@tearleads/client-sdk 0.1.64 → 0.1.65

package/data/sqlite/schema/containerSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerSchema.js","sourceRoot":"","sources":["containerSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,GACL,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAuB,MAAM,mBAAmB,CAAC;AAE9E,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,WAAW,CACnC,YAAY,EACZ;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;IACd,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;IAClB,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACvE,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE;IAClD,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE;IAClD,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;CAC3C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CACjD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,WAAW,CACrD,gCAAgC,EAChC;IACE,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACzE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAC1D,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CACjD,4BAA4B,EAC5B;IACE,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;CAC1C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;IAC5C,KAAK,CAAC,6CAA6C,CAAC,CAAC,EAAE,CACrD,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,WAAW,CAClB;CACF,CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CACpD,+BAA+B,EAC/B;IACE,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;CAC9C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;CACnE,CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,WAAW,CACrD,iCAAiC,EACjC;IACE,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE;IACpD,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;CAC5C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;CACvE,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAClE;QACE,GAAG,oBAAoB,CAAC,UAAU,CAAC;QACnC,eAAe,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC;KAC1C;IACD;QACE,GAAG,oBAAoB,CAAC,4BAA4B,CAAC;QACrD,eAAe,EAAE,CAAC,SAAS,CAAC;KAC7B;IACD,oBAAoB,CAAC,wBAAwB,CAAC;IAC9C,oBAAoB,CAAC,4BAA4B,CAAC;IAClD,oBAAoB,CAAC,2BAA2B,CAAC;CAClD,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU;IACV,4BAA4B;IAC5B,wBAAwB;IACxB,4BAA4B;IAC5B,2BAA2B;CAC5B,CAAC","sourcesContent":["import {\n  index,\n  integer,\n  primaryKey,\n  sqliteTable,\n  text,\n} from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema, type SqlTableSchema } from \"../sqlTableSchema\";\n\nconst accessLevelColumn = \"effective_access_level\";\n\n/**\n * Materialized local container tree.\n *\n * Container rows describe the tree and its encrypted metadata document;\n * metadata rows live in `documents`. `id` is the primary key for structural\n * lookups. `metadataDocumentId` is the server metadata-document id when known;\n * `systemSlot` is an optional opaque app-owned slot. `displayName` and `icon`\n * are the decrypted metadata projection lists read: `displayName` stays\n * nullable so presentation falls back to `/` for a root and `Untitled`\n * otherwise. Local timestamps track client storage/structural changes, while\n * server timestamps are populated once the container has synced.\n */\nexport const containers = sqliteTable(\n  \"containers\",\n  {\n    id: text(\"id\"),\n    organizationId: text(\"organization_id\").notNull(),\n    parentId: text(\"parent_id\"),\n    metadataDocumentId: text(\"metadata_document_id\"),\n    systemSlot: text(\"system_slot\"),\n    displayName: text(\"display_name\"),\n    icon: text(\"icon\"),\n    effectiveAccessLevel: text(accessLevelColumn).notNull().default(\"read\"),\n    localCreatedAt: text(\"local_created_at\").notNull(),\n    localUpdatedAt: text(\"local_updated_at\").notNull(),\n    serverCreatedAt: text(\"server_created_at\"),\n    serverUpdatedAt: text(\"server_updated_at\"),\n  },\n  (table) => [primaryKey({ columns: [table.id] })],\n);\n\n/**\n * Latest removal observed for each container. Hydration must observe the same\n * generation before fetching verified restoration evidence; unsigned clocks\n * never establish a terminal deletion or bypass a concurrent removal. Cleared\n * observations retain their generation so remove/restore/remove cannot reuse it.\n */\nexport const containerHydrationTombstones = sqliteTable(\n  \"container_hydration_tombstones\",\n  {\n    containerId: text(\"container_id\").notNull(),\n    generation: integer(\"generation\").notNull().default(1),\n    cleared: integer(\"cleared\", { mode: \"boolean\" }).notNull().default(false),\n    reason: text(\"reason\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.containerId] })],\n);\n\n/**\n * Organization attribution for container metadata retained after access loss.\n * The container row is removed on revocation, so this marker retains the\n * organization scope needed by a later access-restoration sweep.\n */\nexport const dormantContainerMetadata = sqliteTable(\n  \"dormant_container_metadata\",\n  {\n    containerId: text(\"container_id\").notNull(),\n    organizationId: text(\"organization_id\").notNull(),\n    retainedAt: text(\"retained_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.containerId] }),\n    index(\"dormant_container_metadata_organization_idx\").on(\n      table.organizationId,\n      table.containerId,\n    ),\n  ],\n);\n\n/**\n * Organizations a held folder was re-homed away from. Purged-organization\n * recovery re-creates folders under their existing ids and a purged\n * organization never returns, so a later proof binding the folder back to one\n * of these organizations is a replay. Retained across remote resets.\n */\nexport const supersededContainerBindings = sqliteTable(\n  \"superseded_container_bindings\",\n  {\n    containerId: text(\"container_id\").notNull(),\n    organizationId: text(\"organization_id\").notNull(),\n    supersededAt: text(\"superseded_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.containerId, table.organizationId] }),\n  ],\n);\n\n/**\n * Durable request for a post-access-restoration crawl and sweep. Attempt state\n * enforces exponential backoff and a bounded retry budget across restarts.\n */\nexport const dormantMetadataSweepRequests = sqliteTable(\n  \"dormant_metadata_sweep_requests\",\n  {\n    organizationId: text(\"organization_id\").notNull(),\n    requesterUserId: text(\"requester_user_id\").notNull(),\n    generation: integer(\"generation\").notNull().default(1),\n    attemptCount: integer(\"attempt_count\").notNull().default(0),\n    lastAttemptedAt: text(\"last_attempted_at\"),\n    requestedAt: text(\"requested_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.organizationId, table.requesterUserId] }),\n  ],\n);\n\nexport const containerTableSchemas: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(containers),\n    requiredColumns: [\"display_name\", \"icon\"],\n  },\n  {\n    ...defineSqlTableSchema(containerHydrationTombstones),\n    requiredColumns: [\"cleared\"],\n  },\n  defineSqlTableSchema(dormantContainerMetadata),\n  defineSqlTableSchema(dormantMetadataSweepRequests),\n  defineSqlTableSchema(supersededContainerBindings),\n];\n\nexport const containerSQLiteSchema = {\n  containers,\n  containerHydrationTombstones,\n  dormantContainerMetadata,\n  dormantMetadataSweepRequests,\n  supersededContainerBindings,\n};\n"]}

package/data/sqlite/{schema.d.ts → schema/index.d.ts}

@@ -1,6 +1,6 @@
+import { type SqlTableSchema } from "../sqlTableSchema.js";
 import { containerDocumentTombstoneHolds } from "./containerDocumentTombstoneHoldSchema.js";
 import { organizationReadModelTables } from "./organizationReadModelTableRegistry.js";
-import { type SqlTableSchema } from "./sqlTableSchema.js";
 export { containerHydrationTombstones, containers, dormantContainerMetadata, dormantMetadataSweepRequests, supersededContainerBindings, } from "./containerSchema.js";
 export { documentAttachmentBlobProjection, documentPendingAttachments, } from "./documentAttachmentSchema.js";
 export { inContainerIntentLanes, inLocalIntentLane, LOCAL_INTENT_LANES, LOCAL_INTENT_SUBJECT, localIntents, } from "./localIntentSchema.js";

package/data/sqlite/{schema.js → schema/index.js}

@@ -1,10 +1,11 @@
 import { sql } from "drizzle-orm";
 import { index, integer, primaryKey, sqliteTable, text, uniqueIndex, } from "drizzle-orm/sqlite-core";
+import { documentOrphanBlobReclaims, documentOrphanBlobReclaimTable, } from "../documentPersistence/documentOrphanBlobReclaims.js";
+import { defineSqlTableSchema } from "../sqlTableSchema.js";
 import { containerDocumentTombstoneHolds } from "./containerDocumentTombstoneHoldSchema.js";
 import { containerSQLiteSchema, containerTableSchemas, } from "./containerSchema.js";
 import { documentAttachmentBlobProjection, documentPendingAttachments, } from "./documentAttachmentSchema.js";
 import { documentDiscoveryHeads, documentDiscoverySequence, pendingDocumentDiscoveries, } from "./documentDiscoveryEvidenceSchema.js";
-import { documentOrphanBlobReclaims, documentOrphanBlobReclaimTable, } from "./documentOrphanBlobReclaims.js";
 import { documentIntentLinkTargets } from "./documentPlacementIntentSchema.js";
 import { localIntents } from "./localIntentSchema.js";
 import * as organizationDataUsage from "./organizationDataUsageSchema.js";
@@ -19,7 +20,6 @@ import { principalHistoryStages, principalHistoryStageTables, } from "./principa
 import { principalMutationJournal, principalMutationJournalTables, } from "./principalMutationJournalSchema.js";
 import { principalPolicies, principalPolicyBundleHistory, principalPolicyBundleReferences, principalPolicyCheckpoints, principalPolicyOrganizations, } from "./principalPolicySchema.js";
 import { securityIncidents, securityIncidentTable, } from "./securityIncidentSchema.js";
-import { defineSqlTableSchema } from "./sqlTableSchema.js";
 import { verifiedAccessManifestBundles, verifiedManifestBundleTables, } from "./verifiedManifestBundleSchema.js";
 export { containerHydrationTombstones, containers, dormantContainerMetadata, dormantMetadataSweepRequests, supersededContainerBindings, } from "./containerSchema.js";
 export { documentAttachmentBlobProjection, documentPendingAttachments, } from "./documentAttachmentSchema.js";
@@ -522,4 +522,4 @@ export const clientSQLiteSchema = {
     ...organizationDataUsage.organizationDataUsageSQLiteSchema,
     ...provisioningAttempt.organizationProvisioningAttemptSQLiteSchema,
 };
-//# sourceMappingURL=schema.js.map
+//# sourceMappingURL=index.js.map

package/data/sqlite/schema/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,KAAK,EACL,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,EACJ,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAuB,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,+BAA+B,EAAE,MAAM,wCAAwC,CAAC;AACzF,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,qBAAqB,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,mBAAmB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EACL,iCAAiC,EACjC,2BAA2B,GAC5B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EACL,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EACL,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,+BAA+B,EAC/B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,4BAA4B,EAC5B,UAAU,EACV,wBAAwB,EACxB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,GACb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,+BAA+B,EAC/B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,CAAC;AAExE,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAClC,WAAW,EACX;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACvE,aAAa,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACtC,sBAAsB,EAAE,IAAI,CAAC,0BAA0B,CAAC;IACxD,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC;IAC5C,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC3C,kBAAkB,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACtE,iBAAiB,EAAE,OAAO,CAAC,qBAAqB,CAAC;IACjD,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,sBAAsB,EAAE,IAAI,CAAC,2BAA2B,CAAC;IACzD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,KAAK,CAAC,4BAA4B,CAAC;SAChC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC;SACnC,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,UAAU,cAAc,CAAC;CAC/C,CACF,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CACnD,8BAA8B,EAC9B;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;IACtD,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACrE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAC/C,0BAA0B,EAC1B;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;IACd,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,yBAAyB,EAAE,IAAI,CAAC,8BAA8B,CAAC;IAC/D,uBAAuB,EAAE,IAAI,CAAC,4BAA4B,CAAC;IAC3D,mBAAmB,EAAE,IAAI,CAAC,uBAAuB,CAAC;IAClD,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CACxD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IACnC,KAAK,CAAC,4CAA4C,CAAC,CAAC,EAAE,CACpD,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,SAAS,CAChB;IACD,WAAW,CAAC,wCAAwC,CAAC;SAClD,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;SAClB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,QAAQ,cAAc,CAAC;CAC7C,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAClD,6BAA6B,EAC7B;IACE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IACjC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC;QACT,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC;KAClE,CAAC;CACH,CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CACjD,4BAA4B,EAC5B;IACE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE;IAC5C,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,oBAAoB,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC,OAAO,EAAE;IAC9D,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE;IAClD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAChD,4BAA4B,EAC5B;IACE,mBAAmB,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE;IAC5D,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,aAAa,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAClD,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;IACtD,qBAAqB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,EAAE;IAChE,kBAAkB,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE;IACzD,sBAAsB,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC,OAAO,EAAE;IAClE,2BAA2B,EAAE,IAAI,CAC/B,+BAA+B,CAChC,CAAC,OAAO,EAAE;IACX,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;CAC7C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC;QACT,OAAO,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC;KACnD,CAAC;IACF,WAAW,CAAC,2DAA2D,CAAC,CAAC,EAAE,CACzE,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,qBAAqB,CAC5B;CACF,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CACpD,+BAA+B,EAC/B;IACE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAC5E,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAC3C,qBAAqB,EACrB;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IACzB,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7D,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IACvD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,KAAK,CAAC,mCAAmC,CAAC;SACvC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;SACrB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,WAAW,cAAc,CAAC;IAC/C,KAAK,CAAC,6CAA6C,CAAC;SACjD,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;SACxB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,WAAW,UAAU,CAAC;IAC3C,KAAK,CAAC,kCAAkC,CAAC;SACtC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;SACpB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,UAAU,cAAc,CAAC;CAC/C,CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAC/C,0BAA0B,EAC1B;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IACzB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;CAC7B,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACtD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAChD,2BAA2B,EAC3B;IACE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;CAC9B,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CACrE,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAkC;IAC3D;QACE,GAAG,oBAAoB,CAAC,SAAS,CAAC;QAClC,eAAe,EAAE;YACf,mBAAmB;YACnB,qBAAqB;YACrB,sBAAsB;YACtB,qBAAqB;YACrB,sBAAsB;YACtB,2BAA2B;SAC5B;KACF;IACD,oBAAoB,CAAC,0BAA0B,CAAC;IAChD;QACE,GAAG,oBAAoB,CAAC,sBAAsB,CAAC;QAC/C,eAAe,EAAE,CAAC,WAAW,CAAC;KAC/B;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAClE;QACE,GAAG,oBAAoB,CAAC,iBAAiB,CAAC;QAC1C,eAAe,EAAE,CAAC,qBAAqB,CAAC;KACzC;IACD;QACE,GAAG,oBAAoB,CAAC,4BAA4B,CAAC;QACrD,eAAe,EAAE,CAAC,qBAAqB,CAAC;KACzC;IACD,oBAAoB,CAAC,+BAA+B,CAAC;IACrD,oBAAoB,CAAC,4BAA4B,CAAC;IAClD,GAAG,2BAA2B;IAC9B,GAAG,8BAA8B;CAClC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAkC;IACnE,oBAAoB,CAAC,oBAAoB,CAAC;IAC1C,oBAAoB,CAAC,yBAAyB,CAAC;IAC/C,oBAAoB,CAAC,yBAAyB,CAAC;IAC/C,oBAAoB,CAAC,wBAAwB,CAAC;IAC9C,oBAAoB,CAAC,0BAA0B,CAAC;CACjD,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAkC;IACzE,oBAAoB,CAAC,uBAAuB,CAAC;CAC9C,CAAC;AAEF,MAAM,sBAAsB,GAAkC;IAC5D,qBAAqB;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAErD,MAAM,CAAC,MAAM,iCAAiC,GAC5C;IACE,oBAAoB,CAAC,2BAA2B,CAAC;IACjD;QACE,GAAG,oBAAoB,CAAC,+BAA+B,CAAC;QACxD,eAAe,EAAE,CAAC,QAAQ,CAAC;KAC5B;IACD,oBAAoB,CAAC,0BAA0B,CAAC;IAChD;QACE,GAAG,oBAAoB,CAAC,sBAAsB,CAAC;QAC/C,eAAe,EAAE,CAAC,iBAAiB,CAAC;KACrC;IACD,oBAAoB,CAAC,yBAAyB,CAAC;CAChD,CAAC;AAEJ,MAAM,CAAC,MAAM,iBAAiB,GAAkC;IAC9D,oBAAoB,CAAC,YAAY,CAAC;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAkC;IAC1E,GAAG,iBAAiB;IACpB,oBAAoB,CAAC,yBAAyB,CAAC;CAChD,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAkC;IACrE,oBAAoB,CAAC,kBAAkB,CAAC;IACxC,oBAAoB,CAAC,sBAAsB,CAAC;IAC5C;QACE,GAAG,oBAAoB,CAAC,0BAA0B,CAAC;QACnD,eAAe,EAAE,CAAC,gBAAgB,CAAC;KACpC;IACD;QACE,GAAG,oBAAoB,CAAC,gCAAgC,CAAC;QACzD,eAAe,EAAE,CAAC,gBAAgB,CAAC;KACpC;IACD,8BAA8B;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAkC;IACzE;QACE,GAAG,oBAAoB,CAAC,uBAAuB,CAAC;QAChD,eAAe,EAAE,CAAC,YAAY,CAAC;KAChC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAkC;IAC5D,GAAG,8BAA8B;IACjC,GAAG,cAAc;IACjB,GAAG,qBAAqB;IACxB,GAAG,sBAAsB;IACzB,GAAG,4BAA4B;IAC/B,GAAG,4BAA4B;IAC/B,GAAG,sBAAsB;IACzB,GAAG,eAAe;IAClB,GAAG,iCAAiC;IACpC,GAAG,6BAA6B;IAChC,GAAG,wBAAwB;IAC3B,GAAG,4BAA4B;IAC/B,GAAG,2BAA2B;IAC9B,GAAG,qBAAqB,CAAC,2BAA2B;IACpD,GAAG,mBAAmB,CAAC,qCAAqC;CAC7D,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,8BAA8B;IAC9B,0BAA0B;IAC1B,2BAA2B;IAC3B,wBAAwB;IACxB,uBAAuB;IACvB,qBAAqB;IACrB,wBAAwB;IACxB,sBAAsB;IACtB,oBAAoB;IACpB,yBAAyB;IACzB,SAAS;IACT,iBAAiB;IACjB,4BAA4B;IAC5B,+BAA+B;IAC/B,4BAA4B;IAC5B,yBAAyB;IACzB,wBAAwB;IACxB,0BAA0B;IAC1B,6BAA6B;IAC7B,uBAAuB;IACvB,iBAAiB;IACjB,GAAG,qBAAqB;IACxB,2BAA2B;IAC3B,YAAY;IACZ,yBAAyB;IACzB,kBAAkB;IAClB,0BAA0B;IAC1B,gCAAgC;IAChC,0BAA0B,EAAE,0BAA0B;IACtD,uBAAuB;IACvB,GAAG,iCAAiC;IACpC,GAAG,qBAAqB,CAAC,iCAAiC;IAC1D,GAAG,mBAAmB,CAAC,2CAA2C;CACnE,CAAC","sourcesContent":["import { sql } from \"drizzle-orm\";\nimport {\n  index,\n  integer,\n  primaryKey,\n  sqliteTable,\n  text,\n  uniqueIndex,\n} from \"drizzle-orm/sqlite-core\";\nimport {\n  documentOrphanBlobReclaims,\n  documentOrphanBlobReclaimTable,\n} from \"../documentPersistence/documentOrphanBlobReclaims\";\nimport { defineSqlTableSchema, type SqlTableSchema } from \"../sqlTableSchema\";\nimport { containerDocumentTombstoneHolds } from \"./containerDocumentTombstoneHoldSchema\";\nimport {\n  containerSQLiteSchema,\n  containerTableSchemas,\n} from \"./containerSchema\";\nimport {\n  documentAttachmentBlobProjection,\n  documentPendingAttachments,\n} from \"./documentAttachmentSchema\";\nimport {\n  documentDiscoveryHeads,\n  documentDiscoverySequence,\n  pendingDocumentDiscoveries,\n} from \"./documentDiscoveryEvidenceSchema\";\nimport { documentIntentLinkTargets } from \"./documentPlacementIntentSchema\";\nimport { localIntents } from \"./localIntentSchema\";\nimport * as organizationDataUsage from \"./organizationDataUsageSchema\";\nimport { organizationFounders } from \"./organizationFounderSchema\";\nimport * as provisioningAttempt from \"./organizationProvisioningAttemptSchema\";\nimport {\n  organizationReadModelSQLiteSchema,\n  organizationReadModelTables,\n} from \"./organizationReadModelTableRegistry\";\nimport { principalGrantRetirements } from \"./principalGrantRetirementSchema\";\nimport {\n  principalHistoryEntries,\n  principalHistoryEvidenceTables,\n  principalHistoryNodes,\n  principalHistoryPrefixes,\n} from \"./principalHistoryEvidenceSchema\";\nimport {\n  principalHistoryNodeReferences,\n  principalHistoryRootOwners,\n} from \"./principalHistoryNodeRetentionSchema\";\nimport { principalKeyEnvelopeArchive } from \"./principalHistoryRetentionSchema\";\nimport {\n  principalHistoryStages,\n  principalHistoryStageTables,\n} from \"./principalHistoryStageSchema\";\nimport {\n  principalMutationJournal,\n  principalMutationJournalTables,\n} from \"./principalMutationJournalSchema\";\nimport {\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyBundleReferences,\n  principalPolicyCheckpoints,\n  principalPolicyOrganizations,\n} from \"./principalPolicySchema\";\nimport {\n  securityIncidents,\n  securityIncidentTable,\n} from \"./securityIncidentSchema\";\nimport {\n  verifiedAccessManifestBundles,\n  verifiedManifestBundleTables,\n} from \"./verifiedManifestBundleSchema\";\n\nexport {\n  containerHydrationTombstones,\n  containers,\n  dormantContainerMetadata,\n  dormantMetadataSweepRequests,\n  supersededContainerBindings,\n} from \"./containerSchema\";\nexport {\n  documentAttachmentBlobProjection,\n  documentPendingAttachments,\n} from \"./documentAttachmentSchema\";\nexport {\n  inContainerIntentLanes,\n  inLocalIntentLane,\n  LOCAL_INTENT_LANES,\n  LOCAL_INTENT_SUBJECT,\n  localIntents,\n} from \"./localIntentSchema\";\nexport {\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyBundleReferences,\n  principalPolicyCheckpoints,\n  principalPolicyOrganizations,\n} from \"./principalPolicySchema\";\nexport { securityIncidents } from \"./securityIncidentSchema\";\nexport { containerDocumentTombstoneHolds, organizationReadModelTables };\n\nconst accessLevelColumn = \"effective_access_level\";\n\n/**\n * Durable Loro-backed document records shared by app features.\n *\n * This table stores encrypted document runtime state for multiple app domains.\n * `appKind` namespaces records for documents and container metadata. User-facing\n * list data is projected into feature-specific read models.\n *\n * Columns:\n * - `appKind`: Local domain namespace for the row, such as `documents` or\n *   `container-metadata`.\n * - `localId`: Stable local id inside `appKind`. It may be created before a\n *   server `documentId` exists.\n * - `documentId`: Server document id once the record is known remotely, or\n *   `null` while the document is local-only.\n * - `accessEpoch`: Latest access epoch persisted for the document. Defaults to\n *   the initial epoch.\n * - `accessStateHash`: Current document access/manifest state hash returned by\n *   sync, when known.\n * - `lastCommitLsn`: Last remote commit cursor applied to this local document.\n * - `documentManifestBundle`: Serialized document manifest bundle used for\n *   encrypted document sync.\n * - `contentKeyBundle`: Serialized content-key material needed to open the\n *   local document.\n * - `documentKekTargets`: Serialized KEK target state for document key wraps.\n * - `pendingBaseVersion`: Encoded oplog version through which every persisted\n *   op is already enqueued or synced. Persisted so a restart restores the\n *   outgoing-delta marker instead of re-seeding it past a device-first\n *   `deferRemoteSync` write's un-advanced op. `null` when unset.\n * - `snapshotEndVersion`: Encoded end version vector of the persisted content\n *   (which lives in the durable-history tables, never on this row), written on\n *   every content persist. Lets the pending-write queue's deferred-tail scan\n *   compare version coverage without loading content. Empty string when the\n *   document has never hydrated content, which readers treat as \"no deferred\n *   tail claimable\".\n * - `recoveryGeneration`: Atomic raw-history recovery writer fence.\n * - `recoveryDocumentId`: Former server id for cross-client post-purge recreation.\n * - `pullContinuation`: Durable progress for the next bounded remote pull.\n * - `syncFailureStatus`, `syncFailureMessage`, `syncFailureAttemptedAt`: The\n *   last terminal sync failure or quarantined incoming update for this scope.\n *   The durable write queue (queued rows of `documentHistoryUpdates`) has no\n *   status columns, so these let the write-queue view and footer explain why\n *   the document is blocked. `syncFailureMessage` is non-null exactly when a\n *   failure is recorded; a newer failure replaces the old, and a later fully\n *   validated sync pass, a remote reset, or the scope's teardown clears all\n *   three.\n * - `updatedAt`: Local timestamp for the last persisted runtime-state update.\n *\n * Indexes:\n * - `(appKind, localId)` is the primary key and scopes local document lookups.\n * - `(appKind, documentId) where documentId is not null` supports resolving a\n *   server document id back to the local row during discovery and relinking.\n */\nexport const documents = sqliteTable(\n  \"documents\",\n  {\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    documentId: text(\"document_id\"),\n    accessEpoch: integer(\"access_epoch\").notNull().default(1),\n    accessStateHash: text(\"access_state_hash\"),\n    effectiveAccessLevel: text(accessLevelColumn).notNull().default(\"read\"),\n    lastCommitLsn: text(\"last_commit_lsn\"),\n    documentManifestBundle: text(\"document_manifest_bundle\"),\n    contentKeyBundle: text(\"content_key_bundle\"),\n    documentKekTargets: text(\"document_kek_targets\"),\n    pendingBaseVersion: text(\"pending_base_version\"),\n    pullContinuation: text(\"pull_continuation\"),\n    recoveryGeneration: integer(\"recovery_generation\").notNull().default(0),\n    recoveryDocumentId: text(\"recovery_document_id\"),\n    snapshotEndVersion: text(\"snapshot_end_version\").notNull().default(\"\"),\n    syncFailureStatus: integer(\"sync_failure_status\"),\n    syncFailureMessage: text(\"sync_failure_message\"),\n    syncFailureAttemptedAt: text(\"sync_failure_attempted_at\"),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.appKind, table.localId] }),\n    index(\"documents_app_document_idx\")\n      .on(table.appKind, table.documentId)\n      .where(sql`${table.documentId} IS NOT NULL`),\n  ],\n);\n\n/**\n * Full-history persistence for local documents (checkpoint + tail) — the ONLY\n * durable content source. Record rows in `documents` carry runtime metadata\n * and the content frontier (`snapshotEndVersion`), never content. The\n * checkpoint holds a full-history snapshot refreshed only at compaction, and\n * the tail appends every update (local deltas and decrypted remote updates)\n * written since. Restore = import checkpoint + replay tail; compaction =\n * export full history from the live doc, replace the checkpoint, clear the\n * tail — all bounded and amortized. Container metadata stores its content (an\n * exported-updates blob) as its checkpoint row, with no tail.\n */\nexport const documentHistoryCheckpoints = sqliteTable(\n  \"document_history_checkpoints\",\n  {\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    snapshot: text(\"snapshot\").notNull(),\n    endVersionVector: text(\"end_version_vector\").notNull(),\n    revision: text(\"revision\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.appKind, table.localId] })],\n);\n\n/**\n * The local update log: one row per Loro update, serving as both the history\n * tail (restore = checkpoint + tail) and the outbound write queue.\n *\n * Every locally authored update is stored once. While it waits for sync it\n * carries an `updateId` (the id submitted to the server) and the version-vector\n * metadata the submission needs; settlement clears them, leaving the row as\n * ordinary tail history until compaction folds it into a checkpoint.\n *\n * Columns:\n * - `id`: Row id; tail compaction deletes by it.\n * - `appKind`, `localId`: Document scope matching `documents`.\n * - `updateData`: Serialized Loro update payload.\n * - `origin`: \"local\" (authored on this device) or \"remote\" (decrypted\n *   pulled update) for tail rows. Restores use it to advance the\n *   outgoing-delta marker across remote rows — their ops are already\n *   server-side — while a local row left behind by a crash stays below the\n *   marker so the next edit re-derives and sends it. \"outbox\" marks a queued\n *   update with no tail role (container metadata, whose content is its\n *   checkpoint, and full-state re-uploads after a remote reset); restores and\n *   compaction never see it and settlement deletes it.\n * - `createdAt`: Insertion timestamp; with `rowid`, deterministic replay order.\n * - `updateId`: Present exactly while the row is queued for sync; rekeyed\n *   after a lost acknowledgement poisons the submitted id.\n * - `partialStartVersionVector` / `partialEndVersionVector`: Version vectors\n *   around a queued partial update.\n * - `sourceVersionVector`: Present on a queued rotation baseline checkpoint.\n * - `rekeyCount`: Durable bound on rekeys of a queued row.\n *\n * Invariant: compaction never deletes a queued row, so a checkpoint can cover\n * a queued update's operations without removing it from the queue.\n */\nexport const documentHistoryUpdates = sqliteTable(\n  \"document_history_updates\",\n  {\n    id: text(\"id\"),\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    updateData: text(\"update_data\").notNull(),\n    origin: text(\"origin\").notNull(),\n    createdAt: text(\"created_at\").notNull(),\n    updateId: text(\"update_id\"),\n    partialStartVersionVector: text(\"partial_start_version_vector\"),\n    partialEndVersionVector: text(\"partial_end_version_vector\"),\n    sourceVersionVector: text(\"source_version_vector\"),\n    rekeyCount: integer(\"rekey_count\").notNull().default(0),\n  },\n  (table) => [\n    primaryKey({ columns: [table.id] }),\n    index(\"document_history_updates_scope_created_idx\").on(\n      table.appKind,\n      table.localId,\n      table.createdAt,\n    ),\n    uniqueIndex(\"document_history_updates_update_id_idx\")\n      .on(table.updateId)\n      .where(sql`${table.updateId} IS NOT NULL`),\n  ],\n);\n\n/**\n * Anti-rollback pin for verified access manifests.\n *\n * Records the highest access-manifest epoch this client has verified for each\n * object, so a later projection that serves an older epoch (rollback) or a\n * conflicting manifest at the same epoch (equivocation) is detected before any\n * key is unwrapped. Updated monotonically after a projection verifies cleanly.\n *\n * Columns:\n * - `objectKind`: Access object kind (`container`, `document`, ...).\n * - `organizationId`: Organization boundary that owns the object.\n * - `objectId`: Stable object id.\n * - `epoch`: Highest verified manifest epoch.\n * - `manifestHash`: Manifest hash pinned at that epoch.\n * - `updatedAt`: Local timestamp for the pin.\n *\n * Indexes:\n * - `(objectKind, organizationId, objectId)` is the primary key and gives one\n *   pin per object.\n */\nexport const accessManifestCheckpoints = sqliteTable(\n  \"access_manifest_checkpoints\",\n  {\n    objectKind: text(\"object_kind\").notNull(),\n    organizationId: text(\"organization_id\").notNull(),\n    objectId: text(\"object_id\").notNull(),\n    epoch: integer(\"epoch\").notNull(),\n    manifestHash: text(\"manifest_hash\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({\n      columns: [table.objectKind, table.organizationId, table.objectId],\n    }),\n  ],\n);\n\n/**\n * Durable terminal pins for documents whose signed purge proof was verified.\n * These survive remote-state resets so a dishonest API cannot later replay the\n * pre-purge writer projection and resurrect locally deleted content.\n */\nexport const documentPurgeCheckpoints = sqliteTable(\n  \"document_purge_checkpoints\",\n  {\n    documentId: text(\"document_id\").primaryKey(),\n    organizationId: text(\"organization_id\").notNull(),\n    documentManifestHash: text(\"document_manifest_hash\").notNull(),\n    purgeEventHash: text(\"purge_event_hash\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n);\n\n/**\n * Durable trust-on-first-use pins for remote user identity bundles.\n *\n * The first validated identity observed for a user in a configured API trust\n * domain is inserted once. Later observations must match every suite, public\n * key, and fingerprint exactly; the persistence adapter never updates these\n * rows. `firstSeenAt` records when the local trust decision was made and is\n * likewise immutable.\n *\n * Indexes:\n * - `(identityTrustDomain, userId)` is the primary key and scopes a user pin to\n *   the host-configured API authority that supplied it.\n * - `(identityTrustDomain, signingKeyFingerprint)` binds the reverse identity\n *   mapping durably, including across session recreation. There is no\n *   migration for a table that already violates it. Earlier builds pinned a\n *   registration's user id before the server confirmed it, so a device that\n *   ran one may hold two users on one key; deployments are greenfield, and\n *   such a device clears its local data, which recreates this table empty. A\n *   device that used an environment before a reset does the same (see\n *   docs/developer/greenfield-reset.md).\n */\nexport const trustedUserIdentityPins = sqliteTable(\n  \"trusted_user_identity_pins\",\n  {\n    identityTrustDomain: text(\"identity_trust_domain\").notNull(),\n    userId: text(\"user_id\").notNull(),\n    formatVersion: integer(\"format_version\").notNull(),\n    signingSuite: text(\"signing_suite\").notNull(),\n    signingPublicKey: text(\"signing_public_key\").notNull(),\n    signingKeyFingerprint: text(\"signing_key_fingerprint\").notNull(),\n    encapsulationSuite: text(\"encapsulation_suite\").notNull(),\n    encapsulationPublicKey: text(\"encapsulation_public_key\").notNull(),\n    encapsulationKeyFingerprint: text(\n      \"encapsulation_key_fingerprint\",\n    ).notNull(),\n    firstSeenAt: text(\"first_seen_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({\n      columns: [table.identityTrustDomain, table.userId],\n    }),\n    uniqueIndex(\"trusted_user_identity_pins_domain_signing_fingerprint_idx\").on(\n      table.identityTrustDomain,\n      table.signingKeyFingerprint,\n    ),\n  ],\n);\n\n/**\n * Local many-to-many projection between documents and containers.\n *\n * The document summary row stores one selected `containerId` for primary list\n * placement, while this table keeps the full set of linked containers returned\n * by container/document sync. Removing a container deletes its links and may\n * repair affected document summary rows to point at another remaining link.\n *\n * Columns:\n * - `documentId`: Server document id whose container links are projected.\n * - `containerId`: Linked container id.\n * - `updatedAt`: Local timestamp for the last replacement of the link set.\n *\n * Indexes:\n * - `(documentId, containerId)` is the primary key and prevents duplicate\n *   links for the same document/container pair.\n */\nexport const documentContainerProjection = sqliteTable(\n  \"document_container_projection\",\n  {\n    documentId: text(\"document_id\").notNull(),\n    containerId: text(\"container_id\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.documentId, table.containerId] })],\n);\n\n/**\n * Queryable document summary and detail projection.\n *\n * The durable Loro state lives in `documents`. This table stores the fields the\n * app needs for document lists, summaries, and fast detail hydration without\n * opening the full Loro snapshot on every read.\n *\n * Columns:\n * - `localId`: Stable local document id. This joins to `documents.localId` for\n *   rows where `documents.appKind = documents`.\n * - `documentId`: Server document id when known.\n * - `containerId`: Selected container for primary document placement, or\n *   `null` if the document is not currently linked to a visible container.\n * - `organizationId`: Last-known owning organization. Stamped from the\n *   container row when the document is detached because its container was\n *   removed locally (e.g. access to a shared org was revoked and the container\n *   tombstoned), so pending writes keep their org attribution after the\n *   `containers` join source disappears. Read as a fallback only — a live\n *   container join always wins.\n * - `documentKind`: Stored document kind. Defaults to `note`.\n * - `title`: Plain projected title. Defaults to the note fallback title.\n * - `updatedAt`: Timestamp used for document list ordering.\n *\n * The projected full text lives in `documentProjectionText`, keyed by the same\n * `localId`. Keeping it out of this row keeps list/window scans narrow: the\n * sidebar and summary queries read titles and placement from rows whose size\n * does not grow with document content.\n *\n * Indexes:\n * - `localId` is the primary key for document projection lookups.\n * - `(containerId) where containerId is not null` serves container-scoped\n *   window/count scans without walking the whole table.\n * - `(organizationId) where containerId is null` serves the orphan-recovery\n *   existence and window scans.\n * - `(documentId) where documentId is not null` serves the linked-placement\n *   join from `documentContainerProjection` and server-id lookups.\n */\nexport const documentProjection = sqliteTable(\n  \"document_projection\",\n  {\n    localId: text(\"local_id\"),\n    documentId: text(\"document_id\"),\n    containerId: text(\"container_id\"),\n    organizationId: text(\"organization_id\"),\n    documentKind: text(\"document_kind\").notNull().default(\"note\"),\n    title: text(\"title\").notNull().default(\"Untitled note\"),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.localId] }),\n    index(\"document_projection_container_idx\")\n      .on(table.containerId)\n      .where(sql`${table.containerId} IS NOT NULL`),\n    index(\"document_projection_orphan_organization_idx\")\n      .on(table.organizationId)\n      .where(sql`${table.containerId} IS NULL`),\n    index(\"document_projection_document_idx\")\n      .on(table.documentId)\n      .where(sql`${table.documentId} IS NOT NULL`),\n  ],\n);\n\n/**\n * Projected document text, split from `documentProjection` so content size\n * never bloats the rows that list/window queries scan. Loaded only by detail\n * reads (`loadDocument`) and the save-timestamp change check.\n *\n * Columns:\n * - `localId`: Stable local document id, matching `documentProjection.localId`.\n * - `text`: Plain projected text used to rebuild summaries/details.\n */\nexport const documentProjectionText = sqliteTable(\n  \"document_projection_text\",\n  {\n    localId: text(\"local_id\"),\n    text: text(\"text\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.localId] })],\n);\n\n/**\n * Per-lane sync state for container data: the server cursor and the local\n * freshness marker share one row per lane.\n *\n * Container sync is split into lanes, such as a parent-container child lane or\n * a container-document membership lane. The cursor lets the next request\n * resume without replaying the entire tree. The freshness marker records the\n * last fully drained check independently of the cursor: empty server\n * responses do not always carry a new watermark, but startup still needs to\n * know that it recently checked the lane before polling again.\n *\n * Columns:\n * - `laneKind`: Sync lane category, such as `container_parent` or\n *   `container_documents`.\n * - `laneId`: Lane identity. Root parent sync uses `root`, child sync uses a\n *   parent-prefixed container id, and document lanes use the container id.\n * - `watermarkUpdatedAt`: Server `updatedAt` value for the stored watermark;\n *   null until a watermark is saved.\n * - `watermarkId`: Server id tie-breaker for the stored watermark; null\n *   exactly when `watermarkUpdatedAt` is.\n * - `updatedAt`: Local timestamp for when the cursor was saved.\n * - `checkedAt`: Local timestamp for the most recent fully drained lane check;\n *   null until one completes.\n *\n * Indexes:\n * - `(laneKind, laneId)` is the primary key and stores one row per lane.\n */\nexport const containerSyncWatermarks = sqliteTable(\n  \"container_sync_watermarks\",\n  {\n    laneKind: text(\"lane_kind\").notNull(),\n    laneId: text(\"lane_id\").notNull(),\n    watermarkUpdatedAt: text(\"watermark_updated_at\"),\n    watermarkId: text(\"watermark_id\"),\n    updatedAt: text(\"updated_at\"),\n    checkedAt: text(\"checked_at\"),\n  },\n  (table) => [primaryKey({ columns: [table.laneKind, table.laneId] })],\n);\n\nexport const documentTables: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(documents),\n    requiredColumns: [\n      \"pull_continuation\",\n      \"recovery_generation\",\n      \"recovery_document_id\",\n      \"sync_failure_status\",\n      \"sync_failure_message\",\n      \"sync_failure_attempted_at\",\n    ],\n  },\n  defineSqlTableSchema(documentHistoryCheckpoints),\n  {\n    ...defineSqlTableSchema(documentHistoryUpdates),\n    requiredColumns: [\"update_id\"],\n  },\n];\n\nexport const principalPolicyTables: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(principalPolicies),\n    requiredColumns: [\"current_grants_json\"],\n  },\n  {\n    ...defineSqlTableSchema(principalPolicyBundleHistory),\n    requiredColumns: [\"current_grants_json\"],\n  },\n  defineSqlTableSchema(principalPolicyBundleReferences),\n  defineSqlTableSchema(principalPolicyOrganizations),\n  ...principalHistoryStageTables,\n  ...principalHistoryEvidenceTables,\n];\n\nexport const keyingCheckpointTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(organizationFounders),\n  defineSqlTableSchema(accessManifestCheckpoints),\n  defineSqlTableSchema(principalGrantRetirements),\n  defineSqlTableSchema(documentPurgeCheckpoints),\n  defineSqlTableSchema(principalPolicyCheckpoints),\n];\n\nexport const trustedUserIdentityPinTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(trustedUserIdentityPins),\n];\n\nconst securityIncidentTables: ReadonlyArray<SqlTableSchema> = [\n  securityIncidentTable,\n];\n\nexport const containerTables = containerTableSchemas;\n\nexport const documentContainerProjectionTables: ReadonlyArray<SqlTableSchema> =\n  [\n    defineSqlTableSchema(documentContainerProjection),\n    {\n      ...defineSqlTableSchema(containerDocumentTombstoneHolds),\n      requiredColumns: [\"hidden\"],\n    },\n    defineSqlTableSchema(pendingDocumentDiscoveries),\n    {\n      ...defineSqlTableSchema(documentDiscoveryHeads),\n      requiredColumns: [\"organization_id\"],\n    },\n    defineSqlTableSchema(documentDiscoverySequence),\n  ];\n\nexport const localIntentTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(localIntents),\n];\n\nexport const documentPlacementIntentTables: ReadonlyArray<SqlTableSchema> = [\n  ...localIntentTables,\n  defineSqlTableSchema(documentIntentLinkTargets),\n];\n\nexport const documentProjectionTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(documentProjection),\n  defineSqlTableSchema(documentProjectionText),\n  {\n    ...defineSqlTableSchema(documentPendingAttachments),\n    requiredColumns: [\"content_sha256\"],\n  },\n  {\n    ...defineSqlTableSchema(documentAttachmentBlobProjection),\n    requiredColumns: [\"content_sha256\"],\n  },\n  documentOrphanBlobReclaimTable,\n];\n\nexport const containerSyncWatermarkTables: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(containerSyncWatermarks),\n    requiredColumns: [\"checked_at\"],\n  },\n];\n\nexport const clientSqlTables: ReadonlyArray<SqlTableSchema> = [\n  ...principalMutationJournalTables,\n  ...documentTables,\n  ...principalPolicyTables,\n  ...keyingCheckpointTables,\n  ...verifiedManifestBundleTables,\n  ...trustedUserIdentityPinTables,\n  ...securityIncidentTables,\n  ...containerTables,\n  ...documentContainerProjectionTables,\n  ...documentPlacementIntentTables,\n  ...documentProjectionTables,\n  ...containerSyncWatermarkTables,\n  ...organizationReadModelTables,\n  ...organizationDataUsage.organizationDataUsageTables,\n  ...provisioningAttempt.organizationProvisioningAttemptTables,\n];\n\nexport const clientSQLiteSchema = {\n  principalHistoryNodeReferences,\n  principalHistoryRootOwners,\n  principalKeyEnvelopeArchive,\n  principalMutationJournal,\n  principalHistoryEntries,\n  principalHistoryNodes,\n  principalHistoryPrefixes,\n  principalHistoryStages,\n  organizationFounders,\n  principalGrantRetirements,\n  documents,\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyBundleReferences,\n  principalPolicyOrganizations,\n  accessManifestCheckpoints,\n  documentPurgeCheckpoints,\n  principalPolicyCheckpoints,\n  verifiedAccessManifestBundles,\n  trustedUserIdentityPins,\n  securityIncidents,\n  ...containerSQLiteSchema,\n  documentContainerProjection,\n  localIntents,\n  documentIntentLinkTargets,\n  documentProjection,\n  documentPendingAttachments,\n  documentAttachmentBlobProjection,\n  documentOrphanBlobReclaims: documentOrphanBlobReclaims,\n  containerSyncWatermarks,\n  ...organizationReadModelSQLiteSchema,\n  ...organizationDataUsage.organizationDataUsageSQLiteSchema,\n  ...provisioningAttempt.organizationProvisioningAttemptSQLiteSchema,\n};\n"]}

package/data/sqlite/{organizationDataUsageSchema.js → schema/organizationDataUsageSchema.js}

@@ -1,5 +1,5 @@
 import { integer, primaryKey, sqliteTable, text, } from "drizzle-orm/sqlite-core";
-import { defineSqlTableSchema } from "./sqlTableSchema.js";
+import { defineSqlTableSchema } from "../sqlTableSchema.js";
 export const ORGANIZATION_DATA_USAGE_PROJECTION_VERSION = 1;
 /**
  * One server-computed usage snapshot per organization requester. The

package/data/sqlite/schema/organizationDataUsageSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationDataUsageSchema.js","sourceRoot":"","sources":["organizationDataUsageSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,GACL,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAuB,MAAM,mBAAmB,CAAC;AAE9E,MAAM,CAAC,MAAM,0CAA0C,GAAG,CAAU,CAAC;AAErE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,WAAW,CACvD,mCAAmC,EACnC;IACE,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE;IACpD,iBAAiB,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;IAC1D,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC1C,cAAc,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE;IACrD,kBAAkB,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE;IAC7D,aAAa,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAClD,mBAAmB,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE;IAC/D,eAAe,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE;IACvD,qBAAqB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,EAAE;IAChE,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;CAC5C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;CACvE,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAkC;IACxE;QACE,GAAG,oBAAoB,CAAC,8BAA8B,CAAC;QACvD,eAAe,EAAE,CAAC,yBAAyB,CAAC;KAC7C;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,8BAA8B;CAC/B,CAAC","sourcesContent":["import {\n  integer,\n  primaryKey,\n  sqliteTable,\n  text,\n} from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema, type SqlTableSchema } from \"../sqlTableSchema\";\n\nexport const ORGANIZATION_DATA_USAGE_PROJECTION_VERSION = 1 as const;\n\n/**\n * One server-computed usage snapshot per organization requester. The\n * per-category document breakdown is the response's own array, stored as\n * JSON in canonical category order in `categoryBreakdownJson` and re-validated\n * against the response schema on every read; a row that fails is purged.\n */\nexport const organizationDataUsageSnapshots = sqliteTable(\n  \"organization_data_usage_snapshots\",\n  {\n    organizationId: text(\"organization_id\").notNull(),\n    requesterUserId: text(\"requester_user_id\").notNull(),\n    projectionVersion: integer(\"projection_version\").notNull(),\n    blobCount: integer(\"blob_count\").notNull(),\n    blobByteLength: integer(\"blob_byte_length\").notNull(),\n    documentByteLength: integer(\"document_byte_length\").notNull(),\n    documentCount: integer(\"document_count\").notNull(),\n    documentUpdateCount: integer(\"document_update_count\").notNull(),\n    totalByteLength: integer(\"total_byte_length\").notNull(),\n    categoryBreakdownJson: text(\"category_breakdown_json\").notNull(),\n    refreshedAt: text(\"refreshed_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.organizationId, table.requesterUserId] }),\n  ],\n);\n\nexport const organizationDataUsageTables: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(organizationDataUsageSnapshots),\n    requiredColumns: [\"category_breakdown_json\"],\n  },\n];\n\nexport const organizationDataUsageSQLiteSchema = {\n  organizationDataUsageSnapshots,\n};\n"]}

package/data/sqlite/{organizationProvisioningAttemptSchema.js → schema/organizationProvisioningAttemptSchema.js}

@@ -1,5 +1,5 @@
 import { sqliteTable, text } from "drizzle-orm/sqlite-core";
-import { defineSqlTableSchema } from "./sqlTableSchema.js";
+import { defineSqlTableSchema } from "../sqlTableSchema.js";
 /**
  * Durable client-side handoff for a purged personal organization replacement.
  *

package/data/sqlite/schema/organizationProvisioningAttemptSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationProvisioningAttemptSchema.js","sourceRoot":"","sources":["organizationProvisioningAttemptSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAuB,MAAM,mBAAmB,CAAC;AAE9E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,WAAW,CACzD,oCAAoC,EACpC;IACE,sBAAsB,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC,UAAU,EAAE;IACrE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE;IACpD,mBAAmB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE;IAC3D,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qCAAqC,GAChD,CAAC,oBAAoB,CAAC,gCAAgC,CAAC,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,2CAA2C,GAAG;IACzD,gCAAgC;CACjC,CAAC","sourcesContent":["import { sqliteTable, text } from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema, type SqlTableSchema } from \"../sqlTableSchema\";\n\n/**\n * Durable client-side handoff for a purged personal organization replacement.\n *\n * The replacement request is intentionally retained until both remote\n * provisioning and the organization-scoped local reset commit. A lost HTTP\n * response or a failed local reset can therefore replay the exact signed\n * artifacts instead of minting an incompatible second organization.\n */\nexport const organizationProvisioningAttempts = sqliteTable(\n  \"organization_provisioning_attempts\",\n  {\n    replacedOrganizationId: text(\"replaced_organization_id\").primaryKey(),\n    userId: text(\"user_id\").notNull(),\n    organizationId: text(\"organization_id\").notNull(),\n    rootContainerId: text(\"root_container_id\").notNull(),\n    serializedArtifacts: text(\"serialized_artifacts\").notNull(),\n    createdAt: text(\"created_at\").notNull(),\n  },\n);\n\nexport const organizationProvisioningAttemptTables: ReadonlyArray<SqlTableSchema> =\n  [defineSqlTableSchema(organizationProvisioningAttempts)];\n\nexport const organizationProvisioningAttemptSQLiteSchema = {\n  organizationProvisioningAttempts,\n};\n"]}

package/data/sqlite/{organizationReadModelTableRegistry.d.ts → schema/organizationReadModelTableRegistry.d.ts}

@@ -1,4 +1,4 @@
-import { type SqlTableSchema } from "./sqlTableSchema.js";
+import { type SqlTableSchema } from "../sqlTableSchema.js";
 export declare const organizationReadModelTables: ReadonlyArray<SqlTableSchema>;
 export declare const organizationReadModelSQLiteSchema: {
     organizationReadModelState: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{

package/data/sqlite/{organizationReadModelTableRegistry.js → schema/organizationReadModelTableRegistry.js}

@@ -1,5 +1,5 @@
+import { defineSqlTableSchema } from "../sqlTableSchema.js";
 import { organizationPresentationDenials, organizationReadModelContainerGrants, organizationReadModelDirectoryUsers, organizationReadModelGroupMembers, organizationReadModelGroups, organizationReadModelRequesters, organizationReadModelState, } from "./organizationReadModelSchema.js";
-import { defineSqlTableSchema } from "./sqlTableSchema.js";
 export const organizationReadModelTables = [
     // Lane heads folded into these rows (#2522); an older local shape must reset.
     {

package/data/sqlite/schema/organizationReadModelTableRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationReadModelTableRegistry.js","sourceRoot":"","sources":["organizationReadModelTableRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAuB,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,EACpC,mCAAmC,EACnC,iCAAiC,EACjC,2BAA2B,EAC3B,+BAA+B,EAC/B,0BAA0B,GAC3B,MAAM,+BAA+B,CAAC;AAEvC,MAAM,CAAC,MAAM,2BAA2B,GAAkC;IACxE,8EAA8E;IAC9E;QACE,GAAG,oBAAoB,CAAC,0BAA0B,CAAC;QACnD,eAAe,EAAE,CAAC,yBAAyB,EAAE,yBAAyB,CAAC;KACxE;IACD,oBAAoB,CAAC,+BAA+B,CAAC;IACrD;QACE,GAAG,oBAAoB,CAAC,mCAAmC,CAAC;QAC5D,eAAe,EAAE,CAAC,gCAAgC,CAAC;KACpD;IACD;QACE,GAAG,oBAAoB,CAAC,2BAA2B,CAAC;QACpD,eAAe,EAAE,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;KAC3D;IACD,oBAAoB,CAAC,iCAAiC,CAAC;IACvD,oBAAoB,CAAC,oCAAoC,CAAC;IAC1D,oBAAoB,CAAC,+BAA+B,CAAC;CACtD,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,0BAA0B;IAC1B,+BAA+B;IAC/B,mCAAmC;IACnC,2BAA2B;IAC3B,iCAAiC;IACjC,oCAAoC;IACpC,+BAA+B;CAChC,CAAC","sourcesContent":["import { defineSqlTableSchema, type SqlTableSchema } from \"../sqlTableSchema\";\nimport {\n  organizationPresentationDenials,\n  organizationReadModelContainerGrants,\n  organizationReadModelDirectoryUsers,\n  organizationReadModelGroupMembers,\n  organizationReadModelGroups,\n  organizationReadModelRequesters,\n  organizationReadModelState,\n} from \"./organizationReadModelSchema\";\n\nexport const organizationReadModelTables: ReadonlyArray<SqlTableSchema> = [\n  // Lane heads folded into these rows (#2522); an older local shape must reset.\n  {\n    ...defineSqlTableSchema(organizationReadModelState),\n    requiredColumns: [\"member_group_state_hash\", \"organization_state_hash\"],\n  },\n  defineSqlTableSchema(organizationReadModelRequesters),\n  {\n    ...defineSqlTableSchema(organizationReadModelDirectoryUsers),\n    requiredColumns: [\"is_personal_organization_owner\"],\n  },\n  {\n    ...defineSqlTableSchema(organizationReadModelGroups),\n    requiredColumns: [\"key_fingerprint\", \"members_state_hash\"],\n  },\n  defineSqlTableSchema(organizationReadModelGroupMembers),\n  defineSqlTableSchema(organizationReadModelContainerGrants),\n  defineSqlTableSchema(organizationPresentationDenials),\n];\n\nexport const organizationReadModelSQLiteSchema = {\n  organizationReadModelState,\n  organizationReadModelRequesters,\n  organizationReadModelDirectoryUsers,\n  organizationReadModelGroups,\n  organizationReadModelGroupMembers,\n  organizationReadModelContainerGrants,\n  organizationPresentationDenials,\n};\n"]}

package/data/sqlite/{principalHistoryEvidenceSchema.d.ts → schema/principalHistoryEvidenceSchema.d.ts}

@@ -305,4 +305,4 @@ export declare const principalHistoryNodes: import("drizzle-orm/sqlite-core").SQ
     };
     dialect: "sqlite";
 }>;
-export declare const principalHistoryEvidenceTables: import("./sqlTableSchema.js").SqlTableSchema[];
+export declare const principalHistoryEvidenceTables: import("../sqlTableSchema.js").SqlTableSchema[];

package/data/sqlite/{principalHistoryEvidenceSchema.js → schema/principalHistoryEvidenceSchema.js}

@@ -1,8 +1,8 @@
 import { desc } from "drizzle-orm";
 import { index, integer, primaryKey, sqliteTable, text, } from "drizzle-orm/sqlite-core";
+import { principalCurrentFingerprintJson } from "../principalKeyFingerprintJson.js";
+import { defineSqlTableSchema } from "../sqlTableSchema.js";
 import { principalHistoryNodeRetentionTables } from "./principalHistoryNodeRetentionSchema.js";
-import { principalCurrentFingerprintJson } from "./principalKeyFingerprintJson.js";
-import { defineSqlTableSchema } from "./sqlTableSchema.js";
 /** A completed, locally authenticated prefix; never an application trust pin. */
 export const principalHistoryPrefixes = sqliteTable("principal_history_prefixes", {
     scopeId: text("scope_id").primaryKey(),

package/data/sqlite/schema/principalHistoryEvidenceSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalHistoryEvidenceSchema.js","sourceRoot":"","sources":["principalHistoryEvidenceSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EACL,KAAK,EACL,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,GACL,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAE5F,iFAAiF;AACjF,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CACjD,4BAA4B,EAC5B;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE;IACtC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACrC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;CACrC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,gDAAgD,CAAC,CAAC,EAAE,CACxD,+BAA+B,CAAC,KAAK,CAAC,WAAW,CAAC,EAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CACpB;IACD,KAAK,CAAC,6CAA6C,CAAC,CAAC,EAAE,CACrD,KAAK,CAAC,cAAc,CACrB;CACF,CACF,CAAC;AAEF,kFAAkF;AAClF,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAChD,2BAA2B,EAC3B;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IACxD,KAAK,CAAC,4CAA4C,CAAC,CAAC,EAAE,CACpD,KAAK,CAAC,cAAc,CACrB;CACF,CACF,CAAC;AAEF,iFAAiF;AACjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAW,CAC9C,yBAAyB,EACzB;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IACpD,KAAK,CAAC,0CAA0C,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;CAC3E,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,GAAG,mCAAmC;IACtC;QACE,GAAG,oBAAoB,CAAC,wBAAwB,CAAC;QACjD,eAAe,EAAE,CAAC,cAAc,CAAC;KAClC;IACD,oBAAoB,CAAC,uBAAuB,CAAC;IAC7C,oBAAoB,CAAC,qBAAqB,CAAC;CAC5C,CAAC","sourcesContent":["import { desc } from \"drizzle-orm\";\nimport {\n  index,\n  integer,\n  primaryKey,\n  sqliteTable,\n  text,\n} from \"drizzle-orm/sqlite-core\";\nimport { principalCurrentFingerprintJson } from \"../principalKeyFingerprintJson\";\nimport { defineSqlTableSchema } from \"../sqlTableSchema\";\nimport { principalHistoryNodeRetentionTables } from \"./principalHistoryNodeRetentionSchema\";\n\n/** A completed, locally authenticated prefix; never an application trust pin. */\nexport const principalHistoryPrefixes = sqliteTable(\n  \"principal_history_prefixes\",\n  {\n    scopeId: text(\"scope_id\").primaryKey(),\n    organizationId: text(\"organization_id\").notNull(),\n    version: integer(\"version\").notNull(),\n    headJson: text(\"head_json\").notNull(),\n    currentJson: text(\"current_json\").notNull(),\n    progress: text(\"progress\").notNull(),\n  },\n  (table) => [\n    index(\"principal_history_prefixes_key_fingerprint_idx\").on(\n      principalCurrentFingerprintJson(table.currentJson),\n      desc(table.version),\n    ),\n    index(\"principal_history_prefixes_organization_idx\").on(\n      table.organizationId,\n    ),\n  ],\n);\n\n/** Entries are selected by their exact signed leaf, including signature bytes. */\nexport const principalHistoryEntries = sqliteTable(\n  \"principal_history_entries\",\n  {\n    scopeId: text(\"scope_id\").notNull(),\n    organizationId: text(\"organization_id\").notNull(),\n    leafHash: text(\"leaf_hash\").notNull(),\n    entryJson: text(\"entry_json\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.scopeId, table.leafHash] }),\n    index(\"principal_history_entries_organization_idx\").on(\n      table.organizationId,\n    ),\n  ],\n);\n\n/** Untrusted proof material, checked against a locally restored private root. */\nexport const principalHistoryNodes = sqliteTable(\n  \"principal_history_nodes\",\n  {\n    scopeId: text(\"scope_id\").notNull(),\n    organizationId: text(\"organization_id\").notNull(),\n    hash: text(\"hash\").notNull(),\n    leftHash: text(\"left_hash\").notNull(),\n    rightHash: text(\"right_hash\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.scopeId, table.hash] }),\n    index(\"principal_history_nodes_organization_idx\").on(table.organizationId),\n  ],\n);\n\nexport const principalHistoryEvidenceTables = [\n  ...principalHistoryNodeRetentionTables,\n  {\n    ...defineSqlTableSchema(principalHistoryPrefixes),\n    requiredColumns: [\"current_json\"],\n  },\n  defineSqlTableSchema(principalHistoryEntries),\n  defineSqlTableSchema(principalHistoryNodes),\n];\n"]}

package/data/sqlite/{principalHistoryNodeRetentionSchema.js → schema/principalHistoryNodeRetentionSchema.js}

@@ -1,5 +1,5 @@
 import { index, integer, primaryKey, sqliteTable, text, } from "drizzle-orm/sqlite-core";
-import { defineSqlTableSchema } from "./sqlTableSchema.js";
+import { defineSqlTableSchema } from "../sqlTableSchema.js";
 /** Disposable graph liveness hints. Proof verification still authenticates every node. */
 export const principalHistoryNodeReferences = sqliteTable("principal_history_node_references", {
     scopeId: text("scope_id").notNull(),

package/data/sqlite/schema/principalHistoryNodeRetentionSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalHistoryNodeRetentionSchema.js","sourceRoot":"","sources":["principalHistoryNodeRetentionSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,GACL,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,8BAA8B,GAAG,WAAW,CACvD,mCAAmC,EACnC;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,cAAc,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACpD,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1D,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;CAC9B,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IACpD,KAAK,CAAC,+CAA+C,CAAC,CAAC,EAAE,CACvD,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,IAAI,CACX;IACD,KAAK,CAAC,oDAAoD,CAAC,CAAC,EAAE,CAC5D,KAAK,CAAC,cAAc,CACrB;CACF,CACF,CAAC;AAEF,uFAAuF;AACvF,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CACnD,+BAA+B,EAC/B;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;CACtC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,gDAAgD,CAAC,CAAC,EAAE,CACxD,KAAK,CAAC,cAAc,CACrB;CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,oBAAoB,CAAC,8BAA8B,CAAC;IACpD,oBAAoB,CAAC,0BAA0B,CAAC;CACjD,CAAC","sourcesContent":["import {\n  index,\n  integer,\n  primaryKey,\n  sqliteTable,\n  text,\n} from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema } from \"../sqlTableSchema\";\n\n/** Disposable graph liveness hints. Proof verification still authenticates every node. */\nexport const principalHistoryNodeReferences = sqliteTable(\n  \"principal_history_node_references\",\n  {\n    scopeId: text(\"scope_id\").notNull(),\n    organizationId: text(\"organization_id\").notNull(),\n    hash: text(\"hash\").notNull(),\n    referenceCount: integer(\"reference_count\").notNull(),\n    managed: integer(\"managed\", { mode: \"boolean\" }).notNull(),\n    leftHash: text(\"left_hash\"),\n    rightHash: text(\"right_hash\"),\n  },\n  (table) => [\n    primaryKey({ columns: [table.scopeId, table.hash] }),\n    index(\"principal_history_node_references_reclaim_idx\").on(\n      table.scopeId,\n      table.organizationId,\n      table.managed,\n      table.referenceCount,\n      table.hash,\n    ),\n    index(\"principal_history_node_references_organization_idx\").on(\n      table.organizationId,\n    ),\n  ],\n);\n\n/** A saved stage or prefix keeps its proof root live until its guarded replacement. */\nexport const principalHistoryRootOwners = sqliteTable(\n  \"principal_history_root_owners\",\n  {\n    id: text(\"id\").primaryKey(),\n    scopeId: text(\"scope_id\").notNull(),\n    organizationId: text(\"organization_id\").notNull(),\n    rootHash: text(\"root_hash\").notNull(),\n  },\n  (table) => [\n    index(\"principal_history_root_owners_organization_idx\").on(\n      table.organizationId,\n    ),\n  ],\n);\n\nexport const principalHistoryNodeRetentionTables = [\n  defineSqlTableSchema(principalHistoryNodeReferences),\n  defineSqlTableSchema(principalHistoryRootOwners),\n];\n"]}

package/data/sqlite/{principalHistoryRetentionSchema.js → schema/principalHistoryRetentionSchema.js}

@@ -1,5 +1,5 @@
 import { index, integer, primaryKey, sqliteTable, text, } from "drizzle-orm/sqlite-core";
-import { defineSqlTableSchema } from "./sqlTableSchema.js";
+import { defineSqlTableSchema } from "../sqlTableSchema.js";
 /** Encrypted key candidates survive disposable progress reclamation. */
 export const principalKeyEnvelopeArchive = sqliteTable("principal_key_envelope_archive", {
     organizationId: text("organization_id").notNull(),

package/data/sqlite/{principalHistoryRetentionSchema.js.map → schema/principalHistoryRetentionSchema.js.map}

@@ -1 +1 @@
-{"version":3,"file":"principalHistoryRetentionSchema.js","sourceRoot":"","sources":["principalHistoryRetentionSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,GACL,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,wEAAwE;AACxE,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CACpD,gCAAgC,EAChC;IACE,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAC/C,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACrC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;CAChD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC;QACT,OAAO,EAAE;YACP,KAAK,CAAC,cAAc;YACpB,KAAK,CAAC,aAAa;YACnB,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,cAAc;SACrB;KACF,CAAC;IACF,KAAK,CAAC,gDAAgD,CAAC,CAAC,EAAE,CACxD,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,CACd;CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,oBAAoB,CAAC,2BAA2B,CAAC;CAClD,CAAC","sourcesContent":["import {\n  index,\n  integer,\n  primaryKey,\n  sqliteTable,\n  text,\n} from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema } from \"./sqlTableSchema\";\n\n/** Encrypted key candidates survive disposable progress reclamation. */\nexport const principalKeyEnvelopeArchive = sqliteTable(\n  \"principal_key_envelope_archive\",\n  {\n    organizationId: text(\"organization_id\").notNull(),\n    principalType: text(\"principal_type\").notNull(),\n    principalId: text(\"principal_id\").notNull(),\n    keyFingerprint: text(\"key_fingerprint\").notNull(),\n    version: integer(\"version\").notNull(),\n    envelopesJson: text(\"envelopes_json\").notNull(),\n  },\n  (table) => [\n    primaryKey({\n      columns: [\n        table.organizationId,\n        table.principalType,\n        table.principalId,\n        table.keyFingerprint,\n      ],\n    }),\n    index(\"principal_key_envelope_archive_fingerprint_idx\").on(\n      table.keyFingerprint,\n      table.version,\n    ),\n  ],\n);\n\nexport const principalHistoryRetentionTables = [\n  defineSqlTableSchema(principalKeyEnvelopeArchive),\n];\n"]}
+{"version":3,"file":"principalHistoryRetentionSchema.js","sourceRoot":"","sources":["principalHistoryRetentionSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,GACL,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,wEAAwE;AACxE,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CACpD,gCAAgC,EAChC;IACE,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAC/C,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACrC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;CAChD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC;QACT,OAAO,EAAE;YACP,KAAK,CAAC,cAAc;YACpB,KAAK,CAAC,aAAa;YACnB,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,cAAc;SACrB;KACF,CAAC;IACF,KAAK,CAAC,gDAAgD,CAAC,CAAC,EAAE,CACxD,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,CACd;CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,oBAAoB,CAAC,2BAA2B,CAAC;CAClD,CAAC","sourcesContent":["import {\n  index,\n  integer,\n  primaryKey,\n  sqliteTable,\n  text,\n} from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema } from \"../sqlTableSchema\";\n\n/** Encrypted key candidates survive disposable progress reclamation. */\nexport const principalKeyEnvelopeArchive = sqliteTable(\n  \"principal_key_envelope_archive\",\n  {\n    organizationId: text(\"organization_id\").notNull(),\n    principalType: text(\"principal_type\").notNull(),\n    principalId: text(\"principal_id\").notNull(),\n    keyFingerprint: text(\"key_fingerprint\").notNull(),\n    version: integer(\"version\").notNull(),\n    envelopesJson: text(\"envelopes_json\").notNull(),\n  },\n  (table) => [\n    primaryKey({\n      columns: [\n        table.organizationId,\n        table.principalType,\n        table.principalId,\n        table.keyFingerprint,\n      ],\n    }),\n    index(\"principal_key_envelope_archive_fingerprint_idx\").on(\n      table.keyFingerprint,\n      table.version,\n    ),\n  ],\n);\n\nexport const principalHistoryRetentionTables = [\n  defineSqlTableSchema(principalKeyEnvelopeArchive),\n];\n"]}

package/data/sqlite/{principalHistoryStageSchema.d.ts → schema/principalHistoryStageSchema.d.ts}

@@ -1,4 +1,4 @@
-import { type SqlTableSchema } from "./sqlTableSchema.js";
+import { type SqlTableSchema } from "../sqlTableSchema.js";
 /**
  * Provisional, locally authenticated verification work; never an app
  * checkpoint. `scopeId` and `touchedAt` are eviction hints for bounded

package/data/sqlite/{principalHistoryStageSchema.js → schema/principalHistoryStageSchema.js}

@@ -1,8 +1,8 @@
 import { desc } from "drizzle-orm";
 import { index, integer, sqliteTable, text } from "drizzle-orm/sqlite-core";
+import { principalCurrentFingerprintJson } from "../principalKeyFingerprintJson.js";
+import { defineSqlTableSchema } from "../sqlTableSchema.js";
 import { principalHistoryRetentionTables } from "./principalHistoryRetentionSchema.js";
-import { principalCurrentFingerprintJson } from "./principalKeyFingerprintJson.js";
-import { defineSqlTableSchema } from "./sqlTableSchema.js";
 /**
  * Provisional, locally authenticated verification work; never an app
  * checkpoint. `scopeId` and `touchedAt` are eviction hints for bounded

package/data/sqlite/schema/principalHistoryStageSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalHistoryStageSchema.js","sourceRoot":"","sources":["principalHistoryStageSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAuB,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AAEpF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAC/C,0BAA0B,EAC1B;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAChD,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5D,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC1C,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;CACrC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,8CAA8C,CAAC,CAAC,EAAE,CACtD,+BAA+B,CAAC,KAAK,CAAC,WAAW,CAAC,EAClD,KAAK,CAAC,QAAQ,EACd,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CACzB;IACD,KAAK,CAAC,2CAA2C,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;IAC3E,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,CAC5C,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,QAAQ,EACd,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EACxB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EACrB,KAAK,CAAC,EAAE,CACT;IACD,KAAK,CAAC,yCAAyC,CAAC,CAAC,EAAE,CACjD,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,QAAQ,EACd,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EACrB,KAAK,CAAC,EAAE,CACT;CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAkC;IACxE;QACE,GAAG,oBAAoB,CAAC,sBAAsB,CAAC;QAC/C,eAAe,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;KAC5C;IACD,GAAG,+BAA+B;CACnC,CAAC","sourcesContent":["import { desc } from \"drizzle-orm\";\nimport { index, integer, sqliteTable, text } from \"drizzle-orm/sqlite-core\";\nimport { principalCurrentFingerprintJson } from \"../principalKeyFingerprintJson\";\nimport { defineSqlTableSchema, type SqlTableSchema } from \"../sqlTableSchema\";\nimport { principalHistoryRetentionTables } from \"./principalHistoryRetentionSchema\";\n\n/**\n * Provisional, locally authenticated verification work; never an app\n * checkpoint. `scopeId` and `touchedAt` are eviction hints for bounded\n * retention (which principal history the stage belongs to, and when a writer\n * last used it), never authenticated recovery state.\n */\nexport const principalHistoryStages = sqliteTable(\n  \"principal_history_stages\",\n  {\n    id: text(\"id\").primaryKey(),\n    organizationId: text(\"organization_id\").notNull(),\n    scopeId: text(\"scope_id\").notNull(),\n    currentJson: text(\"current_json\").notNull(),\n    afterVersion: integer(\"after_version\").notNull(),\n    complete: integer(\"complete\", { mode: \"boolean\" }).notNull(),\n    touchedAt: integer(\"touched_at\").notNull(),\n    progress: text(\"progress\").notNull(),\n  },\n  (table) => [\n    index(\"principal_history_stages_key_fingerprint_idx\").on(\n      principalCurrentFingerprintJson(table.currentJson),\n      table.complete,\n      desc(table.afterVersion),\n    ),\n    index(\"principal_history_stages_organization_idx\").on(table.organizationId),\n    index(\"principal_history_stages_scope_idx\").on(\n      table.scopeId,\n      table.organizationId,\n      table.complete,\n      desc(table.afterVersion),\n      desc(table.touchedAt),\n      table.id,\n    ),\n    index(\"principal_history_stages_incomplete_idx\").on(\n      table.scopeId,\n      table.organizationId,\n      table.complete,\n      desc(table.touchedAt),\n      table.id,\n    ),\n  ],\n);\n\nexport const principalHistoryStageTables: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(principalHistoryStages),\n    requiredColumns: [\"scope_id\", \"touched_at\"],\n  },\n  ...principalHistoryRetentionTables,\n];\n"]}

package/data/sqlite/{principalMutationJournalSchema.d.ts → schema/principalMutationJournalSchema.d.ts}

@@ -82,4 +82,4 @@ export declare const principalMutationJournal: import("drizzle-orm/sqlite-core")
     };
     dialect: "sqlite";
 }>;
-export declare const principalMutationJournalTables: import("./sqlTableSchema.js").SqlTableSchema[];
+export declare const principalMutationJournalTables: import("../sqlTableSchema.js").SqlTableSchema[];

package/data/sqlite/{principalMutationJournalSchema.js → schema/principalMutationJournalSchema.js}

@@ -1,5 +1,5 @@
 import { sqliteTable, text } from "drizzle-orm/sqlite-core";
-import { defineSqlTableSchema } from "./sqlTableSchema.js";
+import { defineSqlTableSchema } from "../sqlTableSchema.js";
 /** Authored work survives cache resets and remains until its outcome is known. */
 export const principalMutationJournal = sqliteTable("principal_mutation_journal", {
     scopeId: text("scope_id").primaryKey(),

package/data/sqlite/{principalMutationJournalSchema.js.map → schema/principalMutationJournalSchema.js.map}

@@ -1 +1 @@
-{"version":3,"file":"principalMutationJournalSchema.js","sourceRoot":"","sources":["principalMutationJournalSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,kFAAkF;AAClF,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CACjD,4BAA4B,EAC5B;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE;IACtC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;IACvD,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;CACvC,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,oBAAoB,CAAC,wBAAwB,CAAC;CAC/C,CAAC","sourcesContent":["import { sqliteTable, text } from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema } from \"./sqlTableSchema\";\n\n/** Authored work survives cache resets and remains until its outcome is known. */\nexport const principalMutationJournal = sqliteTable(\n  \"principal_mutation_journal\",\n  {\n    scopeId: text(\"scope_id\").primaryKey(),\n    organizationId: text(\"organization_id\").notNull(),\n    serializedRequest: text(\"serialized_request\").notNull(),\n    signature: text(\"signature\").notNull(),\n  },\n);\n\nexport const principalMutationJournalTables = [\n  defineSqlTableSchema(principalMutationJournal),\n];\n"]}
+{"version":3,"file":"principalMutationJournalSchema.js","sourceRoot":"","sources":["principalMutationJournalSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,kFAAkF;AAClF,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CACjD,4BAA4B,EAC5B;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE;IACtC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;IACvD,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;CACvC,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,oBAAoB,CAAC,wBAAwB,CAAC;CAC/C,CAAC","sourcesContent":["import { sqliteTable, text } from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema } from \"../sqlTableSchema\";\n\n/** Authored work survives cache resets and remains until its outcome is known. */\nexport const principalMutationJournal = sqliteTable(\n  \"principal_mutation_journal\",\n  {\n    scopeId: text(\"scope_id\").primaryKey(),\n    organizationId: text(\"organization_id\").notNull(),\n    serializedRequest: text(\"serialized_request\").notNull(),\n    signature: text(\"signature\").notNull(),\n  },\n);\n\nexport const principalMutationJournalTables = [\n  defineSqlTableSchema(principalMutationJournal),\n];\n"]}

package/data/sqlite/{principalPolicySchema.js → schema/principalPolicySchema.js}

@@ -1,6 +1,6 @@
 import { desc } from "drizzle-orm";
 import { index, integer, primaryKey, sqliteTable, text, } from "drizzle-orm/sqlite-core";
-import { principalStateFingerprintJson } from "./principalKeyFingerprintJson.js";
+import { principalStateFingerprintJson } from "../principalKeyFingerprintJson.js";
 /** Durable organization ownership for every managed-principal cache. */
 export const principalPolicyOrganizations = sqliteTable("principal_policy_organizations", {
     principalType: text("principal_type").notNull(),

package/data/sqlite/schema/principalPolicySchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalPolicySchema.js","sourceRoot":"","sources":["principalPolicySchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EACL,KAAK,EACL,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,GACL,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAE/E,wEAAwE;AACxE,MAAM,CAAC,MAAM,4BAA4B,GAAG,WAAW,CACrD,gCAAgC,EAChC;IACE,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAC/C,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;CAClD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;IACjE,KAAK,CAAC,iDAAiD,CAAC,CAAC,EAAE,CACzD,KAAK,CAAC,cAAc,CACrB;CACF,CACF,CAAC;AAEF,SAAS,4BAA4B;IACnC,OAAO;QACL,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;QAC/C,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;QAC3C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;QACvC,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;QACtD,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE;QAC1D,qBAAqB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,EAAE;QAChE,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE;QACxD,0BAA0B,EAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC,OAAO,EAAE;QAC3E,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE;QAC1D,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;KACxC,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAC1C,oBAAoB,EACpB,4BAA4B,EAAE,EAC9B,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;IACjE,KAAK,CAAC,wCAAwC,CAAC,CAAC,EAAE,CAChD,6BAA6B,CAAC,KAAK,CAAC,gBAAgB,CAAC,EACrD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CACtB;CACF,CACF,CAAC;AAEF,iGAAiG;AACjG,MAAM,CAAC,MAAM,4BAA4B,GAAG,WAAW,CACrD,iCAAiC,EACjC,4BAA4B,EAAE,EAC9B,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC;QACT,OAAO,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC;KACnE,CAAC;IACF,KAAK,CAAC,8CAA8C,CAAC,CAAC,EAAE,CACtD,6BAA6B,CAAC,KAAK,CAAC,gBAAgB,CAAC,EACrD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CACtB;CACF,CACF,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,+BAA+B,GAAG,WAAW,CACxD,oCAAoC,EACpC;IACE,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAC/C,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACrC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACxC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,aAAa,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAClD,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE;CACrD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC;QACT,OAAO,EAAE;YACP,KAAK,CAAC,aAAa;YACnB,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,cAAc;YACpB,KAAK,CAAC,eAAe;SACtB;KACF,CAAC;CACH,CACF,CAAC;AAEF,uEAAuE;AACvE,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CACnD,8BAA8B,EAC9B;IACE,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAC/C,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACrC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;CAClE,CACF,CAAC","sourcesContent":["import { desc } from \"drizzle-orm\";\nimport {\n  index,\n  integer,\n  primaryKey,\n  sqliteTable,\n  text,\n} from \"drizzle-orm/sqlite-core\";\n\nimport { principalStateFingerprintJson } from \"../principalKeyFingerprintJson\";\n\n/** Durable organization ownership for every managed-principal cache. */\nexport const principalPolicyOrganizations = sqliteTable(\n  \"principal_policy_organizations\",\n  {\n    principalType: text(\"principal_type\").notNull(),\n    principalId: text(\"principal_id\").notNull(),\n    organizationId: text(\"organization_id\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.principalType, table.principalId] }),\n    index(\"principal_policy_organizations_organization_idx\").on(\n      table.organizationId,\n    ),\n  ],\n);\n\nfunction principalPolicyBundleColumns() {\n  return {\n    principalType: text(\"principal_type\").notNull(),\n    principalId: text(\"principal_id\").notNull(),\n    stateHash: text(\"state_hash\").notNull(),\n    currentStateJson: text(\"current_state_json\").notNull(),\n    currentPayloadJson: text(\"current_payload_json\").notNull(),\n    currentProjectionJson: text(\"current_projection_json\").notNull(),\n    currentGrantsJson: text(\"current_grants_json\").notNull(),\n    currentMemberEnvelopesJson: text(\"current_member_envelopes_json\").notNull(),\n    previousStatesJson: text(\"previous_states_json\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  };\n}\n\n/** Latest full policy bundle per managed principal. */\nexport const principalPolicies = sqliteTable(\n  \"principal_policies\",\n  principalPolicyBundleColumns(),\n  (table) => [\n    primaryKey({ columns: [table.principalType, table.principalId] }),\n    index(\"principal_policies_key_fingerprint_idx\").on(\n      principalStateFingerprintJson(table.currentStateJson),\n      desc(table.updatedAt),\n    ),\n  ],\n);\n\n/** Older verified bundles retained for exact-reference verification and epoch key unwrapping. */\nexport const principalPolicyBundleHistory = sqliteTable(\n  \"principal_policy_bundle_history\",\n  principalPolicyBundleColumns(),\n  (table) => [\n    primaryKey({\n      columns: [table.principalType, table.principalId, table.stateHash],\n    }),\n    index(\"principal_policy_history_key_fingerprint_idx\").on(\n      principalStateFingerprintJson(table.currentStateJson),\n      desc(table.updatedAt),\n    ),\n  ],\n);\n\n/** Exact policy states mapped to every retained bundle chain that contains them. */\nexport const principalPolicyBundleReferences = sqliteTable(\n  \"principal_policy_bundle_references\",\n  {\n    principalType: text(\"principal_type\").notNull(),\n    principalId: text(\"principal_id\").notNull(),\n    version: integer(\"version\").notNull(),\n    stateHash: text(\"state_hash\").notNull(),\n    keyEpoch: integer(\"key_epoch\").notNull(),\n    keyFingerprint: text(\"key_fingerprint\").notNull(),\n    bundleVersion: integer(\"bundle_version\").notNull(),\n    bundleStateHash: text(\"bundle_state_hash\").notNull(),\n  },\n  (table) => [\n    primaryKey({\n      columns: [\n        table.principalType,\n        table.principalId,\n        table.version,\n        table.stateHash,\n        table.keyEpoch,\n        table.keyFingerprint,\n        table.bundleStateHash,\n      ],\n    }),\n  ],\n);\n\n/** Monotonic anti-rollback pin for each verified managed principal. */\nexport const principalPolicyCheckpoints = sqliteTable(\n  \"principal_policy_checkpoints\",\n  {\n    principalType: text(\"principal_type\").notNull(),\n    principalId: text(\"principal_id\").notNull(),\n    version: integer(\"version\").notNull(),\n    stateHash: text(\"state_hash\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.principalType, table.principalId] }),\n  ],\n);\n"]}

package/data/sqlite/{securityIncidentSchema.d.ts → schema/securityIncidentSchema.d.ts}

@@ -221,4 +221,4 @@ export declare const securityIncidents: import("drizzle-orm/sqlite-core").SQLite
     };
     dialect: "sqlite";
 }>;
-export declare const securityIncidentTable: import("./sqlTableSchema.js").SqlTableSchema;
+export declare const securityIncidentTable: import("../sqlTableSchema.js").SqlTableSchema;

package/data/sqlite/{securityIncidentSchema.js → schema/securityIncidentSchema.js}

@@ -1,5 +1,5 @@
 import { index, integer, sqliteTable, text } from "drizzle-orm/sqlite-core";
-import { defineSqlTableSchema } from "./sqlTableSchema.js";
+import { defineSqlTableSchema } from "../sqlTableSchema.js";
 /**
  * Durable local evidence that an SDK trust-boundary verification failed.
  *

package/data/sqlite/schema/securityIncidentSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityIncidentSchema.js","sourceRoot":"","sources":["securityIncidentSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAC1C,oBAAoB,EACpB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACtC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE;IAClD,eAAe,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CAClE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,4CAA4C,CAAC,CAAC,EAAE,CACpD,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,cAAc,CACrB;CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,iBAAiB,CAAC,CAAC","sourcesContent":["import { index, integer, sqliteTable, text } from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema } from \"../sqlTableSchema\";\n\n/**\n * Durable local evidence that an SDK trust-boundary verification failed.\n *\n * Error messages and decrypted values are deliberately excluded. Callers may\n * attach only hashes that were already part of the verified protocol object.\n * Repeated detections of the same evidence update only the occurrence count\n * and last-detected timestamp. Remote-state resets do not include this table,\n * so an API rollback cannot erase the client's record of having detected it.\n */\nexport const securityIncidents = sqliteTable(\n  \"security_incidents\",\n  {\n    id: text(\"id\").primaryKey(),\n    trustDomain: text(\"trust_domain\"),\n    code: text(\"code\").notNull(),\n    operation: text(\"operation\").notNull(),\n    objectKind: text(\"object_kind\").notNull(),\n    objectId: text(\"object_id\"),\n    organizationId: text(\"organization_id\"),\n    evidenceHashes: text(\"evidence_hashes\").notNull(),\n    detectedAt: text(\"detected_at\").notNull(),\n    lastDetectedAt: text(\"last_detected_at\").notNull(),\n    occurrenceCount: integer(\"occurrence_count\").notNull().default(1),\n  },\n  (table) => [\n    index(\"security_incidents_trust_last_detected_idx\").on(\n      table.trustDomain,\n      table.lastDetectedAt,\n    ),\n  ],\n);\n\nexport const securityIncidentTable = defineSqlTableSchema(securityIncidents);\n"]}

package/data/sqlite/{verifiedManifestBundleSchema.d.ts → schema/verifiedManifestBundleSchema.d.ts}

@@ -1,4 +1,4 @@
-import { type SqlTableSchema } from "./sqlTableSchema.js";
+import { type SqlTableSchema } from "../sqlTableSchema.js";
 /**
  * Access-manifest bundles this device verified inside a writer projection,
  * keyed by manifest hash. A later projection read cites them so the API can

package/data/sqlite/{verifiedManifestBundleSchema.js → schema/verifiedManifestBundleSchema.js}

@@ -1,6 +1,6 @@
 import { desc } from "drizzle-orm";
 import { index, integer, sqliteTable, text } from "drizzle-orm/sqlite-core";
-import { defineSqlTableSchema } from "./sqlTableSchema.js";
+import { defineSqlTableSchema } from "../sqlTableSchema.js";
 /**
  * Access-manifest bundles this device verified inside a writer projection,
  * keyed by manifest hash. A later projection read cites them so the API can

package/data/sqlite/schema/verifiedManifestBundleSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedManifestBundleSchema.js","sourceRoot":"","sources":["verifiedManifestBundleSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAuB,MAAM,mBAAmB,CAAC;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,WAAW,CACtD,kCAAkC,EAClC;IACE,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,UAAU,EAAE;IAChD,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IACjC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;CAC1C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,6CAA6C,CAAC,CAAC,EAAE,CACrD,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,QAAQ,EACd,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAClB;IACD,KAAK,CAAC,kDAAkD,CAAC,CAAC,EAAE,CAC1D,KAAK,CAAC,UAAU,CACjB;IACD,KAAK,CAAC,mDAAmD,CAAC,CAAC,EAAE,CAC3D,KAAK,CAAC,cAAc,CACrB;CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAkC;IACzE,oBAAoB,CAAC,6BAA6B,CAAC;CACpD,CAAC","sourcesContent":["import { desc } from \"drizzle-orm\";\nimport { index, integer, sqliteTable, text } from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema, type SqlTableSchema } from \"../sqlTableSchema\";\n\n/**\n * Access-manifest bundles this device verified inside a writer projection,\n * keyed by manifest hash. A later projection read cites them so the API can\n * omit their bytes; the client refills each omission from this row and\n * verifies the rebuilt projection from scratch. Rows are neither trust nor\n * checkpoint state: a missing, evicted, or damaged row only costs bytes.\n *\n * Columns:\n * - `manifestHash`: Manifest hash; equals the stored bundle's `manifestHash`.\n * - `organizationId`, `objectKind`, `objectId`, `epoch`: The verified\n *   manifest's object, used to cite the lineage relevant to a request.\n * - `bundleJson`: The exact verified bundle as JSON.\n * - `bundleDigest`: SHA-256 hex of `bundleJson`; a mismatch drops the row.\n * - `verifiedAt`: Latest local verification time; oldest rows evict first.\n */\nexport const verifiedAccessManifestBundles = sqliteTable(\n  \"verified_access_manifest_bundles\",\n  {\n    manifestHash: text(\"manifest_hash\").primaryKey(),\n    organizationId: text(\"organization_id\").notNull(),\n    objectKind: text(\"object_kind\").notNull(),\n    objectId: text(\"object_id\").notNull(),\n    epoch: integer(\"epoch\").notNull(),\n    bundleJson: text(\"bundle_json\").notNull(),\n    bundleDigest: text(\"bundle_digest\").notNull(),\n    verifiedAt: text(\"verified_at\").notNull(),\n  },\n  (table) => [\n    index(\"verified_access_manifest_bundles_object_idx\").on(\n      table.objectKind,\n      table.objectId,\n      desc(table.epoch),\n    ),\n    index(\"verified_access_manifest_bundles_verified_at_idx\").on(\n      table.verifiedAt,\n    ),\n    index(\"verified_access_manifest_bundles_organization_idx\").on(\n      table.organizationId,\n    ),\n  ],\n);\n\nexport const verifiedManifestBundleTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(verifiedAccessManifestBundles),\n];\n"]}

package/data/sqlite/sqlitePersistenceRuntime.d.ts

@@ -1,5 +1,5 @@
 import type { SqliteRemoteDatabase } from "drizzle-orm/sqlite-proxy";
-import { clientSQLiteSchema } from "./schema.js";
+import { clientSQLiteSchema } from "./schema/index.js";
 import { type ExecSql, type ExecSqlClientLike } from "./sqlSchema.js";
 export type ClientSQLiteSchema = typeof clientSQLiteSchema;
 export type ClientSQLiteDatabase = SqliteRemoteDatabase<ClientSQLiteSchema>;

package/data/sqlite/sqlitePersistenceRuntime.js

@@ -1,5 +1,5 @@
 import { drizzle } from "drizzle-orm/sqlite-proxy";
-import { clientSQLiteSchema } from "./schema.js";
+import { clientSQLiteSchema } from "./schema/index.js";
 import { assertClientSQLiteCommitAllowed, beginClientSQLiteCommitGuards, captureClientSQLiteCommitGuards, clearClientSQLiteCommitGuards, rethrowClientSQLiteCommitGuardFailure, } from "./sqliteCommitGuards.js";
 import { createExecSql, resetConnectionSchemaMemo, resolveCanonicalExecSql, runSerializedSqlMutation, } from "./sqlSchema.js";
 const runtimeByExecSql = new WeakMap();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tearleads/client-sdk",
-  "version": "0.1.64",
+  "version": "0.1.65",
   "description": "React-free Tearleads client runtime: local SQLite persistence, keys, sync, encrypted blobs, and domain workflows.",
   "license": "UNLICENSED",
   "repository": {

package/sqlite/index.d.ts

@@ -12,7 +12,7 @@ export { createModuleDatabaseRuntime as createSQLiteRuntime } from "../internal/
 export declare function createSQLiteRuntimeFromWorker(worker: SQLiteRuntimeWorker): SQLiteRuntime;
 export { purgeOpfsSqliteDatabase } from "../internal/sqlite-worker/purgeOpfsDatabase.js";
 export type { DatabasePersistenceMode } from "../internal/sqlite-worker/types.js";
-export { clientSQLiteSchema } from "../data/sqlite/schema.js";
+export { clientSQLiteSchema } from "../data/sqlite/schema/index.js";
 export { type ClientSQLiteDatabase as SQLiteDatabase, type ClientSQLitePersistenceRuntime as SQLitePersistenceRuntime, type ClientSQLiteTransactionScope as SQLiteTransaction, getClientSQLitePersistenceRuntime as getSQLitePersistenceRuntime, } from "../data/sqlite/sqlitePersistenceRuntime.js";
 export { createExecSql, defineSqlTableSchema, type ExecSql, type ExecSqlClientLike, ensureSqlTables, resetConnectionSchemaMemo, runSerializedSqlMutation, type SqlArrayRow, type SqlBind, type SqlRow, type SqlRowMode, type SqlRowValue, type SqlTableSchema, unavailableExecSql, } from "../data/sqlite/sqlSchema.js";
 export { EPHEMERAL_STORAGE_POLICY, isPersistentStorageSupported, PERSISTENT_STORAGE_POLICY, type RequestPersistentStorageResult, requestPersistentStorage, resolveStoragePersistencePolicy, type StoragePersistencePolicy, } from "../data/sqlite/storagePersistence.js";

package/sqlite/index.js

@@ -4,7 +4,7 @@ export function createSQLiteRuntimeFromWorker(worker) {
     return createDatabaseRuntime(worker);
 }
 export { purgeOpfsSqliteDatabase } from "../internal/sqlite-worker/purgeOpfsDatabase.js";
-export { clientSQLiteSchema } from "../data/sqlite/schema.js";
+export { clientSQLiteSchema } from "../data/sqlite/schema/index.js";
 export { getClientSQLitePersistenceRuntime as getSQLitePersistenceRuntime, } from "../data/sqlite/sqlitePersistenceRuntime.js";
 export { createExecSql, defineSqlTableSchema, ensureSqlTables, resetConnectionSchemaMemo, runSerializedSqlMutation, unavailableExecSql, } from "../data/sqlite/sqlSchema.js";
 export { EPHEMERAL_STORAGE_POLICY, isPersistentStorageSupported, PERSISTENT_STORAGE_POLICY, requestPersistentStorage, resolveStoragePersistencePolicy, } from "../data/sqlite/storagePersistence.js";

package/stores/documents/documentStore/history/historyRebuild.js

@@ -1,6 +1,6 @@
 import { bytesToBase64 } from "../../../../internal/encoding/index.js";
 import { encodeVersionVector, exportFullHistorySnapshot, } from "../../../../internal/loro/index.js";
-import { readPullContinuation } from "../../../../data/documents/shared/syncPagination.js";
+import { readPullContinuation } from "../../../../data/documents/shared/sync/syncPagination.js";
 import { persistDocument } from "../persistence.js";
 import { isDocumentStoreSyncGenerationCurrent, } from "../sync/syncGeneration.js";
 import { installDocumentWriterProjection } from "../writerProjectionGeneration.js";

package/stores/documents/documentStore/history/historyRebuild.js.map

@@ -1 +1 @@
-{"version":3,"file":"historyRebuild.js","sourceRoot":"","sources":["historyRebuild.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AAKxF,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAEL,oCAAoC,GACrC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAEhF;;;;;GAKG;AAEH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAS5C;IAIC,4EAA4E;IAC5E,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,mBAAmB,GAAG,yBAAyB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxE,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,eAAe,CACrC,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,UAAU,EAChB;QACE,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc;QAC9B,aAAa,EACX,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS;YAC/B,KAAK,CAAC,aAAa,CAAC,aAAa;YACjC,IAAI;QACN,gBAAgB,EAAE,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC7D,kBAAkB,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,kBAAkB,IAAI,CAAC,CAAC,GAAG,CAAC;QACrE,6DAA6D;QAC7D,kBAAkB,EAAE,iBAAiB;KACtC,EACD;QACE,wBAAwB,EAAE,KAAK,CAAC,MAAM,CAAC,uBAAuB;QAC9D,iBAAiB,EAAE;YACjB,gBAAgB,EAAE,KAAK,CAAC,wBAAwB;YAChD,MAAM,EAAE,KAAK,CAAC,aAAa;SAC5B;QACD,iBAAiB,EAAE;YACjB,cAAc,EAAE,EAAE;YAClB,gBAAgB,EAAE,iBAAiB;YACnC,sBAAsB,EAAE,IAAI;YAC5B,QAAQ,EAAE,aAAa,CAAC,mBAAmB,CAAC;SAC7C;QACD,0BAA0B,EAAE,iBAAiB;QAC7C,gCAAgC,EAAE,KAAK,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC;QACpE,oBAAoB,EAAE,KAAK,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC;KACzD,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,CAAC,oCAAoC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,sEAAsE;QACtE,yEAAyE;QACzE,sEAAsE;QACtE,sBAAsB;QACtB,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IACE,CAAC,SAAS,CAAC,0BAA0B;QACrC,CAAC,SAAS,CAAC,sBAAsB,EACjC,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;QACnD,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC;IACrC,CAAC;IACD,IAAI,SAAS,CAAC,0BAA0B;QAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;;QAE5E,+BAA+B,CAC7B,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,MAAM,CAAC,gBAAgB,IAAI,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAC7D,KAAK,CAAC,0BAA0B,CACjC,CAAC;IACJ,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC;IACzD,OAAO;QACL,mBAAmB,EAAE,SAAS,CAAC,0BAA0B;YACvD,CAAC,CAAC,yBAAyB,CAAC,YAAY,CAAC;YACzC,CAAC,CAAC,mBAAmB;QACvB,uBAAuB,EACrB,SAAS,CAAC,0BAA0B,KAAK,IAAI;YAC7C,SAAS,CAAC,sBAAsB,KAAK,IAAI;YACzC,SAAS,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI;YACzC,SAAS,CAAC,MAAM,CAAC,gCAAgC,KAAK,IAAI;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["import { bytesToBase64 } from \"@tearleads/encoding\";\nimport {\n  encodeVersionVector,\n  exportFullHistorySnapshot,\n} from \"@tearleads/loro\";\nimport { readPullContinuation } from \"../../../../data/documents/shared/syncPagination\";\nimport type {\n  DocumentSyncPullContinuation,\n  syncRemoteDocument,\n} from \"../../../../workflows/documents\";\nimport { persistDocument } from \"../persistence\";\nimport type { DocumentState, DocumentStoreState } from \"../state\";\nimport {\n  type DocumentStoreSyncGeneration,\n  isDocumentStoreSyncGenerationCurrent,\n} from \"../sync/syncGeneration\";\nimport { installDocumentWriterProjection } from \"../writerProjectionGeneration\";\n\n/**\n * Machinery for reconstructing a full-history document from a verified remote\n * pull. Used by the rotation preflight (rotation.ts): it pulls the remote op\n * log, replays it into a fresh document alongside the durable local queue,\n * and installs the rebuilt document — preserving op identity end to end.\n */\n\nexport async function installRebuiltDocument(input: {\n  consumedPullContinuation: DocumentSyncPullContinuation | null;\n  currentRecord: NonNullable<DocumentStoreState[\"record\"]>;\n  generation: DocumentStoreSyncGeneration;\n  rebuiltDoc: DocumentState;\n  state: DocumentStoreState;\n  synced: NonNullable<Awaited<ReturnType<typeof syncRemoteDocument>>>;\n  /** `state.writerProjectionGeneration` when the recovery pull started. */\n  writerProjectionGeneration: number;\n}): Promise<{\n  fullHistorySnapshot: Uint8Array;\n  settlementRequiresRetry: boolean;\n}> {\n  // The guarded persist makes the recovered history durable BEFORE publishing\n  // the newer record. Checkpoint-ahead is the safe crash direction: restore\n  // reads the checkpoint and the record catches up on the next persist.\n  const fullHistorySnapshot = exportFullHistorySnapshot(input.rebuiltDoc);\n  const rebuiltEndVersion = encodeVersionVector(input.rebuiltDoc);\n  const persisted = await persistDocument(\n    input.state,\n    input.rebuiltDoc,\n    {\n      ...input.synced.persistedState,\n      lastCommitLsn:\n        input.synced.response.commitLsn ??\n        input.currentRecord.lastCommitLsn ??\n        null,\n      pullContinuation: readPullContinuation(input.synced.response),\n      recoveryGeneration: (input.currentRecord.recoveryGeneration ?? 0) + 1,\n      // The guarded checkpoint below covers exactly this frontier.\n      snapshotEndVersion: rebuiltEndVersion,\n    },\n    {\n      acceptedPendingUpdateIds: input.synced.settledPendingUpdateIds,\n      expectedSyncState: {\n        pullContinuation: input.consumedPullContinuation,\n        record: input.currentRecord,\n      },\n      historyCheckpoint: {\n        coveredTailIds: [],\n        endVersionVector: rebuiltEndVersion,\n        pruneCoveredLocalState: true,\n        snapshot: bytesToBase64(fullHistorySnapshot),\n      },\n      pendingBaseVersionOverride: rebuiltEndVersion,\n      preserveSnapshotStructuredFields: input.state.pendingLocalWrites > 0,\n      preserveSnapshotText: input.state.pendingLocalWrites > 0,\n    },\n    input.generation,\n  );\n  if (!persisted) {\n    if (!isDocumentStoreSyncGenerationCurrent(input.state, input.generation)) {\n      throw new Error(\n        \"Document changed during rotation recovery; retry key rotation\",\n      );\n    }\n    // The resurrect guard refused: another subsystem deleted this document\n    // while the rebuild was in flight, and saveDocumentRecord cleared the\n    // zombie store — pendingBaseVersion included. Restoring the rebuilt doc,\n    // projection, or the captured base version here would resurrect state\n    // over that clearing.\n    throw new Error(\n      \"Document was deleted while its history rebuild was in flight\",\n    );\n  }\n  if (\n    !persisted.pullContinuationSuperseded &&\n    !persisted.syncIdentitySuperseded\n  ) {\n    input.state.pendingBaseVersion = rebuiltEndVersion;\n    input.state.doc = input.rebuiltDoc;\n  }\n  if (persisted.pullContinuationSuperseded) input.state.writerProjection = null;\n  else\n    installDocumentWriterProjection(\n      input.state,\n      input.synced.writerProjection ?? input.state.writerProjection,\n      input.writerProjectionGeneration,\n    );\n  const installedDoc = input.state.doc ?? input.rebuiltDoc;\n  return {\n    fullHistorySnapshot: persisted.pullContinuationSuperseded\n      ? exportFullHistorySnapshot(installedDoc)\n      : fullHistorySnapshot,\n    settlementRequiresRetry:\n      persisted.pullContinuationSuperseded === true ||\n      persisted.syncIdentitySuperseded === true ||\n      persisted.record.pullContinuation != null ||\n      persisted.record.pullContinuationRecoveryRequired === true,\n  };\n}\n"]}
+{"version":3,"file":"historyRebuild.js","sourceRoot":"","sources":["historyRebuild.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAK7F,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAEL,oCAAoC,GACrC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAEhF;;;;;GAKG;AAEH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAS5C;IAIC,4EAA4E;IAC5E,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,mBAAmB,GAAG,yBAAyB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxE,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,eAAe,CACrC,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,UAAU,EAChB;QACE,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc;QAC9B,aAAa,EACX,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS;YAC/B,KAAK,CAAC,aAAa,CAAC,aAAa;YACjC,IAAI;QACN,gBAAgB,EAAE,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC7D,kBAAkB,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,kBAAkB,IAAI,CAAC,CAAC,GAAG,CAAC;QACrE,6DAA6D;QAC7D,kBAAkB,EAAE,iBAAiB;KACtC,EACD;QACE,wBAAwB,EAAE,KAAK,CAAC,MAAM,CAAC,uBAAuB;QAC9D,iBAAiB,EAAE;YACjB,gBAAgB,EAAE,KAAK,CAAC,wBAAwB;YAChD,MAAM,EAAE,KAAK,CAAC,aAAa;SAC5B;QACD,iBAAiB,EAAE;YACjB,cAAc,EAAE,EAAE;YAClB,gBAAgB,EAAE,iBAAiB;YACnC,sBAAsB,EAAE,IAAI;YAC5B,QAAQ,EAAE,aAAa,CAAC,mBAAmB,CAAC;SAC7C;QACD,0BAA0B,EAAE,iBAAiB;QAC7C,gCAAgC,EAAE,KAAK,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC;QACpE,oBAAoB,EAAE,KAAK,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC;KACzD,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,CAAC,oCAAoC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,sEAAsE;QACtE,yEAAyE;QACzE,sEAAsE;QACtE,sBAAsB;QACtB,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IACE,CAAC,SAAS,CAAC,0BAA0B;QACrC,CAAC,SAAS,CAAC,sBAAsB,EACjC,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;QACnD,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC;IACrC,CAAC;IACD,IAAI,SAAS,CAAC,0BAA0B;QAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;;QAE5E,+BAA+B,CAC7B,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,MAAM,CAAC,gBAAgB,IAAI,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAC7D,KAAK,CAAC,0BAA0B,CACjC,CAAC;IACJ,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC;IACzD,OAAO;QACL,mBAAmB,EAAE,SAAS,CAAC,0BAA0B;YACvD,CAAC,CAAC,yBAAyB,CAAC,YAAY,CAAC;YACzC,CAAC,CAAC,mBAAmB;QACvB,uBAAuB,EACrB,SAAS,CAAC,0BAA0B,KAAK,IAAI;YAC7C,SAAS,CAAC,sBAAsB,KAAK,IAAI;YACzC,SAAS,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI;YACzC,SAAS,CAAC,MAAM,CAAC,gCAAgC,KAAK,IAAI;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["import { bytesToBase64 } from \"@tearleads/encoding\";\nimport {\n  encodeVersionVector,\n  exportFullHistorySnapshot,\n} from \"@tearleads/loro\";\nimport { readPullContinuation } from \"../../../../data/documents/shared/sync/syncPagination\";\nimport type {\n  DocumentSyncPullContinuation,\n  syncRemoteDocument,\n} from \"../../../../workflows/documents\";\nimport { persistDocument } from \"../persistence\";\nimport type { DocumentState, DocumentStoreState } from \"../state\";\nimport {\n  type DocumentStoreSyncGeneration,\n  isDocumentStoreSyncGenerationCurrent,\n} from \"../sync/syncGeneration\";\nimport { installDocumentWriterProjection } from \"../writerProjectionGeneration\";\n\n/**\n * Machinery for reconstructing a full-history document from a verified remote\n * pull. Used by the rotation preflight (rotation.ts): it pulls the remote op\n * log, replays it into a fresh document alongside the durable local queue,\n * and installs the rebuilt document — preserving op identity end to end.\n */\n\nexport async function installRebuiltDocument(input: {\n  consumedPullContinuation: DocumentSyncPullContinuation | null;\n  currentRecord: NonNullable<DocumentStoreState[\"record\"]>;\n  generation: DocumentStoreSyncGeneration;\n  rebuiltDoc: DocumentState;\n  state: DocumentStoreState;\n  synced: NonNullable<Awaited<ReturnType<typeof syncRemoteDocument>>>;\n  /** `state.writerProjectionGeneration` when the recovery pull started. */\n  writerProjectionGeneration: number;\n}): Promise<{\n  fullHistorySnapshot: Uint8Array;\n  settlementRequiresRetry: boolean;\n}> {\n  // The guarded persist makes the recovered history durable BEFORE publishing\n  // the newer record. Checkpoint-ahead is the safe crash direction: restore\n  // reads the checkpoint and the record catches up on the next persist.\n  const fullHistorySnapshot = exportFullHistorySnapshot(input.rebuiltDoc);\n  const rebuiltEndVersion = encodeVersionVector(input.rebuiltDoc);\n  const persisted = await persistDocument(\n    input.state,\n    input.rebuiltDoc,\n    {\n      ...input.synced.persistedState,\n      lastCommitLsn:\n        input.synced.response.commitLsn ??\n        input.currentRecord.lastCommitLsn ??\n        null,\n      pullContinuation: readPullContinuation(input.synced.response),\n      recoveryGeneration: (input.currentRecord.recoveryGeneration ?? 0) + 1,\n      // The guarded checkpoint below covers exactly this frontier.\n      snapshotEndVersion: rebuiltEndVersion,\n    },\n    {\n      acceptedPendingUpdateIds: input.synced.settledPendingUpdateIds,\n      expectedSyncState: {\n        pullContinuation: input.consumedPullContinuation,\n        record: input.currentRecord,\n      },\n      historyCheckpoint: {\n        coveredTailIds: [],\n        endVersionVector: rebuiltEndVersion,\n        pruneCoveredLocalState: true,\n        snapshot: bytesToBase64(fullHistorySnapshot),\n      },\n      pendingBaseVersionOverride: rebuiltEndVersion,\n      preserveSnapshotStructuredFields: input.state.pendingLocalWrites > 0,\n      preserveSnapshotText: input.state.pendingLocalWrites > 0,\n    },\n    input.generation,\n  );\n  if (!persisted) {\n    if (!isDocumentStoreSyncGenerationCurrent(input.state, input.generation)) {\n      throw new Error(\n        \"Document changed during rotation recovery; retry key rotation\",\n      );\n    }\n    // The resurrect guard refused: another subsystem deleted this document\n    // while the rebuild was in flight, and saveDocumentRecord cleared the\n    // zombie store — pendingBaseVersion included. Restoring the rebuilt doc,\n    // projection, or the captured base version here would resurrect state\n    // over that clearing.\n    throw new Error(\n      \"Document was deleted while its history rebuild was in flight\",\n    );\n  }\n  if (\n    !persisted.pullContinuationSuperseded &&\n    !persisted.syncIdentitySuperseded\n  ) {\n    input.state.pendingBaseVersion = rebuiltEndVersion;\n    input.state.doc = input.rebuiltDoc;\n  }\n  if (persisted.pullContinuationSuperseded) input.state.writerProjection = null;\n  else\n    installDocumentWriterProjection(\n      input.state,\n      input.synced.writerProjection ?? input.state.writerProjection,\n      input.writerProjectionGeneration,\n    );\n  const installedDoc = input.state.doc ?? input.rebuiltDoc;\n  return {\n    fullHistorySnapshot: persisted.pullContinuationSuperseded\n      ? exportFullHistorySnapshot(installedDoc)\n      : fullHistorySnapshot,\n    settlementRequiresRetry:\n      persisted.pullContinuationSuperseded === true ||\n      persisted.syncIdentitySuperseded === true ||\n      persisted.record.pullContinuation != null ||\n      persisted.record.pullContinuationRecoveryRequired === true,\n  };\n}\n"]}