@gaganref/confect-test 10.3.1-fork.92 → 10.3.1-fork.93

package/dist/internal/Subscriptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Subscriptions.d.ts","sourceRoot":"","sources":["../../src/internal/Subscriptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC;;;GAGG;AACH,MAAM,WAAW,GAAI,SAAQ,SAAS,CAAC,QAAQ;IAC7C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAA;CAAE,GAC3D;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB,CAAC;AAEN;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,QAClB,GAAG,SACD,MAAM,CAAC,KAAK,mBACF,MAAM,KACtB,YAAY,GAAG,SAOjB,CAAC;AA0BF;;;;GAIG;AACH,eAAO,MAAM,WAAW,MACnB,SAAS,CAAC,OAAO,KACjB,SAAS,CAAC,OAAO,KACnB,OAGiE,CAAC;AAErE;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC;IACjC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC;CACvC;AAiBD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC;CAClC;AAUD;;;GAGG;AACH,qBAAa,UAAU;IAInB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,GAAG;IAJb,OAAO,CAAC,OAAO,CAAK;IAEpB,YACmB,QAAQ,EAAE,QAAQ,EAC3B,GAAG,EAAE,SAAS,CAAC,MAAM,EAC3B;IAEJ,IAAI,MAAM,IAAI,SAAS,CAAC,MAAM,CAE7B;IAED,IAAI,eAAe,IAAI,MAAM,CAE5B;IAED,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAEnE;IAED;;;OAGG;IACH,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,QAMlD;CACF;AAED;;;;GAIG;AACH,qBAAa,QAAQ;IAIP,OAAO,CAAC,QAAQ,CAAC,KAAK;IAHlC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA2B;IAChD,OAAO,CAAC,MAAM,CAAK;IAEnB,YAA6B,KAAK,EAAE,SAAS,CAAC,KAAK,EAAI;IAEvD,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,UAAU,CAE/C;IAED,SAAS,CACP,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,OAAO,EAClB,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,YAAY,CAAC,CAoBvB;IAED;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAwB5C;IAED;;;;OAIG;IACH,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAYhD;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,KAAK;IAoBb,OAAO,CAAC,GAAG;CAWZ"}
+{"version":3,"file":"Subscriptions.d.ts","sourceRoot":"","sources":["../../src/internal/Subscriptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC;;;GAGG;AACH,MAAM,WAAW,GAAI,SAAQ,SAAS,CAAC,QAAQ;IAC7C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAA;CAAE,GAC3D;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB,CAAC;AAEN;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,QAClB,GAAG,SACD,MAAM,CAAC,KAAK,mBACF,MAAM,KACtB,YAAY,GAAG,SAOjB,CAAC;AA0BF;;;;GAIG;AACH,eAAO,MAAM,WAAW,MACnB,SAAS,CAAC,OAAO,KACjB,SAAS,CAAC,OAAO,KACnB,OAGiE,CAAC;AAErE;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC;IACjC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC;CACvC;AAiBD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC;CAClC;AAUD;;;GAGG;AACH,qBAAa,UAAU;IAInB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,GAAG;IAJb,OAAO,CAAC,OAAO,CAAS;IAExB,YACmB,QAAQ,EAAE,QAAQ,EAC3B,GAAG,EAAE,SAAS,CAAC,MAAM,EAG9B;IAED,IAAI,MAAM,IAAI,SAAS,CAAC,MAAM,CAE7B;IAED,IAAI,eAAe,IAAI,MAAM,CAE5B;IAED,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAEnE;IAED;;;OAGG;IACH,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,QAMlD;CACF;AAED;;;;GAIG;AACH,qBAAa,QAAQ;IAIP,OAAO,CAAC,QAAQ,CAAC,KAAK;IAHlC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA2B;IAChD,OAAO,CAAC,MAAM,CAAK;IAEnB,YAA6B,KAAK,EAAE,SAAS,CAAC,KAAK,EAAI;IAEvD,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,UAAU,CAG/C;IAED;;;OAGG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAEzC;IAED;;OAEG;IACH,aAAa,IAAI,MAAM,CAEtB;IAED;;OAEG;IACH,iBAAiB,IAAI,MAAM,CAE1B;IAED,SAAS,CACP,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,OAAO,EAClB,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,YAAY,CAAC,CAyBvB;IAED;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAwB5C;IAED;;;;OAIG;IACH,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAYhD;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,KAAK;IAoBb,OAAO,CAAC,GAAG;CAWZ"}

package/dist/internal/Subscriptions.js

@@ -55,10 +55,11 @@ const inTurn = (items, f) => items.reduce((previous, item) => previous.then((kep
 var Subscriber = class {
 	registry;
 	who;
-	version = 0;
+	version;
 	constructor(registry, who) {
 		this.registry = registry;
 		this.who = who;
+		this.version = registry.identityEpoch();
 	}
 	get caller() {
 		return this.who;
@@ -79,7 +80,7 @@ var Subscriber = class {
 			identity: null,
 			token: null
 		} : withIdentity(this.who, identity);
-		this.version++;
+		this.version = this.registry.nextIdentityEpoch();
 	}
 };
 /**
@@ -95,8 +96,28 @@ var Registry = class {
 		this.world = world;
 	}
 	subscriber(caller) {
+		this.world.registerSubscriber();
 		return new Subscriber(this, caller);
 	}
+	/**
+	* The reference a live subscription runs, for marking its diffs by the shape
+	* of what its query returns.
+	*/
+	referenceOf(subscription) {
+		return this.live.get(subscription)?.reference;
+	}
+	/**
+	* The world's identity epoch, where a new subscriber's version starts.
+	*/
+	identityEpoch() {
+		return this.world.currentIdentityEpoch();
+	}
+	/**
+	* Advance the world's identity epoch for a subscriber whose identity changed.
+	*/
+	nextIdentityEpoch() {
+		return this.world.nextIdentityEpoch();
+	}
 	subscribe(subscriber, reference, args) {
 		return this.run(subscriber, reference, args, { journal: null }).then((run) => {
 			const live = {
@@ -109,7 +130,10 @@ var Registry = class {
 			this.live.set(live.id, live);
 			return {
 				id: live.id,
-				current: () => live.run,
+				current: () => ({
+					...live.run,
+					reads: this.world.projectReads(live.run.reads)
+				}),
 				unsubscribe: () => {
 					this.live.delete(live.id);
 				}

package/dist/internal/Subscriptions.js.map

@@ -1 +1 @@
-{"version":3,"file":"Subscriptions.js","names":["Kernel.conflict","Execution.withIdentity"],"sources":["../../src/internal/Subscriptions.ts"],"sourcesContent":["import type { UserIdentity } from \"convex/server\";\nimport { compareValues, convexToJson, type Value } from \"convex/values\";\nimport * as Execution from \"./Execution.js\";\nimport * as Kernel from \"./Kernel.js\";\n\n/**\n * One run of a subscribed query, and the identity version its subscriber had\n * when it ran.\n */\nexport interface Run extends Execution.QueryRun {\n  readonly identityVersion: number;\n}\n\n/**\n * Why a run no longer shows what its query answers now.\n */\nexport type Invalidation =\n  | { readonly kind: \"commit\"; readonly change: Kernel.Change }\n  | {\n      readonly kind: \"identity\";\n      readonly from: number;\n      readonly to: number;\n    };\n\n/**\n * Why `run` is stale, if it is: a commit since its snapshot changed something\n * it read, as an attempt's read set conflicts, or it read its subscriber's\n * identity and that identity has changed. The clock never makes a run stale.\n * The binary does not rerun a query because time passed, so a run keeps the\n * time it read until something else invalidates it.\n */\nexport const invalidation = (\n  run: Run,\n  state: Kernel.State,\n  identityVersion: number,\n): Invalidation | undefined => {\n  const change = Kernel.conflict(state, run.snapshot, run.reads);\n  if (change !== undefined) return { kind: \"commit\", change };\n  if (run.observedIdentity && run.identityVersion !== identityVersion) {\n    return { kind: \"identity\", from: run.identityVersion, to: identityVersion };\n  }\n  return undefined;\n};\n\n/**\n * A thrown value as JSON: a Convex value as Convex writes it, and anything else\n * as its string, beside its type so `\"1\"` and `1` differ.\n */\nconst thrownKey = (thrown: unknown): unknown => {\n  try {\n    return [typeof thrown, convexToJson(thrown as Value)];\n  } catch {\n    return [typeof thrown, String(thrown)];\n  }\n};\n\nconst errorKey = (error: unknown): string =>\n  JSON.stringify(\n    error instanceof Error\n      ? [\n          \"error\",\n          error.name,\n          error.message,\n          thrownKey((error as { readonly data?: unknown }).data),\n        ]\n      : [\"thrown\", thrownKey(error)],\n  );\n\n/**\n * Whether two outcomes show a client the same thing: equal values, failures\n * with errors of the same name, message and data, or failures that threw equal\n * bare values.\n */\nexport const sameOutcome = (\n  a: Execution.Outcome,\n  b: Execution.Outcome,\n): boolean =>\n  a._tag === \"returned\"\n    ? b._tag === \"returned\" && compareValues(a.value, b.value) === 0\n    : b._tag === \"failed\" && errorKey(a.error) === errorKey(b.error);\n\n/**\n * A subscription's value changed when a refresh reran it.\n */\nexport interface Transition {\n  readonly subscription: string;\n  readonly from: Execution.Outcome;\n  readonly to: Execution.Outcome;\n  readonly because: Invalidation;\n}\n\n/**\n * A subscription whose value differs from what a full rerun of its query\n * answers.\n */\nexport interface Disagreement {\n  readonly subscription: string;\n  readonly incremental: Execution.Outcome;\n  readonly reference: Execution.Outcome;\n}\n\n/**\n * Run `f` over `items` one at a time, in order, and keep what it answers.\n */\nconst inTurn = <A, B>(\n  items: ReadonlyArray<A>,\n  f: (item: A) => Promise<B | undefined>,\n): Promise<Array<B>> =>\n  items.reduce<Promise<Array<B>>>(\n    (previous, item) =>\n      previous.then((kept) =>\n        f(item).then((b) => (b === undefined ? kept : [...kept, b])),\n      ),\n    Promise.resolve([]),\n  );\n\nexport interface Subscription {\n  readonly id: string;\n  /**\n   * The latest run: its value and the dependencies it took.\n   */\n  readonly current: () => Run;\n  readonly unsubscribe: () => void;\n}\n\ninterface Live {\n  readonly id: string;\n  readonly subscriber: Subscriber;\n  readonly reference: unknown;\n  readonly args: unknown;\n  run: Run;\n}\n\n/**\n * One client's query set. Its subscriptions share one caller, whose identity\n * `authenticate` replaces, bumping the identity version.\n */\nexport class Subscriber {\n  private version = 0;\n\n  constructor(\n    private readonly registry: Registry,\n    private who: Execution.Caller,\n  ) {}\n\n  get caller(): Execution.Caller {\n    return this.who;\n  }\n\n  get identityVersion(): number {\n    return this.version;\n  }\n\n  subscribe(reference: unknown, args?: unknown): Promise<Subscription> {\n    return this.registry.subscribe(this, reference, args ?? {});\n  }\n\n  /**\n   * Replace the caller's identity, or sign it out with `null`. Each\n   * subscription that read the identity is stale until the next refresh.\n   */\n  authenticate(identity: Partial<UserIdentity> | null) {\n    this.who =\n      identity === null\n        ? { ...this.who, identity: null, token: null }\n        : Execution.withIdentity(this.who, identity);\n    this.version++;\n  }\n}\n\n/**\n * Every live subscription on one world. A commit or an identity change makes a\n * subscription stale. `refresh` reruns the stale ones, and `reference` reruns\n * every one from scratch to check that none was missed.\n */\nexport class Registry {\n  private readonly live = new Map<string, Live>();\n  private nextId = 1;\n\n  constructor(private readonly world: Execution.World) {}\n\n  subscriber(caller: Execution.Caller): Subscriber {\n    return new Subscriber(this, caller);\n  }\n\n  subscribe(\n    subscriber: Subscriber,\n    reference: unknown,\n    args: unknown,\n  ): Promise<Subscription> {\n    return this.run(subscriber, reference, args, { journal: null }).then(\n      (run) => {\n        const live: Live = {\n          id: `subscription-${this.nextId++}`,\n          subscriber,\n          reference,\n          args,\n          run,\n        };\n        this.live.set(live.id, live);\n        return {\n          id: live.id,\n          current: () => live.run,\n          unsubscribe: () => {\n            this.live.delete(live.id);\n          },\n        };\n      },\n    );\n  }\n\n  /**\n   * Rerun each stale subscription at the latest commit and the kernel's time\n   * now, oldest first, until none is stale. Lists each one whose value\n   * changed.\n   */\n  refresh(): Promise<ReadonlyArray<Transition>> {\n    const stale = Array.from(this.live.values()).flatMap((live) => {\n      const because = invalidation(\n        live.run,\n        this.world.state,\n        live.subscriber.identityVersion,\n      );\n      return because === undefined ? [] : [{ live, because }];\n    });\n    if (stale.length === 0) return Promise.resolve([]);\n    return inTurn(stale, ({ live, because }) =>\n      this.run(live.subscriber, live.reference, live.args, {\n        journal: live.run.journal,\n      }).then((run): Transition | undefined => {\n        if (this.live.get(live.id) !== live) return undefined;\n        const from = live.run.outcome;\n        live.run = run;\n        return sameOutcome(from, run.outcome)\n          ? undefined\n          : { subscription: live.id, from, to: run.outcome, because };\n      }),\n    ).then((transitions) =>\n      this.refresh().then((later) => [...transitions, ...later]),\n    );\n  }\n\n  /**\n   * Rerun every subscription's query from scratch, at the latest commit and\n   * under its subscriber's identity now, and list each whose value differs. A\n   * paginated run keeps its page end.\n   */\n  reference(): Promise<ReadonlyArray<Disagreement>> {\n    return inTurn(Array.from(this.live.values()), (live) =>\n      this.rerun(live).then(({ outcome }): Disagreement | undefined =>\n        sameOutcome(live.run.outcome, outcome)\n          ? undefined\n          : {\n              subscription: live.id,\n              incremental: live.run.outcome,\n              reference: outcome,\n            },\n      ),\n    );\n  }\n\n  /**\n   * A full rerun of `live`'s query. A run that read the time first reruns at\n   * that time, since the clock alone never invalidates it. When that rerun's\n   * own reads show the run was owed a rerun, it reruns again at the kernel's\n   * time now, as `refresh` would. The rerun was owed when a commit since the\n   * run changed something the rerun read, or the rerun read an identity that\n   * has changed since. The check reads neither the run's recorded reads nor\n   * `invalidation`, so a dependency `refresh` missed still disagrees.\n   */\n  private rerun(live: Live): Promise<Run> {\n    const { run } = live;\n    const now = () =>\n      this.run(live.subscriber, live.reference, live.args, {\n        journal: run.journal,\n      });\n    if (run.time === null) return now();\n    return this.run(live.subscriber, live.reference, live.args, {\n      journal: run.journal,\n      time: run.time,\n    }).then((atRunTime) =>\n      Kernel.conflict(this.world.state, run.snapshot, atRunTime.reads) !==\n        undefined ||\n      (atRunTime.observedIdentity &&\n        atRunTime.identityVersion !== run.identityVersion)\n        ? now()\n        : atRunTime,\n    );\n  }\n\n  private run(\n    subscriber: Subscriber,\n    reference: unknown,\n    args: unknown,\n    pinned: { readonly time?: number; readonly journal: string | null },\n  ): Promise<Run> {\n    const identityVersion = subscriber.identityVersion;\n    return this.world\n      .subscribed(subscriber.caller, reference, args, pinned)\n      .then((run) => ({ ...run, identityVersion }));\n  }\n}\n"],"mappings":";;;;;;;;;;;AA+BA,MAAa,gBACX,KACA,OACA,oBAC6B;CAC7B,MAAM,SAASA,SAAgB,OAAO,IAAI,UAAU,IAAI,KAAK;CAC7D,IAAI,WAAW,KAAA,GAAW,OAAO;EAAE,MAAM;EAAU;CAAO;CAC1D,IAAI,IAAI,oBAAoB,IAAI,oBAAoB,iBAClD,OAAO;EAAE,MAAM;EAAY,MAAM,IAAI;EAAiB,IAAI;CAAgB;AAG9E;;;;;AAMA,MAAM,aAAa,WAA6B;CAC9C,IAAI;EACF,OAAO,CAAC,OAAO,QAAQ,aAAa,MAAe,CAAC;CACtD,QAAQ;EACN,OAAO,CAAC,OAAO,QAAQ,OAAO,MAAM,CAAC;CACvC;AACF;AAEA,MAAM,YAAY,UAChB,KAAK,UACH,iBAAiB,QACb;CACE;CACA,MAAM;CACN,MAAM;CACN,UAAW,MAAsC,IAAI;AACvD,IACA,CAAC,UAAU,UAAU,KAAK,CAAC,CACjC;;;;;;AAOF,MAAa,eACX,GACA,MAEA,EAAE,SAAS,aACP,EAAE,SAAS,cAAc,cAAc,EAAE,OAAO,EAAE,KAAK,MAAM,IAC7D,EAAE,SAAS,YAAY,SAAS,EAAE,KAAK,MAAM,SAAS,EAAE,KAAK;;;;AAyBnE,MAAM,UACJ,OACA,MAEA,MAAM,QACH,UAAU,SACT,SAAS,MAAM,SACb,EAAE,IAAI,CAAC,CAAC,MAAM,MAAO,MAAM,KAAA,IAAY,OAAO,CAAC,GAAG,MAAM,CAAC,CAAE,CAC7D,GACF,QAAQ,QAAQ,CAAC,CAAC,CACpB;;;;;AAuBF,IAAa,aAAb,MAAwB;CAIH;CACT;CAJV,UAAkB;CAElB,YACE,UACA,KACA;EAFiB,KAAA,WAAA;EACT,KAAA,MAAA;CACP;CAEH,IAAI,SAA2B;EAC7B,OAAO,KAAK;CACd;CAEA,IAAI,kBAA0B;EAC5B,OAAO,KAAK;CACd;CAEA,UAAU,WAAoB,MAAuC;EACnE,OAAO,KAAK,SAAS,UAAU,MAAM,WAAW,QAAQ,CAAC,CAAC;CAC5D;;;;;CAMA,aAAa,UAAwC;EACnD,KAAK,MACH,aAAa,OACT;GAAE,GAAG,KAAK;GAAK,UAAU;GAAM,OAAO;EAAK,IAC3CC,aAAuB,KAAK,KAAK,QAAQ;EAC/C,KAAK;CACP;AACF;;;;;;AAOA,IAAa,WAAb,MAAsB;CAIS;CAH7B,uBAAwB,IAAI,IAAkB;CAC9C,SAAiB;CAEjB,YAAY,OAAyC;EAAxB,KAAA,QAAA;CAAyB;CAEtD,WAAW,QAAsC;EAC/C,OAAO,IAAI,WAAW,MAAM,MAAM;CACpC;CAEA,UACE,YACA,WACA,MACuB;EACvB,OAAO,KAAK,IAAI,YAAY,WAAW,MAAM,EAAE,SAAS,KAAK,CAAC,CAAC,CAAC,MAC7D,QAAQ;GACP,MAAM,OAAa;IACjB,IAAI,gBAAgB,KAAK;IACzB;IACA;IACA;IACA;GACF;GACA,KAAK,KAAK,IAAI,KAAK,IAAI,IAAI;GAC3B,OAAO;IACL,IAAI,KAAK;IACT,eAAe,KAAK;IACpB,mBAAmB;KACjB,KAAK,KAAK,OAAO,KAAK,EAAE;IAC1B;GACF;EACF,CACF;CACF;;;;;;CAOA,UAA8C;EAC5C,MAAM,QAAQ,MAAM,KAAK,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,SAAS;GAC7D,MAAM,UAAU,aACd,KAAK,KACL,KAAK,MAAM,OACX,KAAK,WAAW,eAClB;GACA,OAAO,YAAY,KAAA,IAAY,CAAC,IAAI,CAAC;IAAE;IAAM;GAAQ,CAAC;EACxD,CAAC;EACD,IAAI,MAAM,WAAW,GAAG,OAAO,QAAQ,QAAQ,CAAC,CAAC;EACjD,OAAO,OAAO,QAAQ,EAAE,MAAM,cAC5B,KAAK,IAAI,KAAK,YAAY,KAAK,WAAW,KAAK,MAAM,EACnD,SAAS,KAAK,IAAI,QACpB,CAAC,CAAC,CAAC,MAAM,QAAgC;GACvC,IAAI,KAAK,KAAK,IAAI,KAAK,EAAE,MAAM,MAAM,OAAO,KAAA;GAC5C,MAAM,OAAO,KAAK,IAAI;GACtB,KAAK,MAAM;GACX,OAAO,YAAY,MAAM,IAAI,OAAO,IAChC,KAAA,IACA;IAAE,cAAc,KAAK;IAAI;IAAM,IAAI,IAAI;IAAS;GAAQ;EAC9D,CAAC,CACH,CAAC,CAAC,MAAM,gBACN,KAAK,QAAQ,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,aAAa,GAAG,KAAK,CAAC,CAC3D;CACF;;;;;;CAOA,YAAkD;EAChD,OAAO,OAAO,MAAM,KAAK,KAAK,KAAK,OAAO,CAAC,IAAI,SAC7C,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,cACvB,YAAY,KAAK,IAAI,SAAS,OAAO,IACjC,KAAA,IACA;GACE,cAAc,KAAK;GACnB,aAAa,KAAK,IAAI;GACtB,WAAW;EACb,CACN,CACF;CACF;;;;;;;;;;CAWA,MAAc,MAA0B;EACtC,MAAM,EAAE,QAAQ;EAChB,MAAM,YACJ,KAAK,IAAI,KAAK,YAAY,KAAK,WAAW,KAAK,MAAM,EACnD,SAAS,IAAI,QACf,CAAC;EACH,IAAI,IAAI,SAAS,MAAM,OAAO,IAAI;EAClC,OAAO,KAAK,IAAI,KAAK,YAAY,KAAK,WAAW,KAAK,MAAM;GAC1D,SAAS,IAAI;GACb,MAAM,IAAI;EACZ,CAAC,CAAC,CAAC,MAAM,cACPD,SAAgB,KAAK,MAAM,OAAO,IAAI,UAAU,UAAU,KAAK,MAC7D,KAAA,KACD,UAAU,oBACT,UAAU,oBAAoB,IAAI,kBAChC,IAAI,IACJ,SACN;CACF;CAEA,IACE,YACA,WACA,MACA,QACc;EACd,MAAM,kBAAkB,WAAW;EACnC,OAAO,KAAK,MACT,WAAW,WAAW,QAAQ,WAAW,MAAM,MAAM,CAAC,CACtD,MAAM,SAAS;GAAE,GAAG;GAAK;EAAgB,EAAE;CAChD;AACF"}
+{"version":3,"file":"Subscriptions.js","names":["Kernel.conflict","Execution.withIdentity"],"sources":["../../src/internal/Subscriptions.ts"],"sourcesContent":["import type { UserIdentity } from \"convex/server\";\nimport { compareValues, convexToJson, type Value } from \"convex/values\";\nimport * as Execution from \"./Execution.js\";\nimport * as Kernel from \"./Kernel.js\";\n\n/**\n * One run of a subscribed query, and the identity version its subscriber had\n * when it ran.\n */\nexport interface Run extends Execution.QueryRun {\n  readonly identityVersion: number;\n}\n\n/**\n * Why a run no longer shows what its query answers now.\n */\nexport type Invalidation =\n  | { readonly kind: \"commit\"; readonly change: Kernel.Change }\n  | {\n      readonly kind: \"identity\";\n      readonly from: number;\n      readonly to: number;\n    };\n\n/**\n * Why `run` is stale, if it is: a commit since its snapshot changed something\n * it read, as an attempt's read set conflicts, or it read its subscriber's\n * identity and that identity has changed. The clock never makes a run stale.\n * The binary does not rerun a query because time passed, so a run keeps the\n * time it read until something else invalidates it.\n */\nexport const invalidation = (\n  run: Run,\n  state: Kernel.State,\n  identityVersion: number,\n): Invalidation | undefined => {\n  const change = Kernel.conflict(state, run.snapshot, run.reads);\n  if (change !== undefined) return { kind: \"commit\", change };\n  if (run.observedIdentity && run.identityVersion !== identityVersion) {\n    return { kind: \"identity\", from: run.identityVersion, to: identityVersion };\n  }\n  return undefined;\n};\n\n/**\n * A thrown value as JSON: a Convex value as Convex writes it, and anything else\n * as its string, beside its type so `\"1\"` and `1` differ.\n */\nconst thrownKey = (thrown: unknown): unknown => {\n  try {\n    return [typeof thrown, convexToJson(thrown as Value)];\n  } catch {\n    return [typeof thrown, String(thrown)];\n  }\n};\n\nconst errorKey = (error: unknown): string =>\n  JSON.stringify(\n    error instanceof Error\n      ? [\n          \"error\",\n          error.name,\n          error.message,\n          thrownKey((error as { readonly data?: unknown }).data),\n        ]\n      : [\"thrown\", thrownKey(error)],\n  );\n\n/**\n * Whether two outcomes show a client the same thing: equal values, failures\n * with errors of the same name, message and data, or failures that threw equal\n * bare values.\n */\nexport const sameOutcome = (\n  a: Execution.Outcome,\n  b: Execution.Outcome,\n): boolean =>\n  a._tag === \"returned\"\n    ? b._tag === \"returned\" && compareValues(a.value, b.value) === 0\n    : b._tag === \"failed\" && errorKey(a.error) === errorKey(b.error);\n\n/**\n * A subscription's value changed when a refresh reran it.\n */\nexport interface Transition {\n  readonly subscription: string;\n  readonly from: Execution.Outcome;\n  readonly to: Execution.Outcome;\n  readonly because: Invalidation;\n}\n\n/**\n * A subscription whose value differs from what a full rerun of its query\n * answers.\n */\nexport interface Disagreement {\n  readonly subscription: string;\n  readonly incremental: Execution.Outcome;\n  readonly reference: Execution.Outcome;\n}\n\n/**\n * Run `f` over `items` one at a time, in order, and keep what it answers.\n */\nconst inTurn = <A, B>(\n  items: ReadonlyArray<A>,\n  f: (item: A) => Promise<B | undefined>,\n): Promise<Array<B>> =>\n  items.reduce<Promise<Array<B>>>(\n    (previous, item) =>\n      previous.then((kept) =>\n        f(item).then((b) => (b === undefined ? kept : [...kept, b])),\n      ),\n    Promise.resolve([]),\n  );\n\nexport interface Subscription {\n  readonly id: string;\n  /**\n   * The latest run: its value and the dependencies it took.\n   */\n  readonly current: () => Run;\n  readonly unsubscribe: () => void;\n}\n\ninterface Live {\n  readonly id: string;\n  readonly subscriber: Subscriber;\n  readonly reference: unknown;\n  readonly args: unknown;\n  run: Run;\n}\n\n/**\n * One client's query set. Its subscriptions share one caller, whose identity\n * `authenticate` replaces, bumping the identity version.\n */\nexport class Subscriber {\n  private version: number;\n\n  constructor(\n    private readonly registry: Registry,\n    private who: Execution.Caller,\n  ) {\n    this.version = registry.identityEpoch();\n  }\n\n  get caller(): Execution.Caller {\n    return this.who;\n  }\n\n  get identityVersion(): number {\n    return this.version;\n  }\n\n  subscribe(reference: unknown, args?: unknown): Promise<Subscription> {\n    return this.registry.subscribe(this, reference, args ?? {});\n  }\n\n  /**\n   * Replace the caller's identity, or sign it out with `null`. Each\n   * subscription that read the identity is stale until the next refresh.\n   */\n  authenticate(identity: Partial<UserIdentity> | null) {\n    this.who =\n      identity === null\n        ? { ...this.who, identity: null, token: null }\n        : Execution.withIdentity(this.who, identity);\n    this.version = this.registry.nextIdentityEpoch();\n  }\n}\n\n/**\n * Every live subscription on one world. A commit or an identity change makes a\n * subscription stale. `refresh` reruns the stale ones, and `reference` reruns\n * every one from scratch to check that none was missed.\n */\nexport class Registry {\n  private readonly live = new Map<string, Live>();\n  private nextId = 1;\n\n  constructor(private readonly world: Execution.World) {}\n\n  subscriber(caller: Execution.Caller): Subscriber {\n    this.world.registerSubscriber();\n    return new Subscriber(this, caller);\n  }\n\n  /**\n   * The reference a live subscription runs, for marking its diffs by the shape\n   * of what its query returns.\n   */\n  referenceOf(subscription: string): unknown {\n    return this.live.get(subscription)?.reference;\n  }\n\n  /**\n   * The world's identity epoch, where a new subscriber's version starts.\n   */\n  identityEpoch(): number {\n    return this.world.currentIdentityEpoch();\n  }\n\n  /**\n   * Advance the world's identity epoch for a subscriber whose identity changed.\n   */\n  nextIdentityEpoch(): number {\n    return this.world.nextIdentityEpoch();\n  }\n\n  subscribe(\n    subscriber: Subscriber,\n    reference: unknown,\n    args: unknown,\n  ): Promise<Subscription> {\n    return this.run(subscriber, reference, args, { journal: null }).then(\n      (run) => {\n        const live: Live = {\n          id: `subscription-${this.nextId++}`,\n          subscriber,\n          reference,\n          args,\n          run,\n        };\n        this.live.set(live.id, live);\n        return {\n          id: live.id,\n          // The run's value is the client's own, so it stays raw. Its read\n          // records are the kernel's, so they leave projected.\n          current: () => ({\n            ...live.run,\n            reads: this.world.projectReads(live.run.reads),\n          }),\n          unsubscribe: () => {\n            this.live.delete(live.id);\n          },\n        };\n      },\n    );\n  }\n\n  /**\n   * Rerun each stale subscription at the latest commit and the kernel's time\n   * now, oldest first, until none is stale. Lists each one whose value\n   * changed.\n   */\n  refresh(): Promise<ReadonlyArray<Transition>> {\n    const stale = Array.from(this.live.values()).flatMap((live) => {\n      const because = invalidation(\n        live.run,\n        this.world.state,\n        live.subscriber.identityVersion,\n      );\n      return because === undefined ? [] : [{ live, because }];\n    });\n    if (stale.length === 0) return Promise.resolve([]);\n    return inTurn(stale, ({ live, because }) =>\n      this.run(live.subscriber, live.reference, live.args, {\n        journal: live.run.journal,\n      }).then((run): Transition | undefined => {\n        if (this.live.get(live.id) !== live) return undefined;\n        const from = live.run.outcome;\n        live.run = run;\n        return sameOutcome(from, run.outcome)\n          ? undefined\n          : { subscription: live.id, from, to: run.outcome, because };\n      }),\n    ).then((transitions) =>\n      this.refresh().then((later) => [...transitions, ...later]),\n    );\n  }\n\n  /**\n   * Rerun every subscription's query from scratch, at the latest commit and\n   * under its subscriber's identity now, and list each whose value differs. A\n   * paginated run keeps its page end.\n   */\n  reference(): Promise<ReadonlyArray<Disagreement>> {\n    return inTurn(Array.from(this.live.values()), (live) =>\n      this.rerun(live).then(({ outcome }): Disagreement | undefined =>\n        sameOutcome(live.run.outcome, outcome)\n          ? undefined\n          : {\n              subscription: live.id,\n              incremental: live.run.outcome,\n              reference: outcome,\n            },\n      ),\n    );\n  }\n\n  /**\n   * A full rerun of `live`'s query. A run that read the time first reruns at\n   * that time, since the clock alone never invalidates it. When that rerun's\n   * own reads show the run was owed a rerun, it reruns again at the kernel's\n   * time now, as `refresh` would. The rerun was owed when a commit since the\n   * run changed something the rerun read, or the rerun read an identity that\n   * has changed since. The check reads neither the run's recorded reads nor\n   * `invalidation`, so a dependency `refresh` missed still disagrees.\n   */\n  private rerun(live: Live): Promise<Run> {\n    const { run } = live;\n    const now = () =>\n      this.run(live.subscriber, live.reference, live.args, {\n        journal: run.journal,\n      });\n    if (run.time === null) return now();\n    return this.run(live.subscriber, live.reference, live.args, {\n      journal: run.journal,\n      time: run.time,\n    }).then((atRunTime) =>\n      Kernel.conflict(this.world.state, run.snapshot, atRunTime.reads) !==\n        undefined ||\n      (atRunTime.observedIdentity &&\n        atRunTime.identityVersion !== run.identityVersion)\n        ? now()\n        : atRunTime,\n    );\n  }\n\n  private run(\n    subscriber: Subscriber,\n    reference: unknown,\n    args: unknown,\n    pinned: { readonly time?: number; readonly journal: string | null },\n  ): Promise<Run> {\n    const identityVersion = subscriber.identityVersion;\n    return this.world\n      .subscribed(subscriber.caller, reference, args, pinned)\n      .then((run) => ({ ...run, identityVersion }));\n  }\n}\n"],"mappings":";;;;;;;;;;;AA+BA,MAAa,gBACX,KACA,OACA,oBAC6B;CAC7B,MAAM,SAASA,SAAgB,OAAO,IAAI,UAAU,IAAI,KAAK;CAC7D,IAAI,WAAW,KAAA,GAAW,OAAO;EAAE,MAAM;EAAU;CAAO;CAC1D,IAAI,IAAI,oBAAoB,IAAI,oBAAoB,iBAClD,OAAO;EAAE,MAAM;EAAY,MAAM,IAAI;EAAiB,IAAI;CAAgB;AAG9E;;;;;AAMA,MAAM,aAAa,WAA6B;CAC9C,IAAI;EACF,OAAO,CAAC,OAAO,QAAQ,aAAa,MAAe,CAAC;CACtD,QAAQ;EACN,OAAO,CAAC,OAAO,QAAQ,OAAO,MAAM,CAAC;CACvC;AACF;AAEA,MAAM,YAAY,UAChB,KAAK,UACH,iBAAiB,QACb;CACE;CACA,MAAM;CACN,MAAM;CACN,UAAW,MAAsC,IAAI;AACvD,IACA,CAAC,UAAU,UAAU,KAAK,CAAC,CACjC;;;;;;AAOF,MAAa,eACX,GACA,MAEA,EAAE,SAAS,aACP,EAAE,SAAS,cAAc,cAAc,EAAE,OAAO,EAAE,KAAK,MAAM,IAC7D,EAAE,SAAS,YAAY,SAAS,EAAE,KAAK,MAAM,SAAS,EAAE,KAAK;;;;AAyBnE,MAAM,UACJ,OACA,MAEA,MAAM,QACH,UAAU,SACT,SAAS,MAAM,SACb,EAAE,IAAI,CAAC,CAAC,MAAM,MAAO,MAAM,KAAA,IAAY,OAAO,CAAC,GAAG,MAAM,CAAC,CAAE,CAC7D,GACF,QAAQ,QAAQ,CAAC,CAAC,CACpB;;;;;AAuBF,IAAa,aAAb,MAAwB;CAIH;CACT;CAJV;CAEA,YACE,UACA,KACA;EAFiB,KAAA,WAAA;EACT,KAAA,MAAA;EAER,KAAK,UAAU,SAAS,cAAc;CACxC;CAEA,IAAI,SAA2B;EAC7B,OAAO,KAAK;CACd;CAEA,IAAI,kBAA0B;EAC5B,OAAO,KAAK;CACd;CAEA,UAAU,WAAoB,MAAuC;EACnE,OAAO,KAAK,SAAS,UAAU,MAAM,WAAW,QAAQ,CAAC,CAAC;CAC5D;;;;;CAMA,aAAa,UAAwC;EACnD,KAAK,MACH,aAAa,OACT;GAAE,GAAG,KAAK;GAAK,UAAU;GAAM,OAAO;EAAK,IAC3CC,aAAuB,KAAK,KAAK,QAAQ;EAC/C,KAAK,UAAU,KAAK,SAAS,kBAAkB;CACjD;AACF;;;;;;AAOA,IAAa,WAAb,MAAsB;CAIS;CAH7B,uBAAwB,IAAI,IAAkB;CAC9C,SAAiB;CAEjB,YAAY,OAAyC;EAAxB,KAAA,QAAA;CAAyB;CAEtD,WAAW,QAAsC;EAC/C,KAAK,MAAM,mBAAmB;EAC9B,OAAO,IAAI,WAAW,MAAM,MAAM;CACpC;;;;;CAMA,YAAY,cAA+B;EACzC,OAAO,KAAK,KAAK,IAAI,YAAY,CAAC,EAAE;CACtC;;;;CAKA,gBAAwB;EACtB,OAAO,KAAK,MAAM,qBAAqB;CACzC;;;;CAKA,oBAA4B;EAC1B,OAAO,KAAK,MAAM,kBAAkB;CACtC;CAEA,UACE,YACA,WACA,MACuB;EACvB,OAAO,KAAK,IAAI,YAAY,WAAW,MAAM,EAAE,SAAS,KAAK,CAAC,CAAC,CAAC,MAC7D,QAAQ;GACP,MAAM,OAAa;IACjB,IAAI,gBAAgB,KAAK;IACzB;IACA;IACA;IACA;GACF;GACA,KAAK,KAAK,IAAI,KAAK,IAAI,IAAI;GAC3B,OAAO;IACL,IAAI,KAAK;IAGT,gBAAgB;KACd,GAAG,KAAK;KACR,OAAO,KAAK,MAAM,aAAa,KAAK,IAAI,KAAK;IAC/C;IACA,mBAAmB;KACjB,KAAK,KAAK,OAAO,KAAK,EAAE;IAC1B;GACF;EACF,CACF;CACF;;;;;;CAOA,UAA8C;EAC5C,MAAM,QAAQ,MAAM,KAAK,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,SAAS;GAC7D,MAAM,UAAU,aACd,KAAK,KACL,KAAK,MAAM,OACX,KAAK,WAAW,eAClB;GACA,OAAO,YAAY,KAAA,IAAY,CAAC,IAAI,CAAC;IAAE;IAAM;GAAQ,CAAC;EACxD,CAAC;EACD,IAAI,MAAM,WAAW,GAAG,OAAO,QAAQ,QAAQ,CAAC,CAAC;EACjD,OAAO,OAAO,QAAQ,EAAE,MAAM,cAC5B,KAAK,IAAI,KAAK,YAAY,KAAK,WAAW,KAAK,MAAM,EACnD,SAAS,KAAK,IAAI,QACpB,CAAC,CAAC,CAAC,MAAM,QAAgC;GACvC,IAAI,KAAK,KAAK,IAAI,KAAK,EAAE,MAAM,MAAM,OAAO,KAAA;GAC5C,MAAM,OAAO,KAAK,IAAI;GACtB,KAAK,MAAM;GACX,OAAO,YAAY,MAAM,IAAI,OAAO,IAChC,KAAA,IACA;IAAE,cAAc,KAAK;IAAI;IAAM,IAAI,IAAI;IAAS;GAAQ;EAC9D,CAAC,CACH,CAAC,CAAC,MAAM,gBACN,KAAK,QAAQ,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,aAAa,GAAG,KAAK,CAAC,CAC3D;CACF;;;;;;CAOA,YAAkD;EAChD,OAAO,OAAO,MAAM,KAAK,KAAK,KAAK,OAAO,CAAC,IAAI,SAC7C,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,cACvB,YAAY,KAAK,IAAI,SAAS,OAAO,IACjC,KAAA,IACA;GACE,cAAc,KAAK;GACnB,aAAa,KAAK,IAAI;GACtB,WAAW;EACb,CACN,CACF;CACF;;;;;;;;;;CAWA,MAAc,MAA0B;EACtC,MAAM,EAAE,QAAQ;EAChB,MAAM,YACJ,KAAK,IAAI,KAAK,YAAY,KAAK,WAAW,KAAK,MAAM,EACnD,SAAS,IAAI,QACf,CAAC;EACH,IAAI,IAAI,SAAS,MAAM,OAAO,IAAI;EAClC,OAAO,KAAK,IAAI,KAAK,YAAY,KAAK,WAAW,KAAK,MAAM;GAC1D,SAAS,IAAI;GACb,MAAM,IAAI;EACZ,CAAC,CAAC,CAAC,MAAM,cACPD,SAAgB,KAAK,MAAM,OAAO,IAAI,UAAU,UAAU,KAAK,MAC7D,KAAA,KACD,UAAU,oBACT,UAAU,oBAAoB,IAAI,kBAChC,IAAI,IACJ,SACN;CACF;CAEA,IACE,YACA,WACA,MACA,QACc;EACd,MAAM,kBAAkB,WAAW;EACnC,OAAO,KAAK,MACT,WAAW,WAAW,QAAQ,WAAW,MAAM,MAAM,CAAC,CACtD,MAAM,SAAS;GAAE,GAAG;GAAK;EAAgB,EAAE;CAChD;AACF"}

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@gaganref/confect-test",
-  "version": "10.3.1-fork.92",
+  "version": "10.3.1-fork.93",
   "peerDependencies": {
-    "@confect/core": "npm:@gaganref/confect-core@10.3.1-fork.92",
-    "@confect/server": "npm:@gaganref/confect-server@10.3.1-fork.92",
+    "@confect/core": "npm:@gaganref/confect-core@10.3.1-fork.93",
+    "@confect/server": "npm:@gaganref/confect-server@10.3.1-fork.93",
     "convex": "^1.32.0",
     "convex-test": ">=0.0.65 <0.1.0",
     "effect": ">=4.0.0 <4.1.0"

package/src/TestConfect.ts

@@ -19,6 +19,7 @@ import * as Layer from "effect/Layer";
 import * as Schema from "effect/Schema";
 import { convexTest as kernelTest } from "./internal/ConvexTest.js";
 import * as MountedHttp from "./internal/MountedHttp.js";
+import * as Redaction from "./internal/Redaction.js";
 
 declare const process: { env: Record<string, string | undefined> };
 
@@ -68,6 +69,36 @@ export type TargetOptions = {
   readonly target?: Target;
 };
 
+/**
+ * Which values a kernel-target layer treats as secret, by component path, then
+ * table name or `module:export`: each entry a thunk of the Confect schema whose
+ * `Schema.Redacted` nodes mark the secrets. A value under one reaches the
+ * kernel's artifacts (snapshots, failure reports, diffs) only as a marker. The
+ * layer derives the app's own tables from its database schema, so this adds
+ * function arguments and returns and component tables. Codegen fills it from
+ * the Confect specs as `secrets` in the generated registry, which replaces a
+ * hand-written one.
+ */
+export type SecretPolicy = {
+  readonly tables?: Readonly<
+    Record<string, Readonly<Record<string, () => Schema.Top>>>
+  >;
+  readonly functions?: Readonly<
+    Record<
+      string,
+      Readonly<
+        Record<
+          string,
+          {
+            readonly args?: () => Schema.Top;
+            readonly returns?: () => Schema.Top;
+          }
+        >
+      >
+    >
+  >;
+};
+
 export type LayerOptions = TargetOptions & {
   /**
    * Register component kits synchronously before the test service is available.
@@ -77,6 +108,10 @@ export type LayerOptions = TargetOptions & {
    * Explicit HTTP mounts. The test layer does not evaluate convex.config.ts.
    */
   readonly httpMounts?: ReadonlyArray<HttpMount>;
+  /**
+   * The secret policy, read by the kernel target only.
+   */
+  readonly secrets?: SecretPolicy;
 };
 
 export type TestConfectWithoutIdentity<
@@ -383,6 +418,11 @@ export type Registry<DatabaseSchema_ extends DatabaseSchema.AnyWithProps> = {
   readonly convexSchema: SchemaDefinition<GenericSchema, true>;
   readonly modules: Record<string, () => Promise<any>>;
   readonly components: Readonly<Record<string, ComponentKit>>;
+  /**
+   * The secret policy codegen derives from the Confect specs, read by the
+   * kernel target only.
+   */
+  readonly secrets?: SecretPolicy;
 };
 
 /**
@@ -442,6 +482,7 @@ export function layer<DatabaseSchema_ extends DatabaseSchema.AnyWithProps>(
       registry.modules,
       {
         ...targetOf(third as TargetOptions | undefined),
+        ...secretsOf(registry),
         httpMounts: mounts.flatMap(({ name, httpPrefix }) =>
           httpPrefix === undefined ? [] : [{ componentPath: name, httpPrefix }],
         ),
@@ -464,6 +505,7 @@ export function layer<DatabaseSchema_ extends DatabaseSchema.AnyWithProps>(
     const app = appOrSchema as DeclaredApp<DatabaseSchema_>;
     return schemaLayer(app.schema, app.convexSchema, app.modules, {
       ...targetOf(second as TargetOptions | undefined),
+      ...secretsOf(app),
       httpMounts: app.httpMounts,
       register: (registerComponent) => {
         for (const [name, component] of Object.entries(app.components)) {
@@ -483,6 +525,11 @@ export function layer<DatabaseSchema_ extends DatabaseSchema.AnyWithProps>(
 const targetOf = (options: TargetOptions | undefined): TargetOptions =>
   options?.target === undefined ? {} : { target: options.target };
 
+const secretsOf = (registry: {
+  readonly secrets?: SecretPolicy;
+}): Pick<LayerOptions, "secrets"> =>
+  registry.secrets === undefined ? {} : { secrets: registry.secrets };
+
 const schemaLayer = <DatabaseSchema_ extends DatabaseSchema.AnyWithProps>(
   databaseSchema: DatabaseSchema_,
   convexSchemaDefinition: SchemaDefinition<GenericSchema, true>,
@@ -492,10 +539,22 @@ const schemaLayer = <DatabaseSchema_ extends DatabaseSchema.AnyWithProps>(
   Layer.sync(TestConfect<DatabaseSchema_>(), () => {
     process.env.CONVEX_CLOUD_URL ??= "https://some-deployment.convex.cloud";
     process.env.CONVEX_SITE_URL ??= "https://some.convex.site";
-    const testConvex = (options.target === "kernel" ? kernelTest : convexTest)(
-      convexSchemaDefinition,
-      modules,
-    );
+    // On the kernel, a value under a secret node of the app's table schemas,
+    // or of the policy's functions and component tables, reaches every
+    // artifact as a marker.
+    const testConvex =
+      options.target === "kernel"
+        ? kernelTest({
+            schema: convexSchemaDefinition,
+            modules,
+            redaction: Redaction.policy(
+              Redaction.merge(
+                { tables: { "": Redaction.tablesOf(databaseSchema) } },
+                options.secrets ?? {},
+              ),
+            ),
+          })
+        : convexTest(convexSchemaDefinition, modules);
     // convex-test takes three arguments and ignores the options. The kernel
     // reads `standing`.
     const registerComponent =

package/src/internal/ConvexTest.ts

@@ -5,6 +5,8 @@ import type {
 } from "convex/server";
 import { componentsGeneric } from "convex/server";
 import * as Execution from "./Execution.js";
+import type * as Invocation from "./Invocation.js";
+import type * as Redaction from "./Redaction.js";
 import type * as Kernel from "./Kernel.js";
 import * as KernelRefusal from "./KernelRefusal.js";
 import * as Subscriptions from "./Subscriptions.js";
@@ -66,6 +68,29 @@ export interface KernelControls {
     advanceTimers?: () => void,
     maxIterations?: number,
   ) => Promise<void>;
+  /**
+   * The committed state as snapshot bytes, bound to their SHA-256 digest. Two
+   * exports of the same state are the same bytes.
+   */
+  readonly exportSnapshot: () => Uint8Array;
+  /**
+   * Replace a fresh backend's state with a snapshot's. Each job's world
+   * resolves by name among `worlds`. Tampered bytes refuse with
+   * `SnapshotDigestMismatch`.
+   */
+  readonly restoreSnapshot: (
+    bytes: Uint8Array,
+    options?: {
+      readonly worlds?: ReadonlyArray<Invocation.World>;
+      readonly secrets?: Redaction.Secrets;
+    },
+  ) => Promise<void>;
+  /**
+   * A copy of the raw secrets the backend has seen under a secret schema node.
+   * A snapshot marks each one, and a restore given this copy puts them back. It
+   * lives in memory and is never written to an artifact.
+   */
+  readonly secrets: () => Redaction.Secrets;
 }
 
 /**
@@ -92,42 +117,109 @@ const accessor = (
   world: Execution.World,
   subscriptions: Subscriptions.Registry,
   caller: Execution.Caller,
-): any => ({
-  query: (reference: any, args?: any) => world.query(caller, reference, args),
-  mutation: (reference: any, args?: any) =>
-    world.mutation(caller, reference, args),
-  action: (reference: any, args?: any) => world.action(caller, reference, args),
-  prepare: (reference: any, args?: any) =>
-    world.prepare(caller, reference, args),
-  apply: (id: string) => world.apply(id),
-  held: () => world.held(),
-  subscriber: () => subscriptions.subscriber(caller),
-  refresh: () => subscriptions.refresh(),
-  reference: () => subscriptions.reference(),
-  run: (handler: (ctx: any) => any) => world.run(caller, "", handler),
-  runInComponent: (componentPath: string, handler: (ctx: any) => any) =>
-    world.run(caller, componentPath, handler),
-  withIdentity: (identity: Partial<UserIdentity>) =>
-    accessor(world, subscriptions, Execution.withIdentity(caller, identity)),
-  withRequestMetadata: (metadata: {
-    readonly ip?: string | null;
-    readonly userAgent?: string | null;
-  }) =>
-    accessor(world, subscriptions, {
-      ...caller,
-      ip: metadata.ip ?? null,
-      userAgent: metadata.userAgent ?? null,
-    }),
-  fetch: () => Promise.reject(KernelRefusal.rowPending("HTTP routes", 6)),
-  jwks: () => Promise.reject(KernelRefusal.rowPending("JWT verification", 6)),
-  advance: (ms: number) => world.advance(ms),
-  jobs: () => world.jobs(),
-  finishInProgressScheduledFunctions: () => world.advance(0),
-  finishAllScheduledFunctions: (
-    _advanceTimers?: () => void,
-    maxIterations?: number,
-  ) => world.drain(maxIterations),
-});
+): any => {
+  // Every failure the kernel hands back is a report a test runner prints, so
+  // each leaves through the world's redaction.
+  const reported = <A>(run: () => Promise<A>): Promise<A> =>
+    run().catch((error: unknown) => {
+      throw world.redactFailure(error);
+    });
+  // A diff names its subscription; its outcomes are marked by the shape of
+  // what that subscription's query returns.
+  const returnsOf = (subscription: string) =>
+    world.functionPathOf(subscriptions.referenceOf(subscription));
+  return {
+    query: (reference: any, args?: any) =>
+      reported(() => world.query(caller, reference, args)),
+    mutation: (reference: any, args?: any) =>
+      reported(() => world.mutation(caller, reference, args)),
+    action: (reference: any, args?: any) =>
+      reported(() => world.action(caller, reference, args)),
+    prepare: (reference: any, args?: any) =>
+      reported(() => world.prepare(caller, reference, args)).then((view) =>
+        world.projectHeld(view),
+      ),
+    apply: (id: string) => {
+      // The attempt leaves `held` once applied, so its function is read first.
+      const functionPath = world
+        .held()
+        .find((view) => view.id === id)?.functionPath;
+      return reported(() => world.apply(id)).then((applied) =>
+        world.projectApplied(applied, functionPath),
+      );
+    },
+    held: () => world.held().map((view) => world.projectHeld(view)),
+    subscriber: () => subscriptions.subscriber(caller),
+    refresh: () =>
+      reported(() => subscriptions.refresh()).then((transitions) =>
+        transitions.map((transition): Subscriptions.Transition => ({
+          ...transition,
+          from: world.redactOutcome(
+            transition.from,
+            returnsOf(transition.subscription),
+          ),
+          to: world.redactOutcome(
+            transition.to,
+            returnsOf(transition.subscription),
+          ),
+          because:
+            transition.because.kind === "commit"
+              ? {
+                  kind: "commit",
+                  change: world.redactChange(transition.because.change),
+                }
+              : transition.because,
+        })),
+      ),
+    reference: () =>
+      reported(() => subscriptions.reference()).then((disagreements) =>
+        disagreements.map((disagreement): Subscriptions.Disagreement => ({
+          ...disagreement,
+          incremental: world.redactOutcome(
+            disagreement.incremental,
+            returnsOf(disagreement.subscription),
+          ),
+          reference: world.redactOutcome(
+            disagreement.reference,
+            returnsOf(disagreement.subscription),
+          ),
+        })),
+      ),
+    run: (handler: (ctx: any) => any) =>
+      reported(() => world.run(caller, "", handler)),
+    runInComponent: (componentPath: string, handler: (ctx: any) => any) =>
+      reported(() => world.run(caller, componentPath, handler)),
+    withIdentity: (identity: Partial<UserIdentity>) =>
+      accessor(world, subscriptions, Execution.withIdentity(caller, identity)),
+    withRequestMetadata: (metadata: {
+      readonly ip?: string | null;
+      readonly userAgent?: string | null;
+    }) =>
+      accessor(world, subscriptions, {
+        ...caller,
+        ip: metadata.ip ?? null,
+        userAgent: metadata.userAgent ?? null,
+      }),
+    fetch: () => Promise.reject(KernelRefusal.rowPending("HTTP routes", 6)),
+    jwks: () => Promise.reject(KernelRefusal.rowPending("JWT verification", 6)),
+    advance: (ms: number) => reported(() => world.advance(ms)),
+    jobs: () => world.jobs(),
+    finishInProgressScheduledFunctions: () => reported(() => world.advance(0)),
+    finishAllScheduledFunctions: (
+      _advanceTimers?: () => void,
+      maxIterations?: number,
+    ) => reported(() => world.drain(maxIterations)),
+    exportSnapshot: () => world.exportSnapshot(),
+    restoreSnapshot: (
+      bytes: Uint8Array,
+      options?: {
+        readonly worlds?: ReadonlyArray<Invocation.World>;
+        readonly secrets?: Redaction.Secrets;
+      },
+    ) => world.restoreSnapshot(bytes, options),
+    secrets: () => world.keptSecrets(),
+  };
+};
 
 /**
  * The test kernel under convex-test's `convexTest` signature. The fork's kernel
@@ -140,7 +232,9 @@ const accessor = (
  * attempt 5. `runtime` supplies the clock and commit timestamps. Scheduled
  * functions run on the kernel's clock, never on a host timer. A subscriber's
  * subscriptions go stale when a commit changes what they read or the identity
- * they read changes, and `refresh` reruns them.
+ * they read changes, and `refresh` reruns them. `redaction` names the secret
+ * schema nodes of tables and functions: a value under one reaches a snapshot, a
+ * failure report or a diff only as a marker.
  */
 export function convexTest(
   schemaOrOptions?:
@@ -150,11 +244,13 @@ export function convexTest(
         readonly modules?: Modules;
         readonly transactionLimits?: unknown;
         readonly runtime?: Kernel.KernelRuntime;
+        readonly redaction?: Redaction.Policy;
       },
   modules?: Modules,
 ): any {
   let schema: SchemaDefinition<GenericSchema, boolean> | undefined;
   let runtime: Kernel.KernelRuntime | undefined;
+  let redaction: Redaction.Policy | undefined;
   if (isSchemaDefinition(schemaOrOptions)) {
     schema = schemaOrOptions;
   } else if (schemaOrOptions !== undefined) {
@@ -164,13 +260,14 @@ export function convexTest(
     schema = schemaOrOptions.schema;
     modules = schemaOrOptions.modules;
     runtime = schemaOrOptions.runtime;
+    redaction = schemaOrOptions.redaction;
   }
   if (modules === undefined) {
     throw new Error(
       "The test kernel needs the modules map: pass `import.meta.glob(...)` as the second argument.",
     );
   }
-  const world = new Execution.World(schema, modules, runtime);
+  const world = new Execution.World(schema, modules, runtime, redaction);
   return {
     ...accessor(world, new Subscriptions.Registry(world), Execution.anonymous),
     registerComponent: (