@powerhousedao/reactor 6.2.2-dev.53 → 6.2.2-dev.55

package/dist/{build-worker-executor-NT9b3rNm.js → build-worker-executor-DBHkoWBR.js}

@@ -1,4 +1,4 @@
-import { _ as DocumentMetaCache, c as KyselyKeyframeStore, f as KyselyExecutionScope, g as KyselyOperationIndex, h as KyselyWriteCache, l as DocumentModelRegistry, m as EventBus, n as REACTOR_SCHEMA, s as KyselyOperationStore, t as DEFAULT_DRIVE_CONTAINER_TYPES, u as SimpleJobExecutor, v as CollectionMembershipCache } from "./drive-container-types-RZa1wukO.js";
+import { _ as DocumentMetaCache, c as KyselyKeyframeStore, f as KyselyExecutionScope, g as KyselyOperationIndex, h as KyselyWriteCache, l as DocumentModelRegistry, m as EventBus, n as REACTOR_SCHEMA, s as KyselyOperationStore, t as DEFAULT_DRIVE_CONTAINER_TYPES, u as SimpleJobExecutor, v as CollectionMembershipCache } from "./drive-container-types-bVQ_8YwX.js";
 import { n as ReactorEventTypes } from "./types-DMKLa0Ok.js";
 //#region src/executor/worker/build-worker-executor.ts
 async function defaultLoadFactory(spec) {
@@ -80,4 +80,4 @@ async function buildWorkerExecutor(options) {
 //#endregion
 export { defaultLoadFactory as n, buildWorkerExecutor as t };
 
-//# sourceMappingURL=build-worker-executor-NT9b3rNm.js.map
+//# sourceMappingURL=build-worker-executor-DBHkoWBR.js.map

package/dist/{build-worker-executor-NT9b3rNm.js.map → build-worker-executor-DBHkoWBR.js.map}

@@ -1 +1 @@
-{"version":3,"file":"build-worker-executor-NT9b3rNm.js","names":[],"sources":["../src/executor/worker/build-worker-executor.ts"],"sourcesContent":["import type {\n  DocumentModelModule,\n  OperationWithContext,\n} from \"@powerhousedao/shared/document-model\";\nimport type { ILogger } from \"document-model\";\nimport type { Kysely } from \"kysely\";\nimport { CollectionMembershipCache } from \"../../cache/collection-membership-cache.js\";\nimport { DocumentMetaCache } from \"../../cache/document-meta-cache.js\";\nimport { KyselyOperationIndex } from \"../../cache/kysely-operation-index.js\";\nimport { KyselyWriteCache } from \"../../cache/kysely-write-cache.js\";\nimport type { WriteCacheConfig } from \"../../cache/write-cache-types.js\";\nimport { DEFAULT_DRIVE_CONTAINER_TYPES } from \"../../core/drive-container-types.js\";\nimport type { Database } from \"../../core/types.js\";\nimport { EventBus } from \"../../events/event-bus.js\";\nimport {\n  ReactorEventTypes,\n  type JobWriteReadyEvent,\n} from \"../../events/types.js\";\nimport { DocumentModelRegistry } from \"../../registry/implementation.js\";\nimport type { JobMeta } from \"../../shared/types.js\";\nimport type { SignatureVerificationHandler } from \"../../signer/types.js\";\nimport { KyselyKeyframeStore } from \"../../storage/kysely/keyframe-store.js\";\nimport { KyselyOperationStore } from \"../../storage/kysely/store.js\";\nimport type { Database as StorageDatabase } from \"../../storage/kysely/types.js\";\nimport { REACTOR_SCHEMA } from \"../../storage/migrations/migrator.js\";\nimport { KyselyExecutionScope } from \"../execution-scope.js\";\nimport { SimpleJobExecutor } from \"../simple-job-executor.js\";\nimport type { JobExecutorConfig } from \"../types.js\";\nimport type {\n  FactorySpec,\n  InitMessage,\n  ModelManifestEntry,\n} from \"./protocol.js\";\n\n/**\n * In-worker capture of the JOB_WRITE_READY event emitted by the executor.\n * The worker forwards `operations` and `jobMeta` back to the parent; the\n * parent re-enriches `collectionMemberships` at emit time.\n */\nexport type WorkerWriteReadyCapture = {\n  operations: OperationWithContext[];\n  jobMeta: JobMeta;\n};\n\nexport type WorkerExecutorStack = {\n  executor: SimpleJobExecutor;\n  registry: DocumentModelRegistry;\n  /**\n   * Synchronously pops the most-recent JOB_WRITE_READY captured on this\n   * worker's local event bus and clears it. Returns null if the executor\n   * did not produce one for this job.\n   */\n  takeLastWriteReady(): WorkerWriteReadyCapture | null;\n};\n\nexport type BuildWorkerExecutorOptions = {\n  init: InitMessage;\n  database: Kysely<Database>;\n  logger: ILogger;\n  executorConfig?: JobExecutorConfig;\n  driveContainerTypes?: ReadonlySet<string>;\n  /**\n   * Override the module loader used to materialize factory specs. Tests\n   * can inject a deterministic resolver instead of touching the real\n   * Node module loader.\n   */\n  loadFactory?: (spec: FactorySpec) => Promise<unknown>;\n};\n\nexport async function defaultLoadFactory(spec: FactorySpec): Promise<unknown> {\n  const ref = spec.module;\n  const specifier =\n    \"filePath\" in ref\n      ? new URL(`file://${ref.filePath}`).href\n      : ref.packageName;\n  const mod = (await import(specifier)) as Record<string, unknown>;\n  const exported = mod[ref.exportName];\n  if (typeof exported === \"function\") {\n    return (exported as (args: unknown) => unknown)(spec.initArgs);\n  }\n  return exported;\n}\n\nasync function loadModelManifest(\n  entries: ModelManifestEntry[],\n  loadFactory: (spec: FactorySpec) => Promise<unknown>,\n  registry: DocumentModelRegistry,\n  logger: ILogger,\n): Promise<void> {\n  for (const entry of entries) {\n    let module: DocumentModelModule;\n    try {\n      module = (await loadFactory(entry.spec)) as DocumentModelModule;\n    } catch (error) {\n      logger.error(\n        \"worker failed to load document model: @entry @error\",\n        entry,\n        error,\n      );\n      throw error;\n    }\n    const [result] = registry.registerModules(module);\n    if (result.status === \"error\") {\n      logger.error(\n        \"worker failed to register document model: @entry @error\",\n        entry,\n        result.error,\n      );\n      throw result.error;\n    }\n  }\n}\n\n/**\n * Assembles the in-worker storage stack plus a {@link SimpleJobExecutor}\n * bound to a pre-built Kysely instance. The parent owns the wire protocol\n * and routing; the worker owns everything below `SimpleJobExecutor`.\n *\n * The local event bus exists only to satisfy the executor's contract: its\n * JOB_WRITE_READY emissions are captured here and shipped to the parent\n * via {@link WorkerExecutorStack.takeLastWriteReady}.\n */\nexport async function buildWorkerExecutor(\n  options: BuildWorkerExecutorOptions,\n): Promise<WorkerExecutorStack> {\n  const { init, database: baseDatabase, logger } = options;\n  const driveContainerTypes =\n    options.driveContainerTypes ?? DEFAULT_DRIVE_CONTAINER_TYPES;\n  const loadFactory = options.loadFactory ?? defaultLoadFactory;\n\n  const registry = new DocumentModelRegistry();\n  await loadModelManifest(init.models, loadFactory, registry, logger);\n\n  let signatureVerifier: SignatureVerificationHandler | undefined;\n  if (init.signatureVerifier) {\n    try {\n      signatureVerifier = (await loadFactory(\n        init.signatureVerifier,\n      )) as SignatureVerificationHandler;\n    } catch (error) {\n      logger.error(\n        \"worker failed to load signature verifier: @spec @error\",\n        init.signatureVerifier,\n        error,\n      );\n      throw error;\n    }\n  }\n\n  const database = baseDatabase.withSchema(REACTOR_SCHEMA);\n  const operationStore = new KyselyOperationStore(\n    database as unknown as Kysely<StorageDatabase>,\n  );\n  const keyframeStore = new KyselyKeyframeStore(\n    database as unknown as Kysely<StorageDatabase>,\n  );\n\n  const cacheConfig: WriteCacheConfig = {\n    maxDocuments: 100,\n    ringBufferSize: 10,\n    keyframeInterval: 10,\n  };\n  const writeCache = new KyselyWriteCache(\n    keyframeStore,\n    operationStore,\n    registry,\n    cacheConfig,\n  );\n  await writeCache.startup();\n\n  const operationIndex = new KyselyOperationIndex(\n    database as unknown as Kysely<StorageDatabase>,\n  );\n\n  const documentMetaCache = new DocumentMetaCache(operationStore, {\n    maxDocuments: 1000,\n  });\n  await documentMetaCache.startup();\n\n  const collectionMembershipCache = new CollectionMembershipCache(\n    operationIndex,\n  );\n\n  const executionScope = new KyselyExecutionScope(\n    database as unknown as Kysely<StorageDatabase>,\n    operationStore,\n    operationIndex,\n    keyframeStore,\n    writeCache,\n    documentMetaCache,\n    collectionMembershipCache,\n  );\n\n  const eventBus = new EventBus();\n  let lastWriteReady: WorkerWriteReadyCapture | null = null;\n  eventBus.subscribe(\n    ReactorEventTypes.JOB_WRITE_READY,\n    (_t: number, event: JobWriteReadyEvent) => {\n      lastWriteReady = {\n        operations: event.operations,\n        jobMeta: event.jobMeta,\n      };\n    },\n  );\n\n  const executorConfig = options.executorConfig ?? {};\n  const executor = new SimpleJobExecutor(\n    logger,\n    registry,\n    operationStore,\n    eventBus,\n    writeCache,\n    operationIndex,\n    documentMetaCache,\n    collectionMembershipCache,\n    driveContainerTypes,\n    executorConfig,\n    signatureVerifier,\n    executionScope,\n  );\n\n  return {\n    executor,\n    registry,\n    takeLastWriteReady(): WorkerWriteReadyCapture | null {\n      const captured = lastWriteReady;\n      lastWriteReady = null;\n      return captured;\n    },\n  };\n}\n"],"mappings":";;;AAqEA,eAAsB,mBAAmB,MAAqC;CAC5E,MAAM,MAAM,KAAK;CAMjB,MAAM,YADO,OAHX,cAAc,MAAA,OACV,IAAI,IAAI,UAAU,IAAI,WAAW,CAAC,QAAA,OAClC,IAAI,eAEW,IAAI;AACzB,KAAI,OAAO,aAAa,WACtB,QAAQ,SAAwC,KAAK,SAAS;AAEhE,QAAO;;AAGT,eAAe,kBACb,SACA,aACA,UACA,QACe;AACf,MAAK,MAAM,SAAS,SAAS;EAC3B,IAAI;AACJ,MAAI;AACF,YAAU,MAAM,YAAY,MAAM,KAAK;WAChC,OAAO;AACd,UAAO,MACL,uDACA,OACA,MACD;AACD,SAAM;;EAER,MAAM,CAAC,UAAU,SAAS,gBAAgB,OAAO;AACjD,MAAI,OAAO,WAAW,SAAS;AAC7B,UAAO,MACL,2DACA,OACA,OAAO,MACR;AACD,SAAM,OAAO;;;;;;;;;;;;;AAcnB,eAAsB,oBACpB,SAC8B;CAC9B,MAAM,EAAE,MAAM,UAAU,cAAc,WAAW;CACjD,MAAM,sBACJ,QAAQ,uBAAuB;CACjC,MAAM,cAAc,QAAQ,eAAe;CAE3C,MAAM,WAAW,IAAI,uBAAuB;AAC5C,OAAM,kBAAkB,KAAK,QAAQ,aAAa,UAAU,OAAO;CAEnE,IAAI;AACJ,KAAI,KAAK,kBACP,KAAI;AACF,sBAAqB,MAAM,YACzB,KAAK,kBACN;UACM,OAAO;AACd,SAAO,MACL,0DACA,KAAK,mBACL,MACD;AACD,QAAM;;CAIV,MAAM,WAAW,aAAa,WAAW,eAAe;CACxD,MAAM,iBAAiB,IAAI,qBACzB,SACD;CACD,MAAM,gBAAgB,IAAI,oBACxB,SACD;CAOD,MAAM,aAAa,IAAI,iBACrB,eACA,gBACA,UARoC;EACpC,cAAc;EACd,gBAAgB;EAChB,kBAAkB;EACnB,CAMA;AACD,OAAM,WAAW,SAAS;CAE1B,MAAM,iBAAiB,IAAI,qBACzB,SACD;CAED,MAAM,oBAAoB,IAAI,kBAAkB,gBAAgB,EAC9D,cAAc,KACf,CAAC;AACF,OAAM,kBAAkB,SAAS;CAEjC,MAAM,4BAA4B,IAAI,0BACpC,eACD;CAED,MAAM,iBAAiB,IAAI,qBACzB,UACA,gBACA,gBACA,eACA,YACA,mBACA,0BACD;CAED,MAAM,WAAW,IAAI,UAAU;CAC/B,IAAI,iBAAiD;AACrD,UAAS,UACP,kBAAkB,kBACjB,IAAY,UAA8B;AACzC,mBAAiB;GACf,YAAY,MAAM;GAClB,SAAS,MAAM;GAChB;GAEJ;AAkBD,QAAO;EACL,UAhBe,IAAI,kBACnB,QACA,UACA,gBACA,UACA,YACA,gBACA,mBACA,2BACA,qBAVqB,QAAQ,kBAAkB,EAAE,EAYjD,mBACA,eACD;EAIC;EACA,qBAAqD;GACnD,MAAM,WAAW;AACjB,oBAAiB;AACjB,UAAO;;EAEV"}
+{"version":3,"file":"build-worker-executor-DBHkoWBR.js","names":[],"sources":["../src/executor/worker/build-worker-executor.ts"],"sourcesContent":["import type {\n  DocumentModelModule,\n  OperationWithContext,\n} from \"@powerhousedao/shared/document-model\";\nimport type { ILogger } from \"document-model\";\nimport type { Kysely } from \"kysely\";\nimport { CollectionMembershipCache } from \"../../cache/collection-membership-cache.js\";\nimport { DocumentMetaCache } from \"../../cache/document-meta-cache.js\";\nimport { KyselyOperationIndex } from \"../../cache/kysely-operation-index.js\";\nimport { KyselyWriteCache } from \"../../cache/kysely-write-cache.js\";\nimport type { WriteCacheConfig } from \"../../cache/write-cache-types.js\";\nimport { DEFAULT_DRIVE_CONTAINER_TYPES } from \"../../core/drive-container-types.js\";\nimport type { Database } from \"../../core/types.js\";\nimport { EventBus } from \"../../events/event-bus.js\";\nimport {\n  ReactorEventTypes,\n  type JobWriteReadyEvent,\n} from \"../../events/types.js\";\nimport { DocumentModelRegistry } from \"../../registry/implementation.js\";\nimport type { JobMeta } from \"../../shared/types.js\";\nimport type { SignatureVerificationHandler } from \"../../signer/types.js\";\nimport { KyselyKeyframeStore } from \"../../storage/kysely/keyframe-store.js\";\nimport { KyselyOperationStore } from \"../../storage/kysely/store.js\";\nimport type { Database as StorageDatabase } from \"../../storage/kysely/types.js\";\nimport { REACTOR_SCHEMA } from \"../../storage/migrations/migrator.js\";\nimport { KyselyExecutionScope } from \"../execution-scope.js\";\nimport { SimpleJobExecutor } from \"../simple-job-executor.js\";\nimport type { JobExecutorConfig } from \"../types.js\";\nimport type {\n  FactorySpec,\n  InitMessage,\n  ModelManifestEntry,\n} from \"./protocol.js\";\n\n/**\n * In-worker capture of the JOB_WRITE_READY event emitted by the executor.\n * The worker forwards `operations` and `jobMeta` back to the parent; the\n * parent re-enriches `collectionMemberships` at emit time.\n */\nexport type WorkerWriteReadyCapture = {\n  operations: OperationWithContext[];\n  jobMeta: JobMeta;\n};\n\nexport type WorkerExecutorStack = {\n  executor: SimpleJobExecutor;\n  registry: DocumentModelRegistry;\n  /**\n   * Synchronously pops the most-recent JOB_WRITE_READY captured on this\n   * worker's local event bus and clears it. Returns null if the executor\n   * did not produce one for this job.\n   */\n  takeLastWriteReady(): WorkerWriteReadyCapture | null;\n};\n\nexport type BuildWorkerExecutorOptions = {\n  init: InitMessage;\n  database: Kysely<Database>;\n  logger: ILogger;\n  executorConfig?: JobExecutorConfig;\n  driveContainerTypes?: ReadonlySet<string>;\n  /**\n   * Override the module loader used to materialize factory specs. Tests\n   * can inject a deterministic resolver instead of touching the real\n   * Node module loader.\n   */\n  loadFactory?: (spec: FactorySpec) => Promise<unknown>;\n};\n\nexport async function defaultLoadFactory(spec: FactorySpec): Promise<unknown> {\n  const ref = spec.module;\n  const specifier =\n    \"filePath\" in ref\n      ? new URL(`file://${ref.filePath}`).href\n      : ref.packageName;\n  const mod = (await import(specifier)) as Record<string, unknown>;\n  const exported = mod[ref.exportName];\n  if (typeof exported === \"function\") {\n    return (exported as (args: unknown) => unknown)(spec.initArgs);\n  }\n  return exported;\n}\n\nasync function loadModelManifest(\n  entries: ModelManifestEntry[],\n  loadFactory: (spec: FactorySpec) => Promise<unknown>,\n  registry: DocumentModelRegistry,\n  logger: ILogger,\n): Promise<void> {\n  for (const entry of entries) {\n    let module: DocumentModelModule;\n    try {\n      module = (await loadFactory(entry.spec)) as DocumentModelModule;\n    } catch (error) {\n      logger.error(\n        \"worker failed to load document model: @entry @error\",\n        entry,\n        error,\n      );\n      throw error;\n    }\n    const [result] = registry.registerModules(module);\n    if (result.status === \"error\") {\n      logger.error(\n        \"worker failed to register document model: @entry @error\",\n        entry,\n        result.error,\n      );\n      throw result.error;\n    }\n  }\n}\n\n/**\n * Assembles the in-worker storage stack plus a {@link SimpleJobExecutor}\n * bound to a pre-built Kysely instance. The parent owns the wire protocol\n * and routing; the worker owns everything below `SimpleJobExecutor`.\n *\n * The local event bus exists only to satisfy the executor's contract: its\n * JOB_WRITE_READY emissions are captured here and shipped to the parent\n * via {@link WorkerExecutorStack.takeLastWriteReady}.\n */\nexport async function buildWorkerExecutor(\n  options: BuildWorkerExecutorOptions,\n): Promise<WorkerExecutorStack> {\n  const { init, database: baseDatabase, logger } = options;\n  const driveContainerTypes =\n    options.driveContainerTypes ?? DEFAULT_DRIVE_CONTAINER_TYPES;\n  const loadFactory = options.loadFactory ?? defaultLoadFactory;\n\n  const registry = new DocumentModelRegistry();\n  await loadModelManifest(init.models, loadFactory, registry, logger);\n\n  let signatureVerifier: SignatureVerificationHandler | undefined;\n  if (init.signatureVerifier) {\n    try {\n      signatureVerifier = (await loadFactory(\n        init.signatureVerifier,\n      )) as SignatureVerificationHandler;\n    } catch (error) {\n      logger.error(\n        \"worker failed to load signature verifier: @spec @error\",\n        init.signatureVerifier,\n        error,\n      );\n      throw error;\n    }\n  }\n\n  const database = baseDatabase.withSchema(REACTOR_SCHEMA);\n  const operationStore = new KyselyOperationStore(\n    database as unknown as Kysely<StorageDatabase>,\n  );\n  const keyframeStore = new KyselyKeyframeStore(\n    database as unknown as Kysely<StorageDatabase>,\n  );\n\n  const cacheConfig: WriteCacheConfig = {\n    maxDocuments: 100,\n    ringBufferSize: 10,\n    keyframeInterval: 10,\n  };\n  const writeCache = new KyselyWriteCache(\n    keyframeStore,\n    operationStore,\n    registry,\n    cacheConfig,\n  );\n  await writeCache.startup();\n\n  const operationIndex = new KyselyOperationIndex(\n    database as unknown as Kysely<StorageDatabase>,\n  );\n\n  const documentMetaCache = new DocumentMetaCache(operationStore, {\n    maxDocuments: 1000,\n  });\n  await documentMetaCache.startup();\n\n  const collectionMembershipCache = new CollectionMembershipCache(\n    operationIndex,\n  );\n\n  const executionScope = new KyselyExecutionScope(\n    database as unknown as Kysely<StorageDatabase>,\n    operationStore,\n    operationIndex,\n    keyframeStore,\n    writeCache,\n    documentMetaCache,\n    collectionMembershipCache,\n  );\n\n  const eventBus = new EventBus();\n  let lastWriteReady: WorkerWriteReadyCapture | null = null;\n  eventBus.subscribe(\n    ReactorEventTypes.JOB_WRITE_READY,\n    (_t: number, event: JobWriteReadyEvent) => {\n      lastWriteReady = {\n        operations: event.operations,\n        jobMeta: event.jobMeta,\n      };\n    },\n  );\n\n  const executorConfig = options.executorConfig ?? {};\n  const executor = new SimpleJobExecutor(\n    logger,\n    registry,\n    operationStore,\n    eventBus,\n    writeCache,\n    operationIndex,\n    documentMetaCache,\n    collectionMembershipCache,\n    driveContainerTypes,\n    executorConfig,\n    signatureVerifier,\n    executionScope,\n  );\n\n  return {\n    executor,\n    registry,\n    takeLastWriteReady(): WorkerWriteReadyCapture | null {\n      const captured = lastWriteReady;\n      lastWriteReady = null;\n      return captured;\n    },\n  };\n}\n"],"mappings":";;;AAqEA,eAAsB,mBAAmB,MAAqC;CAC5E,MAAM,MAAM,KAAK;CAMjB,MAAM,YADO,OAHX,cAAc,MAAA,OACV,IAAI,IAAI,UAAU,IAAI,WAAW,CAAC,QAAA,OAClC,IAAI,eAEW,IAAI;AACzB,KAAI,OAAO,aAAa,WACtB,QAAQ,SAAwC,KAAK,SAAS;AAEhE,QAAO;;AAGT,eAAe,kBACb,SACA,aACA,UACA,QACe;AACf,MAAK,MAAM,SAAS,SAAS;EAC3B,IAAI;AACJ,MAAI;AACF,YAAU,MAAM,YAAY,MAAM,KAAK;WAChC,OAAO;AACd,UAAO,MACL,uDACA,OACA,MACD;AACD,SAAM;;EAER,MAAM,CAAC,UAAU,SAAS,gBAAgB,OAAO;AACjD,MAAI,OAAO,WAAW,SAAS;AAC7B,UAAO,MACL,2DACA,OACA,OAAO,MACR;AACD,SAAM,OAAO;;;;;;;;;;;;;AAcnB,eAAsB,oBACpB,SAC8B;CAC9B,MAAM,EAAE,MAAM,UAAU,cAAc,WAAW;CACjD,MAAM,sBACJ,QAAQ,uBAAuB;CACjC,MAAM,cAAc,QAAQ,eAAe;CAE3C,MAAM,WAAW,IAAI,uBAAuB;AAC5C,OAAM,kBAAkB,KAAK,QAAQ,aAAa,UAAU,OAAO;CAEnE,IAAI;AACJ,KAAI,KAAK,kBACP,KAAI;AACF,sBAAqB,MAAM,YACzB,KAAK,kBACN;UACM,OAAO;AACd,SAAO,MACL,0DACA,KAAK,mBACL,MACD;AACD,QAAM;;CAIV,MAAM,WAAW,aAAa,WAAW,eAAe;CACxD,MAAM,iBAAiB,IAAI,qBACzB,SACD;CACD,MAAM,gBAAgB,IAAI,oBACxB,SACD;CAOD,MAAM,aAAa,IAAI,iBACrB,eACA,gBACA,UARoC;EACpC,cAAc;EACd,gBAAgB;EAChB,kBAAkB;EACnB,CAMA;AACD,OAAM,WAAW,SAAS;CAE1B,MAAM,iBAAiB,IAAI,qBACzB,SACD;CAED,MAAM,oBAAoB,IAAI,kBAAkB,gBAAgB,EAC9D,cAAc,KACf,CAAC;AACF,OAAM,kBAAkB,SAAS;CAEjC,MAAM,4BAA4B,IAAI,0BACpC,eACD;CAED,MAAM,iBAAiB,IAAI,qBACzB,UACA,gBACA,gBACA,eACA,YACA,mBACA,0BACD;CAED,MAAM,WAAW,IAAI,UAAU;CAC/B,IAAI,iBAAiD;AACrD,UAAS,UACP,kBAAkB,kBACjB,IAAY,UAA8B;AACzC,mBAAiB;GACf,YAAY,MAAM;GAClB,SAAS,MAAM;GAChB;GAEJ;AAkBD,QAAO;EACL,UAhBe,IAAI,kBACnB,QACA,UACA,gBACA,UACA,YACA,gBACA,mBACA,2BACA,qBAVqB,QAAQ,kBAAkB,EAAE,EAYjD,mBACA,eACD;EAIC;EACA,qBAAqD;GACnD,MAAM,WAAW;AACjB,oBAAiB;AACjB,UAAO;;EAEV"}

package/dist/{drive-container-types-RZa1wukO.js → drive-container-types-bVQ_8YwX.js}

@@ -208,8 +208,14 @@ var UpgradePreconditionFailedError = class UpgradePreconditionFailedError extend
 */
 var DocumentNotFoundError = class DocumentNotFoundError extends Error {
 	documentId;
-	constructor(documentId) {
-		super(`Document ${documentId} not found`);
+	/**
+	* @param message Overrides the default text. A handler that knows which of
+	* several documents an action reads - a relationship's source, say - says so
+	* here rather than rewrapping in a bare Error, which would strip the name the
+	* executor classifies by.
+	*/
+	constructor(documentId, message) {
+		super(message ?? `Document ${documentId} not found`);
 		this.name = "DocumentNotFoundError";
 		this.documentId = documentId;
 		Error.captureStackTrace(this, DocumentNotFoundError);
@@ -912,6 +918,20 @@ var AppendConditionFailedError = class extends Error {
 	}
 };
 //#endregion
+//#region src/executor/types.ts
+/** How long a deferred job waits for its document before it fails. */
+const DEFAULT_DEFERRED_JOB_TTL_MS = 3e4;
+/**
+* Event types for the job executor
+*/
+const JobExecutorEventTypes = {
+	JOB_STARTED: 2e4,
+	JOB_COMPLETED: 20001,
+	JOB_FAILED: 20002,
+	EXECUTOR_STARTED: 20003,
+	EXECUTOR_STOPPED: 20004
+};
+//#endregion
 //#region src/cache/collection-membership-cache.ts
 var CollectionMembershipCache = class CollectionMembershipCache {
 	cache = /* @__PURE__ */ new Map();
@@ -3004,6 +3024,7 @@ var DocumentActionHandler = class {
 		try {
 			sourceDoc = await stores.writeCache.getState(input.sourceId, "document", job.branch, void 0, signal);
 		} catch (error) {
+			if (DocumentNotFoundError.isError(error)) return buildErrorResult(job, new DocumentNotFoundError(input.sourceId, `${actionTypeName}: source document ${input.sourceId} not found`), startTime);
 			return buildErrorResult(job, /* @__PURE__ */ new Error(`${actionTypeName}: source document ${input.sourceId} not found: ${error instanceof Error ? error.message : String(error)}`), startTime);
 		}
 		let operation = createOperation(action, getNextIndexForScope(sourceDoc, job.scope), skip, {
@@ -3159,6 +3180,7 @@ var SimpleJobExecutor = class {
 			maxSkipThreshold: config.maxSkipThreshold ?? MAX_SKIP_THRESHOLD,
 			maxConcurrency: config.maxConcurrency ?? 1,
 			jobTimeoutMs: config.jobTimeoutMs ?? 3e4,
+			deferredJobTtlMs: config.deferredJobTtlMs ?? 3e4,
 			retryBaseDelayMs: config.retryBaseDelayMs ?? 100,
 			retryMaxDelayMs: config.retryMaxDelayMs ?? 5e3,
 			yieldDeadlineMs: config.yieldDeadlineMs ?? 50
@@ -4557,8 +4579,8 @@ function createForwardingPoolInstrumentation(name) {
 }
 //#endregion
 //#region src/storage/migrations/001_create_operation_table.ts
-var _001_create_operation_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$16 });
-async function up$16(db) {
+var _001_create_operation_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$18 });
+async function up$18(db) {
 	await db.schema.createTable("Operation").addColumn("id", "serial", (col) => col.primaryKey()).addColumn("jobId", "text", (col) => col.notNull()).addColumn("opId", "text", (col) => col.notNull()).addColumn("prevOpId", "text", (col) => col.notNull()).addColumn("writeTimestampUtcMs", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).addColumn("documentId", "text", (col) => col.notNull()).addColumn("documentType", "text", (col) => col.notNull()).addColumn("scope", "text", (col) => col.notNull()).addColumn("branch", "text", (col) => col.notNull()).addColumn("timestampUtcMs", "timestamptz", (col) => col.notNull()).addColumn("index", "integer", (col) => col.notNull()).addColumn("action", "jsonb", (col) => col.notNull()).addColumn("skip", "integer", (col) => col.notNull()).addColumn("error", "text").addColumn("hash", "text", (col) => col.notNull()).addUniqueConstraint("unique_revision", [
 		"documentId",
 		"scope",
@@ -4583,8 +4605,8 @@ async function up$16(db) {
 }
 //#endregion
 //#region src/storage/migrations/002_create_keyframe_table.ts
-var _002_create_keyframe_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$15 });
-async function up$15(db) {
+var _002_create_keyframe_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$17 });
+async function up$17(db) {
 	await db.schema.createTable("Keyframe").addColumn("id", "serial", (col) => col.primaryKey()).addColumn("documentId", "text", (col) => col.notNull()).addColumn("documentType", "text", (col) => col.notNull()).addColumn("scope", "text", (col) => col.notNull()).addColumn("branch", "text", (col) => col.notNull()).addColumn("revision", "integer", (col) => col.notNull()).addColumn("document", "jsonb", (col) => col.notNull()).addColumn("createdAt", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).addUniqueConstraint("unique_keyframe", [
 		"documentId",
 		"scope",
@@ -4600,14 +4622,14 @@ async function up$15(db) {
 }
 //#endregion
 //#region src/storage/migrations/003_create_document_table.ts
-var _003_create_document_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$14 });
-async function up$14(db) {
+var _003_create_document_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$16 });
+async function up$16(db) {
 	await db.schema.createTable("Document").addColumn("id", "text", (col) => col.primaryKey()).addColumn("createdAt", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).addColumn("updatedAt", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).execute();
 }
 //#endregion
 //#region src/storage/migrations/004_create_document_relationship_table.ts
-var _004_create_document_relationship_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$13 });
-async function up$13(db) {
+var _004_create_document_relationship_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$15 });
+async function up$15(db) {
 	await db.schema.createTable("DocumentRelationship").addColumn("id", "text", (col) => col.primaryKey()).addColumn("sourceId", "text", (col) => col.notNull().references("Document.id").onDelete("cascade")).addColumn("targetId", "text", (col) => col.notNull().references("Document.id").onDelete("cascade")).addColumn("relationshipType", "text", (col) => col.notNull()).addColumn("metadata", "jsonb").addColumn("createdAt", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).addColumn("updatedAt", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).addUniqueConstraint("unique_source_target_type", [
 		"sourceId",
 		"targetId",
@@ -4619,14 +4641,14 @@ async function up$13(db) {
 }
 //#endregion
 //#region src/storage/migrations/005_create_indexer_state_table.ts
-var _005_create_indexer_state_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$12 });
-async function up$12(db) {
+var _005_create_indexer_state_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$14 });
+async function up$14(db) {
 	await db.schema.createTable("IndexerState").addColumn("id", "integer", (col) => col.primaryKey().generatedAlwaysAsIdentity()).addColumn("lastOperationId", "integer", (col) => col.notNull()).addColumn("lastOperationTimestamp", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).execute();
 }
 //#endregion
 //#region src/storage/migrations/006_create_document_snapshot_table.ts
-var _006_create_document_snapshot_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$11 });
-async function up$11(db) {
+var _006_create_document_snapshot_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$13 });
+async function up$13(db) {
 	await db.schema.createTable("DocumentSnapshot").addColumn("id", "text", (col) => col.primaryKey()).addColumn("documentId", "text", (col) => col.notNull()).addColumn("slug", "text").addColumn("name", "text").addColumn("scope", "text", (col) => col.notNull()).addColumn("branch", "text", (col) => col.notNull()).addColumn("content", "jsonb", (col) => col.notNull()).addColumn("documentType", "text", (col) => col.notNull()).addColumn("lastOperationIndex", "integer", (col) => col.notNull()).addColumn("lastOperationHash", "text", (col) => col.notNull()).addColumn("lastUpdatedAt", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).addColumn("snapshotVersion", "integer", (col) => col.notNull().defaultTo(1)).addColumn("identifiers", "jsonb").addColumn("metadata", "jsonb").addColumn("isDeleted", "boolean", (col) => col.notNull().defaultTo(false)).addColumn("deletedAt", "timestamptz").addUniqueConstraint("unique_doc_scope_branch", [
 		"documentId",
 		"scope",
@@ -4647,8 +4669,8 @@ async function up$11(db) {
 }
 //#endregion
 //#region src/storage/migrations/007_create_slug_mapping_table.ts
-var _007_create_slug_mapping_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$10 });
-async function up$10(db) {
+var _007_create_slug_mapping_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$12 });
+async function up$12(db) {
 	await db.schema.createTable("SlugMapping").addColumn("slug", "text", (col) => col.primaryKey()).addColumn("documentId", "text", (col) => col.notNull()).addColumn("scope", "text", (col) => col.notNull()).addColumn("branch", "text", (col) => col.notNull()).addColumn("createdAt", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).addColumn("updatedAt", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).addUniqueConstraint("unique_docid_scope_branch", [
 		"documentId",
 		"scope",
@@ -4658,14 +4680,14 @@ async function up$10(db) {
 }
 //#endregion
 //#region src/storage/migrations/008_create_view_state_table.ts
-var _008_create_view_state_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$9 });
-async function up$9(db) {
+var _008_create_view_state_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$11 });
+async function up$11(db) {
 	await db.schema.createTable("ViewState").addColumn("readModelId", "text", (col) => col.primaryKey()).addColumn("lastOrdinal", "integer", (col) => col.notNull().defaultTo(0)).addColumn("lastOperationTimestamp", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).execute();
 }
 //#endregion
 //#region src/storage/migrations/009_create_operation_index_tables.ts
-var _009_create_operation_index_tables_exports = /* @__PURE__ */ __exportAll({ up: () => up$8 });
-async function up$8(db) {
+var _009_create_operation_index_tables_exports = /* @__PURE__ */ __exportAll({ up: () => up$10 });
+async function up$10(db) {
 	await db.schema.createTable("document_collections").addColumn("documentId", "text", (col) => col.notNull()).addColumn("collectionId", "text", (col) => col.notNull()).addColumn("joinedOrdinal", "bigint", (col) => col.notNull().defaultTo(0)).addColumn("leftOrdinal", "bigint").addPrimaryKeyConstraint("document_collections_pkey", ["documentId", "collectionId"]).execute();
 	await db.schema.createIndex("idx_document_collections_collectionId").on("document_collections").column("collectionId").execute();
 	await db.schema.createIndex("idx_doc_collections_collection_range").on("document_collections").columns(["collectionId", "joinedOrdinal"]).execute();
@@ -4679,8 +4701,8 @@ async function up$8(db) {
 }
 //#endregion
 //#region src/storage/migrations/010_create_sync_tables.ts
-var _010_create_sync_tables_exports = /* @__PURE__ */ __exportAll({ up: () => up$7 });
-async function up$7(db) {
+var _010_create_sync_tables_exports = /* @__PURE__ */ __exportAll({ up: () => up$9 });
+async function up$9(db) {
 	await db.schema.createTable("sync_remotes").addColumn("name", "text", (col) => col.primaryKey()).addColumn("collection_id", "text", (col) => col.notNull()).addColumn("channel_type", "text", (col) => col.notNull()).addColumn("channel_id", "text", (col) => col.notNull().defaultTo("")).addColumn("remote_name", "text", (col) => col.notNull().defaultTo("")).addColumn("channel_parameters", "jsonb", (col) => col.notNull().defaultTo(sql`'{}'::jsonb`)).addColumn("filter_document_ids", "jsonb").addColumn("filter_scopes", "jsonb").addColumn("filter_branch", "text", (col) => col.notNull().defaultTo("main")).addColumn("push_state", "text", (col) => col.notNull().defaultTo("idle")).addColumn("push_last_success_utc_ms", "text").addColumn("push_last_failure_utc_ms", "text").addColumn("push_failure_count", "integer", (col) => col.notNull().defaultTo(0)).addColumn("pull_state", "text", (col) => col.notNull().defaultTo("idle")).addColumn("pull_last_success_utc_ms", "text").addColumn("pull_last_failure_utc_ms", "text").addColumn("pull_failure_count", "integer", (col) => col.notNull().defaultTo(0)).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).execute();
 	await db.schema.createIndex("idx_sync_remotes_collection").on("sync_remotes").column("collection_id").execute();
 	await db.schema.createTable("sync_cursors").addColumn("remote_name", "text", (col) => col.primaryKey().references("sync_remotes.name").onDelete("cascade")).addColumn("cursor_ordinal", "bigint", (col) => col.notNull().defaultTo(0)).addColumn("last_synced_at_utc_ms", "text").addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).execute();
@@ -4688,8 +4710,8 @@ async function up$7(db) {
 }
 //#endregion
 //#region src/storage/migrations/011_add_cursor_type_column.ts
-var _011_add_cursor_type_column_exports = /* @__PURE__ */ __exportAll({ up: () => up$6 });
-async function up$6(db) {
+var _011_add_cursor_type_column_exports = /* @__PURE__ */ __exportAll({ up: () => up$8 });
+async function up$8(db) {
 	await db.deleteFrom("sync_cursors").where("remote_name", "like", "outbox::%").execute();
 	await db.deleteFrom("sync_remotes").where("name", "like", "outbox::%").execute();
 	await db.schema.dropTable("sync_cursors").execute();
@@ -4698,64 +4720,64 @@ async function up$6(db) {
 }
 //#endregion
 //#region src/storage/migrations/012_add_source_remote_column.ts
-var _012_add_source_remote_column_exports = /* @__PURE__ */ __exportAll({ up: () => up$5 });
-async function up$5(db) {
+var _012_add_source_remote_column_exports = /* @__PURE__ */ __exportAll({ up: () => up$7 });
+async function up$7(db) {
 	await db.schema.alterTable("operation_index_operations").addColumn("sourceRemote", "text", (col) => col.notNull().defaultTo("")).execute();
 }
 //#endregion
 //#region src/storage/migrations/013_create_sync_dead_letters_table.ts
-var _013_create_sync_dead_letters_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$4 });
-async function up$4(db) {
+var _013_create_sync_dead_letters_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$6 });
+async function up$6(db) {
 	await db.schema.createTable("sync_dead_letters").addColumn("ordinal", "serial", (col) => col.primaryKey()).addColumn("id", "text", (col) => col.unique().notNull()).addColumn("job_id", "text", (col) => col.notNull()).addColumn("job_dependencies", "jsonb", (col) => col.notNull().defaultTo(sql`'[]'::jsonb`)).addColumn("remote_name", "text", (col) => col.notNull().references("sync_remotes.name").onDelete("cascade")).addColumn("document_id", "text", (col) => col.notNull()).addColumn("scopes", "jsonb", (col) => col.notNull().defaultTo(sql`'[]'::jsonb`)).addColumn("branch", "text", (col) => col.notNull()).addColumn("operations", "jsonb", (col) => col.notNull().defaultTo(sql`'[]'::jsonb`)).addColumn("error_source", "text", (col) => col.notNull()).addColumn("error_message", "text", (col) => col.notNull()).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).execute();
 	await db.schema.createIndex("idx_sync_dead_letters_remote").on("sync_dead_letters").column("remote_name").execute();
 }
 //#endregion
 //#region src/storage/migrations/014_create_processor_cursor_table.ts
-var _014_create_processor_cursor_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$3 });
-async function up$3(db) {
+var _014_create_processor_cursor_table_exports = /* @__PURE__ */ __exportAll({ up: () => up$5 });
+async function up$5(db) {
 	await db.schema.createTable("ProcessorCursor").addColumn("processorId", "text", (col) => col.primaryKey()).addColumn("factoryId", "text", (col) => col.notNull()).addColumn("driveId", "text", (col) => col.notNull()).addColumn("processorIndex", "integer", (col) => col.notNull()).addColumn("lastOrdinal", "integer", (col) => col.notNull().defaultTo(sql`0`)).addColumn("status", "text", (col) => col.notNull().defaultTo(sql`'active'`)).addColumn("lastError", "text").addColumn("lastErrorTimestamp", "timestamptz").addColumn("createdAt", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).addColumn("updatedAt", "timestamptz", (col) => col.notNull().defaultTo(sql`NOW()`)).execute();
 }
 //#endregion
 //#region src/storage/migrations/015_add_operation_denied_reason.ts
 var _015_add_operation_denied_reason_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$2,
-	up: () => up$2
+	down: () => down$4,
+	up: () => up$4
 });
 /**
 * Records why authorization refused an operation. Separate from `error` so a
 * denial is distinguishable from a reducer failure without matching on a
 * message. Null for every operation written before decisions were enforced.
 */
-async function up$2(db) {
+async function up$4(db) {
 	await db.schema.alterTable("Operation").addColumn("deniedReason", "text").execute();
 	await db.schema.alterTable("operation_index_operations").addColumn("deniedReason", "text").execute();
 }
-async function down$2(db) {
+async function down$4(db) {
 	await db.schema.alterTable("operation_index_operations").dropColumn("deniedReason").execute();
 	await db.schema.alterTable("Operation").dropColumn("deniedReason").execute();
 }
 //#endregion
 //#region src/storage/migrations/016_add_dead_letter_error_type.ts
 var _016_add_dead_letter_error_type_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$1,
-	up: () => up$1
+	down: () => down$3,
+	up: () => up$3
 });
 /**
 * The classification a dead letter falls into, stored because it decides whether
 * the document stays quarantined and the in-memory error is gone after a restart.
 * Defaulted rather than nullable, so a pre-existing row rehydrates.
 */
-async function up$1(db) {
+async function up$3(db) {
 	await db.schema.alterTable("sync_dead_letters").addColumn("error_type", "text", (col) => col.notNull().defaultTo("UNCLASSIFIED")).execute();
 }
-async function down$1(db) {
+async function down$3(db) {
 	await db.schema.alterTable("sync_dead_letters").dropColumn("error_type").execute();
 }
 //#endregion
 //#region src/storage/migrations/017_create_group_references.ts
 var _017_create_group_references_exports = /* @__PURE__ */ __exportAll({
-	down: () => down,
-	up: () => up
+	down: () => down$2,
+	up: () => up$2
 });
 /**
 * One row per (document, group) reference ever discovered from an auth
@@ -4766,14 +4788,82 @@ var _017_create_group_references_exports = /* @__PURE__ */ __exportAll({
 * requires (sync), and by groupId for the documents a group change affects
 * (re-evaluation).
 */
-async function up(db) {
+async function up$2(db) {
 	await db.schema.createTable("group_references").addColumn("documentId", "text", (col) => col.notNull()).addColumn("groupId", "text", (col) => col.notNull()).addPrimaryKeyConstraint("group_references_pkey", ["documentId", "groupId"]).execute();
 	await db.schema.createIndex("idx_group_references_groupId").on("group_references").column("groupId").execute();
 }
-async function down(db) {
+async function down$2(db) {
 	await db.schema.dropTable("group_references").execute();
 }
 //#endregion
+//#region src/storage/migrations/018_add_sync_remote_bound_address.ts
+var _018_add_sync_remote_bound_address_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$1,
+	up: () => up$1
+});
+/**
+* The address a sync channel is bound to, so a channel created by one subject
+* cannot be polled by another.
+*
+* Nullable rather than defaulted: null is a channel nobody has claimed, which is
+* what every pre-existing row is and what an anonymously created channel stays
+* until its first authenticated poll adopts it. A default would claim them all
+* for one address.
+*/
+async function up$1(db) {
+	await db.schema.alterTable("sync_remotes").addColumn("bound_address", "text").execute();
+}
+async function down$1(db) {
+	await db.schema.alterTable("sync_remotes").dropColumn("bound_address").execute();
+}
+//#endregion
+//#region src/storage/migrations/019_require_action_id.ts
+var _019_require_action_id_exports = /* @__PURE__ */ __exportAll({
+	down: () => down,
+	up: () => up
+});
+/**
+* Makes an operation whose action carries no id physically unstorable.
+*
+* The id is not decoration: `deriveOperationId` hashes it into the operation id
+* and replay dedupes incoming operations by it, so an action without one
+* collapses every id-less operation on a document/scope/branch onto a single
+* derived operation id. The API rejects such an action now, and this is the
+* last line of defense behind it.
+*
+* Both tables are constrained because sync reads operations from the index
+* rather than the operation table, so poison reaching only the index would
+* still be served to a replica.
+*
+* Pre-existing rows are backfilled rather than left behind a NOT VALID
+* constraint: a row the index and the operation table disagree about is worse
+* than a missing id, because dedup keys off the value each side serves. The
+* backfill therefore mints one id per operation and writes that same id to both
+* tables, joined on the identity they share. Rewriting the action is safe: the
+* operation hash is taken over the resulting state, not over the action, and a
+* signature is verified from the params carried in the signature tuple, which
+* do not include the action id.
+*
+* The empty string is rejected alongside null. It derives the same colliding
+* operation id as an absent id, so admitting it would leave the hole open.
+*/
+async function up(db) {
+	await db.updateTable("Operation").set({ action: sql`jsonb_set(action, '{id}', to_jsonb(gen_random_uuid()::text))` }).where(sql`jsonb_typeof(action) = 'object' and coalesce(action->>'id', '') = ''`).execute();
+	await db.updateTable("operation_index_operations as oio").from("Operation as op").set({ action: sql`jsonb_set(oio.action, '{id}', to_jsonb(op.action->>'id'))` }).whereRef("oio.opId", "=", "op.opId").whereRef("oio.index", "=", "op.index").whereRef("oio.skip", "=", "op.skip").where(sql`jsonb_typeof(oio.action) = 'object' and coalesce(oio.action->>'id', '') = ''`).where(sql`coalesce(op.action->>'id', '') <> ''`).execute();
+	await db.updateTable("operation_index_operations").set({ action: sql`jsonb_set(action, '{id}', to_jsonb(gen_random_uuid()::text))` }).where(sql`jsonb_typeof(action) = 'object' and coalesce(action->>'id', '') = ''`).execute();
+	await db.schema.alterTable("Operation").addCheckConstraint("action_must_have_id", sql`action->>'id' is not null and action->>'id' <> ''`).execute();
+	await db.schema.alterTable("operation_index_operations").addCheckConstraint("action_must_have_id", sql`action->>'id' is not null and action->>'id' <> ''`).execute();
+}
+/**
+* Only the constraints are dropped. The backfilled ids stay: they are the ids
+* their operations are now known by, and reverting them would reintroduce the
+* collision the migration removed.
+*/
+async function down(db) {
+	await db.schema.alterTable("operation_index_operations").dropConstraint("action_must_have_id").execute();
+	await db.schema.alterTable("Operation").dropConstraint("action_must_have_id").execute();
+}
+//#endregion
 //#region src/storage/migrations/migrator.ts
 const REACTOR_SCHEMA = "reactor";
 const migrations = {
@@ -4793,14 +4883,22 @@ const migrations = {
 	"014_create_processor_cursor_table": _014_create_processor_cursor_table_exports,
 	"015_add_operation_denied_reason": _015_add_operation_denied_reason_exports,
 	"016_add_dead_letter_error_type": _016_add_dead_letter_error_type_exports,
-	"017_create_group_references": _017_create_group_references_exports
+	"017_create_group_references": _017_create_group_references_exports,
+	"018_add_sync_remote_bound_address": _018_add_sync_remote_bound_address_exports,
+	"019_require_action_id": _019_require_action_id_exports
 };
 var ProgrammaticMigrationProvider = class {
 	getMigrations() {
 		return Promise.resolve(migrations);
 	}
 };
-async function runMigrations(db, schema = REACTOR_SCHEMA) {
+/**
+* Applies every pending migration, or every one up to and including `upTo`.
+*
+* The bound exists so a test can reach the schema a data migration is written
+* against, populate it, and then migrate across the migration under test.
+*/
+async function runMigrations(db, schema = REACTOR_SCHEMA, upTo) {
 	try {
 		await sql`CREATE SCHEMA IF NOT EXISTS ${sql.id(schema)}`.execute(db);
 	} catch (error) {
@@ -4818,7 +4916,7 @@ async function runMigrations(db, schema = REACTOR_SCHEMA) {
 	let error;
 	let results;
 	try {
-		const result = await migrator.migrateToLatest();
+		const result = upTo ? await migrator.migrateTo(upTo) : await migrator.migrateToLatest();
 		error = result.error;
 		results = result.results;
 	} catch (e) {
@@ -4847,6 +4945,6 @@ async function getMigrationStatus(db, schema = REACTOR_SCHEMA) {
 //#region src/core/drive-container-types.ts
 const DEFAULT_DRIVE_CONTAINER_TYPES = new Set(["powerhouse/document-drive", "powerhouse/reactor-drive"]);
 //#endregion
-export { createEmptyConsistencyToken as A, DocumentDeletedError as B, RevisionMismatchError as C, ModuleNotFoundError as D, InvalidModuleError as E, authDecisionModel as F, matchesScope as G, ExcessiveReshuffleError as H, buildDecisionModel as I, __exportAll as J, parsePagingOptions as K, AuthEnforcementDisabledError as L, decideAtHead as M, selectDecisionModel as N, GATED_DOCUMENT_ACTIONS as O, documentDecisionModel as P, AuthTimestampNotMonotonicError as R, OptimisticLockError as S, DuplicateModuleError as T, InvalidOperationTimestampError as U, DocumentNotFoundError as V, UpgradePreconditionFailedError as W, DocumentMetaCache as _, createForwardingPoolInstrumentation as a, AppendConditionFailedError as b, KyselyKeyframeStore as c, DriveCollectionId as d, KyselyExecutionScope as f, KyselyOperationIndex as g, KyselyWriteCache as h, runMigrations as i, targetDocumentId as j, createConsistencyToken as k, DocumentModelRegistry as l, EventBus as m, REACTOR_SCHEMA as n, instrumentPgPool as o, resolveFeatureFlags as p, throwIfAborted as q, getMigrationStatus as r, KyselyOperationStore as s, DEFAULT_DRIVE_CONTAINER_TYPES as t, SimpleJobExecutor as u, CollectionMembershipCache as v, DuplicateManifestError as w, DuplicateOperationError as x, APPEND_CONDITION_FAILED_PREFIX as y, AuthorizationDeniedError as z };
+export { GATED_DOCUMENT_ACTIONS as A, AuthTimestampNotMonotonicError as B, DuplicateOperationError as C, DuplicateModuleError as D, DuplicateManifestError as E, selectDecisionModel as F, InvalidOperationTimestampError as G, DocumentDeletedError as H, documentDecisionModel as I, parsePagingOptions as J, UpgradePreconditionFailedError as K, authDecisionModel as L, createEmptyConsistencyToken as M, targetDocumentId as N, InvalidModuleError as O, decideAtHead as P, buildDecisionModel as R, AppendConditionFailedError as S, RevisionMismatchError as T, DocumentNotFoundError as U, AuthorizationDeniedError as V, ExcessiveReshuffleError as W, __exportAll as X, throwIfAborted as Y, DocumentMetaCache as _, createForwardingPoolInstrumentation as a, JobExecutorEventTypes as b, KyselyKeyframeStore as c, DriveCollectionId as d, KyselyExecutionScope as f, KyselyOperationIndex as g, KyselyWriteCache as h, runMigrations as i, createConsistencyToken as j, ModuleNotFoundError as k, DocumentModelRegistry as l, EventBus as m, REACTOR_SCHEMA as n, instrumentPgPool as o, resolveFeatureFlags as p, matchesScope as q, getMigrationStatus as r, KyselyOperationStore as s, DEFAULT_DRIVE_CONTAINER_TYPES as t, SimpleJobExecutor as u, CollectionMembershipCache as v, OptimisticLockError as w, APPEND_CONDITION_FAILED_PREFIX as x, DEFAULT_DEFERRED_JOB_TTL_MS as y, AuthEnforcementDisabledError as z };
 
-//# sourceMappingURL=drive-container-types-RZa1wukO.js.map
+//# sourceMappingURL=drive-container-types-bVQ_8YwX.js.map