@tearleads/client-sdk 0.1.62 → 0.1.64

package/data/keyingProjectionVerification/resolvedPrincipalPolicy.js

@@ -1,72 +0,0 @@
-import { KeyingVerificationError, } from "../../internal/crypto/index.js";
-import { loadPrincipalPolicyCheckpoint } from "../persistence/keyingCheckpointPersistence.js";
-import { verifiedPrincipalPolicyMeetsCheckpoint } from "../persistence/principalPolicyCheckpointSelection.js";
-import { observePrincipalPolicy, } from "./checkpointContext.js";
-import { referencedPrincipalPolicyKey, verifiedPrincipalPolicyContainsReference, } from "./principalPolicyCache.js";
-import { observeProjectionLifetime } from "./projectionLifetimes.js";
-import { assertProjectionVerificationCurrent, } from "./types.js";
-// Scoped evidence is always resolved through the warmer: its operation memo is
-// the only reuse of recovered directory and Admins evidence, with one set of
-// validity rules. The caller's policy cache keeps bare verified policies; it
-// never stands in for organization, dependency or lifetime bindings.
-async function meetsCheckpoints(context, result, refreshMissing) {
-    for (const policy of [...result.dependencies, result.policy]) {
-        const checkpoint = await loadPrincipalPolicyCheckpoint(context.execSql, policy.principalType, policy.principalId);
-        if (refreshMissing &&
-            checkpoint &&
-            (policy.version < checkpoint.version ||
-                (policy.version > checkpoint.version &&
-                    !policy.retainedHistory.some((entry) => entry.state.version === checkpoint.version))))
-            return false;
-        if (!verifiedPrincipalPolicyMeetsCheckpoint(policy, checkpoint))
-            throw new KeyingVerificationError("rollback", "Recovered principal evidence predates the durable checkpoint");
-    }
-    return true;
-}
-async function recoverEvidence(input, resolve) {
-    const read = async (recoveryBatch) => {
-        assertProjectionVerificationCurrent(input.stillCurrent);
-        const recovered = await resolve({
-            recoveryBatch,
-            organizationId: input.organizationId,
-            reference: input.reference,
-            stillCurrent: input.stillCurrent,
-        });
-        assertProjectionVerificationCurrent(input.stillCurrent);
-        assertProjectionVerificationCurrent(recovered.stillCurrent);
-        return recovered;
-    };
-    let result = await read();
-    // A concurrent admission may advance a pin after recovery verified it.
-    // Refresh once outside the operation's directory view; the fresh
-    // recovery and final checkpoint check still reject rollback/equivocation.
-    if (!(await meetsCheckpoints(input.checkpointContext, result, true))) {
-        assertProjectionVerificationCurrent(result.stillCurrent);
-        result = await read({});
-        await meetsCheckpoints(input.checkpointContext, result, false);
-    }
-    return result;
-}
-export async function resolveReferencedPrincipalPolicy(input) {
-    assertProjectionVerificationCurrent(input.stillCurrent);
-    const key = referencedPrincipalPolicyKey(input.reference);
-    const resolve = input.warmReferencedPrincipalPolicies?.resolveReference;
-    if (!resolve)
-        return null;
-    const result = await recoverEvidence(input, resolve);
-    const evidenceCurrent = result.stillCurrent;
-    // The consumer's and every producer's lifetime guard the evidence where it
-    // is used: projection admission rechecks them through the context.
-    const lifetime = () => input.stillCurrent?.() !== false && evidenceCurrent();
-    assertProjectionVerificationCurrent(lifetime);
-    observeProjectionLifetime(input.checkpointContext, lifetime);
-    if (result.organizationId !== input.organizationId)
-        throw new KeyingVerificationError("object_mismatch", "Recovered principal evidence belongs to another organization");
-    if (!verifiedPrincipalPolicyContainsReference(result.policy, input.reference))
-        throw new KeyingVerificationError("object_mismatch", "Recovered principal evidence does not contain the exact citation");
-    for (const policy of [...result.dependencies, result.policy])
-        observePrincipalPolicy(input.checkpointContext, policy, input.organizationId);
-    input.principalPolicyCache.set(key, result.policy);
-    return result.policy;
-}
-//# sourceMappingURL=resolvedPrincipalPolicy.js.map

package/data/keyingProjectionVerification/resolvedPrincipalPolicy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolvedPrincipalPolicy.js","sourceRoot":"","sources":["resolvedPrincipalPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAGxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,6BAA6B,EAAE,MAAM,4CAA4C,CAAC;AAC3F,OAAO,EAAE,sCAAsC,EAAE,MAAM,mDAAmD,CAAC;AAC3G,OAAO,EACL,sBAAsB,GAEvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,EAC5B,wCAAwC,GACzC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EACL,mCAAmC,GAIpC,MAAM,SAAS,CAAC;AAEjB,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,qEAAqE;AACrE,KAAK,UAAU,gBAAgB,CAC7B,OAAoC,EACpC,MAAuC,EACvC,cAAuB;IAEvB,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7D,MAAM,UAAU,GAAG,MAAM,6BAA6B,CACpD,OAAO,CAAC,OAAO,EACf,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,WAAW,CACnB,CAAC;QACF,IACE,cAAc;YACd,UAAU;YACV,CAAC,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO;gBAClC,CAAC,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO;oBAClC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAC1B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,CACtD,CAAC,CAAC;YAEP,OAAO,KAAK,CAAC;QACf,IAAI,CAAC,sCAAsC,CAAC,MAAM,EAAE,UAAU,CAAC;YAC7D,MAAM,IAAI,uBAAuB,CAC/B,UAAU,EACV,8DAA8D,CAC/D,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAaD,KAAK,UAAU,eAAe,CAC5B,KAA4C,EAC5C,OAAyE;IAEzE,MAAM,IAAI,GAAG,KAAK,EAAE,aAAsB,EAAE,EAAE;QAC5C,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC;YAC9B,aAAa;YACb,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;QACH,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxD,mCAAmC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,IAAI,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;IAC1B,uEAAuE;IACvE,iEAAiE;IACjE,0EAA0E;IAC1E,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,KAAK,CAAC,iBAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACrE,mCAAmC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;QACxB,MAAM,gBAAgB,CAAC,KAAK,CAAC,iBAAiB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAA4C;IAE5C,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,4BAA4B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,+BAA+B,EAAE,gBAAgB,CAAC;IACxE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,eAAe,GAAG,MAAM,CAAC,YAAY,CAAC;IAC5C,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,IAAI,eAAe,EAAE,CAAC;IAC7E,mCAAmC,CAAC,QAAQ,CAAC,CAAC;IAC9C,yBAAyB,CAAC,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;QAChD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,8DAA8D,CAC/D,CAAC;IACJ,IAAI,CAAC,wCAAwC,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;QAC3E,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,kEAAkE,CACnE,CAAC;IACJ,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;QAC1D,sBAAsB,CACpB,KAAK,CAAC,iBAAiB,EACvB,MAAM,EACN,KAAK,CAAC,cAAc,CACrB,CAAC;IACJ,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type ReferencedPrincipalHead,\n  type VerifiedPrincipalPolicyCurrent,\n} from \"@tearleads/crypto\";\nimport { loadPrincipalPolicyCheckpoint } from \"../persistence/keyingCheckpointPersistence\";\nimport { verifiedPrincipalPolicyMeetsCheckpoint } from \"../persistence/principalPolicyCheckpointSelection\";\nimport {\n  observePrincipalPolicy,\n  type ProjectionCheckpointContext,\n} from \"./checkpointContext\";\nimport {\n  referencedPrincipalPolicyKey,\n  verifiedPrincipalPolicyContainsReference,\n} from \"./principalPolicyCache\";\nimport { observeProjectionLifetime } from \"./projectionLifetimes\";\nimport {\n  assertProjectionVerificationCurrent,\n  type PrincipalPolicyCache,\n  type ReferencedPrincipalPolicyWarmer,\n  type ResolvedPrincipalPolicyEvidence,\n} from \"./types\";\n\n// Scoped evidence is always resolved through the warmer: its operation memo is\n// the only reuse of recovered directory and Admins evidence, with one set of\n// validity rules. The caller's policy cache keeps bare verified policies; it\n// never stands in for organization, dependency or lifetime bindings.\nasync function meetsCheckpoints(\n  context: ProjectionCheckpointContext,\n  result: ResolvedPrincipalPolicyEvidence,\n  refreshMissing: boolean,\n): Promise<boolean> {\n  for (const policy of [...result.dependencies, result.policy]) {\n    const checkpoint = await loadPrincipalPolicyCheckpoint(\n      context.execSql,\n      policy.principalType,\n      policy.principalId,\n    );\n    if (\n      refreshMissing &&\n      checkpoint &&\n      (policy.version < checkpoint.version ||\n        (policy.version > checkpoint.version &&\n          !policy.retainedHistory.some(\n            (entry) => entry.state.version === checkpoint.version,\n          )))\n    )\n      return false;\n    if (!verifiedPrincipalPolicyMeetsCheckpoint(policy, checkpoint))\n      throw new KeyingVerificationError(\n        \"rollback\",\n        \"Recovered principal evidence predates the durable checkpoint\",\n      );\n  }\n  return true;\n}\n\ninterface ResolveReferencedPrincipalPolicyInput {\n  readonly checkpointContext: ProjectionCheckpointContext;\n  readonly organizationId: string;\n  readonly stillCurrent?: (() => boolean) | undefined;\n  readonly principalPolicyCache: PrincipalPolicyCache;\n  readonly reference: ReferencedPrincipalHead;\n  readonly warmReferencedPrincipalPolicies?:\n    | ReferencedPrincipalPolicyWarmer\n    | undefined;\n}\n\nasync function recoverEvidence(\n  input: ResolveReferencedPrincipalPolicyInput,\n  resolve: NonNullable<ReferencedPrincipalPolicyWarmer[\"resolveReference\"]>,\n): Promise<ResolvedPrincipalPolicyEvidence> {\n  const read = async (recoveryBatch?: object) => {\n    assertProjectionVerificationCurrent(input.stillCurrent);\n    const recovered = await resolve({\n      recoveryBatch,\n      organizationId: input.organizationId,\n      reference: input.reference,\n      stillCurrent: input.stillCurrent,\n    });\n    assertProjectionVerificationCurrent(input.stillCurrent);\n    assertProjectionVerificationCurrent(recovered.stillCurrent);\n    return recovered;\n  };\n  let result = await read();\n  // A concurrent admission may advance a pin after recovery verified it.\n  // Refresh once outside the operation's directory view; the fresh\n  // recovery and final checkpoint check still reject rollback/equivocation.\n  if (!(await meetsCheckpoints(input.checkpointContext, result, true))) {\n    assertProjectionVerificationCurrent(result.stillCurrent);\n    result = await read({});\n    await meetsCheckpoints(input.checkpointContext, result, false);\n  }\n  return result;\n}\n\nexport async function resolveReferencedPrincipalPolicy(\n  input: ResolveReferencedPrincipalPolicyInput,\n): Promise<VerifiedPrincipalPolicyCurrent | null> {\n  assertProjectionVerificationCurrent(input.stillCurrent);\n  const key = referencedPrincipalPolicyKey(input.reference);\n  const resolve = input.warmReferencedPrincipalPolicies?.resolveReference;\n  if (!resolve) return null;\n  const result = await recoverEvidence(input, resolve);\n  const evidenceCurrent = result.stillCurrent;\n  // The consumer's and every producer's lifetime guard the evidence where it\n  // is used: projection admission rechecks them through the context.\n  const lifetime = () => input.stillCurrent?.() !== false && evidenceCurrent();\n  assertProjectionVerificationCurrent(lifetime);\n  observeProjectionLifetime(input.checkpointContext, lifetime);\n  if (result.organizationId !== input.organizationId)\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Recovered principal evidence belongs to another organization\",\n    );\n  if (!verifiedPrincipalPolicyContainsReference(result.policy, input.reference))\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Recovered principal evidence does not contain the exact citation\",\n    );\n  for (const policy of [...result.dependencies, result.policy])\n    observePrincipalPolicy(\n      input.checkpointContext,\n      policy,\n      input.organizationId,\n    );\n  input.principalPolicyCache.set(key, result.policy);\n  return result.policy;\n}\n"]}

package/stores/container-contents/backgroundHydration.js

@@ -1,32 +0,0 @@
-import { reportKeyingVerificationErrorInCauseChain } from "../../data/keyingProjectionVerification/error.js";
-import { errorMessage } from "../../data/shared/errorMessage.js";
-import { isDatabaseUnavailableError } from "../../workflows/container-contents/syncLane.js";
-/** Observe a background refresh without changing the caller's rejection. */
-export function observeContainerBackgroundHydration(state, hydration) {
-    const generation = state.lifecycleGeneration;
-    const runtime = state.runtime;
-    void hydration.catch(async (error) => {
-        if (state.lifecycleGeneration !== generation ||
-            isDatabaseUnavailableError(error))
-            return;
-        await reportKeyingVerificationErrorInCauseChain(error, runtime.util.reportSecurityIncident, {
-            objectId: null,
-            objectKind: "container",
-            operation: "container.hydration.background",
-            organizationId: runtime.auth.organizationId,
-        });
-        try {
-            const message = "Container background hydration failed";
-            if (runtime.util.logError) {
-                await runtime.util.logError(message, error);
-            }
-            else {
-                await runtime.util.log(`${message}: ${errorMessage(error)}`);
-            }
-        }
-        catch {
-            // A host logger must not turn an observed refusal into a new rejection.
-        }
-    });
-}
-//# sourceMappingURL=backgroundHydration.js.map

package/stores/container-contents/backgroundHydration.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"backgroundHydration.js","sourceRoot":"","sources":["backgroundHydration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yCAAyC,EAAE,MAAM,+CAA+C,CAAC;AAC1G,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAGzF,4EAA4E;AAC5E,MAAM,UAAU,mCAAmC,CACjD,KAAsC,EACtC,SAAwB;IAExB,MAAM,UAAU,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QAC5C,IACE,KAAK,CAAC,mBAAmB,KAAK,UAAU;YACxC,0BAA0B,CAAC,KAAK,CAAC;YAEjC,OAAO;QAET,MAAM,yCAAyC,CAC7C,KAAK,EACL,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,gCAAgC;YAC3C,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,CACF,CAAC;QACF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,uCAAuC,CAAC;YACxD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1B,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { reportKeyingVerificationErrorInCauseChain } from \"../../data/keyingProjectionVerification/error\";\nimport { errorMessage } from \"../../data/shared/errorMessage\";\nimport { isDatabaseUnavailableError } from \"../../workflows/container-contents/syncLane\";\nimport type { ContainerContentsStoreSyncState } from \"./syncAgentTypes\";\n\n/** Observe a background refresh without changing the caller's rejection. */\nexport function observeContainerBackgroundHydration(\n  state: ContainerContentsStoreSyncState,\n  hydration: Promise<void>,\n): void {\n  const generation = state.lifecycleGeneration;\n  const runtime = state.runtime;\n  void hydration.catch(async (error: unknown) => {\n    if (\n      state.lifecycleGeneration !== generation ||\n      isDatabaseUnavailableError(error)\n    )\n      return;\n\n    await reportKeyingVerificationErrorInCauseChain(\n      error,\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: null,\n        objectKind: \"container\",\n        operation: \"container.hydration.background\",\n        organizationId: runtime.auth.organizationId,\n      },\n    );\n    try {\n      const message = \"Container background hydration failed\";\n      if (runtime.util.logError) {\n        await runtime.util.logError(message, error);\n      } else {\n        await runtime.util.log(`${message}: ${errorMessage(error)}`);\n      }\n    } catch {\n      // A host logger must not turn an observed refusal into a new rejection.\n    }\n  });\n}\n"]}

package/stores/container-contents/containerPurgeCore.js

@@ -1,98 +0,0 @@
-import { purgeContainerTree } from "../../workflows/container-contents/container-state/purgeTree.js";
-import { prepareContainerDocumentRotationSnapshot } from "./documentRotation.js";
-import { getContainerContentsStoreLogLabel } from "./logLabel.js";
-import { updateContainerContentsSnapshot } from "./state.js";
-/** @internal Reconciles any completed destructive prefix after expiry. */
-export async function refreshAfterStalePurge(input) {
-    const remoteParentIds = new Set();
-    for (const remoteDeletedContainerId of input.remoteDeletedContainerIds) {
-        const purgedState = input.containerStatesAtStart.get(remoteDeletedContainerId);
-        if (purgedState?.record.documentId) {
-            remoteParentIds.add(purgedState.container.parentId);
-        }
-    }
-    input.state.localContainersNeedRefresh = true;
-    await input.syncAgent.refreshLocalContainers();
-    let removedState = false;
-    for (const purgedContainerId of input.purgedContainerIds) {
-        const deletedState = input.containerStatesAtStart.get(purgedContainerId);
-        if (deletedState &&
-            input.state.containersById.get(purgedContainerId) === deletedState) {
-            input.state.containersById.delete(purgedContainerId);
-            removedState = true;
-        }
-    }
-    input.state.documentStoresNeedPriming = true;
-    if (removedState && input.state.initialized) {
-        updateContainerContentsSnapshot(input.state);
-    }
-    if (remoteParentIds.size > 0) {
-        await input.syncAgent.requestRemoteHydration({
-            followDiscoveredParentLanes: false,
-            parentIds: [...remoteParentIds],
-            resetAllLaneWatermarks: true,
-        });
-    }
-}
-// Shared core of the two recursive purge operations (purgeContainer and
-// emptyTrash): guard readiness and the remote-authority gate, run the
-// recursive purge engine, drop the purged containers from the tree, and log
-// the outcome. The operations differ only in target validation, whether the
-// root container itself survives, and how the result is described/judged.
-export async function runContainerPurge(state, syncAgent, containerId, options, isCurrent, operation) {
-    if (state.runtime.infra.dbStatus !== "ready" || !state.snapshot.ready) {
-        return false;
-    }
-    const targetState = state.containersById.get(containerId);
-    if (!targetState || !operation.validateTarget(targetState)) {
-        return false;
-    }
-    // Any remote container or document in the subtree needs the server, so require
-    // auth + online when the target itself is remote (a local-only subtree can be
-    // torn down offline, matching deleteContainer's gate).
-    const isRemoteContainer = Boolean(targetState.record.documentId);
-    if (isRemoteContainer &&
-        (!state.runtime.auth.isAuthenticated || !state.runtime.state.online)) {
-        return false;
-    }
-    const containerStatesAtStart = new Map(state.containersById);
-    const result = await purgeContainerTree({
-        containersById: state.containersById,
-        keepRootContainer: operation.keepRootContainer ?? false,
-        onProgress: options?.onProgress,
-        persistence: state.persistence,
-        prepareDocumentRotationSnapshot: (document) => prepareContainerDocumentRotationSnapshot(state.runtime, document),
-        resolveProjectionUserKey: state.resolveProjectionUserKey,
-        rootContainerId: containerId,
-        runtime: state.runtime,
-        signal: options?.signal,
-        stillCurrent: isCurrent,
-    });
-    if (!result) {
-        return false;
-    }
-    const purgedContainerIds = new Set(result.purgedContainerIds);
-    const hasUnsettledRemoteDelete = result.remoteDeletedContainerIds.some((containerId) => !purgedContainerIds.has(containerId));
-    if (!isCurrent() || hasUnsettledRemoteDelete) {
-        await refreshAfterStalePurge({
-            completedCount: result.completedCount,
-            containerStatesAtStart,
-            purgedContainerIds: result.purgedContainerIds,
-            remoteDeletedContainerIds: result.remoteDeletedContainerIds,
-            state,
-            syncAgent,
-        });
-        return false;
-    }
-    for (const purgedContainerId of result.purgedContainerIds) {
-        state.containersById.delete(purgedContainerId);
-    }
-    // Only re-render when something actually left the tree; a fully-failed or
-    // immediately-cancelled run changed nothing.
-    if (result.purgedContainerIds.length > 0) {
-        updateContainerContentsSnapshot(state);
-    }
-    state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: ${operation.describeResult(targetState, result)}`);
-    return operation.didSucceed(result);
-}
-//# sourceMappingURL=containerPurgeCore.js.map

package/stores/container-contents/containerPurgeCore.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"containerPurgeCore.js","sourceRoot":"","sources":["containerPurgeCore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,wCAAwC,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,+BAA+B,EAAE,MAAM,SAAS,CAAC;AAY1D,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAO5C;IACC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAiB,CAAC;IACjD,KAAK,MAAM,wBAAwB,IAAI,KAAK,CAAC,yBAAyB,EAAE,CAAC;QACvE,MAAM,WAAW,GAAG,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAClD,wBAAwB,CACzB,CAAC;QACF,IAAI,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;YACnC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAC9C,MAAM,KAAK,CAAC,SAAS,CAAC,sBAAsB,EAAE,CAAC;IAC/C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,iBAAiB,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACzD,MAAM,YAAY,GAAG,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACzE,IACE,YAAY;YACZ,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,YAAY,EAClE,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACrD,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;IAC7C,IAAI,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC5C,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,SAAS,CAAC,sBAAsB,CAAC;YAC3C,2BAA2B,EAAE,KAAK;YAClC,SAAS,EAAE,CAAC,GAAG,eAAe,CAAC;YAC/B,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,sEAAsE;AACtE,4EAA4E;AAC5E,4EAA4E;AAC5E,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,OAAiC,EACjC,SAA8B,EAC9B,SAQC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+EAA+E;IAC/E,8EAA8E;IAC9E,uDAAuD;IACvD,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjE,IACE,iBAAiB;QACjB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EACpE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;QACtC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,IAAI,KAAK;QACvD,UAAU,EAAE,OAAO,EAAE,UAAU;QAC/B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,+BAA+B,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC5C,wCAAwC,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC;QACnE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,eAAe,EAAE,WAAW;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,OAAO,EAAE,MAAM;QACvB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9D,MAAM,wBAAwB,GAAG,MAAM,CAAC,yBAAyB,CAAC,IAAI,CACpE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CACtD,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,IAAI,wBAAwB,EAAE,CAAC;QAC7C,MAAM,sBAAsB,CAAC;YAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,sBAAsB;YACtB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;YAC3D,KAAK;YACL,SAAS;SACV,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,iBAAiB,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC1D,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACjD,CAAC;IACD,0EAA0E;IAC1E,6CAA6C;IAC7C,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAChG,CAAC;IACF,OAAO,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC","sourcesContent":["import type { PurgeOptions } from \"../../workflows/container-contents/container-state/purgeProgress\";\nimport { purgeContainerTree } from \"../../workflows/container-contents/container-state/purgeTree\";\nimport { prepareContainerDocumentRotationSnapshot } from \"./documentRotation\";\nimport { getContainerContentsStoreLogLabel } from \"./logLabel\";\nimport { updateContainerContentsSnapshot } from \"./state\";\nimport type {\n  ContainerContentsStoreSyncAgent,\n  ContainerState,\n} from \"./syncAgent\";\nimport type { ContainerContentsStoreState } from \"./types\";\nimport type { ContainerWriteGuard } from \"./writeGeneration\";\n\ntype ContainerPurgeResult = NonNullable<\n  Awaited<ReturnType<typeof purgeContainerTree>>\n>;\n\n/** @internal Reconciles any completed destructive prefix after expiry. */\nexport async function refreshAfterStalePurge(input: {\n  completedCount: number;\n  containerStatesAtStart: ReadonlyMap<string, ContainerState>;\n  purgedContainerIds: readonly string[];\n  remoteDeletedContainerIds: readonly string[];\n  state: ContainerContentsStoreState;\n  syncAgent: ContainerContentsStoreSyncAgent;\n}): Promise<void> {\n  const remoteParentIds = new Set<string | null>();\n  for (const remoteDeletedContainerId of input.remoteDeletedContainerIds) {\n    const purgedState = input.containerStatesAtStart.get(\n      remoteDeletedContainerId,\n    );\n    if (purgedState?.record.documentId) {\n      remoteParentIds.add(purgedState.container.parentId);\n    }\n  }\n\n  input.state.localContainersNeedRefresh = true;\n  await input.syncAgent.refreshLocalContainers();\n  let removedState = false;\n  for (const purgedContainerId of input.purgedContainerIds) {\n    const deletedState = input.containerStatesAtStart.get(purgedContainerId);\n    if (\n      deletedState &&\n      input.state.containersById.get(purgedContainerId) === deletedState\n    ) {\n      input.state.containersById.delete(purgedContainerId);\n      removedState = true;\n    }\n  }\n  input.state.documentStoresNeedPriming = true;\n  if (removedState && input.state.initialized) {\n    updateContainerContentsSnapshot(input.state);\n  }\n  if (remoteParentIds.size > 0) {\n    await input.syncAgent.requestRemoteHydration({\n      followDiscoveredParentLanes: false,\n      parentIds: [...remoteParentIds],\n      resetAllLaneWatermarks: true,\n    });\n  }\n}\n\n// Shared core of the two recursive purge operations (purgeContainer and\n// emptyTrash): guard readiness and the remote-authority gate, run the\n// recursive purge engine, drop the purged containers from the tree, and log\n// the outcome. The operations differ only in target validation, whether the\n// root container itself survives, and how the result is described/judged.\nexport async function runContainerPurge(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  options: PurgeOptions | undefined,\n  isCurrent: ContainerWriteGuard,\n  operation: {\n    describeResult: (\n      target: ContainerState,\n      result: ContainerPurgeResult,\n    ) => string;\n    didSucceed: (result: ContainerPurgeResult) => boolean;\n    keepRootContainer?: boolean | undefined;\n    validateTarget: (target: ContainerState) => boolean;\n  },\n): Promise<boolean> {\n  if (state.runtime.infra.dbStatus !== \"ready\" || !state.snapshot.ready) {\n    return false;\n  }\n\n  const targetState = state.containersById.get(containerId);\n  if (!targetState || !operation.validateTarget(targetState)) {\n    return false;\n  }\n\n  // Any remote container or document in the subtree needs the server, so require\n  // auth + online when the target itself is remote (a local-only subtree can be\n  // torn down offline, matching deleteContainer's gate).\n  const isRemoteContainer = Boolean(targetState.record.documentId);\n  if (\n    isRemoteContainer &&\n    (!state.runtime.auth.isAuthenticated || !state.runtime.state.online)\n  ) {\n    return false;\n  }\n  const containerStatesAtStart = new Map(state.containersById);\n\n  const result = await purgeContainerTree({\n    containersById: state.containersById,\n    keepRootContainer: operation.keepRootContainer ?? false,\n    onProgress: options?.onProgress,\n    persistence: state.persistence,\n    prepareDocumentRotationSnapshot: (document) =>\n      prepareContainerDocumentRotationSnapshot(state.runtime, document),\n    resolveProjectionUserKey: state.resolveProjectionUserKey,\n    rootContainerId: containerId,\n    runtime: state.runtime,\n    signal: options?.signal,\n    stillCurrent: isCurrent,\n  });\n  if (!result) {\n    return false;\n  }\n  const purgedContainerIds = new Set(result.purgedContainerIds);\n  const hasUnsettledRemoteDelete = result.remoteDeletedContainerIds.some(\n    (containerId) => !purgedContainerIds.has(containerId),\n  );\n  if (!isCurrent() || hasUnsettledRemoteDelete) {\n    await refreshAfterStalePurge({\n      completedCount: result.completedCount,\n      containerStatesAtStart,\n      purgedContainerIds: result.purgedContainerIds,\n      remoteDeletedContainerIds: result.remoteDeletedContainerIds,\n      state,\n      syncAgent,\n    });\n    return false;\n  }\n\n  for (const purgedContainerId of result.purgedContainerIds) {\n    state.containersById.delete(purgedContainerId);\n  }\n  // Only re-render when something actually left the tree; a fully-failed or\n  // immediately-cancelled run changed nothing.\n  if (result.purgedContainerIds.length > 0) {\n    updateContainerContentsSnapshot(state);\n  }\n  state.runtime.util.log(\n    `${getContainerContentsStoreLogLabel(state)}: ${operation.describeResult(targetState, result)}`,\n  );\n  return operation.didSucceed(result);\n}\n"]}

package/stores/container-contents/containerStateMap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"containerStateMap.js","sourceRoot":"","sources":["containerStateMap.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,iBAAkB,SAAQ,GAA2B;IACvD,uBAAuB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7D,uBAAuB,GAAG,CAAC,CAAC;IAE5B,YAAY,OAA6C;QACvD,KAAK,EAAE,CAAC;QACR,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;YACjD,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAEQ,KAAK;QACZ,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAEQ,MAAM,CAAC,WAAmB;QACjC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1C,sEAAsE;QACtE,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEQ,GAAG,CAAC,WAAmB,EAAE,KAAqB;QACrD,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,0BAA0B;QACxB,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC;IAED,gBAAgB,CACd,WAAmB,EACnB,QAAqC;QAErC,OAAO,CACL,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CACjC,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,WAAmB;QACxC,IAAI,CAAC,uBAAuB,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC9E,CAAC;CACF;AAED,MAAM,UAAU,wCAAwC,CACtD,MAAmC;IAEnC,OAAO,MAAM,YAAY,iBAAiB;QACxC,CAAC,CAAC,MAAM,CAAC,0BAA0B,EAAE;QACrC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAmC,EACnC,WAAmB,EACnB,QAAqC;IAErC,OAAO,CACL,MAAM,YAAY,iBAAiB;QACnC,MAAM,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAC/C,CAAC;AACJ,CAAC","sourcesContent":["import type { ContainerState } from \"../../workflows/container-contents/remoteHydration\";\n\nexport class ContainerStateMap extends Map<string, ContainerState> {\n  readonly #mutationGenerationById = new Map<string, number>();\n  #nextMutationGeneration = 0;\n\n  constructor(entries?: ReadonlyMap<string, ContainerState>) {\n    super();\n    for (const [containerId, state] of entries ?? []) {\n      super.set(containerId, state);\n    }\n  }\n\n  override clear(): void {\n    for (const containerId of this.keys()) {\n      this.recordMutation(containerId);\n    }\n    super.clear();\n  }\n\n  override delete(containerId: string): boolean {\n    const deleted = super.delete(containerId);\n    // An absent delete is still an authoritative tombstone observation. A\n    // local-refresh query that started before it must not install a stale row\n    // merely because no in-memory value existed for Map.delete to remove.\n    this.recordMutation(containerId);\n    return deleted;\n  }\n\n  override set(containerId: string, state: ContainerState): this {\n    this.recordMutation(containerId);\n    return super.set(containerId, state);\n  }\n\n  captureMutationGenerations(): ReadonlyMap<string, number> {\n    return new Map(this.#mutationGenerationById);\n  }\n\n  hasMutationAfter(\n    containerId: string,\n    baseline: ReadonlyMap<string, number>,\n  ): boolean {\n    return (\n      (this.#mutationGenerationById.get(containerId) ?? 0) !==\n      (baseline.get(containerId) ?? 0)\n    );\n  }\n\n  private recordMutation(containerId: string): void {\n    this.#nextMutationGeneration += 1;\n    this.#mutationGenerationById.set(containerId, this.#nextMutationGeneration);\n  }\n}\n\nexport function captureContainerStateMutationGenerations(\n  states: Map<string, ContainerState>,\n): ReadonlyMap<string, number> {\n  return states instanceof ContainerStateMap\n    ? states.captureMutationGenerations()\n    : new Map();\n}\n\nexport function containerStateMutatedAfter(\n  states: Map<string, ContainerState>,\n  containerId: string,\n  baseline: ReadonlyMap<string, number>,\n): boolean {\n  return (\n    states instanceof ContainerStateMap &&\n    states.hasMutationAfter(containerId, baseline)\n  );\n}\n"]}

package/stores/container-contents/containerStatePersistence.js

@@ -1,57 +0,0 @@
-import { installContainerMetadataRecord, persistContainerMetadataStateFromRuntime, } from "../../workflows/container-contents/metadata/index.js";
-import { removeMissingContainerState } from "./missingContainerState.js";
-import { updateContainerContentsSnapshot } from "./state.js";
-export async function persistContainerState(state, containerState, options = {}) {
-    const { expectedStateWhenMissing, isCurrent, updateView = true } = options;
-    const persisted = await persistContainerMetadataStateFromRuntime({
-        metadataState: containerState,
-        localMetadataPatch: options.localMetadataPatch,
-        localUpdate: options.localUpdate,
-        patch: options.patch ?? {},
-        persistence: state.persistence,
-        createIntentSettlement: options.createIntentSettlement,
-        moveIntentSettlement: options.moveIntentSettlement,
-        preserveDurableStructureWhenPending: options.preserveDurableStructureWhenPending,
-        runtime: state.runtime,
-        saveOptions: options.saveOptions,
-        stillCurrent: isCurrent,
-    });
-    if (isCurrent?.() === false) {
-        return { status: "stale-generation" };
-    }
-    if (!persisted) {
-        removeMissingContainerState(state, expectedStateWhenMissing ?? containerState);
-        return { status: "missing" };
-    }
-    containerState.container = persisted.container;
-    installContainerMetadataRecord(containerState, persisted.record);
-    if (persisted.mutationSuperseded || persisted.syncIdentitySuperseded) {
-        const cachedState = state.containersById.get(containerState.container.id);
-        if (cachedState && cachedState !== containerState) {
-            cachedState.container = containerState.container;
-            cachedState.doc = containerState.doc;
-            cachedState.metadataWriterProjection =
-                containerState.metadataWriterProjection;
-            installContainerMetadataRecord(cachedState, persisted.record);
-        }
-        // The requested structural mutation was not applied. Refresh from the
-        // authoritative state installed above, but make the caller fail explicitly
-        // so it cannot schedule sync or report the dropped mutation as successful.
-        updateContainerContentsSnapshot(state);
-        return { record: persisted.record, status: "identity-superseded" };
-    }
-    if (updateView) {
-        updateContainerContentsSnapshot(state);
-    }
-    return {
-        record: persisted.record,
-        status: "persisted",
-        ...(persisted.createIntentSettled
-            ? { createIntentSettled: true }
-            : {}),
-        ...(persisted.moveIntentSettled
-            ? { moveIntentSettled: true }
-            : {}),
-    };
-}
-//# sourceMappingURL=containerStatePersistence.js.map

package/stores/container-contents/containerStatePersistence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"containerStatePersistence.js","sourceRoot":"","sources":["containerStatePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,wCAAwC,GACzC,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,+BAA+B,EAAE,MAAM,SAAS,CAAC;AAwB1D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAkC,EAClC,cAA8B,EAC9B,UAAwC,EAAE;IAE1C,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,UAAU,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC3E,MAAM,SAAS,GAAG,MAAM,wCAAwC,CAAC;QAC/D,aAAa,EAAE,cAAc;QAC7B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;QACtD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,mCAAmC,EACjC,OAAO,CAAC,mCAAmC;QAC7C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACxC,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,2BAA2B,CACzB,KAAK,EACL,wBAAwB,IAAI,cAAc,CAC3C,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IACD,cAAc,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;IAC/C,8BAA8B,CAAC,cAAc,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,SAAS,CAAC,kBAAkB,IAAI,SAAS,CAAC,sBAAsB,EAAE,CAAC;QACrE,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,WAAW,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;YAClD,WAAW,CAAC,SAAS,GAAG,cAAc,CAAC,SAAS,CAAC;YACjD,WAAW,CAAC,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC;YACrC,WAAW,CAAC,wBAAwB;gBAClC,cAAc,CAAC,wBAAwB,CAAC;YAC1C,8BAA8B,CAAC,WAAW,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC;QACD,sEAAsE;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACvC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,MAAM,EAAE,WAAW;QACnB,GAAG,CAAC,SAAS,CAAC,mBAAmB;YAC/B,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAa,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS,CAAC,iBAAiB;YAC7B,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAa,EAAE;YACtC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC","sourcesContent":["import {\n  installContainerMetadataRecord,\n  persistContainerMetadataStateFromRuntime,\n} from \"../../workflows/container-contents/metadata\";\nimport type { PersistContainerStateResult } from \"../../workflows/container-contents/remoteHydration\";\nimport { removeMissingContainerState } from \"./missingContainerState\";\nimport { updateContainerContentsSnapshot } from \"./state\";\nimport type { ContainerState } from \"./syncAgent\";\nimport type { ContainerContentsStoreState } from \"./types\";\n\ntype MetadataPersistenceInput = Parameters<\n  typeof persistContainerMetadataStateFromRuntime\n>[0];\n\ninterface PersistContainerStateOptions\n  extends Pick<\n    MetadataPersistenceInput,\n    | \"patch\"\n    | \"saveOptions\"\n    | \"localMetadataPatch\"\n    | \"localUpdate\"\n    | \"createIntentSettlement\"\n    | \"moveIntentSettlement\"\n    | \"preserveDurableStructureWhenPending\"\n  > {\n  expectedStateWhenMissing?: ContainerState | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  updateView?: boolean | undefined;\n}\n\nexport async function persistContainerState(\n  state: ContainerContentsStoreState,\n  containerState: ContainerState,\n  options: PersistContainerStateOptions = {},\n): Promise<PersistContainerStateResult> {\n  const { expectedStateWhenMissing, isCurrent, updateView = true } = options;\n  const persisted = await persistContainerMetadataStateFromRuntime({\n    metadataState: containerState,\n    localMetadataPatch: options.localMetadataPatch,\n    localUpdate: options.localUpdate,\n    patch: options.patch ?? {},\n    persistence: state.persistence,\n    createIntentSettlement: options.createIntentSettlement,\n    moveIntentSettlement: options.moveIntentSettlement,\n    preserveDurableStructureWhenPending:\n      options.preserveDurableStructureWhenPending,\n    runtime: state.runtime,\n    saveOptions: options.saveOptions,\n    stillCurrent: isCurrent,\n  });\n  if (isCurrent?.() === false) {\n    return { status: \"stale-generation\" };\n  }\n  if (!persisted) {\n    removeMissingContainerState(\n      state,\n      expectedStateWhenMissing ?? containerState,\n    );\n    return { status: \"missing\" };\n  }\n  containerState.container = persisted.container;\n  installContainerMetadataRecord(containerState, persisted.record);\n  if (persisted.mutationSuperseded || persisted.syncIdentitySuperseded) {\n    const cachedState = state.containersById.get(containerState.container.id);\n    if (cachedState && cachedState !== containerState) {\n      cachedState.container = containerState.container;\n      cachedState.doc = containerState.doc;\n      cachedState.metadataWriterProjection =\n        containerState.metadataWriterProjection;\n      installContainerMetadataRecord(cachedState, persisted.record);\n    }\n    // The requested structural mutation was not applied. Refresh from the\n    // authoritative state installed above, but make the caller fail explicitly\n    // so it cannot schedule sync or report the dropped mutation as successful.\n    updateContainerContentsSnapshot(state);\n    return { record: persisted.record, status: \"identity-superseded\" };\n  }\n  if (updateView) {\n    updateContainerContentsSnapshot(state);\n  }\n  return {\n    record: persisted.record,\n    status: \"persisted\",\n    ...(persisted.createIntentSettled\n      ? { createIntentSettled: true as const }\n      : {}),\n    ...(persisted.moveIntentSettled\n      ? { moveIntentSettled: true as const }\n      : {}),\n  };\n}\n"]}

package/stores/container-contents/documentRecovery.js

@@ -1,114 +0,0 @@
-import { primeDocumentsForContainerSubtree, primeDocumentsForLoadedRoots, } from "../../workflows/container-contents/documentPriming/index.js";
-import { recoverStaleSessionRoot } from "../../workflows/container-contents/recovery/staleRootRecovery.js";
-import { createContainerContentsDocumentsRuntime, } from "../../workflows/container-contents/runtime.js";
-import { isDatabaseUnavailableError } from "../../workflows/container-contents/syncLane.js";
-import { openDocumentStore } from "../documents/index.js";
-import { getContainerContentsStoreLogLabel } from "./logLabel.js";
-const staleRootRecoveryLogState = new WeakMap();
-const rejectedAdoptionRuntime = new WeakMap();
-function createPrimeHost(runtime) {
-    return {
-        documentWorkflowRuntime: (containerId) => createContainerContentsDocumentsRuntime(runtime, containerId),
-        openDocumentStore: ({ documentId, localId, runtime, }) => openDocumentStore(runtime.state.domainScope, localId, runtime, documentId),
-    };
-}
-export async function primeStoreDocumentSubtree(state, rootContainerId, isCurrent = () => true) {
-    if (!isCurrent())
-        return;
-    const runtime = state.runtime;
-    await primeDocumentsForContainerSubtree({
-        containersById: state.containersById,
-        host: createPrimeHost(runtime),
-        isCurrent,
-        rootContainerId,
-        runtime,
-    });
-}
-export async function primeStoreDocuments(state, isCurrent = () => true) {
-    if (!isCurrent())
-        return;
-    const runtime = state.runtime;
-    // Consume the current signal before scanning. A topology/root reconciliation
-    // that lands during an awaited query can then re-arm the next pass without
-    // this pass erasing that newer signal when it completes.
-    state.documentStoresNeedPriming = false;
-    try {
-        const result = await primeDocumentsForLoadedRoots({
-            containersById: state.containersById,
-            host: createPrimeHost(runtime),
-            isCurrent,
-            organizationId: runtime.auth?.organizationId ?? null,
-            runtime,
-        });
-        if (!isCurrent()) {
-            state.documentStoresNeedPriming = true;
-            return;
-        }
-        runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: document priming candidates=${result.candidateCount} roots=${result.rootCount} primed=${result.primedCount} orphaned=${result.orphanPrimedCount} unroutable=${result.unroutableCount}`);
-    }
-    catch (error) {
-        if (!isCurrent()) {
-            state.documentStoresNeedPriming = true;
-            return;
-        }
-        state.documentStoresNeedPriming = true;
-        throw error;
-    }
-}
-export async function recoverStoreStaleRoot(state, isCurrent = () => true) {
-    if (!isCurrent()) {
-        return "context-changed";
-    }
-    const runtime = state.runtime;
-    if (rejectedAdoptionRuntime.get(state) === runtime) {
-        return "not-needed";
-    }
-    let result;
-    try {
-        result = await recoverStaleSessionRoot({ ...state, runtime }, isCurrent);
-    }
-    catch (error) {
-        if (!isCurrent()) {
-            return "context-changed";
-        }
-        if (isDatabaseUnavailableError(error)) {
-            throw error;
-        }
-        const message = `${getContainerContentsStoreLogLabel(state)}: stale root recovery failed`;
-        if (state.runtime.util.logError) {
-            state.runtime.util.logError(message, error);
-        }
-        else {
-            state.runtime.util.log(message);
-        }
-        return "not-needed";
-    }
-    if (!isCurrent()) {
-        return "context-changed";
-    }
-    const message = `${getContainerContentsStoreLogLabel(state)}: stale root recovery status=${result.status} candidates=${result.candidateCount}`;
-    const previousLogState = staleRootRecoveryLogState.get(state);
-    const occurrenceCount = previousLogState?.message === message
-        ? previousLogState.occurrenceCount + 1
-        : 1;
-    staleRootRecoveryLogState.set(state, { message, occurrenceCount });
-    if (result.status !== "not-needed") {
-        if (occurrenceCount === 1) {
-            runtime.util.log(message);
-        }
-        else if ((occurrenceCount & (occurrenceCount - 1)) === 0) {
-            runtime.util.log(`${message} occurrences=${occurrenceCount}`);
-        }
-    }
-    if (result.status === "context-changed") {
-        rejectedAdoptionRuntime.set(state, runtime);
-    }
-    else {
-        rejectedAdoptionRuntime.delete(state);
-    }
-    if (result.reassigned) {
-        state.documentStoresNeedPriming = true;
-    }
-    return result.status;
-}
-//# sourceMappingURL=documentRecovery.js.map

package/stores/container-contents/documentRecovery.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"documentRecovery.js","sourceRoot":"","sources":["documentRecovery.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iCAAiC,EACjC,4BAA4B,GAC7B,MAAM,oDAAoD,CAAC;AAM5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AAExG,OAAO,EAEL,uCAAuC,GACxC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAoB/D,MAAM,yBAAyB,GAAG,IAAI,OAAO,EAG1C,CAAC;AACJ,MAAM,uBAAuB,GAAG,IAAI,OAAO,EAGxC,CAAC;AAEJ,SAAS,eAAe,CACtB,OAA8C;IAE9C,OAAO;QACL,uBAAuB,EAAE,CAAC,WAAW,EAAE,EAAE,CACvC,uCAAuC,CAAC,OAAO,EAAE,WAAW,CAAC;QAC/D,iBAAiB,EAAE,CAAC,EAClB,UAAU,EACV,OAAO,EACP,OAAO,GACR,EAA+B,EAAE,CAChC,iBAAiB,CACf,OAAO,CAAC,KAAK,CAAC,WAAW,EACzB,OAAO,EACP,OAAO,EACP,UAAU,CACX;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAiC,EACjC,eAAuB,EACvB,YAA2B,GAAG,EAAE,CAAC,IAAI;IAErC,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO;IACzB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,iCAAiC,CAAC;QACtC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC;QAC9B,SAAS;QACT,eAAe;QACf,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAiC,EACjC,YAA2B,GAAG,EAAE,CAAC,IAAI;IAErC,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO;IACzB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,6EAA6E;IAC7E,2EAA2E;IAC3E,yDAAyD;IACzD,KAAK,CAAC,yBAAyB,GAAG,KAAK,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC;YAChD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC;YAC9B,SAAS;YACT,cAAc,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,IAAI,IAAI;YACpD,OAAO;SACR,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACvC,OAAO;QACT,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,GAAG,iCAAiC,CAAC,KAAK,CAAC,iCAAiC,MAAM,CAAC,cAAc,UAAU,MAAM,CAAC,SAAS,WAAW,MAAM,CAAC,WAAW,aAAa,MAAM,CAAC,iBAAiB,eAAe,MAAM,CAAC,eAAe,EAAE,CACrO,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACvC,OAAO;QACT,CAAC;QACD,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;QACvC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAiC,EACjC,YAA2B,GAAG,EAAE,CAAC,IAAI;IAErC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,OAAO,EAAE,CAAC;QACnD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,MAA2D,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,uBAAuB,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,iCAAiC,CAAC,KAAK,CAAC,8BAA8B,CAAC;QAC1F,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,iCAAiC,CAAC,KAAK,CAAC,gCAAgC,MAAM,CAAC,MAAM,eAAe,MAAM,CAAC,cAAc,EAAE,CAAC;IAC/I,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,eAAe,GACnB,gBAAgB,EAAE,OAAO,KAAK,OAAO;QACnC,CAAC,CAAC,gBAAgB,CAAC,eAAe,GAAG,CAAC;QACtC,CAAC,CAAC,CAAC,CAAC;IACR,yBAAyB,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACnC,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,CAAC,eAAe,GAAG,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,gBAAgB,eAAe,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACxC,uBAAuB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC","sourcesContent":["import type { ContainerContentsPersistence } from \"../../workflows/container-contents/containerPersistence\";\nimport {\n  primeDocumentsForContainerSubtree,\n  primeDocumentsForLoadedRoots,\n} from \"../../workflows/container-contents/documentPriming\";\nimport type {\n  ContainerDocumentPrimeHost,\n  ContainerDocumentPrimeStore,\n} from \"../../workflows/container-contents/documentQueries/types\";\nimport type { StaleRootRecoveryStatus } from \"../../workflows/container-contents/recovery/staleRootRecovery\";\nimport { recoverStaleSessionRoot } from \"../../workflows/container-contents/recovery/staleRootRecovery\";\nimport type { ContainerState } from \"../../workflows/container-contents/remoteHydration\";\nimport {\n  type ContainerContentsStoreWorkflowRuntime,\n  createContainerContentsDocumentsRuntime,\n} from \"../../workflows/container-contents/runtime\";\nimport { isDatabaseUnavailableError } from \"../../workflows/container-contents/syncLane\";\nimport { openDocumentStore } from \"../documents\";\nimport { getContainerContentsStoreLogLabel } from \"./logLabel\";\n\ntype PrimeDocumentRuntime = ReturnType<\n  typeof createContainerContentsDocumentsRuntime\n>;\n\ninterface DocumentRecoveryStoreState {\n  readonly containersById: Map<string, ContainerState>;\n  documentStoresNeedPriming: boolean;\n  readonly logLabel?: string | undefined;\n  readonly persistence: ContainerContentsPersistence;\n  readonly rootLaneHydrated: boolean;\n  readonly runtime: ContainerContentsStoreWorkflowRuntime;\n}\n\ninterface StaleRootRecoveryLogState {\n  readonly message: string;\n  readonly occurrenceCount: number;\n}\n\nconst staleRootRecoveryLogState = new WeakMap<\n  DocumentRecoveryStoreState,\n  StaleRootRecoveryLogState\n>();\nconst rejectedAdoptionRuntime = new WeakMap<\n  DocumentRecoveryStoreState,\n  ContainerContentsStoreWorkflowRuntime\n>();\n\nfunction createPrimeHost(\n  runtime: ContainerContentsStoreWorkflowRuntime,\n): ContainerDocumentPrimeHost<PrimeDocumentRuntime> {\n  return {\n    documentWorkflowRuntime: (containerId) =>\n      createContainerContentsDocumentsRuntime(runtime, containerId),\n    openDocumentStore: ({\n      documentId,\n      localId,\n      runtime,\n    }): ContainerDocumentPrimeStore =>\n      openDocumentStore(\n        runtime.state.domainScope,\n        localId,\n        runtime,\n        documentId,\n      ),\n  };\n}\n\nexport async function primeStoreDocumentSubtree(\n  state: DocumentRecoveryStoreState,\n  rootContainerId: string,\n  isCurrent: () => boolean = () => true,\n): Promise<void> {\n  if (!isCurrent()) return;\n  const runtime = state.runtime;\n  await primeDocumentsForContainerSubtree({\n    containersById: state.containersById,\n    host: createPrimeHost(runtime),\n    isCurrent,\n    rootContainerId,\n    runtime,\n  });\n}\n\nexport async function primeStoreDocuments(\n  state: DocumentRecoveryStoreState,\n  isCurrent: () => boolean = () => true,\n): Promise<void> {\n  if (!isCurrent()) return;\n  const runtime = state.runtime;\n  // Consume the current signal before scanning. A topology/root reconciliation\n  // that lands during an awaited query can then re-arm the next pass without\n  // this pass erasing that newer signal when it completes.\n  state.documentStoresNeedPriming = false;\n  try {\n    const result = await primeDocumentsForLoadedRoots({\n      containersById: state.containersById,\n      host: createPrimeHost(runtime),\n      isCurrent,\n      organizationId: runtime.auth?.organizationId ?? null,\n      runtime,\n    });\n    if (!isCurrent()) {\n      state.documentStoresNeedPriming = true;\n      return;\n    }\n    runtime.util.log(\n      `${getContainerContentsStoreLogLabel(state)}: document priming candidates=${result.candidateCount} roots=${result.rootCount} primed=${result.primedCount} orphaned=${result.orphanPrimedCount} unroutable=${result.unroutableCount}`,\n    );\n  } catch (error) {\n    if (!isCurrent()) {\n      state.documentStoresNeedPriming = true;\n      return;\n    }\n    state.documentStoresNeedPriming = true;\n    throw error;\n  }\n}\n\nexport async function recoverStoreStaleRoot(\n  state: DocumentRecoveryStoreState,\n  isCurrent: () => boolean = () => true,\n): Promise<StaleRootRecoveryStatus> {\n  if (!isCurrent()) {\n    return \"context-changed\";\n  }\n  const runtime = state.runtime;\n  if (rejectedAdoptionRuntime.get(state) === runtime) {\n    return \"not-needed\";\n  }\n\n  let result: Awaited<ReturnType<typeof recoverStaleSessionRoot>>;\n  try {\n    result = await recoverStaleSessionRoot({ ...state, runtime }, isCurrent);\n  } catch (error) {\n    if (!isCurrent()) {\n      return \"context-changed\";\n    }\n    if (isDatabaseUnavailableError(error)) {\n      throw error;\n    }\n    const message = `${getContainerContentsStoreLogLabel(state)}: stale root recovery failed`;\n    if (state.runtime.util.logError) {\n      state.runtime.util.logError(message, error);\n    } else {\n      state.runtime.util.log(message);\n    }\n    return \"not-needed\";\n  }\n  if (!isCurrent()) {\n    return \"context-changed\";\n  }\n  const message = `${getContainerContentsStoreLogLabel(state)}: stale root recovery status=${result.status} candidates=${result.candidateCount}`;\n  const previousLogState = staleRootRecoveryLogState.get(state);\n  const occurrenceCount =\n    previousLogState?.message === message\n      ? previousLogState.occurrenceCount + 1\n      : 1;\n  staleRootRecoveryLogState.set(state, { message, occurrenceCount });\n  if (result.status !== \"not-needed\") {\n    if (occurrenceCount === 1) {\n      runtime.util.log(message);\n    } else if ((occurrenceCount & (occurrenceCount - 1)) === 0) {\n      runtime.util.log(`${message} occurrences=${occurrenceCount}`);\n    }\n  }\n  if (result.status === \"context-changed\") {\n    rejectedAdoptionRuntime.set(state, runtime);\n  } else {\n    rejectedAdoptionRuntime.delete(state);\n  }\n  if (result.reassigned) {\n    state.documentStoresNeedPriming = true;\n  }\n  return result.status;\n}\n"]}

package/stores/container-contents/documentRotation.js

@@ -1,13 +0,0 @@
-import { createContainerContentsDocumentsRuntime, } from "../../workflows/container-contents/runtime.js";
-import { openDocumentStore } from "../documents/index.js";
-export async function prepareContainerDocumentRotationSnapshot(runtime, document) {
-    if (!document.documentId || !document.containerId) {
-        return null;
-    }
-    const store = openDocumentStore(runtime.state.domainScope, document.id, createContainerContentsDocumentsRuntime(runtime, document.containerId), document.documentId);
-    if (!(await store.ensureInitialized())) {
-        return null;
-    }
-    return store.assertCanRotateContentKey();
-}
-//# sourceMappingURL=documentRotation.js.map

package/stores/container-contents/documentRotation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"documentRotation.js","sourceRoot":"","sources":["documentRotation.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,uCAAuC,GACxC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,OAAyC,EACzC,QAAyB;IAEzB,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAC7B,OAAO,CAAC,KAAK,CAAC,WAAW,EACzB,QAAQ,CAAC,EAAE,EACX,uCAAuC,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,EACtE,QAAQ,CAAC,UAAU,CACpB,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,yBAAyB,EAAE,CAAC;AAC3C,CAAC","sourcesContent":["import type { DocumentSummary } from \"../../data/documents/documentSummary\";\nimport {\n  type ContainerContentsWorkflowRuntime,\n  createContainerContentsDocumentsRuntime,\n} from \"../../workflows/container-contents/runtime\";\nimport { openDocumentStore } from \"../documents\";\n\nexport async function prepareContainerDocumentRotationSnapshot(\n  runtime: ContainerContentsWorkflowRuntime,\n  document: DocumentSummary,\n): Promise<Uint8Array | null> {\n  if (!document.documentId || !document.containerId) {\n    return null;\n  }\n  const store = openDocumentStore(\n    runtime.state.domainScope,\n    document.id,\n    createContainerContentsDocumentsRuntime(runtime, document.containerId),\n    document.documentId,\n  );\n  if (!(await store.ensureInitialized())) {\n    return null;\n  }\n  return store.assertCanRotateContentKey();\n}\n"]}

package/stores/container-contents/documentWork.js

@@ -1,29 +0,0 @@
-/** Runs root repair before any work that consumes its rewritten projections. */
-export async function runContainerDocumentWork(input) {
-    if (!input.isCurrent()) {
-        return "abandoned";
-    }
-    const recoveryStatus = await input.recoverStaleRoot();
-    if (!input.isCurrent()) {
-        return "abandoned";
-    }
-    if (recoveryStatus === "context-changed") {
-        input.onContextChanged();
-        return "context-changed";
-    }
-    const movedDocumentCount = await input.syncPendingDocumentMoves();
-    if (!input.isCurrent()) {
-        return "abandoned";
-    }
-    if (movedDocumentCount > 0) {
-        input.onDocumentsMoved();
-    }
-    if (input.shouldPrimeDocuments()) {
-        await input.primeDocuments();
-        if (!input.isCurrent()) {
-            return "abandoned";
-        }
-    }
-    return "completed";
-}
-//# sourceMappingURL=documentWork.js.map

package/stores/container-contents/documentWork.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"documentWork.js","sourceRoot":"","sources":["documentWork.ts"],"names":[],"mappings":"AAYA,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAiC;IAEjC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACtD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,cAAc,KAAK,iBAAiB,EAAE,CAAC;QACzC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACzB,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,KAAK,CAAC,wBAAwB,EAAE,CAAC;IAClE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,gBAAgB,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,KAAK,CAAC,oBAAoB,EAAE,EAAE,CAAC;QACjC,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACvB,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC","sourcesContent":["import type { StaleRootRecoveryStatus } from \"../../workflows/container-contents/recovery/staleRootRecovery\";\n\ninterface ContainerDocumentWorkInput {\n  readonly isCurrent: () => boolean;\n  readonly onContextChanged: () => void;\n  readonly onDocumentsMoved: () => void;\n  readonly primeDocuments: () => Promise<void>;\n  readonly recoverStaleRoot: () => Promise<StaleRootRecoveryStatus>;\n  readonly shouldPrimeDocuments: () => boolean;\n  readonly syncPendingDocumentMoves: () => Promise<number>;\n}\n\n/** Runs root repair before any work that consumes its rewritten projections. */\nexport async function runContainerDocumentWork(\n  input: ContainerDocumentWorkInput,\n): Promise<\"abandoned\" | \"completed\" | \"context-changed\"> {\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  const recoveryStatus = await input.recoverStaleRoot();\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  if (recoveryStatus === \"context-changed\") {\n    input.onContextChanged();\n    return \"context-changed\";\n  }\n\n  const movedDocumentCount = await input.syncPendingDocumentMoves();\n  if (!input.isCurrent()) {\n    return \"abandoned\";\n  }\n  if (movedDocumentCount > 0) {\n    input.onDocumentsMoved();\n  }\n  if (input.shouldPrimeDocuments()) {\n    await input.primeDocuments();\n    if (!input.isCurrent()) {\n      return \"abandoned\";\n    }\n  }\n  return \"completed\";\n}\n"]}

package/stores/container-contents/emptyTrashOperation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"emptyTrashOperation.js","sourceRoot":"","sources":["emptyTrashOperation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAKzD,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,kFAAkF;AAClF,iFAAiF;AACjF,gFAAgF;AAChF,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAkC,EAClC,SAA0C,EAC1C,gBAAwB,EACxB,OAAsB,EACtB,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,OAAO,iBAAiB,CACtB,KAAK,EACL,SAAS,EACT,gBAAgB,EAChB,OAAO,EACP,SAAS,EACT;QACE,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAClC,kBAAkB,MAAM,CAAC,kBAAkB,CAAC,MAAM,0BAA0B,MAAM,CAAC,WAAW,UAAU;QAC1G,0DAA0D;QAC1D,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,WAAW,KAAK,CAAC;QACnE,iBAAiB,EAAE,IAAI;QACvB,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CACzB,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,IAAI;KACjD,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type { PurgeOptions } from \"../../workflows/container-contents/container-state/purgeProgress\";\nimport { runContainerPurge } from \"./containerPurgeCore\";\nimport type { ContainerContentsStoreSyncAgent } from \"./syncAgent\";\nimport type { ContainerContentsStoreState } from \"./types\";\nimport type { ContainerWriteGuard } from \"./writeGeneration\";\n\n// Permanently destroy EVERYTHING under the Trash bin — every trashed folder's\n// whole subtree and every document deleted straight into Trash — while leaving\n// the Trash system container itself in place. This is \"Empty Trash\": it reuses\n// the recursive purge engine with keepRootContainer so the bin survives, and it\n// inherits that engine's semantics — documents also linked outside Trash are\n// unlinked (not destroyed), containers are torn down leaf-first, a failed item is\n// skipped rather than aborting the sweep, and an optional signal cancels between\n// items. The target must be a real system container (the Trash bin); like every\n// purge it is online-only when any of its contents are remote.\nexport async function emptyTrash(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  trashContainerId: string,\n  options?: PurgeOptions,\n  isCurrent: ContainerWriteGuard = () => true,\n): Promise<boolean> {\n  return runContainerPurge(\n    state,\n    syncAgent,\n    trashContainerId,\n    options,\n    isCurrent,\n    {\n      describeResult: (_target, result) =>\n        `emptied trash (${result.purgedContainerIds.length} container(s) removed, ${result.failedCount} failed)`,\n      // A clean empty: nothing failed and it ran to completion.\n      didSucceed: (result) => !result.aborted && result.failedCount === 0,\n      keepRootContainer: true,\n      validateTarget: (target) =>\n        (target.container.systemSlot ?? null) !== null,\n    },\n  );\n}\n"]}

package/stores/container-contents/existingSystemContainer.js

@@ -1,58 +0,0 @@
-import { persistContainerState } from "./containerStatePersistence.js";
-import { getContainerContentsStoreLogLabel } from "./logLabel.js";
-import { invalidateRemoteContainerWrites } from "./remoteWriteGuards.js";
-import { applySystemContainerIcon } from "./systemContainerIcon.js";
-import { findRootContainerState } from "./systemContainerLookup.js";
-import { promoteExistingLocalSystemContainerSync } from "./systemContainerPromotion.js";
-import { toContainerNode } from "./utils.js";
-export async function updateExistingSystemContainer(state, syncAgent, existing, options, isCurrent) {
-    if ("icon" in options) {
-        const iconApplied = await applySystemContainerIcon({
-            containerState: existing,
-            icon: options.icon,
-            persistIcon: async (containerState, icon, update) => {
-                if (options.deferRemoteBootstrap) {
-                    invalidateRemoteContainerWrites(state, [containerState.container.id]);
-                }
-                const result = await persistContainerState(state, containerState, {
-                    patch: { icon },
-                    updateView: false,
-                    localMetadataPatch: { icon },
-                    localUpdate: update,
-                    isCurrent,
-                });
-                return result.status;
-            },
-            state,
-            syncAgent,
-            isCurrent,
-        });
-        if (!iconApplied || !isCurrent()) {
-            return null;
-        }
-    }
-    const promoted = await promoteExistingLocalSystemContainerSync({
-        containerState: existing,
-        logLabel: getContainerContentsStoreLogLabel(state),
-        options,
-        persistPromotion: async (containerState, promotion) => {
-            if (options.deferRemoteBootstrap) {
-                invalidateRemoteContainerWrites(state, [containerState.container.id]);
-            }
-            const result = await persistContainerState(state, containerState, {
-                saveOptions: promotion.queueCreateIntent
-                    ? { createIntent: { parentContainerId: promotion.parentContainerId } }
-                    : undefined,
-                localUpdate: promotion.metadataUpdate,
-                isCurrent,
-            });
-            return result.status === "persisted";
-        },
-        rootState: findRootContainerState(state),
-        state,
-        syncAgent,
-        isCurrent,
-    });
-    return promoted && isCurrent() ? toContainerNode(existing) : null;
-}
-//# sourceMappingURL=existingSystemContainer.js.map

package/stores/container-contents/existingSystemContainer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"existingSystemContainer.js","sourceRoot":"","sources":["existingSystemContainer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAKtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,uCAAuC,EAAE,MAAM,4BAA4B,CAAC;AAKrF,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG1C,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAkC,EAClC,SAA0C,EAC1C,QAAwB,EACxB,OAAqC,EACrC,SAA8B;IAE9B,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC;YACjD,cAAc,EAAE,QAAQ;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;gBAClD,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;oBACjC,+BAA+B,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,cAAc,EAAE;oBAChE,KAAK,EAAE,EAAE,IAAI,EAAE;oBACf,UAAU,EAAE,KAAK;oBACjB,kBAAkB,EAAE,EAAE,IAAI,EAAE;oBAC5B,WAAW,EAAE,MAAM;oBACnB,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACvB,CAAC;YACD,KAAK;YACL,SAAS;YACT,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,uCAAuC,CAAC;QAC7D,cAAc,EAAE,QAAQ;QACxB,QAAQ,EAAE,iCAAiC,CAAC,KAAK,CAAC;QAClD,OAAO;QACP,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE;YACpD,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;gBACjC,+BAA+B,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,cAAc,EAAE;gBAChE,WAAW,EAAE,SAAS,CAAC,iBAAiB;oBACtC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAAE;oBACtE,CAAC,CAAC,SAAS;gBACb,WAAW,EAAE,SAAS,CAAC,cAAc;gBACrC,SAAS;aACV,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC;QACvC,CAAC;QACD,SAAS,EAAE,sBAAsB,CAAC,KAAK,CAAC;QACxC,KAAK;QACL,SAAS;QACT,SAAS;KACV,CAAC,CAAC;IACH,OAAO,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC","sourcesContent":["import { persistContainerState } from \"./containerStatePersistence\";\nimport { getContainerContentsStoreLogLabel } from \"./logLabel\";\nimport { invalidateRemoteContainerWrites } from \"./remoteWriteGuards\";\nimport type {\n  ContainerContentsStoreSyncAgent,\n  ContainerState,\n} from \"./syncAgent\";\nimport { applySystemContainerIcon } from \"./systemContainerIcon\";\nimport { findRootContainerState } from \"./systemContainerLookup\";\nimport { promoteExistingLocalSystemContainerSync } from \"./systemContainerPromotion\";\nimport type {\n  ContainerContentsStoreState,\n  EnsureSystemContainerOptions,\n} from \"./types\";\nimport { toContainerNode } from \"./utils\";\nimport type { ContainerWriteGuard } from \"./writeGeneration\";\n\nexport async function updateExistingSystemContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  existing: ContainerState,\n  options: EnsureSystemContainerOptions,\n  isCurrent: ContainerWriteGuard,\n) {\n  if (\"icon\" in options) {\n    const iconApplied = await applySystemContainerIcon({\n      containerState: existing,\n      icon: options.icon,\n      persistIcon: async (containerState, icon, update) => {\n        if (options.deferRemoteBootstrap) {\n          invalidateRemoteContainerWrites(state, [containerState.container.id]);\n        }\n        const result = await persistContainerState(state, containerState, {\n          patch: { icon },\n          updateView: false,\n          localMetadataPatch: { icon },\n          localUpdate: update,\n          isCurrent,\n        });\n        return result.status;\n      },\n      state,\n      syncAgent,\n      isCurrent,\n    });\n    if (!iconApplied || !isCurrent()) {\n      return null;\n    }\n  }\n  const promoted = await promoteExistingLocalSystemContainerSync({\n    containerState: existing,\n    logLabel: getContainerContentsStoreLogLabel(state),\n    options,\n    persistPromotion: async (containerState, promotion) => {\n      if (options.deferRemoteBootstrap) {\n        invalidateRemoteContainerWrites(state, [containerState.container.id]);\n      }\n      const result = await persistContainerState(state, containerState, {\n        saveOptions: promotion.queueCreateIntent\n          ? { createIntent: { parentContainerId: promotion.parentContainerId } }\n          : undefined,\n        localUpdate: promotion.metadataUpdate,\n        isCurrent,\n      });\n      return result.status === \"persisted\";\n    },\n    rootState: findRootContainerState(state),\n    state,\n    syncAgent,\n    isCurrent,\n  });\n  return promoted && isCurrent() ? toContainerNode(existing) : null;\n}\n"]}