@tearleads/client-sdk 0.1.62 → 0.1.64

package/data/keyingProjectionVerification/principalPolicy/resolvedPrincipalPolicy.js

@@ -0,0 +1,72 @@
+import { KeyingVerificationError, } from "../../../internal/crypto/index.js";
+import { loadPrincipalPolicyCheckpoint } from "../../persistence/keyingCheckpointPersistence.js";
+import { verifiedPrincipalPolicyMeetsCheckpoint } from "../../persistence/principalPolicyCheckpointSelection.js";
+import { observePrincipalPolicy, } from "../checkpoints/checkpointContext.js";
+import { observeProjectionLifetime } from "../projectionLifetimes.js";
+import { assertProjectionVerificationCurrent, } from "../types.js";
+import { referencedPrincipalPolicyKey, verifiedPrincipalPolicyContainsReference, } from "./principalPolicyCache.js";
+// Scoped evidence is always resolved through the warmer: its operation memo is
+// the only reuse of recovered directory and Admins evidence, with one set of
+// validity rules. The caller's policy cache keeps bare verified policies; it
+// never stands in for organization, dependency or lifetime bindings.
+async function meetsCheckpoints(context, result, refreshMissing) {
+    for (const policy of [...result.dependencies, result.policy]) {
+        const checkpoint = await loadPrincipalPolicyCheckpoint(context.execSql, policy.principalType, policy.principalId);
+        if (refreshMissing &&
+            checkpoint &&
+            (policy.version < checkpoint.version ||
+                (policy.version > checkpoint.version &&
+                    !policy.retainedHistory.some((entry) => entry.state.version === checkpoint.version))))
+            return false;
+        if (!verifiedPrincipalPolicyMeetsCheckpoint(policy, checkpoint))
+            throw new KeyingVerificationError("rollback", "Recovered principal evidence predates the durable checkpoint");
+    }
+    return true;
+}
+async function recoverEvidence(input, resolve) {
+    const read = async (recoveryBatch) => {
+        assertProjectionVerificationCurrent(input.stillCurrent);
+        const recovered = await resolve({
+            recoveryBatch,
+            organizationId: input.organizationId,
+            reference: input.reference,
+            stillCurrent: input.stillCurrent,
+        });
+        assertProjectionVerificationCurrent(input.stillCurrent);
+        assertProjectionVerificationCurrent(recovered.stillCurrent);
+        return recovered;
+    };
+    let result = await read();
+    // A concurrent admission may advance a pin after recovery verified it.
+    // Refresh once outside the operation's directory view; the fresh
+    // recovery and final checkpoint check still reject rollback/equivocation.
+    if (!(await meetsCheckpoints(input.checkpointContext, result, true))) {
+        assertProjectionVerificationCurrent(result.stillCurrent);
+        result = await read({});
+        await meetsCheckpoints(input.checkpointContext, result, false);
+    }
+    return result;
+}
+export async function resolveReferencedPrincipalPolicy(input) {
+    assertProjectionVerificationCurrent(input.stillCurrent);
+    const key = referencedPrincipalPolicyKey(input.reference);
+    const resolve = input.warmReferencedPrincipalPolicies?.resolveReference;
+    if (!resolve)
+        return null;
+    const result = await recoverEvidence(input, resolve);
+    const evidenceCurrent = result.stillCurrent;
+    // The consumer's and every producer's lifetime guard the evidence where it
+    // is used: projection admission rechecks them through the context.
+    const lifetime = () => input.stillCurrent?.() !== false && evidenceCurrent();
+    assertProjectionVerificationCurrent(lifetime);
+    observeProjectionLifetime(input.checkpointContext, lifetime);
+    if (result.organizationId !== input.organizationId)
+        throw new KeyingVerificationError("object_mismatch", "Recovered principal evidence belongs to another organization");
+    if (!verifiedPrincipalPolicyContainsReference(result.policy, input.reference))
+        throw new KeyingVerificationError("object_mismatch", "Recovered principal evidence does not contain the exact citation");
+    for (const policy of [...result.dependencies, result.policy])
+        observePrincipalPolicy(input.checkpointContext, policy, input.organizationId);
+    input.principalPolicyCache.set(key, result.policy);
+    return result.policy;
+}
+//# sourceMappingURL=resolvedPrincipalPolicy.js.map

package/data/keyingProjectionVerification/principalPolicy/resolvedPrincipalPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolvedPrincipalPolicy.js","sourceRoot":"","sources":["resolvedPrincipalPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAGxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,sCAAsC,EAAE,MAAM,sDAAsD,CAAC;AAC9G,OAAO,EACL,sBAAsB,GAEvB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EACL,mCAAmC,GAIpC,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,4BAA4B,EAC5B,wCAAwC,GACzC,MAAM,wBAAwB,CAAC;AAEhC,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,qEAAqE;AACrE,KAAK,UAAU,gBAAgB,CAC7B,OAAoC,EACpC,MAAuC,EACvC,cAAuB;IAEvB,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7D,MAAM,UAAU,GAAG,MAAM,6BAA6B,CACpD,OAAO,CAAC,OAAO,EACf,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,WAAW,CACnB,CAAC;QACF,IACE,cAAc;YACd,UAAU;YACV,CAAC,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO;gBAClC,CAAC,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO;oBAClC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAC1B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,CACtD,CAAC,CAAC;YAEP,OAAO,KAAK,CAAC;QACf,IAAI,CAAC,sCAAsC,CAAC,MAAM,EAAE,UAAU,CAAC;YAC7D,MAAM,IAAI,uBAAuB,CAC/B,UAAU,EACV,8DAA8D,CAC/D,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAaD,KAAK,UAAU,eAAe,CAC5B,KAA4C,EAC5C,OAAyE;IAEzE,MAAM,IAAI,GAAG,KAAK,EAAE,aAAsB,EAAE,EAAE;QAC5C,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC;YAC9B,aAAa;YACb,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;QACH,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxD,mCAAmC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,IAAI,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;IAC1B,uEAAuE;IACvE,iEAAiE;IACjE,0EAA0E;IAC1E,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,KAAK,CAAC,iBAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACrE,mCAAmC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;QACxB,MAAM,gBAAgB,CAAC,KAAK,CAAC,iBAAiB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAA4C;IAE5C,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,4BAA4B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,+BAA+B,EAAE,gBAAgB,CAAC;IACxE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,eAAe,GAAG,MAAM,CAAC,YAAY,CAAC;IAC5C,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,IAAI,eAAe,EAAE,CAAC;IAC7E,mCAAmC,CAAC,QAAQ,CAAC,CAAC;IAC9C,yBAAyB,CAAC,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;QAChD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,8DAA8D,CAC/D,CAAC;IACJ,IAAI,CAAC,wCAAwC,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;QAC3E,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,kEAAkE,CACnE,CAAC;IACJ,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;QAC1D,sBAAsB,CACpB,KAAK,CAAC,iBAAiB,EACvB,MAAM,EACN,KAAK,CAAC,cAAc,CACrB,CAAC;IACJ,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type ReferencedPrincipalHead,\n  type VerifiedPrincipalPolicyCurrent,\n} from \"@tearleads/crypto\";\nimport { loadPrincipalPolicyCheckpoint } from \"../../persistence/keyingCheckpointPersistence\";\nimport { verifiedPrincipalPolicyMeetsCheckpoint } from \"../../persistence/principalPolicyCheckpointSelection\";\nimport {\n  observePrincipalPolicy,\n  type ProjectionCheckpointContext,\n} from \"../checkpoints/checkpointContext\";\nimport { observeProjectionLifetime } from \"../projectionLifetimes\";\nimport {\n  assertProjectionVerificationCurrent,\n  type PrincipalPolicyCache,\n  type ReferencedPrincipalPolicyWarmer,\n  type ResolvedPrincipalPolicyEvidence,\n} from \"../types\";\nimport {\n  referencedPrincipalPolicyKey,\n  verifiedPrincipalPolicyContainsReference,\n} from \"./principalPolicyCache\";\n\n// Scoped evidence is always resolved through the warmer: its operation memo is\n// the only reuse of recovered directory and Admins evidence, with one set of\n// validity rules. The caller's policy cache keeps bare verified policies; it\n// never stands in for organization, dependency or lifetime bindings.\nasync function meetsCheckpoints(\n  context: ProjectionCheckpointContext,\n  result: ResolvedPrincipalPolicyEvidence,\n  refreshMissing: boolean,\n): Promise<boolean> {\n  for (const policy of [...result.dependencies, result.policy]) {\n    const checkpoint = await loadPrincipalPolicyCheckpoint(\n      context.execSql,\n      policy.principalType,\n      policy.principalId,\n    );\n    if (\n      refreshMissing &&\n      checkpoint &&\n      (policy.version < checkpoint.version ||\n        (policy.version > checkpoint.version &&\n          !policy.retainedHistory.some(\n            (entry) => entry.state.version === checkpoint.version,\n          )))\n    )\n      return false;\n    if (!verifiedPrincipalPolicyMeetsCheckpoint(policy, checkpoint))\n      throw new KeyingVerificationError(\n        \"rollback\",\n        \"Recovered principal evidence predates the durable checkpoint\",\n      );\n  }\n  return true;\n}\n\ninterface ResolveReferencedPrincipalPolicyInput {\n  readonly checkpointContext: ProjectionCheckpointContext;\n  readonly organizationId: string;\n  readonly stillCurrent?: (() => boolean) | undefined;\n  readonly principalPolicyCache: PrincipalPolicyCache;\n  readonly reference: ReferencedPrincipalHead;\n  readonly warmReferencedPrincipalPolicies?:\n    | ReferencedPrincipalPolicyWarmer\n    | undefined;\n}\n\nasync function recoverEvidence(\n  input: ResolveReferencedPrincipalPolicyInput,\n  resolve: NonNullable<ReferencedPrincipalPolicyWarmer[\"resolveReference\"]>,\n): Promise<ResolvedPrincipalPolicyEvidence> {\n  const read = async (recoveryBatch?: object) => {\n    assertProjectionVerificationCurrent(input.stillCurrent);\n    const recovered = await resolve({\n      recoveryBatch,\n      organizationId: input.organizationId,\n      reference: input.reference,\n      stillCurrent: input.stillCurrent,\n    });\n    assertProjectionVerificationCurrent(input.stillCurrent);\n    assertProjectionVerificationCurrent(recovered.stillCurrent);\n    return recovered;\n  };\n  let result = await read();\n  // A concurrent admission may advance a pin after recovery verified it.\n  // Refresh once outside the operation's directory view; the fresh\n  // recovery and final checkpoint check still reject rollback/equivocation.\n  if (!(await meetsCheckpoints(input.checkpointContext, result, true))) {\n    assertProjectionVerificationCurrent(result.stillCurrent);\n    result = await read({});\n    await meetsCheckpoints(input.checkpointContext, result, false);\n  }\n  return result;\n}\n\nexport async function resolveReferencedPrincipalPolicy(\n  input: ResolveReferencedPrincipalPolicyInput,\n): Promise<VerifiedPrincipalPolicyCurrent | null> {\n  assertProjectionVerificationCurrent(input.stillCurrent);\n  const key = referencedPrincipalPolicyKey(input.reference);\n  const resolve = input.warmReferencedPrincipalPolicies?.resolveReference;\n  if (!resolve) return null;\n  const result = await recoverEvidence(input, resolve);\n  const evidenceCurrent = result.stillCurrent;\n  // The consumer's and every producer's lifetime guard the evidence where it\n  // is used: projection admission rechecks them through the context.\n  const lifetime = () => input.stillCurrent?.() !== false && evidenceCurrent();\n  assertProjectionVerificationCurrent(lifetime);\n  observeProjectionLifetime(input.checkpointContext, lifetime);\n  if (result.organizationId !== input.organizationId)\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Recovered principal evidence belongs to another organization\",\n    );\n  if (!verifiedPrincipalPolicyContainsReference(result.policy, input.reference))\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Recovered principal evidence does not contain the exact citation\",\n    );\n  for (const policy of [...result.dependencies, result.policy])\n    observePrincipalPolicy(\n      input.checkpointContext,\n      policy,\n      input.organizationId,\n    );\n  input.principalPolicyCache.set(key, result.policy);\n  return result.policy;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tearleads/client-sdk",
-  "version": "0.1.62",
+  "version": "0.1.64",
   "description": "React-free Tearleads client runtime: local SQLite persistence, keys, sync, encrypted blobs, and domain workflows.",
   "license": "UNLICENSED",
   "repository": {

package/stores/container-contents/accessRestorationSweep.js

@@ -1,5 +1,5 @@
+import { refreshAllRemoteHydration, } from "./hydration/remoteHydrationRefresh.js";
 import { getContainerContentsStoreLogLabel } from "./logLabel.js";
-import { refreshAllRemoteHydration, } from "./remoteHydrationRefresh.js";
 function createRestorationSweepSession(state, isCurrent) {
     return {
         isCurrent,

package/stores/container-contents/accessRestorationSweep.js.map

@@ -1 +1 @@
-{"version":3,"file":"accessRestorationSweep.js","sourceRoot":"","sources":["accessRestorationSweep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAEL,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAgBlC,SAAS,6BAA6B,CACpC,KAAsC,EACtC,SAAwB;IAExB,OAAO;QACL,SAAS;QACT,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAsC;IAEtC,MAAM,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACtD,MAAM,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACxD,OAAO,GAAG,EAAE,CACV,KAAK,CAAC,mBAAmB,KAAK,mBAAmB;QACjD,KAAK,CAAC,oBAAoB,KAAK,oBAAoB,CAAC;AACxD,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AAEvC,SAAS,iBAAiB,CAAC,KAA2B,EAAE,GAAW;IACjE,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,mBAAmB,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,EAC9D,kBAAkB,CACnB,CAAC;IACF,OAAO,eAAe,GAAG,UAAU,IAAI,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,wBAAwB,CAAC,KAA2B;IAC3D,OAAO,GAAG,KAAK,CAAC,eAAe,SAAS,KAAK,CAAC,cAAc,SAAS,KAAK,CAAC,UAAU,EAAE,CAAC;AAC1F,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,yBAAyB,CACtC,OAAgC,EAChC,MAAuC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YAAE,OAAO;QACjC,0EAA0E;QAC1E,sFAAsF;QACtF,MAAM,OAAO,CAAC,WAAW,CAAC,mCAAmC,CAC3D,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC7B,KAAK,EACL,OAAO,CAAC,SAAS,CAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,OAAgC,EAChC,MAAuC,EACvC,mBAAqD;IAErD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,mBAAmB,EAAE,GAAG,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9D,sEAAsE;YACtE,wEAAwE;YACxE,iEAAiE;YACjE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;YAC9C,MAAM,OAAO,CAAC,WAAW,CAAC,mCAAmC,CAC3D,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC7B,KAAK,EACL,OAAO,CAAC,SAAS,CAClB,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;gBACzB,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACtB,GAAG,iCAAiC,CAAC,OAAO,CAAC,KAAK,CAAC,sEAAsE,CAC1H,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YACnC,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,gCAAgC,CACzE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC7B,KAAK,EACL,WAAW,EACX,OAAO,CAAC,SAAS,CAClB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG,KAAK;gBACR,YAAY,EAAE,KAAK,CAAC,YAAY,GAAG,CAAC;gBACpC,eAAe,EAAE,WAAW;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,OAAgC,EAChC,mBAAqD;IAErD,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IACpD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,aAAa,GACjB,MAAM,OAAO,CAAC,WAAW,CAAC,gCAAgC,CACxD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC7B,eAAe,CAChB,CAAC;IACJ,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,yBAAyB,CAAC,OAAO,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,kCAAkC,CACzC,KAAsC,EACtC,kBAA2C,EAC3C,iBAAkD;IAElD,MAAM,OAAO,GAAG,6BAA6B,CAC3C,KAAK,EACL,4BAA4B,CAAC,KAAK,CAAC,CACpC,CAAC;IACF,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,WAAW,GACf,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YAC7B,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC3C,MAAM,mBAAmB,GAAG,WAAW;YACrC,CAAC,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YAC1D,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,OAAO,EACP,mBAAmB,CACpB,CAAC;QACF,IAAI,OAAO,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,yBAAyB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,KAItC;IACC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC1C,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO;IACT,CAAC;IAED,MAAM,yBAAyB,CAAC;QAC9B,eAAe,EAAE,GAAG,EAAE,CAAC,yBAAyB,CAAC,OAAO,EAAE,MAAM,CAAC;QACjE,iCAAiC,EAAE,GAAG,EAAE,CACtC,kCAAkC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC;QAC5D,gBAAgB;QAChB,sBAAsB,EAAE,IAAI;QAC5B,0BAA0B,EAAE,KAAK;QACjC,6BAA6B,EAAE,KAAK;QACpC,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAG9C;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,OAAO,KAAK,EAAE,SAAS,GAAG,4BAA4B,CAAC,KAAK,CAAC,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,GAAG,iCAAiC,CAAC,KAAK,CAAC,iCAAiC,CAAC;YAC7F,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { getContainerContentsStoreLogLabel } from \"./logLabel\";\nimport {\n  type RemoteHydrationRequester,\n  refreshAllRemoteHydration,\n} from \"./remoteHydrationRefresh\";\nimport type { ContainerContentsStoreSyncState } from \"./syncAgentTypes\";\n\ntype DormantMetadataSweep = Awaited<\n  ReturnType<\n    ContainerContentsStoreSyncState[\"persistence\"][\"listDormantMetadataSweepRequests\"]\n  >\n>[number];\n\ninterface RestorationSweepSession {\n  isCurrent: () => boolean;\n  persistence: ContainerContentsStoreSyncState[\"persistence\"];\n  runtime: ContainerContentsStoreSyncState[\"runtime\"];\n  state: ContainerContentsStoreSyncState;\n}\n\nfunction createRestorationSweepSession(\n  state: ContainerContentsStoreSyncState,\n  isCurrent: () => boolean,\n): RestorationSweepSession {\n  return {\n    isCurrent,\n    persistence: state.persistence,\n    runtime: state.runtime,\n    state,\n  };\n}\n\nfunction captureRestorationGeneration(\n  state: ContainerContentsStoreSyncState,\n): () => boolean {\n  const lifecycleGeneration = state.lifecycleGeneration;\n  const structuralGeneration = state.structuralGeneration;\n  return () =>\n    state.lifecycleGeneration === lifecycleGeneration &&\n    state.structuralGeneration === structuralGeneration;\n}\n\nconst SWEEP_ATTEMPT_LIMIT = 5;\nconst SWEEP_RETRY_BASE_MS = 60_000;\nconst SWEEP_RETRY_MAX_MS = 15 * 60_000;\n\nfunction isSweepAttemptDue(sweep: DormantMetadataSweep, now: number): boolean {\n  if (!sweep.lastAttemptedAt) {\n    return true;\n  }\n  const lastAttemptedAt = Date.parse(sweep.lastAttemptedAt);\n  if (!Number.isFinite(lastAttemptedAt)) {\n    return true;\n  }\n  const retryDelay = Math.min(\n    SWEEP_RETRY_BASE_MS * 2 ** Math.max(0, sweep.attemptCount - 1),\n    SWEEP_RETRY_MAX_MS,\n  );\n  return lastAttemptedAt + retryDelay <= now;\n}\n\nfunction restorationSweepIdentity(sweep: DormantMetadataSweep): string {\n  return `${sweep.requesterUserId}\\u0000${sweep.organizationId}\\u0000${sweep.generation}`;\n}\n\n/** A completed crawl can restore verified objects; absence never authorizes data loss. */\nasync function completeRestorationSweeps(\n  session: RestorationSweepSession,\n  sweeps: readonly DormantMetadataSweep[],\n): Promise<void> {\n  for (const sweep of sweeps) {\n    if (!session.isCurrent()) return;\n    // An unsigned 404 cannot prove that encrypted local edits are disposable.\n    // Leave unavailable metadata dormant until verified rediscovery or explicit deletion.\n    await session.persistence.completeDormantMetadataSweepRequest(\n      session.runtime.infra.execSql,\n      sweep,\n      session.isCurrent,\n    );\n  }\n}\n\nasync function claimDueRestorationSweeps(\n  session: RestorationSweepSession,\n  sweeps: readonly DormantMetadataSweep[],\n  forcedRetrySweepIds?: ReadonlySet<string> | undefined,\n): Promise<DormantMetadataSweep[]> {\n  const now = Date.now();\n  const attemptedAt = new Date(now).toISOString();\n  const claimed: DormantMetadataSweep[] = [];\n  for (const sweep of sweeps) {\n    if (!session.isCurrent()) {\n      return claimed;\n    }\n    if (forcedRetrySweepIds?.has(restorationSweepIdentity(sweep))) {\n      // The interrupted generation already claimed and durably counted this\n      // attempt. Resume that exact attempt after reset instead of consuming a\n      // new one or retiring it at the limit before its completion ran.\n      claimed.push(sweep);\n      continue;\n    }\n    if (sweep.attemptCount >= SWEEP_ATTEMPT_LIMIT) {\n      await session.persistence.completeDormantMetadataSweepRequest(\n        session.runtime.infra.execSql,\n        sweep,\n        session.isCurrent,\n      );\n      if (!session.isCurrent()) {\n        return claimed;\n      }\n      session.runtime.util.log(\n        `${getContainerContentsStoreLogLabel(session.state)}: retired exhausted dormant metadata sweep; metadata remains dormant`,\n      );\n      continue;\n    }\n    if (!isSweepAttemptDue(sweep, now)) {\n      continue;\n    }\n    const didClaim = await session.persistence.claimDormantMetadataSweepAttempt(\n      session.runtime.infra.execSql,\n      sweep,\n      attemptedAt,\n      session.isCurrent,\n    );\n    if (!session.isCurrent()) {\n      return claimed;\n    }\n    if (didClaim) {\n      claimed.push({\n        ...sweep,\n        attemptCount: sweep.attemptCount + 1,\n        lastAttemptedAt: attemptedAt,\n      });\n    }\n  }\n  return claimed;\n}\n\nasync function loadAndClaimRestorationSweeps(\n  session: RestorationSweepSession,\n  forcedRetrySweepIds?: ReadonlySet<string> | undefined,\n): Promise<DormantMetadataSweep[]> {\n  const requesterUserId = session.runtime.auth.userId;\n  if (!requesterUserId) {\n    return [];\n  }\n  const pendingSweeps =\n    await session.persistence.listDormantMetadataSweepRequests(\n      session.runtime.infra.execSql,\n      requesterUserId,\n    );\n  if (!session.isCurrent()) {\n    return [];\n  }\n  return claimDueRestorationSweeps(session, pendingSweeps, forcedRetrySweepIds);\n}\n\nfunction recreateRestorationSweepCompletion(\n  state: ContainerContentsStoreSyncState,\n  interruptedSession: RestorationSweepSession,\n  interruptedSweeps: readonly DormantMetadataSweep[],\n): () => Promise<void> {\n  const session = createRestorationSweepSession(\n    state,\n    captureRestorationGeneration(state),\n  );\n  return async () => {\n    const sameStorage =\n      session.runtime.infra.execSql ===\n      interruptedSession.runtime.infra.execSql;\n    const forcedRetrySweepIds = sameStorage\n      ? new Set(interruptedSweeps.map(restorationSweepIdentity))\n      : undefined;\n    const sweeps = await loadAndClaimRestorationSweeps(\n      session,\n      forcedRetrySweepIds,\n    );\n    if (session.isCurrent() && sweeps.length > 0) {\n      await completeRestorationSweeps(session, sweeps);\n    }\n  };\n}\n\nasync function reconcileRestoredAccess(input: {\n  isCurrent: () => boolean;\n  requestHydration: RemoteHydrationRequester;\n  state: ContainerContentsStoreSyncState;\n}): Promise<void> {\n  const { requestHydration, state } = input;\n  const session = createRestorationSweepSession(state, input.isCurrent);\n  const sweeps = await loadAndClaimRestorationSweeps(session);\n  if (!session.isCurrent() || sweeps.length === 0) {\n    return;\n  }\n\n  await refreshAllRemoteHydration({\n    onFullyHydrated: () => completeRestorationSweeps(session, sweeps),\n    recreateOnFullyHydratedAfterReset: () =>\n      recreateRestorationSweepCompletion(state, session, sweeps),\n    requestHydration,\n    resetAllLaneWatermarks: true,\n    scheduleSyncAfterHydration: false,\n    scheduleSyncOnHydrationChange: false,\n    state,\n  });\n}\n\nexport function createRestoredAccessReconciler(input: {\n  requestHydration: RemoteHydrationRequester;\n  state: ContainerContentsStoreSyncState;\n}): (isCurrent?: () => boolean) => Promise<void> {\n  const { state } = input;\n  return async (isCurrent = captureRestorationGeneration(state)) => {\n    try {\n      await reconcileRestoredAccess({ ...input, isCurrent });\n    } catch (error) {\n      if (!isCurrent()) {\n        return;\n      }\n      const message = `${getContainerContentsStoreLogLabel(state)}: dormant metadata sweep failed`;\n      if (state.runtime.util.logError) {\n        state.runtime.util.logError(message, error);\n      } else {\n        state.runtime.util.log(message);\n      }\n    }\n  };\n}\n"]}
+{"version":3,"file":"accessRestorationSweep.js","sourceRoot":"","sources":["accessRestorationSweep.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAgB/D,SAAS,6BAA6B,CACpC,KAAsC,EACtC,SAAwB;IAExB,OAAO;QACL,SAAS;QACT,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAsC;IAEtC,MAAM,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACtD,MAAM,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACxD,OAAO,GAAG,EAAE,CACV,KAAK,CAAC,mBAAmB,KAAK,mBAAmB;QACjD,KAAK,CAAC,oBAAoB,KAAK,oBAAoB,CAAC;AACxD,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AAEvC,SAAS,iBAAiB,CAAC,KAA2B,EAAE,GAAW;IACjE,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,mBAAmB,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,EAC9D,kBAAkB,CACnB,CAAC;IACF,OAAO,eAAe,GAAG,UAAU,IAAI,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,wBAAwB,CAAC,KAA2B;IAC3D,OAAO,GAAG,KAAK,CAAC,eAAe,SAAS,KAAK,CAAC,cAAc,SAAS,KAAK,CAAC,UAAU,EAAE,CAAC;AAC1F,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,yBAAyB,CACtC,OAAgC,EAChC,MAAuC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YAAE,OAAO;QACjC,0EAA0E;QAC1E,sFAAsF;QACtF,MAAM,OAAO,CAAC,WAAW,CAAC,mCAAmC,CAC3D,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC7B,KAAK,EACL,OAAO,CAAC,SAAS,CAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,OAAgC,EAChC,MAAuC,EACvC,mBAAqD;IAErD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,mBAAmB,EAAE,GAAG,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9D,sEAAsE;YACtE,wEAAwE;YACxE,iEAAiE;YACjE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;YAC9C,MAAM,OAAO,CAAC,WAAW,CAAC,mCAAmC,CAC3D,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC7B,KAAK,EACL,OAAO,CAAC,SAAS,CAClB,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;gBACzB,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACtB,GAAG,iCAAiC,CAAC,OAAO,CAAC,KAAK,CAAC,sEAAsE,CAC1H,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YACnC,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,gCAAgC,CACzE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC7B,KAAK,EACL,WAAW,EACX,OAAO,CAAC,SAAS,CAClB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG,KAAK;gBACR,YAAY,EAAE,KAAK,CAAC,YAAY,GAAG,CAAC;gBACpC,eAAe,EAAE,WAAW;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,OAAgC,EAChC,mBAAqD;IAErD,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IACpD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,aAAa,GACjB,MAAM,OAAO,CAAC,WAAW,CAAC,gCAAgC,CACxD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC7B,eAAe,CAChB,CAAC;IACJ,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,yBAAyB,CAAC,OAAO,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,kCAAkC,CACzC,KAAsC,EACtC,kBAA2C,EAC3C,iBAAkD;IAElD,MAAM,OAAO,GAAG,6BAA6B,CAC3C,KAAK,EACL,4BAA4B,CAAC,KAAK,CAAC,CACpC,CAAC;IACF,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,WAAW,GACf,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YAC7B,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC3C,MAAM,mBAAmB,GAAG,WAAW;YACrC,CAAC,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YAC1D,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,OAAO,EACP,mBAAmB,CACpB,CAAC;QACF,IAAI,OAAO,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,yBAAyB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,KAItC;IACC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC1C,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO;IACT,CAAC;IAED,MAAM,yBAAyB,CAAC;QAC9B,eAAe,EAAE,GAAG,EAAE,CAAC,yBAAyB,CAAC,OAAO,EAAE,MAAM,CAAC;QACjE,iCAAiC,EAAE,GAAG,EAAE,CACtC,kCAAkC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC;QAC5D,gBAAgB;QAChB,sBAAsB,EAAE,IAAI;QAC5B,0BAA0B,EAAE,KAAK;QACjC,6BAA6B,EAAE,KAAK;QACpC,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAG9C;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,OAAO,KAAK,EAAE,SAAS,GAAG,4BAA4B,CAAC,KAAK,CAAC,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,GAAG,iCAAiC,CAAC,KAAK,CAAC,iCAAiC,CAAC;YAC7F,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  type RemoteHydrationRequester,\n  refreshAllRemoteHydration,\n} from \"./hydration/remoteHydrationRefresh\";\nimport { getContainerContentsStoreLogLabel } from \"./logLabel\";\nimport type { ContainerContentsStoreSyncState } from \"./syncAgent/syncAgentTypes\";\n\ntype DormantMetadataSweep = Awaited<\n  ReturnType<\n    ContainerContentsStoreSyncState[\"persistence\"][\"listDormantMetadataSweepRequests\"]\n  >\n>[number];\n\ninterface RestorationSweepSession {\n  isCurrent: () => boolean;\n  persistence: ContainerContentsStoreSyncState[\"persistence\"];\n  runtime: ContainerContentsStoreSyncState[\"runtime\"];\n  state: ContainerContentsStoreSyncState;\n}\n\nfunction createRestorationSweepSession(\n  state: ContainerContentsStoreSyncState,\n  isCurrent: () => boolean,\n): RestorationSweepSession {\n  return {\n    isCurrent,\n    persistence: state.persistence,\n    runtime: state.runtime,\n    state,\n  };\n}\n\nfunction captureRestorationGeneration(\n  state: ContainerContentsStoreSyncState,\n): () => boolean {\n  const lifecycleGeneration = state.lifecycleGeneration;\n  const structuralGeneration = state.structuralGeneration;\n  return () =>\n    state.lifecycleGeneration === lifecycleGeneration &&\n    state.structuralGeneration === structuralGeneration;\n}\n\nconst SWEEP_ATTEMPT_LIMIT = 5;\nconst SWEEP_RETRY_BASE_MS = 60_000;\nconst SWEEP_RETRY_MAX_MS = 15 * 60_000;\n\nfunction isSweepAttemptDue(sweep: DormantMetadataSweep, now: number): boolean {\n  if (!sweep.lastAttemptedAt) {\n    return true;\n  }\n  const lastAttemptedAt = Date.parse(sweep.lastAttemptedAt);\n  if (!Number.isFinite(lastAttemptedAt)) {\n    return true;\n  }\n  const retryDelay = Math.min(\n    SWEEP_RETRY_BASE_MS * 2 ** Math.max(0, sweep.attemptCount - 1),\n    SWEEP_RETRY_MAX_MS,\n  );\n  return lastAttemptedAt + retryDelay <= now;\n}\n\nfunction restorationSweepIdentity(sweep: DormantMetadataSweep): string {\n  return `${sweep.requesterUserId}\\u0000${sweep.organizationId}\\u0000${sweep.generation}`;\n}\n\n/** A completed crawl can restore verified objects; absence never authorizes data loss. */\nasync function completeRestorationSweeps(\n  session: RestorationSweepSession,\n  sweeps: readonly DormantMetadataSweep[],\n): Promise<void> {\n  for (const sweep of sweeps) {\n    if (!session.isCurrent()) return;\n    // An unsigned 404 cannot prove that encrypted local edits are disposable.\n    // Leave unavailable metadata dormant until verified rediscovery or explicit deletion.\n    await session.persistence.completeDormantMetadataSweepRequest(\n      session.runtime.infra.execSql,\n      sweep,\n      session.isCurrent,\n    );\n  }\n}\n\nasync function claimDueRestorationSweeps(\n  session: RestorationSweepSession,\n  sweeps: readonly DormantMetadataSweep[],\n  forcedRetrySweepIds?: ReadonlySet<string> | undefined,\n): Promise<DormantMetadataSweep[]> {\n  const now = Date.now();\n  const attemptedAt = new Date(now).toISOString();\n  const claimed: DormantMetadataSweep[] = [];\n  for (const sweep of sweeps) {\n    if (!session.isCurrent()) {\n      return claimed;\n    }\n    if (forcedRetrySweepIds?.has(restorationSweepIdentity(sweep))) {\n      // The interrupted generation already claimed and durably counted this\n      // attempt. Resume that exact attempt after reset instead of consuming a\n      // new one or retiring it at the limit before its completion ran.\n      claimed.push(sweep);\n      continue;\n    }\n    if (sweep.attemptCount >= SWEEP_ATTEMPT_LIMIT) {\n      await session.persistence.completeDormantMetadataSweepRequest(\n        session.runtime.infra.execSql,\n        sweep,\n        session.isCurrent,\n      );\n      if (!session.isCurrent()) {\n        return claimed;\n      }\n      session.runtime.util.log(\n        `${getContainerContentsStoreLogLabel(session.state)}: retired exhausted dormant metadata sweep; metadata remains dormant`,\n      );\n      continue;\n    }\n    if (!isSweepAttemptDue(sweep, now)) {\n      continue;\n    }\n    const didClaim = await session.persistence.claimDormantMetadataSweepAttempt(\n      session.runtime.infra.execSql,\n      sweep,\n      attemptedAt,\n      session.isCurrent,\n    );\n    if (!session.isCurrent()) {\n      return claimed;\n    }\n    if (didClaim) {\n      claimed.push({\n        ...sweep,\n        attemptCount: sweep.attemptCount + 1,\n        lastAttemptedAt: attemptedAt,\n      });\n    }\n  }\n  return claimed;\n}\n\nasync function loadAndClaimRestorationSweeps(\n  session: RestorationSweepSession,\n  forcedRetrySweepIds?: ReadonlySet<string> | undefined,\n): Promise<DormantMetadataSweep[]> {\n  const requesterUserId = session.runtime.auth.userId;\n  if (!requesterUserId) {\n    return [];\n  }\n  const pendingSweeps =\n    await session.persistence.listDormantMetadataSweepRequests(\n      session.runtime.infra.execSql,\n      requesterUserId,\n    );\n  if (!session.isCurrent()) {\n    return [];\n  }\n  return claimDueRestorationSweeps(session, pendingSweeps, forcedRetrySweepIds);\n}\n\nfunction recreateRestorationSweepCompletion(\n  state: ContainerContentsStoreSyncState,\n  interruptedSession: RestorationSweepSession,\n  interruptedSweeps: readonly DormantMetadataSweep[],\n): () => Promise<void> {\n  const session = createRestorationSweepSession(\n    state,\n    captureRestorationGeneration(state),\n  );\n  return async () => {\n    const sameStorage =\n      session.runtime.infra.execSql ===\n      interruptedSession.runtime.infra.execSql;\n    const forcedRetrySweepIds = sameStorage\n      ? new Set(interruptedSweeps.map(restorationSweepIdentity))\n      : undefined;\n    const sweeps = await loadAndClaimRestorationSweeps(\n      session,\n      forcedRetrySweepIds,\n    );\n    if (session.isCurrent() && sweeps.length > 0) {\n      await completeRestorationSweeps(session, sweeps);\n    }\n  };\n}\n\nasync function reconcileRestoredAccess(input: {\n  isCurrent: () => boolean;\n  requestHydration: RemoteHydrationRequester;\n  state: ContainerContentsStoreSyncState;\n}): Promise<void> {\n  const { requestHydration, state } = input;\n  const session = createRestorationSweepSession(state, input.isCurrent);\n  const sweeps = await loadAndClaimRestorationSweeps(session);\n  if (!session.isCurrent() || sweeps.length === 0) {\n    return;\n  }\n\n  await refreshAllRemoteHydration({\n    onFullyHydrated: () => completeRestorationSweeps(session, sweeps),\n    recreateOnFullyHydratedAfterReset: () =>\n      recreateRestorationSweepCompletion(state, session, sweeps),\n    requestHydration,\n    resetAllLaneWatermarks: true,\n    scheduleSyncAfterHydration: false,\n    scheduleSyncOnHydrationChange: false,\n    state,\n  });\n}\n\nexport function createRestoredAccessReconciler(input: {\n  requestHydration: RemoteHydrationRequester;\n  state: ContainerContentsStoreSyncState;\n}): (isCurrent?: () => boolean) => Promise<void> {\n  const { state } = input;\n  return async (isCurrent = captureRestorationGeneration(state)) => {\n    try {\n      await reconcileRestoredAccess({ ...input, isCurrent });\n    } catch (error) {\n      if (!isCurrent()) {\n        return;\n      }\n      const message = `${getContainerContentsStoreLogLabel(state)}: dormant metadata sweep failed`;\n      if (state.runtime.util.logError) {\n        state.runtime.util.logError(message, error);\n      } else {\n        state.runtime.util.log(message);\n      }\n    }\n  };\n}\n"]}

package/stores/container-contents/containerContentsStore.d.ts

@@ -1,6 +1,6 @@
 import type { DomainScope } from "../../data/shared/domainScope.js";
 import { type ContainerContentsPersistence } from "../../workflows/container-contents/containerPersistence.js";
-import { type ContainerContentsStoreRuntime, createContainerContentsStoreSyncAgent } from "./syncAgent.js";
+import { type ContainerContentsStoreRuntime, createContainerContentsStoreSyncAgent } from "./syncAgent/index.js";
 import type { ContainerContentsStore, ContainerContentsStoreOptions, ContainerContentsStoreState } from "./types.js";
 type ContainerWriteMethods = Pick<ContainerContentsStore, "createChild" | "deleteContainer" | "emptyTrash" | "ensureSystemContainer" | "moveContainer" | "prepareGroupRewrap" | "purgeContainer" | "renameContainer" | "setContainerIcon" | "shareWithGroup" | "shareWithUser">;
 export declare function createContainerWriteMethods(state: ContainerContentsStoreState, syncAgent: ReturnType<typeof createContainerContentsStoreSyncAgent>): ContainerWriteMethods;

package/stores/container-contents/containerContentsStore.js

@@ -1,18 +1,18 @@
 import { getCachedContainerWriterProjection } from "../../workflows/container-contents/container-state/projectionCache.js";
 import { defaultContainerContentsPersistence, } from "../../workflows/container-contents/containerPersistence.js";
-import { persistContainerState } from "./containerStatePersistence.js";
-import { emptyTrash } from "./emptyTrashOperation.js";
-import { prepareContainerGroupRewrap, verifyContainerGroupRewrapCurrent, } from "./groupRewrapOperation.js";
-import { createChildContainer, deleteContainer, ensureSystemContainer, moveContainer, renameContainer, } from "./operations.js";
-import { purgeContainer } from "./purgeContainerOperation.js";
-import { invalidateRemoteContainerWrites } from "./remoteWriteGuards.js";
-import { chainRemoteContainerTask } from "./remoteWriteQueue.js";
-import { setContainerIcon } from "./setContainerIconOperation.js";
-import { shareContainerWithGroup, shareContainerWithUser, } from "./shareOperations.js";
+import { persistContainerState } from "./containerState/containerStatePersistence.js";
+import { createChildContainer, deleteContainer, ensureSystemContainer, moveContainer, renameContainer, } from "./operations/index.js";
+import { emptyTrash } from "./operations/emptyTrashOperation.js";
+import { prepareContainerGroupRewrap, verifyContainerGroupRewrapCurrent, } from "./operations/groupRewrapOperation.js";
+import { purgeContainer } from "./operations/purgeContainerOperation.js";
+import { setContainerIcon } from "./operations/setContainerIconOperation.js";
+import { shareContainerWithGroup, shareContainerWithUser, } from "./operations/shareOperations.js";
+import { invalidateRemoteContainerWrites } from "./remoteWrites/remoteWriteGuards.js";
+import { chainRemoteContainerTask } from "./remoteWrites/remoteWriteQueue.js";
+import { captureContainerWriteGeneration } from "./remoteWrites/writeGeneration.js";
 import { createContainerContentsStoreState, subscribeToContainerContentsStore, updateContainerContentsSnapshot, updateContainerContentsStorePersistence, updateContainerContentsStoreRuntime, } from "./state.js";
-import { createContainerContentsStoreSyncAgent, } from "./syncAgent.js";
-import { findRootContainerState } from "./systemContainerLookup.js";
-import { captureContainerWriteGeneration } from "./writeGeneration.js";
+import { createContainerContentsStoreSyncAgent, } from "./syncAgent/index.js";
+import { findRootContainerState } from "./systemContainers/systemContainerLookup.js";
 const containerContentsStoresByScope = new WeakMap();
 function applyContainerContentsStoreOptions(state, syncAgent, options) {
     if ("logLabel" in options) {

package/stores/container-contents/containerContentsStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"containerContentsStore.js","sourceRoot":"","sources":["containerContentsStore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,MAAM,oEAAoE,CAAC;AACxH,OAAO,EAEL,mCAAmC,GACpC,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EACL,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iCAAiC,EACjC,iCAAiC,EACjC,+BAA+B,EAC/B,uCAAuC,EACvC,mCAAmC,GACpC,MAAM,SAAS,CAAC;AACjB,OAAO,EAGL,qCAAqC,GACtC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAMjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AAEpE,MAAM,8BAA8B,GAAG,IAAI,OAAO,EAG/C,CAAC;AAQJ,SAAS,kCAAkC,CACzC,KAAkC,EAClC,SAA0C,EAC1C,OAAsC;IAEtC,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;QAC1B,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACpC,CAAC;IAED,IAAI,aAAa,IAAI,OAAO,EAAE,CAAC;QAC7B,uCAAuC,CACrC,KAAK,EACL,OAAO,CAAC,WAAW,IAAI,mCAAmC,EAC1D,SAAS,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,0CAA0C,CACjD,KAAkC,EAClC,WAAmB;IAEnB,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC7D,OAAO,cAAc;QACnB,CAAC,CAAC,kCAAkC,CAAC,cAAc,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,oCAAoC,CAC3C,KAAkC;IAElC,OAAO;QACL,qBAAqB,EAAE,CACrB,cAAc,EACd,KAAK,EACL,UAAU,EACV,WAAW,EACX,eAAe,EACf,EAAE,CACF,qBAAqB,CAAC,KAAK,EAAE,cAAc,EAAE;YAC3C,KAAK;YACL,UAAU;YACV,WAAW;YACX,GAAG,eAAe;SACnB,CAAC;QACJ,sBAAsB,EAAE,GAAG,EAAE;YAC3B,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;QACzC,CAAC;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,mBAAmB,CAC1B,KAAkC,EAClC,IAA6E,EAC7E,aAAuC,IAAI,EAC3C,OAAgB;IAEhB,MAAM,SAAS,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACzD,+BAA+B,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC5D,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU;SAChC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;SACjB,IAAI,CAAC,GAAG,EAAE;QACT,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,+BAA+B,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,UAAU,CAAC;AAC1B,CAAC;AAiBD,iFAAiF;AACjF,+EAA+E;AAC/E,4EAA4E;AAC5E,gEAAgE;AAChE,SAAS,8BAA8B,CACrC,KAAkC,EAClC,SAAmE;IAEnE,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE;QAC1D,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAChD,KAAK,EACL,SAAS,EACT,IAAI,EACJ,CAAC,SAAS,EAAE,EAAE,CACZ,2BAA2B,CACzB,KAAK,EACL,WAAW,EACX,OAAO,EACP,WAAW,EACX,OAAO,EACP,SAAS,CACV,EACH,WAAW,CACZ,CAAC;QACF,OAAO,WAAW,EAAE,MAAM,KAAK,UAAU;YACvC,CAAC,CAAC;gBACE,SAAS,EAAE,CACT,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,EAAE,CACF,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,iCAAiC,CAC/B,KAAK,EACL,WAAW,EACX,OAAO,EACP,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,SAAS,CACV,EACH,WAAW,CACZ;gBACH,MAAM,EAAE,GAAG,EAAE,CACX,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,uBAAuB,CACrB,KAAK,EACL,SAAS,EACT,WAAW,EACX,OAAO,EACP,WAAW,EACX;oBACE,GAAG,OAAO;oBACV,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;oBAClD,2DAA2D;oBAC3D,0DAA0D;oBAC1D,oBAAoB,EAAE,IAAI;iBAC3B,EACD,SAAS,CACV,EACH,WAAW,EACX,EAAE,0BAA0B,EAAE,IAAI,EAAE,CACrC;gBACH,MAAM,EAAE,UAAmB;aAC5B;YACH,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CACpC,KAAkC,EAClC,SAA0C;IAE1C,OAAO;QACL,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CACrC,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,sBAAsB,CACpB,KAAK,EACL,SAAS,EACT,WAAW,EACX,MAAM,EACN,SAAS,CACV,EACH,WAAW,EACX,EAAE,0BAA0B,EAAE,IAAI,EAAE,CACrC;QACH,cAAc,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAC7D,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,uBAAuB,CACrB,KAAK,EACL,SAAS,EACT,WAAW,EACX,OAAO,EACP,WAAW,EACX,OAAO,EACP,SAAS,CACV,EACH,WAAW,EACX,EAAE,0BAA0B,EAAE,IAAI,EAAE,CACrC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAkC,EAClC,SAA0C;IAE1C,OAAO,CAAC,WAAW,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,IAAI,EACJ,CAAC,SAAS,EAAE,EAAE,CACZ,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,EAC3D,WAAW,CACZ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU;YAC1D,OAAO,YAAY,EAAE,CAAC;QACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,mBAAmB,CACxB,KAAK,EACL,CAAC,SAAS,EAAE,EAAE;YACZ,sEAAsE;YACtE,yEAAyE;YACzE,QAAQ,GAAG,OAAO,CAChB,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CACzD,CAAC;YACF,OAAO,QAAQ;gBACb,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBACvB,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAChE,CAAC,EACD,CAAC,WAAW,CAAC,CACd,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,iCAAiC,CACxC,KAAkC,EAClC,SAA0C;IAE1C,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,CAAC,SAAwB,EAAE,EAAE,CACxC,qBAAqB,CACnB,KAAK,EACL,SAAS,EACT,UAAU,EACV,IAAI,EACJ,OAAO,EACP,SAAS,CACV,CAAC;QACJ,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3D,OAAO,OAAO,EAAE,oBAAoB;YAClC,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YACtC,CAAC,CAAC,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAC5C,CAAC;IACR,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAkC,EAClC,SAAmE;IAEnE,OAAO;QACL,GAAG,6BAA6B,CAAC,KAAK,EAAE,SAAS,CAAC;QAClD,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAC9B,mBAAmB,CACjB,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,oBAAoB,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,EACnE,CAAC,QAAQ,CAAC,CACX;QACH,eAAe,EAAE,2BAA2B,CAAC,KAAK,EAAE,SAAS,CAAC;QAC9D,cAAc,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,CACvC,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,EACnE,WAAW,CACZ;QACH,UAAU,EAAE,CAAC,gBAAgB,EAAE,OAAO,EAAE,EAAE,CACxC,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,CAAC,EACpE,gBAAgB,CACjB;QACH,qBAAqB,EAAE,iCAAiC,CAAC,KAAK,EAAE,SAAS,CAAC;QAC1E,aAAa,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,CACvC,mBAAmB,CACjB,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,EACnE,CAAC,WAAW,EAAE,QAAQ,CAAC,EACvB,WAAW,CACZ;QACH,kBAAkB,EAAE,8BAA8B,CAAC,KAAK,EAAE,SAAS,CAAC;QACpE,eAAe,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CACrC,mBAAmB,CACjB,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,EACjE,CAAC,WAAW,CAAC,CACd;QACH,gBAAgB,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CACtC,mBAAmB,CACjB,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,EAClE,CAAC,WAAW,CAAC,CACd;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,iCAAiC,CACxC,cAA6C,EAC7C,cAA4C,mCAAmC,EAC/E,UAAyC,EAAE;IAE3C,MAAM,KAAK,GAAG,iCAAiC,CAC7C,cAAc,EACd,OAAO,CAAC,WAAW,IAAI,WAAW,EAClC,OAAO,CAAC,QAAQ,CACjB,CAAC;IACF,MAAM,SAAS,GAAG,qCAAqC,CAAC;QACtD,IAAI,EAAE,oCAAoC,CAAC,KAAK,CAAC;QACjD,KAAK;KACN,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,2BAA2B,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAEnE,OAAO;QACL,sBAAsB,EAAE,GAAG,EAAE;YAC3B,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACvC,SAAS,CAAC,YAAY,EAAE,CAAC;QAC3B,CAAC;QACD,KAAK,EAAE;YACL,GAAG,YAAY;YACf,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC;YAClE,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC;YAChE,2EAA2E;YAC3E,yEAAyE;YACzE,6EAA6E;YAC7E,sBAAsB,EAAE,GAAG,EAAE;gBAC3B,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;gBACxC,OAAO,SAAS,CAAC,sBAAsB,EAAE,CAAC;YAC5C,CAAC;YACD,WAAW,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE;YAC3C,kCAAkC,EAAE,CAAC,WAAW,EAAE,EAAE,CAClD,0CAA0C,CAAC,KAAK,EAAE,WAAW,CAAC;YAChE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ;YACjC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE,CACtB,iCAAiC,CAAC,KAAK,EAAE,QAAQ,CAAC;YACpD,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CACzB,mCAAmC,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC;SACjE;QACD,aAAa,EAAE,CAAC,WAAW,EAAE,EAAE,CAC7B,kCAAkC,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,cAA6C,EAC7C,cAA4C,mCAAmC,EAC/E,UAAyC,EAAE;IAE3C,OAAO,iCAAiC,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC;SAC3E,KAAK,CAAC;AACX,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,WAAwB,EACxB,OAAsC,EACtC,UAAyC,EAAE;IAE3C,MAAM,aAAa,GAAG,8BAA8B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtE,IAAI,aAAa,EAAE,CAAC;QAClB,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,aAAa,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED,MAAM,SAAS,GAAG,iCAAiC,CACjD,OAAO,EACP,mCAAmC,EACnC,OAAO,CACR,CAAC;IACF,8BAA8B,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC3D,OAAO,SAAS,CAAC,KAAK,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uCAAuC,CACrD,WAAwB;IAExB,MAAM,KAAK,GAAG,8BAA8B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,sBAAsB,EAAE,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { DomainScope } from \"../../data/shared/domainScope\";\nimport { getCachedContainerWriterProjection } from \"../../workflows/container-contents/container-state/projectionCache\";\nimport {\n  type ContainerContentsPersistence,\n  defaultContainerContentsPersistence,\n} from \"../../workflows/container-contents/containerPersistence\";\nimport { persistContainerState } from \"./containerStatePersistence\";\nimport { emptyTrash } from \"./emptyTrashOperation\";\nimport {\n  prepareContainerGroupRewrap,\n  verifyContainerGroupRewrapCurrent,\n} from \"./groupRewrapOperation\";\nimport {\n  createChildContainer,\n  deleteContainer,\n  ensureSystemContainer,\n  moveContainer,\n  renameContainer,\n} from \"./operations\";\nimport { purgeContainer } from \"./purgeContainerOperation\";\nimport { invalidateRemoteContainerWrites } from \"./remoteWriteGuards\";\nimport { chainRemoteContainerTask } from \"./remoteWriteQueue\";\nimport { setContainerIcon } from \"./setContainerIconOperation\";\nimport {\n  shareContainerWithGroup,\n  shareContainerWithUser,\n} from \"./shareOperations\";\nimport {\n  createContainerContentsStoreState,\n  subscribeToContainerContentsStore,\n  updateContainerContentsSnapshot,\n  updateContainerContentsStorePersistence,\n  updateContainerContentsStoreRuntime,\n} from \"./state\";\nimport {\n  type ContainerContentsStoreRuntime,\n  type ContainerContentsStoreSyncAgent,\n  createContainerContentsStoreSyncAgent,\n} from \"./syncAgent\";\nimport { findRootContainerState } from \"./systemContainerLookup\";\nimport type {\n  ContainerContentsStore,\n  ContainerContentsStoreOptions,\n  ContainerContentsStoreState,\n} from \"./types\";\nimport { captureContainerWriteGeneration } from \"./writeGeneration\";\n\nconst containerContentsStoresByScope = new WeakMap<\n  DomainScope,\n  ContainerContentsStoreEntry\n>();\n\ninterface ContainerContentsStoreEntry {\n  requestDocumentPriming: () => void;\n  store: ContainerContentsStore;\n  updateOptions: (options: ContainerContentsStoreOptions) => void;\n}\n\nfunction applyContainerContentsStoreOptions(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  options: ContainerContentsStoreOptions,\n): void {\n  if (\"logLabel\" in options) {\n    state.logLabel = options.logLabel;\n  }\n\n  if (\"persistence\" in options) {\n    updateContainerContentsStorePersistence(\n      state,\n      options.persistence ?? defaultContainerContentsPersistence,\n      syncAgent,\n    );\n  }\n}\n\nfunction getCachedContainerWriterProjectionForStore(\n  state: ContainerContentsStoreState,\n  containerId: string,\n) {\n  const containerState = state.containersById.get(containerId);\n  return containerState\n    ? getCachedContainerWriterProjection(containerState)\n    : null;\n}\n\nfunction createContainerContentsStoreSyncHost(\n  state: ContainerContentsStoreState,\n): Parameters<typeof createContainerContentsStoreSyncAgent>[0][\"host\"] {\n  return {\n    persistContainerState: (\n      containerState,\n      patch,\n      updateView,\n      saveOptions,\n      mutationOptions,\n    ) =>\n      persistContainerState(state, containerState, {\n        patch,\n        updateView,\n        saveOptions,\n        ...mutationOptions,\n      }),\n    requestDocumentPriming: () => {\n      state.documentStoresNeedPriming = true;\n    },\n    updateSnapshot: () => updateContainerContentsSnapshot(state),\n  };\n}\n\n// null marks an unknown mutation scope; [] delegates invalidation to actual writes.\nfunction chainContainerWrite(\n  state: ContainerContentsStoreState,\n  work: (isCurrent: () => boolean) => ContainerContentsStoreState[\"writeChain\"],\n  changedIds: readonly string[] | null = null,\n  movedId?: string,\n): ContainerContentsStoreState[\"writeChain\"] {\n  const isCurrent = captureContainerWriteGeneration(state);\n  invalidateRemoteContainerWrites(state, changedIds, movedId);\n  state.writeChain = state.writeChain\n    .catch(() => null)\n    .then(() => {\n      if (!isCurrent()) return null;\n      invalidateRemoteContainerWrites(state, changedIds, movedId);\n      return work(isCurrent);\n    })\n    .then((node) => (isCurrent() ? node : null));\n  return state.writeChain;\n}\n\ntype ContainerWriteMethods = Pick<\n  ContainerContentsStore,\n  | \"createChild\"\n  | \"deleteContainer\"\n  | \"emptyTrash\"\n  | \"ensureSystemContainer\"\n  | \"moveContainer\"\n  | \"prepareGroupRewrap\"\n  | \"purgeContainer\"\n  | \"renameContainer\"\n  | \"setContainerIcon\"\n  | \"shareWithGroup\"\n  | \"shareWithUser\"\n>;\n\n// The group-rewrap builder verifies any required existing grant before capturing\n// the container KEK, then returns a check/rewrap pair. A verified non-match is\n// distinct from an unavailable preparation so security-critical callers can\n// no-op unrelated groups without failing open for a real grant.\nfunction createPrepareGroupRewrapMethod(\n  state: ContainerContentsStoreState,\n  syncAgent: ReturnType<typeof createContainerContentsStoreSyncAgent>,\n): ContainerContentsStore[\"prepareGroupRewrap\"] {\n  return async (containerId, groupId, accessLevel, options) => {\n    const preparation = await chainRemoteContainerTask(\n      state,\n      syncAgent,\n      null,\n      (isCurrent) =>\n        prepareContainerGroupRewrap(\n          state,\n          containerId,\n          groupId,\n          accessLevel,\n          options,\n          isCurrent,\n        ),\n      containerId,\n    );\n    return preparation?.status === \"prepared\"\n      ? {\n          isCurrent: (\n            expectedGroupHead,\n            expectedContainerId,\n            expectedOrganizationId,\n          ) =>\n            chainRemoteContainerTask(\n              state,\n              syncAgent,\n              false,\n              (isCurrent) =>\n                verifyContainerGroupRewrapCurrent(\n                  state,\n                  containerId,\n                  groupId,\n                  accessLevel,\n                  expectedGroupHead,\n                  expectedContainerId,\n                  expectedOrganizationId,\n                  isCurrent,\n                ),\n              containerId,\n            ),\n          rewrap: () =>\n            chainRemoteContainerTask(\n              state,\n              syncAgent,\n              false,\n              (isCurrent) =>\n                shareContainerWithGroup(\n                  state,\n                  syncAgent,\n                  containerId,\n                  groupId,\n                  accessLevel,\n                  {\n                    ...options,\n                    knownContainerKeks: preparation.knownContainerKeks,\n                    // A prepared re-wrap is grant-preserving by definition, so\n                    // it never mints a grant and never needs the chosen name.\n                    requireExistingGrant: true,\n                  },\n                  isCurrent,\n                ),\n              containerId,\n              { preserveResultOnLocalWrite: true },\n            ),\n          status: \"prepared\" as const,\n        }\n      : (preparation ?? null);\n  };\n}\n\nfunction createContainerSharingMethods(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n): Pick<ContainerWriteMethods, \"shareWithUser\" | \"shareWithGroup\"> {\n  return {\n    shareWithUser: (containerId, userId) =>\n      chainRemoteContainerTask(\n        state,\n        syncAgent,\n        false,\n        (isCurrent) =>\n          shareContainerWithUser(\n            state,\n            syncAgent,\n            containerId,\n            userId,\n            isCurrent,\n          ),\n        containerId,\n        { preserveResultOnLocalWrite: true },\n      ),\n    shareWithGroup: (containerId, groupId, accessLevel, options) =>\n      chainRemoteContainerTask(\n        state,\n        syncAgent,\n        false,\n        (isCurrent) =>\n          shareContainerWithGroup(\n            state,\n            syncAgent,\n            containerId,\n            groupId,\n            accessLevel,\n            options,\n            isCurrent,\n          ),\n        containerId,\n        { preserveResultOnLocalWrite: true },\n      ),\n  };\n}\n\nfunction createDeleteContainerMethod(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n): ContainerContentsStore[\"deleteContainer\"] {\n  return (containerId) => {\n    const current = captureContainerWriteGeneration(state);\n    const remoteDelete = () =>\n      chainRemoteContainerTask(\n        state,\n        syncAgent,\n        null,\n        (isCurrent) =>\n          deleteContainer(state, syncAgent, containerId, isCurrent),\n        containerId,\n      ).then((node) => node !== null);\n    if (state.containersById.get(containerId)?.record.documentId)\n      return remoteDelete();\n    let promoted = false;\n    return chainContainerWrite(\n      state,\n      (isCurrent) => {\n        // Promotion can win while this local operation was queued. Hand it to\n        // the remote queue after releasing the local chain, before any HTTP I/O.\n        promoted = Boolean(\n          state.containersById.get(containerId)?.record.documentId,\n        );\n        return promoted\n          ? Promise.resolve(null)\n          : deleteContainer(state, syncAgent, containerId, isCurrent);\n      },\n      [containerId],\n    ).then((node) => (promoted && current() ? remoteDelete() : node !== null));\n  };\n}\n\nfunction createEnsureSystemContainerMethod(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n): ContainerContentsStore[\"ensureSystemContainer\"] {\n  return (systemSlot, name, options) => {\n    const work = (isCurrent: () => boolean) =>\n      ensureSystemContainer(\n        state,\n        syncAgent,\n        systemSlot,\n        name,\n        options,\n        isCurrent,\n      );\n    const rootId = findRootContainerState(state)?.container.id;\n    return options?.deferRemoteBootstrap\n      ? chainContainerWrite(state, work, [])\n      : chainRemoteContainerTask(\n          state,\n          syncAgent,\n          null,\n          work,\n          rootId ? { rootId, systemSlot } : undefined,\n        );\n  };\n}\n\nexport function createContainerWriteMethods(\n  state: ContainerContentsStoreState,\n  syncAgent: ReturnType<typeof createContainerContentsStoreSyncAgent>,\n): ContainerWriteMethods {\n  return {\n    ...createContainerSharingMethods(state, syncAgent),\n    createChild: (parentId, name) =>\n      chainContainerWrite(\n        state,\n        (isCurrent) =>\n          createChildContainer(state, syncAgent, parentId, name, isCurrent),\n        [parentId],\n      ),\n    deleteContainer: createDeleteContainerMethod(state, syncAgent),\n    purgeContainer: (containerId, options) =>\n      chainRemoteContainerTask(\n        state,\n        syncAgent,\n        false,\n        (isCurrent) =>\n          purgeContainer(state, syncAgent, containerId, options, isCurrent),\n        containerId,\n      ),\n    emptyTrash: (trashContainerId, options) =>\n      chainRemoteContainerTask(\n        state,\n        syncAgent,\n        false,\n        (isCurrent) =>\n          emptyTrash(state, syncAgent, trashContainerId, options, isCurrent),\n        trashContainerId,\n      ),\n    ensureSystemContainer: createEnsureSystemContainerMethod(state, syncAgent),\n    moveContainer: (containerId, parentId) =>\n      chainContainerWrite(\n        state,\n        (isCurrent) =>\n          moveContainer(state, syncAgent, containerId, parentId, isCurrent),\n        [containerId, parentId],\n        containerId,\n      ),\n    prepareGroupRewrap: createPrepareGroupRewrapMethod(state, syncAgent),\n    renameContainer: (containerId, name) =>\n      chainContainerWrite(\n        state,\n        (isCurrent) =>\n          renameContainer(state, syncAgent, containerId, name, isCurrent),\n        [containerId],\n      ),\n    setContainerIcon: (containerId, icon) =>\n      chainContainerWrite(\n        state,\n        (isCurrent) =>\n          setContainerIcon(state, syncAgent, containerId, icon, isCurrent),\n        [containerId],\n      ),\n  };\n}\n\nfunction createContainerContentsStoreEntry(\n  initialRuntime: ContainerContentsStoreRuntime,\n  persistence: ContainerContentsPersistence = defaultContainerContentsPersistence,\n  options: ContainerContentsStoreOptions = {},\n): ContainerContentsStoreEntry {\n  const state = createContainerContentsStoreState(\n    initialRuntime,\n    options.persistence ?? persistence,\n    options.logLabel,\n  );\n  const syncAgent = createContainerContentsStoreSyncAgent({\n    host: createContainerContentsStoreSyncHost(state),\n    state,\n  });\n  const writeMethods = createContainerWriteMethods(state, syncAgent);\n\n  return {\n    requestDocumentPriming: () => {\n      state.documentStoresNeedPriming = true;\n      syncAgent.scheduleSync();\n    },\n    store: {\n      ...writeMethods,\n      refresh: () => syncAgent.refresh({ resetAllLaneWatermarks: true }),\n      refreshRootLane: (options) => syncAgent.refreshRootLane(options),\n      // Force an on-demand local SQLite re-read (see the interface doc): arm the\n      // gate refreshLocalContainerStates otherwise requires, which the runtime\n      // auto-arms only on a context transition an on-demand caller cannot rely on.\n      refreshLocalContainers: () => {\n        state.localContainersNeedRefresh = true;\n        return syncAgent.refreshLocalContainers();\n      },\n      requestSync: () => syncAgent.scheduleSync(),\n      getCachedContainerWriterProjection: (containerId) =>\n        getCachedContainerWriterProjectionForStore(state, containerId),\n      getSnapshot: () => state.snapshot,\n      subscribe: (listener) =>\n        subscribeToContainerContentsStore(state, listener),\n      updateRuntime: (runtime) =>\n        updateContainerContentsStoreRuntime(state, runtime, syncAgent),\n    },\n    updateOptions: (nextOptions) =>\n      applyContainerContentsStoreOptions(state, syncAgent, nextOptions),\n  };\n}\n\nexport function createContainerContentsStore(\n  initialRuntime: ContainerContentsStoreRuntime,\n  persistence: ContainerContentsPersistence = defaultContainerContentsPersistence,\n  options: ContainerContentsStoreOptions = {},\n): ContainerContentsStore {\n  return createContainerContentsStoreEntry(initialRuntime, persistence, options)\n    .store;\n}\n\nexport function getOrCreateContainerContentsStore(\n  domainScope: DomainScope,\n  runtime: ContainerContentsStoreRuntime,\n  options: ContainerContentsStoreOptions = {},\n): ContainerContentsStore {\n  const existingEntry = containerContentsStoresByScope.get(domainScope);\n  if (existingEntry) {\n    existingEntry.updateOptions(options);\n    return existingEntry.store;\n  }\n\n  const nextEntry = createContainerContentsStoreEntry(\n    runtime,\n    defaultContainerContentsPersistence,\n    options,\n  );\n  containerContentsStoresByScope.set(domainScope, nextEntry);\n  return nextEntry.store;\n}\n\n/**\n * Arm the next structural pass's document-priming scan for a domain scope.\n * Priming normally re-arms only on store creation and topology changes, so a\n * caller that just tore down a document's local state uses this to have the\n * still-listed server document re-created without waiting for an app\n * restart. Returns false when the scope has no container-contents store yet;\n * the startup priming pass covers that case.\n */\nexport function requestContainerContentsDocumentPriming(\n  domainScope: DomainScope,\n): boolean {\n  const entry = containerContentsStoresByScope.get(domainScope);\n  if (!entry) {\n    return false;\n  }\n\n  entry.requestDocumentPriming();\n  return true;\n}\n"]}
+{"version":3,"file":"containerContentsStore.js","sourceRoot":"","sources":["containerContentsStore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,MAAM,oEAAoE,CAAC;AACxH,OAAO,EAEL,mCAAmC,GACpC,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC9D,OAAO,EACL,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,iCAAiC,EACjC,+BAA+B,EAC/B,uCAAuC,EACvC,mCAAmC,GACpC,MAAM,SAAS,CAAC;AACjB,OAAO,EAGL,qCAAqC,GACtC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAOlF,MAAM,8BAA8B,GAAG,IAAI,OAAO,EAG/C,CAAC;AAQJ,SAAS,kCAAkC,CACzC,KAAkC,EAClC,SAA0C,EAC1C,OAAsC;IAEtC,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;QAC1B,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACpC,CAAC;IAED,IAAI,aAAa,IAAI,OAAO,EAAE,CAAC;QAC7B,uCAAuC,CACrC,KAAK,EACL,OAAO,CAAC,WAAW,IAAI,mCAAmC,EAC1D,SAAS,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,0CAA0C,CACjD,KAAkC,EAClC,WAAmB;IAEnB,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC7D,OAAO,cAAc;QACnB,CAAC,CAAC,kCAAkC,CAAC,cAAc,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,oCAAoC,CAC3C,KAAkC;IAElC,OAAO;QACL,qBAAqB,EAAE,CACrB,cAAc,EACd,KAAK,EACL,UAAU,EACV,WAAW,EACX,eAAe,EACf,EAAE,CACF,qBAAqB,CAAC,KAAK,EAAE,cAAc,EAAE;YAC3C,KAAK;YACL,UAAU;YACV,WAAW;YACX,GAAG,eAAe;SACnB,CAAC;QACJ,sBAAsB,EAAE,GAAG,EAAE;YAC3B,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;QACzC,CAAC;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,mBAAmB,CAC1B,KAAkC,EAClC,IAA6E,EAC7E,aAAuC,IAAI,EAC3C,OAAgB;IAEhB,MAAM,SAAS,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACzD,+BAA+B,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC5D,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU;SAChC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;SACjB,IAAI,CAAC,GAAG,EAAE;QACT,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,+BAA+B,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,UAAU,CAAC;AAC1B,CAAC;AAiBD,iFAAiF;AACjF,+EAA+E;AAC/E,4EAA4E;AAC5E,gEAAgE;AAChE,SAAS,8BAA8B,CACrC,KAAkC,EAClC,SAAmE;IAEnE,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE;QAC1D,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAChD,KAAK,EACL,SAAS,EACT,IAAI,EACJ,CAAC,SAAS,EAAE,EAAE,CACZ,2BAA2B,CACzB,KAAK,EACL,WAAW,EACX,OAAO,EACP,WAAW,EACX,OAAO,EACP,SAAS,CACV,EACH,WAAW,CACZ,CAAC;QACF,OAAO,WAAW,EAAE,MAAM,KAAK,UAAU;YACvC,CAAC,CAAC;gBACE,SAAS,EAAE,CACT,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,EAAE,CACF,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,iCAAiC,CAC/B,KAAK,EACL,WAAW,EACX,OAAO,EACP,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,SAAS,CACV,EACH,WAAW,CACZ;gBACH,MAAM,EAAE,GAAG,EAAE,CACX,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,uBAAuB,CACrB,KAAK,EACL,SAAS,EACT,WAAW,EACX,OAAO,EACP,WAAW,EACX;oBACE,GAAG,OAAO;oBACV,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;oBAClD,2DAA2D;oBAC3D,0DAA0D;oBAC1D,oBAAoB,EAAE,IAAI;iBAC3B,EACD,SAAS,CACV,EACH,WAAW,EACX,EAAE,0BAA0B,EAAE,IAAI,EAAE,CACrC;gBACH,MAAM,EAAE,UAAmB;aAC5B;YACH,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CACpC,KAAkC,EAClC,SAA0C;IAE1C,OAAO;QACL,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CACrC,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,sBAAsB,CACpB,KAAK,EACL,SAAS,EACT,WAAW,EACX,MAAM,EACN,SAAS,CACV,EACH,WAAW,EACX,EAAE,0BAA0B,EAAE,IAAI,EAAE,CACrC;QACH,cAAc,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAC7D,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,uBAAuB,CACrB,KAAK,EACL,SAAS,EACT,WAAW,EACX,OAAO,EACP,WAAW,EACX,OAAO,EACP,SAAS,CACV,EACH,WAAW,EACX,EAAE,0BAA0B,EAAE,IAAI,EAAE,CACrC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAkC,EAClC,SAA0C;IAE1C,OAAO,CAAC,WAAW,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,IAAI,EACJ,CAAC,SAAS,EAAE,EAAE,CACZ,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,EAC3D,WAAW,CACZ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU;YAC1D,OAAO,YAAY,EAAE,CAAC;QACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,mBAAmB,CACxB,KAAK,EACL,CAAC,SAAS,EAAE,EAAE;YACZ,sEAAsE;YACtE,yEAAyE;YACzE,QAAQ,GAAG,OAAO,CAChB,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CACzD,CAAC;YACF,OAAO,QAAQ;gBACb,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBACvB,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAChE,CAAC,EACD,CAAC,WAAW,CAAC,CACd,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,iCAAiC,CACxC,KAAkC,EAClC,SAA0C;IAE1C,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,CAAC,SAAwB,EAAE,EAAE,CACxC,qBAAqB,CACnB,KAAK,EACL,SAAS,EACT,UAAU,EACV,IAAI,EACJ,OAAO,EACP,SAAS,CACV,CAAC;QACJ,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3D,OAAO,OAAO,EAAE,oBAAoB;YAClC,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YACtC,CAAC,CAAC,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAC5C,CAAC;IACR,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAkC,EAClC,SAAmE;IAEnE,OAAO;QACL,GAAG,6BAA6B,CAAC,KAAK,EAAE,SAAS,CAAC;QAClD,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAC9B,mBAAmB,CACjB,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,oBAAoB,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,EACnE,CAAC,QAAQ,CAAC,CACX;QACH,eAAe,EAAE,2BAA2B,CAAC,KAAK,EAAE,SAAS,CAAC;QAC9D,cAAc,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,CACvC,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,EACnE,WAAW,CACZ;QACH,UAAU,EAAE,CAAC,gBAAgB,EAAE,OAAO,EAAE,EAAE,CACxC,wBAAwB,CACtB,KAAK,EACL,SAAS,EACT,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,CAAC,EACpE,gBAAgB,CACjB;QACH,qBAAqB,EAAE,iCAAiC,CAAC,KAAK,EAAE,SAAS,CAAC;QAC1E,aAAa,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,CACvC,mBAAmB,CACjB,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,EACnE,CAAC,WAAW,EAAE,QAAQ,CAAC,EACvB,WAAW,CACZ;QACH,kBAAkB,EAAE,8BAA8B,CAAC,KAAK,EAAE,SAAS,CAAC;QACpE,eAAe,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CACrC,mBAAmB,CACjB,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,EACjE,CAAC,WAAW,CAAC,CACd;QACH,gBAAgB,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CACtC,mBAAmB,CACjB,KAAK,EACL,CAAC,SAAS,EAAE,EAAE,CACZ,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,EAClE,CAAC,WAAW,CAAC,CACd;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,iCAAiC,CACxC,cAA6C,EAC7C,cAA4C,mCAAmC,EAC/E,UAAyC,EAAE;IAE3C,MAAM,KAAK,GAAG,iCAAiC,CAC7C,cAAc,EACd,OAAO,CAAC,WAAW,IAAI,WAAW,EAClC,OAAO,CAAC,QAAQ,CACjB,CAAC;IACF,MAAM,SAAS,GAAG,qCAAqC,CAAC;QACtD,IAAI,EAAE,oCAAoC,CAAC,KAAK,CAAC;QACjD,KAAK;KACN,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,2BAA2B,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAEnE,OAAO;QACL,sBAAsB,EAAE,GAAG,EAAE;YAC3B,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACvC,SAAS,CAAC,YAAY,EAAE,CAAC;QAC3B,CAAC;QACD,KAAK,EAAE;YACL,GAAG,YAAY;YACf,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC;YAClE,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC;YAChE,2EAA2E;YAC3E,yEAAyE;YACzE,6EAA6E;YAC7E,sBAAsB,EAAE,GAAG,EAAE;gBAC3B,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;gBACxC,OAAO,SAAS,CAAC,sBAAsB,EAAE,CAAC;YAC5C,CAAC;YACD,WAAW,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE;YAC3C,kCAAkC,EAAE,CAAC,WAAW,EAAE,EAAE,CAClD,0CAA0C,CAAC,KAAK,EAAE,WAAW,CAAC;YAChE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ;YACjC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE,CACtB,iCAAiC,CAAC,KAAK,EAAE,QAAQ,CAAC;YACpD,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CACzB,mCAAmC,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC;SACjE;QACD,aAAa,EAAE,CAAC,WAAW,EAAE,EAAE,CAC7B,kCAAkC,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,cAA6C,EAC7C,cAA4C,mCAAmC,EAC/E,UAAyC,EAAE;IAE3C,OAAO,iCAAiC,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC;SAC3E,KAAK,CAAC;AACX,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,WAAwB,EACxB,OAAsC,EACtC,UAAyC,EAAE;IAE3C,MAAM,aAAa,GAAG,8BAA8B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtE,IAAI,aAAa,EAAE,CAAC;QAClB,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,aAAa,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED,MAAM,SAAS,GAAG,iCAAiC,CACjD,OAAO,EACP,mCAAmC,EACnC,OAAO,CACR,CAAC;IACF,8BAA8B,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC3D,OAAO,SAAS,CAAC,KAAK,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uCAAuC,CACrD,WAAwB;IAExB,MAAM,KAAK,GAAG,8BAA8B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,sBAAsB,EAAE,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { DomainScope } from \"../../data/shared/domainScope\";\nimport { getCachedContainerWriterProjection } from \"../../workflows/container-contents/container-state/projectionCache\";\nimport {\n  type ContainerContentsPersistence,\n  defaultContainerContentsPersistence,\n} from \"../../workflows/container-contents/containerPersistence\";\nimport { persistContainerState } from \"./containerState/containerStatePersistence\";\nimport {\n  createChildContainer,\n  deleteContainer,\n  ensureSystemContainer,\n  moveContainer,\n  renameContainer,\n} from \"./operations\";\nimport { emptyTrash } from \"./operations/emptyTrashOperation\";\nimport {\n  prepareContainerGroupRewrap,\n  verifyContainerGroupRewrapCurrent,\n} from \"./operations/groupRewrapOperation\";\nimport { purgeContainer } from \"./operations/purgeContainerOperation\";\nimport { setContainerIcon } from \"./operations/setContainerIconOperation\";\nimport {\n  shareContainerWithGroup,\n  shareContainerWithUser,\n} from \"./operations/shareOperations\";\nimport { invalidateRemoteContainerWrites } from \"./remoteWrites/remoteWriteGuards\";\nimport { chainRemoteContainerTask } from \"./remoteWrites/remoteWriteQueue\";\nimport { captureContainerWriteGeneration } from \"./remoteWrites/writeGeneration\";\nimport {\n  createContainerContentsStoreState,\n  subscribeToContainerContentsStore,\n  updateContainerContentsSnapshot,\n  updateContainerContentsStorePersistence,\n  updateContainerContentsStoreRuntime,\n} from \"./state\";\nimport {\n  type ContainerContentsStoreRuntime,\n  type ContainerContentsStoreSyncAgent,\n  createContainerContentsStoreSyncAgent,\n} from \"./syncAgent\";\nimport { findRootContainerState } from \"./systemContainers/systemContainerLookup\";\nimport type {\n  ContainerContentsStore,\n  ContainerContentsStoreOptions,\n  ContainerContentsStoreState,\n} from \"./types\";\n\nconst containerContentsStoresByScope = new WeakMap<\n  DomainScope,\n  ContainerContentsStoreEntry\n>();\n\ninterface ContainerContentsStoreEntry {\n  requestDocumentPriming: () => void;\n  store: ContainerContentsStore;\n  updateOptions: (options: ContainerContentsStoreOptions) => void;\n}\n\nfunction applyContainerContentsStoreOptions(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  options: ContainerContentsStoreOptions,\n): void {\n  if (\"logLabel\" in options) {\n    state.logLabel = options.logLabel;\n  }\n\n  if (\"persistence\" in options) {\n    updateContainerContentsStorePersistence(\n      state,\n      options.persistence ?? defaultContainerContentsPersistence,\n      syncAgent,\n    );\n  }\n}\n\nfunction getCachedContainerWriterProjectionForStore(\n  state: ContainerContentsStoreState,\n  containerId: string,\n) {\n  const containerState = state.containersById.get(containerId);\n  return containerState\n    ? getCachedContainerWriterProjection(containerState)\n    : null;\n}\n\nfunction createContainerContentsStoreSyncHost(\n  state: ContainerContentsStoreState,\n): Parameters<typeof createContainerContentsStoreSyncAgent>[0][\"host\"] {\n  return {\n    persistContainerState: (\n      containerState,\n      patch,\n      updateView,\n      saveOptions,\n      mutationOptions,\n    ) =>\n      persistContainerState(state, containerState, {\n        patch,\n        updateView,\n        saveOptions,\n        ...mutationOptions,\n      }),\n    requestDocumentPriming: () => {\n      state.documentStoresNeedPriming = true;\n    },\n    updateSnapshot: () => updateContainerContentsSnapshot(state),\n  };\n}\n\n// null marks an unknown mutation scope; [] delegates invalidation to actual writes.\nfunction chainContainerWrite(\n  state: ContainerContentsStoreState,\n  work: (isCurrent: () => boolean) => ContainerContentsStoreState[\"writeChain\"],\n  changedIds: readonly string[] | null = null,\n  movedId?: string,\n): ContainerContentsStoreState[\"writeChain\"] {\n  const isCurrent = captureContainerWriteGeneration(state);\n  invalidateRemoteContainerWrites(state, changedIds, movedId);\n  state.writeChain = state.writeChain\n    .catch(() => null)\n    .then(() => {\n      if (!isCurrent()) return null;\n      invalidateRemoteContainerWrites(state, changedIds, movedId);\n      return work(isCurrent);\n    })\n    .then((node) => (isCurrent() ? node : null));\n  return state.writeChain;\n}\n\ntype ContainerWriteMethods = Pick<\n  ContainerContentsStore,\n  | \"createChild\"\n  | \"deleteContainer\"\n  | \"emptyTrash\"\n  | \"ensureSystemContainer\"\n  | \"moveContainer\"\n  | \"prepareGroupRewrap\"\n  | \"purgeContainer\"\n  | \"renameContainer\"\n  | \"setContainerIcon\"\n  | \"shareWithGroup\"\n  | \"shareWithUser\"\n>;\n\n// The group-rewrap builder verifies any required existing grant before capturing\n// the container KEK, then returns a check/rewrap pair. A verified non-match is\n// distinct from an unavailable preparation so security-critical callers can\n// no-op unrelated groups without failing open for a real grant.\nfunction createPrepareGroupRewrapMethod(\n  state: ContainerContentsStoreState,\n  syncAgent: ReturnType<typeof createContainerContentsStoreSyncAgent>,\n): ContainerContentsStore[\"prepareGroupRewrap\"] {\n  return async (containerId, groupId, accessLevel, options) => {\n    const preparation = await chainRemoteContainerTask(\n      state,\n      syncAgent,\n      null,\n      (isCurrent) =>\n        prepareContainerGroupRewrap(\n          state,\n          containerId,\n          groupId,\n          accessLevel,\n          options,\n          isCurrent,\n        ),\n      containerId,\n    );\n    return preparation?.status === \"prepared\"\n      ? {\n          isCurrent: (\n            expectedGroupHead,\n            expectedContainerId,\n            expectedOrganizationId,\n          ) =>\n            chainRemoteContainerTask(\n              state,\n              syncAgent,\n              false,\n              (isCurrent) =>\n                verifyContainerGroupRewrapCurrent(\n                  state,\n                  containerId,\n                  groupId,\n                  accessLevel,\n                  expectedGroupHead,\n                  expectedContainerId,\n                  expectedOrganizationId,\n                  isCurrent,\n                ),\n              containerId,\n            ),\n          rewrap: () =>\n            chainRemoteContainerTask(\n              state,\n              syncAgent,\n              false,\n              (isCurrent) =>\n                shareContainerWithGroup(\n                  state,\n                  syncAgent,\n                  containerId,\n                  groupId,\n                  accessLevel,\n                  {\n                    ...options,\n                    knownContainerKeks: preparation.knownContainerKeks,\n                    // A prepared re-wrap is grant-preserving by definition, so\n                    // it never mints a grant and never needs the chosen name.\n                    requireExistingGrant: true,\n                  },\n                  isCurrent,\n                ),\n              containerId,\n              { preserveResultOnLocalWrite: true },\n            ),\n          status: \"prepared\" as const,\n        }\n      : (preparation ?? null);\n  };\n}\n\nfunction createContainerSharingMethods(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n): Pick<ContainerWriteMethods, \"shareWithUser\" | \"shareWithGroup\"> {\n  return {\n    shareWithUser: (containerId, userId) =>\n      chainRemoteContainerTask(\n        state,\n        syncAgent,\n        false,\n        (isCurrent) =>\n          shareContainerWithUser(\n            state,\n            syncAgent,\n            containerId,\n            userId,\n            isCurrent,\n          ),\n        containerId,\n        { preserveResultOnLocalWrite: true },\n      ),\n    shareWithGroup: (containerId, groupId, accessLevel, options) =>\n      chainRemoteContainerTask(\n        state,\n        syncAgent,\n        false,\n        (isCurrent) =>\n          shareContainerWithGroup(\n            state,\n            syncAgent,\n            containerId,\n            groupId,\n            accessLevel,\n            options,\n            isCurrent,\n          ),\n        containerId,\n        { preserveResultOnLocalWrite: true },\n      ),\n  };\n}\n\nfunction createDeleteContainerMethod(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n): ContainerContentsStore[\"deleteContainer\"] {\n  return (containerId) => {\n    const current = captureContainerWriteGeneration(state);\n    const remoteDelete = () =>\n      chainRemoteContainerTask(\n        state,\n        syncAgent,\n        null,\n        (isCurrent) =>\n          deleteContainer(state, syncAgent, containerId, isCurrent),\n        containerId,\n      ).then((node) => node !== null);\n    if (state.containersById.get(containerId)?.record.documentId)\n      return remoteDelete();\n    let promoted = false;\n    return chainContainerWrite(\n      state,\n      (isCurrent) => {\n        // Promotion can win while this local operation was queued. Hand it to\n        // the remote queue after releasing the local chain, before any HTTP I/O.\n        promoted = Boolean(\n          state.containersById.get(containerId)?.record.documentId,\n        );\n        return promoted\n          ? Promise.resolve(null)\n          : deleteContainer(state, syncAgent, containerId, isCurrent);\n      },\n      [containerId],\n    ).then((node) => (promoted && current() ? remoteDelete() : node !== null));\n  };\n}\n\nfunction createEnsureSystemContainerMethod(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n): ContainerContentsStore[\"ensureSystemContainer\"] {\n  return (systemSlot, name, options) => {\n    const work = (isCurrent: () => boolean) =>\n      ensureSystemContainer(\n        state,\n        syncAgent,\n        systemSlot,\n        name,\n        options,\n        isCurrent,\n      );\n    const rootId = findRootContainerState(state)?.container.id;\n    return options?.deferRemoteBootstrap\n      ? chainContainerWrite(state, work, [])\n      : chainRemoteContainerTask(\n          state,\n          syncAgent,\n          null,\n          work,\n          rootId ? { rootId, systemSlot } : undefined,\n        );\n  };\n}\n\nexport function createContainerWriteMethods(\n  state: ContainerContentsStoreState,\n  syncAgent: ReturnType<typeof createContainerContentsStoreSyncAgent>,\n): ContainerWriteMethods {\n  return {\n    ...createContainerSharingMethods(state, syncAgent),\n    createChild: (parentId, name) =>\n      chainContainerWrite(\n        state,\n        (isCurrent) =>\n          createChildContainer(state, syncAgent, parentId, name, isCurrent),\n        [parentId],\n      ),\n    deleteContainer: createDeleteContainerMethod(state, syncAgent),\n    purgeContainer: (containerId, options) =>\n      chainRemoteContainerTask(\n        state,\n        syncAgent,\n        false,\n        (isCurrent) =>\n          purgeContainer(state, syncAgent, containerId, options, isCurrent),\n        containerId,\n      ),\n    emptyTrash: (trashContainerId, options) =>\n      chainRemoteContainerTask(\n        state,\n        syncAgent,\n        false,\n        (isCurrent) =>\n          emptyTrash(state, syncAgent, trashContainerId, options, isCurrent),\n        trashContainerId,\n      ),\n    ensureSystemContainer: createEnsureSystemContainerMethod(state, syncAgent),\n    moveContainer: (containerId, parentId) =>\n      chainContainerWrite(\n        state,\n        (isCurrent) =>\n          moveContainer(state, syncAgent, containerId, parentId, isCurrent),\n        [containerId, parentId],\n        containerId,\n      ),\n    prepareGroupRewrap: createPrepareGroupRewrapMethod(state, syncAgent),\n    renameContainer: (containerId, name) =>\n      chainContainerWrite(\n        state,\n        (isCurrent) =>\n          renameContainer(state, syncAgent, containerId, name, isCurrent),\n        [containerId],\n      ),\n    setContainerIcon: (containerId, icon) =>\n      chainContainerWrite(\n        state,\n        (isCurrent) =>\n          setContainerIcon(state, syncAgent, containerId, icon, isCurrent),\n        [containerId],\n      ),\n  };\n}\n\nfunction createContainerContentsStoreEntry(\n  initialRuntime: ContainerContentsStoreRuntime,\n  persistence: ContainerContentsPersistence = defaultContainerContentsPersistence,\n  options: ContainerContentsStoreOptions = {},\n): ContainerContentsStoreEntry {\n  const state = createContainerContentsStoreState(\n    initialRuntime,\n    options.persistence ?? persistence,\n    options.logLabel,\n  );\n  const syncAgent = createContainerContentsStoreSyncAgent({\n    host: createContainerContentsStoreSyncHost(state),\n    state,\n  });\n  const writeMethods = createContainerWriteMethods(state, syncAgent);\n\n  return {\n    requestDocumentPriming: () => {\n      state.documentStoresNeedPriming = true;\n      syncAgent.scheduleSync();\n    },\n    store: {\n      ...writeMethods,\n      refresh: () => syncAgent.refresh({ resetAllLaneWatermarks: true }),\n      refreshRootLane: (options) => syncAgent.refreshRootLane(options),\n      // Force an on-demand local SQLite re-read (see the interface doc): arm the\n      // gate refreshLocalContainerStates otherwise requires, which the runtime\n      // auto-arms only on a context transition an on-demand caller cannot rely on.\n      refreshLocalContainers: () => {\n        state.localContainersNeedRefresh = true;\n        return syncAgent.refreshLocalContainers();\n      },\n      requestSync: () => syncAgent.scheduleSync(),\n      getCachedContainerWriterProjection: (containerId) =>\n        getCachedContainerWriterProjectionForStore(state, containerId),\n      getSnapshot: () => state.snapshot,\n      subscribe: (listener) =>\n        subscribeToContainerContentsStore(state, listener),\n      updateRuntime: (runtime) =>\n        updateContainerContentsStoreRuntime(state, runtime, syncAgent),\n    },\n    updateOptions: (nextOptions) =>\n      applyContainerContentsStoreOptions(state, syncAgent, nextOptions),\n  };\n}\n\nexport function createContainerContentsStore(\n  initialRuntime: ContainerContentsStoreRuntime,\n  persistence: ContainerContentsPersistence = defaultContainerContentsPersistence,\n  options: ContainerContentsStoreOptions = {},\n): ContainerContentsStore {\n  return createContainerContentsStoreEntry(initialRuntime, persistence, options)\n    .store;\n}\n\nexport function getOrCreateContainerContentsStore(\n  domainScope: DomainScope,\n  runtime: ContainerContentsStoreRuntime,\n  options: ContainerContentsStoreOptions = {},\n): ContainerContentsStore {\n  const existingEntry = containerContentsStoresByScope.get(domainScope);\n  if (existingEntry) {\n    existingEntry.updateOptions(options);\n    return existingEntry.store;\n  }\n\n  const nextEntry = createContainerContentsStoreEntry(\n    runtime,\n    defaultContainerContentsPersistence,\n    options,\n  );\n  containerContentsStoresByScope.set(domainScope, nextEntry);\n  return nextEntry.store;\n}\n\n/**\n * Arm the next structural pass's document-priming scan for a domain scope.\n * Priming normally re-arms only on store creation and topology changes, so a\n * caller that just tore down a document's local state uses this to have the\n * still-listed server document re-created without waiting for an app\n * restart. Returns false when the scope has no container-contents store yet;\n * the startup priming pass covers that case.\n */\nexport function requestContainerContentsDocumentPriming(\n  domainScope: DomainScope,\n): boolean {\n  const entry = containerContentsStoresByScope.get(domainScope);\n  if (!entry) {\n    return false;\n  }\n\n  entry.requestDocumentPriming();\n  return true;\n}\n"]}

package/stores/container-contents/containerState/containerStateMap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerStateMap.js","sourceRoot":"","sources":["containerStateMap.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,iBAAkB,SAAQ,GAA2B;IACvD,uBAAuB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7D,uBAAuB,GAAG,CAAC,CAAC;IAE5B,YAAY,OAA6C;QACvD,KAAK,EAAE,CAAC;QACR,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;YACjD,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAEQ,KAAK;QACZ,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAEQ,MAAM,CAAC,WAAmB;QACjC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1C,sEAAsE;QACtE,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEQ,GAAG,CAAC,WAAmB,EAAE,KAAqB;QACrD,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,0BAA0B;QACxB,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC;IAED,gBAAgB,CACd,WAAmB,EACnB,QAAqC;QAErC,OAAO,CACL,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CACjC,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,WAAmB;QACxC,IAAI,CAAC,uBAAuB,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC9E,CAAC;CACF;AAED,MAAM,UAAU,wCAAwC,CACtD,MAAmC;IAEnC,OAAO,MAAM,YAAY,iBAAiB;QACxC,CAAC,CAAC,MAAM,CAAC,0BAA0B,EAAE;QACrC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAmC,EACnC,WAAmB,EACnB,QAAqC;IAErC,OAAO,CACL,MAAM,YAAY,iBAAiB;QACnC,MAAM,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAC/C,CAAC;AACJ,CAAC","sourcesContent":["import type { ContainerState } from \"../../../workflows/container-contents/remoteHydration\";\n\nexport class ContainerStateMap extends Map<string, ContainerState> {\n  readonly #mutationGenerationById = new Map<string, number>();\n  #nextMutationGeneration = 0;\n\n  constructor(entries?: ReadonlyMap<string, ContainerState>) {\n    super();\n    for (const [containerId, state] of entries ?? []) {\n      super.set(containerId, state);\n    }\n  }\n\n  override clear(): void {\n    for (const containerId of this.keys()) {\n      this.recordMutation(containerId);\n    }\n    super.clear();\n  }\n\n  override delete(containerId: string): boolean {\n    const deleted = super.delete(containerId);\n    // An absent delete is still an authoritative tombstone observation. A\n    // local-refresh query that started before it must not install a stale row\n    // merely because no in-memory value existed for Map.delete to remove.\n    this.recordMutation(containerId);\n    return deleted;\n  }\n\n  override set(containerId: string, state: ContainerState): this {\n    this.recordMutation(containerId);\n    return super.set(containerId, state);\n  }\n\n  captureMutationGenerations(): ReadonlyMap<string, number> {\n    return new Map(this.#mutationGenerationById);\n  }\n\n  hasMutationAfter(\n    containerId: string,\n    baseline: ReadonlyMap<string, number>,\n  ): boolean {\n    return (\n      (this.#mutationGenerationById.get(containerId) ?? 0) !==\n      (baseline.get(containerId) ?? 0)\n    );\n  }\n\n  private recordMutation(containerId: string): void {\n    this.#nextMutationGeneration += 1;\n    this.#mutationGenerationById.set(containerId, this.#nextMutationGeneration);\n  }\n}\n\nexport function captureContainerStateMutationGenerations(\n  states: Map<string, ContainerState>,\n): ReadonlyMap<string, number> {\n  return states instanceof ContainerStateMap\n    ? states.captureMutationGenerations()\n    : new Map();\n}\n\nexport function containerStateMutatedAfter(\n  states: Map<string, ContainerState>,\n  containerId: string,\n  baseline: ReadonlyMap<string, number>,\n): boolean {\n  return (\n    states instanceof ContainerStateMap &&\n    states.hasMutationAfter(containerId, baseline)\n  );\n}\n"]}

package/stores/container-contents/containerState/containerStatePersistence.js

@@ -0,0 +1,57 @@
+import { installContainerMetadataRecord, persistContainerMetadataStateFromRuntime, } from "../../../workflows/container-contents/metadata/index.js";
+import { updateContainerContentsSnapshot } from "../state.js";
+import { removeMissingContainerState } from "./missingContainerState.js";
+export async function persistContainerState(state, containerState, options = {}) {
+    const { expectedStateWhenMissing, isCurrent, updateView = true } = options;
+    const persisted = await persistContainerMetadataStateFromRuntime({
+        metadataState: containerState,
+        localMetadataPatch: options.localMetadataPatch,
+        localUpdate: options.localUpdate,
+        patch: options.patch ?? {},
+        persistence: state.persistence,
+        createIntentSettlement: options.createIntentSettlement,
+        moveIntentSettlement: options.moveIntentSettlement,
+        preserveDurableStructureWhenPending: options.preserveDurableStructureWhenPending,
+        runtime: state.runtime,
+        saveOptions: options.saveOptions,
+        stillCurrent: isCurrent,
+    });
+    if (isCurrent?.() === false) {
+        return { status: "stale-generation" };
+    }
+    if (!persisted) {
+        removeMissingContainerState(state, expectedStateWhenMissing ?? containerState);
+        return { status: "missing" };
+    }
+    containerState.container = persisted.container;
+    installContainerMetadataRecord(containerState, persisted.record);
+    if (persisted.mutationSuperseded || persisted.syncIdentitySuperseded) {
+        const cachedState = state.containersById.get(containerState.container.id);
+        if (cachedState && cachedState !== containerState) {
+            cachedState.container = containerState.container;
+            cachedState.doc = containerState.doc;
+            cachedState.metadataWriterProjection =
+                containerState.metadataWriterProjection;
+            installContainerMetadataRecord(cachedState, persisted.record);
+        }
+        // The requested structural mutation was not applied. Refresh from the
+        // authoritative state installed above, but make the caller fail explicitly
+        // so it cannot schedule sync or report the dropped mutation as successful.
+        updateContainerContentsSnapshot(state);
+        return { record: persisted.record, status: "identity-superseded" };
+    }
+    if (updateView) {
+        updateContainerContentsSnapshot(state);
+    }
+    return {
+        record: persisted.record,
+        status: "persisted",
+        ...(persisted.createIntentSettled
+            ? { createIntentSettled: true }
+            : {}),
+        ...(persisted.moveIntentSettled
+            ? { moveIntentSettled: true }
+            : {}),
+    };
+}
+//# sourceMappingURL=containerStatePersistence.js.map

package/stores/container-contents/containerState/containerStatePersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerStatePersistence.js","sourceRoot":"","sources":["containerStatePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,wCAAwC,GACzC,MAAM,gDAAgD,CAAC;AAExD,OAAO,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAG3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAsBtE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAkC,EAClC,cAA8B,EAC9B,UAAwC,EAAE;IAE1C,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,UAAU,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC3E,MAAM,SAAS,GAAG,MAAM,wCAAwC,CAAC;QAC/D,aAAa,EAAE,cAAc;QAC7B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;QACtD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,mCAAmC,EACjC,OAAO,CAAC,mCAAmC;QAC7C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACxC,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,2BAA2B,CACzB,KAAK,EACL,wBAAwB,IAAI,cAAc,CAC3C,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IACD,cAAc,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;IAC/C,8BAA8B,CAAC,cAAc,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,SAAS,CAAC,kBAAkB,IAAI,SAAS,CAAC,sBAAsB,EAAE,CAAC;QACrE,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,WAAW,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;YAClD,WAAW,CAAC,SAAS,GAAG,cAAc,CAAC,SAAS,CAAC;YACjD,WAAW,CAAC,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC;YACrC,WAAW,CAAC,wBAAwB;gBAClC,cAAc,CAAC,wBAAwB,CAAC;YAC1C,8BAA8B,CAAC,WAAW,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC;QACD,sEAAsE;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACvC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,MAAM,EAAE,WAAW;QACnB,GAAG,CAAC,SAAS,CAAC,mBAAmB;YAC/B,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAa,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS,CAAC,iBAAiB;YAC7B,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAa,EAAE;YACtC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC","sourcesContent":["import {\n  installContainerMetadataRecord,\n  persistContainerMetadataStateFromRuntime,\n} from \"../../../workflows/container-contents/metadata\";\nimport type { PersistContainerStateResult } from \"../../../workflows/container-contents/remoteHydration\";\nimport { updateContainerContentsSnapshot } from \"../state\";\nimport type { ContainerState } from \"../syncAgent\";\nimport type { ContainerContentsStoreState } from \"../types\";\nimport { removeMissingContainerState } from \"./missingContainerState\";\n\ntype MetadataPersistenceInput = Parameters<\n  typeof persistContainerMetadataStateFromRuntime\n>[0];\n\ninterface PersistContainerStateOptions\n  extends Pick<\n    MetadataPersistenceInput,\n    | \"patch\"\n    | \"saveOptions\"\n    | \"localMetadataPatch\"\n    | \"localUpdate\"\n    | \"createIntentSettlement\"\n    | \"moveIntentSettlement\"\n    | \"preserveDurableStructureWhenPending\"\n  > {\n  expectedStateWhenMissing?: ContainerState | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  updateView?: boolean | undefined;\n}\n\nexport async function persistContainerState(\n  state: ContainerContentsStoreState,\n  containerState: ContainerState,\n  options: PersistContainerStateOptions = {},\n): Promise<PersistContainerStateResult> {\n  const { expectedStateWhenMissing, isCurrent, updateView = true } = options;\n  const persisted = await persistContainerMetadataStateFromRuntime({\n    metadataState: containerState,\n    localMetadataPatch: options.localMetadataPatch,\n    localUpdate: options.localUpdate,\n    patch: options.patch ?? {},\n    persistence: state.persistence,\n    createIntentSettlement: options.createIntentSettlement,\n    moveIntentSettlement: options.moveIntentSettlement,\n    preserveDurableStructureWhenPending:\n      options.preserveDurableStructureWhenPending,\n    runtime: state.runtime,\n    saveOptions: options.saveOptions,\n    stillCurrent: isCurrent,\n  });\n  if (isCurrent?.() === false) {\n    return { status: \"stale-generation\" };\n  }\n  if (!persisted) {\n    removeMissingContainerState(\n      state,\n      expectedStateWhenMissing ?? containerState,\n    );\n    return { status: \"missing\" };\n  }\n  containerState.container = persisted.container;\n  installContainerMetadataRecord(containerState, persisted.record);\n  if (persisted.mutationSuperseded || persisted.syncIdentitySuperseded) {\n    const cachedState = state.containersById.get(containerState.container.id);\n    if (cachedState && cachedState !== containerState) {\n      cachedState.container = containerState.container;\n      cachedState.doc = containerState.doc;\n      cachedState.metadataWriterProjection =\n        containerState.metadataWriterProjection;\n      installContainerMetadataRecord(cachedState, persisted.record);\n    }\n    // The requested structural mutation was not applied. Refresh from the\n    // authoritative state installed above, but make the caller fail explicitly\n    // so it cannot schedule sync or report the dropped mutation as successful.\n    updateContainerContentsSnapshot(state);\n    return { record: persisted.record, status: \"identity-superseded\" };\n  }\n  if (updateView) {\n    updateContainerContentsSnapshot(state);\n  }\n  return {\n    record: persisted.record,\n    status: \"persisted\",\n    ...(persisted.createIntentSettled\n      ? { createIntentSettled: true as const }\n      : {}),\n    ...(persisted.moveIntentSettled\n      ? { moveIntentSettled: true as const }\n      : {}),\n  };\n}\n"]}

package/stores/container-contents/containerState/missingContainerState.js

@@ -0,0 +1,10 @@
+import { updateContainerContentsSnapshot } from "../state.js";
+export function removeMissingContainerState(state, expectedState) {
+    const containerId = expectedState.container.id;
+    if (state.containersById.get(containerId) !== expectedState) {
+        return;
+    }
+    state.containersById.delete(containerId);
+    updateContainerContentsSnapshot(state);
+}
+//# sourceMappingURL=missingContainerState.js.map

package/stores/container-contents/containerState/missingContainerState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"missingContainerState.js","sourceRoot":"","sources":["missingContainerState.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAG3D,MAAM,UAAU,2BAA2B,CACzC,KAAkC,EAClC,aAA6B;IAE7B,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;IAC/C,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,aAAa,EAAE,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,+BAA+B,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC","sourcesContent":["import type { ContainerState } from \"../../../workflows/container-contents/remoteHydration\";\nimport { updateContainerContentsSnapshot } from \"../state\";\nimport type { ContainerContentsStoreState } from \"../types\";\n\nexport function removeMissingContainerState(\n  state: ContainerContentsStoreState,\n  expectedState: ContainerState,\n): void {\n  const containerId = expectedState.container.id;\n  if (state.containersById.get(containerId) !== expectedState) {\n    return;\n  }\n  state.containersById.delete(containerId);\n  updateContainerContentsSnapshot(state);\n}\n"]}

package/stores/container-contents/containerState/missingSyncedContainerState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"missingSyncedContainerState.js","sourceRoot":"","sources":["missingSyncedContainerState.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,iCAAiC,CAC/C,KAAsC,EACtC,aAA6B,EAC7B,cAA0B;IAE1B,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;IAC/C,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,aAAa,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,cAAc,EAAE,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { ContainerState } from \"../../../workflows/container-contents/remoteHydration\";\nimport type { ContainerContentsStoreSyncState } from \"../syncAgent/syncAgentTypes\";\n\nexport function removeMissingSyncedContainerState(\n  state: ContainerContentsStoreSyncState,\n  expectedState: ContainerState,\n  updateSnapshot: () => void,\n): boolean {\n  const containerId = expectedState.container.id;\n  if (state.containersById.get(containerId) !== expectedState) {\n    return false;\n  }\n\n  state.containersById.delete(containerId);\n  updateSnapshot();\n  return true;\n}\n"]}

package/stores/container-contents/containerState/reconcilableContainer.d.ts

@@ -0,0 +1,48 @@
+import type { ContainerNode } from "../types.js";
+/**
+ * Whether a container is a system container — one tagged with a deterministic
+ * `systemSlot` for a built-in role such as Contacts, Trash, organization
+ * metadata, or the per-organization roster.
+ */
+export declare function isSystemContainerNode(node: Pick<ContainerNode, "systemSlot">): boolean;
+/** Whether a container has completed enough remote creation to be listed. */
+export declare function isRemoteBackedContainerNode(node: Pick<ContainerNode, "metadataDocumentId">): boolean;
+/**
+ * Whether generic document reconciliation may safely list this container.
+ *
+ * Every container joins generic reconciliation only after remote creation has
+ * given it a metadata document id. This keeps local-first roots and children
+ * out of an HTTP lane that cannot exist yet, while still letting another device
+ * rematerialize Contacts, Trash, and other system data.
+ */
+export declare function isReconcilableContainerNode(node: Pick<ContainerNode, "effectiveAccessLevel" | "metadataDocumentId" | "organizationId" | "systemSlot">, homeOrganizationId: string | null): boolean;
+/**
+ * Whether a root-lane discovery hint should re-list this container's documents.
+ *
+ * The server's root discovery lane can return directly granted non-root
+ * containers, so every remote-backed regular container remains eligible
+ * regardless of its parent. Membership-visible foreign system containers
+ * remain eligible for catch-up. Own system children are excluded here because
+ * cold/auth backfill and explicit full refresh already reconcile them; sweeping
+ * them on every Explorer-open or shared-root hint creates redundant work.
+ */
+export declare function isAutomaticRootCatchupContainerNode(node: Pick<ContainerNode, "effectiveAccessLevel" | "metadataDocumentId" | "organizationId" | "systemSlot">, homeOrganizationId: string | null): boolean;
+/**
+ * Whether a system container belongs to a foreign organization whose contents
+ * are visible through membership-level access.
+ *
+ * Event routing uses this classification for foreign system content whose
+ * already-known document updates must still force discovery. It is not the
+ * generic sweep predicate: remote-backed own system containers also reconcile
+ * via {@link isReconcilableContainerNode}. A foreign system container is one
+ * that is:
+ *
+ *  - a different org's (`organizationId !== homeOrganizationId`). Own system
+ *    containers are outside this foreign-system classification, while a
+ *    container mid-creation has an empty organization id that matches nothing
+ *    (as does a null/unhydrated home org).
+ *  - granted at a *membership* level — `read` (Members group) or `admin`
+ *    (Admins group). A plain `write` share of a folder does not make the sharee
+ *    a member, so it does not opt that folder into automatic root catch-up.
+ */
+export declare function isForeignSystemContainerNode(node: Pick<ContainerNode, "systemSlot" | "organizationId" | "effectiveAccessLevel">, homeOrganizationId: string | null): boolean;

package/stores/container-contents/containerState/reconcilableContainer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcilableContainer.js","sourceRoot":"","sources":["reconcilableContainer.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAuC;IAEvC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,2BAA2B,CACzC,IAA+C;IAE/C,OAAO,CACL,OAAO,IAAI,CAAC,kBAAkB,KAAK,QAAQ;QAC3C,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CACnC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAMC,EACD,kBAAiC;IAEjC,wEAAwE;IACxE,uEAAuE;IACvE,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CACL,kBAAkB,KAAK,IAAI;QAC3B,CAAC,IAAI,CAAC,cAAc,KAAK,kBAAkB;YACzC,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mCAAmC,CACjD,IAMC,EACD,kBAAiC;IAEjC,OAAO,CACL,2BAA2B,CAAC,IAAI,CAAC;QACjC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAC3B,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAGC,EACD,kBAAiC;IAEjC,OAAO,CACL,qBAAqB,CAAC,IAAI,CAAC;QAC3B,kBAAkB,KAAK,IAAI;QAC3B,CAAC,CAAC,IAAI,CAAC,cAAc;QACrB,IAAI,CAAC,cAAc,KAAK,kBAAkB;QAC1C,CAAC,IAAI,CAAC,oBAAoB,KAAK,MAAM;YACnC,IAAI,CAAC,oBAAoB,KAAK,OAAO,CAAC,CACzC,CAAC;AACJ,CAAC","sourcesContent":["import type { ContainerNode } from \"../types\";\n\n/**\n * Whether a container is a system container — one tagged with a deterministic\n * `systemSlot` for a built-in role such as Contacts, Trash, organization\n * metadata, or the per-organization roster.\n */\nexport function isSystemContainerNode(\n  node: Pick<ContainerNode, \"systemSlot\">,\n): boolean {\n  return !!node.systemSlot;\n}\n\n/** Whether a container has completed enough remote creation to be listed. */\nexport function isRemoteBackedContainerNode(\n  node: Pick<ContainerNode, \"metadataDocumentId\">,\n): boolean {\n  return (\n    typeof node.metadataDocumentId === \"string\" &&\n    node.metadataDocumentId.length > 0\n  );\n}\n\n/**\n * Whether generic document reconciliation may safely list this container.\n *\n * Every container joins generic reconciliation only after remote creation has\n * given it a metadata document id. This keeps local-first roots and children\n * out of an HTTP lane that cannot exist yet, while still letting another device\n * rematerialize Contacts, Trash, and other system data.\n */\nexport function isReconcilableContainerNode(\n  node: Pick<\n    ContainerNode,\n    | \"effectiveAccessLevel\"\n    | \"metadataDocumentId\"\n    | \"organizationId\"\n    | \"systemSlot\"\n  >,\n  homeOrganizationId: string | null,\n): boolean {\n  // Document discovery is an HTTP read against the remote container id. A\n  // local-first container has no such lane until its metadata create has\n  // committed; attempting to list it can only produce a 404. This applies to\n  // the pre-auth local root just as much as to a local system container.\n  if (!isRemoteBackedContainerNode(node)) {\n    return false;\n  }\n\n  if (!isSystemContainerNode(node)) {\n    return true;\n  }\n\n  return (\n    homeOrganizationId !== null &&\n    (node.organizationId === homeOrganizationId ||\n      isForeignSystemContainerNode(node, homeOrganizationId))\n  );\n}\n\n/**\n * Whether a root-lane discovery hint should re-list this container's documents.\n *\n * The server's root discovery lane can return directly granted non-root\n * containers, so every remote-backed regular container remains eligible\n * regardless of its parent. Membership-visible foreign system containers\n * remain eligible for catch-up. Own system children are excluded here because\n * cold/auth backfill and explicit full refresh already reconcile them; sweeping\n * them on every Explorer-open or shared-root hint creates redundant work.\n */\nexport function isAutomaticRootCatchupContainerNode(\n  node: Pick<\n    ContainerNode,\n    | \"effectiveAccessLevel\"\n    | \"metadataDocumentId\"\n    | \"organizationId\"\n    | \"systemSlot\"\n  >,\n  homeOrganizationId: string | null,\n): boolean {\n  return (\n    isRemoteBackedContainerNode(node) &&\n    (!isSystemContainerNode(node) ||\n      isForeignSystemContainerNode(node, homeOrganizationId))\n  );\n}\n\n/**\n * Whether a system container belongs to a foreign organization whose contents\n * are visible through membership-level access.\n *\n * Event routing uses this classification for foreign system content whose\n * already-known document updates must still force discovery. It is not the\n * generic sweep predicate: remote-backed own system containers also reconcile\n * via {@link isReconcilableContainerNode}. A foreign system container is one\n * that is:\n *\n *  - a different org's (`organizationId !== homeOrganizationId`). Own system\n *    containers are outside this foreign-system classification, while a\n *    container mid-creation has an empty organization id that matches nothing\n *    (as does a null/unhydrated home org).\n *  - granted at a *membership* level — `read` (Members group) or `admin`\n *    (Admins group). A plain `write` share of a folder does not make the sharee\n *    a member, so it does not opt that folder into automatic root catch-up.\n */\nexport function isForeignSystemContainerNode(\n  node: Pick<\n    ContainerNode,\n    \"systemSlot\" | \"organizationId\" | \"effectiveAccessLevel\"\n  >,\n  homeOrganizationId: string | null,\n): boolean {\n  return (\n    isSystemContainerNode(node) &&\n    homeOrganizationId !== null &&\n    !!node.organizationId &&\n    node.organizationId !== homeOrganizationId &&\n    (node.effectiveAccessLevel === \"read\" ||\n      node.effectiveAccessLevel === \"admin\")\n  );\n}\n"]}