@tearleads/client-sdk 0.1.63 → 0.1.65

package/stores/documents/documentStore.js

@@ -1,215 +0,0 @@
-import { DEFAULT_DOCUMENT_KIND } from "../../data/documents/documentConstants.js";
-import { createDocumentProjectionUserKeyResolver, defaultDocumentsPersistence, didDocumentProjectionKeyRuntimeChange, didRegainSyncPrerequisites, requestDocumentSyncLaneAndWait, } from "../../workflows/documents/index.js";
-import { removeAttachmentFromDocumentStore } from "./documentStore/attachmentRemoval.js";
-import { attachFilesToDocumentStore, replaceAttachmentInDocumentStore, } from "./documentStore/attachments.js";
-import { discardDocumentStoreLocalState } from "./documentStore/discard.js";
-import { ensureDocumentStoreInitialized, ensureDocumentStoreReady, relinkDocumentStore, } from "./documentStore/initialization.js";
-import { registerInternalDocumentRelink } from "./documentStore/internalRelink.js";
-import { setDocumentStructuredFields, setDocumentText, } from "./documentStore/mutations.js";
-import { logRevalidationScheduled } from "./documentStore/remoteRevalidationTelemetry.js";
-import { assertDocumentStoreCanRotateContentKey } from "./documentStore/rotation.js";
-import { addRowToDocumentStore, removeRowFromDocumentStore, updateRowInDocumentStore, } from "./documentStore/rows.js";
-import { createDocumentStoreState, refreshAttachabilitySnapshot, resetDocumentStore, subscribeToDocumentStore, } from "./documentStore/state.js";
-import { registerDocumentStoreSyncLane } from "./documentStore/sync.js";
-import { allowDocumentStoreRemoteSync, captureDocumentStoreRemoteSyncRequestGeneration, captureDocumentStoreSyncLaneGeneration, didDocumentStoreRemoteSyncRequestComplete, hasPendingIndependentDocumentStoreRemoteSync, invalidateDocumentStoreRemoteSync, invalidateDocumentStoreSyncLane, isDocumentStoreRemoteSyncBlocked, isDocumentStoreRemoteSyncRequestGenerationCurrent, markDocumentStoreRemoteSyncPending, registerDocumentStoreRemoteSyncWaiter, } from "./documentStore/syncGeneration.js";
-import { handleDocumentRemoteEvents } from "./documentStore/syncRemoteSignals.js";
-import { createDocumentStoreFacade, emitPersistedDocument, getOrCreateDocumentStoreRegistry, registerDocumentStore, registerDocumentStoreIdentity, requestDocumentStoreSync, resolveDocumentStoreKey, } from "./registry.js";
-export { discardRegisteredDocumentLocalState, requestDomainDocumentSync, subscribeToPersistedDocuments, } from "./registry.js";
-function refreshDocumentStoreSyncLane(state, force = false) {
-    if (!force && state.syncLane && !state.syncLane.isDisposed?.()) {
-        return;
-    }
-    if (state.syncLane) {
-        invalidateDocumentStoreSyncLane(state);
-    }
-    let syncLaneGeneration = null;
-    state.syncLane = registerDocumentStoreSyncLane(state, () => syncLaneGeneration);
-    syncLaneGeneration = captureDocumentStoreSyncLaneGeneration(state);
-}
-function updateDocumentStoreRuntime(state, nextRuntime, scheduleSync) {
-    const previousRuntime = state.runtime;
-    const serverEventsReconnected = (nextRuntime.state.serverEventsConnectionGeneration ?? 0) >
-        (previousRuntime.state.serverEventsConnectionGeneration ?? 0);
-    const domainScopeChanged = previousRuntime.state.domainScope !== nextRuntime.state.domainScope;
-    const projectionKeyRuntimeChanged = didDocumentProjectionKeyRuntimeChange(previousRuntime, nextRuntime);
-    if (projectionKeyRuntimeChanged) {
-        state.resolveProjectionUserKey =
-            createDocumentProjectionUserKeyResolver(nextRuntime);
-        state.writerProjection = null;
-    }
-    state.runtime = nextRuntime;
-    refreshDocumentStoreSyncLane(state, domainScopeChanged);
-    if (domainScopeChanged) {
-        state.locallyAcceptedUpdateIds = new Set();
-        state.remoteUpdatePending = false;
-        state.writerProjection = null;
-    }
-    if (nextRuntime.infra.dbStatus !== "ready") {
-        if (state.snapshot.ready || state.initialized || state.initializePromise) {
-            resetDocumentStore(state);
-        }
-        state.lastEventCount = nextRuntime.state.events.length;
-        return;
-    }
-    refreshAttachabilitySnapshot(state);
-    ensureDocumentStoreInitialized(state, scheduleSync);
-    handleDocumentRemoteEvents(state, scheduleSync);
-    if (state.snapshot.ready) {
-        if (serverEventsReconnected) {
-            // The invalidation stream is lossy while disconnected. Once the server
-            // has acknowledged this socket's authoritative interest declaration,
-            // every already-open remote document needs one HTTP probe to cover peer
-            // writes made during the gap. This also closes iOS background/resume reconnects where the
-            // native network source remained online throughout.
-            requestRemoteDocumentStoreSync(state, scheduleSync);
-            logRevalidationScheduled(state.runtime, "reconnect");
-        }
-        else if (didRegainSyncPrerequisites(previousRuntime, state.runtime)) {
-            scheduleSync();
-        }
-    }
-}
-function requestRemoteDocumentStoreSync(state, scheduleSync, owner = "independent") {
-    allowDocumentStoreRemoteSync(state);
-    const signalSequence = markDocumentStoreRemoteSyncPending(state, owner);
-    scheduleSync();
-    return signalSequence;
-}
-function requestOrdinaryDocumentStoreSync(state, scheduleSync) {
-    // A normal UI reopen is a fresh owner for remote-only work. It may recover
-    // a probe that an earlier, now-unmounted owner aborted.
-    if (isDocumentStoreRemoteSyncBlocked(state)) {
-        requestRemoteDocumentStoreSync(state, scheduleSync);
-        return;
-    }
-    scheduleSync();
-}
-function requestRemoteDocumentStoreSyncAndWait(state, scheduleSync, signal) {
-    let requestGeneration = null;
-    let requestedSignalSequence = 0;
-    let releaseWaiter = null;
-    const releaseRemoteSyncWaiter = (invalidate) => {
-        const releasedLastWaiter = releaseWaiter?.() ?? false;
-        if (invalidate &&
-            releasedLastWaiter &&
-            requestGeneration !== null &&
-            isDocumentStoreRemoteSyncRequestGenerationCurrent(state, requestGeneration) &&
-            !hasPendingIndependentDocumentStoreRemoteSync(state)) {
-            invalidateDocumentStoreRemoteSync(state);
-        }
-    };
-    // A coordinator can be disposed and recreated while this same-scope store
-    // remains registered. Refresh its handle before requesting work.
-    refreshDocumentStoreSyncLane(state);
-    return requestDocumentSyncLaneAndWait({
-        didCompleteRequest: () => requestGeneration !== null &&
-            didDocumentStoreRemoteSyncRequestComplete(state, requestGeneration, requestedSignalSequence),
-        domainScope: state.runtime.state.domainScope,
-        localId: state.localId,
-        request: () => {
-            requestGeneration =
-                captureDocumentStoreRemoteSyncRequestGeneration(state);
-            releaseWaiter = registerDocumentStoreRemoteSyncWaiter(state, requestGeneration);
-            requestedSignalSequence = requestRemoteDocumentStoreSync(state, scheduleSync, "waiter");
-        },
-        onInvalidated: () => releaseRemoteSyncWaiter(true),
-        signal,
-    }).then((completed) => {
-        releaseRemoteSyncWaiter(!completed);
-        return completed;
-    }, (error) => {
-        releaseRemoteSyncWaiter(true);
-        throw error;
-    });
-}
-async function assertBackingDocumentStoreCanRotate(state, scheduleSync) {
-    if (!(await ensureDocumentStoreReady(state, scheduleSync)) || !state.doc) {
-        throw new Error("Document must finish loading before its content key can rotate");
-    }
-    return assertDocumentStoreCanRotateContentKey(state);
-}
-async function discardBackingDocumentStoreLocalState(state, scheduleSync, expectedDocumentId) {
-    try {
-        return await discardDocumentStoreLocalState(state, expectedDocumentId);
-    }
-    finally {
-        // Restart hydration whenever the attempt reset the store. This runs outside
-        // its identity-chained task because initialization also chains writes.
-        ensureDocumentStoreInitialized(state, scheduleSync);
-        scheduleSync();
-    }
-}
-function createLiveSyncLaneRequest(state) {
-    return (request) => {
-        refreshDocumentStoreSyncLane(state);
-        return request();
-    };
-}
-function registerBackingStoreInternalRelink(input) {
-    registerInternalDocumentRelink(input.store, (relinkInput, commitSideEffect) => input.withLiveSyncLane(() => relinkDocumentStore(input.state, relinkInput, input.scheduleSync, commitSideEffect)));
-    return input.store;
-}
-function createBackingStoreContext(localId, runtime, persistence, documentId, text, documentKind, options) {
-    const state = createDocumentStoreState(localId, runtime, persistence, {
-        emitPersistedDocument,
-        registerDocumentIdentity: registerDocumentStoreIdentity,
-    }, documentId, text, documentKind, (options.remoteSyncMode ?? "startup") === "startup");
-    if (options.deferInitialUpdate)
-        state.deferInitialUpdate = true;
-    refreshDocumentStoreSyncLane(state);
-    const scheduleSync = () => requestDocumentStoreSync(state);
-    return {
-        scheduleSync,
-        state,
-        withLiveSyncLane: createLiveSyncLaneRequest(state),
-    };
-}
-function createBackingDocumentStore(localId, initialRuntime, persistence = defaultDocumentsPersistence, initialDocumentId = null, initialText = "", initialDocumentKind = DEFAULT_DOCUMENT_KIND, openOptions = {}) {
-    const { scheduleSync, state, withLiveSyncLane } = createBackingStoreContext(localId, initialRuntime, persistence, initialDocumentId, initialText, initialDocumentKind, openOptions);
-    const store = {
-        addRow: (fields) => withLiveSyncLane(() => addRowToDocumentStore(state, scheduleSync, fields)),
-        assertCanRotateContentKey: () => withLiveSyncLane(() => assertBackingDocumentStoreCanRotate(state, scheduleSync)),
-        attachFiles: (files) => withLiveSyncLane(() => attachFilesToDocumentStore(state, scheduleSync, files)),
-        discardLocalState: (expectedDocumentId) => withLiveSyncLane(() => discardBackingDocumentStoreLocalState(state, scheduleSync, expectedDocumentId)),
-        ensureInitialized: () => withLiveSyncLane(() => ensureDocumentStoreReady(state, scheduleSync)),
-        getSnapshot: () => state.snapshot,
-        removeAttachment: (slotId) => withLiveSyncLane(() => removeAttachmentFromDocumentStore(state, scheduleSync, slotId)),
-        removeRow: (id) => withLiveSyncLane(() => removeRowFromDocumentStore(state, scheduleSync, id)),
-        replaceAttachment: (slotId, file) => withLiveSyncLane(() => replaceAttachmentInDocumentStore(state, scheduleSync, slotId, file)),
-        requestRemoteSync: () => withLiveSyncLane(() => requestRemoteDocumentStoreSync(state, scheduleSync)),
-        requestRemoteSyncAndWait: (signal) => requestRemoteDocumentStoreSyncAndWait(state, scheduleSync, signal),
-        requestSync: () => withLiveSyncLane(() => requestOrdinaryDocumentStoreSync(state, scheduleSync)),
-        relink: (input) => withLiveSyncLane(() => relinkDocumentStore(state, input, scheduleSync)),
-        setStructuredFields: (kind, patch, options) => withLiveSyncLane(() => setDocumentStructuredFields(state, scheduleSync, kind, patch, options)),
-        setText: (value) => withLiveSyncLane(() => setDocumentText(state, scheduleSync, value)),
-        subscribe: (listener) => subscribeToDocumentStore(state, listener),
-        updateRowFields: (id, patch) => withLiveSyncLane(() => updateRowInDocumentStore(state, scheduleSync, id, patch)),
-        updateRuntime: (runtime) => updateDocumentStoreRuntime(state, runtime, scheduleSync),
-    };
-    return registerBackingStoreInternalRelink({
-        scheduleSync,
-        state,
-        store,
-        withLiveSyncLane,
-    });
-}
-export function createDocumentStore(localId, initialRuntime, persistence = defaultDocumentsPersistence, initialDocumentId = null, initialText = "", initialDocumentKind = DEFAULT_DOCUMENT_KIND, options = {}) {
-    return createDocumentStoreFacade(createBackingDocumentStore(localId, initialRuntime, persistence, initialDocumentId, initialText, initialDocumentKind, options));
-}
-export function getOrCreateDocumentStore(domainScope, localId, runtime, initialDocumentId = null, initialText = "", initialDocumentKind = DEFAULT_DOCUMENT_KIND, options = {}) {
-    const registry = getOrCreateDocumentStoreRegistry(domainScope);
-    const existingStore = registry.storesByKey.get(resolveDocumentStoreKey(registry, localId, initialDocumentId));
-    if (existingStore) {
-        registerDocumentStore(domainScope, localId, existingStore, initialDocumentId);
-        return existingStore;
-    }
-    const nextStore = createDocumentStore(localId, runtime, defaultDocumentsPersistence, initialDocumentId, initialText, initialDocumentKind, options);
-    registerDocumentStore(domainScope, localId, nextStore, initialDocumentId);
-    return nextStore;
-}
-export function openDocumentStore(domainScope, localId, runtime, initialDocumentId = null, initialText = "", initialDocumentKind = DEFAULT_DOCUMENT_KIND, options = {}) {
-    const store = getOrCreateDocumentStore(domainScope, localId, runtime, initialDocumentId, initialText, initialDocumentKind, options);
-    store.updateRuntime(runtime);
-    return store;
-}
-//# sourceMappingURL=documentStore.js.map

package/stores/documents/documentStore.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"documentStore.js","sourceRoot":"","sources":["documentStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAG/E,OAAO,EACL,uCAAuC,EAEvC,2BAA2B,EAC3B,qCAAqC,EACrC,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAC;AACtF,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EACL,2BAA2B,EAC3B,eAAe,GAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EAAE,sCAAsC,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,wBAAwB,EAExB,4BAA4B,EAC5B,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EACL,4BAA4B,EAC5B,+CAA+C,EAC/C,sCAAsC,EAGtC,yCAAyC,EACzC,4CAA4C,EAC5C,iCAAiC,EACjC,+BAA+B,EAC/B,gCAAgC,EAChC,iDAAiD,EACjD,kCAAkC,EAClC,qCAAqC,GACtC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,gCAAgC,EAChC,qBAAqB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AASpB,OAAO,EACL,mCAAmC,EACnC,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,YAAY,CAAC;AAEpB,SAAS,4BAA4B,CACnC,KAAyB,EACzB,KAAK,GAAG,KAAK;IAEb,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC;QAC/D,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,kBAAkB,GAA2C,IAAI,CAAC;IACtE,KAAK,CAAC,QAAQ,GAAG,6BAA6B,CAC5C,KAAK,EACL,GAAG,EAAE,CAAC,kBAAkB,CACzB,CAAC;IACF,kBAAkB,GAAG,sCAAsC,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAyB,EACzB,WAA6B,EAC7B,YAAwB;IAExB,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC;IACtC,MAAM,uBAAuB,GAC3B,CAAC,WAAW,CAAC,KAAK,CAAC,gCAAgC,IAAI,CAAC,CAAC;QACzD,CAAC,eAAe,CAAC,KAAK,CAAC,gCAAgC,IAAI,CAAC,CAAC,CAAC;IAChE,MAAM,kBAAkB,GACtB,eAAe,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;IACtE,MAAM,2BAA2B,GAAG,qCAAqC,CACvE,eAAe,EACf,WAAW,CACZ,CAAC;IACF,IAAI,2BAA2B,EAAE,CAAC;QAChC,KAAK,CAAC,wBAAwB;YAC5B,uCAAuC,CAAC,WAAW,CAAC,CAAC;QACvD,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAChC,CAAC;IACD,KAAK,CAAC,OAAO,GAAG,WAAW,CAAC;IAC5B,4BAA4B,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACxD,IAAI,kBAAkB,EAAE,CAAC;QACvB,KAAK,CAAC,wBAAwB,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3C,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC;QAClC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAChC,CAAC;IAED,IAAI,WAAW,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YACzE,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,cAAc,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QACvD,OAAO;IACT,CAAC;IAED,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACpC,8BAA8B,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACpD,0BAA0B,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAEhD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,uBAAuB,EAAE,CAAC;YAC5B,uEAAuE;YACvE,qEAAqE;YACrE,wEAAwE;YACxE,0FAA0F;YAC1F,oDAAoD;YACpD,8BAA8B,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YACpD,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,0BAA0B,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,YAAY,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CACrC,KAAyB,EACzB,YAAwB,EACxB,QAAkC,aAAa;IAE/C,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,cAAc,GAAG,kCAAkC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxE,YAAY,EAAE,CAAC;IACf,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,gCAAgC,CACvC,KAAyB,EACzB,YAAwB;IAExB,2EAA2E;IAC3E,wDAAwD;IACxD,IAAI,gCAAgC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,8BAA8B,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IACD,YAAY,EAAE,CAAC;AACjB,CAAC;AAED,SAAS,qCAAqC,CAC5C,KAAyB,EACzB,YAAwB,EACxB,MAAoB;IAEpB,IAAI,iBAAiB,GAAoD,IAAI,CAAC;IAC9E,IAAI,uBAAuB,GAAG,CAAC,CAAC;IAChC,IAAI,aAAa,GAA2B,IAAI,CAAC;IACjD,MAAM,uBAAuB,GAAG,CAAC,UAAmB,EAAE,EAAE;QACtD,MAAM,kBAAkB,GAAG,aAAa,EAAE,EAAE,IAAI,KAAK,CAAC;QACtD,IACE,UAAU;YACV,kBAAkB;YAClB,iBAAiB,KAAK,IAAI;YAC1B,iDAAiD,CAC/C,KAAK,EACL,iBAAiB,CAClB;YACD,CAAC,4CAA4C,CAAC,KAAK,CAAC,EACpD,CAAC;YACD,iCAAiC,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC;IACF,0EAA0E;IAC1E,iEAAiE;IACjE,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,8BAA8B,CAAC;QACpC,kBAAkB,EAAE,GAAG,EAAE,CACvB,iBAAiB,KAAK,IAAI;YAC1B,yCAAyC,CACvC,KAAK,EACL,iBAAiB,EACjB,uBAAuB,CACxB;QACH,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW;QAC5C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,GAAG,EAAE;YACZ,iBAAiB;gBACf,+CAA+C,CAAC,KAAK,CAAC,CAAC;YACzD,aAAa,GAAG,qCAAqC,CACnD,KAAK,EACL,iBAAiB,CAClB,CAAC;YACF,uBAAuB,GAAG,8BAA8B,CACtD,KAAK,EACL,YAAY,EACZ,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,GAAG,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAClD,MAAM;KACP,CAAC,CAAC,IAAI,CACL,CAAC,SAAS,EAAE,EAAE;QACZ,uBAAuB,CAAC,CAAC,SAAS,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;QACjB,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mCAAmC,CAChD,KAAyB,EACzB,YAAwB;IAExB,IAAI,CAAC,CAAC,MAAM,wBAAwB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,OAAO,sCAAsC,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,qCAAqC,CAClD,KAAyB,EACzB,YAAwB,EACxB,kBAA0B;IAE1B,IAAI,CAAC;QACH,OAAO,MAAM,8BAA8B,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACzE,CAAC;YAAS,CAAC;QACT,4EAA4E;QAC5E,uEAAuE;QACvE,8BAA8B,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACpD,YAAY,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAyB;IAC1D,OAAO,CAAS,OAAqB,EAAU,EAAE;QAC/C,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CAAC,KAK3C;IACC,8BAA8B,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,gBAAgB,EAAE,EAAE,CAC5E,KAAK,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAC1B,mBAAmB,CACjB,KAAK,CAAC,KAAK,EACX,WAAW,EACX,KAAK,CAAC,YAAY,EAClB,gBAAgB,CACjB,CACF,CACF,CAAC;IACF,OAAO,KAAK,CAAC,KAAK,CAAC;AACrB,CAAC;AAED,SAAS,yBAAyB,CAChC,OAAe,EACf,OAAyB,EACzB,WAAiC,EACjC,UAAyB,EACzB,IAAY,EACZ,YAAgC,EAChC,OAAiC;IAEjC,MAAM,KAAK,GAAG,wBAAwB,CACpC,OAAO,EACP,OAAO,EACP,WAAW,EACX;QACE,qBAAqB;QACrB,wBAAwB,EAAE,6BAA6B;KACxD,EACD,UAAU,EACV,IAAI,EACJ,YAAY,EACZ,CAAC,OAAO,CAAC,cAAc,IAAI,SAAS,CAAC,KAAK,SAAS,CACpD,CAAC;IACF,IAAI,OAAO,CAAC,kBAAkB;QAAE,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAChE,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC3D,OAAO;QACL,YAAY;QACZ,KAAK;QACL,gBAAgB,EAAE,yBAAyB,CAAC,KAAK,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,OAAe,EACf,cAAgC,EAChC,cAAoC,2BAA2B,EAC/D,oBAAmC,IAAI,EACvC,WAAW,GAAG,EAAE,EAChB,sBAA0C,qBAAqB,EAC/D,cAAwC,EAAE;IAE1C,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,yBAAyB,CACzE,OAAO,EACP,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,mBAAmB,EACnB,WAAW,CACZ,CAAC;IAEF,MAAM,KAAK,GAAkB;QAC3B,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CACjB,gBAAgB,CAAC,GAAG,EAAE,CACpB,qBAAqB,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,CACnD;QACH,yBAAyB,EAAE,GAAG,EAAE,CAC9B,gBAAgB,CAAC,GAAG,EAAE,CACpB,mCAAmC,CAAC,KAAK,EAAE,YAAY,CAAC,CACzD;QACH,WAAW,EAAE,CAAC,KAA8C,EAAE,EAAE,CAC9D,gBAAgB,CAAC,GAAG,EAAE,CACpB,0BAA0B,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,CACvD;QACH,iBAAiB,EAAE,CAAC,kBAA0B,EAAE,EAAE,CAChD,gBAAgB,CAAC,GAAG,EAAE,CACpB,qCAAqC,CACnC,KAAK,EACL,YAAY,EACZ,kBAAkB,CACnB,CACF;QACH,iBAAiB,EAAE,GAAG,EAAE,CACtB,gBAAgB,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACvE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ;QACjC,gBAAgB,EAAE,CAAC,MAAc,EAAE,EAAE,CACnC,gBAAgB,CAAC,GAAG,EAAE,CACpB,iCAAiC,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,CAC/D;QACH,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAChB,gBAAgB,CAAC,GAAG,EAAE,CACpB,0BAA0B,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,CACpD;QACH,iBAAiB,EAAE,CAAC,MAAc,EAAE,IAA8B,EAAE,EAAE,CACpE,gBAAgB,CAAC,GAAG,EAAE,CACpB,gCAAgC,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,CACpE;QACH,iBAAiB,EAAE,GAAG,EAAE,CACtB,gBAAgB,CAAC,GAAG,EAAE,CACpB,8BAA8B,CAAC,KAAK,EAAE,YAAY,CAAC,CACpD;QACH,wBAAwB,EAAE,CAAC,MAAM,EAAE,EAAE,CACnC,qCAAqC,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC;QACpE,WAAW,EAAE,GAAG,EAAE,CAChB,gBAAgB,CAAC,GAAG,EAAE,CACpB,gCAAgC,CAAC,KAAK,EAAE,YAAY,CAAC,CACtD;QACH,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,gBAAgB,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACzE,mBAAmB,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAC5C,gBAAgB,CAAC,GAAG,EAAE,CACpB,2BAA2B,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CACvE;QACH,OAAO,EAAE,CAAC,KAAa,EAAE,EAAE,CACzB,gBAAgB,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QACrE,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAC;QAClE,eAAe,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAC7B,gBAAgB,CAAC,GAAG,EAAE,CACpB,wBAAwB,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,CAAC,CACzD;QACH,aAAa,EAAE,CAAC,OAAyB,EAAE,EAAE,CAC3C,0BAA0B,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC;KAC3D,CAAC;IACF,OAAO,kCAAkC,CAAC;QACxC,YAAY;QACZ,KAAK;QACL,KAAK;QACL,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,cAAgC,EAChC,cAAoC,2BAA2B,EAC/D,oBAAmC,IAAI,EACvC,WAAW,GAAG,EAAE,EAChB,sBAA0C,qBAAqB,EAC/D,UAAoC,EAAE;IAEtC,OAAO,yBAAyB,CAC9B,0BAA0B,CACxB,OAAO,EACP,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,mBAAmB,EACnB,OAAO,CACR,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,WAAwB,EACxB,OAAe,EACf,OAAyB,EACzB,oBAAmC,IAAI,EACvC,WAAW,GAAG,EAAE,EAChB,sBAA0C,qBAAqB,EAC/D,UAAoC,EAAE;IAEtC,MAAM,QAAQ,GAAG,gCAAgC,CAAC,WAAW,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAC5C,uBAAuB,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAC9D,CAAC;IACF,IAAI,aAAa,EAAE,CAAC;QAClB,qBAAqB,CACnB,WAAW,EACX,OAAO,EACP,aAAa,EACb,iBAAiB,CAClB,CAAC;QACF,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CACnC,OAAO,EACP,OAAO,EACP,2BAA2B,EAC3B,iBAAiB,EACjB,WAAW,EACX,mBAAmB,EACnB,OAAO,CACR,CAAC;IACF,qBAAqB,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC1E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,WAAwB,EACxB,OAAe,EACf,OAAyB,EACzB,oBAAmC,IAAI,EACvC,WAAW,GAAG,EAAE,EAChB,sBAA0C,qBAAqB,EAC/D,UAAoC,EAAE;IAEtC,MAAM,KAAK,GAAG,wBAAwB,CACpC,WAAW,EACX,OAAO,EACP,OAAO,EACP,iBAAiB,EACjB,WAAW,EACX,mBAAmB,EACnB,OAAO,CACR,CAAC;IACF,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { DEFAULT_DOCUMENT_KIND } from \"../../data/documents/documentConstants\";\nimport type { StoredDocumentKind } from \"../../data/documents/documentKinds\";\nimport type { DomainScope } from \"../../data/shared/domainScope\";\nimport {\n  createDocumentProjectionUserKeyResolver,\n  type DocumentsPersistence,\n  defaultDocumentsPersistence,\n  didDocumentProjectionKeyRuntimeChange,\n  didRegainSyncPrerequisites,\n  requestDocumentSyncLaneAndWait,\n} from \"../../workflows/documents\";\nimport { removeAttachmentFromDocumentStore } from \"./documentStore/attachmentRemoval\";\nimport {\n  attachFilesToDocumentStore,\n  replaceAttachmentInDocumentStore,\n} from \"./documentStore/attachments\";\nimport { discardDocumentStoreLocalState } from \"./documentStore/discard\";\nimport {\n  ensureDocumentStoreInitialized,\n  ensureDocumentStoreReady,\n  relinkDocumentStore,\n} from \"./documentStore/initialization\";\nimport { registerInternalDocumentRelink } from \"./documentStore/internalRelink\";\nimport {\n  setDocumentStructuredFields,\n  setDocumentText,\n} from \"./documentStore/mutations\";\nimport { logRevalidationScheduled } from \"./documentStore/remoteRevalidationTelemetry\";\nimport { assertDocumentStoreCanRotateContentKey } from \"./documentStore/rotation\";\nimport {\n  addRowToDocumentStore,\n  removeRowFromDocumentStore,\n  updateRowInDocumentStore,\n} from \"./documentStore/rows\";\nimport {\n  createDocumentStoreState,\n  type DocumentStoreState,\n  refreshAttachabilitySnapshot,\n  resetDocumentStore,\n  subscribeToDocumentStore,\n} from \"./documentStore/state\";\nimport { registerDocumentStoreSyncLane } from \"./documentStore/sync\";\nimport {\n  allowDocumentStoreRemoteSync,\n  captureDocumentStoreRemoteSyncRequestGeneration,\n  captureDocumentStoreSyncLaneGeneration,\n  type DocumentStoreRemoteSyncRequestGeneration,\n  type DocumentStoreSyncLaneGeneration,\n  didDocumentStoreRemoteSyncRequestComplete,\n  hasPendingIndependentDocumentStoreRemoteSync,\n  invalidateDocumentStoreRemoteSync,\n  invalidateDocumentStoreSyncLane,\n  isDocumentStoreRemoteSyncBlocked,\n  isDocumentStoreRemoteSyncRequestGenerationCurrent,\n  markDocumentStoreRemoteSyncPending,\n  registerDocumentStoreRemoteSyncWaiter,\n} from \"./documentStore/syncGeneration\";\nimport { handleDocumentRemoteEvents } from \"./documentStore/syncRemoteSignals\";\nimport {\n  createDocumentStoreFacade,\n  emitPersistedDocument,\n  getOrCreateDocumentStoreRegistry,\n  registerDocumentStore,\n  registerDocumentStoreIdentity,\n  requestDocumentStoreSync,\n  resolveDocumentStoreKey,\n} from \"./registry\";\nimport type {\n  DocumentAttachmentUpload,\n  DocumentStore,\n  DocumentStoreFacade,\n  DocumentStoreOpenOptions,\n  DocumentsRuntime,\n} from \"./types\";\n\nexport {\n  discardRegisteredDocumentLocalState,\n  requestDomainDocumentSync,\n  subscribeToPersistedDocuments,\n} from \"./registry\";\n\nfunction refreshDocumentStoreSyncLane(\n  state: DocumentStoreState,\n  force = false,\n): void {\n  if (!force && state.syncLane && !state.syncLane.isDisposed?.()) {\n    return;\n  }\n  if (state.syncLane) {\n    invalidateDocumentStoreSyncLane(state);\n  }\n  let syncLaneGeneration: DocumentStoreSyncLaneGeneration | null = null;\n  state.syncLane = registerDocumentStoreSyncLane(\n    state,\n    () => syncLaneGeneration,\n  );\n  syncLaneGeneration = captureDocumentStoreSyncLaneGeneration(state);\n}\n\nfunction updateDocumentStoreRuntime(\n  state: DocumentStoreState,\n  nextRuntime: DocumentsRuntime,\n  scheduleSync: () => void,\n) {\n  const previousRuntime = state.runtime;\n  const serverEventsReconnected =\n    (nextRuntime.state.serverEventsConnectionGeneration ?? 0) >\n    (previousRuntime.state.serverEventsConnectionGeneration ?? 0);\n  const domainScopeChanged =\n    previousRuntime.state.domainScope !== nextRuntime.state.domainScope;\n  const projectionKeyRuntimeChanged = didDocumentProjectionKeyRuntimeChange(\n    previousRuntime,\n    nextRuntime,\n  );\n  if (projectionKeyRuntimeChanged) {\n    state.resolveProjectionUserKey =\n      createDocumentProjectionUserKeyResolver(nextRuntime);\n    state.writerProjection = null;\n  }\n  state.runtime = nextRuntime;\n  refreshDocumentStoreSyncLane(state, domainScopeChanged);\n  if (domainScopeChanged) {\n    state.locallyAcceptedUpdateIds = new Set();\n    state.remoteUpdatePending = false;\n    state.writerProjection = null;\n  }\n\n  if (nextRuntime.infra.dbStatus !== \"ready\") {\n    if (state.snapshot.ready || state.initialized || state.initializePromise) {\n      resetDocumentStore(state);\n    }\n    state.lastEventCount = nextRuntime.state.events.length;\n    return;\n  }\n\n  refreshAttachabilitySnapshot(state);\n  ensureDocumentStoreInitialized(state, scheduleSync);\n  handleDocumentRemoteEvents(state, scheduleSync);\n\n  if (state.snapshot.ready) {\n    if (serverEventsReconnected) {\n      // The invalidation stream is lossy while disconnected. Once the server\n      // has acknowledged this socket's authoritative interest declaration,\n      // every already-open remote document needs one HTTP probe to cover peer\n      // writes made during the gap. This also closes iOS background/resume reconnects where the\n      // native network source remained online throughout.\n      requestRemoteDocumentStoreSync(state, scheduleSync);\n      logRevalidationScheduled(state.runtime, \"reconnect\");\n    } else if (didRegainSyncPrerequisites(previousRuntime, state.runtime)) {\n      scheduleSync();\n    }\n  }\n}\n\nfunction requestRemoteDocumentStoreSync(\n  state: DocumentStoreState,\n  scheduleSync: () => void,\n  owner: \"independent\" | \"waiter\" = \"independent\",\n): number {\n  allowDocumentStoreRemoteSync(state);\n  const signalSequence = markDocumentStoreRemoteSyncPending(state, owner);\n  scheduleSync();\n  return signalSequence;\n}\n\nfunction requestOrdinaryDocumentStoreSync(\n  state: DocumentStoreState,\n  scheduleSync: () => void,\n): void {\n  // A normal UI reopen is a fresh owner for remote-only work. It may recover\n  // a probe that an earlier, now-unmounted owner aborted.\n  if (isDocumentStoreRemoteSyncBlocked(state)) {\n    requestRemoteDocumentStoreSync(state, scheduleSync);\n    return;\n  }\n  scheduleSync();\n}\n\nfunction requestRemoteDocumentStoreSyncAndWait(\n  state: DocumentStoreState,\n  scheduleSync: () => void,\n  signal?: AbortSignal,\n): Promise<boolean> {\n  let requestGeneration: DocumentStoreRemoteSyncRequestGeneration | null = null;\n  let requestedSignalSequence = 0;\n  let releaseWaiter: (() => boolean) | null = null;\n  const releaseRemoteSyncWaiter = (invalidate: boolean) => {\n    const releasedLastWaiter = releaseWaiter?.() ?? false;\n    if (\n      invalidate &&\n      releasedLastWaiter &&\n      requestGeneration !== null &&\n      isDocumentStoreRemoteSyncRequestGenerationCurrent(\n        state,\n        requestGeneration,\n      ) &&\n      !hasPendingIndependentDocumentStoreRemoteSync(state)\n    ) {\n      invalidateDocumentStoreRemoteSync(state);\n    }\n  };\n  // A coordinator can be disposed and recreated while this same-scope store\n  // remains registered. Refresh its handle before requesting work.\n  refreshDocumentStoreSyncLane(state);\n  return requestDocumentSyncLaneAndWait({\n    didCompleteRequest: () =>\n      requestGeneration !== null &&\n      didDocumentStoreRemoteSyncRequestComplete(\n        state,\n        requestGeneration,\n        requestedSignalSequence,\n      ),\n    domainScope: state.runtime.state.domainScope,\n    localId: state.localId,\n    request: () => {\n      requestGeneration =\n        captureDocumentStoreRemoteSyncRequestGeneration(state);\n      releaseWaiter = registerDocumentStoreRemoteSyncWaiter(\n        state,\n        requestGeneration,\n      );\n      requestedSignalSequence = requestRemoteDocumentStoreSync(\n        state,\n        scheduleSync,\n        \"waiter\",\n      );\n    },\n    onInvalidated: () => releaseRemoteSyncWaiter(true),\n    signal,\n  }).then(\n    (completed) => {\n      releaseRemoteSyncWaiter(!completed);\n      return completed;\n    },\n    (error: unknown) => {\n      releaseRemoteSyncWaiter(true);\n      throw error;\n    },\n  );\n}\n\nasync function assertBackingDocumentStoreCanRotate(\n  state: DocumentStoreState,\n  scheduleSync: () => void,\n) {\n  if (!(await ensureDocumentStoreReady(state, scheduleSync)) || !state.doc) {\n    throw new Error(\n      \"Document must finish loading before its content key can rotate\",\n    );\n  }\n  return assertDocumentStoreCanRotateContentKey(state);\n}\n\nasync function discardBackingDocumentStoreLocalState(\n  state: DocumentStoreState,\n  scheduleSync: () => void,\n  expectedDocumentId: string,\n) {\n  try {\n    return await discardDocumentStoreLocalState(state, expectedDocumentId);\n  } finally {\n    // Restart hydration whenever the attempt reset the store. This runs outside\n    // its identity-chained task because initialization also chains writes.\n    ensureDocumentStoreInitialized(state, scheduleSync);\n    scheduleSync();\n  }\n}\n\nfunction createLiveSyncLaneRequest(state: DocumentStoreState) {\n  return <Result>(request: () => Result): Result => {\n    refreshDocumentStoreSyncLane(state);\n    return request();\n  };\n}\n\nfunction registerBackingStoreInternalRelink(input: {\n  scheduleSync: () => void;\n  state: DocumentStoreState;\n  store: DocumentStore;\n  withLiveSyncLane: ReturnType<typeof createLiveSyncLaneRequest>;\n}): DocumentStore {\n  registerInternalDocumentRelink(input.store, (relinkInput, commitSideEffect) =>\n    input.withLiveSyncLane(() =>\n      relinkDocumentStore(\n        input.state,\n        relinkInput,\n        input.scheduleSync,\n        commitSideEffect,\n      ),\n    ),\n  );\n  return input.store;\n}\n\nfunction createBackingStoreContext(\n  localId: string,\n  runtime: DocumentsRuntime,\n  persistence: DocumentsPersistence,\n  documentId: string | null,\n  text: string,\n  documentKind: StoredDocumentKind,\n  options: DocumentStoreOpenOptions,\n) {\n  const state = createDocumentStoreState(\n    localId,\n    runtime,\n    persistence,\n    {\n      emitPersistedDocument,\n      registerDocumentIdentity: registerDocumentStoreIdentity,\n    },\n    documentId,\n    text,\n    documentKind,\n    (options.remoteSyncMode ?? \"startup\") === \"startup\",\n  );\n  if (options.deferInitialUpdate) state.deferInitialUpdate = true;\n  refreshDocumentStoreSyncLane(state);\n  const scheduleSync = () => requestDocumentStoreSync(state);\n  return {\n    scheduleSync,\n    state,\n    withLiveSyncLane: createLiveSyncLaneRequest(state),\n  };\n}\n\nfunction createBackingDocumentStore(\n  localId: string,\n  initialRuntime: DocumentsRuntime,\n  persistence: DocumentsPersistence = defaultDocumentsPersistence,\n  initialDocumentId: string | null = null,\n  initialText = \"\",\n  initialDocumentKind: StoredDocumentKind = DEFAULT_DOCUMENT_KIND,\n  openOptions: DocumentStoreOpenOptions = {},\n): DocumentStore {\n  const { scheduleSync, state, withLiveSyncLane } = createBackingStoreContext(\n    localId,\n    initialRuntime,\n    persistence,\n    initialDocumentId,\n    initialText,\n    initialDocumentKind,\n    openOptions,\n  );\n\n  const store: DocumentStore = {\n    addRow: (fields) =>\n      withLiveSyncLane(() =>\n        addRowToDocumentStore(state, scheduleSync, fields),\n      ),\n    assertCanRotateContentKey: () =>\n      withLiveSyncLane(() =>\n        assertBackingDocumentStoreCanRotate(state, scheduleSync),\n      ),\n    attachFiles: (files: ReadonlyArray<DocumentAttachmentUpload>) =>\n      withLiveSyncLane(() =>\n        attachFilesToDocumentStore(state, scheduleSync, files),\n      ),\n    discardLocalState: (expectedDocumentId: string) =>\n      withLiveSyncLane(() =>\n        discardBackingDocumentStoreLocalState(\n          state,\n          scheduleSync,\n          expectedDocumentId,\n        ),\n      ),\n    ensureInitialized: () =>\n      withLiveSyncLane(() => ensureDocumentStoreReady(state, scheduleSync)),\n    getSnapshot: () => state.snapshot,\n    removeAttachment: (slotId: string) =>\n      withLiveSyncLane(() =>\n        removeAttachmentFromDocumentStore(state, scheduleSync, slotId),\n      ),\n    removeRow: (id) =>\n      withLiveSyncLane(() =>\n        removeRowFromDocumentStore(state, scheduleSync, id),\n      ),\n    replaceAttachment: (slotId: string, file: DocumentAttachmentUpload) =>\n      withLiveSyncLane(() =>\n        replaceAttachmentInDocumentStore(state, scheduleSync, slotId, file),\n      ),\n    requestRemoteSync: () =>\n      withLiveSyncLane(() =>\n        requestRemoteDocumentStoreSync(state, scheduleSync),\n      ),\n    requestRemoteSyncAndWait: (signal) =>\n      requestRemoteDocumentStoreSyncAndWait(state, scheduleSync, signal),\n    requestSync: () =>\n      withLiveSyncLane(() =>\n        requestOrdinaryDocumentStoreSync(state, scheduleSync),\n      ),\n    relink: (input) =>\n      withLiveSyncLane(() => relinkDocumentStore(state, input, scheduleSync)),\n    setStructuredFields: (kind, patch, options) =>\n      withLiveSyncLane(() =>\n        setDocumentStructuredFields(state, scheduleSync, kind, patch, options),\n      ),\n    setText: (value: string) =>\n      withLiveSyncLane(() => setDocumentText(state, scheduleSync, value)),\n    subscribe: (listener) => subscribeToDocumentStore(state, listener),\n    updateRowFields: (id, patch) =>\n      withLiveSyncLane(() =>\n        updateRowInDocumentStore(state, scheduleSync, id, patch),\n      ),\n    updateRuntime: (runtime: DocumentsRuntime) =>\n      updateDocumentStoreRuntime(state, runtime, scheduleSync),\n  };\n  return registerBackingStoreInternalRelink({\n    scheduleSync,\n    state,\n    store,\n    withLiveSyncLane,\n  });\n}\n\nexport function createDocumentStore(\n  localId: string,\n  initialRuntime: DocumentsRuntime,\n  persistence: DocumentsPersistence = defaultDocumentsPersistence,\n  initialDocumentId: string | null = null,\n  initialText = \"\",\n  initialDocumentKind: StoredDocumentKind = DEFAULT_DOCUMENT_KIND,\n  options: DocumentStoreOpenOptions = {},\n): DocumentStoreFacade {\n  return createDocumentStoreFacade(\n    createBackingDocumentStore(\n      localId,\n      initialRuntime,\n      persistence,\n      initialDocumentId,\n      initialText,\n      initialDocumentKind,\n      options,\n    ),\n  );\n}\n\nexport function getOrCreateDocumentStore(\n  domainScope: DomainScope,\n  localId: string,\n  runtime: DocumentsRuntime,\n  initialDocumentId: string | null = null,\n  initialText = \"\",\n  initialDocumentKind: StoredDocumentKind = DEFAULT_DOCUMENT_KIND,\n  options: DocumentStoreOpenOptions = {},\n): DocumentStore {\n  const registry = getOrCreateDocumentStoreRegistry(domainScope);\n  const existingStore = registry.storesByKey.get(\n    resolveDocumentStoreKey(registry, localId, initialDocumentId),\n  );\n  if (existingStore) {\n    registerDocumentStore(\n      domainScope,\n      localId,\n      existingStore,\n      initialDocumentId,\n    );\n    return existingStore;\n  }\n\n  const nextStore = createDocumentStore(\n    localId,\n    runtime,\n    defaultDocumentsPersistence,\n    initialDocumentId,\n    initialText,\n    initialDocumentKind,\n    options,\n  );\n  registerDocumentStore(domainScope, localId, nextStore, initialDocumentId);\n  return nextStore;\n}\n\nexport function openDocumentStore(\n  domainScope: DomainScope,\n  localId: string,\n  runtime: DocumentsRuntime,\n  initialDocumentId: string | null = null,\n  initialText = \"\",\n  initialDocumentKind: StoredDocumentKind = DEFAULT_DOCUMENT_KIND,\n  options: DocumentStoreOpenOptions = {},\n): DocumentStore {\n  const store = getOrCreateDocumentStore(\n    domainScope,\n    localId,\n    runtime,\n    initialDocumentId,\n    initialText,\n    initialDocumentKind,\n    options,\n  );\n  store.updateRuntime(runtime);\n  return store;\n}\n"]}

package/workflows/container-contents/container-state/createAdoption.js

@@ -1,193 +0,0 @@
-import { KeyingVerificationError, } from "../../../internal/crypto/index.js";
-import { verifiedContainerCreateManifest } from "../../../data/keyingProjectionVerification/containerCreateManifest.js";
-import { verifyContainerDestinationProjection } from "../../../data/keyingProjectionVerification/containerDestinationVerification.js";
-import { isKeyingVerificationError, reportKeyingVerificationErrorInCauseChain, } from "../../../data/keyingProjectionVerification/error.js";
-import { errorMessage } from "../../../data/shared/errorMessage.js";
-import { createRuntimePrincipalPolicyWarmer } from "../../principals/runtimePolicyWarmer.js";
-import { settleContainerCreateIntent } from "./createIntentSettlement.js";
-const LABEL = "Container create conflict";
-/** The recorded error that parks an intent whose listed create is foreign. */
-export const CONTAINER_CREATE_ADOPTION_REFUSED = "Container create adoption was refused";
-/**
- * The listed create's signed identity is not this device's pending create: its
- * signed create names another signer, another organization, or a root. An honest server never lists that under the
- * id this device minted, and no later read can change those signed facts, so
- * the intent parks instead of re-verifying.
- */
-class ForeignContainerCreateError extends KeyingVerificationError {
-}
-function foreignCreate(code, message) {
-    return new ForeignContainerCreateError(code, `${LABEL} ${message}`);
-}
-async function verifyAdoptableProjection(input) {
-    const { projection } = input;
-    if (projection.containerId !== input.containerId ||
-        projection.organizationId !== input.expectedOrganizationId) {
-        // The envelope is unsigned: a corrupt read is retried, not parked.
-        throw new KeyingVerificationError("object_mismatch", `${LABEL} projection has the wrong identity`);
-    }
-    const { path, verifiedByHash } = await verifyContainerDestinationProjection({
-        execSql: input.state.runtime.infra.execSql,
-        projection,
-        resolveUserKey: input.state.resolveProjectionUserKey,
-        warmReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(input.state.runtime),
-    });
-    const head = path.at(-1);
-    // One read naming another container says nothing signed about this id.
-    if (!head || head.state.containerId !== input.containerId) {
-        throw new KeyingVerificationError("object_mismatch", `${LABEL} projection names another container`);
-    }
-    const create = verifiedContainerCreateManifest({
-        head,
-        label: LABEL,
-        verifiedByHash,
-    });
-    if (create.event.event.signerUserId !== input.sessionUserId) {
-        throw foreignCreate("signer_mismatch", "was signed by another user");
-    }
-    if (create.state.organizationId !== input.expectedOrganizationId) {
-        throw foreignCreate("object_mismatch", "belongs to another organization");
-    }
-    const createdParentId = create.state.parentContainerId;
-    const currentParentId = head.state.parentContainerId;
-    if (createdParentId === null || currentParentId === null) {
-        throw foreignCreate("object_mismatch", "is an organization root");
-    }
-    return { createdParentId, currentParentId };
-}
-/**
- * A pending create whose container the listing already carries is adopted
- * only when the container's signed epoch-1 `container.create` is this user's,
- * in the intended organization (#2365 finding 26). Listing metadata is
- * unsigned: a create by another writer that collides on the pending id, or one
- * a dishonest server invents, must not become this device's container.
- * Documents apply the same rule (`workflows/documents/createAdoption.ts`).
- *
- * Returns where the create committed and where the verified head sits now.
- * The user may have moved the pending container since, which rewrites its
- * intent's parent; that is a move still owed, not a mismatch.
- */
-async function assertContainerCreateAdoptable(input) {
-    const { runtime } = input.state;
-    const sessionUserId = runtime.auth.userId;
-    // Without a session user there is no signer to compare: not tampering.
-    if (!sessionUserId) {
-        throw new Error(`${LABEL} needs a signed-in session user`);
-    }
-    const projection = await runtime.apiClient.getContainerWriterProjection(input.containerId);
-    if (!projection) {
-        throw new Error(`${LABEL} is unavailable to verify`);
-    }
-    try {
-        return await verifyAdoptableProjection({
-            ...input,
-            projection,
-            sessionUserId,
-        });
-    }
-    catch (error) {
-        // Never re-serve a cached projection that failed verification.
-        if (isKeyingVerificationError(error)) {
-            runtime.apiClient.evictContainerWriterProjection(input.containerId);
-        }
-        throw error;
-    }
-}
-function verifyListedContainerCreate(input) {
-    const adoption = {
-        containerId: input.intent.containerId,
-        expectedOrganizationId: input.parentState.container.organizationId,
-    };
-    return input.state.verifyCreateAdoption
-        ? input.state.verifyCreateAdoption(adoption)
-        : assertContainerCreateAdoptable({ ...adoption, state: input.state });
-}
-/** Settles a verified adoption against the row hydration installed. */
-async function markContainerCreateIntentAdopted(input) {
-    const { containerState, placement, syncInput } = input;
-    const remoteMetadataDocumentId = containerState.record.documentId;
-    const remoteMetadataAccessStateHash = containerState.record.accessStateHash;
-    if (!remoteMetadataDocumentId || !remoteMetadataAccessStateHash) {
-        return false;
-    }
-    return settleContainerCreateIntent({
-        createdParentContainerId: placement.createdParentId,
-        desiredParentContainerId: syncInput.intent.parentContainerId,
-        intent: syncInput.intent,
-        isCurrent: syncInput.isCurrent,
-        remoteContainerId: containerState.container.id,
-        remoteMetadataAccessStateHash,
-        remoteMetadataDocumentId,
-        state: syncInput.state,
-        supersededMovePreviousParentId: placement.currentParentId,
-    });
-}
-/**
- * Records a failed adoption and leaves the lane's other intents to proceed. A
- * foreign create parks the intent: its signed facts never change, so later
- * passes neither re-read it nor report it again. Any other failure retries.
- */
-async function recordAdoptionFailure(input) {
-    const { intent, isCurrent, state } = input.syncInput;
-    if (!isCurrent())
-        return "abandoned";
-    await reportKeyingVerificationErrorInCauseChain(input.error, state.runtime.util.reportSecurityIncident, {
-        objectId: intent.containerId,
-        objectKind: "container",
-        operation: "container.create.replay",
-        organizationId: input.organizationId,
-    });
-    if (!isCurrent())
-        return "abandoned";
-    const action = input.error instanceof ForeignContainerCreateError
-        ? CONTAINER_CREATE_ADOPTION_REFUSED
-        : "Container create adoption verification failed";
-    await state.persistence.recordCreateIntentRevisionError(state.runtime.infra.execSql, {
-        containerId: intent.containerId,
-        expectedIntentId: intent.id,
-        expectedUpdatedAt: intent.updatedAt,
-        message: `${action}: ${errorMessage(input.error)}`,
-        stillCurrent: isCurrent,
-    });
-    return isCurrent() ? "failed" : "abandoned";
-}
-/**
- * Adopts a pending create the listing already carries, once its signed create
- * proves it is this device's. A parked refusal stays blocked without a read.
- */
-export async function syncListedContainerCreate(input) {
-    const { containerState, parentState, syncInput } = input;
-    const { intent, isCurrent, state } = syncInput;
-    if (intent.lastError?.startsWith(CONTAINER_CREATE_ADOPTION_REFUSED)) {
-        return "blocked";
-    }
-    let placement;
-    try {
-        placement = await verifyListedContainerCreate({
-            intent,
-            parentState,
-            state,
-        });
-    }
-    catch (error) {
-        return recordAdoptionFailure({
-            error,
-            organizationId: parentState.container.organizationId,
-            syncInput,
-        });
-    }
-    const marked = await markContainerCreateIntentAdopted({
-        containerState,
-        placement,
-        syncInput,
-    });
-    if (!marked)
-        return isCurrent() ? "blocked" : "abandoned";
-    // The folder now sits elsewhere; list it there rather than waiting for the
-    // next poll to correct the local parent.
-    if (placement.currentParentId !== intent.parentContainerId) {
-        syncInput.requestRemoteReconciliation(placement.currentParentId);
-    }
-    return "created";
-}
-//# sourceMappingURL=createAdoption.js.map

package/workflows/container-contents/container-state/createAdoption.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"createAdoption.js","sourceRoot":"","sources":["createAdoption.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,+BAA+B,EAAE,MAAM,oEAAoE,CAAC;AACrH,OAAO,EAAE,oCAAoC,EAAE,MAAM,6EAA6E,CAAC;AACnI,OAAO,EACL,yBAAyB,EACzB,yCAAyC,GAC1C,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAE1F,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAOvE,MAAM,KAAK,GAAG,2BAA2B,CAAC;AAE1C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iCAAiC,GAC5C,uCAAuC,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,2BAA4B,SAAQ,uBAAuB;CAAG;AAEpE,SAAS,aAAa,CACpB,IAA4B,EAC5B,OAAe;IAEf,OAAO,IAAI,2BAA2B,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,KAMxC;IACC,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC7B,IACE,UAAU,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QAC5C,UAAU,CAAC,cAAc,KAAK,KAAK,CAAC,sBAAsB,EAC1D,CAAC;QACD,mEAAmE;QACnE,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,GAAG,KAAK,oCAAoC,CAC7C,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,MAAM,oCAAoC,CAAC;QAC1E,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QAC1C,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,wBAAwB;QACpD,+BAA+B,EAAE,kCAAkC,CACjE,KAAK,CAAC,KAAK,CAAC,OAAO,CACpB;KACF,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,uEAAuE;IACvE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,GAAG,KAAK,qCAAqC,CAC9C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,+BAA+B,CAAC;QAC7C,IAAI;QACJ,KAAK,EAAE,KAAK;QACZ,cAAc;KACf,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;QAC5D,MAAM,aAAa,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACjE,MAAM,aAAa,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACvD,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACrD,IAAI,eAAe,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QACzD,MAAM,aAAa,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,8BAA8B,CAAC,KAI7C;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;IAChC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IAC1C,uEAAuE;IACvE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,4BAA4B,CACrE,KAAK,CAAC,WAAW,CAClB,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,yBAAyB,CAAC;YACrC,GAAG,KAAK;YACR,UAAU;YACV,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+DAA+D;QAC/D,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,SAAS,CAAC,8BAA8B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,KAIpC;IACC,MAAM,QAAQ,GAAG;QACf,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;QACrC,sBAAsB,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,cAAc;KACnE,CAAC;IACF,OAAO,KAAK,CAAC,KAAK,CAAC,oBAAoB;QACrC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC;QAC5C,CAAC,CAAC,8BAA8B,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,gCAAgC,CAAC,KAI/C;IACC,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACvD,MAAM,wBAAwB,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC;IAClE,MAAM,6BAA6B,GAAG,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC;IAE5E,IAAI,CAAC,wBAAwB,IAAI,CAAC,6BAA6B,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,2BAA2B,CAAC;QACjC,wBAAwB,EAAE,SAAS,CAAC,eAAe;QACnD,wBAAwB,EAAE,SAAS,CAAC,MAAM,CAAC,iBAAiB;QAC5D,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,iBAAiB,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE;QAC9C,6BAA6B;QAC7B,wBAAwB;QACxB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,8BAA8B,EAAE,SAAS,CAAC,eAAe;KAC1D,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAAC,KAIpC;IACC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;IACrD,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,WAAW,CAAC;IACrC,MAAM,yCAAyC,CAC7C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACzC;QACE,QAAQ,EAAE,MAAM,CAAC,WAAW;QAC5B,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,yBAAyB;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CACF,CAAC;IACF,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,WAAW,CAAC;IACrC,MAAM,MAAM,GACV,KAAK,CAAC,KAAK,YAAY,2BAA2B;QAChD,CAAC,CAAC,iCAAiC;QACnC,CAAC,CAAC,+CAA+C,CAAC;IACtD,MAAM,KAAK,CAAC,WAAW,CAAC,+BAA+B,CACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B;QACE,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;QAC3B,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,OAAO,EAAE,GAAG,MAAM,KAAK,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QAClD,YAAY,EAAE,SAAS;KACxB,CACF,CAAC;IACF,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAI/C;IACC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IAC/C,IAAI,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,iCAAiC,CAAC,EAAE,CAAC;QACpE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,SAAoC,CAAC;IACzC,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,2BAA2B,CAAC;YAC5C,MAAM;YACN,WAAW;YACX,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,qBAAqB,CAAC;YAC3B,KAAK;YACL,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,cAAc;YACpD,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC;QACpD,cAAc;QACd,SAAS;QACT,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IAC1D,2EAA2E;IAC3E,yCAAyC;IACzC,IAAI,SAAS,CAAC,eAAe,KAAK,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC3D,SAAS,CAAC,2BAA2B,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["import {\n  type KeyingVerificationCode,\n  KeyingVerificationError,\n} from \"@tearleads/crypto\";\nimport type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { verifiedContainerCreateManifest } from \"../../../data/keyingProjectionVerification/containerCreateManifest\";\nimport { verifyContainerDestinationProjection } from \"../../../data/keyingProjectionVerification/containerDestinationVerification\";\nimport {\n  isKeyingVerificationError,\n  reportKeyingVerificationErrorInCauseChain,\n} from \"../../../data/keyingProjectionVerification/error\";\nimport { errorMessage } from \"../../../data/shared/errorMessage\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../principals/runtimePolicyWarmer\";\nimport type { ContainerState } from \"../remoteHydration\";\nimport { settleContainerCreateIntent } from \"./createIntentSettlement\";\nimport type {\n  AdoptedContainerPlacement,\n  ContainerCreateIntentSyncInput,\n  ContainerCreateIntentSyncState,\n} from \"./types\";\n\nconst LABEL = \"Container create conflict\";\n\n/** The recorded error that parks an intent whose listed create is foreign. */\nexport const CONTAINER_CREATE_ADOPTION_REFUSED =\n  \"Container create adoption was refused\";\n\n/**\n * The listed create's signed identity is not this device's pending create: its\n * signed create names another signer, another organization, or a root. An honest server never lists that under the\n * id this device minted, and no later read can change those signed facts, so\n * the intent parks instead of re-verifying.\n */\nclass ForeignContainerCreateError extends KeyingVerificationError {}\n\nfunction foreignCreate(\n  code: KeyingVerificationCode,\n  message: string,\n): ForeignContainerCreateError {\n  return new ForeignContainerCreateError(code, `${LABEL} ${message}`);\n}\n\nasync function verifyAdoptableProjection(input: {\n  readonly containerId: string;\n  readonly expectedOrganizationId: string;\n  readonly projection: ContainerWriterProjectionResponse;\n  readonly sessionUserId: string;\n  readonly state: ContainerCreateIntentSyncState;\n}): Promise<AdoptedContainerPlacement> {\n  const { projection } = input;\n  if (\n    projection.containerId !== input.containerId ||\n    projection.organizationId !== input.expectedOrganizationId\n  ) {\n    // The envelope is unsigned: a corrupt read is retried, not parked.\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      `${LABEL} projection has the wrong identity`,\n    );\n  }\n  const { path, verifiedByHash } = await verifyContainerDestinationProjection({\n    execSql: input.state.runtime.infra.execSql,\n    projection,\n    resolveUserKey: input.state.resolveProjectionUserKey,\n    warmReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(\n      input.state.runtime,\n    ),\n  });\n  const head = path.at(-1);\n  // One read naming another container says nothing signed about this id.\n  if (!head || head.state.containerId !== input.containerId) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      `${LABEL} projection names another container`,\n    );\n  }\n  const create = verifiedContainerCreateManifest({\n    head,\n    label: LABEL,\n    verifiedByHash,\n  });\n  if (create.event.event.signerUserId !== input.sessionUserId) {\n    throw foreignCreate(\"signer_mismatch\", \"was signed by another user\");\n  }\n  if (create.state.organizationId !== input.expectedOrganizationId) {\n    throw foreignCreate(\"object_mismatch\", \"belongs to another organization\");\n  }\n  const createdParentId = create.state.parentContainerId;\n  const currentParentId = head.state.parentContainerId;\n  if (createdParentId === null || currentParentId === null) {\n    throw foreignCreate(\"object_mismatch\", \"is an organization root\");\n  }\n  return { createdParentId, currentParentId };\n}\n\n/**\n * A pending create whose container the listing already carries is adopted\n * only when the container's signed epoch-1 `container.create` is this user's,\n * in the intended organization (#2365 finding 26). Listing metadata is\n * unsigned: a create by another writer that collides on the pending id, or one\n * a dishonest server invents, must not become this device's container.\n * Documents apply the same rule (`workflows/documents/createAdoption.ts`).\n *\n * Returns where the create committed and where the verified head sits now.\n * The user may have moved the pending container since, which rewrites its\n * intent's parent; that is a move still owed, not a mismatch.\n */\nasync function assertContainerCreateAdoptable(input: {\n  readonly containerId: string;\n  readonly expectedOrganizationId: string;\n  readonly state: ContainerCreateIntentSyncState;\n}): Promise<AdoptedContainerPlacement> {\n  const { runtime } = input.state;\n  const sessionUserId = runtime.auth.userId;\n  // Without a session user there is no signer to compare: not tampering.\n  if (!sessionUserId) {\n    throw new Error(`${LABEL} needs a signed-in session user`);\n  }\n  const projection = await runtime.apiClient.getContainerWriterProjection(\n    input.containerId,\n  );\n  if (!projection) {\n    throw new Error(`${LABEL} is unavailable to verify`);\n  }\n  try {\n    return await verifyAdoptableProjection({\n      ...input,\n      projection,\n      sessionUserId,\n    });\n  } catch (error) {\n    // Never re-serve a cached projection that failed verification.\n    if (isKeyingVerificationError(error)) {\n      runtime.apiClient.evictContainerWriterProjection(input.containerId);\n    }\n    throw error;\n  }\n}\n\nfunction verifyListedContainerCreate(input: {\n  readonly intent: ContainerCreateIntentSyncInput[\"intent\"];\n  readonly parentState: ContainerState;\n  readonly state: ContainerCreateIntentSyncState;\n}): Promise<AdoptedContainerPlacement> {\n  const adoption = {\n    containerId: input.intent.containerId,\n    expectedOrganizationId: input.parentState.container.organizationId,\n  };\n  return input.state.verifyCreateAdoption\n    ? input.state.verifyCreateAdoption(adoption)\n    : assertContainerCreateAdoptable({ ...adoption, state: input.state });\n}\n\n/** Settles a verified adoption against the row hydration installed. */\nasync function markContainerCreateIntentAdopted(input: {\n  containerState: ContainerState;\n  placement: AdoptedContainerPlacement;\n  syncInput: ContainerCreateIntentSyncInput;\n}): Promise<boolean> {\n  const { containerState, placement, syncInput } = input;\n  const remoteMetadataDocumentId = containerState.record.documentId;\n  const remoteMetadataAccessStateHash = containerState.record.accessStateHash;\n\n  if (!remoteMetadataDocumentId || !remoteMetadataAccessStateHash) {\n    return false;\n  }\n  return settleContainerCreateIntent({\n    createdParentContainerId: placement.createdParentId,\n    desiredParentContainerId: syncInput.intent.parentContainerId,\n    intent: syncInput.intent,\n    isCurrent: syncInput.isCurrent,\n    remoteContainerId: containerState.container.id,\n    remoteMetadataAccessStateHash,\n    remoteMetadataDocumentId,\n    state: syncInput.state,\n    supersededMovePreviousParentId: placement.currentParentId,\n  });\n}\n\n/**\n * Records a failed adoption and leaves the lane's other intents to proceed. A\n * foreign create parks the intent: its signed facts never change, so later\n * passes neither re-read it nor report it again. Any other failure retries.\n */\nasync function recordAdoptionFailure(input: {\n  readonly error: unknown;\n  readonly organizationId: string;\n  readonly syncInput: ContainerCreateIntentSyncInput;\n}): Promise<\"abandoned\" | \"failed\"> {\n  const { intent, isCurrent, state } = input.syncInput;\n  if (!isCurrent()) return \"abandoned\";\n  await reportKeyingVerificationErrorInCauseChain(\n    input.error,\n    state.runtime.util.reportSecurityIncident,\n    {\n      objectId: intent.containerId,\n      objectKind: \"container\",\n      operation: \"container.create.replay\",\n      organizationId: input.organizationId,\n    },\n  );\n  if (!isCurrent()) return \"abandoned\";\n  const action =\n    input.error instanceof ForeignContainerCreateError\n      ? CONTAINER_CREATE_ADOPTION_REFUSED\n      : \"Container create adoption verification failed\";\n  await state.persistence.recordCreateIntentRevisionError(\n    state.runtime.infra.execSql,\n    {\n      containerId: intent.containerId,\n      expectedIntentId: intent.id,\n      expectedUpdatedAt: intent.updatedAt,\n      message: `${action}: ${errorMessage(input.error)}`,\n      stillCurrent: isCurrent,\n    },\n  );\n  return isCurrent() ? \"failed\" : \"abandoned\";\n}\n\n/**\n * Adopts a pending create the listing already carries, once its signed create\n * proves it is this device's. A parked refusal stays blocked without a read.\n */\nexport async function syncListedContainerCreate(input: {\n  readonly containerState: ContainerState;\n  readonly parentState: ContainerState;\n  readonly syncInput: ContainerCreateIntentSyncInput;\n}): Promise<\"abandoned\" | \"blocked\" | \"created\" | \"failed\"> {\n  const { containerState, parentState, syncInput } = input;\n  const { intent, isCurrent, state } = syncInput;\n  if (intent.lastError?.startsWith(CONTAINER_CREATE_ADOPTION_REFUSED)) {\n    return \"blocked\";\n  }\n  let placement: AdoptedContainerPlacement;\n  try {\n    placement = await verifyListedContainerCreate({\n      intent,\n      parentState,\n      state,\n    });\n  } catch (error) {\n    return recordAdoptionFailure({\n      error,\n      organizationId: parentState.container.organizationId,\n      syncInput,\n    });\n  }\n  const marked = await markContainerCreateIntentAdopted({\n    containerState,\n    placement,\n    syncInput,\n  });\n  if (!marked) return isCurrent() ? \"blocked\" : \"abandoned\";\n  // The folder now sits elsewhere; list it there rather than waiting for the\n  // next poll to correct the local parent.\n  if (placement.currentParentId !== intent.parentContainerId) {\n    syncInput.requestRemoteReconciliation(placement.currentParentId);\n  }\n  return \"created\";\n}\n"]}