@happyvertical/smrt-core 0.37.5 → 0.37.7

package/dist/sync/apply.js

@@ -0,0 +1,378 @@
+import { ValidationError } from "../errors.js";
+//#region src/sync/apply.ts
+/**
+* Idempotent sync-apply batch processing (#1759).
+*
+* The single shared write contract for the web offline outbox (#1762) and the
+* KMP mobile write queue (#1739): an ordered batch of client-authored
+* mutations carrying client-generated row UUIDs, applied FIFO through the
+* host's full stack (authentication, tenant isolation, interceptors, writable
+* policy), returning per-item results (`applied` / `conflict` / `rejected`).
+*
+* This module is transport-agnostic: the runtime REST generator
+* (`generators/rest.ts`) and the generated SvelteKit route
+* (`vite-plugin/sync-apply-route.ts`) both delegate here, supplying a
+* {@link SyncApplyHost} that adapts their own collection resolution,
+* authorization, and writable-policy machinery. Keeping the logic here keeps
+* the two generators byte-minimal and the contract single-sourced.
+*
+* Contract documentation: docs/content/architecture/sync-apply-contract.md
+*
+* ## Why replay is idempotent
+*
+* - Row identity is the client-generated UUID (validated server-side), and
+*   ONLY that UUID: creates persist via a strict INSERT
+*   (`_insertOnly`, never natural-key dedup-upsert), so a create can never
+*   adopt or overwrite a different row, and a re-delivered create finds its
+*   own row via the id pre-check instead of duplicating it.
+* - Before writing, each create/update is compared against the current row;
+*   when the row already reflects the item's payload the write is skipped and
+*   reported `applied` (a no-op re-apply). This is what makes N replays of an
+*   identical batch yield byte-identical database state (no `updated_at`
+*   churn) AND identical per-item results, without a server-side idempotency
+*   ledger.
+* - Deletes of rows that are already gone report `applied` consistently.
+*
+* ## Conflict policy v1 (server-authoritative LWW, updated-at guard)
+*
+* The stale guard applies to mutations that would actually change server
+* state: an update/delete whose `baseUpdatedAt` is older than the server
+* row's `updated_at` AND whose effect is not already present is the LOSING
+* write — it is **skipped** (the newer server state wins) and the item is
+* reported `conflict` with the server's current `updatedAt` so the client can
+* rebase. Two deliberate precedences soften "stale ⇒ conflict":
+* no-op detection runs first (a stale update whose payload already matches
+* the row is an idempotent replay of an applied write → `applied`), and a
+* delete of a row that is already gone is a no-op → `applied`. Skipping
+* (rather than clobbering) was chosen because it never destroys newer data,
+* and it is replay-stable: a replayed conflicting item reports `conflict`
+* again against unchanged state. Field-level merge is explicitly out of
+* scope for v1.
+*/
+/**
+* URL segments of the generated batch apply endpoint, relative to the API
+* base path: `POST {basePath}/sync/apply`. The `sync` segment is reserved —
+* a collection named `sync` cannot expose an item route named `apply`.
+*/
+var SYNC_APPLY_ROUTE_SEGMENTS = ["sync", "apply"];
+/** Maximum items accepted in one batch; larger batches are rejected (400). */
+var MAX_SYNC_APPLY_BATCH_SIZE = 1e3;
+/**
+* Client-generated row ids must be well-formed UUIDs. Same shape the ORM
+* accepts as an id filter in `SmrtCollection.get()`.
+*/
+var SYNC_APPLY_UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var SYNC_APPLY_OPS = [
+	"create",
+	"update",
+	"delete"
+];
+/**
+* Writable-policy helper shared with the generated SvelteKit sync route: the
+* same stripping rules as the generated CRUD handlers (#1540) — server-managed
+* fields, `_`-prefixed keys, `@field({ readonly: true })` fields, and (when
+* configured) intersection with the `api.writable` allowlist.
+*/
+function applySyncWritablePolicy(data, policy = {}) {
+	if (!data || typeof data !== "object") return {};
+	const serverManaged = /* @__PURE__ */ new Set([
+		"id",
+		"tenantId",
+		"tenant_id",
+		"createdAt",
+		"created_at",
+		"updatedAt",
+		"updated_at"
+	]);
+	const readonly = new Set(policy.readonlyFields ?? []);
+	const writable = policy.writableAllowlist ?? null;
+	const result = {};
+	for (const [key, value] of Object.entries(data)) {
+		if (key.startsWith("_")) continue;
+		if (serverManaged.has(key)) continue;
+		if (readonly.has(key)) continue;
+		if (writable && !writable.includes(key)) continue;
+		result[key] = value;
+	}
+	return result;
+}
+/**
+* Batch-level validation. Returns the raw items array or a 400-shaped error.
+*/
+function parseSyncApplyBatch(body) {
+	if (!body || typeof body !== "object" || Array.isArray(body) || !Array.isArray(body.items)) return { error: {
+		code: "invalid_batch",
+		message: "Request body must be an object with an \"items\" array"
+	} };
+	const items = body.items;
+	if (items.length > 1e3) return { error: {
+		code: "batch_too_large",
+		message: `Batch exceeds the maximum of ${MAX_SYNC_APPLY_BATCH_SIZE} items`
+	} };
+	return { items };
+}
+/**
+* Per-item shape validation. Never throws; malformed items become `rejected`
+* results so one bad item cannot fail the batch.
+*/
+function validateSyncApplyItem(raw) {
+	const record = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : null;
+	const itemId = record && typeof record.itemId === "string" && record.itemId.length > 0 ? record.itemId : null;
+	const id = record && typeof record.id === "string" ? record.id : null;
+	const reject = (reason) => ({
+		ok: false,
+		result: {
+			itemId,
+			id,
+			status: "rejected",
+			reason
+		}
+	});
+	if (!record || !itemId) return reject("invalid_item");
+	const op = record.op;
+	if (typeof op !== "string" || !SYNC_APPLY_OPS.includes(op)) return reject("invalid_item");
+	const object = record.object;
+	if (typeof object !== "string" || object.length === 0) return reject("invalid_item");
+	const baseUpdatedAt = record.baseUpdatedAt;
+	if (baseUpdatedAt !== void 0) {
+		if (typeof baseUpdatedAt !== "string" || Number.isNaN(Date.parse(baseUpdatedAt))) return reject("invalid_item");
+	}
+	if (!id || !SYNC_APPLY_UUID_PATTERN.test(id)) return reject("invalid_id");
+	const payload = record.payload;
+	if (op === "create" || op === "update") {
+		if (!payload || typeof payload !== "object" || Array.isArray(payload)) return reject("invalid_payload");
+	}
+	return {
+		ok: true,
+		item: {
+			itemId,
+			object,
+			op,
+			id,
+			payload,
+			baseUpdatedAt
+		}
+	};
+}
+function toEpochMillis(value) {
+	if (value instanceof Date) {
+		const time = value.getTime();
+		return Number.isNaN(time) ? null : time;
+	}
+	if (typeof value === "string") {
+		const time = Date.parse(value);
+		return Number.isNaN(time) ? null : time;
+	}
+	return null;
+}
+/**
+* Updated-at conflict guard: true when the client's base is strictly older
+* than the server row's `updated_at`. No base (client opted out) or no
+* comparable server timestamp → not stale.
+*/
+function isStaleWrite(baseUpdatedAt, serverUpdatedAt) {
+	const base = toEpochMillis(baseUpdatedAt ?? null);
+	if (base === null) return false;
+	const server = toEpochMillis(serverUpdatedAt);
+	if (server === null) return false;
+	return base < server;
+}
+function normalizeForComparison(value) {
+	if (value instanceof Date) return value.toISOString();
+	return value;
+}
+function valuesEquivalent(rowValue, payloadValue) {
+	if (rowValue instanceof Date) {
+		const candidate = typeof payloadValue === "string" || typeof payloadValue === "number" ? new Date(payloadValue).getTime() : payloadValue instanceof Date ? payloadValue.getTime() : NaN;
+		return !Number.isNaN(candidate) && candidate === rowValue.getTime();
+	}
+	if (rowValue === null || rowValue === void 0) return payloadValue === null || payloadValue === void 0;
+	if (typeof rowValue !== "object" && typeof payloadValue !== "object") return rowValue === payloadValue;
+	try {
+		return JSON.stringify(normalizeForComparison(rowValue)) === JSON.stringify(normalizeForComparison(payloadValue));
+	} catch {
+		return false;
+	}
+}
+/**
+* No-op detection: true when the row already reflects every (policy-stripped)
+* payload field. Payload keys that are not properties of the hydrated row are
+* ignored — they would never persist, so they must not defeat idempotent
+* replay. This check is what keeps replayed batches from churning
+* `updated_at` (and keeps their per-item results identical).
+*/
+function payloadMatchesRow(payload, row) {
+	const record = row;
+	for (const [key, value] of Object.entries(payload)) {
+		if (!(key in record)) continue;
+		if (!valuesEquivalent(record[key], value)) return false;
+	}
+	return true;
+}
+function rowUpdatedAtIso(row) {
+	const value = row.updated_at;
+	if (value instanceof Date) return value.toISOString();
+	if (typeof value === "string") {
+		const epoch = Date.parse(value);
+		return Number.isNaN(epoch) ? value : new Date(epoch).toISOString();
+	}
+}
+/**
+* Detect a unique/primary-key constraint failure anywhere in an error's cause
+* chain. `save()` classifies constraint errors into typed `ValidationError`s
+* when the driver message reaches it directly, but adapter layers may wrap
+* the driver error (e.g. "Failed to upsert record into table …" with the
+* SQLite/PostgreSQL/DuckDB constraint text nested in `cause`), surfacing as a
+* generic `DatabaseError` instead — so match both, walking the chain. The
+* message patterns mirror `SmrtObject.classifyConstraintError`.
+*/
+function isUniqueConstraintError(error) {
+	const seen = /* @__PURE__ */ new Set();
+	let current = error;
+	while (current instanceof Error && !seen.has(current)) {
+		seen.add(current);
+		if (current instanceof ValidationError && current.code === "VALIDATION_UNIQUE_CONSTRAINT") return true;
+		if (/UNIQUE constraint failed/i.test(current.message) || /violates unique constraint/i.test(current.message) || /violates primary key constraint/i.test(current.message)) return true;
+		current = current.cause;
+	}
+	return false;
+}
+async function applyValidatedItem(item, target) {
+	const base = {
+		itemId: item.itemId,
+		id: item.id
+	};
+	const decision = await target.authorize(item.op);
+	if (decision !== "ok") return {
+		...base,
+		status: "rejected",
+		reason: decision
+	};
+	if (!target.isOpAllowed(item.op)) return {
+		...base,
+		status: "rejected",
+		reason: "op_not_allowed"
+	};
+	const data = item.op === "delete" ? {} : target.prepare(item.payload ?? {});
+	const row = await target.collection.get(item.id);
+	switch (item.op) {
+		case "create":
+			if (row) {
+				if (payloadMatchesRow(data, row)) return {
+					...base,
+					status: "applied",
+					updatedAt: rowUpdatedAtIso(row)
+				};
+				return {
+					...base,
+					status: "conflict",
+					reason: "create_conflict",
+					updatedAt: rowUpdatedAtIso(row)
+				};
+			}
+			try {
+				const created = await target.collection.create({
+					...data,
+					id: item.id,
+					_insertOnly: true
+				});
+				return {
+					...base,
+					status: "applied",
+					updatedAt: rowUpdatedAtIso(created)
+				};
+			} catch (error) {
+				if (isUniqueConstraintError(error)) return {
+					...base,
+					status: "rejected",
+					reason: "id_conflict"
+				};
+				throw error;
+			}
+		case "update":
+			if (!row) return {
+				...base,
+				status: "rejected",
+				reason: "not_found"
+			};
+			if (payloadMatchesRow(data, row)) return {
+				...base,
+				status: "applied",
+				updatedAt: rowUpdatedAtIso(row)
+			};
+			if (isStaleWrite(item.baseUpdatedAt, row.updated_at)) return {
+				...base,
+				status: "conflict",
+				reason: "stale_write",
+				updatedAt: rowUpdatedAtIso(row)
+			};
+			Object.assign(row, data);
+			await row.save();
+			return {
+				...base,
+				status: "applied",
+				updatedAt: rowUpdatedAtIso(row)
+			};
+		case "delete":
+			if (!row) return {
+				...base,
+				status: "applied"
+			};
+			if (isStaleWrite(item.baseUpdatedAt, row.updated_at)) return {
+				...base,
+				status: "conflict",
+				reason: "stale_write",
+				updatedAt: rowUpdatedAtIso(row)
+			};
+			await row.delete();
+			return {
+				...base,
+				status: "applied"
+			};
+	}
+}
+async function processOneItem(raw, host) {
+	const validated = validateSyncApplyItem(raw);
+	if (!validated.ok) return validated.result;
+	const item = validated.item;
+	try {
+		const target = await host.resolveTarget(item.object);
+		if (!target) return {
+			itemId: item.itemId,
+			id: item.id,
+			status: "rejected",
+			reason: "unknown_object"
+		};
+		return await applyValidatedItem(item, target);
+	} catch {
+		return {
+			itemId: item.itemId,
+			id: item.id,
+			status: "rejected",
+			reason: "write_failed"
+		};
+	}
+}
+/**
+* Process a sync-apply batch: validate the envelope, then apply items FIFO
+* (strictly in order, awaiting each — items may depend on earlier items in
+* the same batch). Always resolves; item-level failures surface as `rejected`
+* results and only envelope-level problems produce a 400.
+*/
+async function processSyncApplyBatch(body, host) {
+	const parsed = parseSyncApplyBatch(body);
+	if ("error" in parsed) return {
+		status: 400,
+		body: parsed
+	};
+	const results = [];
+	for (const raw of parsed.items) results.push(await processOneItem(raw, host));
+	return {
+		status: 200,
+		body: { results }
+	};
+}
+//#endregion
+export { MAX_SYNC_APPLY_BATCH_SIZE, SYNC_APPLY_ROUTE_SEGMENTS, SYNC_APPLY_UUID_PATTERN, applySyncWritablePolicy, isStaleWrite, parseSyncApplyBatch, payloadMatchesRow, processSyncApplyBatch, validateSyncApplyItem };
+
+//# sourceMappingURL=apply.js.map

package/dist/sync/apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.js","names":[],"sources":["../../src/sync/apply.ts"],"sourcesContent":["/**\n * Idempotent sync-apply batch processing (#1759).\n *\n * The single shared write contract for the web offline outbox (#1762) and the\n * KMP mobile write queue (#1739): an ordered batch of client-authored\n * mutations carrying client-generated row UUIDs, applied FIFO through the\n * host's full stack (authentication, tenant isolation, interceptors, writable\n * policy), returning per-item results (`applied` / `conflict` / `rejected`).\n *\n * This module is transport-agnostic: the runtime REST generator\n * (`generators/rest.ts`) and the generated SvelteKit route\n * (`vite-plugin/sync-apply-route.ts`) both delegate here, supplying a\n * {@link SyncApplyHost} that adapts their own collection resolution,\n * authorization, and writable-policy machinery. Keeping the logic here keeps\n * the two generators byte-minimal and the contract single-sourced.\n *\n * Contract documentation: docs/content/architecture/sync-apply-contract.md\n *\n * ## Why replay is idempotent\n *\n * - Row identity is the client-generated UUID (validated server-side), and\n *   ONLY that UUID: creates persist via a strict INSERT\n *   (`_insertOnly`, never natural-key dedup-upsert), so a create can never\n *   adopt or overwrite a different row, and a re-delivered create finds its\n *   own row via the id pre-check instead of duplicating it.\n * - Before writing, each create/update is compared against the current row;\n *   when the row already reflects the item's payload the write is skipped and\n *   reported `applied` (a no-op re-apply). This is what makes N replays of an\n *   identical batch yield byte-identical database state (no `updated_at`\n *   churn) AND identical per-item results, without a server-side idempotency\n *   ledger.\n * - Deletes of rows that are already gone report `applied` consistently.\n *\n * ## Conflict policy v1 (server-authoritative LWW, updated-at guard)\n *\n * The stale guard applies to mutations that would actually change server\n * state: an update/delete whose `baseUpdatedAt` is older than the server\n * row's `updated_at` AND whose effect is not already present is the LOSING\n * write — it is **skipped** (the newer server state wins) and the item is\n * reported `conflict` with the server's current `updatedAt` so the client can\n * rebase. Two deliberate precedences soften \"stale ⇒ conflict\":\n * no-op detection runs first (a stale update whose payload already matches\n * the row is an idempotent replay of an applied write → `applied`), and a\n * delete of a row that is already gone is a no-op → `applied`. Skipping\n * (rather than clobbering) was chosen because it never destroys newer data,\n * and it is replay-stable: a replayed conflicting item reports `conflict`\n * again against unchanged state. Field-level merge is explicitly out of\n * scope for v1.\n */\n\nimport { ValidationError } from '../errors.js';\n\n/**\n * URL segments of the generated batch apply endpoint, relative to the API\n * base path: `POST {basePath}/sync/apply`. The `sync` segment is reserved —\n * a collection named `sync` cannot expose an item route named `apply`.\n */\nexport const SYNC_APPLY_ROUTE_SEGMENTS = ['sync', 'apply'] as const;\n\n/** Maximum items accepted in one batch; larger batches are rejected (400). */\nexport const MAX_SYNC_APPLY_BATCH_SIZE = 1000;\n\n/**\n * Client-generated row ids must be well-formed UUIDs. Same shape the ORM\n * accepts as an id filter in `SmrtCollection.get()`.\n */\nexport const SYNC_APPLY_UUID_PATTERN =\n  /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/** Mutation kinds accepted by the batch apply endpoint. */\nexport type SyncApplyOp = 'create' | 'update' | 'delete';\n\nconst SYNC_APPLY_OPS: readonly SyncApplyOp[] = ['create', 'update', 'delete'];\n\n/** Per-item outcome status. */\nexport type SyncApplyStatus = 'applied' | 'conflict' | 'rejected';\n\n/** Machine-readable reasons for `rejected` items. */\nexport type SyncApplyRejectionReason =\n  | 'invalid_item'\n  | 'invalid_id'\n  | 'invalid_payload'\n  | 'unknown_object'\n  | 'op_not_allowed'\n  | 'auth_required'\n  | 'forbidden'\n  | 'not_found'\n  | 'id_conflict'\n  | 'write_failed';\n\n/** Machine-readable reasons for `conflict` items. */\nexport type SyncApplyConflictReason = 'stale_write' | 'create_conflict';\n\nexport type SyncApplyReason =\n  | SyncApplyRejectionReason\n  | SyncApplyConflictReason;\n\n/**\n * One client-authored mutation in a batch. See the contract doc for field\n * semantics; briefly:\n *\n * - `itemId` — the client's idempotency/correlation handle (the durable queue\n *   row id). Echoed back verbatim; results are also positional.\n * - `object` — the collection route segment the model's CRUD routes use\n *   (e.g. `products`).\n * - `id` — the client-generated row UUID. This is the ONLY channel for a\n *   client-supplied id; payload `id` fields are stripped by the writable\n *   policy exactly as on plain CRUD routes (#1540).\n * - `baseUpdatedAt` — the server `updated_at` the client last saw for this\n *   row; drives the conflict guard on update/delete. Omit to opt out.\n */\nexport interface SyncApplyItem {\n  itemId: string;\n  object: string;\n  op: SyncApplyOp;\n  id: string;\n  payload?: Record<string, unknown>;\n  baseUpdatedAt?: string;\n}\n\n/** Request body of `POST …/sync/apply`. */\nexport interface SyncApplyBatchRequest {\n  items: SyncApplyItem[];\n}\n\n/**\n * Per-item result. `results[i]` always corresponds to `items[i]` (positional);\n * `itemId` is echoed for convenience (`null` when the incoming item was too\n * malformed to carry one). `updatedAt` is the server row's `updated_at` after\n * processing — present on applied creates/updates and on conflicts (so clients\n * can rebase), absent on deletes and rejections.\n */\nexport interface SyncApplyItemResult {\n  itemId: string | null;\n  id: string | null;\n  status: SyncApplyStatus;\n  reason?: SyncApplyReason;\n  updatedAt?: string;\n}\n\n/** Response body of `POST …/sync/apply` (HTTP 200). */\nexport interface SyncApplyBatchResponse {\n  results: SyncApplyItemResult[];\n}\n\n/** Batch-level error body (HTTP 400). */\nexport interface SyncApplyBatchError {\n  error: {\n    code: 'invalid_batch' | 'batch_too_large';\n    message: string;\n  };\n}\n\n/** Outcome of {@link processSyncApplyBatch}: HTTP status + JSON body. */\nexport type SyncApplyOutcome =\n  | { status: 200; body: SyncApplyBatchResponse }\n  | { status: 400; body: SyncApplyBatchError };\n\n/**\n * Minimal structural view of a persisted row as the processor needs it.\n * Matches `SmrtObject` structurally; kept structural so hosts and tests can\n * exercise the processor without importing ORM classes.\n */\nexport interface SyncApplyRowLike {\n  id?: string | null;\n  updated_at?: Date | string | null;\n  save(): Promise<unknown>;\n  delete(): Promise<unknown>;\n}\n\n/**\n * Minimal structural view of a collection (matches `SmrtCollection`).\n * `create()` must honor the `_insertOnly` option (strict INSERT — see\n * `SmrtCreateInput`), which the processor sets on every sync create.\n */\nexport interface SyncApplyCollectionLike {\n  get(id: string): Promise<SyncApplyRowLike | null>;\n  create(options: Record<string, unknown>): Promise<SyncApplyRowLike>;\n}\n\n/** Per-item authorization decision from the host. */\nexport type SyncApplyAuthzDecision = 'ok' | 'auth_required' | 'forbidden';\n\n/**\n * A resolved mutation target: everything the processor needs to apply one\n * item through the host's full stack. Hosts build these from their existing\n * machinery so sync items follow the exact same authorization, action-gating,\n * and mass-assignment rules as the host's plain CRUD routes.\n */\nexport interface SyncApplyTarget {\n  /** Registry/class name, for diagnostics. */\n  objectName: string;\n  /** Collection whose get/create/save/delete run the full interceptor stack. */\n  collection: SyncApplyCollectionLike;\n  /** Whether the object's API config exposes this op (mirrors CRUD gating). */\n  isOpAllowed(op: SyncApplyOp): boolean;\n  /** Per-item authorization (mutating semantics, fail-closed). */\n  authorize(\n    op: SyncApplyOp,\n  ): Promise<SyncApplyAuthzDecision> | SyncApplyAuthzDecision;\n  /**\n   * Mass-assignment guard (#1540): strip server-managed/readonly/disallowed\n   * fields from the item payload. The row UUID is injected from the validated\n   * envelope `id` AFTER this runs — never from the body.\n   */\n  prepare(payload: Record<string, unknown>): Record<string, unknown>;\n}\n\n/** Host adapter handed to {@link processSyncApplyBatch}. */\nexport interface SyncApplyHost {\n  /**\n   * Resolve an item's `object` segment to a target, or `null` when unknown.\n   * Called once per item so per-item auth context stays accurate.\n   */\n  resolveTarget(\n    objectSegment: string,\n  ): Promise<SyncApplyTarget | null> | SyncApplyTarget | null;\n}\n\n/**\n * Writable-policy helper shared with the generated SvelteKit sync route: the\n * same stripping rules as the generated CRUD handlers (#1540) — server-managed\n * fields, `_`-prefixed keys, `@field({ readonly: true })` fields, and (when\n * configured) intersection with the `api.writable` allowlist.\n */\nexport function applySyncWritablePolicy(\n  data: unknown,\n  policy: {\n    readonlyFields?: readonly string[];\n    writableAllowlist?: readonly string[] | null;\n  } = {},\n): Record<string, unknown> {\n  if (!data || typeof data !== 'object') {\n    return {};\n  }\n\n  const serverManaged = new Set([\n    'id',\n    'tenantId',\n    'tenant_id',\n    'createdAt',\n    'created_at',\n    'updatedAt',\n    'updated_at',\n  ]);\n  const readonly = new Set(policy.readonlyFields ?? []);\n  const writable = policy.writableAllowlist ?? null;\n\n  const result: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(data)) {\n    if (key.startsWith('_')) continue;\n    if (serverManaged.has(key)) continue;\n    if (readonly.has(key)) continue;\n    if (writable && !writable.includes(key)) continue;\n    result[key] = value;\n  }\n  return result;\n}\n\n/**\n * Batch-level validation. Returns the raw items array or a 400-shaped error.\n */\nexport function parseSyncApplyBatch(\n  body: unknown,\n): { items: unknown[] } | SyncApplyBatchError {\n  if (\n    !body ||\n    typeof body !== 'object' ||\n    Array.isArray(body) ||\n    !Array.isArray((body as { items?: unknown }).items)\n  ) {\n    return {\n      error: {\n        code: 'invalid_batch',\n        message: 'Request body must be an object with an \"items\" array',\n      },\n    };\n  }\n\n  const items = (body as { items: unknown[] }).items;\n  if (items.length > MAX_SYNC_APPLY_BATCH_SIZE) {\n    return {\n      error: {\n        code: 'batch_too_large',\n        message: `Batch exceeds the maximum of ${MAX_SYNC_APPLY_BATCH_SIZE} items`,\n      },\n    };\n  }\n\n  return { items };\n}\n\ninterface ValidatedItem {\n  ok: true;\n  item: SyncApplyItem;\n}\n\ninterface InvalidItem {\n  ok: false;\n  result: SyncApplyItemResult;\n}\n\n/**\n * Per-item shape validation. Never throws; malformed items become `rejected`\n * results so one bad item cannot fail the batch.\n */\nexport function validateSyncApplyItem(\n  raw: unknown,\n): ValidatedItem | InvalidItem {\n  const record =\n    raw && typeof raw === 'object' && !Array.isArray(raw)\n      ? (raw as Record<string, unknown>)\n      : null;\n\n  const itemId =\n    record && typeof record.itemId === 'string' && record.itemId.length > 0\n      ? record.itemId\n      : null;\n  const id = record && typeof record.id === 'string' ? record.id : null;\n\n  const reject = (reason: SyncApplyRejectionReason): InvalidItem => ({\n    ok: false,\n    result: { itemId, id, status: 'rejected', reason },\n  });\n\n  if (!record || !itemId) {\n    return reject('invalid_item');\n  }\n\n  const op = record.op;\n  if (typeof op !== 'string' || !SYNC_APPLY_OPS.includes(op as SyncApplyOp)) {\n    return reject('invalid_item');\n  }\n\n  const object = record.object;\n  if (typeof object !== 'string' || object.length === 0) {\n    return reject('invalid_item');\n  }\n\n  const baseUpdatedAt = record.baseUpdatedAt;\n  if (baseUpdatedAt !== undefined) {\n    if (\n      typeof baseUpdatedAt !== 'string' ||\n      Number.isNaN(Date.parse(baseUpdatedAt))\n    ) {\n      return reject('invalid_item');\n    }\n  }\n\n  // Client UUID validation: the row id must be a well-formed UUID.\n  if (!id || !SYNC_APPLY_UUID_PATTERN.test(id)) {\n    return reject('invalid_id');\n  }\n\n  const payload = record.payload;\n  if (op === 'create' || op === 'update') {\n    if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {\n      return reject('invalid_payload');\n    }\n  }\n\n  return {\n    ok: true,\n    item: {\n      itemId,\n      object,\n      op: op as SyncApplyOp,\n      id,\n      payload: payload as Record<string, unknown> | undefined,\n      baseUpdatedAt: baseUpdatedAt as string | undefined,\n    },\n  };\n}\n\nfunction toEpochMillis(value: Date | string | null | undefined): number | null {\n  if (value instanceof Date) {\n    const time = value.getTime();\n    return Number.isNaN(time) ? null : time;\n  }\n  if (typeof value === 'string') {\n    const time = Date.parse(value);\n    return Number.isNaN(time) ? null : time;\n  }\n  return null;\n}\n\n/**\n * Updated-at conflict guard: true when the client's base is strictly older\n * than the server row's `updated_at`. No base (client opted out) or no\n * comparable server timestamp → not stale.\n */\nexport function isStaleWrite(\n  baseUpdatedAt: string | undefined,\n  serverUpdatedAt: Date | string | null | undefined,\n): boolean {\n  const base = toEpochMillis(baseUpdatedAt ?? null);\n  if (base === null) return false;\n  const server = toEpochMillis(serverUpdatedAt);\n  if (server === null) return false;\n  return base < server;\n}\n\nfunction normalizeForComparison(value: unknown): unknown {\n  if (value instanceof Date) return value.toISOString();\n  return value;\n}\n\nfunction valuesEquivalent(rowValue: unknown, payloadValue: unknown): boolean {\n  // Datetime fields hydrate as Date; clients send ISO strings (or epoch ms).\n  if (rowValue instanceof Date) {\n    const candidate =\n      typeof payloadValue === 'string' || typeof payloadValue === 'number'\n        ? new Date(payloadValue).getTime()\n        : payloadValue instanceof Date\n          ? payloadValue.getTime()\n          : Number.NaN;\n    return !Number.isNaN(candidate) && candidate === rowValue.getTime();\n  }\n\n  if (rowValue === null || rowValue === undefined) {\n    return payloadValue === null || payloadValue === undefined;\n  }\n\n  if (typeof rowValue !== 'object' && typeof payloadValue !== 'object') {\n    return rowValue === payloadValue;\n  }\n\n  try {\n    return (\n      JSON.stringify(normalizeForComparison(rowValue)) ===\n      JSON.stringify(normalizeForComparison(payloadValue))\n    );\n  } catch {\n    return false;\n  }\n}\n\n/**\n * No-op detection: true when the row already reflects every (policy-stripped)\n * payload field. Payload keys that are not properties of the hydrated row are\n * ignored — they would never persist, so they must not defeat idempotent\n * replay. This check is what keeps replayed batches from churning\n * `updated_at` (and keeps their per-item results identical).\n */\nexport function payloadMatchesRow(\n  payload: Record<string, unknown>,\n  row: SyncApplyRowLike,\n): boolean {\n  const record = row as unknown as Record<string, unknown>;\n  for (const [key, value] of Object.entries(payload)) {\n    if (!(key in record)) continue;\n    if (!valuesEquivalent(record[key], value)) return false;\n  }\n  return true;\n}\n\nfunction rowUpdatedAtIso(row: SyncApplyRowLike): string | undefined {\n  const value = row.updated_at;\n  if (value instanceof Date) return value.toISOString();\n  if (typeof value === 'string') {\n    const epoch = Date.parse(value);\n    return Number.isNaN(epoch) ? value : new Date(epoch).toISOString();\n  }\n  return undefined;\n}\n\n/**\n * Detect a unique/primary-key constraint failure anywhere in an error's cause\n * chain. `save()` classifies constraint errors into typed `ValidationError`s\n * when the driver message reaches it directly, but adapter layers may wrap\n * the driver error (e.g. \"Failed to upsert record into table …\" with the\n * SQLite/PostgreSQL/DuckDB constraint text nested in `cause`), surfacing as a\n * generic `DatabaseError` instead — so match both, walking the chain. The\n * message patterns mirror `SmrtObject.classifyConstraintError`.\n */\nfunction isUniqueConstraintError(error: unknown): boolean {\n  const seen = new Set<unknown>();\n  let current: unknown = error;\n  while (current instanceof Error && !seen.has(current)) {\n    seen.add(current);\n    if (\n      current instanceof ValidationError &&\n      current.code === 'VALIDATION_UNIQUE_CONSTRAINT'\n    ) {\n      return true;\n    }\n    if (\n      /UNIQUE constraint failed/i.test(current.message) ||\n      /violates unique constraint/i.test(current.message) ||\n      /violates primary key constraint/i.test(current.message)\n    ) {\n      return true;\n    }\n    current = (current as { cause?: unknown }).cause;\n  }\n  return false;\n}\n\nasync function applyValidatedItem(\n  item: SyncApplyItem,\n  target: SyncApplyTarget,\n): Promise<SyncApplyItemResult> {\n  const base = { itemId: item.itemId, id: item.id } as const;\n\n  // Authorization first (mirrors CRUD: the auth middleware runs before the\n  // per-action 405 gate), then action gating.\n  const decision = await target.authorize(item.op);\n  if (decision !== 'ok') {\n    return { ...base, status: 'rejected', reason: decision };\n  }\n\n  if (!target.isOpAllowed(item.op)) {\n    return { ...base, status: 'rejected', reason: 'op_not_allowed' };\n  }\n\n  // Payload passes through the host's writable policy; the row UUID comes\n  // from the validated envelope `id`, never from the body — the #1540\n  // mass-assignment guard stays intact on this path too.\n  const data = item.op === 'delete' ? {} : target.prepare(item.payload ?? {});\n\n  // Tenant isolation: collection.get runs the interceptor stack, so rows\n  // outside the caller's tenant are simply not visible here.\n  const row = await target.collection.get(item.id);\n\n  switch (item.op) {\n    case 'create': {\n      if (row) {\n        if (payloadMatchesRow(data, row)) {\n          // Idempotent replay of an already-applied create.\n          return {\n            ...base,\n            status: 'applied',\n            updatedAt: rowUpdatedAtIso(row),\n          };\n        }\n        // The id exists with different content — the server state wins (LWW\n        // skip) and the client is told to rebase.\n        return {\n          ...base,\n          status: 'conflict',\n          reason: 'create_conflict',\n          updatedAt: rowUpdatedAtIso(row),\n        };\n      }\n\n      try {\n        // Strict insert (`_insertOnly`): row identity is the envelope UUID\n        // alone. Without it, `create()` saves new objects with natural-key\n        // conflict resolution (slug/context or configured `conflictColumns`,\n        // #1472's ingestion dedup), so a fresh-UUID create whose payload\n        // derives an existing row's natural key would silently adopt and\n        // rewrite that row — violating this contract.\n        const created = await target.collection.create({\n          ...data,\n          id: item.id,\n          _insertOnly: true,\n        });\n        return {\n          ...base,\n          status: 'applied',\n          updatedAt: rowUpdatedAtIso(created),\n        };\n      } catch (error) {\n        // A unique-constraint failure here means the id (or natural key)\n        // belongs to a row this caller cannot see (e.g. another tenant's) or\n        // a concurrent writer won the race. Never clobber it.\n        if (isUniqueConstraintError(error)) {\n          return { ...base, status: 'rejected', reason: 'id_conflict' };\n        }\n        throw error;\n      }\n    }\n\n    case 'update': {\n      if (!row) {\n        return { ...base, status: 'rejected', reason: 'not_found' };\n      }\n      if (payloadMatchesRow(data, row)) {\n        // Idempotent replay of an already-applied update (checked before the\n        // stale guard: our own earlier apply advanced `updated_at`).\n        return { ...base, status: 'applied', updatedAt: rowUpdatedAtIso(row) };\n      }\n      if (isStaleWrite(item.baseUpdatedAt, row.updated_at)) {\n        return {\n          ...base,\n          status: 'conflict',\n          reason: 'stale_write',\n          updatedAt: rowUpdatedAtIso(row),\n        };\n      }\n      Object.assign(row, data);\n      await row.save();\n      return { ...base, status: 'applied', updatedAt: rowUpdatedAtIso(row) };\n    }\n\n    case 'delete': {\n      if (!row) {\n        // Idempotent delete: already gone (or never visible) — reported\n        // consistently on every replay.\n        return { ...base, status: 'applied' };\n      }\n      if (isStaleWrite(item.baseUpdatedAt, row.updated_at)) {\n        return {\n          ...base,\n          status: 'conflict',\n          reason: 'stale_write',\n          updatedAt: rowUpdatedAtIso(row),\n        };\n      }\n      await row.delete();\n      return { ...base, status: 'applied' };\n    }\n  }\n}\n\nasync function processOneItem(\n  raw: unknown,\n  host: SyncApplyHost,\n): Promise<SyncApplyItemResult> {\n  const validated = validateSyncApplyItem(raw);\n  if (!validated.ok) {\n    return validated.result;\n  }\n\n  const item = validated.item;\n  try {\n    const target = await host.resolveTarget(item.object);\n    if (!target) {\n      return {\n        itemId: item.itemId,\n        id: item.id,\n        status: 'rejected',\n        reason: 'unknown_object',\n      };\n    }\n    return await applyValidatedItem(item, target);\n  } catch {\n    // One item's failure must never fail the batch.\n    return {\n      itemId: item.itemId,\n      id: item.id,\n      status: 'rejected',\n      reason: 'write_failed',\n    };\n  }\n}\n\n/**\n * Process a sync-apply batch: validate the envelope, then apply items FIFO\n * (strictly in order, awaiting each — items may depend on earlier items in\n * the same batch). Always resolves; item-level failures surface as `rejected`\n * results and only envelope-level problems produce a 400.\n */\nexport async function processSyncApplyBatch(\n  body: unknown,\n  host: SyncApplyHost,\n): Promise<SyncApplyOutcome> {\n  const parsed = parseSyncApplyBatch(body);\n  if ('error' in parsed) {\n    return { status: 400, body: parsed };\n  }\n\n  const results: SyncApplyItemResult[] = [];\n  for (const raw of parsed.items) {\n    // Sequential on purpose: FIFO within the batch is part of the contract.\n    results.push(await processOneItem(raw, host));\n  }\n\n  return { status: 200, body: { results } };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyDA,IAAa,4BAA4B,CAAC,QAAQ,OAAO;;AAGzD,IAAa,4BAA4B;;;;;AAMzC,IAAa,0BACX;AAKF,IAAM,iBAAyC;CAAC;CAAU;CAAU;AAAQ;;;;;;;AAyJ5E,SAAgB,wBACd,MACA,SAGI,CAAC,GACoB;CACzB,IAAI,CAAC,QAAQ,OAAO,SAAS,UAC3B,OAAO,CAAC;CAGV,MAAM,gCAAgB,IAAI,IAAI;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;CACD,MAAM,WAAW,IAAI,IAAI,OAAO,kBAAkB,CAAC,CAAC;CACpD,MAAM,WAAW,OAAO,qBAAqB;CAE7C,MAAM,SAAkC,CAAC;CACzC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,GAAG;EAC/C,IAAI,IAAI,WAAW,GAAG,GAAG;EACzB,IAAI,cAAc,IAAI,GAAG,GAAG;EAC5B,IAAI,SAAS,IAAI,GAAG,GAAG;EACvB,IAAI,YAAY,CAAC,SAAS,SAAS,GAAG,GAAG;EACzC,OAAO,OAAO;CAChB;CACA,OAAO;AACT;;;;AAKA,SAAgB,oBACd,MAC4C;CAC5C,IACE,CAAC,QACD,OAAO,SAAS,YAChB,MAAM,QAAQ,IAAI,KAClB,CAAC,MAAM,QAAS,KAA6B,KAAK,GAElD,OAAO,EACL,OAAO;EACL,MAAM;EACN,SAAS;CACX,EACF;CAGF,MAAM,QAAS,KAA8B;CAC7C,IAAI,MAAM,SAAA,KACR,OAAO,EACL,OAAO;EACL,MAAM;EACN,SAAS,gCAAgC,0BAA0B;CACrE,EACF;CAGF,OAAO,EAAE,MAAM;AACjB;;;;;AAgBA,SAAgB,sBACd,KAC6B;CAC7B,MAAM,SACJ,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,GAAG,IAC/C,MACD;CAEN,MAAM,SACJ,UAAU,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,SAAS,IAClE,OAAO,SACP;CACN,MAAM,KAAK,UAAU,OAAO,OAAO,OAAO,WAAW,OAAO,KAAK;CAEjE,MAAM,UAAU,YAAmD;EACjE,IAAI;EACJ,QAAQ;GAAE;GAAQ;GAAI,QAAQ;GAAY;EAAO;CACnD;CAEA,IAAI,CAAC,UAAU,CAAC,QACd,OAAO,OAAO,cAAc;CAG9B,MAAM,KAAK,OAAO;CAClB,IAAI,OAAO,OAAO,YAAY,CAAC,eAAe,SAAS,EAAiB,GACtE,OAAO,OAAO,cAAc;CAG9B,MAAM,SAAS,OAAO;CACtB,IAAI,OAAO,WAAW,YAAY,OAAO,WAAW,GAClD,OAAO,OAAO,cAAc;CAG9B,MAAM,gBAAgB,OAAO;CAC7B,IAAI,kBAAkB,KAAA;MAElB,OAAO,kBAAkB,YACzB,OAAO,MAAM,KAAK,MAAM,aAAa,CAAC,GAEtC,OAAO,OAAO,cAAc;CAAA;CAKhC,IAAI,CAAC,MAAM,CAAC,wBAAwB,KAAK,EAAE,GACzC,OAAO,OAAO,YAAY;CAG5B,MAAM,UAAU,OAAO;CACvB,IAAI,OAAO,YAAY,OAAO;MACxB,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAClE,OAAO,OAAO,iBAAiB;CAAA;CAInC,OAAO;EACL,IAAI;EACJ,MAAM;GACJ;GACA;GACI;GACJ;GACS;GACM;EACjB;CACF;AACF;AAEA,SAAS,cAAc,OAAwD;CAC7E,IAAI,iBAAiB,MAAM;EACzB,MAAM,OAAO,MAAM,QAAQ;EAC3B,OAAO,OAAO,MAAM,IAAI,IAAI,OAAO;CACrC;CACA,IAAI,OAAO,UAAU,UAAU;EAC7B,MAAM,OAAO,KAAK,MAAM,KAAK;EAC7B,OAAO,OAAO,MAAM,IAAI,IAAI,OAAO;CACrC;CACA,OAAO;AACT;;;;;;AAOA,SAAgB,aACd,eACA,iBACS;CACT,MAAM,OAAO,cAAc,iBAAiB,IAAI;CAChD,IAAI,SAAS,MAAM,OAAO;CAC1B,MAAM,SAAS,cAAc,eAAe;CAC5C,IAAI,WAAW,MAAM,OAAO;CAC5B,OAAO,OAAO;AAChB;AAEA,SAAS,uBAAuB,OAAyB;CACvD,IAAI,iBAAiB,MAAM,OAAO,MAAM,YAAY;CACpD,OAAO;AACT;AAEA,SAAS,iBAAiB,UAAmB,cAAgC;CAE3E,IAAI,oBAAoB,MAAM;EAC5B,MAAM,YACJ,OAAO,iBAAiB,YAAY,OAAO,iBAAiB,WACxD,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,IAC/B,wBAAwB,OACtB,aAAa,QAAQ,IACrB;EACR,OAAO,CAAC,OAAO,MAAM,SAAS,KAAK,cAAc,SAAS,QAAQ;CACpE;CAEA,IAAI,aAAa,QAAQ,aAAa,KAAA,GACpC,OAAO,iBAAiB,QAAQ,iBAAiB,KAAA;CAGnD,IAAI,OAAO,aAAa,YAAY,OAAO,iBAAiB,UAC1D,OAAO,aAAa;CAGtB,IAAI;EACF,OACE,KAAK,UAAU,uBAAuB,QAAQ,CAAC,MAC/C,KAAK,UAAU,uBAAuB,YAAY,CAAC;CAEvD,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;AASA,SAAgB,kBACd,SACA,KACS;CACT,MAAM,SAAS;CACf,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;EAClD,IAAI,EAAE,OAAO,SAAS;EACtB,IAAI,CAAC,iBAAiB,OAAO,MAAM,KAAK,GAAG,OAAO;CACpD;CACA,OAAO;AACT;AAEA,SAAS,gBAAgB,KAA2C;CAClE,MAAM,QAAQ,IAAI;CAClB,IAAI,iBAAiB,MAAM,OAAO,MAAM,YAAY;CACpD,IAAI,OAAO,UAAU,UAAU;EAC7B,MAAM,QAAQ,KAAK,MAAM,KAAK;EAC9B,OAAO,OAAO,MAAM,KAAK,IAAI,QAAQ,IAAI,KAAK,KAAK,CAAC,CAAC,YAAY;CACnE;AAEF;;;;;;;;;;AAWA,SAAS,wBAAwB,OAAyB;CACxD,MAAM,uBAAO,IAAI,IAAa;CAC9B,IAAI,UAAmB;CACvB,OAAO,mBAAmB,SAAS,CAAC,KAAK,IAAI,OAAO,GAAG;EACrD,KAAK,IAAI,OAAO;EAChB,IACE,mBAAmB,mBACnB,QAAQ,SAAS,gCAEjB,OAAO;EAET,IACE,4BAA4B,KAAK,QAAQ,OAAO,KAChD,8BAA8B,KAAK,QAAQ,OAAO,KAClD,mCAAmC,KAAK,QAAQ,OAAO,GAEvD,OAAO;EAET,UAAW,QAAgC;CAC7C;CACA,OAAO;AACT;AAEA,eAAe,mBACb,MACA,QAC8B;CAC9B,MAAM,OAAO;EAAE,QAAQ,KAAK;EAAQ,IAAI,KAAK;CAAG;CAIhD,MAAM,WAAW,MAAM,OAAO,UAAU,KAAK,EAAE;CAC/C,IAAI,aAAa,MACf,OAAO;EAAE,GAAG;EAAM,QAAQ;EAAY,QAAQ;CAAS;CAGzD,IAAI,CAAC,OAAO,YAAY,KAAK,EAAE,GAC7B,OAAO;EAAE,GAAG;EAAM,QAAQ;EAAY,QAAQ;CAAiB;CAMjE,MAAM,OAAO,KAAK,OAAO,WAAW,CAAC,IAAI,OAAO,QAAQ,KAAK,WAAW,CAAC,CAAC;CAI1E,MAAM,MAAM,MAAM,OAAO,WAAW,IAAI,KAAK,EAAE;CAE/C,QAAQ,KAAK,IAAb;EACE,KAAK;GACH,IAAI,KAAK;IACP,IAAI,kBAAkB,MAAM,GAAG,GAE7B,OAAO;KACL,GAAG;KACH,QAAQ;KACR,WAAW,gBAAgB,GAAG;IAChC;IAIF,OAAO;KACL,GAAG;KACH,QAAQ;KACR,QAAQ;KACR,WAAW,gBAAgB,GAAG;IAChC;GACF;GAEA,IAAI;IAOF,MAAM,UAAU,MAAM,OAAO,WAAW,OAAO;KAC7C,GAAG;KACH,IAAI,KAAK;KACT,aAAa;IACf,CAAC;IACD,OAAO;KACL,GAAG;KACH,QAAQ;KACR,WAAW,gBAAgB,OAAO;IACpC;GACF,SAAS,OAAO;IAId,IAAI,wBAAwB,KAAK,GAC/B,OAAO;KAAE,GAAG;KAAM,QAAQ;KAAY,QAAQ;IAAc;IAE9D,MAAM;GACR;EAGF,KAAK;GACH,IAAI,CAAC,KACH,OAAO;IAAE,GAAG;IAAM,QAAQ;IAAY,QAAQ;GAAY;GAE5D,IAAI,kBAAkB,MAAM,GAAG,GAG7B,OAAO;IAAE,GAAG;IAAM,QAAQ;IAAW,WAAW,gBAAgB,GAAG;GAAE;GAEvE,IAAI,aAAa,KAAK,eAAe,IAAI,UAAU,GACjD,OAAO;IACL,GAAG;IACH,QAAQ;IACR,QAAQ;IACR,WAAW,gBAAgB,GAAG;GAChC;GAEF,OAAO,OAAO,KAAK,IAAI;GACvB,MAAM,IAAI,KAAK;GACf,OAAO;IAAE,GAAG;IAAM,QAAQ;IAAW,WAAW,gBAAgB,GAAG;GAAE;EAGvE,KAAK;GACH,IAAI,CAAC,KAGH,OAAO;IAAE,GAAG;IAAM,QAAQ;GAAU;GAEtC,IAAI,aAAa,KAAK,eAAe,IAAI,UAAU,GACjD,OAAO;IACL,GAAG;IACH,QAAQ;IACR,QAAQ;IACR,WAAW,gBAAgB,GAAG;GAChC;GAEF,MAAM,IAAI,OAAO;GACjB,OAAO;IAAE,GAAG;IAAM,QAAQ;GAAU;CAExC;AACF;AAEA,eAAe,eACb,KACA,MAC8B;CAC9B,MAAM,YAAY,sBAAsB,GAAG;CAC3C,IAAI,CAAC,UAAU,IACb,OAAO,UAAU;CAGnB,MAAM,OAAO,UAAU;CACvB,IAAI;EACF,MAAM,SAAS,MAAM,KAAK,cAAc,KAAK,MAAM;EACnD,IAAI,CAAC,QACH,OAAO;GACL,QAAQ,KAAK;GACb,IAAI,KAAK;GACT,QAAQ;GACR,QAAQ;EACV;EAEF,OAAO,MAAM,mBAAmB,MAAM,MAAM;CAC9C,QAAQ;EAEN,OAAO;GACL,QAAQ,KAAK;GACb,IAAI,KAAK;GACT,QAAQ;GACR,QAAQ;EACV;CACF;AACF;;;;;;;AAQA,eAAsB,sBACpB,MACA,MAC2B;CAC3B,MAAM,SAAS,oBAAoB,IAAI;CACvC,IAAI,WAAW,QACb,OAAO;EAAE,QAAQ;EAAK,MAAM;CAAO;CAGrC,MAAM,UAAiC,CAAC;CACxC,KAAK,MAAM,OAAO,OAAO,OAEvB,QAAQ,KAAK,MAAM,eAAe,KAAK,IAAI,CAAC;CAG9C,OAAO;EAAE,QAAQ;EAAK,MAAM,EAAE,QAAQ;CAAE;AAC1C"}

package/dist/vite-plugin/sveltekit-generator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sveltekit-generator.d.ts","sourceRoot":"","sources":["../../src/vite-plugin/sveltekit-generator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAOvE,OAAO,KAAK,EAEV,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iFAAiF;IACjF,SAAS,CAAC,EAAE,qBAAqB,CAAC;CACnC;AAydD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKtD;AAiUD;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAkDf;AAorBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,qBAAqB,GAC/B,GAAG,CAAC,MAAM,CAAC,CAwCb;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,mBAAmB,GAC5B,wBAAwB,EAAE,CA+B5B;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,mBAAmB,GAC5B,IAAI,CAkBN"}
+{"version":3,"file":"sveltekit-generator.d.ts","sourceRoot":"","sources":["../../src/vite-plugin/sveltekit-generator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAQvE,OAAO,KAAK,EAEV,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iFAAiF;IACjF,SAAS,CAAC,EAAE,qBAAqB,CAAC;CACnC;AAydD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKtD;AAiUD;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAqDf;AAorBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,qBAAqB,GAC/B,GAAG,CAAC,MAAM,CAAC,CAwCb;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,mBAAmB,GAC5B,wBAAwB,EAAE,CA+B5B;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,mBAAmB,GAC5B,IAAI,CAkBN"}

package/dist/vite-plugin/sveltekit-generator.js

@@ -1,3 +1,5 @@
+import { generateConditionalGetRouteHelper } from "../generators/conditional-get.js";
+import { generateSyncApplyRoute } from "./sync-apply-route.js";
 import { existsSync, mkdirSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from "node:fs";
 import { join, relative } from "node:path";
 //#region src/vite-plugin/sveltekit-generator.ts
@@ -476,6 +478,7 @@ async function generateSvelteKitRoutes(projectRoot, manifest, options) {
 		generatedCount++;
 	}
 	if (options.knowledge?.api?.enabled) generateKnowledgeRoute(projectRoot, options);
+	generateSyncApplyRoute(projectRoot, manifest, options);
 	updateGitignore(projectRoot, options);
 	const skippedMsg = skippedCollections > 0 ? ` (skipped ${skippedCollections} collection classes)` : "";
 	console.log(`[smrt] Generated routes for ${generatedCount} SMRT objects${skippedMsg}`);
@@ -985,14 +988,17 @@ function generateCollectionRouteTemplate(projectRoot, className, objectDef, incl
 	const imports = `${AUTO_GENERATED_ROUTE_HEADER}
 // DO NOT EDIT - changes will be overwritten
 
-import { error, json } from '@sveltejs/kit';
+import { error${hasPost ? ", json" : ""} } from '@sveltejs/kit';
 ${serializerImports ? `${serializerImports}\n` : ""}import { getCollection } from '$lib/server/smrt';
 ${modelType.importStatement ? `${modelType.importStatement}\n` : ""}import type { RequestHandler } from './$types';
 // Note: ${className} is auto-registered by the Vite plugin scanner
-${generateAuthGuardHelper(objectDef)}${isTenantScoped(objectDef) ? generateTenantContextHelper() : ""}${hasPost ? generateWritablePolicyHelper(objectDef) : ""}`;
+${generateAuthGuardHelper(objectDef)}${isTenantScoped(objectDef) ? generateTenantContextHelper() : ""}${hasPost ? generateWritablePolicyHelper(objectDef) : ""}${hasGet ? generateConditionalGetRouteHelper(objectDef.decoratorConfig?.api, {
+		tenantScoped: isTenantScoped(objectDef),
+		modelName: className
+	}) : ""}`;
 	const getHandler = hasGet ? `
 // List all ${className.toLowerCase()}s
-export const GET: RequestHandler = async ({ locals, url }) => {
+export const GET: RequestHandler = async ({ locals, url, request }) => {
 ${routeGuardPreamble(objectDef, false)}
   const limit = Number(url.searchParams.get('limit')) || 50;
   const offset = Number(url.searchParams.get('offset')) || 0;
@@ -1005,9 +1011,9 @@ ${serializers.listItemSerializerName ? `
     items.map((item) => ${serializers.listItemSerializerName}(item)),
   );
 
-  return json({ items: serializedItems, count, limit, offset });` : `
+  return conditionalJson(request, { items: serializedItems, count, limit, offset });` : `
   const items_public = items.map((item) => item.toPublicJSON());
-  return json({ items: items_public, count, limit, offset });`}
+  return conditionalJson(request, { items: items_public, count, limit, offset });`}
 };
 ` : "";
 	const postHandler = hasPost ? `
@@ -1079,13 +1085,16 @@ function generateItemRouteTemplate(projectRoot, className, objectDef, includedAc
 	const imports = `${AUTO_GENERATED_ROUTE_HEADER}
 // DO NOT EDIT - changes will be overwritten
 
-import { error, json } from '@sveltejs/kit';
+import { error${hasPut || hasDelete ? ", json" : ""} } from '@sveltejs/kit';
 ${serializerImports ? `${serializerImports}\n` : ""}import { getCollection } from '$lib/server/smrt';
 ${modelType.importStatement ? `${modelType.importStatement}\n` : ""}import type { RequestHandler } from './$types';
-${generateAuthGuardHelper(objectDef)}${isTenantScoped(objectDef) ? generateTenantContextHelper() : ""}${hasPut ? generateWritablePolicyHelper(objectDef) : ""}`;
+${generateAuthGuardHelper(objectDef)}${isTenantScoped(objectDef) ? generateTenantContextHelper() : ""}${hasPut ? generateWritablePolicyHelper(objectDef) : ""}${hasGet ? generateConditionalGetRouteHelper(objectDef.decoratorConfig?.api, {
+		tenantScoped: isTenantScoped(objectDef),
+		modelName: className
+	}) : ""}`;
 	const getHandler = hasGet ? `
 // Get single ${simpleClassName.toLowerCase()}
-export const GET: RequestHandler = async ({ locals, params }) => {
+export const GET: RequestHandler = async ({ locals, params, request }) => {
 ${routeGuardPreamble(objectDef, false)}
 ${generateCollectionLoad(className, { typeName: modelType.typeName })}
   const item = await collection.get(params.id);
@@ -1093,8 +1102,8 @@ ${generateNotFoundError(className)}
 ${serializers.itemSerializerName ? `
   const serializedItem = await ${serializers.itemSerializerName}(item);
 
-  return json(serializedItem);` : `
-  return json(item.toPublicJSON());`}
+  return conditionalJson(request, serializedItem);` : `
+  return conditionalJson(request, item.toPublicJSON());`}
 };
 ` : "";
 	const putHandler = hasPut ? `