@tearleads/client-sdk 0.1.63 → 0.1.65

package/stores/container-contents/operations/index.js

@@ -0,0 +1,301 @@
+import { createChildContainerState } from "../../../workflows/container-contents/container-state/create/createChild.js";
+import { deleteContainerState } from "../../../workflows/container-contents/container-state/delete.js";
+import { assertLocalChildPathFits, assertLocalMovePathFits, } from "../../../workflows/container-contents/container-state/localPathDepth.js";
+import { installContainerMetadataRecord, renameContainerMetadataStateFromRuntime, } from "../../../workflows/container-contents/metadata/index.js";
+import { createDetachedContainerMetadataState, installDetachedContainerMetadataState, } from "../../../workflows/container-contents/metadata/metadataStateIsolation.js";
+import { persistContainerState } from "../containerState/containerStatePersistence.js";
+import { removeMissingContainerState } from "../containerState/missingContainerState.js";
+import { getContainerContentsStoreLogLabel } from "../logLabel.js";
+import { invalidateRemoteContainerWrites, invalidateRemoteSystemContainerWrite, } from "../remoteWrites/remoteWriteGuards.js";
+import { updateContainerContentsSnapshot } from "../state.js";
+import { updateExistingSystemContainer } from "../systemContainers/existingSystemContainer.js";
+import { ensureOrganizationMetadataSystemContainer } from "../systemContainers/organizationMetadataSystemContainer.js";
+import { probeExistingSystemContainer } from "../systemContainers/systemContainerHydration.js";
+import { findRootContainerState, findSystemContainerStateForRoot, } from "../systemContainers/systemContainerLookup.js";
+import { finalizeCreatedSystemContainer } from "../systemContainers/systemContainerPostCreate.js";
+import { hasAdvancedManagedPrincipalReference } from "../systemContainers/systemContainerPromotion.js";
+import { isContainerInSubtree, toContainerNode } from "../utils.js";
+export async function createChildContainer(state, syncAgent, parentId, name, isCurrent = () => true) {
+    const trimmedName = name.trim();
+    if (state.runtime.infra.dbStatus !== "ready" ||
+        !state.snapshot.ready ||
+        !trimmedName) {
+        return null;
+    }
+    const parentState = state.containersById.get(parentId);
+    if (!parentState) {
+        return null;
+    }
+    assertLocalChildPathFits(state.containersById, parentId);
+    const created = await createChildContainerState({
+        createRemote: false,
+        name: trimmedName,
+        parentState,
+        persistence: state.persistence,
+        resolveProjectionUserKey: state.resolveProjectionUserKey,
+        runtime: state.runtime,
+        stillCurrent: isCurrent,
+    });
+    if (!created || !isCurrent())
+        return null;
+    state.containersById.set(created.containerState.container.id, created.containerState);
+    updateContainerContentsSnapshot(state);
+    if (created.shouldRequestSync) {
+        syncAgent.scheduleSync();
+    }
+    state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: created container "${trimmedName}"`);
+    return toContainerNode(created.containerState);
+}
+function canEnsureSystemContainer(state, name) {
+    return (state.runtime.infra.dbStatus === "ready" && state.snapshot.ready && !!name);
+}
+async function findOrHydrateSystemContainer(input) {
+    const { isCurrent, state, syncAgent, systemSlot } = input;
+    const existing = findSystemContainerStateForRoot(state, systemSlot, findRootContainerState(state));
+    if (existing ||
+        !state.runtime.auth.isAuthenticated ||
+        !state.runtime.state.online) {
+        return existing;
+    }
+    await probeExistingSystemContainer({
+        logLabel: getContainerContentsStoreLogLabel(state),
+        rootState: findRootContainerState(state),
+        state,
+        syncAgent,
+        systemSlot,
+    });
+    return isCurrent()
+        ? findSystemContainerStateForRoot(state, systemSlot, findRootContainerState(state))
+        : null;
+}
+function canCreateSystemContainer(state, rootState, systemSlot, options) {
+    if (options.skipAdvancedManagedRoot &&
+        hasAdvancedManagedPrincipalReference(rootState)) {
+        state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: skipped background system container "${systemSlot}" because the root has advanced managed-principal references`);
+        return false;
+    }
+    return true;
+}
+export async function ensureSystemContainer(state, syncAgent, systemSlot, name, options = {}, isCurrent = () => true) {
+    const trimmedName = name.trim();
+    if (!canEnsureSystemContainer(state, trimmedName)) {
+        return null;
+    }
+    const metadata = await ensureOrganizationMetadataSystemContainer({
+        state,
+        syncAgent,
+        systemSlot,
+        options,
+        isCurrent,
+    });
+    if (!isCurrent())
+        return null;
+    if (metadata.handled)
+        return metadata.container;
+    return ensureChildSystemContainer(state, syncAgent, systemSlot, trimmedName, options, isCurrent);
+}
+async function ensureChildSystemContainer(state, syncAgent, systemSlot, trimmedName, options, isCurrent) {
+    const allowSynchronousRemoteBootstrap = !options.deferRemoteBootstrap;
+    const existing = allowSynchronousRemoteBootstrap
+        ? await findOrHydrateSystemContainer({
+            isCurrent,
+            state,
+            syncAgent,
+            systemSlot,
+        })
+        : findSystemContainerStateForRoot(state, systemSlot, findRootContainerState(state));
+    if (!isCurrent())
+        return null;
+    if (existing) {
+        return updateExistingSystemContainer(state, syncAgent, existing, options, isCurrent);
+    }
+    const rootState = findRootContainerState(state);
+    if (!rootState) {
+        return null;
+    }
+    if (!canCreateSystemContainer(state, rootState, systemSlot, options))
+        return null;
+    if (options.deferRemoteBootstrap) {
+        invalidateRemoteSystemContainerWrite(state, rootState.container.id, systemSlot);
+        invalidateRemoteContainerWrites(state, [rootState.container.id]);
+    }
+    const createRemote = allowSynchronousRemoteBootstrap &&
+        state.runtime.auth.isAuthenticated &&
+        Boolean(state.runtime.crypto.encapsulationKeyPair);
+    const created = await createChildContainerState({
+        systemSlot,
+        createRemote,
+        icon: options.icon,
+        name: trimmedName,
+        parentState: rootState,
+        persistence: state.persistence,
+        queueRemoteSync: !options.deferRemoteSync,
+        resolveProjectionUserKey: state.resolveProjectionUserKey,
+        runtime: state.runtime,
+        stillCurrent: isCurrent,
+    });
+    if (!created || !isCurrent()) {
+        if (createRemote && !isCurrent()) {
+            state.containerParentIdsNeedingHydration.add(rootState.container.id);
+            syncAgent.scheduleRemoteHydration();
+        }
+        return null;
+    }
+    const finalized = await finalizeCreatedSystemContainer({
+        created,
+        logLabel: getContainerContentsStoreLogLabel(state),
+        state,
+        syncAgent,
+        systemSlot,
+        isCurrent,
+    });
+    if (!finalized || !isCurrent())
+        return null;
+    if (finalized.adopted) {
+        const updated = await updateExistingSystemContainer(state, syncAgent, finalized.containerState, options, isCurrent);
+        if (!updated)
+            return null;
+    }
+    return toContainerNode(finalized.containerState);
+}
+export async function deleteContainer(state, syncAgent, containerId, isCurrent = () => true) {
+    if (state.runtime.infra.dbStatus !== "ready" || !state.snapshot.ready) {
+        return null;
+    }
+    const existingState = state.containersById.get(containerId);
+    if (!existingState ||
+        existingState.container.parentId === null ||
+        (existingState.container.systemSlot ?? null) !== null ||
+        Array.from(state.containersById.values()).some((containerState) => containerState.container.parentId === containerId)) {
+        return null;
+    }
+    const isRemoteContainer = Boolean(existingState.record.documentId);
+    if (isRemoteContainer) {
+        if (!state.runtime.auth.isAuthenticated || !state.runtime.state.online) {
+            return null;
+        }
+    }
+    const deletedNode = toContainerNode(existingState);
+    const deleted = await deleteContainerState({
+        containerState: existingState,
+        persistence: state.persistence,
+        runtime: state.runtime,
+        stillCurrent: isCurrent,
+    });
+    if (deleted === "remote-failed") {
+        return null;
+    }
+    if (deleted === "local-conflict" ||
+        deleted === "remote-deleted" ||
+        !isCurrent()) {
+        state.localContainersNeedRefresh = true;
+        await syncAgent.refreshLocalContainers();
+        // The delete committed before this operation lost its generation. Evict
+        // only the exact state it deleted: a concurrent replacement with the same
+        // id owns a different object and must survive.
+        if (deleted === "deleted" &&
+            state.containersById.get(existingState.container.id) === existingState) {
+            state.containersById.delete(existingState.container.id);
+            state.documentStoresNeedPriming = true;
+            if (state.initialized) {
+                updateContainerContentsSnapshot(state);
+            }
+        }
+        if (isRemoteContainer) {
+            await syncAgent.requestRemoteHydration({
+                followDiscoveredParentLanes: false,
+                parentIds: [existingState.container.parentId],
+                resetAllLaneWatermarks: true,
+            });
+        }
+        return null;
+    }
+    state.containersById.delete(existingState.container.id);
+    // The persistence cascade may have orphaned descendant documents (row 3);
+    // re-arm document priming and nudge the lane so their null-scoped passes
+    // run now rather than on the next unrelated trigger.
+    state.documentStoresNeedPriming = true;
+    syncAgent.scheduleSync();
+    updateContainerContentsSnapshot(state);
+    state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: deleted container "${existingState.container.name}"`);
+    return deletedNode;
+}
+export async function renameContainer(state, syncAgent, containerId, name, isCurrent = () => true) {
+    const trimmedName = name.trim();
+    if (state.runtime.infra.dbStatus !== "ready" ||
+        !state.snapshot.ready ||
+        !trimmedName) {
+        return null;
+    }
+    const existingState = state.containersById.get(containerId);
+    if (!existingState) {
+        return null;
+    }
+    if (existingState.container.name === trimmedName) {
+        return toContainerNode(existingState);
+    }
+    const detachedState = await createDetachedContainerMetadataState(existingState);
+    if (!isCurrent())
+        return null;
+    const renamed = await renameContainerMetadataStateFromRuntime({
+        metadataState: detachedState,
+        name: trimmedName,
+        persistence: state.persistence,
+        runtime: state.runtime,
+        stillCurrent: isCurrent,
+    });
+    if (!isCurrent())
+        return null;
+    if (!renamed) {
+        removeMissingContainerState(state, existingState);
+        return null;
+    }
+    detachedState.container = renamed.container;
+    installContainerMetadataRecord(detachedState, renamed.record);
+    installDetachedContainerMetadataState(existingState, detachedState);
+    updateContainerContentsSnapshot(state);
+    syncAgent.scheduleSync();
+    state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: renamed container to "${trimmedName}"`);
+    return toContainerNode(existingState);
+}
+export async function moveContainer(state, syncAgent, containerId, parentId, isCurrent = () => true) {
+    if (state.runtime.infra.dbStatus !== "ready" || !state.snapshot.ready) {
+        return null;
+    }
+    const existingState = state.containersById.get(containerId);
+    const targetParentState = state.containersById.get(parentId);
+    if (!existingState ||
+        !targetParentState ||
+        existingState.container.parentId === null ||
+        (existingState.container.systemSlot ?? null) !== null ||
+        isContainerInSubtree(state.containersById, parentId, containerId)) {
+        return null;
+    }
+    if (existingState.container.parentId === parentId) {
+        return toContainerNode(existingState);
+    }
+    assertLocalMovePathFits(state.containersById, containerId, parentId);
+    const isRemoteContainer = Boolean(existingState.record.documentId);
+    const saveOptions = isRemoteContainer
+        ? {
+            moveIntent: {
+                parentContainerId: parentId,
+                previousParentContainerId: existingState.container.parentId,
+            },
+        }
+        : { createIntent: { parentContainerId: parentId } };
+    const persisted = await persistContainerState(state, existingState, {
+        patch: { parentId },
+        saveOptions,
+        isCurrent,
+    });
+    if (persisted.status !== "persisted" || !isCurrent())
+        return null;
+    syncAgent.scheduleSync();
+    const action = isRemoteContainer
+        ? "queued container move"
+        : "moved container";
+    state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: ${action} ${containerId} under ${parentId}`);
+    return toContainerNode(existingState);
+}
+//# sourceMappingURL=index.js.map

package/stores/container-contents/operations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,0EAA0E,CAAC;AACrH,OAAO,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AACpG,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,sEAAsE,CAAC;AAC9E,OAAO,EACL,8BAA8B,EAC9B,uCAAuC,GACxC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,uEAAuE,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,iCAAiC,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,GACrC,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAK3D,OAAO,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AAC5F,OAAO,EAAE,yCAAyC,EAAE,MAAM,yDAAyD,CAAC;AACpH,OAAO,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAC5F,OAAO,EACL,sBAAsB,EACtB,+BAA+B,GAChC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,oCAAoC,EAAE,MAAM,8CAA8C,CAAC;AAKpG,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAkC,EAClC,SAA0C,EAC1C,QAAgB,EAChB,IAAY,EACZ,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QACxC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK;QACrB,CAAC,WAAW,EACZ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,wBAAwB,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC;QAC9C,YAAY,EAAE,KAAK;QACnB,IAAI,EAAE,WAAW;QACjB,WAAW;QACX,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1C,KAAK,CAAC,cAAc,CAAC,GAAG,CACtB,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,EACnC,OAAO,CAAC,cAAc,CACvB,CAAC;IACF,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,SAAS,CAAC,YAAY,EAAE,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,wBAAwB,WAAW,GAAG,CAClF,CAAC;IACF,OAAO,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAkC,EAClC,IAAY;IAEZ,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAC3E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAK3C;IACC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC1D,MAAM,QAAQ,GAAG,+BAA+B,CAC9C,KAAK,EACL,UAAU,EACV,sBAAsB,CAAC,KAAK,CAAC,CAC9B,CAAC;IACF,IACE,QAAQ;QACR,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAC3B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,4BAA4B,CAAC;QACjC,QAAQ,EAAE,iCAAiC,CAAC,KAAK,CAAC;QAClD,SAAS,EAAE,sBAAsB,CAAC,KAAK,CAAC;QACxC,KAAK;QACL,SAAS;QACT,UAAU;KACX,CAAC,CAAC;IACH,OAAO,SAAS,EAAE;QAChB,CAAC,CAAC,+BAA+B,CAC7B,KAAK,EACL,UAAU,EACV,sBAAsB,CAAC,KAAK,CAAC,CAC9B;QACH,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAkC,EAClC,SAAyB,EACzB,UAA+B,EAC/B,OAAqC;IAErC,IACE,OAAO,CAAC,uBAAuB;QAC/B,oCAAoC,CAAC,SAAS,CAAC,EAC/C,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,0CAA0C,UAAU,8DAA8D,CAC9J,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAkC,EAClC,SAA0C,EAC1C,UAA+B,EAC/B,IAAY,EACZ,UAAwC,EAAE,EAC1C,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,yCAAyC,CAAC;QAC/D,KAAK;QACL,SAAS;QACT,UAAU;QACV,OAAO;QACP,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,SAAS,CAAC;IAEhD,OAAO,0BAA0B,CAC/B,KAAK,EACL,SAAS,EACT,UAAU,EACV,WAAW,EACX,OAAO,EACP,SAAS,CACV,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,KAAkC,EAClC,SAA0C,EAC1C,UAA+B,EAC/B,WAAmB,EACnB,OAAqC,EACrC,SAA8B;IAE9B,MAAM,+BAA+B,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACtE,MAAM,QAAQ,GAAG,+BAA+B;QAC9C,CAAC,CAAC,MAAM,4BAA4B,CAAC;YACjC,SAAS;YACT,KAAK;YACL,SAAS;YACT,UAAU;SACX,CAAC;QACJ,CAAC,CAAC,+BAA+B,CAC7B,KAAK,EACL,UAAU,EACV,sBAAsB,CAAC,KAAK,CAAC,CAC9B,CAAC;IACN,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,6BAA6B,CAClC,KAAK,EACL,SAAS,EACT,QAAQ,EACR,OAAO,EACP,SAAS,CACV,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC;QAClE,OAAO,IAAI,CAAC;IAEd,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACjC,oCAAoC,CAClC,KAAK,EACL,SAAS,CAAC,SAAS,CAAC,EAAE,EACtB,UAAU,CACX,CAAC;QACF,+BAA+B,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,YAAY,GAChB,+BAA+B;QAC/B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QAClC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC;QAC9C,UAAU;QACV,YAAY;QACZ,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,CAAC,OAAO,CAAC,eAAe;QACzC,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QAC7B,IAAI,YAAY,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjC,KAAK,CAAC,kCAAkC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACrE,SAAS,CAAC,uBAAuB,EAAE,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,8BAA8B,CAAC;QACrD,OAAO;QACP,QAAQ,EAAE,iCAAiC,CAAC,KAAK,CAAC;QAClD,KAAK;QACL,SAAS;QACT,UAAU;QACV,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,6BAA6B,CACjD,KAAK,EACL,SAAS,EACT,SAAS,CAAC,cAAc,EACxB,OAAO,EACP,SAAS,CACV,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;IAC5B,CAAC;IACD,OAAO,eAAe,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5D,IACE,CAAC,aAAa;QACd,aAAa,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;QACzC,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,IAAI;QACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC5C,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,KAAK,WAAW,CACtE,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC;QACzC,cAAc,EAAE,aAAa;QAC7B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,OAAO,KAAK,gBAAgB;QAC5B,OAAO,KAAK,gBAAgB;QAC5B,CAAC,SAAS,EAAE,EACZ,CAAC;QACD,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;QACxC,MAAM,SAAS,CAAC,sBAAsB,EAAE,CAAC;QACzC,wEAAwE;QACxE,0EAA0E;QAC1E,+CAA+C;QAC/C,IACE,OAAO,KAAK,SAAS;YACrB,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,aAAa,EACtE,CAAC;YACD,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACxD,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACvC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtB,+BAA+B,CAAC,KAAK,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QACD,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,SAAS,CAAC,sBAAsB,CAAC;gBACrC,2BAA2B,EAAE,KAAK;gBAClC,SAAS,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAC7C,sBAAsB,EAAE,IAAI;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACxD,0EAA0E;IAC1E,yEAAyE;IACzE,qDAAqD;IACrD,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;IACvC,SAAS,CAAC,YAAY,EAAE,CAAC;IACzB,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACvC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,wBAAwB,aAAa,CAAC,SAAS,CAAC,IAAI,GAAG,CACnG,CAAC;IACF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,IAAY,EACZ,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QACxC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK;QACrB,CAAC,WAAW,EACZ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,aAAa,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjD,OAAO,eAAe,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,aAAa,GACjB,MAAM,oCAAoC,CAAC,aAAa,CAAC,CAAC;IAC5D,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,uCAAuC,CAAC;QAC5D,aAAa,EAAE,aAAa;QAC5B,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,2BAA2B,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC5C,8BAA8B,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,qCAAqC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACpE,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACvC,SAAS,CAAC,YAAY,EAAE,CAAC;IACzB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,2BAA2B,WAAW,GAAG,CACrF,CAAC;IACF,OAAO,eAAe,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,QAAgB,EAChB,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,iBAAiB,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7D,IACE,CAAC,aAAa;QACd,CAAC,iBAAiB;QAClB,aAAa,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;QACzC,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,IAAI;QACrD,oBAAoB,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,EAAE,WAAW,CAAC,EACjE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,aAAa,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,eAAe,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IACD,uBAAuB,CAAC,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAErE,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,iBAAiB;QACnC,CAAC,CAAC;YACE,UAAU,EAAE;gBACV,iBAAiB,EAAE,QAAQ;gBAC3B,yBAAyB,EAAE,aAAa,CAAC,SAAS,CAAC,QAAQ;aAC5D;SACF;QACH,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,aAAa,EAAE;QAClE,KAAK,EAAE,EAAE,QAAQ,EAAE;QACnB,WAAW;QACX,SAAS;KACV,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAClE,SAAS,CAAC,YAAY,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,iBAAiB;QAC9B,CAAC,CAAC,uBAAuB;QACzB,CAAC,CAAC,iBAAiB,CAAC;IACtB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,KAAK,MAAM,IAAI,WAAW,UAAU,QAAQ,EAAE,CAC1F,CAAC;IACF,OAAO,eAAe,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC","sourcesContent":["import type { ContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport { createChildContainerState } from \"../../../workflows/container-contents/container-state/create/createChild\";\nimport { deleteContainerState } from \"../../../workflows/container-contents/container-state/delete\";\nimport {\n  assertLocalChildPathFits,\n  assertLocalMovePathFits,\n} from \"../../../workflows/container-contents/container-state/localPathDepth\";\nimport {\n  installContainerMetadataRecord,\n  renameContainerMetadataStateFromRuntime,\n} from \"../../../workflows/container-contents/metadata\";\nimport {\n  createDetachedContainerMetadataState,\n  installDetachedContainerMetadataState,\n} from \"../../../workflows/container-contents/metadata/metadataStateIsolation\";\nimport { persistContainerState } from \"../containerState/containerStatePersistence\";\nimport { removeMissingContainerState } from \"../containerState/missingContainerState\";\nimport { getContainerContentsStoreLogLabel } from \"../logLabel\";\nimport {\n  invalidateRemoteContainerWrites,\n  invalidateRemoteSystemContainerWrite,\n} from \"../remoteWrites/remoteWriteGuards\";\nimport type { ContainerWriteGuard } from \"../remoteWrites/writeGeneration\";\nimport { updateContainerContentsSnapshot } from \"../state\";\nimport type {\n  ContainerContentsStoreSyncAgent,\n  ContainerState,\n} from \"../syncAgent\";\nimport { updateExistingSystemContainer } from \"../systemContainers/existingSystemContainer\";\nimport { ensureOrganizationMetadataSystemContainer } from \"../systemContainers/organizationMetadataSystemContainer\";\nimport { probeExistingSystemContainer } from \"../systemContainers/systemContainerHydration\";\nimport {\n  findRootContainerState,\n  findSystemContainerStateForRoot,\n} from \"../systemContainers/systemContainerLookup\";\nimport { finalizeCreatedSystemContainer } from \"../systemContainers/systemContainerPostCreate\";\nimport { hasAdvancedManagedPrincipalReference } from \"../systemContainers/systemContainerPromotion\";\nimport type {\n  ContainerContentsStoreState,\n  EnsureSystemContainerOptions,\n} from \"../types\";\nimport { isContainerInSubtree, toContainerNode } from \"../utils\";\n\nexport async function createChildContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  parentId: string,\n  name: string,\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  const trimmedName = name.trim();\n  if (\n    state.runtime.infra.dbStatus !== \"ready\" ||\n    !state.snapshot.ready ||\n    !trimmedName\n  ) {\n    return null;\n  }\n\n  const parentState = state.containersById.get(parentId);\n  if (!parentState) {\n    return null;\n  }\n  assertLocalChildPathFits(state.containersById, parentId);\n\n  const created = await createChildContainerState({\n    createRemote: false,\n    name: trimmedName,\n    parentState,\n    persistence: state.persistence,\n    resolveProjectionUserKey: state.resolveProjectionUserKey,\n    runtime: state.runtime,\n    stillCurrent: isCurrent,\n  });\n  if (!created || !isCurrent()) return null;\n\n  state.containersById.set(\n    created.containerState.container.id,\n    created.containerState,\n  );\n  updateContainerContentsSnapshot(state);\n  if (created.shouldRequestSync) {\n    syncAgent.scheduleSync();\n  }\n  state.runtime.util.log(\n    `${getContainerContentsStoreLogLabel(state)}: created container \"${trimmedName}\"`,\n  );\n  return toContainerNode(created.containerState);\n}\n\nfunction canEnsureSystemContainer(\n  state: ContainerContentsStoreState,\n  name: string,\n): boolean {\n  return (\n    state.runtime.infra.dbStatus === \"ready\" && state.snapshot.ready && !!name\n  );\n}\n\nasync function findOrHydrateSystemContainer(input: {\n  isCurrent: ContainerWriteGuard;\n  state: ContainerContentsStoreState;\n  syncAgent: ContainerContentsStoreSyncAgent;\n  systemSlot: ContainerSystemSlot;\n}): Promise<ContainerState | null> {\n  const { isCurrent, state, syncAgent, systemSlot } = input;\n  const existing = findSystemContainerStateForRoot(\n    state,\n    systemSlot,\n    findRootContainerState(state),\n  );\n  if (\n    existing ||\n    !state.runtime.auth.isAuthenticated ||\n    !state.runtime.state.online\n  ) {\n    return existing;\n  }\n  await probeExistingSystemContainer({\n    logLabel: getContainerContentsStoreLogLabel(state),\n    rootState: findRootContainerState(state),\n    state,\n    syncAgent,\n    systemSlot,\n  });\n  return isCurrent()\n    ? findSystemContainerStateForRoot(\n        state,\n        systemSlot,\n        findRootContainerState(state),\n      )\n    : null;\n}\n\nfunction canCreateSystemContainer(\n  state: ContainerContentsStoreState,\n  rootState: ContainerState,\n  systemSlot: ContainerSystemSlot,\n  options: EnsureSystemContainerOptions,\n): boolean {\n  if (\n    options.skipAdvancedManagedRoot &&\n    hasAdvancedManagedPrincipalReference(rootState)\n  ) {\n    state.runtime.util.log(\n      `${getContainerContentsStoreLogLabel(state)}: skipped background system container \"${systemSlot}\" because the root has advanced managed-principal references`,\n    );\n    return false;\n  }\n\n  return true;\n}\n\nexport async function ensureSystemContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  systemSlot: ContainerSystemSlot,\n  name: string,\n  options: EnsureSystemContainerOptions = {},\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  const trimmedName = name.trim();\n  if (!canEnsureSystemContainer(state, trimmedName)) {\n    return null;\n  }\n\n  const metadata = await ensureOrganizationMetadataSystemContainer({\n    state,\n    syncAgent,\n    systemSlot,\n    options,\n    isCurrent,\n  });\n  if (!isCurrent()) return null;\n  if (metadata.handled) return metadata.container;\n\n  return ensureChildSystemContainer(\n    state,\n    syncAgent,\n    systemSlot,\n    trimmedName,\n    options,\n    isCurrent,\n  );\n}\n\nasync function ensureChildSystemContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  systemSlot: ContainerSystemSlot,\n  trimmedName: string,\n  options: EnsureSystemContainerOptions,\n  isCurrent: ContainerWriteGuard,\n) {\n  const allowSynchronousRemoteBootstrap = !options.deferRemoteBootstrap;\n  const existing = allowSynchronousRemoteBootstrap\n    ? await findOrHydrateSystemContainer({\n        isCurrent,\n        state,\n        syncAgent,\n        systemSlot,\n      })\n    : findSystemContainerStateForRoot(\n        state,\n        systemSlot,\n        findRootContainerState(state),\n      );\n  if (!isCurrent()) return null;\n  if (existing) {\n    return updateExistingSystemContainer(\n      state,\n      syncAgent,\n      existing,\n      options,\n      isCurrent,\n    );\n  }\n\n  const rootState = findRootContainerState(state);\n  if (!rootState) {\n    return null;\n  }\n  if (!canCreateSystemContainer(state, rootState, systemSlot, options))\n    return null;\n\n  if (options.deferRemoteBootstrap) {\n    invalidateRemoteSystemContainerWrite(\n      state,\n      rootState.container.id,\n      systemSlot,\n    );\n    invalidateRemoteContainerWrites(state, [rootState.container.id]);\n  }\n  const createRemote =\n    allowSynchronousRemoteBootstrap &&\n    state.runtime.auth.isAuthenticated &&\n    Boolean(state.runtime.crypto.encapsulationKeyPair);\n  const created = await createChildContainerState({\n    systemSlot,\n    createRemote,\n    icon: options.icon,\n    name: trimmedName,\n    parentState: rootState,\n    persistence: state.persistence,\n    queueRemoteSync: !options.deferRemoteSync,\n    resolveProjectionUserKey: state.resolveProjectionUserKey,\n    runtime: state.runtime,\n    stillCurrent: isCurrent,\n  });\n  if (!created || !isCurrent()) {\n    if (createRemote && !isCurrent()) {\n      state.containerParentIdsNeedingHydration.add(rootState.container.id);\n      syncAgent.scheduleRemoteHydration();\n    }\n    return null;\n  }\n\n  const finalized = await finalizeCreatedSystemContainer({\n    created,\n    logLabel: getContainerContentsStoreLogLabel(state),\n    state,\n    syncAgent,\n    systemSlot,\n    isCurrent,\n  });\n  if (!finalized || !isCurrent()) return null;\n  if (finalized.adopted) {\n    const updated = await updateExistingSystemContainer(\n      state,\n      syncAgent,\n      finalized.containerState,\n      options,\n      isCurrent,\n    );\n    if (!updated) return null;\n  }\n  return toContainerNode(finalized.containerState);\n}\n\nexport async function deleteContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  if (state.runtime.infra.dbStatus !== \"ready\" || !state.snapshot.ready) {\n    return null;\n  }\n\n  const existingState = state.containersById.get(containerId);\n  if (\n    !existingState ||\n    existingState.container.parentId === null ||\n    (existingState.container.systemSlot ?? null) !== null ||\n    Array.from(state.containersById.values()).some(\n      (containerState) => containerState.container.parentId === containerId,\n    )\n  ) {\n    return null;\n  }\n\n  const isRemoteContainer = Boolean(existingState.record.documentId);\n  if (isRemoteContainer) {\n    if (!state.runtime.auth.isAuthenticated || !state.runtime.state.online) {\n      return null;\n    }\n  }\n\n  const deletedNode = toContainerNode(existingState);\n  const deleted = await deleteContainerState({\n    containerState: existingState,\n    persistence: state.persistence,\n    runtime: state.runtime,\n    stillCurrent: isCurrent,\n  });\n  if (deleted === \"remote-failed\") {\n    return null;\n  }\n  if (\n    deleted === \"local-conflict\" ||\n    deleted === \"remote-deleted\" ||\n    !isCurrent()\n  ) {\n    state.localContainersNeedRefresh = true;\n    await syncAgent.refreshLocalContainers();\n    // The delete committed before this operation lost its generation. Evict\n    // only the exact state it deleted: a concurrent replacement with the same\n    // id owns a different object and must survive.\n    if (\n      deleted === \"deleted\" &&\n      state.containersById.get(existingState.container.id) === existingState\n    ) {\n      state.containersById.delete(existingState.container.id);\n      state.documentStoresNeedPriming = true;\n      if (state.initialized) {\n        updateContainerContentsSnapshot(state);\n      }\n    }\n    if (isRemoteContainer) {\n      await syncAgent.requestRemoteHydration({\n        followDiscoveredParentLanes: false,\n        parentIds: [existingState.container.parentId],\n        resetAllLaneWatermarks: true,\n      });\n    }\n    return null;\n  }\n\n  state.containersById.delete(existingState.container.id);\n  // The persistence cascade may have orphaned descendant documents (row 3);\n  // re-arm document priming and nudge the lane so their null-scoped passes\n  // run now rather than on the next unrelated trigger.\n  state.documentStoresNeedPriming = true;\n  syncAgent.scheduleSync();\n  updateContainerContentsSnapshot(state);\n  state.runtime.util.log(\n    `${getContainerContentsStoreLogLabel(state)}: deleted container \"${existingState.container.name}\"`,\n  );\n  return deletedNode;\n}\n\nexport async function renameContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  name: string,\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  const trimmedName = name.trim();\n  if (\n    state.runtime.infra.dbStatus !== \"ready\" ||\n    !state.snapshot.ready ||\n    !trimmedName\n  ) {\n    return null;\n  }\n\n  const existingState = state.containersById.get(containerId);\n  if (!existingState) {\n    return null;\n  }\n\n  if (existingState.container.name === trimmedName) {\n    return toContainerNode(existingState);\n  }\n\n  const detachedState =\n    await createDetachedContainerMetadataState(existingState);\n  if (!isCurrent()) return null;\n  const renamed = await renameContainerMetadataStateFromRuntime({\n    metadataState: detachedState,\n    name: trimmedName,\n    persistence: state.persistence,\n    runtime: state.runtime,\n    stillCurrent: isCurrent,\n  });\n  if (!isCurrent()) return null;\n  if (!renamed) {\n    removeMissingContainerState(state, existingState);\n    return null;\n  }\n\n  detachedState.container = renamed.container;\n  installContainerMetadataRecord(detachedState, renamed.record);\n  installDetachedContainerMetadataState(existingState, detachedState);\n  updateContainerContentsSnapshot(state);\n  syncAgent.scheduleSync();\n  state.runtime.util.log(\n    `${getContainerContentsStoreLogLabel(state)}: renamed container to \"${trimmedName}\"`,\n  );\n  return toContainerNode(existingState);\n}\n\nexport async function moveContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  parentId: string,\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  if (state.runtime.infra.dbStatus !== \"ready\" || !state.snapshot.ready) {\n    return null;\n  }\n\n  const existingState = state.containersById.get(containerId);\n  const targetParentState = state.containersById.get(parentId);\n  if (\n    !existingState ||\n    !targetParentState ||\n    existingState.container.parentId === null ||\n    (existingState.container.systemSlot ?? null) !== null ||\n    isContainerInSubtree(state.containersById, parentId, containerId)\n  ) {\n    return null;\n  }\n\n  if (existingState.container.parentId === parentId) {\n    return toContainerNode(existingState);\n  }\n  assertLocalMovePathFits(state.containersById, containerId, parentId);\n\n  const isRemoteContainer = Boolean(existingState.record.documentId);\n  const saveOptions = isRemoteContainer\n    ? {\n        moveIntent: {\n          parentContainerId: parentId,\n          previousParentContainerId: existingState.container.parentId,\n        },\n      }\n    : { createIntent: { parentContainerId: parentId } };\n  const persisted = await persistContainerState(state, existingState, {\n    patch: { parentId },\n    saveOptions,\n    isCurrent,\n  });\n  if (persisted.status !== \"persisted\" || !isCurrent()) return null;\n  syncAgent.scheduleSync();\n  const action = isRemoteContainer\n    ? \"queued container move\"\n    : \"moved container\";\n  state.runtime.util.log(\n    `${getContainerContentsStoreLogLabel(state)}: ${action} ${containerId} under ${parentId}`,\n  );\n  return toContainerNode(existingState);\n}\n"]}

package/stores/container-contents/operations/purgeContainerOperation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purgeContainerOperation.js","sourceRoot":"","sources":["purgeContainerOperation.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,oEAAoE;AACpE,iFAAiF;AACjF,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,OAAsB,EACtB,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,OAAO,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE;QAC1E,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CACjC,qBAAqB,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,MAAM,CAAC,kBAAkB,CAAC,MAAM,0BAA0B,MAAM,CAAC,WAAW,UAAU;QACxI,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC;QACvE,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CACzB,MAAM,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;YAClC,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,IAAI;KACjD,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { PurgeOptions } from \"../../../workflows/container-contents/container-state/purge/purgeProgress\";\nimport type { ContainerWriteGuard } from \"../remoteWrites/writeGeneration\";\nimport type { ContainerContentsStoreSyncAgent } from \"../syncAgent\";\nimport type { ContainerContentsStoreState } from \"../types\";\nimport { runContainerPurge } from \"./containerPurgeCore\";\n\n// Permanently destroy a container and everything beneath it. Unlike\n// deleteContainer (a leaf-only hard delete), this cascades: documents whose last\n// link is inside the subtree are purged, multi-folder documents are unlinked\n// from the subtree only, and descendant containers are deleted leaf-first. The\n// caller (the trash \"Delete Forever\" action) restricts this to folders under\n// trash; here we keep the same structural guards deleteContainer uses — never a\n// root and never a system container itself.\nexport async function purgeContainer(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  options?: PurgeOptions,\n  isCurrent: ContainerWriteGuard = () => true,\n): Promise<boolean> {\n  return runContainerPurge(state, syncAgent, containerId, options, isCurrent, {\n    describeResult: (target, result) =>\n      `purged container \"${target.container.name}\" (${result.purgedContainerIds.length} container(s) removed, ${result.failedCount} failed)`,\n    didSucceed: (result) => result.purgedContainerIds.includes(containerId),\n    validateTarget: (target) =>\n      target.container.parentId !== null &&\n      (target.container.systemSlot ?? null) === null,\n  });\n}\n"]}

package/stores/container-contents/operations/reportShareFailure.js

@@ -0,0 +1,44 @@
+import { isKeyingVerificationError } from "../../../data/keyingProjectionVerification/error.js";
+import { isProjectionVerificationCancelledError } from "../../../workflows/containers/index.js";
+import { isDatabaseUnavailableError } from "../../../workflows/documents/index.js";
+import { getContainerContentsStoreLogLabel } from "../logLabel.js";
+// Both host callbacks are declared `=> void` but may be async (see
+// Tearleads.logError), and this runs from a catch that rethrows to the caller,
+// where a throwing logger would replace the share failure with its own.
+function dispatchToHost(call) {
+    try {
+        void Promise.resolve(call()).catch(() => undefined);
+    }
+    catch {
+        // Hosts may throw synchronously or return a rejected promise.
+    }
+}
+/**
+ * Report a thrown container share through the host's diagnostics before the
+ * failure propagates to the UI. The app can only show a generic label, so this
+ * is the one place the actual failure — a persistence error or an invariant
+ * throw — is observable off the device.
+ * Purely observational: the error is always rethrown by the caller unchanged.
+ */
+export function reportContainerShareFailure(state, operation, error) {
+    const message = `${getContainerContentsStoreLogLabel(state)}: ${operation} failed`;
+    // Not an app failure, so it stays local: the runtime is released under
+    // in-flight callers on every identity switch and host-driven database retry,
+    // a projection verification cancelled by a newer generation re-runs on its
+    // own, and a keying verification refusal (a rollback or a relabeled group,
+    // which a duplicate grant can race into) belongs to the security-incident
+    // path rather than app diagnostics.
+    if (isDatabaseUnavailableError(error) ||
+        isProjectionVerificationCancelledError(error) ||
+        isKeyingVerificationError(error)) {
+        dispatchToHost(() => state.runtime.util.log(message));
+        return;
+    }
+    const { logError } = state.runtime.util;
+    if (!logError) {
+        dispatchToHost(() => state.runtime.util.log(message));
+        return;
+    }
+    dispatchToHost(() => logError(message, error));
+}
+//# sourceMappingURL=reportShareFailure.js.map

package/stores/container-contents/operations/reportShareFailure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reportShareFailure.js","sourceRoot":"","sources":["reportShareFailure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAC7F,OAAO,EAAE,sCAAsC,EAAE,MAAM,+BAA+B,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,iCAAiC,EAAE,MAAM,aAAa,CAAC;AAGhE,mEAAmE;AACnE,+EAA+E;AAC/E,wEAAwE;AACxE,SAAS,cAAc,CAAC,IAAmB;IACzC,IAAI,CAAC;QACH,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAkC,EAClC,SAAiB,EACjB,KAAc;IAEd,MAAM,OAAO,GAAG,GAAG,iCAAiC,CAAC,KAAK,CAAC,KAAK,SAAS,SAAS,CAAC;IACnF,uEAAuE;IACvE,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,oCAAoC;IACpC,IACE,0BAA0B,CAAC,KAAK,CAAC;QACjC,sCAAsC,CAAC,KAAK,CAAC;QAC7C,yBAAyB,CAAC,KAAK,CAAC,EAChC,CAAC;QACD,cAAc,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,cAAc,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,cAAc,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AACjD,CAAC","sourcesContent":["import { isKeyingVerificationError } from \"../../../data/keyingProjectionVerification/error\";\nimport { isProjectionVerificationCancelledError } from \"../../../workflows/containers\";\nimport { isDatabaseUnavailableError } from \"../../../workflows/documents\";\nimport { getContainerContentsStoreLogLabel } from \"../logLabel\";\nimport type { ContainerContentsStoreState } from \"../types\";\n\n// Both host callbacks are declared `=> void` but may be async (see\n// Tearleads.logError), and this runs from a catch that rethrows to the caller,\n// where a throwing logger would replace the share failure with its own.\nfunction dispatchToHost(call: () => unknown): void {\n  try {\n    void Promise.resolve(call()).catch(() => undefined);\n  } catch {\n    // Hosts may throw synchronously or return a rejected promise.\n  }\n}\n\n/**\n * Report a thrown container share through the host's diagnostics before the\n * failure propagates to the UI. The app can only show a generic label, so this\n * is the one place the actual failure — a persistence error or an invariant\n * throw — is observable off the device.\n * Purely observational: the error is always rethrown by the caller unchanged.\n */\nexport function reportContainerShareFailure(\n  state: ContainerContentsStoreState,\n  operation: string,\n  error: unknown,\n): void {\n  const message = `${getContainerContentsStoreLogLabel(state)}: ${operation} failed`;\n  // Not an app failure, so it stays local: the runtime is released under\n  // in-flight callers on every identity switch and host-driven database retry,\n  // a projection verification cancelled by a newer generation re-runs on its\n  // own, and a keying verification refusal (a rollback or a relabeled group,\n  // which a duplicate grant can race into) belongs to the security-incident\n  // path rather than app diagnostics.\n  if (\n    isDatabaseUnavailableError(error) ||\n    isProjectionVerificationCancelledError(error) ||\n    isKeyingVerificationError(error)\n  ) {\n    dispatchToHost(() => state.runtime.util.log(message));\n    return;\n  }\n\n  const { logError } = state.runtime.util;\n  if (!logError) {\n    dispatchToHost(() => state.runtime.util.log(message));\n    return;\n  }\n\n  dispatchToHost(() => logError(message, error));\n}\n"]}

package/stores/container-contents/operations/setContainerIconOperation.js

@@ -0,0 +1,47 @@
+import { installContainerMetadataRecord, setContainerIconMetadataStateFromRuntime, } from "../../../workflows/container-contents/metadata/index.js";
+import { createDetachedContainerMetadataState, installDetachedContainerMetadataState, } from "../../../workflows/container-contents/metadata/metadataStateIsolation.js";
+import { removeMissingContainerState } from "../containerState/missingContainerState.js";
+import { getContainerContentsStoreLogLabel } from "../logLabel.js";
+import { updateContainerContentsSnapshot } from "../state.js";
+import { toContainerNode } from "../utils.js";
+// Set the icon shown for a container. Mirrors renameContainer's write path: it
+// writes the icon into the container metadata document (CRDT), enqueues the
+// incremental update, persists, and schedules a sync. A null icon clears the
+// custom icon back to the default folder. No-ops when the icon is unchanged.
+export async function setContainerIcon(state, syncAgent, containerId, icon, isCurrent = () => true) {
+    if (state.runtime.infra.dbStatus !== "ready" || !state.snapshot.ready) {
+        return null;
+    }
+    const existingState = state.containersById.get(containerId);
+    if (!existingState) {
+        return null;
+    }
+    const normalizedIcon = icon?.trim() || null;
+    if ((existingState.container.icon ?? null) === normalizedIcon) {
+        return toContainerNode(existingState);
+    }
+    const detachedState = await createDetachedContainerMetadataState(existingState);
+    if (!isCurrent())
+        return null;
+    const updated = await setContainerIconMetadataStateFromRuntime({
+        icon: normalizedIcon,
+        metadataState: detachedState,
+        persistence: state.persistence,
+        runtime: state.runtime,
+        stillCurrent: isCurrent,
+    });
+    if (!isCurrent())
+        return null;
+    if (!updated) {
+        removeMissingContainerState(state, existingState);
+        return null;
+    }
+    detachedState.container = updated.container;
+    installContainerMetadataRecord(detachedState, updated.record);
+    installDetachedContainerMetadataState(existingState, detachedState);
+    updateContainerContentsSnapshot(state);
+    syncAgent.scheduleSync();
+    state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: set container ${containerId} icon to "${normalizedIcon ?? "folder"}"`);
+    return toContainerNode(existingState);
+}
+//# sourceMappingURL=setContainerIconOperation.js.map

package/stores/container-contents/operations/setContainerIconOperation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setContainerIconOperation.js","sourceRoot":"","sources":["setContainerIconOperation.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,wCAAwC,GACzC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,uEAAuE,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,iCAAiC,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAG3D,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAE3C,+EAA+E;AAC/E,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,IAAmB,EACnB,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IAC5C,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,cAAc,EAAE,CAAC;QAC9D,OAAO,eAAe,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,aAAa,GACjB,MAAM,oCAAoC,CAAC,aAAa,CAAC,CAAC;IAC5D,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,wCAAwC,CAAC;QAC7D,IAAI,EAAE,cAAc;QACpB,aAAa,EAAE,aAAa;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,2BAA2B,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC5C,8BAA8B,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,qCAAqC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACpE,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACvC,SAAS,CAAC,YAAY,EAAE,CAAC;IACzB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,mBAAmB,WAAW,aAAa,cAAc,IAAI,QAAQ,GAAG,CACpH,CAAC;IACF,OAAO,eAAe,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC","sourcesContent":["import {\n  installContainerMetadataRecord,\n  setContainerIconMetadataStateFromRuntime,\n} from \"../../../workflows/container-contents/metadata\";\nimport {\n  createDetachedContainerMetadataState,\n  installDetachedContainerMetadataState,\n} from \"../../../workflows/container-contents/metadata/metadataStateIsolation\";\nimport { removeMissingContainerState } from \"../containerState/missingContainerState\";\nimport { getContainerContentsStoreLogLabel } from \"../logLabel\";\nimport type { ContainerWriteGuard } from \"../remoteWrites/writeGeneration\";\nimport { updateContainerContentsSnapshot } from \"../state\";\nimport type { ContainerContentsStoreSyncAgent } from \"../syncAgent\";\nimport type { ContainerContentsStoreState } from \"../types\";\nimport { toContainerNode } from \"../utils\";\n\n// Set the icon shown for a container. Mirrors renameContainer's write path: it\n// writes the icon into the container metadata document (CRDT), enqueues the\n// incremental update, persists, and schedules a sync. A null icon clears the\n// custom icon back to the default folder. No-ops when the icon is unchanged.\nexport async function setContainerIcon(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  icon: string | null,\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  if (state.runtime.infra.dbStatus !== \"ready\" || !state.snapshot.ready) {\n    return null;\n  }\n\n  const existingState = state.containersById.get(containerId);\n  if (!existingState) {\n    return null;\n  }\n\n  const normalizedIcon = icon?.trim() || null;\n  if ((existingState.container.icon ?? null) === normalizedIcon) {\n    return toContainerNode(existingState);\n  }\n\n  const detachedState =\n    await createDetachedContainerMetadataState(existingState);\n  if (!isCurrent()) return null;\n  const updated = await setContainerIconMetadataStateFromRuntime({\n    icon: normalizedIcon,\n    metadataState: detachedState,\n    persistence: state.persistence,\n    runtime: state.runtime,\n    stillCurrent: isCurrent,\n  });\n  if (!isCurrent()) return null;\n  if (!updated) {\n    removeMissingContainerState(state, existingState);\n    return null;\n  }\n\n  detachedState.container = updated.container;\n  installContainerMetadataRecord(detachedState, updated.record);\n  installDetachedContainerMetadataState(existingState, detachedState);\n  updateContainerContentsSnapshot(state);\n  syncAgent.scheduleSync();\n  state.runtime.util.log(\n    `${getContainerContentsStoreLogLabel(state)}: set container ${containerId} icon to \"${normalizedIcon ?? \"folder\"}\"`,\n  );\n  return toContainerNode(existingState);\n}\n"]}

package/stores/container-contents/operations/shareOperations.js

@@ -0,0 +1,90 @@
+import { runWithSecurityIncidentReporting } from "../../../data/keyingProjectionVerification/error.js";
+import { shareContainerState, shareContainerStateWithGroup, } from "../../../workflows/container-contents/container-state/share/index.js";
+import { installContainerMetadataRecord } from "../../../workflows/container-contents/metadata/index.js";
+import { removeMissingContainerState } from "../containerState/missingContainerState.js";
+import { getContainerContentsStoreLogLabel } from "../logLabel.js";
+import { updateContainerContentsSnapshot } from "../state.js";
+import { reportContainerShareFailure } from "./reportShareFailure.js";
+export async function shareContainerUsing(state, syncAgent, containerId, share, logMessage, isCurrent = () => true) {
+    if (state.runtime.infra.dbStatus !== "ready" ||
+        !state.snapshot.ready ||
+        !state.runtime.auth.isAuthenticated ||
+        !state.runtime.state.online ||
+        !isCurrent()) {
+        return false;
+    }
+    const existingState = state.containersById.get(containerId);
+    const expectedAccessStateHash = existingState?.record.accessStateHash;
+    if (!existingState?.record.documentId ||
+        typeof expectedAccessStateHash !== "string" ||
+        expectedAccessStateHash.length === 0) {
+        return false;
+    }
+    let shared;
+    try {
+        shared = await share(existingState);
+    }
+    catch (error) {
+        reportContainerShareFailure(state, "share", error);
+        throw error;
+    }
+    if (!shared || !isCurrent() || shared.status === "confirmed") {
+        if (!isCurrent() || shared?.status === "confirmed") {
+            state.localContainersNeedRefresh = true;
+            state.containerParentIdsNeedingHydration.add(existingState.container.parentId);
+            void syncAgent.refreshLocalContainers();
+            syncAgent.scheduleRemoteHydration();
+        }
+        return shared?.status === "confirmed" || shared?.status === "persisted";
+    }
+    if (shared.status === "missing") {
+        removeMissingContainerState(state, existingState);
+        return false;
+    }
+    existingState.container = shared.container;
+    installContainerMetadataRecord(existingState, shared.record);
+    updateContainerContentsSnapshot(state);
+    if (shared.status === "identity-superseded")
+        return false;
+    await syncAgent.primeDocumentsForSharedSubtree(containerId, isCurrent);
+    if (!isCurrent())
+        return true;
+    syncAgent.scheduleSync();
+    state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: ${logMessage}`);
+    return true;
+}
+export async function shareContainerWithUser(state, syncAgent, containerId, userId, isCurrent = () => true) {
+    return shareContainerUsing(state, syncAgent, containerId, (containerState) => shareContainerState({
+        accessLevel: "write",
+        containerState,
+        persistence: state.persistence,
+        recipientUserId: userId,
+        resolveProjectionUserKey: state.resolveProjectionUserKey,
+        runtime: state.runtime,
+        stillCurrent: isCurrent,
+    }), `shared container ${containerId} with ${userId}`, isCurrent);
+}
+export async function shareContainerWithGroup(state, syncAgent, containerId, groupId, accessLevel, options = {}, isCurrent = () => true) {
+    return shareContainerUsing(state, syncAgent, containerId, (containerState) => 
+    // A group share is where a relabeled directory row would misdirect a
+    // key wrap, so its verification failures (the signed-name mismatch
+    // above all) are recorded as security incidents, not just surfaced.
+    runWithSecurityIncidentReporting(state.runtime.util.reportSecurityIncident, {
+        objectId: containerId,
+        objectKind: "container",
+        operation: "container.share.group",
+        organizationId: containerState.container.organizationId,
+    }, () => shareContainerStateWithGroup({
+        accessLevel,
+        containerState,
+        expectedGroupName: options.expectedGroupName,
+        knownContainerKeks: options.knownContainerKeks,
+        persistence: state.persistence,
+        recipientGroupId: groupId,
+        requireExistingGrant: options.requireExistingGrant,
+        resolveProjectionUserKey: state.resolveProjectionUserKey,
+        runtime: state.runtime,
+        stillCurrent: isCurrent,
+    })), `shared container ${containerId} with group ${groupId}`, isCurrent);
+}
+//# sourceMappingURL=shareOperations.js.map

package/stores/container-contents/operations/shareOperations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shareOperations.js","sourceRoot":"","sources":["shareOperations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,kDAAkD,CAAC;AACpG,OAAO,EACL,mBAAmB,EACnB,4BAA4B,GAC7B,MAAM,6DAA6D,CAAC;AAErE,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAChG,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,iCAAiC,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAS3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAEnE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,KAE+C,EAC/C,UAAkB,EAClB,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QACxC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK;QACrB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM;QAC3B,CAAC,SAAS,EAAE,EACZ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,uBAAuB,GAAG,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC;IACtE,IACE,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU;QACjC,OAAO,uBAAuB,KAAK,QAAQ;QAC3C,uBAAuB,CAAC,MAAM,KAAK,CAAC,EACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,MAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2BAA2B,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC7D,IAAI,CAAC,SAAS,EAAE,IAAI,MAAM,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;YACnD,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;YACxC,KAAK,CAAC,kCAAkC,CAAC,GAAG,CAC1C,aAAa,CAAC,SAAS,CAAC,QAAQ,CACjC,CAAC;YACF,KAAK,SAAS,CAAC,sBAAsB,EAAE,CAAC;YACxC,SAAS,CAAC,uBAAuB,EAAE,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,EAAE,MAAM,KAAK,WAAW,IAAI,MAAM,EAAE,MAAM,KAAK,WAAW,CAAC;IAC1E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,2BAA2B,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC3C,8BAA8B,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,MAAM,KAAK,qBAAqB;QAAE,OAAO,KAAK,CAAC;IAE1D,MAAM,SAAS,CAAC,8BAA8B,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,SAAS,CAAC,YAAY,EAAE,CAAC;IACzB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,KAAK,UAAU,EAAE,CAC7D,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,MAAc,EACd,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,OAAO,mBAAmB,CACxB,KAAK,EACL,SAAS,EACT,WAAW,EACX,CAAC,cAAc,EAAE,EAAE,CACjB,mBAAmB,CAAC;QAClB,WAAW,EAAE,OAAO;QACpB,cAAc;QACd,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,MAAM;QACvB,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,EACJ,oBAAoB,WAAW,SAAS,MAAM,EAAE,EAChD,SAAS,CACV,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,OAAe,EACf,WAA8C,EAC9C,UAII,EAAE,EACN,YAAiC,GAAG,EAAE,CAAC,IAAI;IAE3C,OAAO,mBAAmB,CACxB,KAAK,EACL,SAAS,EACT,WAAW,EACX,CAAC,cAAc,EAAE,EAAE;IACjB,qEAAqE;IACrE,mEAAmE;IACnE,oEAAoE;IACpE,gCAAgC,CAC9B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACzC;QACE,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,uBAAuB;QAClC,cAAc,EAAE,cAAc,CAAC,SAAS,CAAC,cAAc;KACxD,EACD,GAAG,EAAE,CACH,4BAA4B,CAAC;QAC3B,WAAW;QACX,cAAc;QACd,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,gBAAgB,EAAE,OAAO;QACzB,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CACL,EACH,oBAAoB,WAAW,eAAe,OAAO,EAAE,EACvD,SAAS,CACV,CAAC;AACJ,CAAC","sourcesContent":["import { runWithSecurityIncidentReporting } from \"../../../data/keyingProjectionVerification/error\";\nimport {\n  shareContainerState,\n  shareContainerStateWithGroup,\n} from \"../../../workflows/container-contents/container-state/share\";\nimport type { SharedContainerStateResult } from \"../../../workflows/container-contents/container-state/types\";\nimport { installContainerMetadataRecord } from \"../../../workflows/container-contents/metadata\";\nimport { removeMissingContainerState } from \"../containerState/missingContainerState\";\nimport { getContainerContentsStoreLogLabel } from \"../logLabel\";\nimport type { ContainerWriteGuard } from \"../remoteWrites/writeGeneration\";\nimport { updateContainerContentsSnapshot } from \"../state\";\nimport type {\n  ContainerContentsStoreSyncAgent,\n  ContainerState,\n} from \"../syncAgent\";\nimport type {\n  ContainerContentsShareAccessLevel,\n  ContainerContentsStoreState,\n} from \"../types\";\nimport { reportContainerShareFailure } from \"./reportShareFailure\";\n\nexport async function shareContainerUsing(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  share: (\n    containerState: ContainerState,\n  ) => Promise<SharedContainerStateResult | null>,\n  logMessage: string,\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  if (\n    state.runtime.infra.dbStatus !== \"ready\" ||\n    !state.snapshot.ready ||\n    !state.runtime.auth.isAuthenticated ||\n    !state.runtime.state.online ||\n    !isCurrent()\n  ) {\n    return false;\n  }\n\n  const existingState = state.containersById.get(containerId);\n  const expectedAccessStateHash = existingState?.record.accessStateHash;\n  if (\n    !existingState?.record.documentId ||\n    typeof expectedAccessStateHash !== \"string\" ||\n    expectedAccessStateHash.length === 0\n  ) {\n    return false;\n  }\n\n  let shared: SharedContainerStateResult | null;\n  try {\n    shared = await share(existingState);\n  } catch (error) {\n    reportContainerShareFailure(state, \"share\", error);\n    throw error;\n  }\n  if (!shared || !isCurrent() || shared.status === \"confirmed\") {\n    if (!isCurrent() || shared?.status === \"confirmed\") {\n      state.localContainersNeedRefresh = true;\n      state.containerParentIdsNeedingHydration.add(\n        existingState.container.parentId,\n      );\n      void syncAgent.refreshLocalContainers();\n      syncAgent.scheduleRemoteHydration();\n    }\n    return shared?.status === \"confirmed\" || shared?.status === \"persisted\";\n  }\n  if (shared.status === \"missing\") {\n    removeMissingContainerState(state, existingState);\n    return false;\n  }\n\n  existingState.container = shared.container;\n  installContainerMetadataRecord(existingState, shared.record);\n  updateContainerContentsSnapshot(state);\n  if (shared.status === \"identity-superseded\") return false;\n\n  await syncAgent.primeDocumentsForSharedSubtree(containerId, isCurrent);\n  if (!isCurrent()) return true;\n  syncAgent.scheduleSync();\n  state.runtime.util.log(\n    `${getContainerContentsStoreLogLabel(state)}: ${logMessage}`,\n  );\n  return true;\n}\n\nexport async function shareContainerWithUser(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  userId: string,\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  return shareContainerUsing(\n    state,\n    syncAgent,\n    containerId,\n    (containerState) =>\n      shareContainerState({\n        accessLevel: \"write\",\n        containerState,\n        persistence: state.persistence,\n        recipientUserId: userId,\n        resolveProjectionUserKey: state.resolveProjectionUserKey,\n        runtime: state.runtime,\n        stillCurrent: isCurrent,\n      }),\n    `shared container ${containerId} with ${userId}`,\n    isCurrent,\n  );\n}\n\nexport async function shareContainerWithGroup(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  groupId: string,\n  accessLevel: ContainerContentsShareAccessLevel,\n  options: {\n    expectedGroupName?: string | undefined;\n    knownContainerKeks?: ReadonlyMap<string, Uint8Array> | undefined;\n    requireExistingGrant?: boolean | undefined;\n  } = {},\n  isCurrent: ContainerWriteGuard = () => true,\n) {\n  return shareContainerUsing(\n    state,\n    syncAgent,\n    containerId,\n    (containerState) =>\n      // A group share is where a relabeled directory row would misdirect a\n      // key wrap, so its verification failures (the signed-name mismatch\n      // above all) are recorded as security incidents, not just surfaced.\n      runWithSecurityIncidentReporting(\n        state.runtime.util.reportSecurityIncident,\n        {\n          objectId: containerId,\n          objectKind: \"container\",\n          operation: \"container.share.group\",\n          organizationId: containerState.container.organizationId,\n        },\n        () =>\n          shareContainerStateWithGroup({\n            accessLevel,\n            containerState,\n            expectedGroupName: options.expectedGroupName,\n            knownContainerKeks: options.knownContainerKeks,\n            persistence: state.persistence,\n            recipientGroupId: groupId,\n            requireExistingGrant: options.requireExistingGrant,\n            resolveProjectionUserKey: state.resolveProjectionUserKey,\n            runtime: state.runtime,\n            stillCurrent: isCurrent,\n          }),\n      ),\n    `shared container ${containerId} with group ${groupId}`,\n    isCurrent,\n  );\n}\n"]}

package/stores/container-contents/remoteEvents/remoteBackedContainerState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteBackedContainerState.js","sourceRoot":"","sources":["remoteBackedContainerState.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,4BAA4B,CAC1C,cAA8B;IAE9B,OAAO,CACL,OAAO,cAAc,CAAC,SAAS,CAAC,kBAAkB,KAAK,QAAQ;QAC/D,cAAc,CAAC,SAAS,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;QACtD,OAAO,cAAc,CAAC,MAAM,CAAC,UAAU,KAAK,QAAQ;QACpD,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAC3C,OAAO,cAAc,CAAC,MAAM,CAAC,eAAe,KAAK,QAAQ;QACzD,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CACjD,CAAC;AACJ,CAAC","sourcesContent":["import type { ContainerState } from \"../../../workflows/container-contents/remoteHydration\";\n\nexport function isRemoteBackedContainerState(\n  containerState: ContainerState,\n): boolean {\n  return (\n    typeof containerState.container.metadataDocumentId === \"string\" &&\n    containerState.container.metadataDocumentId.length > 0 &&\n    typeof containerState.record.documentId === \"string\" &&\n    containerState.record.documentId.length > 0 &&\n    typeof containerState.record.accessStateHash === \"string\" &&\n    containerState.record.accessStateHash.length > 0\n  );\n}\n"]}