@korajs/sync 1.0.0-beta.10 → 1.0.0-beta.12

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { S as SyncScopeMap, D as DeltaCursor, a as SyncMessage, b as SerializedOperation, W as WireFormat, c as SyncTransport, T as TransportOptions, d as TransportMessageHandler, e as TransportCloseHandler, f as TransportErrorHandler, B as BlobChunkRequestMessage, g as BlobChunkResponseMessage, h as BlobChunkPushMessage, i as SyncEncryptionConfig, V as VersionedKey, Y as YjsDocUpdateMessage, Q as QueueStorage, j as SyncState, k as SyncStatusInfo, l as SyncConfig, R as RejectedOperationStorage, m as SyncStatePersistence, n as SyncQuerySubset, o as RejectedOperation } from './transport-B2GQerqJ.cjs';
-export { A as AcknowledgmentMessage, p as AwarenessStateWire, q as AwarenessUpdateMessage, E as EncryptedPayload, r as ErrorMessage, H as HandshakeMessage, s as HandshakeResponseMessage, I as InvalidScopeError, M as MemoryRejectedOperationStorage, O as OperationBatchMessage, t as OperationRejectedMessage, u as SYNC_STATES, v as SYNC_STATUSES, w as ScopeViolationError, x as SyncEncryptionAlgorithm, y as SyncScopeContext, z as SyncStatus, C as dedupeQuerySubsets, F as isAcknowledgmentMessage, G as isAwarenessUpdateMessage, J as isBlobChunkPushMessage, K as isBlobChunkRequestMessage, L as isBlobChunkResponseMessage, N as isErrorMessage, P as isHandshakeMessage, U as isHandshakeResponseMessage, X as isOperationBatchMessage, Z as isOperationRejectedMessage, _ as isSyncMessage, $ as isYjsDocUpdateMessage, a0 as operationMatchesQuerySubsets } from './transport-B2GQerqJ.cjs';
+import { S as SyncScopeMap, D as DeltaCursor, a as SyncMessage, b as SerializedOperation, W as WireFormat, c as SyncTransport, T as TransportOptions, d as TransportMessageHandler, e as TransportCloseHandler, f as TransportErrorHandler, B as BlobChunkRequestMessage, g as BlobChunkResponseMessage, h as BlobChunkPushMessage, i as SyncEncryptionConfig, V as VersionedKey, Y as YjsDocUpdateMessage, Q as QueueStorage, j as SyncState, k as SyncStatusInfo, l as SyncConfig, R as RejectedOperationStorage, m as SyncStatePersistence, n as SyncQuerySubset, o as RejectedOperation } from './transport-CJvRO5ix.cjs';
+export { A as AcknowledgmentMessage, p as ActiveApplyFailure, q as AwarenessStateWire, r as AwarenessUpdateMessage, E as EncryptedPayload, s as ErrorMessage, H as HandshakeMessage, t as HandshakeResponseMessage, I as InvalidScopeError, M as MemoryRejectedOperationStorage, O as OperationBatchMessage, u as OperationRejectedMessage, v as SYNC_STATES, w as SYNC_STATUSES, x as ScopeViolationError, y as SyncEncryptionAlgorithm, z as SyncPhase, C as SyncScopeContext, F as SyncSettlementOptions, G as SyncSettlementResult, J as SyncStatus, K as dedupeQuerySubsets, L as isAcknowledgmentMessage, N as isAwarenessUpdateMessage, P as isBlobChunkPushMessage, U as isBlobChunkRequestMessage, X as isBlobChunkResponseMessage, Z as isErrorMessage, _ as isHandshakeMessage, $ as isHandshakeResponseMessage, a0 as isOperationBatchMessage, a1 as isOperationRejectedMessage, a2 as isSyncMessage, a3 as isYjsDocUpdateMessage, a4 as operationMatchesQuerySubsets, a5 as querySubsetContains } from './transport-CJvRO5ix.cjs';
 import * as _korajs_core from '@korajs/core';
 import { Operation, VersionVector, ApplyResult, KoraEventEmitter, TimeSource, SyncError, ConnectionQuality } from '@korajs/core';
 export { ApplyFailureReason, ApplyResult } from '@korajs/core';
@@ -106,6 +106,16 @@ interface SyncStore {
      * @returns the record's fields, or null when it cannot be read.
      */
     readRecordFields?(collection: string, recordId: string): Promise<Record<string, unknown> | null>;
+    /**
+     * Remove a record from this client's materialized authorization view without
+     * writing a domain delete to the replicated operation log.
+     */
+    applyScopeRetraction?(collection: string, recordId: string): Promise<void>;
+    /** Retract every currently materialized row outside a newly accepted scope. */
+    applyScopeNarrowing?(scopes: Record<string, Record<string, unknown>>): Promise<Array<{
+        collection: string;
+        recordId: string;
+    }>>;
 }
 
 /** Prefix for handshake rejection when client schema version is unsupported. */
@@ -879,6 +889,8 @@ declare class OutboundQueue {
      * or null if it was not present (already acknowledged and removed).
      */
     reject(opId: string): Promise<Operation | null>;
+    /** Remove every pending/in-flight operation for a record so authorization loss cannot upload it. */
+    rejectRecord(collection: string, recordId: string): Promise<Operation[]>;
     /**
      * Remove operations by id from queue and persistent storage.
      * Used when ops were already sent during handshake delta exchange.
@@ -956,6 +968,8 @@ declare class SyncEngine {
     private readonly rejectedStorage;
     private readonly batchSize;
     private readonly outboundAckTimeoutMs;
+    private readonly outboundRetryBaseDelayMs;
+    private readonly outboundRetryMaxDelayMs;
     private readonly encryptor;
     private readonly awarenessManager;
     private readonly richtextDocChannel;
@@ -971,11 +985,19 @@ declare class SyncEngine {
     private conflictCount;
     private currentBatch;
     private currentBatchRequiresPartialAck;
+    private currentBatchRequiresRetryBackoff;
+    private outboundRetryAttempt;
+    private outboundRetryTimer;
     private reconnecting;
     private schemaBlocked;
     private clockBlocked;
     private clockSkewMs;
     private blobStorageEnabled;
+    private suspensionReason;
+    private authRejected;
+    private serverFrontier;
+    private hasInFlightDeliveryBatch;
+    private blockedFailure;
     private outboundAckTimer;
     private startPromise;
     private stopPromise;
@@ -993,8 +1015,12 @@ declare class SyncEngine {
      * with the server-accepted scope (server is authoritative).
      */
     private activeScope;
+    /** Server-authoritative upload authorization, separate from the downloaded view. */
+    private activeUplinkScope;
+    private hasDirectionalScopes;
     /** Live query subsets registered from reactive subscriptions */
     private querySubsets;
+    private staticQuerySubsets;
     private querySubsetReconnectTimer;
     /** Resume cursor for paginated initial sync (persisted across reconnects) */
     private resumeDeltaCursor;
@@ -1051,6 +1077,7 @@ declare class SyncEngine {
      * Get the current developer-facing sync status.
      */
     getStatus(): SyncStatusInfo;
+    private resolvePhase;
     /**
      * True when the server rejected the client's schema version at handshake.
      * Sync stays blocked until the app schema is upgraded or sync config changes.
@@ -1088,6 +1115,8 @@ declare class SyncEngine {
      * or in error state, restarts the sync. If already connected, no-op.
      */
     retryNow(): Promise<void>;
+    /** Wake a permanent auth suspension after the binding reports a new auth state. */
+    notifyAuthChanged(): void;
     /**
      * Atomically refresh the transport session. Overlapping callers share one
      * reconnect, in-flight outbound batches are returned to the queue by stop(), and the
@@ -1160,11 +1189,16 @@ declare class SyncEngine {
      * Get the currently active scope map. Returns undefined if no scope is configured.
      */
     getActiveScope(): SyncScopeMap | undefined;
+    /** Get the server-accepted upload authorization scope. */
+    getActiveUplinkScope(): SyncScopeMap | undefined;
     /**
      * Register a live query subset that narrows synced data for a collection.
      * Takes effect on the next connection; reconnects when already connected.
      */
     registerQuerySubset(subset: SyncQuerySubset): () => void;
+    private switchDeliveryViewWithInheritance;
+    /** Atomically replace the manifest used by static query-subset mode. */
+    setQuerySubsets(subsets: SyncQuerySubset[]): void;
     /**
      * Returns deduplicated active query subsets from registered subscriptions.
      */
@@ -1230,6 +1264,7 @@ declare class SyncEngine {
      * the app can reconcile. Unlike {@link handleError}, this is a normal per-op
      * signal, so the connection stays up.
      */
+    private applyScopeRetraction;
     private handleOperationRejected;
     /**
      * Every operation the server rejected that has not yet been reconciled. The app
@@ -1264,6 +1299,8 @@ declare class SyncEngine {
     private flushQueue;
     private startOutboundAckTimer;
     private clearOutboundAckTimer;
+    private scheduleOutboundRetry;
+    private clearOutboundRetryTimer;
     private handleOutboundAckTimeout;
     private handleAwarenessUpdate;
     private handleTransportClose;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { S as SyncScopeMap, D as DeltaCursor, a as SyncMessage, b as SerializedOperation, W as WireFormat, c as SyncTransport, T as TransportOptions, d as TransportMessageHandler, e as TransportCloseHandler, f as TransportErrorHandler, B as BlobChunkRequestMessage, g as BlobChunkResponseMessage, h as BlobChunkPushMessage, i as SyncEncryptionConfig, V as VersionedKey, Y as YjsDocUpdateMessage, Q as QueueStorage, j as SyncState, k as SyncStatusInfo, l as SyncConfig, R as RejectedOperationStorage, m as SyncStatePersistence, n as SyncQuerySubset, o as RejectedOperation } from './transport-B2GQerqJ.js';
-export { A as AcknowledgmentMessage, p as AwarenessStateWire, q as AwarenessUpdateMessage, E as EncryptedPayload, r as ErrorMessage, H as HandshakeMessage, s as HandshakeResponseMessage, I as InvalidScopeError, M as MemoryRejectedOperationStorage, O as OperationBatchMessage, t as OperationRejectedMessage, u as SYNC_STATES, v as SYNC_STATUSES, w as ScopeViolationError, x as SyncEncryptionAlgorithm, y as SyncScopeContext, z as SyncStatus, C as dedupeQuerySubsets, F as isAcknowledgmentMessage, G as isAwarenessUpdateMessage, J as isBlobChunkPushMessage, K as isBlobChunkRequestMessage, L as isBlobChunkResponseMessage, N as isErrorMessage, P as isHandshakeMessage, U as isHandshakeResponseMessage, X as isOperationBatchMessage, Z as isOperationRejectedMessage, _ as isSyncMessage, $ as isYjsDocUpdateMessage, a0 as operationMatchesQuerySubsets } from './transport-B2GQerqJ.js';
+import { S as SyncScopeMap, D as DeltaCursor, a as SyncMessage, b as SerializedOperation, W as WireFormat, c as SyncTransport, T as TransportOptions, d as TransportMessageHandler, e as TransportCloseHandler, f as TransportErrorHandler, B as BlobChunkRequestMessage, g as BlobChunkResponseMessage, h as BlobChunkPushMessage, i as SyncEncryptionConfig, V as VersionedKey, Y as YjsDocUpdateMessage, Q as QueueStorage, j as SyncState, k as SyncStatusInfo, l as SyncConfig, R as RejectedOperationStorage, m as SyncStatePersistence, n as SyncQuerySubset, o as RejectedOperation } from './transport-CJvRO5ix.js';
+export { A as AcknowledgmentMessage, p as ActiveApplyFailure, q as AwarenessStateWire, r as AwarenessUpdateMessage, E as EncryptedPayload, s as ErrorMessage, H as HandshakeMessage, t as HandshakeResponseMessage, I as InvalidScopeError, M as MemoryRejectedOperationStorage, O as OperationBatchMessage, u as OperationRejectedMessage, v as SYNC_STATES, w as SYNC_STATUSES, x as ScopeViolationError, y as SyncEncryptionAlgorithm, z as SyncPhase, C as SyncScopeContext, F as SyncSettlementOptions, G as SyncSettlementResult, J as SyncStatus, K as dedupeQuerySubsets, L as isAcknowledgmentMessage, N as isAwarenessUpdateMessage, P as isBlobChunkPushMessage, U as isBlobChunkRequestMessage, X as isBlobChunkResponseMessage, Z as isErrorMessage, _ as isHandshakeMessage, $ as isHandshakeResponseMessage, a0 as isOperationBatchMessage, a1 as isOperationRejectedMessage, a2 as isSyncMessage, a3 as isYjsDocUpdateMessage, a4 as operationMatchesQuerySubsets, a5 as querySubsetContains } from './transport-CJvRO5ix.js';
 import * as _korajs_core from '@korajs/core';
 import { Operation, VersionVector, ApplyResult, KoraEventEmitter, TimeSource, SyncError, ConnectionQuality } from '@korajs/core';
 export { ApplyFailureReason, ApplyResult } from '@korajs/core';
@@ -106,6 +106,16 @@ interface SyncStore {
      * @returns the record's fields, or null when it cannot be read.
      */
     readRecordFields?(collection: string, recordId: string): Promise<Record<string, unknown> | null>;
+    /**
+     * Remove a record from this client's materialized authorization view without
+     * writing a domain delete to the replicated operation log.
+     */
+    applyScopeRetraction?(collection: string, recordId: string): Promise<void>;
+    /** Retract every currently materialized row outside a newly accepted scope. */
+    applyScopeNarrowing?(scopes: Record<string, Record<string, unknown>>): Promise<Array<{
+        collection: string;
+        recordId: string;
+    }>>;
 }
 
 /** Prefix for handshake rejection when client schema version is unsupported. */
@@ -879,6 +889,8 @@ declare class OutboundQueue {
      * or null if it was not present (already acknowledged and removed).
      */
     reject(opId: string): Promise<Operation | null>;
+    /** Remove every pending/in-flight operation for a record so authorization loss cannot upload it. */
+    rejectRecord(collection: string, recordId: string): Promise<Operation[]>;
     /**
      * Remove operations by id from queue and persistent storage.
      * Used when ops were already sent during handshake delta exchange.
@@ -956,6 +968,8 @@ declare class SyncEngine {
     private readonly rejectedStorage;
     private readonly batchSize;
     private readonly outboundAckTimeoutMs;
+    private readonly outboundRetryBaseDelayMs;
+    private readonly outboundRetryMaxDelayMs;
     private readonly encryptor;
     private readonly awarenessManager;
     private readonly richtextDocChannel;
@@ -971,11 +985,19 @@ declare class SyncEngine {
     private conflictCount;
     private currentBatch;
     private currentBatchRequiresPartialAck;
+    private currentBatchRequiresRetryBackoff;
+    private outboundRetryAttempt;
+    private outboundRetryTimer;
     private reconnecting;
     private schemaBlocked;
     private clockBlocked;
     private clockSkewMs;
     private blobStorageEnabled;
+    private suspensionReason;
+    private authRejected;
+    private serverFrontier;
+    private hasInFlightDeliveryBatch;
+    private blockedFailure;
     private outboundAckTimer;
     private startPromise;
     private stopPromise;
@@ -993,8 +1015,12 @@ declare class SyncEngine {
      * with the server-accepted scope (server is authoritative).
      */
     private activeScope;
+    /** Server-authoritative upload authorization, separate from the downloaded view. */
+    private activeUplinkScope;
+    private hasDirectionalScopes;
     /** Live query subsets registered from reactive subscriptions */
     private querySubsets;
+    private staticQuerySubsets;
     private querySubsetReconnectTimer;
     /** Resume cursor for paginated initial sync (persisted across reconnects) */
     private resumeDeltaCursor;
@@ -1051,6 +1077,7 @@ declare class SyncEngine {
      * Get the current developer-facing sync status.
      */
     getStatus(): SyncStatusInfo;
+    private resolvePhase;
     /**
      * True when the server rejected the client's schema version at handshake.
      * Sync stays blocked until the app schema is upgraded or sync config changes.
@@ -1088,6 +1115,8 @@ declare class SyncEngine {
      * or in error state, restarts the sync. If already connected, no-op.
      */
     retryNow(): Promise<void>;
+    /** Wake a permanent auth suspension after the binding reports a new auth state. */
+    notifyAuthChanged(): void;
     /**
      * Atomically refresh the transport session. Overlapping callers share one
      * reconnect, in-flight outbound batches are returned to the queue by stop(), and the
@@ -1160,11 +1189,16 @@ declare class SyncEngine {
      * Get the currently active scope map. Returns undefined if no scope is configured.
      */
     getActiveScope(): SyncScopeMap | undefined;
+    /** Get the server-accepted upload authorization scope. */
+    getActiveUplinkScope(): SyncScopeMap | undefined;
     /**
      * Register a live query subset that narrows synced data for a collection.
      * Takes effect on the next connection; reconnects when already connected.
      */
     registerQuerySubset(subset: SyncQuerySubset): () => void;
+    private switchDeliveryViewWithInheritance;
+    /** Atomically replace the manifest used by static query-subset mode. */
+    setQuerySubsets(subsets: SyncQuerySubset[]): void;
     /**
      * Returns deduplicated active query subsets from registered subscriptions.
      */
@@ -1230,6 +1264,7 @@ declare class SyncEngine {
      * the app can reconcile. Unlike {@link handleError}, this is a normal per-op
      * signal, so the connection stays up.
      */
+    private applyScopeRetraction;
     private handleOperationRejected;
     /**
      * Every operation the server rejected that has not yet been reconciled. The app
@@ -1264,6 +1299,8 @@ declare class SyncEngine {
     private flushQueue;
     private startOutboundAckTimer;
     private clearOutboundAckTimer;
+    private scheduleOutboundRetry;
+    private clearOutboundRetryTimer;
     private handleOutboundAckTimeout;
     private handleAwarenessUpdate;
     private handleTransportClose;