@tearleads/client-sdk 0.1.68 → 0.1.71

package/workflows/documents/create/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,yBAAyB,GAE1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,2BAA2B,EAAE,MAAM,8CAA8C,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAQ5F,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AAKrF,OAAO,EACL,iDAAiD,EACjD,wCAAwC,EACxC,gCAAgC,GACjC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qEAAqE,CAAC;AAE/G,OAAO,EAAE,iCAAiC,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EACL,uCAAuC,EACvC,8BAA8B,GAC/B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAE/D,OAAO,EAAE,uCAAuC,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,kBAAkB,CAAC;AAEnE,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,KAYiC;IAEjC,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,IAAI,UAAU,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,wEAAwE;IACxE,qBAAqB;IACrB,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;IAC3D,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,MAAM,+BAA+B,CAAC;QAC5D,UAAU;QACV,eAAe;QACf,UAAU;QACV,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,8BAA8B,EAAE,KAAK,CAAC,8BAA8B;QACpE,UAAU,EAAE,KAAK,CAAC,mBAAmB;QACrC,SAAS,EAAE,KAAK,CAAC,eAAe;QAChC,GAAG,6BAA6B,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,wBAAwB,EAAE,CAAC;QACnC,MAAM,iBAAiB,GACrB,MAAM,iDAAiD,CAAC;YACtD,GAAG,6BAA6B,CAAC,KAAK,CAAC;YACvC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,mBAAmB;YACrC,cAAc,EAAE,KAAK,CAAC,wBAAwB;SAC/C,CAAC,CAAC;QACL,2BAA2B,CAAC;YAC1B,sEAAsE;YACtE,MAAM,EAAE;gBACN,GAAG,KAAK,CAAC,MAAM;gBACf,cAAc,EAAE,KAAK,CAAC,mBAAmB,CAAC,cAAc;aACzD;YACD,UAAU,EAAE,KAAK,CAAC,mBAAmB;YACrC,iBAAiB;YACjB,aAAa,EAAE,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;IACD,wEAAwE;IACxE,6EAA6E;IAC7E,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC;QACzC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,eAAe;QACf,UAAU;QACV,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAClE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrE,eAAe;KAChB,CAAC,CAAC;IAEH,OAAO;QACL,UAAU;QACV,IAAI;KACL,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,0CAA0C,EAAE,MAAM,oBAAoB,CAAC;AAOhF,KAAK,UAAU,sDAAsD,CAAC,KAmBrE;IACC,MAAM,mBAAmB,GAAG,KAAK,EAC/B,mBAAsD,EACtD,EAAE;QACF,IACE,mBAAmB,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;YACrD,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS;gBACzC,mBAAmB,CAAC,cAAc,KAAK,KAAK,CAAC,sBAAsB,CAAC,EACtE,CAAC;YACD,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,OAAO;YACL,mBAAmB;YACnB,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;gBAC1D,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,mBAAmB;gBACnB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,8BAA8B,EAAE,KAAK,CAAC,8BAA8B;gBACpE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;gBACxD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;aACvE,CAAC;SACH,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,mBAAmB,GACvB,KAAK,CAAC,mBAAmB;QACzB,CAAC,MAAM,uCAAuC,CAAC;YAC7C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;SACvD,CAAC,CAAC,CAAC;IACN,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,CAAC,8BAA8B,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACjD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAC3C,EACD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,kCAAkC;IAClC,KAAK,CAAC,SAAS,CAAC,8BAA8B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,mBAAmB,GAAG,MAAM,uCAAuC,CAAC;QACxE,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;KACvD,CAAC,CAAC;IACH,OAAO,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC;AA4BD,SAAS,iCAAiC,CACxC,KAAgC,EAChC,UAAwD;IAExD,MAAM,cAAc,GAAG,UAAU,CAAC,mBAAmB,CAAC,cAAc,CAAC;IACrE,OAAO,KAAK,CAAC,mBAAmB,EAAE,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,KAAgC,EAChC,wBAAmD;IAKnD,MAAM,mBAAmB,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;IACjE,MAAM,+BAA+B,GAAG,KAAK,CAAC,+BAA+B,CAAC;IAC9E,IAAI,UAAU,GAAG,MAAM,sDAAsD,CAC3E;QACE,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,wBAAwB;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,+BAA+B;QAC/B,GAAG,mBAAmB;KACvB,CACF,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,iCAAiC,CAAC,KAAK,EAAE,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,UAAU,GAAG,MAAM,oBAAoB,CACzC,KAAK,CAAC,SAAS,EACf,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,EACxC,UAAU,CAAC,mBAAmB,CAAC,cAAc,CAC9C,CAAC;IACF,IAAI,mCAAmC,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;YACrC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,8BAA8B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC;QAC9C,MAAM,aAAa,GACjB,MAAM,sDAAsD,CAAC;YAC3D,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,eAAe,EACb,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,eAAe;YACzD,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU;YACrC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;YACrC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,wBAAwB;YACxB,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ;YACvC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,+BAA+B;YAC/B,GAAG,mBAAmB;SACvB,CAAC,CAAC;QACL,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,iCAAiC,CAAC,KAAK,EAAE,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QACzE,UAAU,GAAG,aAAa,CAAC;QAC3B,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAClD,UAAU,GAAG,MAAM,oBAAoB,CACrC,KAAK,CAAC,SAAS,EACf,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,EACxC,UAAU,CAAC,mBAAmB,CAAC,cAAc,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAgC;IAEhC,0DAA0D;IAC1D,IAAI,MAAM,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,wBAAwB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,wBAAwB,EAC9B,wBAAwB,CACzB,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,iCAAiC,CAC/D,GAAG,EAAE,CACH,wCAAwC,CAAC,GAAG,EAAE,CAC5C,2BAA2B,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAC7D,EACH,KAAK,CAAC,uBAAuB,CAC9B,CAAC;IACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC;IACrD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,UAAU,CAAC,EAAE;QACf,OAAO,+BAA+B,CAAC;YACrC,GAAG,KAAK;YACR,GAAG,UAAU;YACb,wBAAwB;YACxB,QAAQ,EAAE,UAAU,CAAC,IAAI;SAC1B,CAAC,CAAC;IAEL,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,oCAAoC;IACpC,MAAM,gBAAgB,GAAG,KAAK,CAAC,UAAU,CAAC;IAC1C,IAAI,gBAAgB,IAAI,uCAAuC,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5E,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,wCAAwC,CAAC,GAAG,EAAE,CAClE,2BAA2B,CAAC;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,gBAAgB;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,mBAAmB,EAAE,KAAK,CAAC,WAAW;YACtC,sBAAsB,EACpB,KAAK,CAAC,sBAAsB;gBAC5B,UAAU,CAAC,mBAAmB,CAAC,cAAc;YAC/C,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY;YAC/C,wBAAwB;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;SACvE,CAAC,CACH,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,4EAA4E;QAC5E,iEAAiE;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;IACtB,MAAM,KAAK,CAAC,uBAAuB,EAAE,CAAC,UAAU,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAeD,MAAM,UAAU,mCAAmC,CACjD,UAAoC;IAEpC,OAAO,CACL,CAAC,UAAU,CAAC,EAAE;QACd,UAAU,CAAC,MAAM,KAAK,GAAG;QACzB,UAAU,CAAC,IAAI,KAAK,yBAAyB,CAAC,UAAU,CACzD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,SAA4B,EAC5B,OAA8B,EAC9B,sBAA8B;IAE9B,OAAO,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE;QAC7C,qCAAqC,EAAE,sBAAsB;QAC7D,YAAY,EAAE,KAAK;KACpB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { DocumentCreateRequest } from \"@tearleads/validators/request\";\nimport {\n  type ContainerWriterProjectionResponse,\n  DOCUMENT_SYNC_ERROR_CODES,\n  type DocumentCreateResponse,\n} from \"@tearleads/validators/response\";\nimport { assertContainerAuthorAccess } from \"../../../data/containers/shared/authorAccess\";\nimport { buildDocumentCreatePlan } from \"../../../data/documents/shared/events\";\nimport { wrapDocumentContentKeyForCreate } from \"../../../data/documents/shared/projection\";\nimport type {\n  CreateRemoteDocumentResult,\n  DocumentCreateApi,\n  DocumentCreateAuthor,\n  MaterializedDocumentCreatePlan,\n  ProjectionVerificationOptions,\n} from \"../../../data/documents/shared/types\";\nimport { projectionVerificationOptions } from \"../../../data/documents/shared/types\";\nimport type {\n  ProjectionUserKeyResolver,\n  ReferencedPrincipalPolicyWarmer,\n} from \"../../../data/keyingProjectionVerification\";\nimport {\n  collectContainerWriterProjectionPrincipalPolicies,\n  nullOnProjectionVerificationCancellation,\n  requireProjectionUserKeyResolver,\n} from \"../../../data/keyingProjectionVerification\";\nimport { isContainerCreatePending } from \"../../../data/persistence/container-contents/pendingContainerCreate\";\nimport type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\nimport { recordDocumentAuthorAccessFailure } from \"../authorAccessFailure\";\nimport {\n  isDocumentManifestAlreadyExistsConflict,\n  shouldRetryWithFreshProjection,\n} from \"../syncFailures/syncFailureClassification\";\nimport { adoptExistingRemoteDocument } from \"./createAdoption\";\nimport type { DocumentCreateTerminalFailureHandler } from \"./createProjectionFetch\";\nimport { fetchContainerWriterProjectionForCreate } from \"./createProjectionFetch\";\nimport { acknowledgeRemoteDocumentCreate } from \"./createResponse\";\n\nexport async function buildMaterializedDocumentCreatePlan(\n  input: {\n    author: DocumentCreateAuthor;\n    containerProjection: ContainerWriterProjectionResponse;\n    contentKey?: Uint8Array | undefined;\n    contentKeyEpoch?: number | undefined;\n    documentId?: string | undefined;\n    eventId?: string | undefined;\n    execSql?: ExecSql | undefined;\n    knownContainerKeks?: ReadonlyMap<string, Uint8Array> | undefined;\n    persistVerificationCheckpoints?: boolean | undefined;\n    signedAt?: string | undefined;\n    targetSecretKey: Uint8Array;\n  } & ProjectionVerificationOptions,\n): Promise<MaterializedDocumentCreatePlan> {\n  const contentKey =\n    input.contentKey ?? crypto.getRandomValues(new Uint8Array(32));\n  if (contentKey.byteLength !== 32) {\n    throw new Error(\"Document content key must be 32 bytes\");\n  }\n  // Resolved before wrapping: each envelope is sealed to its document and\n  // content-key epoch.\n  const documentId = input.documentId ?? crypto.randomUUID();\n  const contentKeyEpoch = input.contentKeyEpoch ?? 1;\n  const targetEnvelopes = await wrapDocumentContentKeyForCreate({\n    contentKey,\n    contentKeyEpoch,\n    documentId,\n    execSql: input.execSql,\n    knownContainerKeks: input.knownContainerKeks,\n    persistVerificationCheckpoints: input.persistVerificationCheckpoints,\n    projection: input.containerProjection,\n    secretKey: input.targetSecretKey,\n    ...projectionVerificationOptions(input),\n  });\n  if (input.resolveProjectionUserKey) {\n    const principalPolicies =\n      await collectContainerWriterProjectionPrincipalPolicies({\n        ...projectionVerificationOptions(input),\n        execSql: input.execSql,\n        projection: input.containerProjection,\n        resolveUserKey: input.resolveProjectionUserKey,\n      });\n    assertContainerAuthorAccess({\n      // Document signing derives its organization from the verified target.\n      author: {\n        ...input.author,\n        organizationId: input.containerProjection.organizationId,\n      },\n      projection: input.containerProjection,\n      principalPolicies,\n      minimumAccess: \"write\",\n    });\n  }\n  // The explicit local-trust variant builds provisioning artifacts before\n  // their new principal policies exist remotely; remote creates cannot use it.\n  const plan = await buildDocumentCreatePlan({\n    author: input.author,\n    containerProjection: input.containerProjection,\n    contentKeyEpoch,\n    documentId,\n    ...(input.eventId === undefined ? {} : { eventId: input.eventId }),\n    ...(input.signedAt === undefined ? {} : { signedAt: input.signedAt }),\n    targetEnvelopes,\n  });\n\n  return {\n    contentKey,\n    plan,\n  };\n}\n\nexport { documentWriterProjectionFromCreateResponse } from \"./createProjection\";\n\ninterface MaterializedDocumentCreatePlanWithProjection {\n  readonly containerProjection: ContainerWriterProjectionResponse;\n  readonly materializedPlan: MaterializedDocumentCreatePlan;\n}\n\nasync function buildMaterializedDocumentCreatePlanWithFreshProjection(input: {\n  apiClient: DocumentCreateApi;\n  author: DocumentCreateAuthor;\n  containerId: string;\n  containerProjection?: ContainerWriterProjectionResponse | undefined;\n  contentKey?: Uint8Array | undefined;\n  contentKeyEpoch?: number | undefined;\n  documentId?: string | undefined;\n  eventId?: string | undefined;\n  execSql: ExecSql;\n  expectedOrganizationId?: string | undefined;\n  knownContainerKeks?: ReadonlyMap<string, Uint8Array> | undefined;\n  onTerminalSubmitFailure?: DocumentCreateTerminalFailureHandler | undefined;\n  persistVerificationCheckpoints?: boolean | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  signedAt?: string | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  targetSecretKey: Uint8Array;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n}): Promise<MaterializedDocumentCreatePlanWithProjection | null> {\n  const buildWithProjection = async (\n    containerProjection: ContainerWriterProjectionResponse,\n  ) => {\n    if (\n      containerProjection.containerId !== input.containerId ||\n      (input.expectedOrganizationId !== undefined &&\n        containerProjection.organizationId !== input.expectedOrganizationId)\n    ) {\n      throw new Error(\n        \"Container writer projection belongs to another container or organization\",\n      );\n    }\n    return {\n      containerProjection,\n      materializedPlan: await buildMaterializedDocumentCreatePlan({\n        author: input.author,\n        containerProjection,\n        contentKey: input.contentKey,\n        contentKeyEpoch: input.contentKeyEpoch,\n        documentId: input.documentId,\n        eventId: input.eventId,\n        execSql: input.execSql,\n        knownContainerKeks: input.knownContainerKeks,\n        persistVerificationCheckpoints: input.persistVerificationCheckpoints,\n        resolveProjectionUserKey: input.resolveProjectionUserKey,\n        signedAt: input.signedAt,\n        stillCurrent: input.stillCurrent,\n        targetSecretKey: input.targetSecretKey,\n        warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,\n      }),\n    };\n  };\n\n  const containerProjection =\n    input.containerProjection ??\n    (await fetchContainerWriterProjectionForCreate({\n      apiClient: input.apiClient,\n      containerId: input.containerId,\n      onTerminalSubmitFailure: input.onTerminalSubmitFailure,\n    }));\n  if (!containerProjection) {\n    return null;\n  }\n\n  try {\n    return await buildWithProjection(containerProjection);\n  } catch (error) {\n    if (\n      !shouldRetryWithFreshProjection(error, (message) =>\n        message.includes(\"could not be unwrapped\"),\n      )\n    ) {\n      throw error;\n    }\n  }\n\n  // Only this container's projection was stale; evict just it rather than\n  // wiping every cached projection.\n  input.apiClient.evictContainerWriterProjection(input.containerId);\n  const refreshedProjection = await fetchContainerWriterProjectionForCreate({\n    apiClient: input.apiClient,\n    containerId: input.containerId,\n    onTerminalSubmitFailure: input.onTerminalSubmitFailure,\n  });\n  return refreshedProjection ? buildWithProjection(refreshedProjection) : null;\n}\n\ninterface RemoteDocumentCreateInput {\n  apiClient: DocumentCreateApi;\n  author: DocumentCreateAuthor;\n  containerId: string;\n  containerProjection?: ContainerWriterProjectionResponse | undefined;\n  contentKey?: Uint8Array | undefined;\n  contentKeyEpoch?: number | undefined;\n  documentId?: string | undefined;\n  eventId?: string | undefined;\n  execSql: ExecSql;\n  expectedOrganizationId?: string | undefined;\n  isRemoteSyncBlocked?: ((organizationId: string) => boolean) | undefined;\n  knownContainerKeks?: ReadonlyMap<string, Uint8Array> | undefined;\n  /**\n   * Invoked when the create submission fails terminally (not a benign\n   * adopt/stale-target conflict) — e.g. the server denies the write. Callers\n   * persist the failure so the write queue can surface it.\n   */\n  onTerminalSubmitFailure?: DocumentCreateTerminalFailureHandler | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  signedAt?: string | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  targetSecretKey: Uint8Array;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n}\n\nfunction isRemoteDocumentCreatePlanBlocked(\n  input: RemoteDocumentCreateInput,\n  createPlan: MaterializedDocumentCreatePlanWithProjection,\n): boolean {\n  const organizationId = createPlan.containerProjection.organizationId;\n  return input.isRemoteSyncBlocked?.(organizationId) ?? false;\n}\n\nasync function submitPlannedDocumentCreate(\n  input: RemoteDocumentCreateInput,\n  resolveProjectionUserKey: ProjectionUserKeyResolver,\n): Promise<{\n  readonly createPlan: MaterializedDocumentCreatePlanWithProjection;\n  readonly submission: DocumentCreateSubmission;\n} | null> {\n  const verificationOptions = { stillCurrent: input.stillCurrent };\n  const warmReferencedPrincipalPolicies = input.warmReferencedPrincipalPolicies;\n  let createPlan = await buildMaterializedDocumentCreatePlanWithFreshProjection(\n    {\n      apiClient: input.apiClient,\n      author: input.author,\n      containerId: input.containerId,\n      containerProjection: input.containerProjection,\n      contentKey: input.contentKey,\n      contentKeyEpoch: input.contentKeyEpoch,\n      documentId: input.documentId,\n      eventId: input.eventId,\n      execSql: input.execSql,\n      expectedOrganizationId: input.expectedOrganizationId,\n      knownContainerKeks: input.knownContainerKeks,\n      onTerminalSubmitFailure: input.onTerminalSubmitFailure,\n      resolveProjectionUserKey,\n      signedAt: input.signedAt,\n      targetSecretKey: input.targetSecretKey,\n      warmReferencedPrincipalPolicies,\n      ...verificationOptions,\n    },\n  );\n  if (!createPlan) {\n    return null;\n  }\n  if (isRemoteDocumentCreatePlanBlocked(input, createPlan)) return null;\n  if (input.stillCurrent?.() === false) return null;\n  let submission = await submitDocumentCreate(\n    input.apiClient,\n    createPlan.materializedPlan.plan.request,\n    createPlan.containerProjection.organizationId,\n  );\n  if (isStaleDocumentCreateTargetConflict(submission)) {\n    if (input.stillCurrent?.() === false) {\n      return { createPlan, submission };\n    }\n    input.apiClient.evictContainerWriterProjection(input.containerId);\n    const firstPlan = createPlan.materializedPlan;\n    const refreshedPlan =\n      await buildMaterializedDocumentCreatePlanWithFreshProjection({\n        apiClient: input.apiClient,\n        author: input.author,\n        containerId: input.containerId,\n        contentKey: firstPlan.contentKey,\n        contentKeyEpoch:\n          firstPlan.plan.request.contentKeyBundle.contentKeyEpoch,\n        documentId: firstPlan.plan.documentId,\n        eventId: firstPlan.plan.event.eventId,\n        execSql: input.execSql,\n        expectedOrganizationId: input.expectedOrganizationId,\n        knownContainerKeks: input.knownContainerKeks,\n        onTerminalSubmitFailure: input.onTerminalSubmitFailure,\n        resolveProjectionUserKey,\n        signedAt: firstPlan.plan.event.signedAt,\n        targetSecretKey: input.targetSecretKey,\n        warmReferencedPrincipalPolicies,\n        ...verificationOptions,\n      });\n    if (!refreshedPlan) {\n      return null;\n    }\n    if (isRemoteDocumentCreatePlanBlocked(input, refreshedPlan)) return null;\n    createPlan = refreshedPlan;\n    if (input.stillCurrent?.() === false) return null;\n    submission = await submitDocumentCreate(\n      input.apiClient,\n      createPlan.materializedPlan.plan.request,\n      createPlan.containerProjection.organizationId,\n    );\n  }\n  return { createPlan, submission };\n}\n\nexport async function createRemoteDocument(\n  input: RemoteDocumentCreateInput,\n): Promise<CreateRemoteDocumentResult | null> {\n  // The store retries once the folder's own create settles.\n  if (await isContainerCreatePending(input.execSql, input.containerId)) {\n    return null;\n  }\n  const resolveProjectionUserKey = requireProjectionUserKeyResolver(\n    input.resolveProjectionUserKey,\n    \"Remote document create\",\n  );\n  const plannedSubmission = await recordDocumentAuthorAccessFailure(\n    () =>\n      nullOnProjectionVerificationCancellation(() =>\n        submitPlannedDocumentCreate(input, resolveProjectionUserKey),\n      ),\n    input.onTerminalSubmitFailure,\n  );\n  if (!plannedSubmission) {\n    return null;\n  }\n  const { createPlan, submission } = plannedSubmission;\n  if (input.stillCurrent?.() === false) return null;\n  if (submission.ok)\n    return acknowledgeRemoteDocumentCreate({\n      ...input,\n      ...createPlan,\n      resolveProjectionUserKey,\n      response: submission.data,\n    });\n\n  // A stable documentId means a retry after a lost create response re-submits\n  // the same id; the server then reports the manifest already exists. That is\n  // not a failure — the first attempt committed. Adopt the existing remote\n  // document instead of leaking a duplicate. Requires the stable id we sent, so\n  // we can fetch its projection back.\n  const stableDocumentId = input.documentId;\n  if (stableDocumentId && isDocumentManifestAlreadyExistsConflict(submission)) {\n    if (input.stillCurrent?.() === false) return null;\n    const adopted = await nullOnProjectionVerificationCancellation(() =>\n      adoptExistingRemoteDocument({\n        apiClient: input.apiClient,\n        documentId: stableDocumentId,\n        execSql: input.execSql,\n        expectedContainerId: input.containerId,\n        expectedOrganizationId:\n          input.expectedOrganizationId ??\n          createPlan.containerProjection.organizationId,\n        expectedSignerUserId: input.author.signerUserId,\n        resolveProjectionUserKey,\n        stillCurrent: input.stillCurrent,\n        targetSecretKey: input.targetSecretKey,\n        warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,\n      }),\n    );\n    if (adopted) {\n      return adopted;\n    }\n    // A conflict is the expected, benign outcome of an idempotent retry after a\n    // lost create response. If adoption cannot complete yet (e.g. the writer\n    // projection fetch failed transiently), do not surface the conflict as a UI\n    // error — the sync engine retries and adopts it on a later tick.\n    return null;\n  }\n\n  submission.report?.();\n  await input.onTerminalSubmitFailure?.(submission);\n  return null;\n}\n\ntype DocumentCreateSubmission =\n  | {\n      readonly data: DocumentCreateResponse;\n      readonly ok: true;\n    }\n  | {\n      readonly code?: string | undefined;\n      readonly message: string;\n      readonly ok: false;\n      readonly report?: (() => void) | undefined;\n      readonly status: number | null;\n    };\n\nexport function isStaleDocumentCreateTargetConflict(\n  submission: DocumentCreateSubmission,\n): boolean {\n  return (\n    !submission.ok &&\n    submission.status === 409 &&\n    submission.code === DOCUMENT_SYNC_ERROR_CODES.stateStale\n  );\n}\n\nasync function submitDocumentCreate(\n  apiClient: DocumentCreateApi,\n  request: DocumentCreateRequest,\n  expectedOrganizationId: string,\n): Promise<DocumentCreateSubmission> {\n  return apiClient.createDocumentResult(request, {\n    expectedPaymentRequiredOrganizationId: expectedOrganizationId,\n    reportErrors: false,\n  });\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,yBAAyB,GAE1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,2BAA2B,EAAE,MAAM,8CAA8C,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAQ5F,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AAKrF,OAAO,EACL,iDAAiD,EACjD,wCAAwC,EACxC,gCAAgC,GACjC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qEAAqE,CAAC;AAG/G,OAAO,EAAE,iCAAiC,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uCAAuC,EACvC,8BAA8B,GAC/B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAE/D,OAAO,EAAE,uCAAuC,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,kBAAkB,CAAC;AAEnE,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,KAYiC;IAEjC,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,IAAI,UAAU,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,wEAAwE;IACxE,qBAAqB;IACrB,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;IAC3D,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,MAAM,+BAA+B,CAAC;QAC5D,UAAU;QACV,eAAe;QACf,UAAU;QACV,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,8BAA8B,EAAE,KAAK,CAAC,8BAA8B;QACpE,UAAU,EAAE,KAAK,CAAC,mBAAmB;QACrC,SAAS,EAAE,KAAK,CAAC,eAAe;QAChC,GAAG,6BAA6B,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,wBAAwB,EAAE,CAAC;QACnC,MAAM,iBAAiB,GACrB,MAAM,iDAAiD,CAAC;YACtD,GAAG,6BAA6B,CAAC,KAAK,CAAC;YACvC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,mBAAmB;YACrC,cAAc,EAAE,KAAK,CAAC,wBAAwB;SAC/C,CAAC,CAAC;QACL,2BAA2B,CAAC;YAC1B,sEAAsE;YACtE,MAAM,EAAE;gBACN,GAAG,KAAK,CAAC,MAAM;gBACf,cAAc,EAAE,KAAK,CAAC,mBAAmB,CAAC,cAAc;aACzD;YACD,UAAU,EAAE,KAAK,CAAC,mBAAmB;YACrC,iBAAiB;YACjB,aAAa,EAAE,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;IACD,wEAAwE;IACxE,6EAA6E;IAC7E,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC;QACzC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,eAAe;QACf,UAAU;QACV,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAClE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrE,eAAe;KAChB,CAAC,CAAC;IAEH,OAAO;QACL,UAAU;QACV,IAAI;KACL,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,0CAA0C,EAAE,MAAM,oBAAoB,CAAC;AAOhF,KAAK,UAAU,sDAAsD,CAAC,KAmBrE;IACC,MAAM,mBAAmB,GAAG,KAAK,EAC/B,mBAAsD,EACtD,EAAE;QACF,IACE,mBAAmB,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;YACrD,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS;gBACzC,mBAAmB,CAAC,cAAc,KAAK,KAAK,CAAC,sBAAsB,CAAC,EACtE,CAAC;YACD,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,OAAO;YACL,mBAAmB;YACnB,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;gBAC1D,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,mBAAmB;gBACnB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,8BAA8B,EAAE,KAAK,CAAC,8BAA8B;gBACpE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;gBACxD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;aACvE,CAAC;SACH,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,mBAAmB,GACvB,KAAK,CAAC,mBAAmB;QACzB,CAAC,MAAM,uCAAuC,CAAC;YAC7C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;SACvD,CAAC,CAAC,CAAC;IACN,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,CAAC,8BAA8B,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACjD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAC3C,EACD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,kCAAkC;IAClC,KAAK,CAAC,SAAS,CAAC,8BAA8B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,mBAAmB,GAAG,MAAM,uCAAuC,CAAC;QACxE,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;KACvD,CAAC,CAAC;IACH,OAAO,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC;AAkCD;;;;;;;GAOG;AACH,KAAK,UAAU,kCAAkC,CAC/C,KAAgC,EAChC,UAAwD;IAExD,MAAM,OAAO,GAAG,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;IACzD,MAAM,cAAc,GAAG,UAAU,CAAC,mBAAmB,CAAC,cAAc,CAAC;IACrE,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU;QAC3B,CAAC,CAAC,MAAM,8BAA8B,CAAC;YACnC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;YACnD,oBAAoB,EAAE,UAAU,CAAC,gBAAgB;YACjD,aAAa,EAAE,KAAK,CAAC,UAAU;SAChC,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACvC,KAAK,CAAC,SAAS,EACf,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EACjC,cAAc,CACf,CAAC;QACF,IACE,MAAM,CAAC,EAAE;YACT,uCAAuC,CAAC,MAAM,CAAC;YAC/C,mCAAmC,CAAC,MAAM,CAAC,EAC3C,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,oBAAoB,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,iCAAiC,CACxC,KAAgC,EAChC,UAAwD;IAExD,MAAM,cAAc,GAAG,UAAU,CAAC,mBAAmB,CAAC,cAAc,CAAC;IACrE,OAAO,KAAK,CAAC,mBAAmB,EAAE,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,KAAgC,EAChC,wBAAmD;IAKnD,MAAM,mBAAmB,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;IACjE,MAAM,+BAA+B,GAAG,KAAK,CAAC,+BAA+B,CAAC;IAC9E,IAAI,UAAU,GAAG,MAAM,sDAAsD,CAC3E;QACE,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,wBAAwB;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,+BAA+B;QAC/B,GAAG,mBAAmB;KACvB,CACF,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,iCAAiC,CAAC,KAAK,EAAE,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,UAAU,GAAG,MAAM,kCAAkC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC7E,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,mCAAmC,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;YACrC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,8BAA8B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC;QAC9C,MAAM,aAAa,GACjB,MAAM,sDAAsD,CAAC;YAC3D,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,eAAe,EACb,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,eAAe;YACzD,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU;YACrC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;YACrC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,wBAAwB;YACxB,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ;YACvC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,+BAA+B;YAC/B,GAAG,mBAAmB;SACvB,CAAC,CAAC;QACL,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,iCAAiC,CAAC,KAAK,EAAE,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QACzE,UAAU,GAAG,aAAa,CAAC;QAC3B,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAClD,UAAU,GAAG,MAAM,kCAAkC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAgC;IAEhC,0DAA0D;IAC1D,IAAI,MAAM,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,wBAAwB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,wBAAwB,EAC9B,wBAAwB,CACzB,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,iCAAiC,CAC/D,GAAG,EAAE,CACH,wCAAwC,CAAC,GAAG,EAAE,CAC5C,2BAA2B,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAC7D,EACH,KAAK,CAAC,uBAAuB,CAC9B,CAAC;IACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC;IACrD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,UAAU,CAAC,EAAE;QACf,OAAO,+BAA+B,CAAC;YACrC,GAAG,KAAK;YACR,GAAG,UAAU;YACb,wBAAwB;YACxB,QAAQ,EAAE,UAAU,CAAC,IAAI;SAC1B,CAAC,CAAC;IAEL,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,oCAAoC;IACpC,MAAM,gBAAgB,GAAG,KAAK,CAAC,UAAU,CAAC;IAC1C,IAAI,gBAAgB,IAAI,uCAAuC,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5E,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,wCAAwC,CAAC,GAAG,EAAE,CAClE,2BAA2B,CAAC;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,gBAAgB;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,mBAAmB,EAAE,KAAK,CAAC,WAAW;YACtC,sBAAsB,EACpB,KAAK,CAAC,sBAAsB;gBAC5B,UAAU,CAAC,mBAAmB,CAAC,cAAc;YAC/C,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY;YAC/C,wBAAwB;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;SACvE,CAAC,CACH,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,4EAA4E;QAC5E,iEAAiE;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;IACtB,MAAM,KAAK,CAAC,uBAAuB,EAAE,CAAC,UAAU,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAeD,MAAM,UAAU,mCAAmC,CACjD,UAAoC;IAEpC,OAAO,CACL,CAAC,UAAU,CAAC,EAAE;QACd,UAAU,CAAC,MAAM,KAAK,GAAG;QACzB,UAAU,CAAC,IAAI,KAAK,yBAAyB,CAAC,UAAU,CACzD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,SAA4B,EAC5B,OAA8B,EAC9B,sBAA8B;IAE9B,OAAO,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE;QAC7C,qCAAqC,EAAE,sBAAsB;QAC7D,YAAY,EAAE,KAAK;KACpB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { DocumentCreateRequest } from \"@tearleads/validators/request\";\nimport {\n  type ContainerWriterProjectionResponse,\n  DOCUMENT_SYNC_ERROR_CODES,\n  type DocumentCreateResponse,\n} from \"@tearleads/validators/response\";\nimport { assertContainerAuthorAccess } from \"../../../data/containers/shared/authorAccess\";\nimport { buildDocumentCreatePlan } from \"../../../data/documents/shared/events\";\nimport { wrapDocumentContentKeyForCreate } from \"../../../data/documents/shared/projection\";\nimport type {\n  CreateRemoteDocumentResult,\n  DocumentCreateApi,\n  DocumentCreateAuthor,\n  MaterializedDocumentCreatePlan,\n  ProjectionVerificationOptions,\n} from \"../../../data/documents/shared/types\";\nimport { projectionVerificationOptions } from \"../../../data/documents/shared/types\";\nimport type {\n  ProjectionUserKeyResolver,\n  ReferencedPrincipalPolicyWarmer,\n} from \"../../../data/keyingProjectionVerification\";\nimport {\n  collectContainerWriterProjectionPrincipalPolicies,\n  nullOnProjectionVerificationCancellation,\n  requireProjectionUserKeyResolver,\n} from \"../../../data/keyingProjectionVerification\";\nimport { isContainerCreatePending } from \"../../../data/persistence/container-contents/pendingContainerCreate\";\nimport type { PendingUpdateRecord } from \"../../../data/sqlite/documentPersistence\";\nimport type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\nimport { recordDocumentAuthorAccessFailure } from \"../authorAccessFailure\";\nimport {\n  buildDocumentCreateSeedRequest,\n  documentCreateSeedFits,\n} from \"../sync/initialSync\";\nimport {\n  isDocumentManifestAlreadyExistsConflict,\n  shouldRetryWithFreshProjection,\n} from \"../syncFailures/syncFailureClassification\";\nimport { adoptExistingRemoteDocument } from \"./createAdoption\";\nimport type { DocumentCreateTerminalFailureHandler } from \"./createProjectionFetch\";\nimport { fetchContainerWriterProjectionForCreate } from \"./createProjectionFetch\";\nimport { acknowledgeRemoteDocumentCreate } from \"./createResponse\";\n\nexport async function buildMaterializedDocumentCreatePlan(\n  input: {\n    author: DocumentCreateAuthor;\n    containerProjection: ContainerWriterProjectionResponse;\n    contentKey?: Uint8Array | undefined;\n    contentKeyEpoch?: number | undefined;\n    documentId?: string | undefined;\n    eventId?: string | undefined;\n    execSql?: ExecSql | undefined;\n    knownContainerKeks?: ReadonlyMap<string, Uint8Array> | undefined;\n    persistVerificationCheckpoints?: boolean | undefined;\n    signedAt?: string | undefined;\n    targetSecretKey: Uint8Array;\n  } & ProjectionVerificationOptions,\n): Promise<MaterializedDocumentCreatePlan> {\n  const contentKey =\n    input.contentKey ?? crypto.getRandomValues(new Uint8Array(32));\n  if (contentKey.byteLength !== 32) {\n    throw new Error(\"Document content key must be 32 bytes\");\n  }\n  // Resolved before wrapping: each envelope is sealed to its document and\n  // content-key epoch.\n  const documentId = input.documentId ?? crypto.randomUUID();\n  const contentKeyEpoch = input.contentKeyEpoch ?? 1;\n  const targetEnvelopes = await wrapDocumentContentKeyForCreate({\n    contentKey,\n    contentKeyEpoch,\n    documentId,\n    execSql: input.execSql,\n    knownContainerKeks: input.knownContainerKeks,\n    persistVerificationCheckpoints: input.persistVerificationCheckpoints,\n    projection: input.containerProjection,\n    secretKey: input.targetSecretKey,\n    ...projectionVerificationOptions(input),\n  });\n  if (input.resolveProjectionUserKey) {\n    const principalPolicies =\n      await collectContainerWriterProjectionPrincipalPolicies({\n        ...projectionVerificationOptions(input),\n        execSql: input.execSql,\n        projection: input.containerProjection,\n        resolveUserKey: input.resolveProjectionUserKey,\n      });\n    assertContainerAuthorAccess({\n      // Document signing derives its organization from the verified target.\n      author: {\n        ...input.author,\n        organizationId: input.containerProjection.organizationId,\n      },\n      projection: input.containerProjection,\n      principalPolicies,\n      minimumAccess: \"write\",\n    });\n  }\n  // The explicit local-trust variant builds provisioning artifacts before\n  // their new principal policies exist remotely; remote creates cannot use it.\n  const plan = await buildDocumentCreatePlan({\n    author: input.author,\n    containerProjection: input.containerProjection,\n    contentKeyEpoch,\n    documentId,\n    ...(input.eventId === undefined ? {} : { eventId: input.eventId }),\n    ...(input.signedAt === undefined ? {} : { signedAt: input.signedAt }),\n    targetEnvelopes,\n  });\n\n  return {\n    contentKey,\n    plan,\n  };\n}\n\nexport { documentWriterProjectionFromCreateResponse } from \"./createProjection\";\n\ninterface MaterializedDocumentCreatePlanWithProjection {\n  readonly containerProjection: ContainerWriterProjectionResponse;\n  readonly materializedPlan: MaterializedDocumentCreatePlan;\n}\n\nasync function buildMaterializedDocumentCreatePlanWithFreshProjection(input: {\n  apiClient: DocumentCreateApi;\n  author: DocumentCreateAuthor;\n  containerId: string;\n  containerProjection?: ContainerWriterProjectionResponse | undefined;\n  contentKey?: Uint8Array | undefined;\n  contentKeyEpoch?: number | undefined;\n  documentId?: string | undefined;\n  eventId?: string | undefined;\n  execSql: ExecSql;\n  expectedOrganizationId?: string | undefined;\n  knownContainerKeks?: ReadonlyMap<string, Uint8Array> | undefined;\n  onTerminalSubmitFailure?: DocumentCreateTerminalFailureHandler | undefined;\n  persistVerificationCheckpoints?: boolean | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  signedAt?: string | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  targetSecretKey: Uint8Array;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n}): Promise<MaterializedDocumentCreatePlanWithProjection | null> {\n  const buildWithProjection = async (\n    containerProjection: ContainerWriterProjectionResponse,\n  ) => {\n    if (\n      containerProjection.containerId !== input.containerId ||\n      (input.expectedOrganizationId !== undefined &&\n        containerProjection.organizationId !== input.expectedOrganizationId)\n    ) {\n      throw new Error(\n        \"Container writer projection belongs to another container or organization\",\n      );\n    }\n    return {\n      containerProjection,\n      materializedPlan: await buildMaterializedDocumentCreatePlan({\n        author: input.author,\n        containerProjection,\n        contentKey: input.contentKey,\n        contentKeyEpoch: input.contentKeyEpoch,\n        documentId: input.documentId,\n        eventId: input.eventId,\n        execSql: input.execSql,\n        knownContainerKeks: input.knownContainerKeks,\n        persistVerificationCheckpoints: input.persistVerificationCheckpoints,\n        resolveProjectionUserKey: input.resolveProjectionUserKey,\n        signedAt: input.signedAt,\n        stillCurrent: input.stillCurrent,\n        targetSecretKey: input.targetSecretKey,\n        warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,\n      }),\n    };\n  };\n\n  const containerProjection =\n    input.containerProjection ??\n    (await fetchContainerWriterProjectionForCreate({\n      apiClient: input.apiClient,\n      containerId: input.containerId,\n      onTerminalSubmitFailure: input.onTerminalSubmitFailure,\n    }));\n  if (!containerProjection) {\n    return null;\n  }\n\n  try {\n    return await buildWithProjection(containerProjection);\n  } catch (error) {\n    if (\n      !shouldRetryWithFreshProjection(error, (message) =>\n        message.includes(\"could not be unwrapped\"),\n      )\n    ) {\n      throw error;\n    }\n  }\n\n  // Only this container's projection was stale; evict just it rather than\n  // wiping every cached projection.\n  input.apiClient.evictContainerWriterProjection(input.containerId);\n  const refreshedProjection = await fetchContainerWriterProjectionForCreate({\n    apiClient: input.apiClient,\n    containerId: input.containerId,\n    onTerminalSubmitFailure: input.onTerminalSubmitFailure,\n  });\n  return refreshedProjection ? buildWithProjection(refreshedProjection) : null;\n}\n\ninterface RemoteDocumentCreateInput {\n  apiClient: DocumentCreateApi;\n  author: DocumentCreateAuthor;\n  containerId: string;\n  containerProjection?: ContainerWriterProjectionResponse | undefined;\n  contentKey?: Uint8Array | undefined;\n  contentKeyEpoch?: number | undefined;\n  documentId?: string | undefined;\n  eventId?: string | undefined;\n  execSql: ExecSql;\n  expectedOrganizationId?: string | undefined;\n  isRemoteSyncBlocked?: ((organizationId: string) => boolean) | undefined;\n  knownContainerKeks?: ReadonlyMap<string, Uint8Array> | undefined;\n  /**\n   * Invoked when the create submission fails terminally (not a benign\n   * adopt/stale-target conflict) — e.g. the server denies the write. Callers\n   * persist the failure so the write queue can surface it.\n   */\n  onTerminalSubmitFailure?: DocumentCreateTerminalFailureHandler | undefined;\n  resolveProjectionUserKey: ProjectionUserKeyResolver;\n  /**\n   * The queued row holding the new document's whole content (see\n   * `documentCreateSeedCandidate`). The create commits it as its seed, and the\n   * caller settles the row from the response instead of syncing it.\n   */\n  seedUpdate?: PendingUpdateRecord | undefined;\n  signedAt?: string | undefined;\n  stillCurrent?: (() => boolean) | undefined;\n  targetSecretKey: Uint8Array;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n}\n\n/**\n * A seed only saves the first sync. A refusal of the seeded create falls back\n * to the plain create once, so the row syncs as before and seeding adds no\n * failure mode. A lost response is adopted, and a stale target is replanned\n * with a fresh seed, exactly as for a plain create. Building the seed awaits\n * its encryption, so each submission rechecks the caller is still current and\n * returns null instead of creating a document whose response would be dropped.\n */\nasync function submitPlannedDocumentCreateRequest(\n  input: RemoteDocumentCreateInput,\n  createPlan: MaterializedDocumentCreatePlanWithProjection,\n): Promise<DocumentCreateSubmission | null> {\n  const request = createPlan.materializedPlan.plan.request;\n  const organizationId = createPlan.containerProjection.organizationId;\n  const seed = input.seedUpdate\n    ? await buildDocumentCreateSeedRequest({\n        author: input.author,\n        containerProjection: createPlan.containerProjection,\n        materializedDocument: createPlan.materializedPlan,\n        pendingUpdate: input.seedUpdate,\n      })\n    : null;\n  if (seed && documentCreateSeedFits(seed)) {\n    if (input.stillCurrent?.() === false) return null;\n    const seeded = await submitDocumentCreate(\n      input.apiClient,\n      { ...request, initialSync: seed },\n      organizationId,\n    );\n    if (\n      seeded.ok ||\n      isDocumentManifestAlreadyExistsConflict(seeded) ||\n      isStaleDocumentCreateTargetConflict(seeded)\n    ) {\n      return seeded;\n    }\n  }\n  if (input.stillCurrent?.() === false) return null;\n  return submitDocumentCreate(input.apiClient, request, organizationId);\n}\n\nfunction isRemoteDocumentCreatePlanBlocked(\n  input: RemoteDocumentCreateInput,\n  createPlan: MaterializedDocumentCreatePlanWithProjection,\n): boolean {\n  const organizationId = createPlan.containerProjection.organizationId;\n  return input.isRemoteSyncBlocked?.(organizationId) ?? false;\n}\n\nasync function submitPlannedDocumentCreate(\n  input: RemoteDocumentCreateInput,\n  resolveProjectionUserKey: ProjectionUserKeyResolver,\n): Promise<{\n  readonly createPlan: MaterializedDocumentCreatePlanWithProjection;\n  readonly submission: DocumentCreateSubmission;\n} | null> {\n  const verificationOptions = { stillCurrent: input.stillCurrent };\n  const warmReferencedPrincipalPolicies = input.warmReferencedPrincipalPolicies;\n  let createPlan = await buildMaterializedDocumentCreatePlanWithFreshProjection(\n    {\n      apiClient: input.apiClient,\n      author: input.author,\n      containerId: input.containerId,\n      containerProjection: input.containerProjection,\n      contentKey: input.contentKey,\n      contentKeyEpoch: input.contentKeyEpoch,\n      documentId: input.documentId,\n      eventId: input.eventId,\n      execSql: input.execSql,\n      expectedOrganizationId: input.expectedOrganizationId,\n      knownContainerKeks: input.knownContainerKeks,\n      onTerminalSubmitFailure: input.onTerminalSubmitFailure,\n      resolveProjectionUserKey,\n      signedAt: input.signedAt,\n      targetSecretKey: input.targetSecretKey,\n      warmReferencedPrincipalPolicies,\n      ...verificationOptions,\n    },\n  );\n  if (!createPlan) {\n    return null;\n  }\n  if (isRemoteDocumentCreatePlanBlocked(input, createPlan)) return null;\n  if (input.stillCurrent?.() === false) return null;\n  let submission = await submitPlannedDocumentCreateRequest(input, createPlan);\n  if (!submission) return null;\n  if (isStaleDocumentCreateTargetConflict(submission)) {\n    if (input.stillCurrent?.() === false) {\n      return { createPlan, submission };\n    }\n    input.apiClient.evictContainerWriterProjection(input.containerId);\n    const firstPlan = createPlan.materializedPlan;\n    const refreshedPlan =\n      await buildMaterializedDocumentCreatePlanWithFreshProjection({\n        apiClient: input.apiClient,\n        author: input.author,\n        containerId: input.containerId,\n        contentKey: firstPlan.contentKey,\n        contentKeyEpoch:\n          firstPlan.plan.request.contentKeyBundle.contentKeyEpoch,\n        documentId: firstPlan.plan.documentId,\n        eventId: firstPlan.plan.event.eventId,\n        execSql: input.execSql,\n        expectedOrganizationId: input.expectedOrganizationId,\n        knownContainerKeks: input.knownContainerKeks,\n        onTerminalSubmitFailure: input.onTerminalSubmitFailure,\n        resolveProjectionUserKey,\n        signedAt: firstPlan.plan.event.signedAt,\n        targetSecretKey: input.targetSecretKey,\n        warmReferencedPrincipalPolicies,\n        ...verificationOptions,\n      });\n    if (!refreshedPlan) {\n      return null;\n    }\n    if (isRemoteDocumentCreatePlanBlocked(input, refreshedPlan)) return null;\n    createPlan = refreshedPlan;\n    if (input.stillCurrent?.() === false) return null;\n    submission = await submitPlannedDocumentCreateRequest(input, createPlan);\n    if (!submission) return null;\n  }\n  return { createPlan, submission };\n}\n\nexport async function createRemoteDocument(\n  input: RemoteDocumentCreateInput,\n): Promise<CreateRemoteDocumentResult | null> {\n  // The store retries once the folder's own create settles.\n  if (await isContainerCreatePending(input.execSql, input.containerId)) {\n    return null;\n  }\n  const resolveProjectionUserKey = requireProjectionUserKeyResolver(\n    input.resolveProjectionUserKey,\n    \"Remote document create\",\n  );\n  const plannedSubmission = await recordDocumentAuthorAccessFailure(\n    () =>\n      nullOnProjectionVerificationCancellation(() =>\n        submitPlannedDocumentCreate(input, resolveProjectionUserKey),\n      ),\n    input.onTerminalSubmitFailure,\n  );\n  if (!plannedSubmission) {\n    return null;\n  }\n  const { createPlan, submission } = plannedSubmission;\n  if (input.stillCurrent?.() === false) return null;\n  if (submission.ok)\n    return acknowledgeRemoteDocumentCreate({\n      ...input,\n      ...createPlan,\n      resolveProjectionUserKey,\n      response: submission.data,\n    });\n\n  // A stable documentId means a retry after a lost create response re-submits\n  // the same id; the server then reports the manifest already exists. That is\n  // not a failure — the first attempt committed. Adopt the existing remote\n  // document instead of leaking a duplicate. Requires the stable id we sent, so\n  // we can fetch its projection back.\n  const stableDocumentId = input.documentId;\n  if (stableDocumentId && isDocumentManifestAlreadyExistsConflict(submission)) {\n    if (input.stillCurrent?.() === false) return null;\n    const adopted = await nullOnProjectionVerificationCancellation(() =>\n      adoptExistingRemoteDocument({\n        apiClient: input.apiClient,\n        documentId: stableDocumentId,\n        execSql: input.execSql,\n        expectedContainerId: input.containerId,\n        expectedOrganizationId:\n          input.expectedOrganizationId ??\n          createPlan.containerProjection.organizationId,\n        expectedSignerUserId: input.author.signerUserId,\n        resolveProjectionUserKey,\n        stillCurrent: input.stillCurrent,\n        targetSecretKey: input.targetSecretKey,\n        warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,\n      }),\n    );\n    if (adopted) {\n      return adopted;\n    }\n    // A conflict is the expected, benign outcome of an idempotent retry after a\n    // lost create response. If adoption cannot complete yet (e.g. the writer\n    // projection fetch failed transiently), do not surface the conflict as a UI\n    // error — the sync engine retries and adopts it on a later tick.\n    return null;\n  }\n\n  submission.report?.();\n  await input.onTerminalSubmitFailure?.(submission);\n  return null;\n}\n\ntype DocumentCreateSubmission =\n  | {\n      readonly data: DocumentCreateResponse;\n      readonly ok: true;\n    }\n  | {\n      readonly code?: string | undefined;\n      readonly message: string;\n      readonly ok: false;\n      readonly report?: (() => void) | undefined;\n      readonly status: number | null;\n    };\n\nexport function isStaleDocumentCreateTargetConflict(\n  submission: DocumentCreateSubmission,\n): boolean {\n  return (\n    !submission.ok &&\n    submission.status === 409 &&\n    submission.code === DOCUMENT_SYNC_ERROR_CODES.stateStale\n  );\n}\n\nasync function submitDocumentCreate(\n  apiClient: DocumentCreateApi,\n  request: DocumentCreateRequest,\n  expectedOrganizationId: string,\n): Promise<DocumentCreateSubmission> {\n  return apiClient.createDocumentResult(request, {\n    expectedPaymentRequiredOrganizationId: expectedOrganizationId,\n    reportErrors: false,\n  });\n}\n"]}

package/workflows/documents/index.d.ts

@@ -24,6 +24,7 @@ export { buildDocumentPurgeRequest, purgeRemoteDocument, } from "./purge/index.j
 export { type DiscardedDocumentShellResult, deletePersistedDocument, discardPersistedDocumentToShell, } from "./purge/persistedDocumentRemoval.js";
 export { createDocumentsWorkflowRuntime, type DocumentsWorkflowRuntime, type DocumentsWorkflowRuntimeGroups, type DocumentsWorkflowRuntimeInfra, type DocumentsWorkflowRuntimeInput, type DocumentsWorkflowRuntimeInputGroups, } from "./runtime.js";
 export { hasDocumentUpdateEvent, syncRemoteDocument, } from "./sync/index.js";
+export { documentCreateSeedCandidate } from "./sync/initialSync.js";
 export type { SyncRemoteDocumentInput } from "./sync/readOnlySync.js";
 export type { DocumentSyncContainerRekeyBuilder } from "./sync/syncAttemptState.js";
 export { type DocumentSyncLane, registerDocumentSyncLane, requestDocumentSyncLaneAndWait, } from "./sync/syncLane.js";

package/workflows/documents/index.js

@@ -22,6 +22,7 @@ export { buildDocumentPurgeRequest, purgeRemoteDocument, } from "./purge/index.j
 export { deletePersistedDocument, discardPersistedDocumentToShell, } from "./purge/persistedDocumentRemoval.js";
 export { createDocumentsWorkflowRuntime, } from "./runtime.js";
 export { hasDocumentUpdateEvent, syncRemoteDocument, } from "./sync/index.js";
+export { documentCreateSeedCandidate } from "./sync/initialSync.js";
 export { registerDocumentSyncLane, requestDocumentSyncLaneAndWait, } from "./sync/syncLane.js";
 export { DOCUMENT_SYNC_TRACE_FRAGMENT, DOCUMENT_SYNC_TRACE_PATTERN, } from "./sync/syncTrace.js";
 export { describeDocumentRevalidationFailure, describeDocumentSyncSubmitFailure, } from "./syncFailures/syncFailureClassification.js";

package/workflows/documents/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,8BAA8B,GAC/B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,wCAAwC,EAAE,MAAM,uCAAuC,CAAC;AACjG,OAAO,EAGL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,8DAA8D,CAAC;AACtE,OAAO,EAEL,kCAAkC,EAClC,oBAAoB,GACrB,MAAM,iDAAiD,CAAC;AAOzD,OAAO,EACL,wBAAwB,EACxB,sCAAsC,EACtC,yBAAyB,GAC1B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,qCAAqC,EACrC,oCAAoC,GACrC,MAAM,kEAAkE,CAAC;AAE1E,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EAAE,gCAAgC,EAAE,MAAM,0CAA0C,CAAC;AAC5F,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EACL,mCAAmC,EACnC,oBAAoB,EACpB,0CAA0C,GAC3C,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,gCAAgC,EAChC,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,4CAA4C,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,kBAAkB,EAGlB,2BAA2B,EAE3B,+BAA+B,EAK/B,oBAAoB,EAEpB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uCAAuC,EAGvC,qCAAqC,GACtC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,SAAS,CAAC;AACjB,OAAO,EAEL,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,GAM/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,QAAQ,CAAC;AAGhB,OAAO,EAEL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mCAAmC,EACnC,iCAAiC,GAElC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,uCAAuC,EAAE,MAAM,qCAAqC,CAAC;AAC9F,OAAO,EAAE,kCAAkC,EAAE,MAAM,4BAA4B,CAAC;AAEhF,OAAO,EAAE,qCAAqC,EAAE,MAAM,cAAc,CAAC","sourcesContent":["export {\n  unwrapContainerKekPath,\n  unwrapDocumentContentKeyTarget,\n} from \"../../data/documents/shared/projection\";\nexport { persistedDocumentCreateStateFromResponse } from \"../../data/documents/shared/responses\";\nexport {\n  type DocumentSyncUpdateIsolationError,\n  type IncomingDocumentSyncUpdateValidator,\n  isDocumentSyncUpdateIsolationError,\n  validateDocumentSyncUpdateImports,\n} from \"../../data/documents/shared/sync/documentSyncUpdateIsolation\";\nexport {\n  type DocumentSyncPullContinuation,\n  documentSyncPullContinuationsEqual,\n  readPullContinuation,\n} from \"../../data/documents/shared/sync/syncPagination\";\nexport type {\n  DocumentCreateAuthor,\n  DocumentLinkSetFailureHandler,\n  DocumentLinkSetMutationFailure,\n  RelinkRemoteDocumentResult,\n} from \"../../data/documents/shared/types\";\nexport {\n  clearDocumentSyncFailure,\n  invalidateDocumentSyncPullContinuation,\n  recordDocumentSyncFailure,\n} from \"../../data/sqlite/documentPersistence\";\nexport {\n  DOCUMENT_HISTORY_COMPACTION_MAX_BYTES,\n  DOCUMENT_HISTORY_COMPACTION_MAX_ROWS,\n} from \"../../data/sqlite/documentPersistence/documentHistoryPersistence\";\nexport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nexport { selectDocumentSyncOutgoingBatch } from \"../../data/sync/documentSyncOutgoingBatch\";\nexport { settleOutgoingPassAndDecideReArm } from \"../../data/sync/outgoingUpdateSettlement\";\nexport {\n  didRegainSyncPrerequisites,\n  isDatabaseUnavailableError,\n} from \"../../data/sync/syncCoordinator\";\nexport {\n  deleteLocalDocumentAttachment,\n  deletePendingDocumentAttachment,\n  markLocalDocumentAttachmentDetached,\n  saveLocalDocumentAttachments,\n  savePendingDocumentAttachment,\n} from \"./attachments/attachmentPersistence\";\nexport { runSerializedDocumentBlobMutation } from \"./attachments/blobMutationLock\";\nexport { reclaimDocumentOrphanBlobs } from \"./attachments/orphanBlobReclaims\";\nexport { resolveDocumentCreateAuthor } from \"./author\";\nexport {\n  buildMaterializedDocumentCreatePlan,\n  createRemoteDocument,\n  documentWriterProjectionFromCreateResponse,\n} from \"./create\";\nexport {\n  importDocumentHistoryTailUpdates,\n  loadPersistedDocumentContent,\n  mergePersistedDocumentHistory,\n} from \"./historyContent\";\nexport { buildMaterializedDocumentLinkSetMutationPlan } from \"./linkSet\";\nexport { relinkRemoteDocument } from \"./linkSet/linkSetRemote\";\nexport {\n  enqueuePendingDocumentUpdate,\n  listPendingDocumentUpdates,\n} from \"./pendingUpdatePersistence\";\nexport {\n  type AttachmentRemovalRows,\n  type AttachmentStagingRows,\n  DOCUMENTS_APP_KIND,\n  type DocumentRecord,\n  type DocumentsPersistence,\n  defaultDocumentsPersistence,\n  type LocalAttachmentRecord,\n  loadPersistedDocumentStoreState,\n  type PendingAttachmentRecord,\n  type PendingAttachmentUploadIdentity,\n  type PendingUpdateInsert,\n  type PendingUpdateRecord,\n  persistDocumentState,\n  type RelinkPersistedDocumentInput,\n  runSerializedSqlMutation,\n} from \"./persistence\";\nexport {\n  createDocumentProjectionUserKeyResolver,\n  type DocumentProjectionKeyRuntime,\n  type DocumentProjectionUserKeyResolver,\n  didDocumentProjectionKeyRuntimeChange,\n} from \"./projectionKeys\";\nexport {\n  buildDocumentPurgeRequest,\n  purgeRemoteDocument,\n} from \"./purge\";\nexport {\n  type DiscardedDocumentShellResult,\n  deletePersistedDocument,\n  discardPersistedDocumentToShell,\n} from \"./purge/persistedDocumentRemoval\";\nexport {\n  createDocumentsWorkflowRuntime,\n  type DocumentsWorkflowRuntime,\n  type DocumentsWorkflowRuntimeGroups,\n  type DocumentsWorkflowRuntimeInfra,\n  type DocumentsWorkflowRuntimeInput,\n  type DocumentsWorkflowRuntimeInputGroups,\n} from \"./runtime\";\nexport {\n  hasDocumentUpdateEvent,\n  syncRemoteDocument,\n} from \"./sync\";\nexport type { SyncRemoteDocumentInput } from \"./sync/readOnlySync\";\nexport type { DocumentSyncContainerRekeyBuilder } from \"./sync/syncAttemptState\";\nexport {\n  type DocumentSyncLane,\n  registerDocumentSyncLane,\n  requestDocumentSyncLaneAndWait,\n} from \"./sync/syncLane\";\nexport {\n  DOCUMENT_SYNC_TRACE_FRAGMENT,\n  DOCUMENT_SYNC_TRACE_PATTERN,\n} from \"./sync/syncTrace\";\nexport {\n  describeDocumentRevalidationFailure,\n  describeDocumentSyncSubmitFailure,\n  type TerminalSubmitFailureHandler,\n} from \"./syncFailures/syncFailureClassification\";\nexport { shouldClearDocumentSyncFailureAfterPass } from \"./syncFailures/syncFailureClearance\";\nexport { DocumentRawHistoryUnavailableError } from \"./syncPlan/syncContentKeys\";\nexport type { RekeyPendingUpdate } from \"./syncRekeys/syncRecoveryRekey\";\nexport { createDocumentWriterPublicKeyResolver } from \"./writerKeys\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,8BAA8B,GAC/B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,wCAAwC,EAAE,MAAM,uCAAuC,CAAC;AACjG,OAAO,EAGL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,8DAA8D,CAAC;AACtE,OAAO,EAEL,kCAAkC,EAClC,oBAAoB,GACrB,MAAM,iDAAiD,CAAC;AAOzD,OAAO,EACL,wBAAwB,EACxB,sCAAsC,EACtC,yBAAyB,GAC1B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,qCAAqC,EACrC,oCAAoC,GACrC,MAAM,kEAAkE,CAAC;AAE1E,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EAAE,gCAAgC,EAAE,MAAM,0CAA0C,CAAC;AAC5F,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EACL,mCAAmC,EACnC,oBAAoB,EACpB,0CAA0C,GAC3C,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,gCAAgC,EAChC,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,4CAA4C,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,kBAAkB,EAGlB,2BAA2B,EAE3B,+BAA+B,EAK/B,oBAAoB,EAEpB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uCAAuC,EAGvC,qCAAqC,GACtC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,SAAS,CAAC;AACjB,OAAO,EAEL,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,GAM/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAGjE,OAAO,EAEL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mCAAmC,EACnC,iCAAiC,GAElC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,uCAAuC,EAAE,MAAM,qCAAqC,CAAC;AAC9F,OAAO,EAAE,kCAAkC,EAAE,MAAM,4BAA4B,CAAC;AAEhF,OAAO,EAAE,qCAAqC,EAAE,MAAM,cAAc,CAAC","sourcesContent":["export {\n  unwrapContainerKekPath,\n  unwrapDocumentContentKeyTarget,\n} from \"../../data/documents/shared/projection\";\nexport { persistedDocumentCreateStateFromResponse } from \"../../data/documents/shared/responses\";\nexport {\n  type DocumentSyncUpdateIsolationError,\n  type IncomingDocumentSyncUpdateValidator,\n  isDocumentSyncUpdateIsolationError,\n  validateDocumentSyncUpdateImports,\n} from \"../../data/documents/shared/sync/documentSyncUpdateIsolation\";\nexport {\n  type DocumentSyncPullContinuation,\n  documentSyncPullContinuationsEqual,\n  readPullContinuation,\n} from \"../../data/documents/shared/sync/syncPagination\";\nexport type {\n  DocumentCreateAuthor,\n  DocumentLinkSetFailureHandler,\n  DocumentLinkSetMutationFailure,\n  RelinkRemoteDocumentResult,\n} from \"../../data/documents/shared/types\";\nexport {\n  clearDocumentSyncFailure,\n  invalidateDocumentSyncPullContinuation,\n  recordDocumentSyncFailure,\n} from \"../../data/sqlite/documentPersistence\";\nexport {\n  DOCUMENT_HISTORY_COMPACTION_MAX_BYTES,\n  DOCUMENT_HISTORY_COMPACTION_MAX_ROWS,\n} from \"../../data/sqlite/documentPersistence/documentHistoryPersistence\";\nexport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nexport { selectDocumentSyncOutgoingBatch } from \"../../data/sync/documentSyncOutgoingBatch\";\nexport { settleOutgoingPassAndDecideReArm } from \"../../data/sync/outgoingUpdateSettlement\";\nexport {\n  didRegainSyncPrerequisites,\n  isDatabaseUnavailableError,\n} from \"../../data/sync/syncCoordinator\";\nexport {\n  deleteLocalDocumentAttachment,\n  deletePendingDocumentAttachment,\n  markLocalDocumentAttachmentDetached,\n  saveLocalDocumentAttachments,\n  savePendingDocumentAttachment,\n} from \"./attachments/attachmentPersistence\";\nexport { runSerializedDocumentBlobMutation } from \"./attachments/blobMutationLock\";\nexport { reclaimDocumentOrphanBlobs } from \"./attachments/orphanBlobReclaims\";\nexport { resolveDocumentCreateAuthor } from \"./author\";\nexport {\n  buildMaterializedDocumentCreatePlan,\n  createRemoteDocument,\n  documentWriterProjectionFromCreateResponse,\n} from \"./create\";\nexport {\n  importDocumentHistoryTailUpdates,\n  loadPersistedDocumentContent,\n  mergePersistedDocumentHistory,\n} from \"./historyContent\";\nexport { buildMaterializedDocumentLinkSetMutationPlan } from \"./linkSet\";\nexport { relinkRemoteDocument } from \"./linkSet/linkSetRemote\";\nexport {\n  enqueuePendingDocumentUpdate,\n  listPendingDocumentUpdates,\n} from \"./pendingUpdatePersistence\";\nexport {\n  type AttachmentRemovalRows,\n  type AttachmentStagingRows,\n  DOCUMENTS_APP_KIND,\n  type DocumentRecord,\n  type DocumentsPersistence,\n  defaultDocumentsPersistence,\n  type LocalAttachmentRecord,\n  loadPersistedDocumentStoreState,\n  type PendingAttachmentRecord,\n  type PendingAttachmentUploadIdentity,\n  type PendingUpdateInsert,\n  type PendingUpdateRecord,\n  persistDocumentState,\n  type RelinkPersistedDocumentInput,\n  runSerializedSqlMutation,\n} from \"./persistence\";\nexport {\n  createDocumentProjectionUserKeyResolver,\n  type DocumentProjectionKeyRuntime,\n  type DocumentProjectionUserKeyResolver,\n  didDocumentProjectionKeyRuntimeChange,\n} from \"./projectionKeys\";\nexport {\n  buildDocumentPurgeRequest,\n  purgeRemoteDocument,\n} from \"./purge\";\nexport {\n  type DiscardedDocumentShellResult,\n  deletePersistedDocument,\n  discardPersistedDocumentToShell,\n} from \"./purge/persistedDocumentRemoval\";\nexport {\n  createDocumentsWorkflowRuntime,\n  type DocumentsWorkflowRuntime,\n  type DocumentsWorkflowRuntimeGroups,\n  type DocumentsWorkflowRuntimeInfra,\n  type DocumentsWorkflowRuntimeInput,\n  type DocumentsWorkflowRuntimeInputGroups,\n} from \"./runtime\";\nexport {\n  hasDocumentUpdateEvent,\n  syncRemoteDocument,\n} from \"./sync\";\nexport { documentCreateSeedCandidate } from \"./sync/initialSync\";\nexport type { SyncRemoteDocumentInput } from \"./sync/readOnlySync\";\nexport type { DocumentSyncContainerRekeyBuilder } from \"./sync/syncAttemptState\";\nexport {\n  type DocumentSyncLane,\n  registerDocumentSyncLane,\n  requestDocumentSyncLaneAndWait,\n} from \"./sync/syncLane\";\nexport {\n  DOCUMENT_SYNC_TRACE_FRAGMENT,\n  DOCUMENT_SYNC_TRACE_PATTERN,\n} from \"./sync/syncTrace\";\nexport {\n  describeDocumentRevalidationFailure,\n  describeDocumentSyncSubmitFailure,\n  type TerminalSubmitFailureHandler,\n} from \"./syncFailures/syncFailureClassification\";\nexport { shouldClearDocumentSyncFailureAfterPass } from \"./syncFailures/syncFailureClearance\";\nexport { DocumentRawHistoryUnavailableError } from \"./syncPlan/syncContentKeys\";\nexport type { RekeyPendingUpdate } from \"./syncRekeys/syncRecoveryRekey\";\nexport { createDocumentWriterPublicKeyResolver } from \"./writerKeys\";\n"]}

package/workflows/documents/sync/initialSync.d.ts

@@ -0,0 +1,39 @@
+import type { DocumentSyncRequest } from "../../../internal/validators/request/index.js";
+import type { ContainerWriterProjectionResponse } from "../../../internal/validators/response/index.js";
+import type { DocumentCreateAuthor, MaterializedDocumentCreatePlan } from "../../../data/documents/shared/types.js";
+import type { PendingUpdateRecord } from "../../../data/sqlite/documentPersistence/index.js";
+/**
+ * Builds the single encrypted initial write for a provisioned document. The
+ * server commits it with the organization and document manifest transaction.
+ */
+export declare function buildInitialDocumentSyncRequest(input: {
+    readonly author: DocumentCreateAuthor;
+    readonly containerProjection: ContainerWriterProjectionResponse;
+    readonly initialUpdate: Uint8Array;
+    readonly materializedDocument: MaterializedDocumentCreatePlan;
+}): Promise<DocumentSyncRequest>;
+/**
+ * Builds a create's seed: the one queued update that holds a new document's
+ * whole content, signed against the create plan, so the create commits it and
+ * no follow-up sync is needed. The update keeps its queue row id.
+ */
+export declare function buildDocumentCreateSeedRequest(input: {
+    readonly author: DocumentCreateAuthor;
+    readonly containerProjection: ContainerWriterProjectionResponse;
+    readonly materializedDocument: MaterializedDocumentCreatePlan;
+    readonly pendingUpdate: PendingUpdateRecord;
+}): Promise<DocumentSyncRequest>;
+/**
+ * The queued row that may seed a create: the only row, a plain update (not a
+ * rotation baseline) that holds the document's whole content. Anything else
+ * syncs after the create as before.
+ */
+export declare function documentCreateSeedCandidate(input: {
+    readonly documentVersion: string;
+    readonly pendingUpdates: readonly PendingUpdateRecord[];
+}): PendingUpdateRecord | null;
+/**
+ * A seed is held to the sync request limit (the API refuses a larger one), so
+ * a seed that does not fit is left out and the row syncs in ordinary batches.
+ */
+export declare function documentCreateSeedFits(seed: DocumentSyncRequest): boolean;

package/workflows/documents/sync/initialSync.js

@@ -1,3 +1,5 @@
+import { emptyVersionVector, satisfiesVersionVector, versionVectorsEqual, } from "../../../internal/loro/index.js";
+import { MAX_DOCUMENT_SYNC_REQUEST_BYTES } from "../../../internal/validators/util/index.js";
 import { createPendingUpdateFields } from "../../../data/documents/documentSync.js";
 import { importContentKeyMaterial } from "../../../data/documents/shared/contentRecordKeys.js";
 import { encryptDocumentPendingUpdate } from "../../../data/documents/shared/crypto.js";
@@ -12,12 +14,20 @@ export async function buildInitialDocumentSyncRequest(input) {
     if (!pendingFields) {
         throw new Error("Initial document sync update is empty");
     }
+    return buildDocumentCreateSeedRequest({
+        ...input,
+        pendingUpdate: { id: crypto.randomUUID(), ...pendingFields },
+    });
+}
+/**
+ * Builds a create's seed: the one queued update that holds a new document's
+ * whole content, signed against the create plan, so the create commits it and
+ * no follow-up sync is needed. The update keeps its queue row id.
+ */
+export async function buildDocumentCreateSeedRequest(input) {
+    const { pendingUpdate } = input;
     const documentId = input.materializedDocument.plan.documentId;
     const contentKeyBundle = input.materializedDocument.plan.request.contentKeyBundle;
-    const pendingUpdate = {
-        id: crypto.randomUUID(),
-        ...pendingFields,
-    };
     const encrypted = await encryptDocumentPendingUpdate({
         contentKeyMaterial: await importContentKeyMaterial(input.materializedDocument.contentKey),
         contentKeyEpoch: contentKeyBundle.contentKeyEpoch,
@@ -55,11 +65,34 @@ export async function buildInitialDocumentSyncRequest(input) {
         contentKeyEpoch: contentKeyBundle.contentKeyEpoch,
         expectedLinkSetManifestHash: contentKeyBundle.linkSetManifestHash,
         expectedTargetHash: contentKeyBundle.targetHash,
-        // The provisioning device already holds this exact initialized snapshot,
-        // so it does not need the transaction response to echo the update back.
+        // The creating device already holds this exact content, so it does not
+        // need the transaction response to echo the update back.
         localVersionVector: pendingUpdate.partialEndVersionVector,
         outgoingUpdates: [outgoingUpdate],
         supportsPullPagination: true,
     };
 }
+/**
+ * The queued row that may seed a create: the only row, a plain update (not a
+ * rotation baseline) that holds the document's whole content. Anything else
+ * syncs after the create as before.
+ */
+export function documentCreateSeedCandidate(input) {
+    const [row, ...rest] = input.pendingUpdates;
+    if (!row || rest.length > 0 || row.sourceVersionVector != null)
+        return null;
+    // The start may name peers at counter zero; the server checks it the same way.
+    return satisfiesVersionVector(emptyVersionVector(), row.partialStartVersionVector) && versionVectorsEqual(row.partialEndVersionVector, input.documentVersion)
+        ? row
+        : null;
+}
+const TEXT_ENCODER = new TextEncoder();
+/**
+ * A seed is held to the sync request limit (the API refuses a larger one), so
+ * a seed that does not fit is left out and the row syncs in ordinary batches.
+ */
+export function documentCreateSeedFits(seed) {
+    return (TEXT_ENCODER.encode(JSON.stringify(seed)).byteLength <=
+        MAX_DOCUMENT_SYNC_REQUEST_BYTES);
+}
 //# sourceMappingURL=initialSync.js.map

package/workflows/documents/sync/initialSync.js.map

@@ -1 +1 @@
-{"version":3,"file":"initialSync.js","sourceRoot":"","sources":["initialSync.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAM9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAKrD;IACC,MAAM,aAAa,GAAG,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACrE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC;IAC9D,MAAM,gBAAgB,GACpB,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC3D,MAAM,aAAa,GAAwB;QACzC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,GAAG,aAAa;KACjB,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;QACnD,kBAAkB,EAAE,MAAM,wBAAwB,CAChD,KAAK,CAAC,oBAAoB,CAAC,UAAU,CACtC;QACD,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,mBAAmB,CAAC,cAAc;QACxD,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,MAAM,0BAA0B,CAAC;QACtD,4BAA4B,EAAE;YAC5B,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC;SAClD;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,UAAU;QACV,2BAA2B,EAAE,gBAAgB,CAAC,mBAAmB;QACjE,kBAAkB,EAAE,gBAAgB,CAAC,UAAU;QAC/C,cAAc,EAAE,KAAK,CAAC,mBAAmB,CAAC,cAAc;QACxD,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,MAAM,EAAE;YACN,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,uBAAuB,EAAE,aAAa,CAAC,uBAAuB;YAC9D,yBAAyB,EAAE,aAAa,CAAC,yBAAyB;YAClE,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,aAAa,EAAE,SAAS,CAAC,aAAa;SACvC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,4BAA4B,EAAE;YAC5B,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC;SAClD;QACD,gBAAgB;QAChB,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,2BAA2B,EAAE,gBAAgB,CAAC,mBAAmB;QACjE,kBAAkB,EAAE,gBAAgB,CAAC,UAAU;QAC/C,yEAAyE;QACzE,wEAAwE;QACxE,kBAAkB,EAAE,aAAa,CAAC,uBAAuB;QACzD,eAAe,EAAE,CAAC,cAAc,CAAC;QACjC,sBAAsB,EAAE,IAAI;KAC7B,CAAC;AACJ,CAAC","sourcesContent":["import type { DocumentSyncRequest } from \"@tearleads/validators/request\";\nimport type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { createPendingUpdateFields } from \"../../../data/documents/documentSync\";\nimport { importContentKeyMaterial } from \"../../../data/documents/shared/contentRecordKeys\";\nimport { encryptDocumentPendingUpdate } from \"../../../data/documents/shared/crypto\";\nimport { containerPathRefs } from \"../../../data/documents/shared/projection\";\nimport type {\n  DocumentCreateAuthor,\n  MaterializedDocumentCreatePlan,\n} from \"../../../data/documents/shared/types\";\nimport type { PendingUpdateRecord } from \"../../../data/sqlite/documentPersistence\";\nimport { signDocumentOutgoingUpdate } from \"../syncPlan/syncPlanIdentity\";\n\n/**\n * Builds the single encrypted initial write for a provisioned document. The\n * server commits it with the organization and document manifest transaction.\n */\nexport async function buildInitialDocumentSyncRequest(input: {\n  readonly author: DocumentCreateAuthor;\n  readonly containerProjection: ContainerWriterProjectionResponse;\n  readonly initialUpdate: Uint8Array;\n  readonly materializedDocument: MaterializedDocumentCreatePlan;\n}): Promise<DocumentSyncRequest> {\n  const pendingFields = createPendingUpdateFields(input.initialUpdate);\n  if (!pendingFields) {\n    throw new Error(\"Initial document sync update is empty\");\n  }\n\n  const documentId = input.materializedDocument.plan.documentId;\n  const contentKeyBundle =\n    input.materializedDocument.plan.request.contentKeyBundle;\n  const pendingUpdate: PendingUpdateRecord = {\n    id: crypto.randomUUID(),\n    ...pendingFields,\n  };\n  const encrypted = await encryptDocumentPendingUpdate({\n    contentKeyMaterial: await importContentKeyMaterial(\n      input.materializedDocument.contentKey,\n    ),\n    contentKeyEpoch: contentKeyBundle.contentKeyEpoch,\n    documentId,\n    organizationId: input.containerProjection.organizationId,\n    update: pendingUpdate,\n  });\n  const outgoingUpdate = await signDocumentOutgoingUpdate({\n    authorizingContainerPathRefs: [\n      containerPathRefs(input.containerProjection.path),\n    ],\n    author: input.author,\n    contentKeyEpoch: contentKeyBundle.contentKeyEpoch,\n    documentId,\n    expectedLinkSetManifestHash: contentKeyBundle.linkSetManifestHash,\n    expectedTargetHash: contentKeyBundle.targetHash,\n    organizationId: input.containerProjection.organizationId,\n    signedAt: new Date().toISOString(),\n    update: {\n      contentRecordId: encrypted.contentRecordId,\n      encryptedData: encrypted.encryptedData,\n      id: pendingUpdate.id,\n      partialEndVersionVector: pendingUpdate.partialEndVersionVector,\n      partialStartVersionVector: pendingUpdate.partialStartVersionVector,\n      metadataHash: encrypted.metadataHash,\n      ciphertextHash: encrypted.ciphertextHash,\n      plaintextHash: encrypted.plaintextHash,\n    },\n  });\n\n  return {\n    authorizingContainerPathRefs: [\n      containerPathRefs(input.containerProjection.path),\n    ],\n    contentKeyBundle,\n    contentKeyEpoch: contentKeyBundle.contentKeyEpoch,\n    expectedLinkSetManifestHash: contentKeyBundle.linkSetManifestHash,\n    expectedTargetHash: contentKeyBundle.targetHash,\n    // The provisioning device already holds this exact initialized snapshot,\n    // so it does not need the transaction response to echo the update back.\n    localVersionVector: pendingUpdate.partialEndVersionVector,\n    outgoingUpdates: [outgoingUpdate],\n    supportsPullPagination: true,\n  };\n}\n"]}
+{"version":3,"file":"initialSync.js","sourceRoot":"","sources":["initialSync.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAM9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAKrD;IACC,MAAM,aAAa,GAAG,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACrE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,8BAA8B,CAAC;QACpC,GAAG,KAAK;QACR,aAAa,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,GAAG,aAAa,EAAE;KAC7D,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAKpD;IACC,MAAM,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAChC,MAAM,UAAU,GAAG,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC;IAC9D,MAAM,gBAAgB,GACpB,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;QACnD,kBAAkB,EAAE,MAAM,wBAAwB,CAChD,KAAK,CAAC,oBAAoB,CAAC,UAAU,CACtC;QACD,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,mBAAmB,CAAC,cAAc;QACxD,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,MAAM,0BAA0B,CAAC;QACtD,4BAA4B,EAAE;YAC5B,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC;SAClD;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,UAAU;QACV,2BAA2B,EAAE,gBAAgB,CAAC,mBAAmB;QACjE,kBAAkB,EAAE,gBAAgB,CAAC,UAAU;QAC/C,cAAc,EAAE,KAAK,CAAC,mBAAmB,CAAC,cAAc;QACxD,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,MAAM,EAAE;YACN,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,uBAAuB,EAAE,aAAa,CAAC,uBAAuB;YAC9D,yBAAyB,EAAE,aAAa,CAAC,yBAAyB;YAClE,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,aAAa,EAAE,SAAS,CAAC,aAAa;SACvC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,4BAA4B,EAAE;YAC5B,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC;SAClD;QACD,gBAAgB;QAChB,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,2BAA2B,EAAE,gBAAgB,CAAC,mBAAmB;QACjE,kBAAkB,EAAE,gBAAgB,CAAC,UAAU;QAC/C,uEAAuE;QACvE,yDAAyD;QACzD,kBAAkB,EAAE,aAAa,CAAC,uBAAuB;QACzD,eAAe,EAAE,CAAC,cAAc,CAAC;QACjC,sBAAsB,EAAE,IAAI;KAC7B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAG3C;IACC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;IAC5C,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,mBAAmB,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5E,+EAA+E;IAC/E,OAAO,sBAAsB,CAC3B,kBAAkB,EAAE,EACpB,GAAG,CAAC,yBAAyB,CAC9B,IAAI,mBAAmB,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,eAAe,CAAC;QAC1E,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;AAEvC;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAyB;IAC9D,OAAO,CACL,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;QACpD,+BAA+B,CAChC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  emptyVersionVector,\n  satisfiesVersionVector,\n  versionVectorsEqual,\n} from \"@tearleads/loro\";\nimport type { DocumentSyncRequest } from \"@tearleads/validators/request\";\nimport type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { MAX_DOCUMENT_SYNC_REQUEST_BYTES } from \"@tearleads/validators/util\";\nimport { createPendingUpdateFields } from \"../../../data/documents/documentSync\";\nimport { importContentKeyMaterial } from \"../../../data/documents/shared/contentRecordKeys\";\nimport { encryptDocumentPendingUpdate } from \"../../../data/documents/shared/crypto\";\nimport { containerPathRefs } from \"../../../data/documents/shared/projection\";\nimport type {\n  DocumentCreateAuthor,\n  MaterializedDocumentCreatePlan,\n} from \"../../../data/documents/shared/types\";\nimport type { PendingUpdateRecord } from \"../../../data/sqlite/documentPersistence\";\nimport { signDocumentOutgoingUpdate } from \"../syncPlan/syncPlanIdentity\";\n\n/**\n * Builds the single encrypted initial write for a provisioned document. The\n * server commits it with the organization and document manifest transaction.\n */\nexport async function buildInitialDocumentSyncRequest(input: {\n  readonly author: DocumentCreateAuthor;\n  readonly containerProjection: ContainerWriterProjectionResponse;\n  readonly initialUpdate: Uint8Array;\n  readonly materializedDocument: MaterializedDocumentCreatePlan;\n}): Promise<DocumentSyncRequest> {\n  const pendingFields = createPendingUpdateFields(input.initialUpdate);\n  if (!pendingFields) {\n    throw new Error(\"Initial document sync update is empty\");\n  }\n  return buildDocumentCreateSeedRequest({\n    ...input,\n    pendingUpdate: { id: crypto.randomUUID(), ...pendingFields },\n  });\n}\n\n/**\n * Builds a create's seed: the one queued update that holds a new document's\n * whole content, signed against the create plan, so the create commits it and\n * no follow-up sync is needed. The update keeps its queue row id.\n */\nexport async function buildDocumentCreateSeedRequest(input: {\n  readonly author: DocumentCreateAuthor;\n  readonly containerProjection: ContainerWriterProjectionResponse;\n  readonly materializedDocument: MaterializedDocumentCreatePlan;\n  readonly pendingUpdate: PendingUpdateRecord;\n}): Promise<DocumentSyncRequest> {\n  const { pendingUpdate } = input;\n  const documentId = input.materializedDocument.plan.documentId;\n  const contentKeyBundle =\n    input.materializedDocument.plan.request.contentKeyBundle;\n  const encrypted = await encryptDocumentPendingUpdate({\n    contentKeyMaterial: await importContentKeyMaterial(\n      input.materializedDocument.contentKey,\n    ),\n    contentKeyEpoch: contentKeyBundle.contentKeyEpoch,\n    documentId,\n    organizationId: input.containerProjection.organizationId,\n    update: pendingUpdate,\n  });\n  const outgoingUpdate = await signDocumentOutgoingUpdate({\n    authorizingContainerPathRefs: [\n      containerPathRefs(input.containerProjection.path),\n    ],\n    author: input.author,\n    contentKeyEpoch: contentKeyBundle.contentKeyEpoch,\n    documentId,\n    expectedLinkSetManifestHash: contentKeyBundle.linkSetManifestHash,\n    expectedTargetHash: contentKeyBundle.targetHash,\n    organizationId: input.containerProjection.organizationId,\n    signedAt: new Date().toISOString(),\n    update: {\n      contentRecordId: encrypted.contentRecordId,\n      encryptedData: encrypted.encryptedData,\n      id: pendingUpdate.id,\n      partialEndVersionVector: pendingUpdate.partialEndVersionVector,\n      partialStartVersionVector: pendingUpdate.partialStartVersionVector,\n      metadataHash: encrypted.metadataHash,\n      ciphertextHash: encrypted.ciphertextHash,\n      plaintextHash: encrypted.plaintextHash,\n    },\n  });\n\n  return {\n    authorizingContainerPathRefs: [\n      containerPathRefs(input.containerProjection.path),\n    ],\n    contentKeyBundle,\n    contentKeyEpoch: contentKeyBundle.contentKeyEpoch,\n    expectedLinkSetManifestHash: contentKeyBundle.linkSetManifestHash,\n    expectedTargetHash: contentKeyBundle.targetHash,\n    // The creating device already holds this exact content, so it does not\n    // need the transaction response to echo the update back.\n    localVersionVector: pendingUpdate.partialEndVersionVector,\n    outgoingUpdates: [outgoingUpdate],\n    supportsPullPagination: true,\n  };\n}\n\n/**\n * The queued row that may seed a create: the only row, a plain update (not a\n * rotation baseline) that holds the document's whole content. Anything else\n * syncs after the create as before.\n */\nexport function documentCreateSeedCandidate(input: {\n  readonly documentVersion: string;\n  readonly pendingUpdates: readonly PendingUpdateRecord[];\n}): PendingUpdateRecord | null {\n  const [row, ...rest] = input.pendingUpdates;\n  if (!row || rest.length > 0 || row.sourceVersionVector != null) return null;\n  // The start may name peers at counter zero; the server checks it the same way.\n  return satisfiesVersionVector(\n    emptyVersionVector(),\n    row.partialStartVersionVector,\n  ) && versionVectorsEqual(row.partialEndVersionVector, input.documentVersion)\n    ? row\n    : null;\n}\n\nconst TEXT_ENCODER = new TextEncoder();\n\n/**\n * A seed is held to the sync request limit (the API refuses a larger one), so\n * a seed that does not fit is left out and the row syncs in ordinary batches.\n */\nexport function documentCreateSeedFits(seed: DocumentSyncRequest): boolean {\n  return (\n    TEXT_ENCODER.encode(JSON.stringify(seed)).byteLength <=\n    MAX_DOCUMENT_SYNC_REQUEST_BYTES\n  );\n}\n"]}

package/workflows/documents/syncFailures/syncPolicyRepair.js

@@ -7,14 +7,8 @@ function principalIdentityKey(principalType, principalId) {
 function requestedRepairPrincipalIdentities(plan) {
     const identities = new Set();
     for (const rekey of plan.request.containerRekeys ?? []) {
-        for (const policy of rekey.principalPolicies) {
-            const principalType = Reflect.get(policy, "principalType");
-            const principalId = Reflect.get(policy, "principalId");
-            if ((principalType === "group" || principalType === "organization") &&
-                typeof principalId === "string" &&
-                principalId.length > 0) {
-                identities.add(principalIdentityKey(principalType, principalId));
-            }
+        for (const ref of rekey.principalPolicyRefs) {
+            identities.add(principalIdentityKey(ref.principalType, ref.principalId));
         }
     }
     return identities;

package/workflows/documents/syncFailures/syncPolicyRepair.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncPolicyRepair.js","sourceRoot":"","sources":["syncPolicyRepair.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAO3F,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAI7E,SAAS,oBAAoB,CAC3B,aAAmC,EACnC,WAAmB;IAEnB,OAAO,GAAG,aAAa,IAAI,WAAW,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,kCAAkC,CACzC,IAAsB;IAEtB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QACvD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC7C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YAC3D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YACvD,IACE,CAAC,aAAa,KAAK,OAAO,IAAI,aAAa,KAAK,cAAc,CAAC;gBAC/D,OAAO,WAAW,KAAK,QAAQ;gBAC/B,WAAW,CAAC,MAAM,GAAG,CAAC,EACtB,CAAC;gBACD,UAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,4CAA4C,CAAC,KAGrD;IACC,MAAM,SAAS,GAAG,kCAAkC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,8DAA8D,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAKrD;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,+BAA+B,EAAE,gBAAgB,CAAC;IACxE,IACE,CAAC,+BAA+B,CAAC,KAAK,CAAC,OAAO,CAAC;QAC/C,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC;QACvD,CAAC,KAAK;QACN,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,CAAC,OAAO;QACR,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAChC,CAAC;QACD,OAAO;IACT,CAAC;IAED,4CAA4C,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,4BAA4B,CAAC;QACjC,KAAK;QACL,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;QACtE,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc;QACzC,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type { ReferencedPrincipalStateResponse } from \"@tearleads/validators/response\";\nimport { isRetryableDocumentSyncConflict } from \"../../../data/documents/shared/responses\";\nimport type {\n  DocumentSyncPlan,\n  DocumentSyncSubmitFailure,\n} from \"../../../data/documents/shared/types\";\nimport type { ReferencedPrincipalPolicyWarmer } from \"../../../data/keyingProjectionVerification\";\n\nimport { recoverPrincipalPolicyRepair } from \"../../principals/policyRepair\";\n\ntype ManagedPrincipalType = \"group\" | \"organization\";\n\nfunction principalIdentityKey(\n  principalType: ManagedPrincipalType,\n  principalId: string,\n): string {\n  return `${principalType}:${principalId}`;\n}\n\nfunction requestedRepairPrincipalIdentities(\n  plan: DocumentSyncPlan,\n): Set<string> {\n  const identities = new Set<string>();\n  for (const rekey of plan.request.containerRekeys ?? []) {\n    for (const policy of rekey.principalPolicies) {\n      const principalType = Reflect.get(policy, \"principalType\");\n      const principalId = Reflect.get(policy, \"principalId\");\n      if (\n        (principalType === \"group\" || principalType === \"organization\") &&\n        typeof principalId === \"string\" &&\n        principalId.length > 0\n      ) {\n        identities.add(principalIdentityKey(principalType, principalId));\n      }\n    }\n  }\n  return identities;\n}\n\nfunction assertDocumentSyncPolicyRepairHeadsRequested(input: {\n  readonly heads: readonly ReferencedPrincipalStateResponse[];\n  readonly plan: DocumentSyncPlan;\n}): void {\n  const requested = requestedRepairPrincipalIdentities(input.plan);\n  for (const head of input.heads) {\n    const { principalId, principalType } = head;\n    if (!requested.has(principalIdentityKey(principalType, principalId))) {\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"Document sync policy repair head principal was not requested\",\n      );\n    }\n  }\n}\n\nexport async function recoverDocumentSyncPolicyRepair(input: {\n  failure: DocumentSyncSubmitFailure;\n  plan: DocumentSyncPlan;\n  stillCurrent?: (() => boolean) | undefined;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n}): Promise<void> {\n  const heads = input.failure.stalePrincipalHeads;\n  const resolve = input.warmReferencedPrincipalPolicies?.resolveReference;\n  if (\n    !isRetryableDocumentSyncConflict(input.failure) ||\n    (input.plan.request.containerRekeys?.length ?? 0) === 0 ||\n    !heads ||\n    heads.length === 0 ||\n    !resolve ||\n    input.stillCurrent?.() === false\n  ) {\n    return;\n  }\n\n  assertDocumentSyncPolicyRepairHeadsRequested({ heads, plan: input.plan });\n  await recoverPrincipalPolicyRepair({\n    heads,\n    warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,\n    organizationId: input.plan.organizationId,\n    stillCurrent: input.stillCurrent,\n  });\n}\n"]}
+{"version":3,"file":"syncPolicyRepair.js","sourceRoot":"","sources":["syncPolicyRepair.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAO3F,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAI7E,SAAS,oBAAoB,CAC3B,aAAmC,EACnC,WAAmB;IAEnB,OAAO,GAAG,aAAa,IAAI,WAAW,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,kCAAkC,CACzC,IAAsB;IAEtB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC5C,UAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,4CAA4C,CAAC,KAGrD;IACC,MAAM,SAAS,GAAG,kCAAkC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,8DAA8D,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAKrD;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,+BAA+B,EAAE,gBAAgB,CAAC;IACxE,IACE,CAAC,+BAA+B,CAAC,KAAK,CAAC,OAAO,CAAC;QAC/C,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC;QACvD,CAAC,KAAK;QACN,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,CAAC,OAAO;QACR,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,EAChC,CAAC;QACD,OAAO;IACT,CAAC;IAED,4CAA4C,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,4BAA4B,CAAC;QACjC,KAAK;QACL,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;QACtE,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc;QACzC,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type { ReferencedPrincipalStateResponse } from \"@tearleads/validators/response\";\nimport { isRetryableDocumentSyncConflict } from \"../../../data/documents/shared/responses\";\nimport type {\n  DocumentSyncPlan,\n  DocumentSyncSubmitFailure,\n} from \"../../../data/documents/shared/types\";\nimport type { ReferencedPrincipalPolicyWarmer } from \"../../../data/keyingProjectionVerification\";\n\nimport { recoverPrincipalPolicyRepair } from \"../../principals/policyRepair\";\n\ntype ManagedPrincipalType = \"group\" | \"organization\";\n\nfunction principalIdentityKey(\n  principalType: ManagedPrincipalType,\n  principalId: string,\n): string {\n  return `${principalType}:${principalId}`;\n}\n\nfunction requestedRepairPrincipalIdentities(\n  plan: DocumentSyncPlan,\n): Set<string> {\n  const identities = new Set<string>();\n  for (const rekey of plan.request.containerRekeys ?? []) {\n    for (const ref of rekey.principalPolicyRefs) {\n      identities.add(principalIdentityKey(ref.principalType, ref.principalId));\n    }\n  }\n  return identities;\n}\n\nfunction assertDocumentSyncPolicyRepairHeadsRequested(input: {\n  readonly heads: readonly ReferencedPrincipalStateResponse[];\n  readonly plan: DocumentSyncPlan;\n}): void {\n  const requested = requestedRepairPrincipalIdentities(input.plan);\n  for (const head of input.heads) {\n    const { principalId, principalType } = head;\n    if (!requested.has(principalIdentityKey(principalType, principalId))) {\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"Document sync policy repair head principal was not requested\",\n      );\n    }\n  }\n}\n\nexport async function recoverDocumentSyncPolicyRepair(input: {\n  failure: DocumentSyncSubmitFailure;\n  plan: DocumentSyncPlan;\n  stillCurrent?: (() => boolean) | undefined;\n  warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;\n}): Promise<void> {\n  const heads = input.failure.stalePrincipalHeads;\n  const resolve = input.warmReferencedPrincipalPolicies?.resolveReference;\n  if (\n    !isRetryableDocumentSyncConflict(input.failure) ||\n    (input.plan.request.containerRekeys?.length ?? 0) === 0 ||\n    !heads ||\n    heads.length === 0 ||\n    !resolve ||\n    input.stillCurrent?.() === false\n  ) {\n    return;\n  }\n\n  assertDocumentSyncPolicyRepairHeadsRequested({ heads, plan: input.plan });\n  await recoverPrincipalPolicyRepair({\n    heads,\n    warmReferencedPrincipalPolicies: input.warmReferencedPrincipalPolicies,\n    organizationId: input.plan.organizationId,\n    stillCurrent: input.stillCurrent,\n  });\n}\n"]}

package/workflows/registration/provisioningBootstrapBuilders.d.ts

@@ -181,7 +181,12 @@ export declare function buildInitialRootProvisioning(input: {
                 keyring: Record<string, unknown> | null;
                 manifest: Record<string, unknown>;
                 predecessorBridge: Record<string, unknown> | null;
-                principalPolicies: Record<string, unknown>[];
+                principalPolicyRefs: {
+                    principalType: "group" | "organization";
+                    principalId: string;
+                    version: number;
+                    stateHash: string;
+                }[];
                 wraps: Record<string, unknown>[];
                 containerManifestHistoryRefs?: {
                     containerId: string;
@@ -253,7 +258,12 @@ export declare function buildInitialRootProvisioning(input: {
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;