@peers-app/peers-sdk 0.30.0 → 0.30.2

package/dist/data/files/files.d.ts

@@ -5,8 +5,10 @@ import { FileReadStream } from "./file-read-stream";
 import { FileWriteStream } from "./file-write-stream";
 /**
  * The chunked, content-hashed file store of one data context. Rows describe files; the bytes
- * live in chunks on disk, shared by hash, and a device fetches a missing chunk from a connected
- * device when it reads. Write through {@link FilesTable.saveFile}, never the table methods.
+ * live in chunks in the account's chunk store, shared by hash, and a device fetches a missing
+ * chunk from a connected device when it reads. A file's id is derived from its content, and its row never changes.
+ * Write through {@link FilesTable.saveFile}, never the table methods. The rules are checked here
+ * in every context, and by every device on the rows it receives in a group (`file-rows.ts`).
  */
 export declare class FilesTable extends Table<IFile> {
     /** @deprecated Direct inserts forbidden; use saveFile() or saveFileRecord() */
@@ -20,14 +22,19 @@ export declare class FilesTable extends Table<IFile> {
     /**
      * Start writing a file in chunks; `finalize()` saves its row.
      *
-     * @param metadata - The new file's id, name, size and MIME type.
+     * @param metadata - The new file's name, MIME type and `keep`.
      */
     createWriteStream(metadata: IFileInput): Promise<FileWriteStream>;
     /**
-     * Note: Use `saveFile` to write a file to disk. This method is for managing
-     * the file metadata in the database which is done automatically by `saveFile`.
-     * @param fileRecord The file record to save to the database
-     * @returns The inserted file record
+     * Store a file's row as it is, after the checks every device makes: a new row must have the
+     * id derived from its content (or be a legacy row), and a stored row never changes. Storing
+     * an existing ordinary file again writes nothing; saving a runtime bundle publishes a newer
+     * synced snapshot, including when restoring a deleted row. Writers use {@link saveFile} or a
+     * write stream; this is for copying a row from another context with its id.
+     *
+     * @param fileRecord - The row.
+     * @returns The row as stored.
+     * @throws When the row is refused, or a different row has its id.
      */
     saveFileRecord(fileRecord: IFile): Promise<IFile>;
     /**
@@ -40,11 +47,12 @@ export declare class FilesTable extends Table<IFile> {
      */
     openReadStream(fileId: string, preloadChunksCount?: number, skipVerification?: boolean): Promise<FileReadStream | null>;
     /**
-     * Save a whole file: chunk it, store the chunks and write its row.
+     * Save a whole file: chunk it, store the chunks and write its row. The same bytes, name, MIME
+     * type and `keep` give the same file, whose chunks are stored again.
      *
-     * @param metaData - The file's id, name and MIME type. `fileSize` is taken from `data`.
+     * @param metaData - The file's name, MIME type and `keep` (true unless given).
      * @param data - The bytes, or a string saved as UTF-8.
-     * @returns The saved row.
+     * @returns The file's row.
      */
     saveFile(metaData: IFileInput, data: Uint8Array | string): Promise<IFile>;
     /**
@@ -58,25 +66,21 @@ export declare class FilesTable extends Table<IFile> {
         skipVerification?: boolean;
     }): Promise<Uint8Array | null>;
     /**
-     * Delete a file's row, and its index file's. Chunks stay on disk: other files may share them.
-     *
-     * @param fileId - File to delete. A missing file is not an error.
-     */
-    deleteFile(fileId: string): Promise<void>;
-    /**
-     * Save a large file's chunk hashes as an index file, itself chunked when large.
+     * Make sure this device has every chunk of a file, fetching the missing ones from connected
+     * devices {@link FILE_FETCH_WINDOW} at a time, without reading the file into memory.
      *
-     * @param chunkHashes - The large file's chunk hashes, in order.
-     * @returns The index file's id.
+     * @param fileId - File to fetch.
+     * @returns Whether every chunk is now on this device; false for a file with no row.
      */
-    createIndexFileRecursively(chunkHashes: string[]): Promise<string>;
+    fetchFile(fileId: string): Promise<boolean>;
     /**
-     * Read a large file's chunk hashes back from its index file.
+     * Delete a runtime bundle row, which the runtime owns. Every other file is permanent: it's
+     * collected once nothing references it. Chunks stay stored, since other files may share them.
      *
-     * @param indexFileId - The index file's id.
-     * @returns The chunk hashes, in order.
+     * @param fileId - File to delete. A missing file is not an error.
+     * @throws When the file isn't a runtime bundle row.
      */
-    loadChunkHashesRecursively(indexFileId: string): Promise<string[]>;
+    deleteFile(fileId: string): Promise<void>;
 }
 /**
  * The Files table of a data context.

package/dist/data/files/files.js

@@ -4,16 +4,19 @@ exports.FilesTable = void 0;
 exports.Files = Files;
 const user_context_singleton_1 = require("../../context/user-context-singleton");
 const rpc_types_1 = require("../../rpc-types");
-const utils_1 = require("../../utils");
 const orm_1 = require("../orm");
 const table_definitions_system_1 = require("../orm/table-definitions.system");
+const chunk_store_1 = require("./chunk-store");
 const file_types_1 = require("./file.types");
 const file_read_stream_1 = require("./file-read-stream");
+const file_rows_1 = require("./file-rows");
 const file_write_stream_1 = require("./file-write-stream");
 /**
  * The chunked, content-hashed file store of one data context. Rows describe files; the bytes
- * live in chunks on disk, shared by hash, and a device fetches a missing chunk from a connected
- * device when it reads. Write through {@link FilesTable.saveFile}, never the table methods.
+ * live in chunks in the account's chunk store, shared by hash, and a device fetches a missing
+ * chunk from a connected device when it reads. A file's id is derived from its content, and its row never changes.
+ * Write through {@link FilesTable.saveFile}, never the table methods. The rules are checked here
+ * in every context, and by every device on the rows it receives in a group (`file-rows.ts`).
  */
 class FilesTable extends orm_1.Table {
     /** @deprecated Direct inserts forbidden; use saveFile() or saveFileRecord() */
@@ -35,19 +38,39 @@ class FilesTable extends orm_1.Table {
     /**
      * Start writing a file in chunks; `finalize()` saves its row.
      *
-     * @param metadata - The new file's id, name, size and MIME type.
+     * @param metadata - The new file's name, MIME type and `keep`.
      */
     async createWriteStream(metadata) {
         return new file_write_stream_1.FileWriteStream(metadata, this);
     }
     /**
-     * Note: Use `saveFile` to write a file to disk. This method is for managing
-     * the file metadata in the database which is done automatically by `saveFile`.
-     * @param fileRecord The file record to save to the database
-     * @returns The inserted file record
+     * Store a file's row as it is, after the checks every device makes: a new row must have the
+     * id derived from its content (or be a legacy row), and a stored row never changes. Storing
+     * an existing ordinary file again writes nothing; saving a runtime bundle publishes a newer
+     * synced snapshot, including when restoring a deleted row. Writers use {@link saveFile} or a
+     * write stream; this is for copying a row from another context with its id.
+     *
+     * @param fileRecord - The row.
+     * @returns The row as stored.
+     * @throws When the row is refused, or a different row has its id.
      */
     async saveFileRecord(fileRecord) {
-        return await super.save(fileRecord);
+        const existing = await super.get(fileRecord.fileId);
+        (0, file_rows_1.checkFileWrite)(existing, fileRecord, fileRecord.fileId);
+        const runtimeBundle = (0, file_rows_1.isRuntimeBundleFile)(fileRecord);
+        if (existing && !runtimeBundle)
+            return existing;
+        // An ordinary file inserted since the read must stay untouched. Bundles can be rewritten
+        // identically so their pending reuse reaches collection's write watch and other devices.
+        const saved = await super.save(existing ?? fileRecord, {
+            insertOnly: !runtimeBundle || !existing,
+            // Even when still present locally, a reused bundle needs a new snapshot: another device
+            // may have deleted it, and collection's write watch must protect this pending reuse.
+            restoreIfDeleted: runtimeBundle,
+            saveAsSnapshot: runtimeBundle,
+        });
+        (0, file_rows_1.checkFileWrite)(saved, fileRecord, fileRecord.fileId);
+        return saved;
     }
     /**
      * Open a file for chunked reads.
@@ -62,27 +85,19 @@ class FilesTable extends orm_1.Table {
         if (!fileRecord) {
             return null;
         }
-        return new file_read_stream_1.FileReadStream(fileRecord, this, preloadChunksCount, skipVerification);
+        return new file_read_stream_1.FileReadStream(fileRecord, preloadChunksCount, skipVerification);
     }
     /**
-     * Save a whole file: chunk it, store the chunks and write its row.
+     * Save a whole file: chunk it, store the chunks and write its row. The same bytes, name, MIME
+     * type and `keep` give the same file, whose chunks are stored again.
      *
-     * @param metaData - The file's id, name and MIME type. `fileSize` is taken from `data`.
+     * @param metaData - The file's name, MIME type and `keep` (true unless given).
      * @param data - The bytes, or a string saved as UTF-8.
-     * @returns The saved row.
+     * @returns The file's row.
      */
     async saveFile(metaData, data) {
-        // Use FileWriteStream internally to ensure consistent chunking logic
-        const writeStream = await this.createWriteStream({
-            ...metaData,
-            fileSize: data.length, // Set the actual file size
-        });
-        // Write the entire data to the stream
-        if (typeof data === "string") {
-            data = new Uint8Array(Buffer.from(data, "utf8"));
-        }
-        await writeStream.write(data);
-        // Finalize and return the result
+        const writeStream = await this.createWriteStream(metaData);
+        await writeStream.write(typeof data === "string" ? new Uint8Array(Buffer.from(data, "utf8")) : data);
         return await writeStream.finalize();
     }
     /**
@@ -93,8 +108,7 @@ class FilesTable extends orm_1.Table {
      * @returns The bytes, or null when no such file row exists.
      */
     async getFileContents(fileId, opts) {
-        // Use FileReadStream internally to ensure consistent chunk reading logic
-        const readStream = await this.openReadStream(fileId, undefined, opts?.skipVerification);
+        const readStream = await this.openReadStream(fileId, file_types_1.FILE_FETCH_WINDOW, opts?.skipVerification);
         if (!readStream) {
             return null;
         }
@@ -102,65 +116,43 @@ class FilesTable extends orm_1.Table {
         return await readStream.readAll();
     }
     /**
-     * Delete a file's row, and its index file's. Chunks stay on disk: other files may share them.
+     * Make sure this device has every chunk of a file, fetching the missing ones from connected
+     * devices {@link FILE_FETCH_WINDOW} at a time, without reading the file into memory.
      *
-     * @param fileId - File to delete. A missing file is not an error.
+     * @param fileId - File to fetch.
+     * @returns Whether every chunk is now on this device; false for a file with no row.
      */
-    async deleteFile(fileId) {
-        // Get file metadata from database
-        const fileRecord = await super.get(fileId);
-        if (!fileRecord) {
-            return; // File doesn't exist
+    async fetchFile(fileId) {
+        const file = await this.get(fileId);
+        if (!file)
+            return false;
+        const store = await (0, chunk_store_1.getChunkStore)();
+        const chunkHashes = file.chunkHashes ?? [];
+        let complete = chunkHashes.length > 0 || file.fileSize === 0;
+        for (let start = 0; start < chunkHashes.length; start += file_types_1.FILE_FETCH_WINDOW) {
+            const window = chunkHashes.slice(start, start + file_types_1.FILE_FETCH_WINDOW);
+            const fetched = await Promise.all(window.map(async (hash) => (await store.has(hash)) ||
+                // The downloader checks a downloaded chunk's hash and stores it.
+                (await (0, chunk_store_1.downloadChunk)(hash).catch(() => null)) !== null));
+            if (fetched.includes(false))
+                complete = false;
         }
-        // If this file has an index file, recursively delete it first
-        if (fileRecord.indexFileId) {
-            await this.deleteFile(fileRecord.indexFileId);
-        }
-        // Note: We don't delete chunks since they may be shared with other files
-        // TODO Chunk cleanup needs to be implemented as a separate garbage collection process
-        // that removes chunks not referenced by any files
-        // Delete file record from database
-        await super.delete(fileId);
+        return complete;
     }
     /**
-     * Save a large file's chunk hashes as an index file, itself chunked when large.
+     * Delete a runtime bundle row, which the runtime owns. Every other file is permanent: it's
+     * collected once nothing references it. Chunks stay stored, since other files may share them.
      *
-     * @param chunkHashes - The large file's chunk hashes, in order.
-     * @returns The index file's id.
-     */
-    async createIndexFileRecursively(chunkHashes) {
-        // Create JSON content with chunk hashes
-        const indexContent = JSON.stringify(chunkHashes);
-        const indexBuffer = Buffer.from(indexContent, "utf8");
-        // Generate a new file ID for the index file
-        const indexFileId = (0, utils_1.newid)();
-        // Create metadata for the index file
-        const indexMetadata = {
-            fileId: indexFileId,
-            name: `index-${indexFileId}.json`,
-            fileSize: indexBuffer.length,
-            mimeType: "application/json",
-            isIndexFile: true,
-        };
-        // Recursively save the index file (this will chunk it if it's too large)
-        await this.saveFile(indexMetadata, indexBuffer);
-        return indexFileId;
-    }
-    /**
-     * Read a large file's chunk hashes back from its index file.
-     *
-     * @param indexFileId - The index file's id.
-     * @returns The chunk hashes, in order.
+     * @param fileId - File to delete. A missing file is not an error.
+     * @throws When the file isn't a runtime bundle row.
      */
-    async loadChunkHashesRecursively(indexFileId) {
-        // Recursively load the index file
-        const indexBuffer = await this.getFileContents(indexFileId);
-        if (!indexBuffer) {
-            throw new Error(`Index file not found: ${indexFileId}`);
+    async deleteFile(fileId) {
+        const fileRecord = await super.get(fileId);
+        if (!fileRecord) {
+            return;
         }
-        // Parse chunk hashes from JSON
-        const indexContent = Buffer.from(indexBuffer).toString("utf8");
-        return JSON.parse(indexContent);
+        (0, file_rows_1.checkFileWrite)(fileRecord, undefined, fileId);
+        await super.delete(fileId);
     }
 }
 exports.FilesTable = FilesTable;
@@ -184,14 +176,8 @@ rpc_types_1.rpcServerCalls.getFileContentsBase64 = async (fileId) => {
     return Buffer.from(data).toString("base64");
 };
 rpc_types_1.rpcServerCalls.saveFile = async (input) => {
-    const fileId = input.fileId || (0, utils_1.newid)();
     const encoding = input.encoding || "utf8";
     const dataBuffer = encoding === "base64" ? Buffer.from(input.data, "base64") : Buffer.from(input.data, "utf8");
-    const file = await Files().saveFile({
-        fileId,
-        name: input.name,
-        fileSize: dataBuffer.length,
-        mimeType: input.mimeType,
-    }, new Uint8Array(dataBuffer));
-    return file;
+    // Kept: Family Hub 0.3.x doesn't declare its file fields, so nothing would reference these.
+    return await Files().saveFile({ name: input.name, mimeType: input.mimeType, keep: true }, new Uint8Array(dataBuffer));
 };

package/dist/data/files/index.d.ts

@@ -1,4 +1,6 @@
+export * from "./chunk-store";
 export * from "./file.types";
 export { FileReadStream } from "./file-read-stream";
+export * from "./file-rows";
 export { FileWriteStream } from "./file-write-stream";
 export * from "./files";

package/dist/data/files/index.js

@@ -15,9 +15,11 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FileWriteStream = exports.FileReadStream = void 0;
+__exportStar(require("./chunk-store"), exports);
 __exportStar(require("./file.types"), exports);
 var file_read_stream_1 = require("./file-read-stream");
 Object.defineProperty(exports, "FileReadStream", { enumerable: true, get: function () { return file_read_stream_1.FileReadStream; } });
+__exportStar(require("./file-rows"), exports);
 var file_write_stream_1 = require("./file-write-stream");
 Object.defineProperty(exports, "FileWriteStream", { enumerable: true, get: function () { return file_write_stream_1.FileWriteStream; } });
 __exportStar(require("./files"), exports);

package/dist/data/groups.d.ts

@@ -12,6 +12,13 @@ export declare const groupSchema: z.ZodObject<{
     iconClassName: z.ZodOptional<z.ZodString>;
     publicRole: z.ZodOptional<z.ZodNativeEnum<typeof GroupMemberRole>>;
     disabled: z.ZodOptional<z.ZodBoolean>;
+    fileRetention: z.ZodOptional<z.ZodObject<{
+        days: z.ZodUnion<[z.ZodNumber, z.ZodLiteral<"never">]>;
+    }, "strip", z.ZodTypeAny, {
+        days: number | "never";
+    }, {
+        days: number | "never";
+    }>>;
     founderUserId: z.ZodEffects<z.ZodString, string, string>;
     signature: z.ZodString;
     signedAt: z.ZodOptional<z.ZodNumber>;
@@ -29,6 +36,9 @@ export declare const groupSchema: z.ZodObject<{
     iconClassName?: string | undefined;
     signedAt?: number | undefined;
     publicRole?: GroupMemberRole | undefined;
+    fileRetention?: {
+        days: number | "never";
+    } | undefined;
 }, {
     name: string;
     description: string;
@@ -41,6 +51,9 @@ export declare const groupSchema: z.ZodObject<{
     iconClassName?: string | undefined;
     signedAt?: number | undefined;
     publicRole?: GroupMemberRole | undefined;
+    fileRetention?: {
+        days: number | "never";
+    } | undefined;
 }>;
 /** A signed group record shared between personal and group contexts. */
 export type IGroup = z.infer<typeof groupSchema>;

package/dist/data/groups.js

@@ -60,6 +60,12 @@ exports.groupSchema = zod_1.z.object({
         .optional()
         .describe("Whether the group is publicly readable"),
     disabled: zod_1.z.boolean().optional().describe("Whether the group is currently disabled"),
+    // An object column stores JSON, so the number reads back as signed; a union would be a TEXT
+    // column that returns "30.0", and the row's signature would then fail.
+    fileRetention: zod_1.z
+        .object({ days: zod_1.z.union([zod_1.z.number().int().nonnegative(), zod_1.z.literal("never")]) })
+        .optional()
+        .describe("Days to retain unreferenced files before the grace period, or never; absent means 30 days."),
     founderUserId: zod_types_1.zodPeerId.describe("The user ID of the group founder"),
     signature: zod_1.z.string().describe("The signed hash of this data excluding the signature itself"),
     signedAt: zod_1.z

package/dist/data/index.d.ts

@@ -4,6 +4,7 @@ export * from "./authority-write-checks";
 export * from "./change-tracking";
 export * from "./channels";
 export * from "./create-group";
+export * from "./derived-row-id";
 export * from "./device-sync-info";
 export * from "./devices";
 export * from "./embeddings";

package/dist/data/index.js

@@ -20,6 +20,7 @@ __exportStar(require("./authority-write-checks"), exports);
 __exportStar(require("./change-tracking"), exports);
 __exportStar(require("./channels"), exports);
 __exportStar(require("./create-group"), exports);
+__exportStar(require("./derived-row-id"), exports);
 __exportStar(require("./device-sync-info"), exports);
 __exportStar(require("./devices"), exports);
 __exportStar(require("./embeddings"), exports);

package/dist/data/orm/write-checks.d.ts

@@ -89,3 +89,18 @@ export declare function deletedSignedAt(tableName: string, context: ITableWriteC
  * @param reason - Why, for logs and the sync recovery queue.
  */
 export declare function writeNotAuthorized(tableName: string, reason: string): Error;
+/**
+ * A {@link writeNotAuthorized} refusal that no data arriving later can lift, unlike one that
+ * waits on Users, Groups or GroupMembers rows still to sync. Sync keeps no recovery entry for
+ * such a refused delete of a record it has no row or other history for.
+ *
+ * @param tableName - Table the write was for.
+ * @param reason - Why, for logs.
+ */
+export declare function writeRefusedForGood(tableName: string, reason: string): Error;
+/**
+ * Whether an error is a {@link writeRefusedForGood} refusal.
+ *
+ * @param error - The error a write check threw.
+ */
+export declare function isWriteRefusedForGood(error: unknown): boolean;

package/dist/data/orm/write-checks.js

@@ -7,6 +7,8 @@ exports.checkLocalSave = checkLocalSave;
 exports.signingStamp = signingStamp;
 exports.deletedSignedAt = deletedSignedAt;
 exports.writeNotAuthorized = writeNotAuthorized;
+exports.writeRefusedForGood = writeRefusedForGood;
+exports.isWriteRefusedForGood = isWriteRefusedForGood;
 /**
  * Prefix of every refusal from a {@link TableWriteCheck}. Sync recovery parks a change refused
  * with it, and checks it again only from local history, when the group's authority changes.
@@ -120,3 +122,22 @@ async function deletedSignedAt(tableName, context, existing) {
 function writeNotAuthorized(tableName, reason) {
     return new Error(`${exports.WRITE_NOT_AUTHORIZED}: ${tableName}: ${reason}`);
 }
+/**
+ * A {@link writeNotAuthorized} refusal that no data arriving later can lift, unlike one that
+ * waits on Users, Groups or GroupMembers rows still to sync. Sync keeps no recovery entry for
+ * such a refused delete of a record it has no row or other history for.
+ *
+ * @param tableName - Table the write was for.
+ * @param reason - Why, for logs.
+ */
+function writeRefusedForGood(tableName, reason) {
+    return Object.assign(writeNotAuthorized(tableName, reason), { refusedForGood: true });
+}
+/**
+ * Whether an error is a {@link writeRefusedForGood} refusal.
+ *
+ * @param error - The error a write check threw.
+ */
+function isWriteRefusedForGood(error) {
+    return error?.refusedForGood === true;
+}

package/dist/define/system-contracts.d.ts

@@ -140,10 +140,17 @@ export declare const SystemContractCatalog: import("./contract-ref").IContractRe
 }>;
 /**
  * System Files v1: save a file and read it back, in the package's own data context. Files sync
- * to the context's other devices. Declare it with `pkg.consumes(SystemFiles)`.
+ * to the context's other devices. Declare it with `pkg.consumes(SystemFiles)`; save a file over
+ * 8 MiB with {@link saveWholeFile}.
  */
 export declare const SystemFiles: import("./contract-ref").IContractRef<{
     save(input: import("../contracts/system/files-shared").IFilesSaveInput): Promise<import("../contracts/system/files-shared").IFilesSaveResult>;
     read(input: import("../contracts/system/files-shared").IFilesReadInput): Promise<import("../contracts/system/files-shared").IFilesReadResult>;
+    startSave(input: import("../contracts/system/files-shared").IFilesStartSaveInput): Promise<import("../contracts/system/files-shared").IFilesSaveSession>;
+    appendSave(input: import("../contracts/system/files-shared").IFilesAppendSaveInput): Promise<import("../contracts/system/files-shared").IFilesAppendSaveResult>;
+    finishSave(input: import("../contracts/system/files-shared").IFilesSaveSession): Promise<import("../contracts/system/files-shared").IFilesSaveResult>;
+    cancelSave(input: import("../contracts/system/files-shared").IFilesSaveSession): Promise<{
+        cancelled: boolean;
+    }>;
 }>;
-export { FILES_MAX_CALL_BYTES, type IFilesReadInput, type IFilesReadResult, type IFilesSaveInput, type IFilesSaveResult, readWholeFile, } from "../contracts/system/files-shared";
+export { FILES_MAX_CALL_BYTES, FILES_MAX_FILE_BYTES, FILES_WHOLE_READ_MAX_BYTES, type FileBytesSource, type IFilesAppendSaveInput, type IFilesAppendSaveResult, type IFilesReadInput, type IFilesReadResult, type IFilesSaveInput, type IFilesSaveResult, type IFilesSaveSession, type IFilesStartSaveInput, readWholeFile, saveWholeFile, } from "../contracts/system/files-shared";

package/dist/define/system-contracts.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.readWholeFile = exports.FILES_MAX_CALL_BYTES = exports.SystemFiles = exports.SystemContractCatalog = exports.SystemScheduler = exports.SystemGroupMembers = exports.SystemIdentity = exports.SystemHttp = void 0;
+exports.saveWholeFile = exports.readWholeFile = exports.FILES_WHOLE_READ_MAX_BYTES = exports.FILES_MAX_FILE_BYTES = exports.FILES_MAX_CALL_BYTES = exports.SystemFiles = exports.SystemContractCatalog = exports.SystemScheduler = exports.SystemGroupMembers = exports.SystemIdentity = exports.SystemHttp = void 0;
 const system_ids_1 = require("../system-ids");
 const contract_ref_1 = require("./contract-ref");
 /**
@@ -25,9 +25,13 @@ exports.SystemScheduler = (0, contract_ref_1.contractRef)(system_ids_1.scheduler
 exports.SystemContractCatalog = (0, contract_ref_1.contractRef)(system_ids_1.contractCatalogContractId, 1);
 /**
  * System Files v1: save a file and read it back, in the package's own data context. Files sync
- * to the context's other devices. Declare it with `pkg.consumes(SystemFiles)`.
+ * to the context's other devices. Declare it with `pkg.consumes(SystemFiles)`; save a file over
+ * 8 MiB with {@link saveWholeFile}.
  */
 exports.SystemFiles = (0, contract_ref_1.contractRef)(system_ids_1.filesContractId, 1);
 var files_shared_1 = require("../contracts/system/files-shared");
 Object.defineProperty(exports, "FILES_MAX_CALL_BYTES", { enumerable: true, get: function () { return files_shared_1.FILES_MAX_CALL_BYTES; } });
+Object.defineProperty(exports, "FILES_MAX_FILE_BYTES", { enumerable: true, get: function () { return files_shared_1.FILES_MAX_FILE_BYTES; } });
+Object.defineProperty(exports, "FILES_WHOLE_READ_MAX_BYTES", { enumerable: true, get: function () { return files_shared_1.FILES_WHOLE_READ_MAX_BYTES; } });
 Object.defineProperty(exports, "readWholeFile", { enumerable: true, get: function () { return files_shared_1.readWholeFile; } });
+Object.defineProperty(exports, "saveWholeFile", { enumerable: true, get: function () { return files_shared_1.saveWholeFile; } });

package/dist/device-pairing/types.d.ts

@@ -1630,8 +1630,8 @@ export declare const devicePairingStateSchema: z.ZodObject<{
     code?: string | undefined;
     error?: string | undefined;
     role?: "source" | "destination" | undefined;
-    expiresAt?: number | undefined;
     sessionId?: string | undefined;
+    expiresAt?: number | undefined;
     remoteDevice?: {
         userName?: string | undefined;
         deviceName?: string | undefined;
@@ -1643,8 +1643,8 @@ export declare const devicePairingStateSchema: z.ZodObject<{
     code?: string | undefined;
     error?: string | undefined;
     role?: "source" | "destination" | undefined;
-    expiresAt?: number | undefined;
     sessionId?: string | undefined;
+    expiresAt?: number | undefined;
     remoteDevice?: {
         userName?: string | undefined;
         deviceName?: string | undefined;

package/dist/invites/invite-messages.d.ts

@@ -344,6 +344,13 @@ export declare const groupApprovalSchema: z.ZodObject<{
         iconClassName: z.ZodOptional<z.ZodString>;
         publicRole: z.ZodOptional<z.ZodNativeEnum<typeof import("../data").GroupMemberRole>>;
         disabled: z.ZodOptional<z.ZodBoolean>;
+        fileRetention: z.ZodOptional<z.ZodObject<{
+            days: z.ZodUnion<[z.ZodNumber, z.ZodLiteral<"never">]>;
+        }, "strip", z.ZodTypeAny, {
+            days: number | "never";
+        }, {
+            days: number | "never";
+        }>>;
         founderUserId: z.ZodEffects<z.ZodString, string, string>;
         signature: z.ZodString;
         signedAt: z.ZodOptional<z.ZodNumber>;
@@ -361,6 +368,9 @@ export declare const groupApprovalSchema: z.ZodObject<{
         iconClassName?: string | undefined;
         signedAt?: number | undefined;
         publicRole?: import("../data").GroupMemberRole | undefined;
+        fileRetention?: {
+            days: number | "never";
+        } | undefined;
     }, {
         name: string;
         description: string;
@@ -373,6 +383,9 @@ export declare const groupApprovalSchema: z.ZodObject<{
         iconClassName?: string | undefined;
         signedAt?: number | undefined;
         publicRole?: import("../data").GroupMemberRole | undefined;
+        fileRetention?: {
+            days: number | "never";
+        } | undefined;
     }>>;
     membership: z.ZodLazy<z.ZodObject<{
         groupMemberId: z.ZodEffects<z.ZodString, string, string>;
@@ -654,6 +667,9 @@ export declare const groupApprovalSchema: z.ZodObject<{
         iconClassName?: string | undefined;
         signedAt?: number | undefined;
         publicRole?: import("../data").GroupMemberRole | undefined;
+        fileRetention?: {
+            days: number | "never";
+        } | undefined;
     };
     seed: {
         users: {
@@ -734,6 +750,9 @@ export declare const groupApprovalSchema: z.ZodObject<{
         iconClassName?: string | undefined;
         signedAt?: number | undefined;
         publicRole?: import("../data").GroupMemberRole | undefined;
+        fileRetention?: {
+            days: number | "never";
+        } | undefined;
     };
     seed: {
         users: {
@@ -1296,6 +1315,13 @@ export declare const inviteMessageSchema: z.ZodDiscriminatedUnion<"kind", [z.Zod
         iconClassName: z.ZodOptional<z.ZodString>;
         publicRole: z.ZodOptional<z.ZodNativeEnum<typeof import("../data").GroupMemberRole>>;
         disabled: z.ZodOptional<z.ZodBoolean>;
+        fileRetention: z.ZodOptional<z.ZodObject<{
+            days: z.ZodUnion<[z.ZodNumber, z.ZodLiteral<"never">]>;
+        }, "strip", z.ZodTypeAny, {
+            days: number | "never";
+        }, {
+            days: number | "never";
+        }>>;
         founderUserId: z.ZodEffects<z.ZodString, string, string>;
         signature: z.ZodString;
         signedAt: z.ZodOptional<z.ZodNumber>;
@@ -1313,6 +1339,9 @@ export declare const inviteMessageSchema: z.ZodDiscriminatedUnion<"kind", [z.Zod
         iconClassName?: string | undefined;
         signedAt?: number | undefined;
         publicRole?: import("../data").GroupMemberRole | undefined;
+        fileRetention?: {
+            days: number | "never";
+        } | undefined;
     }, {
         name: string;
         description: string;
@@ -1325,6 +1354,9 @@ export declare const inviteMessageSchema: z.ZodDiscriminatedUnion<"kind", [z.Zod
         iconClassName?: string | undefined;
         signedAt?: number | undefined;
         publicRole?: import("../data").GroupMemberRole | undefined;
+        fileRetention?: {
+            days: number | "never";
+        } | undefined;
     }>>;
     membership: z.ZodLazy<z.ZodObject<{
         groupMemberId: z.ZodEffects<z.ZodString, string, string>;
@@ -1606,6 +1638,9 @@ export declare const inviteMessageSchema: z.ZodDiscriminatedUnion<"kind", [z.Zod
         iconClassName?: string | undefined;
         signedAt?: number | undefined;
         publicRole?: import("../data").GroupMemberRole | undefined;
+        fileRetention?: {
+            days: number | "never";
+        } | undefined;
     };
     seed: {
         users: {
@@ -1686,6 +1721,9 @@ export declare const inviteMessageSchema: z.ZodDiscriminatedUnion<"kind", [z.Zod
         iconClassName?: string | undefined;
         signedAt?: number | undefined;
         publicRole?: import("../data").GroupMemberRole | undefined;
+        fileRetention?: {
+            days: number | "never";
+        } | undefined;
     };
     seed: {
         users: {