@kairos-es/feed-postgres 0.0.0-stage → 1.0.0-alpha.6

package/dist/cjs/lease.js

@@ -0,0 +1,342 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.pooledConnectionFault = exports.makeAcquireLease = exports.leaseRow = exports.advisoryLockName = exports.advisoryLock = exports.DEFAULT_LEASE_TTL = exports.DEFAULT_LEASE_HEARTBEAT = void 0;
+var _feed = require("@kairos-es/feed");
+var _effect = require("effect");
+var _context = require("./internal/context.js");
+/**
+ * The sync worker's lease on Postgres, in the two kinds `FeedSyncStore`'s doc
+ * describes, chosen in config to suit the infrastructure in front of the
+ * database.
+ *
+ * ## Why there are two
+ *
+ * A worker lease is what keeps a feed's sends to a sink in order: a sink has no
+ * transaction, so a rival worker's stale send lands before any compare-and-set can
+ * catch it (ADR-0019 §5). The two kinds trade the same two things against each
+ * other — what the connection must be, and how long a lapsed worker can go on
+ * sending — and neither wins on both.
+ *
+ * - **`leaseRow`, the default.** The holder and an expiry live on the sink's
+ *   cursor row, taken with a guarded upsert (only when free, expired, or held by
+ *   an advisory worker whose session is gone; see below) and renewed by a
+ *   heartbeat forked into the lease's scope. Every statement is an ordinary short
+ *   one, and the take one short transaction, so it works through a TRANSACTION
+ *   POOLER, which drops session state and so rules out a session lock, and it
+ *   needs no reserved connection. Its cost is a window. `ensureHeld` fails a
+ *   MARGIN before the stored expiry: once the last successful renewal is
+ *   `ttl - margin` old by the worker's own `Clock`, that renewal's expiry, which is
+ *   when a rival may take the row, is at most `margin` away. So a call to the sink
+ *   that `ensureHeld` let through, and that lands within `margin` of that check,
+ *   pauses included, lands before any rival can hold the lease, however its
+ *   renewals have been failing meanwhile, as long as the two workers' clocks
+ *   agree. A call that outlasts the margin, whether it is slow or its worker
+ *   pauses (a long GC pause, a network stall), can land after a rival took over:
+ *   ONE stale call, since the next `ensureHeld` fails; `FeedSyncStore.ts` owns what
+ *   that call costs. The margin is `ttl / 3` unless configured, and must leave the
+ *   heartbeat room under the lease (`heartbeat + margin < ttl`), or `ensureHeld`
+ *   would fail between two renewals that both landed at once. Each renewal is
+ *   bounded by the heartbeat and the next starts on the next tick, and the age
+ *   `ensureHeld` judges runs from when a renewal STARTED. So a renewal that lands
+ *   is at most `heartbeat` late, and the worst age `ensureHeld` meets is
+ *   `heartbeat` plus that latency with every renewal landing, and `2 * heartbeat`
+ *   plus it with one lost. A worker therefore goes on sending, without a single
+ *   failed `ensureHeld`, through renewals that are slow when
+ *   `2 * heartbeat + margin <= ttl`, and through one that fails or hangs when
+ *   `3 * heartbeat + margin <= ttl`. The defaults satisfy the second; the
+ *   construction check enforces only the first's zero-latency form, so a tighter
+ *   config is accepted and trades those guarantees for a shorter `ttl`.
+ * - **`advisoryLock`.** A session `pg_try_advisory_lock` on a connection RESERVED
+ *   from a client the consumer dedicates to it, keyed by a hash of the prefix, the
+ *   feed and the sink. The lock goes when the session goes, and `ensureHeld` asks
+ *   that same session, before every call that changes the sink, whether it still
+ *   holds the lock; any failure to answer is a lost lease. So a process pause
+ *   opens no stale window, since the lock survives it. What a check cannot see is
+ *   the session dying AFTER it: the call it let through is already under way and
+ *   runs to its end, so it can land as late as its whole duration after the session
+ *   died, and after a rival has taken the lock and sent. That is still ONE stale
+ *   call, since the next `ensureHeld` asks a session that is gone, but a sink call
+ *   can be long — a resync's `publish` most of all. The price is a connection per
+ *   running worker, and a connection that is genuinely a SESSION: a transaction
+ *   pooler would hand the lock's session to somebody else between statements. A
+ *   client this package can recognise as one is refused at construction; see
+ *   {@link pooledConnectionFault} for what it can and cannot recognise.
+ *
+ * ## Fencing is the same for both
+ *
+ * Both kinds record the holder on the cursor row, and the cursor compare-and-set
+ * requires it, so a worker whose lease has gone cannot move the cursor whichever
+ * kind it held. Mixing the two kinds on one feed and sink fails safe, because
+ * neither takes the row from a LIVE holder of the other. A lease-row worker takes
+ * over an advisory holder (one with no expiry to lapse) only while it holds that
+ * sink's advisory lock for its own transaction, which a live advisory session
+ * refuses; so a crashed advisory worker, whose scope never closed to clear the row,
+ * does not leave the sink unleasable by every lease-row worker after it. An
+ * advisory worker that wins the lock but finds a lease row unexpired on the row lets
+ * the lock go and fails `LeaseHeld`. Whichever took the row first keeps it while it
+ * lives. The advisory worker likewise takes over an ADVISORY holder recorded on the
+ * row, because holding the lock proves that session is gone; it records itself
+ * from the session that holds the lock, and only while it still does, so a session
+ * that died after its try-lock cannot overwrite the successor that took the lock
+ * from it.
+ */
+
+/** The default lease length. */
+const DEFAULT_LEASE_TTL = exports.DEFAULT_LEASE_TTL = /*#__PURE__*/_effect.Duration.seconds(30);
+/**
+ * The default renewal interval: a fifth of the lease. With the default margin, a
+ * third, `3 * heartbeat + margin` is under the `ttl`, so a worker goes on sending,
+ * with no failed `ensureHeld`, through one renewal that fails or hangs. However
+ * many fail, it stops sending a margin before its lease could lapse. The module
+ * doc has the arithmetic.
+ */
+const DEFAULT_LEASE_HEARTBEAT = exports.DEFAULT_LEASE_HEARTBEAT = /*#__PURE__*/_effect.Duration.seconds(6);
+/** A lease row, the default; see the module doc. */
+const leaseRow = (options = {}) => ({
+  _tag: 'LeaseRow',
+  ttl: options.ttl ?? DEFAULT_LEASE_TTL,
+  heartbeat: options.heartbeat ?? DEFAULT_LEASE_HEARTBEAT,
+  ...(options.margin === undefined ? {} : {
+    margin: options.margin
+  })
+});
+/** A session advisory lock on a dedicated connection; see the module doc. */
+exports.leaseRow = leaseRow;
+const advisoryLock = options => ({
+  _tag: 'AdvisoryLock',
+  connection: options.connection
+});
+/**
+ * Why `client` cannot carry a session lock, when this package can tell, or
+ * `undefined`.
+ *
+ * What it can tell is limited to what a client says about where it connects,
+ * which `@effect/sql-pg`'s client exposes as `config` and a generic `SqlClient`
+ * does not. It recognises the two pooler conventions that show in an address: a
+ * Neon pooled endpoint (a host containing `-pooler`), and PgBouncer's default
+ * port, 6432, or a `pgbouncer=true` URL parameter. A pooler on any other address,
+ * or behind a client that exposes nothing, passes; that is a wiring the consumer
+ * owns. The URL is read only to judge it and is never repeated in the message.
+ */
+exports.advisoryLock = advisoryLock;
+const pooledConnectionFault = client => {
+  const config = client.config;
+  if (config === null || typeof config !== 'object') {
+    return undefined;
+  }
+  const {
+    host,
+    port,
+    url
+  } = config;
+  const hosts = typeof host === 'string' ? [host] : [];
+  const ports = typeof port === 'number' ? [port] : [];
+  let pgbouncer = false;
+  const rawUrl = _effect.Redacted.isRedacted(url) ? _effect.Redacted.value(url) : typeof url === 'string' ? url : undefined;
+  if (typeof rawUrl === 'string') {
+    try {
+      const parsed = new URL(rawUrl);
+      hosts.push(parsed.hostname);
+      if (parsed.port !== '') {
+        ports.push(Number(parsed.port));
+      }
+      pgbouncer = parsed.searchParams.get('pgbouncer') === 'true';
+    } catch {
+      // Not a URL this check can read; the driver will say so itself.
+    }
+  }
+  const signs = [...(hosts.some(h => h.includes('-pooler')) ? ['a "-pooler" host, which is a pooled endpoint'] : []), ...(ports.includes(6432) ? ["port 6432, PgBouncer's default"] : []), ...(pgbouncer ? ['a pgbouncer=true parameter'] : [])];
+  return signs.length === 0 ? undefined : `the advisoryLock connection looks like a transaction pooler (${signs.join('; ')}), which hands a session to other clients between statements and so cannot hold a session lock; give it a direct connection, or use leaseRow`;
+};
+/** A positive, finite duration, or a construction-time throw naming it. */
+exports.pooledConnectionFault = pooledConnectionFault;
+const positive = (label, input) => {
+  const decoded = _effect.Duration.fromInputUnsafe(input);
+  if (!_effect.Duration.isFinite(decoded) || _effect.Duration.toMillis(decoded) <= 0) {
+    throw new Error(`feed-postgres: ${label} must be a positive, finite duration`);
+  }
+  return decoded;
+};
+/** A fresh holder id, from `Random`, never the host. */
+const newHolder = kind => _effect.Effect.gen(function* () {
+  const high = yield* _effect.Random.nextIntBetween(0, 2 ** 31);
+  const low = yield* _effect.Random.nextIntBetween(0, 2 ** 31);
+  return _feed.LeaseHolder.make(`pg-${kind}:${high.toString(16)}${low.toString(16).padStart(8, '0')}`);
+});
+/**
+ * The advisory lock's name for one feed and sink, hashed server-side into its
+ * key. Package-internal, and the one home of the name: `removeSink` tries the
+ * same lock to tell whether an advisory worker is live, so the two must agree.
+ *
+ * @internal
+ */
+const advisoryLockName = (context, id) => JSON.stringify(['kairos-es/feed', context.names.schema, context.names.tablePrefix, id.feed, id.sink]);
+/**
+ * The lease-row kind; see the module doc. Throws on a heartbeat not under its ttl,
+ * or a margin that leaves the heartbeat no room under it.
+ */
+exports.advisoryLockName = advisoryLockName;
+const leaseRowAcquirer = (config, sql, context) => {
+  const {
+    statements
+  } = context;
+  const ttl = _effect.Duration.toMillis(positive('lease ttl', config.ttl));
+  const heartbeat = positive('lease heartbeat', config.heartbeat);
+  if (_effect.Duration.toMillis(heartbeat) >= ttl) {
+    throw new Error('feed-postgres: the lease heartbeat must be shorter than its ttl, or the lease lapses between renewals');
+  }
+  const margin = config.margin === undefined ? ttl / 3 : _effect.Duration.toMillis(positive('lease margin', config.margin));
+  if (_effect.Duration.toMillis(heartbeat) + margin >= ttl) {
+    throw new Error('feed-postgres: the lease heartbeat plus its margin must be shorter than its ttl, or ensureHeld fails between two renewals that both landed');
+  }
+  // `ensureHeld` fails once the last renewal is this old: its stored expiry is
+  // then at most `margin` away.
+  const usable = ttl - margin;
+  return id => _effect.Effect.gen(function* () {
+    const holder = yield* newHolder('row');
+    const now = yield* _effect.Clock.currentTimeMillis;
+    const taken = yield* sql.withTransaction(_effect.Effect.gen(function* () {
+      // Held to this transaction's end, so an ADVISORY holder on the row can
+      // be taken over only while no advisory session holds its lock, and no
+      // advisory worker can take the lock before this commits.
+      const lock = yield* sql.unsafe(statements.tryAdvisoryXactLock, [advisoryLockName(context, id)]);
+      return yield* sql.unsafe(statements.takeLeaseRow, [id.feed, id.sink, holder, String(now + ttl), String(now), lock[0]?.taken === true]);
+    })).pipe(_effect.Effect.mapError((0, _context.writeFailed)('taking the feed lease')));
+    if (taken.length === 0) {
+      return yield* new _feed.LeaseHeld(id);
+    }
+    const state = yield* _effect.Ref.make({
+      renewedAt: now,
+      lost: false
+    });
+    yield* _effect.Effect.addFinalizer(() => _effect.Effect.ignore(sql.unsafe(statements.releaseLease, [id.feed, id.sink, holder])));
+    const renew = _effect.Effect.gen(function* () {
+      const at = yield* _effect.Clock.currentTimeMillis;
+      const renewed = yield* sql.unsafe(statements.renewLeaseRow, [id.feed, id.sink, holder, String(at + ttl)]);
+      if (renewed.length === 0) {
+        yield* _effect.Ref.update(state, s => ({
+          ...s,
+          lost: true
+        }));
+      } else {
+        yield* _effect.Ref.update(state, s => ({
+          ...s,
+          renewedAt: at
+        }));
+      }
+    }).pipe(
+    // Bounded by the heartbeat, so a renewal that hangs is abandoned in time
+    // for the next tick rather than holding every later one behind it. An
+    // abandoned renewal whose cancel comes too late can still land: it touches
+    // only this holder's own row, never moves its expiry back
+    // (`renewLeaseRow`), and leaves `renewedAt` at the last renewal this fibre
+    // saw land, so `ensureHeld` errs early, never late.
+    _effect.Effect.timeoutOption(heartbeat), _effect.Effect.flatMap(done => _effect.Option.isSome(done) ? _effect.Effect.void : _effect.Effect.logWarning('feed lease renewal timed out', {
+      feed: id.feed,
+      sink: id.sink
+    })),
+    // A renewal that could not be made is not yet a lost lease: the age
+    // check in `ensureHeld` decides that, a margin before the lease lapses.
+    _effect.Effect.catchTag('SqlError', cause => _effect.Effect.logWarning('feed lease renewal failed', {
+      feed: id.feed,
+      sink: id.sink,
+      reason: cause.message
+    })));
+    // On a fixed cadence from the take: a renewal never outlasts the interval,
+    // so each one starts on its own tick whatever became of the one before. A
+    // worker that falls behind (a pause) renews once at once, and does not
+    // replay the ticks it missed.
+    const interval = _effect.Duration.toMillis(heartbeat);
+    yield* _effect.Effect.forkScoped(_effect.Effect.gen(function* () {
+      let next = now + interval;
+      while (true) {
+        const at = yield* _effect.Clock.currentTimeMillis;
+        if (next > at) {
+          yield* _effect.Effect.sleep(_effect.Duration.millis(next - at));
+        }
+        yield* renew;
+        next = Math.max(next + interval, yield* _effect.Clock.currentTimeMillis);
+      }
+    }));
+    const lease = {
+      holder,
+      ensureHeld: _effect.Effect.gen(function* () {
+        const s = yield* _effect.Ref.get(state);
+        const at = yield* _effect.Clock.currentTimeMillis;
+        if (s.lost || at - s.renewedAt >= usable) {
+          return yield* new _feed.LeaseLost(id);
+        }
+      })
+    };
+    return lease;
+  });
+};
+/** The advisory-lock kind; see the module doc. Throws on a recognisably pooled connection. */
+const advisoryLockAcquirer = (config, sql, context) => {
+  const fault = pooledConnectionFault(config.connection);
+  if (fault !== undefined) {
+    throw new Error(`feed-postgres: ${fault}`);
+  }
+  const {
+    connection
+  } = config;
+  const {
+    statements
+  } = context;
+  return id => _effect.Effect.gen(function* () {
+    const lockName = advisoryLockName(context, id);
+    const session = yield* connection.reserve.pipe(_effect.Effect.mapError((0, _context.unreadable)('reserving the feed lease connection')));
+    const taken = yield* session.execute(statements.tryAdvisoryLock, [lockName], undefined).pipe(_effect.Effect.mapError((0, _context.unreadable)('taking the feed advisory lock')));
+    if (taken[0]?.taken !== true) {
+      return yield* new _feed.LeaseHeld(id);
+    }
+    yield* _effect.Effect.addFinalizer(() => _effect.Effect.ignore(session.execute(statements.advisoryUnlock, [lockName], undefined)));
+    const holder = yield* newHolder('advisory');
+    const now = yield* _effect.Clock.currentTimeMillis;
+    // On the lock's own session, and conditional on it still holding the lock:
+    // a session that died since the try-lock cannot run it, and one that lost
+    // the lock lands nothing, so neither overwrites a successor's claim.
+    const claimed = yield* session.execute(statements.claimAdvisoryHolder, [id.feed, id.sink, holder, String(now), lockName], undefined).pipe(_effect.Effect.mapError((0, _context.writeFailed)('recording the feed lease holder')));
+    if (claimed.length === 0) {
+      // A live lease row holds the sink, or this session no longer holds the
+      // lock, so this worker must not send. The lock
+      // guards nothing now, so it is let go at once rather than when the
+      // caller's scope closes, and another advisory worker may try the moment
+      // that lease row lapses. The finalizer's second unlock then finds nothing
+      // held, which is harmless.
+      yield* _effect.Effect.ignore(session.execute(statements.advisoryUnlock, [lockName], undefined));
+      return yield* new _feed.LeaseHeld(id);
+    }
+    yield* _effect.Effect.addFinalizer(() => _effect.Effect.ignore(sql.unsafe(statements.releaseLease, [id.feed, id.sink, holder])));
+    const held = session.execute(statements.holdsAdvisoryLock, [lockName], undefined).pipe(_effect.Effect.map(rows => rows[0]?.held === true), _effect.Effect.catchTag('SqlError', () => _effect.Effect.succeed(false)));
+    const lease = {
+      holder,
+      // Asked of the session that holds the lock, so a dead session cannot
+      // answer, and an unanswered question is a lost lease.
+      ensureHeld: _effect.Effect.flatMap(held, yes => yes ? _effect.Effect.void : _effect.Effect.fail(new _feed.LeaseLost(id)))
+    };
+    return lease;
+  });
+};
+/**
+ * Build the acquirer for `config`, checking it first: a `heartbeat` that is not
+ * shorter than its `ttl`, a `margin` that leaves the heartbeat no room under the
+ * `ttl`, or an `advisoryLock` connection recognisably pooled,
+ * throws here, which the store's factory turns into a defect at construction.
+ * The one place the lease kind is dispatched on.
+ *
+ * @internal
+ */
+const makeAcquireLease = (config, sql, context) => {
+  switch (config._tag) {
+    case 'LeaseRow':
+      return leaseRowAcquirer(config, sql, context);
+    case 'AdvisoryLock':
+      return advisoryLockAcquirer(config, sql, context);
+  }
+};
+exports.makeAcquireLease = makeAcquireLease;
+//# sourceMappingURL=lease.js.map

package/dist/cjs/lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.js","names":["_feed","require","_effect","_context","DEFAULT_LEASE_TTL","exports","Duration","seconds","DEFAULT_LEASE_HEARTBEAT","leaseRow","options","_tag","ttl","heartbeat","margin","undefined","advisoryLock","connection","pooledConnectionFault","client","config","host","port","url","hosts","ports","pgbouncer","rawUrl","Redacted","isRedacted","value","parsed","URL","push","hostname","Number","searchParams","get","signs","some","h","includes","length","join","positive","label","input","decoded","fromInputUnsafe","isFinite","toMillis","Error","newHolder","kind","Effect","gen","high","Random","nextIntBetween","low","LeaseHolder","make","toString","padStart","advisoryLockName","context","id","JSON","stringify","names","schema","tablePrefix","feed","sink","leaseRowAcquirer","sql","statements","usable","holder","now","Clock","currentTimeMillis","taken","withTransaction","lock","unsafe","tryAdvisoryXactLock","takeLeaseRow","String","pipe","mapError","writeFailed","LeaseHeld","state","Ref","renewedAt","lost","addFinalizer","ignore","releaseLease","renew","at","renewed","renewLeaseRow","update","s","timeoutOption","flatMap","done","Option","isSome","void","logWarning","catchTag","cause","reason","message","interval","forkScoped","next","sleep","millis","Math","max","lease","ensureHeld","LeaseLost","advisoryLockAcquirer","fault","lockName","session","reserve","unreadable","execute","tryAdvisoryLock","advisoryUnlock","claimed","claimAdvisoryHolder","held","holdsAdvisoryLock","map","rows","succeed","yes","fail","makeAcquireLease"],"sources":["../../src/lease.ts"],"sourcesContent":[null],"mappings":";;;;;;AA4EA,IAAAA,KAAA,GAAAC,OAAA;AASA,IAAAC,OAAA,GAAAD,OAAA;AAWA,IAAAE,QAAA,GAAAF,OAAA;AAhGA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4HA;AACO,MAAMG,iBAAiB,GAAAC,OAAA,CAAAD,iBAAA,gBAAsBE,gBAAQ,CAACC,OAAO,CAAC,EAAE,CAAC;AAExE;;;;;;;AAOO,MAAMC,uBAAuB,GAAAH,OAAA,CAAAG,uBAAA,gBAAsBF,gBAAQ,CAACC,OAAO,CAAC,CAAC,CAAC;AAE7E;AACO,MAAME,QAAQ,GAAGA,CACtBC,OAAA,GAII,EAAE,MACe;EACrBC,IAAI,EAAE,UAAU;EAChBC,GAAG,EAAEF,OAAO,CAACE,GAAG,IAAIR,iBAAiB;EACrCS,SAAS,EAAEH,OAAO,CAACG,SAAS,IAAIL,uBAAuB;EACvD,IAAIE,OAAO,CAACI,MAAM,KAAKC,SAAS,GAAG,EAAE,GAAG;IAAED,MAAM,EAAEJ,OAAO,CAACI;EAAM,CAAE;CACnE,CAAC;AAEF;AAAAT,OAAA,CAAAI,QAAA,GAAAA,QAAA;AACO,MAAMO,YAAY,GAAIN,OAE5B,KAAuB;EACtBC,IAAI,EAAE,cAAc;EACpBM,UAAU,EAAEP,OAAO,CAACO;CACrB,CAAC;AAEF;;;;;;;;;;;;AAAAZ,OAAA,CAAAW,YAAA,GAAAA,YAAA;AAYO,MAAME,qBAAqB,GAChCC,MAA2B,IACL;EACtB,MAAMC,MAAM,GAAID,MAAmD,CAACC,MAAM;EAC1E,IAAIA,MAAM,KAAK,IAAI,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IACjD,OAAOL,SAAS;EAClB;EACA,MAAM;IAAEM,IAAI;IAAEC,IAAI;IAAEC;EAAG,CAAE,GAAGH,MAI3B;EACD,MAAMI,KAAK,GAAkB,OAAOH,IAAI,KAAK,QAAQ,GAAG,CAACA,IAAI,CAAC,GAAG,EAAE;EACnE,MAAMI,KAAK,GAAkB,OAAOH,IAAI,KAAK,QAAQ,GAAG,CAACA,IAAI,CAAC,GAAG,EAAE;EACnE,IAAII,SAAS,GAAG,KAAK;EACrB,MAAMC,MAAM,GAAGC,gBAAQ,CAACC,UAAU,CAACN,GAAG,CAAC,GACnCK,gBAAQ,CAACE,KAAK,CAACP,GAAG,CAAC,GACnB,OAAOA,GAAG,KAAK,QAAQ,GACrBA,GAAG,GACHR,SAAS;EACf,IAAI,OAAOY,MAAM,KAAK,QAAQ,EAAE;IAC9B,IAAI;MACF,MAAMI,MAAM,GAAG,IAAIC,GAAG,CAACL,MAAM,CAAC;MAC9BH,KAAK,CAACS,IAAI,CAACF,MAAM,CAACG,QAAQ,CAAC;MAC3B,IAAIH,MAAM,CAACT,IAAI,KAAK,EAAE,EAAE;QACtBG,KAAK,CAACQ,IAAI,CAACE,MAAM,CAACJ,MAAM,CAACT,IAAI,CAAC,CAAC;MACjC;MACAI,SAAS,GAAGK,MAAM,CAACK,YAAY,CAACC,GAAG,CAAC,WAAW,CAAC,KAAK,MAAM;IAC7D,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;EACA,MAAMC,KAAK,GAAG,CACZ,IAAId,KAAK,CAACe,IAAI,CAAEC,CAAC,IAAKA,CAAC,CAACC,QAAQ,CAAC,SAAS,CAAC,CAAC,GACxC,CAAC,8CAA8C,CAAC,GAChD,EAAE,CAAC,EACP,IAAIhB,KAAK,CAACgB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,GAAG,EAAE,CAAC,EACnE,IAAIf,SAAS,GAAG,CAAC,4BAA4B,CAAC,GAAG,EAAE,CAAC,CACrD;EACD,OAAOY,KAAK,CAACI,MAAM,KAAK,CAAC,GACrB3B,SAAS,GACT,gEAAgEuB,KAAK,CAACK,IAAI,CAAC,IAAI,CAAC,8IAA8I;AACpO,CAAC;AAWD;AAAAtC,OAAA,CAAAa,qBAAA,GAAAA,qBAAA;AACA,MAAM0B,QAAQ,GAAGA,CAACC,KAAa,EAAEC,KAAqB,KAAuB;EAC3E,MAAMC,OAAO,GAAGzC,gBAAQ,CAAC0C,eAAe,CAACF,KAAK,CAAC;EAC/C,IAAI,CAACxC,gBAAQ,CAAC2C,QAAQ,CAACF,OAAO,CAAC,IAAIzC,gBAAQ,CAAC4C,QAAQ,CAACH,OAAO,CAAC,IAAI,CAAC,EAAE;IAClE,MAAM,IAAII,KAAK,CACb,kBAAkBN,KAAK,sCAAsC,CAC9D;EACH;EACA,OAAOE,OAAO;AAChB,CAAC;AAED;AACA,MAAMK,SAAS,GAAIC,IAAY,IAC7BC,cAAM,CAACC,GAAG,CAAC,aAAS;EAClB,MAAMC,IAAI,GAAG,OAAOC,cAAM,CAACC,cAAc,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;EACrD,MAAMC,GAAG,GAAG,OAAOF,cAAM,CAACC,cAAc,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;EACpD,OAAOE,iBAAW,CAACC,IAAI,CACrB,MAAMR,IAAI,IAAIG,IAAI,CAACM,QAAQ,CAAC,EAAE,CAAC,GAAGH,GAAG,CAACG,QAAQ,CAAC,EAAE,CAAC,CAACC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACtE;AACH,CAAC,CAAC;AAEJ;;;;;;;AAOO,MAAMC,gBAAgB,GAAGA,CAC9BC,OAAoB,EACpBC,EAAc,KAEdC,IAAI,CAACC,SAAS,CAAC,CACb,gBAAgB,EAChBH,OAAO,CAACI,KAAK,CAACC,MAAM,EACpBL,OAAO,CAACI,KAAK,CAACE,WAAW,EACzBL,EAAE,CAACM,IAAI,EACPN,EAAE,CAACO,IAAI,CACR,CAAC;AAQJ;;;;AAAApE,OAAA,CAAA2D,gBAAA,GAAAA,gBAAA;AAIA,MAAMU,gBAAgB,GAAGA,CACvBtD,MAAsB,EACtBuD,GAAwB,EACxBV,OAAoB,KACJ;EAChB,MAAM;IAAEW;EAAU,CAAE,GAAGX,OAAO;EAC9B,MAAMrD,GAAG,GAAGN,gBAAQ,CAAC4C,QAAQ,CAACN,QAAQ,CAAC,WAAW,EAAExB,MAAM,CAACR,GAAG,CAAC,CAAC;EAChE,MAAMC,SAAS,GAAG+B,QAAQ,CAAC,iBAAiB,EAAExB,MAAM,CAACP,SAAS,CAAC;EAC/D,IAAIP,gBAAQ,CAAC4C,QAAQ,CAACrC,SAAS,CAAC,IAAID,GAAG,EAAE;IACvC,MAAM,IAAIuC,KAAK,CACb,uGAAuG,CACxG;EACH;EACA,MAAMrC,MAAM,GACVM,MAAM,CAACN,MAAM,KAAKC,SAAS,GACvBH,GAAG,GAAG,CAAC,GACPN,gBAAQ,CAAC4C,QAAQ,CAACN,QAAQ,CAAC,cAAc,EAAExB,MAAM,CAACN,MAAM,CAAC,CAAC;EAChE,IAAIR,gBAAQ,CAAC4C,QAAQ,CAACrC,SAAS,CAAC,GAAGC,MAAM,IAAIF,GAAG,EAAE;IAChD,MAAM,IAAIuC,KAAK,CACb,4IAA4I,CAC7I;EACH;EACA;EACA;EACA,MAAM0B,MAAM,GAAGjE,GAAG,GAAGE,MAAM;EAC3B,OAAQoD,EAAE,IACRZ,cAAM,CAACC,GAAG,CAAC,aAAS;IAClB,MAAMuB,MAAM,GAAG,OAAO1B,SAAS,CAAC,KAAK,CAAC;IACtC,MAAM2B,GAAG,GAAG,OAAOC,aAAK,CAACC,iBAAiB;IAC1C,MAAMC,KAAK,GAAG,OAAOP,GAAG,CACrBQ,eAAe,CACd7B,cAAM,CAACC,GAAG,CAAC,aAAS;MAClB;MACA;MACA;MACA,MAAM6B,IAAI,GAAG,OAAOT,GAAG,CAACU,MAAM,CAC5BT,UAAU,CAACU,mBAAmB,EAC9B,CAACtB,gBAAgB,CAACC,OAAO,EAAEC,EAAE,CAAC,CAAC,CAChC;MACD,OAAO,OAAOS,GAAG,CAACU,MAAM,CAACT,UAAU,CAACW,YAAY,EAAE,CAChDrB,EAAE,CAACM,IAAI,EACPN,EAAE,CAACO,IAAI,EACPK,MAAM,EACNU,MAAM,CAACT,GAAG,GAAGnE,GAAG,CAAC,EACjB4E,MAAM,CAACT,GAAG,CAAC,EACXK,IAAI,CAAC,CAAC,CAAC,EAAEF,KAAK,KAAK,IAAI,CACxB,CAAC;IACJ,CAAC,CAAC,CACH,CACAO,IAAI,CAACnC,cAAM,CAACoC,QAAQ,CAAC,IAAAC,oBAAW,EAAC,uBAAuB,CAAC,CAAC,CAAC;IAC9D,IAAIT,KAAK,CAACxC,MAAM,KAAK,CAAC,EAAE;MACtB,OAAO,OAAO,IAAIkD,eAAS,CAAC1B,EAAE,CAAC;IACjC;IACA,MAAM2B,KAAK,GAAG,OAAOC,WAAG,CAACjC,IAAI,CAAC;MAAEkC,SAAS,EAAEhB,GAAG;MAAEiB,IAAI,EAAE;IAAK,CAAE,CAAC;IAC9D,OAAO1C,cAAM,CAAC2C,YAAY,CAAC,MACzB3C,cAAM,CAAC4C,MAAM,CACXvB,GAAG,CAACU,MAAM,CAACT,UAAU,CAACuB,YAAY,EAAE,CAACjC,EAAE,CAACM,IAAI,EAAEN,EAAE,CAACO,IAAI,EAAEK,MAAM,CAAC,CAAC,CAChE,CACF;IACD,MAAMsB,KAAK,GAAG9C,cAAM,CAACC,GAAG,CAAC,aAAS;MAChC,MAAM8C,EAAE,GAAG,OAAOrB,aAAK,CAACC,iBAAiB;MACzC,MAAMqB,OAAO,GAAG,OAAO3B,GAAG,CAACU,MAAM,CAACT,UAAU,CAAC2B,aAAa,EAAE,CAC1DrC,EAAE,CAACM,IAAI,EACPN,EAAE,CAACO,IAAI,EACPK,MAAM,EACNU,MAAM,CAACa,EAAE,GAAGzF,GAAG,CAAC,CACjB,CAAC;MACF,IAAI0F,OAAO,CAAC5D,MAAM,KAAK,CAAC,EAAE;QACxB,OAAOoD,WAAG,CAACU,MAAM,CAACX,KAAK,EAAGY,CAAC,KAAM;UAAE,GAAGA,CAAC;UAAET,IAAI,EAAE;QAAI,CAAE,CAAC,CAAC;MACzD,CAAC,MAAM;QACL,OAAOF,WAAG,CAACU,MAAM,CAACX,KAAK,EAAGY,CAAC,KAAM;UAAE,GAAGA,CAAC;UAAEV,SAAS,EAAEM;QAAE,CAAE,CAAC,CAAC;MAC5D;IACF,CAAC,CAAC,CAACZ,IAAI;IACL;IACA;IACA;IACA;IACA;IACA;IACAnC,cAAM,CAACoD,aAAa,CAAC7F,SAAS,CAAC,EAC/ByC,cAAM,CAACqD,OAAO,CAAEC,IAAI,IAClBC,cAAM,CAACC,MAAM,CAACF,IAAI,CAAC,GACftD,cAAM,CAACyD,IAAI,GACXzD,cAAM,CAAC0D,UAAU,CAAC,8BAA8B,EAAE;MAChDxC,IAAI,EAAEN,EAAE,CAACM,IAAI;MACbC,IAAI,EAAEP,EAAE,CAACO;KACV,CAAC,CACP;IACD;IACA;IACAnB,cAAM,CAAC2D,QAAQ,CAAC,UAAU,EAAGC,KAAK,IAChC5D,cAAM,CAAC0D,UAAU,CAAC,2BAA2B,EAAE;MAC7CxC,IAAI,EAAEN,EAAE,CAACM,IAAI;MACbC,IAAI,EAAEP,EAAE,CAACO,IAAI;MACb0C,MAAM,EAAED,KAAK,CAACE;KACf,CAAC,CACH,CACF;IACD;IACA;IACA;IACA;IACA,MAAMC,QAAQ,GAAG/G,gBAAQ,CAAC4C,QAAQ,CAACrC,SAAS,CAAC;IAC7C,OAAOyC,cAAM,CAACgE,UAAU,CACtBhE,cAAM,CAACC,GAAG,CAAC,aAAS;MAClB,IAAIgE,IAAI,GAAGxC,GAAG,GAAGsC,QAAQ;MACzB,OAAO,IAAI,EAAE;QACX,MAAMhB,EAAE,GAAG,OAAOrB,aAAK,CAACC,iBAAiB;QACzC,IAAIsC,IAAI,GAAGlB,EAAE,EAAE;UACb,OAAO/C,cAAM,CAACkE,KAAK,CAAClH,gBAAQ,CAACmH,MAAM,CAACF,IAAI,GAAGlB,EAAE,CAAC,CAAC;QACjD;QACA,OAAOD,KAAK;QACZmB,IAAI,GAAGG,IAAI,CAACC,GAAG,CAACJ,IAAI,GAAGF,QAAQ,EAAE,OAAOrC,aAAK,CAACC,iBAAiB,CAAC;MAClE;IACF,CAAC,CAAC,CACH;IACD,MAAM2C,KAAK,GAAc;MACvB9C,MAAM;MACN+C,UAAU,EAAEvE,cAAM,CAACC,GAAG,CAAC,aAAS;QAC9B,MAAMkD,CAAC,GAAG,OAAOX,WAAG,CAACzD,GAAG,CAACwD,KAAK,CAAC;QAC/B,MAAMQ,EAAE,GAAG,OAAOrB,aAAK,CAACC,iBAAiB;QACzC,IAAIwB,CAAC,CAACT,IAAI,IAAIK,EAAE,GAAGI,CAAC,CAACV,SAAS,IAAIlB,MAAM,EAAE;UACxC,OAAO,OAAO,IAAIiD,eAAS,CAAC5D,EAAE,CAAC;QACjC;MACF,CAAC;KACF;IACD,OAAO0D,KAAK;EACd,CAAC,CAAC;AACN,CAAC;AAED;AACA,MAAMG,oBAAoB,GAAGA,CAC3B3G,MAA0B,EAC1BuD,GAAwB,EACxBV,OAAoB,KACJ;EAChB,MAAM+D,KAAK,GAAG9G,qBAAqB,CAACE,MAAM,CAACH,UAAU,CAAC;EACtD,IAAI+G,KAAK,KAAKjH,SAAS,EAAE;IACvB,MAAM,IAAIoC,KAAK,CAAC,kBAAkB6E,KAAK,EAAE,CAAC;EAC5C;EACA,MAAM;IAAE/G;EAAU,CAAE,GAAGG,MAAM;EAC7B,MAAM;IAAEwD;EAAU,CAAE,GAAGX,OAAO;EAC9B,OAAQC,EAAE,IACRZ,cAAM,CAACC,GAAG,CAAC,aAAS;IAClB,MAAM0E,QAAQ,GAAGjE,gBAAgB,CAACC,OAAO,EAAEC,EAAE,CAAC;IAC9C,MAAMgE,OAAO,GAAG,OAAOjH,UAAU,CAACkH,OAAO,CAAC1C,IAAI,CAC5CnC,cAAM,CAACoC,QAAQ,CAAC,IAAA0C,mBAAU,EAAC,qCAAqC,CAAC,CAAC,CACnE;IACD,MAAMlD,KAAK,GAAgD,OAAOgD,OAAO,CACtEG,OAAO,CAACzD,UAAU,CAAC0D,eAAe,EAAE,CAACL,QAAQ,CAAC,EAAElH,SAAS,CAAC,CAC1D0E,IAAI,CAACnC,cAAM,CAACoC,QAAQ,CAAC,IAAA0C,mBAAU,EAAC,+BAA+B,CAAC,CAAC,CAAC;IACrE,IAAIlD,KAAK,CAAC,CAAC,CAAC,EAAEA,KAAK,KAAK,IAAI,EAAE;MAC5B,OAAO,OAAO,IAAIU,eAAS,CAAC1B,EAAE,CAAC;IACjC;IACA,OAAOZ,cAAM,CAAC2C,YAAY,CAAC,MACzB3C,cAAM,CAAC4C,MAAM,CACXgC,OAAO,CAACG,OAAO,CAACzD,UAAU,CAAC2D,cAAc,EAAE,CAACN,QAAQ,CAAC,EAAElH,SAAS,CAAC,CAClE,CACF;IACD,MAAM+D,MAAM,GAAG,OAAO1B,SAAS,CAAC,UAAU,CAAC;IAC3C,MAAM2B,GAAG,GAAG,OAAOC,aAAK,CAACC,iBAAiB;IAC1C;IACA;IACA;IACA,MAAMuD,OAAO,GAA2B,OAAON,OAAO,CACnDG,OAAO,CACNzD,UAAU,CAAC6D,mBAAmB,EAC9B,CAACvE,EAAE,CAACM,IAAI,EAAEN,EAAE,CAACO,IAAI,EAAEK,MAAM,EAAEU,MAAM,CAACT,GAAG,CAAC,EAAEkD,QAAQ,CAAC,EACjDlH,SAAS,CACV,CACA0E,IAAI,CAACnC,cAAM,CAACoC,QAAQ,CAAC,IAAAC,oBAAW,EAAC,iCAAiC,CAAC,CAAC,CAAC;IACxE,IAAI6C,OAAO,CAAC9F,MAAM,KAAK,CAAC,EAAE;MACxB;MACA;MACA;MACA;MACA;MACA;MACA,OAAOY,cAAM,CAAC4C,MAAM,CAClBgC,OAAO,CAACG,OAAO,CAACzD,UAAU,CAAC2D,cAAc,EAAE,CAACN,QAAQ,CAAC,EAAElH,SAAS,CAAC,CAClE;MACD,OAAO,OAAO,IAAI6E,eAAS,CAAC1B,EAAE,CAAC;IACjC;IACA,OAAOZ,cAAM,CAAC2C,YAAY,CAAC,MACzB3C,cAAM,CAAC4C,MAAM,CACXvB,GAAG,CAACU,MAAM,CAACT,UAAU,CAACuB,YAAY,EAAE,CAACjC,EAAE,CAACM,IAAI,EAAEN,EAAE,CAACO,IAAI,EAAEK,MAAM,CAAC,CAAC,CAChE,CACF;IACD,MAAM4D,IAAI,GAA2BR,OAAO,CACzCG,OAAO,CAACzD,UAAU,CAAC+D,iBAAiB,EAAE,CAACV,QAAQ,CAAC,EAAElH,SAAS,CAAC,CAC5D0E,IAAI,CACHnC,cAAM,CAACsF,GAAG,CACPC,IAAgD,IAC/CA,IAAI,CAAC,CAAC,CAAC,EAAEH,IAAI,KAAK,IAAI,CACzB,EACDpF,cAAM,CAAC2D,QAAQ,CAAC,UAAU,EAAE,MAAM3D,cAAM,CAACwF,OAAO,CAAC,KAAK,CAAC,CAAC,CACzD;IACH,MAAMlB,KAAK,GAAc;MACvB9C,MAAM;MACN;MACA;MACA+C,UAAU,EAAEvE,cAAM,CAACqD,OAAO,CAAC+B,IAAI,EAAGK,GAAG,IACnCA,GAAG,GAAGzF,cAAM,CAACyD,IAAI,GAAGzD,cAAM,CAAC0F,IAAI,CAAC,IAAIlB,eAAS,CAAC5D,EAAE,CAAC,CAAC;KAErD;IACD,OAAO0D,KAAK;EACd,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;;AASO,MAAMqB,gBAAgB,GAAGA,CAC9B7H,MAAuB,EACvBuD,GAAwB,EACxBV,OAAoB,KACJ;EAChB,QAAQ7C,MAAM,CAACT,IAAI;IACjB,KAAK,UAAU;MACb,OAAO+D,gBAAgB,CAACtD,MAAM,EAAEuD,GAAG,EAAEV,OAAO,CAAC;IAC/C,KAAK,cAAc;MACjB,OAAO8D,oBAAoB,CAAC3G,MAAM,EAAEuD,GAAG,EAAEV,OAAO,CAAC;EACrD;AACF,CAAC;AAAA5D,OAAA,CAAA4I,gBAAA,GAAAA,gBAAA","ignoreList":[]}

package/dist/cjs/syncStore.js

@@ -0,0 +1,179 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.makePostgresFeedSyncStore = void 0;
+var _feed = require("@kairos-es/feed");
+var _effect = require("effect");
+var _sql = require("effect/sql");
+var _context = require("./internal/context.js");
+var _lease = require("./lease.js");
+/**
+ * The Postgres `FeedSyncStore`: every sink's cursor, its parked list and its
+ * worker lease, kept in the source database beside the feed rows (ADR-0019 §10).
+ *
+ * `@kairos-es/feed`'s `FeedSyncStore.ts` owns the contract, and the in-memory feed
+ * is the oracle this store is held to; what is here is how each atomic step the
+ * contract names becomes one transaction or one statement.
+ *
+ * - `casCursor` is ONE transaction: the guarded, holder-fenced cursor update,
+ *   stamped with its `lastAdvance` from this process's `Clock`, and the parked
+ *   list moved with it. A guard that loses fails `CursorSuperseded` inside the
+ *   transaction, which rolls back the parked changes with it, so a park can never
+ *   outlive a refused advance.
+ * - `retryParked` is one transaction that takes the feed lock exclusively before it
+ *   re-stamps the row, so its new `seq` cannot commit out of order with the
+ *   materialisation's own writes (`internal/statements.ts` owns that argument).
+ * - `collectTombstones` is one statement that reads every registered sink's cursor
+ *   and deletes below the lowest, or nothing while any of them has no cursor, so
+ *   no cursor can move between the two.
+ * - `removeSink` is one transaction that first takes the sink's advisory lock for
+ *   its own length, which an advisory worker's session lock refuses, then deletes
+ *   the cursor row only when no live lease row holds it, in the same statement as
+ *   that test, and the parks after it. Both tests are therefore made whichever
+ *   lease kind this store was built with: a sink can be leased by either kind
+ *   (`lease.ts` owns how the two coexist), and the row alone cannot say whether
+ *   an advisory holder's session is alive.
+ * - `describe` is three reads, each its own snapshot, so a figure in it can be a
+ *   batch older or newer than the next. It is a report for an operator, and no
+ *   decision is taken on it.
+ *
+ * One store serves every feed in its prefix: unlike the in-memory feed, whose
+ * store belongs to one feed, a SQL store's state is keyed by feed name in shared
+ * tables, so a single store value is what every worker over the prefix takes.
+ *
+ * Infrastructure faults are `FeedUnreadable` on a read and `FeedWriteFailed` on a
+ * write, never defects, so the driver's supervision backs off and tries again.
+ */
+
+/** A timestamp column read back as epoch milliseconds, or `None` when NULL. */
+const instantOf = ms => ms === null ? _effect.Option.none() : _effect.Option.some(_effect.DateTime.makeUnsafe(Number(ms)));
+const cursorOf = row => row === undefined || row.generation === null || row.seq === null ? _effect.Option.none() : _effect.Option.some({
+  generation: _feed.Generation.make((0, _context.bigintOf)(row.generation)),
+  seq: _feed.FeedSeq.make((0, _context.bigintOf)(row.seq))
+});
+const parkedOf = row => ({
+  key: _feed.FeedKey.make(row.key),
+  seq: _feed.FeedSeq.make((0, _context.bigintOf)(row.seq)),
+  reason: row.reason,
+  parkedAt: _effect.DateTime.makeUnsafe(Number(row.parked_at_ms))
+});
+/** Park entries as the `jsonb` parameter the park statement takes; last per key wins. */
+const parkJson = park => {
+  const byKey = new Map();
+  for (const record of park) {
+    byKey.delete(record.key);
+    byKey.set(record.key, record);
+  }
+  return JSON.stringify(Array.from(byKey.values(), record => ({
+    key: record.key,
+    seq: record.seq.toString(),
+    reason: record.reason,
+    parked_at_ms: String(_effect.DateTime.toEpochMillis(record.parkedAt))
+  })));
+};
+/**
+ * Build the sync store over the ambient `SqlClient`. Dies at construction on a
+ * malformed config, a lease whose heartbeat is not shorter than its ttl or leaves
+ * no room for its margin, or an `advisoryLock` connection recognisably pooled.
+ * `ensureFeedSchema` must have run.
+ */
+const makePostgresFeedSyncStore = (options = {}) => _effect.Effect.gen(function* () {
+  const sql = (yield* _sql.SqlClient.SqlClient).withoutTransforms();
+  const context = (0, _context.feedContext)(options.config ?? {});
+  const acquireLease = (0, _lease.makeAcquireLease)(options.lease ?? (0, _lease.leaseRow)(), sql, context);
+  const {
+    statements
+  } = context;
+  const readCursor = id => sql.unsafe(statements.selectCursor, [id.feed, id.sink]).pipe(_effect.Effect.mapError((0, _context.unreadable)(`reading the cursor of sink '${id.sink}'`)), _effect.Effect.map(rows => cursorOf(rows[0])));
+  const casCursor = args => sql.withTransaction(_effect.Effect.gen(function* () {
+    const expected = _effect.Option.getOrUndefined(args.expected);
+    const now = yield* _effect.DateTime.now;
+    const landed = yield* sql.unsafe(statements.casCursor, [args.feed, args.sink, args.holder, args.next.generation.toString(), args.next.seq.toString(), expected === undefined ? null : expected.generation.toString(), expected === undefined ? null : expected.seq.toString(), String(_effect.DateTime.toEpochMillis(now))]);
+    if (landed.length === 0) {
+      return yield* new _feed.CursorSuperseded({
+        feed: args.feed,
+        sink: args.sink
+      });
+    }
+    const change = args.parked;
+    if (change._tag === 'Replace') {
+      yield* sql.unsafe(statements.clearParked, [args.feed, args.sink]);
+    } else if (change.unpark.length > 0) {
+      yield* sql.unsafe(statements.unparkKeys, [args.feed, args.sink, JSON.stringify(change.unpark)]);
+    }
+    if (change.park.length > 0) {
+      yield* sql.unsafe(statements.parkKeys, [args.feed, args.sink, parkJson(change.park)]);
+    }
+  })).pipe(_effect.Effect.catchTag('SqlError', cause => _effect.Effect.fail((0, _context.writeFailed)(`moving the cursor of sink '${args.sink}'`)(cause))));
+  const readParked = id => sql.unsafe(statements.selectParked, [id.feed, id.sink]).pipe(_effect.Effect.mapError((0, _context.unreadable)(`reading the parked records of sink '${id.sink}'`)), _effect.Effect.map(rows => rows.map(parkedOf)));
+  const retryParked = args => sql.withTransaction(_effect.Effect.gen(function* () {
+    yield* sql.unsafe(statements.lockFeedExclusive, [args.feed]);
+    const unparked = yield* sql.unsafe(statements.unparkOne, [args.feed, args.sink, args.key]);
+    if (unparked.length === 0) {
+      return false;
+    }
+    yield* sql.unsafe(statements.restampRow, [args.feed, args.key]);
+    return true;
+  })).pipe(_effect.Effect.mapError((0, _context.writeFailed)(`retrying parked record '${args.key}' of sink '${args.sink}'`)));
+  const collectTombstones = feed => sql.unsafe(statements.collectTombstones, [feed]).pipe(_effect.Effect.mapError((0, _context.writeFailed)(`collecting the tombstones of feed '${feed}'`)), _effect.Effect.map(rows => rows.length));
+  const removeSink = id => sql.withTransaction(_effect.Effect.gen(function* () {
+    const lock = yield* sql.unsafe(statements.tryAdvisoryXactLock, [(0, _lease.advisoryLockName)(context, id)]);
+    if (lock[0]?.taken !== true) {
+      return yield* new _feed.LeaseHeld(id);
+    }
+    const now = yield* _effect.Clock.currentTimeMillis;
+    const cursor = yield* sql.unsafe(statements.deleteCursorUnlessLeased, [id.feed, id.sink, String(now)]);
+    if (cursor.length === 0) {
+      const left = yield* sql.unsafe(statements.cursorExists, [id.feed, id.sink]);
+      if (left.length > 0) {
+        return yield* new _feed.LeaseHeld(id);
+      }
+    }
+    const parked = yield* sql.unsafe(statements.deleteSinkParked, [id.feed, id.sink]);
+    return cursor.length > 0 || parked.length > 0;
+  })).pipe(_effect.Effect.catchTag('SqlError', cause => _effect.Effect.fail((0, _context.writeFailed)(`removing sink '${id.sink}'`)(cause))));
+  const describe = feed => _effect.Effect.gen(function* () {
+    const head = yield* sql.unsafe(statements.selectHead, [feed]);
+    const sinks = yield* sql.unsafe(statements.describeSinks, [feed]);
+    const parked = yield* sql.unsafe(statements.describeParked, [feed]);
+    const parkedBySink = new Map();
+    for (const record of parked) {
+      const list = parkedBySink.get(record.sink);
+      if (list === undefined) {
+        parkedBySink.set(record.sink, [parkedOf(record)]);
+      } else {
+        list.push(parkedOf(record));
+      }
+    }
+    const description = {
+      head: _feed.FeedSeq.make((0, _context.bigintOf)(head[0]?.head ?? '0')),
+      sinks: sinks.map(row => ({
+        sink: _feed.SinkName.make(row.sink),
+        cursor: cursorOf(row),
+        lastAdvance: instantOf(row.last_advance_at_ms),
+        lease: row.lease_holder === null ? _effect.Option.none() : _effect.Option.some({
+          holder: _feed.LeaseHolder.make(row.lease_holder),
+          expiresAt: instantOf(row.lease_expires_at_ms)
+        }),
+        parked: parkedBySink.get(row.sink) ?? [],
+        pending: Number(row.pending)
+      }))
+    };
+    return description;
+  }).pipe(_effect.Effect.mapError((0, _context.unreadable)(`describing feed '${feed}'`)));
+  const store = {
+    acquireLease,
+    readCursor,
+    casCursor,
+    readParked,
+    retryParked,
+    collectTombstones,
+    removeSink,
+    describe
+  };
+  return store;
+});
+exports.makePostgresFeedSyncStore = makePostgresFeedSyncStore;
+//# sourceMappingURL=syncStore.js.map

package/dist/cjs/syncStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncStore.js","names":["_feed","require","_effect","_sql","_context","_lease","instantOf","ms","Option","none","some","DateTime","makeUnsafe","Number","cursorOf","row","undefined","generation","seq","Generation","make","bigintOf","FeedSeq","parkedOf","key","FeedKey","reason","parkedAt","parked_at_ms","parkJson","park","byKey","Map","record","delete","set","JSON","stringify","Array","from","values","toString","String","toEpochMillis","makePostgresFeedSyncStore","options","Effect","gen","sql","SqlClient","withoutTransforms","context","feedContext","config","acquireLease","makeAcquireLease","lease","leaseRow","statements","readCursor","id","unsafe","selectCursor","feed","sink","pipe","mapError","unreadable","map","rows","casCursor","args","withTransaction","expected","getOrUndefined","now","landed","holder","next","length","CursorSuperseded","change","parked","_tag","clearParked","unpark","unparkKeys","parkKeys","catchTag","cause","fail","writeFailed","readParked","selectParked","retryParked","lockFeedExclusive","unparked","unparkOne","restampRow","collectTombstones","removeSink","lock","tryAdvisoryXactLock","advisoryLockName","taken","LeaseHeld","Clock","currentTimeMillis","cursor","deleteCursorUnlessLeased","left","cursorExists","deleteSinkParked","describe","head","selectHead","sinks","describeSinks","describeParked","parkedBySink","list","get","push","description","SinkName","lastAdvance","last_advance_at_ms","lease_holder","LeaseHolder","expiresAt","lease_expires_at_ms","pending","store","exports"],"sources":["../../src/syncStore.ts"],"sourcesContent":[null],"mappings":";;;;;;AAqCA,IAAAA,KAAA,GAAAC,OAAA;AAcA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,IAAA,GAAAF,OAAA;AAEA,IAAAG,QAAA,GAAAH,OAAA;AAMA,IAAAI,MAAA,GAAAJ,OAAA;AA5DA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+FA;AACA,MAAMK,SAAS,GAAIC,EAAiB,IAClCA,EAAE,KAAK,IAAI,GAAGC,cAAM,CAACC,IAAI,EAAE,GAAGD,cAAM,CAACE,IAAI,CAACC,gBAAQ,CAACC,UAAU,CAACC,MAAM,CAACN,EAAE,CAAC,CAAC,CAAC;AAE5E,MAAMO,QAAQ,GAAIC,GAA0B,IAC1CA,GAAG,KAAKC,SAAS,IAAID,GAAG,CAACE,UAAU,KAAK,IAAI,IAAIF,GAAG,CAACG,GAAG,KAAK,IAAI,GAC5DV,cAAM,CAACC,IAAI,EAAE,GACbD,cAAM,CAACE,IAAI,CAAC;EACVO,UAAU,EAAEE,gBAAU,CAACC,IAAI,CAAC,IAAAC,iBAAQ,EAACN,GAAG,CAACE,UAAU,CAAC,CAAC;EACrDC,GAAG,EAAEI,aAAO,CAACF,IAAI,CAAC,IAAAC,iBAAQ,EAACN,GAAG,CAACG,GAAG,CAAC;CACpC,CAAC;AAER,MAAMK,QAAQ,GAAIR,GAAc,KAAoB;EAClDS,GAAG,EAAEC,aAAO,CAACL,IAAI,CAACL,GAAG,CAACS,GAAG,CAAC;EAC1BN,GAAG,EAAEI,aAAO,CAACF,IAAI,CAAC,IAAAC,iBAAQ,EAACN,GAAG,CAACG,GAAG,CAAC,CAAC;EACpCQ,MAAM,EAAEX,GAAG,CAACW,MAAM;EAClBC,QAAQ,EAAEhB,gBAAQ,CAACC,UAAU,CAACC,MAAM,CAACE,GAAG,CAACa,YAAY,CAAC;CACvD,CAAC;AAEF;AACA,MAAMC,QAAQ,GAAIC,IAAiC,IAAY;EAC7D,MAAMC,KAAK,GAAG,IAAIC,GAAG,EAAwB;EAC7C,KAAK,MAAMC,MAAM,IAAIH,IAAI,EAAE;IACzBC,KAAK,CAACG,MAAM,CAACD,MAAM,CAACT,GAAG,CAAC;IACxBO,KAAK,CAACI,GAAG,CAACF,MAAM,CAACT,GAAG,EAAES,MAAM,CAAC;EAC/B;EACA,OAAOG,IAAI,CAACC,SAAS,CACnBC,KAAK,CAACC,IAAI,CAACR,KAAK,CAACS,MAAM,EAAE,EAAGP,MAAM,KAAM;IACtCT,GAAG,EAAES,MAAM,CAACT,GAAG;IACfN,GAAG,EAAEe,MAAM,CAACf,GAAG,CAACuB,QAAQ,EAAE;IAC1Bf,MAAM,EAAEO,MAAM,CAACP,MAAM;IACrBE,YAAY,EAAEc,MAAM,CAAC/B,gBAAQ,CAACgC,aAAa,CAACV,MAAM,CAACN,QAAQ,CAAC;GAC7D,CAAC,CAAC,CACJ;AACH,CAAC;AAED;;;;;;AAMO,MAAMiB,yBAAyB,GAAGA,CACvCC,OAAA,GAAwC,EAAE,KAE1CC,cAAM,CAACC,GAAG,CAAC,aAAS;EAClB,MAAMC,GAAG,GAAG,CAAC,OAAOC,cAAS,CAACA,SAAS,EAAEC,iBAAiB,EAAE;EAC5D,MAAMC,OAAO,GAAG,IAAAC,oBAAW,EAACP,OAAO,CAACQ,MAAM,IAAI,EAAE,CAAC;EACjD,MAAMC,YAAY,GAAG,IAAAC,uBAAgB,EACnCV,OAAO,CAACW,KAAK,IAAI,IAAAC,eAAQ,GAAE,EAC3BT,GAAG,EACHG,OAAO,CACR;EACD,MAAM;IAAEO;EAAU,CAAE,GAAGP,OAAO;EAE9B,MAAMQ,UAAU,GAAiCC,EAAE,IACjDZ,GAAG,CAACa,MAAM,CAAYH,UAAU,CAACI,YAAY,EAAE,CAACF,EAAE,CAACG,IAAI,EAAEH,EAAE,CAACI,IAAI,CAAC,CAAC,CAACC,IAAI,CACrEnB,cAAM,CAACoB,QAAQ,CAAC,IAAAC,mBAAU,EAAC,+BAA+BP,EAAE,CAACI,IAAI,GAAG,CAAC,CAAC,EACtElB,cAAM,CAACsB,GAAG,CAAEC,IAAI,IAAKvD,QAAQ,CAACuD,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CACxC;EAEH,MAAMC,SAAS,GAAgCC,IAAI,IACjDvB,GAAG,CACAwB,eAAe,CACd1B,cAAM,CAACC,GAAG,CAAC,aAAS;IAClB,MAAM0B,QAAQ,GAAGjE,cAAM,CAACkE,cAAc,CAACH,IAAI,CAACE,QAAQ,CAAC;IACrD,MAAME,GAAG,GAAG,OAAOhE,gBAAQ,CAACgE,GAAG;IAC/B,MAAMC,MAAM,GAAG,OAAO5B,GAAG,CAACa,MAAM,CAACH,UAAU,CAACY,SAAS,EAAE,CACrDC,IAAI,CAACR,IAAI,EACTQ,IAAI,CAACP,IAAI,EACTO,IAAI,CAACM,MAAM,EACXN,IAAI,CAACO,IAAI,CAAC7D,UAAU,CAACwB,QAAQ,EAAE,EAC/B8B,IAAI,CAACO,IAAI,CAAC5D,GAAG,CAACuB,QAAQ,EAAE,EACxBgC,QAAQ,KAAKzD,SAAS,GAAG,IAAI,GAAGyD,QAAQ,CAACxD,UAAU,CAACwB,QAAQ,EAAE,EAC9DgC,QAAQ,KAAKzD,SAAS,GAAG,IAAI,GAAGyD,QAAQ,CAACvD,GAAG,CAACuB,QAAQ,EAAE,EACvDC,MAAM,CAAC/B,gBAAQ,CAACgC,aAAa,CAACgC,GAAG,CAAC,CAAC,CACpC,CAAC;IACF,IAAIC,MAAM,CAACG,MAAM,KAAK,CAAC,EAAE;MACvB,OAAO,OAAO,IAAIC,sBAAgB,CAAC;QACjCjB,IAAI,EAAEQ,IAAI,CAACR,IAAI;QACfC,IAAI,EAAEO,IAAI,CAACP;OACZ,CAAC;IACJ;IACA,MAAMiB,MAAM,GAAGV,IAAI,CAACW,MAAM;IAC1B,IAAID,MAAM,CAACE,IAAI,KAAK,SAAS,EAAE;MAC7B,OAAOnC,GAAG,CAACa,MAAM,CAACH,UAAU,CAAC0B,WAAW,EAAE,CAACb,IAAI,CAACR,IAAI,EAAEQ,IAAI,CAACP,IAAI,CAAC,CAAC;IACnE,CAAC,MAAM,IAAIiB,MAAM,CAACI,MAAM,CAACN,MAAM,GAAG,CAAC,EAAE;MACnC,OAAO/B,GAAG,CAACa,MAAM,CAACH,UAAU,CAAC4B,UAAU,EAAE,CACvCf,IAAI,CAACR,IAAI,EACTQ,IAAI,CAACP,IAAI,EACT5B,IAAI,CAACC,SAAS,CAAC4C,MAAM,CAACI,MAAM,CAAC,CAC9B,CAAC;IACJ;IACA,IAAIJ,MAAM,CAACnD,IAAI,CAACiD,MAAM,GAAG,CAAC,EAAE;MAC1B,OAAO/B,GAAG,CAACa,MAAM,CAACH,UAAU,CAAC6B,QAAQ,EAAE,CACrChB,IAAI,CAACR,IAAI,EACTQ,IAAI,CAACP,IAAI,EACTnC,QAAQ,CAACoD,MAAM,CAACnD,IAAI,CAAC,CACtB,CAAC;IACJ;EACF,CAAC,CAAC,CACH,CACAmC,IAAI,CACHnB,cAAM,CAAC0C,QAAQ,CAAC,UAAU,EAAGC,KAAK,IAChC3C,cAAM,CAAC4C,IAAI,CACT,IAAAC,oBAAW,EAAC,8BAA8BpB,IAAI,CAACP,IAAI,GAAG,CAAC,CAACyB,KAAK,CAAC,CAC/D,CACF,CACF;EAEL,MAAMG,UAAU,GAAiChC,EAAE,IACjDZ,GAAG,CAACa,MAAM,CAAYH,UAAU,CAACmC,YAAY,EAAE,CAACjC,EAAE,CAACG,IAAI,EAAEH,EAAE,CAACI,IAAI,CAAC,CAAC,CAACC,IAAI,CACrEnB,cAAM,CAACoB,QAAQ,CACb,IAAAC,mBAAU,EAAC,uCAAuCP,EAAE,CAACI,IAAI,GAAG,CAAC,CAC9D,EACDlB,cAAM,CAACsB,GAAG,CAAEC,IAAI,IAAKA,IAAI,CAACD,GAAG,CAAC7C,QAAQ,CAAC,CAAC,CACzC;EAEH,MAAMuE,WAAW,GAAkCvB,IAAI,IACrDvB,GAAG,CACAwB,eAAe,CACd1B,cAAM,CAACC,GAAG,CAAC,aAAS;IAClB,OAAOC,GAAG,CAACa,MAAM,CAACH,UAAU,CAACqC,iBAAiB,EAAE,CAACxB,IAAI,CAACR,IAAI,CAAC,CAAC;IAC5D,MAAMiC,QAAQ,GAAG,OAAOhD,GAAG,CAACa,MAAM,CAACH,UAAU,CAACuC,SAAS,EAAE,CACvD1B,IAAI,CAACR,IAAI,EACTQ,IAAI,CAACP,IAAI,EACTO,IAAI,CAAC/C,GAAG,CACT,CAAC;IACF,IAAIwE,QAAQ,CAACjB,MAAM,KAAK,CAAC,EAAE;MACzB,OAAO,KAAK;IACd;IACA,OAAO/B,GAAG,CAACa,MAAM,CAACH,UAAU,CAACwC,UAAU,EAAE,CAAC3B,IAAI,CAACR,IAAI,EAAEQ,IAAI,CAAC/C,GAAG,CAAC,CAAC;IAC/D,OAAO,IAAI;EACb,CAAC,CAAC,CACH,CACAyC,IAAI,CACHnB,cAAM,CAACoB,QAAQ,CACb,IAAAyB,oBAAW,EACT,2BAA2BpB,IAAI,CAAC/C,GAAG,cAAc+C,IAAI,CAACP,IAAI,GAAG,CAC9D,CACF,CACF;EAEL,MAAMmC,iBAAiB,GAAwCpC,IAAI,IACjEf,GAAG,CAACa,MAAM,CAACH,UAAU,CAACyC,iBAAiB,EAAE,CAACpC,IAAI,CAAC,CAAC,CAACE,IAAI,CACnDnB,cAAM,CAACoB,QAAQ,CACb,IAAAyB,oBAAW,EAAC,sCAAsC5B,IAAI,GAAG,CAAC,CAC3D,EACDjB,cAAM,CAACsB,GAAG,CAAEC,IAAI,IAAKA,IAAI,CAACU,MAAM,CAAC,CAClC;EAEH,MAAMqB,UAAU,GAAiCxC,EAAE,IACjDZ,GAAG,CACAwB,eAAe,CACd1B,cAAM,CAACC,GAAG,CAAC,aAAS;IAClB,MAAMsD,IAAI,GAAG,OAAOrD,GAAG,CAACa,MAAM,CAC5BH,UAAU,CAAC4C,mBAAmB,EAC9B,CAAC,IAAAC,uBAAgB,EAACpD,OAAO,EAAES,EAAE,CAAC,CAAC,CAChC;IACD,IAAIyC,IAAI,CAAC,CAAC,CAAC,EAAEG,KAAK,KAAK,IAAI,EAAE;MAC3B,OAAO,OAAO,IAAIC,eAAS,CAAC7C,EAAE,CAAC;IACjC;IACA,MAAMe,GAAG,GAAG,OAAO+B,aAAK,CAACC,iBAAiB;IAC1C,MAAMC,MAAM,GAAG,OAAO5D,GAAG,CAACa,MAAM,CAC9BH,UAAU,CAACmD,wBAAwB,EACnC,CAACjD,EAAE,CAACG,IAAI,EAAEH,EAAE,CAACI,IAAI,EAAEtB,MAAM,CAACiC,GAAG,CAAC,CAAC,CAChC;IACD,IAAIiC,MAAM,CAAC7B,MAAM,KAAK,CAAC,EAAE;MACvB,MAAM+B,IAAI,GAAG,OAAO9D,GAAG,CAACa,MAAM,CAACH,UAAU,CAACqD,YAAY,EAAE,CACtDnD,EAAE,CAACG,IAAI,EACPH,EAAE,CAACI,IAAI,CACR,CAAC;MACF,IAAI8C,IAAI,CAAC/B,MAAM,GAAG,CAAC,EAAE;QACnB,OAAO,OAAO,IAAI0B,eAAS,CAAC7C,EAAE,CAAC;MACjC;IACF;IACA,MAAMsB,MAAM,GAAG,OAAOlC,GAAG,CAACa,MAAM,CAACH,UAAU,CAACsD,gBAAgB,EAAE,CAC5DpD,EAAE,CAACG,IAAI,EACPH,EAAE,CAACI,IAAI,CACR,CAAC;IACF,OAAO4C,MAAM,CAAC7B,MAAM,GAAG,CAAC,IAAIG,MAAM,CAACH,MAAM,GAAG,CAAC;EAC/C,CAAC,CAAC,CACH,CACAd,IAAI,CACHnB,cAAM,CAAC0C,QAAQ,CAAC,UAAU,EAAGC,KAAK,IAChC3C,cAAM,CAAC4C,IAAI,CAAC,IAAAC,oBAAW,EAAC,kBAAkB/B,EAAE,CAACI,IAAI,GAAG,CAAC,CAACyB,KAAK,CAAC,CAAC,CAC9D,CACF;EAEL,MAAMwB,QAAQ,GAA+BlD,IAAI,IAC/CjB,cAAM,CAACC,GAAG,CAAC,aAAS;IAClB,MAAMmE,IAAI,GAAG,OAAOlE,GAAG,CAACa,MAAM,CAC5BH,UAAU,CAACyD,UAAU,EACrB,CAACpD,IAAI,CAAC,CACP;IACD,MAAMqD,KAAK,GAAG,OAAOpE,GAAG,CAACa,MAAM,CAAUH,UAAU,CAAC2D,aAAa,EAAE,CACjEtD,IAAI,CACL,CAAC;IACF,MAAMmB,MAAM,GAAG,OAAOlC,GAAG,CAACa,MAAM,CAC9BH,UAAU,CAAC4D,cAAc,EACzB,CAACvD,IAAI,CAAC,CACP;IACD,MAAMwD,YAAY,GAAG,IAAIvF,GAAG,EAA+B;IAC3D,KAAK,MAAMC,MAAM,IAAIiD,MAAM,EAAE;MAC3B,MAAMsC,IAAI,GAAGD,YAAY,CAACE,GAAG,CAACxF,MAAM,CAAC+B,IAAI,CAAC;MAC1C,IAAIwD,IAAI,KAAKxG,SAAS,EAAE;QACtBuG,YAAY,CAACpF,GAAG,CAACF,MAAM,CAAC+B,IAAI,EAAE,CAACzC,QAAQ,CAACU,MAAM,CAAC,CAAC,CAAC;MACnD,CAAC,MAAM;QACLuF,IAAI,CAACE,IAAI,CAACnG,QAAQ,CAACU,MAAM,CAAC,CAAC;MAC7B;IACF;IACA,MAAM0F,WAAW,GAAwB;MACvCT,IAAI,EAAE5F,aAAO,CAACF,IAAI,CAAC,IAAAC,iBAAQ,EAAC6F,IAAI,CAAC,CAAC,CAAC,EAAEA,IAAI,IAAI,GAAG,CAAC,CAAC;MAClDE,KAAK,EAAEA,KAAK,CAAChD,GAAG,CACbrD,GAAG,KAAqB;QACvBiD,IAAI,EAAE4D,cAAQ,CAACxG,IAAI,CAACL,GAAG,CAACiD,IAAI,CAAC;QAC7B4C,MAAM,EAAE9F,QAAQ,CAACC,GAAG,CAAC;QACrB8G,WAAW,EAAEvH,SAAS,CAACS,GAAG,CAAC+G,kBAAkB,CAAC;QAC9CtE,KAAK,EACHzC,GAAG,CAACgH,YAAY,KAAK,IAAI,GACrBvH,cAAM,CAACC,IAAI,EAAE,GACbD,cAAM,CAACE,IAAI,CAAC;UACVmE,MAAM,EAAEmD,iBAAW,CAAC5G,IAAI,CAACL,GAAG,CAACgH,YAAY,CAAC;UAC1CE,SAAS,EAAE3H,SAAS,CAACS,GAAG,CAACmH,mBAAmB;SAC7C,CAAC;QACRhD,MAAM,EAAEqC,YAAY,CAACE,GAAG,CAAC1G,GAAG,CAACiD,IAAI,CAAC,IAAI,EAAE;QACxCmE,OAAO,EAAEtH,MAAM,CAACE,GAAG,CAACoH,OAAO;OAC5B,CAAC;KAEL;IACD,OAAOR,WAAW;EACpB,CAAC,CAAC,CAAC1D,IAAI,CAACnB,cAAM,CAACoB,QAAQ,CAAC,IAAAC,mBAAU,EAAC,oBAAoBJ,IAAI,GAAG,CAAC,CAAC,CAAC;EAEnE,MAAMqE,KAAK,GAAkB;IAC3B9E,YAAY;IACZK,UAAU;IACVW,SAAS;IACTsB,UAAU;IACVE,WAAW;IACXK,iBAAiB;IACjBC,UAAU;IACVa;GACD;EACD,OAAOmB,KAAK;AACd,CAAC,CAAC;AAAAC,OAAA,CAAAzF,yBAAA,GAAAA,yBAAA","ignoreList":[]}

package/dist/cjs/withFeed.js

@@ -0,0 +1,51 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.withFeed = void 0;
+var _read = require("@kairos-es/read");
+var _effect = require("effect");
+var _sql = require("effect/sql");
+var _feed = require("./feed.js");
+var _context = require("./internal/context.js");
+const sameKey = (left, right) => left.projection === right.projection && left.partition === right.partition;
+/**
+ * `store`, with `resetCheckpoint` for `key` also emptying `feed` and moving its
+ * generation on; see the module doc. Every other key passes through untouched.
+ */
+const withFeed = (store, feed, key) => _effect.Effect.gen(function* () {
+  const context = (0, _feed.contextOf)(feed);
+  if (context === undefined) {
+    return yield* _effect.Effect.die(new Error(`withFeed: feed '${feed.feed}' was not made by makePostgresFeed`));
+  }
+  if (store.durability !== 'durable') {
+    return yield* _effect.Effect.die(new Error(`withFeed: feed '${feed.feed}' is written inside the store's commit transaction, and an ephemeral store opens none`));
+  }
+  const {
+    statements
+  } = context;
+  const sql = (yield* _sql.SqlClient.SqlClient).withoutTransforms();
+  const bound = yield* sql.unsafe(statements.bindFeed, [feed.feed, key.projection, key.partition]).pipe(_effect.Effect.mapError((0, _context.writeFailed)(`binding feed '${feed.feed}'`)));
+  const binding = bound[0];
+  if (binding !== undefined && (binding.projection !== key.projection || binding.partition !== key.partition)) {
+    return yield* _effect.Effect.die(new Error(`withFeed: feed '${feed.feed}' is already bound to projection '${binding.projection}' (partition '${binding.partition}'), and one feed serves one materialisation`));
+  }
+  const resetBound = reset => sql.withTransaction(_effect.Effect.gen(function* () {
+    yield* sql.unsafe(statements.bumpGeneration, [feed.feed]);
+    yield* store.resetCheckpoint(reset);
+    yield* sql.unsafe(statements.deleteFeedRows, [feed.feed]);
+  })).pipe(_effect.Effect.catchTag('SqlError', cause => _effect.Effect.fail(new _read.ProjectionStoreError({
+    reason: `resetting projection '${reset.projection}' partition '${reset.partition}' and its feed '${feed.feed}' failed: ${cause.message}`,
+    cause
+  }))));
+  const decorated = {
+    durability: store.durability,
+    readCheckpoint: store.readCheckpoint,
+    commit: store.commit,
+    resetCheckpoint: reset => sameKey(reset, key) ? resetBound(reset) : store.resetCheckpoint(reset)
+  };
+  return decorated;
+});
+exports.withFeed = withFeed;
+//# sourceMappingURL=withFeed.js.map

package/dist/cjs/withFeed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"withFeed.js","names":["_read","require","_effect","_sql","_feed","_context","sameKey","left","right","projection","partition","withFeed","store","feed","key","Effect","gen","context","contextOf","undefined","die","Error","durability","statements","sql","SqlClient","withoutTransforms","bound","unsafe","bindFeed","pipe","mapError","writeFailed","binding","resetBound","reset","withTransaction","bumpGeneration","resetCheckpoint","deleteFeedRows","catchTag","cause","fail","ProjectionStoreError","reason","message","decorated","readCheckpoint","commit","exports"],"sources":["../../src/withFeed.ts"],"sourcesContent":[null],"mappings":";;;;;;AA2DA,IAAAA,KAAA,GAAAC,OAAA;AAKA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,IAAA,GAAAF,OAAA;AACA,IAAAG,KAAA,GAAAH,OAAA;AACA,IAAAI,QAAA,GAAAJ,OAAA;AAEA,MAAMK,OAAO,GAAGA,CAACC,IAAmB,EAAEC,KAAoB,KACxDD,IAAI,CAACE,UAAU,KAAKD,KAAK,CAACC,UAAU,IAAIF,IAAI,CAACG,SAAS,KAAKF,KAAK,CAACE,SAAS;AAE5E;;;;AAIO,MAAMC,QAAQ,GAAGA,CACtBC,KAAsB,EACtBC,IAAqB,EACrBC,GAAkB,KAElBC,cAAM,CAACC,GAAG,CAAC,aAAS;EAClB,MAAMC,OAAO,GAAG,IAAAC,eAAS,EAACL,IAA6B,CAAC;EACxD,IAAII,OAAO,KAAKE,SAAS,EAAE;IACzB,OAAO,OAAOJ,cAAM,CAACK,GAAG,CACtB,IAAIC,KAAK,CACP,mBAAmBR,IAAI,CAACA,IAAI,oCAAoC,CACjE,CACF;EACH;EACA,IAAID,KAAK,CAACU,UAAU,KAAK,SAAS,EAAE;IAClC,OAAO,OAAOP,cAAM,CAACK,GAAG,CACtB,IAAIC,KAAK,CACP,mBAAmBR,IAAI,CAACA,IAAI,uFAAuF,CACpH,CACF;EACH;EACA,MAAM;IAAEU;EAAU,CAAE,GAAGN,OAAO;EAC9B,MAAMO,GAAG,GAAG,CAAC,OAAOC,cAAS,CAACA,SAAS,EAAEC,iBAAiB,EAAE;EAE5D,MAAMC,KAAK,GAAG,OAAOH,GAAG,CACrBI,MAAM,CAGJL,UAAU,CAACM,QAAQ,EAAE,CAAChB,IAAI,CAACA,IAAI,EAAEC,GAAG,CAACL,UAAU,EAAEK,GAAG,CAACJ,SAAS,CAAC,CAAC,CAClEoB,IAAI,CAACf,cAAM,CAACgB,QAAQ,CAAC,IAAAC,oBAAW,EAAC,iBAAiBnB,IAAI,CAACA,IAAI,GAAG,CAAC,CAAC,CAAC;EACpE,MAAMoB,OAAO,GAAGN,KAAK,CAAC,CAAC,CAAC;EACxB,IACEM,OAAO,KAAKd,SAAS,KACpBc,OAAO,CAACxB,UAAU,KAAKK,GAAG,CAACL,UAAU,IACpCwB,OAAO,CAACvB,SAAS,KAAKI,GAAG,CAACJ,SAAS,CAAC,EACtC;IACA,OAAO,OAAOK,cAAM,CAACK,GAAG,CACtB,IAAIC,KAAK,CACP,mBAAmBR,IAAI,CAACA,IAAI,qCAAqCoB,OAAO,CAACxB,UAAU,iBAAiBwB,OAAO,CAACvB,SAAS,6CAA6C,CACnK,CACF;EACH;EAEA,MAAMwB,UAAU,GAAIC,KAAoB,IACtCX,GAAG,CACAY,eAAe,CACdrB,cAAM,CAACC,GAAG,CAAC,aAAS;IAClB,OAAOQ,GAAG,CAACI,MAAM,CAACL,UAAU,CAACc,cAAc,EAAE,CAACxB,IAAI,CAACA,IAAI,CAAC,CAAC;IACzD,OAAOD,KAAK,CAAC0B,eAAe,CAACH,KAAK,CAAC;IACnC,OAAOX,GAAG,CAACI,MAAM,CAACL,UAAU,CAACgB,cAAc,EAAE,CAAC1B,IAAI,CAACA,IAAI,CAAC,CAAC;EAC3D,CAAC,CAAC,CACH,CACAiB,IAAI,CACHf,cAAM,CAACyB,QAAQ,CAAC,UAAU,EAAGC,KAAK,IAChC1B,cAAM,CAAC2B,IAAI,CACT,IAAIC,0BAAoB,CAAC;IACvBC,MAAM,EAAE,yBAAyBT,KAAK,CAAC1B,UAAU,gBAAgB0B,KAAK,CAACzB,SAAS,mBAAmBG,IAAI,CAACA,IAAI,aAAa4B,KAAK,CAACI,OAAO,EAAE;IACxIJ;GACD,CAAC,CACH,CACF,CACF;EAEL,MAAMK,SAAS,GAAoB;IACjCxB,UAAU,EAAEV,KAAK,CAACU,UAAU;IAC5ByB,cAAc,EAAEnC,KAAK,CAACmC,cAAc;IACpCC,MAAM,EAAEpC,KAAK,CAACoC,MAAM;IACpBV,eAAe,EAAGH,KAAK,IACrB7B,OAAO,CAAC6B,KAAK,EAAErB,GAAG,CAAC,GAAGoB,UAAU,CAACC,KAAK,CAAC,GAAGvB,KAAK,CAAC0B,eAAe,CAACH,KAAK;GACxE;EACD,OAAOW,SAAS;AAClB,CAAC,CAAC;AAAAG,OAAA,CAAAtC,QAAA,GAAAA,QAAA","ignoreList":[]}