@syncular/server 0.15.44 → 0.15.46

package/dist/relational-rows.js

@@ -1,5 +1,5 @@
 /**
- * Relational current-row storage (DESIGN-relational-server-storage.md).
+ * Relational current-row storage.
  *
  * Every synced table is a REAL table in the server database — the app's
  * columns with proper type affinities, queryable with plain SQL/joins/BI —
@@ -53,7 +53,7 @@ export const SYNC_PAYLOAD_COLUMN = '_sync_payload';
 export function quoteIdent(name) {
     return `"${name.replaceAll('"', '""')}"`;
 }
-/** §5.3-style type affinities, per dialect (DESIGN type-mapping table). */
+/** §5.3-style type affinities, per dialect. */
 export function columnSqlType(column, dialect) {
     if (dialect === 'postgres') {
         switch (column.type) {
@@ -176,11 +176,11 @@ export function physicalIndexName(declaredName) {
     return `${SYNC_INDEX_PREFIX}${fnv1a64Hex(declaredName)}`;
 }
 /**
- * CREATE INDEX IF NOT EXISTS for the table's user-declared indexes
- * (DESIGN "user indexes" — the same declared names/columns the client
- * materializes; cross-table index-name uniqueness is the user's schema
- * concern, exactly as it is client-side). Server-side the physical name
- * carries the {@link SYNC_INDEX_PREFIX} ownership marker.
+ * CREATE INDEX IF NOT EXISTS for the table's user-declared indexes. These use
+ * the same declared names and columns the client materializes. Cross-table
+ * index-name uniqueness is the user's schema concern, as it is client-side.
+ * Server-side the physical name carries the {@link SYNC_INDEX_PREFIX}
+ * ownership marker.
  */
 export function createIndexDdl(table) {
     // User indexes name app columns — nothing to index without the projection.
@@ -402,8 +402,8 @@ export function deleteRowSql(table, dialect) {
     return `DELETE FROM ${quoteIdent(table.name)} WHERE ${quoteIdent(SYNC_PARTITION_COLUMN)}=${p[0]} AND ${quoteIdent(SYNC_ROW_ID_COLUMN)}=${p[1]}`;
 }
 /**
- * The schema-version marker table gating DDL work (DESIGN "server-side
- * schema migration"): `ensureSchema` compares the stored version and skips
+ * The schema-version marker table gates DDL work. `ensureSchema` compares the
+ * stored version and skips
  * all introspection/DDL when it matches — one cheap read per storage
  * instance (relevant for D1's per-request instantiation).
  *

package/dist/s3-blob-store.js

@@ -23,7 +23,7 @@ function parseStatsJson(json) {
         bytes: Number(parsed.bytes ?? 0),
     };
 }
-// Runtime-neutral base64url (TODO §4.2): `Buffer` is not present on
+// Runtime-neutral base64url: `Buffer` is not present on
 // Cloudflare Workers without `nodejs_compat`, so the metadata header is
 // (de)coded with `btoa`/`atob`, available in every runtime.
 function utf8ToBase64url(text) {

package/dist/s3-segment-store.js

@@ -32,7 +32,7 @@ function parseStatsJson(json) {
         sqliteSegments: Number(parsed.sqliteSegments ?? 0),
     };
 }
-// Runtime-neutral base64url (TODO §4.2): `Buffer` is not present on
+// Runtime-neutral base64url: `Buffer` is not present on
 // Cloudflare Workers without `nodejs_compat`, so the object-metadata record
 // header is (de)coded with `btoa`/`atob`, available in every runtime.
 function utf8ToBase64url(text) {

package/dist/schema.d.ts

@@ -3,7 +3,7 @@
  *
  * The server is configured with a schema IR: tables, columns with the six
  * §2.4 column types, scope patterns per §3.1, and a schema version. Codegen
- * (B5) will emit this shape later; tests hand-write it.
+ * Typegen emits this shape; tests hand-write it.
  */
 import { type RowColumn } from '@syncular/core';
 /** `'prefix:{variable}'` shorthand (column name = variable) or explicit. */
@@ -12,9 +12,8 @@ export type ScopePatternSpec = string | {
     column: string;
 };
 /**
- * A user-declared index (the migration subset's CREATE INDEX). With
- * relational server storage these apply server-side too (DESIGN
- * "user indexes") — the same declaration the client materializes.
+ * A user-declared index (the migration subset's CREATE INDEX). Relational
+ * server storage applies the same declaration the client materializes.
  */
 export interface IndexSchema {
     readonly name: string;
@@ -32,7 +31,7 @@ export interface TableSchema {
     /** User indexes (optional) — created on the server's relational tables. */
     readonly indexes?: readonly IndexSchema[];
     /**
-     * Server-side column materialization (DESIGN-relational-server-storage.md
+     * Server-side column materialization
      * "optional materialization"). When `true` (the usual default) the server's
      * row table carries the app's typed columns as a queryable projection;
      * when `false` it carries only the `_sync_*` meta columns — same storage

package/dist/schema.js

@@ -3,7 +3,7 @@
  *
  * The server is configured with a schema IR: tables, columns with the six
  * §2.4 column types, scope patterns per §3.1, and a schema version. Codegen
- * (B5) will emit this shape later; tests hand-write it.
+ * Typegen emits this shape; tests hand-write it.
  */
 import { validatePortableRelationalIdentifier, } from '@syncular/core';
 const PATTERN_RE = /^([^{}]+):\{([^{}:]+)\}$/;
@@ -37,8 +37,8 @@ export function compileSchema(schema) {
         if (tables.has(table.name)) {
             throw new Error(`duplicate table ${JSON.stringify(table.name)}`);
         }
-        // Identifier rules (DESIGN "current-row tables") live in core's
-        // validatePortableRelationalIdentifier, shared with typegen: app tables
+        // Identifier rules live in core's validatePortableRelationalIdentifier,
+        // shared with typegen: app tables
         // share a namespace with the sync infrastructure tables (`sync_*`) and
         // carry `_sync_*` meta columns, so both prefixes are reserved, and
         // Postgres silently truncates identifiers over 63 bytes.

package/dist/seed.js

@@ -1,5 +1,5 @@
 /**
- * The public seeding helper (RFC 0002 §2.5): push app-shaped mutations
+ * The public seeding helper: push app-shaped mutations
  * through the REAL push path — one `handleSyncRequest` round built from the
  * server schema — so demos, dev servers, and ops scripts seed data with one
  * supported call. This is the same §6 pipeline every client write takes

package/dist/segment-store.d.ts

@@ -30,8 +30,8 @@ export interface SegmentFindKey {
     readonly asOfCommitSeq: number;
 }
 /**
- * Coarse store-level counters for the admin/console read surface (TODO
- * §2.5). Optional — a store that omits `stats()` simply cannot report them.
+ * Coarse store-level counters for the admin/console read surface. Optional:
+ * a store that omits `stats()` simply cannot report them.
  * All counts include expired-but-not-yet-evicted entries (the store's own
  * bytes on disk), split by media type.
  */
@@ -62,7 +62,7 @@ export interface SegmentStore {
      * rebuilding sqlite images while one exists (§5.3).
      */
     find(key: SegmentFindKey, nowMs: number): Promise<SegmentRecord | undefined>;
-    /** Admin/console counters (TODO §2.5) — ADDITIVE, optional. */
+    /** Admin/console counters: ADDITIVE, optional. */
     stats?(): Promise<SegmentStoreStats>;
 }
 export declare function segmentIdFor(bytes: Uint8Array): Promise<string>;

package/dist/signed-url.js

@@ -60,8 +60,8 @@ export async function issueBlobUploadUrl(config, args) {
     return config.presign({ ...args, ttlSeconds });
 }
 const encoder = new TextEncoder();
-// Runtime-neutral base64url (no `Buffer` — Workers/Deno/browser safe; TODO
-// §4.2): `btoa`/`atob` operate on binary strings, present in every runtime.
+// Runtime-neutral base64url: `btoa`/`atob` operate on binary strings and are
+// present in every supported runtime.
 function base64url(bytes) {
     let binary = '';
     for (const byte of bytes)

package/dist/sigv4.d.ts

@@ -1,10 +1,10 @@
 /**
  * Minimal AWS Signature Version 4 — exactly the subset the S3 segment
  * store needs (header-signed requests and presigned GET URLs), hand-rolled
- * per the dependency-light doctrine (REVISE): SigV4 is small and
+ * per the dependency-light doctrine: SigV4 is small and
  * well-specified, so no SDK.
  *
- * Runtime-neutral (TODO §4.2): the crypto primitives are Web Crypto
+ * Runtime-neutral: the crypto primitives are Web Crypto
  * (`crypto.subtle`), not `node:crypto`, so this module runs unchanged on
  * Cloudflare Workers / Deno / browsers as well as Bun/Node. `crypto.subtle`
  * is async, so signing is async throughout; the `S3SegmentStore` consumers
@@ -36,8 +36,6 @@ export declare function amzTimestamps(nowMs: number): {
     amzDate: string;
     dateStamp: string;
 };
-/** Sorted, fully re-encoded canonical query string from *decoded* pairs. */
-export declare function canonicalQuery(params: Iterable<readonly [string, string]>): string;
 export interface CanonicalRequestArgs {
     readonly method: string;
     /** The URI-encoded absolute path exactly as sent on the request line. */

package/dist/sigv4.js

@@ -1,10 +1,10 @@
 /**
  * Minimal AWS Signature Version 4 — exactly the subset the S3 segment
  * store needs (header-signed requests and presigned GET URLs), hand-rolled
- * per the dependency-light doctrine (REVISE): SigV4 is small and
+ * per the dependency-light doctrine: SigV4 is small and
  * well-specified, so no SDK.
  *
- * Runtime-neutral (TODO §4.2): the crypto primitives are Web Crypto
+ * Runtime-neutral: the crypto primitives are Web Crypto
  * (`crypto.subtle`), not `node:crypto`, so this module runs unchanged on
  * Cloudflare Workers / Deno / browsers as well as Bun/Node. `crypto.subtle`
  * is async, so signing is async throughout; the `S3SegmentStore` consumers
@@ -57,7 +57,7 @@ export function amzTimestamps(nowMs) {
     return { amzDate, dateStamp: amzDate.slice(0, 8) };
 }
 /** Sorted, fully re-encoded canonical query string from *decoded* pairs. */
-export function canonicalQuery(params) {
+function canonicalQuery(params) {
     return [...params]
         .map(([k, v]) => [uriEncode(k, true), uriEncode(v, true)])
         .sort(([ak, av], [bk, bv]) => ak < bk ? -1 : ak > bk ? 1 : av < bv ? -1 : av > bv ? 1 : 0)

package/dist/sqlite-blob-store.d.ts

@@ -3,7 +3,7 @@
  * dependency-free). Bun-specific by design (top-level `bun:sqlite` import),
  * so it lives in its own module — the runtime-neutral `BlobStore` interface,
  * `MemoryBlobStore`, `blobIdFor`, and `isBlobId` stay in `blob-store.ts` for
- * the Workers/edge core (TODO §4.2 neutrality discipline; enforced by
+ * the Workers/edge core (runtime neutrality is enforced by
  * `test/runtime-neutrality.test.ts`).
  */
 import { Database } from 'bun:sqlite';

package/dist/sqlite-blob-store.js

@@ -3,7 +3,7 @@
  * dependency-free). Bun-specific by design (top-level `bun:sqlite` import),
  * so it lives in its own module — the runtime-neutral `BlobStore` interface,
  * `MemoryBlobStore`, `blobIdFor`, and `isBlobId` stay in `blob-store.ts` for
- * the Workers/edge core (TODO §4.2 neutrality discipline; enforced by
+ * the Workers/edge core (runtime neutrality is enforced by
  * `test/runtime-neutrality.test.ts`).
  */
 import { Database } from 'bun:sqlite';

package/dist/sqlite-dialect.d.ts

@@ -11,8 +11,7 @@
  * db.prepare(sql).bind(...).all()`); a shared execution layer would have to
  * pick one calling convention and adapt the other, which is uglier than two
  * thin storage classes that each speak their driver's native shape while
- * importing the same SQL text and codecs from here (TODO §4.2 judgment
- * call — "clean parallel implementation against the storage contract").
+ * importing the same SQL text and codecs from here.
  * Both classes run the identical `test/storage-contract.ts`, so the
  * behavior is held key-for-key regardless.
  */
@@ -28,10 +27,10 @@ import type { StoredChange, StoredCommit, StoredPushResult, StoredRow } from './
  * The inverted scope index carries the ordered column (`commit_seq` /
  * `row_id`) last in the PRIMARY KEY, so the candidate scan is an index
  * range that returns already-ordered rows — the same covering-index shape
- * the Postgres storage documents (§3.1, REVISE B2 performance-by-
+ * the Postgres storage documents (§3.1, performance-by-
  * construction).
  */
-export declare const SQLITE_DDL = "\nCREATE TABLE IF NOT EXISTS sync_partitions(\n  partition TEXT PRIMARY KEY,\n  max_commit_seq INTEGER NOT NULL DEFAULT 0,\n  horizon_seq INTEGER NOT NULL DEFAULT 0\n);\nCREATE TABLE IF NOT EXISTS sync_row_scopes(\n  partition TEXT NOT NULL, tbl TEXT NOT NULL,\n  var TEXT NOT NULL, value TEXT NOT NULL, row_id TEXT NOT NULL,\n  PRIMARY KEY(partition, tbl, var, value, row_id)\n);\nCREATE TABLE IF NOT EXISTS sync_commits(\n  partition TEXT NOT NULL, commit_seq INTEGER NOT NULL,\n  client_id TEXT NOT NULL, client_commit_id TEXT NOT NULL,\n  actor_id TEXT NOT NULL, created_at_ms INTEGER NOT NULL,\n  PRIMARY KEY(partition, commit_seq)\n);\nCREATE INDEX IF NOT EXISTS sync_commits_by_time\n  ON sync_commits(partition, created_at_ms);\nCREATE TABLE IF NOT EXISTS sync_changes(\n  partition TEXT NOT NULL, commit_seq INTEGER NOT NULL, idx INTEGER NOT NULL,\n  tbl TEXT NOT NULL, row_id TEXT NOT NULL, op INTEGER NOT NULL,\n  row_version INTEGER, scopes TEXT NOT NULL, payload BLOB,\n  PRIMARY KEY(partition, commit_seq, idx)\n);\nCREATE INDEX IF NOT EXISTS sync_changes_by_table\n  ON sync_changes(partition, commit_seq, tbl, idx);\nCREATE TABLE IF NOT EXISTS sync_change_scopes(\n  partition TEXT NOT NULL, tbl TEXT NOT NULL,\n  var TEXT NOT NULL, value TEXT NOT NULL, commit_seq INTEGER NOT NULL,\n  PRIMARY KEY(partition, tbl, var, value, commit_seq)\n);\nCREATE TABLE IF NOT EXISTS sync_push_results(\n  partition TEXT NOT NULL, client_id TEXT NOT NULL,\n  client_commit_id TEXT NOT NULL, result TEXT NOT NULL,\n  PRIMARY KEY(partition, client_id, client_commit_id)\n);\nCREATE TABLE IF NOT EXISTS sync_clients(\n  partition TEXT NOT NULL, client_id TEXT NOT NULL, actor_id TEXT NOT NULL,\n  cursor INTEGER NOT NULL, subscriptions TEXT NOT NULL,\n  updated_at_ms INTEGER NOT NULL,\n  PRIMARY KEY(partition, client_id)\n);\nCREATE TABLE IF NOT EXISTS sync_blob_refs(\n  partition TEXT NOT NULL, tbl TEXT NOT NULL, row_id TEXT NOT NULL,\n  blob_id TEXT NOT NULL,\n  PRIMARY KEY(partition, tbl, row_id, blob_id)\n);\nCREATE INDEX IF NOT EXISTS sync_blob_refs_by_blob\n  ON sync_blob_refs(partition, blob_id);\n";
+export declare const SQLITE_DDL = "\nCREATE TABLE IF NOT EXISTS sync_partitions(\n  partition TEXT PRIMARY KEY,\n  max_commit_seq INTEGER NOT NULL DEFAULT 0,\n  horizon_seq INTEGER NOT NULL DEFAULT 0\n);\nCREATE TABLE IF NOT EXISTS sync_row_scopes(\n  partition TEXT NOT NULL, tbl TEXT NOT NULL,\n  var TEXT NOT NULL, value TEXT NOT NULL, row_id TEXT NOT NULL,\n  PRIMARY KEY(partition, tbl, var, value, row_id)\n);\nCREATE TABLE IF NOT EXISTS sync_commits(\n  partition TEXT NOT NULL, commit_seq INTEGER NOT NULL,\n  client_id TEXT NOT NULL, client_commit_id TEXT NOT NULL,\n  actor_id TEXT NOT NULL, created_at_ms INTEGER NOT NULL,\n  PRIMARY KEY(partition, commit_seq)\n);\nCREATE INDEX IF NOT EXISTS sync_commits_by_time\n  ON sync_commits(partition, created_at_ms);\nCREATE TABLE IF NOT EXISTS sync_changes(\n  partition TEXT NOT NULL, commit_seq INTEGER NOT NULL, idx INTEGER NOT NULL,\n  tbl TEXT NOT NULL, row_id TEXT NOT NULL, op INTEGER NOT NULL,\n  row_version INTEGER, scopes TEXT NOT NULL, payload BLOB,\n  PRIMARY KEY(partition, commit_seq, idx)\n);\nCREATE INDEX IF NOT EXISTS sync_changes_by_table\n  ON sync_changes(partition, commit_seq, tbl, idx);\nCREATE TABLE IF NOT EXISTS sync_change_scopes(\n  partition TEXT NOT NULL, tbl TEXT NOT NULL,\n  var TEXT NOT NULL, value TEXT NOT NULL, commit_seq INTEGER NOT NULL,\n  PRIMARY KEY(partition, tbl, var, value, commit_seq)\n);\nCREATE TABLE IF NOT EXISTS sync_push_results(\n  partition TEXT NOT NULL, client_id TEXT NOT NULL,\n  client_commit_id TEXT NOT NULL, result TEXT NOT NULL,\n  PRIMARY KEY(partition, client_id, client_commit_id)\n);\nCREATE TABLE IF NOT EXISTS sync_reactions(\n  partition TEXT NOT NULL, idempotency_key TEXT NOT NULL,\n  type TEXT NOT NULL, version INTEGER NOT NULL, payload TEXT NOT NULL,\n  source_client_id TEXT NOT NULL, source_client_commit_id TEXT NOT NULL,\n  source_commit_seq INTEGER NOT NULL, created_at_ms INTEGER NOT NULL,\n  available_at_ms INTEGER NOT NULL, status TEXT NOT NULL,\n  attempts INTEGER NOT NULL, max_attempts INTEGER NOT NULL,\n  lease_owner TEXT, lease_expires_at_ms INTEGER, completed_at_ms INTEGER,\n  last_failure TEXT,\n  PRIMARY KEY(partition, idempotency_key),\n  CHECK(status IN ('pending', 'leased', 'completed', 'dead-letter'))\n);\nCREATE INDEX IF NOT EXISTS sync_reactions_due\n  ON sync_reactions(partition, status, available_at_ms, created_at_ms, idempotency_key);\nCREATE INDEX IF NOT EXISTS sync_reactions_lease\n  ON sync_reactions(partition, status, lease_expires_at_ms);\nCREATE INDEX IF NOT EXISTS sync_reactions_completed\n  ON sync_reactions(partition, status, completed_at_ms, idempotency_key);\nCREATE INDEX IF NOT EXISTS sync_reactions_dead_letter\n  ON sync_reactions(partition, status, available_at_ms, idempotency_key);\nCREATE TABLE IF NOT EXISTS sync_clients(\n  partition TEXT NOT NULL, client_id TEXT NOT NULL, actor_id TEXT NOT NULL,\n  cursor INTEGER NOT NULL, subscriptions TEXT NOT NULL,\n  updated_at_ms INTEGER NOT NULL,\n  PRIMARY KEY(partition, client_id)\n);\nCREATE TABLE IF NOT EXISTS sync_blob_refs(\n  partition TEXT NOT NULL, tbl TEXT NOT NULL, row_id TEXT NOT NULL,\n  blob_id TEXT NOT NULL,\n  PRIMARY KEY(partition, tbl, row_id, blob_id)\n);\nCREATE INDEX IF NOT EXISTS sync_blob_refs_by_blob\n  ON sync_blob_refs(partition, blob_id);\n";
 /** Split the DDL into individual statements (D1 applies them one by one). */
 export declare function sqliteDdlStatements(): string[];
 /** `?,?,…` for an `IN (…)` clause of `count` positional parameters. */

package/dist/sqlite-dialect.js

@@ -9,7 +9,7 @@ import { matchesEffective } from './scopes.js';
  * The inverted scope index carries the ordered column (`commit_seq` /
  * `row_id`) last in the PRIMARY KEY, so the candidate scan is an index
  * range that returns already-ordered rows — the same covering-index shape
- * the Postgres storage documents (§3.1, REVISE B2 performance-by-
+ * the Postgres storage documents (§3.1, performance-by-
  * construction).
  */
 export const SQLITE_DDL = `
@@ -49,6 +49,26 @@ CREATE TABLE IF NOT EXISTS sync_push_results(
   client_commit_id TEXT NOT NULL, result TEXT NOT NULL,
   PRIMARY KEY(partition, client_id, client_commit_id)
 );
+CREATE TABLE IF NOT EXISTS sync_reactions(
+  partition TEXT NOT NULL, idempotency_key TEXT NOT NULL,
+  type TEXT NOT NULL, version INTEGER NOT NULL, payload TEXT NOT NULL,
+  source_client_id TEXT NOT NULL, source_client_commit_id TEXT NOT NULL,
+  source_commit_seq INTEGER NOT NULL, created_at_ms INTEGER NOT NULL,
+  available_at_ms INTEGER NOT NULL, status TEXT NOT NULL,
+  attempts INTEGER NOT NULL, max_attempts INTEGER NOT NULL,
+  lease_owner TEXT, lease_expires_at_ms INTEGER, completed_at_ms INTEGER,
+  last_failure TEXT,
+  PRIMARY KEY(partition, idempotency_key),
+  CHECK(status IN ('pending', 'leased', 'completed', 'dead-letter'))
+);
+CREATE INDEX IF NOT EXISTS sync_reactions_due
+  ON sync_reactions(partition, status, available_at_ms, created_at_ms, idempotency_key);
+CREATE INDEX IF NOT EXISTS sync_reactions_lease
+  ON sync_reactions(partition, status, lease_expires_at_ms);
+CREATE INDEX IF NOT EXISTS sync_reactions_completed
+  ON sync_reactions(partition, status, completed_at_ms, idempotency_key);
+CREATE INDEX IF NOT EXISTS sync_reactions_dead_letter
+  ON sync_reactions(partition, status, available_at_ms, idempotency_key);
 CREATE TABLE IF NOT EXISTS sync_clients(
   partition TEXT NOT NULL, client_id TEXT NOT NULL, actor_id TEXT NOT NULL,
   cursor INTEGER NOT NULL, subscriptions TEXT NOT NULL,

package/dist/sqlite-image.d.ts

@@ -13,7 +13,7 @@ export interface SqliteImageInput {
 }
 /**
  * The §5.3 image-builder capability, injected through
- * `SyncServerConfig.sqliteImageBuilder` (TODO §4.2). Building an image needs
+ * `SyncServerConfig.sqliteImageBuilder`. Building an image needs
  * a real SQLite engine (`bun:sqlite` here), which is not available on every
  * runtime — Cloudflare Workers has none. So the core takes the builder as an
  * optional capability rather than importing `bun:sqlite` on the pull path:

package/dist/sqlite-lease-store.d.ts

@@ -3,7 +3,7 @@
  * dependency-free). Bun-specific by design (top-level `bun:sqlite` import),
  * so it lives in its own module — the runtime-neutral `LeaseStore` interface,
  * `LeaseRecord`, and `MemoryLeaseStore` stay in `lease-store.ts` for the
- * Workers/edge core (TODO §4.2 neutrality discipline; enforced by
+ * Workers/edge core (runtime neutrality is enforced by
  * `test/runtime-neutrality.test.ts`).
  */
 import { Database } from 'bun:sqlite';

package/dist/sqlite-lease-store.js

@@ -3,7 +3,7 @@
  * dependency-free). Bun-specific by design (top-level `bun:sqlite` import),
  * so it lives in its own module — the runtime-neutral `LeaseStore` interface,
  * `LeaseRecord`, and `MemoryLeaseStore` stay in `lease-store.ts` for the
- * Workers/edge core (TODO §4.2 neutrality discipline; enforced by
+ * Workers/edge core (runtime neutrality is enforced by
  * `test/runtime-neutrality.test.ts`).
  */
 import { Database } from 'bun:sqlite';

package/dist/sqlite-segment-store.d.ts

@@ -4,8 +4,8 @@
  * top level, so it lives in its own module — importing it opts into the Bun
  * runtime. The runtime-neutral `SegmentStore` interface, `MemorySegmentStore`,
  * and `segmentIdFor` stay in `segment-store.ts` so the Workers/edge core can
- * import them without pulling in `bun:sqlite` (TODO §4.2 neutrality
- * discipline; enforced by `test/runtime-neutrality.test.ts`).
+ * import them without pulling in `bun:sqlite` (runtime neutrality is enforced
+ * by `test/runtime-neutrality.test.ts`).
  */
 import { Database } from 'bun:sqlite';
 import { type SegmentFindKey, type SegmentMetadata, type SegmentRecord, type SegmentStore, type SegmentStoreStats } from './segment-store.js';

package/dist/sqlite-segment-store.js

@@ -4,8 +4,8 @@
  * top level, so it lives in its own module — importing it opts into the Bun
  * runtime. The runtime-neutral `SegmentStore` interface, `MemorySegmentStore`,
  * and `segmentIdFor` stay in `segment-store.ts` so the Workers/edge core can
- * import them without pulling in `bun:sqlite` (TODO §4.2 neutrality
- * discipline; enforced by `test/runtime-neutrality.test.ts`).
+ * import them without pulling in `bun:sqlite` (runtime neutrality is enforced
+ * by `test/runtime-neutrality.test.ts`).
  */
 import { Database } from 'bun:sqlite';
 import { DEFAULT_SEGMENT_TTL_MS, segmentIdFor, } from './segment-store.js';

package/dist/sqlite-storage.d.ts

@@ -1,14 +1,14 @@
 /**
  * SQLite storage via `bun:sqlite` (dev-speed, dependency-free).
  *
- * Scope fanout is index-first (REVISE B2): both the commit log and the
+ * Scope fanout is index-first: both the commit log and the
  * current-row table carry a (table, variable, value) inverted index; reads
  * select candidates from the index and verify the full multi-variable
  * match against the stored scope map — never a log scan.
  */
 import { Database } from 'bun:sqlite';
 import type { CompiledSchema, CompiledTable } from './schema.js';
-import type { ClientCursorInfo, ClientRecord, CommitMetadata, CommitMetadataQuery, CommitWindowQuery, IndexRowScanQuery, RowScanQuery, ScopeActivityQuery, ScopeCommitActivity, ServerStorage, StorageTransaction, StoredCommit, StoredPushResult, StoredRow } from './storage.js';
+import type { AuthoritativeQueryRequest, AuthoritativeQueryResult, ClientCursorInfo, ClientRecord, CommitMetadata, CommitMetadataQuery, CommitWindowQuery, IndexRowScanQuery, PrunedReactionCounts, ReactionClaimQuery, ReactionFailureUpdate, ReactionListQuery, ReactionPruneQuery, RowScanQuery, ScopeActivityQuery, ScopeCommitActivity, ServerStorage, StorageTransaction, StoredCommit, StoredPushResult, StoredReaction, StoredRow } from './storage.js';
 export declare class SqliteServerStorage implements ServerStorage {
     #private;
     readonly db: Database;
@@ -20,12 +20,21 @@ export declare class SqliteServerStorage implements ServerStorage {
     /** Internal: write a row + refresh its scope-index entries. */
     writeRow(partition: string, table: string, row: StoredRow): void;
     getMaxCommitSeq(partition: string): Promise<number>;
+    queryAuthoritative(partition: string, query: AuthoritativeQueryRequest): Promise<AuthoritativeQueryResult>;
     getHorizonSeq(partition: string): Promise<number>;
     setHorizonSeq(partition: string, seq: number): Promise<void>;
     pruneCommitsThrough(partition: string, seq: number): Promise<number>;
     getCommitSeqBefore(partition: string, createdBeforeMs: number): Promise<number>;
     getRow(partition: string, table: string, rowId: string): Promise<StoredRow | undefined>;
     getPushResult(partition: string, clientId: string, clientCommitId: string): Promise<StoredPushResult | undefined>;
+    claimReactions(partition: string, query: ReactionClaimQuery): Promise<StoredReaction[]>;
+    completeReaction(partition: string, idempotencyKey: string, leaseOwner: string, completedAtMs: number): Promise<boolean>;
+    extendReactionLease(partition: string, idempotencyKey: string, leaseOwner: string, leaseExpiresAtMs: number): Promise<boolean>;
+    failReaction(partition: string, idempotencyKey: string, update: ReactionFailureUpdate): Promise<boolean>;
+    retryReaction(partition: string, idempotencyKey: string, nowMs: number): Promise<boolean>;
+    getReaction(partition: string, idempotencyKey: string): Promise<StoredReaction | undefined>;
+    listReactions(partition: string, query: ReactionListQuery): Promise<StoredReaction[]>;
+    pruneReactions(partition: string, query: ReactionPruneQuery): Promise<PrunedReactionCounts>;
     readCommitWindow(partition: string, query: CommitWindowQuery): Promise<StoredCommit[]>;
     scanRows(partition: string, query: RowScanQuery): Promise<StoredRow[]>;
     scanRowsByIndex(partition: string, query: IndexRowScanQuery): Promise<StoredRow[]>;