@tearleads/client-sdk 0.1.64 → 0.1.65

package/workflows/documents/linkSet/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,mCAAmC,EACnC,+BAA+B,EAG/B,6BAA6B,EAC7B,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAMrF,OAAO,EACL,yCAAyC,EACzC,qCAAqC,GACtC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AACtF,OAAO,EACL,wCAAwC,EACxC,mCAAmC,EACnC,iBAAiB,EACjB,sBAAsB,EACtB,kCAAkC,EAClC,oBAAoB,EACpB,0CAA0C,EAC1C,sBAAsB,EACtB,4CAA4C,EAC5C,2BAA2B,GAC5B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,sCAAsC,EACtC,yBAAyB,EACzB,mBAAmB,EACnB,SAAS,EACT,mBAAmB,GACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAQL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAGzE,OAAO,EACL,sBAAsB,GAEvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,oBAAoB,CAAC;AAE5B,SAAS,gCAAgC,CAAC,KAIzC;IACC,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACtE,MAAM,yBAAyB,GAAG,0CAA0C,CAC1E,KAAK,CAAC,gBAAgB,CACvB,CAAC;IACF,MAAM,MAAM,GAAG,kCAAkC,CAC/C,KAAK,CAAC,yBAAyB,CAChC,CAAC;IACF,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CACvC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAC5D,CAAC;IAEF,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC/B,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,gCAAgC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACxD,2CAA2C,CACzC,KAAK,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,GAAG,CAClD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CACvC,EACD,KAAK,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAC5C,CAAC;QAEF,OAAO;YACL,cAAc;YACd,kBAAkB,EAAE,mBAAmB,CAAC;gBACtC,GAAG,yBAAyB;gBAC5B,MAAM,CAAC,WAAW;aACnB,CAAC;YACF,MAAM;YACN,OAAO,EAAE,mBAAmB,CAAC,CAAC,GAAG,cAAc,EAAE,MAAM,CAAC,CAAC;SAC1D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,SAAS,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,MAAM,CACzD,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CACpD,CAAC;IACF,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,OAAO;QACL,cAAc;QACd,kBAAkB;QAClB,MAAM;QACN,OAAO,EAAE,cAAc,CAAC,MAAM,CAC5B,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAC5D;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,kBAA0B;IAE1B,IAAI,kBAAkB,IAAI,qCAAqC,EAAE,CAAC;QAChE,MAAM,IAAI,UAAU,CAClB,4CAA4C,qCAAqC,aAAa,CAC/F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2CAA2C,CACzD,kBAAqC,EACrC,gBAAwB;IAExB,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,CAC/C,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,EACjC,gBAAgB,CACjB,CAAC;IACF,IAAI,eAAe,GAAG,yCAAyC,EAAE,CAAC;QAChE,MAAM,IAAI,UAAU,CAClB,2CAA2C,yCAAyC,2BAA2B,CAChH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gCAAgC,CAAC,KAM/C;IACC,OAAO,OAAO,CAAC,GAAG,CAChB,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACtE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,kDAAkD,yBAAyB,CAAC,MAAM,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE;YAChE,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;SAChD,CAAC,CAAC;QACH,OAAO;YACL,GAAG,MAAM;YACT,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC;YAC7C,gBAAgB,EAAE;gBAChB,KAAK,EAAE,+BAA+B;gBACtC,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;aAC9B;SACF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,0DAA0D;AAC1D,KAAK,UAAU,0CAA0C,CAAC,KAGzD;IACC,MAAM,gBAAgB,GAAG,MAAM,sCAAsC,CAAC;QACpE,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,gBAAgB;QAC/C,KAAK,EAAE,4BAA4B;KACpC,CAAC,CAAC;IACH,IACE,gBAAgB,CAAC,cAAc;QAC/B,KAAK,CAAC,yBAAyB,CAAC,cAAc,EAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,gBAAgB,CAAC,cAAc,CAAC;AACzC,CAAC;AAED,SAAS,gCAAgC,CACvC,gBAAkD;IAElD,MAAM,aAAa,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,KAAK,CAAC;IAC9D,MAAM,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;QAChD,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC;IACd,IACE,OAAO,aAAa,KAAK,QAAQ;QACjC,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC;QAChC,aAAa,IAAI,CAAC,EAClB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,gCAAgC,CAAC,EAC9C,MAAM,EACN,WAAW,EACX,eAAe,EACf,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,EAC7B,SAAS,EACT,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACnC,yBAAyB,EACzB,eAAe,EACf,gBAAgB,GACsB;IACtC,MAAM,cAAc,GAAG,MAAM,0CAA0C,CAAC;QACtE,yBAAyB;QACzB,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,gCAAgC,CAAC;QACnD,SAAS;QACT,yBAAyB;QACzB,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,yBAAyB,GAAG,oBAAoB,CACpD,WAAW,CAAC,OAAO,EACnB,eAAe,CAChB,CAAC;IACF,MAAM,uBAAuB,GAAG,iBAAiB,CAC/C,yBAAyB,CAAC,IAAI,CAC/B,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC;QACpD,MAAM;QACN,WAAW;QACX,OAAO;QACP,SAAS;QACT,cAAc;QACd,QAAQ;QACR,uBAAuB;QACvB,WAAW;QACX,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,gCAAgC,CAAC,gBAAgB,CAAC,CAAC;IAEzE,MAAM,KAAK,GAAiC;QAC1C,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,gBAAgB,CAAC,UAAU;QACvC,cAAc;QACd,KAAK,EAAE,aAAa,GAAG,CAAC;QACxB,oBAAoB,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,YAAY;QACpE,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,kBAAkB,EAAE,CAAC,GAAG,WAAW,CAAC,kBAAkB,CAAC;KACxD,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,MAAM,mCAAmC,CAC1D,WAAW,CAAC,OAAO,CACpB,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,eAAe;QACf,UAAU,EAAE,gBAAgB,CAAC,UAAU;QACvC,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,QAAQ;QACR,YAAY;QACZ,SAAS;QACT,OAAO,EAAE;YACP,KAAK,EAAE,mBAAmB,CAAC,SAAS,CAAC,KAAK,EAAE,yBAAyB,CAAC;YACtE,IAAI,EAAE,mBAAmB,CAAC,SAAS,CAAC,IAAI,EAAE,wBAAwB,CAAC;YACnE,oBAAoB,EAAE,YAAY;YAClC,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,EAAE,4BAA4B,CAAC;YACrE,uBAAuB;YACvB,4BAA4B,EAAE,SAAS,CAAC,4BAA4B;YACpE,gBAAgB,EAAE;gBAChB,eAAe;gBACf,mBAAmB,EAAE,YAAY;gBACjC,UAAU;gBACV,OAAO,EAAE,yBAAyB;aACnC;SACF;QACD,KAAK;QACL,UAAU;QACV,OAAO,EAAE,mBAAmB,CAAC,WAAW,CAAC,OAAO,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAChE,KAciC;IAEjC,MAAM,mBAAmB,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,oBAAoB,GAAyB,IAAI,GAAG,EAAE,CAAC;IAC7D,MAAM,wCAAwC,CAAC,KAAK,CAAC,gBAAgB,EAAE;QACrE,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,oBAAoB;QACpB,GAAG,mBAAmB;KACvB,CAAC,CAAC;IACH,MAAM,oCAAoC,CAAC;QACzC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,oBAAoB;QACpB,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,GAAG,mBAAmB;KACvB,CAAC,CAAC;IACH,sBAAsB,CACpB,KAAK,CAAC,yBAAyB,CAAC,IAAI,EACpC,KAAK,CAAC,mBAAmB,CAC1B,CAAC;IACF,IAAI,KAAK,CAAC,wBAAwB;QAChC,8BAA8B,CAAC;YAC7B,GAAG,KAAK;YACR,iBAAiB,EAAE,CAAC,GAAG,oBAAoB,CAAC,MAAM,EAAE,CAAC;SACtD,CAAC,CAAC;IACL,MAAM,WAAW,GAAG,gCAAgC,CAAC;QACnD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CAAC;IACH,6BAA6B,CAAC,KAAK,EAAE,WAAW,CAAC,kBAAkB,CAAC,CAAC;IACrE,MAAM,iBAAiB,GAAG,MAAM,4CAA4C,CAAC;QAC3E,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,eAAe;QAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,GAAG,mBAAmB;KACvB,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;IACvD,MAAM,UAAU,GAAG,iBAAiB;QAClC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,iBAAiB,CAAC;IACtB,IAAI,UAAU,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,sEAAsE;IACtE,iDAAiD;IACjD,MAAM,eAAe,GACnB,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,eAAe;QACvD,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,eAAe,GAAG,MAAM,2BAA2B,CAAC,KAAK,EAAE;QAC/D,UAAU;QACV,eAAe;QACf,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,gCAAgC,CAAC;QAClD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,MAAM,KAAK,CAAC,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC;QAChE,eAAe;QACf,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,eAAe;QACf,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CAAC;IAEH,OAAO;QACL,UAAU;QACV,iBAAiB;QACjB,IAAI;KACL,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,KAAyE,EACzE,IAIC;IAED,MAAM,mBAAmB,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,UAAU;KAC9C,CAAC;IACF,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC/B,OAAO;YACL,GAAG,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,OAAO;YAClD,GAAG,CAAC,MAAM,gCAAgC,CAAC;gBACzC,GAAG,OAAO;gBACV,aAAa,EAAE,MAAM,sBAAsB,CAAC;oBAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,UAAU,EAAE,KAAK,CAAC,yBAAyB;oBAC3C,SAAS,EAAE,KAAK,CAAC,eAAe;oBAChC,GAAG,mBAAmB;iBACvB,CAAC;gBACF,OAAO,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;aACnC,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IACD,OAAO,gCAAgC,CAAC;QACtC,GAAG,OAAO;QACV,aAAa,EAAE,CACb,MAAM,mCAAmC,CAAC;YACxC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,eAAe;YAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,GAAG,mBAAmB;SACvB,CAAC,CACH,CAAC,aAAa;QACf,mEAAmE;QACnE,+DAA+D;QAC/D,OAAO,EAAE,2BAA2B,CAAC;YACnC,kBAAkB,EAAE,IAAI,CAAC,WAAW,CAAC,kBAAkB;YACvD,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO;YACvC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,6BAA6B,CACpC,KAGC,EACD,kBAAqC;IAErC,0FAA0F;IAC1F,6BAA6B,CAC3B,KAAK,CAAC,gBAAgB,EACtB,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAC5B,CAAC;IACF,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC/B,6BAA6B,CAC3B,KAAK,CAAC,yBAAyB,CAAC,aAAa,CAC9C,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import {\n  computeAccessManifestHash,\n  computeDocumentContentKeyTargetHash,\n  DOCUMENT_CONTENT_KEY_WRAP_SUITE,\n  type DocumentContentKeyTarget,\n  type DocumentLinkSetManifestState,\n  deriveDocumentLinkSetManifest,\n  wrapContentKey,\n} from \"@tearleads/crypto\";\nimport { bytesToBase64 } from \"@tearleads/encoding\";\nimport { isPlainObject as isPlainRecord } from \"@tearleads/validators/isPlainObject\";\nimport type { DocumentContentKeyTargetEnvelope } from \"@tearleads/validators/request\";\nimport type {\n  ContainerWriterProjectionResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS,\n  MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n} from \"@tearleads/validators/util\";\nimport {\n  assertContainerKekPathCurrent,\n  assertDocumentKekPathsCurrent,\n} from \"../../../data/documents/shared/containerKekCurrency\";\nimport { buildDocumentLinkSetEventPlan } from \"../../../data/documents/shared/events\";\nimport {\n  assertDocumentWriterProjectionConsistent,\n  collectContainerKeksForDocumentSync,\n  containerPathRefs,\n  currentDocumentTargets,\n  deriveDocumentTargetFromProjection,\n  mergeTargetEnvelopes,\n  readLinkedContainerIdsFromDocumentManifest,\n  unwrapContainerKekPath,\n  unwrapDocumentContentKeyFromWriterProjection,\n  verifiedDocumentWrapTargets,\n} from \"../../../data/documents/shared/projection\";\nimport {\n  assertDocumentManifestBundleConsistent,\n  describeDocumentTargetKek,\n  sortDocumentTargets,\n  targetKey,\n  uniqueSortedStrings,\n} from \"../../../data/documents/shared/readers\";\nimport {\n  type BuildDocumentLinkSetMutationPlanInput,\n  type DocumentCreateAuthor,\n  type DocumentLinkSetMutationOperation,\n  type DocumentLinkSetMutationPlan,\n  type DocumentLinkSetTargetState,\n  type MaterializedDocumentLinkSetMutationPlan,\n  type ProjectionVerificationOptions,\n  projectionVerificationOptions,\n} from \"../../../data/documents/shared/types\";\nimport { readCanonicalRecord } from \"../../../data/keying/canonicalJson\";\nimport type { PrincipalPolicyCache } from \"../../../data/keyingProjectionVerification\";\nimport type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\nimport {\n  assertSubtreePurgePath,\n  type SubtreePurgeRoot,\n} from \"../purge/subtreePurgeScope\";\nimport {\n  assertDocumentLinkAuthorAccess,\n  verifyDocumentLinkSetCurrentPolicies,\n} from \"./linkSetAuthority\";\n\nfunction deriveDocumentLinkSetTargetState(input: {\n  operation: DocumentLinkSetMutationOperation;\n  targetContainerProjection: ContainerWriterProjectionResponse;\n  writerProjection: DocumentWriterProjectionResponse;\n}): DocumentLinkSetTargetState {\n  const currentTargets = currentDocumentTargets(input.writerProjection);\n  const currentLinkedContainerIds = readLinkedContainerIdsFromDocumentManifest(\n    input.writerProjection,\n  );\n  const target = deriveDocumentTargetFromProjection(\n    input.targetContainerProjection,\n  );\n  const currentTarget = currentTargets.find(\n    (candidate) => candidate.containerId === target.containerId,\n  );\n\n  if (input.operation === \"link\") {\n    if (currentTarget) {\n      throw new Error(\"Document link target is already linked\");\n    }\n    assertDocumentLinkTargetCapacity(currentTargets.length);\n    assertDocumentLinkAuthorizationPathCapacity(\n      input.writerProjection.authorizingContainerPaths.map(\n        (projection) => projection.path.length,\n      ),\n      input.targetContainerProjection.path.length,\n    );\n\n    return {\n      currentTargets,\n      linkedContainerIds: uniqueSortedStrings([\n        ...currentLinkedContainerIds,\n        target.containerId,\n      ]),\n      target,\n      targets: sortDocumentTargets([...currentTargets, target]),\n    };\n  }\n\n  if (!currentTarget) {\n    throw new Error(\"Document unlink target is not linked\");\n  }\n  if (targetKey(currentTarget) !== targetKey(target)) {\n    throw new Error(\"Document unlink target projection is stale\");\n  }\n\n  const linkedContainerIds = currentLinkedContainerIds.filter(\n    (containerId) => containerId !== target.containerId,\n  );\n  if (linkedContainerIds.length === 0) {\n    throw new Error(\"Document unlink must leave a linked container\");\n  }\n\n  return {\n    currentTargets,\n    linkedContainerIds,\n    target,\n    targets: currentTargets.filter(\n      (candidate) => candidate.containerId !== target.containerId,\n    ),\n  };\n}\n\nexport function assertDocumentLinkTargetCapacity(\n  currentTargetCount: number,\n): void {\n  if (currentTargetCount >= MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS) {\n    throw new RangeError(\n      `A document cannot be linked to more than ${MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS} containers`,\n    );\n  }\n}\n\nexport function assertDocumentLinkAuthorizationPathCapacity(\n  currentPathLengths: readonly number[],\n  targetPathLength: number,\n): void {\n  const totalReferences = currentPathLengths.reduce(\n    (total, length) => total + length,\n    targetPathLength,\n  );\n  if (totalReferences > MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS) {\n    throw new RangeError(\n      `Document links cannot require more than ${MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS} authorization references`,\n    );\n  }\n}\n\nasync function wrapDocumentContentKeyForTargets(input: {\n  contentKey: Uint8Array;\n  contentKeyEpoch: number;\n  documentId: string;\n  keksByEpochId: ReadonlyMap<string, Uint8Array>;\n  targets: readonly DocumentContentKeyTarget[];\n}): Promise<DocumentContentKeyTargetEnvelope[]> {\n  return Promise.all(\n    sortDocumentTargets(input.targets).map(async (target) => {\n      const targetKek = input.keksByEpochId.get(target.containerKeyEpochId);\n      if (!targetKek) {\n        throw new Error(\n          `Document target KEK could not be unwrapped for ${describeDocumentTargetKek(target)}`,\n        );\n      }\n\n      const wrapped = await wrapContentKey(input.contentKey, targetKek, {\n        kind: \"Document\",\n        objectId: input.documentId,\n        contentKeyEpoch: input.contentKeyEpoch,\n        containerId: target.containerId,\n        containerKeyEpochId: target.containerKeyEpochId,\n      });\n      return {\n        ...target,\n        wrappedKey: bytesToBase64(wrapped.ciphertext),\n        wrappingMetadata: {\n          suite: DOCUMENT_CONTENT_KEY_WRAP_SUITE,\n          iv: bytesToBase64(wrapped.iv),\n        },\n      };\n    }),\n  );\n}\n\n// Resolve the organization a link/unlink mutation belongs to: the document's\n// own org (from its manifest), which must equal the target container's org —\n// both are owned by the same organization. The acting member's personal org is\n// intentionally not part of this check; a member may link documents within any\n// org they belong to. Returns the document org so the plan stamps it onto the\n// signed event and manifest rather than the author's org.\nasync function resolveDocumentLinkSetMutationOrganization(input: {\n  targetContainerProjection: ContainerWriterProjectionResponse;\n  writerProjection: DocumentWriterProjectionResponse;\n}): Promise<string> {\n  const manifestIdentity = await assertDocumentManifestBundleConsistent({\n    bundle: input.writerProjection.documentManifest,\n    label: \"Document link-set manifest\",\n  });\n  if (\n    manifestIdentity.organizationId !==\n    input.targetContainerProjection.organizationId\n  ) {\n    throw new Error(\"Document target container organization mismatch\");\n  }\n\n  return manifestIdentity.organizationId;\n}\n\nfunction readDocumentLinkSetPreviousEpoch(\n  writerProjection: DocumentWriterProjectionResponse,\n): number {\n  const previousState = writerProjection.documentManifest.state;\n  const previousEpoch = isPlainRecord(previousState)\n    ? Reflect.get(previousState, \"epoch\")\n    : undefined;\n  if (\n    typeof previousEpoch !== \"number\" ||\n    !Number.isInteger(previousEpoch) ||\n    previousEpoch <= 0\n  ) {\n    throw new Error(\"Document link-set previous epoch is invalid\");\n  }\n\n  return previousEpoch;\n}\n\nasync function buildDocumentLinkSetMutationPlan({\n  author,\n  blobRewraps,\n  contentKeyEpoch,\n  eventId = crypto.randomUUID(),\n  operation,\n  signedAt = new Date().toISOString(),\n  targetContainerProjection,\n  targetEnvelopes,\n  writerProjection,\n}: BuildDocumentLinkSetMutationPlanInput): Promise<DocumentLinkSetMutationPlan> {\n  const organizationId = await resolveDocumentLinkSetMutationOrganization({\n    targetContainerProjection,\n    writerProjection,\n  });\n  const targetState = deriveDocumentLinkSetTargetState({\n    operation,\n    targetContainerProjection,\n    writerProjection,\n  });\n  const targetEnvelopesForRequest = mergeTargetEnvelopes(\n    targetState.targets,\n    targetEnvelopes,\n  );\n  const targetContainerPathRefs = containerPathRefs(\n    targetContainerProjection.path,\n  );\n  const eventPlan = await buildDocumentLinkSetEventPlan({\n    author,\n    blobRewraps,\n    eventId,\n    operation,\n    organizationId,\n    signedAt,\n    targetContainerPathRefs,\n    targetState,\n    writerProjection,\n  });\n  const previousEpoch = readDocumentLinkSetPreviousEpoch(writerProjection);\n\n  const state: DocumentLinkSetManifestState = {\n    version: 1,\n    documentId: writerProjection.documentId,\n    organizationId,\n    epoch: previousEpoch + 1,\n    previousManifestHash: writerProjection.documentManifest.manifestHash,\n    eventHash: eventPlan.eventHash,\n    linkedContainerIds: [...targetState.linkedContainerIds],\n  };\n  const manifest = await deriveDocumentLinkSetManifest(state);\n  const manifestHash = await computeAccessManifestHash(manifest);\n  const targetHash = await computeDocumentContentKeyTargetHash(\n    targetState.targets,\n  );\n\n  return {\n    body: eventPlan.body,\n    contentKeyEpoch,\n    documentId: writerProjection.documentId,\n    event: eventPlan.event,\n    eventHash: eventPlan.eventHash,\n    manifest,\n    manifestHash,\n    operation,\n    request: {\n      event: readCanonicalRecord(eventPlan.event, \"Document link-set event\"),\n      body: readCanonicalRecord(eventPlan.body, \"Document link-set body\"),\n      expectedManifestHash: manifestHash,\n      manifest: readCanonicalRecord(manifest, \"Document link-set manifest\"),\n      targetContainerPathRefs,\n      authorizingContainerPathRefs: eventPlan.authorizingContainerPathRefs,\n      contentKeyBundle: {\n        contentKeyEpoch,\n        linkSetManifestHash: manifestHash,\n        targetHash,\n        targets: targetEnvelopesForRequest,\n      },\n    },\n    state,\n    targetHash,\n    targets: sortDocumentTargets(targetState.targets),\n  };\n}\n\nexport async function buildMaterializedDocumentLinkSetMutationPlan(\n  input: {\n    author: DocumentCreateAuthor;\n    expectedSubtreeRoot?: SubtreePurgeRoot | undefined;\n    prepareBlobRewraps: (\n      targets: readonly DocumentContentKeyTarget[],\n    ) => Promise<BuildDocumentLinkSetMutationPlanInput[\"blobRewraps\"]>;\n    contentKey?: Uint8Array | undefined;\n    eventId?: string | undefined;\n    execSql?: ExecSql | undefined;\n    operation: DocumentLinkSetMutationOperation;\n    signedAt?: string | undefined;\n    targetContainerProjection: ContainerWriterProjectionResponse;\n    targetSecretKey: Uint8Array;\n    writerProjection: DocumentWriterProjectionResponse;\n  } & ProjectionVerificationOptions,\n): Promise<MaterializedDocumentLinkSetMutationPlan> {\n  const verificationOptions = projectionVerificationOptions(input);\n  const principalPolicyCache: PrincipalPolicyCache = new Map();\n  await assertDocumentWriterProjectionConsistent(input.writerProjection, {\n    execSql: input.execSql,\n    principalPolicyCache,\n    ...verificationOptions,\n  });\n  await verifyDocumentLinkSetCurrentPolicies({\n    execSql: input.execSql,\n    principalPolicyCache,\n    targetContainerProjection: input.targetContainerProjection,\n    writerProjection: input.writerProjection,\n    ...verificationOptions,\n  });\n  assertSubtreePurgePath(\n    input.targetContainerProjection.path,\n    input.expectedSubtreeRoot,\n  );\n  if (input.resolveProjectionUserKey)\n    assertDocumentLinkAuthorAccess({\n      ...input,\n      principalPolicies: [...principalPolicyCache.values()],\n    });\n  const targetState = deriveDocumentLinkSetTargetState({\n    operation: input.operation,\n    targetContainerProjection: input.targetContainerProjection,\n    writerProjection: input.writerProjection,\n  });\n  assertLinkSetWriteKeksCurrent(input, targetState.linkedContainerIds);\n  const currentContentKey = await unwrapDocumentContentKeyFromWriterProjection({\n    execSql: input.execSql,\n    secretKey: input.targetSecretKey,\n    writerProjection: input.writerProjection,\n    ...verificationOptions,\n  });\n  const contentKeyRotated = input.operation === \"unlink\";\n  const contentKey = contentKeyRotated\n    ? (input.contentKey ?? crypto.getRandomValues(new Uint8Array(32)))\n    : currentContentKey;\n  if (contentKey.byteLength !== 32) {\n    throw new Error(\"Document content key must be 32 bytes\");\n  }\n  // A link carries the existing envelopes forward at the same epoch; an\n  // unlink rotates to a fresh key at the next one.\n  const contentKeyEpoch =\n    input.writerProjection.contentKeyBundle.contentKeyEpoch +\n    (contentKeyRotated ? 1 : 0);\n  const targetEnvelopes = await buildLinkSetTargetEnvelopes(input, {\n    contentKey,\n    contentKeyEpoch,\n    targetState,\n  });\n\n  const plan = await buildDocumentLinkSetMutationPlan({\n    author: input.author,\n    blobRewraps: await input.prepareBlobRewraps(targetState.targets),\n    contentKeyEpoch,\n    eventId: input.eventId,\n    operation: input.operation,\n    signedAt: input.signedAt,\n    targetContainerProjection: input.targetContainerProjection,\n    targetEnvelopes,\n    writerProjection: input.writerProjection,\n  });\n\n  return {\n    contentKey,\n    contentKeyRotated,\n    plan,\n  };\n}\n\nasync function buildLinkSetTargetEnvelopes(\n  input: Parameters<typeof buildMaterializedDocumentLinkSetMutationPlan>[0],\n  wrap: {\n    contentKey: Uint8Array;\n    contentKeyEpoch: number;\n    targetState: ReturnType<typeof deriveDocumentLinkSetTargetState>;\n  },\n): Promise<DocumentContentKeyTargetEnvelope[]> {\n  const verificationOptions = projectionVerificationOptions(input);\n  const sealing = {\n    contentKey: wrap.contentKey,\n    contentKeyEpoch: wrap.contentKeyEpoch,\n    documentId: input.writerProjection.documentId,\n  };\n  if (input.operation === \"link\") {\n    return [\n      ...input.writerProjection.contentKeyBundle.targets,\n      ...(await wrapDocumentContentKeyForTargets({\n        ...sealing,\n        keksByEpochId: await unwrapContainerKekPath({\n          execSql: input.execSql,\n          projection: input.targetContainerProjection,\n          secretKey: input.targetSecretKey,\n          ...verificationOptions,\n        }),\n        targets: [wrap.targetState.target],\n      })),\n    ];\n  }\n  return wrapDocumentContentKeyForTargets({\n    ...sealing,\n    keksByEpochId: (\n      await collectContainerKeksForDocumentSync({\n        execSql: input.execSql,\n        secretKey: input.targetSecretKey,\n        writerProjection: input.writerProjection,\n        ...verificationOptions,\n      })\n    ).keksByEpochId,\n    // The rotated key is wrapped only to verified current heads of the\n    // remaining linked containers, never to a server-listed epoch.\n    targets: verifiedDocumentWrapTargets({\n      linkedContainerIds: wrap.targetState.linkedContainerIds,\n      serverTargets: wrap.targetState.targets,\n      writerProjection: input.writerProjection,\n    }),\n  });\n}\n\nfunction assertLinkSetWriteKeksCurrent(\n  input: Pick<\n    Parameters<typeof buildMaterializedDocumentLinkSetMutationPlan>[0],\n    \"writerProjection\" | \"targetContainerProjection\" | \"operation\"\n  >,\n  linkedContainerIds: readonly string[],\n): void {\n  // Unlink can escape a stale branch; only recipients of the successor key must be current.\n  assertDocumentKekPathsCurrent(\n    input.writerProjection,\n    new Set(linkedContainerIds),\n  );\n  if (input.operation === \"link\") {\n    assertContainerKekPathCurrent(\n      input.targetContainerProjection.containerKeks,\n    );\n  }\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,mCAAmC,EACnC,+BAA+B,EAG/B,6BAA6B,EAC7B,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAMrF,OAAO,EACL,yCAAyC,EACzC,qCAAqC,GACtC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AACtF,OAAO,EACL,wCAAwC,EACxC,mCAAmC,EACnC,iBAAiB,EACjB,sBAAsB,EACtB,kCAAkC,EAClC,oBAAoB,EACpB,0CAA0C,EAC1C,sBAAsB,EACtB,4CAA4C,EAC5C,2BAA2B,GAC5B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,sCAAsC,EACtC,yBAAyB,EACzB,mBAAmB,EACnB,SAAS,EACT,mBAAmB,GACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAQL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAGzE,OAAO,EACL,sBAAsB,GAEvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,oBAAoB,CAAC;AAE5B,SAAS,gCAAgC,CAAC,KAIzC;IACC,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACtE,MAAM,yBAAyB,GAAG,0CAA0C,CAC1E,KAAK,CAAC,gBAAgB,CACvB,CAAC;IACF,MAAM,MAAM,GAAG,kCAAkC,CAC/C,KAAK,CAAC,yBAAyB,CAChC,CAAC;IACF,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CACvC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAC5D,CAAC;IAEF,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC/B,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,gCAAgC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACxD,2CAA2C,CACzC,KAAK,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,GAAG,CAClD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CACvC,EACD,KAAK,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAC5C,CAAC;QAEF,OAAO;YACL,cAAc;YACd,kBAAkB,EAAE,mBAAmB,CAAC;gBACtC,GAAG,yBAAyB;gBAC5B,MAAM,CAAC,WAAW;aACnB,CAAC;YACF,MAAM;YACN,OAAO,EAAE,mBAAmB,CAAC,CAAC,GAAG,cAAc,EAAE,MAAM,CAAC,CAAC;SAC1D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,SAAS,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,MAAM,CACzD,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CACpD,CAAC;IACF,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,OAAO;QACL,cAAc;QACd,kBAAkB;QAClB,MAAM;QACN,OAAO,EAAE,cAAc,CAAC,MAAM,CAC5B,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAC5D;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,kBAA0B;IAE1B,IAAI,kBAAkB,IAAI,qCAAqC,EAAE,CAAC;QAChE,MAAM,IAAI,UAAU,CAClB,4CAA4C,qCAAqC,aAAa,CAC/F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2CAA2C,CACzD,kBAAqC,EACrC,gBAAwB;IAExB,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,CAC/C,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,EACjC,gBAAgB,CACjB,CAAC;IACF,IAAI,eAAe,GAAG,yCAAyC,EAAE,CAAC;QAChE,MAAM,IAAI,UAAU,CAClB,2CAA2C,yCAAyC,2BAA2B,CAChH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gCAAgC,CAAC,KAM/C;IACC,OAAO,OAAO,CAAC,GAAG,CAChB,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACtE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,kDAAkD,yBAAyB,CAAC,MAAM,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE;YAChE,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;SAChD,CAAC,CAAC;QACH,OAAO;YACL,GAAG,MAAM;YACT,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC;YAC7C,gBAAgB,EAAE;gBAChB,KAAK,EAAE,+BAA+B;gBACtC,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;aAC9B;SACF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,0DAA0D;AAC1D,KAAK,UAAU,0CAA0C,CAAC,KAGzD;IACC,MAAM,gBAAgB,GAAG,MAAM,sCAAsC,CAAC;QACpE,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,gBAAgB;QAC/C,KAAK,EAAE,4BAA4B;KACpC,CAAC,CAAC;IACH,IACE,gBAAgB,CAAC,cAAc;QAC/B,KAAK,CAAC,yBAAyB,CAAC,cAAc,EAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,gBAAgB,CAAC,cAAc,CAAC;AACzC,CAAC;AAED,SAAS,gCAAgC,CACvC,gBAAkD;IAElD,MAAM,aAAa,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,KAAK,CAAC;IAC9D,MAAM,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;QAChD,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC;IACd,IACE,OAAO,aAAa,KAAK,QAAQ;QACjC,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC;QAChC,aAAa,IAAI,CAAC,EAClB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,gCAAgC,CAAC,EAC9C,MAAM,EACN,WAAW,EACX,eAAe,EACf,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,EAC7B,SAAS,EACT,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACnC,yBAAyB,EACzB,eAAe,EACf,gBAAgB,GACsB;IACtC,MAAM,cAAc,GAAG,MAAM,0CAA0C,CAAC;QACtE,yBAAyB;QACzB,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,gCAAgC,CAAC;QACnD,SAAS;QACT,yBAAyB;QACzB,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,yBAAyB,GAAG,oBAAoB,CACpD,WAAW,CAAC,OAAO,EACnB,eAAe,CAChB,CAAC;IACF,MAAM,uBAAuB,GAAG,iBAAiB,CAC/C,yBAAyB,CAAC,IAAI,CAC/B,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC;QACpD,MAAM;QACN,WAAW;QACX,OAAO;QACP,SAAS;QACT,cAAc;QACd,QAAQ;QACR,uBAAuB;QACvB,WAAW;QACX,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,gCAAgC,CAAC,gBAAgB,CAAC,CAAC;IAEzE,MAAM,KAAK,GAAiC;QAC1C,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,gBAAgB,CAAC,UAAU;QACvC,cAAc;QACd,KAAK,EAAE,aAAa,GAAG,CAAC;QACxB,oBAAoB,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,YAAY;QACpE,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,kBAAkB,EAAE,CAAC,GAAG,WAAW,CAAC,kBAAkB,CAAC;KACxD,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,MAAM,mCAAmC,CAC1D,WAAW,CAAC,OAAO,CACpB,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,eAAe;QACf,UAAU,EAAE,gBAAgB,CAAC,UAAU;QACvC,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,QAAQ;QACR,YAAY;QACZ,SAAS;QACT,OAAO,EAAE;YACP,KAAK,EAAE,mBAAmB,CAAC,SAAS,CAAC,KAAK,EAAE,yBAAyB,CAAC;YACtE,IAAI,EAAE,mBAAmB,CAAC,SAAS,CAAC,IAAI,EAAE,wBAAwB,CAAC;YACnE,oBAAoB,EAAE,YAAY;YAClC,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,EAAE,4BAA4B,CAAC;YACrE,uBAAuB;YACvB,4BAA4B,EAAE,SAAS,CAAC,4BAA4B;YACpE,gBAAgB,EAAE;gBAChB,eAAe;gBACf,mBAAmB,EAAE,YAAY;gBACjC,UAAU;gBACV,OAAO,EAAE,yBAAyB;aACnC;SACF;QACD,KAAK;QACL,UAAU;QACV,OAAO,EAAE,mBAAmB,CAAC,WAAW,CAAC,OAAO,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAChE,KAciC;IAEjC,MAAM,mBAAmB,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,oBAAoB,GAAyB,IAAI,GAAG,EAAE,CAAC;IAC7D,MAAM,wCAAwC,CAAC,KAAK,CAAC,gBAAgB,EAAE;QACrE,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,oBAAoB;QACpB,GAAG,mBAAmB;KACvB,CAAC,CAAC;IACH,MAAM,oCAAoC,CAAC;QACzC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,oBAAoB;QACpB,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,GAAG,mBAAmB;KACvB,CAAC,CAAC;IACH,sBAAsB,CACpB,KAAK,CAAC,yBAAyB,CAAC,IAAI,EACpC,KAAK,CAAC,mBAAmB,CAC1B,CAAC;IACF,IAAI,KAAK,CAAC,wBAAwB;QAChC,8BAA8B,CAAC;YAC7B,GAAG,KAAK;YACR,iBAAiB,EAAE,CAAC,GAAG,oBAAoB,CAAC,MAAM,EAAE,CAAC;SACtD,CAAC,CAAC;IACL,MAAM,WAAW,GAAG,gCAAgC,CAAC;QACnD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CAAC;IACH,6BAA6B,CAAC,KAAK,EAAE,WAAW,CAAC,kBAAkB,CAAC,CAAC;IACrE,MAAM,iBAAiB,GAAG,MAAM,4CAA4C,CAAC;QAC3E,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,eAAe;QAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,GAAG,mBAAmB;KACvB,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;IACvD,MAAM,UAAU,GAAG,iBAAiB;QAClC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,iBAAiB,CAAC;IACtB,IAAI,UAAU,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,sEAAsE;IACtE,iDAAiD;IACjD,MAAM,eAAe,GACnB,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,eAAe;QACvD,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,eAAe,GAAG,MAAM,2BAA2B,CAAC,KAAK,EAAE;QAC/D,UAAU;QACV,eAAe;QACf,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,gCAAgC,CAAC;QAClD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,MAAM,KAAK,CAAC,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC;QAChE,eAAe;QACf,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,eAAe;QACf,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CAAC;IAEH,OAAO;QACL,UAAU;QACV,iBAAiB;QACjB,IAAI;KACL,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,KAAyE,EACzE,IAIC;IAED,MAAM,mBAAmB,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,UAAU;KAC9C,CAAC;IACF,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC/B,OAAO;YACL,GAAG,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,OAAO;YAClD,GAAG,CAAC,MAAM,gCAAgC,CAAC;gBACzC,GAAG,OAAO;gBACV,aAAa,EAAE,MAAM,sBAAsB,CAAC;oBAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,UAAU,EAAE,KAAK,CAAC,yBAAyB;oBAC3C,SAAS,EAAE,KAAK,CAAC,eAAe;oBAChC,GAAG,mBAAmB;iBACvB,CAAC;gBACF,OAAO,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;aACnC,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IACD,OAAO,gCAAgC,CAAC;QACtC,GAAG,OAAO;QACV,aAAa,EAAE,CACb,MAAM,mCAAmC,CAAC;YACxC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,eAAe;YAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,GAAG,mBAAmB;SACvB,CAAC,CACH,CAAC,aAAa;QACf,mEAAmE;QACnE,+DAA+D;QAC/D,OAAO,EAAE,2BAA2B,CAAC;YACnC,kBAAkB,EAAE,IAAI,CAAC,WAAW,CAAC,kBAAkB;YACvD,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO;YACvC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,6BAA6B,CACpC,KAGC,EACD,kBAAqC;IAErC,0FAA0F;IAC1F,6BAA6B,CAC3B,KAAK,CAAC,gBAAgB,EACtB,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAC5B,CAAC;IACF,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC/B,6BAA6B,CAC3B,KAAK,CAAC,yBAAyB,CAAC,aAAa,CAC9C,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import {\n  computeAccessManifestHash,\n  computeDocumentContentKeyTargetHash,\n  DOCUMENT_CONTENT_KEY_WRAP_SUITE,\n  type DocumentContentKeyTarget,\n  type DocumentLinkSetManifestState,\n  deriveDocumentLinkSetManifest,\n  wrapContentKey,\n} from \"@tearleads/crypto\";\nimport { bytesToBase64 } from \"@tearleads/encoding\";\nimport { isPlainObject as isPlainRecord } from \"@tearleads/validators/isPlainObject\";\nimport type { DocumentContentKeyTargetEnvelope } from \"@tearleads/validators/request\";\nimport type {\n  ContainerWriterProjectionResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS,\n  MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n} from \"@tearleads/validators/util\";\nimport {\n  assertContainerKekPathCurrent,\n  assertDocumentKekPathsCurrent,\n} from \"../../../data/documents/shared/containerKek/containerKekCurrency\";\nimport { buildDocumentLinkSetEventPlan } from \"../../../data/documents/shared/events\";\nimport {\n  assertDocumentWriterProjectionConsistent,\n  collectContainerKeksForDocumentSync,\n  containerPathRefs,\n  currentDocumentTargets,\n  deriveDocumentTargetFromProjection,\n  mergeTargetEnvelopes,\n  readLinkedContainerIdsFromDocumentManifest,\n  unwrapContainerKekPath,\n  unwrapDocumentContentKeyFromWriterProjection,\n  verifiedDocumentWrapTargets,\n} from \"../../../data/documents/shared/projection\";\nimport {\n  assertDocumentManifestBundleConsistent,\n  describeDocumentTargetKek,\n  sortDocumentTargets,\n  targetKey,\n  uniqueSortedStrings,\n} from \"../../../data/documents/shared/readers\";\nimport {\n  type BuildDocumentLinkSetMutationPlanInput,\n  type DocumentCreateAuthor,\n  type DocumentLinkSetMutationOperation,\n  type DocumentLinkSetMutationPlan,\n  type DocumentLinkSetTargetState,\n  type MaterializedDocumentLinkSetMutationPlan,\n  type ProjectionVerificationOptions,\n  projectionVerificationOptions,\n} from \"../../../data/documents/shared/types\";\nimport { readCanonicalRecord } from \"../../../data/keying/canonicalJson\";\nimport type { PrincipalPolicyCache } from \"../../../data/keyingProjectionVerification\";\nimport type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\nimport {\n  assertSubtreePurgePath,\n  type SubtreePurgeRoot,\n} from \"../purge/subtreePurgeScope\";\nimport {\n  assertDocumentLinkAuthorAccess,\n  verifyDocumentLinkSetCurrentPolicies,\n} from \"./linkSetAuthority\";\n\nfunction deriveDocumentLinkSetTargetState(input: {\n  operation: DocumentLinkSetMutationOperation;\n  targetContainerProjection: ContainerWriterProjectionResponse;\n  writerProjection: DocumentWriterProjectionResponse;\n}): DocumentLinkSetTargetState {\n  const currentTargets = currentDocumentTargets(input.writerProjection);\n  const currentLinkedContainerIds = readLinkedContainerIdsFromDocumentManifest(\n    input.writerProjection,\n  );\n  const target = deriveDocumentTargetFromProjection(\n    input.targetContainerProjection,\n  );\n  const currentTarget = currentTargets.find(\n    (candidate) => candidate.containerId === target.containerId,\n  );\n\n  if (input.operation === \"link\") {\n    if (currentTarget) {\n      throw new Error(\"Document link target is already linked\");\n    }\n    assertDocumentLinkTargetCapacity(currentTargets.length);\n    assertDocumentLinkAuthorizationPathCapacity(\n      input.writerProjection.authorizingContainerPaths.map(\n        (projection) => projection.path.length,\n      ),\n      input.targetContainerProjection.path.length,\n    );\n\n    return {\n      currentTargets,\n      linkedContainerIds: uniqueSortedStrings([\n        ...currentLinkedContainerIds,\n        target.containerId,\n      ]),\n      target,\n      targets: sortDocumentTargets([...currentTargets, target]),\n    };\n  }\n\n  if (!currentTarget) {\n    throw new Error(\"Document unlink target is not linked\");\n  }\n  if (targetKey(currentTarget) !== targetKey(target)) {\n    throw new Error(\"Document unlink target projection is stale\");\n  }\n\n  const linkedContainerIds = currentLinkedContainerIds.filter(\n    (containerId) => containerId !== target.containerId,\n  );\n  if (linkedContainerIds.length === 0) {\n    throw new Error(\"Document unlink must leave a linked container\");\n  }\n\n  return {\n    currentTargets,\n    linkedContainerIds,\n    target,\n    targets: currentTargets.filter(\n      (candidate) => candidate.containerId !== target.containerId,\n    ),\n  };\n}\n\nexport function assertDocumentLinkTargetCapacity(\n  currentTargetCount: number,\n): void {\n  if (currentTargetCount >= MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS) {\n    throw new RangeError(\n      `A document cannot be linked to more than ${MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS} containers`,\n    );\n  }\n}\n\nexport function assertDocumentLinkAuthorizationPathCapacity(\n  currentPathLengths: readonly number[],\n  targetPathLength: number,\n): void {\n  const totalReferences = currentPathLengths.reduce(\n    (total, length) => total + length,\n    targetPathLength,\n  );\n  if (totalReferences > MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS) {\n    throw new RangeError(\n      `Document links cannot require more than ${MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS} authorization references`,\n    );\n  }\n}\n\nasync function wrapDocumentContentKeyForTargets(input: {\n  contentKey: Uint8Array;\n  contentKeyEpoch: number;\n  documentId: string;\n  keksByEpochId: ReadonlyMap<string, Uint8Array>;\n  targets: readonly DocumentContentKeyTarget[];\n}): Promise<DocumentContentKeyTargetEnvelope[]> {\n  return Promise.all(\n    sortDocumentTargets(input.targets).map(async (target) => {\n      const targetKek = input.keksByEpochId.get(target.containerKeyEpochId);\n      if (!targetKek) {\n        throw new Error(\n          `Document target KEK could not be unwrapped for ${describeDocumentTargetKek(target)}`,\n        );\n      }\n\n      const wrapped = await wrapContentKey(input.contentKey, targetKek, {\n        kind: \"Document\",\n        objectId: input.documentId,\n        contentKeyEpoch: input.contentKeyEpoch,\n        containerId: target.containerId,\n        containerKeyEpochId: target.containerKeyEpochId,\n      });\n      return {\n        ...target,\n        wrappedKey: bytesToBase64(wrapped.ciphertext),\n        wrappingMetadata: {\n          suite: DOCUMENT_CONTENT_KEY_WRAP_SUITE,\n          iv: bytesToBase64(wrapped.iv),\n        },\n      };\n    }),\n  );\n}\n\n// Resolve the organization a link/unlink mutation belongs to: the document's\n// own org (from its manifest), which must equal the target container's org —\n// both are owned by the same organization. The acting member's personal org is\n// intentionally not part of this check; a member may link documents within any\n// org they belong to. Returns the document org so the plan stamps it onto the\n// signed event and manifest rather than the author's org.\nasync function resolveDocumentLinkSetMutationOrganization(input: {\n  targetContainerProjection: ContainerWriterProjectionResponse;\n  writerProjection: DocumentWriterProjectionResponse;\n}): Promise<string> {\n  const manifestIdentity = await assertDocumentManifestBundleConsistent({\n    bundle: input.writerProjection.documentManifest,\n    label: \"Document link-set manifest\",\n  });\n  if (\n    manifestIdentity.organizationId !==\n    input.targetContainerProjection.organizationId\n  ) {\n    throw new Error(\"Document target container organization mismatch\");\n  }\n\n  return manifestIdentity.organizationId;\n}\n\nfunction readDocumentLinkSetPreviousEpoch(\n  writerProjection: DocumentWriterProjectionResponse,\n): number {\n  const previousState = writerProjection.documentManifest.state;\n  const previousEpoch = isPlainRecord(previousState)\n    ? Reflect.get(previousState, \"epoch\")\n    : undefined;\n  if (\n    typeof previousEpoch !== \"number\" ||\n    !Number.isInteger(previousEpoch) ||\n    previousEpoch <= 0\n  ) {\n    throw new Error(\"Document link-set previous epoch is invalid\");\n  }\n\n  return previousEpoch;\n}\n\nasync function buildDocumentLinkSetMutationPlan({\n  author,\n  blobRewraps,\n  contentKeyEpoch,\n  eventId = crypto.randomUUID(),\n  operation,\n  signedAt = new Date().toISOString(),\n  targetContainerProjection,\n  targetEnvelopes,\n  writerProjection,\n}: BuildDocumentLinkSetMutationPlanInput): Promise<DocumentLinkSetMutationPlan> {\n  const organizationId = await resolveDocumentLinkSetMutationOrganization({\n    targetContainerProjection,\n    writerProjection,\n  });\n  const targetState = deriveDocumentLinkSetTargetState({\n    operation,\n    targetContainerProjection,\n    writerProjection,\n  });\n  const targetEnvelopesForRequest = mergeTargetEnvelopes(\n    targetState.targets,\n    targetEnvelopes,\n  );\n  const targetContainerPathRefs = containerPathRefs(\n    targetContainerProjection.path,\n  );\n  const eventPlan = await buildDocumentLinkSetEventPlan({\n    author,\n    blobRewraps,\n    eventId,\n    operation,\n    organizationId,\n    signedAt,\n    targetContainerPathRefs,\n    targetState,\n    writerProjection,\n  });\n  const previousEpoch = readDocumentLinkSetPreviousEpoch(writerProjection);\n\n  const state: DocumentLinkSetManifestState = {\n    version: 1,\n    documentId: writerProjection.documentId,\n    organizationId,\n    epoch: previousEpoch + 1,\n    previousManifestHash: writerProjection.documentManifest.manifestHash,\n    eventHash: eventPlan.eventHash,\n    linkedContainerIds: [...targetState.linkedContainerIds],\n  };\n  const manifest = await deriveDocumentLinkSetManifest(state);\n  const manifestHash = await computeAccessManifestHash(manifest);\n  const targetHash = await computeDocumentContentKeyTargetHash(\n    targetState.targets,\n  );\n\n  return {\n    body: eventPlan.body,\n    contentKeyEpoch,\n    documentId: writerProjection.documentId,\n    event: eventPlan.event,\n    eventHash: eventPlan.eventHash,\n    manifest,\n    manifestHash,\n    operation,\n    request: {\n      event: readCanonicalRecord(eventPlan.event, \"Document link-set event\"),\n      body: readCanonicalRecord(eventPlan.body, \"Document link-set body\"),\n      expectedManifestHash: manifestHash,\n      manifest: readCanonicalRecord(manifest, \"Document link-set manifest\"),\n      targetContainerPathRefs,\n      authorizingContainerPathRefs: eventPlan.authorizingContainerPathRefs,\n      contentKeyBundle: {\n        contentKeyEpoch,\n        linkSetManifestHash: manifestHash,\n        targetHash,\n        targets: targetEnvelopesForRequest,\n      },\n    },\n    state,\n    targetHash,\n    targets: sortDocumentTargets(targetState.targets),\n  };\n}\n\nexport async function buildMaterializedDocumentLinkSetMutationPlan(\n  input: {\n    author: DocumentCreateAuthor;\n    expectedSubtreeRoot?: SubtreePurgeRoot | undefined;\n    prepareBlobRewraps: (\n      targets: readonly DocumentContentKeyTarget[],\n    ) => Promise<BuildDocumentLinkSetMutationPlanInput[\"blobRewraps\"]>;\n    contentKey?: Uint8Array | undefined;\n    eventId?: string | undefined;\n    execSql?: ExecSql | undefined;\n    operation: DocumentLinkSetMutationOperation;\n    signedAt?: string | undefined;\n    targetContainerProjection: ContainerWriterProjectionResponse;\n    targetSecretKey: Uint8Array;\n    writerProjection: DocumentWriterProjectionResponse;\n  } & ProjectionVerificationOptions,\n): Promise<MaterializedDocumentLinkSetMutationPlan> {\n  const verificationOptions = projectionVerificationOptions(input);\n  const principalPolicyCache: PrincipalPolicyCache = new Map();\n  await assertDocumentWriterProjectionConsistent(input.writerProjection, {\n    execSql: input.execSql,\n    principalPolicyCache,\n    ...verificationOptions,\n  });\n  await verifyDocumentLinkSetCurrentPolicies({\n    execSql: input.execSql,\n    principalPolicyCache,\n    targetContainerProjection: input.targetContainerProjection,\n    writerProjection: input.writerProjection,\n    ...verificationOptions,\n  });\n  assertSubtreePurgePath(\n    input.targetContainerProjection.path,\n    input.expectedSubtreeRoot,\n  );\n  if (input.resolveProjectionUserKey)\n    assertDocumentLinkAuthorAccess({\n      ...input,\n      principalPolicies: [...principalPolicyCache.values()],\n    });\n  const targetState = deriveDocumentLinkSetTargetState({\n    operation: input.operation,\n    targetContainerProjection: input.targetContainerProjection,\n    writerProjection: input.writerProjection,\n  });\n  assertLinkSetWriteKeksCurrent(input, targetState.linkedContainerIds);\n  const currentContentKey = await unwrapDocumentContentKeyFromWriterProjection({\n    execSql: input.execSql,\n    secretKey: input.targetSecretKey,\n    writerProjection: input.writerProjection,\n    ...verificationOptions,\n  });\n  const contentKeyRotated = input.operation === \"unlink\";\n  const contentKey = contentKeyRotated\n    ? (input.contentKey ?? crypto.getRandomValues(new Uint8Array(32)))\n    : currentContentKey;\n  if (contentKey.byteLength !== 32) {\n    throw new Error(\"Document content key must be 32 bytes\");\n  }\n  // A link carries the existing envelopes forward at the same epoch; an\n  // unlink rotates to a fresh key at the next one.\n  const contentKeyEpoch =\n    input.writerProjection.contentKeyBundle.contentKeyEpoch +\n    (contentKeyRotated ? 1 : 0);\n  const targetEnvelopes = await buildLinkSetTargetEnvelopes(input, {\n    contentKey,\n    contentKeyEpoch,\n    targetState,\n  });\n\n  const plan = await buildDocumentLinkSetMutationPlan({\n    author: input.author,\n    blobRewraps: await input.prepareBlobRewraps(targetState.targets),\n    contentKeyEpoch,\n    eventId: input.eventId,\n    operation: input.operation,\n    signedAt: input.signedAt,\n    targetContainerProjection: input.targetContainerProjection,\n    targetEnvelopes,\n    writerProjection: input.writerProjection,\n  });\n\n  return {\n    contentKey,\n    contentKeyRotated,\n    plan,\n  };\n}\n\nasync function buildLinkSetTargetEnvelopes(\n  input: Parameters<typeof buildMaterializedDocumentLinkSetMutationPlan>[0],\n  wrap: {\n    contentKey: Uint8Array;\n    contentKeyEpoch: number;\n    targetState: ReturnType<typeof deriveDocumentLinkSetTargetState>;\n  },\n): Promise<DocumentContentKeyTargetEnvelope[]> {\n  const verificationOptions = projectionVerificationOptions(input);\n  const sealing = {\n    contentKey: wrap.contentKey,\n    contentKeyEpoch: wrap.contentKeyEpoch,\n    documentId: input.writerProjection.documentId,\n  };\n  if (input.operation === \"link\") {\n    return [\n      ...input.writerProjection.contentKeyBundle.targets,\n      ...(await wrapDocumentContentKeyForTargets({\n        ...sealing,\n        keksByEpochId: await unwrapContainerKekPath({\n          execSql: input.execSql,\n          projection: input.targetContainerProjection,\n          secretKey: input.targetSecretKey,\n          ...verificationOptions,\n        }),\n        targets: [wrap.targetState.target],\n      })),\n    ];\n  }\n  return wrapDocumentContentKeyForTargets({\n    ...sealing,\n    keksByEpochId: (\n      await collectContainerKeksForDocumentSync({\n        execSql: input.execSql,\n        secretKey: input.targetSecretKey,\n        writerProjection: input.writerProjection,\n        ...verificationOptions,\n      })\n    ).keksByEpochId,\n    // The rotated key is wrapped only to verified current heads of the\n    // remaining linked containers, never to a server-listed epoch.\n    targets: verifiedDocumentWrapTargets({\n      linkedContainerIds: wrap.targetState.linkedContainerIds,\n      serverTargets: wrap.targetState.targets,\n      writerProjection: input.writerProjection,\n    }),\n  });\n}\n\nfunction assertLinkSetWriteKeksCurrent(\n  input: Pick<\n    Parameters<typeof buildMaterializedDocumentLinkSetMutationPlan>[0],\n    \"writerProjection\" | \"targetContainerProjection\" | \"operation\"\n  >,\n  linkedContainerIds: readonly string[],\n): void {\n  // Unlink can escape a stale branch; only recipients of the successor key must be current.\n  assertDocumentKekPathsCurrent(\n    input.writerProjection,\n    new Set(linkedContainerIds),\n  );\n  if (input.operation === \"link\") {\n    assertContainerKekPathCurrent(\n      input.targetContainerProjection.containerKeks,\n    );\n  }\n}\n"]}

package/workflows/documents/linkSet/linkSetAuthority.js

@@ -1,5 +1,5 @@
 import { assertContainerAuthorAccess, ContainerAuthorAccessError, } from "../../../data/containers/shared/authorAccess.js";
-import { readLinkedContainerIdsFromDocumentManifest } from "../../../data/documents/shared/projection.js";
+import { readLinkedContainerIdsFromDocumentManifest } from "../../../data/documents/shared/projection/index.js";
 import { resolveProjectionVerifier, } from "../../../data/documents/shared/types.js";
 import { collectContainerWriterProjectionPrincipalPolicies, } from "../../../data/keyingProjectionVerification/index.js";
 import { documentContainerProjections } from "../../../data/keyingProjectionVerification/document/documentContainerProjections.js";

package/workflows/documents/linkSet/linkSetBlobRewraps.js

@@ -1,6 +1,6 @@
 import { BLOB_CONTENT_KEY_WRAP_SUITE, wrapContentKey, } from "../../../internal/crypto/index.js";
 import { bytesToBase64 } from "../../../internal/encoding/index.js";
-import { deriveDocumentTargetFromProjection, unwrapContainerKekPath, } from "../../../data/documents/shared/projection.js";
+import { deriveDocumentTargetFromProjection, unwrapContainerKekPath, } from "../../../data/documents/shared/projection/index.js";
 import { assertEqualBytes, targetKey, } from "../../../data/documents/shared/readers.js";
 import { projectionVerificationOptions } from "../../../data/documents/shared/types.js";
 import { readCanonicalJson } from "../../../data/keying/canonicalJson.js";

package/workflows/documents/linkSet/linkSetProjectionSeed.js

@@ -1,4 +1,4 @@
-import { assertDocumentWriterProjectionConsistent } from "../../../data/documents/shared/projection.js";
+import { assertDocumentWriterProjectionConsistent } from "../../../data/documents/shared/projection/index.js";
 import { mergeProjectionPolicyEvidence } from "../../../data/keyingProjectionVerification/principalPolicy/mergeProjectionPolicyEvidence.js";
 function uniqueManifestBundles(bundles) {
     const byHash = new Map();

package/workflows/documents/linkSet/linkSetRemote.js

@@ -1,5 +1,5 @@
-import { acknowledgeDocumentMutation } from "../../../data/documents/shared/mutationAcknowledgement.js";
 import { persistedDocumentLinkSetMutationStateFromResponse } from "../../../data/documents/shared/responses.js";
+import { acknowledgeDocumentMutation } from "../../../data/documents/shared/sync/mutationAcknowledgement.js";
 import { nullOnProjectionVerificationCancellation, requireProjectionUserKeyResolver, } from "../../../data/keyingProjectionVerification/index.js";
 import { recordDocumentAuthorAccessFailure } from "../authorAccessFailure.js";
 import { completeLinkSetMutationRequest } from "../rotationBaseline.js";

package/workflows/documents/linkSet/linkSetRemote.js.map

@@ -1 +1 @@
-{"version":3,"file":"linkSetRemote.js","sourceRoot":"","sources":["linkSetRemote.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AACrG,OAAO,EAAE,iDAAiD,EAAE,MAAM,0CAA0C,CAAC;AAU7G,OAAO,EACL,wCAAwC,EAGxC,gCAAgC,GACjC,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,iCAAiC,EAAE,MAAM,wBAAwB,CAAC;AAE3E,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,4CAA4C,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAEtE,KAAK,UAAU,qBAAqB,CAAC,KAQpC;IACC,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5B,+DAA+D;IAC/D,MAAM,QAAQ,GACZ,KAAK,CAAC,SAAS,KAAK,MAAM;QACxB,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9C,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE;QAC7D,qCAAqC,EAAE,KAAK,CAAC,sBAAsB;KACpE,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,SAAS,EAAE,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAOD,0EAA0E;AAC1E,2EAA2E;AAC3E,sEAAsE;AACtE,KAAK,UAAU,sBAAsB,CAAc,KAKlD;IACC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE,CAAC;IACnD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,OAAO;QACL,OAAO,EAAE;YACP,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB;QACD,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,SAAqC,EACrC,UAAkB;IAElB,OAAO,sBAAsB,CAAC;QAC5B,qBAAqB,EAAE,SAAS,CAAC,iCAAiC,CAAC,IAAI,CACrE,SAAS,EACT,UAAU,EACV,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,+BAA+B,CACtC,SAAqC,EACrC,WAAmB;IAEnB,OAAO,sBAAsB,CAAC;QAC5B,qBAAqB,EAAE,SAAS,CAAC,kCAAkC,CAAC,IAAI,CACtE,SAAS,EACT,WAAW,EACX,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,6BAA6B,CAAC,KAe5C;IACC,MAAM,cAAc,GAAG,iDAAiD,CACtE,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,QAAQ,CACf,CAAC;IACF,MAAM,2BAA2B,CAAC;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,aAAa;QACzB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,MAAM,2BAA2B,CAAC;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,gBAAgB;QACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,UAAU;QAC7C,iBAAiB,EAAE,KAAK,CAAC,gBAAgB,CAAC,iBAAiB;QAC3D,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;QAC7B,kBAAkB,EAAE;YAClB,GAAG,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB;SACxD;QACD,cAAc;QACd,IAAI,EAAE,KAAK,CAAC,aAAa;QACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAkB1C;IACC,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,wBAAwB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,wBAAwB,EAC9B,mCAAmC,CACpC,CAAC;IACF,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5D,8BAA8B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;QACjE,+BAA+B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,iBAAiB,CAAC;KAC1E,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,CAAC;QAChE,KAAK,MAAM,OAAO,IAAI,yBAAyB,CAAC;YAC9C,WAAW,CAAC,OAAO;YACnB,oBAAoB,CAAC,OAAO;SAC7B,CAAC,EAAE,CAAC;YACH,KAAK,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,gBAAgB,GAAG,WAAW,CAAC,UAAU,CAAC;IAChD,MAAM,yBAAyB,GAAG,oBAAoB,CAAC,UAAU,CAAC;IAClE,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAElD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,gBAAgB,GAAG,MAAM,4BAA4B,CACzD,EAAE,GAAG,KAAK,EAAE,wBAAwB,EAAE,QAAQ,EAAE,EAChD,gBAAgB,EAChB,yBAAyB,CAC1B,CAAC;IACF,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC;QACnD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;IAC5D,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,YAAY,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;QAC3C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,sBAAsB,EAAE,aAAa,CAAC,KAAK,CAAC,cAAc;QAC1D,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,6BAA6B,CAAC;QACnC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa;QACb,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ;QACR,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,yBAAyB;QACzB,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,wEAAwE;AACxE,4EAA4E;AAC5E,sDAAsD;AACtD,SAAS,yBAAyB,CAChC,QAA4D;IAE5D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAC7B,CAAC,OAAO,EAA6C,EAAE,CAAC,OAAO,KAAK,IAAI,CACzE,CAAC;IACF,OAAO;QACL,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC;QACtD,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,KAGC,EACD,gBAAkD,EAClD,yBAA4D;IAE5D,OAAO,iCAAiC,CACtC,GAAG,EAAE,CACH,wCAAwC,CAAC,GAAG,EAAE,CAC5C,4CAA4C,CAAC;QAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE,CAC9B,8BAA8B,CAAC;YAC7B,GAAG,KAAK;YACR,OAAO;YACP,yBAAyB;YACzB,gBAAgB;SACjB,CAAC;QACJ,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,yBAAyB;QACzB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,+BAA+B,EAC7B,KAAK,CAAC,+BAA+B;QACvC,gBAAgB;KACjB,CAAC,CACH,EACH,KAAK,CAAC,SAAS,CAChB,CAAC;AACJ,CAAC","sourcesContent":["import type { DocumentLinkSetMutationRequest } from \"@tearleads/validators/request\";\nimport type {\n  ContainerWriterProjectionResponse,\n  DocumentLinkSetMutationResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport { acknowledgeDocumentMutation } from \"../../../data/documents/shared/mutationAcknowledgement\";\nimport { persistedDocumentLinkSetMutationStateFromResponse } from \"../../../data/documents/shared/responses\";\nimport type {\n  DocumentCreateAuthor,\n  DocumentLinkSetFailureHandler,\n  DocumentLinkSetMutationApi,\n  DocumentLinkSetMutationFailure,\n  DocumentLinkSetMutationOperation,\n  DocumentSyncSubmitFailure,\n  RelinkRemoteDocumentResult,\n} from \"../../../data/documents/shared/types\";\nimport {\n  nullOnProjectionVerificationCancellation,\n  type ProjectionUserKeyResolver,\n  type ReferencedPrincipalPolicyWarmer,\n  requireProjectionUserKeyResolver,\n} from \"../../../data/keyingProjectionVerification\";\nimport type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\nimport { recordDocumentAuthorAccessFailure } from \"../authorAccessFailure\";\nimport type { SubtreePurgeRoot } from \"../purge/subtreePurgeScope\";\nimport { completeLinkSetMutationRequest } from \"../rotationBaseline\";\nimport { buildMaterializedDocumentLinkSetMutationPlan } from \"./index\";\nimport { prepareDocumentLinkBlobRewraps } from \"./linkSetBlobRewraps\";\nimport { seedLinkSetWriterProjection } from \"./linkSetProjectionSeed\";\n\nasync function submitLinkSetMutation(input: {\n  apiClient: DocumentLinkSetMutationApi;\n  documentId: string;\n  expectedOrganizationId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  operation: DocumentLinkSetMutationOperation;\n  request: DocumentLinkSetMutationRequest;\n  stillCurrent?: (() => boolean) | undefined;\n}): Promise<DocumentLinkSetMutationResponse | null> {\n  if (input.stillCurrent?.() === false) return null;\n  const { apiClient } = input;\n  // Preserve the HTTP failure for the durable move-intent queue.\n  const resultFn =\n    input.operation === \"link\"\n      ? apiClient.linkDocumentResult.bind(apiClient)\n      : apiClient.unlinkDocumentResult.bind(apiClient);\n  const result = await resultFn(input.documentId, input.request, {\n    expectedPaymentRequiredOrganizationId: input.expectedOrganizationId,\n  });\n  if (result.ok) {\n    return result.data;\n  }\n  input.onFailure?.({\n    code: result.code,\n    message: result.message,\n    status: result.status,\n  });\n  return null;\n}\n\ninterface LinkSetProjectionFetch<TProjection> {\n  failure: DocumentLinkSetMutationFailure | null;\n  projection: TProjection | null;\n}\n\n// Cold-cache projection fetches must keep their HTTP status: collapsing a\n// 403 to null would leave an access-denied link/unlink routinely retriable\n// instead of parking its move for the access-restored signal (row 7).\nasync function fetchLinkSetProjection<TProjection>(input: {\n  fetchProjectionResult: () => Promise<\n    | { readonly data: TProjection; readonly ok: true }\n    | DocumentSyncSubmitFailure\n  >;\n}): Promise<LinkSetProjectionFetch<TProjection>> {\n  const result = await input.fetchProjectionResult();\n  if (result.ok) {\n    return { failure: null, projection: result.data };\n  }\n  result.report();\n  return {\n    failure: {\n      code: result.code,\n      message: result.message,\n      status: result.status,\n    },\n    projection: null,\n  };\n}\n\nfunction fetchLinkSetDocumentProjection(\n  apiClient: DocumentLinkSetMutationApi,\n  documentId: string,\n): Promise<LinkSetProjectionFetch<DocumentWriterProjectionResponse>> {\n  return fetchLinkSetProjection({\n    fetchProjectionResult: apiClient.getDocumentWriterProjectionResult.bind(\n      apiClient,\n      documentId,\n      { reportErrors: false },\n    ),\n  });\n}\n\nfunction fetchLinkSetContainerProjection(\n  apiClient: DocumentLinkSetMutationApi,\n  containerId: string,\n): Promise<LinkSetProjectionFetch<ContainerWriterProjectionResponse>> {\n  return fetchLinkSetProjection({\n    fetchProjectionResult: apiClient.getContainerWriterProjectionResult.bind(\n      apiClient,\n      containerId,\n      { reportErrors: false },\n    ),\n  });\n}\n\nasync function completeRemoteDocumentLinkSet(input: {\n  completedPlan: Parameters<\n    typeof persistedDocumentLinkSetMutationStateFromResponse\n  >[0];\n  execSql: ExecSql;\n  materializedPlan: Awaited<\n    ReturnType<typeof buildMaterializedDocumentLinkSetMutationPlan>\n  >;\n  operation: DocumentLinkSetMutationOperation;\n  response: DocumentLinkSetMutationResponse;\n  stillCurrent?: (() => boolean) | undefined;\n  targetContainerId: string;\n  targetContainerProjection: ContainerWriterProjectionResponse;\n  writerProjection: DocumentWriterProjectionResponse;\n  apiClient: DocumentLinkSetMutationApi;\n}): Promise<RelinkRemoteDocumentResult | null> {\n  const persistedState = persistedDocumentLinkSetMutationStateFromResponse(\n    input.completedPlan,\n    input.response,\n  );\n  await acknowledgeDocumentMutation({\n    execSql: input.execSql,\n    plan: input.completedPlan,\n    stillCurrent: input.stillCurrent,\n  });\n  await seedLinkSetWriterProjection({\n    apiClient: input.apiClient,\n    execSql: input.execSql,\n    operation: input.operation,\n    priorProjection: input.writerProjection,\n    response: input.response,\n    targetContainerId: input.targetContainerId,\n    targetContainerProjection: input.targetContainerProjection,\n    stillCurrent: input.stillCurrent,\n  });\n  if (input.stillCurrent?.() === false) return null;\n  return {\n    contentKey: input.materializedPlan.contentKey,\n    contentKeyRotated: input.materializedPlan.contentKeyRotated,\n    documentId: input.response.id,\n    linkedContainerIds: [\n      ...input.materializedPlan.plan.state.linkedContainerIds,\n    ],\n    persistedState,\n    plan: input.completedPlan,\n    response: input.response,\n  };\n}\n\nexport async function relinkRemoteDocument(input: {\n  beforeSubmit?: (() => Promise<boolean>) | undefined;\n  apiClient: DocumentLinkSetMutationApi;\n  author: DocumentCreateAuthor;\n  contentKey?: Uint8Array | undefined;\n  documentId: string;\n  expectedSubtreeRoot?: SubtreePurgeRoot | undefined;\n  eventId?: string | undefined;\n  execSql: ExecSql;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  operation: DocumentLinkSetMutationOperation;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  rotationSnapshot?: Uint8Array | undefined;\n  signedAt?: string | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  targetContainerId: string;\n  targetSecretKey: Uint8Array;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n}): Promise<RelinkRemoteDocumentResult | null> {\n  if (input.operation === \"unlink\" && !input.rotationSnapshot) {\n    throw new Error(\n      \"Document unlink requires a proven full-history rotation snapshot\",\n    );\n  }\n  const resolveProjectionUserKey = requireProjectionUserKeyResolver(\n    input.resolveProjectionUserKey,\n    \"Remote document link-set mutation\",\n  );\n  const [writerFetch, targetContainerFetch] = await Promise.all([\n    fetchLinkSetDocumentProjection(input.apiClient, input.documentId),\n    fetchLinkSetContainerProjection(input.apiClient, input.targetContainerId),\n  ]);\n  if (!writerFetch.projection || !targetContainerFetch.projection) {\n    for (const failure of orderedProjectionFailures([\n      writerFetch.failure,\n      targetContainerFetch.failure,\n    ])) {\n      input.onFailure?.(failure);\n    }\n    return null;\n  }\n  const writerProjection = writerFetch.projection;\n  const targetContainerProjection = targetContainerFetch.projection;\n  if (input.stillCurrent?.() === false) return null;\n\n  const signedAt = input.signedAt ?? new Date().toISOString();\n  const materializedPlan = await prepareRemoteLinkSetMutation(\n    { ...input, resolveProjectionUserKey, signedAt },\n    writerProjection,\n    targetContainerProjection,\n  );\n  if (!materializedPlan) return null;\n  const request = await completeLinkSetMutationRequest({\n    author: input.author,\n    materializedPlan,\n    operation: input.operation,\n    rotationSnapshot: input.rotationSnapshot,\n    signedAt,\n  });\n  const completedPlan = { ...materializedPlan.plan, request };\n  if (input.beforeSubmit && !(await input.beforeSubmit())) return null;\n  const response = await submitLinkSetMutation({\n    apiClient: input.apiClient,\n    documentId: completedPlan.documentId,\n    expectedOrganizationId: completedPlan.state.organizationId,\n    onFailure: input.onFailure,\n    operation: input.operation,\n    request: completedPlan.request,\n    stillCurrent: input.stillCurrent,\n  });\n  if (!response) {\n    return null;\n  }\n  if (input.stillCurrent?.() === false) return null;\n  return completeRemoteDocumentLinkSet({\n    apiClient: input.apiClient,\n    completedPlan,\n    execSql: input.execSql,\n    materializedPlan,\n    operation: input.operation,\n    response,\n    stillCurrent: input.stillCurrent,\n    targetContainerId: input.targetContainerId,\n    targetContainerProjection,\n    writerProjection,\n  });\n}\n\n// Every projection failure reaches the handler: the queued-move accumulator\n// classifies a vanished container from ANY coded container 404, so a document\n// fetch failure must not hide a container one (or vice versa). A 403 is\n// delivered last, so a single-slot consumer keeps the denial that parks the\n// move (row 7) while the accumulator still sees both.\nfunction orderedProjectionFailures(\n  failures: readonly (DocumentLinkSetMutationFailure | null)[],\n): DocumentLinkSetMutationFailure[] {\n  const present = failures.filter(\n    (failure): failure is DocumentLinkSetMutationFailure => failure !== null,\n  );\n  return [\n    ...present.filter((failure) => failure.status !== 403),\n    ...present.filter((failure) => failure.status === 403),\n  ];\n}\n\nfunction prepareRemoteLinkSetMutation(\n  input: Parameters<typeof relinkRemoteDocument>[0] & {\n    resolveProjectionUserKey: ProjectionUserKeyResolver;\n    signedAt: string;\n  },\n  writerProjection: DocumentWriterProjectionResponse,\n  targetContainerProjection: ContainerWriterProjectionResponse,\n) {\n  return recordDocumentAuthorAccessFailure(\n    () =>\n      nullOnProjectionVerificationCancellation(() =>\n        buildMaterializedDocumentLinkSetMutationPlan({\n          author: input.author,\n          expectedSubtreeRoot: input.expectedSubtreeRoot,\n          prepareBlobRewraps: (targets) =>\n            prepareDocumentLinkBlobRewraps({\n              ...input,\n              targets,\n              targetContainerProjection,\n              writerProjection,\n            }),\n          contentKey: input.contentKey,\n          eventId: input.eventId,\n          execSql: input.execSql,\n          operation: input.operation,\n          resolveProjectionUserKey: input.resolveProjectionUserKey,\n          signedAt: input.signedAt,\n          stillCurrent: input.stillCurrent,\n          targetContainerProjection,\n          targetSecretKey: input.targetSecretKey,\n          warmReferencedPrincipalPolicies:\n            input.warmReferencedPrincipalPolicies,\n          writerProjection,\n        }),\n      ),\n    input.onFailure,\n  );\n}\n"]}
+{"version":3,"file":"linkSetRemote.js","sourceRoot":"","sources":["linkSetRemote.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iDAAiD,EAAE,MAAM,0CAA0C,CAAC;AAC7G,OAAO,EAAE,2BAA2B,EAAE,MAAM,6DAA6D,CAAC;AAU1G,OAAO,EACL,wCAAwC,EAGxC,gCAAgC,GACjC,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,iCAAiC,EAAE,MAAM,wBAAwB,CAAC;AAE3E,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,4CAA4C,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAEtE,KAAK,UAAU,qBAAqB,CAAC,KAQpC;IACC,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5B,+DAA+D;IAC/D,MAAM,QAAQ,GACZ,KAAK,CAAC,SAAS,KAAK,MAAM;QACxB,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9C,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE;QAC7D,qCAAqC,EAAE,KAAK,CAAC,sBAAsB;KACpE,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,SAAS,EAAE,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAOD,0EAA0E;AAC1E,2EAA2E;AAC3E,sEAAsE;AACtE,KAAK,UAAU,sBAAsB,CAAc,KAKlD;IACC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE,CAAC;IACnD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,OAAO;QACL,OAAO,EAAE;YACP,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB;QACD,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,SAAqC,EACrC,UAAkB;IAElB,OAAO,sBAAsB,CAAC;QAC5B,qBAAqB,EAAE,SAAS,CAAC,iCAAiC,CAAC,IAAI,CACrE,SAAS,EACT,UAAU,EACV,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,+BAA+B,CACtC,SAAqC,EACrC,WAAmB;IAEnB,OAAO,sBAAsB,CAAC;QAC5B,qBAAqB,EAAE,SAAS,CAAC,kCAAkC,CAAC,IAAI,CACtE,SAAS,EACT,WAAW,EACX,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,6BAA6B,CAAC,KAe5C;IACC,MAAM,cAAc,GAAG,iDAAiD,CACtE,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,QAAQ,CACf,CAAC;IACF,MAAM,2BAA2B,CAAC;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,aAAa;QACzB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,MAAM,2BAA2B,CAAC;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,gBAAgB;QACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,UAAU;QAC7C,iBAAiB,EAAE,KAAK,CAAC,gBAAgB,CAAC,iBAAiB;QAC3D,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;QAC7B,kBAAkB,EAAE;YAClB,GAAG,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB;SACxD;QACD,cAAc;QACd,IAAI,EAAE,KAAK,CAAC,aAAa;QACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAkB1C;IACC,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,wBAAwB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,wBAAwB,EAC9B,mCAAmC,CACpC,CAAC;IACF,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5D,8BAA8B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;QACjE,+BAA+B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,iBAAiB,CAAC;KAC1E,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,CAAC;QAChE,KAAK,MAAM,OAAO,IAAI,yBAAyB,CAAC;YAC9C,WAAW,CAAC,OAAO;YACnB,oBAAoB,CAAC,OAAO;SAC7B,CAAC,EAAE,CAAC;YACH,KAAK,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,gBAAgB,GAAG,WAAW,CAAC,UAAU,CAAC;IAChD,MAAM,yBAAyB,GAAG,oBAAoB,CAAC,UAAU,CAAC;IAClE,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAElD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,gBAAgB,GAAG,MAAM,4BAA4B,CACzD,EAAE,GAAG,KAAK,EAAE,wBAAwB,EAAE,QAAQ,EAAE,EAChD,gBAAgB,EAChB,yBAAyB,CAC1B,CAAC;IACF,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC;QACnD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;IAC5D,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,YAAY,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;QAC3C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,sBAAsB,EAAE,aAAa,CAAC,KAAK,CAAC,cAAc;QAC1D,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,6BAA6B,CAAC;QACnC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa;QACb,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ;QACR,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,yBAAyB;QACzB,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,wEAAwE;AACxE,4EAA4E;AAC5E,sDAAsD;AACtD,SAAS,yBAAyB,CAChC,QAA4D;IAE5D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAC7B,CAAC,OAAO,EAA6C,EAAE,CAAC,OAAO,KAAK,IAAI,CACzE,CAAC;IACF,OAAO;QACL,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC;QACtD,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,KAGC,EACD,gBAAkD,EAClD,yBAA4D;IAE5D,OAAO,iCAAiC,CACtC,GAAG,EAAE,CACH,wCAAwC,CAAC,GAAG,EAAE,CAC5C,4CAA4C,CAAC;QAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE,CAC9B,8BAA8B,CAAC;YAC7B,GAAG,KAAK;YACR,OAAO;YACP,yBAAyB;YACzB,gBAAgB;SACjB,CAAC;QACJ,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,yBAAyB;QACzB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,+BAA+B,EAC7B,KAAK,CAAC,+BAA+B;QACvC,gBAAgB;KACjB,CAAC,CACH,EACH,KAAK,CAAC,SAAS,CAChB,CAAC;AACJ,CAAC","sourcesContent":["import type { DocumentLinkSetMutationRequest } from \"@tearleads/validators/request\";\nimport type {\n  ContainerWriterProjectionResponse,\n  DocumentLinkSetMutationResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport { persistedDocumentLinkSetMutationStateFromResponse } from \"../../../data/documents/shared/responses\";\nimport { acknowledgeDocumentMutation } from \"../../../data/documents/shared/sync/mutationAcknowledgement\";\nimport type {\n  DocumentCreateAuthor,\n  DocumentLinkSetFailureHandler,\n  DocumentLinkSetMutationApi,\n  DocumentLinkSetMutationFailure,\n  DocumentLinkSetMutationOperation,\n  DocumentSyncSubmitFailure,\n  RelinkRemoteDocumentResult,\n} from \"../../../data/documents/shared/types\";\nimport {\n  nullOnProjectionVerificationCancellation,\n  type ProjectionUserKeyResolver,\n  type ReferencedPrincipalPolicyWarmer,\n  requireProjectionUserKeyResolver,\n} from \"../../../data/keyingProjectionVerification\";\nimport type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\nimport { recordDocumentAuthorAccessFailure } from \"../authorAccessFailure\";\nimport type { SubtreePurgeRoot } from \"../purge/subtreePurgeScope\";\nimport { completeLinkSetMutationRequest } from \"../rotationBaseline\";\nimport { buildMaterializedDocumentLinkSetMutationPlan } from \"./index\";\nimport { prepareDocumentLinkBlobRewraps } from \"./linkSetBlobRewraps\";\nimport { seedLinkSetWriterProjection } from \"./linkSetProjectionSeed\";\n\nasync function submitLinkSetMutation(input: {\n  apiClient: DocumentLinkSetMutationApi;\n  documentId: string;\n  expectedOrganizationId: string;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  operation: DocumentLinkSetMutationOperation;\n  request: DocumentLinkSetMutationRequest;\n  stillCurrent?: (() => boolean) | undefined;\n}): Promise<DocumentLinkSetMutationResponse | null> {\n  if (input.stillCurrent?.() === false) return null;\n  const { apiClient } = input;\n  // Preserve the HTTP failure for the durable move-intent queue.\n  const resultFn =\n    input.operation === \"link\"\n      ? apiClient.linkDocumentResult.bind(apiClient)\n      : apiClient.unlinkDocumentResult.bind(apiClient);\n  const result = await resultFn(input.documentId, input.request, {\n    expectedPaymentRequiredOrganizationId: input.expectedOrganizationId,\n  });\n  if (result.ok) {\n    return result.data;\n  }\n  input.onFailure?.({\n    code: result.code,\n    message: result.message,\n    status: result.status,\n  });\n  return null;\n}\n\ninterface LinkSetProjectionFetch<TProjection> {\n  failure: DocumentLinkSetMutationFailure | null;\n  projection: TProjection | null;\n}\n\n// Cold-cache projection fetches must keep their HTTP status: collapsing a\n// 403 to null would leave an access-denied link/unlink routinely retriable\n// instead of parking its move for the access-restored signal (row 7).\nasync function fetchLinkSetProjection<TProjection>(input: {\n  fetchProjectionResult: () => Promise<\n    | { readonly data: TProjection; readonly ok: true }\n    | DocumentSyncSubmitFailure\n  >;\n}): Promise<LinkSetProjectionFetch<TProjection>> {\n  const result = await input.fetchProjectionResult();\n  if (result.ok) {\n    return { failure: null, projection: result.data };\n  }\n  result.report();\n  return {\n    failure: {\n      code: result.code,\n      message: result.message,\n      status: result.status,\n    },\n    projection: null,\n  };\n}\n\nfunction fetchLinkSetDocumentProjection(\n  apiClient: DocumentLinkSetMutationApi,\n  documentId: string,\n): Promise<LinkSetProjectionFetch<DocumentWriterProjectionResponse>> {\n  return fetchLinkSetProjection({\n    fetchProjectionResult: apiClient.getDocumentWriterProjectionResult.bind(\n      apiClient,\n      documentId,\n      { reportErrors: false },\n    ),\n  });\n}\n\nfunction fetchLinkSetContainerProjection(\n  apiClient: DocumentLinkSetMutationApi,\n  containerId: string,\n): Promise<LinkSetProjectionFetch<ContainerWriterProjectionResponse>> {\n  return fetchLinkSetProjection({\n    fetchProjectionResult: apiClient.getContainerWriterProjectionResult.bind(\n      apiClient,\n      containerId,\n      { reportErrors: false },\n    ),\n  });\n}\n\nasync function completeRemoteDocumentLinkSet(input: {\n  completedPlan: Parameters<\n    typeof persistedDocumentLinkSetMutationStateFromResponse\n  >[0];\n  execSql: ExecSql;\n  materializedPlan: Awaited<\n    ReturnType<typeof buildMaterializedDocumentLinkSetMutationPlan>\n  >;\n  operation: DocumentLinkSetMutationOperation;\n  response: DocumentLinkSetMutationResponse;\n  stillCurrent?: (() => boolean) | undefined;\n  targetContainerId: string;\n  targetContainerProjection: ContainerWriterProjectionResponse;\n  writerProjection: DocumentWriterProjectionResponse;\n  apiClient: DocumentLinkSetMutationApi;\n}): Promise<RelinkRemoteDocumentResult | null> {\n  const persistedState = persistedDocumentLinkSetMutationStateFromResponse(\n    input.completedPlan,\n    input.response,\n  );\n  await acknowledgeDocumentMutation({\n    execSql: input.execSql,\n    plan: input.completedPlan,\n    stillCurrent: input.stillCurrent,\n  });\n  await seedLinkSetWriterProjection({\n    apiClient: input.apiClient,\n    execSql: input.execSql,\n    operation: input.operation,\n    priorProjection: input.writerProjection,\n    response: input.response,\n    targetContainerId: input.targetContainerId,\n    targetContainerProjection: input.targetContainerProjection,\n    stillCurrent: input.stillCurrent,\n  });\n  if (input.stillCurrent?.() === false) return null;\n  return {\n    contentKey: input.materializedPlan.contentKey,\n    contentKeyRotated: input.materializedPlan.contentKeyRotated,\n    documentId: input.response.id,\n    linkedContainerIds: [\n      ...input.materializedPlan.plan.state.linkedContainerIds,\n    ],\n    persistedState,\n    plan: input.completedPlan,\n    response: input.response,\n  };\n}\n\nexport async function relinkRemoteDocument(input: {\n  beforeSubmit?: (() => Promise<boolean>) | undefined;\n  apiClient: DocumentLinkSetMutationApi;\n  author: DocumentCreateAuthor;\n  contentKey?: Uint8Array | undefined;\n  documentId: string;\n  expectedSubtreeRoot?: SubtreePurgeRoot | undefined;\n  eventId?: string | undefined;\n  execSql: ExecSql;\n  onFailure?: DocumentLinkSetFailureHandler | undefined;\n  operation: DocumentLinkSetMutationOperation;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  rotationSnapshot?: Uint8Array | undefined;\n  signedAt?: string | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  targetContainerId: string;\n  targetSecretKey: Uint8Array;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n}): Promise<RelinkRemoteDocumentResult | null> {\n  if (input.operation === \"unlink\" && !input.rotationSnapshot) {\n    throw new Error(\n      \"Document unlink requires a proven full-history rotation snapshot\",\n    );\n  }\n  const resolveProjectionUserKey = requireProjectionUserKeyResolver(\n    input.resolveProjectionUserKey,\n    \"Remote document link-set mutation\",\n  );\n  const [writerFetch, targetContainerFetch] = await Promise.all([\n    fetchLinkSetDocumentProjection(input.apiClient, input.documentId),\n    fetchLinkSetContainerProjection(input.apiClient, input.targetContainerId),\n  ]);\n  if (!writerFetch.projection || !targetContainerFetch.projection) {\n    for (const failure of orderedProjectionFailures([\n      writerFetch.failure,\n      targetContainerFetch.failure,\n    ])) {\n      input.onFailure?.(failure);\n    }\n    return null;\n  }\n  const writerProjection = writerFetch.projection;\n  const targetContainerProjection = targetContainerFetch.projection;\n  if (input.stillCurrent?.() === false) return null;\n\n  const signedAt = input.signedAt ?? new Date().toISOString();\n  const materializedPlan = await prepareRemoteLinkSetMutation(\n    { ...input, resolveProjectionUserKey, signedAt },\n    writerProjection,\n    targetContainerProjection,\n  );\n  if (!materializedPlan) return null;\n  const request = await completeLinkSetMutationRequest({\n    author: input.author,\n    materializedPlan,\n    operation: input.operation,\n    rotationSnapshot: input.rotationSnapshot,\n    signedAt,\n  });\n  const completedPlan = { ...materializedPlan.plan, request };\n  if (input.beforeSubmit && !(await input.beforeSubmit())) return null;\n  const response = await submitLinkSetMutation({\n    apiClient: input.apiClient,\n    documentId: completedPlan.documentId,\n    expectedOrganizationId: completedPlan.state.organizationId,\n    onFailure: input.onFailure,\n    operation: input.operation,\n    request: completedPlan.request,\n    stillCurrent: input.stillCurrent,\n  });\n  if (!response) {\n    return null;\n  }\n  if (input.stillCurrent?.() === false) return null;\n  return completeRemoteDocumentLinkSet({\n    apiClient: input.apiClient,\n    completedPlan,\n    execSql: input.execSql,\n    materializedPlan,\n    operation: input.operation,\n    response,\n    stillCurrent: input.stillCurrent,\n    targetContainerId: input.targetContainerId,\n    targetContainerProjection,\n    writerProjection,\n  });\n}\n\n// Every projection failure reaches the handler: the queued-move accumulator\n// classifies a vanished container from ANY coded container 404, so a document\n// fetch failure must not hide a container one (or vice versa). A 403 is\n// delivered last, so a single-slot consumer keeps the denial that parks the\n// move (row 7) while the accumulator still sees both.\nfunction orderedProjectionFailures(\n  failures: readonly (DocumentLinkSetMutationFailure | null)[],\n): DocumentLinkSetMutationFailure[] {\n  const present = failures.filter(\n    (failure): failure is DocumentLinkSetMutationFailure => failure !== null,\n  );\n  return [\n    ...present.filter((failure) => failure.status !== 403),\n    ...present.filter((failure) => failure.status === 403),\n  ];\n}\n\nfunction prepareRemoteLinkSetMutation(\n  input: Parameters<typeof relinkRemoteDocument>[0] & {\n    resolveProjectionUserKey: ProjectionUserKeyResolver;\n    signedAt: string;\n  },\n  writerProjection: DocumentWriterProjectionResponse,\n  targetContainerProjection: ContainerWriterProjectionResponse,\n) {\n  return recordDocumentAuthorAccessFailure(\n    () =>\n      nullOnProjectionVerificationCancellation(() =>\n        buildMaterializedDocumentLinkSetMutationPlan({\n          author: input.author,\n          expectedSubtreeRoot: input.expectedSubtreeRoot,\n          prepareBlobRewraps: (targets) =>\n            prepareDocumentLinkBlobRewraps({\n              ...input,\n              targets,\n              targetContainerProjection,\n              writerProjection,\n            }),\n          contentKey: input.contentKey,\n          eventId: input.eventId,\n          execSql: input.execSql,\n          operation: input.operation,\n          resolveProjectionUserKey: input.resolveProjectionUserKey,\n          signedAt: input.signedAt,\n          stillCurrent: input.stillCurrent,\n          targetContainerProjection,\n          targetSecretKey: input.targetSecretKey,\n          warmReferencedPrincipalPolicies:\n            input.warmReferencedPrincipalPolicies,\n          writerProjection,\n        }),\n      ),\n    input.onFailure,\n  );\n}\n"]}

package/workflows/documents/purge/index.js

@@ -1,6 +1,6 @@
 import { computeAccessEventBodyHash, KeyingVerificationError, signAccessEvent, } from "../../../internal/crypto/index.js";
 import { DOCUMENT_NOT_FOUND_ERROR_CODE, } from "../../../internal/validators/response/index.js";
-import { containerPathRefs, readLinkedContainerIdsFromDocumentManifest, } from "../../../data/documents/shared/projection.js";
+import { containerPathRefs, readLinkedContainerIdsFromDocumentManifest, } from "../../../data/documents/shared/projection/index.js";
 import { assertDocumentManifestBundleConsistent, readManifestContainerId, } from "../../../data/documents/shared/readers.js";
 import { readCanonicalJson, readCanonicalRecord, } from "../../../data/keying/canonicalJson.js";
 import { verifyDocumentPurgeProof, verifyDocumentPurgeProofBaseline, verifyDocumentWriterProjection, } from "../../../data/keyingProjectionVerification/index.js";

package/workflows/documents/sync/index.js

@@ -1,7 +1,7 @@
 import { KeyingVerificationError } from "../../../internal/crypto/index.js";
 import { isDocumentUpdateCreatedEvent } from "../../../data/documents/documentSync.js";
-import { isDocumentSyncUpdateIsolationError } from "../../../data/documents/shared/documentSyncUpdateIsolation.js";
-import { InvalidDocumentSyncPullContinuationError, } from "../../../data/documents/shared/syncPagination.js";
+import { isDocumentSyncUpdateIsolationError } from "../../../data/documents/shared/sync/documentSyncUpdateIsolation.js";
+import { InvalidDocumentSyncPullContinuationError, } from "../../../data/documents/shared/sync/syncPagination.js";
 import { isProjectionVerificationCancelledError, requireProjectionUserKeyResolver, } from "../../../data/keyingProjectionVerification/index.js";
 import { createVerifiedRemoteDocumentDeletionHandler } from "../purge/index.js";
 import { assertRawContinuationCanRetry, resolveSyncAttemptWriterProjection, submitDocumentSyncAttemptIfAllowed, } from "../syncFailures/index.js";

package/workflows/documents/sync/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,kCAAkC,EAAE,MAAM,4DAA4D,CAAC;AAChH,OAAO,EAEL,wCAAwC,GACzC,MAAM,+CAA+C,CAAC;AAKvD,OAAO,EACL,sCAAsC,EAEtC,gCAAgC,GACjC,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,2CAA2C,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAClC,kCAAkC,GACnC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,EAEL,gCAAgC,GACjC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EAAE,kCAAkC,EAAE,MAAM,uBAAuB,CAAC;AAE3E,MAAM,UAAU,sBAAsB,CACpC,MAA8B,EAC9B,UAAqC;IAErC,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,KAAK,EAAE,EAAE,CACR,4BAA4B,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,CACzE,CAAC;AACJ,CAAC;AACD;;;GAGG;AACH,SAAS,4BAA4B,CAAC,KAA8B;IAClE,KAAK,CAAC,SAAS,CAAC,6BAA6B,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,8BAA8B,CAAC,KAKvC;IACC,OAAO,CACL,CAAC,KAAK,CAAC,2BAA2B;QAClC,CAAC,KAAK,CAAC,gBAAgB,CAAC,2BAA2B;QACnD,KAAK,CAAC,IAAI,CAAC,qBAAqB,KAAK,SAAS;QAC9C,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,IASvC;IACC,IAAI,CAAC;QACH,OAAO,MAAM,kCAAkC,CAAC;YAC9C,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,8BAA8B,EAAE,8BAA8B,CAAC;gBAC7D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;gBAC7D,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC;YACF,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;YAChC,qBAAqB,EAAE,IAAI,CAAC,gBAAgB,EAAE,aAAa;YAC3D,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB;YAClD,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,qBAAqB,EAAE,GAAG,EAAE,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;YACxE,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,uBAAuB;YAC1D,6BAA6B,EAAE,IAAI,CAAC,IAAI,CAAC,6BAA6B;YACtE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YAClC,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,uBAAuB;YAC1D,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI;YAChC,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;YACzD,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;YACpC,+BAA+B,EAC7B,IAAI,CAAC,IAAI,CAAC,+BAA+B;SAC5C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,wCAAwC;YACzD,IAAI,CAAC,gBAAgB,KAAK,SAAS;YACnC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,EAC/B,CAAC;YACD,OAAO,OAAgB,CAAC;QAC1B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAA8B,EAC9B,yBAAkC,EAClC,wBAAiE;IAEjE,OAAO,kCAAkC,CAAC;QACxC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,iBAAiB,EAAE,wBAAwB,CACzC,KAAK,EACL,yBAAyB,CAC1B;QACD,wBAAwB;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC;AACD,SAAS,kCAAkC,CAAC,KAA8B;IACxE,OAAO,gCAAgC,CACrC,KAAK,CAAC,wBAAwB,EAC9B,sBAAsB,CACvB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAA8B,EAC9B,gBAA0D;IAE1D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,KAAK,CAAC,6BAA6B,EAAE,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,KAA8B,EAC9B,wBAAmD;IAQnD,IAAI,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,gCAAgC,CACtD,KAAK,EACL,wBAAwB,CACzB,CAAC;QACF,IAAI,SAAS,EAAE,IAAI,KAAK,WAAW;YAAE,OAAO,SAAS,CAAC;QACtD,IAAI,SAAS,EAAE,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YACvE,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,CAAC,CAAC,KAAK,YAAY,wCAAwC,CAAC;YAC5D,gBAAgB,KAAK,SAAS;YAC9B,KAAK,CAAC,WAAW,KAAK,KAAK,EAC3B,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,yBAAyB,CAAC,KAGlC;IACC,OAAO,CACL,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,IAA6B,EAC7B,YAAsD;IAEtD,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,OAAO;QACb,gBAAgB,EAAE,MAAM,oBAAoB,CAAC,IAAI,EAAE,YAAY,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAO3C;IACC,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;QACnD,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;QAC1C,0BAA0B,EAAE,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAI;KACxE,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,MAAM,wBAAwB,CACrD,KAAK,CAAC,IAAI,EACV,kBAAkB,EAClB,KAAK,CAAC,KAAK,CAAC,wBAAwB,CACrC,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;QAC5C,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;QAC1C,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;QAC9C,2BAA2B,EAAE,KAAK,CAAC,KAAK,CAAC,2BAA2B;QACpE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,yBAAyB,EAAE,kBAAkB;QAC7C,gBAAgB;KACjB,CAAC,CAAC;IACH,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC;QAC/C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,yBAAyB,CACvC,KAAK,CAAC,KAAK,CAAC,cAAc,EAC1B,gBAAgB,CACjB;QACD,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;QAC9C,2BAA2B,EAAE,KAAK,CAAC,KAAK,CAAC,2BAA2B;QACpE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,yBAAyB,EAAE,kBAAkB;KAC9C,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QACvE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,6BAA6B,CAC3B,KAAK,CAAC,IAAI,CAAC,WAAW,EACtB,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAC7B,CAAC;QACF,OAAO,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,mCAAmC,CAAC,CAAC;QAClE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;QACpD,2EAA2E;QAC3E,4EAA4E;QAC5E,0EAA0E;QAC1E,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,0BAA0B,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC;QACtD,gBAAgB;QAChB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,0BAA0B,EAAE,KAAK,CAAC,KAAK,CAAC,0BAA0B;QAClE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,gBAAgB,EAAE,gBAAgB,CAAC,gBAAgB;KACpD,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;KAC9D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,KAA8B;IAE9B,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,wBAAwB,GAAG,kCAAkC,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,CAAC,CAAC;IACtB,IAAI,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;IAChD,MAAM,gBAAgB,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnE,IAAI,0BAA0B,GAAG,IAAI,GAAG,EAA+B,CAAC;IACxE,IAAI,2BAA2B,GAAG,KAAK,CAAC;IACxC,IAAI,wBAAwB,GAAG,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC;IAC9D,MAAM,aAAa,GAAG,MAAM,4BAA4B,CACtD,KAAK,EACL,wBAAwB,CACzB,CAAC;IACF,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,aAAa,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC;IACpE,IAAI,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAC;IACtD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC;YACjD,OAAO;YACP,WAAW;YACX,gBAAgB;YAChB,wBAAwB;YACxB,KAAK,EAAE;gBACL,cAAc;gBACd,gBAAgB;gBAChB,0BAA0B;gBAC1B,2BAA2B;gBAC3B,wBAAwB;aACzB;YACD,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,wBAAwB,GAAG,IAAI,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAC5C,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC;YAClD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClC,2BAA2B,GAAG,IAAI,CAAC;YACnC,SAAS;QACX,CAAC;QACD,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC;QAC7C,cAAc,GAAG,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,8BAA8B,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA8B;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,0BAA0B,CAAC;YACtC,GAAG,KAAK;YACR,uBAAuB,EAAE,2CAA2C,CAAC;gBACnE,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,sBAAsB,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;gBACnD,kBAAkB,EAAE,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,EAAE;oBACvD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;wBAAE,OAAO;oBAC7C,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC;wBACnC,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,yDAAyD,CAC1D,CAAC;oBACJ,CAAC;oBACD,OAAO,KAAK,CAAC,uBAAuB,CAAC;wBACnC,gBAAgB;wBAChB,UAAU;qBACX,CAAC,CAAC;gBACL,CAAC;gBACD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;gBACxD,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;aACvE,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,sCAAsC,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/D,IACE,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;YAChC,kCAAkC,CAAC,KAAK,CAAC,EACzC,CAAC;YACD,MAAM,KAAK,CAAC,gCAAgC,EAAE,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type { DocumentWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { isDocumentUpdateCreatedEvent } from \"../../../data/documents/documentSync\";\nimport { isDocumentSyncUpdateIsolationError } from \"../../../data/documents/shared/documentSyncUpdateIsolation\";\nimport {\n  type DocumentSyncPullContinuation,\n  InvalidDocumentSyncPullContinuationError,\n} from \"../../../data/documents/shared/syncPagination\";\nimport type {\n  MaterializedDocumentSyncPlan,\n  SyncRemoteDocumentResult,\n} from \"../../../data/documents/shared/types\";\nimport {\n  isProjectionVerificationCancelledError,\n  type ProjectionUserKeyResolver,\n  requireProjectionUserKeyResolver,\n} from \"../../../data/keyingProjectionVerification\";\nimport type { PendingUpdateRecord } from \"../../../data/sqlite/documentPersistence\";\nimport { createVerifiedRemoteDocumentDeletionHandler } from \"../purge\";\nimport {\n  assertRawContinuationCanRetry,\n  resolveSyncAttemptWriterProjection,\n  submitDocumentSyncAttemptIfAllowed,\n} from \"../syncFailures\";\nimport {\n  abandonAfterRetryableConflicts,\n  abandonBlockedSync,\n} from \"../syncFailures/syncAbandon\";\nimport { recoverablePendingUpdates } from \"../syncPlan/syncPlanRequestBounds\";\nimport { requireStandaloneAncestorRepairs } from \"../syncRekeys/syncContainerRekeyPreparation\";\nimport {\n  type SyncRemoteDocumentInput,\n  tryPersistedReadOnlyDocumentSync,\n} from \"./readOnlySync\";\nimport {\n  planDocumentSyncAttempt,\n  projectionFailureHandler,\n} from \"./syncAttemptPlanning\";\nimport type {\n  RemoteDocumentSyncAttemptOutcome,\n  RemoteDocumentSyncAttemptState,\n} from \"./syncAttemptState\";\nimport { resolveSubmittedDocumentSyncResult } from \"./syncSubmittedResult\";\n\nexport function hasDocumentUpdateEvent(\n  events: ReadonlyArray<unknown>,\n  documentId: string | null | undefined,\n): boolean {\n  if (!documentId) return false;\n  return events.some(\n    (event) =>\n      isDocumentUpdateCreatedEvent(event) && event.documentId === documentId,\n  );\n}\n/**\n * A retryable stale-projection conflict means this writer projection is behind\n * the server. Evict only this document so the next attempt re-derives targets.\n */\nfunction evictStaleProjectionForRetry(input: SyncRemoteDocumentInput): void {\n  input.apiClient.evictDocumentWriterProjection?.(input.documentId);\n}\n\n/**\n * A pass may repair a covering-baseline rejection by regenerating queued\n * rotation checkpoints — but only when there is something to regenerate FROM\n * (a snapshot provider and queued checkpoint rows), the failed pass was not\n * already a heal or a regeneration (whose fresh baseline proves this device\n * is simply behind), and an attempt remains.\n */\nfunction canRegenerateQueuedCheckpoints(input: {\n  materializedPlan: MaterializedDocumentSyncPlan;\n  pendingUpdates: readonly PendingUpdateRecord[];\n  regenerateQueuedCheckpoints: boolean;\n  sync: SyncRemoteDocumentInput;\n}): boolean {\n  return (\n    !input.regenerateQueuedCheckpoints &&\n    !input.materializedPlan.healedStaleContentKeyBundle &&\n    input.sync.buildRotationSnapshot !== undefined &&\n    input.pendingUpdates.some((update) => update.sourceVersionVector != null)\n  );\n}\n\nasync function submitPlannedSyncAttempt(args: {\n  attempt: number;\n  materializedPlan: MaterializedDocumentSyncPlan;\n  maxAttempts: number;\n  pendingUpdates: readonly PendingUpdateRecord[];\n  pullContinuation?: DocumentSyncPullContinuation | undefined;\n  regenerateQueuedCheckpoints: boolean;\n  sync: SyncRemoteDocumentInput;\n  failureBlocksQueuedWrites: boolean;\n}) {\n  try {\n    return await submitDocumentSyncAttemptIfAllowed({\n      apiClient: args.sync.apiClient,\n      attempt: args.attempt,\n      canRegenerateQueuedCheckpoints: canRegenerateQueuedCheckpoints({\n        materializedPlan: args.materializedPlan,\n        pendingUpdates: args.pendingUpdates,\n        regenerateQueuedCheckpoints: args.regenerateQueuedCheckpoints,\n        sync: args.sync,\n      }),\n      documentId: args.sync.documentId,\n      expectedCommitLsnMode: args.pullContinuation?.commitLsnMode,\n      isRemoteSyncBlocked: args.sync.isRemoteSyncBlocked,\n      maxAttempts: args.maxAttempts,\n      onInlineRepairRefused: () => requireStandaloneAncestorRepairs(args.sync),\n      onRemoteDocumentDeleted: args.sync.onRemoteDocumentDeleted,\n      onOutgoingUpdatesMaterialized: args.sync.onOutgoingUpdatesMaterialized,\n      onSyncTrace: args.sync.onSyncTrace,\n      onTerminalSubmitFailure: args.sync.onTerminalSubmitFailure,\n      pendingUpdates: args.pendingUpdates,\n      plan: args.materializedPlan.plan,\n      failureBlocksQueuedWrites: args.failureBlocksQueuedWrites,\n      stillCurrent: args.sync.stillCurrent,\n      warmReferencedPrincipalPolicies:\n        args.sync.warmReferencedPrincipalPolicies,\n    });\n  } catch (error) {\n    if (\n      error instanceof InvalidDocumentSyncPullContinuationError &&\n      args.pullContinuation !== undefined &&\n      args.sync.historyMode !== \"raw\"\n    ) {\n      return \"retry\" as const;\n    }\n    throw error;\n  }\n}\n\nfunction resolveAttemptProjection(\n  input: SyncRemoteDocumentInput,\n  failureBlocksQueuedWrites: boolean,\n  reusableWriterProjection: DocumentWriterProjectionResponse | null,\n) {\n  return resolveSyncAttemptWriterProjection({\n    apiClient: input.apiClient,\n    documentId: input.documentId,\n    onRemoteDocumentDeleted: input.onRemoteDocumentDeleted,\n    onSyncAbandoned: input.onSyncAbandoned,\n    onSyncTrace: input.onSyncTrace,\n    onTerminalFailure: projectionFailureHandler(\n      input,\n      failureBlocksQueuedWrites,\n    ),\n    reusableWriterProjection,\n    stillCurrent: input.stillCurrent,\n  });\n}\nfunction resolveRemoteSyncProjectionUserKey(input: SyncRemoteDocumentInput) {\n  return requireProjectionUserKeyResolver(\n    input.resolveProjectionUserKey,\n    \"Remote document sync\",\n  );\n}\n\nasync function invalidatePullCursor(\n  input: SyncRemoteDocumentInput,\n  pullContinuation: DocumentSyncPullContinuation | undefined,\n): Promise<undefined> {\n  if (pullContinuation !== undefined) {\n    await input.onPullContinuationInvalidated?.(pullContinuation);\n  }\n  return undefined;\n}\n\nasync function preparePersistedDocumentSync(\n  input: SyncRemoteDocumentInput,\n  resolveProjectionUserKey: ProjectionUserKeyResolver,\n): Promise<\n  | { readonly kind: \"completed\"; result: SyncRemoteDocumentResult | null }\n  | {\n      readonly kind: \"continue\";\n      pullContinuation: DocumentSyncPullContinuation | undefined;\n    }\n> {\n  let pullContinuation = input.pullContinuation;\n  try {\n    const persisted = await tryPersistedReadOnlyDocumentSync(\n      input,\n      resolveProjectionUserKey,\n    );\n    if (persisted?.kind === \"completed\") return persisted;\n    if (persisted?.kind === \"not_completed\" && input.historyMode !== \"raw\") {\n      pullContinuation = await invalidatePullCursor(input, pullContinuation);\n    }\n  } catch (error) {\n    if (\n      !(error instanceof InvalidDocumentSyncPullContinuationError) ||\n      pullContinuation === undefined ||\n      input.historyMode === \"raw\"\n    ) {\n      throw error;\n    }\n    pullContinuation = await invalidatePullCursor(input, pullContinuation);\n  }\n  return { kind: \"continue\", pullContinuation };\n}\n\nfunction failureBlocksQueuedWrites(input: {\n  readonly pendingUpdates: readonly PendingUpdateRecord[];\n  readonly recoveryPendingUpdateCount: number;\n}): boolean {\n  return (\n    input.pendingUpdates.length > 0 || input.recoveryPendingUpdateCount > 0\n  );\n}\n\nasync function retryRemoteSyncAttempt(\n  sync: SyncRemoteDocumentInput,\n  continuation: DocumentSyncPullContinuation | undefined,\n): Promise<RemoteDocumentSyncAttemptOutcome> {\n  evictStaleProjectionForRetry(sync);\n  return {\n    kind: \"retry\",\n    pullContinuation: await invalidatePullCursor(sync, continuation),\n  };\n}\n\nasync function runRemoteDocumentSyncAttempt(input: {\n  attempt: number;\n  maxAttempts: number;\n  pendingUpdateIds: readonly string[];\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  state: RemoteDocumentSyncAttemptState;\n  sync: SyncRemoteDocumentInput;\n}): Promise<RemoteDocumentSyncAttemptOutcome> {\n  if (input.sync.stillCurrent?.() === false) {\n    return { kind: \"complete\", result: null };\n  }\n  const blocksQueuedWrites = failureBlocksQueuedWrites({\n    pendingUpdates: input.state.pendingUpdates,\n    recoveryPendingUpdateCount: input.state.recoveryPendingUpdatesById.size,\n  });\n  const writerProjection = await resolveAttemptProjection(\n    input.sync,\n    blocksQueuedWrites,\n    input.state.reusableWriterProjection,\n  );\n  if (input.sync.stillCurrent?.() === false || !writerProjection) {\n    return { kind: \"complete\", result: null };\n  }\n  const planned = await planDocumentSyncAttempt({\n    pendingUpdates: input.state.pendingUpdates,\n    pullContinuation: input.state.pullContinuation,\n    regenerateQueuedCheckpoints: input.state.regenerateQueuedCheckpoints,\n    sync: input.sync,\n    failureBlocksQueuedWrites: blocksQueuedWrites,\n    writerProjection,\n  });\n  if (planned === \"retry\") {\n    return retryRemoteSyncAttempt(input.sync, input.state.pullContinuation);\n  }\n  if (!planned || input.sync.stillCurrent?.() === false) {\n    return { kind: \"complete\", result: null };\n  }\n  const [materializedPlan] = planned;\n  const submitted = await submitPlannedSyncAttempt({\n    attempt: input.attempt,\n    materializedPlan,\n    maxAttempts: input.maxAttempts,\n    pendingUpdates: recoverablePendingUpdates(\n      input.state.pendingUpdates,\n      materializedPlan,\n    ),\n    pullContinuation: input.state.pullContinuation,\n    regenerateQueuedCheckpoints: input.state.regenerateQueuedCheckpoints,\n    sync: input.sync,\n    failureBlocksQueuedWrites: blocksQueuedWrites,\n  });\n  if (input.sync.stillCurrent?.() === false || submitted === \"cancelled\") {\n    return { kind: \"complete\", result: null };\n  }\n  if (submitted === \"retry\") {\n    assertRawContinuationCanRetry(\n      input.sync.historyMode,\n      input.state.pullContinuation,\n    );\n    return retryRemoteSyncAttempt(input.sync, input.state.pullContinuation);\n  }\n  if (submitted === \"blocked\") {\n    abandonBlockedSync(input.sync);\n    return { kind: \"complete\", result: null };\n  }\n  if (submitted === \"stop\") {\n    input.sync.onSyncAbandoned?.(\"the sync submit failed terminally\");\n    return { kind: \"complete\", result: null };\n  }\n  if (submitted.kind === \"regenerate_queued_checkpoints\") {\n    return { kind: \"regenerate\" };\n  }\n  if (submitted.kind === \"recover_update_id_conflict\") {\n    // A lost response may mean the server committed both this update id and an\n    // inline container rekey. Force the read-only recovery pass to observe that\n    // committed successor projection instead of reusing a cached predecessor.\n    evictStaleProjectionForRetry(input.sync);\n    return { kind: \"recover\", updates: submitted.recoveryPendingUpdatesById };\n  }\n  const result = await resolveSubmittedDocumentSyncResult({\n    materializedPlan,\n    pendingUpdateIds: input.pendingUpdateIds,\n    pullComplete: submitted.pullComplete,\n    recoveryPendingUpdatesById: input.state.recoveryPendingUpdatesById,\n    resolveProjectionUserKey: input.resolveProjectionUserKey,\n    response: submitted.response,\n    sync: input.sync,\n    writerProjection: materializedPlan.writerProjection,\n  });\n  return {\n    kind: \"complete\",\n    result: input.sync.stillCurrent?.() === false ? null : result,\n  };\n}\n\nasync function syncRemoteDocumentInternal(\n  input: SyncRemoteDocumentInput,\n): Promise<SyncRemoteDocumentResult | null> {\n  if (input.stillCurrent?.() === false) return null;\n  const resolveProjectionUserKey = resolveRemoteSyncProjectionUserKey(input);\n  const maxAttempts = 3;\n  let pendingUpdates = input.pendingUpdates ?? [];\n  const pendingUpdateIds = pendingUpdates.map((update) => update.id);\n  let recoveryPendingUpdatesById = new Map<string, PendingUpdateRecord>();\n  let regenerateQueuedCheckpoints = false;\n  let reusableWriterProjection = input.writerProjection ?? null;\n  const persistedSync = await preparePersistedDocumentSync(\n    input,\n    resolveProjectionUserKey,\n  );\n  if (input.stillCurrent?.() === false) return null;\n  if (persistedSync.kind === \"completed\") return persistedSync.result;\n  let pullContinuation = persistedSync.pullContinuation;\n  for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {\n    const outcome = await runRemoteDocumentSyncAttempt({\n      attempt,\n      maxAttempts,\n      pendingUpdateIds,\n      resolveProjectionUserKey,\n      state: {\n        pendingUpdates,\n        pullContinuation,\n        recoveryPendingUpdatesById,\n        regenerateQueuedCheckpoints,\n        reusableWriterProjection,\n      },\n      sync: input,\n    });\n    reusableWriterProjection = null;\n    if (outcome.kind === \"complete\") return outcome.result;\n    if (outcome.kind === \"retry\") {\n      pullContinuation = outcome.pullContinuation;\n      if (input.stillCurrent?.() === false) return null;\n      continue;\n    }\n    if (outcome.kind === \"regenerate\") {\n      regenerateQueuedCheckpoints = true;\n      continue;\n    }\n    recoveryPendingUpdatesById = outcome.updates;\n    pendingUpdates = [];\n  }\n  return abandonAfterRetryableConflicts(input);\n}\n\nexport async function syncRemoteDocument(\n  input: SyncRemoteDocumentInput,\n): Promise<SyncRemoteDocumentResult | null> {\n  try {\n    return await syncRemoteDocumentInternal({\n      ...input,\n      onRemoteDocumentDeleted: createVerifiedRemoteDocumentDeletionHandler({\n        apiClient: input.apiClient,\n        execSql: input.execSql,\n        expectedOrganizationId: input.author.organizationId,\n        onVerifiedDeletion: ({ commitPurgeProof, documentId }) => {\n          if (input.stillCurrent?.() === false) return;\n          if (!input.onRemoteDocumentDeleted) {\n            throw new KeyingVerificationError(\n              \"missing_dependency\",\n              \"Remote document deletion requires atomic local teardown\",\n            );\n          }\n          return input.onRemoteDocumentDeleted({\n            commitPurgeProof,\n            documentId,\n          });\n        },\n        resolveProjectionUserKey: input.resolveProjectionUserKey,\n        stillCurrent: input.stillCurrent,\n        warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,\n      }),\n    });\n  } catch (error) {\n    if (isProjectionVerificationCancelledError(error)) return null;\n    if (\n      input.stillCurrent?.() !== false &&\n      isDocumentSyncUpdateIsolationError(error)\n    ) {\n      await input.onIncomingUpdateIsolationFailure?.(error);\n    }\n    throw error;\n  }\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,kCAAkC,EAAE,MAAM,iEAAiE,CAAC;AACrH,OAAO,EAEL,wCAAwC,GACzC,MAAM,oDAAoD,CAAC;AAK5D,OAAO,EACL,sCAAsC,EAEtC,gCAAgC,GACjC,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,2CAA2C,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAClC,kCAAkC,GACnC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,EAEL,gCAAgC,GACjC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EAAE,kCAAkC,EAAE,MAAM,uBAAuB,CAAC;AAE3E,MAAM,UAAU,sBAAsB,CACpC,MAA8B,EAC9B,UAAqC;IAErC,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,KAAK,EAAE,EAAE,CACR,4BAA4B,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,CACzE,CAAC;AACJ,CAAC;AACD;;;GAGG;AACH,SAAS,4BAA4B,CAAC,KAA8B;IAClE,KAAK,CAAC,SAAS,CAAC,6BAA6B,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,8BAA8B,CAAC,KAKvC;IACC,OAAO,CACL,CAAC,KAAK,CAAC,2BAA2B;QAClC,CAAC,KAAK,CAAC,gBAAgB,CAAC,2BAA2B;QACnD,KAAK,CAAC,IAAI,CAAC,qBAAqB,KAAK,SAAS;QAC9C,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,IASvC;IACC,IAAI,CAAC;QACH,OAAO,MAAM,kCAAkC,CAAC;YAC9C,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,8BAA8B,EAAE,8BAA8B,CAAC;gBAC7D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;gBAC7D,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC;YACF,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;YAChC,qBAAqB,EAAE,IAAI,CAAC,gBAAgB,EAAE,aAAa;YAC3D,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB;YAClD,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,qBAAqB,EAAE,GAAG,EAAE,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;YACxE,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,uBAAuB;YAC1D,6BAA6B,EAAE,IAAI,CAAC,IAAI,CAAC,6BAA6B;YACtE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YAClC,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,uBAAuB;YAC1D,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI;YAChC,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;YACzD,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;YACpC,+BAA+B,EAC7B,IAAI,CAAC,IAAI,CAAC,+BAA+B;SAC5C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,wCAAwC;YACzD,IAAI,CAAC,gBAAgB,KAAK,SAAS;YACnC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,EAC/B,CAAC;YACD,OAAO,OAAgB,CAAC;QAC1B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAA8B,EAC9B,yBAAkC,EAClC,wBAAiE;IAEjE,OAAO,kCAAkC,CAAC;QACxC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,iBAAiB,EAAE,wBAAwB,CACzC,KAAK,EACL,yBAAyB,CAC1B;QACD,wBAAwB;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC;AACD,SAAS,kCAAkC,CAAC,KAA8B;IACxE,OAAO,gCAAgC,CACrC,KAAK,CAAC,wBAAwB,EAC9B,sBAAsB,CACvB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAA8B,EAC9B,gBAA0D;IAE1D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,KAAK,CAAC,6BAA6B,EAAE,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,KAA8B,EAC9B,wBAAmD;IAQnD,IAAI,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,gCAAgC,CACtD,KAAK,EACL,wBAAwB,CACzB,CAAC;QACF,IAAI,SAAS,EAAE,IAAI,KAAK,WAAW;YAAE,OAAO,SAAS,CAAC;QACtD,IAAI,SAAS,EAAE,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YACvE,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,CAAC,CAAC,KAAK,YAAY,wCAAwC,CAAC;YAC5D,gBAAgB,KAAK,SAAS;YAC9B,KAAK,CAAC,WAAW,KAAK,KAAK,EAC3B,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,yBAAyB,CAAC,KAGlC;IACC,OAAO,CACL,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,IAA6B,EAC7B,YAAsD;IAEtD,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,OAAO;QACb,gBAAgB,EAAE,MAAM,oBAAoB,CAAC,IAAI,EAAE,YAAY,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAO3C;IACC,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;QACnD,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;QAC1C,0BAA0B,EAAE,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAI;KACxE,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,MAAM,wBAAwB,CACrD,KAAK,CAAC,IAAI,EACV,kBAAkB,EAClB,KAAK,CAAC,KAAK,CAAC,wBAAwB,CACrC,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;QAC5C,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;QAC1C,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;QAC9C,2BAA2B,EAAE,KAAK,CAAC,KAAK,CAAC,2BAA2B;QACpE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,yBAAyB,EAAE,kBAAkB;QAC7C,gBAAgB;KACjB,CAAC,CAAC;IACH,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC;QAC/C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,yBAAyB,CACvC,KAAK,CAAC,KAAK,CAAC,cAAc,EAC1B,gBAAgB,CACjB;QACD,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;QAC9C,2BAA2B,EAAE,KAAK,CAAC,KAAK,CAAC,2BAA2B;QACpE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,yBAAyB,EAAE,kBAAkB;KAC9C,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QACvE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,6BAA6B,CAC3B,KAAK,CAAC,IAAI,CAAC,WAAW,EACtB,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAC7B,CAAC;QACF,OAAO,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,mCAAmC,CAAC,CAAC;QAClE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;QACpD,2EAA2E;QAC3E,4EAA4E;QAC5E,0EAA0E;QAC1E,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,0BAA0B,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC;QACtD,gBAAgB;QAChB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,0BAA0B,EAAE,KAAK,CAAC,KAAK,CAAC,0BAA0B;QAClE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,gBAAgB,EAAE,gBAAgB,CAAC,gBAAgB;KACpD,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;KAC9D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,KAA8B;IAE9B,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,wBAAwB,GAAG,kCAAkC,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,CAAC,CAAC;IACtB,IAAI,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;IAChD,MAAM,gBAAgB,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnE,IAAI,0BAA0B,GAAG,IAAI,GAAG,EAA+B,CAAC;IACxE,IAAI,2BAA2B,GAAG,KAAK,CAAC;IACxC,IAAI,wBAAwB,GAAG,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC;IAC9D,MAAM,aAAa,GAAG,MAAM,4BAA4B,CACtD,KAAK,EACL,wBAAwB,CACzB,CAAC;IACF,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,aAAa,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC;IACpE,IAAI,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAC;IACtD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC;YACjD,OAAO;YACP,WAAW;YACX,gBAAgB;YAChB,wBAAwB;YACxB,KAAK,EAAE;gBACL,cAAc;gBACd,gBAAgB;gBAChB,0BAA0B;gBAC1B,2BAA2B;gBAC3B,wBAAwB;aACzB;YACD,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,wBAAwB,GAAG,IAAI,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAC5C,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC;YAClD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClC,2BAA2B,GAAG,IAAI,CAAC;YACnC,SAAS;QACX,CAAC;QACD,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC;QAC7C,cAAc,GAAG,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,8BAA8B,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA8B;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,0BAA0B,CAAC;YACtC,GAAG,KAAK;YACR,uBAAuB,EAAE,2CAA2C,CAAC;gBACnE,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,sBAAsB,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;gBACnD,kBAAkB,EAAE,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,EAAE;oBACvD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;wBAAE,OAAO;oBAC7C,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC;wBACnC,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,yDAAyD,CAC1D,CAAC;oBACJ,CAAC;oBACD,OAAO,KAAK,CAAC,uBAAuB,CAAC;wBACnC,gBAAgB;wBAChB,UAAU;qBACX,CAAC,CAAC;gBACL,CAAC;gBACD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;gBACxD,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;aACvE,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,sCAAsC,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/D,IACE,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;YAChC,kCAAkC,CAAC,KAAK,CAAC,EACzC,CAAC;YACD,MAAM,KAAK,CAAC,gCAAgC,EAAE,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type { DocumentWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { isDocumentUpdateCreatedEvent } from \"../../../data/documents/documentSync\";\nimport { isDocumentSyncUpdateIsolationError } from \"../../../data/documents/shared/sync/documentSyncUpdateIsolation\";\nimport {\n  type DocumentSyncPullContinuation,\n  InvalidDocumentSyncPullContinuationError,\n} from \"../../../data/documents/shared/sync/syncPagination\";\nimport type {\n  MaterializedDocumentSyncPlan,\n  SyncRemoteDocumentResult,\n} from \"../../../data/documents/shared/types\";\nimport {\n  isProjectionVerificationCancelledError,\n  type ProjectionUserKeyResolver,\n  requireProjectionUserKeyResolver,\n} from \"../../../data/keyingProjectionVerification\";\nimport type { PendingUpdateRecord } from \"../../../data/sqlite/documentPersistence\";\nimport { createVerifiedRemoteDocumentDeletionHandler } from \"../purge\";\nimport {\n  assertRawContinuationCanRetry,\n  resolveSyncAttemptWriterProjection,\n  submitDocumentSyncAttemptIfAllowed,\n} from \"../syncFailures\";\nimport {\n  abandonAfterRetryableConflicts,\n  abandonBlockedSync,\n} from \"../syncFailures/syncAbandon\";\nimport { recoverablePendingUpdates } from \"../syncPlan/syncPlanRequestBounds\";\nimport { requireStandaloneAncestorRepairs } from \"../syncRekeys/syncContainerRekeyPreparation\";\nimport {\n  type SyncRemoteDocumentInput,\n  tryPersistedReadOnlyDocumentSync,\n} from \"./readOnlySync\";\nimport {\n  planDocumentSyncAttempt,\n  projectionFailureHandler,\n} from \"./syncAttemptPlanning\";\nimport type {\n  RemoteDocumentSyncAttemptOutcome,\n  RemoteDocumentSyncAttemptState,\n} from \"./syncAttemptState\";\nimport { resolveSubmittedDocumentSyncResult } from \"./syncSubmittedResult\";\n\nexport function hasDocumentUpdateEvent(\n  events: ReadonlyArray<unknown>,\n  documentId: string | null | undefined,\n): boolean {\n  if (!documentId) return false;\n  return events.some(\n    (event) =>\n      isDocumentUpdateCreatedEvent(event) && event.documentId === documentId,\n  );\n}\n/**\n * A retryable stale-projection conflict means this writer projection is behind\n * the server. Evict only this document so the next attempt re-derives targets.\n */\nfunction evictStaleProjectionForRetry(input: SyncRemoteDocumentInput): void {\n  input.apiClient.evictDocumentWriterProjection?.(input.documentId);\n}\n\n/**\n * A pass may repair a covering-baseline rejection by regenerating queued\n * rotation checkpoints — but only when there is something to regenerate FROM\n * (a snapshot provider and queued checkpoint rows), the failed pass was not\n * already a heal or a regeneration (whose fresh baseline proves this device\n * is simply behind), and an attempt remains.\n */\nfunction canRegenerateQueuedCheckpoints(input: {\n  materializedPlan: MaterializedDocumentSyncPlan;\n  pendingUpdates: readonly PendingUpdateRecord[];\n  regenerateQueuedCheckpoints: boolean;\n  sync: SyncRemoteDocumentInput;\n}): boolean {\n  return (\n    !input.regenerateQueuedCheckpoints &&\n    !input.materializedPlan.healedStaleContentKeyBundle &&\n    input.sync.buildRotationSnapshot !== undefined &&\n    input.pendingUpdates.some((update) => update.sourceVersionVector != null)\n  );\n}\n\nasync function submitPlannedSyncAttempt(args: {\n  attempt: number;\n  materializedPlan: MaterializedDocumentSyncPlan;\n  maxAttempts: number;\n  pendingUpdates: readonly PendingUpdateRecord[];\n  pullContinuation?: DocumentSyncPullContinuation | undefined;\n  regenerateQueuedCheckpoints: boolean;\n  sync: SyncRemoteDocumentInput;\n  failureBlocksQueuedWrites: boolean;\n}) {\n  try {\n    return await submitDocumentSyncAttemptIfAllowed({\n      apiClient: args.sync.apiClient,\n      attempt: args.attempt,\n      canRegenerateQueuedCheckpoints: canRegenerateQueuedCheckpoints({\n        materializedPlan: args.materializedPlan,\n        pendingUpdates: args.pendingUpdates,\n        regenerateQueuedCheckpoints: args.regenerateQueuedCheckpoints,\n        sync: args.sync,\n      }),\n      documentId: args.sync.documentId,\n      expectedCommitLsnMode: args.pullContinuation?.commitLsnMode,\n      isRemoteSyncBlocked: args.sync.isRemoteSyncBlocked,\n      maxAttempts: args.maxAttempts,\n      onInlineRepairRefused: () => requireStandaloneAncestorRepairs(args.sync),\n      onRemoteDocumentDeleted: args.sync.onRemoteDocumentDeleted,\n      onOutgoingUpdatesMaterialized: args.sync.onOutgoingUpdatesMaterialized,\n      onSyncTrace: args.sync.onSyncTrace,\n      onTerminalSubmitFailure: args.sync.onTerminalSubmitFailure,\n      pendingUpdates: args.pendingUpdates,\n      plan: args.materializedPlan.plan,\n      failureBlocksQueuedWrites: args.failureBlocksQueuedWrites,\n      stillCurrent: args.sync.stillCurrent,\n      warmReferencedPrincipalPolicies:\n        args.sync.warmReferencedPrincipalPolicies,\n    });\n  } catch (error) {\n    if (\n      error instanceof InvalidDocumentSyncPullContinuationError &&\n      args.pullContinuation !== undefined &&\n      args.sync.historyMode !== \"raw\"\n    ) {\n      return \"retry\" as const;\n    }\n    throw error;\n  }\n}\n\nfunction resolveAttemptProjection(\n  input: SyncRemoteDocumentInput,\n  failureBlocksQueuedWrites: boolean,\n  reusableWriterProjection: DocumentWriterProjectionResponse | null,\n) {\n  return resolveSyncAttemptWriterProjection({\n    apiClient: input.apiClient,\n    documentId: input.documentId,\n    onRemoteDocumentDeleted: input.onRemoteDocumentDeleted,\n    onSyncAbandoned: input.onSyncAbandoned,\n    onSyncTrace: input.onSyncTrace,\n    onTerminalFailure: projectionFailureHandler(\n      input,\n      failureBlocksQueuedWrites,\n    ),\n    reusableWriterProjection,\n    stillCurrent: input.stillCurrent,\n  });\n}\nfunction resolveRemoteSyncProjectionUserKey(input: SyncRemoteDocumentInput) {\n  return requireProjectionUserKeyResolver(\n    input.resolveProjectionUserKey,\n    \"Remote document sync\",\n  );\n}\n\nasync function invalidatePullCursor(\n  input: SyncRemoteDocumentInput,\n  pullContinuation: DocumentSyncPullContinuation | undefined,\n): Promise<undefined> {\n  if (pullContinuation !== undefined) {\n    await input.onPullContinuationInvalidated?.(pullContinuation);\n  }\n  return undefined;\n}\n\nasync function preparePersistedDocumentSync(\n  input: SyncRemoteDocumentInput,\n  resolveProjectionUserKey: ProjectionUserKeyResolver,\n): Promise<\n  | { readonly kind: \"completed\"; result: SyncRemoteDocumentResult | null }\n  | {\n      readonly kind: \"continue\";\n      pullContinuation: DocumentSyncPullContinuation | undefined;\n    }\n> {\n  let pullContinuation = input.pullContinuation;\n  try {\n    const persisted = await tryPersistedReadOnlyDocumentSync(\n      input,\n      resolveProjectionUserKey,\n    );\n    if (persisted?.kind === \"completed\") return persisted;\n    if (persisted?.kind === \"not_completed\" && input.historyMode !== \"raw\") {\n      pullContinuation = await invalidatePullCursor(input, pullContinuation);\n    }\n  } catch (error) {\n    if (\n      !(error instanceof InvalidDocumentSyncPullContinuationError) ||\n      pullContinuation === undefined ||\n      input.historyMode === \"raw\"\n    ) {\n      throw error;\n    }\n    pullContinuation = await invalidatePullCursor(input, pullContinuation);\n  }\n  return { kind: \"continue\", pullContinuation };\n}\n\nfunction failureBlocksQueuedWrites(input: {\n  readonly pendingUpdates: readonly PendingUpdateRecord[];\n  readonly recoveryPendingUpdateCount: number;\n}): boolean {\n  return (\n    input.pendingUpdates.length > 0 || input.recoveryPendingUpdateCount > 0\n  );\n}\n\nasync function retryRemoteSyncAttempt(\n  sync: SyncRemoteDocumentInput,\n  continuation: DocumentSyncPullContinuation | undefined,\n): Promise<RemoteDocumentSyncAttemptOutcome> {\n  evictStaleProjectionForRetry(sync);\n  return {\n    kind: \"retry\",\n    pullContinuation: await invalidatePullCursor(sync, continuation),\n  };\n}\n\nasync function runRemoteDocumentSyncAttempt(input: {\n  attempt: number;\n  maxAttempts: number;\n  pendingUpdateIds: readonly string[];\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  state: RemoteDocumentSyncAttemptState;\n  sync: SyncRemoteDocumentInput;\n}): Promise<RemoteDocumentSyncAttemptOutcome> {\n  if (input.sync.stillCurrent?.() === false) {\n    return { kind: \"complete\", result: null };\n  }\n  const blocksQueuedWrites = failureBlocksQueuedWrites({\n    pendingUpdates: input.state.pendingUpdates,\n    recoveryPendingUpdateCount: input.state.recoveryPendingUpdatesById.size,\n  });\n  const writerProjection = await resolveAttemptProjection(\n    input.sync,\n    blocksQueuedWrites,\n    input.state.reusableWriterProjection,\n  );\n  if (input.sync.stillCurrent?.() === false || !writerProjection) {\n    return { kind: \"complete\", result: null };\n  }\n  const planned = await planDocumentSyncAttempt({\n    pendingUpdates: input.state.pendingUpdates,\n    pullContinuation: input.state.pullContinuation,\n    regenerateQueuedCheckpoints: input.state.regenerateQueuedCheckpoints,\n    sync: input.sync,\n    failureBlocksQueuedWrites: blocksQueuedWrites,\n    writerProjection,\n  });\n  if (planned === \"retry\") {\n    return retryRemoteSyncAttempt(input.sync, input.state.pullContinuation);\n  }\n  if (!planned || input.sync.stillCurrent?.() === false) {\n    return { kind: \"complete\", result: null };\n  }\n  const [materializedPlan] = planned;\n  const submitted = await submitPlannedSyncAttempt({\n    attempt: input.attempt,\n    materializedPlan,\n    maxAttempts: input.maxAttempts,\n    pendingUpdates: recoverablePendingUpdates(\n      input.state.pendingUpdates,\n      materializedPlan,\n    ),\n    pullContinuation: input.state.pullContinuation,\n    regenerateQueuedCheckpoints: input.state.regenerateQueuedCheckpoints,\n    sync: input.sync,\n    failureBlocksQueuedWrites: blocksQueuedWrites,\n  });\n  if (input.sync.stillCurrent?.() === false || submitted === \"cancelled\") {\n    return { kind: \"complete\", result: null };\n  }\n  if (submitted === \"retry\") {\n    assertRawContinuationCanRetry(\n      input.sync.historyMode,\n      input.state.pullContinuation,\n    );\n    return retryRemoteSyncAttempt(input.sync, input.state.pullContinuation);\n  }\n  if (submitted === \"blocked\") {\n    abandonBlockedSync(input.sync);\n    return { kind: \"complete\", result: null };\n  }\n  if (submitted === \"stop\") {\n    input.sync.onSyncAbandoned?.(\"the sync submit failed terminally\");\n    return { kind: \"complete\", result: null };\n  }\n  if (submitted.kind === \"regenerate_queued_checkpoints\") {\n    return { kind: \"regenerate\" };\n  }\n  if (submitted.kind === \"recover_update_id_conflict\") {\n    // A lost response may mean the server committed both this update id and an\n    // inline container rekey. Force the read-only recovery pass to observe that\n    // committed successor projection instead of reusing a cached predecessor.\n    evictStaleProjectionForRetry(input.sync);\n    return { kind: \"recover\", updates: submitted.recoveryPendingUpdatesById };\n  }\n  const result = await resolveSubmittedDocumentSyncResult({\n    materializedPlan,\n    pendingUpdateIds: input.pendingUpdateIds,\n    pullComplete: submitted.pullComplete,\n    recoveryPendingUpdatesById: input.state.recoveryPendingUpdatesById,\n    resolveProjectionUserKey: input.resolveProjectionUserKey,\n    response: submitted.response,\n    sync: input.sync,\n    writerProjection: materializedPlan.writerProjection,\n  });\n  return {\n    kind: \"complete\",\n    result: input.sync.stillCurrent?.() === false ? null : result,\n  };\n}\n\nasync function syncRemoteDocumentInternal(\n  input: SyncRemoteDocumentInput,\n): Promise<SyncRemoteDocumentResult | null> {\n  if (input.stillCurrent?.() === false) return null;\n  const resolveProjectionUserKey = resolveRemoteSyncProjectionUserKey(input);\n  const maxAttempts = 3;\n  let pendingUpdates = input.pendingUpdates ?? [];\n  const pendingUpdateIds = pendingUpdates.map((update) => update.id);\n  let recoveryPendingUpdatesById = new Map<string, PendingUpdateRecord>();\n  let regenerateQueuedCheckpoints = false;\n  let reusableWriterProjection = input.writerProjection ?? null;\n  const persistedSync = await preparePersistedDocumentSync(\n    input,\n    resolveProjectionUserKey,\n  );\n  if (input.stillCurrent?.() === false) return null;\n  if (persistedSync.kind === \"completed\") return persistedSync.result;\n  let pullContinuation = persistedSync.pullContinuation;\n  for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {\n    const outcome = await runRemoteDocumentSyncAttempt({\n      attempt,\n      maxAttempts,\n      pendingUpdateIds,\n      resolveProjectionUserKey,\n      state: {\n        pendingUpdates,\n        pullContinuation,\n        recoveryPendingUpdatesById,\n        regenerateQueuedCheckpoints,\n        reusableWriterProjection,\n      },\n      sync: input,\n    });\n    reusableWriterProjection = null;\n    if (outcome.kind === \"complete\") return outcome.result;\n    if (outcome.kind === \"retry\") {\n      pullContinuation = outcome.pullContinuation;\n      if (input.stillCurrent?.() === false) return null;\n      continue;\n    }\n    if (outcome.kind === \"regenerate\") {\n      regenerateQueuedCheckpoints = true;\n      continue;\n    }\n    recoveryPendingUpdatesById = outcome.updates;\n    pendingUpdates = [];\n  }\n  return abandonAfterRetryableConflicts(input);\n}\n\nexport async function syncRemoteDocument(\n  input: SyncRemoteDocumentInput,\n): Promise<SyncRemoteDocumentResult | null> {\n  try {\n    return await syncRemoteDocumentInternal({\n      ...input,\n      onRemoteDocumentDeleted: createVerifiedRemoteDocumentDeletionHandler({\n        apiClient: input.apiClient,\n        execSql: input.execSql,\n        expectedOrganizationId: input.author.organizationId,\n        onVerifiedDeletion: ({ commitPurgeProof, documentId }) => {\n          if (input.stillCurrent?.() === false) return;\n          if (!input.onRemoteDocumentDeleted) {\n            throw new KeyingVerificationError(\n              \"missing_dependency\",\n              \"Remote document deletion requires atomic local teardown\",\n            );\n          }\n          return input.onRemoteDocumentDeleted({\n            commitPurgeProof,\n            documentId,\n          });\n        },\n        resolveProjectionUserKey: input.resolveProjectionUserKey,\n        stillCurrent: input.stillCurrent,\n        warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,\n      }),\n    });\n  } catch (error) {\n    if (isProjectionVerificationCancelledError(error)) return null;\n    if (\n      input.stillCurrent?.() !== false &&\n      isDocumentSyncUpdateIsolationError(error)\n    ) {\n      await input.onIncomingUpdateIsolationFailure?.(error);\n    }\n    throw error;\n  }\n}\n"]}

package/workflows/documents/sync/initialSync.js

@@ -1,7 +1,7 @@
 import { createPendingUpdateFields } from "../../../data/documents/documentSync.js";
 import { importContentKeyMaterial } from "../../../data/documents/shared/contentRecordKeys.js";
 import { encryptDocumentPendingUpdate } from "../../../data/documents/shared/crypto.js";
-import { containerPathRefs } from "../../../data/documents/shared/projection.js";
+import { containerPathRefs } from "../../../data/documents/shared/projection/index.js";
 import { signDocumentOutgoingUpdate } from "../syncPlan/syncPlanIdentity.js";
 /**
  * Builds the single encrypted initial write for a provisioned document. The

package/workflows/documents/sync/readOnlyProjectionFailure.js

@@ -1,5 +1,5 @@
 import { KeyingVerificationError } from "../../../internal/crypto/index.js";
-import { isDocumentSyncUpdateIsolationError } from "../../../data/documents/shared/documentSyncUpdateIsolation.js";
+import { isDocumentSyncUpdateIsolationError } from "../../../data/documents/shared/sync/documentSyncUpdateIsolation.js";
 import { rethrowKeyingVerificationError } from "../../../data/keyingProjectionVerification/error.js";
 import { projectionIntegrityErrorCode } from "../syncFailures/syncFailureClassification.js";
 import { DocumentRawHistoryUnavailableError } from "../syncPlan/syncContentKeys.js";

package/workflows/documents/sync/readOnlyProjectionFailure.js.map

@@ -1 +1 @@
-{"version":3,"file":"readOnlyProjectionFailure.js","sourceRoot":"","sources":["readOnlyProjectionFailure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,kCAAkC,EAAE,MAAM,4DAA4D,CAAC;AAChH,OAAO,EAAE,8BAA8B,EAAE,MAAM,kDAAkD,CAAC;AAClG,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AAEjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,2BAA2B,CAAC,CAAC;AAE7E,MAAM,UAAU,uCAAuC,CACrD,KAAc,EACd,KAGC;IAKD,IAAI,kCAAkC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,YAAY,kCAAkC,EAAE,CAAC;QACxD,IAAI,KAAK,CAAC,4BAA4B,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IACE,KAAK,CAAC,4BAA4B;QAClC,KAAK,YAAY,uBAAuB;QACxC,KAAK,CAAC,IAAI,KAAK,eAAe,EAC9B,CAAC;QACD,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,2EAA2E;IAC3E,wEAAwE;IACxE,8BAA8B,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,4BAA4B,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QACvE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport { isDocumentSyncUpdateIsolationError } from \"../../../data/documents/shared/documentSyncUpdateIsolation\";\nimport { rethrowKeyingVerificationError } from \"../../../data/keyingProjectionVerification/error\";\nimport { projectionIntegrityErrorCode } from \"../syncFailures/syncFailureClassification\";\nimport { DocumentRawHistoryUnavailableError } from \"../syncPlan/syncContentKeys\";\n\nexport const REFRESH_CACHED_PROJECTION = Symbol(\"refresh cached projection\");\n\nexport function handleReadOnlyProjectionCompletionError(\n  error: unknown,\n  input: {\n    allowCachedProjectionRefresh: boolean;\n    historyMode?: \"raw\" | undefined;\n  },\n):\n  | DocumentRawHistoryUnavailableError\n  | null\n  | typeof REFRESH_CACHED_PROJECTION {\n  if (isDocumentSyncUpdateIsolationError(error)) {\n    throw error;\n  }\n  if (error instanceof DocumentRawHistoryUnavailableError) {\n    if (input.allowCachedProjectionRefresh) {\n      return error;\n    }\n    throw error;\n  }\n  if (\n    input.allowCachedProjectionRefresh &&\n    error instanceof KeyingVerificationError &&\n    error.code === \"invalid_shape\"\n  ) {\n    return REFRESH_CACHED_PROJECTION;\n  }\n  // The document-store `document.sync` boundary owns durable reporting; this\n  // helper only decides whether an ordinary projection miss is retryable.\n  rethrowKeyingVerificationError(error);\n  if (projectionIntegrityErrorCode(error) || input.historyMode === \"raw\") {\n    throw error;\n  }\n  return null;\n}\n"]}
+{"version":3,"file":"readOnlyProjectionFailure.js","sourceRoot":"","sources":["readOnlyProjectionFailure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,kCAAkC,EAAE,MAAM,iEAAiE,CAAC;AACrH,OAAO,EAAE,8BAA8B,EAAE,MAAM,kDAAkD,CAAC;AAClG,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AAEjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,2BAA2B,CAAC,CAAC;AAE7E,MAAM,UAAU,uCAAuC,CACrD,KAAc,EACd,KAGC;IAKD,IAAI,kCAAkC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,YAAY,kCAAkC,EAAE,CAAC;QACxD,IAAI,KAAK,CAAC,4BAA4B,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IACE,KAAK,CAAC,4BAA4B;QAClC,KAAK,YAAY,uBAAuB;QACxC,KAAK,CAAC,IAAI,KAAK,eAAe,EAC9B,CAAC;QACD,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,2EAA2E;IAC3E,wEAAwE;IACxE,8BAA8B,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,4BAA4B,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QACvE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport { isDocumentSyncUpdateIsolationError } from \"../../../data/documents/shared/sync/documentSyncUpdateIsolation\";\nimport { rethrowKeyingVerificationError } from \"../../../data/keyingProjectionVerification/error\";\nimport { projectionIntegrityErrorCode } from \"../syncFailures/syncFailureClassification\";\nimport { DocumentRawHistoryUnavailableError } from \"../syncPlan/syncContentKeys\";\n\nexport const REFRESH_CACHED_PROJECTION = Symbol(\"refresh cached projection\");\n\nexport function handleReadOnlyProjectionCompletionError(\n  error: unknown,\n  input: {\n    allowCachedProjectionRefresh: boolean;\n    historyMode?: \"raw\" | undefined;\n  },\n):\n  | DocumentRawHistoryUnavailableError\n  | null\n  | typeof REFRESH_CACHED_PROJECTION {\n  if (isDocumentSyncUpdateIsolationError(error)) {\n    throw error;\n  }\n  if (error instanceof DocumentRawHistoryUnavailableError) {\n    if (input.allowCachedProjectionRefresh) {\n      return error;\n    }\n    throw error;\n  }\n  if (\n    input.allowCachedProjectionRefresh &&\n    error instanceof KeyingVerificationError &&\n    error.code === \"invalid_shape\"\n  ) {\n    return REFRESH_CACHED_PROJECTION;\n  }\n  // The document-store `document.sync` boundary owns durable reporting; this\n  // helper only decides whether an ordinary projection miss is retryable.\n  rethrowKeyingVerificationError(error);\n  if (projectionIntegrityErrorCode(error) || input.historyMode === \"raw\") {\n    throw error;\n  }\n  return null;\n}\n"]}

package/workflows/documents/sync/readOnlySync.d.ts

@@ -1,9 +1,9 @@
 import type { DocumentWriterProjectionResponse } from "../../../internal/validators/response/index.js";
-import type { DocumentSyncUpdateIsolationError, IncomingDocumentSyncUpdateValidator } from "../../../data/documents/shared/documentSyncUpdateIsolation.js";
-import { type DocumentSyncPullContinuation } from "../../../data/documents/shared/syncPagination.js";
+import type { DocumentSyncUpdateIsolationError, IncomingDocumentSyncUpdateValidator } from "../../../data/documents/shared/sync/documentSyncUpdateIsolation.js";
+import { type DocumentSyncPullContinuation } from "../../../data/documents/shared/sync/syncPagination.js";
 import type { DocumentCreateAuthor, DocumentSyncApi, DocumentWriterPublicKeyResolver, PersistedDocumentSyncState, SyncRemoteDocumentResult } from "../../../data/documents/shared/types.js";
 import type { ProjectionUserKeyResolver, ReferencedPrincipalPolicyWarmer } from "../../../data/keyingProjectionVerification/index.js";
-import type { PendingUpdateRecord } from "../../../data/sqlite/documentPersistence.js";
+import type { PendingUpdateRecord } from "../../../data/sqlite/documentPersistence/index.js";
 import type { ExecSql } from "../../../data/sqlite/sqlSchema.js";
 import { type RemoteDocumentDeletionHandler, type TerminalSubmitFailureHandler } from "../syncFailures/syncFailureClassification.js";
 import type { RekeyPendingUpdate } from "../syncRekeys/syncRecoveryRekey.js";

package/workflows/documents/sync/readOnlySync.js

@@ -1,6 +1,6 @@
 import { isAccessManifestBundleWireResponse, isDocumentContentKeyBundleResponse, isDocumentKekTargetsResponse, } from "../../../internal/validators/response/index.js";
 import { isRetryableDocumentSyncConflict, persistedDocumentSyncStateFromResponse, submitDocumentSync, } from "../../../data/documents/shared/responses.js";
-import { resolvePullContinuationMinLsn, } from "../../../data/documents/shared/syncPagination.js";
+import { resolvePullContinuationMinLsn, } from "../../../data/documents/shared/sync/syncPagination.js";
 import { projectionVerificationOptions } from "../../../data/documents/shared/types.js";
 import { readCanonicalRecord } from "../../../data/keying/canonicalJson.js";
 import { limitDocumentSyncRequestBytes } from "../../../data/sync/documentSyncOutgoingBatch.js";

package/workflows/documents/sync/readOnlySync.js.map

@@ -1 +1 @@
-{"version":3,"file":"readOnlySync.js","sourceRoot":"","sources":["readOnlySync.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,kCAAkC,EAClC,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AAKxC,OAAO,EACL,+BAA+B,EAC/B,sCAAsC,EACtC,kBAAkB,GACnB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAEL,6BAA6B,GAC9B,MAAM,+CAA+C,CAAC;AASvD,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAOzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAClC,kCAAkC,GACnC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,wCAAwC,EACxC,4BAA4B,GAG7B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAC;AAEjF,OAAO,EACL,uCAAuC,EACvC,yBAAyB,GAC1B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,oCAAoC,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAiC,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE/E,KAAK,UAAU,gDAAgD,CAC7D,KAEC;IAED,MAAM,gBAAgB,GAAG,MAAM,iCAAiC,CAAC;QAC/D,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,MAAM,EAAE,6BAA6B,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC;QAC3E,UAAU,EAAE,KAAK,CAAC,gBAAgB,EAAE,MAAM;QAC1C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,EAAE;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,GAAG,6BAA6B,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,oCAAoC,CAAC;QACxD,GAAG,6BAA6B,CAAC,KAAK,CAAC;QACvC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB;QAChB,0BAA0B,EAAE,IAAI,GAAG,EAAE;QACrC,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;KACzD,CAAC,CAAC;IACH,OAAO;QACL,GAAG,MAAM;QACT,iBAAiB,EAAE,CAAC,KAAK,CAAC,YAAY;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,KAAgC,EAChC,KAAa,EACb,QAAwC;IAExC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,cAA6D,EAC7D,UAAkB;IAMlB,IAAI,cAAc,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,GAAG,gCAAgC,CACvD,cAAc,CAAC,gBAAgB,EAC/B,4CAA4C,EAC5C,kCAAkC,CACnC,CAAC;IACF,MAAM,kBAAkB,GAAG,gCAAgC,CACzD,cAAc,CAAC,kBAAkB,EACjC,qCAAqC,EACrC,4BAA4B,CAC7B,CAAC;IACF,MAAM,gBAAgB,GAAG,gCAAgC,CACvD,cAAc,CAAC,sBAAsB,EACrC,kCAAkC,EAClC,kCAAkC,CACnC,CAAC;IAEF,IAAI,CAAC,gBAAgB,IAAI,CAAC,kBAAkB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,gBAAgB;QAChB,kBAAkB;QAClB,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,+CAA+C,CAAC,KAS9D;IACC,MAAM,SAAS,GAAG,+BAA+B,CAC/C,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,UAAU,CACjB,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC;QACvC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;QAChD,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;QAC5C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,MAAM,EAAE,6BAA6B,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC;QAC3E,eAAe,EAAE,EAAE;QACnB,UAAU,EAAE,KAAK,CAAC,gBAAgB,EAAE,MAAM;QAC1C,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,OAAO,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;AAChE,CAAC;AAmCD,KAAK,UAAU,mDAAmD,CAAC,KAIlE;IAMC,IAAI,CAAC;QACH,OAAO,MAAM,gDAAgD,CAAC;YAC5D,GAAG,KAAK,CAAC,UAAU;YACnB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,uCAAuC,CAAC,KAAK,EAAE;YACpD,4BAA4B,EAAE,KAAK,CAAC,4BAA4B;YAChE,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW;SAC1C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AACD,KAAK,UAAU,6CAA6C,CAC1D,KAA0C;IAE1C,MAAM,wBAAwB,GAC5B,KAAK,CAAC,gBAAgB,EAAE,UAAU,KAAK,KAAK,CAAC,UAAU;QACrD,CAAC,CAAC,KAAK,CAAC,gBAAgB;QACxB,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,gBAAgB,GACpB,wBAAwB;QACxB,CAAC,MAAM,kCAAkC,CAAC;YACxC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,iBAAiB,EAAE,KAAK,CAAC,2BAA2B;YACpD,wBAAwB,EAAE,IAAI;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC,CAAC;IACN,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,oBAAoB,GACxB,KAAK,CAAC,WAAW,KAAK,KAAK,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACnE,IAAI,MAAM,GAI6B,IAAI,CAAC;IAC5C,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,mDAAmD,CAAC;YACjE,4BAA4B,EAAE,oBAAoB;YAClD,UAAU,EAAE,KAAK;YACjB,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,4BAA4B,CAAC,KAAK,CAAC,KAAK,UAAU,EAAE,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,kBAAkB,GAAG,IAAI,CAAC;IAC5B,CAAC;IACD,IACE,CAAC,kBAAkB;QACnB,MAAM,KAAK,yBAAyB;QACpC,CAAC,CAAC,MAAM,YAAY,kCAAkC,CAAC;QACvD,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,EACrC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,qBAAqB,GAAG,MAAM,kCAAkC,CAAC;QACrE,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,iBAAiB,EAAE,KAAK,CAAC,2BAA2B;QACpD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,gBAAgB,EACd,MAAM,YAAY,kCAAkC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KAC5E,CAAC,CAAC;IACH,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,mDAAmD,CAC3E;QACE,4BAA4B,EAAE,KAAK;QACnC,UAAU,EAAE,KAAK;QACjB,gBAAgB,EAAE,qBAAqB;KACxC,CACF,CAAC;IACF,IACE,WAAW,KAAK,yBAAyB;QACzC,WAAW,YAAY,kCAAkC,EACzD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,WAAW;QAChB,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE;QAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AAChC,CAAC;AACD,KAAK,UAAU,4CAA4C,CACzD,KAKC;IAED,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,+CAA+C,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACnC,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;QACzC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,qBAAqB,EAAE,KAAK,CAAC,gBAAgB,EAAE,aAAa;QAC5D,IAAI;KACL,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,IACE,MAAM,wCAAwC,CAAC;YAC7C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,SAAS;YAClB,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;SACvD,CAAC,EACF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC7C,CAAC;QAED,IAAI,+BAA+B,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,CAAC,CAAC;YACH,6BAA6B,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACzE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACnC,CAAC;QAED,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;SACzB,CAAC,CAAC;QACH,SAAS,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,6CAA6C,CAAC;YACnD,GAAG,KAAK;YACR,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,sCAAsC,CACjE,IAAI,EACJ,SAAS,CAAC,QAAQ,EAClB,EAAE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,EAAE,CACzD,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE;gBACN,UAAU,EAAE,IAAI,UAAU,EAAE;gBAC5B,gBAAgB,EAAE,EAAE;gBACpB,2BAA2B,EAAE,CAAC;gBAC9B,yBAAyB,EAAE,KAAK;gBAChC,iBAAiB,EAAE,CAAC,SAAS,CAAC,YAAY;gBAC1C,cAAc;gBACd,IAAI;gBACJ,uBAAuB,EAAE,EAAE;gBAC3B,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,uBAAuB,EAAE,EAAE;gBAC3B,wBAAwB,EAAE,KAAK;aAChC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YAChC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AA6DD,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAA8B,EAC9B,wBAAmD;IAEnD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzD,OAAO,4CAA4C,CAAC;QAClD,GAAG,KAAK;QACR,wBAAwB;KACzB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type {\n  DocumentCreateResponse,\n  DocumentSyncResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  isAccessManifestBundleWireResponse,\n  isDocumentContentKeyBundleResponse,\n  isDocumentKekTargetsResponse,\n} from \"@tearleads/validators/response\";\nimport type {\n  DocumentSyncUpdateIsolationError,\n  IncomingDocumentSyncUpdateValidator,\n} from \"../../../data/documents/shared/documentSyncUpdateIsolation\";\nimport {\n  isRetryableDocumentSyncConflict,\n  persistedDocumentSyncStateFromResponse,\n  submitDocumentSync,\n} from \"../../../data/documents/shared/responses\";\nimport {\n  type DocumentSyncPullContinuation,\n  resolvePullContinuationMinLsn,\n} from \"../../../data/documents/shared/syncPagination\";\nimport type {\n  DocumentCreateAuthor,\n  DocumentSyncApi,\n  DocumentSyncPlan,\n  DocumentWriterPublicKeyResolver,\n  PersistedDocumentSyncState,\n  SyncRemoteDocumentResult,\n} from \"../../../data/documents/shared/types\";\nimport { projectionVerificationOptions } from \"../../../data/documents/shared/types\";\nimport { readCanonicalRecord } from \"../../../data/keying/canonicalJson\";\nimport type {\n  ProjectionUserKeyResolver,\n  ReferencedPrincipalPolicyWarmer,\n} from \"../../../data/keyingProjectionVerification\";\nimport type { PendingUpdateRecord } from \"../../../data/sqlite/documentPersistence\";\nimport type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\nimport { limitDocumentSyncRequestBytes } from \"../../../data/sync/documentSyncOutgoingBatch\";\nimport {\n  assertRawContinuationCanRetry,\n  refreshSyncAttemptWriterProjection,\n  resolveSyncAttemptWriterProjection,\n} from \"../syncFailures\";\nimport {\n  handleUpstreamDeletedDocumentSyncFailure,\n  projectionIntegrityErrorCode,\n  type RemoteDocumentDeletionHandler,\n  type TerminalSubmitFailureHandler,\n} from \"../syncFailures/syncFailureClassification\";\nimport { DocumentRawHistoryUnavailableError } from \"../syncPlan/syncContentKeys\";\nimport { buildDocumentSyncPlan } from \"../syncPlan/syncPlanIdentity\";\nimport { buildMaterializedDocumentSyncPlan } from \"../syncPlan/syncPlanMaterial\";\nimport type { RekeyPendingUpdate } from \"../syncRekeys/syncRecoveryRekey\";\nimport {\n  handleReadOnlyProjectionCompletionError,\n  REFRESH_CACHED_PROJECTION,\n} from \"./readOnlyProjectionFailure\";\nimport type { DocumentSyncContainerRekeyBuilder } from \"./syncAttemptState\";\nimport { syncRemoteDocumentResultFromResponse } from \"./syncResponseResult\";\nimport { type DocumentSyncTraceEmitter, traceSubmitFailed } from \"./syncTrace\";\n\nasync function completeReadOnlyRemoteDocumentSyncWithProjection(\n  input: Omit<ReadOnlyDocumentSyncCompletionInput, \"writerProjection\"> & {\n    writerProjection: DocumentWriterProjectionResponse;\n  },\n): Promise<SyncRemoteDocumentResult> {\n  const materializedPlan = await buildMaterializedDocumentSyncPlan({\n    author: input.author,\n    execSql: input.execSql,\n    historyMode: input.historyMode,\n    localVersionVector: input.localVersionVector,\n    minLsn: resolvePullContinuationMinLsn(input.pullContinuation, input.minLsn),\n    pullCursor: input.pullContinuation?.cursor,\n    onSyncTrace: input.onSyncTrace,\n    pendingUpdates: [],\n    signedAt: input.signedAt,\n    targetSecretKey: input.targetSecretKey,\n    writerProjection: input.writerProjection,\n    ...projectionVerificationOptions(input),\n  });\n\n  const result = await syncRemoteDocumentResultFromResponse({\n    ...projectionVerificationOptions(input),\n    execSql: input.execSql,\n    materializedPlan,\n    recoveryPendingUpdatesById: new Map(),\n    resolveWriterPublicKey: input.resolveWriterPublicKey,\n    response: input.response,\n    targetSecretKey: input.targetSecretKey,\n    validateIncomingUpdates: input.validateIncomingUpdates,\n    writerProjection: input.writerProjection,\n    resolveProjectionUserKey: input.resolveProjectionUserKey,\n  });\n  return {\n    ...result,\n    hasIncompletePull: !input.pullComplete,\n  };\n}\n\nfunction parsePersistedDocumentSyncRecord<T>(\n  value: string | null | undefined,\n  label: string,\n  isRecord: (value: unknown) => value is T,\n): T | null {\n  if (!value) {\n    return null;\n  }\n\n  try {\n    const record = readCanonicalRecord(JSON.parse(value), label);\n    return isRecord(record) ? record : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction parsePersistedDocumentSyncState(\n  persistedState: PersistedDocumentSyncState | null | undefined,\n  documentId: string,\n): {\n  contentKeyBundle: DocumentCreateResponse[\"contentKeyBundle\"];\n  documentKekTargets: DocumentSyncResponse[\"documentKekTargets\"];\n  documentManifest: DocumentCreateResponse[\"accessManifest\"];\n} | null {\n  if (persistedState?.documentId !== documentId) {\n    return null;\n  }\n\n  const contentKeyBundle = parsePersistedDocumentSyncRecord(\n    persistedState.contentKeyBundle,\n    \"Persisted document sync content-key bundle\",\n    isDocumentContentKeyBundleResponse,\n  );\n  const documentKekTargets = parsePersistedDocumentSyncRecord(\n    persistedState.documentKekTargets,\n    \"Persisted document sync KEK targets\",\n    isDocumentKekTargetsResponse,\n  );\n  const documentManifest = parsePersistedDocumentSyncRecord(\n    persistedState.documentManifestBundle,\n    \"Persisted document sync manifest\",\n    isAccessManifestBundleWireResponse,\n  );\n\n  if (!contentKeyBundle || !documentKekTargets || !documentManifest) {\n    return null;\n  }\n\n  return {\n    contentKeyBundle,\n    documentKekTargets,\n    documentManifest,\n  };\n}\n\nasync function buildReadOnlyDocumentSyncPlanFromPersistedState(input: {\n  author: DocumentCreateAuthor;\n  documentId: string;\n  historyMode?: \"raw\" | undefined;\n  localVersionVector: string | null;\n  minLsn?: string | undefined;\n  pullContinuation?: DocumentSyncPullContinuation | undefined;\n  persistedState?: PersistedDocumentSyncState | null | undefined;\n  signedAt?: string | undefined;\n}): Promise<DocumentSyncPlan | null> {\n  const persisted = parsePersistedDocumentSyncState(\n    input.persistedState,\n    input.documentId,\n  );\n  if (!persisted) {\n    return null;\n  }\n\n  const plan = await buildDocumentSyncPlan({\n    author: input.author,\n    contentKeyBundle: persisted.contentKeyBundle,\n    documentId: input.documentId,\n    documentKekTargets: persisted.documentKekTargets,\n    documentManifest: persisted.documentManifest,\n    historyMode: input.historyMode,\n    localVersionVector: input.localVersionVector,\n    minLsn: resolvePullContinuationMinLsn(input.pullContinuation, input.minLsn),\n    outgoingUpdates: [],\n    pullCursor: input.pullContinuation?.cursor,\n    signedAt: input.signedAt,\n  });\n  const request = limitDocumentSyncRequestBytes(plan.request);\n  return request === plan.request ? plan : { ...plan, request };\n}\n\ntype PersistedReadOnlyDocumentSyncResult =\n  | {\n      kind: \"completed\";\n      result: SyncRemoteDocumentResult | null;\n    }\n  | {\n      kind: \"not_completed\";\n    };\n\ninterface ReadOnlyDocumentSyncCompletionInput {\n  apiClient: DocumentSyncApi;\n  author: DocumentCreateAuthor;\n  documentId: string;\n  execSql: ExecSql;\n  historyMode?: \"raw\" | undefined;\n  localVersionVector: string | null;\n  minLsn?: string | undefined;\n  pullContinuation?: DocumentSyncPullContinuation | undefined;\n  onReadOnlyProjectionFailure?: TerminalSubmitFailureHandler | undefined;\n  onRemoteDocumentDeleted?: RemoteDocumentDeletionHandler | undefined;\n  onSyncTrace?: DocumentSyncTraceEmitter | undefined;\n  pullComplete: boolean;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  resolveWriterPublicKey: DocumentWriterPublicKeyResolver;\n  response: DocumentSyncResponse;\n  signedAt?: string | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  targetSecretKey: Uint8Array;\n  validateIncomingUpdates: IncomingDocumentSyncUpdateValidator;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n  writerProjection?: DocumentWriterProjectionResponse | undefined;\n}\n\nasync function tryCompleteReadOnlyRemoteDocumentSyncWithProjection(input: {\n  allowCachedProjectionRefresh: boolean;\n  completion: ReadOnlyDocumentSyncCompletionInput;\n  writerProjection: DocumentWriterProjectionResponse;\n}): Promise<\n  | DocumentRawHistoryUnavailableError\n  | SyncRemoteDocumentResult\n  | null\n  | typeof REFRESH_CACHED_PROJECTION\n> {\n  try {\n    return await completeReadOnlyRemoteDocumentSyncWithProjection({\n      ...input.completion,\n      writerProjection: input.writerProjection,\n    });\n  } catch (error) {\n    return handleReadOnlyProjectionCompletionError(error, {\n      allowCachedProjectionRefresh: input.allowCachedProjectionRefresh,\n      historyMode: input.completion.historyMode,\n    });\n  }\n}\nasync function completeReadOnlyRemoteDocumentSyncWithUpdates(\n  input: ReadOnlyDocumentSyncCompletionInput,\n): Promise<PersistedReadOnlyDocumentSyncResult> {\n  const reusableWriterProjection =\n    input.writerProjection?.documentId === input.documentId\n      ? input.writerProjection\n      : null;\n  const writerProjection =\n    reusableWriterProjection ??\n    (await resolveSyncAttemptWriterProjection({\n      apiClient: input.apiClient,\n      documentId: input.documentId,\n      onRemoteDocumentDeleted: input.onRemoteDocumentDeleted,\n      onSyncTrace: input.onSyncTrace,\n      onTerminalFailure: input.onReadOnlyProjectionFailure,\n      reusableWriterProjection: null,\n      stillCurrent: input.stillCurrent,\n    }));\n  if (!writerProjection) {\n    return { kind: \"completed\", result: null };\n  }\n  const canRefreshProjection =\n    input.historyMode === \"raw\" || Boolean(reusableWriterProjection);\n  let result:\n    | DocumentRawHistoryUnavailableError\n    | SyncRemoteDocumentResult\n    | null\n    | typeof REFRESH_CACHED_PROJECTION = null;\n  let retryAfterRollback = false;\n  try {\n    result = await tryCompleteReadOnlyRemoteDocumentSyncWithProjection({\n      allowCachedProjectionRefresh: canRefreshProjection,\n      completion: input,\n      writerProjection,\n    });\n  } catch (error) {\n    if (projectionIntegrityErrorCode(error) !== \"rollback\") {\n      throw error;\n    }\n    retryAfterRollback = true;\n  }\n  if (\n    !retryAfterRollback &&\n    result !== REFRESH_CACHED_PROJECTION &&\n    !(result instanceof DocumentRawHistoryUnavailableError) &&\n    (result || !reusableWriterProjection)\n  ) {\n    return { kind: \"completed\", result };\n  }\n  const freshWriterProjection = await refreshSyncAttemptWriterProjection({\n    apiClient: input.apiClient,\n    documentId: input.documentId,\n    onRemoteDocumentDeleted: input.onRemoteDocumentDeleted,\n    onSyncTrace: input.onSyncTrace,\n    onTerminalFailure: input.onReadOnlyProjectionFailure,\n    stillCurrent: input.stillCurrent,\n    unavailableError:\n      result instanceof DocumentRawHistoryUnavailableError ? result : undefined,\n  });\n  if (!freshWriterProjection) {\n    return { kind: \"completed\", result: null };\n  }\n  const freshResult = await tryCompleteReadOnlyRemoteDocumentSyncWithProjection(\n    {\n      allowCachedProjectionRefresh: false,\n      completion: input,\n      writerProjection: freshWriterProjection,\n    },\n  );\n  if (\n    freshResult === REFRESH_CACHED_PROJECTION ||\n    freshResult instanceof DocumentRawHistoryUnavailableError\n  ) {\n    throw new Error(\"Fresh document projection unexpectedly requested refresh\");\n  }\n  return freshResult\n    ? { kind: \"completed\", result: freshResult }\n    : { kind: \"not_completed\" };\n}\nasync function syncReadOnlyRemoteDocumentFromPersistedState(\n  input: Omit<\n    ReadOnlyDocumentSyncCompletionInput,\n    \"pullComplete\" | \"response\"\n  > & {\n    persistedState?: PersistedDocumentSyncState | null | undefined;\n  },\n): Promise<PersistedReadOnlyDocumentSyncResult> {\n  let plan: DocumentSyncPlan | null;\n  try {\n    plan = await buildReadOnlyDocumentSyncPlanFromPersistedState(input);\n  } catch {\n    plan = null;\n  }\n  if (!plan) {\n    return { kind: \"not_completed\" };\n  }\n  if (input.stillCurrent?.() === false) {\n    return { kind: \"completed\", result: null };\n  }\n  const submitted = await submitDocumentSync({\n    apiClient: input.apiClient,\n    expectedCommitLsnMode: input.pullContinuation?.commitLsnMode,\n    plan,\n  });\n  if (input.stillCurrent?.() === false) {\n    return { kind: \"completed\", result: null };\n  }\n  if (!submitted) {\n    return { kind: \"completed\", result: null };\n  }\n  if (!submitted.ok) {\n    if (\n      await handleUpstreamDeletedDocumentSyncFailure({\n        documentId: input.documentId,\n        failure: submitted,\n        onRemoteDocumentDeleted: input.onRemoteDocumentDeleted,\n      })\n    ) {\n      return { kind: \"completed\", result: null };\n    }\n\n    if (isRetryableDocumentSyncConflict(submitted)) {\n      traceSubmitFailed(input.onSyncTrace, {\n        action: \"retry\",\n        code: submitted.code,\n        documentId: input.documentId,\n        status: submitted.status,\n      });\n      assertRawContinuationCanRetry(input.historyMode, input.pullContinuation);\n      return { kind: \"not_completed\" };\n    }\n\n    traceSubmitFailed(input.onSyncTrace, {\n      action: \"stop\",\n      code: submitted.code,\n      documentId: input.documentId,\n      status: submitted.status,\n    });\n    submitted.report();\n    return { kind: \"completed\", result: null };\n  }\n\n  if (submitted.response.updates.length > 0) {\n    return completeReadOnlyRemoteDocumentSyncWithUpdates({\n      ...input,\n      pullComplete: submitted.pullComplete,\n      response: submitted.response,\n    });\n  }\n\n  try {\n    const persistedState = await persistedDocumentSyncStateFromResponse(\n      plan,\n      submitted.response,\n      { resolveWriterPublicKey: input.resolveWriterPublicKey },\n    );\n\n    return {\n      kind: \"completed\",\n      result: {\n        contentKey: new Uint8Array(),\n        decryptedUpdates: [],\n        exhaustedPendingUpdateCount: 0,\n        hasDeferredPendingUpdates: false,\n        hasIncompletePull: !submitted.pullComplete,\n        persistedState,\n        plan,\n        rekeyedPendingUpdateIds: [],\n        response: submitted.response,\n        settledPendingUpdateIds: [],\n        acceptedRecoveryBaseline: false,\n      },\n    };\n  } catch (error) {\n    if (input.historyMode === \"raw\") {\n      throw error;\n    }\n    return { kind: \"not_completed\" };\n  }\n}\n\nexport interface SyncRemoteDocumentInput {\n  apiClient: DocumentSyncApi;\n  author: DocumentCreateAuthor;\n  /**\n   * Supplies a full-history Loro snapshot of the local document so a\n   * write-bearing pass can heal a stale content-key bundle by rotating to a\n   * fresh content key anchored by a rotation baseline.\n   */\n  buildRotationSnapshot?: (() => Promise<Uint8Array | null>) | undefined;\n  /** Overrides automatic ancestor repair for each submission's current projection. */\n  buildContainerRekeys?: DocumentSyncContainerRekeyBuilder;\n  documentId: string;\n  execSql: ExecSql;\n  /** Explicit read-only recovery that bypasses rotation-baseline redirect. */\n  historyMode?: \"raw\" | undefined;\n  isRemoteSyncBlocked?: ((organizationId: string) => boolean) | undefined;\n  localVersionVector: string | null;\n  minLsn?: string | undefined;\n  pullContinuation?: DocumentSyncPullContinuation | undefined;\n  /** Atomically commits the verified purge proof with matching local teardown. */\n  onRemoteDocumentDeleted?: RemoteDocumentDeletionHandler | undefined;\n  onSyncAbandoned?: ((reason: string) => void) | undefined;\n  /** Clipboard-safe trace sink (see syncTrace.ts); never receives content. */\n  onSyncTrace?: DocumentSyncTraceEmitter | undefined;\n  /**\n   * Fires when a pass WITHOUT queued writes cannot resolve its writer\n   * projection (e.g. a coded 409 from the projection route). Read-only\n   * revalidation otherwise fails silently — one burned request and a trace\n   * line — leaving the document permanently stale with nothing durable to\n   * explain why (edge-case row 13).\n   */\n  onReadOnlyProjectionFailure?: TerminalSubmitFailureHandler | undefined;\n  /** Records a verified response update that could not be decrypted/imported. */\n  onIncomingUpdateIsolationFailure?:\n    | ((failure: DocumentSyncUpdateIsolationError) => void | Promise<void>)\n    | undefined;\n  /** Fires immediately before a materialized outgoing batch is submitted. */\n  onOutgoingUpdatesMaterialized?:\n    | ((updateIds: readonly string[]) => void)\n    | undefined;\n  /** Invalidates continuation state after the server rejects its snapshot. */\n  onPullContinuationInvalidated?:\n    | ((continuation: DocumentSyncPullContinuation) => void | Promise<void>)\n    | undefined;\n  onTerminalSubmitFailure?: TerminalSubmitFailureHandler | undefined;\n  pendingUpdates?: readonly PendingUpdateRecord[] | undefined;\n  persistedState?: PersistedDocumentSyncState | null | undefined;\n  rekeyPendingUpdate?: RekeyPendingUpdate | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  resolveWriterPublicKey: DocumentWriterPublicKeyResolver;\n  signedAt?: string | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  targetSecretKey: Uint8Array;\n  /** Validates decrypted updates against scratch state before callers persist. */\n  validateIncomingUpdates: IncomingDocumentSyncUpdateValidator;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n  writerProjection?: DocumentWriterProjectionResponse | undefined;\n}\n\nexport async function tryPersistedReadOnlyDocumentSync(\n  input: SyncRemoteDocumentInput,\n  resolveProjectionUserKey: ProjectionUserKeyResolver,\n): Promise<PersistedReadOnlyDocumentSyncResult | null> {\n  if (input.stillCurrent?.() === false) return null;\n  if ((input.pendingUpdates ?? []).length > 0) return null;\n\n  return syncReadOnlyRemoteDocumentFromPersistedState({\n    ...input,\n    resolveProjectionUserKey,\n  });\n}\n"]}
+{"version":3,"file":"readOnlySync.js","sourceRoot":"","sources":["readOnlySync.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,kCAAkC,EAClC,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,+BAA+B,EAC/B,sCAAsC,EACtC,kBAAkB,GACnB,MAAM,0CAA0C,CAAC;AAKlD,OAAO,EAEL,6BAA6B,GAC9B,MAAM,oDAAoD,CAAC;AAS5D,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAOzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAClC,kCAAkC,GACnC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,wCAAwC,EACxC,4BAA4B,GAG7B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAC;AAEjF,OAAO,EACL,uCAAuC,EACvC,yBAAyB,GAC1B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,oCAAoC,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAiC,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE/E,KAAK,UAAU,gDAAgD,CAC7D,KAEC;IAED,MAAM,gBAAgB,GAAG,MAAM,iCAAiC,CAAC;QAC/D,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,MAAM,EAAE,6BAA6B,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC;QAC3E,UAAU,EAAE,KAAK,CAAC,gBAAgB,EAAE,MAAM;QAC1C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,EAAE;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,GAAG,6BAA6B,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,oCAAoC,CAAC;QACxD,GAAG,6BAA6B,CAAC,KAAK,CAAC;QACvC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB;QAChB,0BAA0B,EAAE,IAAI,GAAG,EAAE;QACrC,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;KACzD,CAAC,CAAC;IACH,OAAO;QACL,GAAG,MAAM;QACT,iBAAiB,EAAE,CAAC,KAAK,CAAC,YAAY;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,KAAgC,EAChC,KAAa,EACb,QAAwC;IAExC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,cAA6D,EAC7D,UAAkB;IAMlB,IAAI,cAAc,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,GAAG,gCAAgC,CACvD,cAAc,CAAC,gBAAgB,EAC/B,4CAA4C,EAC5C,kCAAkC,CACnC,CAAC;IACF,MAAM,kBAAkB,GAAG,gCAAgC,CACzD,cAAc,CAAC,kBAAkB,EACjC,qCAAqC,EACrC,4BAA4B,CAC7B,CAAC;IACF,MAAM,gBAAgB,GAAG,gCAAgC,CACvD,cAAc,CAAC,sBAAsB,EACrC,kCAAkC,EAClC,kCAAkC,CACnC,CAAC;IAEF,IAAI,CAAC,gBAAgB,IAAI,CAAC,kBAAkB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,gBAAgB;QAChB,kBAAkB;QAClB,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,+CAA+C,CAAC,KAS9D;IACC,MAAM,SAAS,GAAG,+BAA+B,CAC/C,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,UAAU,CACjB,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC;QACvC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;QAChD,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;QAC5C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,MAAM,EAAE,6BAA6B,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC;QAC3E,eAAe,EAAE,EAAE;QACnB,UAAU,EAAE,KAAK,CAAC,gBAAgB,EAAE,MAAM;QAC1C,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,OAAO,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;AAChE,CAAC;AAmCD,KAAK,UAAU,mDAAmD,CAAC,KAIlE;IAMC,IAAI,CAAC;QACH,OAAO,MAAM,gDAAgD,CAAC;YAC5D,GAAG,KAAK,CAAC,UAAU;YACnB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,uCAAuC,CAAC,KAAK,EAAE;YACpD,4BAA4B,EAAE,KAAK,CAAC,4BAA4B;YAChE,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW;SAC1C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AACD,KAAK,UAAU,6CAA6C,CAC1D,KAA0C;IAE1C,MAAM,wBAAwB,GAC5B,KAAK,CAAC,gBAAgB,EAAE,UAAU,KAAK,KAAK,CAAC,UAAU;QACrD,CAAC,CAAC,KAAK,CAAC,gBAAgB;QACxB,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,gBAAgB,GACpB,wBAAwB;QACxB,CAAC,MAAM,kCAAkC,CAAC;YACxC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,iBAAiB,EAAE,KAAK,CAAC,2BAA2B;YACpD,wBAAwB,EAAE,IAAI;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC,CAAC;IACN,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,oBAAoB,GACxB,KAAK,CAAC,WAAW,KAAK,KAAK,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACnE,IAAI,MAAM,GAI6B,IAAI,CAAC;IAC5C,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,mDAAmD,CAAC;YACjE,4BAA4B,EAAE,oBAAoB;YAClD,UAAU,EAAE,KAAK;YACjB,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,4BAA4B,CAAC,KAAK,CAAC,KAAK,UAAU,EAAE,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,kBAAkB,GAAG,IAAI,CAAC;IAC5B,CAAC;IACD,IACE,CAAC,kBAAkB;QACnB,MAAM,KAAK,yBAAyB;QACpC,CAAC,CAAC,MAAM,YAAY,kCAAkC,CAAC;QACvD,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,EACrC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,qBAAqB,GAAG,MAAM,kCAAkC,CAAC;QACrE,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,iBAAiB,EAAE,KAAK,CAAC,2BAA2B;QACpD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,gBAAgB,EACd,MAAM,YAAY,kCAAkC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KAC5E,CAAC,CAAC;IACH,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,mDAAmD,CAC3E;QACE,4BAA4B,EAAE,KAAK;QACnC,UAAU,EAAE,KAAK;QACjB,gBAAgB,EAAE,qBAAqB;KACxC,CACF,CAAC;IACF,IACE,WAAW,KAAK,yBAAyB;QACzC,WAAW,YAAY,kCAAkC,EACzD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,WAAW;QAChB,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE;QAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AAChC,CAAC;AACD,KAAK,UAAU,4CAA4C,CACzD,KAKC;IAED,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,+CAA+C,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACnC,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;QACzC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,qBAAqB,EAAE,KAAK,CAAC,gBAAgB,EAAE,aAAa;QAC5D,IAAI;KACL,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,IACE,MAAM,wCAAwC,CAAC;YAC7C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,SAAS;YAClB,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;SACvD,CAAC,EACF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC7C,CAAC;QAED,IAAI,+BAA+B,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,CAAC,CAAC;YACH,6BAA6B,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACzE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACnC,CAAC;QAED,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;SACzB,CAAC,CAAC;QACH,SAAS,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,6CAA6C,CAAC;YACnD,GAAG,KAAK;YACR,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,sCAAsC,CACjE,IAAI,EACJ,SAAS,CAAC,QAAQ,EAClB,EAAE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,EAAE,CACzD,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE;gBACN,UAAU,EAAE,IAAI,UAAU,EAAE;gBAC5B,gBAAgB,EAAE,EAAE;gBACpB,2BAA2B,EAAE,CAAC;gBAC9B,yBAAyB,EAAE,KAAK;gBAChC,iBAAiB,EAAE,CAAC,SAAS,CAAC,YAAY;gBAC1C,cAAc;gBACd,IAAI;gBACJ,uBAAuB,EAAE,EAAE;gBAC3B,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,uBAAuB,EAAE,EAAE;gBAC3B,wBAAwB,EAAE,KAAK;aAChC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YAChC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AA6DD,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAA8B,EAC9B,wBAAmD;IAEnD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzD,OAAO,4CAA4C,CAAC;QAClD,GAAG,KAAK;QACR,wBAAwB;KACzB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type {\n  DocumentCreateResponse,\n  DocumentSyncResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  isAccessManifestBundleWireResponse,\n  isDocumentContentKeyBundleResponse,\n  isDocumentKekTargetsResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  isRetryableDocumentSyncConflict,\n  persistedDocumentSyncStateFromResponse,\n  submitDocumentSync,\n} from \"../../../data/documents/shared/responses\";\nimport type {\n  DocumentSyncUpdateIsolationError,\n  IncomingDocumentSyncUpdateValidator,\n} from \"../../../data/documents/shared/sync/documentSyncUpdateIsolation\";\nimport {\n  type DocumentSyncPullContinuation,\n  resolvePullContinuationMinLsn,\n} from \"../../../data/documents/shared/sync/syncPagination\";\nimport type {\n  DocumentCreateAuthor,\n  DocumentSyncApi,\n  DocumentSyncPlan,\n  DocumentWriterPublicKeyResolver,\n  PersistedDocumentSyncState,\n  SyncRemoteDocumentResult,\n} from \"../../../data/documents/shared/types\";\nimport { projectionVerificationOptions } from \"../../../data/documents/shared/types\";\nimport { readCanonicalRecord } from \"../../../data/keying/canonicalJson\";\nimport type {\n  ProjectionUserKeyResolver,\n  ReferencedPrincipalPolicyWarmer,\n} from \"../../../data/keyingProjectionVerification\";\nimport type { PendingUpdateRecord } from \"../../../data/sqlite/documentPersistence\";\nimport type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\nimport { limitDocumentSyncRequestBytes } from \"../../../data/sync/documentSyncOutgoingBatch\";\nimport {\n  assertRawContinuationCanRetry,\n  refreshSyncAttemptWriterProjection,\n  resolveSyncAttemptWriterProjection,\n} from \"../syncFailures\";\nimport {\n  handleUpstreamDeletedDocumentSyncFailure,\n  projectionIntegrityErrorCode,\n  type RemoteDocumentDeletionHandler,\n  type TerminalSubmitFailureHandler,\n} from \"../syncFailures/syncFailureClassification\";\nimport { DocumentRawHistoryUnavailableError } from \"../syncPlan/syncContentKeys\";\nimport { buildDocumentSyncPlan } from \"../syncPlan/syncPlanIdentity\";\nimport { buildMaterializedDocumentSyncPlan } from \"../syncPlan/syncPlanMaterial\";\nimport type { RekeyPendingUpdate } from \"../syncRekeys/syncRecoveryRekey\";\nimport {\n  handleReadOnlyProjectionCompletionError,\n  REFRESH_CACHED_PROJECTION,\n} from \"./readOnlyProjectionFailure\";\nimport type { DocumentSyncContainerRekeyBuilder } from \"./syncAttemptState\";\nimport { syncRemoteDocumentResultFromResponse } from \"./syncResponseResult\";\nimport { type DocumentSyncTraceEmitter, traceSubmitFailed } from \"./syncTrace\";\n\nasync function completeReadOnlyRemoteDocumentSyncWithProjection(\n  input: Omit<ReadOnlyDocumentSyncCompletionInput, \"writerProjection\"> & {\n    writerProjection: DocumentWriterProjectionResponse;\n  },\n): Promise<SyncRemoteDocumentResult> {\n  const materializedPlan = await buildMaterializedDocumentSyncPlan({\n    author: input.author,\n    execSql: input.execSql,\n    historyMode: input.historyMode,\n    localVersionVector: input.localVersionVector,\n    minLsn: resolvePullContinuationMinLsn(input.pullContinuation, input.minLsn),\n    pullCursor: input.pullContinuation?.cursor,\n    onSyncTrace: input.onSyncTrace,\n    pendingUpdates: [],\n    signedAt: input.signedAt,\n    targetSecretKey: input.targetSecretKey,\n    writerProjection: input.writerProjection,\n    ...projectionVerificationOptions(input),\n  });\n\n  const result = await syncRemoteDocumentResultFromResponse({\n    ...projectionVerificationOptions(input),\n    execSql: input.execSql,\n    materializedPlan,\n    recoveryPendingUpdatesById: new Map(),\n    resolveWriterPublicKey: input.resolveWriterPublicKey,\n    response: input.response,\n    targetSecretKey: input.targetSecretKey,\n    validateIncomingUpdates: input.validateIncomingUpdates,\n    writerProjection: input.writerProjection,\n    resolveProjectionUserKey: input.resolveProjectionUserKey,\n  });\n  return {\n    ...result,\n    hasIncompletePull: !input.pullComplete,\n  };\n}\n\nfunction parsePersistedDocumentSyncRecord<T>(\n  value: string | null | undefined,\n  label: string,\n  isRecord: (value: unknown) => value is T,\n): T | null {\n  if (!value) {\n    return null;\n  }\n\n  try {\n    const record = readCanonicalRecord(JSON.parse(value), label);\n    return isRecord(record) ? record : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction parsePersistedDocumentSyncState(\n  persistedState: PersistedDocumentSyncState | null | undefined,\n  documentId: string,\n): {\n  contentKeyBundle: DocumentCreateResponse[\"contentKeyBundle\"];\n  documentKekTargets: DocumentSyncResponse[\"documentKekTargets\"];\n  documentManifest: DocumentCreateResponse[\"accessManifest\"];\n} | null {\n  if (persistedState?.documentId !== documentId) {\n    return null;\n  }\n\n  const contentKeyBundle = parsePersistedDocumentSyncRecord(\n    persistedState.contentKeyBundle,\n    \"Persisted document sync content-key bundle\",\n    isDocumentContentKeyBundleResponse,\n  );\n  const documentKekTargets = parsePersistedDocumentSyncRecord(\n    persistedState.documentKekTargets,\n    \"Persisted document sync KEK targets\",\n    isDocumentKekTargetsResponse,\n  );\n  const documentManifest = parsePersistedDocumentSyncRecord(\n    persistedState.documentManifestBundle,\n    \"Persisted document sync manifest\",\n    isAccessManifestBundleWireResponse,\n  );\n\n  if (!contentKeyBundle || !documentKekTargets || !documentManifest) {\n    return null;\n  }\n\n  return {\n    contentKeyBundle,\n    documentKekTargets,\n    documentManifest,\n  };\n}\n\nasync function buildReadOnlyDocumentSyncPlanFromPersistedState(input: {\n  author: DocumentCreateAuthor;\n  documentId: string;\n  historyMode?: \"raw\" | undefined;\n  localVersionVector: string | null;\n  minLsn?: string | undefined;\n  pullContinuation?: DocumentSyncPullContinuation | undefined;\n  persistedState?: PersistedDocumentSyncState | null | undefined;\n  signedAt?: string | undefined;\n}): Promise<DocumentSyncPlan | null> {\n  const persisted = parsePersistedDocumentSyncState(\n    input.persistedState,\n    input.documentId,\n  );\n  if (!persisted) {\n    return null;\n  }\n\n  const plan = await buildDocumentSyncPlan({\n    author: input.author,\n    contentKeyBundle: persisted.contentKeyBundle,\n    documentId: input.documentId,\n    documentKekTargets: persisted.documentKekTargets,\n    documentManifest: persisted.documentManifest,\n    historyMode: input.historyMode,\n    localVersionVector: input.localVersionVector,\n    minLsn: resolvePullContinuationMinLsn(input.pullContinuation, input.minLsn),\n    outgoingUpdates: [],\n    pullCursor: input.pullContinuation?.cursor,\n    signedAt: input.signedAt,\n  });\n  const request = limitDocumentSyncRequestBytes(plan.request);\n  return request === plan.request ? plan : { ...plan, request };\n}\n\ntype PersistedReadOnlyDocumentSyncResult =\n  | {\n      kind: \"completed\";\n      result: SyncRemoteDocumentResult | null;\n    }\n  | {\n      kind: \"not_completed\";\n    };\n\ninterface ReadOnlyDocumentSyncCompletionInput {\n  apiClient: DocumentSyncApi;\n  author: DocumentCreateAuthor;\n  documentId: string;\n  execSql: ExecSql;\n  historyMode?: \"raw\" | undefined;\n  localVersionVector: string | null;\n  minLsn?: string | undefined;\n  pullContinuation?: DocumentSyncPullContinuation | undefined;\n  onReadOnlyProjectionFailure?: TerminalSubmitFailureHandler | undefined;\n  onRemoteDocumentDeleted?: RemoteDocumentDeletionHandler | undefined;\n  onSyncTrace?: DocumentSyncTraceEmitter | undefined;\n  pullComplete: boolean;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  resolveWriterPublicKey: DocumentWriterPublicKeyResolver;\n  response: DocumentSyncResponse;\n  signedAt?: string | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  targetSecretKey: Uint8Array;\n  validateIncomingUpdates: IncomingDocumentSyncUpdateValidator;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n  writerProjection?: DocumentWriterProjectionResponse | undefined;\n}\n\nasync function tryCompleteReadOnlyRemoteDocumentSyncWithProjection(input: {\n  allowCachedProjectionRefresh: boolean;\n  completion: ReadOnlyDocumentSyncCompletionInput;\n  writerProjection: DocumentWriterProjectionResponse;\n}): Promise<\n  | DocumentRawHistoryUnavailableError\n  | SyncRemoteDocumentResult\n  | null\n  | typeof REFRESH_CACHED_PROJECTION\n> {\n  try {\n    return await completeReadOnlyRemoteDocumentSyncWithProjection({\n      ...input.completion,\n      writerProjection: input.writerProjection,\n    });\n  } catch (error) {\n    return handleReadOnlyProjectionCompletionError(error, {\n      allowCachedProjectionRefresh: input.allowCachedProjectionRefresh,\n      historyMode: input.completion.historyMode,\n    });\n  }\n}\nasync function completeReadOnlyRemoteDocumentSyncWithUpdates(\n  input: ReadOnlyDocumentSyncCompletionInput,\n): Promise<PersistedReadOnlyDocumentSyncResult> {\n  const reusableWriterProjection =\n    input.writerProjection?.documentId === input.documentId\n      ? input.writerProjection\n      : null;\n  const writerProjection =\n    reusableWriterProjection ??\n    (await resolveSyncAttemptWriterProjection({\n      apiClient: input.apiClient,\n      documentId: input.documentId,\n      onRemoteDocumentDeleted: input.onRemoteDocumentDeleted,\n      onSyncTrace: input.onSyncTrace,\n      onTerminalFailure: input.onReadOnlyProjectionFailure,\n      reusableWriterProjection: null,\n      stillCurrent: input.stillCurrent,\n    }));\n  if (!writerProjection) {\n    return { kind: \"completed\", result: null };\n  }\n  const canRefreshProjection =\n    input.historyMode === \"raw\" || Boolean(reusableWriterProjection);\n  let result:\n    | DocumentRawHistoryUnavailableError\n    | SyncRemoteDocumentResult\n    | null\n    | typeof REFRESH_CACHED_PROJECTION = null;\n  let retryAfterRollback = false;\n  try {\n    result = await tryCompleteReadOnlyRemoteDocumentSyncWithProjection({\n      allowCachedProjectionRefresh: canRefreshProjection,\n      completion: input,\n      writerProjection,\n    });\n  } catch (error) {\n    if (projectionIntegrityErrorCode(error) !== \"rollback\") {\n      throw error;\n    }\n    retryAfterRollback = true;\n  }\n  if (\n    !retryAfterRollback &&\n    result !== REFRESH_CACHED_PROJECTION &&\n    !(result instanceof DocumentRawHistoryUnavailableError) &&\n    (result || !reusableWriterProjection)\n  ) {\n    return { kind: \"completed\", result };\n  }\n  const freshWriterProjection = await refreshSyncAttemptWriterProjection({\n    apiClient: input.apiClient,\n    documentId: input.documentId,\n    onRemoteDocumentDeleted: input.onRemoteDocumentDeleted,\n    onSyncTrace: input.onSyncTrace,\n    onTerminalFailure: input.onReadOnlyProjectionFailure,\n    stillCurrent: input.stillCurrent,\n    unavailableError:\n      result instanceof DocumentRawHistoryUnavailableError ? result : undefined,\n  });\n  if (!freshWriterProjection) {\n    return { kind: \"completed\", result: null };\n  }\n  const freshResult = await tryCompleteReadOnlyRemoteDocumentSyncWithProjection(\n    {\n      allowCachedProjectionRefresh: false,\n      completion: input,\n      writerProjection: freshWriterProjection,\n    },\n  );\n  if (\n    freshResult === REFRESH_CACHED_PROJECTION ||\n    freshResult instanceof DocumentRawHistoryUnavailableError\n  ) {\n    throw new Error(\"Fresh document projection unexpectedly requested refresh\");\n  }\n  return freshResult\n    ? { kind: \"completed\", result: freshResult }\n    : { kind: \"not_completed\" };\n}\nasync function syncReadOnlyRemoteDocumentFromPersistedState(\n  input: Omit<\n    ReadOnlyDocumentSyncCompletionInput,\n    \"pullComplete\" | \"response\"\n  > & {\n    persistedState?: PersistedDocumentSyncState | null | undefined;\n  },\n): Promise<PersistedReadOnlyDocumentSyncResult> {\n  let plan: DocumentSyncPlan | null;\n  try {\n    plan = await buildReadOnlyDocumentSyncPlanFromPersistedState(input);\n  } catch {\n    plan = null;\n  }\n  if (!plan) {\n    return { kind: \"not_completed\" };\n  }\n  if (input.stillCurrent?.() === false) {\n    return { kind: \"completed\", result: null };\n  }\n  const submitted = await submitDocumentSync({\n    apiClient: input.apiClient,\n    expectedCommitLsnMode: input.pullContinuation?.commitLsnMode,\n    plan,\n  });\n  if (input.stillCurrent?.() === false) {\n    return { kind: \"completed\", result: null };\n  }\n  if (!submitted) {\n    return { kind: \"completed\", result: null };\n  }\n  if (!submitted.ok) {\n    if (\n      await handleUpstreamDeletedDocumentSyncFailure({\n        documentId: input.documentId,\n        failure: submitted,\n        onRemoteDocumentDeleted: input.onRemoteDocumentDeleted,\n      })\n    ) {\n      return { kind: \"completed\", result: null };\n    }\n\n    if (isRetryableDocumentSyncConflict(submitted)) {\n      traceSubmitFailed(input.onSyncTrace, {\n        action: \"retry\",\n        code: submitted.code,\n        documentId: input.documentId,\n        status: submitted.status,\n      });\n      assertRawContinuationCanRetry(input.historyMode, input.pullContinuation);\n      return { kind: \"not_completed\" };\n    }\n\n    traceSubmitFailed(input.onSyncTrace, {\n      action: \"stop\",\n      code: submitted.code,\n      documentId: input.documentId,\n      status: submitted.status,\n    });\n    submitted.report();\n    return { kind: \"completed\", result: null };\n  }\n\n  if (submitted.response.updates.length > 0) {\n    return completeReadOnlyRemoteDocumentSyncWithUpdates({\n      ...input,\n      pullComplete: submitted.pullComplete,\n      response: submitted.response,\n    });\n  }\n\n  try {\n    const persistedState = await persistedDocumentSyncStateFromResponse(\n      plan,\n      submitted.response,\n      { resolveWriterPublicKey: input.resolveWriterPublicKey },\n    );\n\n    return {\n      kind: \"completed\",\n      result: {\n        contentKey: new Uint8Array(),\n        decryptedUpdates: [],\n        exhaustedPendingUpdateCount: 0,\n        hasDeferredPendingUpdates: false,\n        hasIncompletePull: !submitted.pullComplete,\n        persistedState,\n        plan,\n        rekeyedPendingUpdateIds: [],\n        response: submitted.response,\n        settledPendingUpdateIds: [],\n        acceptedRecoveryBaseline: false,\n      },\n    };\n  } catch (error) {\n    if (input.historyMode === \"raw\") {\n      throw error;\n    }\n    return { kind: \"not_completed\" };\n  }\n}\n\nexport interface SyncRemoteDocumentInput {\n  apiClient: DocumentSyncApi;\n  author: DocumentCreateAuthor;\n  /**\n   * Supplies a full-history Loro snapshot of the local document so a\n   * write-bearing pass can heal a stale content-key bundle by rotating to a\n   * fresh content key anchored by a rotation baseline.\n   */\n  buildRotationSnapshot?: (() => Promise<Uint8Array | null>) | undefined;\n  /** Overrides automatic ancestor repair for each submission's current projection. */\n  buildContainerRekeys?: DocumentSyncContainerRekeyBuilder;\n  documentId: string;\n  execSql: ExecSql;\n  /** Explicit read-only recovery that bypasses rotation-baseline redirect. */\n  historyMode?: \"raw\" | undefined;\n  isRemoteSyncBlocked?: ((organizationId: string) => boolean) | undefined;\n  localVersionVector: string | null;\n  minLsn?: string | undefined;\n  pullContinuation?: DocumentSyncPullContinuation | undefined;\n  /** Atomically commits the verified purge proof with matching local teardown. */\n  onRemoteDocumentDeleted?: RemoteDocumentDeletionHandler | undefined;\n  onSyncAbandoned?: ((reason: string) => void) | undefined;\n  /** Clipboard-safe trace sink (see syncTrace.ts); never receives content. */\n  onSyncTrace?: DocumentSyncTraceEmitter | undefined;\n  /**\n   * Fires when a pass WITHOUT queued writes cannot resolve its writer\n   * projection (e.g. a coded 409 from the projection route). Read-only\n   * revalidation otherwise fails silently — one burned request and a trace\n   * line — leaving the document permanently stale with nothing durable to\n   * explain why (edge-case row 13).\n   */\n  onReadOnlyProjectionFailure?: TerminalSubmitFailureHandler | undefined;\n  /** Records a verified response update that could not be decrypted/imported. */\n  onIncomingUpdateIsolationFailure?:\n    | ((failure: DocumentSyncUpdateIsolationError) => void | Promise<void>)\n    | undefined;\n  /** Fires immediately before a materialized outgoing batch is submitted. */\n  onOutgoingUpdatesMaterialized?:\n    | ((updateIds: readonly string[]) => void)\n    | undefined;\n  /** Invalidates continuation state after the server rejects its snapshot. */\n  onPullContinuationInvalidated?:\n    | ((continuation: DocumentSyncPullContinuation) => void | Promise<void>)\n    | undefined;\n  onTerminalSubmitFailure?: TerminalSubmitFailureHandler | undefined;\n  pendingUpdates?: readonly PendingUpdateRecord[] | undefined;\n  persistedState?: PersistedDocumentSyncState | null | undefined;\n  rekeyPendingUpdate?: RekeyPendingUpdate | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  resolveWriterPublicKey: DocumentWriterPublicKeyResolver;\n  signedAt?: string | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  targetSecretKey: Uint8Array;\n  /** Validates decrypted updates against scratch state before callers persist. */\n  validateIncomingUpdates: IncomingDocumentSyncUpdateValidator;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n  writerProjection?: DocumentWriterProjectionResponse | undefined;\n}\n\nexport async function tryPersistedReadOnlyDocumentSync(\n  input: SyncRemoteDocumentInput,\n  resolveProjectionUserKey: ProjectionUserKeyResolver,\n): Promise<PersistedReadOnlyDocumentSyncResult | null> {\n  if (input.stillCurrent?.() === false) return null;\n  if ((input.pendingUpdates ?? []).length > 0) return null;\n\n  return syncReadOnlyRemoteDocumentFromPersistedState({\n    ...input,\n    resolveProjectionUserKey,\n  });\n}\n"]}