@powerhousedao/reactor 6.2.3-dev.33 → 6.2.3-dev.35

package/dist/{build-worker-executor-BonPsKdx.js → build-worker-executor-B9IfcRij.js}

@@ -1,4 +1,4 @@
-import { O as DocumentMetaCache, _ as KyselyExecutionScope, a as DEFAULT_DRIVE_CONTAINER_TYPES, b as KyselyWriteCache, d as KyselyOperationStore, f as KyselyKeyframeStore, k as CollectionMembershipCache, m as SimpleJobExecutor, mt as ReactorEventTypes, o as REACTOR_SCHEMA, p as DocumentModelRegistry, x as KyselyOperationIndex, y as EventBus } from "./forwarding-logger-BkwlvD9W.js";
+import { C as KyselyWriteCache, I as DocumentMetaCache, L as CollectionMembershipCache, S as EventBus, _ as KyselyExecutionScope, a as DEFAULT_DRIVE_CONTAINER_TYPES, d as KyselyOperationStore, f as KyselyKeyframeStore, kt as ReactorEventTypes, m as SimpleJobExecutor, o as REACTOR_SCHEMA, p as DocumentModelRegistry, w as KyselyOperationIndex } from "./forwarding-logger-DMqDs9tE.js";
 //#region src/executor/worker/build-worker-executor.ts
 async function defaultLoadFactory(spec) {
 	const ref = spec.module;
@@ -90,10 +90,16 @@ async function buildWorkerExecutor(options) {
 			const captured = signatureRefusals;
 			signatureRefusals = [];
 			return captured;
+		},
+		evictPurged(documentIds) {
+			for (const documentId of documentIds) {
+				writeCache.invalidate(documentId);
+				documentMetaCache.invalidate(documentId);
+			}
 		}
 	};
 }
 //#endregion
 export { defaultLoadFactory as n, buildWorkerExecutor as t };
 
-//# sourceMappingURL=build-worker-executor-BonPsKdx.js.map
+//# sourceMappingURL=build-worker-executor-B9IfcRij.js.map

package/dist/build-worker-executor-B9IfcRij.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-worker-executor-B9IfcRij.js","names":[],"sources":["../src/executor/worker/build-worker-executor.ts"],"sourcesContent":["import type {\n  DocumentModelModule,\n  ISigner,\n  OperationWithContext,\n} from \"@powerhousedao/shared/document-model\";\nimport type { ILogger } from \"document-model\";\nimport type { Kysely } from \"kysely\";\nimport { CollectionMembershipCache } from \"../../cache/collection-membership-cache.js\";\nimport { DocumentMetaCache } from \"../../cache/document-meta-cache.js\";\nimport { KyselyOperationIndex } from \"../../cache/kysely-operation-index.js\";\nimport { KyselyWriteCache } from \"../../cache/kysely-write-cache.js\";\nimport type { WriteCacheConfig } from \"../../cache/write-cache-types.js\";\nimport { DEFAULT_DRIVE_CONTAINER_TYPES } from \"../../core/drive-container-types.js\";\nimport type { Database } from \"../../core/types.js\";\nimport { EventBus } from \"../../events/event-bus.js\";\nimport {\n  ReactorEventTypes,\n  type JobWriteReadyEvent,\n  type SignatureRefusedEvent,\n} from \"../../events/types.js\";\nimport { DocumentModelRegistry } from \"../../registry/implementation.js\";\nimport type { JobMeta } from \"../../shared/types.js\";\nimport { KyselyKeyframeStore } from \"../../storage/kysely/keyframe-store.js\";\nimport { KyselyOperationStore } from \"../../storage/kysely/store.js\";\nimport type { Database as StorageDatabase } from \"../../storage/kysely/types.js\";\nimport { REACTOR_SCHEMA } from \"../../storage/migrations/migrator.js\";\nimport { KyselyExecutionScope } from \"../execution-scope.js\";\nimport { SimpleJobExecutor } from \"../simple-job-executor.js\";\nimport type { SignatureTrustPolicy } from \"../../signer/types.js\";\nimport type { JobExecutorConfig } from \"../types.js\";\nimport type {\n  FactorySpec,\n  InitMessage,\n  ModelManifestEntry,\n} from \"./protocol.js\";\n\n/**\n * In-worker capture of the JOB_WRITE_READY event emitted by the executor.\n * The worker forwards `operations` and `jobMeta` back to the parent; the\n * parent re-enriches `collectionMemberships` at emit time.\n */\nexport type WorkerWriteReadyCapture = {\n  operations: OperationWithContext[];\n  jobMeta: JobMeta;\n};\n\nexport type WorkerExecutorStack = {\n  executor: SimpleJobExecutor;\n  registry: DocumentModelRegistry;\n  /**\n   * Synchronously pops the most-recent JOB_WRITE_READY captured on this\n   * worker's local event bus and clears it. Returns null if the executor\n   * did not produce one for this job.\n   */\n  takeLastWriteReady(): WorkerWriteReadyCapture | null;\n  /** Drains the refusals this worker's executor emitted since the last call. */\n  takeSignatureRefusals(): SignatureRefusedEvent[];\n  /** Drops purged ids from this worker's write and meta caches. */\n  evictPurged(documentIds: string[]): void;\n};\n\nexport type BuildWorkerExecutorOptions = {\n  init: InitMessage;\n  database: Kysely<Database>;\n  logger: ILogger;\n  executorConfig?: JobExecutorConfig;\n  driveContainerTypes?: ReadonlySet<string>;\n  /**\n   * Override the module loader used to materialize factory specs. Tests\n   * can inject a deterministic resolver instead of touching the real\n   * Node module loader.\n   */\n  loadFactory?: (spec: FactorySpec) => Promise<unknown>;\n};\n\nexport async function defaultLoadFactory(spec: FactorySpec): Promise<unknown> {\n  const ref = spec.module;\n  const specifier =\n    \"filePath\" in ref\n      ? new URL(`file://${ref.filePath}`).href\n      : ref.packageName;\n  const mod = (await import(specifier)) as Record<string, unknown>;\n  const exported = mod[ref.exportName];\n  if (typeof exported === \"function\") {\n    return (exported as (args: unknown) => unknown)(spec.initArgs);\n  }\n  return exported;\n}\n\nasync function loadModelManifest(\n  entries: ModelManifestEntry[],\n  loadFactory: (spec: FactorySpec) => Promise<unknown>,\n  registry: DocumentModelRegistry,\n  logger: ILogger,\n): Promise<void> {\n  for (const entry of entries) {\n    let module: DocumentModelModule;\n    try {\n      module = (await loadFactory(entry.spec)) as DocumentModelModule;\n    } catch (error) {\n      logger.error(\n        \"worker failed to load document model: @entry @error\",\n        entry,\n        error,\n      );\n      throw error;\n    }\n    const [result] = registry.registerModules(module);\n    if (result.status === \"error\") {\n      logger.error(\n        \"worker failed to register document model: @entry @error\",\n        entry,\n        result.error,\n      );\n      throw result.error;\n    }\n  }\n}\n\n/**\n * Assembles the in-worker storage stack plus a {@link SimpleJobExecutor}\n * bound to a pre-built Kysely instance. The parent owns the wire protocol\n * and routing; the worker owns everything below `SimpleJobExecutor`.\n *\n * The local event bus exists only to satisfy the executor's contract: its\n * JOB_WRITE_READY emissions are captured here and shipped to the parent\n * via {@link WorkerExecutorStack.takeLastWriteReady}.\n */\nexport async function buildWorkerExecutor(\n  options: BuildWorkerExecutorOptions,\n): Promise<WorkerExecutorStack> {\n  const { init, database: baseDatabase, logger } = options;\n  const driveContainerTypes =\n    options.driveContainerTypes ?? DEFAULT_DRIVE_CONTAINER_TYPES;\n  const loadFactory = options.loadFactory ?? defaultLoadFactory;\n\n  const registry = new DocumentModelRegistry();\n  await loadModelManifest(init.models, loadFactory, registry, logger);\n\n  let signer: ISigner | undefined;\n  if (init.signer) {\n    try {\n      signer = (await loadFactory(init.signer)) as ISigner;\n    } catch (error) {\n      logger.error(\n        \"worker failed to load signer: @spec @error\",\n        init.signer.module,\n        error,\n      );\n      throw error;\n    }\n  }\n\n  let trustPolicy: SignatureTrustPolicy | undefined;\n  if (init.trustPolicy) {\n    try {\n      trustPolicy = (await loadFactory(\n        init.trustPolicy,\n      )) as SignatureTrustPolicy;\n    } catch (error) {\n      logger.error(\n        \"worker failed to load trust policy: @spec @error\",\n        init.trustPolicy.module,\n        error,\n      );\n      throw error;\n    }\n  }\n\n  const database = baseDatabase.withSchema(REACTOR_SCHEMA);\n  const operationStore = new KyselyOperationStore(\n    database as unknown as Kysely<StorageDatabase>,\n  );\n  const keyframeStore = new KyselyKeyframeStore(\n    database as unknown as Kysely<StorageDatabase>,\n  );\n\n  const cacheConfig: WriteCacheConfig = {\n    maxDocuments: 100,\n    ringBufferSize: 10,\n    keyframeInterval: 10,\n  };\n  const writeCache = new KyselyWriteCache(\n    keyframeStore,\n    operationStore,\n    registry,\n    cacheConfig,\n  );\n  await writeCache.startup();\n\n  const operationIndex = new KyselyOperationIndex(\n    database as unknown as Kysely<StorageDatabase>,\n  );\n\n  const documentMetaCache = new DocumentMetaCache(operationStore, {\n    maxDocuments: 1000,\n  });\n  await documentMetaCache.startup();\n\n  const collectionMembershipCache = new CollectionMembershipCache(\n    operationIndex,\n  );\n\n  const executionScope = new KyselyExecutionScope(\n    database as unknown as Kysely<StorageDatabase>,\n    operationStore,\n    operationIndex,\n    keyframeStore,\n    writeCache,\n    documentMetaCache,\n    collectionMembershipCache,\n  );\n\n  const eventBus = new EventBus();\n  let lastWriteReady: WorkerWriteReadyCapture | null = null;\n  eventBus.subscribe(\n    ReactorEventTypes.JOB_WRITE_READY,\n    (_t: number, event: JobWriteReadyEvent) => {\n      lastWriteReady = {\n        operations: event.operations,\n        jobMeta: event.jobMeta,\n      };\n    },\n  );\n\n  let signatureRefusals: SignatureRefusedEvent[] = [];\n  eventBus.subscribe(\n    ReactorEventTypes.SIGNATURE_REFUSED,\n    (_t: number, event: SignatureRefusedEvent) => {\n      signatureRefusals.push(event);\n    },\n  );\n\n  const executorConfig = options.executorConfig ?? {};\n  const executor = new SimpleJobExecutor(\n    logger,\n    registry,\n    operationStore,\n    eventBus,\n    writeCache,\n    operationIndex,\n    documentMetaCache,\n    collectionMembershipCache,\n    driveContainerTypes,\n    executorConfig,\n    executionScope,\n    signer,\n    trustPolicy,\n  );\n\n  return {\n    executor,\n    registry,\n    takeLastWriteReady(): WorkerWriteReadyCapture | null {\n      const captured = lastWriteReady;\n      lastWriteReady = null;\n      return captured;\n    },\n    takeSignatureRefusals(): SignatureRefusedEvent[] {\n      const captured = signatureRefusals;\n      signatureRefusals = [];\n      return captured;\n    },\n    evictPurged(documentIds: string[]): void {\n      for (const documentId of documentIds) {\n        writeCache.invalidate(documentId);\n        documentMetaCache.invalidate(documentId);\n      }\n    },\n  };\n}\n"],"mappings":";;AA2EA,eAAsB,mBAAmB,MAAqC;CAC5E,MAAM,MAAM,KAAK;CAMjB,MAAM,YAAW,OAJf,cAAc,MAAA,OACV,IAAI,IAAI,UAAU,IAAI,UAAU,CAAC,CAAC,QAAA,OAClC,IAAI,cAAA,CAEW,IAAI;CACzB,IAAI,OAAO,aAAa,YACtB,OAAQ,SAAwC,KAAK,QAAQ;CAE/D,OAAO;AACT;AAEA,eAAe,kBACb,SACA,aACA,UACA,QACe;CACf,KAAK,MAAM,SAAS,SAAS;EAC3B,IAAI;EACJ,IAAI;GACF,SAAU,MAAM,YAAY,MAAM,IAAI;EACxC,SAAS,OAAO;GACd,OAAO,MACL,uDACA,OACA,KACF;GACA,MAAM;EACR;EACA,MAAM,CAAC,UAAU,SAAS,gBAAgB,MAAM;EAChD,IAAI,OAAO,WAAW,SAAS;GAC7B,OAAO,MACL,2DACA,OACA,OAAO,KACT;GACA,MAAM,OAAO;EACf;CACF;AACF;;;;;;;;;;AAWA,eAAsB,oBACpB,SAC8B;CAC9B,MAAM,EAAE,MAAM,UAAU,cAAc,WAAW;CACjD,MAAM,sBACJ,QAAQ,uBAAuB;CACjC,MAAM,cAAc,QAAQ,eAAe;CAE3C,MAAM,WAAW,IAAI,sBAAsB;CAC3C,MAAM,kBAAkB,KAAK,QAAQ,aAAa,UAAU,MAAM;CAElE,IAAI;CACJ,IAAI,KAAK,QACP,IAAI;EACF,SAAU,MAAM,YAAY,KAAK,MAAM;CACzC,SAAS,OAAO;EACd,OAAO,MACL,8CACA,KAAK,OAAO,QACZ,KACF;EACA,MAAM;CACR;CAGF,IAAI;CACJ,IAAI,KAAK,aACP,IAAI;EACF,cAAe,MAAM,YACnB,KAAK,WACP;CACF,SAAS,OAAO;EACd,OAAO,MACL,oDACA,KAAK,YAAY,QACjB,KACF;EACA,MAAM;CACR;CAGF,MAAM,WAAW,aAAa,WAAW,cAAc;CACvD,MAAM,iBAAiB,IAAI,qBACzB,QACF;CACA,MAAM,gBAAgB,IAAI,oBACxB,QACF;CAOA,MAAM,aAAa,IAAI,iBACrB,eACA,gBACA,UACA;EARA,cAAc;EACd,gBAAgB;EAChB,kBAAkB;CAMR,CACZ;CACA,MAAM,WAAW,QAAQ;CAEzB,MAAM,iBAAiB,IAAI,qBACzB,QACF;CAEA,MAAM,oBAAoB,IAAI,kBAAkB,gBAAgB,EAC9D,cAAc,IAChB,CAAC;CACD,MAAM,kBAAkB,QAAQ;CAEhC,MAAM,4BAA4B,IAAI,0BACpC,cACF;CAEA,MAAM,iBAAiB,IAAI,qBACzB,UACA,gBACA,gBACA,eACA,YACA,mBACA,yBACF;CAEA,MAAM,WAAW,IAAI,SAAS;CAC9B,IAAI,iBAAiD;CACrD,SAAS,UACP,kBAAkB,kBACjB,IAAY,UAA8B;EACzC,iBAAiB;GACf,YAAY,MAAM;GAClB,SAAS,MAAM;EACjB;CACF,CACF;CAEA,IAAI,oBAA6C,CAAC;CAClD,SAAS,UACP,kBAAkB,oBACjB,IAAY,UAAiC;EAC5C,kBAAkB,KAAK,KAAK;CAC9B,CACF;CAEA,MAAM,iBAAiB,QAAQ,kBAAkB,CAAC;CAiBlD,OAAO;EACL,UAAA,IAjBmB,kBACnB,QACA,UACA,gBACA,UACA,YACA,gBACA,mBACA,2BACA,qBACA,gBACA,gBACA,QACA,WAIO;EACP;EACA,qBAAqD;GACnD,MAAM,WAAW;GACjB,iBAAiB;GACjB,OAAO;EACT;EACA,wBAAiD;GAC/C,MAAM,WAAW;GACjB,oBAAoB,CAAC;GACrB,OAAO;EACT;EACA,YAAY,aAA6B;GACvC,KAAK,MAAM,cAAc,aAAa;IACpC,WAAW,WAAW,UAAU;IAChC,kBAAkB,WAAW,UAAU;GACzC;EACF;CACF;AACF"}

package/dist/{document-indexer-I6i_YzsR.js → document-indexer-CZqIpdz2.js}

@@ -1,5 +1,5 @@
-import { C as SettledWatermark, at as DocumentNotFoundError, mt as ReactorEventTypes, vt as yieldToMain, w as createKyselyWatermarkProbe } from "./forwarding-logger-BkwlvD9W.js";
-import { createAuthState, isDenied } from "@powerhousedao/shared/document-model";
+import { D as acquirePurgeLocks, M as createKyselyWatermarkProbe, Nt as yieldToMain, O as findPurged, gt as DocumentNotFoundError, j as SettledWatermark, kt as ReactorEventTypes } from "./forwarding-logger-DMqDs9tE.js";
+import { createAuthState, isDenied, isPurgeMarker } from "@powerhousedao/shared/document-model";
 import { v4 } from "uuid";
 import { childLogger } from "document-model";
 //#region src/catch-up/scheduler.ts
@@ -336,11 +336,27 @@ function mergeByOrdinal(...lists) {
 	for (const list of lists) for (const item of list) byOrdinal.set(ordinalOf(item), item);
 	return [...byOrdinal.values()].sort((a, b) => ordinalOf(a) - ordinalOf(b));
 }
+/** The ids whose purge an operation's rows must not outlive. */
+function purgeFenceIds(items) {
+	const ids = /* @__PURE__ */ new Set();
+	for (const { operation, context } of items) {
+		ids.add(context.documentId);
+		if (operation.action.type !== "ADD_RELATIONSHIP") continue;
+		const input = operation.action.input;
+		if (typeof input.sourceId === "string") ids.add(input.sourceId);
+		if (typeof input.targetId === "string") ids.add(input.targetId);
+	}
+	return [...ids].sort();
+}
+function dropPurged(items, purged) {
+	if (purged.size === 0) return items;
+	return items.filter((item) => isPurgeMarker(item.operation) || !purged.has(item.context.documentId));
+}
 function errorMessage(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 /** A read model whose cursor only sweeps and boot replay advance. */
-var BaseReadModel = class {
+var BaseReadModel = class BaseReadModel {
 	db;
 	operationIndex;
 	writeCache;
@@ -372,7 +388,10 @@ var BaseReadModel = class {
 		]);
 		this.indexing = normalizeIndexingConfig(config.indexing ?? defaultReadModelIndexingConfig);
 		this.cursor = new ContiguousCursor(0, this.maxTrackedAboveCursor);
+		if ((config.purgeFence ?? "locked") === "locked" && this.commitOperations !== BaseReadModel.prototype.commitOperations && !this.constructor.commitsInFenceTransaction) throw new Error(`Read model ${config.readModelId}: purgeFence "locked" commits in a transaction its commitOperations must write through. Write through the trx argument and set static commitsInFenceTransaction to true, or set purgeFence "skip" (rows on another handle) or "none" (no rows here, or its own transaction).`);
 	}
+	/** Set by a subclass whose commitOperations writes through its trx argument. */
+	static commitsInFenceTransaction = false;
 	get consumerId() {
 		return this.config.readModelId;
 	}
@@ -504,7 +523,39 @@ var BaseReadModel = class {
 	}
 	/** Called after the cursor advances. */
 	onCursorAdvanced(appliedThrough) {}
-	async commitOperations(items) {}
+	/** Writes through `trx` when given: the purge fence's transaction. */
+	async commitOperations(items, trx) {}
+	/** The handle document_purges is read through; `db` may be the fence trx. */
+	purgeLookup(db) {
+		return db;
+	}
+	/** False when the batch writes no rows, so the fence opens no transaction. */
+	writesRows(items) {
+		return true;
+	}
+	/** Every delivery commits through here. */
+	async commitFenced(items) {
+		const fence = this.config.purgeFence ?? "locked";
+		if (fence === "none") {
+			await this.commitOperations(items);
+			return;
+		}
+		if (items.length === 0 || !this.writesRows(items)) {
+			if (items.length > 0) await this.commitOperations(items);
+			return;
+		}
+		const ids = purgeFenceIds(items);
+		if (fence === "skip") {
+			const live = dropPurged(items, await findPurged(this.purgeLookup(this.db), ids));
+			if (live.length > 0) await this.commitOperations(live);
+			return;
+		}
+		await this.db.transaction().execute(async (trx) => {
+			await acquirePurgeLocks(trx, ids, "shared");
+			const live = dropPurged(items, await findPurged(this.purgeLookup(trx), ids));
+			if (live.length > 0) await this.commitOperations(live, trx);
+		});
+	}
 	/** Rebuilds resultingState as the executor writes it: scopes plus header. */
 	async rebuildStateForOperations(operations) {
 		const result = [];
@@ -615,7 +666,7 @@ var BaseReadModel = class {
 				}
 				const chunk = items.slice(start, start + commitChunkSize);
 				try {
-					await this.commitOperations(chunk);
+					await this.commitFenced(chunk);
 				} catch (error) {
 					this.failedItem = chunk[0];
 					const prefix = items.slice(0, committed);
@@ -722,7 +773,7 @@ var BaseReadModel = class {
 			};
 		}
 		try {
-			await this.commitOperations(rebuilt.items);
+			await this.commitFenced(rebuilt.items);
 		} catch (error) {
 			this.cursor.settle(owned, false);
 			return {
@@ -741,7 +792,7 @@ var BaseReadModel = class {
 			reapplied: rebuilt.items.length - replayed
 		};
 	}
-	/** A document gone from the write cache is absent, not a failure. */
+	/** A document gone from the write cache, or purged, is absent. */
 	async rebuildIfConfigured(items) {
 		if (!this.config.rebuildStateOnInit) return {
 			items,
@@ -750,11 +801,15 @@ var BaseReadModel = class {
 		const rebuilt = [];
 		const absent = [];
 		for (const item of items) {
+			if (isPurgeMarker(item.operation)) {
+				rebuilt.push(item);
+				continue;
+			}
 			let result;
 			try {
 				result = await this.rebuildStateForOperations([item]);
 			} catch (error) {
-				if (!(error instanceof DocumentNotFoundError)) throw error;
+				if (!DocumentNotFoundError.isError(error) && !await this.isPurged(item.context.documentId)) throw error;
 				this.catchUpLogger.warn("@consumer dropped ordinal @ordinal: document @documentId is gone", this.consumerId, ordinalOf(item), item.context.documentId);
 				absent.push(ordinalOf(item));
 				continue;
@@ -766,6 +821,14 @@ var BaseReadModel = class {
 			absent
 		};
 	}
+	/** A failed lookup is no answer: the caller's own error stands. */
+	async isPurged(documentId) {
+		try {
+			return (await findPurged(this.purgeLookup(this.db), [documentId])).has(documentId);
+		} catch {
+			return false;
+		}
+	}
 	block(item, error) {
 		const blockedAt = {
 			ordinal: ordinalOf(item),
@@ -1044,13 +1107,15 @@ let DeletedDocumentRead = /* @__PURE__ */ function(DeletedDocumentRead) {
 var KyselyDocumentView = class extends BaseReadModel {
 	operationStore;
 	deletedDocumentRead;
+	static commitsInFenceTransaction = true;
 	_db;
 	constructor(db, operationStore, operationIndex, writeCache, consistencyTracker, deletedDocumentRead, indexing = defaultReadModelIndexingConfig) {
 		super(db, operationIndex, writeCache, consistencyTracker, {
 			readModelId: DOCUMENT_VIEW_READ_MODEL,
 			rebuildStateOnInit: true,
 			indexing,
-			replayStreamSuffix: false
+			replayStreamSuffix: false,
+			purgeFence: "locked"
 		});
 		this.operationStore = operationStore;
 		this.deletedDocumentRead = deletedDocumentRead;
@@ -1070,10 +1135,11 @@ var KyselyDocumentView = class extends BaseReadModel {
 	* at least the one the row already carries, so an older duplicate from a
 	* sweep, boot replay or chunk interleave never rolls a scope back.
 	*/
-	async commitOperations(items) {
-		await this._db.transaction().execute(async (trx) => {
+	async commitOperations(items, fenced) {
+		const write = async (trx) => {
 			for (const item of items) {
 				const { operation, context } = item;
+				if (isPurgeMarker(operation)) continue;
 				const { documentId, scope, branch, documentType, resultingState, ordinal } = context;
 				const { index, hash } = operation;
 				if (!resultingState) throw new Error(`Missing resultingState in context for operation ${operation.id || "unknown"}. IDocumentView requires resultingState from upstream - it does not rebuild documents.`);
@@ -1178,7 +1244,12 @@ var KyselyDocumentView = class extends BaseReadModel {
 					}
 				}
 			}
-		});
+		};
+		if (fenced) {
+			await write(fenced);
+			return;
+		}
+		await this._db.transaction().execute(write);
 	}
 	async exists(documentIds, existence, consistencyToken, signal) {
 		if (consistencyToken) await this.waitForConsistency(consistencyToken, void 0, signal);
@@ -1202,7 +1273,7 @@ var KyselyDocumentView = class extends BaseReadModel {
 		if (this.deletedDocumentRead === "NotFound") query = query.where("isDeleted", "=", false);
 		if (scopesToQuery.length > 0) query = query.where("scope", "in", scopesToQuery);
 		const snapshots = await query.execute();
-		if (snapshots.length === 0) throw new Error(`Document not found: ${documentId}`);
+		if (snapshots.length === 0) throw new DocumentNotFoundError(documentId, `Document not found: ${documentId}`);
 		if (signal?.aborted) throw new Error("Operation aborted");
 		const headerSnapshot = snapshots.find((s) => s.scope === "header");
 		if (!headerSnapshot) throw new Error(`Document header not found: ${documentId}`);
@@ -1345,7 +1416,7 @@ var KyselyDocumentView = class extends BaseReadModel {
 		const slugMatchDocId = slugMatch?.documentId;
 		if (idMatchDocId && slugMatchDocId && idMatchDocId !== slugMatchDocId) throw new Error(`Ambiguous identifier "${identifier}": matches both document ID "${idMatchDocId}" and slug for document ID "${slugMatchDocId}". Please use get() for ID or resolveSlug() + get() for slug to be explicit.`);
 		const resolvedDocumentId = idMatchDocId || slugMatchDocId;
-		if (!resolvedDocumentId) throw new Error(`Document not found: ${identifier}`);
+		if (!resolvedDocumentId) throw new DocumentNotFoundError(identifier, `Document not found: ${identifier}`);
 		return resolvedDocumentId;
 	}
 	/**
@@ -1488,29 +1559,56 @@ async function collectAllPages(firstPage, signal) {
 function isRelationshipAction(actionType) {
 	return actionType === "ADD_RELATIONSHIP" || actionType === "REMOVE_RELATIONSHIP" || actionType === "UPDATE_RELATIONSHIP";
 }
+function addRelationshipIds(items) {
+	const ids = [];
+	for (const { operation } of items) {
+		if (operation.action.type !== "ADD_RELATIONSHIP") continue;
+		const { sourceId, targetId } = operation.action.input;
+		if (typeof sourceId === "string") ids.push(sourceId);
+		if (typeof targetId === "string") ids.push(targetId);
+	}
+	return ids;
+}
+function touchesPurged(operation, purged) {
+	const input = operation.action.input;
+	return purged.has(input.sourceId) || purged.has(input.targetId);
+}
 var KyselyDocumentIndexer = class extends BaseReadModel {
+	static commitsInFenceTransaction = true;
 	_db;
 	constructor(db, operationIndex, writeCache, consistencyTracker, indexing = defaultReadModelIndexingConfig) {
 		super(db, operationIndex, writeCache, consistencyTracker, {
 			readModelId: DOCUMENT_INDEXER_READ_MODEL,
 			rebuildStateOnInit: false,
-			indexing
+			indexing,
+			purgeFence: "locked"
 		});
 		this._db = db;
 	}
+	writesRows(items) {
+		return items.some((item) => isRelationshipAction(item.operation.action.type));
+	}
 	/** Opens no transaction for a batch carrying no relationship operation. */
-	async commitOperations(items) {
+	async commitOperations(items, fenced) {
 		const relationshipOps = items.filter((item) => isRelationshipAction(item.operation.action.type));
 		if (relationshipOps.length === 0) return;
-		await this._db.transaction().execute(async (trx) => {
-			for (const item of relationshipOps) {
-				const { operation } = item;
-				const actionType = operation.action.type;
-				if (actionType === "ADD_RELATIONSHIP") await this.handleAddRelationship(trx, operation);
-				else if (actionType === "REMOVE_RELATIONSHIP") await this.handleRemoveRelationship(trx, operation);
-				else if (actionType === "UPDATE_RELATIONSHIP") await this.handleUpdateRelationship(trx, operation);
-			}
-		});
+		if (fenced) {
+			await this.writeRelationships(relationshipOps, fenced);
+			return;
+		}
+		await this._db.transaction().execute((trx) => this.writeRelationships(relationshipOps, trx));
+	}
+	async writeRelationships(relationshipOps, trx) {
+		const purged = await findPurged(trx, addRelationshipIds(relationshipOps));
+		for (const item of relationshipOps) {
+			const { operation } = item;
+			const actionType = operation.action.type;
+			if (actionType === "ADD_RELATIONSHIP") {
+				if (touchesPurged(operation, purged)) continue;
+				await this.handleAddRelationship(trx, operation);
+			} else if (actionType === "REMOVE_RELATIONSHIP") await this.handleRemoveRelationship(trx, operation);
+			else if (actionType === "UPDATE_RELATIONSHIP") await this.handleUpdateRelationship(trx, operation);
+		}
 	}
 	async getOutgoing(documentId, types, paging, consistencyToken, signal) {
 		if (consistencyToken) await this.waitForConsistency(consistencyToken, void 0, signal);
@@ -1734,4 +1832,4 @@ var KyselyDocumentIndexer = class extends BaseReadModel {
 //#endregion
 export { ContiguousCursor as _, KyselyDocumentView as a, isCatchUpConsumer as b, ReadModelCoordinator as c, reserveBatch as d, BaseReadModel as f, unchunkedReadModelIndexingConfig as g, defaultReadModelIndexingConfig as h, DeletedDocumentRead as i, indexReserved as l, DEFAULT_READ_MODEL_YIELD_DEADLINE_MS as m, ConsistencyTracker as n, DOCUMENT_INDEXER_READ_MODEL as o, DEFAULT_COMMIT_CHUNK_SIZE as p, makeConsistencyKey as r, DOCUMENT_VIEW_READ_MODEL as s, KyselyDocumentIndexer as t, releaseBatch as u, defaultCatchUpConfig as v, CatchUpScheduler as y };
 
-//# sourceMappingURL=document-indexer-I6i_YzsR.js.map
+//# sourceMappingURL=document-indexer-CZqIpdz2.js.map