@rei-standard/amsg-server 2.6.0-next.24 → 2.6.0-next.26

package/README.md

@@ -578,6 +578,8 @@ clientStateTtl: {
 
 一个坑说在前头：`PUT /client-state` 和 `writeState()` 的条件写护栏（entry 上的 `version`）落的就是 `updated_at` 这一列。护栏值传的是自增计数器之类的小整数时，这行的 `updated_at` 看起来就像 1970 年，第一次清理就会被扫走。要给某个命名空间配 TTL，就让它的写入方把 `version` 传成毫秒时间戳。
 
+反过来，`updated_at` 大幅领先真实时间的行（设备时钟跑偏时同步上来的）要等真实时间追过去才轮得到清理。这种行不会卡住写入——条件写认得出它来自未来，照样覆盖。
+
 `GET /capabilities` 的 features 里有 `client-state-ttl`。
 
 ## 循环任务的时区（`tzId`）

package/dist/adapters/d1.d.ts

@@ -185,8 +185,17 @@ export class D1Adapter {
      * than the stored row (updatedAt strictly lower) is skipped; equal or
      * newer overwrites. Values arrive pre-encrypted (the handler encrypts).
      *
+     * 例外是「来自未来」的行：`updated_at` 晚于服务端当前时间的行一律放行覆盖。
+     * 比较值是客户端自己报的时间戳，设备时钟只要领先过真实时间（用户改过系统
+     * 时间、时区或日期误操作），那一刻同步上来的行就带着一个还没到的时刻；之后
+     * 这台设备发什么都比它「旧」，条件写全被无声跳过，云端那行要等真实时间追上
+     * 去才解得开——客户端删本地数据、重装都碰不到它。合法写入不可能来自未来，
+     * 所以这种行按脏数据处理：服务端的钟是可信的那一个，拿它当判据放行。一次
+     * 正常写入就把 `updated_at` 拉回现实，之后旧不盖新照常生效。
+     *
      * `cleanups` 是删除项：在同一 batch 里先于 upsert 执行，`updated_at <= ?`
-     * 条件保证陈旧批次删不动更新写入的行。两种形态——
+     * 条件保证陈旧批次删不动更新写入的行（同样对未来时间戳的行放行，否则删一条
+     * 状态时切片行留在库里成孤儿）。两种形态——
      *   - `{ namespace, keyPrefix, updatedAt }` 删 key 前缀下的所有行，用来清掉
      *     大值旧写入留下的切片行（见 lib/state-chunks.js）；
      *   - `{ namespace, key, updatedAt }` 删这一个 key，用来删整条状态（前缀会
@@ -204,6 +213,9 @@ export class D1Adapter {
      * @param {string} userId
      * @param {Array<{ namespace: string, key: string, value: string, updatedAt: number }>} entries
      * @param {Array<{ namespace: string, key?: string, keyPrefix?: string, updatedAt: number }>} [cleanups]
+     * @param {number} [now] - 服务端当前时刻（epoch 毫秒），判定「这行来自未来」用的
+     *   就是它。调用方（lib/client-state-store.js）传下来，测试可以钉住一个假时钟；
+     *   自定义调用方不传时退回本机时钟。
      * @returns {Promise<{ upserted: number, skipped: number, outcomes: boolean[] }>}
      *   `outcomes[i]` 对应 entries[i] 是否真的写入（changes > 0）。
      */
@@ -217,7 +229,7 @@ export class D1Adapter {
         key?: string;
         keyPrefix?: string;
         updatedAt: number;
-    }>): Promise<{
+    }>, now?: number): Promise<{
         upserted: number;
         skipped: number;
         outcomes: boolean[];

package/dist/adapters/interface.d.ts

@@ -143,6 +143,9 @@ export type DbAdapter = {
      * 旧写入留下的切片行，见 lib/state-chunks.js），带 `key` 的删这一个 key（删整条状态；前缀会连带
      * 删掉同前缀的兄弟 key）。两种都只删 `updated_at <= updatedAt` 的行。自定义 adapter 忽略前缀形态
      * 只损失存储卫生；忽略精确 key 形态则删不掉状态，`ctx.writeState()` 的删除会失效。
+     * `now` 是服务端当前时刻（epoch 毫秒）：库里 `updated_at` 晚于它的行只可能来自跑偏的设备时钟，
+     * 写入与删除都对这种行放行，否则那一行会一直卡到真实时间追上去为止。忽略这个参数的自定义
+     * adapter 功能不变，只是没有这道解锁。
      * `outcomes` 逐条报告 entries[i] 是否真的写入（缺席时调用方按物理行计数兜底）。
      */
     upsertClientState?: (userId: string, entries: Array<{
@@ -155,7 +158,7 @@ export type DbAdapter = {
         key?: string;
         keyPrefix?: string;
         updatedAt: number;
-    }>) => Promise<{
+    }>, now?: number) => Promise<{
         upserted: number;
         skipped: number;
         outcomes?: boolean[];

package/dist/{chunk-N7CZ3KXB.mjs → chunk-4YH3TS4W.mjs}

@@ -1058,14 +1058,17 @@ function planClientStateCleanup(ttl, now) {
   }
   return targets;
 }
-async function writeClientStateEntries({ db, userId, userKey, entries }) {
+async function writeClientStateEntries({ db, userId, userKey, entries, now }) {
+  const nowFn = typeof now === "function" ? now : Date.now;
+  const at = nowFn();
   const physicalRows = [];
   const cleanups = [];
   const rootRowIndexes = [];
   const rootRowEntries = [];
   let deleted = 0;
   for (const entry of entries) {
-    const guardAt = Number.isInteger(entry.version) && entry.version > 0 ? entry.version : entry.updatedAt;
+    const rawGuardAt = Number.isInteger(entry.version) && entry.version > 0 ? entry.version : entry.updatedAt;
+    const guardAt = Math.min(rawGuardAt, at);
     cleanups.push({
       namespace: chunkNamespaceFor(entry.namespace),
       keyPrefix: chunkKeyPrefixFor(entry.key),
@@ -1111,7 +1114,7 @@ async function writeClientStateEntries({ db, userId, userKey, entries }) {
   if (physicalRows.length === 0 && cleanups.length === 0) {
     return { upserted: 0, skipped: 0, deleted: 0, skippedEntries: [] };
   }
-  const result = await db.upsertClientState(userId, physicalRows, cleanups);
+  const result = await db.upsertClientState(userId, physicalRows, cleanups, at);
   let upserted = 0;
   let skipped = 0;
   const skippedEntries = [];
@@ -1204,7 +1207,7 @@ function createStateAccessors({ db, userId, userKey, maxStateValueBytes, now })
         ...entry.version !== void 0 ? { version: entry.version } : {}
       };
     });
-    return writeClientStateEntries({ db, userId, userKey, entries: normalized });
+    return writeClientStateEntries({ db, userId, userKey, entries: normalized, now: nowFn });
   };
   return { readState, writeState };
 }
@@ -4649,8 +4652,17 @@ var D1Adapter = class {
    * than the stored row (updatedAt strictly lower) is skipped; equal or
    * newer overwrites. Values arrive pre-encrypted (the handler encrypts).
    *
+   * 例外是「来自未来」的行：`updated_at` 晚于服务端当前时间的行一律放行覆盖。
+   * 比较值是客户端自己报的时间戳，设备时钟只要领先过真实时间（用户改过系统
+   * 时间、时区或日期误操作），那一刻同步上来的行就带着一个还没到的时刻；之后
+   * 这台设备发什么都比它「旧」，条件写全被无声跳过，云端那行要等真实时间追上
+   * 去才解得开——客户端删本地数据、重装都碰不到它。合法写入不可能来自未来，
+   * 所以这种行按脏数据处理：服务端的钟是可信的那一个，拿它当判据放行。一次
+   * 正常写入就把 `updated_at` 拉回现实，之后旧不盖新照常生效。
+   *
    * `cleanups` 是删除项：在同一 batch 里先于 upsert 执行，`updated_at <= ?`
-   * 条件保证陈旧批次删不动更新写入的行。两种形态——
+   * 条件保证陈旧批次删不动更新写入的行（同样对未来时间戳的行放行，否则删一条
+   * 状态时切片行留在库里成孤儿）。两种形态——
    *   - `{ namespace, keyPrefix, updatedAt }` 删 key 前缀下的所有行，用来清掉
    *     大值旧写入留下的切片行（见 lib/state-chunks.js）；
    *   - `{ namespace, key, updatedAt }` 删这一个 key，用来删整条状态（前缀会
@@ -4668,24 +4680,30 @@ var D1Adapter = class {
    * @param {string} userId
    * @param {Array<{ namespace: string, key: string, value: string, updatedAt: number }>} entries
    * @param {Array<{ namespace: string, key?: string, keyPrefix?: string, updatedAt: number }>} [cleanups]
+   * @param {number} [now] - 服务端当前时刻（epoch 毫秒），判定「这行来自未来」用的
+   *   就是它。调用方（lib/client-state-store.js）传下来，测试可以钉住一个假时钟；
+   *   自定义调用方不传时退回本机时钟。
    * @returns {Promise<{ upserted: number, skipped: number, outcomes: boolean[] }>}
    *   `outcomes[i]` 对应 entries[i] 是否真的写入（changes > 0）。
    */
-  async upsertClientState(userId, entries, cleanups = []) {
+  async upsertClientState(userId, entries, cleanups = [], now = Date.now()) {
     const UPSERT_SQL = `INSERT INTO client_state (user_id, namespace, key, value, updated_at)
        VALUES (?, ?, ?, ?, ?)
        ON CONFLICT (user_id, namespace, key) DO UPDATE SET
          value = excluded.value,
          updated_at = excluded.updated_at
-       WHERE excluded.updated_at >= client_state.updated_at`;
+       WHERE excluded.updated_at >= client_state.updated_at
+          OR client_state.updated_at > ?`;
     const CLEANUP_PREFIX_SQL = `DELETE FROM client_state
-       WHERE user_id = ? AND namespace = ? AND key >= ? AND key < ? AND updated_at <= ?`;
+       WHERE user_id = ? AND namespace = ? AND key >= ? AND key < ?
+         AND (updated_at <= ? OR updated_at > ?)`;
     const CLEANUP_KEY_SQL = `DELETE FROM client_state
-       WHERE user_id = ? AND namespace = ? AND key = ? AND updated_at <= ?`;
+       WHERE user_id = ? AND namespace = ? AND key = ?
+         AND (updated_at <= ? OR updated_at > ?)`;
     const buildStatements = () => [
-      ...cleanups.map((c) => typeof c.key === "string" ? this._db.prepare(CLEANUP_KEY_SQL).bind(userId, c.namespace, c.key, c.updatedAt) : this._db.prepare(CLEANUP_PREFIX_SQL).bind(userId, c.namespace, c.keyPrefix, prefixRangeEnd(c.keyPrefix), c.updatedAt)),
+      ...cleanups.map((c) => typeof c.key === "string" ? this._db.prepare(CLEANUP_KEY_SQL).bind(userId, c.namespace, c.key, c.updatedAt, now) : this._db.prepare(CLEANUP_PREFIX_SQL).bind(userId, c.namespace, c.keyPrefix, prefixRangeEnd(c.keyPrefix), c.updatedAt, now)),
       ...entries.map(
-        (entry) => this._db.prepare(UPSERT_SQL).bind(userId, entry.namespace, entry.key, entry.value, entry.updatedAt)
+        (entry) => this._db.prepare(UPSERT_SQL).bind(userId, entry.namespace, entry.key, entry.value, entry.updatedAt, now)
       )
     ];
     let results;
@@ -5307,7 +5325,7 @@ function createClientStateHandler(ctx) {
 }
 
 // src/server/lib/version.js
-var SERVER_VERSION = true ? "2.6.0-next.24" : "0.0.0-dev";
+var SERVER_VERSION = true ? "2.6.0-next.26" : "0.0.0-dev";
 
 // src/server/handlers/capabilities.js
 var SERVER_FEATURES = Object.freeze([

package/dist/{chunk-XLCBVU37.cjs → chunk-GXYVOEF3.cjs}

@@ -1058,14 +1058,17 @@ function planClientStateCleanup(ttl, now) {
   }
   return targets;
 }
-async function writeClientStateEntries({ db, userId, userKey, entries }) {
+async function writeClientStateEntries({ db, userId, userKey, entries, now }) {
+  const nowFn = typeof now === "function" ? now : Date.now;
+  const at = nowFn();
   const physicalRows = [];
   const cleanups = [];
   const rootRowIndexes = [];
   const rootRowEntries = [];
   let deleted = 0;
   for (const entry of entries) {
-    const guardAt = Number.isInteger(entry.version) && entry.version > 0 ? entry.version : entry.updatedAt;
+    const rawGuardAt = Number.isInteger(entry.version) && entry.version > 0 ? entry.version : entry.updatedAt;
+    const guardAt = Math.min(rawGuardAt, at);
     cleanups.push({
       namespace: chunkNamespaceFor(entry.namespace),
       keyPrefix: chunkKeyPrefixFor(entry.key),
@@ -1111,7 +1114,7 @@ async function writeClientStateEntries({ db, userId, userKey, entries }) {
   if (physicalRows.length === 0 && cleanups.length === 0) {
     return { upserted: 0, skipped: 0, deleted: 0, skippedEntries: [] };
   }
-  const result = await db.upsertClientState(userId, physicalRows, cleanups);
+  const result = await db.upsertClientState(userId, physicalRows, cleanups, at);
   let upserted = 0;
   let skipped = 0;
   const skippedEntries = [];
@@ -1204,7 +1207,7 @@ function createStateAccessors({ db, userId, userKey, maxStateValueBytes, now })
         ...entry.version !== void 0 ? { version: entry.version } : {}
       };
     });
-    return writeClientStateEntries({ db, userId, userKey, entries: normalized });
+    return writeClientStateEntries({ db, userId, userKey, entries: normalized, now: nowFn });
   };
   return { readState, writeState };
 }
@@ -4649,8 +4652,17 @@ var D1Adapter = class {
    * than the stored row (updatedAt strictly lower) is skipped; equal or
    * newer overwrites. Values arrive pre-encrypted (the handler encrypts).
    *
+   * 例外是「来自未来」的行：`updated_at` 晚于服务端当前时间的行一律放行覆盖。
+   * 比较值是客户端自己报的时间戳，设备时钟只要领先过真实时间（用户改过系统
+   * 时间、时区或日期误操作），那一刻同步上来的行就带着一个还没到的时刻；之后
+   * 这台设备发什么都比它「旧」，条件写全被无声跳过，云端那行要等真实时间追上
+   * 去才解得开——客户端删本地数据、重装都碰不到它。合法写入不可能来自未来，
+   * 所以这种行按脏数据处理：服务端的钟是可信的那一个，拿它当判据放行。一次
+   * 正常写入就把 `updated_at` 拉回现实，之后旧不盖新照常生效。
+   *
    * `cleanups` 是删除项：在同一 batch 里先于 upsert 执行，`updated_at <= ?`
-   * 条件保证陈旧批次删不动更新写入的行。两种形态——
+   * 条件保证陈旧批次删不动更新写入的行（同样对未来时间戳的行放行，否则删一条
+   * 状态时切片行留在库里成孤儿）。两种形态——
    *   - `{ namespace, keyPrefix, updatedAt }` 删 key 前缀下的所有行，用来清掉
    *     大值旧写入留下的切片行（见 lib/state-chunks.js）；
    *   - `{ namespace, key, updatedAt }` 删这一个 key，用来删整条状态（前缀会
@@ -4668,24 +4680,30 @@ var D1Adapter = class {
    * @param {string} userId
    * @param {Array<{ namespace: string, key: string, value: string, updatedAt: number }>} entries
    * @param {Array<{ namespace: string, key?: string, keyPrefix?: string, updatedAt: number }>} [cleanups]
+   * @param {number} [now] - 服务端当前时刻（epoch 毫秒），判定「这行来自未来」用的
+   *   就是它。调用方（lib/client-state-store.js）传下来，测试可以钉住一个假时钟；
+   *   自定义调用方不传时退回本机时钟。
    * @returns {Promise<{ upserted: number, skipped: number, outcomes: boolean[] }>}
    *   `outcomes[i]` 对应 entries[i] 是否真的写入（changes > 0）。
    */
-  async upsertClientState(userId, entries, cleanups = []) {
+  async upsertClientState(userId, entries, cleanups = [], now = Date.now()) {
     const UPSERT_SQL = `INSERT INTO client_state (user_id, namespace, key, value, updated_at)
        VALUES (?, ?, ?, ?, ?)
        ON CONFLICT (user_id, namespace, key) DO UPDATE SET
          value = excluded.value,
          updated_at = excluded.updated_at
-       WHERE excluded.updated_at >= client_state.updated_at`;
+       WHERE excluded.updated_at >= client_state.updated_at
+          OR client_state.updated_at > ?`;
     const CLEANUP_PREFIX_SQL = `DELETE FROM client_state
-       WHERE user_id = ? AND namespace = ? AND key >= ? AND key < ? AND updated_at <= ?`;
+       WHERE user_id = ? AND namespace = ? AND key >= ? AND key < ?
+         AND (updated_at <= ? OR updated_at > ?)`;
     const CLEANUP_KEY_SQL = `DELETE FROM client_state
-       WHERE user_id = ? AND namespace = ? AND key = ? AND updated_at <= ?`;
+       WHERE user_id = ? AND namespace = ? AND key = ?
+         AND (updated_at <= ? OR updated_at > ?)`;
     const buildStatements = () => [
-      ...cleanups.map((c) => typeof c.key === "string" ? this._db.prepare(CLEANUP_KEY_SQL).bind(userId, c.namespace, c.key, c.updatedAt) : this._db.prepare(CLEANUP_PREFIX_SQL).bind(userId, c.namespace, c.keyPrefix, prefixRangeEnd(c.keyPrefix), c.updatedAt)),
+      ...cleanups.map((c) => typeof c.key === "string" ? this._db.prepare(CLEANUP_KEY_SQL).bind(userId, c.namespace, c.key, c.updatedAt, now) : this._db.prepare(CLEANUP_PREFIX_SQL).bind(userId, c.namespace, c.keyPrefix, prefixRangeEnd(c.keyPrefix), c.updatedAt, now)),
       ...entries.map(
-        (entry) => this._db.prepare(UPSERT_SQL).bind(userId, entry.namespace, entry.key, entry.value, entry.updatedAt)
+        (entry) => this._db.prepare(UPSERT_SQL).bind(userId, entry.namespace, entry.key, entry.value, entry.updatedAt, now)
       )
     ];
     let results;
@@ -5307,7 +5325,7 @@ function createClientStateHandler(ctx) {
 }
 
 // src/server/lib/version.js
-var SERVER_VERSION = true ? "2.6.0-next.24" : "0.0.0-dev";
+var SERVER_VERSION = true ? "2.6.0-next.26" : "0.0.0-dev";
 
 // src/server/handlers/capabilities.js
 var SERVER_FEATURES = Object.freeze([

package/dist/cloudflare.cjs

@@ -26,7 +26,7 @@
 
 
 
-var _chunkXLCBVU37cjs = require('./chunk-XLCBVU37.cjs');
+var _chunkGXYVOEF3cjs = require('./chunk-GXYVOEF3.cjs');
 require('./chunk-7NMQFTDJ.cjs');
 
 
@@ -56,4 +56,4 @@ require('./chunk-7NMQFTDJ.cjs');
 
 
 
-exports.DEFAULT_MAX_REQUEST_BODY_BYTES = _chunkXLCBVU37cjs.DEFAULT_MAX_REQUEST_BODY_BYTES; exports.MAX_PUSH_PAYLOAD_BYTES = _chunkXLCBVU37cjs.MAX_PUSH_PAYLOAD_BYTES; exports.NonRetryableError = _chunkXLCBVU37cjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkXLCBVU37cjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkXLCBVU37cjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkXLCBVU37cjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkXLCBVU37cjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkXLCBVU37cjs.advanceOccurrence; exports.createD1Adapter = _chunkXLCBVU37cjs.createD1Adapter; exports.createSingleUserCloudflareWorker = _chunkXLCBVU37cjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkXLCBVU37cjs.createSingleUserServer; exports.createWebCryptoWebPush = _chunkXLCBVU37cjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkXLCBVU37cjs.decryptFromStorage; exports.decryptPayload = _chunkXLCBVU37cjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkXLCBVU37cjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkXLCBVU37cjs.encryptForStorage; exports.ensureSchema = _chunkXLCBVU37cjs.ensureSchema; exports.getSchemaVersion = _chunkXLCBVU37cjs.getSchemaVersion; exports.isNonRetryableError = _chunkXLCBVU37cjs.isNonRetryableError; exports.isValidTimeZoneId = _chunkXLCBVU37cjs.isValidTimeZoneId; exports.measurePushPayload = _chunkXLCBVU37cjs.measurePushPayload; exports.nextFutureOccurrence = _chunkXLCBVU37cjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkXLCBVU37cjs.planNextOccurrence; exports.readRequestBody = _chunkXLCBVU37cjs.readRequestBody; exports.runScheduledTick = _chunkXLCBVU37cjs.runScheduledTick; exports.runTask = _chunkXLCBVU37cjs.runTask; exports.summarizeErrorCause = _chunkXLCBVU37cjs.summarizeErrorCause;
+exports.DEFAULT_MAX_REQUEST_BODY_BYTES = _chunkGXYVOEF3cjs.DEFAULT_MAX_REQUEST_BODY_BYTES; exports.MAX_PUSH_PAYLOAD_BYTES = _chunkGXYVOEF3cjs.MAX_PUSH_PAYLOAD_BYTES; exports.NonRetryableError = _chunkGXYVOEF3cjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkGXYVOEF3cjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkGXYVOEF3cjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkGXYVOEF3cjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkGXYVOEF3cjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkGXYVOEF3cjs.advanceOccurrence; exports.createD1Adapter = _chunkGXYVOEF3cjs.createD1Adapter; exports.createSingleUserCloudflareWorker = _chunkGXYVOEF3cjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkGXYVOEF3cjs.createSingleUserServer; exports.createWebCryptoWebPush = _chunkGXYVOEF3cjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkGXYVOEF3cjs.decryptFromStorage; exports.decryptPayload = _chunkGXYVOEF3cjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkGXYVOEF3cjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkGXYVOEF3cjs.encryptForStorage; exports.ensureSchema = _chunkGXYVOEF3cjs.ensureSchema; exports.getSchemaVersion = _chunkGXYVOEF3cjs.getSchemaVersion; exports.isNonRetryableError = _chunkGXYVOEF3cjs.isNonRetryableError; exports.isValidTimeZoneId = _chunkGXYVOEF3cjs.isValidTimeZoneId; exports.measurePushPayload = _chunkGXYVOEF3cjs.measurePushPayload; exports.nextFutureOccurrence = _chunkGXYVOEF3cjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkGXYVOEF3cjs.planNextOccurrence; exports.readRequestBody = _chunkGXYVOEF3cjs.readRequestBody; exports.runScheduledTick = _chunkGXYVOEF3cjs.runScheduledTick; exports.runTask = _chunkGXYVOEF3cjs.runTask; exports.summarizeErrorCause = _chunkGXYVOEF3cjs.summarizeErrorCause;

package/dist/cloudflare.mjs

@@ -26,7 +26,7 @@ import {
   runScheduledTick,
   runTask,
   summarizeErrorCause
-} from "./chunk-N7CZ3KXB.mjs";
+} from "./chunk-4YH3TS4W.mjs";
 import "./chunk-GN44PST5.mjs";
 export {
   DEFAULT_MAX_REQUEST_BODY_BYTES,

package/dist/index.cjs

@@ -71,7 +71,7 @@
 
 
 
-var _chunkXLCBVU37cjs = require('./chunk-XLCBVU37.cjs');
+var _chunkGXYVOEF3cjs = require('./chunk-GXYVOEF3.cjs');
 require('./chunk-7NMQFTDJ.cjs');
 
 // src/server/adapters/factory.js
@@ -105,7 +105,7 @@ async function createAdapter(config) {
 // src/server/handlers/init-tenant.js
 function createInitTenantHandler(ctx) {
   async function POST(headers, body) {
-    const initSecret = _chunkXLCBVU37cjs.getHeader.call(void 0, headers, "x-init-secret");
+    const initSecret = _chunkGXYVOEF3cjs.getHeader.call(void 0, headers, "x-init-secret");
     if (ctx.tenant.initSecret && initSecret !== ctx.tenant.initSecret) {
       return {
         status: 401,
@@ -118,7 +118,7 @@ function createInitTenantHandler(ctx) {
         }
       };
     }
-    const parsed = _chunkXLCBVU37cjs.parseJsonBody.call(void 0, body);
+    const parsed = _chunkGXYVOEF3cjs.parseJsonBody.call(void 0, body);
     if (!parsed.ok) {
       return {
         status: 400,
@@ -132,7 +132,7 @@ function createInitTenantHandler(ctx) {
     const tenantId = payload.tenantId || void 0;
     const driver = payload.driver;
     const databaseUrl = payload.databaseUrl || payload.connectionString;
-    if (tenantId && !_chunkXLCBVU37cjs.isValidUUIDv4.call(void 0, tenantId)) {
+    if (tenantId && !_chunkGXYVOEF3cjs.isValidUUIDv4.call(void 0, tenantId)) {
       return {
         status: 400,
         body: {
@@ -252,7 +252,7 @@ function createSendNotificationsHandler(ctx) {
         }
       };
     }
-    const data = await _chunkXLCBVU37cjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
+    const data = await _chunkGXYVOEF3cjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
     return { status: 200, body: { success: true, data } };
   }
   return { POST };
@@ -274,16 +274,16 @@ function encryptConfig(config, kekBuffer) {
   const plaintext = Buffer.from(JSON.stringify(config), "utf8");
   const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
   const authTag = cipher.getAuthTag();
-  return `v1.${_chunkXLCBVU37cjs.bytesToBase64Url.call(void 0, iv)}.${_chunkXLCBVU37cjs.bytesToBase64Url.call(void 0, authTag)}.${_chunkXLCBVU37cjs.bytesToBase64Url.call(void 0, ciphertext)}`;
+  return `v1.${_chunkGXYVOEF3cjs.bytesToBase64Url.call(void 0, iv)}.${_chunkGXYVOEF3cjs.bytesToBase64Url.call(void 0, authTag)}.${_chunkGXYVOEF3cjs.bytesToBase64Url.call(void 0, ciphertext)}`;
 }
 function decryptConfig(encrypted, kekBuffer) {
   const parts = String(encrypted || "").split(".");
   if (parts.length !== 4 || parts[0] !== "v1") {
     throw new Error("INVALID_TENANT_CONFIG");
   }
-  const iv = _chunkXLCBVU37cjs.base64UrlToBytes.call(void 0, parts[1]);
-  const authTag = _chunkXLCBVU37cjs.base64UrlToBytes.call(void 0, parts[2]);
-  const ciphertext = _chunkXLCBVU37cjs.base64UrlToBytes.call(void 0, parts[3]);
+  const iv = _chunkGXYVOEF3cjs.base64UrlToBytes.call(void 0, parts[1]);
+  const authTag = _chunkGXYVOEF3cjs.base64UrlToBytes.call(void 0, parts[2]);
+  const ciphertext = _chunkGXYVOEF3cjs.base64UrlToBytes.call(void 0, parts[3]);
   const decipher = _crypto.createDecipheriv.call(void 0, "aes-256-gcm", kekBuffer, iv);
   decipher.setAuthTag(authTag);
   const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
@@ -351,7 +351,7 @@ function createTenantBlobStore(options) {
 // src/server/tenant/token.js
 
 function sign(input, secret) {
-  return _chunkXLCBVU37cjs.bytesToBase64Url.call(void 0, _crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
+  return _chunkGXYVOEF3cjs.bytesToBase64Url.call(void 0, _crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
 }
 function nowEpochSeconds() {
   return Math.floor(Date.now() / 1e3);
@@ -367,8 +367,8 @@ function createTenantToken(params, secret) {
     v: 1
   };
   const header = { alg: "HS256", typ: "JWT" };
-  const encodedHeader = _chunkXLCBVU37cjs.bytesToBase64Url.call(void 0, _chunkXLCBVU37cjs.utf8.call(void 0, JSON.stringify(header)));
-  const encodedPayload = _chunkXLCBVU37cjs.bytesToBase64Url.call(void 0, _chunkXLCBVU37cjs.utf8.call(void 0, JSON.stringify(payload)));
+  const encodedHeader = _chunkGXYVOEF3cjs.bytesToBase64Url.call(void 0, _chunkGXYVOEF3cjs.utf8.call(void 0, JSON.stringify(header)));
+  const encodedPayload = _chunkGXYVOEF3cjs.bytesToBase64Url.call(void 0, _chunkGXYVOEF3cjs.utf8.call(void 0, JSON.stringify(payload)));
   const signingInput = `${encodedHeader}.${encodedPayload}`;
   const signature = sign(signingInput, secret);
   return `${signingInput}.${signature}`;
@@ -387,17 +387,17 @@ function verifyTenantToken(token, secret, options = {}) {
   let receivedBytes;
   let expectedBytes;
   try {
-    receivedBytes = _chunkXLCBVU37cjs.base64UrlToBytes.call(void 0, receivedSignature);
-    expectedBytes = _chunkXLCBVU37cjs.base64UrlToBytes.call(void 0, expectedSignature);
+    receivedBytes = _chunkGXYVOEF3cjs.base64UrlToBytes.call(void 0, receivedSignature);
+    expectedBytes = _chunkGXYVOEF3cjs.base64UrlToBytes.call(void 0, expectedSignature);
   } catch (e) {
     throw new Error("INVALID_TENANT_AUTH");
   }
-  if (!_chunkXLCBVU37cjs.timingSafeEqualBytes.call(void 0, receivedBytes, expectedBytes)) {
+  if (!_chunkGXYVOEF3cjs.timingSafeEqualBytes.call(void 0, receivedBytes, expectedBytes)) {
     throw new Error("INVALID_TENANT_AUTH");
   }
   let payload;
   try {
-    payload = JSON.parse(_chunkXLCBVU37cjs.utf8Decode.call(void 0, _chunkXLCBVU37cjs.base64UrlToBytes.call(void 0, encodedPayload)));
+    payload = JSON.parse(_chunkGXYVOEF3cjs.utf8Decode.call(void 0, _chunkGXYVOEF3cjs.base64UrlToBytes.call(void 0, encodedPayload)));
   } catch (e2) {
     throw new Error("INVALID_TENANT_AUTH");
   }
@@ -621,15 +621,15 @@ async function createReiServer(config) {
   return {
     handlers: {
       initTenant: createInitTenantHandler(ctx),
-      getUserKey: _chunkXLCBVU37cjs.createGetUserKeyHandler.call(void 0, ctx),
-      scheduleMessage: _chunkXLCBVU37cjs.createScheduleMessageHandler.call(void 0, ctx),
+      getUserKey: _chunkGXYVOEF3cjs.createGetUserKeyHandler.call(void 0, ctx),
+      scheduleMessage: _chunkGXYVOEF3cjs.createScheduleMessageHandler.call(void 0, ctx),
       sendNotifications: createSendNotificationsHandler(ctx),
-      updateMessage: _chunkXLCBVU37cjs.createUpdateMessageHandler.call(void 0, ctx),
-      cancelMessage: _chunkXLCBVU37cjs.createCancelMessageHandler.call(void 0, ctx),
-      messages: _chunkXLCBVU37cjs.createMessagesHandler.call(void 0, ctx),
-      getMessage: _chunkXLCBVU37cjs.createGetMessageHandler.call(void 0, ctx),
-      pushSubscription: _chunkXLCBVU37cjs.createPushSubscriptionHandler.call(void 0, ctx),
-      llmCredentials: _chunkXLCBVU37cjs.createLlmCredentialsHandler.call(void 0, ctx)
+      updateMessage: _chunkGXYVOEF3cjs.createUpdateMessageHandler.call(void 0, ctx),
+      cancelMessage: _chunkGXYVOEF3cjs.createCancelMessageHandler.call(void 0, ctx),
+      messages: _chunkGXYVOEF3cjs.createMessagesHandler.call(void 0, ctx),
+      getMessage: _chunkGXYVOEF3cjs.createGetMessageHandler.call(void 0, ctx),
+      pushSubscription: _chunkGXYVOEF3cjs.createPushSubscriptionHandler.call(void 0, ctx),
+      llmCredentials: _chunkGXYVOEF3cjs.createLlmCredentialsHandler.call(void 0, ctx)
     }
   };
 }
@@ -695,4 +695,4 @@ async function createReiServer(config) {
 
 
 
-exports.CORS_ALLOW_HEADERS = _chunkXLCBVU37cjs.CORS_ALLOW_HEADERS; exports.CORS_ALLOW_METHODS = _chunkXLCBVU37cjs.CORS_ALLOW_METHODS; exports.CRED_ID_MAX_LENGTH = _chunkXLCBVU37cjs.CRED_ID_MAX_LENGTH; exports.CRED_PUT_BATCH_MAX = _chunkXLCBVU37cjs.CRED_PUT_BATCH_MAX; exports.CRED_REFS_MAX_ENTRIES = _chunkXLCBVU37cjs.CRED_REFS_MAX_ENTRIES; exports.CRED_ROWS_PER_USER_MAX = _chunkXLCBVU37cjs.CRED_ROWS_PER_USER_MAX; exports.DEFAULT_CLAIM_LEASE_MS = _chunkXLCBVU37cjs.DEFAULT_CLAIM_LEASE_MS; exports.DEFAULT_HEARTBEAT_LEASE_TTL_MS = _chunkXLCBVU37cjs.DEFAULT_HEARTBEAT_LEASE_TTL_MS; exports.DEFAULT_LEASE_HEARTBEAT_MS = _chunkXLCBVU37cjs.DEFAULT_LEASE_HEARTBEAT_MS; exports.DEFAULT_MAX_REQUEST_BODY_BYTES = _chunkXLCBVU37cjs.DEFAULT_MAX_REQUEST_BODY_BYTES; exports.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE = _chunkXLCBVU37cjs.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE; exports.DEFAULT_MAX_TOOL_ITERATIONS = _chunkXLCBVU37cjs.DEFAULT_MAX_TOOL_ITERATIONS; exports.DEFAULT_TOTAL_TIMEOUT_MS = _chunkXLCBVU37cjs.DEFAULT_TOTAL_TIMEOUT_MS; exports.DeploymentConfigError = _chunkXLCBVU37cjs.DeploymentConfigError; exports.MAX_PUSH_PAYLOAD_BYTES = _chunkXLCBVU37cjs.MAX_PUSH_PAYLOAD_BYTES; exports.MAX_TASK_PAYLOAD_BYTES = _chunkXLCBVU37cjs.MAX_TASK_PAYLOAD_BYTES; exports.MIN_SCHEDULE_LEAD_MS = _chunkXLCBVU37cjs.MIN_SCHEDULE_LEAD_MS; exports.NonRetryableError = _chunkXLCBVU37cjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkXLCBVU37cjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkXLCBVU37cjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkXLCBVU37cjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkXLCBVU37cjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkXLCBVU37cjs.advanceOccurrence; exports.createAdapter = createAdapter; exports.createD1Adapter = _chunkXLCBVU37cjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunkXLCBVU37cjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkXLCBVU37cjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunkXLCBVU37cjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkXLCBVU37cjs.decryptFromStorage; exports.decryptPayload = _chunkXLCBVU37cjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkXLCBVU37cjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkXLCBVU37cjs.encryptForStorage; exports.ensureSchema = _chunkXLCBVU37cjs.ensureSchema; exports.getSchemaVersion = _chunkXLCBVU37cjs.getSchemaVersion; exports.hasChatCredRef = _chunkXLCBVU37cjs.hasChatCredRef; exports.isNonRetryableError = _chunkXLCBVU37cjs.isNonRetryableError; exports.isValidCredId = _chunkXLCBVU37cjs.isValidCredId; exports.isValidISO8601 = _chunkXLCBVU37cjs.isValidISO8601; exports.isValidTimeZoneId = _chunkXLCBVU37cjs.isValidTimeZoneId; exports.isValidUUID = _chunkXLCBVU37cjs.isValidUUID; exports.isValidUUIDv4 = _chunkXLCBVU37cjs.isValidUUIDv4; exports.isValidUrl = _chunkXLCBVU37cjs.isValidUrl; exports.measurePushPayload = _chunkXLCBVU37cjs.measurePushPayload; exports.nextFutureOccurrence = _chunkXLCBVU37cjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkXLCBVU37cjs.planNextOccurrence; exports.readRequestBody = _chunkXLCBVU37cjs.readRequestBody; exports.resolveLlmCredential = _chunkXLCBVU37cjs.resolveLlmCredential; exports.runScheduledTick = _chunkXLCBVU37cjs.runScheduledTick; exports.runTask = _chunkXLCBVU37cjs.runTask; exports.sanitizeErrorSummary = _chunkXLCBVU37cjs.sanitizeErrorSummary; exports.summarizeErrorCause = _chunkXLCBVU37cjs.summarizeErrorCause; exports.supportsLlmCredentialsStore = _chunkXLCBVU37cjs.supportsLlmCredentialsStore; exports.validateAvatarUrl = _chunkXLCBVU37cjs.validateAvatarUrl; exports.validateCredRefs = _chunkXLCBVU37cjs.validateCredRefs; exports.validateCredValue = _chunkXLCBVU37cjs.validateCredValue; exports.validateLlmMessagesArray = _chunkXLCBVU37cjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunkXLCBVU37cjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunkXLCBVU37cjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;
+exports.CORS_ALLOW_HEADERS = _chunkGXYVOEF3cjs.CORS_ALLOW_HEADERS; exports.CORS_ALLOW_METHODS = _chunkGXYVOEF3cjs.CORS_ALLOW_METHODS; exports.CRED_ID_MAX_LENGTH = _chunkGXYVOEF3cjs.CRED_ID_MAX_LENGTH; exports.CRED_PUT_BATCH_MAX = _chunkGXYVOEF3cjs.CRED_PUT_BATCH_MAX; exports.CRED_REFS_MAX_ENTRIES = _chunkGXYVOEF3cjs.CRED_REFS_MAX_ENTRIES; exports.CRED_ROWS_PER_USER_MAX = _chunkGXYVOEF3cjs.CRED_ROWS_PER_USER_MAX; exports.DEFAULT_CLAIM_LEASE_MS = _chunkGXYVOEF3cjs.DEFAULT_CLAIM_LEASE_MS; exports.DEFAULT_HEARTBEAT_LEASE_TTL_MS = _chunkGXYVOEF3cjs.DEFAULT_HEARTBEAT_LEASE_TTL_MS; exports.DEFAULT_LEASE_HEARTBEAT_MS = _chunkGXYVOEF3cjs.DEFAULT_LEASE_HEARTBEAT_MS; exports.DEFAULT_MAX_REQUEST_BODY_BYTES = _chunkGXYVOEF3cjs.DEFAULT_MAX_REQUEST_BODY_BYTES; exports.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE = _chunkGXYVOEF3cjs.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE; exports.DEFAULT_MAX_TOOL_ITERATIONS = _chunkGXYVOEF3cjs.DEFAULT_MAX_TOOL_ITERATIONS; exports.DEFAULT_TOTAL_TIMEOUT_MS = _chunkGXYVOEF3cjs.DEFAULT_TOTAL_TIMEOUT_MS; exports.DeploymentConfigError = _chunkGXYVOEF3cjs.DeploymentConfigError; exports.MAX_PUSH_PAYLOAD_BYTES = _chunkGXYVOEF3cjs.MAX_PUSH_PAYLOAD_BYTES; exports.MAX_TASK_PAYLOAD_BYTES = _chunkGXYVOEF3cjs.MAX_TASK_PAYLOAD_BYTES; exports.MIN_SCHEDULE_LEAD_MS = _chunkGXYVOEF3cjs.MIN_SCHEDULE_LEAD_MS; exports.NonRetryableError = _chunkGXYVOEF3cjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkGXYVOEF3cjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkGXYVOEF3cjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkGXYVOEF3cjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkGXYVOEF3cjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkGXYVOEF3cjs.advanceOccurrence; exports.createAdapter = createAdapter; exports.createD1Adapter = _chunkGXYVOEF3cjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunkGXYVOEF3cjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkGXYVOEF3cjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunkGXYVOEF3cjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkGXYVOEF3cjs.decryptFromStorage; exports.decryptPayload = _chunkGXYVOEF3cjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkGXYVOEF3cjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkGXYVOEF3cjs.encryptForStorage; exports.ensureSchema = _chunkGXYVOEF3cjs.ensureSchema; exports.getSchemaVersion = _chunkGXYVOEF3cjs.getSchemaVersion; exports.hasChatCredRef = _chunkGXYVOEF3cjs.hasChatCredRef; exports.isNonRetryableError = _chunkGXYVOEF3cjs.isNonRetryableError; exports.isValidCredId = _chunkGXYVOEF3cjs.isValidCredId; exports.isValidISO8601 = _chunkGXYVOEF3cjs.isValidISO8601; exports.isValidTimeZoneId = _chunkGXYVOEF3cjs.isValidTimeZoneId; exports.isValidUUID = _chunkGXYVOEF3cjs.isValidUUID; exports.isValidUUIDv4 = _chunkGXYVOEF3cjs.isValidUUIDv4; exports.isValidUrl = _chunkGXYVOEF3cjs.isValidUrl; exports.measurePushPayload = _chunkGXYVOEF3cjs.measurePushPayload; exports.nextFutureOccurrence = _chunkGXYVOEF3cjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkGXYVOEF3cjs.planNextOccurrence; exports.readRequestBody = _chunkGXYVOEF3cjs.readRequestBody; exports.resolveLlmCredential = _chunkGXYVOEF3cjs.resolveLlmCredential; exports.runScheduledTick = _chunkGXYVOEF3cjs.runScheduledTick; exports.runTask = _chunkGXYVOEF3cjs.runTask; exports.sanitizeErrorSummary = _chunkGXYVOEF3cjs.sanitizeErrorSummary; exports.summarizeErrorCause = _chunkGXYVOEF3cjs.summarizeErrorCause; exports.supportsLlmCredentialsStore = _chunkGXYVOEF3cjs.supportsLlmCredentialsStore; exports.validateAvatarUrl = _chunkGXYVOEF3cjs.validateAvatarUrl; exports.validateCredRefs = _chunkGXYVOEF3cjs.validateCredRefs; exports.validateCredValue = _chunkGXYVOEF3cjs.validateCredValue; exports.validateLlmMessagesArray = _chunkGXYVOEF3cjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunkGXYVOEF3cjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunkGXYVOEF3cjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;

package/dist/index.mjs

@@ -71,7 +71,7 @@ import {
   validateLlmMessagesArray,
   validateScheduleMessagePayload,
   validateSplitPattern
-} from "./chunk-N7CZ3KXB.mjs";
+} from "./chunk-4YH3TS4W.mjs";
 import "./chunk-GN44PST5.mjs";
 
 // src/server/adapters/factory.js

package/dist/lib/client-state-store.d.ts

@@ -29,7 +29,9 @@ export function planClientStateCleanup(ttl: Record<string, number> | null | unde
  *   - 删除：根行按精确 key 删，切片行按 key 前缀删，一个 key 的数据清干净。
  *
  * 两者都受同一套 last-write-wins 约束：`updatedAt` 比库里已有值旧的写入
- * （或删除）不生效，陈旧批次盖不掉新数据。
+ * （或删除）不生效，陈旧批次盖不掉新数据。唯一的例外是库里那行「来自未来」
+ * （`updated_at` 晚于服务端当前时刻）——那种行只可能出自跑偏的设备时钟，不当
+ * 比较基准，写入放行，详见 adapters/d1.js 的 `upsertClientState`。
  *
  * 条件写护栏：条目可带可选的 `version`（毫秒时间戳或单调递增整数）。带了它，
  * 比较用的就是这个值而不是 `updatedAt`——同一个 key 有多个写入方时（例如
@@ -48,12 +50,14 @@ export function planClientStateCleanup(ttl: Record<string, number> | null | unde
  * @param {Array<{ namespace: string, key: string, value: string|null, updatedAt: number, version?: number }>} args.entries
  *   `version`（可选）：条件写护栏值，见文件头。带了它，这条的 last-write-wins
  *   比较用它（写进行的 updated_at 列）；没带照旧用 `updatedAt`。
+ * @param {() => number} [args.now] - 取服务端当前时刻（测试可注入假时钟）。适配器
+ *   拿它认出库里「来自未来」的脏行。
  * @returns {Promise<{ upserted: number, skipped: number, deleted: number, skippedEntries: Array<{ namespace: string, key: string }> }>}
  *   `upserted` / `skipped` 按逻辑条目计（切片行不计）；`deleted` 是请求删除的
  *   key 数，不代表这些 key 原本一定存在。`skippedEntries` 逐条列出被
  *   last-write-wins 拦下的 key（适配器不回 outcomes 时为空数组——分不清是哪条）。
  */
-export function writeClientStateEntries({ db, userId, userKey, entries }: {
+export function writeClientStateEntries({ db, userId, userKey, entries, now }: {
     db: {
         upsertClientState: Function;
     };
@@ -66,6 +70,7 @@ export function writeClientStateEntries({ db, userId, userKey, entries }: {
         updatedAt: number;
         version?: number;
     }>;
+    now?: () => number;
 }): Promise<{
     upserted: number;
     skipped: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rei-standard/amsg-server",
-  "version": "2.6.0-next.24",
+  "version": "2.6.0-next.26",
   "description": "ReiStandard Active Messaging server SDK with pluggable database adapters. Three-axis push schema (messageKind / messageType / messageSubtype) from @rei-standard/amsg-shared. Auto-emits ReasoningPush when the LLM response carries reasoning_content.",
   "repository": {
     "type": "git",