@tearleads/client-sdk 0.1.63 → 0.1.65

package/workflows/container-contents/remoteHydration/destination/verifiedDestination.js

@@ -0,0 +1,296 @@
+import { KeyingVerificationError, } from "../../../../internal/crypto/index.js";
+import { deriveOrganizationMetadataContainerSystemSlot } from "../../../../internal/validators/containerSystemSlot.js";
+import { listingRepeatsHeldOrdinaryBinding, } from "../../../../data/containers/containerBinding.js";
+import { verifiedContainerCreateManifest } from "../../../../data/keyingProjectionVerification/container/containerCreateManifest.js";
+import { verifyContainerDestinationProjection } from "../../../../data/keyingProjectionVerification/container/containerDestinationVerification.js";
+import { verifyContainerWriterProjection } from "../../../../data/keyingProjectionVerification/container/containerProjectionVerification.js";
+import { isKeyingVerificationError, reportKeyingVerificationErrorInCauseChain, runWithSecurityIncidentReporting, } from "../../../../data/keyingProjectionVerification/error.js";
+import { verifyRuntimeGroupMetadataAuthority } from "../../../organizations/groupMetadata/runtimeGroupMetadataAuthority.js";
+import { createRuntimePrincipalPolicyWarmer } from "../../../principals/runtimePolicyWarmer.js";
+import { cachedDestinationRole, rememberDestinationRole, } from "./destinationRoleCache.js";
+import { resolveWithMetadataRootReload } from "./destinationRootReload.js";
+import { assertPermittedDestinationBinding } from "./replacementBinding.js";
+async function destinationRoleFromPath(input) {
+    const { listed, path } = input;
+    const head = path.at(-1);
+    if (!head ||
+        head.state.containerId !== listed.id ||
+        head.state.organizationId !== listed.organizationId) {
+        throw new KeyingVerificationError("object_mismatch", "container destination manifest has the wrong identity");
+    }
+    const metadataSlot = await deriveOrganizationMetadataContainerSystemSlot({
+        organizationId: listed.organizationId,
+    });
+    if (head.state.systemSlot !== null &&
+        path.length !== (head.state.systemSlot === metadataSlot ? 1 : 2)) {
+        throw new KeyingVerificationError("invalid_shape", "system destination has the wrong signed topology");
+    }
+    // The head may be a later grant signed by any admin; only the epoch-1
+    // create names the creator, and roots are always created by the org owner.
+    const created = verifiedContainerCreateManifest({
+        head,
+        label: "Container destination",
+        verifiedByHash: input.verifiedByHash,
+    });
+    const root = path[0];
+    if (!root)
+        throw new Error("Destination root is unavailable");
+    const rootCreated = verifiedContainerCreateManifest({
+        head: root,
+        label: "Destination root",
+        verifiedByHash: input.verifiedByHash,
+    });
+    return {
+        parentId: head.state.parentContainerId,
+        role: {
+            createSignerUserId: created.event.event.signerUserId,
+            rootContainerId: rootCreated.state.containerId,
+            rootCreateManifestHash: rootCreated.manifestHash,
+            rootMetadataDocumentId: rootCreated.state.metadataDocumentId,
+            metadataDocumentId: head.state.metadataDocumentId,
+            ...(head.state.parentContainerId === null ||
+                head.state.systemSlot !== null
+                ? { parentId: head.state.parentContainerId }
+                : {}),
+            systemSlot: head.state.systemSlot,
+        },
+    };
+}
+/**
+ * The session's root id arrives in an unsigned login response, so the root it
+ * names must prove it belongs to this user: every acknowledged organization was
+ * created by the session user, whose device signed the root's `container.create`.
+ * A verified root created by anyone else is a substitution, never the merge
+ * target for pre-login local content, whatever grants it carries. The check
+ * runs on cache reuse too, since the cache is not scoped to the session user.
+ */
+function assertRootCreatedBySessionUser(role, runtime) {
+    if (role.systemSlot !== null) {
+        throw new KeyingVerificationError("object_mismatch", "acknowledged session root cannot be a system container");
+    }
+    if (role.createSignerUserId !== runtime.auth.userId) {
+        throw new KeyingVerificationError("signer_mismatch", "acknowledged session root was not created by the session user");
+    }
+}
+function assertAcknowledgedRootSigner(input) {
+    const { listed, role, runtime } = input;
+    if (role.parentId !== null || listed.id !== runtime.auth.rootContainerId) {
+        return;
+    }
+    assertRootCreatedBySessionUser(role, runtime);
+}
+/**
+ * Authenticate destination roles before admitting a binding or advancing any
+ * placement pin. Shared rehomes additionally require signed replacement evidence.
+ */
+async function verifyDestinationRole(input) {
+    const { isCurrent, listed, runtime } = input;
+    const projection = input.prefetched
+        ? input.prefetched.projection
+        : await runtime.apiClient.getContainerWriterProjection(listed.id);
+    if (!projection || isCurrent?.() === false)
+        return null;
+    if (projection.containerId !== listed.id ||
+        projection.organizationId !== listed.organizationId) {
+        throw new KeyingVerificationError("object_mismatch", "container destination projection has the wrong identity");
+    }
+    const verificationInput = {
+        execSql: runtime.infra.execSql,
+        projection,
+        resolveUserKey: runtime.resolveTrustedUserIdentity,
+        stillCurrent: isCurrent,
+        warmReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(runtime),
+    };
+    const { path, verifiedByHash } = await verifyContainerDestinationProjection(verificationInput);
+    if (isCurrent?.() === false)
+        return null;
+    const destination = await destinationRoleFromPath({
+        listed,
+        path,
+        verifiedByHash,
+    });
+    const { role } = destination;
+    // Refuse a rebinding before group checks or placement pins run for it.
+    await assertPermittedDestinationBinding({
+        stillCurrent: isCurrent,
+        heldBinding: input.heldBinding,
+        listed,
+        role,
+        runtime,
+    });
+    if (isCurrent?.() === false)
+        return null;
+    if (role.parentId === null && role.systemSlot !== null) {
+        const head = path.at(-1);
+        if (!head)
+            throw new Error("Metadata root manifest is unavailable");
+        await verifyRuntimeGroupMetadataAuthority({
+            runtime,
+            organizationId: listed.organizationId,
+            organizationReference: projection.policyEvidence.organization?.head,
+            state: head.state,
+            stillCurrent: isCurrent ?? (() => true),
+        });
+    }
+    if (isCurrent?.() === false)
+        return null;
+    if (input.verifyCurrentPlacement) {
+        // Check the immutable role before allowing current placement to advance pins.
+        assertAcknowledgedRootSigner({ listed, role, runtime });
+        const currentPath = await verifyContainerWriterProjection({
+            ...verificationInput,
+            stillCurrent: isCurrent,
+        });
+        const currentHead = currentPath.at(-1);
+        if (!currentHead)
+            throw new Error("Recovery placement manifest is unavailable");
+        input.onVerifiedCheckpoint?.(currentHead.checkpoint);
+    }
+    if (isCurrent?.() === false)
+        return null;
+    return destination;
+}
+/** A cached immutable role, or a freshly verified one with its signed parent. */
+async function resolveDestinationRole(input) {
+    const { remoteContainer: listed, isCurrent } = input;
+    const runtime = input.state.runtime;
+    const cached = input.refresh
+        ? undefined
+        : cachedDestinationRole(runtime.infra.execSql, listed);
+    // Ordinary parent edges are not immutable. A refresh authenticates current
+    // placement; a forged root hint must also be corrected from a signed path.
+    if (cached && !(cached.parentId === undefined && listed.parentId === null)) {
+        return { freshlyVerified: false, parentId: cached.parentId, role: cached };
+    }
+    const verified = await verifyDestinationRole({
+        heldBinding: input.heldBinding,
+        prefetched: input.refresh ? undefined : input.prefetchedProjection,
+        isCurrent,
+        listed,
+        runtime,
+        verifyCurrentPlacement: input.refresh === true,
+        onVerifiedCheckpoint: input.onVerifiedCheckpoint,
+    });
+    if (!verified)
+        return null;
+    return {
+        freshlyVerified: true,
+        parentId: input.refresh || listed.parentId === null
+            ? verified.parentId
+            : verified.role.parentId,
+        role: verified.role,
+    };
+}
+/**
+ * Listing hints never establish a metadata target or a system/root role, and a
+ * held folder keeps its organization and metadata target unless its own user
+ * re-created it or its pinned founder authorized a verified replacement.
+ * A conflicting proof is refused before placement pins
+ * advance or its role is cached.
+ */
+export async function verifyRemoteContainerDestination(input) {
+    const { remoteContainer: listed, state, isCurrent } = input;
+    const runtime = state.runtime;
+    return runWithSecurityIncidentReporting(runtime.util.reportSecurityIncident, {
+        objectId: listed.id,
+        objectKind: "container",
+        operation: "container.destination.verify",
+        organizationId: listed.organizationId,
+    }, async () => {
+        if (input.supersededListing) {
+            throw new KeyingVerificationError("object_mismatch", "container was re-homed away from the listed organization");
+        }
+        // A held ordinary binding was verified (or signed by this device) when
+        // it was stored; a listing that repeats it needs no second proof.
+        if (!input.refresh &&
+            listingRepeatsHeldOrdinaryBinding(input.heldBinding, listed)) {
+            return { ...listed, systemSlot: null };
+        }
+        if (input.refresh)
+            runtime.apiClient.evictContainerWriterProjection(listed.id);
+        // A metadata root read before a reserved-group commit is reloaded once.
+        const resolved = await resolveWithMetadataRootReload(input, resolveDestinationRole, () => runtime.apiClient.evictContainerWriterProjection(listed.id)).catch((error) => {
+            // Never re-serve a cached projection that failed verification.
+            if (isKeyingVerificationError(error))
+                runtime.apiClient.evictContainerWriterProjection(listed.id);
+            throw error;
+        });
+        if (!resolved || isCurrent?.() === false)
+            return null;
+        const { role, parentId } = resolved;
+        // Fresh verification checked this binding before any placement pins.
+        // A cached role still needs the held binding and replacement proof checked.
+        if (!resolved.freshlyVerified)
+            await assertPermittedDestinationBinding({
+                stillCurrent: isCurrent,
+                heldBinding: input.heldBinding,
+                listed,
+                role,
+                runtime,
+            });
+        if (isCurrent?.() === false)
+            return null;
+        if (resolved.freshlyVerified)
+            rememberDestinationRole(runtime.infra.execSql, listed, role);
+        assertAcknowledgedRootSigner({ listed, role, runtime });
+        return {
+            ...listed,
+            metadataDocumentId: role.metadataDocumentId,
+            parentId: parentId === undefined ? listed.parentId : parentId,
+            systemSlot: role.systemSlot,
+        };
+    });
+}
+/** The root the unsigned login answer named, in the expected organization. */
+export function isSessionRootState(remoteRootState, state) {
+    const { container } = remoteRootState;
+    const { auth } = state.runtime;
+    return (container.parentId === null &&
+        !container.systemSlot &&
+        container.id === auth.rootContainerId &&
+        container.organizationId === auth.organizationId);
+}
+/**
+ * Whether the session root may absorb the pre-login local roots. The unsigned
+ * login answer only names the root; the merge target must also be the verified
+ * root whose epoch-1 `container.create` the session user signed. A row persisted
+ * earlier as an ordinary shared container (another user's root this device once
+ * hydrated) never passed that check for this session, so the creator is checked
+ * here, at the reconciliation boundary itself, before any local content is
+ * re-parented. The role comes only from the cache remote hydration fills when
+ * it verifies the destination: this gate never fetches, so a local refresh stays
+ * independent of the network. Without a cached role the merge is left pending
+ * (no incident) until hydration verifies the root and reconciles from the
+ * cache. A different creator is a `signer_mismatch` incident and never a merge;
+ * the refusal is the "no merge" outcome, so the refresh that carried it
+ * completes with the local content left in place.
+ */
+export async function isVerifiedLocalRootReconciliationTarget(input) {
+    const { remoteRootState, state } = input;
+    const { container } = remoteRootState;
+    const runtime = state.runtime;
+    if (!isSessionRootState(remoteRootState, state))
+        return false;
+    const role = cachedDestinationRole(runtime.infra.execSql, container);
+    if (!role)
+        return false;
+    try {
+        if (role.parentId !== null) {
+            throw new KeyingVerificationError("object_mismatch", "session root reconciliation target is not a verified root");
+        }
+        assertRootCreatedBySessionUser(role, runtime);
+        return true;
+    }
+    catch (error) {
+        const reported = await reportKeyingVerificationErrorInCauseChain(error, runtime.util.reportSecurityIncident, {
+            objectId: container.id,
+            objectKind: "container",
+            operation: "container.root.reconcile",
+            organizationId: container.organizationId,
+        });
+        if (!reported)
+            throw error;
+        return false;
+    }
+}
+//# sourceMappingURL=verifiedDestination.js.map

package/workflows/container-contents/remoteHydration/destination/verifiedDestination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedDestination.js","sourceRoot":"","sources":["verifiedDestination.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,6CAA6C,EAAE,MAAM,2CAA2C,CAAC;AAC1G,OAAO,EAEL,iCAAiC,GAClC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,+BAA+B,EAAE,MAAM,iFAAiF,CAAC;AAClI,OAAO,EAAE,oCAAoC,EAAE,MAAM,0FAA0F,CAAC;AAChJ,OAAO,EAAE,+BAA+B,EAAE,MAAM,yFAAyF,CAAC;AAC1I,OAAO,EACL,yBAAyB,EACzB,yCAAyC,EACzC,gCAAgC,GACjC,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,mCAAmC,EAAE,MAAM,oEAAoE,CAAC;AACzH,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAO7F,OAAO,EACL,qBAAqB,EAErB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAKzE,KAAK,UAAU,uBAAuB,CAAC,KAItC;IACC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,IACE,CAAC,IAAI;QACL,IAAI,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,EAAE;QACpC,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EACnD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,6CAA6C,CAAC;QACvE,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC,CAAC;IACH,IACE,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI;QAC9B,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAChE,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,sEAAsE;IACtE,2EAA2E;IAC3E,MAAM,OAAO,GAAG,+BAA+B,CAAC;QAC9C,IAAI;QACJ,KAAK,EAAE,uBAAuB;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,+BAA+B,CAAC;QAClD,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,kBAAkB;QACzB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB;QACtC,IAAI,EAAE;YACJ,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY;YACpD,eAAe,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW;YAC9C,sBAAsB,EAAE,WAAW,CAAC,YAAY;YAChD,sBAAsB,EAAE,WAAW,CAAC,KAAK,CAAC,kBAAkB;YAC5D,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB;YACjD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,KAAK,IAAI;gBACzC,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI;gBAC5B,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;SAClC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,8BAA8B,CACrC,IAAqB,EACrB,OAAiD;IAEjD,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,+DAA+D,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,KAIrC;IACC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QACzE,OAAO;IACT,CAAC;IACD,8BAA8B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,qBAAqB,CAAC,KAUpC;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC7C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU;QACjC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;QAC7B,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACxD,IACE,UAAU,CAAC,WAAW,KAAK,MAAM,CAAC,EAAE;QACpC,UAAU,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EACnD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG;QACxB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,UAAU;QACV,cAAc,EAAE,OAAO,CAAC,0BAA0B;QAClD,YAAY,EAAE,SAAS;QACvB,+BAA+B,EAC7B,kCAAkC,CAAC,OAAO,CAAC;KAC9C,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAC5B,MAAM,oCAAoC,CAAC,iBAAiB,CAAC,CAAC;IAChE,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC;QAChD,MAAM;QACN,IAAI;QACJ,cAAc;KACf,CAAC,CAAC;IACH,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC;IAC7B,uEAAuE;IACvE,MAAM,iCAAiC,CAAC;QACtC,YAAY,EAAE,SAAS;QACvB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM;QACN,IAAI;QACJ,OAAO;KACR,CAAC,CAAC;IACH,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACpE,MAAM,mCAAmC,CAAC;YACxC,OAAO;YACP,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,qBAAqB,EAAE,UAAU,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI;YACnE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;SACxC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACjC,8EAA8E;QAC9E,4BAA4B,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,MAAM,+BAA+B,CAAC;YACxD,GAAG,iBAAiB;YACpB,YAAY,EAAE,SAAS;SACxB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,WAAW;YACd,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,KAAK,CAAC,oBAAoB,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,WAAW,CAAC;AACrB,CAAC;AAiBD,iFAAiF;AACjF,KAAK,UAAU,sBAAsB,CACnC,KAA4C;IAM5C,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACrD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO;QAC1B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzD,2EAA2E;IAC3E,2EAA2E;IAC3E,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;QAC3C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB;QAClE,SAAS;QACT,MAAM;QACN,OAAO;QACP,sBAAsB,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;QAC9C,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;KACjD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO;QACL,eAAe,EAAE,IAAI;QACrB,QAAQ,EACN,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;YACvC,CAAC,CAAC,QAAQ,CAAC,QAAQ;YACnB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ;QAC5B,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAA4C;IAE5C,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;QACE,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,8BAA8B;QACzC,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,EACD,KAAK,IAAI,EAAE;QACT,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,kEAAkE;QAClE,IACE,CAAC,KAAK,CAAC,OAAO;YACd,iCAAiC,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,EAC5D,CAAC;YACD,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;QACD,IAAI,KAAK,CAAC,OAAO;YACf,OAAO,CAAC,SAAS,CAAC,8BAA8B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,wEAAwE;QACxE,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAClD,KAAK,EACL,sBAAsB,EACtB,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,8BAA8B,CAAC,MAAM,CAAC,EAAE,CAAC,CAClE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACzB,+DAA+D;YAC/D,IAAI,yBAAyB,CAAC,KAAK,CAAC;gBAClC,OAAO,CAAC,SAAS,CAAC,8BAA8B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACtD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;QACpC,qEAAqE;QACrE,4EAA4E;QAC5E,IAAI,CAAC,QAAQ,CAAC,eAAe;YAC3B,MAAM,iCAAiC,CAAC;gBACtC,YAAY,EAAE,SAAS;gBACvB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM;gBACN,IAAI;gBACJ,OAAO;aACR,CAAC,CAAC;QACL,IAAI,SAAS,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,QAAQ,CAAC,eAAe;YAC1B,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/D,4BAA4B,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO;YACL,GAAG,MAAM;YACT,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,QAAQ,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;YAC7D,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAChC,eAA+B,EAC/B,KAAoC;IAEpC,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC;IACtC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IAC/B,OAAO,CACL,SAAS,CAAC,QAAQ,KAAK,IAAI;QAC3B,CAAC,SAAS,CAAC,UAAU;QACrB,SAAS,CAAC,EAAE,KAAK,IAAI,CAAC,eAAe;QACrC,SAAS,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc,CACjD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,KAG7D;IACC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACzC,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,8BAA8B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,MAAM,yCAAyC,CAC9D,KAAK,EACL,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,SAAS,CAAC,EAAE;YACtB,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,0BAA0B;YACrC,cAAc,EAAE,SAAS,CAAC,cAAc;SACzC,CACF,CAAC;QACF,IAAI,CAAC,QAAQ;YAAE,MAAM,KAAK,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["import {\n  type AccessManifestCheckpoint,\n  KeyingVerificationError,\n  type VerifiedContainerAccessManifest,\n} from \"@tearleads/crypto\";\nimport { deriveOrganizationMetadataContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport {\n  type HeldContainerBinding,\n  listingRepeatsHeldOrdinaryBinding,\n} from \"../../../../data/containers/containerBinding\";\nimport { verifiedContainerCreateManifest } from \"../../../../data/keyingProjectionVerification/container/containerCreateManifest\";\nimport { verifyContainerDestinationProjection } from \"../../../../data/keyingProjectionVerification/container/containerDestinationVerification\";\nimport { verifyContainerWriterProjection } from \"../../../../data/keyingProjectionVerification/container/containerProjectionVerification\";\nimport {\n  isKeyingVerificationError,\n  reportKeyingVerificationErrorInCauseChain,\n  runWithSecurityIncidentReporting,\n} from \"../../../../data/keyingProjectionVerification/error\";\nimport { verifyRuntimeGroupMetadataAuthority } from \"../../../organizations/groupMetadata/runtimeGroupMetadataAuthority\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../../principals/runtimePolicyWarmer\";\nimport type {\n  ContainerState,\n  RemoteContainer,\n  RemoteContainerHydrationState,\n} from \"../types\";\nimport type { PrefetchedDestinationProjection } from \"./destinationPrefetch\";\nimport {\n  cachedDestinationRole,\n  type DestinationRole,\n  rememberDestinationRole,\n} from \"./destinationRoleCache\";\nimport { resolveWithMetadataRootReload } from \"./destinationRootReload\";\nimport { assertPermittedDestinationBinding } from \"./replacementBinding\";\n\n/** The identity a role is verified and cached under. */\ntype DestinationIdentity = Pick<RemoteContainer, \"id\" | \"organizationId\">;\n\nasync function destinationRoleFromPath(input: {\n  listed: DestinationIdentity;\n  path: readonly VerifiedContainerAccessManifest[];\n  verifiedByHash: ReadonlyMap<string, VerifiedContainerAccessManifest>;\n}): Promise<{ role: DestinationRole; parentId: string | null }> {\n  const { listed, path } = input;\n  const head = path.at(-1);\n  if (\n    !head ||\n    head.state.containerId !== listed.id ||\n    head.state.organizationId !== listed.organizationId\n  ) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"container destination manifest has the wrong identity\",\n    );\n  }\n  const metadataSlot = await deriveOrganizationMetadataContainerSystemSlot({\n    organizationId: listed.organizationId,\n  });\n  if (\n    head.state.systemSlot !== null &&\n    path.length !== (head.state.systemSlot === metadataSlot ? 1 : 2)\n  ) {\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"system destination has the wrong signed topology\",\n    );\n  }\n  // The head may be a later grant signed by any admin; only the epoch-1\n  // create names the creator, and roots are always created by the org owner.\n  const created = verifiedContainerCreateManifest({\n    head,\n    label: \"Container destination\",\n    verifiedByHash: input.verifiedByHash,\n  });\n  const root = path[0];\n  if (!root) throw new Error(\"Destination root is unavailable\");\n  const rootCreated = verifiedContainerCreateManifest({\n    head: root,\n    label: \"Destination root\",\n    verifiedByHash: input.verifiedByHash,\n  });\n  return {\n    parentId: head.state.parentContainerId,\n    role: {\n      createSignerUserId: created.event.event.signerUserId,\n      rootContainerId: rootCreated.state.containerId,\n      rootCreateManifestHash: rootCreated.manifestHash,\n      rootMetadataDocumentId: rootCreated.state.metadataDocumentId,\n      metadataDocumentId: head.state.metadataDocumentId,\n      ...(head.state.parentContainerId === null ||\n      head.state.systemSlot !== null\n        ? { parentId: head.state.parentContainerId }\n        : {}),\n      systemSlot: head.state.systemSlot,\n    },\n  };\n}\n\n/**\n * The session's root id arrives in an unsigned login response, so the root it\n * names must prove it belongs to this user: every acknowledged organization was\n * created by the session user, whose device signed the root's `container.create`.\n * A verified root created by anyone else is a substitution, never the merge\n * target for pre-login local content, whatever grants it carries. The check\n * runs on cache reuse too, since the cache is not scoped to the session user.\n */\nfunction assertRootCreatedBySessionUser(\n  role: DestinationRole,\n  runtime: RemoteContainerHydrationState[\"runtime\"],\n): void {\n  if (role.systemSlot !== null) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"acknowledged session root cannot be a system container\",\n    );\n  }\n  if (role.createSignerUserId !== runtime.auth.userId) {\n    throw new KeyingVerificationError(\n      \"signer_mismatch\",\n      \"acknowledged session root was not created by the session user\",\n    );\n  }\n}\n\nfunction assertAcknowledgedRootSigner(input: {\n  listed: DestinationIdentity;\n  role: DestinationRole;\n  runtime: RemoteContainerHydrationState[\"runtime\"];\n}): void {\n  const { listed, role, runtime } = input;\n  if (role.parentId !== null || listed.id !== runtime.auth.rootContainerId) {\n    return;\n  }\n  assertRootCreatedBySessionUser(role, runtime);\n}\n\n/**\n * Authenticate destination roles before admitting a binding or advancing any\n * placement pin. Shared rehomes additionally require signed replacement evidence.\n */\nasync function verifyDestinationRole(input: {\n  heldBinding: HeldContainerBinding | null;\n  prefetched: PrefetchedDestinationProjection | undefined;\n  verifyCurrentPlacement: boolean;\n  onVerifiedCheckpoint:\n    | ((checkpoint: AccessManifestCheckpoint) => void)\n    | undefined;\n  isCurrent?: (() => boolean) | undefined;\n  listed: DestinationIdentity;\n  runtime: RemoteContainerHydrationState[\"runtime\"];\n}): Promise<{ role: DestinationRole; parentId: string | null } | null> {\n  const { isCurrent, listed, runtime } = input;\n  const projection = input.prefetched\n    ? input.prefetched.projection\n    : await runtime.apiClient.getContainerWriterProjection(listed.id);\n  if (!projection || isCurrent?.() === false) return null;\n  if (\n    projection.containerId !== listed.id ||\n    projection.organizationId !== listed.organizationId\n  ) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"container destination projection has the wrong identity\",\n    );\n  }\n  const verificationInput = {\n    execSql: runtime.infra.execSql,\n    projection,\n    resolveUserKey: runtime.resolveTrustedUserIdentity,\n    stillCurrent: isCurrent,\n    warmReferencedPrincipalPolicies:\n      createRuntimePrincipalPolicyWarmer(runtime),\n  };\n  const { path, verifiedByHash } =\n    await verifyContainerDestinationProjection(verificationInput);\n  if (isCurrent?.() === false) return null;\n  const destination = await destinationRoleFromPath({\n    listed,\n    path,\n    verifiedByHash,\n  });\n  const { role } = destination;\n  // Refuse a rebinding before group checks or placement pins run for it.\n  await assertPermittedDestinationBinding({\n    stillCurrent: isCurrent,\n    heldBinding: input.heldBinding,\n    listed,\n    role,\n    runtime,\n  });\n  if (isCurrent?.() === false) return null;\n  if (role.parentId === null && role.systemSlot !== null) {\n    const head = path.at(-1);\n    if (!head) throw new Error(\"Metadata root manifest is unavailable\");\n    await verifyRuntimeGroupMetadataAuthority({\n      runtime,\n      organizationId: listed.organizationId,\n      organizationReference: projection.policyEvidence.organization?.head,\n      state: head.state,\n      stillCurrent: isCurrent ?? (() => true),\n    });\n  }\n  if (isCurrent?.() === false) return null;\n  if (input.verifyCurrentPlacement) {\n    // Check the immutable role before allowing current placement to advance pins.\n    assertAcknowledgedRootSigner({ listed, role, runtime });\n    const currentPath = await verifyContainerWriterProjection({\n      ...verificationInput,\n      stillCurrent: isCurrent,\n    });\n    const currentHead = currentPath.at(-1);\n    if (!currentHead)\n      throw new Error(\"Recovery placement manifest is unavailable\");\n    input.onVerifiedCheckpoint?.(currentHead.checkpoint);\n  }\n  if (isCurrent?.() === false) return null;\n  return destination;\n}\n\ntype VerifyRemoteContainerDestinationInput = {\n  heldBinding: HeldContainerBinding | null;\n  /** The held folder was re-homed away from the listed organization. */\n  supersededListing?: boolean | undefined;\n  /** Fetched ahead by page hydration; ignored when placement is refreshed. */\n  prefetchedProjection?: PrefetchedDestinationProjection | undefined;\n  refresh?: boolean;\n  onVerifiedCheckpoint?:\n    | ((checkpoint: AccessManifestCheckpoint) => void)\n    | undefined;\n  remoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n  isCurrent?: (() => boolean) | undefined;\n};\n\n/** A cached immutable role, or a freshly verified one with its signed parent. */\nasync function resolveDestinationRole(\n  input: VerifyRemoteContainerDestinationInput,\n): Promise<{\n  freshlyVerified: boolean;\n  parentId: string | null | undefined;\n  role: DestinationRole;\n} | null> {\n  const { remoteContainer: listed, isCurrent } = input;\n  const runtime = input.state.runtime;\n  const cached = input.refresh\n    ? undefined\n    : cachedDestinationRole(runtime.infra.execSql, listed);\n  // Ordinary parent edges are not immutable. A refresh authenticates current\n  // placement; a forged root hint must also be corrected from a signed path.\n  if (cached && !(cached.parentId === undefined && listed.parentId === null)) {\n    return { freshlyVerified: false, parentId: cached.parentId, role: cached };\n  }\n  const verified = await verifyDestinationRole({\n    heldBinding: input.heldBinding,\n    prefetched: input.refresh ? undefined : input.prefetchedProjection,\n    isCurrent,\n    listed,\n    runtime,\n    verifyCurrentPlacement: input.refresh === true,\n    onVerifiedCheckpoint: input.onVerifiedCheckpoint,\n  });\n  if (!verified) return null;\n  return {\n    freshlyVerified: true,\n    parentId:\n      input.refresh || listed.parentId === null\n        ? verified.parentId\n        : verified.role.parentId,\n    role: verified.role,\n  };\n}\n\n/**\n * Listing hints never establish a metadata target or a system/root role, and a\n * held folder keeps its organization and metadata target unless its own user\n * re-created it or its pinned founder authorized a verified replacement.\n * A conflicting proof is refused before placement pins\n * advance or its role is cached.\n */\nexport async function verifyRemoteContainerDestination(\n  input: VerifyRemoteContainerDestinationInput,\n): Promise<RemoteContainer | null> {\n  const { remoteContainer: listed, state, isCurrent } = input;\n  const runtime = state.runtime;\n  return runWithSecurityIncidentReporting(\n    runtime.util.reportSecurityIncident,\n    {\n      objectId: listed.id,\n      objectKind: \"container\",\n      operation: \"container.destination.verify\",\n      organizationId: listed.organizationId,\n    },\n    async () => {\n      if (input.supersededListing) {\n        throw new KeyingVerificationError(\n          \"object_mismatch\",\n          \"container was re-homed away from the listed organization\",\n        );\n      }\n      // A held ordinary binding was verified (or signed by this device) when\n      // it was stored; a listing that repeats it needs no second proof.\n      if (\n        !input.refresh &&\n        listingRepeatsHeldOrdinaryBinding(input.heldBinding, listed)\n      ) {\n        return { ...listed, systemSlot: null };\n      }\n      if (input.refresh)\n        runtime.apiClient.evictContainerWriterProjection(listed.id);\n      // A metadata root read before a reserved-group commit is reloaded once.\n      const resolved = await resolveWithMetadataRootReload(\n        input,\n        resolveDestinationRole,\n        () => runtime.apiClient.evictContainerWriterProjection(listed.id),\n      ).catch((error: unknown) => {\n        // Never re-serve a cached projection that failed verification.\n        if (isKeyingVerificationError(error))\n          runtime.apiClient.evictContainerWriterProjection(listed.id);\n        throw error;\n      });\n      if (!resolved || isCurrent?.() === false) return null;\n      const { role, parentId } = resolved;\n      // Fresh verification checked this binding before any placement pins.\n      // A cached role still needs the held binding and replacement proof checked.\n      if (!resolved.freshlyVerified)\n        await assertPermittedDestinationBinding({\n          stillCurrent: isCurrent,\n          heldBinding: input.heldBinding,\n          listed,\n          role,\n          runtime,\n        });\n      if (isCurrent?.() === false) return null;\n      if (resolved.freshlyVerified)\n        rememberDestinationRole(runtime.infra.execSql, listed, role);\n      assertAcknowledgedRootSigner({ listed, role, runtime });\n      return {\n        ...listed,\n        metadataDocumentId: role.metadataDocumentId,\n        parentId: parentId === undefined ? listed.parentId : parentId,\n        systemSlot: role.systemSlot,\n      };\n    },\n  );\n}\n\n/** The root the unsigned login answer named, in the expected organization. */\nexport function isSessionRootState(\n  remoteRootState: ContainerState,\n  state: RemoteContainerHydrationState,\n): boolean {\n  const { container } = remoteRootState;\n  const { auth } = state.runtime;\n  return (\n    container.parentId === null &&\n    !container.systemSlot &&\n    container.id === auth.rootContainerId &&\n    container.organizationId === auth.organizationId\n  );\n}\n\n/**\n * Whether the session root may absorb the pre-login local roots. The unsigned\n * login answer only names the root; the merge target must also be the verified\n * root whose epoch-1 `container.create` the session user signed. A row persisted\n * earlier as an ordinary shared container (another user's root this device once\n * hydrated) never passed that check for this session, so the creator is checked\n * here, at the reconciliation boundary itself, before any local content is\n * re-parented. The role comes only from the cache remote hydration fills when\n * it verifies the destination: this gate never fetches, so a local refresh stays\n * independent of the network. Without a cached role the merge is left pending\n * (no incident) until hydration verifies the root and reconciles from the\n * cache. A different creator is a `signer_mismatch` incident and never a merge;\n * the refusal is the \"no merge\" outcome, so the refresh that carried it\n * completes with the local content left in place.\n */\nexport async function isVerifiedLocalRootReconciliationTarget(input: {\n  remoteRootState: ContainerState;\n  state: RemoteContainerHydrationState;\n}): Promise<boolean> {\n  const { remoteRootState, state } = input;\n  const { container } = remoteRootState;\n  const runtime = state.runtime;\n  if (!isSessionRootState(remoteRootState, state)) return false;\n  const role = cachedDestinationRole(runtime.infra.execSql, container);\n  if (!role) return false;\n  try {\n    if (role.parentId !== null) {\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"session root reconciliation target is not a verified root\",\n      );\n    }\n    assertRootCreatedBySessionUser(role, runtime);\n    return true;\n  } catch (error) {\n    const reported = await reportKeyingVerificationErrorInCauseChain(\n      error,\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: container.id,\n        objectKind: \"container\",\n        operation: \"container.root.reconcile\",\n        organizationId: container.organizationId,\n      },\n    );\n    if (!reported) throw error;\n    return false;\n  }\n}\n"]}

package/workflows/container-contents/remoteHydration/index.js

@@ -1,10 +1,10 @@
 import { createRuntimePrincipalPolicyWarmer } from "../../principals/runtimePolicyWarmer.js";
-import { createContainerChildIndex } from "./childIndex.js";
 import { finishRemoteHydration } from "./completeHydration.js";
-import { createContainerParentHydrationQueue } from "./parentLaneQueue.js";
+import { createContainerChildIndex } from "./lanes/childIndex.js";
+import { createContainerParentHydrationQueue } from "./lanes/parentLaneQueue.js";
 import { cacheRemoteContainerPrincipalPolicies } from "./principalPolicyCache.js";
-import { canHydrateRemoteContainers, hydrateContainerParentLanes, } from "./remoteContainerPageHydration.js";
-import { listRemoteContainerIdsWithPendingMetadataUpdates, listRemoteContainerIdsWithPendingStructuralIntents, upsertIsolatedRemoteContainerState, } from "./remoteContainerState.js";
+import { canHydrateRemoteContainers, hydrateContainerParentLanes, } from "./remoteContainers/remoteContainerPageHydration.js";
+import { listRemoteContainerIdsWithPendingMetadataUpdates, listRemoteContainerIdsWithPendingStructuralIntents, upsertIsolatedRemoteContainerState, } from "./remoteContainers/remoteContainerState.js";
 export class StaleRemoteHydrationError extends Error {
 }
 export function createGenerationGuardedHydrationHost(input) {

package/workflows/container-contents/remoteHydration/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,mCAAmC,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,qCAAqC,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,gDAAgD,EAChD,kDAAkD,EAClD,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAgBhC,MAAM,OAAO,yBAA0B,SAAQ,KAAK;CAAG;AAEvD,MAAM,UAAU,oCAAoC,CAAC,KAGpD;IACC,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,yBAAyB,EAAE,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,qBAAqB,EAAE,KAAK,EAC1B,cAAc,EACd,KAAK,EACL,UAAU,EACV,WAAW,EACX,eAAe,EACf,EAAE;YACF,MAAM,eAAe,GAAG,eAAe,EAAE,SAAS,CAAC;YACnD,MAAM,SAAS,GAAG,eAAe;gBAC/B,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,eAAe,EAAE;gBAC9C,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;YACpB,aAAa,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,qBAAqB,CACnD,cAAc,EACd,KAAK,EACL,UAAU,EACV,WAAW,EACX,EAAE,GAAG,eAAe,EAAE,SAAS,EAAE,CAClC,CAAC;YACF,aAAa,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB;YACnC,CAAC,CAAC;gBACE,sBAAsB,EAAE,GAAG,EAAE;oBAC3B,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;wBACtB,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;oBACxC,CAAC;gBACH,CAAC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,cAAc,EAAE,GAAG,EAAE;YACnB,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAWD,SAAS,+BAA+B,CACtC,KAAoC;IAEpC,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,mBAAmB;QACpC,UAAU,EAAE,KAAK,CAAC,oBAAoB;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,qCAAqC,CAC5C,IAAiD,EACjD,KAAsC;IAEtC,OAAO,CACL,IAAI,KAAK,SAAS;QAClB,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QAClC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,UAA2C,EAC3C,uBAA2D,EAC3D,KAAiC,EACjC,eAAgC;IAEhC,OAAO,CACL,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,eAAe;QACjD,qCAAqC,CACnC,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAC/C,UAAU,CACX,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAU1C;IACC,MAAM,EACJ,sCAAsC,EACtC,wCAAwC,EACxC,UAAU,EACV,uBAAuB,EACvB,IAAI,EACJ,KAAK,EACL,qBAAqB,EACrB,KAAK,GACN,GAAG,KAAK,CAAC;IACV,IACE,CAAC,KAAK,CAAC,SAAS,EAAE;QAClB,CAAC,8BAA8B,CAC7B,UAAU,EACV,uBAAuB,EACvB,KAAK,EACL,qBAAqB,CACtB,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,gCAAgC,CACzE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAC5B,CAAC;IACF,sEAAsE;IACtE,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CAAC;QACxD,0BAA0B,EACxB,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,qBAAqB,CAAC,EAAE,CAAC;YACtE,IAAI;QACN,sCAAsC;QACtC,wCAAwC;QACxC,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,qBAAqB;QACtC,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qCAAqC,CAAC,KAM9C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,qBAAqB,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACjE,IACE,8BAA8B,CAC5B,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,uBAAuB,EAC7B,KAAK,CAAC,KAAK,EACX,qBAAqB,CACtB,EACD,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;YAC7C,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,KAO9C;IACC,MAAM,EAAE,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC1E,IAAI,oBAAoB,GAAG,KAAK,CAAC;IAEjC,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,MAAM,sBAAsB,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC9D,CAAC,eAAe,EAAE,EAAE,CAClB,qCAAqC,CACnC,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAC/C,UAAU,CACX,CACJ,CAAC;YACF,IAAI,sBAAsB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO;YACT,CAAC;YACD,MAAM,qCAAqC,CAAC;gBAC1C,gCAAgC,EAAE,kCAAkC,CAClE,KAAK,CAAC,OAAO,CACd;gBACD,gBAAgB,EAAE,sBAAsB;gBACxC,YAAY,EAAE,KAAK,CAAC,SAAS;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,MAAM,CACJ,sCAAsC,EACtC,wCAAwC,EACzC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACpB,gDAAgD,CAAC;oBAC/C,gBAAgB,EAAE,sBAAsB;oBACxC,KAAK;iBACN,CAAC;gBACF,kDAAkD,CAAC;oBACjD,gBAAgB,EAAE,sBAAsB;oBACxC,KAAK;iBACN,CAAC;aACH,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,KAAK,MAAM,qBAAqB,IAAI,sBAAsB,EAAE,CAAC;gBAC3D,oBAAoB;oBAClB,CAAC,MAAM,2BAA2B,CAAC;wBACjC,sCAAsC;wBACtC,wCAAwC;wBACxC,UAAU;wBACV,uBAAuB;wBACvB,IAAI;wBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,KAAK;wBACL,qBAAqB;wBACrB,KAAK;qBACN,CAAC,CAAC,IAAI,oBAAoB,CAAC;YAChC,CAAC;YACD,qCAAqC,CAAC;gBACpC,UAAU;gBACV,uBAAuB;gBACvB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK;gBACL,sBAAsB;aACvB,CAAC,CAAC;YAEH,IAAI,oBAAoB,EAAE,CAAC;gBACzB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,oBAAoB,GAAG,KAAK,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,oBAAoB,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,wCAAwC,CAC/C,KAAoC,EACpC,UAA2C;IAE3C,OAAO,qCAAqC,CAC1C,+BAA+B,CAAC,KAAK,CAAC,EACtC,UAAU,CACX,CAAC;AACJ,CAAC;AAED,SAAS,0CAA0C,CAAC,KAKnD;IACC,MAAM,iBAAiB,GAAG,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,YAAY,GAChB,iBAAiB,CAAC,SAAS,KAAK,KAAK,CAAC,UAAU,CAAC,SAAS;QAC1D,iBAAiB,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;IAC/D,KAAK,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,uBAAuB,EAAE,CAAC;QACtE,IAAI,CAAC,qCAAqC,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,SAAS;QACX,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAClD,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,2BAA2B,GAA+B,IAAI,GAAG,EAAE,CAAC;IAC1E,MAAM,uBAAuB,GAAuC,IAAI,GAAG,EAAE,CAAC;IAC9E,IAAI,6BAA6B,GAAyB,IAAI,CAAC;IAE/D,MAAM,iBAAiB,GAAG,GAAkB,EAAE;QAC5C,IAAI,6BAA6B,EAAE,CAAC;YAClC,OAAO,6BAA6B,CAAC,IAAI,CACvC,iBAAiB,EACjB,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC1C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EACxC,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,oBAAoB,GAAG,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC;QAC/D,IAAI,oBAAoB,EAAE,CAAC;YACzB,OAAO,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,eAAe,GAAG,2BAA2B,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACxE,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,2BAA2B,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACpD,OAAO,iBAAiB,EAAE,CAAC;QAC7B,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,wCAAwC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,oCAAoC,CAAC;YACvD,IAAI;YACJ,SAAS;SACV,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE;aAClC,IAAI,CAAC,GAAG,EAAE,CACT,+BAA+B,CAAC;YAC9B,UAAU;YACV,uBAAuB;YACvB,IAAI,EAAE,WAAW;YACjB,SAAS;YACT,KAAK,EAAE,2BAA2B;YAClC,KAAK;SACN,CAAC,CACH;aACA,IAAI,CAAC,GAAG,EAAE;YACT,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACjB,0CAA0C,CAAC;oBACzC,UAAU;oBACV,uBAAuB;oBACvB,KAAK,EAAE,2BAA2B;oBAClC,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,CAAC,SAAS,EAAE,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;gBAC/D,0CAA0C,CAAC;oBACzC,UAAU;oBACV,uBAAuB;oBACvB,KAAK,EAAE,2BAA2B;oBAClC,KAAK;iBACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,6BAA6B,KAAK,WAAW,EAAE,CAAC;gBAClD,6BAA6B,GAAG,IAAI,CAAC;YACvC,CAAC;QACH,CAAC,CAAC,CAAC;QACL,6BAA6B,GAAG,WAAW,CAAC;QAC5C,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAC3B,2BAA2B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,SAAS,CACvE,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,qBAAqB,GAAG,CAAC,eAAgC,EAAE,EAAE;QACjE,2BAA2B,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;QACrE,uBAAuB,CAAC,GAAG,CACzB,eAAe,CAAC,EAAE,EAClB,+BAA+B,CAAC,KAAK,CAAC,CACvC,CAAC;QACF,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC,CAAC;IACF,qBAAqB,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,GAAG,CAAC,CAAC;IAC9E,qBAAqB,CAAC,MAAM,GAAG,iBAAiB,CAAC;IACjD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAS7C;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9B,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACxE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3E,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,mCAAmC,CAAC;QACrE,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE;QACzC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;KACrD,CAAC,CAAC;IACH,gFAAgF;IAChF,gFAAgF;IAChF,gFAAgF;IAChF,MAAM,yBAAyB,GAA6B,CAAC,WAAW,EAAE,EAAE;QAC1E,IACE,KAAK,CAAC,2BAA2B;YACjC,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EACvE,CAAC;YACD,eAAe,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC;QAC/C,kBAAkB;QAClB,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;QACL,eAAe,EAAE,yBAAyB;QAC1C,gBAAgB;QAChB,KAAK;KACN,CAAC,CAAC;IACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAChC,MAAM,qBAAqB,CAAC;QAC1B,YAAY;QACZ,QAAQ,EACN,MAAM,CAAC,QAAQ;YACf,0BAA0B,CAAC,KAAK,CAAC;YACjC,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAC/B,2BAA2B;QAC3B,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,gBAAgB;QAChB,KAAK;KACN,CAAC,CAAC;IACH,OAAO,YAAY,CAAC;AACtB,CAAC","sourcesContent":["import { createRuntimePrincipalPolicyWarmer } from \"../../principals/runtimePolicyWarmer\";\nimport { createContainerChildIndex } from \"./childIndex\";\nimport { finishRemoteHydration } from \"./completeHydration\";\nimport { createContainerParentHydrationQueue } from \"./parentLaneQueue\";\nimport { cacheRemoteContainerPrincipalPolicies } from \"./principalPolicyCache\";\nimport {\n  canHydrateRemoteContainers,\n  hydrateContainerParentLanes,\n} from \"./remoteContainerPageHydration\";\nimport {\n  listRemoteContainerIdsWithPendingMetadataUpdates,\n  listRemoteContainerIdsWithPendingStructuralIntents,\n  upsertIsolatedRemoteContainerState,\n} from \"./remoteContainerState\";\nimport type {\n  QueueContainerParentLane,\n  RemoteContainer,\n  RemoteContainerHydrationHost,\n  RemoteContainerHydrationState,\n  RemoteContainerIngestQueue,\n} from \"./types\";\n\nexport type {\n  ContainerState,\n  PersistContainerStateResult,\n  RemoteContainer,\n  RemoteContainerHydrationHost,\n} from \"./types\";\n\nexport class StaleRemoteHydrationError extends Error {}\n\nexport function createGenerationGuardedHydrationHost(input: {\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n}): RemoteContainerHydrationHost {\n  const assertCurrent = () => {\n    if (!input.isCurrent()) {\n      throw new StaleRemoteHydrationError();\n    }\n  };\n\n  return {\n    persistContainerState: async (\n      containerState,\n      patch,\n      updateView,\n      saveOptions,\n      mutationOptions,\n    ) => {\n      const callerIsCurrent = mutationOptions?.isCurrent;\n      const isCurrent = callerIsCurrent\n        ? () => input.isCurrent() && callerIsCurrent()\n        : input.isCurrent;\n      assertCurrent();\n      const record = await input.host.persistContainerState(\n        containerState,\n        patch,\n        updateView,\n        saveOptions,\n        { ...mutationOptions, isCurrent },\n      );\n      assertCurrent();\n      return record;\n    },\n    ...(input.host.requestDocumentPriming\n      ? {\n          requestDocumentPriming: () => {\n            if (input.isCurrent()) {\n              input.host.requestDocumentPriming?.();\n            }\n          },\n        }\n      : {}),\n    updateSnapshot: () => {\n      if (input.isCurrent()) {\n        input.host.updateSnapshot();\n      }\n    },\n  };\n}\n\ninterface RemoteContainerIngestGeneration {\n  readonly lifecycle: number | undefined;\n  readonly structural: number | undefined;\n}\ntype RemoteContainerIngestGenerationMap = Map<\n  string,\n  RemoteContainerIngestGeneration\n>;\n\nfunction remoteContainerIngestGeneration(\n  state: RemoteContainerHydrationState,\n): RemoteContainerIngestGeneration {\n  return {\n    lifecycle: state.lifecycleGeneration,\n    structural: state.structuralGeneration,\n  };\n}\n\nfunction remoteContainerIngestGenerationsMatch(\n  left: RemoteContainerIngestGeneration | undefined,\n  right: RemoteContainerIngestGeneration,\n): boolean {\n  return (\n    left !== undefined &&\n    left.lifecycle === right.lifecycle &&\n    left.structural === right.structural\n  );\n}\n\nfunction isCurrentQueuedRemoteContainer(\n  generation: RemoteContainerIngestGeneration,\n  generationByContainerId: RemoteContainerIngestGenerationMap,\n  queue: RemoteContainerIngestQueue,\n  remoteContainer: RemoteContainer,\n): boolean {\n  return (\n    queue.get(remoteContainer.id) === remoteContainer &&\n    remoteContainerIngestGenerationsMatch(\n      generationByContainerId.get(remoteContainer.id),\n      generation,\n    )\n  );\n}\n\nasync function upsertQueuedRemoteContainer(input: {\n  containerIdsWithPendingMetadataUpdates: ReadonlySet<string>;\n  containerIdsWithPendingStructuralIntents: ReadonlySet<string>;\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  queuedRemoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}): Promise<boolean> {\n  const {\n    containerIdsWithPendingMetadataUpdates,\n    containerIdsWithPendingStructuralIntents,\n    generation,\n    generationByContainerId,\n    host,\n    queue,\n    queuedRemoteContainer,\n    state,\n  } = input;\n  if (\n    !input.isCurrent() ||\n    !isCurrentQueuedRemoteContainer(\n      generation,\n      generationByContainerId,\n      queue,\n      queuedRemoteContainer,\n    )\n  ) {\n    return false;\n  }\n\n  const tombstones = await state.persistence.loadContainerHydrationTombstones(\n    state.runtime.infra.execSql,\n  );\n  // A refused folder is reported and acknowledged; the batch continues.\n  const upserted = await upsertIsolatedRemoteContainerState({\n    expectedHydrationTombstone:\n      tombstones.find((row) => row.containerId === queuedRemoteContainer.id) ??\n      null,\n    containerIdsWithPendingMetadataUpdates,\n    containerIdsWithPendingStructuralIntents,\n    host,\n    isCurrent: input.isCurrent,\n    remoteContainer: queuedRemoteContainer,\n    state,\n  });\n  if (!upserted) {\n    return false;\n  }\n  return true;\n}\n\nfunction acknowledgeRemoteContainerIngestBatch(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  queuedRemoteContainers: ReadonlyArray<RemoteContainer>;\n}): void {\n  if (!input.isCurrent()) {\n    return;\n  }\n  for (const queuedRemoteContainer of input.queuedRemoteContainers) {\n    if (\n      isCurrentQueuedRemoteContainer(\n        input.generation,\n        input.generationByContainerId,\n        input.queue,\n        queuedRemoteContainer,\n      )\n    ) {\n      input.queue.delete(queuedRemoteContainer.id);\n      input.generationByContainerId.delete(queuedRemoteContainer.id);\n    }\n  }\n}\n\nasync function drainRemoteContainerIngestQueue(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  state: RemoteContainerHydrationState;\n}) {\n  const { generation, generationByContainerId, host, queue, state } = input;\n  let shouldUpdateSnapshot = false;\n\n  try {\n    while (input.isCurrent()) {\n      const queuedRemoteContainers = Array.from(queue.values()).filter(\n        (remoteContainer) =>\n          remoteContainerIngestGenerationsMatch(\n            generationByContainerId.get(remoteContainer.id),\n            generation,\n          ),\n      );\n      if (queuedRemoteContainers.length === 0) {\n        return;\n      }\n      await cacheRemoteContainerPrincipalPolicies({\n        cacheReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(\n          state.runtime,\n        ),\n        remoteContainers: queuedRemoteContainers,\n        stillCurrent: input.isCurrent,\n      });\n      if (!input.isCurrent()) {\n        return;\n      }\n      const [\n        containerIdsWithPendingMetadataUpdates,\n        containerIdsWithPendingStructuralIntents,\n      ] = await Promise.all([\n        listRemoteContainerIdsWithPendingMetadataUpdates({\n          remoteContainers: queuedRemoteContainers,\n          state,\n        }),\n        listRemoteContainerIdsWithPendingStructuralIntents({\n          remoteContainers: queuedRemoteContainers,\n          state,\n        }),\n      ]);\n      if (!input.isCurrent()) {\n        return;\n      }\n\n      for (const queuedRemoteContainer of queuedRemoteContainers) {\n        shouldUpdateSnapshot =\n          (await upsertQueuedRemoteContainer({\n            containerIdsWithPendingMetadataUpdates,\n            containerIdsWithPendingStructuralIntents,\n            generation,\n            generationByContainerId,\n            host,\n            isCurrent: input.isCurrent,\n            queue,\n            queuedRemoteContainer,\n            state,\n          })) || shouldUpdateSnapshot;\n      }\n      acknowledgeRemoteContainerIngestBatch({\n        generation,\n        generationByContainerId,\n        isCurrent: input.isCurrent,\n        queue,\n        queuedRemoteContainers,\n      });\n\n      if (shouldUpdateSnapshot) {\n        host.updateSnapshot();\n        shouldUpdateSnapshot = false;\n      }\n    }\n  } catch (error) {\n    if (shouldUpdateSnapshot) {\n      host.updateSnapshot();\n    }\n    throw error;\n  }\n}\n\nfunction isRemoteContainerIngestGenerationCurrent(\n  state: RemoteContainerHydrationState,\n  generation: RemoteContainerIngestGeneration,\n): boolean {\n  return remoteContainerIngestGenerationsMatch(\n    remoteContainerIngestGeneration(state),\n    generation,\n  );\n}\n\nfunction settleStaleRemoteContainerIngestGeneration(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  queue: RemoteContainerIngestQueue;\n  state: RemoteContainerHydrationState;\n}): void {\n  const currentGeneration = remoteContainerIngestGeneration(input.state);\n  const shouldReplay =\n    currentGeneration.lifecycle !== input.generation.lifecycle &&\n    currentGeneration.structural === input.generation.structural;\n  for (const [containerId, generation] of input.generationByContainerId) {\n    if (!remoteContainerIngestGenerationsMatch(generation, input.generation)) {\n      continue;\n    }\n    if (shouldReplay) {\n      input.generationByContainerId.set(containerId, currentGeneration);\n    } else {\n      input.generationByContainerId.delete(containerId);\n      input.queue.delete(containerId);\n    }\n  }\n}\n\ninterface RemoteContainerIngestor {\n  (remoteContainer: RemoteContainer): Promise<void>;\n  hasPending: () => boolean;\n  resume: () => Promise<void>;\n}\n\nexport function createRemoteContainerIngestor(input: {\n  getSerializationBarrier?: (() => Promise<void> | null) | undefined;\n  host: RemoteContainerHydrationHost;\n  state: RemoteContainerHydrationState;\n}): RemoteContainerIngestor {\n  const { host, state } = input;\n  const pendingRemoteContainersById: RemoteContainerIngestQueue = new Map();\n  const generationByContainerId: RemoteContainerIngestGenerationMap = new Map();\n  let ingestRemoteContainersPromise: Promise<void> | null = null;\n\n  const runNextGeneration = (): Promise<void> => {\n    if (ingestRemoteContainersPromise) {\n      return ingestRemoteContainersPromise.then(\n        runNextGeneration,\n        runNextGeneration,\n      );\n    }\n    if (\n      state.runtime.infra.dbStatus !== undefined &&\n      state.runtime.infra.dbStatus !== \"ready\"\n    ) {\n      return Promise.resolve();\n    }\n    const serializationBarrier = input.getSerializationBarrier?.();\n    if (serializationBarrier) {\n      return serializationBarrier.then(runNextGeneration);\n    }\n    const nextContainerId = pendingRemoteContainersById.keys().next().value;\n    if (typeof nextContainerId !== \"string\") {\n      return Promise.resolve();\n    }\n    const generation = generationByContainerId.get(nextContainerId);\n    if (!generation) {\n      pendingRemoteContainersById.delete(nextContainerId);\n      return runNextGeneration();\n    }\n    const isCurrent = () =>\n      isRemoteContainerIngestGenerationCurrent(state, generation);\n    const guardedHost = createGenerationGuardedHydrationHost({\n      host,\n      isCurrent,\n    });\n    const nextPromise = Promise.resolve()\n      .then(() =>\n        drainRemoteContainerIngestQueue({\n          generation,\n          generationByContainerId,\n          host: guardedHost,\n          isCurrent,\n          queue: pendingRemoteContainersById,\n          state,\n        }),\n      )\n      .then(() => {\n        if (!isCurrent()) {\n          settleStaleRemoteContainerIngestGeneration({\n            generation,\n            generationByContainerId,\n            queue: pendingRemoteContainersById,\n            state,\n          });\n        }\n      })\n      .catch((error: unknown) => {\n        if (!isCurrent() || error instanceof StaleRemoteHydrationError) {\n          settleStaleRemoteContainerIngestGeneration({\n            generation,\n            generationByContainerId,\n            queue: pendingRemoteContainersById,\n            state,\n          });\n          return;\n        }\n        throw error;\n      })\n      .finally(() => {\n        if (ingestRemoteContainersPromise === nextPromise) {\n          ingestRemoteContainersPromise = null;\n        }\n      });\n    ingestRemoteContainersPromise = nextPromise;\n    return nextPromise.then(() =>\n      pendingRemoteContainersById.size > 0 ? runNextGeneration() : undefined,\n    );\n  };\n\n  const ingestRemoteContainer = (remoteContainer: RemoteContainer) => {\n    pendingRemoteContainersById.set(remoteContainer.id, remoteContainer);\n    generationByContainerId.set(\n      remoteContainer.id,\n      remoteContainerIngestGeneration(state),\n    );\n    return runNextGeneration();\n  };\n  ingestRemoteContainer.hasPending = () => pendingRemoteContainersById.size > 0;\n  ingestRemoteContainer.resume = runNextGeneration;\n  return ingestRemoteContainer;\n}\n\nexport async function hydrateRemoteContainers(input: {\n  followDiscoveredParentLanes?: boolean | undefined;\n  host: RemoteContainerHydrationHost;\n  isCurrent?: (() => boolean) | undefined;\n  onFullyHydrated?: (() => Promise<void> | void) | undefined;\n  parentIds?: ReadonlyArray<string | null> | undefined;\n  resetAllLaneWatermarks?: boolean | undefined;\n  resetRootLaneWatermark?: boolean | undefined;\n  state: RemoteContainerHydrationState;\n}): Promise<number> {\n  const { host, state } = input;\n  if (!canHydrateRemoteContainers(state) || input.isCurrent?.() === false) {\n    return 0;\n  }\n\n  const seenContainerIds = new Set<string>();\n  const containerIdsBeforeHydration = new Set(state.containersById.keys());\n  const childIdsByParentId = createContainerChildIndex(state.containersById);\n  const { lanes, queueParentLane } = createContainerParentHydrationQueue({\n    containerIds: state.containersById.keys(),\n    parentIds: input.parentIds,\n    resetAllLaneWatermarks: input.resetAllLaneWatermarks,\n    resetRootLaneWatermark: input.resetRootLaneWatermark,\n  });\n  // Follow child lanes during an explicit recursive crawl or for containers first\n  // discovered in this pass. The latter lets a newly authorized root populate its\n  // descendants immediately, while routine ticks keep known subtrees cache-first.\n  const queueDiscoveredParentLane: QueueContainerParentLane = (containerId) => {\n    if (\n      input.followDiscoveredParentLanes ||\n      (containerId !== null && !containerIdsBeforeHydration.has(containerId))\n    ) {\n      queueParentLane(containerId);\n    }\n  };\n  const result = await hydrateContainerParentLanes({\n    childIdsByParentId,\n    host,\n    isCurrent: input.isCurrent,\n    lanes,\n    queueParentLane: queueDiscoveredParentLane,\n    seenContainerIds,\n    state,\n  });\n  const { changedCount } = result;\n  await finishRemoteHydration({\n    changedCount,\n    complete:\n      result.complete &&\n      canHydrateRemoteContainers(state) &&\n      input.isCurrent?.() !== false,\n    containerIdsBeforeHydration,\n    host,\n    isCurrent: input.isCurrent,\n    onFullyHydrated: input.onFullyHydrated,\n    seenContainerIds,\n    state,\n  });\n  return changedCount;\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,qCAAqC,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,gDAAgD,EAChD,kDAAkD,EAClD,kCAAkC,GACnC,MAAM,yCAAyC,CAAC;AAgBjD,MAAM,OAAO,yBAA0B,SAAQ,KAAK;CAAG;AAEvD,MAAM,UAAU,oCAAoC,CAAC,KAGpD;IACC,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,yBAAyB,EAAE,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,qBAAqB,EAAE,KAAK,EAC1B,cAAc,EACd,KAAK,EACL,UAAU,EACV,WAAW,EACX,eAAe,EACf,EAAE;YACF,MAAM,eAAe,GAAG,eAAe,EAAE,SAAS,CAAC;YACnD,MAAM,SAAS,GAAG,eAAe;gBAC/B,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,eAAe,EAAE;gBAC9C,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;YACpB,aAAa,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,qBAAqB,CACnD,cAAc,EACd,KAAK,EACL,UAAU,EACV,WAAW,EACX,EAAE,GAAG,eAAe,EAAE,SAAS,EAAE,CAClC,CAAC;YACF,aAAa,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB;YACnC,CAAC,CAAC;gBACE,sBAAsB,EAAE,GAAG,EAAE;oBAC3B,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;wBACtB,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;oBACxC,CAAC;gBACH,CAAC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,cAAc,EAAE,GAAG,EAAE;YACnB,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAWD,SAAS,+BAA+B,CACtC,KAAoC;IAEpC,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,mBAAmB;QACpC,UAAU,EAAE,KAAK,CAAC,oBAAoB;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,qCAAqC,CAC5C,IAAiD,EACjD,KAAsC;IAEtC,OAAO,CACL,IAAI,KAAK,SAAS;QAClB,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QAClC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,UAA2C,EAC3C,uBAA2D,EAC3D,KAAiC,EACjC,eAAgC;IAEhC,OAAO,CACL,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,eAAe;QACjD,qCAAqC,CACnC,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAC/C,UAAU,CACX,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAU1C;IACC,MAAM,EACJ,sCAAsC,EACtC,wCAAwC,EACxC,UAAU,EACV,uBAAuB,EACvB,IAAI,EACJ,KAAK,EACL,qBAAqB,EACrB,KAAK,GACN,GAAG,KAAK,CAAC;IACV,IACE,CAAC,KAAK,CAAC,SAAS,EAAE;QAClB,CAAC,8BAA8B,CAC7B,UAAU,EACV,uBAAuB,EACvB,KAAK,EACL,qBAAqB,CACtB,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,gCAAgC,CACzE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAC5B,CAAC;IACF,sEAAsE;IACtE,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CAAC;QACxD,0BAA0B,EACxB,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,qBAAqB,CAAC,EAAE,CAAC;YACtE,IAAI;QACN,sCAAsC;QACtC,wCAAwC;QACxC,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,qBAAqB;QACtC,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qCAAqC,CAAC,KAM9C;IACC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,qBAAqB,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACjE,IACE,8BAA8B,CAC5B,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,uBAAuB,EAC7B,KAAK,CAAC,KAAK,EACX,qBAAqB,CACtB,EACD,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;YAC7C,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,KAO9C;IACC,MAAM,EAAE,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC1E,IAAI,oBAAoB,GAAG,KAAK,CAAC;IAEjC,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,MAAM,sBAAsB,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC9D,CAAC,eAAe,EAAE,EAAE,CAClB,qCAAqC,CACnC,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAC/C,UAAU,CACX,CACJ,CAAC;YACF,IAAI,sBAAsB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO;YACT,CAAC;YACD,MAAM,qCAAqC,CAAC;gBAC1C,gCAAgC,EAAE,kCAAkC,CAClE,KAAK,CAAC,OAAO,CACd;gBACD,gBAAgB,EAAE,sBAAsB;gBACxC,YAAY,EAAE,KAAK,CAAC,SAAS;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,MAAM,CACJ,sCAAsC,EACtC,wCAAwC,EACzC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACpB,gDAAgD,CAAC;oBAC/C,gBAAgB,EAAE,sBAAsB;oBACxC,KAAK;iBACN,CAAC;gBACF,kDAAkD,CAAC;oBACjD,gBAAgB,EAAE,sBAAsB;oBACxC,KAAK;iBACN,CAAC;aACH,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,KAAK,MAAM,qBAAqB,IAAI,sBAAsB,EAAE,CAAC;gBAC3D,oBAAoB;oBAClB,CAAC,MAAM,2BAA2B,CAAC;wBACjC,sCAAsC;wBACtC,wCAAwC;wBACxC,UAAU;wBACV,uBAAuB;wBACvB,IAAI;wBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,KAAK;wBACL,qBAAqB;wBACrB,KAAK;qBACN,CAAC,CAAC,IAAI,oBAAoB,CAAC;YAChC,CAAC;YACD,qCAAqC,CAAC;gBACpC,UAAU;gBACV,uBAAuB;gBACvB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK;gBACL,sBAAsB;aACvB,CAAC,CAAC;YAEH,IAAI,oBAAoB,EAAE,CAAC;gBACzB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,oBAAoB,GAAG,KAAK,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,oBAAoB,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,wCAAwC,CAC/C,KAAoC,EACpC,UAA2C;IAE3C,OAAO,qCAAqC,CAC1C,+BAA+B,CAAC,KAAK,CAAC,EACtC,UAAU,CACX,CAAC;AACJ,CAAC;AAED,SAAS,0CAA0C,CAAC,KAKnD;IACC,MAAM,iBAAiB,GAAG,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,YAAY,GAChB,iBAAiB,CAAC,SAAS,KAAK,KAAK,CAAC,UAAU,CAAC,SAAS;QAC1D,iBAAiB,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;IAC/D,KAAK,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,uBAAuB,EAAE,CAAC;QACtE,IAAI,CAAC,qCAAqC,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,SAAS;QACX,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAClD,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,2BAA2B,GAA+B,IAAI,GAAG,EAAE,CAAC;IAC1E,MAAM,uBAAuB,GAAuC,IAAI,GAAG,EAAE,CAAC;IAC9E,IAAI,6BAA6B,GAAyB,IAAI,CAAC;IAE/D,MAAM,iBAAiB,GAAG,GAAkB,EAAE;QAC5C,IAAI,6BAA6B,EAAE,CAAC;YAClC,OAAO,6BAA6B,CAAC,IAAI,CACvC,iBAAiB,EACjB,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC1C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EACxC,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,oBAAoB,GAAG,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC;QAC/D,IAAI,oBAAoB,EAAE,CAAC;YACzB,OAAO,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,eAAe,GAAG,2BAA2B,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACxE,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,2BAA2B,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACpD,OAAO,iBAAiB,EAAE,CAAC;QAC7B,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,wCAAwC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,oCAAoC,CAAC;YACvD,IAAI;YACJ,SAAS;SACV,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE;aAClC,IAAI,CAAC,GAAG,EAAE,CACT,+BAA+B,CAAC;YAC9B,UAAU;YACV,uBAAuB;YACvB,IAAI,EAAE,WAAW;YACjB,SAAS;YACT,KAAK,EAAE,2BAA2B;YAClC,KAAK;SACN,CAAC,CACH;aACA,IAAI,CAAC,GAAG,EAAE;YACT,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACjB,0CAA0C,CAAC;oBACzC,UAAU;oBACV,uBAAuB;oBACvB,KAAK,EAAE,2BAA2B;oBAClC,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,CAAC,SAAS,EAAE,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;gBAC/D,0CAA0C,CAAC;oBACzC,UAAU;oBACV,uBAAuB;oBACvB,KAAK,EAAE,2BAA2B;oBAClC,KAAK;iBACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,6BAA6B,KAAK,WAAW,EAAE,CAAC;gBAClD,6BAA6B,GAAG,IAAI,CAAC;YACvC,CAAC;QACH,CAAC,CAAC,CAAC;QACL,6BAA6B,GAAG,WAAW,CAAC;QAC5C,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAC3B,2BAA2B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,SAAS,CACvE,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,qBAAqB,GAAG,CAAC,eAAgC,EAAE,EAAE;QACjE,2BAA2B,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;QACrE,uBAAuB,CAAC,GAAG,CACzB,eAAe,CAAC,EAAE,EAClB,+BAA+B,CAAC,KAAK,CAAC,CACvC,CAAC;QACF,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC,CAAC;IACF,qBAAqB,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,GAAG,CAAC,CAAC;IAC9E,qBAAqB,CAAC,MAAM,GAAG,iBAAiB,CAAC;IACjD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAS7C;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9B,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACxE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3E,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,mCAAmC,CAAC;QACrE,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE;QACzC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;KACrD,CAAC,CAAC;IACH,gFAAgF;IAChF,gFAAgF;IAChF,gFAAgF;IAChF,MAAM,yBAAyB,GAA6B,CAAC,WAAW,EAAE,EAAE;QAC1E,IACE,KAAK,CAAC,2BAA2B;YACjC,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EACvE,CAAC;YACD,eAAe,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC;QAC/C,kBAAkB;QAClB,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;QACL,eAAe,EAAE,yBAAyB;QAC1C,gBAAgB;QAChB,KAAK;KACN,CAAC,CAAC;IACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAChC,MAAM,qBAAqB,CAAC;QAC1B,YAAY;QACZ,QAAQ,EACN,MAAM,CAAC,QAAQ;YACf,0BAA0B,CAAC,KAAK,CAAC;YACjC,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK;QAC/B,2BAA2B;QAC3B,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,gBAAgB;QAChB,KAAK;KACN,CAAC,CAAC;IACH,OAAO,YAAY,CAAC;AACtB,CAAC","sourcesContent":["import { createRuntimePrincipalPolicyWarmer } from \"../../principals/runtimePolicyWarmer\";\nimport { finishRemoteHydration } from \"./completeHydration\";\nimport { createContainerChildIndex } from \"./lanes/childIndex\";\nimport { createContainerParentHydrationQueue } from \"./lanes/parentLaneQueue\";\nimport { cacheRemoteContainerPrincipalPolicies } from \"./principalPolicyCache\";\nimport {\n  canHydrateRemoteContainers,\n  hydrateContainerParentLanes,\n} from \"./remoteContainers/remoteContainerPageHydration\";\nimport {\n  listRemoteContainerIdsWithPendingMetadataUpdates,\n  listRemoteContainerIdsWithPendingStructuralIntents,\n  upsertIsolatedRemoteContainerState,\n} from \"./remoteContainers/remoteContainerState\";\nimport type {\n  QueueContainerParentLane,\n  RemoteContainer,\n  RemoteContainerHydrationHost,\n  RemoteContainerHydrationState,\n  RemoteContainerIngestQueue,\n} from \"./types\";\n\nexport type {\n  ContainerState,\n  PersistContainerStateResult,\n  RemoteContainer,\n  RemoteContainerHydrationHost,\n} from \"./types\";\n\nexport class StaleRemoteHydrationError extends Error {}\n\nexport function createGenerationGuardedHydrationHost(input: {\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n}): RemoteContainerHydrationHost {\n  const assertCurrent = () => {\n    if (!input.isCurrent()) {\n      throw new StaleRemoteHydrationError();\n    }\n  };\n\n  return {\n    persistContainerState: async (\n      containerState,\n      patch,\n      updateView,\n      saveOptions,\n      mutationOptions,\n    ) => {\n      const callerIsCurrent = mutationOptions?.isCurrent;\n      const isCurrent = callerIsCurrent\n        ? () => input.isCurrent() && callerIsCurrent()\n        : input.isCurrent;\n      assertCurrent();\n      const record = await input.host.persistContainerState(\n        containerState,\n        patch,\n        updateView,\n        saveOptions,\n        { ...mutationOptions, isCurrent },\n      );\n      assertCurrent();\n      return record;\n    },\n    ...(input.host.requestDocumentPriming\n      ? {\n          requestDocumentPriming: () => {\n            if (input.isCurrent()) {\n              input.host.requestDocumentPriming?.();\n            }\n          },\n        }\n      : {}),\n    updateSnapshot: () => {\n      if (input.isCurrent()) {\n        input.host.updateSnapshot();\n      }\n    },\n  };\n}\n\ninterface RemoteContainerIngestGeneration {\n  readonly lifecycle: number | undefined;\n  readonly structural: number | undefined;\n}\ntype RemoteContainerIngestGenerationMap = Map<\n  string,\n  RemoteContainerIngestGeneration\n>;\n\nfunction remoteContainerIngestGeneration(\n  state: RemoteContainerHydrationState,\n): RemoteContainerIngestGeneration {\n  return {\n    lifecycle: state.lifecycleGeneration,\n    structural: state.structuralGeneration,\n  };\n}\n\nfunction remoteContainerIngestGenerationsMatch(\n  left: RemoteContainerIngestGeneration | undefined,\n  right: RemoteContainerIngestGeneration,\n): boolean {\n  return (\n    left !== undefined &&\n    left.lifecycle === right.lifecycle &&\n    left.structural === right.structural\n  );\n}\n\nfunction isCurrentQueuedRemoteContainer(\n  generation: RemoteContainerIngestGeneration,\n  generationByContainerId: RemoteContainerIngestGenerationMap,\n  queue: RemoteContainerIngestQueue,\n  remoteContainer: RemoteContainer,\n): boolean {\n  return (\n    queue.get(remoteContainer.id) === remoteContainer &&\n    remoteContainerIngestGenerationsMatch(\n      generationByContainerId.get(remoteContainer.id),\n      generation,\n    )\n  );\n}\n\nasync function upsertQueuedRemoteContainer(input: {\n  containerIdsWithPendingMetadataUpdates: ReadonlySet<string>;\n  containerIdsWithPendingStructuralIntents: ReadonlySet<string>;\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  queuedRemoteContainer: RemoteContainer;\n  state: RemoteContainerHydrationState;\n}): Promise<boolean> {\n  const {\n    containerIdsWithPendingMetadataUpdates,\n    containerIdsWithPendingStructuralIntents,\n    generation,\n    generationByContainerId,\n    host,\n    queue,\n    queuedRemoteContainer,\n    state,\n  } = input;\n  if (\n    !input.isCurrent() ||\n    !isCurrentQueuedRemoteContainer(\n      generation,\n      generationByContainerId,\n      queue,\n      queuedRemoteContainer,\n    )\n  ) {\n    return false;\n  }\n\n  const tombstones = await state.persistence.loadContainerHydrationTombstones(\n    state.runtime.infra.execSql,\n  );\n  // A refused folder is reported and acknowledged; the batch continues.\n  const upserted = await upsertIsolatedRemoteContainerState({\n    expectedHydrationTombstone:\n      tombstones.find((row) => row.containerId === queuedRemoteContainer.id) ??\n      null,\n    containerIdsWithPendingMetadataUpdates,\n    containerIdsWithPendingStructuralIntents,\n    host,\n    isCurrent: input.isCurrent,\n    remoteContainer: queuedRemoteContainer,\n    state,\n  });\n  if (!upserted) {\n    return false;\n  }\n  return true;\n}\n\nfunction acknowledgeRemoteContainerIngestBatch(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  queuedRemoteContainers: ReadonlyArray<RemoteContainer>;\n}): void {\n  if (!input.isCurrent()) {\n    return;\n  }\n  for (const queuedRemoteContainer of input.queuedRemoteContainers) {\n    if (\n      isCurrentQueuedRemoteContainer(\n        input.generation,\n        input.generationByContainerId,\n        input.queue,\n        queuedRemoteContainer,\n      )\n    ) {\n      input.queue.delete(queuedRemoteContainer.id);\n      input.generationByContainerId.delete(queuedRemoteContainer.id);\n    }\n  }\n}\n\nasync function drainRemoteContainerIngestQueue(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  host: RemoteContainerHydrationHost;\n  isCurrent: () => boolean;\n  queue: RemoteContainerIngestQueue;\n  state: RemoteContainerHydrationState;\n}) {\n  const { generation, generationByContainerId, host, queue, state } = input;\n  let shouldUpdateSnapshot = false;\n\n  try {\n    while (input.isCurrent()) {\n      const queuedRemoteContainers = Array.from(queue.values()).filter(\n        (remoteContainer) =>\n          remoteContainerIngestGenerationsMatch(\n            generationByContainerId.get(remoteContainer.id),\n            generation,\n          ),\n      );\n      if (queuedRemoteContainers.length === 0) {\n        return;\n      }\n      await cacheRemoteContainerPrincipalPolicies({\n        cacheReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(\n          state.runtime,\n        ),\n        remoteContainers: queuedRemoteContainers,\n        stillCurrent: input.isCurrent,\n      });\n      if (!input.isCurrent()) {\n        return;\n      }\n      const [\n        containerIdsWithPendingMetadataUpdates,\n        containerIdsWithPendingStructuralIntents,\n      ] = await Promise.all([\n        listRemoteContainerIdsWithPendingMetadataUpdates({\n          remoteContainers: queuedRemoteContainers,\n          state,\n        }),\n        listRemoteContainerIdsWithPendingStructuralIntents({\n          remoteContainers: queuedRemoteContainers,\n          state,\n        }),\n      ]);\n      if (!input.isCurrent()) {\n        return;\n      }\n\n      for (const queuedRemoteContainer of queuedRemoteContainers) {\n        shouldUpdateSnapshot =\n          (await upsertQueuedRemoteContainer({\n            containerIdsWithPendingMetadataUpdates,\n            containerIdsWithPendingStructuralIntents,\n            generation,\n            generationByContainerId,\n            host,\n            isCurrent: input.isCurrent,\n            queue,\n            queuedRemoteContainer,\n            state,\n          })) || shouldUpdateSnapshot;\n      }\n      acknowledgeRemoteContainerIngestBatch({\n        generation,\n        generationByContainerId,\n        isCurrent: input.isCurrent,\n        queue,\n        queuedRemoteContainers,\n      });\n\n      if (shouldUpdateSnapshot) {\n        host.updateSnapshot();\n        shouldUpdateSnapshot = false;\n      }\n    }\n  } catch (error) {\n    if (shouldUpdateSnapshot) {\n      host.updateSnapshot();\n    }\n    throw error;\n  }\n}\n\nfunction isRemoteContainerIngestGenerationCurrent(\n  state: RemoteContainerHydrationState,\n  generation: RemoteContainerIngestGeneration,\n): boolean {\n  return remoteContainerIngestGenerationsMatch(\n    remoteContainerIngestGeneration(state),\n    generation,\n  );\n}\n\nfunction settleStaleRemoteContainerIngestGeneration(input: {\n  generation: RemoteContainerIngestGeneration;\n  generationByContainerId: RemoteContainerIngestGenerationMap;\n  queue: RemoteContainerIngestQueue;\n  state: RemoteContainerHydrationState;\n}): void {\n  const currentGeneration = remoteContainerIngestGeneration(input.state);\n  const shouldReplay =\n    currentGeneration.lifecycle !== input.generation.lifecycle &&\n    currentGeneration.structural === input.generation.structural;\n  for (const [containerId, generation] of input.generationByContainerId) {\n    if (!remoteContainerIngestGenerationsMatch(generation, input.generation)) {\n      continue;\n    }\n    if (shouldReplay) {\n      input.generationByContainerId.set(containerId, currentGeneration);\n    } else {\n      input.generationByContainerId.delete(containerId);\n      input.queue.delete(containerId);\n    }\n  }\n}\n\ninterface RemoteContainerIngestor {\n  (remoteContainer: RemoteContainer): Promise<void>;\n  hasPending: () => boolean;\n  resume: () => Promise<void>;\n}\n\nexport function createRemoteContainerIngestor(input: {\n  getSerializationBarrier?: (() => Promise<void> | null) | undefined;\n  host: RemoteContainerHydrationHost;\n  state: RemoteContainerHydrationState;\n}): RemoteContainerIngestor {\n  const { host, state } = input;\n  const pendingRemoteContainersById: RemoteContainerIngestQueue = new Map();\n  const generationByContainerId: RemoteContainerIngestGenerationMap = new Map();\n  let ingestRemoteContainersPromise: Promise<void> | null = null;\n\n  const runNextGeneration = (): Promise<void> => {\n    if (ingestRemoteContainersPromise) {\n      return ingestRemoteContainersPromise.then(\n        runNextGeneration,\n        runNextGeneration,\n      );\n    }\n    if (\n      state.runtime.infra.dbStatus !== undefined &&\n      state.runtime.infra.dbStatus !== \"ready\"\n    ) {\n      return Promise.resolve();\n    }\n    const serializationBarrier = input.getSerializationBarrier?.();\n    if (serializationBarrier) {\n      return serializationBarrier.then(runNextGeneration);\n    }\n    const nextContainerId = pendingRemoteContainersById.keys().next().value;\n    if (typeof nextContainerId !== \"string\") {\n      return Promise.resolve();\n    }\n    const generation = generationByContainerId.get(nextContainerId);\n    if (!generation) {\n      pendingRemoteContainersById.delete(nextContainerId);\n      return runNextGeneration();\n    }\n    const isCurrent = () =>\n      isRemoteContainerIngestGenerationCurrent(state, generation);\n    const guardedHost = createGenerationGuardedHydrationHost({\n      host,\n      isCurrent,\n    });\n    const nextPromise = Promise.resolve()\n      .then(() =>\n        drainRemoteContainerIngestQueue({\n          generation,\n          generationByContainerId,\n          host: guardedHost,\n          isCurrent,\n          queue: pendingRemoteContainersById,\n          state,\n        }),\n      )\n      .then(() => {\n        if (!isCurrent()) {\n          settleStaleRemoteContainerIngestGeneration({\n            generation,\n            generationByContainerId,\n            queue: pendingRemoteContainersById,\n            state,\n          });\n        }\n      })\n      .catch((error: unknown) => {\n        if (!isCurrent() || error instanceof StaleRemoteHydrationError) {\n          settleStaleRemoteContainerIngestGeneration({\n            generation,\n            generationByContainerId,\n            queue: pendingRemoteContainersById,\n            state,\n          });\n          return;\n        }\n        throw error;\n      })\n      .finally(() => {\n        if (ingestRemoteContainersPromise === nextPromise) {\n          ingestRemoteContainersPromise = null;\n        }\n      });\n    ingestRemoteContainersPromise = nextPromise;\n    return nextPromise.then(() =>\n      pendingRemoteContainersById.size > 0 ? runNextGeneration() : undefined,\n    );\n  };\n\n  const ingestRemoteContainer = (remoteContainer: RemoteContainer) => {\n    pendingRemoteContainersById.set(remoteContainer.id, remoteContainer);\n    generationByContainerId.set(\n      remoteContainer.id,\n      remoteContainerIngestGeneration(state),\n    );\n    return runNextGeneration();\n  };\n  ingestRemoteContainer.hasPending = () => pendingRemoteContainersById.size > 0;\n  ingestRemoteContainer.resume = runNextGeneration;\n  return ingestRemoteContainer;\n}\n\nexport async function hydrateRemoteContainers(input: {\n  followDiscoveredParentLanes?: boolean | undefined;\n  host: RemoteContainerHydrationHost;\n  isCurrent?: (() => boolean) | undefined;\n  onFullyHydrated?: (() => Promise<void> | void) | undefined;\n  parentIds?: ReadonlyArray<string | null> | undefined;\n  resetAllLaneWatermarks?: boolean | undefined;\n  resetRootLaneWatermark?: boolean | undefined;\n  state: RemoteContainerHydrationState;\n}): Promise<number> {\n  const { host, state } = input;\n  if (!canHydrateRemoteContainers(state) || input.isCurrent?.() === false) {\n    return 0;\n  }\n\n  const seenContainerIds = new Set<string>();\n  const containerIdsBeforeHydration = new Set(state.containersById.keys());\n  const childIdsByParentId = createContainerChildIndex(state.containersById);\n  const { lanes, queueParentLane } = createContainerParentHydrationQueue({\n    containerIds: state.containersById.keys(),\n    parentIds: input.parentIds,\n    resetAllLaneWatermarks: input.resetAllLaneWatermarks,\n    resetRootLaneWatermark: input.resetRootLaneWatermark,\n  });\n  // Follow child lanes during an explicit recursive crawl or for containers first\n  // discovered in this pass. The latter lets a newly authorized root populate its\n  // descendants immediately, while routine ticks keep known subtrees cache-first.\n  const queueDiscoveredParentLane: QueueContainerParentLane = (containerId) => {\n    if (\n      input.followDiscoveredParentLanes ||\n      (containerId !== null && !containerIdsBeforeHydration.has(containerId))\n    ) {\n      queueParentLane(containerId);\n    }\n  };\n  const result = await hydrateContainerParentLanes({\n    childIdsByParentId,\n    host,\n    isCurrent: input.isCurrent,\n    lanes,\n    queueParentLane: queueDiscoveredParentLane,\n    seenContainerIds,\n    state,\n  });\n  const { changedCount } = result;\n  await finishRemoteHydration({\n    changedCount,\n    complete:\n      result.complete &&\n      canHydrateRemoteContainers(state) &&\n      input.isCurrent?.() !== false,\n    containerIdsBeforeHydration,\n    host,\n    isCurrent: input.isCurrent,\n    onFullyHydrated: input.onFullyHydrated,\n    seenContainerIds,\n    state,\n  });\n  return changedCount;\n}\n"]}

package/workflows/container-contents/remoteHydration/lanes/childIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"childIndex.js","sourceRoot":"","sources":["childIndex.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,wBAAwB,CACtC,kBAAuC,EACvC,WAAmB,EACnB,QAAuB;IAEvB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;IACvE,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1B,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,kBAAuC,EACvC,WAAmB,EACnB,QAAuB;IAEvB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC7B,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACxB,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,kBAAmD,EACnD,WAAmB,EACnB,gBAA+B,EAC/B,YAA2B;IAE3B,IAAI,CAAC,kBAAkB,IAAI,gBAAgB,KAAK,YAAY,EAAE,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,2BAA2B,CACzB,kBAAkB,EAClB,WAAW,EACX,gBAAgB,CACjB,CAAC;IACF,wBAAwB,CAAC,kBAAkB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,cAAmD;IAEnD,MAAM,kBAAkB,GAAwB,IAAI,GAAG,EAAE,CAAC;IAE1D,KAAK,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,IAAI,cAAc,EAAE,CAAC;QAC3D,wBAAwB,CACtB,kBAAkB,EAClB,WAAW,EACX,cAAc,CAAC,SAAS,CAAC,QAAQ,CAClC,CAAC;IACJ,CAAC;IAED,OAAO,kBAAkB,CAAC;AAC5B,CAAC","sourcesContent":["import type { ContainerChildIndex, ContainerState } from \"../types\";\n\nexport function addIndexedContainerChild(\n  childIdsByParentId: ContainerChildIndex,\n  containerId: string,\n  parentId: string | null,\n) {\n  if (parentId === null) {\n    return;\n  }\n\n  const childIds = childIdsByParentId.get(parentId) ?? new Set<string>();\n  childIds.add(containerId);\n  childIdsByParentId.set(parentId, childIds);\n}\n\nexport function removeIndexedContainerChild(\n  childIdsByParentId: ContainerChildIndex,\n  containerId: string,\n  parentId: string | null,\n) {\n  if (parentId === null) {\n    return;\n  }\n\n  const childIds = childIdsByParentId.get(parentId);\n  if (!childIds) {\n    return;\n  }\n\n  childIds.delete(containerId);\n  if (childIds.size === 0) {\n    childIdsByParentId.delete(parentId);\n  }\n}\n\nexport function moveIndexedContainerChild(\n  childIdsByParentId: ContainerChildIndex | undefined,\n  containerId: string,\n  previousParentId: string | null,\n  nextParentId: string | null,\n) {\n  if (!childIdsByParentId || previousParentId === nextParentId) {\n    return;\n  }\n\n  removeIndexedContainerChild(\n    childIdsByParentId,\n    containerId,\n    previousParentId,\n  );\n  addIndexedContainerChild(childIdsByParentId, containerId, nextParentId);\n}\n\nexport function createContainerChildIndex(\n  containersById: ReadonlyMap<string, ContainerState>,\n): ContainerChildIndex {\n  const childIdsByParentId: ContainerChildIndex = new Map();\n\n  for (const [containerId, containerState] of containersById) {\n    addIndexedContainerChild(\n      childIdsByParentId,\n      containerId,\n      containerState.container.parentId,\n    );\n  }\n\n  return childIdsByParentId;\n}\n"]}

package/workflows/container-contents/remoteHydration/lanes/laneFetchMarkers.js

@@ -0,0 +1,21 @@
+import { recordContainerSyncLaneFetchIfCurrent, } from "../../containerPersistence.js";
+export async function markContainerParentLaneFetched(input) {
+    const { response, state, syncLane } = input;
+    if (response.hasMore && !response.nextWatermark) {
+        return false;
+    }
+    // A check marker suppresses startup polling, so record it only after the
+    // server confirms this parent lane is fully drained. The cursor and marker
+    // share one row and land in one guarded statement.
+    const recorded = await recordContainerSyncLaneFetchIfCurrent(state.runtime.infra.execSql, syncLane, { checked: !response.hasMore, watermark: response.nextWatermark }, input.isCurrent);
+    if (!recorded || input.isCurrent?.() === false) {
+        return false;
+    }
+    if (!response.hasMore &&
+        syncLane.kind === "container_parent" &&
+        syncLane.parentId === null) {
+        state.rootLaneHydrated = true;
+    }
+    return true;
+}
+//# sourceMappingURL=laneFetchMarkers.js.map

package/workflows/container-contents/remoteHydration/lanes/laneFetchMarkers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"laneFetchMarkers.js","sourceRoot":"","sources":["laneFetchMarkers.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,qCAAqC,GACtC,MAAM,4BAA4B,CAAC;AAGpC,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAKpD;IACC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC5C,IAAI,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yEAAyE;IACzE,2EAA2E;IAC3E,mDAAmD;IACnD,MAAM,QAAQ,GAAG,MAAM,qCAAqC,CAC1D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC3B,QAAQ,EACR,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,aAAa,EAAE,EACjE,KAAK,CAAC,SAAS,CAChB,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,CAAC,QAAQ,CAAC,OAAO;QACjB,QAAQ,CAAC,IAAI,KAAK,kBAAkB;QACpC,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAC1B,CAAC;QACD,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAChC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { ListContainersResponse } from \"@tearleads/validators/response\";\nimport {\n  type ContainerSyncWatermarkLane,\n  recordContainerSyncLaneFetchIfCurrent,\n} from \"../../containerPersistence\";\nimport type { RemoteContainerHydrationState } from \"../types\";\n\nexport async function markContainerParentLaneFetched(input: {\n  isCurrent?: (() => boolean) | undefined;\n  response: ListContainersResponse;\n  state: RemoteContainerHydrationState;\n  syncLane: ContainerSyncWatermarkLane;\n}): Promise<boolean> {\n  const { response, state, syncLane } = input;\n  if (response.hasMore && !response.nextWatermark) {\n    return false;\n  }\n\n  // A check marker suppresses startup polling, so record it only after the\n  // server confirms this parent lane is fully drained. The cursor and marker\n  // share one row and land in one guarded statement.\n  const recorded = await recordContainerSyncLaneFetchIfCurrent(\n    state.runtime.infra.execSql,\n    syncLane,\n    { checked: !response.hasMore, watermark: response.nextWatermark },\n    input.isCurrent,\n  );\n  if (!recorded || input.isCurrent?.() === false) {\n    return false;\n  }\n  if (\n    !response.hasMore &&\n    syncLane.kind === \"container_parent\" &&\n    syncLane.parentId === null\n  ) {\n    state.rootLaneHydrated = true;\n  }\n\n  return true;\n}\n"]}

package/workflows/container-contents/remoteHydration/lanes/parentLaneFetch.js

@@ -0,0 +1,61 @@
+import { createContainerParentSyncLane, loadContainerSyncWatermark, } from "../../containerPersistence.js";
+import { createContainerStateFingerprint } from "../remoteContainers/containerStateFingerprint.js";
+async function prepareContainerParentLanePage(input) {
+    const { lane, laneId, state } = input;
+    const syncLane = createContainerParentSyncLane(lane.parentId);
+    const watermark = lane.watermark === undefined
+        ? await loadContainerSyncWatermark(state.runtime.infra.execSql, syncLane)
+        : lane.watermark;
+    return {
+        lane,
+        request: { laneId, parentId: lane.parentId, watermark },
+        syncLane,
+    };
+}
+export async function fetchContainerParentLaneBatch(input) {
+    const { batch, state } = input;
+    const expectedContainerStates = new Map(Array.from(state.containersById, ([containerId, containerState]) => [
+        containerId,
+        {
+            container: { ...containerState.container },
+            fingerprint: createContainerStateFingerprint(containerState),
+        },
+    ]));
+    const preparedPages = await Promise.all(batch.map((lane, index) => prepareContainerParentLanePage({
+        lane,
+        laneId: `lane-${index}`,
+        state,
+    })));
+    if (input.isCurrent?.() === false) {
+        return null;
+    }
+    const expectedHydrationTombstones = new Map((await state.persistence.loadContainerHydrationTombstones(state.runtime.infra.execSql)).map((tombstone) => [tombstone.containerId, tombstone]));
+    if (input.isCurrent?.() === false) {
+        return null;
+    }
+    const response = await state.runtime.apiClient.listContainerParentLanes({
+        lanes: preparedPages.map((page) => page.request),
+    });
+    if (!response) {
+        return null;
+    }
+    const pagesByLaneId = new Map(response.results.map((result) => [result.laneId, result.page]));
+    if (pagesByLaneId.size !== preparedPages.length ||
+        response.results.length !== preparedPages.length) {
+        throw new Error("Container parent lane batch response mismatch");
+    }
+    return preparedPages.map((preparedPage) => {
+        const page = pagesByLaneId.get(preparedPage.request.laneId);
+        if (!page) {
+            throw new Error("Container parent lane batch response mismatch");
+        }
+        return {
+            expectedContainerStates,
+            expectedHydrationTombstones,
+            lane: preparedPage.lane,
+            response: page,
+            syncLane: preparedPage.syncLane,
+        };
+    });
+}
+//# sourceMappingURL=parentLaneFetch.js.map

package/workflows/container-contents/remoteHydration/lanes/parentLaneFetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parentLaneFetch.js","sourceRoot":"","sources":["parentLaneFetch.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,+BAA+B,EAAE,MAAM,+CAA+C,CAAC;AAOhG,KAAK,UAAU,8BAA8B,CAAC,KAI7C;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,SAAS,GACb,IAAI,CAAC,SAAS,KAAK,SAAS;QAC1B,CAAC,CAAC,MAAM,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC;QACzE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;IACrB,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE;QACvD,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAInD;IACC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC/B,MAAM,uBAAuB,GAAG,IAAI,GAAG,CACrC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC;QAClE,WAAW;QACX;YACE,SAAS,EAAE,EAAE,GAAG,cAAc,CAAC,SAAS,EAAE;YAC1C,WAAW,EAAE,+BAA+B,CAAC,cAAc,CAAC;SAC7D;KACF,CAAC,CACH,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACxB,8BAA8B,CAAC;QAC7B,IAAI;QACJ,MAAM,EAAE,QAAQ,KAAK,EAAE;QACvB,KAAK;KACN,CAAC,CACH,CACF,CAAC;IACF,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,2BAA2B,GAAG,IAAI,GAAG,CACzC,CACE,MAAM,KAAK,CAAC,WAAW,CAAC,gCAAgC,CACtD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAC5B,CACF,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CACzD,CAAC;IACF,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,wBAAwB,CAAC;QACtE,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;KACjD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAC/D,CAAC;IACF,IACE,aAAa,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM;QAC3C,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,EAChD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,OAAO;YACL,uBAAuB;YACvB,2BAA2B;YAC3B,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,YAAY,CAAC,QAAQ;SAChC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  createContainerParentSyncLane,\n  loadContainerSyncWatermark,\n} from \"../../containerPersistence\";\nimport { createContainerStateFingerprint } from \"../remoteContainers/containerStateFingerprint\";\nimport type {\n  ContainerParentHydrationLane,\n  FetchedContainerParentLanePage,\n  RemoteContainerHydrationState,\n} from \"../types\";\n\nasync function prepareContainerParentLanePage(input: {\n  lane: ContainerParentHydrationLane;\n  laneId: string;\n  state: RemoteContainerHydrationState;\n}) {\n  const { lane, laneId, state } = input;\n  const syncLane = createContainerParentSyncLane(lane.parentId);\n  const watermark =\n    lane.watermark === undefined\n      ? await loadContainerSyncWatermark(state.runtime.infra.execSql, syncLane)\n      : lane.watermark;\n  return {\n    lane,\n    request: { laneId, parentId: lane.parentId, watermark },\n    syncLane,\n  };\n}\n\nexport async function fetchContainerParentLaneBatch(input: {\n  batch: ReadonlyArray<ContainerParentHydrationLane>;\n  isCurrent?: (() => boolean) | undefined;\n  state: RemoteContainerHydrationState;\n}): Promise<ReadonlyArray<FetchedContainerParentLanePage> | null> {\n  const { batch, state } = input;\n  const expectedContainerStates = new Map(\n    Array.from(state.containersById, ([containerId, containerState]) => [\n      containerId,\n      {\n        container: { ...containerState.container },\n        fingerprint: createContainerStateFingerprint(containerState),\n      },\n    ]),\n  );\n  const preparedPages = await Promise.all(\n    batch.map((lane, index) =>\n      prepareContainerParentLanePage({\n        lane,\n        laneId: `lane-${index}`,\n        state,\n      }),\n    ),\n  );\n  if (input.isCurrent?.() === false) {\n    return null;\n  }\n  const expectedHydrationTombstones = new Map(\n    (\n      await state.persistence.loadContainerHydrationTombstones(\n        state.runtime.infra.execSql,\n      )\n    ).map((tombstone) => [tombstone.containerId, tombstone]),\n  );\n  if (input.isCurrent?.() === false) {\n    return null;\n  }\n  const response = await state.runtime.apiClient.listContainerParentLanes({\n    lanes: preparedPages.map((page) => page.request),\n  });\n  if (!response) {\n    return null;\n  }\n\n  const pagesByLaneId = new Map(\n    response.results.map((result) => [result.laneId, result.page]),\n  );\n  if (\n    pagesByLaneId.size !== preparedPages.length ||\n    response.results.length !== preparedPages.length\n  ) {\n    throw new Error(\"Container parent lane batch response mismatch\");\n  }\n\n  return preparedPages.map((preparedPage) => {\n    const page = pagesByLaneId.get(preparedPage.request.laneId);\n    if (!page) {\n      throw new Error(\"Container parent lane batch response mismatch\");\n    }\n    return {\n      expectedContainerStates,\n      expectedHydrationTombstones,\n      lane: preparedPage.lane,\n      response: page,\n      syncLane: preparedPage.syncLane,\n    };\n  });\n}\n"]}

package/workflows/container-contents/remoteHydration/lanes/parentLaneQueue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parentLaneQueue.js","sourceRoot":"","sources":["parentLaneQueue.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,mCAAmC,CAAC,KAKnD;IAIC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,KAAK,GAAmC,EAAE,CAAC;IACjD,MAAM,eAAe,GAAG,CAAC,QAAuB,EAAE,EAAE;QAClD,MAAM,OAAO,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,QAAQ,EAAE,CAAC;QACrE,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,uEAAuE;QACvE,wEAAwE;QACxE,mDAAmD;QACnD,MAAM,cAAc,GAClB,KAAK,CAAC,sBAAsB;YAC5B,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACvC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;SAAM,CAAC;QACN,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YAC7C,eAAe,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;AACpC,CAAC","sourcesContent":["import type {\n  ContainerParentHydrationLane,\n  QueueContainerParentLane,\n} from \"../types\";\n\nexport function createContainerParentHydrationQueue(input: {\n  containerIds: Iterable<string>;\n  parentIds?: Iterable<string | null> | undefined;\n  resetAllLaneWatermarks?: boolean | undefined;\n  resetRootLaneWatermark?: boolean | undefined;\n}): {\n  lanes: ContainerParentHydrationLane[];\n  queueParentLane: QueueContainerParentLane;\n} {\n  const queuedParentIds = new Set<string>();\n  const lanes: ContainerParentHydrationLane[] = [];\n  const queueParentLane = (parentId: string | null) => {\n    const laneKey = parentId === null ? \"root\" : `container:${parentId}`;\n    if (queuedParentIds.has(laneKey)) {\n      return;\n    }\n\n    queuedParentIds.add(laneKey);\n    // A restoration crawl resets every lane: a newly re-granted descendant\n    // does not advance its parent's persisted watermark. Ordinary discovery\n    // refreshes only need to reset the top-level lane.\n    const resetWatermark =\n      input.resetAllLaneWatermarks ||\n      (parentId === null && input.resetRootLaneWatermark);\n    lanes.push(resetWatermark ? { parentId, watermark: null } : { parentId });\n  };\n\n  if (input.parentIds) {\n    for (const parentId of input.parentIds) {\n      queueParentLane(parentId);\n    }\n  } else {\n    queueParentLane(null);\n    for (const containerId of input.containerIds) {\n      queueParentLane(containerId);\n    }\n  }\n\n  return { lanes, queueParentLane };\n}\n"]}

package/workflows/container-contents/remoteHydration/principalPolicyCache.js

@@ -1,4 +1,4 @@
-import { referencedPrincipalPolicyKey } from "../../../data/keyingProjectionVerification/principalPolicyCache.js";
+import { referencedPrincipalPolicyKey } from "../../../data/keyingProjectionVerification/principalPolicy/principalPolicyCache.js";
 export async function cacheRemoteContainerPrincipalPolicies(input) {
     const cacheReferencedPrincipalPolicies = input.cacheReferencedPrincipalPolicies;
     if (!cacheReferencedPrincipalPolicies) {