}: ${errorMessage(error)}`,\n    );\n    return null;\n  }\n}\n"]}
+{"version":3,"file":"documentPurge.js","sourceRoot":"","sources":["documentPurge.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,uCAAuC,EAAE,MAAM,kDAAkD,CAAC;AAC3G,OAAO,EAAE,sCAAsC,EAAE,MAAM,kDAAkD,CAAC;AAC1G,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAEL,2BAA2B,EAC3B,uBAAuB,EACvB,mBAAmB,EACnB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,oCAAoC,EAAE,MAAM,6BAA6B,CAAC;AAEnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AA6C1F,KAAK,UAAU,yBAAyB,CAAC,KASxC;IACC,OAAO,KAAK,CAAC,WAAW,CAAC,8BAA8B,CACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,EAChB,KAAK,EAAE,kBAAkB,EAAE,EAAE;QAC3B,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,oCAAoC,CAC/E;YACE,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,KAAK,CAAC,MAAM;SACtB,CACF,CAAC;QACF,MAAM,KAAK,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACnD,CAAC,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAS1C;IACC,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,oCAAoC,CAAC;QACzC,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB;QAC1D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;KACrC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CACzD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,KAAK,CAAC,MAAM,CACb,CAAC;IACF,IAAI,cAAc,IAAI,cAAc,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,cAAc;QAC5B,CAAC,CAAC,MAAM,uBAAuB,CAAC;YAC5B,yBAAyB,EAAE,KAAK,CAAC,gBAAgB;YACjD,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB;YAC1D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACpC,cAAc;YACd,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;QACJ,CAAC,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAAwC;IAExC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC9C,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,2BAA2B,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,mDAAmD,CACtG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;YACzC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM;YACN,UAAU;YACV,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,eAAe,EAAE,KAAK,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE;gBAC9C,OAAO,GAAG,MAAM,2BAA2B,CAAC;oBAC1C,gBAAgB;oBAChB,UAAU;oBACV,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,MAAM;oBACN,WAAW;oBACX,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YACD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,+BAA+B,EAC7B,kCAAkC,CAAC,OAAO,CAAC;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,cAAc,UAAU,GAAG,CAC9E,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,mCAAmC,MAAM,cAAc,UAAU,GAAG,CACrE,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,8DAA8D;QAC9D,sCAAsC,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,uCAAuC,CAC3C,KAAK,EACL,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,gBAAgB;SAC5B,CACF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,4CAA4C,MAAM,cAAc,UAAU,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAQjD;IACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAClC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,2BAA2B,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,MAAM,WAAW,CAAC,YAAY,CACnD,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,MAAM,CACP,CAAC;QACF,IACE,CAAC,cAAc;YACf,cAAc,CAAC,UAAU,KAAK,IAAI;YAClC,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS;gBACtC,cAAc,CAAC,WAAW,KAAK,KAAK,CAAC,mBAAmB,CAAC,EAC3D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,yDAAyD,MAAM,wCAAwC,CACxG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;YAC5C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;YAC1D,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,kBAAkB;YACpD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,cAAc;YACd,OAAO,EAAE,MAAM;YACf,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,yDAAyD,MAAM,+BAA+B,CAC/F,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAC;QACzE,OAAO;YACL,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,wBAAwB,EAAE,EAAE;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,uDAAuD,MAAM,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CACxF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import type { DocumentPurgeResponse } from \"@tearleads/validators/response\";\nimport type { StoredDocumentKind } from \"../../../data/documents/documentKinds\";\nimport type { ProjectionUserKeyResolver } from \"../../../data/keyingProjectionVerification\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../../data/keyingProjectionVerification/error\";\nimport { rethrowProjectionVerificationCancelled } from \"../../../data/keyingProjectionVerification/types\";\nimport { errorMessage } from \"../../../data/shared/errorMessage\";\nimport {\n  type DocumentsPersistence,\n  defaultDocumentsPersistence,\n  deletePersistedDocument,\n  purgeRemoteDocument,\n  reclaimDocumentOrphanBlobs,\n  resolveDocumentCreateAuthor,\n} from \"../../documents\";\nimport { ensureDocumentClientProjectionTables } from \"../../documents/persistence\";\nimport type { SubtreePurgeRoot } from \"../../documents/purge/subtreePurgeScope\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../principals/runtimePolicyWarmer\";\nimport type { ContainerContentsWorkflowRuntime } from \"../runtime\";\n\ntype ContainerDocumentPurgeApi = Pick<\n  ContainerContentsWorkflowRuntime[\"apiClient\"],\n  | \"getPrincipalPolicyPages\"\n  | \"getProjectionPolicyHistoryPages\"\n  | \"getDocumentPurgeProof\"\n  | \"getDocumentWriterProjectionResult\"\n  | \"purgeDocument\"\n>;\ntype DocumentPurgeResult =\n  | DocumentPurgeResponse\n  | {\n      readonly documentId: string;\n      readonly purgedAt: string;\n      readonly reclaimedBlobStorageKeys: readonly string[];\n    }\n  | null;\n\ninterface ContainerDocumentPurgeRuntime\n  extends Pick<\n    ContainerContentsWorkflowRuntime,\n    | \"auth\"\n    | \"crypto\"\n    | \"infra\"\n    | \"resolveTrustedUserIdentity\"\n    | \"state\"\n    | \"util\"\n  > {\n  apiClient: ContainerDocumentPurgeApi;\n}\n\ninterface PurgeRemoteContainerDocumentInput {\n  beforeSubmit?: (() => Promise<boolean>) | undefined;\n  documentId: string;\n  expectedSubtreeRoot?: SubtreePurgeRoot | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  documentKind: StoredDocumentKind;\n  noteId: string;\n  persistence?: DocumentsPersistence | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  runtime: ContainerDocumentPurgeRuntime;\n}\n\nasync function deleteAbsentDocumentState(input: {\n  readonly commitPurgeProof: (\n    transactionExecSql: ContainerDocumentPurgeRuntime[\"infra\"][\"execSql\"],\n  ) => Promise<void>;\n  readonly documentId: string;\n  readonly documentKind: StoredDocumentKind;\n  readonly noteId: string;\n  readonly persistence: DocumentsPersistence;\n  readonly runtime: ContainerDocumentPurgeRuntime;\n}): Promise<boolean> {\n  return input.persistence.deleteDocumentSideRowsIfAbsent(\n    input.runtime.infra.execSql,\n    input.noteId,\n    input.documentId,\n    async (transactionExecSql) => {\n      await input.runtime.infra.documentProjectors.deleteStoredDocumentClientProjection(\n        {\n          documentKind: input.documentKind,\n          execSql: transactionExecSql,\n          localId: input.noteId,\n        },\n      );\n      await input.commitPurgeProof(transactionExecSql);\n    },\n  );\n}\n\nasync function commitVerifiedDocumentPurge(input: {\n  readonly commitPurgeProof: (\n    transactionExecSql: ContainerDocumentPurgeRuntime[\"infra\"][\"execSql\"],\n  ) => Promise<void>;\n  readonly documentId: string;\n  readonly documentKind: StoredDocumentKind;\n  readonly noteId: string;\n  readonly persistence: DocumentsPersistence;\n  readonly runtime: ContainerDocumentPurgeRuntime;\n}): Promise<boolean> {\n  await input.persistence.ensureSchema(input.runtime.infra.execSql);\n  await ensureDocumentClientProjectionTables({\n    documentProjectors: input.runtime.infra.documentProjectors,\n    execSql: input.runtime.infra.execSql,\n  });\n  const expectedRecord = await input.persistence.loadDocument(\n    input.runtime.infra.execSql,\n    input.noteId,\n  );\n  if (expectedRecord && expectedRecord.documentId !== input.documentId) {\n    throw new Error(\n      \"Local document identity changed while its remote purge was committing\",\n    );\n  }\n  const deleted = expectedRecord\n    ? await deletePersistedDocument({\n        beforeDeleteInTransaction: input.commitPurgeProof,\n        documentProjectors: input.runtime.infra.documentProjectors,\n        execSql: input.runtime.infra.execSql,\n        expectedRecord,\n        localId: input.noteId,\n        persistence: input.persistence,\n      })\n    : await deleteAbsentDocumentState(input);\n  if (!deleted) {\n    throw new Error(\n      \"Local document state changed while its remote purge was committing\",\n    );\n  }\n  return true;\n}\n\nexport async function purgeRemoteContainerDocument(\n  input: PurgeRemoteContainerDocumentInput,\n): Promise<DocumentPurgeResult> {\n  const { documentId, noteId, runtime } = input;\n  const persistence = input.persistence ?? defaultDocumentsPersistence;\n  try {\n    const author = resolveDocumentCreateAuthor(runtime);\n    if (!author) {\n      runtime.util.log(\n        `Container contents: failed to purge note ${noteId} because the local signing context is unavailable`,\n      );\n      return null;\n    }\n    let deleted = false;\n    const response = await purgeRemoteDocument({\n      apiClient: runtime.apiClient,\n      beforeSubmit: input.beforeSubmit,\n      author,\n      documentId,\n      expectedSubtreeRoot: input.expectedSubtreeRoot,\n      stillCurrent: input.stillCurrent,\n      execSql: runtime.infra.execSql,\n      onVerifiedPurge: async ({ commitPurgeProof }) => {\n        deleted = await commitVerifiedDocumentPurge({\n          commitPurgeProof,\n          documentId,\n          documentKind: input.documentKind,\n          noteId,\n          persistence,\n          runtime,\n        });\n      },\n      resolveProjectionUserKey: input.resolveProjectionUserKey,\n      warmReferencedPrincipalPolicies:\n        createRuntimePrincipalPolicyWarmer(runtime),\n    });\n    if (!response) {\n      runtime.util.log(\n        `Container contents: failed to purge note ${noteId} (document ${documentId})`,\n      );\n      return null;\n    }\n    if (deleted) {\n      void reclaimDocumentOrphanBlobs(runtime, persistence);\n    }\n    runtime.util.log(\n      `Container contents: purged note ${noteId} (document ${documentId})`,\n    );\n    return response;\n  } catch (error) {\n    // A cancelled verification is neither a failure nor a completed purge; the\n    // caller that owns the generation decides what to do with it.\n    rethrowProjectionVerificationCancelled(error);\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: documentId,\n        objectKind: \"document\",\n        operation: \"document.purge\",\n      },\n    );\n    runtime.util.log(\n      `Container contents: failed to purge note ${noteId} (document ${documentId}): ${errorMessage(error)}`,\n    );\n    return null;\n  }\n}\n\ninterface ContainerDocumentLocalPurgeRuntime\n  extends Pick<ContainerContentsWorkflowRuntime, \"infra\" | \"util\"> {}\n\nexport async function purgeLocalContainerDocument(input: {\n  beforeDeleteInTransaction?: Parameters<\n    typeof deletePersistedDocument\n  >[0][\"beforeDeleteInTransaction\"];\n  noteId: string;\n  expectedContainerId?: string | null | undefined;\n  persistence?: DocumentsPersistence | undefined;\n  runtime: ContainerDocumentLocalPurgeRuntime;\n}): Promise<DocumentPurgeResult> {\n  const { noteId, runtime } = input;\n  const persistence = input.persistence ?? defaultDocumentsPersistence;\n  try {\n    await persistence.ensureSchema(runtime.infra.execSql);\n    const expectedRecord = await persistence.loadDocument(\n      runtime.infra.execSql,\n      noteId,\n    );\n    if (\n      !expectedRecord ||\n      expectedRecord.documentId !== null ||\n      (input.expectedContainerId !== undefined &&\n        expectedRecord.containerId !== input.expectedContainerId)\n    ) {\n      runtime.util.log(\n        `Container contents: local-only purge refused for note ${noteId} because it is absent or remote-backed`,\n      );\n      return null;\n    }\n    const deleted = await deletePersistedDocument({\n      beforeDeleteInTransaction: input.beforeDeleteInTransaction,\n      documentProjectors: runtime.infra.documentProjectors,\n      execSql: runtime.infra.execSql,\n      expectedRecord,\n      localId: noteId,\n      persistence,\n    });\n    if (!deleted) {\n      runtime.util.log(\n        `Container contents: local-only purge refused for note ${noteId} because its identity changed`,\n      );\n      return null;\n    }\n    if (deleted) {\n      void reclaimDocumentOrphanBlobs(runtime, persistence);\n    }\n    runtime.util.log(`Container contents: purged local-only note ${noteId}`);\n    return {\n      documentId: noteId,\n      purgedAt: new Date().toISOString(),\n      reclaimedBlobStorageKeys: [],\n    };\n  } catch (error) {\n    runtime.util.log(\n      `Container contents: failed to purge local-only note ${noteId}: ${errorMessage(error)}`,\n    );\n    return null;\n  }\n}\n"]}

package/workflows/containers/child/create/createProjection.d.ts

@@ -0,0 +1,6 @@
+import type { ContainerWriterProjectionResponse } from "../../../../internal/validators/response/index.js";
+import type { MaterializedContainerCreatePlan } from "../../../../data/containers/shared/types.js";
+export declare function childContainerWriterProjectionFromCreatePlan(input: {
+    materializedPlan: MaterializedContainerCreatePlan;
+    parentProjection: ContainerWriterProjectionResponse;
+}): ContainerWriterProjectionResponse;

package/workflows/containers/child/create/createProjection.js

@@ -0,0 +1,43 @@
+import { getParentCreateContext } from "../../../../data/containers/shared/projection.js";
+import { readCanonicalRecord, readCanonicalRecords, } from "../../../../data/keying/canonicalJson.js";
+export function childContainerWriterProjectionFromCreatePlan(input) {
+    const { materializedPlan, parentProjection } = input;
+    const { plan } = materializedPlan;
+    const parentKek = getParentCreateContext(parentProjection).kek;
+    return {
+        policyEvidence: parentProjection.policyEvidence,
+        containerId: plan.containerId,
+        organizationId: plan.state.organizationId,
+        path: [
+            ...parentProjection.path,
+            {
+                event: {
+                    event: readCanonicalRecord(plan.event, "Container child event"),
+                    body: readCanonicalRecord(plan.body, "Container child body"),
+                    eventHash: plan.eventHash,
+                },
+                manifest: readCanonicalRecord(plan.manifest, "Container child manifest"),
+                manifestHash: plan.manifestHash,
+                state: readCanonicalRecord(plan.state, "Container child state"),
+            },
+        ],
+        containerKeks: [
+            ...parentProjection.containerKeks,
+            {
+                containerId: plan.containerId,
+                accessManifestHash: plan.manifestHash,
+                containerKeyEpochId: plan.containerKeyEpochId,
+                containerKeyEpoch: plan.keyEpoch.keyEpoch,
+                keyEpoch: readCanonicalRecord(plan.keyEpoch, "Container child key epoch"),
+                keyEpochHash: plan.keyEpochHash,
+                keyTargetHash: plan.keyTargetHash,
+                containerManifestHistory: [],
+                parentContainerKeyEpochId: parentKek.containerKeyEpochId,
+                keyring: null,
+                recipientTargets: readCanonicalRecords(plan.recipientTargets, "Container child recipient targets"),
+                wraps: readCanonicalRecords(plan.wraps, "Container child wraps"),
+            },
+        ],
+    };
+}
+//# sourceMappingURL=createProjection.js.map

package/workflows/containers/child/create/createProjection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createProjection.js","sourceRoot":"","sources":["createProjection.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAEvF,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,uCAAuC,CAAC;AAE/C,MAAM,UAAU,4CAA4C,CAAC,KAG5D;IACC,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC;IACrD,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC;IAClC,MAAM,SAAS,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC;IAE/D,OAAO;QACL,cAAc,EAAE,gBAAgB,CAAC,cAAc;QAC/C,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc;QACzC,IAAI,EAAE;YACJ,GAAG,gBAAgB,CAAC,IAAI;YACxB;gBACE,KAAK,EAAE;oBACL,KAAK,EAAE,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,uBAAuB,CAAC;oBAC/D,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC;oBAC5D,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B;gBACD,QAAQ,EAAE,mBAAmB,CAC3B,IAAI,CAAC,QAAQ,EACb,0BAA0B,CAC3B;gBACD,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,KAAK,EAAE,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,uBAAuB,CAAC;aAChE;SACF;QACD,aAAa,EAAE;YACb,GAAG,gBAAgB,CAAC,aAAa;YACjC;gBACE,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,kBAAkB,EAAE,IAAI,CAAC,YAAY;gBACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;gBAC7C,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBACzC,QAAQ,EAAE,mBAAmB,CAC3B,IAAI,CAAC,QAAQ,EACb,2BAA2B,CAC5B;gBACD,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,wBAAwB,EAAE,EAAE;gBAC5B,yBAAyB,EAAE,SAAS,CAAC,mBAAmB;gBACxD,OAAO,EAAE,IAAI;gBACb,gBAAgB,EAAE,oBAAoB,CACpC,IAAI,CAAC,gBAAgB,EACrB,mCAAmC,CACpC;gBACD,KAAK,EAAE,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,uBAAuB,CAAC;aACjE;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { getParentCreateContext } from \"../../../../data/containers/shared/projection\";\nimport type { MaterializedContainerCreatePlan } from \"../../../../data/containers/shared/types\";\nimport {\n  readCanonicalRecord,\n  readCanonicalRecords,\n} from \"../../../../data/keying/canonicalJson\";\n\nexport function childContainerWriterProjectionFromCreatePlan(input: {\n  materializedPlan: MaterializedContainerCreatePlan;\n  parentProjection: ContainerWriterProjectionResponse;\n}): ContainerWriterProjectionResponse {\n  const { materializedPlan, parentProjection } = input;\n  const { plan } = materializedPlan;\n  const parentKek = getParentCreateContext(parentProjection).kek;\n\n  return {\n    policyEvidence: parentProjection.policyEvidence,\n    containerId: plan.containerId,\n    organizationId: plan.state.organizationId,\n    path: [\n      ...parentProjection.path,\n      {\n        event: {\n          event: readCanonicalRecord(plan.event, \"Container child event\"),\n          body: readCanonicalRecord(plan.body, \"Container child body\"),\n          eventHash: plan.eventHash,\n        },\n        manifest: readCanonicalRecord(\n          plan.manifest,\n          \"Container child manifest\",\n        ),\n        manifestHash: plan.manifestHash,\n        state: readCanonicalRecord(plan.state, \"Container child state\"),\n      },\n    ],\n    containerKeks: [\n      ...parentProjection.containerKeks,\n      {\n        containerId: plan.containerId,\n        accessManifestHash: plan.manifestHash,\n        containerKeyEpochId: plan.containerKeyEpochId,\n        containerKeyEpoch: plan.keyEpoch.keyEpoch,\n        keyEpoch: readCanonicalRecord(\n          plan.keyEpoch,\n          \"Container child key epoch\",\n        ),\n        keyEpochHash: plan.keyEpochHash,\n        keyTargetHash: plan.keyTargetHash,\n        containerManifestHistory: [],\n        parentContainerKeyEpochId: parentKek.containerKeyEpochId,\n        keyring: null,\n        recipientTargets: readCanonicalRecords(\n          plan.recipientTargets,\n          \"Container child recipient targets\",\n        ),\n        wraps: readCanonicalRecords(plan.wraps, \"Container child wraps\"),\n      },\n    ],\n  };\n}\n"]}

package/workflows/containers/child/create/createSubmission.d.ts

@@ -0,0 +1,56 @@
+import type { ContainerMutationResponse, ContainerWriterProjectionResponse } from "../../../../internal/validators/response/index.js";
+import type { ContainerCreateApi, ContainerCreatePlan, ContainerMutationAuthor, ContainerMutationSubmitFailure } from "../../../../data/containers/shared/types.js";
+import type { ProjectionUserKeyResolver, ReferencedPrincipalPolicyWarmer } from "../../../../data/keyingProjectionVerification/index.js";
+import type { SecurityIncidentReporter } from "../../../../data/shared/securityIncidents.js";
+import type { ExecSql } from "../../../../data/sqlite/sqlSchema.js";
+import type { TrustedUserIdentityResolver } from "../../../../data/trustedUserIdentity/index.js";
+import type { PrincipalPolicyRepairBudget } from "../../../principals/policyRepairBudget.js";
+export interface ContainerCreateRepairState {
+    didRepairStaleParent: boolean;
+    policyRepairs: PrincipalPolicyRepairBudget;
+}
+export interface RemoteContainerCreateInput {
+    apiClient: ContainerCreateApi;
+    author: ContainerMutationAuthor;
+    containerId?: string | undefined;
+    containerKey?: Uint8Array | undefined;
+    containerKeyEpochId?: string | undefined;
+    eventId?: string | undefined;
+    execSql: ExecSql;
+    metadataDocumentId?: string | undefined;
+    parentContainerId: string;
+    parentProjection?: ContainerWriterProjectionResponse | undefined;
+    parentSecretKey: Uint8Array;
+    reportSecurityIncident: SecurityIncidentReporter;
+    resolveProjectionUserKey: ProjectionUserKeyResolver;
+    resolveTrustedUserIdentity: TrustedUserIdentityResolver;
+    signedAt?: string | undefined;
+    stillCurrent?: (() => boolean) | undefined;
+    warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;
+}
+type ContainerCreateFailureRepair = {
+    readonly kind: "none";
+} | {
+    readonly kind: "unavailable";
+} | {
+    readonly kind: "retry";
+    readonly parentProjection: ContainerWriterProjectionResponse;
+};
+export declare function submitRemoteContainerCreate(input: {
+    readonly apiClient: ContainerCreateApi;
+    readonly plan: ContainerCreatePlan;
+    readonly stillCurrent?: (() => boolean) | undefined;
+}): Promise<{
+    readonly ok: true;
+    readonly response: ContainerMutationResponse;
+} | ContainerMutationSubmitFailure | null>;
+export declare function repairContainerCreateFailure(input: {
+    readonly apiClient: ContainerCreateApi;
+    readonly failure: ContainerMutationSubmitFailure;
+    readonly parentContainerId: string;
+    readonly parentProjection: ContainerWriterProjectionResponse;
+    readonly state: ContainerCreateRepairState;
+    readonly warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;
+    readonly stillCurrent?: (() => boolean) | undefined;
+}): Promise<ContainerCreateFailureRepair>;
+export {};

package/workflows/containers/child/create/createSubmission.js

@@ -0,0 +1,43 @@
+import { isStaleParentContainerPathFailure } from "../../../../data/containers/shared/mutationFailures.js";
+import { recoverPrincipalPolicyRepair } from "../../../principals/policyRepair.js";
+export async function submitRemoteContainerCreate(input) {
+    if (input.stillCurrent?.() === false)
+        return null;
+    const result = await input.apiClient.createContainerResult(input.plan.request, {
+        expectedPaymentRequiredOrganizationId: input.plan.state.organizationId,
+        reportErrors: false,
+    });
+    return result.ok ? { ok: true, response: result.data } : result;
+}
+export async function repairContainerCreateFailure(input) {
+    if (input.stillCurrent?.() === false) {
+        return { kind: "unavailable" };
+    }
+    const repairedPolicy = input.state.policyRepairs.take(input.failure.stalePrincipalHeads) &&
+        (await recoverPrincipalPolicyRepair({
+            heads: input.failure.stalePrincipalHeads,
+            organizationId: input.parentProjection.organizationId,
+            warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,
+            stillCurrent: input.stillCurrent,
+        }));
+    if (input.stillCurrent?.() === false) {
+        return { kind: "unavailable" };
+    }
+    if (!repairedPolicy) {
+        if (input.state.didRepairStaleParent ||
+            !isStaleParentContainerPathFailure(input.failure))
+            return { kind: "none" };
+        input.state.didRepairStaleParent = true;
+    }
+    // Recovery may select newer policies. Rebuild against a fresh public evidence
+    // source so the old projection cannot conflict with newly admitted pins.
+    input.apiClient.evictContainerWriterProjection(input.parentContainerId);
+    const parentProjection = await input.apiClient.getContainerWriterProjection(input.parentContainerId);
+    if (input.stillCurrent?.() === false) {
+        return { kind: "unavailable" };
+    }
+    return parentProjection
+        ? { kind: "retry", parentProjection }
+        : { kind: "unavailable" };
+}
+//# sourceMappingURL=createSubmission.js.map

package/workflows/containers/child/create/createSubmission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createSubmission.js","sourceRoot":"","sources":["createSubmission.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iCAAiC,EAAE,MAAM,qDAAqD,CAAC;AAcxG,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAoChF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAIjD;IAQC,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,qBAAqB,CACxD,KAAK,CAAC,IAAI,CAAC,OAAO,EAClB;QACE,qCAAqC,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc;QACtE,YAAY,EAAE,KAAK;KACpB,CACF,CAAC;IACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAUlD;IACC,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,cAAc,GAClB,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACjE,CAAC,MAAM,4BAA4B,CAAC;YAClC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB;YACxC,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAAC,cAAc;YACrD,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;YACtE,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC,CAAC;IACN,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,IACE,KAAK,CAAC,KAAK,CAAC,oBAAoB;YAChC,CAAC,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC;YAEjD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,KAAK,CAAC,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAC1C,CAAC;IACD,8EAA8E;IAC9E,yEAAyE;IACzE,KAAK,CAAC,SAAS,CAAC,8BAA8B,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACxE,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,4BAA4B,CACzE,KAAK,CAAC,iBAAiB,CACxB,CAAC;IACF,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,gBAAgB;QACrB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE;QACrC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AAC9B,CAAC","sourcesContent":["import type {\n  ContainerMutationResponse,\n  ContainerWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport { isStaleParentContainerPathFailure } from \"../../../../data/containers/shared/mutationFailures\";\nimport type {\n  ContainerCreateApi,\n  ContainerCreatePlan,\n  ContainerMutationAuthor,\n  ContainerMutationSubmitFailure,\n} from \"../../../../data/containers/shared/types\";\nimport type {\n  ProjectionUserKeyResolver,\n  ReferencedPrincipalPolicyWarmer,\n} from \"../../../../data/keyingProjectionVerification\";\nimport type { SecurityIncidentReporter } from \"../../../../data/shared/securityIncidents\";\nimport type { ExecSql } from \"../../../../data/sqlite/sqlSchema\";\nimport type { TrustedUserIdentityResolver } from \"../../../../data/trustedUserIdentity\";\nimport { recoverPrincipalPolicyRepair } from \"../../../principals/policyRepair\";\nimport type { PrincipalPolicyRepairBudget } from \"../../../principals/policyRepairBudget\";\n\nexport interface ContainerCreateRepairState {\n  didRepairStaleParent: boolean;\n  policyRepairs: PrincipalPolicyRepairBudget;\n}\n\nexport interface RemoteContainerCreateInput {\n  apiClient: ContainerCreateApi;\n  author: ContainerMutationAuthor;\n  containerId?: string | undefined;\n  containerKey?: Uint8Array | undefined;\n  containerKeyEpochId?: string | undefined;\n  eventId?: string | undefined;\n  execSql: ExecSql;\n  metadataDocumentId?: string | undefined;\n  parentContainerId: string;\n  parentProjection?: ContainerWriterProjectionResponse | undefined;\n  parentSecretKey: Uint8Array;\n  reportSecurityIncident: SecurityIncidentReporter;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  signedAt?: string | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n}\n\ntype ContainerCreateFailureRepair =\n  | { readonly kind: \"none\" }\n  | { readonly kind: \"unavailable\" }\n  | {\n      readonly kind: \"retry\";\n      readonly parentProjection: ContainerWriterProjectionResponse;\n    };\n\nexport async function submitRemoteContainerCreate(input: {\n  readonly apiClient: ContainerCreateApi;\n  readonly plan: ContainerCreatePlan;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<\n  | {\n      readonly ok: true;\n      readonly response: ContainerMutationResponse;\n    }\n  | ContainerMutationSubmitFailure\n  | null\n> {\n  if (input.stillCurrent?.() === false) return null;\n  const result = await input.apiClient.createContainerResult(\n    input.plan.request,\n    {\n      expectedPaymentRequiredOrganizationId: input.plan.state.organizationId,\n      reportErrors: false,\n    },\n  );\n  return result.ok ? { ok: true, response: result.data } : result;\n}\n\nexport async function repairContainerCreateFailure(input: {\n  readonly apiClient: ContainerCreateApi;\n  readonly failure: ContainerMutationSubmitFailure;\n  readonly parentContainerId: string;\n  readonly parentProjection: ContainerWriterProjectionResponse;\n  readonly state: ContainerCreateRepairState;\n  readonly warmReferencedPrincipalPolicies?:\n    | ReferencedPrincipalPolicyWarmer\n    | undefined;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<ContainerCreateFailureRepair> {\n  if (input.stillCurrent?.() === false) {\n    return { kind: \"unavailable\" };\n  }\n  const repairedPolicy =\n    input.state.policyRepairs.take(input.failure.stalePrincipalHeads) &&\n    (await recoverPrincipalPolicyRepair({\n      heads: input.failure.stalePrincipalHeads,\n      organizationId: input.parentProjection.organizationId,\n      warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,\n      stillCurrent: input.stillCurrent,\n    }));\n  if (input.stillCurrent?.() === false) {\n    return { kind: \"unavailable\" };\n  }\n  if (!repairedPolicy) {\n    if (\n      input.state.didRepairStaleParent ||\n      !isStaleParentContainerPathFailure(input.failure)\n    )\n      return { kind: \"none\" };\n    input.state.didRepairStaleParent = true;\n  }\n  // Recovery may select newer policies. Rebuild against a fresh public evidence\n  // source so the old projection cannot conflict with newly admitted pins.\n  input.apiClient.evictContainerWriterProjection(input.parentContainerId);\n  const parentProjection = await input.apiClient.getContainerWriterProjection(\n    input.parentContainerId,\n  );\n  if (input.stillCurrent?.() === false) {\n    return { kind: \"unavailable\" };\n  }\n  return parentProjection\n    ? { kind: \"retry\", parentProjection }\n    : { kind: \"unavailable\" };\n}\n"]}

package/workflows/containers/child/create/index.d.ts

@@ -0,0 +1,24 @@
+import type { ContainerWriterProjectionResponse } from "../../../../internal/validators/response/index.js";
+import type { BuildContainerCreatePlanInput, ContainerCreatePlan, ContainerMutationAuthor, CreateRemoteContainerResult, MaterializedContainerCreatePlan } from "../../../../data/containers/shared/types.js";
+import { type ProjectionVerificationOptions } from "../../../../data/documents/shared/types.js";
+import type { ReferencedPrincipalPolicyWarmer } from "../../../../data/keyingProjectionVerification/index.js";
+import type { ExecSql } from "../../../../data/sqlite/sqlSchema.js";
+import { type RemoteContainerCreateInput } from "./createSubmission.js";
+export declare function buildContainerCreatePlan(input: BuildContainerCreatePlanInput): Promise<ContainerCreatePlan>;
+export declare function buildMaterializedContainerCreatePlan(input: {
+    author: ContainerMutationAuthor;
+    containerId?: string | undefined;
+    containerKey?: Uint8Array | undefined;
+    containerKeyEpochId?: string | undefined;
+    eventId?: string | undefined;
+    execSql?: ExecSql | undefined;
+    managedPrincipalGrant?: BuildContainerCreatePlanInput["managedPrincipalGrant"];
+    metadataDocumentId?: string | undefined;
+    systemSlot?: string | null | undefined;
+    parentProjection: ContainerWriterProjectionResponse;
+    parentSecretKey: Uint8Array;
+    signedAt?: string | undefined;
+    warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;
+} & ProjectionVerificationOptions): Promise<MaterializedContainerCreatePlan>;
+export { childContainerWriterProjectionFromCreatePlan } from "./createProjection.js";
+export declare function createRemoteContainer(input: RemoteContainerCreateInput): Promise<CreateRemoteContainerResult | null>;