@tearleads/client-sdk 0.1.62 → 0.1.64

package/stores/container-contents/groupRewrapOperation.js

@@ -1,52 +0,0 @@
-import { containerStateHasCurrentGroupGrant } from "../../workflows/container-contents/container-state/groupGrantVerification.js";
-import { prepareContainerStateGroupRewrap } from "../../workflows/container-contents/container-state/share.js";
-export async function prepareContainerGroupRewrap(state, containerId, groupId, accessLevel, options, isCurrent = () => true) {
-    if (state.runtime.infra.dbStatus !== "ready" ||
-        !state.snapshot.ready ||
-        !state.runtime.auth.isAuthenticated ||
-        !state.runtime.state.online) {
-        return null;
-    }
-    const containerState = state.containersById.get(containerId);
-    if (!containerState) {
-        return null;
-    }
-    const preparation = await prepareContainerStateGroupRewrap({
-        accessLevel,
-        containerState,
-        groupId,
-        requireExistingGrant: options?.requireExistingGrant,
-        resolveProjectionUserKey: state.resolveProjectionUserKey,
-        runtime: state.runtime,
-        stillCurrent: isCurrent,
-    });
-    return isCurrent() ? preparation : null;
-}
-export async function verifyContainerGroupRewrapCurrent(state, containerId, groupId, accessLevel, expectedGroupHead, expectedContainerId, expectedOrganizationId, isCurrent = () => true) {
-    if (state.runtime.infra.dbStatus !== "ready" ||
-        !state.snapshot.ready ||
-        !state.runtime.auth.isAuthenticated ||
-        !state.runtime.state.online) {
-        return false;
-    }
-    if (containerId !== expectedContainerId) {
-        return false;
-    }
-    const containerState = state.containersById.get(expectedContainerId);
-    if (!containerState) {
-        return false;
-    }
-    const current = await containerStateHasCurrentGroupGrant({
-        accessLevel,
-        containerState,
-        expectedContainerId,
-        expectedGroupHead,
-        expectedOrganizationId,
-        groupId,
-        resolveProjectionUserKey: state.resolveProjectionUserKey,
-        runtime: state.runtime,
-        stillCurrent: isCurrent,
-    });
-    return isCurrent() && current;
-}
-//# sourceMappingURL=groupRewrapOperation.js.map

package/stores/container-contents/groupRewrapOperation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"groupRewrapOperation.js","sourceRoot":"","sources":["groupRewrapOperation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,MAAM,2EAA2E,CAAC;AAC/H,OAAO,EAAE,gCAAgC,EAAE,MAAM,0DAA0D,CAAC;AAO5G,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAkC,EAClC,WAAmB,EACnB,OAAe,EACf,WAA8C,EAC9C,OAAwD,EACxD,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QACxC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK;QACrB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC7D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,gCAAgC,CAAC;QACzD,WAAW;QACX,cAAc;QACd,OAAO;QACP,oBAAoB,EAAE,OAAO,EAAE,oBAAoB;QACnD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,KAAkC,EAClC,WAAmB,EACnB,OAAe,EACf,WAA8C,EAC9C,iBAA0C,EAC1C,mBAA2B,EAC3B,sBAA8B,EAC9B,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QACxC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK;QACrB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,WAAW,KAAK,mBAAmB,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACrE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,kCAAkC,CAAC;QACvD,WAAW;QACX,cAAc;QACd,mBAAmB;QACnB,iBAAiB;QACjB,sBAAsB;QACtB,OAAO;QACP,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,OAAO,SAAS,EAAE,IAAI,OAAO,CAAC;AAChC,CAAC","sourcesContent":["import type { ReferencedPrincipalHead } from \"@tearleads/crypto\";\nimport { containerStateHasCurrentGroupGrant } from \"../../workflows/container-contents/container-state/groupGrantVerification\";\nimport { prepareContainerStateGroupRewrap } from \"../../workflows/container-contents/container-state/share\";\nimport type {\n  ContainerContentsShareAccessLevel,\n  ContainerContentsStoreState,\n} from \"./types\";\nimport type { ContainerWriteGuard } from \"./writeGeneration\";\n\nexport async function prepareContainerGroupRewrap(\n  state: ContainerContentsStoreState,\n  containerId: string,\n  groupId: string,\n  accessLevel: ContainerContentsShareAccessLevel,\n  options?: { requireExistingGrant?: boolean } | undefined,\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  if (\n    state.runtime.infra.dbStatus !== \"ready\" ||\n    !state.snapshot.ready ||\n    !state.runtime.auth.isAuthenticated ||\n    !state.runtime.state.online\n  ) {\n    return null;\n  }\n  const containerState = state.containersById.get(containerId);\n  if (!containerState) {\n    return null;\n  }\n\n  const preparation = await prepareContainerStateGroupRewrap({\n    accessLevel,\n    containerState,\n    groupId,\n    requireExistingGrant: options?.requireExistingGrant,\n    resolveProjectionUserKey: state.resolveProjectionUserKey,\n    runtime: state.runtime,\n    stillCurrent: isCurrent,\n  });\n  return isCurrent() ? preparation : null;\n}\n\nexport async function verifyContainerGroupRewrapCurrent(\n  state: ContainerContentsStoreState,\n  containerId: string,\n  groupId: string,\n  accessLevel: ContainerContentsShareAccessLevel,\n  expectedGroupHead: ReferencedPrincipalHead,\n  expectedContainerId: string,\n  expectedOrganizationId: string,\n  isCurrent: ContainerWriteGuard = () => true,\n): Promise<boolean> {\n  if (\n    state.runtime.infra.dbStatus !== \"ready\" ||\n    !state.snapshot.ready ||\n    !state.runtime.auth.isAuthenticated ||\n    !state.runtime.state.online\n  ) {\n    return false;\n  }\n  if (containerId !== expectedContainerId) {\n    return false;\n  }\n  const containerState = state.containersById.get(expectedContainerId);\n  if (!containerState) {\n    return false;\n  }\n\n  const current = await containerStateHasCurrentGroupGrant({\n    accessLevel,\n    containerState,\n    expectedContainerId,\n    expectedGroupHead,\n    expectedOrganizationId,\n    groupId,\n    resolveProjectionUserKey: state.resolveProjectionUserKey,\n    runtime: state.runtime,\n    stillCurrent: isCurrent,\n  });\n  return isCurrent() && current;\n}\n"]}

package/stores/container-contents/metadataSyncSignal.js

@@ -1,37 +0,0 @@
-/**
- * Convergence-safety helpers for the container-contents metadata sync lane.
- *
- * `syncSingleContainerMetadata` reads `forceReadSync` for a container, then
- * awaits a network GET of the container's metadata document. A remote
- * rename/move event delivered during that await re-queues the container's
- * metadata id and advances that id's entry in `metadataSyncSignalSeqById`. If
- * the pass then deleted the id unconditionally it would erase that fresh
- * re-queue, leaving the structural projection (name/icon) stale until an
- * unrelated later event re-armed it.
- *
- * The pass therefore snapshots the id's sequence before its GET and only clears
- * the queued id when that id's sequence is unchanged at pass end. The sequence
- * is tracked per metadata document id (not a single global counter) so a remote
- * event for an unrelated container does not block clearing this one. Mirrors
- * the document store's `remoteUpdateSignalSeq` clear (the document store is
- * single-document, so it needs only one counter).
- */
-import { sequenceUnchanged } from "../../workflows/container-contents/syncLane.js";
-/** Read an id's current enqueue sequence, defaulting to 0 when never queued. */
-export function readMetadataSyncSeq(seqById, id) {
-    return seqById.get(id) ?? 0;
-}
-/** Advance an id's enqueue sequence (called when a remote event re-queues it). */
-export function bumpMetadataSyncSeq(seqById, id) {
-    seqById.set(id, readMetadataSyncSeq(seqById, id) + 1);
-}
-/**
- * Delete `id` from the needs-sync queue only if no remote event re-queued that
- * specific id since `consumedSeqById` was snapshotted at pass entry.
- */
-export function clearMetadataSyncQueueIfUnchanged(input) {
-    if (sequenceUnchanged(readMetadataSyncSeq(input.seqById, input.id), input.consumedSeqById.get(input.id) ?? 0)) {
-        input.needingSync.delete(input.id);
-    }
-}
-//# sourceMappingURL=metadataSyncSignal.js.map

package/stores/container-contents/metadataSyncSignal.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"metadataSyncSignal.js","sourceRoot":"","sources":["metadataSyncSignal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAEhF,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CACjC,OAAoC,EACpC,EAAU;IAEV,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CACjC,OAA4B,EAC5B,EAAU;IAEV,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,mBAAmB,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAKjD;IACC,IACE,iBAAiB,CACf,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,EAC5C,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CACzC,EACD,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC","sourcesContent":["/**\n * Convergence-safety helpers for the container-contents metadata sync lane.\n *\n * `syncSingleContainerMetadata` reads `forceReadSync` for a container, then\n * awaits a network GET of the container's metadata document. A remote\n * rename/move event delivered during that await re-queues the container's\n * metadata id and advances that id's entry in `metadataSyncSignalSeqById`. If\n * the pass then deleted the id unconditionally it would erase that fresh\n * re-queue, leaving the structural projection (name/icon) stale until an\n * unrelated later event re-armed it.\n *\n * The pass therefore snapshots the id's sequence before its GET and only clears\n * the queued id when that id's sequence is unchanged at pass end. The sequence\n * is tracked per metadata document id (not a single global counter) so a remote\n * event for an unrelated container does not block clearing this one. Mirrors\n * the document store's `remoteUpdateSignalSeq` clear (the document store is\n * single-document, so it needs only one counter).\n */\n\nimport { sequenceUnchanged } from \"../../workflows/container-contents/syncLane\";\n\n/** Read an id's current enqueue sequence, defaulting to 0 when never queued. */\nexport function readMetadataSyncSeq(\n  seqById: ReadonlyMap<string, number>,\n  id: string,\n): number {\n  return seqById.get(id) ?? 0;\n}\n\n/** Advance an id's enqueue sequence (called when a remote event re-queues it). */\nexport function bumpMetadataSyncSeq(\n  seqById: Map<string, number>,\n  id: string,\n): void {\n  seqById.set(id, readMetadataSyncSeq(seqById, id) + 1);\n}\n\n/**\n * Delete `id` from the needs-sync queue only if no remote event re-queued that\n * specific id since `consumedSeqById` was snapshotted at pass entry.\n */\nexport function clearMetadataSyncQueueIfUnchanged(input: {\n  needingSync: Set<string>;\n  seqById: ReadonlyMap<string, number>;\n  consumedSeqById: ReadonlyMap<string, number>;\n  id: string;\n}): void {\n  if (\n    sequenceUnchanged(\n      readMetadataSyncSeq(input.seqById, input.id),\n      input.consumedSeqById.get(input.id) ?? 0,\n    )\n  ) {\n    input.needingSync.delete(input.id);\n  }\n}\n"]}

package/stores/container-contents/missingContainerState.js

@@ -1,10 +0,0 @@
-import { updateContainerContentsSnapshot } from "./state.js";
-export function removeMissingContainerState(state, expectedState) {
-    const containerId = expectedState.container.id;
-    if (state.containersById.get(containerId) !== expectedState) {
-        return;
-    }
-    state.containersById.delete(containerId);
-    updateContainerContentsSnapshot(state);
-}
-//# sourceMappingURL=missingContainerState.js.map

package/stores/container-contents/missingContainerState.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"missingContainerState.js","sourceRoot":"","sources":["missingContainerState.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,SAAS,CAAC;AAG1D,MAAM,UAAU,2BAA2B,CACzC,KAAkC,EAClC,aAA6B;IAE7B,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;IAC/C,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,aAAa,EAAE,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,+BAA+B,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC","sourcesContent":["import type { ContainerState } from \"../../workflows/container-contents/remoteHydration\";\nimport { updateContainerContentsSnapshot } from \"./state\";\nimport type { ContainerContentsStoreState } from \"./types\";\n\nexport function removeMissingContainerState(\n  state: ContainerContentsStoreState,\n  expectedState: ContainerState,\n): void {\n  const containerId = expectedState.container.id;\n  if (state.containersById.get(containerId) !== expectedState) {\n    return;\n  }\n  state.containersById.delete(containerId);\n  updateContainerContentsSnapshot(state);\n}\n"]}

package/stores/container-contents/missingSyncedContainerState.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"missingSyncedContainerState.js","sourceRoot":"","sources":["missingSyncedContainerState.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,iCAAiC,CAC/C,KAAsC,EACtC,aAA6B,EAC7B,cAA0B;IAE1B,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;IAC/C,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,aAAa,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,cAAc,EAAE,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { ContainerState } from \"../../workflows/container-contents/remoteHydration\";\nimport type { ContainerContentsStoreSyncState } from \"./syncAgentTypes\";\n\nexport function removeMissingSyncedContainerState(\n  state: ContainerContentsStoreSyncState,\n  expectedState: ContainerState,\n  updateSnapshot: () => void,\n): boolean {\n  const containerId = expectedState.container.id;\n  if (state.containersById.get(containerId) !== expectedState) {\n    return false;\n  }\n\n  state.containersById.delete(containerId);\n  updateSnapshot();\n  return true;\n}\n"]}

package/stores/container-contents/operations.js

@@ -1,301 +0,0 @@
-import { createChildContainerState } from "../../workflows/container-contents/container-state/createChild.js";
-import { deleteContainerState } from "../../workflows/container-contents/container-state/delete.js";
-import { assertLocalChildPathFits, assertLocalMovePathFits, } from "../../workflows/container-contents/container-state/localPathDepth.js";
-import { installContainerMetadataRecord, renameContainerMetadataStateFromRuntime, } from "../../workflows/container-contents/metadata/index.js";
-import { createDetachedContainerMetadataState, installDetachedContainerMetadataState, } from "../../workflows/container-contents/metadata/metadataStateIsolation.js";
-import { persistContainerState } from "./containerStatePersistence.js";
-import { updateExistingSystemContainer } from "./existingSystemContainer.js";
-import { getContainerContentsStoreLogLabel } from "./logLabel.js";
-import { removeMissingContainerState } from "./missingContainerState.js";
-import { ensureOrganizationMetadataSystemContainer } from "./organizationMetadataSystemContainer.js";
-import { invalidateRemoteContainerWrites, invalidateRemoteSystemContainerWrite, } from "./remoteWriteGuards.js";
-import { updateContainerContentsSnapshot } from "./state.js";
-import { probeExistingSystemContainer } from "./systemContainerHydration.js";
-import { findRootContainerState, findSystemContainerStateForRoot, } from "./systemContainerLookup.js";
-import { finalizeCreatedSystemContainer } from "./systemContainerPostCreate.js";
-import { hasAdvancedManagedPrincipalReference } from "./systemContainerPromotion.js";
-import { isContainerInSubtree, toContainerNode } from "./utils.js";
-export async function createChildContainer(state, syncAgent, parentId, name, isCurrent = () => true) {
-    const trimmedName = name.trim();
-    if (state.runtime.infra.dbStatus !== "ready" ||
-        !state.snapshot.ready ||
-        !trimmedName) {
-        return null;
-    }
-    const parentState = state.containersById.get(parentId);
-    if (!parentState) {
-        return null;
-    }
-    assertLocalChildPathFits(state.containersById, parentId);
-    const created = await createChildContainerState({
-        createRemote: false,
-        name: trimmedName,
-        parentState,
-        persistence: state.persistence,
-        resolveProjectionUserKey: state.resolveProjectionUserKey,
-        runtime: state.runtime,
-        stillCurrent: isCurrent,
-    });
-    if (!created || !isCurrent())
-        return null;
-    state.containersById.set(created.containerState.container.id, created.containerState);
-    updateContainerContentsSnapshot(state);
-    if (created.shouldRequestSync) {
-        syncAgent.scheduleSync();
-    }
-    state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: created container "${trimmedName}"`);
-    return toContainerNode(created.containerState);
-}
-function canEnsureSystemContainer(state, name) {
-    return (state.runtime.infra.dbStatus === "ready" && state.snapshot.ready && !!name);
-}
-async function findOrHydrateSystemContainer(input) {
-    const { isCurrent, state, syncAgent, systemSlot } = input;
-    const existing = findSystemContainerStateForRoot(state, systemSlot, findRootContainerState(state));
-    if (existing ||
-        !state.runtime.auth.isAuthenticated ||
-        !state.runtime.state.online) {
-        return existing;
-    }
-    await probeExistingSystemContainer({
-        logLabel: getContainerContentsStoreLogLabel(state),
-        rootState: findRootContainerState(state),
-        state,
-        syncAgent,
-        systemSlot,
-    });
-    return isCurrent()
-        ? findSystemContainerStateForRoot(state, systemSlot, findRootContainerState(state))
-        : null;
-}
-function canCreateSystemContainer(state, rootState, systemSlot, options) {
-    if (options.skipAdvancedManagedRoot &&
-        hasAdvancedManagedPrincipalReference(rootState)) {
-        state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: skipped background system container "${systemSlot}" because the root has advanced managed-principal references`);
-        return false;
-    }
-    return true;
-}
-export async function ensureSystemContainer(state, syncAgent, systemSlot, name, options = {}, isCurrent = () => true) {
-    const trimmedName = name.trim();
-    if (!canEnsureSystemContainer(state, trimmedName)) {
-        return null;
-    }
-    const metadata = await ensureOrganizationMetadataSystemContainer({
-        state,
-        syncAgent,
-        systemSlot,
-        options,
-        isCurrent,
-    });
-    if (!isCurrent())
-        return null;
-    if (metadata.handled)
-        return metadata.container;
-    return ensureChildSystemContainer(state, syncAgent, systemSlot, trimmedName, options, isCurrent);
-}
-async function ensureChildSystemContainer(state, syncAgent, systemSlot, trimmedName, options, isCurrent) {
-    const allowSynchronousRemoteBootstrap = !options.deferRemoteBootstrap;
-    const existing = allowSynchronousRemoteBootstrap
-        ? await findOrHydrateSystemContainer({
-            isCurrent,
-            state,
-            syncAgent,
-            systemSlot,
-        })
-        : findSystemContainerStateForRoot(state, systemSlot, findRootContainerState(state));
-    if (!isCurrent())
-        return null;
-    if (existing) {
-        return updateExistingSystemContainer(state, syncAgent, existing, options, isCurrent);
-    }
-    const rootState = findRootContainerState(state);
-    if (!rootState) {
-        return null;
-    }
-    if (!canCreateSystemContainer(state, rootState, systemSlot, options))
-        return null;
-    if (options.deferRemoteBootstrap) {
-        invalidateRemoteSystemContainerWrite(state, rootState.container.id, systemSlot);
-        invalidateRemoteContainerWrites(state, [rootState.container.id]);
-    }
-    const createRemote = allowSynchronousRemoteBootstrap &&
-        state.runtime.auth.isAuthenticated &&
-        Boolean(state.runtime.crypto.encapsulationKeyPair);
-    const created = await createChildContainerState({
-        systemSlot,
-        createRemote,
-        icon: options.icon,
-        name: trimmedName,
-        parentState: rootState,
-        persistence: state.persistence,
-        queueRemoteSync: !options.deferRemoteSync,
-        resolveProjectionUserKey: state.resolveProjectionUserKey,
-        runtime: state.runtime,
-        stillCurrent: isCurrent,
-    });
-    if (!created || !isCurrent()) {
-        if (createRemote && !isCurrent()) {
-            state.containerParentIdsNeedingHydration.add(rootState.container.id);
-            syncAgent.scheduleRemoteHydration();
-        }
-        return null;
-    }
-    const finalized = await finalizeCreatedSystemContainer({
-        created,
-        logLabel: getContainerContentsStoreLogLabel(state),
-        state,
-        syncAgent,
-        systemSlot,
-        isCurrent,
-    });
-    if (!finalized || !isCurrent())
-        return null;
-    if (finalized.adopted) {
-        const updated = await updateExistingSystemContainer(state, syncAgent, finalized.containerState, options, isCurrent);
-        if (!updated)
-            return null;
-    }
-    return toContainerNode(finalized.containerState);
-}
-export async function deleteContainer(state, syncAgent, containerId, isCurrent = () => true) {
-    if (state.runtime.infra.dbStatus !== "ready" || !state.snapshot.ready) {
-        return null;
-    }
-    const existingState = state.containersById.get(containerId);
-    if (!existingState ||
-        existingState.container.parentId === null ||
-        (existingState.container.systemSlot ?? null) !== null ||
-        Array.from(state.containersById.values()).some((containerState) => containerState.container.parentId === containerId)) {
-        return null;
-    }
-    const isRemoteContainer = Boolean(existingState.record.documentId);
-    if (isRemoteContainer) {
-        if (!state.runtime.auth.isAuthenticated || !state.runtime.state.online) {
-            return null;
-        }
-    }
-    const deletedNode = toContainerNode(existingState);
-    const deleted = await deleteContainerState({
-        containerState: existingState,
-        persistence: state.persistence,
-        runtime: state.runtime,
-        stillCurrent: isCurrent,
-    });
-    if (deleted === "remote-failed") {
-        return null;
-    }
-    if (deleted === "local-conflict" ||
-        deleted === "remote-deleted" ||
-        !isCurrent()) {
-        state.localContainersNeedRefresh = true;
-        await syncAgent.refreshLocalContainers();
-        // The delete committed before this operation lost its generation. Evict
-        // only the exact state it deleted: a concurrent replacement with the same
-        // id owns a different object and must survive.
-        if (deleted === "deleted" &&
-            state.containersById.get(existingState.container.id) === existingState) {
-            state.containersById.delete(existingState.container.id);
-            state.documentStoresNeedPriming = true;
-            if (state.initialized) {
-                updateContainerContentsSnapshot(state);
-            }
-        }
-        if (isRemoteContainer) {
-            await syncAgent.requestRemoteHydration({
-                followDiscoveredParentLanes: false,
-                parentIds: [existingState.container.parentId],
-                resetAllLaneWatermarks: true,
-            });
-        }
-        return null;
-    }
-    state.containersById.delete(existingState.container.id);
-    // The persistence cascade may have orphaned descendant documents (row 3);
-    // re-arm document priming and nudge the lane so their null-scoped passes
-    // run now rather than on the next unrelated trigger.
-    state.documentStoresNeedPriming = true;
-    syncAgent.scheduleSync();
-    updateContainerContentsSnapshot(state);
-    state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: deleted container "${existingState.container.name}"`);
-    return deletedNode;
-}
-export async function renameContainer(state, syncAgent, containerId, name, isCurrent = () => true) {
-    const trimmedName = name.trim();
-    if (state.runtime.infra.dbStatus !== "ready" ||
-        !state.snapshot.ready ||
-        !trimmedName) {
-        return null;
-    }
-    const existingState = state.containersById.get(containerId);
-    if (!existingState) {
-        return null;
-    }
-    if (existingState.container.name === trimmedName) {
-        return toContainerNode(existingState);
-    }
-    const detachedState = await createDetachedContainerMetadataState(existingState);
-    if (!isCurrent())
-        return null;
-    const renamed = await renameContainerMetadataStateFromRuntime({
-        metadataState: detachedState,
-        name: trimmedName,
-        persistence: state.persistence,
-        runtime: state.runtime,
-        stillCurrent: isCurrent,
-    });
-    if (!isCurrent())
-        return null;
-    if (!renamed) {
-        removeMissingContainerState(state, existingState);
-        return null;
-    }
-    detachedState.container = renamed.container;
-    installContainerMetadataRecord(detachedState, renamed.record);
-    installDetachedContainerMetadataState(existingState, detachedState);
-    updateContainerContentsSnapshot(state);
-    syncAgent.scheduleSync();
-    state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: renamed container to "${trimmedName}"`);
-    return toContainerNode(existingState);
-}
-export async function moveContainer(state, syncAgent, containerId, parentId, isCurrent = () => true) {
-    if (state.runtime.infra.dbStatus !== "ready" || !state.snapshot.ready) {
-        return null;
-    }
-    const existingState = state.containersById.get(containerId);
-    const targetParentState = state.containersById.get(parentId);
-    if (!existingState ||
-        !targetParentState ||
-        existingState.container.parentId === null ||
-        (existingState.container.systemSlot ?? null) !== null ||
-        isContainerInSubtree(state.containersById, parentId, containerId)) {
-        return null;
-    }
-    if (existingState.container.parentId === parentId) {
-        return toContainerNode(existingState);
-    }
-    assertLocalMovePathFits(state.containersById, containerId, parentId);
-    const isRemoteContainer = Boolean(existingState.record.documentId);
-    const saveOptions = isRemoteContainer
-        ? {
-            moveIntent: {
-                parentContainerId: parentId,
-                previousParentContainerId: existingState.container.parentId,
-            },
-        }
-        : { createIntent: { parentContainerId: parentId } };
-    const persisted = await persistContainerState(state, existingState, {
-        patch: { parentId },
-        saveOptions,
-        isCurrent,
-    });
-    if (persisted.status !== "persisted" || !isCurrent())
-        return null;
-    syncAgent.scheduleSync();
-    const action = isRemoteContainer
-        ? "queued container move"
-        : "moved container";
-    state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: ${action} ${containerId} under ${parentId}`);
-    return toContainerNode(existingState);
-}
-//# sourceMappingURL=operations.js.map

package/stores/container-contents/operations.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"operations.js","sourceRoot":"","sources":["operations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,gEAAgE,CAAC;AAC3G,OAAO,EAAE,oBAAoB,EAAE,MAAM,2DAA2D,CAAC;AACjG,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EACL,8BAA8B,EAC9B,uCAAuC,GACxC,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,oEAAoE,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,yCAAyC,EAAE,MAAM,uCAAuC,CAAC;AAClG,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,GACrC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,+BAA+B,EAAE,MAAM,SAAS,CAAC;AAK1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EACL,sBAAsB,EACtB,+BAA+B,GAChC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAKlF,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAGhE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAkC,EAClC,SAA0C,EAC1C,QAAgB,EAChB,IAAY,EACZ,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QACxC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK;QACrB,CAAC,WAAW,EACZ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,wBAAwB,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC;QAC9C,YAAY,EAAE,KAAK;QACnB,IAAI,EAAE,WAAW;QACjB,WAAW;QACX,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1C,KAAK,CAAC,cAAc,CAAC,GAAG,CACtB,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,EACnC,OAAO,CAAC,cAAc,CACvB,CAAC;IACF,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,SAAS,CAAC,YAAY,EAAE,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,wBAAwB,WAAW,GAAG,CAClF,CAAC;IACF,OAAO,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAkC,EAClC,IAAY;IAEZ,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAC3E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAK3C;IACC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC1D,MAAM,QAAQ,GAAG,+BAA+B,CAC9C,KAAK,EACL,UAAU,EACV,sBAAsB,CAAC,KAAK,CAAC,CAC9B,CAAC;IACF,IACE,QAAQ;QACR,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAC3B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,4BAA4B,CAAC;QACjC,QAAQ,EAAE,iCAAiC,CAAC,KAAK,CAAC;QAClD,SAAS,EAAE,sBAAsB,CAAC,KAAK,CAAC;QACxC,KAAK;QACL,SAAS;QACT,UAAU;KACX,CAAC,CAAC;IACH,OAAO,SAAS,EAAE;QAChB,CAAC,CAAC,+BAA+B,CAC7B,KAAK,EACL,UAAU,EACV,sBAAsB,CAAC,KAAK,CAAC,CAC9B;QACH,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAkC,EAClC,SAAyB,EACzB,UAA+B,EAC/B,OAAqC;IAErC,IACE,OAAO,CAAC,uBAAuB;QAC/B,oCAAoC,CAAC,SAAS,CAAC,EAC/C,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,0CAA0C,UAAU,8DAA8D,CAC9J,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAkC,EAClC,SAA0C,EAC1C,UAA+B,EAC/B,IAAY,EACZ,UAAwC,EAAE,EAC1C,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,yCAAyC,CAAC;QAC/D,KAAK;QACL,SAAS;QACT,UAAU;QACV,OAAO;QACP,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,SAAS,CAAC;IAEhD,OAAO,0BAA0B,CAC/B,KAAK,EACL,SAAS,EACT,UAAU,EACV,WAAW,EACX,OAAO,EACP,SAAS,CACV,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,KAAkC,EAClC,SAA0C,EAC1C,UAA+B,EAC/B,WAAmB,EACnB,OAAqC,EACrC,SAA8B;IAE9B,MAAM,+BAA+B,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACtE,MAAM,QAAQ,GAAG,+BAA+B;QAC9C,CAAC,CAAC,MAAM,4BAA4B,CAAC;YACjC,SAAS;YACT,KAAK;YACL,SAAS;YACT,UAAU;SACX,CAAC;QACJ,CAAC,CAAC,+BAA+B,CAC7B,KAAK,EACL,UAAU,EACV,sBAAsB,CAAC,KAAK,CAAC,CAC9B,CAAC;IACN,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,6BAA6B,CAClC,KAAK,EACL,SAAS,EACT,QAAQ,EACR,OAAO,EACP,SAAS,CACV,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC;QAClE,OAAO,IAAI,CAAC;IAEd,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACjC,oCAAoC,CAClC,KAAK,EACL,SAAS,CAAC,SAAS,CAAC,EAAE,EACtB,UAAU,CACX,CAAC;QACF,+BAA+B,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,YAAY,GAChB,+BAA+B;QAC/B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QAClC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC;QAC9C,UAAU;QACV,YAAY;QACZ,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,CAAC,OAAO,CAAC,eAAe;QACzC,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QAC7B,IAAI,YAAY,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjC,KAAK,CAAC,kCAAkC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACrE,SAAS,CAAC,uBAAuB,EAAE,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,8BAA8B,CAAC;QACrD,OAAO;QACP,QAAQ,EAAE,iCAAiC,CAAC,KAAK,CAAC;QAClD,KAAK;QACL,SAAS;QACT,UAAU;QACV,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,6BAA6B,CACjD,KAAK,EACL,SAAS,EACT,SAAS,CAAC,cAAc,EACxB,OAAO,EACP,SAAS,CACV,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;IAC5B,CAAC;IACD,OAAO,eAAe,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5D,IACE,CAAC,aAAa;QACd,aAAa,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;QACzC,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,IAAI;QACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC5C,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,KAAK,WAAW,CACtE,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC;QACzC,cAAc,EAAE,aAAa;QAC7B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,OAAO,KAAK,gBAAgB;QAC5B,OAAO,KAAK,gBAAgB;QAC5B,CAAC,SAAS,EAAE,EACZ,CAAC;QACD,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;QACxC,MAAM,SAAS,CAAC,sBAAsB,EAAE,CAAC;QACzC,wEAAwE;QACxE,0EAA0E;QAC1E,+CAA+C;QAC/C,IACE,OAAO,KAAK,SAAS;YACrB,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,aAAa,EACtE,CAAC;YACD,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACxD,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACvC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtB,+BAA+B,CAAC,KAAK,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QACD,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,SAAS,CAAC,sBAAsB,CAAC;gBACrC,2BAA2B,EAAE,KAAK;gBAClC,SAAS,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAC7C,sBAAsB,EAAE,IAAI;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACxD,0EAA0E;IAC1E,yEAAyE;IACzE,qDAAqD;IACrD,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;IACvC,SAAS,CAAC,YAAY,EAAE,CAAC;IACzB,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACvC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,wBAAwB,aAAa,CAAC,SAAS,CAAC,IAAI,GAAG,CACnG,CAAC;IACF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,IAAY,EACZ,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QACxC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK;QACrB,CAAC,WAAW,EACZ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,aAAa,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjD,OAAO,eAAe,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,aAAa,GACjB,MAAM,oCAAoC,CAAC,aAAa,CAAC,CAAC;IAC5D,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,uCAAuC,CAAC;QAC5D,aAAa,EAAE,aAAa;QAC5B,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,2BAA2B,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC5C,8BAA8B,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,qCAAqC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACpE,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACvC,SAAS,CAAC,YAAY,EAAE,CAAC;IACzB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,2BAA2B,WAAW,GAAG,CACrF,CAAC;IACF,OAAO,eAAe,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,QAAgB,EAChB,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,iBAAiB,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7D,IACE,CAAC,aAAa;QACd,CAAC,iBAAiB;QAClB,aAAa,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;QACzC,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,IAAI;QACrD,oBAAoB,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,EAAE,WAAW,CAAC,EACjE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,aAAa,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,eAAe,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IACD,uBAAuB,CAAC,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAErE,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,iBAAiB;QACnC,CAAC,CAAC;YACE,UAAU,EAAE;gBACV,iBAAiB,EAAE,QAAQ;gBAC3B,yBAAyB,EAAE,aAAa,CAAC,SAAS,CAAC,QAAQ;aAC5D;SACF;QACH,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,aAAa,EAAE;QAClE,KAAK,EAAE,EAAE,QAAQ,EAAE;QACnB,WAAW;QACX,SAAS;KACV,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAClE,SAAS,CAAC,YAAY,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,iBAAiB;QAC9B,CAAC,CAAC,uBAAuB;QACzB,CAAC,CAAC,iBAAiB,CAAC;IACtB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,KAAK,MAAM,IAAI,WAAW,UAAU,QAAQ,EAAE,CAC1F,CAAC;IACF,OAAO,eAAe,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC","sourcesContent":["import type { ContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport { createChildContainerState } from \"../../workflows/container-contents/container-state/createChild\";\nimport { deleteContainerState } from \"../../workflows/container-contents/container-state/delete\";\nimport {\n  assertLocalChildPathFits,\n  assertLocalMovePathFits,\n} from \"../../workflows/container-contents/container-state/localPathDepth\";\nimport {\n  installContainerMetadataRecord,\n  renameContainerMetadataStateFromRuntime,\n} from \"../../workflows/container-contents/metadata\";\nimport {\n  createDetachedContainerMetadataState,\n  installDetachedContainerMetadataState,\n} from \"../../workflows/container-contents/metadata/metadataStateIsolation\";\nimport { persistContainerState } from \"./containerStatePersistence\";\nimport { updateExistingSystemContainer } from \"./existingSystemContainer\";\nimport { getContainerContentsStoreLogLabel } from \"./logLabel\";\nimport { removeMissingContainerState } from \"./missingContainerState\";\nimport { ensureOrganizationMetadataSystemContainer } from \"./organizationMetadataSystemContainer\";\nimport {\n  invalidateRemoteContainerWrites,\n  invalidateRemoteSystemContainerWrite,\n} from \"./remoteWriteGuards\";\nimport { updateContainerContentsSnapshot } from \"./state\";\nimport type {\n  ContainerContentsStoreSyncAgent,\n  ContainerState,\n} from \"./syncAgent\";\nimport { probeExistingSystemContainer } from \"./systemContainerHydration\";\nimport {\n  findRootContainerState,\n  findSystemContainerStateForRoot,\n} from \"./systemContainerLookup\";\nimport { finalizeCreatedSystemContainer } from \"./systemContainerPostCreate\";\nimport { hasAdvancedManagedPrincipalReference } from \"./systemContainerPromotion\";\nimport type {\n  ContainerContentsStoreState,\n  EnsureSystemContainerOptions,\n} from \"./types\";\nimport { isContainerInSubtree, toContainerNode } from \"./utils\";\nimport type { ContainerWriteGuard } from \"./writeGeneration\";\n\nexport async function createChildContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  parentId: string,\n  name: string,\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  const trimmedName = name.trim();\n  if (\n    state.runtime.infra.dbStatus !== \"ready\" ||\n    !state.snapshot.ready ||\n    !trimmedName\n  ) {\n    return null;\n  }\n\n  const parentState = state.containersById.get(parentId);\n  if (!parentState) {\n    return null;\n  }\n  assertLocalChildPathFits(state.containersById, parentId);\n\n  const created = await createChildContainerState({\n    createRemote: false,\n    name: trimmedName,\n    parentState,\n    persistence: state.persistence,\n    resolveProjectionUserKey: state.resolveProjectionUserKey,\n    runtime: state.runtime,\n    stillCurrent: isCurrent,\n  });\n  if (!created || !isCurrent()) return null;\n\n  state.containersById.set(\n    created.containerState.container.id,\n    created.containerState,\n  );\n  updateContainerContentsSnapshot(state);\n  if (created.shouldRequestSync) {\n    syncAgent.scheduleSync();\n  }\n  state.runtime.util.log(\n    `${getContainerContentsStoreLogLabel(state)}: created container \"${trimmedName}\"`,\n  );\n  return toContainerNode(created.containerState);\n}\n\nfunction canEnsureSystemContainer(\n  state: ContainerContentsStoreState,\n  name: string,\n): boolean {\n  return (\n    state.runtime.infra.dbStatus === \"ready\" && state.snapshot.ready && !!name\n  );\n}\n\nasync function findOrHydrateSystemContainer(input: {\n  isCurrent: ContainerWriteGuard;\n  state: ContainerContentsStoreState;\n  syncAgent: ContainerContentsStoreSyncAgent;\n  systemSlot: ContainerSystemSlot;\n}): Promise<ContainerState | null> {\n  const { isCurrent, state, syncAgent, systemSlot } = input;\n  const existing = findSystemContainerStateForRoot(\n    state,\n    systemSlot,\n    findRootContainerState(state),\n  );\n  if (\n    existing ||\n    !state.runtime.auth.isAuthenticated ||\n    !state.runtime.state.online\n  ) {\n    return existing;\n  }\n  await probeExistingSystemContainer({\n    logLabel: getContainerContentsStoreLogLabel(state),\n    rootState: findRootContainerState(state),\n    state,\n    syncAgent,\n    systemSlot,\n  });\n  return isCurrent()\n    ? findSystemContainerStateForRoot(\n        state,\n        systemSlot,\n        findRootContainerState(state),\n      )\n    : null;\n}\n\nfunction canCreateSystemContainer(\n  state: ContainerContentsStoreState,\n  rootState: ContainerState,\n  systemSlot: ContainerSystemSlot,\n  options: EnsureSystemContainerOptions,\n): boolean {\n  if (\n    options.skipAdvancedManagedRoot &&\n    hasAdvancedManagedPrincipalReference(rootState)\n  ) {\n    state.runtime.util.log(\n      `${getContainerContentsStoreLogLabel(state)}: skipped background system container \"${systemSlot}\" because the root has advanced managed-principal references`,\n    );\n    return false;\n  }\n\n  return true;\n}\n\nexport async function ensureSystemContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  systemSlot: ContainerSystemSlot,\n  name: string,\n  options: EnsureSystemContainerOptions = {},\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  const trimmedName = name.trim();\n  if (!canEnsureSystemContainer(state, trimmedName)) {\n    return null;\n  }\n\n  const metadata = await ensureOrganizationMetadataSystemContainer({\n    state,\n    syncAgent,\n    systemSlot,\n    options,\n    isCurrent,\n  });\n  if (!isCurrent()) return null;\n  if (metadata.handled) return metadata.container;\n\n  return ensureChildSystemContainer(\n    state,\n    syncAgent,\n    systemSlot,\n    trimmedName,\n    options,\n    isCurrent,\n  );\n}\n\nasync function ensureChildSystemContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  systemSlot: ContainerSystemSlot,\n  trimmedName: string,\n  options: EnsureSystemContainerOptions,\n  isCurrent: ContainerWriteGuard,\n) {\n  const allowSynchronousRemoteBootstrap = !options.deferRemoteBootstrap;\n  const existing = allowSynchronousRemoteBootstrap\n    ? await findOrHydrateSystemContainer({\n        isCurrent,\n        state,\n        syncAgent,\n        systemSlot,\n      })\n    : findSystemContainerStateForRoot(\n        state,\n        systemSlot,\n        findRootContainerState(state),\n      );\n  if (!isCurrent()) return null;\n  if (existing) {\n    return updateExistingSystemContainer(\n      state,\n      syncAgent,\n      existing,\n      options,\n      isCurrent,\n    );\n  }\n\n  const rootState = findRootContainerState(state);\n  if (!rootState) {\n    return null;\n  }\n  if (!canCreateSystemContainer(state, rootState, systemSlot, options))\n    return null;\n\n  if (options.deferRemoteBootstrap) {\n    invalidateRemoteSystemContainerWrite(\n      state,\n      rootState.container.id,\n      systemSlot,\n    );\n    invalidateRemoteContainerWrites(state, [rootState.container.id]);\n  }\n  const createRemote =\n    allowSynchronousRemoteBootstrap &&\n    state.runtime.auth.isAuthenticated &&\n    Boolean(state.runtime.crypto.encapsulationKeyPair);\n  const created = await createChildContainerState({\n    systemSlot,\n    createRemote,\n    icon: options.icon,\n    name: trimmedName,\n    parentState: rootState,\n    persistence: state.persistence,\n    queueRemoteSync: !options.deferRemoteSync,\n    resolveProjectionUserKey: state.resolveProjectionUserKey,\n    runtime: state.runtime,\n    stillCurrent: isCurrent,\n  });\n  if (!created || !isCurrent()) {\n    if (createRemote && !isCurrent()) {\n      state.containerParentIdsNeedingHydration.add(rootState.container.id);\n      syncAgent.scheduleRemoteHydration();\n    }\n    return null;\n  }\n\n  const finalized = await finalizeCreatedSystemContainer({\n    created,\n    logLabel: getContainerContentsStoreLogLabel(state),\n    state,\n    syncAgent,\n    systemSlot,\n    isCurrent,\n  });\n  if (!finalized || !isCurrent()) return null;\n  if (finalized.adopted) {\n    const updated = await updateExistingSystemContainer(\n      state,\n      syncAgent,\n      finalized.containerState,\n      options,\n      isCurrent,\n    );\n    if (!updated) return null;\n  }\n  return toContainerNode(finalized.containerState);\n}\n\nexport async function deleteContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  if (state.runtime.infra.dbStatus !== \"ready\" || !state.snapshot.ready) {\n    return null;\n  }\n\n  const existingState = state.containersById.get(containerId);\n  if (\n    !existingState ||\n    existingState.container.parentId === null ||\n    (existingState.container.systemSlot ?? null) !== null ||\n    Array.from(state.containersById.values()).some(\n      (containerState) => containerState.container.parentId === containerId,\n    )\n  ) {\n    return null;\n  }\n\n  const isRemoteContainer = Boolean(existingState.record.documentId);\n  if (isRemoteContainer) {\n    if (!state.runtime.auth.isAuthenticated || !state.runtime.state.online) {\n      return null;\n    }\n  }\n\n  const deletedNode = toContainerNode(existingState);\n  const deleted = await deleteContainerState({\n    containerState: existingState,\n    persistence: state.persistence,\n    runtime: state.runtime,\n    stillCurrent: isCurrent,\n  });\n  if (deleted === \"remote-failed\") {\n    return null;\n  }\n  if (\n    deleted === \"local-conflict\" ||\n    deleted === \"remote-deleted\" ||\n    !isCurrent()\n  ) {\n    state.localContainersNeedRefresh = true;\n    await syncAgent.refreshLocalContainers();\n    // The delete committed before this operation lost its generation. Evict\n    // only the exact state it deleted: a concurrent replacement with the same\n    // id owns a different object and must survive.\n    if (\n      deleted === \"deleted\" &&\n      state.containersById.get(existingState.container.id) === existingState\n    ) {\n      state.containersById.delete(existingState.container.id);\n      state.documentStoresNeedPriming = true;\n      if (state.initialized) {\n        updateContainerContentsSnapshot(state);\n      }\n    }\n    if (isRemoteContainer) {\n      await syncAgent.requestRemoteHydration({\n        followDiscoveredParentLanes: false,\n        parentIds: [existingState.container.parentId],\n        resetAllLaneWatermarks: true,\n      });\n    }\n    return null;\n  }\n\n  state.containersById.delete(existingState.container.id);\n  // The persistence cascade may have orphaned descendant documents (row 3);\n  // re-arm document priming and nudge the lane so their null-scoped passes\n  // run now rather than on the next unrelated trigger.\n  state.documentStoresNeedPriming = true;\n  syncAgent.scheduleSync();\n  updateContainerContentsSnapshot(state);\n  state.runtime.util.log(\n    `${getContainerContentsStoreLogLabel(state)}: deleted container \"${existingState.container.name}\"`,\n  );\n  return deletedNode;\n}\n\nexport async function renameContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  name: string,\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  const trimmedName = name.trim();\n  if (\n    state.runtime.infra.dbStatus !== \"ready\" ||\n    !state.snapshot.ready ||\n    !trimmedName\n  ) {\n    return null;\n  }\n\n  const existingState = state.containersById.get(containerId);\n  if (!existingState) {\n    return null;\n  }\n\n  if (existingState.container.name === trimmedName) {\n    return toContainerNode(existingState);\n  }\n\n  const detachedState =\n    await createDetachedContainerMetadataState(existingState);\n  if (!isCurrent()) return null;\n  const renamed = await renameContainerMetadataStateFromRuntime({\n    metadataState: detachedState,\n    name: trimmedName,\n    persistence: state.persistence,\n    runtime: state.runtime,\n    stillCurrent: isCurrent,\n  });\n  if (!isCurrent()) return null;\n  if (!renamed) {\n    removeMissingContainerState(state, existingState);\n    return null;\n  }\n\n  detachedState.container = renamed.container;\n  installContainerMetadataRecord(detachedState, renamed.record);\n  installDetachedContainerMetadataState(existingState, detachedState);\n  updateContainerContentsSnapshot(state);\n  syncAgent.scheduleSync();\n  state.runtime.util.log(\n    `${getContainerContentsStoreLogLabel(state)}: renamed container to \"${trimmedName}\"`,\n  );\n  return toContainerNode(existingState);\n}\n\nexport async function moveContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  parentId: string,\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  if (state.runtime.infra.dbStatus !== \"ready\" || !state.snapshot.ready) {\n    return null;\n  }\n\n  const existingState = state.containersById.get(containerId);\n  const targetParentState = state.containersById.get(parentId);\n  if (\n    !existingState ||\n    !targetParentState ||\n    existingState.container.parentId === null ||\n    (existingState.container.systemSlot ?? null) !== null ||\n    isContainerInSubtree(state.containersById, parentId, containerId)\n  ) {\n    return null;\n  }\n\n  if (existingState.container.parentId === parentId) {\n    return toContainerNode(existingState);\n  }\n  assertLocalMovePathFits(state.containersById, containerId, parentId);\n\n  const isRemoteContainer = Boolean(existingState.record.documentId);\n  const saveOptions = isRemoteContainer\n    ? {\n        moveIntent: {\n          parentContainerId: parentId,\n          previousParentContainerId: existingState.container.parentId,\n        },\n      }\n    : { createIntent: { parentContainerId: parentId } };\n  const persisted = await persistContainerState(state, existingState, {\n    patch: { parentId },\n    saveOptions,\n    isCurrent,\n  });\n  if (persisted.status !== \"persisted\" || !isCurrent()) return null;\n  syncAgent.scheduleSync();\n  const action = isRemoteContainer\n    ? \"queued container move\"\n    : \"moved container\";\n  state.runtime.util.log(\n    `${getContainerContentsStoreLogLabel(state)}: ${action} ${containerId} under ${parentId}`,\n  );\n  return toContainerNode(existingState);\n}\n"]}

package/stores/container-contents/organizationMetadataSystemContainer.js

@@ -1,44 +0,0 @@
-import { deriveOrganizationMetadataContainerSystemSlot, } from "../../internal/validators/containerSystemSlot.js";
-import { updateExistingSystemContainer } from "./existingSystemContainer.js";
-import { getContainerContentsStoreLogLabel } from "./logLabel.js";
-import { probeExistingSystemContainer } from "./systemContainerHydration.js";
-import { findOrganizationSystemRootState } from "./systemContainerLookup.js";
-/** Metadata is provisioned with reserved grants; generic ensure cannot create it. */
-export async function ensureOrganizationMetadataSystemContainer(input) {
-    const { state, syncAgent, systemSlot, options } = input;
-    const organizationId = state.runtime.auth.organizationId;
-    if (!organizationId)
-        return { handled: false };
-    const metadataSlot = await deriveOrganizationMetadataContainerSystemSlot({
-        organizationId,
-    });
-    const isCurrent = () => input.isCurrent() && state.runtime.auth.organizationId === organizationId;
-    if (!isCurrent())
-        return { handled: true, container: null };
-    if (systemSlot !== metadataSlot)
-        return { handled: false };
-    let existing = findOrganizationSystemRootState(state, organizationId, systemSlot);
-    if (!existing &&
-        !options.deferRemoteBootstrap &&
-        state.runtime.auth.isAuthenticated &&
-        state.runtime.state.online) {
-        await probeExistingSystemContainer({
-            logLabel: getContainerContentsStoreLogLabel(state),
-            rootState: null,
-            state,
-            syncAgent,
-            systemSlot,
-            independentRoot: true,
-        });
-        if (!isCurrent())
-            return { handled: true, container: null };
-        existing = findOrganizationSystemRootState(state, organizationId, systemSlot);
-    }
-    return {
-        handled: true,
-        container: existing
-            ? await updateExistingSystemContainer(state, syncAgent, existing, options, isCurrent)
-            : null,
-    };
-}
-//# sourceMappingURL=organizationMetadataSystemContainer.js.map

package/stores/container-contents/organizationMetadataSystemContainer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"organizationMetadataSystemContainer.js","sourceRoot":"","sources":["organizationMetadataSystemContainer.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,6CAA6C,GAC9C,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAE/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAO1E,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAAC,KAM/D;IACC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACxD,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;IACzD,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAW,CAAC;IACxD,MAAM,YAAY,GAAG,MAAM,6CAA6C,CAAC;QACvE,cAAc;KACf,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,KAAK,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,KAAK,cAAc,CAAC;IAC5E,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAW,CAAC;IACrE,IAAI,UAAU,KAAK,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAW,CAAC;IAEpE,IAAI,QAAQ,GAAG,+BAA+B,CAC5C,KAAK,EACL,cAAc,EACd,UAAU,CACX,CAAC;IACF,IACE,CAAC,QAAQ;QACT,CAAC,OAAO,CAAC,oBAAoB;QAC7B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QAClC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAC1B,CAAC;QACD,MAAM,4BAA4B,CAAC;YACjC,QAAQ,EAAE,iCAAiC,CAAC,KAAK,CAAC;YAClD,SAAS,EAAE,IAAI;YACf,KAAK;YACL,SAAS;YACT,UAAU;YACV,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAW,CAAC;QACrE,QAAQ,GAAG,+BAA+B,CACxC,KAAK,EACL,cAAc,EACd,UAAU,CACX,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,QAAQ;YACjB,CAAC,CAAC,MAAM,6BAA6B,CACjC,KAAK,EACL,SAAS,EACT,QAAQ,EACR,OAAO,EACP,SAAS,CACV;YACH,CAAC,CAAC,IAAI;KACA,CAAC;AACb,CAAC","sourcesContent":["import {\n  type ContainerSystemSlot,\n  deriveOrganizationMetadataContainerSystemSlot,\n} from \"@tearleads/validators/containerSystemSlot\";\nimport { updateExistingSystemContainer } from \"./existingSystemContainer\";\nimport { getContainerContentsStoreLogLabel } from \"./logLabel\";\nimport type { ContainerContentsStoreSyncAgent } from \"./syncAgent\";\nimport { probeExistingSystemContainer } from \"./systemContainerHydration\";\nimport { findOrganizationSystemRootState } from \"./systemContainerLookup\";\nimport type {\n  ContainerContentsStoreState,\n  EnsureSystemContainerOptions,\n} from \"./types\";\nimport type { ContainerWriteGuard } from \"./writeGeneration\";\n\n/** Metadata is provisioned with reserved grants; generic ensure cannot create it. */\nexport async function ensureOrganizationMetadataSystemContainer(input: {\n  readonly state: ContainerContentsStoreState;\n  readonly syncAgent: ContainerContentsStoreSyncAgent;\n  readonly systemSlot: ContainerSystemSlot;\n  readonly options: EnsureSystemContainerOptions;\n  readonly isCurrent: ContainerWriteGuard;\n}) {\n  const { state, syncAgent, systemSlot, options } = input;\n  const organizationId = state.runtime.auth.organizationId;\n  if (!organizationId) return { handled: false } as const;\n  const metadataSlot = await deriveOrganizationMetadataContainerSystemSlot({\n    organizationId,\n  });\n  const isCurrent = () =>\n    input.isCurrent() && state.runtime.auth.organizationId === organizationId;\n  if (!isCurrent()) return { handled: true, container: null } as const;\n  if (systemSlot !== metadataSlot) return { handled: false } as const;\n\n  let existing = findOrganizationSystemRootState(\n    state,\n    organizationId,\n    systemSlot,\n  );\n  if (\n    !existing &&\n    !options.deferRemoteBootstrap &&\n    state.runtime.auth.isAuthenticated &&\n    state.runtime.state.online\n  ) {\n    await probeExistingSystemContainer({\n      logLabel: getContainerContentsStoreLogLabel(state),\n      rootState: null,\n      state,\n      syncAgent,\n      systemSlot,\n      independentRoot: true,\n    });\n    if (!isCurrent()) return { handled: true, container: null } as const;\n    existing = findOrganizationSystemRootState(\n      state,\n      organizationId,\n      systemSlot,\n    );\n  }\n  return {\n    handled: true,\n    container: existing\n      ? await updateExistingSystemContainer(\n          state,\n          syncAgent,\n          existing,\n          options,\n          isCurrent,\n        )\n      : null,\n  } as const;\n}\n"]}

package/stores/container-contents/purgeContainerOperation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"purgeContainerOperation.js","sourceRoot":"","sources":["purgeContainerOperation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAKzD,oEAAoE;AACpE,iFAAiF;AACjF,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,OAAsB,EACtB,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,OAAO,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE;QAC1E,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CACjC,qBAAqB,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,MAAM,CAAC,kBAAkB,CAAC,MAAM,0BAA0B,MAAM,CAAC,WAAW,UAAU;QACxI,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC;QACvE,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CACzB,MAAM,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;YAClC,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,IAAI;KACjD,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { PurgeOptions } from \"../../workflows/container-contents/container-state/purgeProgress\";\nimport { runContainerPurge } from \"./containerPurgeCore\";\nimport type { ContainerContentsStoreSyncAgent } from \"./syncAgent\";\nimport type { ContainerContentsStoreState } from \"./types\";\nimport type { ContainerWriteGuard } from \"./writeGeneration\";\n\n// Permanently destroy a container and everything beneath it. Unlike\n// deleteContainer (a leaf-only hard delete), this cascades: documents whose last\n// link is inside the subtree are purged, multi-folder documents are unlinked\n// from the subtree only, and descendant containers are deleted leaf-first. The\n// caller (the trash \"Delete Forever\" action) restricts this to folders under\n// trash; here we keep the same structural guards deleteContainer uses — never a\n// root and never a system container itself.\nexport async function purgeContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  options?: PurgeOptions,\n  isCurrent: ContainerWriteGuard = () => true,\n): Promise<boolean> {\n  return runContainerPurge(state, syncAgent, containerId, options, isCurrent, {\n    describeResult: (target, result) =>\n      `purged container \"${target.container.name}\" (${result.purgedContainerIds.length} container(s) removed, ${result.failedCount} failed)`,\n    didSucceed: (result) => result.purgedContainerIds.includes(containerId),\n    validateTarget: (target) =>\n      target.container.parentId !== null &&\n      (target.container.systemSlot ?? null) === null,\n  });\n}\n"]}

package/stores/container-contents/reconcilableContainer.d.ts

@@ -1,48 +0,0 @@
-import type { ContainerNode } from "./types.js";
-/**
- * Whether a container is a system container — one tagged with a deterministic
- * `systemSlot` for a built-in role such as Contacts, Trash, organization
- * metadata, or the per-organization roster.
- */
-export declare function isSystemContainerNode(node: Pick<ContainerNode, "systemSlot">): boolean;
-/** Whether a container has completed enough remote creation to be listed. */
-export declare function isRemoteBackedContainerNode(node: Pick<ContainerNode, "metadataDocumentId">): boolean;
-/**
- * Whether generic document reconciliation may safely list this container.
- *
- * Every container joins generic reconciliation only after remote creation has
- * given it a metadata document id. This keeps local-first roots and children
- * out of an HTTP lane that cannot exist yet, while still letting another device
- * rematerialize Contacts, Trash, and other system data.
- */
-export declare function isReconcilableContainerNode(node: Pick<ContainerNode, "effectiveAccessLevel" | "metadataDocumentId" | "organizationId" | "systemSlot">, homeOrganizationId: string | null): boolean;
-/**
- * Whether a root-lane discovery hint should re-list this container's documents.
- *
- * The server's root discovery lane can return directly granted non-root
- * containers, so every remote-backed regular container remains eligible
- * regardless of its parent. Membership-visible foreign system containers
- * remain eligible for catch-up. Own system children are excluded here because
- * cold/auth backfill and explicit full refresh already reconcile them; sweeping
- * them on every Explorer-open or shared-root hint creates redundant work.
- */
-export declare function isAutomaticRootCatchupContainerNode(node: Pick<ContainerNode, "effectiveAccessLevel" | "metadataDocumentId" | "organizationId" | "systemSlot">, homeOrganizationId: string | null): boolean;
-/**
- * Whether a system container belongs to a foreign organization whose contents
- * are visible through membership-level access.
- *
- * Event routing uses this classification for foreign system content whose
- * already-known document updates must still force discovery. It is not the
- * generic sweep predicate: remote-backed own system containers also reconcile
- * via {@link isReconcilableContainerNode}. A foreign system container is one
- * that is:
- *
- *  - a different org's (`organizationId !== homeOrganizationId`). Own system
- *    containers are outside this foreign-system classification, while a
- *    container mid-creation has an empty organization id that matches nothing
- *    (as does a null/unhydrated home org).
- *  - granted at a *membership* level — `read` (Members group) or `admin`
- *    (Admins group). A plain `write` share of a folder does not make the sharee
- *    a member, so it does not opt that folder into automatic root catch-up.
- */
-export declare function isForeignSystemContainerNode(node: Pick<ContainerNode, "systemSlot" | "organizationId" | "effectiveAccessLevel">, homeOrganizationId: string | null): boolean;

package/stores/container-contents/reconcilableContainer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reconcilableContainer.js","sourceRoot":"","sources":["reconcilableContainer.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAuC;IAEvC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,2BAA2B,CACzC,IAA+C;IAE/C,OAAO,CACL,OAAO,IAAI,CAAC,kBAAkB,KAAK,QAAQ;QAC3C,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CACnC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAMC,EACD,kBAAiC;IAEjC,wEAAwE;IACxE,uEAAuE;IACvE,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CACL,kBAAkB,KAAK,IAAI;QAC3B,CAAC,IAAI,CAAC,cAAc,KAAK,kBAAkB;YACzC,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mCAAmC,CACjD,IAMC,EACD,kBAAiC;IAEjC,OAAO,CACL,2BAA2B,CAAC,IAAI,CAAC;QACjC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAC3B,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAGC,EACD,kBAAiC;IAEjC,OAAO,CACL,qBAAqB,CAAC,IAAI,CAAC;QAC3B,kBAAkB,KAAK,IAAI;QAC3B,CAAC,CAAC,IAAI,CAAC,cAAc;QACrB,IAAI,CAAC,cAAc,KAAK,kBAAkB;QAC1C,CAAC,IAAI,CAAC,oBAAoB,KAAK,MAAM;YACnC,IAAI,CAAC,oBAAoB,KAAK,OAAO,CAAC,CACzC,CAAC;AACJ,CAAC","sourcesContent":["import type { ContainerNode } from \"./types\";\n\n/**\n * Whether a container is a system container — one tagged with a deterministic\n * `systemSlot` for a built-in role such as Contacts, Trash, organization\n * metadata, or the per-organization roster.\n */\nexport function isSystemContainerNode(\n  node: Pick<ContainerNode, \"systemSlot\">,\n): boolean {\n  return !!node.systemSlot;\n}\n\n/** Whether a container has completed enough remote creation to be listed. */\nexport function isRemoteBackedContainerNode(\n  node: Pick<ContainerNode, \"metadataDocumentId\">,\n): boolean {\n  return (\n    typeof node.metadataDocumentId === \"string\" &&\n    node.metadataDocumentId.length > 0\n  );\n}\n\n/**\n * Whether generic document reconciliation may safely list this container.\n *\n * Every container joins generic reconciliation only after remote creation has\n * given it a metadata document id. This keeps local-first roots and children\n * out of an HTTP lane that cannot exist yet, while still letting another device\n * rematerialize Contacts, Trash, and other system data.\n */\nexport function isReconcilableContainerNode(\n  node: Pick<\n    ContainerNode,\n    | \"effectiveAccessLevel\"\n    | \"metadataDocumentId\"\n    | \"organizationId\"\n    | \"systemSlot\"\n  >,\n  homeOrganizationId: string | null,\n): boolean {\n  // Document discovery is an HTTP read against the remote container id. A\n  // local-first container has no such lane until its metadata create has\n  // committed; attempting to list it can only produce a 404. This applies to\n  // the pre-auth local root just as much as to a local system container.\n  if (!isRemoteBackedContainerNode(node)) {\n    return false;\n  }\n\n  if (!isSystemContainerNode(node)) {\n    return true;\n  }\n\n  return (\n    homeOrganizationId !== null &&\n    (node.organizationId === homeOrganizationId ||\n      isForeignSystemContainerNode(node, homeOrganizationId))\n  );\n}\n\n/**\n * Whether a root-lane discovery hint should re-list this container's documents.\n *\n * The server's root discovery lane can return directly granted non-root\n * containers, so every remote-backed regular container remains eligible\n * regardless of its parent. Membership-visible foreign system containers\n * remain eligible for catch-up. Own system children are excluded here because\n * cold/auth backfill and explicit full refresh already reconcile them; sweeping\n * them on every Explorer-open or shared-root hint creates redundant work.\n */\nexport function isAutomaticRootCatchupContainerNode(\n  node: Pick<\n    ContainerNode,\n    | \"effectiveAccessLevel\"\n    | \"metadataDocumentId\"\n    | \"organizationId\"\n    | \"systemSlot\"\n  >,\n  homeOrganizationId: string | null,\n): boolean {\n  return (\n    isRemoteBackedContainerNode(node) &&\n    (!isSystemContainerNode(node) ||\n      isForeignSystemContainerNode(node, homeOrganizationId))\n  );\n}\n\n/**\n * Whether a system container belongs to a foreign organization whose contents\n * are visible through membership-level access.\n *\n * Event routing uses this classification for foreign system content whose\n * already-known document updates must still force discovery. It is not the\n * generic sweep predicate: remote-backed own system containers also reconcile\n * via {@link isReconcilableContainerNode}. A foreign system container is one\n * that is:\n *\n *  - a different org's (`organizationId !== homeOrganizationId`). Own system\n *    containers are outside this foreign-system classification, while a\n *    container mid-creation has an empty organization id that matches nothing\n *    (as does a null/unhydrated home org).\n *  - granted at a *membership* level — `read` (Members group) or `admin`\n *    (Admins group). A plain `write` share of a folder does not make the sharee\n *    a member, so it does not opt that folder into automatic root catch-up.\n */\nexport function isForeignSystemContainerNode(\n  node: Pick<\n    ContainerNode,\n    \"systemSlot\" | \"organizationId\" | \"effectiveAccessLevel\"\n  >,\n  homeOrganizationId: string | null,\n): boolean {\n  return (\n    isSystemContainerNode(node) &&\n    homeOrganizationId !== null &&\n    !!node.organizationId &&\n    node.organizationId !== homeOrganizationId &&\n    (node.effectiveAccessLevel === \"read\" ||\n      node.effectiveAccessLevel === \"admin\")\n  );\n}\n"]}

package/stores/container-contents/remoteBackedContainerState.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"remoteBackedContainerState.js","sourceRoot":"","sources":["remoteBackedContainerState.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,4BAA4B,CAC1C,cAA8B;IAE9B,OAAO,CACL,OAAO,cAAc,CAAC,SAAS,CAAC,kBAAkB,KAAK,QAAQ;QAC/D,cAAc,CAAC,SAAS,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;QACtD,OAAO,cAAc,CAAC,MAAM,CAAC,UAAU,KAAK,QAAQ;QACpD,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAC3C,OAAO,cAAc,CAAC,MAAM,CAAC,eAAe,KAAK,QAAQ;QACzD,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CACjD,CAAC;AACJ,CAAC","sourcesContent":["import type { ContainerState } from \"../../workflows/container-contents/remoteHydration\";\n\nexport function isRemoteBackedContainerState(\n  containerState: ContainerState,\n): boolean {\n  return (\n    typeof containerState.container.metadataDocumentId === \"string\" &&\n    containerState.container.metadataDocumentId.length > 0 &&\n    typeof containerState.record.documentId === \"string\" &&\n    containerState.record.documentId.length > 0 &&\n    typeof containerState.record.accessStateHash === \"string\" &&\n    containerState.record.accessStateHash.length > 0\n  );\n}\n"]}