@tearleads/client-sdk 0.1.63 → 0.1.64

package/stores/container-contents/syncAgent/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAE5F,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAEL,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,uCAAuC,EAAE,MAAM,qCAAqC,CAAC;AAC9F,OAAO,EACL,2BAA2B,EAC3B,mCAAmC,GACpC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,iCAAiC,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,wCAAwC,EAAE,MAAM,0CAA0C,CAAC;AACpG,OAAO,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AACtF,OAAO,EAAE,+CAA+C,EAAE,MAAM,UAAU,CAAC;AAK3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,qBAAqB,CAAC;AAU7E,SAAS,iCAAiC,CACxC,KAAsC;IAEtC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,gCAAgC,CAAC,KAO/C;IACC,MAAM,EACJ,kBAAkB,EAClB,IAAI,EACJ,SAAS,EACT,kBAAkB,EAClB,YAAY,EACZ,KAAK,GACN,GAAG,KAAK,CAAC;IACV,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACtC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC;IAClC,IAAI,WAAW,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,oBAAoB,GAAG,MAAM,wBAAwB,CAAC;QAC1D,WAAW;QACX,OAAO,EAAE,WAAW;KACrB,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,KAAK,MAAM,cAAc,IAAI,oBAAoB,EAAE,CAAC;QAClD,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IAEzB,MAAM,+BAA+B,GACnC,MAAM,mCAAmC,CAAC;QACxC,SAAS;QACT,gBAAgB,EAAE,GAAG,EAAE,CACrB,uCAAuC,CAAC;YACtC,IAAI;YACJ,kBAAkB;YAClB,YAAY;YACZ,KAAK;SACN,CAAC;QACJ,KAAK;KACN,CAAC,CAAC;IACL,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,0BAA0B,GAC9B,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ;QACvC,CACE,MAAM,WAAW,CAAC,gCAAgC,CAChD,WAAW,CAAC,KAAK,CAAC,OAAO,EACzB,OAAO,CAAC,IAAI,CAAC,MAAM,CACpB,CACF,CAAC,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;IACtB,kBAAkB,EAAE,CAAC;IAErB,OAAO,CAAC,IAAI,CAAC,GAAG,CACd,GAAG,iCAAiC,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,cAAc,CAAC,IAAI,eAAe,CAChG,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;IACrC,IAAI,cAAc,CAAC,IAAI,CAAC,eAAe,IAAI,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACvE,MAAM,cAAc,GAClB,+BAA+B;YAC/B,0BAA0B;YAC1B,CAAC,MAAM,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,GAAG,CACrB,+BAA+B;YAC7B,CAAC,CAAC,GAAG,iCAAiC,CAAC,KAAK,CAAC,8DAA8D;YAC3G,CAAC,CAAC,GAAG,iCAAiC,CAAC,KAAK,CAAC,4DAA4D,CAC5G,CAAC;QACF,YAAY,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,4CAA4C,CAAC,KAOrD;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,aAAa,GAAG,KAAK,CAAC,4BAA4B,CAAC;IACzD,IACE,CAAC,aAAa;QACd,CAAC,KAAK,CAAC,+BAA+B,KAAK,KAAK,CAAC,mBAAmB;YAClE,KAAK,CAAC,yCAAyC;gBAC7C,KAAK,CAAC,oBAAoB,CAAC,EAC/B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACtD,KAAK,CAAC,oBAAoB,GAAG,mBAAmB,CAAC;IACjD,MAAM,4BAA4B,GAAG,GAAG,EAAE;QACxC,IAAI,KAAK,CAAC,iBAAiB,KAAK,qBAAqB,EAAE,CAAC;YACtD,OAAO;QACT,CAAC;QACD,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC/B,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC7C,uCAAuC,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC;IACF,MAAM,qBAAqB,GAAG,aAAa,CAAC,IAAI,CAC9C,4BAA4B,EAC5B,4BAA4B,CAC7B,CAAC;IACF,KAAK,CAAC,iBAAiB,GAAG,qBAAqB,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uCAAuC,CAAC,KAOhD;IACC,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,EAAE,YAAY,EAAE,KAAK,EAAE,GACzE,KAAK,CAAC;IACR,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClE,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,IAAI,4CAA4C,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO;IACT,CAAC;IAED,MAAM,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACtD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,KAAK,CAAC,mBAAmB,KAAK,mBAAmB;QACjD,KAAK,CAAC,WAAW,KAAK,WAAW;QACjC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC;IAC1C,KAAK,CAAC,oBAAoB,GAAG,mBAAmB,CAAC;IACjD,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;QACzD,kBAAkB;QAClB,IAAI;QACJ,SAAS;QACT,kBAAkB;QAClB,YAAY;QACZ,KAAK;KACN,CAAC;SACC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,IAAI,CAAC,SAAS,EAAE,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,OAAO;QACT,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC,CAAC;SACD,OAAO,CAAC,GAAG,EAAE;QACZ,IAAI,KAAK,CAAC,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;YAClD,OAAO;QACT,CAAC;QACD,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC/B,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC;QAClC,IAAI,SAAS,EAAE,EAAE,CAAC;YAChB,+CAA+C,CAC7C,KAAK,EACL,KAAK,CAAC,qBAAqB,CAC5B,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACpD,uCAAuC,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IACL,KAAK,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;AAC9C,CAAC;AAED,sEAAsE;AACtE,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,SAAS,kBAAkB,CACzB,KAAsC,EACtC,OAAe,EACf,KAAc;IAEd,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;IAC7C,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,wBAAwB,CAAC,KAKjC;IACC,OAAO,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,CACtB,uCAAuC,CAAC;QACtC,GAAG,KAAK;QACR,2BAA2B,EAAE,OAAO,CAAC,2BAA2B;QAChE,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;KACvD,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAGrD;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,wBAAwB,GAAG,wCAAwC,CAAC;QACxE,IAAI;QACJ,YAAY;QACZ,KAAK;KACN,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,qBAAqB,CAAC;IAE1E,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;QAChD,IAAI;QACJ,kBAAkB;QAClB,YAAY;QACZ,KAAK;KACN,CAAC,CAAC;IACH,MAAM,uBAAuB,GAAG,CAAC,OAAsC,EAAE,EAAE,CACzE,uCAAuC,CAAC;QACtC,GAAG,OAAO;QACV,IAAI;QACJ,kBAAkB;QAClB,YAAY;QACZ,KAAK;KACN,CAAC,CAAC;IACL,MAAM,iBAAiB,GAAG,CACxB,OAAgD,EAChD,EAAE,CAAC,mCAAmC,CAAC,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAA+C,CAAC,OAAO,EAAE,EAAE,CACtE,yBAAyB,CAAC;QACxB,2EAA2E;QAC3E,sBAAsB,EAAE,OAAO,EAAE,sBAAsB;QACvD,gBAAgB,EAAE,uBAAuB;QACzC,KAAK;KACN,CAAC,CAAC;IACL,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAC9B,mCAAmC,CAAC;QAClC,gBAAgB;QAChB,YAAY;QACZ,KAAK;KACN,CAAC,CAAC;IACL,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;QAC7D,gBAAgB,EAAE,uBAAuB;QACzC,KAAK;KACN,CAAC,CAAC;IAEH,KAAK,CAAC,QAAQ,GAAG,iCAAiC,CAAC;QACjD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW;QAC5C,QAAQ,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC;QACvE,GAAG,EAAE,GAAG,EAAE,CACR,sCAAsC,CAAC;YACrC,IAAI;YACJ,uBAAuB;YACvB,2BAA2B,EAAE,CAAC,iBAAiB,EAAE,EAAE;gBACjD,iBAAiB,CAAC;oBAChB,2BAA2B,EAAE,KAAK;oBAClC,SAAS,EAAE,CAAC,iBAAiB,CAAC;iBAC/B,CAAC,CAAC;YACL,CAAC;YACD,KAAK;SACN,CAAC;KACL,CAAC,CAAC;IAEH,OAAO;QACL,iBAAiB,EAAE,GAAG,EAAE;YACtB,uCAAuC,CAAC;gBACtC,kBAAkB;gBAClB,IAAI;gBACJ,qBAAqB,EAAE,OAAO;gBAC9B,kBAAkB;gBAClB,YAAY;gBACZ,KAAK;aACN,CAAC,CAAC;YACH,KAAK,kBAAkB,EAAE,CAAC;QAC5B,CAAC;QACD,kBAAkB;QAClB,qBAAqB,EAAE,wBAAwB,CAAC,MAAM;QACtD,8BAA8B,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,EAAE,CAC7D,yBAAyB,CAAC,KAAK,EAAE,eAAe,EAAE,SAAS,CAAC;QAC9D,sBAAsB,EAAE,GAAG,EAAE,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC1E,OAAO;QACP,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE,CAC3B,0BAA0B,CAAC;YACzB,0BAA0B,EAAE,OAAO,EAAE,0BAA0B;YAC/D,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,gBAAgB,EAAE,uBAAuB;YACzC,KAAK;SACN,CAAC;QACJ,sBAAsB,EAAE,gBAAgB;QACxC,uBAAuB,EAAE,iBAAiB;QAC1C,YAAY;KACb,CAAC;AACJ,CAAC","sourcesContent":["import { loadLocalContainerStates } from \"../../../workflows/container-contents/localState\";\nimport type { RemoteContainerHydrationHost } from \"../../../workflows/container-contents/remoteHydration\";\nimport {\n  isDatabaseUnavailableError,\n  registerContainerContentsSyncLane,\n} from \"../../../workflows/container-contents/syncLane\";\nimport { createRestoredAccessReconciler } from \"../accessRestorationSweep\";\nimport { primeStoreDocumentSubtree } from \"../documentWork/documentRecovery\";\nimport { observeContainerBackgroundHydration } from \"../hydration/backgroundHydration\";\nimport {\n  type RemoteHydrationRefreshOptions,\n  refreshAllRemoteHydration,\n  refreshRootRemoteHydration,\n} from \"../hydration/remoteHydrationRefresh\";\nimport { requestContainerContentsRemoteHydration } from \"../hydration/remoteHydrationRequest\";\nimport {\n  hasStartupContainerSyncWork,\n  scheduleStaleStartupRemoteHydration,\n} from \"../hydration/startupHydration\";\nimport { refreshLocalContainerStates } from \"../localRefresh\";\nimport { getContainerContentsStoreLogLabel } from \"../logLabel\";\nimport { createRemoteContainerIngestionController } from \"../remoteEvents/remoteContainerIngestion\";\nimport { handleContainerContentsRemoteEvents } from \"../remoteEvents/remoteEventSync\";\nimport { consumePendingContainerContentsReconnectRefresh } from \"../state\";\nimport type {\n  ContainerContentsStoreSyncAgent,\n  ContainerContentsStoreSyncState,\n} from \"./syncAgentTypes\";\nimport { runContainerContentsStoreSyncIteration } from \"./syncLaneIteration\";\n\nexport type { ContainerState } from \"../../../workflows/container-contents/remoteHydration\";\nexport type {\n  ContainerContentsStoreRuntime,\n  ContainerContentsStoreSyncAgent,\n  ContainerContentsStoreSyncState,\n  RefreshRootLaneOptions,\n} from \"./syncAgentTypes\";\n\nfunction requestContainerContentsStoreSync(\n  state: ContainerContentsStoreSyncState,\n) {\n  state.syncLane?.requestSync();\n}\n\nasync function initializeContainerContentsStore(input: {\n  handleRemoteEvents: () => void;\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n  resumeRecoveryWork: () => Promise<void>;\n  scheduleSync: () => void;\n  state: ContainerContentsStoreSyncState;\n}) {\n  const {\n    handleRemoteEvents,\n    host,\n    isCurrent,\n    resumeRecoveryWork,\n    scheduleSync,\n    state,\n  } = input;\n  const persistence = state.persistence;\n  const loadRuntime = state.runtime;\n  if (loadRuntime.infra.dbStatus !== \"ready\") {\n    return;\n  }\n\n  const localContainerStates = await loadLocalContainerStates({\n    persistence,\n    runtime: loadRuntime,\n  });\n  if (!isCurrent()) {\n    return;\n  }\n\n  for (const containerState of localContainerStates) {\n    state.containersById.set(containerState.container.id, containerState);\n  }\n\n  state.initialized = true;\n\n  const shouldScheduleStaleRootRecovery =\n    await scheduleStaleStartupRemoteHydration({\n      isCurrent,\n      requestHydration: () =>\n        requestContainerContentsRemoteHydration({\n          host,\n          resumeRecoveryWork,\n          scheduleSync,\n          state,\n        }),\n      state,\n    });\n  if (!isCurrent()) {\n    return;\n  }\n  const runtime = state.runtime;\n  const hasPendingRestorationSweep =\n    typeof runtime.auth.userId === \"string\" &&\n    (\n      await persistence.listDormantMetadataSweepRequests(\n        loadRuntime.infra.execSql,\n        runtime.auth.userId,\n      )\n    ).length > 0;\n  if (!isCurrent()) {\n    return;\n  }\n\n  host.updateSnapshot();\n  handleRemoteEvents();\n\n  runtime.util.log(\n    `${getContainerContentsStoreLogLabel(state)}: loaded ${state.containersById.size} container(s)`,\n  );\n\n  const currentRuntime = state.runtime;\n  if (currentRuntime.auth.isAuthenticated && currentRuntime.state.online) {\n    const hasStartupWork =\n      shouldScheduleStaleRootRecovery ||\n      hasPendingRestorationSweep ||\n      (await hasStartupContainerSyncWork(state));\n    if (!isCurrent() || !hasStartupWork) {\n      return;\n    }\n    currentRuntime.util.log(\n      shouldScheduleStaleRootRecovery\n        ? `${getContainerContentsStoreLogLabel(state)}: startup detected stale root recovery; scheduling lane pass`\n        : `${getContainerContentsStoreLogLabel(state)}: startup detected durable sync work; scheduling lane pass`,\n    );\n    scheduleSync();\n  }\n}\n\nfunction waitForStaleLocalRefreshBeforeInitialization(input: {\n  handleRemoteEvents: () => void;\n  host: RemoteContainerHydrationHost;\n  refreshAfterReconnect: () => Promise<boolean>;\n  resumeRecoveryWork: () => Promise<void>;\n  scheduleSync: () => void;\n  state: ContainerContentsStoreSyncState;\n}): boolean {\n  const { state } = input;\n  const activeRefresh = state.localContainerRefreshPromise;\n  if (\n    !activeRefresh ||\n    (state.localContainerRefreshGeneration === state.lifecycleGeneration &&\n      state.localContainerRefreshStructuralGeneration ===\n        state.structuralGeneration)\n  ) {\n    return false;\n  }\n\n  const lifecycleGeneration = state.lifecycleGeneration;\n  state.initializeGeneration = lifecycleGeneration;\n  const releaseInitializationBarrier = () => {\n    if (state.initializePromise !== initializationBarrier) {\n      return;\n    }\n    state.initializePromise = null;\n    state.initializeGeneration = null;\n    if (state.runtime.infra.dbStatus === \"ready\") {\n      ensureContainerContentsStoreInitialized(input);\n    }\n  };\n  const initializationBarrier = activeRefresh.then(\n    releaseInitializationBarrier,\n    releaseInitializationBarrier,\n  );\n  state.initializePromise = initializationBarrier;\n  return true;\n}\n\nfunction ensureContainerContentsStoreInitialized(input: {\n  handleRemoteEvents: () => void;\n  host: RemoteContainerHydrationHost;\n  refreshAfterReconnect: () => Promise<boolean>;\n  resumeRecoveryWork: () => Promise<void>;\n  scheduleSync: () => void;\n  state: ContainerContentsStoreSyncState;\n}) {\n  const { handleRemoteEvents, host, resumeRecoveryWork, scheduleSync, state } =\n    input;\n  if (state.initialized || state.runtime.infra.dbStatus !== \"ready\") {\n    return;\n  }\n  if (state.initializePromise) {\n    return;\n  }\n  if (waitForStaleLocalRefreshBeforeInitialization(input)) {\n    return;\n  }\n\n  const lifecycleGeneration = state.lifecycleGeneration;\n  const persistence = state.persistence;\n  const execSql = state.runtime.infra.execSql;\n  const isCurrent = () =>\n    state.lifecycleGeneration === lifecycleGeneration &&\n    state.persistence === persistence &&\n    state.runtime.infra.execSql === execSql;\n  state.initializeGeneration = lifecycleGeneration;\n  const initializePromise = initializeContainerContentsStore({\n    handleRemoteEvents,\n    host,\n    isCurrent,\n    resumeRecoveryWork,\n    scheduleSync,\n    state,\n  })\n    .catch((error: unknown) => {\n      if (!isCurrent() || isDatabaseUnavailableError(error)) {\n        return;\n      }\n\n      throw error;\n    })\n    .finally(() => {\n      if (state.initializePromise !== initializePromise) {\n        return;\n      }\n      state.initializePromise = null;\n      state.initializeGeneration = null;\n      if (isCurrent()) {\n        consumePendingContainerContentsReconnectRefresh(\n          state,\n          input.refreshAfterReconnect,\n        );\n      } else if (state.runtime.infra.dbStatus === \"ready\") {\n        ensureContainerContentsStoreInitialized(input);\n      }\n    });\n  state.initializePromise = initializePromise;\n}\n\n// Read the runtime lazily: updateRuntime replaces state.runtime, so a\n// reference captured at lane registration would report into a dead identity's\n// host. Returns the host's result: both callbacks are declared `=> void` but\n// may be async, and the lane reporter only catches a rejection it is handed.\nfunction logSyncLaneFailure(\n  state: ContainerContentsStoreSyncState,\n  message: string,\n  error: unknown,\n): unknown {\n  const { log, logError } = state.runtime.util;\n  return logError ? logError(message, error) : log(message);\n}\n\nfunction createHydrationRequester(input: {\n  host: RemoteContainerHydrationHost;\n  resumeRecoveryWork: () => Promise<void>;\n  scheduleSync: () => void;\n  state: ContainerContentsStoreSyncState;\n}): ContainerContentsStoreSyncAgent[\"requestRemoteHydration\"] {\n  return (options = {}) =>\n    requestContainerContentsRemoteHydration({\n      ...input,\n      followDiscoveredParentLanes: options.followDiscoveredParentLanes,\n      parentIds: options.parentIds,\n      resetAllLaneWatermarks: options.resetAllLaneWatermarks,\n    });\n}\n\nexport function createContainerContentsStoreSyncAgent(input: {\n  host: RemoteContainerHydrationHost;\n  state: ContainerContentsStoreSyncState;\n}): ContainerContentsStoreSyncAgent {\n  const { host, state } = input;\n  const scheduleSync = () => requestContainerContentsStoreSync(state);\n  const remoteContainerIngestion = createRemoteContainerIngestionController({\n    host,\n    scheduleSync,\n    state,\n  });\n  const resumeRecoveryWork = remoteContainerIngestion.resumeInterruptedWork;\n\n  const requestHydration = createHydrationRequester({\n    host,\n    resumeRecoveryWork,\n    scheduleSync,\n    state,\n  });\n  const requestRefreshHydration = (options: RemoteHydrationRefreshOptions) =>\n    requestContainerContentsRemoteHydration({\n      ...options,\n      host,\n      resumeRecoveryWork,\n      scheduleSync,\n      state,\n    });\n  const scheduleHydration = (\n    options?: Parameters<typeof requestHydration>[0],\n  ) => observeContainerBackgroundHydration(state, requestHydration(options));\n  const refresh: ContainerContentsStoreSyncAgent[\"refresh\"] = (options) =>\n    refreshAllRemoteHydration({\n      // Explicit user refresh must rediscover children hidden by unsigned hints.\n      resetAllLaneWatermarks: options?.resetAllLaneWatermarks,\n      requestHydration: requestRefreshHydration,\n      state,\n    });\n  const handleRemoteEvents = () =>\n    handleContainerContentsRemoteEvents({\n      requestHydration,\n      scheduleSync,\n      state,\n    });\n  const reconcileRestoredAccess = createRestoredAccessReconciler({\n    requestHydration: requestRefreshHydration,\n    state,\n  });\n\n  state.syncLane = registerContainerContentsSyncLane({\n    domainScope: state.runtime.state.domainScope,\n    logError: (message, error) => logSyncLaneFailure(state, message, error),\n    run: () =>\n      runContainerContentsStoreSyncIteration({\n        host,\n        reconcileRestoredAccess,\n        requestRemoteReconciliation: (parentContainerId) => {\n          scheduleHydration({\n            followDiscoveredParentLanes: false,\n            parentIds: [parentContainerId],\n          });\n        },\n        state,\n      }),\n  });\n\n  return {\n    ensureInitialized: () => {\n      ensureContainerContentsStoreInitialized({\n        handleRemoteEvents,\n        host,\n        refreshAfterReconnect: refresh,\n        resumeRecoveryWork,\n        scheduleSync,\n        state,\n      });\n      void resumeRecoveryWork();\n    },\n    handleRemoteEvents,\n    ingestRemoteContainer: remoteContainerIngestion.ingest,\n    primeDocumentsForSharedSubtree: (rootContainerId, isCurrent) =>\n      primeStoreDocumentSubtree(state, rootContainerId, isCurrent),\n    refreshLocalContainers: () => refreshLocalContainerStates({ host, state }),\n    refresh,\n    refreshRootLane: (options) =>\n      refreshRootRemoteHydration({\n        includeActiveRootChildLane: options?.includeActiveRootChildLane,\n        parentIds: options?.parentIds,\n        requestHydration: requestRefreshHydration,\n        state,\n      }),\n    requestRemoteHydration: requestHydration,\n    scheduleRemoteHydration: scheduleHydration,\n    scheduleSync,\n  };\n}\n"]}

package/stores/container-contents/{metadataSyncSignal.js → syncAgent/metadataSyncSignal.js}

@@ -16,7 +16,7 @@
  * the document store's `remoteUpdateSignalSeq` clear (the document store is
  * single-document, so it needs only one counter).
  */
-import { sequenceUnchanged } from "../../workflows/container-contents/syncLane.js";
+import { sequenceUnchanged } from "../../../workflows/container-contents/syncLane.js";
 /** Read an id's current enqueue sequence, defaulting to 0 when never queued. */
 export function readMetadataSyncSeq(seqById, id) {
     return seqById.get(id) ?? 0;

package/stores/container-contents/{metadataSyncSignal.js.map → syncAgent/metadataSyncSignal.js.map}

@@ -1 +1 @@
-{"version":3,"file":"metadataSyncSignal.js","sourceRoot":"","sources":["metadataSyncSignal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAEhF,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CACjC,OAAoC,EACpC,EAAU;IAEV,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CACjC,OAA4B,EAC5B,EAAU;IAEV,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,mBAAmB,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAKjD;IACC,IACE,iBAAiB,CACf,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,EAC5C,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CACzC,EACD,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC","sourcesContent":["/**\n * Convergence-safety helpers for the container-contents metadata sync lane.\n *\n * `syncSingleContainerMetadata` reads `forceReadSync` for a container, then\n * awaits a network GET of the container's metadata document. A remote\n * rename/move event delivered during that await re-queues the container's\n * metadata id and advances that id's entry in `metadataSyncSignalSeqById`. If\n * the pass then deleted the id unconditionally it would erase that fresh\n * re-queue, leaving the structural projection (name/icon) stale until an\n * unrelated later event re-armed it.\n *\n * The pass therefore snapshots the id's sequence before its GET and only clears\n * the queued id when that id's sequence is unchanged at pass end. The sequence\n * is tracked per metadata document id (not a single global counter) so a remote\n * event for an unrelated container does not block clearing this one. Mirrors\n * the document store's `remoteUpdateSignalSeq` clear (the document store is\n * single-document, so it needs only one counter).\n */\n\nimport { sequenceUnchanged } from \"../../workflows/container-contents/syncLane\";\n\n/** Read an id's current enqueue sequence, defaulting to 0 when never queued. */\nexport function readMetadataSyncSeq(\n  seqById: ReadonlyMap<string, number>,\n  id: string,\n): number {\n  return seqById.get(id) ?? 0;\n}\n\n/** Advance an id's enqueue sequence (called when a remote event re-queues it). */\nexport function bumpMetadataSyncSeq(\n  seqById: Map<string, number>,\n  id: string,\n): void {\n  seqById.set(id, readMetadataSyncSeq(seqById, id) + 1);\n}\n\n/**\n * Delete `id` from the needs-sync queue only if no remote event re-queued that\n * specific id since `consumedSeqById` was snapshotted at pass entry.\n */\nexport function clearMetadataSyncQueueIfUnchanged(input: {\n  needingSync: Set<string>;\n  seqById: ReadonlyMap<string, number>;\n  consumedSeqById: ReadonlyMap<string, number>;\n  id: string;\n}): void {\n  if (\n    sequenceUnchanged(\n      readMetadataSyncSeq(input.seqById, input.id),\n      input.consumedSeqById.get(input.id) ?? 0,\n    )\n  ) {\n    input.needingSync.delete(input.id);\n  }\n}\n"]}
+{"version":3,"file":"metadataSyncSignal.js","sourceRoot":"","sources":["metadataSyncSignal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAEnF,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CACjC,OAAoC,EACpC,EAAU;IAEV,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CACjC,OAA4B,EAC5B,EAAU;IAEV,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,mBAAmB,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAKjD;IACC,IACE,iBAAiB,CACf,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,EAC5C,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CACzC,EACD,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC","sourcesContent":["/**\n * Convergence-safety helpers for the container-contents metadata sync lane.\n *\n * `syncSingleContainerMetadata` reads `forceReadSync` for a container, then\n * awaits a network GET of the container's metadata document. A remote\n * rename/move event delivered during that await re-queues the container's\n * metadata id and advances that id's entry in `metadataSyncSignalSeqById`. If\n * the pass then deleted the id unconditionally it would erase that fresh\n * re-queue, leaving the structural projection (name/icon) stale until an\n * unrelated later event re-armed it.\n *\n * The pass therefore snapshots the id's sequence before its GET and only clears\n * the queued id when that id's sequence is unchanged at pass end. The sequence\n * is tracked per metadata document id (not a single global counter) so a remote\n * event for an unrelated container does not block clearing this one. Mirrors\n * the document store's `remoteUpdateSignalSeq` clear (the document store is\n * single-document, so it needs only one counter).\n */\n\nimport { sequenceUnchanged } from \"../../../workflows/container-contents/syncLane\";\n\n/** Read an id's current enqueue sequence, defaulting to 0 when never queued. */\nexport function readMetadataSyncSeq(\n  seqById: ReadonlyMap<string, number>,\n  id: string,\n): number {\n  return seqById.get(id) ?? 0;\n}\n\n/** Advance an id's enqueue sequence (called when a remote event re-queues it). */\nexport function bumpMetadataSyncSeq(\n  seqById: Map<string, number>,\n  id: string,\n): void {\n  seqById.set(id, readMetadataSyncSeq(seqById, id) + 1);\n}\n\n/**\n * Delete `id` from the needs-sync queue only if no remote event re-queued that\n * specific id since `consumedSeqById` was snapshotted at pass entry.\n */\nexport function clearMetadataSyncQueueIfUnchanged(input: {\n  needingSync: Set<string>;\n  seqById: ReadonlyMap<string, number>;\n  consumedSeqById: ReadonlyMap<string, number>;\n  id: string;\n}): void {\n  if (\n    sequenceUnchanged(\n      readMetadataSyncSeq(input.seqById, input.id),\n      input.consumedSeqById.get(input.id) ?? 0,\n    )\n  ) {\n    input.needingSync.delete(input.id);\n  }\n}\n"]}

package/stores/container-contents/{syncAgentTypes.d.ts → syncAgent/syncAgentTypes.d.ts}

@@ -1,8 +1,8 @@
-import type { ContainerContentsPersistence } from "../../workflows/container-contents/containerPersistence.js";
-import type { ContainerContentsProjectionUserKeyResolver } from "../../workflows/container-contents/projectionKeys.js";
-import type { ContainerState, RemoteContainer } from "../../workflows/container-contents/remoteHydration/index.js";
-import type { ContainerContentsStoreWorkflowRuntime } from "../../workflows/container-contents/runtime.js";
-import type { ContainerContentsSyncLane } from "../../workflows/container-contents/syncLane.js";
+import type { ContainerContentsPersistence } from "../../../workflows/container-contents/containerPersistence.js";
+import type { ContainerContentsProjectionUserKeyResolver } from "../../../workflows/container-contents/projectionKeys.js";
+import type { ContainerState, RemoteContainer } from "../../../workflows/container-contents/remoteHydration/index.js";
+import type { ContainerContentsStoreWorkflowRuntime } from "../../../workflows/container-contents/runtime.js";
+import type { ContainerContentsSyncLane } from "../../../workflows/container-contents/syncLane.js";
 export type ContainerContentsStoreRuntime = ContainerContentsStoreWorkflowRuntime;
 export interface RefreshRootLaneOptions {
     readonly includeActiveRootChildLane?: boolean | undefined;

package/stores/container-contents/syncAgent/syncAgentTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncAgentTypes.js","sourceRoot":"","sources":["syncAgentTypes.ts"],"names":[],"mappings":"","sourcesContent":["import type { ContainerContentsPersistence } from \"../../../workflows/container-contents/containerPersistence\";\nimport type { ContainerContentsProjectionUserKeyResolver } from \"../../../workflows/container-contents/projectionKeys\";\nimport type {\n  ContainerState,\n  RemoteContainer,\n} from \"../../../workflows/container-contents/remoteHydration\";\nimport type { ContainerContentsStoreWorkflowRuntime } from \"../../../workflows/container-contents/runtime\";\nimport type { ContainerContentsSyncLane } from \"../../../workflows/container-contents/syncLane\";\n\nexport type ContainerContentsStoreRuntime =\n  ContainerContentsStoreWorkflowRuntime;\n\nexport interface RefreshRootLaneOptions {\n  readonly includeActiveRootChildLane?: boolean | undefined;\n  // Extra parent lanes to re-list alongside the root lane. Used by the\n  // resync_required handler to re-list affected containers' parent lanes so a\n  // tombstone only visible there is still applied without the full crawl.\n  readonly parentIds?: ReadonlyArray<string | null> | undefined;\n}\n\nexport interface ContainerContentsStoreSyncAgent {\n  ensureInitialized: () => void;\n  handleRemoteEvents: () => void;\n  ingestRemoteContainer: (remoteContainer: RemoteContainer) => Promise<void>;\n  primeDocumentsForSharedSubtree: (\n    rootContainerId: string,\n    isCurrent?: (() => boolean) | undefined,\n  ) => Promise<void>;\n  refreshLocalContainers: () => Promise<void>;\n  refresh: (options?: { resetAllLaneWatermarks?: boolean }) => Promise<boolean>;\n  refreshRootLane: (options?: RefreshRootLaneOptions) => Promise<boolean>;\n  requestRemoteHydration: (options?: {\n    followDiscoveredParentLanes?: boolean | undefined;\n    parentIds?: ReadonlyArray<string | null> | undefined;\n    resetAllLaneWatermarks?: boolean | undefined;\n  }) => Promise<void>;\n  scheduleRemoteHydration: () => void;\n  scheduleSync: () => void;\n}\n\nexport interface ContainerContentsStoreSyncState {\n  containersById: Map<string, ContainerState>;\n  documentStoresNeedPriming: boolean;\n  initializeGeneration: number | null;\n  initializePromise: Promise<void> | null;\n  initialized: boolean;\n  localContainerRefreshPromise: Promise<void> | null;\n  localContainerRefreshGeneration: number | null;\n  localContainerRefreshStructuralGeneration: number | null;\n  localContainersNeedRefresh: boolean;\n  /** Invalidates asynchronous hydration work when this store is reset. */\n  lifecycleGeneration: number;\n  /** Invalidates structural work when its runtime or persistence is replaced. */\n  structuralGeneration: number;\n  /** Invalidates writes across write-relevant runtime ABA transitions. */\n  writeGeneration: number;\n  lastEventCount: number;\n  /**\n   * Update ids this client sent for container metadata documents, registered\n   * before the network await of each metadata sync pass. The author's own\n   * `document_update_created` echo consumes its ids here instead of arming a\n   * redundant forced read-sync; a genuine peer update always carries unknown\n   * ids and still forces one. Shared across all metadata docs in the store —\n   * update ids are globally unique.\n   */\n  locallyAcceptedMetadataUpdateIds: Set<string>;\n  logLabel?: string | undefined;\n  metadataDocumentIdsNeedingSync: Set<string>;\n  /**\n   * Per-metadata-document enqueue sequence. Bumped for a specific id whenever a\n   * remote event re-queues it in {@link metadataDocumentIdsNeedingSync}. A sync\n   * pass snapshots the id's sequence before its GET and only clears the id if it\n   * is unchanged at pass end, so a mid-pass re-queue of THIS container is not\n   * erased. Keyed per id (not a single global counter) so a remote event for an\n   * unrelated container does not force a redundant re-sync of this one. See\n   * `clearMetadataSyncQueueIfUnchanged`.\n   */\n  metadataSyncSignalSeqById: Map<string, number>;\n  containerParentIdsNeedingHydration: Set<string | null>;\n  persistence: ContainerContentsPersistence;\n  remoteHydrationPromise: Promise<void> | null;\n  remoteHydrationGeneration: number | null;\n  remoteHydrationStructuralGeneration: number | null;\n  remoteReconnectRefreshPending: boolean;\n  resolveProjectionUserKey: ContainerContentsProjectionUserKeyResolver;\n  /** True after this store has fully applied an authoritative root lane. */\n  rootLaneHydrated: boolean;\n  runtime: ContainerContentsStoreRuntime;\n  snapshot: { ready: boolean };\n  syncLane: ContainerContentsSyncLane | null;\n}\n"]}

package/stores/container-contents/{syncLaneIteration.js → syncAgent/syncLaneIteration.js}

@@ -1,15 +1,15 @@
-import { syncPendingContainerCreateIntents } from "../../workflows/container-contents/container-state/createIntentSync.js";
-import { syncPendingContainerMoveIntents } from "../../workflows/container-contents/container-state/moveIntentSync.js";
-import { syncPendingDocumentMoveIntents, } from "../../workflows/container-contents/documentMove/documentMoveIntentSync.js";
-import { syncContainerMetadataState } from "../../workflows/container-contents/metadata/index.js";
-import { createContainerContentsDocumentsRuntime } from "../../workflows/container-contents/runtime.js";
-import { openDocumentStore, requestDomainDocumentSync } from "../documents/index.js";
-import { relinkDocumentStoreWithCommitSideEffect } from "../documents/documentStore/internalRelink.js";
-import { DocumentRemoteWorkBusyError } from "../documents/documentStore/remoteWork.js";
-import { primeStoreDocuments, recoverStoreStaleRoot } from "./documentRecovery.js";
-import { runContainerDocumentWork } from "./documentWork.js";
+import { syncPendingContainerCreateIntents } from "../../../workflows/container-contents/container-state/create/createIntentSync.js";
+import { syncPendingContainerMoveIntents } from "../../../workflows/container-contents/container-state/moveIntentSync.js";
+import { syncPendingDocumentMoveIntents, } from "../../../workflows/container-contents/documentMove/documentMoveIntentSync.js";
+import { syncContainerMetadataState } from "../../../workflows/container-contents/metadata/index.js";
+import { createContainerContentsDocumentsRuntime } from "../../../workflows/container-contents/runtime.js";
+import { openDocumentStore, requestDomainDocumentSync } from "../../documents/index.js";
+import { relinkDocumentStoreWithCommitSideEffect } from "../../documents/documentStore/internalRelink.js";
+import { DocumentRemoteWorkBusyError } from "../../documents/documentStore/sync/remoteWork.js";
+import { removeMissingSyncedContainerState } from "../containerState/missingSyncedContainerState.js";
+import { runContainerDocumentWork } from "../documentWork/index.js";
+import { primeStoreDocuments, recoverStoreStaleRoot, } from "../documentWork/documentRecovery.js";
 import { bumpMetadataSyncSeq, clearMetadataSyncQueueIfUnchanged, readMetadataSyncSeq, } from "./metadataSyncSignal.js";
-import { removeMissingSyncedContainerState } from "./missingSyncedContainerState.js";
 function requestContainerContentsStoreSync(state) {
     state.syncLane?.requestSync();
 }

package/stores/container-contents/syncAgent/syncLaneIteration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncLaneIteration.js","sourceRoot":"","sources":["syncLaneIteration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAE,MAAM,+EAA+E,CAAC;AAClI,OAAO,EAAE,+BAA+B,EAAE,MAAM,sEAAsE,CAAC;AACvH,OAAO,EAEL,8BAA8B,GAC/B,MAAM,2EAA2E,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAK5F,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,uCAAuC,EAAE,MAAM,8CAA8C,CAAC;AACvG,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAC5F,OAAO,EAAE,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;AAClG,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,iCAAiC,EACjC,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAW9B,SAAS,iCAAiC,CACxC,KAAsC;IAEtC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAsC;IACrE,OAAO,CAAC,cAAsB,EAAE,EAAE,CAChC,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC;AAChE,CAAC;AAED,SAAS,+BAA+B,CACtC,KAAsC,EACtC,OAAsC;IAEtC,MAAM,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;IACpD,MAAM,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;IACzD,MAAM,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACtD,MAAM,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACxD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IACtC,MAAM,wBAAwB,GAAG,KAAK,CAAC,wBAAwB,CAAC;IAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,OAAO,GAAG,EAAE,CACV,KAAK,CAAC,mBAAmB,KAAK,mBAAmB;QACjD,KAAK,CAAC,oBAAoB,KAAK,oBAAoB;QACnD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,KAAK,oBAAoB;QAC1D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,iBAAiB;QACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW;QAC/C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO;QACvC,KAAK,CAAC,wBAAwB,KAAK,wBAAwB;QAC3D,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,4CAA4C,CACnD,KAAsC,EACtC,SAAwB;IAExB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;IAC9C,OAAO;QACL,uBAAuB,EAAE,CAAC,WAAW,EAAE,EAAE,CACvC,uCAAuC,CAAC,OAAO,EAAE,WAAW,CAAC;QAC/D,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE;YAC1D,MAAM,KAAK,GAAG,iBAAiB,CAC7B,WAAW,EACX,OAAO,EACP,uCAAuC,CAAC,OAAO,EAAE,WAAW,CAAC,EAC7D,UAAU,CACX,CAAC;YACF,OAAO;gBACL,yBAAyB,EAAE,GAAG,EAAE,CAC9B,KAAK,CAAC,yBAAyB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBACzD,IAAI,KAAK,YAAY,2BAA2B,EAAE,CAAC;wBACjD,KAAK,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;4BAC5B,IAAI,SAAS,EAAE;gCAAE,iCAAiC,CAAC,KAAK,CAAC,CAAC;wBAC5D,CAAC,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC;gBACJ,iBAAiB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE;gBAClD,MAAM,EAAE,CAAC,EAAE,gBAAgB,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,CACzC,gBAAgB;oBACd,CAAC,CAAC,uCAAuC,CACrC,KAAK,EACL,KAAK,EACL,gBAAgB,CACjB;oBACH,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;gBACzB,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;gBACtC,aAAa,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC;aACjE,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,KAKtC;IACC,OAAO,8BAA8B,CAAC;QACpC,IAAI,EAAE,4CAA4C,CAChD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,SAAS,CAChB;QACD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAS1C;IACC,MAAM,EAAE,cAAc,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GACpE,KAAK,CAAC;IACR,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC;IAC5D,6EAA6E;IAC7E,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,IAAI,OAAO,kBAAkB,KAAK,QAAQ,EAAE,CAAC;QAC3C,eAAe,CAAC,GAAG,CACjB,kBAAkB,EAClB,mBAAmB,CAAC,KAAK,CAAC,yBAAyB,EAAE,kBAAkB,CAAC,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CACnB,KAAK,CAAC,qBAAqB,IAAI,0BAA0B,CAC1D,CAAC;QACA,aAAa,EACX,OAAO,kBAAkB,KAAK,QAAQ;YACtC,KAAK,CAAC,8BAA8B,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC9D,wBAAwB,EAAE,KAAK,CAAC,gCAAgC;QAChE,SAAS;QACT,aAAa,EAAE,cAAc;QAC7B,yBAAyB,EAAE,GAAG,EAAE;YAC9B,MAAM,iBAAiB,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAChD,cAAc,CAAC,SAAS,CAAC,EAAE,CAC5B,EAAE,MAAM,CAAC,UAAU,CAAC;YACrB,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;gBAC1C,KAAK,CAAC,8BAA8B,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAC5D,mBAAmB,CAAC,KAAK,CAAC,yBAAyB,EAAE,iBAAiB,CAAC,CAAC;YAC1E,CAAC;YACD,iCAAiC,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;QACD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,eAAe,EAAE,oBAAoB,CAAC,SAAS;KAChD,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;QACxB,iCAAiC,CAC/B,KAAK,EACL,cAAc,EACd,IAAI,CAAC,cAAc,CACpB,CAAC;QACF,OAAO;IACT,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC3B,iCAAiC,CAAC;gBAChC,eAAe;gBACf,EAAE;gBACF,WAAW,EAAE,KAAK,CAAC,8BAA8B;gBACjD,OAAO,EAAE,KAAK,CAAC,yBAAyB;aACzC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,qDAAqD;IACrD,IAAI,CAAC,cAAc,EAAE,CAAC;IAEtB,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;QACrC,iCAAiC,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,0BAA0B,CACvC,KAAsC;IAEtC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,wBAAwB,CAC9D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAC5B,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACtD,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,KAA+C;IAE/C,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,KAAK,EAAE,GACzE,KAAK,CAAC;IACR,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC;IACjE,IACE,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QAClC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK;QACrB,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM;QACrB,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QAC7B,CAAC,oBAAoB,EACrB,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;IAC9C,MAAM,SAAS,GAAG,+BAA+B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAElE,MAAM,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IACD,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAE/D,MAAM,qBAAqB,GAAG,MAAM,iCAAiC,CAAC;QACpE,IAAI;QACJ,SAAS;QACT,mBAAmB,EAAE,qBAAqB;QAC1C,2BAA2B;QAC3B,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IACD,IAAI,qBAAqB,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;QACvC,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,MAAM,mBAAmB,GAAG,MAAM,+BAA+B,CAAC;QAChE,IAAI;QACJ,eAAe;QACf,SAAS;QACT,mBAAmB,EAAE,qBAAqB;QAC1C,2BAA2B;QAC3B,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IACD,IAAI,mBAAmB,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;QACvC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,yBAAyB,CAAC,WAAW,CAAC,CAAC;QACvC,iCAAiC,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,MAAM,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QACvE,IAAI,eAAe,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YAAE,SAAS;QAC3D,MAAM,2BAA2B,CAAC;YAChC,cAAc;YACd,oBAAoB;YACpB,IAAI;YACJ,SAAS;YACT,KAAK;YACL,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,wBAAwB,CAAC;QAC7B,SAAS;QACT,gBAAgB,EAAE,GAAG,EAAE;YACrB,IAAI,SAAS,EAAE,EAAE,CAAC;gBAChB,iCAAiC,CAAC,KAAK,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,gBAAgB,EAAE,GAAG,EAAE;YACrB,IAAI,SAAS,EAAE,EAAE,CAAC;gBAChB,yBAAyB,CAAC,WAAW,CAAC,CAAC;gBACvC,iCAAiC,CAAC,KAAK,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC;QAC3D,gBAAgB,EAAE,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC;QAC/D,oBAAoB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,yBAAyB;QAC3D,sEAAsE;QACtE,wEAAwE;QACxE,sEAAsE;QACtE,yDAAyD;QACzD,wBAAwB,EAAE,GAAG,EAAE,CAC7B,6BAA6B,CAAC;YAC5B,eAAe;YACf,SAAS;YACT,mBAAmB,EAAE,qBAAqB;YAC1C,KAAK;SACN,CAAC;KACL,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { syncPendingContainerCreateIntents } from \"../../../workflows/container-contents/container-state/create/createIntentSync\";\nimport { syncPendingContainerMoveIntents } from \"../../../workflows/container-contents/container-state/moveIntentSync\";\nimport {\n  type DocumentMoveIntentSyncHost,\n  syncPendingDocumentMoveIntents,\n} from \"../../../workflows/container-contents/documentMove/documentMoveIntentSync\";\nimport { syncContainerMetadataState } from \"../../../workflows/container-contents/metadata\";\nimport type {\n  ContainerState,\n  RemoteContainerHydrationHost,\n} from \"../../../workflows/container-contents/remoteHydration\";\nimport { createContainerContentsDocumentsRuntime } from \"../../../workflows/container-contents/runtime\";\nimport { openDocumentStore, requestDomainDocumentSync } from \"../../documents\";\nimport { relinkDocumentStoreWithCommitSideEffect } from \"../../documents/documentStore/internalRelink\";\nimport { DocumentRemoteWorkBusyError } from \"../../documents/documentStore/sync/remoteWork\";\nimport { removeMissingSyncedContainerState } from \"../containerState/missingSyncedContainerState\";\nimport { runContainerDocumentWork } from \"../documentWork\";\nimport {\n  primeStoreDocuments,\n  recoverStoreStaleRoot,\n} from \"../documentWork/documentRecovery\";\nimport {\n  bumpMetadataSyncSeq,\n  clearMetadataSyncQueueIfUnchanged,\n  readMetadataSyncSeq,\n} from \"./metadataSyncSignal\";\nimport type {\n  ContainerContentsStoreRuntime,\n  ContainerContentsStoreSyncState,\n} from \"./syncAgentTypes\";\n\ntype ContainerContentsStorePrimeDocumentRuntime = ReturnType<\n  typeof createContainerContentsDocumentsRuntime\n>;\ntype SyncContainerMetadata = typeof syncContainerMetadataState;\n\nfunction requestContainerContentsStoreSync(\n  state: ContainerContentsStoreSyncState,\n) {\n  state.syncLane?.requestSync();\n}\n\nfunction createRemoteSyncBlocker(runtime: ContainerContentsStoreRuntime) {\n  return (organizationId: string) =>\n    runtime.util.isRemoteSyncBlocked?.(organizationId) ?? false;\n}\n\nfunction captureStructuralSyncGeneration(\n  state: ContainerContentsStoreSyncState,\n  runtime: ContainerContentsStoreRuntime,\n) {\n  const activeContainerId = runtime.state.containerId;\n  const activeOrganizationId = runtime.auth.organizationId;\n  const lifecycleGeneration = state.lifecycleGeneration;\n  const structuralGeneration = state.structuralGeneration;\n  const domainScope = runtime.state.domainScope;\n  const execSql = runtime.infra.execSql;\n  const resolveProjectionUserKey = state.resolveProjectionUserKey;\n  const syncLane = state.syncLane;\n  return () =>\n    state.lifecycleGeneration === lifecycleGeneration &&\n    state.structuralGeneration === structuralGeneration &&\n    state.runtime.auth.organizationId === activeOrganizationId &&\n    state.runtime.state.containerId === activeContainerId &&\n    state.runtime.state.domainScope === domainScope &&\n    state.runtime.infra.execSql === execSql &&\n    state.resolveProjectionUserKey === resolveProjectionUserKey &&\n    state.syncLane === syncLane &&\n    !syncLane?.isDisposed?.();\n}\n\nfunction createContainerContentsStoreDocumentMoveHost(\n  state: ContainerContentsStoreSyncState,\n  isCurrent: () => boolean,\n): DocumentMoveIntentSyncHost<ContainerContentsStorePrimeDocumentRuntime> {\n  const runtime = state.runtime;\n  const domainScope = runtime.state.domainScope;\n  return {\n    documentWorkflowRuntime: (containerId) =>\n      createContainerContentsDocumentsRuntime(runtime, containerId),\n    openDocumentStore: ({ containerId, documentId, localId }) => {\n      const store = openDocumentStore(\n        domainScope,\n        localId,\n        createContainerContentsDocumentsRuntime(runtime, containerId),\n        documentId,\n      );\n      return {\n        assertCanRotateContentKey: () =>\n          store.assertCanRotateContentKey().catch((error: unknown) => {\n            if (error instanceof DocumentRemoteWorkBusyError) {\n              void error.whenIdle.then(() => {\n                if (isCurrent()) requestContainerContentsStoreSync(state);\n              });\n            }\n            throw error;\n          }),\n        ensureInitialized: () => store.ensureInitialized(),\n        relink: ({ commitSideEffect, ...input }) =>\n          commitSideEffect\n            ? relinkDocumentStoreWithCommitSideEffect(\n                store,\n                input,\n                commitSideEffect,\n              )\n            : store.relink(input),\n        requestSync: () => store.requestSync(),\n        updateRuntime: (nextRuntime) => store.updateRuntime(nextRuntime),\n      };\n    },\n  };\n}\n\nfunction syncPendingStoreDocumentMoves(input: {\n  isCreatePending: (containerId: string) => boolean;\n  isCurrent: () => boolean;\n  isRemoteSyncBlocked: (organizationId: string) => boolean;\n  state: ContainerContentsStoreSyncState;\n}) {\n  return syncPendingDocumentMoveIntents({\n    host: createContainerContentsStoreDocumentMoveHost(\n      input.state,\n      input.isCurrent,\n    ),\n    isCreatePending: input.isCreatePending,\n    isCurrent: input.isCurrent,\n    isRemoteSyncBlocked: input.isRemoteSyncBlocked,\n    state: input.state,\n  });\n}\n\nasync function syncSingleContainerMetadata(input: {\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n  state: ContainerContentsStoreSyncState;\n  containerState: ContainerState;\n  encapsulationKeyPair: NonNullable<\n    ContainerContentsStoreRuntime[\"crypto\"][\"encapsulationKeyPair\"]\n  >;\n  syncContainerMetadata?: SyncContainerMetadata | undefined;\n}) {\n  const { containerState, encapsulationKeyPair, host, isCurrent, state } =\n    input;\n  const metadataDocumentId = containerState.record.documentId;\n  // Snapshot this signal before the GET so a mid-pass event survives clearing.\n  const consumedSeqById = new Map<string, number>();\n  if (typeof metadataDocumentId === \"string\") {\n    consumedSeqById.set(\n      metadataDocumentId,\n      readMetadataSyncSeq(state.metadataSyncSignalSeqById, metadataDocumentId),\n    );\n  }\n  const synced = await (\n    input.syncContainerMetadata ?? syncContainerMetadataState\n  )({\n    forceReadSync:\n      typeof metadataDocumentId === \"string\" &&\n      state.metadataDocumentIdsNeedingSync.has(metadataDocumentId),\n    locallyAcceptedUpdateIds: state.locallyAcceptedMetadataUpdateIds,\n    isCurrent,\n    metadataState: containerState,\n    onDurableStateNeedsReload: () => {\n      const currentDocumentId = state.containersById.get(\n        containerState.container.id,\n      )?.record.documentId;\n      if (typeof currentDocumentId === \"string\") {\n        state.metadataDocumentIdsNeedingSync.add(currentDocumentId);\n        bumpMetadataSyncSeq(state.metadataSyncSignalSeqById, currentDocumentId);\n      }\n      requestContainerContentsStoreSync(state);\n    },\n    persistence: state.persistence,\n    resolveProjectionUserKey: state.resolveProjectionUserKey,\n    runtime: state.runtime,\n    targetSecretKey: encapsulationKeyPair.secretKey,\n  });\n  if (!isCurrent() || !synced) {\n    return;\n  }\n  if (\"missing\" in synced) {\n    removeMissingSyncedContainerState(\n      state,\n      containerState,\n      host.updateSnapshot,\n    );\n    return;\n  }\n\n  for (const id of [metadataDocumentId, synced.record.documentId]) {\n    if (typeof id === \"string\") {\n      clearMetadataSyncQueueIfUnchanged({\n        consumedSeqById,\n        id,\n        needingSync: state.metadataDocumentIdsNeedingSync,\n        seqById: state.metadataSyncSignalSeqById,\n      });\n    }\n  }\n  // syncContainerMetadataState settles its detached candidate into this live\n  // object while preserving any metadata edit that completed or queued during\n  // the remote pass. Do not install its returned detached record again here:\n  // doing so would overwrite that preserved live edit.\n  host.updateSnapshot();\n\n  if (synced.shouldRequestFollowupSync) {\n    requestContainerContentsStoreSync(state);\n  }\n}\n\n/**\n * A folder whose create has not settled can carry a listed identity that\n * adoption has not verified, or has refused. Folder moves, document moves and\n * metadata edits wait for it; child and document creates wait in their own\n * create paths.\n */\nasync function loadPendingCreatePredicate(\n  state: ContainerContentsStoreSyncState,\n): Promise<(containerId: string) => boolean> {\n  const pending = await state.persistence.listPendingCreateIntents(\n    state.runtime.infra.execSql,\n  );\n  const pendingIds = new Set(pending.map((intent) => intent.containerId));\n  return (containerId) => pendingIds.has(containerId);\n}\n\ninterface ContainerContentsStoreSyncIterationInput {\n  host: RemoteContainerHydrationHost;\n  reconcileRestoredAccess: (isCurrent: () => boolean) => Promise<void>;\n  requestRemoteReconciliation: (parentContainerId: string | null) => void;\n  state: ContainerContentsStoreSyncState;\n  syncContainerMetadata?: SyncContainerMetadata | undefined;\n}\n\nexport async function runContainerContentsStoreSyncIteration(\n  input: ContainerContentsStoreSyncIterationInput,\n) {\n  const { host, reconcileRestoredAccess, requestRemoteReconciliation, state } =\n    input;\n  const runtime = state.runtime;\n  const encapsulationKeyPair = runtime.crypto.encapsulationKeyPair;\n  if (\n    runtime.infra.dbStatus !== \"ready\" ||\n    !state.snapshot.ready ||\n    !runtime.state.online ||\n    !runtime.auth.isAuthenticated ||\n    !encapsulationKeyPair\n  ) {\n    return;\n  }\n  const domainScope = runtime.state.domainScope;\n  const isCurrent = captureStructuralSyncGeneration(state, runtime);\n\n  await reconcileRestoredAccess(isCurrent);\n  if (!isCurrent()) {\n    return;\n  }\n  const isOrganizationBlocked = createRemoteSyncBlocker(runtime);\n\n  const createdContainerCount = await syncPendingContainerCreateIntents({\n    host,\n    isCurrent,\n    isRemoteSyncBlocked: isOrganizationBlocked,\n    requestRemoteReconciliation,\n    state,\n  });\n  if (!isCurrent()) {\n    return;\n  }\n  if (createdContainerCount > 0) {\n    state.documentStoresNeedPriming = true;\n    host.updateSnapshot();\n  }\n  const isCreatePending = await loadPendingCreatePredicate(state);\n  if (!isCurrent()) {\n    return;\n  }\n\n  const movedContainerCount = await syncPendingContainerMoveIntents({\n    host,\n    isCreatePending,\n    isCurrent,\n    isRemoteSyncBlocked: isOrganizationBlocked,\n    requestRemoteReconciliation,\n    state,\n  });\n  if (!isCurrent()) {\n    return;\n  }\n  if (movedContainerCount > 0) {\n    state.documentStoresNeedPriming = true;\n    host.updateSnapshot();\n    requestDomainDocumentSync(domainScope);\n    requestContainerContentsStoreSync(state);\n  }\n\n  for (const containerState of Array.from(state.containersById.values())) {\n    if (isCreatePending(containerState.container.id)) continue;\n    await syncSingleContainerMetadata({\n      containerState,\n      encapsulationKeyPair,\n      host,\n      isCurrent,\n      state,\n      syncContainerMetadata: input.syncContainerMetadata,\n    });\n    if (!isCurrent()) {\n      return;\n    }\n  }\n\n  // Root adoption notifies session consumers synchronously. Let container\n  // metadata converge first so a recovered system container is never exposed\n  // under its placeholder name when the active root changes.\n  await runContainerDocumentWork({\n    isCurrent,\n    onContextChanged: () => {\n      if (isCurrent()) {\n        requestContainerContentsStoreSync(state);\n      }\n    },\n    onDocumentsMoved: () => {\n      if (isCurrent()) {\n        requestDomainDocumentSync(domainScope);\n        requestContainerContentsStoreSync(state);\n      }\n    },\n    primeDocuments: () => primeStoreDocuments(state, isCurrent),\n    recoverStaleRoot: () => recoverStoreStaleRoot(state, isCurrent),\n    shouldPrimeDocuments: () => state.documentStoresNeedPriming,\n    // Document move intents live in the structural phase because they may\n    // target containers created locally in the same session, such as Trash.\n    // Root recovery rewrites stale endpoints and returns their intents to\n    // pending, so replay follows recovery in this same pass.\n    syncPendingDocumentMoves: () =>\n      syncPendingStoreDocumentMoves({\n        isCreatePending,\n        isCurrent,\n        isRemoteSyncBlocked: isOrganizationBlocked,\n        state,\n      }),\n  });\n}\n"]}

package/stores/container-contents/{existingSystemContainer.js → systemContainers/existingSystemContainer.js}

@@ -1,10 +1,10 @@
-import { persistContainerState } from "./containerStatePersistence.js";
-import { getContainerContentsStoreLogLabel } from "./logLabel.js";
-import { invalidateRemoteContainerWrites } from "./remoteWriteGuards.js";
+import { persistContainerState } from "../containerState/containerStatePersistence.js";
+import { getContainerContentsStoreLogLabel } from "../logLabel.js";
+import { invalidateRemoteContainerWrites } from "../remoteWrites/remoteWriteGuards.js";
+import { toContainerNode } from "../utils.js";
 import { applySystemContainerIcon } from "./systemContainerIcon.js";
 import { findRootContainerState } from "./systemContainerLookup.js";
 import { promoteExistingLocalSystemContainerSync } from "./systemContainerPromotion.js";
-import { toContainerNode } from "./utils.js";
 export async function updateExistingSystemContainer(state, syncAgent, existing, options, isCurrent) {
     if ("icon" in options) {
         const iconApplied = await applySystemContainerIcon({

package/stores/container-contents/systemContainers/existingSystemContainer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"existingSystemContainer.js","sourceRoot":"","sources":["existingSystemContainer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,iCAAiC,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AAUpF,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,uCAAuC,EAAE,MAAM,4BAA4B,CAAC;AAErF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAkC,EAClC,SAA0C,EAC1C,QAAwB,EACxB,OAAqC,EACrC,SAA8B;IAE9B,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC;YACjD,cAAc,EAAE,QAAQ;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;gBAClD,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;oBACjC,+BAA+B,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,cAAc,EAAE;oBAChE,KAAK,EAAE,EAAE,IAAI,EAAE;oBACf,UAAU,EAAE,KAAK;oBACjB,kBAAkB,EAAE,EAAE,IAAI,EAAE;oBAC5B,WAAW,EAAE,MAAM;oBACnB,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACvB,CAAC;YACD,KAAK;YACL,SAAS;YACT,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,uCAAuC,CAAC;QAC7D,cAAc,EAAE,QAAQ;QACxB,QAAQ,EAAE,iCAAiC,CAAC,KAAK,CAAC;QAClD,OAAO;QACP,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE;YACpD,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;gBACjC,+BAA+B,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,cAAc,EAAE;gBAChE,WAAW,EAAE,SAAS,CAAC,iBAAiB;oBACtC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAAE;oBACtE,CAAC,CAAC,SAAS;gBACb,WAAW,EAAE,SAAS,CAAC,cAAc;gBACrC,SAAS;aACV,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC;QACvC,CAAC;QACD,SAAS,EAAE,sBAAsB,CAAC,KAAK,CAAC;QACxC,KAAK;QACL,SAAS;QACT,SAAS;KACV,CAAC,CAAC;IACH,OAAO,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC","sourcesContent":["import { persistContainerState } from \"../containerState/containerStatePersistence\";\nimport { getContainerContentsStoreLogLabel } from \"../logLabel\";\nimport { invalidateRemoteContainerWrites } from \"../remoteWrites/remoteWriteGuards\";\nimport type { ContainerWriteGuard } from \"../remoteWrites/writeGeneration\";\nimport type {\n  ContainerContentsStoreSyncAgent,\n  ContainerState,\n} from \"../syncAgent\";\nimport type {\n  ContainerContentsStoreState,\n  EnsureSystemContainerOptions,\n} from \"../types\";\nimport { toContainerNode } from \"../utils\";\nimport { applySystemContainerIcon } from \"./systemContainerIcon\";\nimport { findRootContainerState } from \"./systemContainerLookup\";\nimport { promoteExistingLocalSystemContainerSync } from \"./systemContainerPromotion\";\n\nexport async function updateExistingSystemContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  existing: ContainerState,\n  options: EnsureSystemContainerOptions,\n  isCurrent: ContainerWriteGuard,\n) {\n  if (\"icon\" in options) {\n    const iconApplied = await applySystemContainerIcon({\n      containerState: existing,\n      icon: options.icon,\n      persistIcon: async (containerState, icon, update) => {\n        if (options.deferRemoteBootstrap) {\n          invalidateRemoteContainerWrites(state, [containerState.container.id]);\n        }\n        const result = await persistContainerState(state, containerState, {\n          patch: { icon },\n          updateView: false,\n          localMetadataPatch: { icon },\n          localUpdate: update,\n          isCurrent,\n        });\n        return result.status;\n      },\n      state,\n      syncAgent,\n      isCurrent,\n    });\n    if (!iconApplied || !isCurrent()) {\n      return null;\n    }\n  }\n  const promoted = await promoteExistingLocalSystemContainerSync({\n    containerState: existing,\n    logLabel: getContainerContentsStoreLogLabel(state),\n    options,\n    persistPromotion: async (containerState, promotion) => {\n      if (options.deferRemoteBootstrap) {\n        invalidateRemoteContainerWrites(state, [containerState.container.id]);\n      }\n      const result = await persistContainerState(state, containerState, {\n        saveOptions: promotion.queueCreateIntent\n          ? { createIntent: { parentContainerId: promotion.parentContainerId } }\n          : undefined,\n        localUpdate: promotion.metadataUpdate,\n        isCurrent,\n      });\n      return result.status === \"persisted\";\n    },\n    rootState: findRootContainerState(state),\n    state,\n    syncAgent,\n    isCurrent,\n  });\n  return promoted && isCurrent() ? toContainerNode(existing) : null;\n}\n"]}

package/stores/container-contents/{organizationMetadataSystemContainer.js → systemContainers/organizationMetadataSystemContainer.js}

@@ -1,6 +1,6 @@
-import { deriveOrganizationMetadataContainerSystemSlot, } from "../../internal/validators/containerSystemSlot.js";
+import { deriveOrganizationMetadataContainerSystemSlot, } from "../../../internal/validators/containerSystemSlot.js";
+import { getContainerContentsStoreLogLabel } from "../logLabel.js";
 import { updateExistingSystemContainer } from "./existingSystemContainer.js";
-import { getContainerContentsStoreLogLabel } from "./logLabel.js";
 import { probeExistingSystemContainer } from "./systemContainerHydration.js";
 import { findOrganizationSystemRootState } from "./systemContainerLookup.js";
 /** Metadata is provisioned with reserved grants; generic ensure cannot create it. */

package/stores/container-contents/systemContainers/organizationMetadataSystemContainer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationMetadataSystemContainer.js","sourceRoot":"","sources":["organizationMetadataSystemContainer.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,6CAA6C,GAC9C,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,iCAAiC,EAAE,MAAM,aAAa,CAAC;AAOhE,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE1E,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAAC,KAM/D;IACC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACxD,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;IACzD,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAW,CAAC;IACxD,MAAM,YAAY,GAAG,MAAM,6CAA6C,CAAC;QACvE,cAAc;KACf,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,KAAK,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,KAAK,cAAc,CAAC;IAC5E,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAW,CAAC;IACrE,IAAI,UAAU,KAAK,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAW,CAAC;IAEpE,IAAI,QAAQ,GAAG,+BAA+B,CAC5C,KAAK,EACL,cAAc,EACd,UAAU,CACX,CAAC;IACF,IACE,CAAC,QAAQ;QACT,CAAC,OAAO,CAAC,oBAAoB;QAC7B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QAClC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAC1B,CAAC;QACD,MAAM,4BAA4B,CAAC;YACjC,QAAQ,EAAE,iCAAiC,CAAC,KAAK,CAAC;YAClD,SAAS,EAAE,IAAI;YACf,KAAK;YACL,SAAS;YACT,UAAU;YACV,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAW,CAAC;QACrE,QAAQ,GAAG,+BAA+B,CACxC,KAAK,EACL,cAAc,EACd,UAAU,CACX,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,QAAQ;YACjB,CAAC,CAAC,MAAM,6BAA6B,CACjC,KAAK,EACL,SAAS,EACT,QAAQ,EACR,OAAO,EACP,SAAS,CACV;YACH,CAAC,CAAC,IAAI;KACA,CAAC;AACb,CAAC","sourcesContent":["import {\n  type ContainerSystemSlot,\n  deriveOrganizationMetadataContainerSystemSlot,\n} from \"@tearleads/validators/containerSystemSlot\";\nimport { getContainerContentsStoreLogLabel } from \"../logLabel\";\nimport type { ContainerWriteGuard } from \"../remoteWrites/writeGeneration\";\nimport type { ContainerContentsStoreSyncAgent } from \"../syncAgent\";\nimport type {\n  ContainerContentsStoreState,\n  EnsureSystemContainerOptions,\n} from \"../types\";\nimport { updateExistingSystemContainer } from \"./existingSystemContainer\";\nimport { probeExistingSystemContainer } from \"./systemContainerHydration\";\nimport { findOrganizationSystemRootState } from \"./systemContainerLookup\";\n\n/** Metadata is provisioned with reserved grants; generic ensure cannot create it. */\nexport async function ensureOrganizationMetadataSystemContainer(input: {\n  readonly state: ContainerContentsStoreState;\n  readonly syncAgent: ContainerContentsStoreSyncAgent;\n  readonly systemSlot: ContainerSystemSlot;\n  readonly options: EnsureSystemContainerOptions;\n  readonly isCurrent: ContainerWriteGuard;\n}) {\n  const { state, syncAgent, systemSlot, options } = input;\n  const organizationId = state.runtime.auth.organizationId;\n  if (!organizationId) return { handled: false } as const;\n  const metadataSlot = await deriveOrganizationMetadataContainerSystemSlot({\n    organizationId,\n  });\n  const isCurrent = () =>\n    input.isCurrent() && state.runtime.auth.organizationId === organizationId;\n  if (!isCurrent()) return { handled: true, container: null } as const;\n  if (systemSlot !== metadataSlot) return { handled: false } as const;\n\n  let existing = findOrganizationSystemRootState(\n    state,\n    organizationId,\n    systemSlot,\n  );\n  if (\n    !existing &&\n    !options.deferRemoteBootstrap &&\n    state.runtime.auth.isAuthenticated &&\n    state.runtime.state.online\n  ) {\n    await probeExistingSystemContainer({\n      logLabel: getContainerContentsStoreLogLabel(state),\n      rootState: null,\n      state,\n      syncAgent,\n      systemSlot,\n      independentRoot: true,\n    });\n    if (!isCurrent()) return { handled: true, container: null } as const;\n    existing = findOrganizationSystemRootState(\n      state,\n      organizationId,\n      systemSlot,\n    );\n  }\n  return {\n    handled: true,\n    container: existing\n      ? await updateExistingSystemContainer(\n          state,\n          syncAgent,\n          existing,\n          options,\n          isCurrent,\n        )\n      : null,\n  } as const;\n}\n"]}

package/stores/container-contents/{systemContainerHydration.js → systemContainers/systemContainerHydration.js}

@@ -1,6 +1,6 @@
-import { reportAndRethrowKeyingVerificationError } from "../../data/keyingProjectionVerification/error.js";
-import { errorMessage } from "../../data/shared/errorMessage.js";
-import { isDatabaseUnavailableError } from "../../workflows/container-contents/syncLane.js";
+import { reportAndRethrowKeyingVerificationError } from "../../../data/keyingProjectionVerification/error.js";
+import { errorMessage } from "../../../data/shared/errorMessage.js";
+import { isDatabaseUnavailableError } from "../../../workflows/container-contents/syncLane.js";
 // Best-effort remote probe for an already-existing system container. System
 // containers occupy root lanes, so this probes those lanes (not a
 // full-tree refresh). Device-first: a network failure must not abort

package/stores/container-contents/systemContainers/systemContainerHydration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemContainerHydration.js","sourceRoot":"","sources":["systemContainerHydration.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uCAAuC,EAAE,MAAM,kDAAkD,CAAC;AAC3G,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAO5F,4EAA4E;AAC5E,kEAAkE;AAClE,qEAAqE;AACrE,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAOlD;IACC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,SAAS,CAAC,sBAAsB,CAAC;YAC3C,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,2BAA2B,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,SAAS,EACP,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,eAAe;gBACvC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtC,CAAC,CAAC,CAAC,IAAI,CAAC;SACb,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,uCAAuC,CAC3C,KAAK,EACL,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAC/C;YACE,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,IAAI,IAAI;YAC/C,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,0BAA0B;YACrC,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,cAAc;SAC1D,CACF,CAAC;QACF,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACnC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAC1B,GAAG,KAAK,CAAC,QAAQ,uBAAuB,KAAK,CAAC,UAAU,aAAa,MAAM,GAAG,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import type { ContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport { reportAndRethrowKeyingVerificationError } from \"../../../data/keyingProjectionVerification/error\";\nimport { errorMessage } from \"../../../data/shared/errorMessage\";\nimport { isDatabaseUnavailableError } from \"../../../workflows/container-contents/syncLane\";\nimport type {\n  ContainerContentsStoreSyncAgent,\n  ContainerState,\n} from \"../syncAgent\";\nimport type { ContainerContentsStoreState } from \"../types\";\n\n// Best-effort remote probe for an already-existing system container. System\n// containers occupy root lanes, so this probes those lanes (not a\n// full-tree refresh). Device-first: a network failure must not abort\n// provisioning, or a caller that waits on this container never observes it.\nexport async function probeExistingSystemContainer(input: {\n  readonly logLabel: string;\n  readonly rootState: ContainerState | null;\n  readonly state: ContainerContentsStoreState;\n  readonly syncAgent: ContainerContentsStoreSyncAgent;\n  readonly systemSlot: ContainerSystemSlot;\n  readonly independentRoot?: boolean;\n}): Promise<void> {\n  try {\n    await input.syncAgent.requestRemoteHydration({\n      ...(input.independentRoot ? { followDiscoveredParentLanes: false } : {}),\n      parentIds:\n        input.rootState && !input.independentRoot\n          ? [null, input.rootState.container.id]\n          : [null],\n    });\n  } catch (error) {\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      input.state.runtime.util.reportSecurityIncident,\n      {\n        objectId: input.rootState?.container.id ?? null,\n        objectKind: \"container\",\n        operation: \"container.system.hydrate\",\n        organizationId: input.rootState?.container.organizationId,\n      },\n    );\n    if (!isDatabaseUnavailableError(error)) {\n      const reason = errorMessage(error);\n      input.state.runtime.util.log(\n        `${input.logLabel}: remote probe for \"${input.systemSlot}\" failed (${reason})`,\n      );\n    }\n  }\n}\n"]}

package/stores/container-contents/{systemContainerIcon.js → systemContainers/systemContainerIcon.js}

@@ -1,8 +1,8 @@
-import { encodeVersionVector, exportUpdatesSince } from "../../internal/loro/index.js";
-import { getDefaultContainerName, readContainerMetadataValue, writeContainerMetadataValue, } from "../../data/containers/containerMetadataDocument.js";
-import { createDetachedContainerMetadataState, installDetachedContainerMetadataState, } from "../../workflows/container-contents/metadata/metadataStateIsolation.js";
-import { removeMissingContainerState } from "./missingContainerState.js";
-import { updateContainerContentsSnapshot } from "./state.js";
+import { encodeVersionVector, exportUpdatesSince } from "../../../internal/loro/index.js";
+import { getDefaultContainerName, readContainerMetadataValue, writeContainerMetadataValue, } from "../../../data/containers/containerMetadataDocument.js";
+import { createDetachedContainerMetadataState, installDetachedContainerMetadataState, } from "../../../workflows/container-contents/metadata/metadataStateIsolation.js";
+import { removeMissingContainerState } from "../containerState/missingContainerState.js";
+import { updateContainerContentsSnapshot } from "../state.js";
 function normalizeSystemContainerIcon(icon) {
     return icon?.trim() || null;
 }

package/stores/container-contents/systemContainers/systemContainerIcon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemContainerIcon.js","sourceRoot":"","sources":["systemContainerIcon.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EACL,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,uEAAuE,CAAC;AAE/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AAEtF,OAAO,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAa3D,SAAS,4BAA4B,CACnC,IAA+B;IAE/B,OAAO,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAO9C;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC;IAChE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,oBAAoB,GAAG,MAAM,oCAAoC,CACrE,KAAK,CAAC,cAAc,CACrB,CAAC;IACF,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,QAAQ,GAAG,0BAA0B,CACzC,oBAAoB,CAAC,GAAG,EACxB,uBAAuB,CAAC,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CACjE,CAAC;IACF,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1E,2BAA2B,CAAC,oBAAoB,CAAC,GAAG,EAAE;QACpD,GAAG,QAAQ;QACX,IAAI;KACL,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,kBAAkB,CAC/B,oBAAoB,CAAC,GAAG,EACxB,mBAAmB,CACpB,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,KAAK,CAAC,WAAW,CAC/C,oBAAoB,EACpB,IAAI,EACJ,MAAM,CACP,CAAC;IACF,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,2BAA2B,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,iBAAiB,KAAK,WAAW,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,qCAAqC,CACnC,KAAK,CAAC,cAAc,EACpB,oBAAoB,EACpB,EAAE,8BAA8B,EAAE,IAAI,EAAE,CACzC,CAAC;IACF,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3C,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { encodeVersionVector, exportUpdatesSince } from \"@tearleads/loro\";\nimport {\n  getDefaultContainerName,\n  readContainerMetadataValue,\n  writeContainerMetadataValue,\n} from \"../../../data/containers/containerMetadataDocument\";\nimport {\n  createDetachedContainerMetadataState,\n  installDetachedContainerMetadataState,\n} from \"../../../workflows/container-contents/metadata/metadataStateIsolation\";\nimport type { PersistContainerStateResult } from \"../../../workflows/container-contents/remoteHydration\";\nimport { removeMissingContainerState } from \"../containerState/missingContainerState\";\nimport type { ContainerWriteGuard } from \"../remoteWrites/writeGeneration\";\nimport { updateContainerContentsSnapshot } from \"../state\";\nimport type {\n  ContainerContentsStoreSyncAgent,\n  ContainerState,\n} from \"../syncAgent\";\nimport type { ContainerContentsStoreState } from \"../types\";\n\ntype PersistSystemContainerIcon = (\n  containerState: ContainerState,\n  icon: string | null,\n  update: Uint8Array,\n) => Promise<PersistContainerStateResult[\"status\"]>;\n\nfunction normalizeSystemContainerIcon(\n  icon: string | null | undefined,\n): string | null {\n  return icon?.trim() || null;\n}\n\nexport async function applySystemContainerIcon(input: {\n  readonly containerState: ContainerState;\n  readonly icon: string | null | undefined;\n  readonly persistIcon: PersistSystemContainerIcon;\n  readonly state: ContainerContentsStoreState;\n  readonly syncAgent: ContainerContentsStoreSyncAgent;\n  readonly isCurrent?: ContainerWriteGuard | undefined;\n}): Promise<boolean> {\n  const isCurrent = input.isCurrent ?? (() => true);\n  const icon = normalizeSystemContainerIcon(input.icon);\n  const currentIcon = input.containerState.container.icon ?? null;\n  if (currentIcon === icon) {\n    return true;\n  }\n\n  if (!isCurrent()) return false;\n  const persistenceCandidate = await createDetachedContainerMetadataState(\n    input.containerState,\n  );\n  if (!isCurrent()) return false;\n  const metadata = readContainerMetadataValue(\n    persistenceCandidate.doc,\n    getDefaultContainerName(persistenceCandidate.container.parentId),\n  );\n  const sourceVersionVector = encodeVersionVector(persistenceCandidate.doc);\n  writeContainerMetadataValue(persistenceCandidate.doc, {\n    ...metadata,\n    icon,\n  });\n  const update = exportUpdatesSince(\n    persistenceCandidate.doc,\n    sourceVersionVector,\n  );\n  const persistenceStatus = await input.persistIcon(\n    persistenceCandidate,\n    icon,\n    update,\n  );\n  if (persistenceStatus === \"missing\") {\n    removeMissingContainerState(input.state, input.containerState);\n  }\n  if (persistenceStatus !== \"persisted\" || !isCurrent()) {\n    return false;\n  }\n  installDetachedContainerMetadataState(\n    input.containerState,\n    persistenceCandidate,\n    { preserveConcurrentMetadataEdit: true },\n  );\n  updateContainerContentsSnapshot(input.state);\n  if (input.containerState.record.documentId) {\n    input.syncAgent.scheduleSync();\n  }\n  return true;\n}\n"]}

package/stores/container-contents/systemContainers/systemContainerLookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemContainerLookup.js","sourceRoot":"","sources":["systemContainerLookup.ts"],"names":[],"mappings":"AAIA,SAAS,WAAW,CAAC,cAA8B;IACjD,OAAO,CACL,cAAc,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;QAC1C,CAAC,cAAc,CAAC,SAAS,CAAC,UAAU,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,cAA8B;IACxD,OAAO,CACL,WAAW,CAAC,cAAc,CAAC;QAC3B,CAAC,cAAc,CAAC,SAAS,CAAC,cAAc;QACxC,CAAC,cAAc,CAAC,SAAS,CAAC,kBAAkB,CAC7C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAkC;IAElC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACjE,WAAW,CACZ,CAAC;IACF,MAAM,gBAAgB,GACpB,UAAU,CAAC,IAAI,CACb,CAAC,cAAc,EAAE,EAAE,CACjB,cAAc,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAClE,IAAI,IAAI,CAAC;IACZ,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;IACzD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,gBAAgB,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACnD,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,iBAAiB,GAAG,UAAU,CAAC,MAAM,CACzC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,KAAK,cAAc,CAC7D,CAAC;IACF,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC;IAC9D,MAAM,qBAAqB,GAAG,kBAAkB;QAC9C,CAAC,CAAC,iBAAiB,CAAC,IAAI,CACpB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,kBAAkB,CACrD;QACH,CAAC,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;YAC9B,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACtB,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,qBAAqB,EAAE,CAAC;QAC1B,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED,IAAI,gBAAgB,IAAI,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7D,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,KAAkC,EAClC,UAA+B,EAC/B,SAAgC;IAEhC,MAAM,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/C,MAAM,cAAc,GAClB,SAAS,EAAE,SAAS,CAAC,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;IAC3E,MAAM,cAAc,GAAG,SAAS,EAAE,SAAS,CAAC,EAAE,IAAI,eAAe,CAAC;IAClE,KAAK,MAAM,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,CAAC;QAC3C,IAAI,SAAS,CAAC,UAAU,KAAK,UAAU;YAAE,SAAS;QAClD,IAAI,cAAc,IAAI,SAAS,CAAC,QAAQ,KAAK,cAAc;YAAE,SAAS;QACtE,MAAM,gBAAgB,GACpB,SAAS,IAAI,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;QAC1E,IACE,cAAc;YACd,CAAC,gBAAgB;YACjB,SAAS,CAAC,cAAc,KAAK,cAAc;YAE3C,SAAS;QACX,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,+BAA+B,CAC7C,KAAkC,EAClC,cAAsB,EACtB,UAA+B;IAE/B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,IACE,SAAS,CAAC,QAAQ,KAAK,IAAI;YAC3B,SAAS,CAAC,cAAc,KAAK,cAAc;YAC3C,SAAS,CAAC,UAAU,KAAK,UAAU;YAEnC,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { ContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport type { ContainerState } from \"../syncAgent\";\nimport type { ContainerContentsStoreState } from \"../types\";\n\nfunction isRootState(containerState: ContainerState): boolean {\n  return (\n    containerState.container.parentId === null &&\n    !containerState.container.systemSlot\n  );\n}\n\nfunction isPreAuthRootState(containerState: ContainerState): boolean {\n  return (\n    isRootState(containerState) &&\n    !containerState.container.organizationId &&\n    !containerState.container.metadataDocumentId\n  );\n}\n\nexport function findRootContainerState(\n  state: ContainerContentsStoreState,\n): ContainerState | null {\n  const rootStates = Array.from(state.containersById.values()).filter(\n    isRootState,\n  );\n  const defaultRootState =\n    rootStates.find(\n      (containerState) =>\n        containerState.container.id === state.runtime.state.containerId,\n    ) ?? null;\n  const organizationId = state.runtime.auth.organizationId;\n  if (!organizationId) {\n    return defaultRootState ?? rootStates[0] ?? null;\n  }\n\n  // Remote root roles have been verified during hydration. An acknowledgement\n  // selects the personal merge destination; other organizations may be first\n  // encountered on this device after joining or creating them elsewhere.\n  const organizationRoots = rootStates.filter(\n    (entry) => entry.container.organizationId === organizationId,\n  );\n  const acknowledgedRootId = state.runtime.auth.rootContainerId;\n  const organizationRootState = acknowledgedRootId\n    ? organizationRoots.find(\n        (entry) => entry.container.id === acknowledgedRootId,\n      )\n    : organizationRoots.length === 1\n      ? organizationRoots[0]\n      : null;\n  if (organizationRootState) {\n    return organizationRootState;\n  }\n\n  if (defaultRootState && isPreAuthRootState(defaultRootState)) {\n    return defaultRootState;\n  }\n  return rootStates.find(isPreAuthRootState) ?? null;\n}\n\nexport function findSystemContainerStateForRoot(\n  state: ContainerContentsStoreState,\n  systemSlot: ContainerSystemSlot,\n  rootState: ContainerState | null,\n): ContainerState | null {\n  const { rootContainerId } = state.runtime.auth;\n  const organizationId =\n    rootState?.container.organizationId || state.runtime.auth.organizationId;\n  const expectedRootId = rootState?.container.id ?? rootContainerId;\n  for (const containerState of state.containersById.values()) {\n    const container = containerState.container;\n    if (container.systemSlot !== systemSlot) continue;\n    if (expectedRootId && container.parentId !== expectedRootId) continue;\n    const isLocalCandidate =\n      rootState && isPreAuthRootState(rootState) && !container.organizationId;\n    if (\n      organizationId &&\n      !isLocalCandidate &&\n      container.organizationId !== organizationId\n    )\n      continue;\n    return containerState;\n  }\n  return null;\n}\n\n/** Callers must derive the metadata slot before using this as a destination. */\nexport function findOrganizationSystemRootState(\n  state: ContainerContentsStoreState,\n  organizationId: string,\n  systemSlot: ContainerSystemSlot,\n): ContainerState | null {\n  for (const entry of state.containersById.values()) {\n    const container = entry.container;\n    if (\n      container.parentId === null &&\n      container.organizationId === organizationId &&\n      container.systemSlot === systemSlot\n    )\n      return entry;\n  }\n  return null;\n}\n"]}

package/stores/container-contents/{systemContainerPostCreate.js → systemContainers/systemContainerPostCreate.js}

@@ -1,5 +1,5 @@
-import { isRemoteBackedContainerState } from "./remoteBackedContainerState.js";
-import { updateContainerContentsSnapshot } from "./state.js";
+import { isRemoteBackedContainerState } from "../remoteEvents/remoteBackedContainerState.js";
+import { updateContainerContentsSnapshot } from "../state.js";
 import { findRootContainerState, findSystemContainerStateForRoot, } from "./systemContainerLookup.js";
 function findSystemContainerCreatedAfterRemoteHydrationTarget(state, systemSlot, created) {
     if (isRemoteBackedContainerState(created)) {

package/stores/container-contents/systemContainers/systemContainerPostCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemContainerPostCreate.js","sourceRoot":"","sources":["systemContainerPostCreate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAE1F,OAAO,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAM3D,OAAO,EACL,sBAAsB,EACtB,+BAA+B,GAChC,MAAM,yBAAyB,CAAC;AAEjC,SAAS,oDAAoD,CAC3D,KAAkC,EAClC,UAA+B,EAC/B,OAAuB;IAEvB,IAAI,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,+BAA+B,CAClD,KAAK,EACL,UAAU,EACV,WAAW,CACZ,CAAC;IACF,IACE,CAAC,YAAY;QACb,YAAY,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,EAAE;QAClD,CAAC,4BAA4B,CAAC,YAAY,CAAC,EAC3C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,oCAAoC,CAAC,KAG7C;IACC,MAAM,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IACzC,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxD,IACE,CAAC,WAAW;QACZ,CAAC,4BAA4B,CAAC,WAAW,CAAC;QAC1C,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,KAAK,WAAW,CAAC,SAAS,CAAC,EAAE;YAC7D,cAAc,CAAC,SAAS,CAAC,cAAc;gBACrC,WAAW,CAAC,SAAS,CAAC,cAAc,CAAC,EACzC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,0CAA0C,CAAC,KAKzD;IACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAC9C,MAAM,gBAAgB,GAAG;QACvB,GAAG,cAAc,CAAC,SAAS;QAC3B,cAAc,EAAE,UAAU,CAAC,SAAS,CAAC,cAAc;QACnD,QAAQ,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE;KAClC,CAAC;IACF,MAAM,kBAAkB,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,aAAa,CAC9D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,gBAAgB,EAChB,cAAc,CAAC,MAAM,EACrB;QACE,GAAG,CAAC,OAAO,CAAC,iBAAiB;YAC3B,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,iBAAiB,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE;YAClE,CAAC,CAAC,EAAE,CAAC;QACP,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CACF,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO;IAC/B,cAAc,CAAC,SAAS,GAAG,kBAAkB,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,yCAAyC,CAAC,KAKxD;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO;IAC/B,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,6BAA6B,CACzD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EACjC;QACE,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE;QAC3D,iBAAiB,EAAE,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE;QAClD,oBAAoB,EAAE,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,cAAc;QACjE,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAOpD;IACC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IACxD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,IAAI,YAAY,GAAG,oDAAoD,CACrE,KAAK,EACL,UAAU,EACV,OAAO,CAAC,cAAc,CACvB,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,yCAAyC,CAAC;YAC9C,OAAO;YACP,SAAS;YACT,YAAY;YACZ,KAAK;SACN,CAAC,CAAC;QACH,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,oEAAoE;IACpE,MAAM,UAAU,GAAG,oCAAoC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,0CAA0C,CAAC;YAC/C,OAAO;YACP,SAAS;YACT,UAAU;YACV,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,YAAY,GAAG,oDAAoD,CACjE,KAAK,EACL,UAAU,EACV,OAAO,CAAC,cAAc,CACvB,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,yCAAyC,CAAC;gBAC9C,OAAO;gBACP,SAAS;gBACT,YAAY;gBACZ,KAAK;aACN,CAAC,CAAC;YACH,OAAO,SAAS,EAAE;gBAChB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE;gBACjD,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,KAAK,CAAC,cAAc,CAAC,GAAG,CACtB,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,EACnC,OAAO,CAAC,cAAc,CACvB,CAAC;IACF,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,SAAS,CAAC,YAAY,EAAE,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,KAAK,CAAC,QAAQ,+BAA+B,UAAU,GAAG,CAC9D,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;AACpE,CAAC","sourcesContent":["import type { ContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport type { CreatedChildContainerState } from \"../../../workflows/container-contents/container-state/types\";\nimport { isRemoteBackedContainerState } from \"../remoteEvents/remoteBackedContainerState\";\nimport type { ContainerWriteGuard } from \"../remoteWrites/writeGeneration\";\nimport { updateContainerContentsSnapshot } from \"../state\";\nimport type {\n  ContainerContentsStoreSyncAgent,\n  ContainerState,\n} from \"../syncAgent\";\nimport type { ContainerContentsStoreState } from \"../types\";\nimport {\n  findRootContainerState,\n  findSystemContainerStateForRoot,\n} from \"./systemContainerLookup\";\n\nfunction findSystemContainerCreatedAfterRemoteHydrationTarget(\n  state: ContainerContentsStoreState,\n  systemSlot: ContainerSystemSlot,\n  created: ContainerState,\n): ContainerState | null {\n  if (isRemoteBackedContainerState(created)) {\n    return null;\n  }\n\n  const currentRoot = findRootContainerState(state);\n  const remoteTarget = findSystemContainerStateForRoot(\n    state,\n    systemSlot,\n    currentRoot,\n  );\n  if (\n    !remoteTarget ||\n    remoteTarget.container.id === created.container.id ||\n    !isRemoteBackedContainerState(remoteTarget)\n  ) {\n    return null;\n  }\n\n  return remoteTarget;\n}\n\nfunction findCreatedSystemContainerRebaseRoot(input: {\n  created: CreatedChildContainerState;\n  state: ContainerContentsStoreState;\n}): ContainerState | null {\n  const { containerState } = input.created;\n  const currentRoot = findRootContainerState(input.state);\n  if (\n    !currentRoot ||\n    !isRemoteBackedContainerState(currentRoot) ||\n    (containerState.container.parentId === currentRoot.container.id &&\n      containerState.container.organizationId ===\n        currentRoot.container.organizationId)\n  ) {\n    return null;\n  }\n  return currentRoot;\n}\n\nasync function rebaseCreatedSystemContainerOntoRemoteRoot(input: {\n  created: CreatedChildContainerState;\n  isCurrent: ContainerWriteGuard;\n  remoteRoot: ContainerState;\n  state: ContainerContentsStoreState;\n}): Promise<void> {\n  const { created, remoteRoot, state } = input;\n  const containerState = created.containerState;\n  const rebasedContainer = {\n    ...containerState.container,\n    organizationId: remoteRoot.container.organizationId,\n    parentId: remoteRoot.container.id,\n  };\n  const persistedContainer = await state.persistence.saveContainer(\n    state.runtime.infra.execSql,\n    rebasedContainer,\n    containerState.record,\n    {\n      ...(created.shouldRequestSync\n        ? { createIntent: { parentContainerId: remoteRoot.container.id } }\n        : {}),\n      stillCurrent: input.isCurrent,\n    },\n  );\n  if (!input.isCurrent()) return;\n  containerState.container = persistedContainer;\n}\n\nasync function reconcileCreatedSystemContainerIntoTarget(input: {\n  created: CreatedChildContainerState;\n  isCurrent: ContainerWriteGuard;\n  remoteTarget: ContainerState;\n  state: ContainerContentsStoreState;\n}): Promise<void> {\n  if (!input.isCurrent()) return;\n  await input.state.persistence.reconcileLocalSystemContainer(\n    input.state.runtime.infra.execSql,\n    {\n      localContainerId: input.created.containerState.container.id,\n      remoteContainerId: input.remoteTarget.container.id,\n      remoteOrganizationId: input.remoteTarget.container.organizationId,\n      stillCurrent: input.isCurrent,\n    },\n  );\n}\n\nexport async function finalizeCreatedSystemContainer(input: {\n  created: CreatedChildContainerState;\n  logLabel: string;\n  state: ContainerContentsStoreState;\n  syncAgent: ContainerContentsStoreSyncAgent;\n  systemSlot: ContainerSystemSlot;\n  isCurrent?: ContainerWriteGuard | undefined;\n}): Promise<{ adopted: boolean; containerState: ContainerState } | null> {\n  const { created, state, syncAgent, systemSlot } = input;\n  const isCurrent = input.isCurrent ?? (() => true);\n  // Keep the no-target check and local insertion in one synchronous turn. If\n  // we yielded between them, remote root hydration could delete the captured\n  // parent in that gap and this create would land as an orphan afterward.\n  let remoteTarget = findSystemContainerCreatedAfterRemoteHydrationTarget(\n    state,\n    systemSlot,\n    created.containerState,\n  );\n  if (remoteTarget) {\n    await reconcileCreatedSystemContainerIntoTarget({\n      created,\n      isCurrent,\n      remoteTarget,\n      state,\n    });\n    return isCurrent() ? { adopted: true, containerState: remoteTarget } : null;\n  }\n\n  // The remote root can arrive before its system child. Rebase the persisted\n  // candidate now so that a later same-slot child matches normal reconciliation\n  // instead of leaving the candidate under the deleted pre-auth root.\n  const remoteRoot = findCreatedSystemContainerRebaseRoot({ created, state });\n  if (remoteRoot) {\n    await rebaseCreatedSystemContainerOntoRemoteRoot({\n      created,\n      isCurrent,\n      remoteRoot,\n      state,\n    });\n    if (!isCurrent()) return null;\n    remoteTarget = findSystemContainerCreatedAfterRemoteHydrationTarget(\n      state,\n      systemSlot,\n      created.containerState,\n    );\n    if (remoteTarget) {\n      await reconcileCreatedSystemContainerIntoTarget({\n        created,\n        isCurrent,\n        remoteTarget,\n        state,\n      });\n      return isCurrent()\n        ? { adopted: true, containerState: remoteTarget }\n        : null;\n    }\n  }\n\n  if (!isCurrent()) return null;\n  state.containersById.set(\n    created.containerState.container.id,\n    created.containerState,\n  );\n  updateContainerContentsSnapshot(state);\n  if (created.shouldRequestSync) {\n    syncAgent.scheduleSync();\n  }\n  state.runtime.util.log(\n    `${input.logLabel}: ensured system container \"${systemSlot}\"`,\n  );\n  return { adopted: false, containerState: created.containerState };\n}\n"]}

package/stores/container-contents/{systemContainerPromotion.js → systemContainers/systemContainerPromotion.js}

@@ -1,4 +1,4 @@
-import { base64ToBytes } from "../../internal/encoding/index.js";
+import { base64ToBytes } from "../../../internal/encoding/index.js";
 export function hasAdvancedManagedPrincipalReference(containerState) {
     return (containerState.metadataReferencedPrincipals?.some((principal) => principal.version > 1) ?? false);
 }

package/stores/container-contents/systemContainers/systemContainerPromotion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemContainerPromotion.js","sourceRoot":"","sources":["systemContainerPromotion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAWpD,MAAM,UAAU,oCAAoC,CAClD,cAA8B;IAE9B,OAAO,CACL,cAAc,CAAC,4BAA4B,EAAE,IAAI,CAC/C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,CACrC,IAAI,KAAK,CACX,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,KAgB7D;IACC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACvE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,iBAAiB,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC;IAC5D,IACE,OAAO,CAAC,eAAe;QACvB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QACnC,CAAC,iBAAiB;QAClB,cAAc,CAAC,MAAM,CAAC,UAAU,EAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,OAAO,CAAC,uBAAuB;QAC/B,SAAS;QACT,oCAAoC,CAAC,SAAS,CAAC,EAC/C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,CAAC,oBAAoB,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC/D,KAAK,CAAC,WAAW,CAAC,wBAAwB,CAAC,OAAO,CAAC;QACnD,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;KAC3E,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,sBAAsB,GAAG,oBAAoB,CAAC,IAAI,CACtD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,cAAc,CAAC,SAAS,CAAC,EAAE,CAC/D,CAAC;IACF,MAAM,uBAAuB,GAAG,CAAC,sBAAsB,CAAC;IACxD,MAAM,yBAAyB,GAAG,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC,uBAAuB,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,cAAc,EAAE;QAC7D,GAAG,CAAC,yBAAyB;YAC3B,CAAC,CAAC;gBACE,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC;aACrE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,iBAAiB;QACjB,iBAAiB,EAAE,uBAAuB;KAC3C,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,CAAC,YAAY,EAAE,CAAC;IACzB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,KAAK,CAAC,QAAQ,8BAA8B,cAAc,CAAC,SAAS,CAAC,UAAU,IAAI,cAAc,CAAC,SAAS,CAAC,EAAE,mBAAmB,CACrI,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { base64ToBytes } from \"@tearleads/encoding\";\nimport type { ContainerWriteGuard } from \"../remoteWrites/writeGeneration\";\nimport type {\n  ContainerContentsStoreSyncAgent,\n  ContainerState,\n} from \"../syncAgent\";\nimport type {\n  ContainerContentsStoreState,\n  EnsureSystemContainerOptions,\n} from \"../types\";\n\nexport function hasAdvancedManagedPrincipalReference(\n  containerState: ContainerState,\n): boolean {\n  return (\n    containerState.metadataReferencedPrincipals?.some(\n      (principal) => principal.version > 1,\n    ) ?? false\n  );\n}\n\nexport async function promoteExistingLocalSystemContainerSync(input: {\n  containerState: ContainerState;\n  logLabel: string;\n  options: EnsureSystemContainerOptions;\n  persistPromotion: (\n    containerState: ContainerState,\n    promotion: {\n      metadataUpdate?: Uint8Array | undefined;\n      parentContainerId: string;\n      queueCreateIntent: boolean;\n    },\n  ) => Promise<boolean>;\n  rootState: ContainerState | null;\n  state: ContainerContentsStoreState;\n  syncAgent: ContainerContentsStoreSyncAgent;\n  isCurrent?: ContainerWriteGuard | undefined;\n}): Promise<boolean> {\n  const { containerState, options, rootState, state, syncAgent } = input;\n  const isCurrent = input.isCurrent ?? (() => true);\n  const parentContainerId = containerState.container.parentId;\n  if (\n    options.deferRemoteSync ||\n    !state.runtime.auth.isAuthenticated ||\n    !parentContainerId ||\n    containerState.record.documentId\n  ) {\n    return true;\n  }\n\n  if (\n    options.skipAdvancedManagedRoot &&\n    rootState &&\n    hasAdvancedManagedPrincipalReference(rootState)\n  ) {\n    return true;\n  }\n\n  const execSql = state.runtime.infra.execSql;\n  const [pendingCreateIntents, pendingUpdates] = await Promise.all([\n    state.persistence.listPendingCreateIntents(execSql),\n    state.persistence.listPendingUpdates(execSql, containerState.container.id),\n  ]);\n  if (!isCurrent()) return false;\n  const hasPendingCreateIntent = pendingCreateIntents.some(\n    (intent) => intent.containerId === containerState.container.id,\n  );\n  const shouldQueueCreateIntent = !hasPendingCreateIntent;\n  const shouldQueueMetadataUpdate = pendingUpdates.length === 0;\n  if (!shouldQueueCreateIntent && !shouldQueueMetadataUpdate) {\n    return true;\n  }\n\n  const persisted = await input.persistPromotion(containerState, {\n    ...(shouldQueueMetadataUpdate\n      ? {\n          metadataUpdate: base64ToBytes(containerState.record.metadataUpdates),\n        }\n      : {}),\n    parentContainerId,\n    queueCreateIntent: shouldQueueCreateIntent,\n  });\n  if (!persisted || !isCurrent()) {\n    return false;\n  }\n\n  syncAgent.scheduleSync();\n  state.runtime.util.log(\n    `${input.logLabel}: queued system container \"${containerState.container.systemSlot ?? containerState.container.id}\" for remote sync`,\n  );\n  return true;\n}\n"]}

package/stores/container-contents/types.d.ts

@@ -1,10 +1,10 @@
 import type { ContainerAccessLevel, ReferencedPrincipalHead } from "../../internal/crypto/index.js";
 import type { ContainerSystemSlot } from "../../internal/validators/containerSystemSlot.js";
 import type { ContainerWriterProjectionResponse } from "../../internal/validators/response/index.js";
-import type { PurgeOptions } from "../../workflows/container-contents/container-state/purgeProgress.js";
+import type { PurgeOptions } from "../../workflows/container-contents/container-state/purge/purgeProgress.js";
 import type { ContainerContentsPersistence } from "../../workflows/container-contents/containerPersistence.js";
 import type { ContainerDocumentObjectSyncState } from "../../workflows/container-contents/syncState.js";
-import type { ContainerContentsStoreRuntime, ContainerContentsStoreSyncState, RefreshRootLaneOptions } from "./syncAgentTypes.js";
+import type { ContainerContentsStoreRuntime, ContainerContentsStoreSyncState, RefreshRootLaneOptions } from "./syncAgent/syncAgentTypes.js";
 export type ContainerContentsShareAccessLevel = ContainerAccessLevel;
 export interface ContainerContentsStoreOptions {
     logLabel?: string | undefined;

package/stores/container-contents/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ContainerAccessLevel,\n  ReferencedPrincipalHead,\n} from \"@tearleads/crypto\";\nimport type { ContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport type { PurgeOptions } from \"../../workflows/container-contents/container-state/purgeProgress\";\nimport type { ContainerContentsPersistence } from \"../../workflows/container-contents/containerPersistence\";\nimport type { ContainerDocumentObjectSyncState } from \"../../workflows/container-contents/syncState\";\nimport type {\n  ContainerContentsStoreRuntime,\n  ContainerContentsStoreSyncState,\n  RefreshRootLaneOptions,\n} from \"./syncAgentTypes\";\n\n// Reuse the canonical access-level union from the crypto layer (the same source\n// `ContainerShareAccessLevel` chains to) rather than re-spelling the literals,\n// so the two can't drift.\nexport type ContainerContentsShareAccessLevel = ContainerAccessLevel;\n\nexport interface ContainerContentsStoreOptions {\n  logLabel?: string | undefined;\n  persistence?: ContainerContentsPersistence | undefined;\n}\n\nexport interface ContainerNode {\n  systemSlot?: ContainerSystemSlot | null;\n  createdAt?: string | null;\n  effectiveAccessLevel?: ContainerAccessLevel | undefined;\n  id: string;\n  icon?: string | null;\n  metadataDocumentId?: string | null;\n  /** False while a discovered remote folder has no local metadata content. */\n  metadataReady?: boolean;\n  organizationId: string;\n  name: string;\n  parentId: string | null;\n  syncState: ContainerDocumentObjectSyncState;\n  kind: \"container\";\n  updatedAt?: string | null;\n}\n\n// The store surface exposed through context: the snapshot fields plus the\n// store's mutation/refresh methods, spelled as a Pick so the two can't drift.\nexport type ContainerContentsContextValue = ContainerContentsSnapshot &\n  Pick<\n    ContainerContentsStore,\n    | \"createChild\"\n    | \"deleteContainer\"\n    | \"emptyTrash\"\n    | \"ensureSystemContainer\"\n    | \"moveContainer\"\n    | \"purgeContainer\"\n    | \"refresh\"\n    | \"refreshRootLane\"\n    | \"renameContainer\"\n    | \"requestSync\"\n    | \"setContainerIcon\"\n    | \"shareWithGroup\"\n    | \"shareWithUser\"\n  >;\n\nexport interface ContainerContentsSnapshot {\n  nodes: ReadonlyArray<ContainerNode>;\n  ready: boolean;\n}\n\nexport type ContainerGroupRewrapPreparation =\n  | {\n      status: \"not-granted\";\n    }\n  | {\n      isCurrent(\n        expectedGroupHead: ReferencedPrincipalHead,\n        expectedContainerId: string,\n        expectedOrganizationId: string,\n      ): Promise<boolean>;\n      rewrap(): Promise<boolean>;\n      status: \"prepared\";\n    };\n\n/**\n * Shared per-scope container tree and mutation store.\n *\n * Ordinary metadata/topology writes (`createChild`, `moveContainer`,\n * `renameContainer`, and `setContainerIcon`) commit to local persistence and\n * update subscribers before their queued remote sync converges. Destructive\n * and access-control operations retain their explicit remote-authority gates.\n */\nexport interface ContainerContentsStore {\n  createChild: (\n    parentId: string,\n    name: string,\n  ) => Promise<ContainerNode | null>;\n  deleteContainer: (containerId: string) => Promise<boolean>;\n  ensureSystemContainer: (\n    systemSlot: ContainerSystemSlot,\n    name: string,\n    options?: EnsureSystemContainerOptions | undefined,\n  ) => Promise<ContainerNode | null>;\n  moveContainer: (\n    containerId: string,\n    parentId: string,\n  ) => Promise<ContainerNode | null>;\n  purgeContainer: (\n    containerId: string,\n    options?: PurgeOptions,\n  ) => Promise<boolean>;\n  emptyTrash: (\n    trashContainerId: string,\n    options?: PurgeOptions,\n  ) => Promise<boolean>;\n  // `options.requireExistingGrant` gates the preparation check only. The\n  // prepared `rewrap` is always grant-preserving: it re-wraps a signed grant\n  // and never mints one, so it carries no chosen group name, and it throws\n  // (rather than healing through a policy mutation) when the container\n  // manifest grants the group but the verified policy has no matching grant.\n  prepareGroupRewrap: (\n    containerId: string,\n    groupId: string,\n    accessLevel: ContainerContentsShareAccessLevel,\n    options?: { requireExistingGrant?: boolean } | undefined,\n  ) => Promise<ContainerGroupRewrapPreparation | null>;\n  refresh: () => Promise<boolean>;\n  refreshRootLane: (options?: RefreshRootLaneOptions) => Promise<boolean>;\n  // Re-read root-lane containers from local SQLite into the snapshot with NO\n  // server round-trip. Surfaces a just-persisted container — e.g. the Trash bin\n  // that registration/org-creation provisioned server-side and wrote to SQLite\n  // via persistRegistrationBootstrap — instantly, instead of waiting for the\n  // remote root-lane pull. Idempotent with a later remote pull: the merge is\n  // keyed by container id, so the pull reconciles in place rather than duplicating.\n  refreshLocalContainers: () => Promise<void>;\n  requestSync: () => void;\n  renameContainer: (\n    containerId: string,\n    name: string,\n  ) => Promise<ContainerNode | null>;\n  setContainerIcon: (\n    containerId: string,\n    icon: string | null,\n  ) => Promise<ContainerNode | null>;\n  shareWithGroup: (\n    containerId: string,\n    groupId: string,\n    accessLevel: ContainerContentsShareAccessLevel,\n    options: {\n      /**\n       * The display name the group was chosen by. Required: the share fails\n       * closed if the verified group policy commits a different name. Signed\n       * names are unique within an organization by construction (enforced at\n       * group creation), so the target's own name identifies it.\n       */\n      expectedGroupName: string;\n    },\n  ) => Promise<boolean>;\n  shareWithUser: (containerId: string, userId: string) => Promise<boolean>;\n  getCachedContainerWriterProjection: (\n    containerId: string,\n  ) => ContainerWriterProjectionResponse | null;\n  getSnapshot: () => ContainerContentsSnapshot;\n  subscribe: (listener: () => void) => () => void;\n  updateRuntime: (runtime: ContainerContentsStoreRuntime) => void;\n}\n\nexport interface EnsureSystemContainerOptions {\n  icon?: string | null | undefined;\n  skipAdvancedManagedRoot?: boolean | undefined;\n  // For local-first bootstrap paths where slow remote I/O must not block the\n  // caller from creating the deterministic local system container.\n  deferRemoteBootstrap?: boolean | undefined;\n  // Create the deterministic local system container without queuing the remote\n  // create. A later ensureSystemContainer call without this flag promotes the\n  // local slot into the sync queue.\n  deferRemoteSync?: boolean | undefined;\n}\n\nexport interface ContainerContentsStoreState\n  extends ContainerContentsStoreSyncState {\n  listeners: Set<() => void>;\n  snapshot: ContainerContentsSnapshot;\n  writeChain: Promise<ContainerNode | null>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ContainerAccessLevel,\n  ReferencedPrincipalHead,\n} from \"@tearleads/crypto\";\nimport type { ContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport type { PurgeOptions } from \"../../workflows/container-contents/container-state/purge/purgeProgress\";\nimport type { ContainerContentsPersistence } from \"../../workflows/container-contents/containerPersistence\";\nimport type { ContainerDocumentObjectSyncState } from \"../../workflows/container-contents/syncState\";\nimport type {\n  ContainerContentsStoreRuntime,\n  ContainerContentsStoreSyncState,\n  RefreshRootLaneOptions,\n} from \"./syncAgent/syncAgentTypes\";\n\n// Reuse the canonical access-level union from the crypto layer (the same source\n// `ContainerShareAccessLevel` chains to) rather than re-spelling the literals,\n// so the two can't drift.\nexport type ContainerContentsShareAccessLevel = ContainerAccessLevel;\n\nexport interface ContainerContentsStoreOptions {\n  logLabel?: string | undefined;\n  persistence?: ContainerContentsPersistence | undefined;\n}\n\nexport interface ContainerNode {\n  systemSlot?: ContainerSystemSlot | null;\n  createdAt?: string | null;\n  effectiveAccessLevel?: ContainerAccessLevel | undefined;\n  id: string;\n  icon?: string | null;\n  metadataDocumentId?: string | null;\n  /** False while a discovered remote folder has no local metadata content. */\n  metadataReady?: boolean;\n  organizationId: string;\n  name: string;\n  parentId: string | null;\n  syncState: ContainerDocumentObjectSyncState;\n  kind: \"container\";\n  updatedAt?: string | null;\n}\n\n// The store surface exposed through context: the snapshot fields plus the\n// store's mutation/refresh methods, spelled as a Pick so the two can't drift.\nexport type ContainerContentsContextValue = ContainerContentsSnapshot &\n  Pick<\n    ContainerContentsStore,\n    | \"createChild\"\n    | \"deleteContainer\"\n    | \"emptyTrash\"\n    | \"ensureSystemContainer\"\n    | \"moveContainer\"\n    | \"purgeContainer\"\n    | \"refresh\"\n    | \"refreshRootLane\"\n    | \"renameContainer\"\n    | \"requestSync\"\n    | \"setContainerIcon\"\n    | \"shareWithGroup\"\n    | \"shareWithUser\"\n  >;\n\nexport interface ContainerContentsSnapshot {\n  nodes: ReadonlyArray<ContainerNode>;\n  ready: boolean;\n}\n\nexport type ContainerGroupRewrapPreparation =\n  | {\n      status: \"not-granted\";\n    }\n  | {\n      isCurrent(\n        expectedGroupHead: ReferencedPrincipalHead,\n        expectedContainerId: string,\n        expectedOrganizationId: string,\n      ): Promise<boolean>;\n      rewrap(): Promise<boolean>;\n      status: \"prepared\";\n    };\n\n/**\n * Shared per-scope container tree and mutation store.\n *\n * Ordinary metadata/topology writes (`createChild`, `moveContainer`,\n * `renameContainer`, and `setContainerIcon`) commit to local persistence and\n * update subscribers before their queued remote sync converges. Destructive\n * and access-control operations retain their explicit remote-authority gates.\n */\nexport interface ContainerContentsStore {\n  createChild: (\n    parentId: string,\n    name: string,\n  ) => Promise<ContainerNode | null>;\n  deleteContainer: (containerId: string) => Promise<boolean>;\n  ensureSystemContainer: (\n    systemSlot: ContainerSystemSlot,\n    name: string,\n    options?: EnsureSystemContainerOptions | undefined,\n  ) => Promise<ContainerNode | null>;\n  moveContainer: (\n    containerId: string,\n    parentId: string,\n  ) => Promise<ContainerNode | null>;\n  purgeContainer: (\n    containerId: string,\n    options?: PurgeOptions,\n  ) => Promise<boolean>;\n  emptyTrash: (\n    trashContainerId: string,\n    options?: PurgeOptions,\n  ) => Promise<boolean>;\n  // `options.requireExistingGrant` gates the preparation check only. The\n  // prepared `rewrap` is always grant-preserving: it re-wraps a signed grant\n  // and never mints one, so it carries no chosen group name, and it throws\n  // (rather than healing through a policy mutation) when the container\n  // manifest grants the group but the verified policy has no matching grant.\n  prepareGroupRewrap: (\n    containerId: string,\n    groupId: string,\n    accessLevel: ContainerContentsShareAccessLevel,\n    options?: { requireExistingGrant?: boolean } | undefined,\n  ) => Promise<ContainerGroupRewrapPreparation | null>;\n  refresh: () => Promise<boolean>;\n  refreshRootLane: (options?: RefreshRootLaneOptions) => Promise<boolean>;\n  // Re-read root-lane containers from local SQLite into the snapshot with NO\n  // server round-trip. Surfaces a just-persisted container — e.g. the Trash bin\n  // that registration/org-creation provisioned server-side and wrote to SQLite\n  // via persistRegistrationBootstrap — instantly, instead of waiting for the\n  // remote root-lane pull. Idempotent with a later remote pull: the merge is\n  // keyed by container id, so the pull reconciles in place rather than duplicating.\n  refreshLocalContainers: () => Promise<void>;\n  requestSync: () => void;\n  renameContainer: (\n    containerId: string,\n    name: string,\n  ) => Promise<ContainerNode | null>;\n  setContainerIcon: (\n    containerId: string,\n    icon: string | null,\n  ) => Promise<ContainerNode | null>;\n  shareWithGroup: (\n    containerId: string,\n    groupId: string,\n    accessLevel: ContainerContentsShareAccessLevel,\n    options: {\n      /**\n       * The display name the group was chosen by. Required: the share fails\n       * closed if the verified group policy commits a different name. Signed\n       * names are unique within an organization by construction (enforced at\n       * group creation), so the target's own name identifies it.\n       */\n      expectedGroupName: string;\n    },\n  ) => Promise<boolean>;\n  shareWithUser: (containerId: string, userId: string) => Promise<boolean>;\n  getCachedContainerWriterProjection: (\n    containerId: string,\n  ) => ContainerWriterProjectionResponse | null;\n  getSnapshot: () => ContainerContentsSnapshot;\n  subscribe: (listener: () => void) => () => void;\n  updateRuntime: (runtime: ContainerContentsStoreRuntime) => void;\n}\n\nexport interface EnsureSystemContainerOptions {\n  icon?: string | null | undefined;\n  skipAdvancedManagedRoot?: boolean | undefined;\n  // For local-first bootstrap paths where slow remote I/O must not block the\n  // caller from creating the deterministic local system container.\n  deferRemoteBootstrap?: boolean | undefined;\n  // Create the deterministic local system container without queuing the remote\n  // create. A later ensureSystemContainer call without this flag promotes the\n  // local slot into the sync queue.\n  deferRemoteSync?: boolean | undefined;\n}\n\nexport interface ContainerContentsStoreState\n  extends ContainerContentsStoreSyncState {\n  listeners: Set<() => void>;\n  snapshot: ContainerContentsSnapshot;\n  writeChain: Promise<ContainerNode | null>;\n}\n"]}

package/stores/documents/documentStore/{attachmentSourceUpload.js → attachmentUpload/attachmentSourceUpload.js}

@@ -1,7 +1,7 @@
-import { inspectBlobSource, } from "../../../data/documents/blob/shared/blobSourceSnapshot.js";
-import { DEFAULT_BLOB_CHUNK_SIZE_BYTES } from "../../../data/documents/blob/shared/crypto.js";
-import { getDocumentAttachments } from "../../../data/documents/documentContent.js";
-import { deletePendingAttachment } from "./attachmentPersistence.js";
+import { inspectBlobSource, } from "../../../../data/documents/blob/shared/blobSourceSnapshot.js";
+import { DEFAULT_BLOB_CHUNK_SIZE_BYTES } from "../../../../data/documents/blob/shared/crypto.js";
+import { getDocumentAttachments } from "../../../../data/documents/documentContent.js";
+import { deletePendingAttachment } from "../attachments/attachmentPersistence.js";
 import { resolveAttachmentUploadResume, } from "./attachmentUploadResume.js";
 export function pendingAttachmentMatchesIntent(input) {
     return (input.state.doc !== null &&

package/stores/documents/documentStore/attachmentUpload/attachmentSourceUpload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachmentSourceUpload.js","sourceRoot":"","sources":["attachmentSourceUpload.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,iBAAiB,GAClB,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAGpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAG/E,OAAO,EAEL,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAQlC,MAAM,UAAU,8BAA8B,CAC5C,KAAyB;IAEzB,OAAO,CACL,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI;QACxB,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAC1C,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,iBAAiB,CAAC,MAAM;YAC9C,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,iBAAiB,CAAC,aAAa,CAC/D,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAAyB;IAEzB,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,GAAG,KAAK,CAAC;IACjE,0EAA0E;IAC1E,kEAAkE;IAClE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,0CAA0C,iBAAiB,CAAC,MAAM,+EAA+E,CAClJ,CAAC;IACF,MAAM,uBAAuB,CAC3B,KAAK,EACL,iBAAiB,CAAC,MAAM,EACxB,iBAAiB,CAAC,UAAU,EAC5B,oBAAoB,CACrB,CAAC;IACF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAEC;IAKD,IAAI,SAAS,GACX,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,IAAI,6BAA6B,CAAC;IAE5E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACxD,IAAI,KAAK,CAAC,iBAAiB,CAAC,aAAa,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,iBAAiB,EACvB,QAAQ,CAAC,MAAM,EACf,KAAK,CAAC,oBAAoB,CAC3B,CAAC;QACF,MAAM,iBAAiB,GACrB,MAAM,CAAC,SAAS,EAAE,QAAQ,IAAI,6BAA6B,CAAC;QAC9D,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACxD,IAAI,iBAAiB,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;QACD,SAAS,GAAG,iBAAiB,CAAC;IAChC,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;AAC7E,CAAC","sourcesContent":["import {\n  type BlobSourceSnapshot,\n  inspectBlobSource,\n} from \"../../../../data/documents/blob/shared/blobSourceSnapshot\";\nimport { DEFAULT_BLOB_CHUNK_SIZE_BYTES } from \"../../../../data/documents/blob/shared/crypto\";\nimport { getDocumentAttachments } from \"../../../../data/documents/documentContent\";\nimport type { BlobByteSource } from \"../../../../workflows/blobs\";\nimport type { PendingAttachmentRecord } from \"../../../../workflows/documents\";\nimport { deletePendingAttachment } from \"../attachments/attachmentPersistence\";\nimport type { DocumentStoreState } from \"../state\";\nimport type { DocumentStoreSyncGeneration } from \"../sync/syncGeneration\";\nimport {\n  type AttachmentUploadResume,\n  resolveAttachmentUploadResume,\n} from \"./attachmentUploadResume\";\n\ninterface PendingSourceInput {\n  attachmentGeneration: DocumentStoreSyncGeneration;\n  pendingAttachment: PendingAttachmentRecord;\n  state: DocumentStoreState;\n}\n\nexport function pendingAttachmentMatchesIntent(\n  input: PendingSourceInput,\n): boolean {\n  return (\n    input.state.doc !== null &&\n    getDocumentAttachments(input.state.doc).some(\n      (item) =>\n        item.slotId === input.pendingAttachment.slotId &&\n        item.contentSha256 === input.pendingAttachment.contentSha256,\n    )\n  );\n}\n\nexport async function dropUnavailablePendingAttachment(\n  input: PendingSourceInput,\n): Promise<\"dropped\"> {\n  const { state, pendingAttachment, attachmentGeneration } = input;\n  // Unusable bytes or superseded intent cannot be retried. Delete only this\n  // storage identity so a concurrently queued replacement survives.\n  state.runtime.util.log(\n    `Documents: dropping pending attachment ${pendingAttachment.slotId}; its bytes are unavailable or changed, or its content intent was superseded.`,\n  );\n  await deletePendingAttachment(\n    state,\n    pendingAttachment.slotId,\n    pendingAttachment.storageKey,\n    attachmentGeneration,\n  );\n  return \"dropped\";\n}\n\nexport async function resolveAttachmentSourceUpload(\n  input: PendingSourceInput & {\n    source: BlobByteSource;\n  },\n): Promise<{\n  readonly resume: AttachmentUploadResume;\n  readonly snapshot: BlobSourceSnapshot;\n} | null> {\n  let chunkSize =\n    input.pendingAttachment.upload?.partSize ?? DEFAULT_BLOB_CHUNK_SIZE_BYTES;\n\n  for (let attempt = 0; attempt < 3; attempt += 1) {\n    const snapshot = await inspectBlobSource(input.source, chunkSize);\n    if (!pendingAttachmentMatchesIntent(input)) return null;\n    if (input.pendingAttachment.contentSha256 !== snapshot.sha256) {\n      return null;\n    }\n    const resume = await resolveAttachmentUploadResume(\n      input.state,\n      input.pendingAttachment,\n      snapshot.sha256,\n      input.attachmentGeneration,\n    );\n    const resolvedChunkSize =\n      resume.multipart?.partSize ?? DEFAULT_BLOB_CHUNK_SIZE_BYTES;\n    if (!pendingAttachmentMatchesIntent(input)) return null;\n    if (resolvedChunkSize === snapshot.chunkSize) {\n      return { resume, snapshot };\n    }\n    chunkSize = resolvedChunkSize;\n  }\n\n  throw new Error(\"Blob source changed while preparing its upload identity\");\n}\n"]}

package/stores/documents/documentStore/{attachmentStaging.js → attachmentUpload/attachmentStaging.js}

@@ -1,8 +1,8 @@
-import { createBlobByteSource } from "../../../workflows/blobs/index.js";
-import { runSerializedDocumentBlobMutation, runSerializedSqlMutation, } from "../../../workflows/documents/index.js";
-import { assignLocalAttachmentSlots, upsertPendingAttachments, } from "./attachmentPersistence.js";
-import { setReadySnapshot } from "./state.js";
-import { isDocumentStoreSyncGenerationCurrent, } from "./syncGeneration.js";
+import { createBlobByteSource } from "../../../../workflows/blobs/index.js";
+import { runSerializedDocumentBlobMutation, runSerializedSqlMutation, } from "../../../../workflows/documents/index.js";
+import { assignLocalAttachmentSlots, upsertPendingAttachments, } from "../attachments/attachmentPersistence.js";
+import { setReadySnapshot } from "../state.js";
+import { isDocumentStoreSyncGenerationCurrent, } from "../sync/syncGeneration.js";
 function localAttachmentRecords(localId, pendingAttachments) {
     return pendingAttachments.map((pendingAttachment) => ({
         blobId: null,

package/stores/documents/documentStore/attachmentUpload/attachmentStaging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachmentStaging.js","sourceRoot":"","sources":["attachmentStaging.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAIL,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAA2B,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EAEL,oCAAoC,GACrC,MAAM,wBAAwB,CAAC;AAShC,SAAS,sBAAsB,CAC7B,OAAe,EACf,kBAA0D;IAE1D,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,iBAAiB,CAAC,UAAU;QACxC,aAAa,EAAE,iBAAiB,CAAC,aAAa;QAC9C,UAAU,EAAE,IAAI;QAChB,OAAO;QACP,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;QACpC,MAAM,EAAE,iBAAiB,CAAC,MAAM;QAChC,UAAU,EAAE,iBAAiB,CAAC,UAAU;KACzC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAG1C;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,UAAU,CAC7C,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAC1C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CACjE,CACF,CAAC;IACF,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAC9C,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CACzC,CAAC,MAAM,CAAC;IACT,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,kCAAkC,kBAAkB,+BAA+B,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC1H,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,KAI7D;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC;IACrC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,KAAK,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,iCAAiC,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE;gBACtE,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAC/C,OAAO,EACP,CAAC,aAAa,EAAE,EAAE,CAChB,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,YAAY,CACxC,aAAa,EACb,UAAU,CACX,CACJ,CAAC;gBACF,IAAI,CAAC,UAAU;oBACb,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,iEAAiE;YACjE,kBAAkB,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,IAAI,kBAAkB,GAAG,CAAC;QACxB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,kCAAkC,kBAAkB,+BAA+B,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC1H,CAAC;AACN,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,KAAmC;IAEnC,KAAK,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5E,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,CACvD,iBAAiB,CAAC,UAAU,EAC5B,oBAAoB,CAAC,UAAU,CAAC,KAAK,CAAC,CACvC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAI5C;IACC,MAAM,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9D,0BAA0B,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACpD,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,gBAAgB,CACd,KAAK,EACL,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,QAAQ,CAAC,OAAO,EACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,EACnB,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAmC;IAEnC,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,gBAAgB,GAAG,sBAAsB,CAC7C,KAAK,CAAC,OAAO,EACb,kBAAkB,CACnB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAEzC,IAAI,CAAC,oCAAoC,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,2BAA2B,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,2BAA2B,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { createBlobByteSource } from \"../../../../workflows/blobs\";\nimport {\n  type AttachmentStagingRows,\n  type LocalAttachmentRecord,\n  type PendingAttachmentRecord,\n  runSerializedDocumentBlobMutation,\n  runSerializedSqlMutation,\n} from \"../../../../workflows/documents\";\nimport type { DocumentAttachmentUpload } from \"../../types\";\nimport {\n  assignLocalAttachmentSlots,\n  upsertPendingAttachments,\n} from \"../attachments/attachmentPersistence\";\nimport { type DocumentStoreState, setReadySnapshot } from \"../state\";\nimport {\n  type DocumentStoreSyncGeneration,\n  isDocumentStoreSyncGenerationCurrent,\n} from \"../sync/syncGeneration\";\n\ninterface StagePendingAttachmentsInput {\n  files: ReadonlyArray<DocumentAttachmentUpload>;\n  generation: DocumentStoreSyncGeneration;\n  pendingAttachments: PendingAttachmentRecord[];\n  state: DocumentStoreState;\n}\n\nfunction localAttachmentRecords(\n  localId: string,\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>,\n): LocalAttachmentRecord[] {\n  return pendingAttachments.map((pendingAttachment) => ({\n    blobId: null,\n    byteLength: pendingAttachment.byteLength,\n    contentSha256: pendingAttachment.contentSha256,\n    detachedAt: null,\n    localId,\n    mimeType: pendingAttachment.mimeType,\n    slotId: pendingAttachment.slotId,\n    storageKey: pendingAttachment.storageKey,\n  }));\n}\n\nasync function deleteStagedAttachmentBytes(input: {\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>;\n  state: DocumentStoreState;\n}) {\n  const { state } = input;\n  const cleanupResults = await Promise.allSettled(\n    input.pendingAttachments.map((attachment) =>\n      state.runtime.infra.blobStore.deleteBytes(attachment.storageKey),\n    ),\n  );\n  const failedCleanupCount = cleanupResults.filter(\n    (result) => result.status === \"rejected\",\n  ).length;\n  if (failedCleanupCount > 0) {\n    state.runtime.util.log(\n      `Documents: failed to roll back ${failedCleanupCount} staged attachment operation${failedCleanupCount === 1 ? \"\" : \"s\"}.`,\n    );\n  }\n}\n\n/**\n * Roll back staged bytes that no committed row references. Like orphan\n * reclaim, check every held and pending reference under the key's lock: an\n * overlapping reset can leave a committed key referenced only by an upload.\n */\nexport async function deleteUnreferencedStagedAttachmentBytes(input: {\n  generation: DocumentStoreSyncGeneration;\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>;\n  state: DocumentStoreState;\n}): Promise<void> {\n  const { execSql } = input.generation;\n  const { state } = input;\n  let failedCleanupCount = 0;\n  for (const { storageKey } of input.pendingAttachments) {\n    try {\n      await runSerializedDocumentBlobMutation(execSql, storageKey, async () => {\n        const referenced = await runSerializedSqlMutation(\n          execSql,\n          (lockedExecSql) =>\n            state.persistence.orphanBlobs.isReferenced(\n              lockedExecSql,\n              storageKey,\n            ),\n        );\n        if (!referenced)\n          await state.runtime.infra.blobStore.deleteBytes(storageKey);\n      });\n    } catch {\n      // A failed probe cannot prove that the atomic mutation rolled back, so\n      // the bytes stay; a failed delete leaves them for a later sweep.\n      failedCleanupCount += 1;\n    }\n  }\n  if (failedCleanupCount > 0)\n    state.runtime.util.log(\n      `Documents: failed to roll back ${failedCleanupCount} staged attachment operation${failedCleanupCount === 1 ? \"\" : \"s\"}.`,\n    );\n}\n\nasync function writePendingAttachmentBytes(\n  input: StagePendingAttachmentsInput,\n): Promise<void> {\n  for (const [index, pendingAttachment] of input.pendingAttachments.entries()) {\n    const sourceFile = input.files[index];\n    if (!sourceFile) continue;\n    await input.state.runtime.infra.blobStore.writeByteSource(\n      pendingAttachment.storageKey,\n      createBlobByteSource(sourceFile.bytes),\n    );\n  }\n}\n\nexport function installPendingAttachmentRows(input: {\n  localAttachments: ReadonlyArray<LocalAttachmentRecord>;\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>;\n  state: DocumentStoreState;\n}): void {\n  const { localAttachments, pendingAttachments, state } = input;\n  assignLocalAttachmentSlots(state, localAttachments);\n  upsertPendingAttachments(state, pendingAttachments);\n  if (state.doc) {\n    setReadySnapshot(\n      state,\n      state.doc,\n      state.snapshot.syncing,\n      state.snapshot.text,\n      state.snapshot.structuredFields,\n    );\n  }\n}\n\nexport async function stagePendingAttachments(\n  input: StagePendingAttachmentsInput,\n): Promise<AttachmentStagingRows | null> {\n  const { pendingAttachments, state } = input;\n  const localAttachments = localAttachmentRecords(\n    state.localId,\n    pendingAttachments,\n  );\n\n  try {\n    await writePendingAttachmentBytes(input);\n\n    if (!isDocumentStoreSyncGenerationCurrent(state, input.generation)) {\n      await deleteStagedAttachmentBytes({ pendingAttachments, state });\n      return null;\n    }\n    return { localAttachments, pendingAttachments };\n  } catch (error) {\n    await deleteStagedAttachmentBytes({ pendingAttachments, state });\n    throw error;\n  }\n}\n"]}

package/stores/documents/documentStore/{attachmentUploadAttempt.js → attachmentUpload/attachmentUploadAttempt.js}

@@ -1,5 +1,5 @@
-import { reportAndRethrowKeyingVerificationError } from "../../../data/keyingProjectionVerification/error.js";
-import { uploadPreparedDocumentAttachment as uploadDocumentAttachment } from "../../../workflows/blobs/upload/index.js";
+import { reportAndRethrowKeyingVerificationError } from "../../../../data/keyingProjectionVerification/error.js";
+import { uploadPreparedDocumentAttachment as uploadDocumentAttachment } from "../../../../workflows/blobs/upload/index.js";
 export async function uploadAttachmentWithWriterProjectionRetry(input) {
     let remoteSyncBlocked = false;
     let checkedOrganizationId;

package/stores/documents/documentStore/attachmentUpload/attachmentUploadAttempt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachmentUploadAttempt.js","sourceRoot":"","sources":["attachmentUploadAttempt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uCAAuC,EAAE,MAAM,qDAAqD,CAAC;AAC9G,OAAO,EAAE,gCAAgC,IAAI,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAGlH,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAAC,KAI/D;IAKC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,qBAAyC,CAAC;IAC9C,IAAI,sBAES,CAAC;IACd,MAAM,eAAe,GAAG,KAAK,EAAE,KAG9B,EAAE,EAAE;QACH,sBAAsB,GAAG,KAAK,CAAC;QAC/B,MAAM,KAAK,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,MAAM,eAAe,GAAG;QACtB,GAAG,KAAK,CAAC,eAAe;QACxB,mBAAmB,EAAE,CAAC,cAAsB,EAAE,EAAE;YAC9C,qBAAqB,GAAG,cAAc,CAAC;YACvC,iBAAiB;gBACf,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC;YAC1E,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,eAAe;KAChB,CAAC;IACF,IAAI,WAAoB,CAAC;IACzB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,QAAQ,GAAG,MAAM,2BAA2B,CAAC;QAC/C,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO;QACjE,KAAK,EAAE;YACL,GAAG,eAAe;YAClB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,SAAS;SACtD;QACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,WAAW,GAAG,IAAI,CAAC;YACnB,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;QACD,sBAAsB,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB;KACxE,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACrD,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,6CAA6C;QAC7C,iBAAiB;YACf,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,qBAAqB,CAAC;gBACrE,KAAK,CAAC;IACV,CAAC;IACD,IACE,CAAC,QAAQ;QACT,KAAK,CAAC,gBAAgB;QACtB,CAAC,iBAAiB;QAClB,CAAC,WAAW,EACZ,CAAC;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,+CAA+C;QAC/C,KAAK,CAAC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;QACpC,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,gBAAgB,GAAG,sBAAsB;YAC7C,CAAC,CAAC;gBACE,GAAG,eAAe;gBAClB,SAAS,EAAE;oBACT,GAAG,CAAC,eAAe,CAAC,SAAS,IAAI,EAAE,CAAC;oBACpC,QAAQ,EAAE,sBAAsB,CAAC,QAAQ;oBACzC,aAAa,EAAE,sBAAsB,CAAC,OAAO;iBAC9C;aACF;YACH,CAAC,CAAC,eAAe,CAAC;QACpB,QAAQ,GAAG,MAAM,2BAA2B,CAAC;YAC3C,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO;YACjE,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,WAAW,GAAG,KAAK,CAAC;YACtB,CAAC;YACD,sBAAsB,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB;SACxE,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACrD,iBAAiB;gBACf,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,qBAAqB,CAAC;oBACrE,KAAK,CAAC;QACV,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,CAAC;QACtB,WAAW,GAAG,SAAS,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAK1C;IACC,IAAI,CAAC;QACH,OAAO,MAAM,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,uCAAuC,CAC3C,KAAK,EACL,KAAK,CAAC,sBAAsB,EAC5B;YACE,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,4BAA4B;SACxC,CACF,CAAC;QACF,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { reportAndRethrowKeyingVerificationError } from \"../../../../data/keyingProjectionVerification/error\";\nimport { uploadPreparedDocumentAttachment as uploadDocumentAttachment } from \"../../../../workflows/blobs/upload\";\nimport type { DocumentStoreState } from \"../state\";\n\nexport async function uploadAttachmentWithWriterProjectionRetry(input: {\n  baseUploadInput: Parameters<typeof uploadDocumentAttachment>[0];\n  state: DocumentStoreState;\n  writerProjection: DocumentStoreState[\"writerProjection\"];\n}): Promise<{\n  error: unknown;\n  remoteSyncBlocked: boolean;\n  uploaded: Awaited<ReturnType<typeof uploadDocumentAttachment>>;\n}> {\n  let remoteSyncBlocked = false;\n  let checkedOrganizationId: string | undefined;\n  let resolvedMultipartStage:\n    | { readonly partSize: number; readonly stageId: string }\n    | undefined;\n  const onStageResolved = async (stage: {\n    readonly partSize: number;\n    readonly stageId: string;\n  }) => {\n    resolvedMultipartStage = stage;\n    await input.baseUploadInput.onStageResolved?.(stage);\n  };\n  const baseUploadInput = {\n    ...input.baseUploadInput,\n    isRemoteSyncBlocked: (organizationId: string) => {\n      checkedOrganizationId = organizationId;\n      remoteSyncBlocked =\n        input.state.runtime.util.isRemoteSyncBlocked?.(organizationId) ?? false;\n      return remoteSyncBlocked;\n    },\n    onStageResolved,\n  };\n  let uploadError: unknown;\n  let uploadThrew = false;\n  let uploaded = await tryUploadDocumentAttachment({\n    documentId: input.state.record?.documentId ?? input.state.localId,\n    input: {\n      ...baseUploadInput,\n      writerProjection: input.writerProjection ?? undefined,\n    },\n    onError: (error) => {\n      uploadThrew = true;\n      uploadError = error;\n    },\n    reportSecurityIncident: input.state.runtime.util.reportSecurityIncident,\n  });\n  if (!uploaded && checkedOrganizationId !== undefined) {\n    // The request itself may have produced the first 402 after the workflow's\n    // preflight check. Re-read the same verified manifest org so that response\n    // is treated as a billing pause even when there was no cached projection\n    // available to trigger the retry path below.\n    remoteSyncBlocked ||=\n      input.state.runtime.util.isRemoteSyncBlocked?.(checkedOrganizationId) ??\n      false;\n  }\n  if (\n    !uploaded &&\n    input.writerProjection &&\n    !remoteSyncBlocked &&\n    !uploadThrew\n  ) {\n    // A stale cached writer projection may have caused an ambiguous null. Retry\n    // once with a fresh projection, but do not immediately replay a concrete\n    // thrown failure or an expected billing pause.\n    input.state.writerProjection = null;\n    // Binding can return null after multipart staging succeeded. Carry that\n    // resolved stage into the retry so it is resumed instead of orphaned.\n    const retryUploadInput = resolvedMultipartStage\n      ? {\n          ...baseUploadInput,\n          multipart: {\n            ...(baseUploadInput.multipart ?? {}),\n            partSize: resolvedMultipartStage.partSize,\n            resumeStageId: resolvedMultipartStage.stageId,\n          },\n        }\n      : baseUploadInput;\n    uploaded = await tryUploadDocumentAttachment({\n      documentId: input.state.record?.documentId ?? input.state.localId,\n      input: retryUploadInput,\n      onError: (error) => {\n        uploadError = error;\n      },\n      reportSecurityIncident: input.state.runtime.util.reportSecurityIncident,\n    });\n    if (!uploaded && checkedOrganizationId !== undefined) {\n      remoteSyncBlocked ||=\n        input.state.runtime.util.isRemoteSyncBlocked?.(checkedOrganizationId) ??\n        false;\n    }\n  }\n\n  if (remoteSyncBlocked) {\n    uploadError = undefined;\n  }\n  return { error: uploadError, remoteSyncBlocked, uploaded };\n}\n\nasync function tryUploadDocumentAttachment(input: {\n  documentId: string;\n  input: Parameters<typeof uploadDocumentAttachment>[0];\n  onError: (error: unknown) => void;\n  reportSecurityIncident: DocumentStoreState[\"runtime\"][\"util\"][\"reportSecurityIncident\"];\n}): ReturnType<typeof uploadDocumentAttachment> {\n  try {\n    return await uploadDocumentAttachment(input.input);\n  } catch (error) {\n    await reportAndRethrowKeyingVerificationError(\n      error,\n      input.reportSecurityIncident,\n      {\n        objectId: input.documentId,\n        objectKind: \"document\",\n        operation: \"document.attachment.upload\",\n      },\n    );\n    input.onError(error);\n    return null;\n  }\n}\n"]}

package/stores/documents/documentStore/{attachmentUploadLane.js → attachmentUpload/attachmentUploadLane.js}

@@ -1,4 +1,4 @@
-import { beginDomainSyncUploadLane, } from "../../../workflows/sync/index.js";
+import { beginDomainSyncUploadLane, } from "../../../../workflows/sync/index.js";
 function getAttachmentUploadLaneLabel(name) {
     return name ? `Upload ${name}` : "Attachment upload";
 }

package/stores/documents/documentStore/attachmentUpload/attachmentUploadLane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachmentUploadLane.js","sourceRoot":"","sources":["attachmentUploadLane.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,yBAAyB,GAE1B,MAAM,4BAA4B,CAAC;AASpC,SAAS,4BAA4B,CAAC,IAA+B;IACnE,OAAO,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC;AACvD,CAAC;AAED,SAAS,gCAAgC,CACvC,iBAA0C;IAE1C,OAAO,iBAAiB,CAAC,IAAI;QAC3B,CAAC,CAAC,GAAG,iBAAiB,CAAC,IAAI,UAAU,iBAAiB,CAAC,MAAM,GAAG;QAChE,CAAC,CAAC,QAAQ,iBAAiB,CAAC,MAAM,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,iBAA0C,EAC1C,KAAc;IAEd,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,gCAAgC,gCAAgC,CAAC,iBAAiB,CAAC,GAAG,CACvF,CAAC;IACF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAE5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAAC,KAIlD;IACC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,OAAO,GAAuC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAEtE,MAAM,UAAU,GAAG,GAAmB,EAAE;QACtC,OAAO,CAAC,OAAO,KAAK,yBAAyB,CAC3C,WAAW,EACX,eAAe,MAAM,EAAE,EACvB;YACE,cAAc,EAAE,iBAAiB,CAAC,UAAU;YAC5C,KAAK,EAAE,4BAA4B,CAAC,iBAAiB,CAAC,IAAI,CAAC;SAC5D,CACF,CAAC;QACF,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC,CAAC;IAEF,OAAO;QACL,QAAQ;YACN,oEAAoE;YACpE,8DAA8D;YAC9D,UAAU,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,KAAc;YACjB,UAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,aAAa,CAAC,KAAc;YAC1B,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,mBAAmB,CAAC,QAAQ;YAC1B,UAAU,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { DomainScope } from \"../../../../data/shared/domainScope\";\nimport type { MultipartUploadProgressListener } from \"../../../../workflows/blobs\";\nimport type { PendingAttachmentRecord } from \"../../../../workflows/documents\";\nimport {\n  beginDomainSyncUploadLane,\n  type UploadSyncLane,\n} from \"../../../../workflows/sync\";\n\nexport interface AttachmentUploadLaneReporter {\n  complete: () => void;\n  fail: (error: unknown) => void;\n  failIfStarted: (error: unknown) => void;\n  onMultipartProgress: MultipartUploadProgressListener;\n}\n\nfunction getAttachmentUploadLaneLabel(name: string | null | undefined): string {\n  return name ? `Upload ${name}` : \"Attachment upload\";\n}\n\nfunction getAttachmentUploadFailureTarget(\n  pendingAttachment: PendingAttachmentRecord,\n): string {\n  return pendingAttachment.name\n    ? `${pendingAttachment.name} (slot ${pendingAttachment.slotId})`\n    : `slot ${pendingAttachment.slotId}`;\n}\n\nexport function createAttachmentUploadFailedError(\n  pendingAttachment: PendingAttachmentRecord,\n  cause: unknown,\n): Error {\n  const error = new Error(\n    `Attachment upload failed for ${getAttachmentUploadFailureTarget(pendingAttachment)}.`,\n  );\n  if (cause !== undefined) Reflect.set(error, \"cause\", cause);\n\n  return error;\n}\n\n/**\n * Surfaces attachment uploads as observational lanes. The persisted blob id is\n * the lane identity: slot ids repeat across documents, while a retry must keep\n * updating the same row. Lane creation stays lazy until progress, failure, or\n * completion so a billing block before any upload work does not add noise.\n */\nexport function createAttachmentUploadLaneReporter(input: {\n  blobId: string;\n  domainScope: DomainScope;\n  pendingAttachment: PendingAttachmentRecord;\n}): AttachmentUploadLaneReporter {\n  const { blobId, domainScope, pendingAttachment } = input;\n  const laneRef: { current: UploadSyncLane | null } = { current: null };\n\n  const ensureLane = (): UploadSyncLane => {\n    laneRef.current ??= beginDomainSyncUploadLane(\n      domainScope,\n      `blob-upload:${blobId}`,\n      {\n        blobStorageKey: pendingAttachment.storageKey,\n        label: getAttachmentUploadLaneLabel(pendingAttachment.name),\n      },\n    );\n    return laneRef.current;\n  };\n\n  return {\n    complete() {\n      // Completion must create/re-begin the lane too: a resumed stage can\n      // already be complete before it emits any per-part callbacks.\n      ensureLane().complete();\n    },\n    fail(error: unknown) {\n      ensureLane().fail(error);\n    },\n    failIfStarted(error: unknown) {\n      laneRef.current?.fail(error);\n    },\n    onMultipartProgress(progress) {\n      ensureLane().reportProgress(progress);\n    },\n  };\n}\n"]}

package/stores/documents/documentStore/{attachmentUploadResume.js → attachmentUpload/attachmentUploadResume.js}

@@ -1,7 +1,7 @@
-import { createAesGcmIv } from "../../../internal/crypto/index.js";
-import { base64ToBytes, bytesToBase64 } from "../../../internal/encoding/index.js";
-import { savePendingAttachmentUpload } from "./attachmentPersistence.js";
-import { isDocumentStoreSyncGenerationCurrent, } from "./syncGeneration.js";
+import { createAesGcmIv } from "../../../../internal/crypto/index.js";
+import { base64ToBytes, bytesToBase64 } from "../../../../internal/encoding/index.js";
+import { savePendingAttachmentUpload } from "../attachments/attachmentPersistence.js";
+import { isDocumentStoreSyncGenerationCurrent, } from "../sync/syncGeneration.js";
 function createPendingUploadIdentity(plaintextSha256) {
     // Generated once and persisted before the first upload attempt. The source
     // digest derives an envelope IV from this seed, then each chunk derives its