@korajs/sync 1.0.0-beta.13 → 1.0.0-beta.14

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { S as SyncScopeMap, a as ScopeSnapshotOptions, D as DeltaCursor, b as SyncMessage, c as SerializedOperation, W as WireFormat, d as SyncTransport, T as TransportOptions, e as TransportMessageHandler, f as TransportCloseHandler, g as TransportErrorHandler, B as BlobChunkRequestMessage, h as BlobChunkResponseMessage, i as BlobChunkPushMessage, j as WrappedKeyRecord, k as SyncEncryptionConfig, V as VersionedKey, Y as YjsDocUpdateMessage, Q as QueueStorage, l as SyncState, m as SyncStatusInfo, n as SyncConfig, R as RejectedOperationStorage, o as SyncStatePersistence, p as SyncQuerySubset, q as QuarantinedOperation, H as HeldNodeInfo, r as RejectedOperation } from './transport-Bemtqwep.cjs';
-export { A as AcknowledgmentMessage, s as ActiveApplyFailure, t as AdoptionScheduleInfo, u as AwarenessStateWire, v as AwarenessUpdateMessage, w as DEFAULT_KEYRING, E as EncryptedPayload, x as EncryptionKeyMessage, y as EncryptionKeyPutMessage, z as EncryptionKeyRequestMessage, C as EncryptionKeyResponseMessage, F as EncryptionKeyResponseStatus, G as ErrorMessage, I as HandshakeMessage, J as HandshakeResponseMessage, K as HeartbeatMessage, L as HeldReason, M as INVALID_OPERATION_ID, N as InvalidScopeError, O as KEY_RECORD_FORMAT, P as KeyRecordKdf, U as KeyRecordRecovery, X as KeyRecordValidation, Z as LEGACY_SYNC_PROTOCOL_VERSION, _ as LocalNodeInfo, $ as MAX_KDF_ITERATIONS, a0 as MAX_KEY_RECORD_BYTES, a1 as MemoryRejectedOperationStorage, a2 as OperationBatchMessage, a3 as OperationRejectedMessage, a4 as PLAINTEXT_REJECTED, a5 as PROTOCOL_V1_DEPRECATED, a6 as SYNC_PROTOCOL_VERSION, a7 as SYNC_STATES, a8 as SYNC_STATUSES, a9 as ScopeViolationError, aa as SyncAuthRequest, ab as SyncEncryptionAlgorithm, ac as SyncPhase, ad as SyncScopeContext, ae as SyncSettlementOptions, af as SyncSettlementResult, ag as SyncStatus, ah as TerminalRejectionRecord, ai as WrappedDataKey, aj as WrappedMasterKey, ak as declaredProtocolVersion, al as dedupeQuerySubsets, am as isAcknowledgmentMessage, an as isAwarenessUpdateMessage, ao as isBlobChunkPushMessage, ap as isBlobChunkRequestMessage, aq as isBlobChunkResponseMessage, ar as isEncryptionKeyMessage, as as isErrorMessage, at as isHandshakeMessage, au as isHandshakeResponseMessage, av as isKeyId, aw as isKeyRecordSuccessor, ax as isOperationBatchMessage, ay as isOperationRejectedMessage, az as isSyncMessage, aA as isValidKeyringName, aB as isYjsDocUpdateMessage, aC as operationMatchesQuerySubsets, aD as querySubsetContains, aE as validateKeyRecord } from './transport-Bemtqwep.cjs';
+import { S as SyncScopeMap, a as ScopeSnapshotOptions, D as DeltaCursor, b as SyncMessage, c as SerializedOperation, W as WireFormat, d as SyncTransport, T as TransportOptions, e as TransportMessageHandler, f as TransportCloseHandler, g as TransportErrorHandler, B as BlobChunkRequestMessage, h as BlobChunkResponseMessage, i as BlobChunkPushMessage, j as WrappedKeyRecord, k as SyncEncryptionConfig, V as VersionedKey, Y as YjsDocUpdateMessage, Q as QueueStorage, l as SyncState, m as SyncStatusInfo, n as SyncConfig, R as RejectedOperationStorage, o as SyncStatePersistence, p as SyncQuerySubset, q as QuarantinedOperation, H as HeldNodeInfo, r as RejectedOperation } from './transport-CoPFFarn.cjs';
+export { A as AcknowledgmentMessage, s as ActiveApplyFailure, t as AdoptionScheduleInfo, u as AwarenessStateWire, v as AwarenessUpdateMessage, w as DEFAULT_KEYRING, E as EncryptedPayload, x as EncryptionKeyMessage, y as EncryptionKeyPutMessage, z as EncryptionKeyRequestMessage, C as EncryptionKeyResponseMessage, F as EncryptionKeyResponseStatus, G as ErrorMessage, I as HandshakeMessage, J as HandshakeResponseMessage, K as HeartbeatMessage, L as HeldReason, M as INVALID_OPERATION_ID, N as InvalidScopeError, O as KEY_RECORD_FORMAT, P as KeyRecordKdf, U as KeyRecordRecovery, X as KeyRecordValidation, Z as LEGACY_SYNC_PROTOCOL_VERSION, _ as LocalNodeInfo, $ as MAX_KDF_ITERATIONS, a0 as MAX_KEY_RECORD_BYTES, a1 as MemoryRejectedOperationStorage, a2 as OperationBatchMessage, a3 as OperationRejectedMessage, a4 as PLAINTEXT_REJECTED, a5 as PROTOCOL_V1_DEPRECATED, a6 as SYNC_PROTOCOL_VERSION, a7 as SYNC_STATES, a8 as SYNC_STATUSES, a9 as ScopeViolationError, aa as SyncAuthRequest, ab as SyncEncryptionAlgorithm, ac as SyncPhase, ad as SyncScopeContext, ae as SyncSettlementOptions, af as SyncSettlementResult, ag as SyncStatus, ah as TerminalRejectionRecord, ai as WrappedDataKey, aj as WrappedMasterKey, ak as declaredProtocolVersion, al as dedupeQuerySubsets, am as isAcknowledgmentMessage, an as isAwarenessUpdateMessage, ao as isBlobChunkPushMessage, ap as isBlobChunkRequestMessage, aq as isBlobChunkResponseMessage, ar as isEncryptionKeyMessage, as as isErrorMessage, at as isHandshakeMessage, au as isHandshakeResponseMessage, av as isKeyId, aw as isKeyRecordSuccessor, ax as isOperationBatchMessage, ay as isOperationRejectedMessage, az as isSyncMessage, aA as isValidKeyringName, aB as isYjsDocUpdateMessage, aC as operationMatchesQuerySubsets, aD as querySubsetContains, aE as validateKeyRecord } from './transport-CoPFFarn.cjs';
 import * as _korajs_core from '@korajs/core';
 import { Operation, VersionVector, ApplyResult, OperationTransform, KoraEventEmitter, TimeSource, SyncError, ConnectionQuality, KoraError, SchemaDefinition } from '@korajs/core';
 export { ApplyFailureReason, ApplyResult } from '@korajs/core';
@@ -108,6 +108,21 @@ interface SyncStore {
         nodeId: string;
         operations: Operation[];
     }>;
+    /**
+     * Optional: the server refused the store's pinned node id as another user's (`true`),
+     * or accepted it again (`false`). A pinned store refuses local writes meanwhile (F9).
+     */
+    setPinnedNodeOwnedElsewhere?(owned: boolean): void;
+    /**
+     * Optional: re-author another local node's given unsynced operations under a fresh
+     * node id bound to `principal`, without moving the store's own node. Called when the
+     * server refused an adopted node whose writes belong to the signed-in user but that
+     * no claims-aware server ever accepted (a beta.12 node with unowned history).
+     */
+    reauthorLocalNode?(fromNodeId: string, ids: string[], principal: string): Promise<{
+        nodeId: string;
+        operations: Operation[];
+    }>;
     /**
      * Optional: move the device back to a node id this database authored under before
      * (RT-38), without rewriting anything. Used after the server refused the current node
@@ -2310,6 +2325,19 @@ declare class SyncEngine {
      * - An adopted node (RT-40) is held; the store's own node is left as it is.
      */
     private rotateNodeIdentity;
+    /**
+     * The server refused an adopted node that belongs to the signed-in user (the app
+     * assigned its held writes, or it was created for them) but that no claims-aware
+     * server ever accepted: typically a beta.12 node whose history the server recorded no
+     * owner for, and whose id is not this device's verified id, so no handover applies.
+     * Holding it would hold the user's own writes forever. Like the store's own node
+     * (RT-21), its never-sent writes are re-authored under a fresh node of the user's,
+     * which a later session adopts and uploads; what a beta.12 server acknowledged under
+     * the node is not re-authored (it is stored there already).
+     *
+     * @returns Whether the node's writes were re-authored (false: the caller holds it)
+     */
+    private reauthorRefusedAdoption;
     /** RT-38: hold a refused, previously accepted node's writes and move to another node. */
     private holdNodeAndSwitch;
     /** RT-21: re-author a never-accepted node's never-sent writes under a fresh node. */

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { S as SyncScopeMap, a as ScopeSnapshotOptions, D as DeltaCursor, b as SyncMessage, c as SerializedOperation, W as WireFormat, d as SyncTransport, T as TransportOptions, e as TransportMessageHandler, f as TransportCloseHandler, g as TransportErrorHandler, B as BlobChunkRequestMessage, h as BlobChunkResponseMessage, i as BlobChunkPushMessage, j as WrappedKeyRecord, k as SyncEncryptionConfig, V as VersionedKey, Y as YjsDocUpdateMessage, Q as QueueStorage, l as SyncState, m as SyncStatusInfo, n as SyncConfig, R as RejectedOperationStorage, o as SyncStatePersistence, p as SyncQuerySubset, q as QuarantinedOperation, H as HeldNodeInfo, r as RejectedOperation } from './transport-Bemtqwep.js';
-export { A as AcknowledgmentMessage, s as ActiveApplyFailure, t as AdoptionScheduleInfo, u as AwarenessStateWire, v as AwarenessUpdateMessage, w as DEFAULT_KEYRING, E as EncryptedPayload, x as EncryptionKeyMessage, y as EncryptionKeyPutMessage, z as EncryptionKeyRequestMessage, C as EncryptionKeyResponseMessage, F as EncryptionKeyResponseStatus, G as ErrorMessage, I as HandshakeMessage, J as HandshakeResponseMessage, K as HeartbeatMessage, L as HeldReason, M as INVALID_OPERATION_ID, N as InvalidScopeError, O as KEY_RECORD_FORMAT, P as KeyRecordKdf, U as KeyRecordRecovery, X as KeyRecordValidation, Z as LEGACY_SYNC_PROTOCOL_VERSION, _ as LocalNodeInfo, $ as MAX_KDF_ITERATIONS, a0 as MAX_KEY_RECORD_BYTES, a1 as MemoryRejectedOperationStorage, a2 as OperationBatchMessage, a3 as OperationRejectedMessage, a4 as PLAINTEXT_REJECTED, a5 as PROTOCOL_V1_DEPRECATED, a6 as SYNC_PROTOCOL_VERSION, a7 as SYNC_STATES, a8 as SYNC_STATUSES, a9 as ScopeViolationError, aa as SyncAuthRequest, ab as SyncEncryptionAlgorithm, ac as SyncPhase, ad as SyncScopeContext, ae as SyncSettlementOptions, af as SyncSettlementResult, ag as SyncStatus, ah as TerminalRejectionRecord, ai as WrappedDataKey, aj as WrappedMasterKey, ak as declaredProtocolVersion, al as dedupeQuerySubsets, am as isAcknowledgmentMessage, an as isAwarenessUpdateMessage, ao as isBlobChunkPushMessage, ap as isBlobChunkRequestMessage, aq as isBlobChunkResponseMessage, ar as isEncryptionKeyMessage, as as isErrorMessage, at as isHandshakeMessage, au as isHandshakeResponseMessage, av as isKeyId, aw as isKeyRecordSuccessor, ax as isOperationBatchMessage, ay as isOperationRejectedMessage, az as isSyncMessage, aA as isValidKeyringName, aB as isYjsDocUpdateMessage, aC as operationMatchesQuerySubsets, aD as querySubsetContains, aE as validateKeyRecord } from './transport-Bemtqwep.js';
+import { S as SyncScopeMap, a as ScopeSnapshotOptions, D as DeltaCursor, b as SyncMessage, c as SerializedOperation, W as WireFormat, d as SyncTransport, T as TransportOptions, e as TransportMessageHandler, f as TransportCloseHandler, g as TransportErrorHandler, B as BlobChunkRequestMessage, h as BlobChunkResponseMessage, i as BlobChunkPushMessage, j as WrappedKeyRecord, k as SyncEncryptionConfig, V as VersionedKey, Y as YjsDocUpdateMessage, Q as QueueStorage, l as SyncState, m as SyncStatusInfo, n as SyncConfig, R as RejectedOperationStorage, o as SyncStatePersistence, p as SyncQuerySubset, q as QuarantinedOperation, H as HeldNodeInfo, r as RejectedOperation } from './transport-CoPFFarn.js';
+export { A as AcknowledgmentMessage, s as ActiveApplyFailure, t as AdoptionScheduleInfo, u as AwarenessStateWire, v as AwarenessUpdateMessage, w as DEFAULT_KEYRING, E as EncryptedPayload, x as EncryptionKeyMessage, y as EncryptionKeyPutMessage, z as EncryptionKeyRequestMessage, C as EncryptionKeyResponseMessage, F as EncryptionKeyResponseStatus, G as ErrorMessage, I as HandshakeMessage, J as HandshakeResponseMessage, K as HeartbeatMessage, L as HeldReason, M as INVALID_OPERATION_ID, N as InvalidScopeError, O as KEY_RECORD_FORMAT, P as KeyRecordKdf, U as KeyRecordRecovery, X as KeyRecordValidation, Z as LEGACY_SYNC_PROTOCOL_VERSION, _ as LocalNodeInfo, $ as MAX_KDF_ITERATIONS, a0 as MAX_KEY_RECORD_BYTES, a1 as MemoryRejectedOperationStorage, a2 as OperationBatchMessage, a3 as OperationRejectedMessage, a4 as PLAINTEXT_REJECTED, a5 as PROTOCOL_V1_DEPRECATED, a6 as SYNC_PROTOCOL_VERSION, a7 as SYNC_STATES, a8 as SYNC_STATUSES, a9 as ScopeViolationError, aa as SyncAuthRequest, ab as SyncEncryptionAlgorithm, ac as SyncPhase, ad as SyncScopeContext, ae as SyncSettlementOptions, af as SyncSettlementResult, ag as SyncStatus, ah as TerminalRejectionRecord, ai as WrappedDataKey, aj as WrappedMasterKey, ak as declaredProtocolVersion, al as dedupeQuerySubsets, am as isAcknowledgmentMessage, an as isAwarenessUpdateMessage, ao as isBlobChunkPushMessage, ap as isBlobChunkRequestMessage, aq as isBlobChunkResponseMessage, ar as isEncryptionKeyMessage, as as isErrorMessage, at as isHandshakeMessage, au as isHandshakeResponseMessage, av as isKeyId, aw as isKeyRecordSuccessor, ax as isOperationBatchMessage, ay as isOperationRejectedMessage, az as isSyncMessage, aA as isValidKeyringName, aB as isYjsDocUpdateMessage, aC as operationMatchesQuerySubsets, aD as querySubsetContains, aE as validateKeyRecord } from './transport-CoPFFarn.js';
 import * as _korajs_core from '@korajs/core';
 import { Operation, VersionVector, ApplyResult, OperationTransform, KoraEventEmitter, TimeSource, SyncError, ConnectionQuality, KoraError, SchemaDefinition } from '@korajs/core';
 export { ApplyFailureReason, ApplyResult } from '@korajs/core';
@@ -108,6 +108,21 @@ interface SyncStore {
         nodeId: string;
         operations: Operation[];
     }>;
+    /**
+     * Optional: the server refused the store's pinned node id as another user's (`true`),
+     * or accepted it again (`false`). A pinned store refuses local writes meanwhile (F9).
+     */
+    setPinnedNodeOwnedElsewhere?(owned: boolean): void;
+    /**
+     * Optional: re-author another local node's given unsynced operations under a fresh
+     * node id bound to `principal`, without moving the store's own node. Called when the
+     * server refused an adopted node whose writes belong to the signed-in user but that
+     * no claims-aware server ever accepted (a beta.12 node with unowned history).
+     */
+    reauthorLocalNode?(fromNodeId: string, ids: string[], principal: string): Promise<{
+        nodeId: string;
+        operations: Operation[];
+    }>;
     /**
      * Optional: move the device back to a node id this database authored under before
      * (RT-38), without rewriting anything. Used after the server refused the current node
@@ -2310,6 +2325,19 @@ declare class SyncEngine {
      * - An adopted node (RT-40) is held; the store's own node is left as it is.
      */
     private rotateNodeIdentity;
+    /**
+     * The server refused an adopted node that belongs to the signed-in user (the app
+     * assigned its held writes, or it was created for them) but that no claims-aware
+     * server ever accepted: typically a beta.12 node whose history the server recorded no
+     * owner for, and whose id is not this device's verified id, so no handover applies.
+     * Holding it would hold the user's own writes forever. Like the store's own node
+     * (RT-21), its never-sent writes are re-authored under a fresh node of the user's,
+     * which a later session adopts and uploads; what a beta.12 server acknowledged under
+     * the node is not re-authored (it is stored there already).
+     *
+     * @returns Whether the node's writes were re-authored (false: the caller holds it)
+     */
+    private reauthorRefusedAdoption;
     /** RT-38: hold a refused, previously accepted node's writes and move to another node. */
     private holdNodeAndSwitch;
     /** RT-21: re-author a never-accepted node's never-sent writes under a fresh node. */

package/dist/index.js

@@ -10,7 +10,7 @@ import {
   recordMatchesScopePredicates,
   scopeViewKey,
   verifyInboundOperation
-} from "./chunk-5S6U7EVU.js";
+} from "./chunk-YMPQ53EI.js";
 
 // src/types.ts
 import { KoraError } from "@korajs/core";
@@ -7504,10 +7504,12 @@ var SyncEngine = class {
     this.returnAllInFlightUploads();
     try {
       const principal = this.sessionPrincipal;
+      const before = refused !== storeNode ? (await this.syncState?.listLocalNodes?.())?.find((entry) => entry.nodeId === refused) : void 0;
       if (typeof principal === "string") {
         await this.syncState?.recordLocalNodeRefusedFor?.(refused, principal);
       }
       if (refused !== storeNode) {
+        if (before && await this.reauthorRefusedAdoption(refused, before)) return;
         const node = (await this.syncState?.listLocalNodes?.())?.find(
           (entry) => entry.nodeId === refused
         );
@@ -7537,6 +7539,31 @@ var SyncEngine = class {
       });
     }
   }
+  /**
+   * The server refused an adopted node that belongs to the signed-in user (the app
+   * assigned its held writes, or it was created for them) but that no claims-aware
+   * server ever accepted: typically a beta.12 node whose history the server recorded no
+   * owner for, and whose id is not this device's verified id, so no handover applies.
+   * Holding it would hold the user's own writes forever. Like the store's own node
+   * (RT-21), its never-sent writes are re-authored under a fresh node of the user's,
+   * which a later session adopts and uploads; what a beta.12 server acknowledged under
+   * the node is not re-authored (it is stored there already).
+   *
+   * @returns Whether the node's writes were re-authored (false: the caller holds it)
+   */
+  async reauthorRefusedAdoption(refused, node) {
+    const reauthor = this.store.reauthorLocalNode?.bind(this.store);
+    const principal = this.sessionPrincipal;
+    if (!reauthor || typeof principal !== "string") return false;
+    if ((node.principal ?? null) !== principal || node.held) return false;
+    if (node.binding !== "app" && node.binding !== "fresh") return false;
+    if (node.accepted || await this.wasNodeAccepted(refused)) return false;
+    await this.syncState?.markLocalNodeRefused?.(refused, false);
+    this.endAdoption();
+    await this.rotateUnsent(refused, (ids) => reauthor(refused, ids, principal));
+    this.emitter?.emit({ type: "sync:local-node", nodeId: refused, action: "adoption-refused" });
+    return true;
+  }
   /** RT-38: hold a refused, previously accepted node's writes and move to another node. */
   async holdNodeAndSwitch(refused, rotate) {
     await this.syncState?.markLocalNodeRefused?.(refused, true);
@@ -8438,6 +8465,9 @@ var SyncEngine = class {
     if (isCredentialEndingCode(msg.code)) {
       this.credentialRefreshRequired = true;
     }
+    if (msg.code === "NODE_ID_CLAIMED" && msg.nodeOwnership === "other-principal" && this.currentNodeId() === this.store.getNodeId()) {
+      this.store.setPinnedNodeOwnedElsewhere?.(true);
+    }
     if (msg.code === "NODE_ID_CLAIMED" && !this.nodeRotation) {
       this.nodeRotation = this.rotateNodeIdentity().finally(() => {
         this.nodeRotation = null;
@@ -9307,6 +9337,7 @@ var SyncEngine = class {
   async recordNodeAccepted(nodeId) {
     this.memoryAcceptedNodes.add(nodeId);
     this.heldNodeIds.delete(nodeId);
+    if (nodeId === this.store.getNodeId()) this.store.setPinnedNodeOwnedElsewhere?.(false);
     try {
       await this.syncState?.markLocalNodeAccepted?.(nodeId);
       const principal = this.sessionPrincipal;