@powerhousedao/reactor 6.2.2-dev.42 → 6.2.2-dev.43

package/dist/{drive-container-types-BJCKXJwH.js → drive-container-types-CU1ZUfD1.js}

@@ -1,5 +1,5 @@
 import { n as ReactorEventTypes, t as EventBusAggregateError } from "./types-DMKLa0Ok.js";
-import { AUTH_ACTION_TYPES, AUTH_DENIED_BY_GRANT_REASON, AUTH_NO_GRANT_REASON, AUTH_VERSION_UNSUPPORTED_REASON, DOCUMENT_DELETED_REASON, DowngradeNotSupportedError, appendWithoutApplying, applyAuthAction, applyDeleteDocumentAction, applyDeleteDocumentAction as applyDeleteDocumentAction$1, applyUpgradeDocumentAction, applyUpgradeDocumentAction as applyUpgradeDocumentAction$1, baseReducerVersion, createPresignedHeader, decide, defaultBaseState, deriveOperationId, evaluate, garbageCollect, hashDocumentStateForScope, isDenied, isUndoRedo, sortOperations } from "@powerhousedao/shared/document-model";
+import { AUTH_ACTION_TYPES, AUTH_DENIED_BY_GRANT_REASON, AUTH_NO_GRANT_REASON, AUTH_VERSION_UNSUPPORTED_REASON, DOCUMENT_DELETED_REASON, DowngradeNotSupportedError as DowngradeNotSupportedError$1, appendWithoutApplying, applyAuthAction, applyDeleteDocumentAction, applyDeleteDocumentAction as applyDeleteDocumentAction$1, applyUpgradeDocumentAction, applyUpgradeDocumentAction as applyUpgradeDocumentAction$1, baseReducerVersion, createPresignedHeader, decide, defaultBaseState, deriveOperationId, evaluate, garbageCollect, hashDocumentStateForScope, isDenied, isUndoRedo, normalizeDocumentModelVersion, sortOperations } from "@powerhousedao/shared/document-model";
 import { v4 } from "uuid";
 import { Migrator, sql } from "kysely";
 //#region \0rolldown/runtime.js
@@ -182,6 +182,28 @@ var InvalidSignatureError = class InvalidSignatureError extends Error {
 	}
 };
 /**
+* An UPGRADE_DOCUMENT action's preconditions (fromVersion and the per-scope
+* revision snapshot) did not match the document state the executor loaded.
+*
+* Terminal rather than retryable: the action carries the client's snapshot,
+* which stays stale no matter how often the job re-runs. The client is
+* expected to re-read the document and submit a fresh action instead.
+*/
+var UpgradePreconditionFailedError = class UpgradePreconditionFailedError extends Error {
+	documentId;
+	detail;
+	constructor(documentId, detail) {
+		super(`Upgrade precondition failed for document ${documentId}: ${detail}`);
+		this.name = "UpgradePreconditionFailedError";
+		this.documentId = documentId;
+		this.detail = detail;
+		Error.captureStackTrace(this, UpgradePreconditionFailedError);
+	}
+	static isError(error) {
+		return Error.isError(error) && error.name === "UpgradePreconditionFailedError";
+	}
+};
+/**
 * Error thrown when a document is not found (no operations exist for the document ID).
 */
 var DocumentNotFoundError = class DocumentNotFoundError extends Error {
@@ -1097,7 +1119,7 @@ function keyframeRevision(keyframe, documentId, scope) {
 }
 function extractModuleVersion(doc) {
 	const v = doc.state.document.version;
-	return v === 0 ? void 0 : v;
+	return normalizeDocumentModelVersion(v);
 }
 /** The highest revision held, latest push winning a tie. */
 function highestRevision(snapshots) {
@@ -1360,6 +1382,18 @@ var KyselyWriteCache = class KyselyWriteCache {
 			document: keyframe.document
 		};
 	}
+	/**
+	* Rebuilds a scope from a keyframe or from the whole operation history.
+	*
+	* The document scope is always rebuilt first, because it carries the type,
+	* the upgrades and the deletion marker. Its version-changing upgrades are not
+	* applied there though: an upgrade reducer must see the state the requested
+	* scope has reached at that upgrade's boundary, so each one is held back and
+	* applied when the replay below crosses the boundary that
+	* resolveModuleVersionForOp derives from it. Upgrades whose boundary lies past
+	* the last replayed operation are applied at the end. Creation-time 0->N seed
+	* upgrades carry the initial state, so they still apply immediately.
+	*/
 	async coldMissRebuild(documentId, scope, branch, targetRevision, signal) {
 		const effectiveTargetRevision = targetRevision || Number.MAX_SAFE_INTEGER;
 		const keyframe = await this.findNearestKeyframe(documentId, scope, branch, effectiveTargetRevision, signal);
@@ -1368,6 +1402,7 @@ var KyselyWriteCache = class KyselyWriteCache {
 		let startRevision;
 		let documentType;
 		const validatedUpgrades = [];
+		const pendingUpgrades = [];
 		let lastDocumentScopeOperation;
 		if (keyframe) {
 			document = keyframe.document;
@@ -1397,9 +1432,17 @@ var KyselyWriteCache = class KyselyWriteCache {
 							revision: upgradeAction.input.revision,
 							timestampUtcMs: operation.timestampUtcMs
 						});
-						document = applyUpgradeDocumentAction(document, upgradeAction, upgradePath);
+						pendingUpgrades.push({
+							action: upgradeAction,
+							upgradePath,
+							index: operation.index,
+							subsequentDeletes: []
+						});
 					}
-				} else if (operation.action.type === "DELETE_DOCUMENT") applyDeleteDocumentAction(document, operation.action);
+				} else if (operation.action.type === "DELETE_DOCUMENT") {
+					applyDeleteDocumentAction(document, operation.action);
+					for (const pending of pendingUpgrades) pending.subsequentDeletes.push(operation.action);
+				}
 			}
 		} else {
 			startRevision = -1;
@@ -1426,8 +1469,8 @@ var KyselyWriteCache = class KyselyWriteCache {
 					const upgradeAction = operation.action;
 					const fromVersion = upgradeAction.input.fromVersion;
 					const toVersion = upgradeAction.input.toVersion;
-					let upgradePath;
 					if (fromVersion > 0 && fromVersion < toVersion) {
+						let upgradePath;
 						try {
 							upgradePath = this.registry.computeUpgradePath(documentType, fromVersion, toVersion);
 						} catch (err) {
@@ -1440,11 +1483,18 @@ var KyselyWriteCache = class KyselyWriteCache {
 							revision: upgradeAction.input.revision,
 							timestampUtcMs: operation.timestampUtcMs
 						});
-					}
-					document = applyUpgradeDocumentAction(document, upgradeAction, upgradePath);
-					docModule = this.registry.getModule(documentType, extractModuleVersion(document));
-				} else if (operation.action.type === "DELETE_DOCUMENT") applyDeleteDocumentAction(document, operation.action);
-				else {
+						pendingUpgrades.push({
+							action: upgradeAction,
+							upgradePath,
+							index: operation.index,
+							subsequentDeletes: []
+						});
+					} else document = applyUpgradeDocumentAction(document, upgradeAction, void 0);
+					docModule = this.registry.getModule(documentType, normalizeDocumentModelVersion(toVersion));
+				} else if (operation.action.type === "DELETE_DOCUMENT") {
+					applyDeleteDocumentAction(document, operation.action);
+					for (const pending of pendingUpgrades) pending.subsequentDeletes.push(operation.action);
+				} else {
 					const protocolVersion = baseReducerVersion(document.header);
 					document = docModule.reducer(document, operation.action, void 0, {
 						skip: operation.skip,
@@ -1454,6 +1504,7 @@ var KyselyWriteCache = class KyselyWriteCache {
 			}
 		}
 		if (scope === "document") {
+			document = this.applyPendingUpgrades(document, pendingUpgrades, Number.MAX_SAFE_INTEGER);
 			const last = lastDocumentScopeOperation ?? await this.operationAt(documentId, "document", branch, startRevision, signal);
 			document.operations = {
 				...document.operations,
@@ -1478,6 +1529,7 @@ var KyselyWriteCache = class KyselyWriteCache {
 			}
 			return mod;
 		};
+		const finalVersion = validatedUpgrades.at(-1)?.toVersion ?? extractModuleVersion(document);
 		let cursor = void 0;
 		const pageSize = 100;
 		let hasMorePages;
@@ -1491,7 +1543,8 @@ var KyselyWriteCache = class KyselyWriteCache {
 				const result = await this.operationStore.getSince(documentId, scope, branch, startRevision, void 0, paging, signal);
 				for (const operation of result.results) {
 					if (targetRevision !== void 0 && operation.index > targetRevision) break;
-					const moduleVersion = this.resolveModuleVersionForOp(operation.index, operation.timestampUtcMs, scope, validatedUpgrades, extractModuleVersion(document));
+					const moduleVersion = this.resolveModuleVersionForOp(operation.index, operation.timestampUtcMs, scope, validatedUpgrades, finalVersion);
+					document = this.applyPendingUpgrades(document, pendingUpgrades, moduleVersion ?? Number.MAX_SAFE_INTEGER);
 					if (isDenied(operation)) document = appendWithoutApplying(document, operation, scope);
 					else {
 						const protocolVersion = baseReducerVersion(document.header);
@@ -1508,7 +1561,62 @@ var KyselyWriteCache = class KyselyWriteCache {
 				throw new Error(`Failed to rebuild document ${documentId}: ${err instanceof Error ? err.message : String(err)}`, { cause: err });
 			}
 		} while (hasMorePages);
-		return this.stampRevisions(document, documentId, scope, branch, targetRevision, signal);
+		document = this.applyTailPendingUpgrades(document, pendingUpgrades, scope, targetRevision);
+		document = await this.stampRevisions(document, documentId, scope, branch, targetRevision, signal);
+		if (pendingUpgrades.length > 0) {
+			const firstHeldBack = pendingUpgrades[0];
+			const stamped = document.header.revision["document"] ?? 0;
+			document.header.revision = {
+				...document.header.revision,
+				document: Math.min(stamped, firstHeldBack.index)
+			};
+		}
+		return document;
+	}
+	/**
+	* Applies and removes every held-back upgrade whose target version is at or
+	* below `throughVersion`, in the order the document scope recorded them.
+	*/
+	applyPendingUpgrades(document, pendingUpgrades, throughVersion) {
+		while (pendingUpgrades.length > 0) {
+			const pending = pendingUpgrades[0];
+			if (throughVersion < pending.action.input.toVersion) break;
+			pendingUpgrades.shift();
+			document = this.applyPendingUpgrade(document, pending);
+		}
+		return document;
+	}
+	/**
+	* Applies the remaining held-back upgrades after the requested scope's
+	* replay has finished. A head read applies them all. A positional read
+	* applies only those whose boundary for this scope lies at or before the
+	* target position: applying a later one would label migrated state with a
+	* pre-upgrade revision, and a keyframe stored from that poisons every
+	* rebuild that resumes from it. Boundaries come from the upgrade's revision
+	* snapshot; an upgrade without one records no position for this scope, and
+	* the replay loop not having crossed it already places it past the target.
+	*/
+	applyTailPendingUpgrades(document, pendingUpgrades, scope, targetRevision) {
+		while (pendingUpgrades.length > 0) {
+			const pending = pendingUpgrades[0];
+			if (targetRevision !== void 0) {
+				const snapshot = pending.action.input.revision;
+				if (snapshot === void 0) break;
+				if ((snapshot[scope] ?? 0) > targetRevision) break;
+			}
+			pendingUpgrades.shift();
+			document = this.applyPendingUpgrade(document, pending);
+		}
+		return document;
+	}
+	/**
+	* Applies one held-back upgrade, then re-applies the deletes the document
+	* scope recorded after it so the hold-back cannot invert their order.
+	*/
+	applyPendingUpgrade(document, pending) {
+		document = applyUpgradeDocumentAction(document, pending.action, pending.upgradePath);
+		for (const deleteAction of pending.subsequentDeletes) document = applyDeleteDocumentAction(document, deleteAction);
+		return document;
 	}
 	/**
 	* Copies the current document revisions onto the document. Overwrites the
@@ -2442,13 +2550,6 @@ var DocumentActionHandler = class {
 		}
 		const documentState = document.state.document;
 		if (documentState.isDeleted && !this.alreadyEvaluated(executing)) return buildErrorResult(job, new DocumentDeletedError(documentId, documentState.deletedAtUtcIso), startTime);
-		const nextIndex = getNextIndexForScope(document, job.scope);
-		let upgradePath;
-		if (fromVersion > 0 && fromVersion < toVersion) try {
-			upgradePath = this.registry.computeUpgradePath(document.header.documentType, fromVersion, toVersion);
-		} catch (error) {
-			return buildErrorResult(job, error instanceof Error ? error : new Error(String(error)), startTime);
-		}
 		if (fromVersion === toVersion && fromVersion > 0) return {
 			job,
 			success: true,
@@ -2456,6 +2557,48 @@ var DocumentActionHandler = class {
 			operationsWithContext: [],
 			duration: Date.now() - startTime
 		};
+		const arrivesDecided = executing.replayingAcceptedHistory || executing.evaluatedByPosition;
+		if (fromVersion > 0 && !arrivesDecided) {
+			const stampedVersion = normalizeDocumentModelVersion(documentState.version);
+			if (fromVersion !== stampedVersion) return buildErrorResult(job, new UpgradePreconditionFailedError(documentId, `fromVersion ${fromVersion} does not match the document's version ${stampedVersion}`), startTime);
+			if (input.revision !== void 0) {
+				let actualRevisions;
+				try {
+					actualRevisions = (await stores.operationStore.getRevisions(documentId, job.branch, signal)).revision;
+				} catch (error) {
+					return buildErrorResult(job, /* @__PURE__ */ new Error(`Failed to fetch revisions for upgrade: ${error instanceof Error ? error.message : String(error)}`), startTime);
+				}
+				const revisionScopes = new Set([...Object.keys(input.revision), ...Object.keys(actualRevisions)]);
+				for (const revisionScope of revisionScopes) {
+					const snapshot = input.revision[revisionScope] ?? 0;
+					const actual = actualRevisions[revisionScope] ?? 0;
+					if (snapshot !== actual) return buildErrorResult(job, new UpgradePreconditionFailedError(documentId, `revision snapshot for scope "${revisionScope}" is ${snapshot} but the document is at ${actual}`), startTime);
+				}
+			}
+		}
+		let upgradePath;
+		if (fromVersion > 0 && fromVersion < toVersion) try {
+			upgradePath = this.registry.computeUpgradePath(document.header.documentType, fromVersion, toVersion);
+		} catch (error) {
+			return buildErrorResult(job, error instanceof Error ? error : new Error(String(error)), startTime);
+		}
+		const otherScopes = Object.keys(document.state).filter((scope) => scope !== job.scope);
+		if (fromVersion > 0) for (const scope of otherScopes) {
+			let scopedDocument;
+			try {
+				scopedDocument = await stores.writeCache.getState(documentId, scope, job.branch, void 0, signal);
+			} catch (error) {
+				return buildErrorResult(job, /* @__PURE__ */ new Error(`Failed to fetch ${scope} scope for upgrade: ${error instanceof Error ? error.message : String(error)}`), startTime);
+			}
+			document = {
+				...document,
+				state: {
+					...document.state,
+					[scope]: scopedDocument.state[scope]
+				}
+			};
+		}
+		const nextIndex = getNextIndexForScope(document, job.scope);
 		try {
 			document = applyUpgradeDocumentAction$1(document, action, upgradePath);
 		} catch (error) {
@@ -2470,6 +2613,7 @@ var DocumentActionHandler = class {
 			header: document.header,
 			...document.state
 		};
+		if (fromVersion > 0) resultingStateObj.__migrated = true;
 		const resultingState = JSON.stringify(resultingStateObj);
 		const writeResult = await this.writeOperationToStore({
 			documentId,
@@ -2485,6 +2629,11 @@ var DocumentActionHandler = class {
 			[job.scope]: [...document.operations[job.scope] ?? [], operation]
 		};
 		stores.writeCache.putState(documentId, job.scope, job.branch, operation.index, document, SnapshotPosition.Head);
+		for (const scope of otherScopes) executing.postCommitInvalidations.push({
+			documentId,
+			scope,
+			branch: job.branch
+		});
 		indexTxn.write([{
 			...operation,
 			documentId,
@@ -2711,6 +2860,7 @@ var SimpleJobExecutor = class {
 	async executeJob(job, signal) {
 		const startTime = Date.now();
 		const touchedCacheEntries = [];
+		const postCommitInvalidations = [];
 		let pendingEvent;
 		let result;
 		try {
@@ -2724,7 +2874,8 @@ var SimpleJobExecutor = class {
 						stores,
 						signal,
 						replayingAcceptedHistory: true,
-						evaluatedByPosition: false
+						evaluatedByPosition: false,
+						postCommitInvalidations
 					});
 					if (loadResult.success && loadResult.operationsWithContext) {
 						for (const owc of loadResult.operationsWithContext) touchedCacheEntries.push({
@@ -2753,7 +2904,8 @@ var SimpleJobExecutor = class {
 					stores,
 					signal,
 					replayingAcceptedHistory: false,
-					evaluatedByPosition: positioned.evaluatedByPosition
+					evaluatedByPosition: positioned.evaluatedByPosition,
+					postCommitInvalidations
 				};
 				const actionResult = await this.processActions(positioned.writes, executing);
 				if (!actionResult.success) return {
@@ -2803,6 +2955,7 @@ var SimpleJobExecutor = class {
 			}
 			throw error;
 		}
+		if (result.success) for (const entry of postCommitInvalidations) this.writeCache.invalidate(entry.documentId, entry.scope, entry.branch);
 		if (pendingEvent) this.eventBus.emit(ReactorEventTypes.JOB_WRITE_READY, pendingEvent).catch((error) => {
 			this.logger.error("Failed to emit JOB_WRITE_READY event: @Event : @Error", pendingEvent, error);
 		});
@@ -2918,8 +3071,7 @@ var SimpleJobExecutor = class {
 		}
 		let module;
 		try {
-			const moduleVersion = documentVersion === 0 ? void 0 : documentVersion;
-			module = this.registry.getModule(document.header.documentType, moduleVersion);
+			module = this.registry.getModule(document.header.documentType, normalizeDocumentModelVersion(documentVersion));
 		} catch (error) {
 			return buildErrorResult(job, error instanceof Error ? error : new Error(String(error)), startTime);
 		}
@@ -3527,7 +3679,7 @@ var DocumentModelRegistry = class {
 	}
 	computeUpgradePath(documentType, fromVersion, toVersion) {
 		if (fromVersion === toVersion) return [];
-		if (toVersion < fromVersion) throw new DowngradeNotSupportedError(documentType, fromVersion, toVersion);
+		if (toVersion < fromVersion) throw new DowngradeNotSupportedError$1(documentType, fromVersion, toVersion);
 		const manifest = this.getUpgradeManifest(documentType);
 		const path = [];
 		for (let v = fromVersion + 1; v <= toVersion; v++) {
@@ -4271,6 +4423,6 @@ async function getMigrationStatus(db, schema = REACTOR_SCHEMA) {
 //#region src/core/drive-container-types.ts
 const DEFAULT_DRIVE_CONTAINER_TYPES = new Set(["powerhouse/document-drive", "powerhouse/reactor-drive"]);
 //#endregion
-export { OptimisticLockError as A, ExcessiveReshuffleError as B, DocumentMetaCache as C, APPEND_CONDITION_FAILED_PREFIX as D, CollectionMembershipCache as E, ModuleNotFoundError as F, __exportAll as G, matchesScope as H, AuthTimestampNotMonotonicError as I, AuthorizationDeniedError as L, DuplicateManifestError as M, DuplicateModuleError as N, AppendConditionFailedError as O, InvalidModuleError as P, DocumentDeletedError as R, KyselyOperationIndex as S, createEmptyConsistencyToken as T, parsePagingOptions as U, InvalidOperationTimestampError as V, throwIfAborted as W, KyselyExecutionScope as _, createForwardingPoolInstrumentation as a, EventBus as b, KyselyKeyframeStore as c, DriveCollectionId as d, decideAtHead as f, authDecisionModel as g, buildDecisionModel as h, runMigrations as i, RevisionMismatchError as j, DuplicateOperationError as k, DocumentModelRegistry as l, documentDecisionModel as m, REACTOR_SCHEMA as n, instrumentPgPool as o, selectDecisionModel as p, getMigrationStatus as r, KyselyOperationStore as s, DEFAULT_DRIVE_CONTAINER_TYPES as t, SimpleJobExecutor as u, FLAG_PREREQUISITES as v, createConsistencyToken as w, KyselyWriteCache as x, validateFeatureFlags as y, DocumentNotFoundError as z };
+export { OptimisticLockError as A, ExcessiveReshuffleError as B, DocumentMetaCache as C, APPEND_CONDITION_FAILED_PREFIX as D, CollectionMembershipCache as E, ModuleNotFoundError as F, throwIfAborted as G, UpgradePreconditionFailedError as H, AuthTimestampNotMonotonicError as I, __exportAll as K, AuthorizationDeniedError as L, DuplicateManifestError as M, DuplicateModuleError as N, AppendConditionFailedError as O, InvalidModuleError as P, DocumentDeletedError as R, KyselyOperationIndex as S, createEmptyConsistencyToken as T, matchesScope as U, InvalidOperationTimestampError as V, parsePagingOptions as W, KyselyExecutionScope as _, createForwardingPoolInstrumentation as a, EventBus as b, KyselyKeyframeStore as c, DriveCollectionId as d, decideAtHead as f, authDecisionModel as g, buildDecisionModel as h, runMigrations as i, RevisionMismatchError as j, DuplicateOperationError as k, DocumentModelRegistry as l, documentDecisionModel as m, REACTOR_SCHEMA as n, instrumentPgPool as o, selectDecisionModel as p, getMigrationStatus as r, KyselyOperationStore as s, DEFAULT_DRIVE_CONTAINER_TYPES as t, SimpleJobExecutor as u, FLAG_PREREQUISITES as v, createConsistencyToken as w, KyselyWriteCache as x, validateFeatureFlags as y, DocumentNotFoundError as z };
 
-//# sourceMappingURL=drive-container-types-BJCKXJwH.js.map
+//# sourceMappingURL=drive-container-types-CU1ZUfD1.js.map