@powersync/service-core 1.26.1 → 1.27.1

package/dist/util/param-logging.js

@@ -9,8 +9,9 @@ export const DEFAULT_PARAM_LOGGING_FORMAT_OPTIONS = {
  * Formats potentially arbitrary parameters for logging.
  * This limits the number of keys and strings to a maximum length.
  * A warning key-value is added if the number of keys exceeds the maximum.
- * String values exceeding the maximum length are truncated.
+ * Keys and string values exceeding the maximum length are truncated.
  * Non-String values are stringified, the maximum length is then applied.
+ * Values that cannot be serialized are replaced with a placeholder.
  * @param params - The parameters to format.
  * @param options - The options to use.
  * @default DEFAULT_PARAM_LOGGING_FORMAT_OPTIONS
@@ -24,17 +25,24 @@ export function limitParamsForLogging(params, options = DEFAULT_PARAM_LOGGING_FO
         }
         return value;
     }
-    return Object.fromEntries(Object.entries(params).map(([key, value], index) => {
-        if (index == maxKeyCount) {
-            return ['⚠️', 'Additional parameters omitted'];
+    function formatValue(value) {
+        if (typeof value == 'string') {
+            return trimString(value);
         }
-        if (index > maxKeyCount) {
-            return [];
+        try {
+            return trimString(JSON.stringify(value) ?? '[undefined]');
         }
-        if (typeof value == 'string') {
-            return [key, trimString(value)];
+        catch {
+            return trimString('[unserializable]');
+        }
+    }
+    return Object.fromEntries(Object.entries(params)
+        .slice(0, maxKeyCount + 1)
+        .map(([key, value], index) => {
+        if (index == maxKeyCount) {
+            return ['⚠️', 'Additional parameters omitted'];
         }
-        return [key, trimString(JSON.stringify(value))];
+        return [trimString(key), formatValue(value)];
     }));
 }
 //# sourceMappingURL=param-logging.js.map

package/dist/util/param-logging.js.map

@@ -1 +1 @@
-{"version":3,"file":"param-logging.js","sourceRoot":"","sources":["../../src/util/param-logging.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA8B;IAC7E,WAAW,EAAE,EAAE;IACf,eAAe,EAAE,GAAG;CACrB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA2B,EAC3B,UAA8C,oCAAoC;IAElF,MAAM,EACJ,eAAe,GAAG,oCAAoC,CAAC,eAAe,EACtE,WAAW,GAAG,oCAAoC,CAAC,WAAW,EAC/D,GAAG,OAAO,CAAC;IAEZ,SAAS,UAAU,CAAC,KAAa;QAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;QACrD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE;QACjD,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,KAAK,GAAG,WAAW,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,OAAO,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"param-logging.js","sourceRoot":"","sources":["../../src/util/param-logging.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA8B;IAC7E,WAAW,EAAE,EAAE;IACf,eAAe,EAAE,GAAG;CACrB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA2B,EAC3B,UAA8C,oCAAoC;IAElF,MAAM,EACJ,eAAe,GAAG,oCAAoC,CAAC,eAAe,EACtE,WAAW,GAAG,oCAAoC,CAAC,WAAW,EAC/D,GAAG,OAAO,CAAC;IAEZ,SAAS,UAAU,CAAC,KAAa;QAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;QACrD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,WAAW,CAAC,KAAc;QACjC,IAAI,OAAO,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC;YACH,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,CAAC;SACzB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE;QAC3B,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CACL,CAAC;AACJ,CAAC"}

package/dist/util/protocol-types.d.ts

@@ -14,7 +14,7 @@ export type BucketRequest = t.Decoded<typeof BucketRequest>;
  */
 export declare const RequestedStreamSubscription: t.ObjectCodec<{
     /**
-     * The defined name of the stream as it appears in sync stream definitions.
+     * The defined name of the stream as it appears in Sync Stream definitions.
      */
     stream: t.IdentityCodec<t.CodecType.String>;
     /**
@@ -24,7 +24,7 @@ export declare const RequestedStreamSubscription: t.ObjectCodec<{
     /**
      * Set when the client wishes to re-assign a different priority to this stream.
      *
-     * Streams and sync rules can also assign a default priority, but clients are allowed to override those. This can be
+     * Sync Streams and legacy bucket definitions can also assign a default priority, but clients are allowed to override those. This can be
      * useful when the priority for partial syncs depends on e.g. the current page opened in a client.
      */
     override_priority: t.Codec<number | null, number | null>;
@@ -41,11 +41,11 @@ export declare const StreamSubscriptionRequest: t.ObjectCodec<{
      */
     include_defaults: t.OptionalCodec<t.Codec<boolean, boolean, string, t.CodecProps>>;
     /**
-     * An array of sync streams the client has opened explicitly.
+     * An array of Sync Streams the client has opened explicitly.
      */
     subscriptions: t.ArrayCodec<t.ObjectCodec<{
         /**
-         * The defined name of the stream as it appears in sync stream definitions.
+         * The defined name of the stream as it appears in Sync Stream definitions.
          */
         stream: t.IdentityCodec<t.CodecType.String>;
         /**
@@ -55,7 +55,7 @@ export declare const StreamSubscriptionRequest: t.ObjectCodec<{
         /**
          * Set when the client wishes to re-assign a different priority to this stream.
          *
-         * Streams and sync rules can also assign a default priority, but clients are allowed to override those. This can be
+         * Sync Streams and legacy bucket definitions can also assign a default priority, but clients are allowed to override those. This can be
          * useful when the priority for partial syncs depends on e.g. the current page opened in a client.
          */
         override_priority: t.Codec<number | null, number | null>;
@@ -239,8 +239,8 @@ export interface BucketChecksum {
 /**
  * The reason a particular bucket is included in a checkpoint.
  *
- * This information allows clients to associate individual buckets with sync streams they're subscribed to. Having that
- * association is useful because it enables clients to track progress for individual sync streams.
+ * This information allows clients to associate individual buckets with Sync Streams they're subscribed to. Having that
+ * association is useful because it enables clients to track progress for individual Sync Streams.
  */
 export type BucketSubscriptionReason = BucketDerivedFromDefaultStream | BucketDerivedFromExplicitSubscription;
 /**

package/dist/util/protocol-types.js

@@ -12,7 +12,7 @@ export const BucketRequest = t.object({
  */
 export const RequestedStreamSubscription = t.object({
     /**
-     * The defined name of the stream as it appears in sync stream definitions.
+     * The defined name of the stream as it appears in Sync Stream definitions.
      */
     stream: t.string,
     /**
@@ -22,7 +22,7 @@ export const RequestedStreamSubscription = t.object({
     /**
      * Set when the client wishes to re-assign a different priority to this stream.
      *
-     * Streams and sync rules can also assign a default priority, but clients are allowed to override those. This can be
+     * Sync Streams and legacy bucket definitions can also assign a default priority, but clients are allowed to override those. This can be
      * useful when the priority for partial syncs depends on e.g. the current page opened in a client.
      */
     override_priority: orNull(t.number)
@@ -38,7 +38,7 @@ export const StreamSubscriptionRequest = t.object({
      */
     include_defaults: t.boolean.optional(),
     /**
-     * An array of sync streams the client has opened explicitly.
+     * An array of Sync Streams the client has opened explicitly.
      */
     subscriptions: t.array(RequestedStreamSubscription)
 });

package/package.json

@@ -4,18 +4,18 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.26.1",
+  "version": "1.27.1",
   "license": "FSL-1.1-ALv2",
   "type": "module",
   "exports": "./dist/index.js",
   "dependencies": {
     "@js-sdsl/ordered-set": "^4.4.2",
     "@opentelemetry/api": "^1.9.0",
-    "@opentelemetry/core": "^2.0.1",
-    "@opentelemetry/exporter-metrics-otlp-http": "^0.203.0",
-    "@opentelemetry/exporter-prometheus": "^0.203.0",
-    "@opentelemetry/resources": "^2.0.1",
-    "@opentelemetry/sdk-metrics": "^2.0.1",
+    "@opentelemetry/core": "^2.8.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "^0.219.0",
+    "@opentelemetry/exporter-prometheus": "^0.219.0",
+    "@opentelemetry/resources": "^2.8.0",
+    "@opentelemetry/sdk-metrics": "^2.8.0",
     "async": "^3.2.4",
     "async-mutex": "^0.5.0",
     "bson": "^6.10.4",
@@ -33,17 +33,17 @@
     "uuid": "^14.0.0",
     "winston": "^3.13.0",
     "yaml": "^2.8.3",
-    "@powersync/lib-services-framework": "0.10.2",
+    "@powersync/service-rsocket-router": "0.2.29",
     "@powersync/service-jsonbig": "0.17.13",
-    "@powersync/service-rsocket-router": "0.2.27",
-    "@powersync/service-types": "0.18.0",
-    "@powersync/service-sync-rules": "0.42.0"
+    "@powersync/service-types": "0.20.0",
+    "@powersync/service-sync-rules": "0.44.0",
+    "@powersync/lib-services-framework": "0.10.4"
   },
   "devDependencies": {
     "@types/async": "^3.2.24",
     "@types/lodash": "^4.17.5",
     "@types/negotiator": "^0.6.4",
-    "fastify": "^5.8.5",
+    "fastify": "^5.12.5",
     "fastify-plugin": "^5.0.1"
   },
   "scripts": {

package/src/api/RouteAPI.ts

@@ -1,6 +1,7 @@
 import { SyncConfig, TablePattern } from '@powersync/service-sync-rules';
 import * as types from '@powersync/service-types';
-import { ParseSyncConfigOptions, SyncRulesBucketStorage } from '../storage/storage-index.js';
+import type { ParseSyncConfigOptions } from '../storage/PersistedSyncConfigContent.js';
+import { SyncRulesBucketStorage } from '../storage/storage-index.js';
 
 export interface PatternResult {
   schema: string;
@@ -40,6 +41,13 @@ export interface RouteAPI {
    */
   getConnectionStatus(): Promise<types.ConnectionStatusV2>;
 
+  /**
+   * Checks whether the source supports the capabilities required by this sync config.
+   * Must not modify the source. Return advisory warnings and fatal validation diagnostics.
+   * An empty array means no issues; throw only for unexpected failures.
+   */
+  validateSourceCapabilities?(syncConfig: SyncConfig): Promise<types.ValidationDiagnostic[]>;
+
   /**
    * Expand sync config table patterns into table metadata from the source connection.
    *

package/src/api/api-index.ts

@@ -2,3 +2,4 @@ export * from './api-metrics.js';
 export * from './diagnostics.js';
 export * from './RouteAPI.js';
 export * from './schema.js';
+export * from './source-capabilities.js';

package/src/api/diagnostics.ts

@@ -1,5 +1,5 @@
 import { logger, ServiceAssertionError } from '@powersync/lib-services-framework';
-import { DEFAULT_TAG, SourceTableRef, SyncConfigWithErrors } from '@powersync/service-sync-rules';
+import { DEFAULT_TAG, SourceTableRef, SyncConfigWithErrors, SyncRulesErrors } from '@powersync/service-sync-rules';
 import { ReplicationError, SyncRulesStatus, TableInfo } from '@powersync/service-types';
 
 import * as storage from '../storage/storage-index.js';
@@ -68,7 +68,11 @@ export async function getSyncRulesStatus(
       version_label: syncConfig.version_label,
       content: include_content ? syncConfig.sync_rules_content : undefined,
       connections: [],
-      errors: [{ level: 'fatal', message: e.message, ts: now }]
+      // Report each sync config error separately, retaining its source location.
+      errors:
+        e instanceof SyncRulesErrors
+          ? e.errors.map((error) => syncConfigYamlErrorToReplicationError(error, now))
+          : [{ level: 'fatal', message: e.message, ts: now }]
     };
   }
 
@@ -81,20 +85,32 @@ export async function getSyncRulesStatus(
   let replication_lag_bytes: number | undefined = undefined;
   let slot_wal_budget: SlotWalBudgetInfo | undefined = undefined;
 
+  const validationErrors: ReplicationError[] = [];
   let tables_flat: TableInfo[] = [];
 
   if (check_connection) {
-    const source_table_patterns = rules.getSourceTables();
-    const resolved_tables = await apiHandler.getDebugTablesInfo(source_table_patterns, rules);
-    tables_flat = resolved_tables.flatMap((info) => {
-      if (info.table) {
-        return [info.table];
-      } else if (info.tables) {
-        return info.tables;
-      } else {
-        return [];
-      }
-    });
+    try {
+      validationErrors.push(...((await apiHandler.validateSourceCapabilities?.(rules)) ?? []));
+    } catch (e) {
+      validationErrors.push({ level: 'fatal', message: e.message, ts: now });
+    }
+    // Table inspection is independent of source capability checks. Preserve both failures
+    // and continue collecting diagnostics that do not depend on table metadata.
+    try {
+      const source_table_patterns = rules.getSourceTables();
+      const resolved_tables = await apiHandler.getDebugTablesInfo(source_table_patterns, rules);
+      tables_flat = resolved_tables.flatMap((info) => {
+        if (info.table) {
+          return [info.table];
+        } else if (info.tables) {
+          return info.tables;
+        } else {
+          return [];
+        }
+      });
+    } catch (e) {
+      validationErrors.push({ level: 'fatal', message: e.message, ts: now });
+    }
 
     if (systemStorage) {
       try {
@@ -151,7 +167,7 @@ export async function getSyncRulesStatus(
     });
   }
 
-  const errors = tables_flat.flatMap((info) => info.errors);
+  const errors = [...validationErrors, ...tables_flat.flatMap((info) => info.errors)];
   const statusSource = await syncConfig.getSyncConfigStatus();
 
   if (statusSource?.last_fatal_error) {

package/src/api/source-capabilities.ts

@@ -0,0 +1,24 @@
+import { ErrorCode, ServiceError } from '@powersync/lib-services-framework';
+import type { SyncConfig } from '@powersync/service-sync-rules';
+import type { RouteAPI } from './RouteAPI.js';
+
+/**
+ * Blocks deployment and reprocessing on fatal source diagnostics; warnings remain advisory.
+ * Capability failures use the same typed 422 error for deployment and reprocessing.
+ */
+export async function assertSourceCapabilities(api: RouteAPI, config: SyncConfig): Promise<void> {
+  try {
+    const diagnostics = (await api.validateSourceCapabilities?.(config)) ?? [];
+    const errors = diagnostics.filter((diagnostic) => diagnostic.level === 'fatal');
+    if (errors.length > 0) {
+      throw new Error(errors.map((error) => error.message).join('\n'));
+    }
+  } catch (error) {
+    throw new ServiceError({
+      status: 422,
+      code: ErrorCode.PSYNC_R0001,
+      description: 'Source capability validation failed',
+      details: error.message
+    });
+  }
+}

package/src/auth/JwtPayload.ts

@@ -1,9 +1,9 @@
-import { BaseJwtPayload } from '@powersync/service-sync-rules';
+import { RequestJwtPayload } from '@powersync/service-sync-rules';
 
 /**
  * Payload from a JWT, always signed.
  */
-export class JwtPayload extends BaseJwtPayload {
+export class JwtPayload extends RequestJwtPayload {
   /**
    * Stringified version of sub. Used where we need a string user identifier, such as in write checkpoints
    * and per-user metrics.

package/src/entry/commands/compact-action.ts

@@ -46,7 +46,7 @@ export function registerCompactAction(program: Command) {
       if (invalid.length > 0) {
         logger.error(
           `Invalid bucket names: ${invalid.join(', ')}. ` +
-            `Pass full bucket names (e.g., "global[]"), not bucket definition names (e.g., "global").`
+            `Pass full bucket names (e.g., "global[]"), not bucket definition or Sync Stream names (e.g., "global").`
         );
         process.exit(1);
       }

package/src/entry/commands/config-command.ts

@@ -19,7 +19,7 @@ export function wrapConfigCommand(command: Command) {
     )
     .option(
       `-sync64, --sync-base64 [base64]`,
-      'Base64 encoded YAML Sync Config. Defaults to process.env.POWERSYNC_SYNC_CONFIG_B64 or process.env.POWERSYNC_SYNC_RULES_B64 for backwards compatility.',
+      'Base64 encoded YAML Sync Config. Defaults to process.env.POWERSYNC_SYNC_CONFIG_B64 or process.env.POWERSYNC_SYNC_RULES_B64 for backwards compatibility.',
       util.env.POWERSYNC_SYNC_CONFIG_B64 || util.env.POWERSYNC_SYNC_RULES_B64
     );
 }

package/src/migrations/PowerSyncMigrationManager.ts

@@ -1,6 +1,7 @@
 import * as framework from '@powersync/lib-services-framework';
 import fs from 'fs/promises';
 import path from 'path';
+import { pathToFileURL } from 'url';
 import * as system from '../system/system-index.js';
 
 /**
@@ -28,7 +29,7 @@ export abstract class AbstractPowerSyncMigrationAgent extends framework.Abstract
 
     return await Promise.all(
       migrations.map(async (migration) => {
-        const module = await import(path.resolve(migrationsDir, migration));
+        const module = await import(pathToFileURL(path.resolve(migrationsDir, migration)).href);
         return {
           name: path.basename(migration).replace(path.extname(migration), ''),
           up: module.up,

package/src/replication/AbstractReplicationJob.ts

@@ -1,14 +1,12 @@
 import { container, logger } from '@powersync/lib-services-framework';
 import winston from 'winston';
 import { MetricsEngine } from '../metrics/MetricsEngine.js';
-import * as storage from '../storage/storage-index.js';
+import type { CreateJobOptions } from './AbstractReplicator.js';
 import { ErrorRateLimiter } from './ErrorRateLimiter.js';
 
-export interface AbstractReplicationJobOptions {
+export interface AbstractReplicationJobOptions extends CreateJobOptions {
   id: string;
-  storage: storage.SyncRulesBucketStorage;
   metrics: MetricsEngine;
-  lock: storage.ReplicationLock;
   rateLimiter: ErrorRateLimiter;
 }
 

package/src/replication/AbstractReplicator.ts

@@ -1,4 +1,5 @@
 import { container, ErrorCode, logger, ReplicationAbortedError } from '@powersync/lib-services-framework';
+import { DEFAULT_TAG, SqlSyncRules, type SyncConfig } from '@powersync/service-sync-rules';
 import { ReplicationMetric } from '@powersync/service-types';
 import { hrtime } from 'node:process';
 import { setTimeout as sleep } from 'node:timers/promises';
@@ -7,6 +8,7 @@ import { MetricsEngine } from '../metrics/MetricsEngine.js';
 import * as storage from '../storage/storage-index.js';
 import { StorageEngine } from '../storage/storage-index.js';
 import { SyncRulesProvider } from '../util/config/sync-rules/sync-rules-provider.js';
+import type { ResolvedPowerSyncConfig } from '../util/config/types.js';
 import { AbstractReplicationJob } from './AbstractReplicationJob.js';
 import { ErrorRateLimiter } from './ErrorRateLimiter.js';
 import { ConnectionTestResult } from './ReplicationModule.js';
@@ -30,6 +32,10 @@ export interface AbstractReplicatorOptions {
   storageEngine: StorageEngine;
   metricsEngine: MetricsEngine;
   syncRuleProvider: SyncRulesProvider;
+  /**
+   * Source connection metadata from the service config, used when parsing filesystem-loaded sync configs.
+   */
+  configuration?: Pick<ResolvedPowerSyncConfig, 'connections'>;
   /**
    * This limits the effect of retries when there is a persistent issue.
    */
@@ -73,6 +79,8 @@ export abstract class AbstractReplicator<T extends AbstractReplicationJob = Abst
 
   private abortController: AbortController | undefined;
 
+  private assertSourceCapabilities: ((config: SyncConfig) => Promise<void>) | undefined;
+
   protected constructor(private options: AbstractReplicatorOptions) {
     this.logger = logger.child({ name: `Replicator:${options.id}` });
     const heartbeatIntervalSeconds = options.heartbeatIntervalSeconds ?? DEFAULT_HEARTBEAT_INTERVAL_SECONDS;
@@ -105,6 +113,13 @@ export abstract class AbstractReplicator<T extends AbstractReplicationJob = Abst
     return this.options.syncRuleProvider;
   }
 
+  /**
+   * Default schema for startup sync config validation. Source modules with a known default should override this.
+   */
+  protected get defaultSchema(): string {
+    return 'not_applicable';
+  }
+
   protected get rateLimiter() {
     return this.options.rateLimiter;
   }
@@ -117,6 +132,13 @@ export abstract class AbstractReplicator<T extends AbstractReplicationJob = Abst
     return this.abortController?.signal.aborted;
   }
 
+  /**
+   * Register an assertion that blocks unsupported file-loaded sync configs before replication.
+   */
+  public registerSourceCapabilitiesAssertion(assertion: (config: SyncConfig) => Promise<void>): void {
+    this.assertSourceCapabilities = assertion;
+  }
+
   public async start(): Promise<void> {
     this.abortController = new AbortController();
     this.runLoop().catch((e) => {
@@ -165,10 +187,30 @@ export abstract class AbstractReplicator<T extends AbstractReplicationJob = Abst
         // versions before that check was added, so we keep the lock for now - for where te service version and sync config is updated at
         // the same time.
 
+        const parsed = SqlSyncRules.fromYaml(loadedSyncConfig, {
+          schema: undefined,
+          defaultSchema: this.defaultSchema,
+          connections:
+            this.options.configuration?.connections &&
+            Object.fromEntries(
+              this.options.configuration.connections.map((connection) => [
+                connection.tag ?? DEFAULT_TAG,
+                { type: connection.type }
+              ])
+            ),
+          throwOnError: this.syncRuleProvider.exitOnError
+        });
+        storage.logSyncConfigErrors(parsed, this.logger);
+        try {
+          await this.assertSourceCapabilities?.(parsed.config);
+        } catch (error) {
+          if (this.syncRuleProvider.exitOnError) throw error;
+          // Persist the config for diagnostics; the job-start check will prevent unsafe replication.
+          this.logger.error('Source capability validation failed for the sync config', error);
+        }
         const { lock } = await this.storage.configureSyncRules(
-          storage.updateSyncRulesFromYaml(loadedSyncConfig, {
+          storage.updateSyncRulesFromConfig(parsed, {
             lock: true,
-            validate: this.syncRuleProvider.exitOnError,
             version_label: versionLabel
           })
         );
@@ -177,12 +219,11 @@ export abstract class AbstractReplicator<T extends AbstractReplicationJob = Abst
         }
       } catch (e) {
         // Log and re-raise to exit.
-        // Should only reach this due to validation errors if exit_on_error is true.
         this.logger.error(`Failed to update sync config`, e);
         throw e;
       }
     } else {
-      this.logger.info('No sync streams or rules configured - configure via API');
+      this.logger.info('No sync config configured - configure via API');
     }
     let useFastRefresh = true;
     const fastRefreshDeadline = Date.now() + FAST_REFRESH_TIMEOUT_MS;
@@ -290,7 +331,7 @@ export abstract class AbstractReplicator<T extends AbstractReplicationJob = Abst
         } else {
           lock = await replicationStream.lock();
         }
-        const syncRuleStorage = this.storage.getInstance(replicationStream);
+        const syncRuleStorage = this.storage.getInstance(replicationStream, { replicationLock: lock });
         const newJob = this.createJob({
           lock: lock,
           storage: syncRuleStorage

package/src/replication/ReplicationModule.ts

@@ -63,14 +63,6 @@ export abstract class ReplicationModule<TConfig extends types.configFile.DataSou
    */
   protected abstract createReplicator(context: system.ServiceContext): AbstractReplicator;
 
-  /**
-   *  Any additional initialization specific to the module should be added here. Will be called if necessary after the
-   *  main initialization has been completed
-   *  @param context
-   *  @protected
-   */
-  protected abstract onInitialized(context: system.ServiceContext): Promise<void>;
-
   public abstract testConnection(config: TConfig): Promise<ConnectionTestResult>;
 
   /**
@@ -98,10 +90,18 @@ export abstract class ReplicationModule<TConfig extends types.configFile.DataSou
     // If decoding fails, this will raise a hard error, and stop the service.
     this.decodeConfig(baseMatchingConfig);
 
-    context.replicationEngine?.register(this.createReplicator(context));
-    context.routerEngine?.registerAPI(this.createRouteAPIAdapter());
-
-    await this.onInitialized(context);
+    const sourceAPI = this.createRouteAPIAdapter();
+    // The router exists even in replication-only mode and owns adapter shutdown through the service lifecycle.
+    context.routerEngine.registerAPI(sourceAPI);
+    if (context.replicationEngine) {
+      const replicator = this.createReplicator(context);
+      if (sourceAPI.validateSourceCapabilities != null) {
+        // KLUDGE: Reuse the adapter validation for filesystem-loaded configs.
+        // A shared validation interface could replace this registration through the route adapter in the future.
+        replicator.registerSourceCapabilitiesAssertion((config) => api.assertSourceCapabilities(sourceAPI, config));
+      }
+      context.replicationEngine.register(replicator);
+    }
   }
 
   protected decodeConfig(config: TConfig): void {

package/src/routes/endpoints/admin.ts

@@ -8,11 +8,12 @@ import {
   SqlSyncRules,
   StaticSchema
 } from '@powersync/service-sync-rules';
-import { internal_routes } from '@powersync/service-types';
+import { internal_routes, ServiceInfo } from '@powersync/service-types';
 
 import { DEFAULT_HYDRATION_STATE } from '@powersync/service-sync-rules';
 import * as api from '../../api/api-index.js';
 import * as storage from '../../storage/storage-index.js';
+import { POWERSYNC_VERSION } from '../../util/version.js';
 import { authApi } from '../auth.js';
 import { routeDefinition } from '../router.js';
 
@@ -58,19 +59,28 @@ export const diagnostics = routeDefinition({
     const { context } = payload;
     const { service_context } = context;
     const include_content = payload.params.sync_rules_content ?? false;
+    const serviceResponse: { service: ServiceInfo } = {
+      service: {
+        version: POWERSYNC_VERSION
+      }
+    };
 
     const apiHandler = service_context.routerEngine.getAPI();
 
     const status = await apiHandler.getConnectionStatus();
     if (!status) {
       return internal_routes.DiagnosticsResponse.encode({
+        ...serviceResponse,
         connections: []
       });
     }
 
     const {
-      storageEngine: { activeBucketStorage }
+      storageEngine: { activeBucketStorage },
+      configuration
     } = service_context;
+
+    const sync_config_source = configuration?.sync_rules.present ? 'config' : 'api';
     const active = await activeBucketStorage.getActiveSyncConfig();
     const deploying = await activeBucketStorage.getDeployingSyncConfig();
 
@@ -102,6 +112,7 @@ export const diagnostics = routeDefinition({
           );
 
     return internal_routes.DiagnosticsResponse.encode({
+      ...serviceResponse,
       connections: [
         {
           ...status,
@@ -110,7 +121,8 @@ export const diagnostics = routeDefinition({
         }
       ],
       active_sync_rules: active_status,
-      deploying_sync_rules: deploying_status
+      deploying_sync_rules: deploying_status,
+      sync_config_source
     });
   }
 });
@@ -158,14 +170,21 @@ export const reprocess = routeDefinition({
       });
     }
     // There are some differences between this and using asUpdateOptions():
-    // 1. This always re-parses the source YAML. If there are changes to the sync stream compiler, that can affect the sync plan.
+    // 1. This always re-parses the source YAML. If there are changes to the Sync Streams compiler, that can affect the sync plan.
     // 2. If the source does not set the storage version, this will update it do the current version.
     // We can consider tweaking this behavior in the future.
+    const parsed = SqlSyncRules.fromYaml(active.content.sync_rules_content, {
+      ...apiHandler.getParseSyncRulesOptions(),
+      schema: undefined,
+      // This sync config already passed validation. But if the config is not valid anymore due
+      // to a service change, we do want to report the error here.
+      throwOnError: true
+    });
+    storage.logSyncConfigErrors(parsed);
+    await api.assertSourceCapabilities(apiHandler, parsed.config);
+
     const new_rules = await activeBucketStorage.updateSyncRules(
-      storage.updateSyncRulesFromYaml(active.content.sync_rules_content, {
-        // This sync config already passed validation. But if the config is not valid anymore due
-        // to a service change, we do want to report the error here.
-        validate: true,
+      storage.updateSyncRulesFromConfig(parsed, {
         version_label: active.content.version_label,
         forceNewReplicationStream: true
       })
@@ -188,7 +207,6 @@ export const reprocess = routeDefinition({
 
 class FakeSyncRulesContentForValidation extends storage.PersistedSyncConfigContent {
   constructor(
-    private readonly apiHandler: api.RouteAPI,
     private readonly schema: SourceSchema,
     data: storage.PersistedSyncConfigContentData
   ) {
@@ -197,7 +215,7 @@ class FakeSyncRulesContentForValidation extends storage.PersistedSyncConfigConte
 
   parsed(options: storage.ParseSyncConfigOptions): storage.ParsedSyncConfigSet {
     const syncConfig = SqlSyncRules.fromYaml(this.sync_rules_content, {
-      ...this.apiHandler.getParseSyncRulesOptions(),
+      ...options,
       schema: this.schema
     });
 
@@ -237,7 +255,7 @@ export const validate = routeDefinition({
     const schemaData = await api.getConnectionsSchema(apiHandler);
     const schema = new StaticSchema(schemaData.connections);
 
-    const sync_rules = new FakeSyncRulesContentForValidation(apiHandler, schema, {
+    const sync_rules = new FakeSyncRulesContentForValidation(schema, {
       // Dummy values
       replicationStreamId: 0,
       replicationStreamName: '',