@spooky-sync/core 0.0.1-canary.361 → 0.0.1-canary.363

package/AGENTS.md

@@ -45,7 +45,7 @@ re-materialized from state, never patched in place.
 - `services/blobs/` — durable cache for bucket bytes: OPFS holds the files, `_00_blob` holds a manifest that reconcile rebuilds from disk (so a wiped local store costs metadata, not the offline cache). Nothing expires on a timer; eviction is LRU under a byte budget only, skipping pinned and on-screen entries. Config: `blobCache` in `types.ts`.
 - `AuthService` — token management, sign-in/sign-out events. `subscribe(cb, { immediate? })` calls `cb` at once with the current user unless `immediate: false`, then on every change.
 - `CrdtManager`, `CrdtField`, `cursorColorFromName`, `CURSOR_COLORS`: collaborative `@crdt` fields on Loro. Client methods: `openCrdtField(table, recordId, field, draft?)` -> `Promise<CrdtField>` (every open of one field in a tab shares one `LoroDoc`; pair each with a close), `closeCrdtField(table, recordId, field)` -> `Promise<void>` (resolves once unsent edits are in the outbox; offline, once they are saved on the device, never waiting on the network), `createCrdtDraft(table, field)` -> a detached `CrdtField` for a record not created yet (`db.create` first, then pass it to `openCrdtField` as `draft`). `CrdtField`: `getDoc()`, `hasContent()`, `pushCursorState(bytes)`, `onCursorUpdate = cb` (a setter). Config: `crdt: true` preloads Loro, `crdtDebounceMs` (the first edit after a quiet spell waits this long, default 50), `crdtSendIntervalMs` (shortest gap between two sends of one field while typing, default 200). Design: `docs/crdt-v2.md` at the repo root.
-- **Peer to peer channels** (`-- @channel` tables, experimental): `client.channel(query, peers)` (a query builder, a built query, or a list, on `@channel` tables; typed from the query; own id skipped; both sides must list each other) opens WebRTC data channels to the peers' tabs and returns `Sp00kyChannel` (`state()`, `subscribe(cb)`, `setPeers`, `setQueries`, `close`, `tables()`, plus scoped `update` / `create` / `delete`). Only the query's `where` counts (`matchesWhere`, pure JS over the plan; `compileScope` throws for `.related()`, link-following paths, `$params`, unknown ops); it is never registered. `orderBy` / `limit` / `offset` / `select` / `.one()` warn once per shape (`unusedArgs`) unless the builder has `.ignoreUnusedArgs()`. Writes go to the peers of every open channel whose filter the row matches: a create checks the new row, an update or delete the stored row (`readRow` saga) before and after the patch. A peer's write is taken only if the sender is listed by a channel whose filter the row matches (an update/delete of a row not held is ignored). Peers fold updates into every subscription showing the row (output only, never the store): normal fields retire once the synced row holds them (or after `channels.confirmTimeoutMs`, default 5000); `-- @ephemeral` fields (optional, never filtered on) never reach the database, last writer wins, vanish when their author disconnects. A peer's create goes into the store and circuit like an own optimistic create minus the outbox (`peerCreate` saga, `state.peerWrites` folded into `overlay()`) and is undone at `confirmTimeoutMs` unless the server body landed (`versions`); a peer's delete hides the row through the overlay until it expires (`peerDelete`, `PeerWriteExpired`). Signaling is raw CREATE/LIVE on the generated server-only `_00_channel_signal` (sender stamped by the DB). Everything beyond identity, filter and field types is `channels.accept: { [table]: ({ kind, from, table, id, row, patch }) => boolean }`. Config also `iceServers`, `transport`. TS only (no Dart). Code: `modules/channel/`. Docs: `/docs/client/channels`.
+- **Peer to peer channels** (`-- @channel` tables, experimental): `client.channel(query, peers)` (a query builder, a built query, or a list, on `@channel` tables; typed from the query; own id skipped; both sides must list each other) opens WebRTC data channels to the peers' tabs and returns `Sp00kyChannel` (`state()`, `subscribe(cb)`, `setPeers`, `setQueries`, `close`, `tables()`, plus scoped `update` / `create` / `delete`). Only the query's `where` counts (`matchesWhere`, pure JS over the plan; `compileScope` throws for `.related()`, link-following paths, `$params`, unknown ops); it is never registered. `orderBy` / `limit` / `offset` / `select` / `.one()` warn once per shape (`unusedArgs`) unless the builder has `.ignoreUnusedArgs()`. Writes go to the peers of every open channel whose filter the row matches: a create checks the new row, an update or delete the stored row (`readRow` saga) before and after the patch. A peer's write is taken only if the sender is listed by a channel whose filter the row matches (an update/delete of a row not held is ignored). Peers fold updates into every subscription showing the row (output only, never the store): normal fields retire once the synced row holds them (or after `channels.confirmTimeoutMs`, default 5000); `-- @ephemeral` fields (optional, never filtered on) never reach the database, last writer wins, vanish when their author disconnects. A peer's create goes into the store and circuit like an own optimistic create minus the outbox (`peerCreate` saga, `state.peerWrites` folded into `overlay()`) and is undone at `confirmTimeoutMs` unless the server body landed (`versions`); a peer's delete hides the row through the overlay until it expires (`peerDelete`, `PeerWriteExpired`). Signaling is raw CREATE/LIVE on the generated server-only `_00_channel_signal` (sender stamped by the DB). Everything beyond identity, filter and field types is `channels.accept: { [table]: ({ kind, from, table, id, row, patch }) => boolean }`. Config also `iceServers`, `transport`. Dart has the same feature on the same wire protocol (`spooky_core` `modules/channel/`, `client.channel(...)`, WebRTC via `spooky_flutter`'s `flutterWebRtc`), so web and Flutter peers interoperate: keep the message shape, signaling rows and offer/answer ordering in step across both. Code: `modules/channel/`. Docs: `/docs/client/channels`.
 - Types: `Sp00kyConfig` (client-solid wraps it as `SyncedDbConfig`), `QueryTimeToLive`, `PersistenceClient`, `StoreType`, `UpdateOptions`, `RunOptions`, `PreloadOptions`.
 - Subpath: `@spooky-sync/core/otel` — `createOtelTransmit(endpoint)` for piping pino logs to OpenTelemetry.
 - `client.webPush` (`WebPushModule`, `db.webPush` in the Solid bindings) - Web Push on the page: `support()`, `info()`, `subscribe(opts)` (call from a click), `unsubscribe(opts)`, `sync()`, `isSubscribed()`, `update(opts)`, `devices()`, `notify(msg)`, `cancel(id)`, `test()`, `bridge()`, `onMessage(cb)`. Server calls are `fn::push::*`; typed `WebPushError`; config `webPush` in `types.ts`. Sign-out runs through `AuthService.onBeforeSignOut`.

package/dist/index.js

@@ -3650,8 +3650,8 @@ function trimHistory(history, cap) {
 
 //#endregion
 //#region src/modules/devtools/index.ts
-const CORE_VERSION = "0.0.1-canary.361";
-const WASM_VERSION = "0.0.1-canary.361";
+const CORE_VERSION = "0.0.1-canary.363";
+const WASM_VERSION = "0.0.1-canary.363";
 const SURREAL_VERSION = "3.1.0";
 var DevToolsService = class DevToolsService {
 	version = CORE_VERSION;
@@ -14018,7 +14018,7 @@ var AuthService = class {
 		const info = this.impersonation;
 		if (!info) return;
 		if (!opts.serverEnded) try {
-			await this.remote.query("RETURN fn::_00_impersonate::stop($session)", { session: info.session });
+			await this.remote.query("RETURN fn::_00_impersonate::stop($sid)", { sid: info.session });
 		} catch (error) {
 			this.logger.warn({
 				error,
@@ -14228,7 +14228,7 @@ var AuthService = class {
 		if (impersonating) {
 			this.endedImpersonationTarget = impersonating.target;
 			try {
-				await this.remote.query("RETURN fn::_00_impersonate::stop($session)", { session: impersonating.session });
+				await this.remote.query("RETURN fn::_00_impersonate::stop($sid)", { sid: impersonating.session });
 			} catch (_e) {}
 		}
 		await this.persistenceClient.remove(ORIGIN_TOKEN_KEY);
@@ -17609,7 +17609,7 @@ function createTabsCoordinator(config, s, host) {
 	return new TabsCoordinator({
 		tabId: s.tabId,
 		fingerprint: computeTabsFingerprint({
-			coreVersion: "0.0.1-canary.361",
+			coreVersion: "0.0.1-canary.363",
 			schemaHash: hash53(config.schemaSurql),
 			endpoint: config.database.endpoint ?? "",
 			namespace: config.database.namespace,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spooky-sync/core",
-  "version": "0.0.1-canary.361",
+  "version": "0.0.1-canary.363",
   "type": "module",
   "sideEffects": false,
   "main": "./dist/index.js",
@@ -75,8 +75,8 @@
     }
   },
   "dependencies": {
-    "@spooky-sync/query-builder": "0.0.1-canary.361",
-    "@spooky-sync/ssp-wasm": "0.0.1-canary.361",
+    "@spooky-sync/query-builder": "0.0.1-canary.363",
+    "@spooky-sync/ssp-wasm": "0.0.1-canary.363",
     "@sqlite.org/sqlite-wasm": "3.53.0-build1",
     "@surrealdb/wasm": "^3.1.0",
     "@surrealdb/wasm-native": "^3.3.4",

package/src/modules/auth/impersonation.integration.test.ts

@@ -64,8 +64,8 @@ DEFINE FUNCTION fn::_00_impersonate::start($target: string, $reason: string) {
   UPSERT _00_impersonation:s1 SET target = type::record($target), admin = $auth.id, reason = $reason, ended_at = NONE;
   RETURN { token: $test_imp_token, session: '_00_impersonation:s1' };
 } PERMISSIONS FULL;
-DEFINE FUNCTION fn::_00_impersonate::stop($session: string) {
-  UPDATE type::record($session) SET ended_at = time::now();
+DEFINE FUNCTION fn::_00_impersonate::stop($session_id: string) {
+  UPDATE type::record($session_id) SET ended_at = time::now();
   RETURN NONE;
 } PERMISSIONS FULL;
 DEFINE FUNCTION fn::_00_impersonate::renew() {
@@ -149,6 +149,10 @@ describe('impersonation on the SurrealDB-WASM engine', () => {
     expect(String(auth.currentUser.id)).toBe('user:alice');
     expect(store.get('sp00ky_auth_token')).toBe(adminToken);
     expect(store.has(ORIGIN_TOKEN_KEY)).toBe(false);
+    // The server session ended too. Binding the id as `session` (a protected
+    // variable) failed silently here, and only the token's expiry ended it.
+    const [ended] = await db.query<[unknown]>('SELECT VALUE ended_at FROM ONLY _00_impersonation:s1');
+    expect(ended).toBeTruthy();
   });
 
   it('an explicit stop racing a server-ended stop still returns to the admin', async () => {

package/src/modules/auth/impersonation.test.ts

@@ -49,7 +49,7 @@ function makeServer(opts: { refuse?: Set<string>; unreachable?: boolean } = {})
     }
     if (sql.includes('fn::_00_impersonate::current')) return [state.ended ? null : { session: '_00_impersonation:s1' }];
     if (sql.includes('fn::_00_impersonate::stop')) {
-      state.stops.push(vars?.session);
+      state.stops.push(vars?.sid);
       state.ended = true;
       return [null];
     }

package/src/modules/auth/index.ts

@@ -382,7 +382,7 @@ export class AuthService<S extends SchemaStructure> {
     if (!info) return;
     if (!opts.serverEnded) {
       try {
-        await this.remote.query('RETURN fn::_00_impersonate::stop($session)', { session: info.session });
+        await this.remote.query('RETURN fn::_00_impersonate::stop($sid)', { sid: info.session });
       } catch (error) {
         // The token expires on its own; the local switch below is what matters.
         this.logger.warn(
@@ -659,8 +659,8 @@ export class AuthService<S extends SchemaStructure> {
     if (impersonating) {
       this.endedImpersonationTarget = impersonating.target;
       try {
-        await this.remote.query('RETURN fn::_00_impersonate::stop($session)', {
-          session: impersonating.session,
+        await this.remote.query('RETURN fn::_00_impersonate::stop($sid)', {
+          sid: impersonating.session,
         });
       } catch (_e) {
         // The token expires on its own.