@recordtimelabel/core 0.6.5 → 0.6.7

package/README.md

@@ -17,10 +17,10 @@ During local development an app can consume a sibling checkout with:
 "@recordtimelabel/core": "file:../recordtimelabel-core"
 ```
 
-For release builds, consume a fixed npm package, git tag, or private registry version so builds do not depend on a sibling folder path. The release target is `0.6.5`; verify that its registry tarball and lockfile integrity are available before updating consumers:
+For release builds, consume a fixed npm package, git tag, or private registry version so builds do not depend on a sibling folder path. The release target is `0.6.7`; verify that its registry tarball and lockfile integrity are available before updating consumers:
 
 ```json
-"@recordtimelabel/core": "0.6.5"
+"@recordtimelabel/core": "0.6.7"
 ```
 
 If this checkout's `package.json` is ahead of the published version, publish the new package before updating consumers to that version.
@@ -38,7 +38,9 @@ If this checkout's `package.json` is ahead of the published version, publish the
 - `RECORD_TIMELABEL_DURABLE_ENGINE_CAPABILITIES`
 - `RECORD_TIMELABEL_CAPABILITY_CLOUD_FAILURE_STATE`
 - `RECORD_TIMELABEL_CLOUD_FAILURE_CLASSES`
+- `RECORD_TIMELABEL_CLOUD_RECOVERY_ACTIONS`
 - `normalizeRecordTimeLabelCloudFailure(input)`
+- `classifyRecordTimeLabelCloudRecovery(input)`
 - `toRecordTimeLabelCloudFailureError(input)`
 - `RECORD_TIMELABEL_PROTOCOL_CAPABILITIES`
 - `toRecordTimeLabelWireOperation(operation)`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@recordtimelabel/core",
-  "version": "0.6.5",
+  "version": "0.6.7",
   "type": "module",
   "description": "Shared RecordTimeLabel data model, merge logic, operations, and sync engine.",
   "main": "./src/index.js",

package/src/index.js

@@ -8,12 +8,14 @@ import {
   RECORD_TIMELABEL_CAPABILITY_STRICT_READINESS,
   RECORD_TIMELABEL_CLOUD_FAILURE_SCHEMA_VERSION,
   RECORD_TIMELABEL_CLOUD_FAILURE_CLASSES,
+  RECORD_TIMELABEL_CLOUD_RECOVERY_ACTIONS,
   RECORD_TIMELABEL_OPERATION_RESULT_STATUSES,
   RECORD_TIMELABEL_PROTOCOL_CAPABILITIES,
   buildRecordTimeLabelRequestId,
   createRecordTimeLabelTransportFailureResults,
   isRecordTimeLabelOperationConflictFailure,
   normalizeRecordTimeLabelCloudFailure,
+  classifyRecordTimeLabelCloudRecovery,
   normalizeRecordTimeLabelEnvelopeResponse,
   normalizeRecordTimeLabelOperationResults,
   normalizeRecordTimeLabelImmutableId,
@@ -32,12 +34,14 @@ export {
   RECORD_TIMELABEL_CAPABILITY_STRICT_READINESS,
   RECORD_TIMELABEL_CLOUD_FAILURE_SCHEMA_VERSION,
   RECORD_TIMELABEL_CLOUD_FAILURE_CLASSES,
+  RECORD_TIMELABEL_CLOUD_RECOVERY_ACTIONS,
   RECORD_TIMELABEL_OPERATION_RESULT_STATUSES,
   RECORD_TIMELABEL_PROTOCOL_CAPABILITIES,
   buildRecordTimeLabelRequestId,
   createRecordTimeLabelTransportFailureResults,
   isRecordTimeLabelOperationConflictFailure,
   normalizeRecordTimeLabelCloudFailure,
+  classifyRecordTimeLabelCloudRecovery,
   normalizeRecordTimeLabelEnvelopeResponse,
   normalizeRecordTimeLabelOperationResults,
   normalizeRecordTimeLabelImmutableId,
@@ -141,7 +145,7 @@ export {
   selectBestMatchingTwitchVod
 };
 
-export const RECORD_TIMELABEL_CORE_VERSION = '0.6.5';
+export const RECORD_TIMELABEL_CORE_VERSION = '0.6.7';
 export const RTL_SYNC_PROTOCOL_VERSION = 2;
 export const RECORD_TIMELABEL_DURABLE_ENGINE_CAPABILITIES = Object.freeze([
   'fifo-retry-fence',
@@ -1145,6 +1149,10 @@ export const applyOperation = (state = {}, operation = {}) => {
           originalRecordIndex: Number.isInteger(payload.originalRecordIndex)
             ? payload.originalRecordIndex
             : Math.max(0, Number(existingEntry?.index || 0)),
+          originalGroupId: String(payload.originalGroupId || '').trim(),
+          originalGroupOrderIndex: Number.isInteger(payload.originalGroupOrderIndex)
+            ? payload.originalGroupOrderIndex
+            : -1,
           lifecycleGeneration,
           deletedAt,
           purgeAt: toFiniteTimestamp(payload.purgeAt) || deletedAt + RTL_TRASH_RETENTION_MS,
@@ -1206,6 +1214,16 @@ export const applyOperation = (state = {}, operation = {}) => {
       );
       targetRecords.splice(restoreIndex, 0, restoredRecord);
       nextState.records[targetFolderId] = targetRecords;
+      const originalGroupId = String(trashEntry.originalGroupId || '').trim();
+      const originalGroupOrderIndex = Number.isInteger(trashEntry.originalGroupOrderIndex)
+        ? trashEntry.originalGroupOrderIndex
+        : -1;
+      if (originalGroupId && originalGroupOrderIndex >= 0 &&
+        !nextState.groupOrder.includes(originalGroupId)) {
+        const groupOrder = [...nextState.groupOrder];
+        groupOrder.splice(Math.min(originalGroupOrderIndex, groupOrder.length), 0, originalGroupId);
+        nextState.groupOrder = groupOrder;
+      }
       delete nextState.trashEntries[trashEntryId];
       delete nextState.deletedRecordTombstones[recordId];
       break;
@@ -6232,6 +6250,19 @@ const rtlPayloadOrder = (operation, keys) => {
   }
   return [];
 };
+// Partial delete reads omit sibling records, so folder.recordOrder is the live slot.
+const rtlResolveOriginalRecordIndex = (payload, existingRecord, folders) => {
+  if (Number.isInteger(payload?.originalRecordIndex) && payload.originalRecordIndex >= 0) {
+    return payload.originalRecordIndex;
+  }
+  const recordId = normalizeId(existingRecord?.id);
+  const folderId = safeFolderId(existingRecord?.folderId || payload?.folderId);
+  const recordOrder = rtlMergeOrder(
+    rtlOwn(folders, folderId) ? folders[folderId]?.recordOrder : []
+  );
+  const orderIndex = recordId ? recordOrder.indexOf(recordId) : -1;
+  return orderIndex >= 0 ? orderIndex : 0;
+};
 const rtlHasInvalidPayloadValue = (value, depth = 0) => {
   if (depth > 20) return true;
   if (typeof value === 'number') return !Number.isFinite(value);
@@ -6863,7 +6894,21 @@ export const planFirestoreV2OperationChanges = ({
           break;
         }
         const sourceFolderId = safeFolderId(existingRecord.folderId);
-        applied = rtlApplyOperationToPartialDocuments({...nextDocuments, operation, now: operationNow});
+        applied = rtlApplyOperationToPartialDocuments({
+          ...nextDocuments,
+          operation: {
+            ...operation,
+            payload: {
+              ...payload,
+              originalRecordIndex: rtlResolveOriginalRecordIndex(
+                payload,
+                existingRecord,
+                nextDocuments.folders
+              )
+            }
+          },
+          now: operationNow
+        });
         rtlSetRoot(nextDocuments.root, applied.documents.root);
         const trashDocument = rtlOwn(applied.documents.trash, operationTrashEntryId)
           ? applied.documents.trash[operationTrashEntryId]
@@ -7286,8 +7331,10 @@ export default {
   RECORD_TIMELABEL_CAPABILITY_STRICT_READINESS,
   RECORD_TIMELABEL_CLOUD_FAILURE_SCHEMA_VERSION,
   RECORD_TIMELABEL_CLOUD_FAILURE_CLASSES,
+  RECORD_TIMELABEL_CLOUD_RECOVERY_ACTIONS,
   isRecordTimeLabelOperationConflictFailure,
   normalizeRecordTimeLabelCloudFailure,
+  classifyRecordTimeLabelCloudRecovery,
   toRecordTimeLabelCloudFailureError,
   RECORD_TIMELABEL_OPERATION_RESULT_STATUSES,
   RECORD_TIMELABEL_PROTOCOL_CAPABILITIES,

package/src/protocol.js

@@ -73,6 +73,16 @@ export const RECORD_TIMELABEL_CLOUD_FAILURE_CLASSES = Object.freeze({
   STALE_SESSION: 'stale-session'
 });
 
+// Hosts must map class to these actions. They may choose the platform I/O
+// (alarm, timer, Web Lock, Main process), but they must not invent a fourth
+// strategy such as "rebuild the owner on 429".
+export const RECORD_TIMELABEL_CLOUD_RECOVERY_ACTIONS = Object.freeze({
+  IGNORE: 'ignore',
+  WAIT: 'wait',
+  BOOTSTRAP: 'bootstrap',
+  LOCK: 'lock'
+});
+
 const CLOUD_FAILURE_CLASS_VALUES = new Set(Object.values(RECORD_TIMELABEL_CLOUD_FAILURE_CLASSES));
 
 // Keep operation-conflict aliases in one wire-compatibility table.  The
@@ -580,6 +590,28 @@ export const toRecordTimeLabelCloudFailureError = (input = {}) => {
   return error;
 };
 
+/**
+ * Shared recovery mapping for cloud-failure-state-v1. Core owns the class →
+ * action table so Extension and Flowmoor cannot fork "retry" into bootstrap.
+ *
+ * `wait` keeps the workspace, outbox, and cursor/attempt and honors
+ * `retryAfterMs`. It is not permission to rebuild an owner or start a page-1
+ * walk. `bootstrap` is the only action that may start a fresh hydration.
+ */
+export const classifyRecordTimeLabelCloudRecovery = (input = {}) => {
+  const failure = normalizeRecordTimeLabelCloudFailure(input);
+  if (failure.class === RECORD_TIMELABEL_CLOUD_FAILURE_CLASSES.STALE_SESSION) {
+    return {action: RECORD_TIMELABEL_CLOUD_RECOVERY_ACTIONS.IGNORE, failure};
+  }
+  if (failure.class === RECORD_TIMELABEL_CLOUD_FAILURE_CLASSES.TRANSIENT) {
+    return {action: RECORD_TIMELABEL_CLOUD_RECOVERY_ACTIONS.WAIT, failure};
+  }
+  if (failure.class === RECORD_TIMELABEL_CLOUD_FAILURE_CLASSES.BOOTSTRAP_REQUIRED) {
+    return {action: RECORD_TIMELABEL_CLOUD_RECOVERY_ACTIONS.BOOTSTRAP, failure};
+  }
+  return {action: RECORD_TIMELABEL_CLOUD_RECOVERY_ACTIONS.LOCK, failure};
+};
+
 const ALLOWED_OPERATION_RESULT_STATUSES = new Set(
   Object.values(RECORD_TIMELABEL_OPERATION_RESULT_STATUSES)
 );
@@ -833,6 +865,7 @@ export default {
   RECORD_TIMELABEL_CAPABILITY_LIFECYCLE_GENERATION_FENCE_V1,
   RECORD_TIMELABEL_CLOUD_FAILURE_SCHEMA_VERSION,
   RECORD_TIMELABEL_CLOUD_FAILURE_CLASSES,
+  RECORD_TIMELABEL_CLOUD_RECOVERY_ACTIONS,
   RECORD_TIMELABEL_PROTOCOL_CAPABILITIES,
   toRecordTimeLabelWireOperation,
   buildRecordTimeLabelRequestId,
@@ -840,6 +873,7 @@ export default {
   normalizeRecordTimeLabelOperationResults,
   normalizeRecordTimeLabelEnvelopeResponse,
   normalizeRecordTimeLabelCloudFailure,
+  classifyRecordTimeLabelCloudRecovery,
   toRecordTimeLabelCloudFailureError,
   isRecordTimeLabelOperationConflictFailure,
   normalizeRecordTimeLabelImmutableId,