@tearleads/client-sdk 0.1.63 → 0.1.65

package/data/sqlite/documentPendingUpdatePersistence.d.ts

@@ -1,103 +0,0 @@
-import type { DocumentScope, PendingUpdateFields, PendingUpdateRecord } from "./documentPersistenceTypes.js";
-import type { ClientSQLiteTransactionScope } from "./sqlitePersistenceRuntime.js";
-import type { ExecSql } from "./sqlSchema.js";
-/**
- * Queued updates are the rows of the local update log that carry an
- * `updateId`. A tail row (origin "local") stays in the log after settlement as
- * history until compaction; an "outbox" row has no tail role and settlement
- * deletes it.
- */
-declare const OUTBOX_ORIGIN = "outbox";
-type QueueStatement = Pick<ClientSQLiteTransactionScope, "delete" | "update">;
-type QueueRead = Pick<ClientSQLiteTransactionScope, "selectDistinct">;
-/** The ids among `localIds` (one app kind) with at least one queued update. */
-export declare function listLocalIdsWithQueuedUpdates(db: QueueRead, appKind: string, localIds: readonly string[]): Promise<string[]>;
-export declare function hasQueuedDocumentUpdates(db: QueueRead, scope: DocumentScope): Promise<boolean>;
-export declare function listDocumentPendingUpdates(execSql: ExecSql, scope: DocumentScope): Promise<PendingUpdateRecord[]>;
-/** One log row for a queued update; `origin` decides its tail role. */
-export declare function queuedUpdateRow(input: {
-    createdAt: string;
-    origin: "local" | typeof OUTBOX_ORIGIN;
-    pendingUpdate: PendingUpdateFields;
-    scope: DocumentScope;
-    updateId: string;
-}): {
-    id: `${string}-${string}-${string}-${string}-${string}`;
-    appKind: string;
-    localId: string;
-    updateData: string;
-    origin: "local" | "outbox";
-    createdAt: string;
-    updateId: string;
-    partialStartVersionVector: string;
-    partialEndVersionVector: string;
-    sourceVersionVector: string | null;
-};
-/**
- * Queue an update that has no history-tail role: container metadata (its
- * content is its checkpoint) and full-state re-uploads after a remote reset.
- */
-export declare function enqueueDocumentPendingUpdate(execSql: ExecSql, scope: DocumentScope, pendingUpdate: PendingUpdateFields): Promise<string>;
-/**
- * Append a locally authored update to the history tail AND queue it, as one
- * row in one transaction. A crash can therefore never leave the op restorable
- * from history while missing from the outgoing queue, where a null-marker
- * restore would classify it as covered and never send it.
- */
-export declare function enqueueDocumentPendingUpdateWithHistory(execSql: ExecSql, scope: DocumentScope, pendingUpdate: PendingUpdateFields, options?: {
-    expectedDocumentId: string | null;
-    expectedRecoveryGeneration: number;
-}): Promise<string | null>;
-export declare function insertDocumentPendingUpdateWithHistoryInTransaction(input: {
-    createdAt: string;
-    pendingUpdate: PendingUpdateFields;
-    scope: DocumentScope;
-    tx: ClientSQLiteTransactionScope;
-}): Promise<string>;
-/**
- * Assign a fresh id to a queued update, keeping every other column. A lost
- * sync ack leaves the server holding the update under the original id with
- * ciphertext a rebuilt submission can never reproduce (each rebuild encrypts
- * with a fresh IV), so the id is permanently poisoned: every resubmission
- * 409s and the whole outgoing batch rolls back. Re-keying lets the next sync
- * pass submit the same ops under a conflict-free id; the server-side copy is
- * harmless because CRDT update import is idempotent.
- *
- * Returns null when no row carries the id, so callers never report progress
- * for a row that lives in some other queue (or nowhere). The UPDATE's own
- * RETURNING row is the progress signal — a pre-flight SELECT would race a
- * second tab sharing the SQLite file, which can settle the row between the
- * read and the write and turn "rekeyed" into a spurious re-arm.
- *
- * The persisted per-row bound is enforced here as well: a row already at
- * MAX_PENDING_UPDATE_REKEYS is left untouched and reported as no progress.
- * The in-memory lane counter bounds a busy-loop within one session; this
- * bound survives restarts, so a poisoned row cannot re-key forever at three
- * passes per launch.
- */
-export declare const MAX_PENDING_UPDATE_REKEYS = 5;
-/**
- * Reset the durable re-key budget for every queued update in a scope. The
- * cap exists to stop a server that keeps conflicting fresh ids from driving
- * a network-speed loop — but a budget burned during an unrelated outage
- * (e.g. yesterday's stale-bundle deadlock 409ing every submit) should not be
- * terminal forever. An explicit manual retry is the deliberate, rate-limited
- * signal that conditions changed, so it gets a fresh budget.
- */
-export declare function resetDocumentPendingUpdateRekeyBudget(execSql: ExecSql, scope: DocumentScope): Promise<void>;
-export declare function rekeyDocumentPendingUpdate(execSql: ExecSql, id: string): Promise<string | null>;
-/**
- * Settle queued updates: an outbox row is deleted, and a tail row stops being
- * queued but stays as history until compaction folds it into a checkpoint.
- */
-export declare function settleQueuedDocumentUpdatesInTransaction(tx: QueueStatement, scope: DocumentScope, updateIds: readonly string[]): Promise<void>;
-/** Settle one queued update by id, whatever its scope. */
-export declare function settleDocumentPendingUpdate(execSql: ExecSql, id: string): Promise<void>;
-/**
- * Stop queueing every update in the given scopes: outbox rows are dropped,
- * and local tail rows keep their content as history (it is already in the
- * document).
- */
-export declare function unqueueDocumentScopesInTransaction(tx: QueueStatement, scopes: readonly DocumentScope[]): Promise<void>;
-export declare function unqueueDocumentPendingUpdates(execSql: ExecSql, scope: DocumentScope): Promise<void>;
-export {};

package/data/sqlite/documentPendingUpdatePersistence.js

@@ -1,243 +0,0 @@
-import { and, asc, eq, inArray, isNotNull, lt, or, sql, } from "drizzle-orm";
-import { documentHistoryUpdates, documents } from "./schema.js";
-import { getClientSQLitePersistenceRuntime } from "./sqlitePersistenceRuntime.js";
-/**
- * Queued updates are the rows of the local update log that carry an
- * `updateId`. A tail row (origin "local") stays in the log after settlement as
- * history until compaction; an "outbox" row has no tail role and settlement
- * deletes it.
- */
-const OUTBOX_ORIGIN = "outbox";
-function queuedInScope(scope) {
-    return and(eq(documentHistoryUpdates.appKind, scope.appKind), eq(documentHistoryUpdates.localId, scope.localId), isNotNull(documentHistoryUpdates.updateId));
-}
-function mapSelectedPendingUpdate(row) {
-    // A queued row always carries its submission vectors; a row without them
-    // cannot be submitted and must fail closed rather than send empty ranges.
-    if (row.partialStartVersionVector === null ||
-        row.partialEndVersionVector === null) {
-        throw new Error("Queued document update is missing its version vectors");
-    }
-    return {
-        id: String(row.id ?? ""),
-        updateData: row.updateData,
-        partialStartVersionVector: row.partialStartVersionVector,
-        partialEndVersionVector: row.partialEndVersionVector,
-        sourceVersionVector: row.sourceVersionVector,
-        rekeyCount: row.rekeyCount,
-    };
-}
-/** The ids among `localIds` (one app kind) with at least one queued update. */
-export async function listLocalIdsWithQueuedUpdates(db, appKind, localIds) {
-    const uniqueIds = [...new Set(localIds)];
-    if (uniqueIds.length === 0)
-        return [];
-    const rows = await db
-        .selectDistinct({ localId: documentHistoryUpdates.localId })
-        .from(documentHistoryUpdates)
-        .where(and(eq(documentHistoryUpdates.appKind, appKind), inArray(documentHistoryUpdates.localId, uniqueIds), isNotNull(documentHistoryUpdates.updateId)))
-        .orderBy(asc(documentHistoryUpdates.localId));
-    return rows.map((row) => row.localId);
-}
-export async function hasQueuedDocumentUpdates(db, scope) {
-    const ids = await listLocalIdsWithQueuedUpdates(db, scope.appKind, [
-        scope.localId,
-    ]);
-    return ids.length > 0;
-}
-export async function listDocumentPendingUpdates(execSql, scope) {
-    const { db } = getClientSQLitePersistenceRuntime(execSql);
-    const rows = await db
-        .select({
-        id: documentHistoryUpdates.updateId,
-        updateData: documentHistoryUpdates.updateData,
-        partialStartVersionVector: documentHistoryUpdates.partialStartVersionVector,
-        partialEndVersionVector: documentHistoryUpdates.partialEndVersionVector,
-        sourceVersionVector: documentHistoryUpdates.sourceVersionVector,
-        rekeyCount: documentHistoryUpdates.rekeyCount,
-    })
-        .from(documentHistoryUpdates)
-        .where(queuedInScope(scope))
-        .orderBy(asc(documentHistoryUpdates.createdAt), asc(sql `rowid`));
-    return rows.map(mapSelectedPendingUpdate);
-}
-/** One log row for a queued update; `origin` decides its tail role. */
-export function queuedUpdateRow(input) {
-    return {
-        id: crypto.randomUUID(),
-        appKind: input.scope.appKind,
-        localId: input.scope.localId,
-        updateData: input.pendingUpdate.updateData,
-        origin: input.origin,
-        createdAt: input.createdAt,
-        updateId: input.updateId,
-        partialStartVersionVector: input.pendingUpdate.partialStartVersionVector,
-        partialEndVersionVector: input.pendingUpdate.partialEndVersionVector,
-        sourceVersionVector: input.pendingUpdate.sourceVersionVector ?? null,
-    };
-}
-/**
- * Queue an update that has no history-tail role: container metadata (its
- * content is its checkpoint) and full-state re-uploads after a remote reset.
- */
-export async function enqueueDocumentPendingUpdate(execSql, scope, pendingUpdate) {
-    const updateId = crypto.randomUUID();
-    await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {
-        await db
-            .insert(documentHistoryUpdates)
-            .values(queuedUpdateRow({
-            createdAt: new Date().toISOString(),
-            origin: OUTBOX_ORIGIN,
-            pendingUpdate,
-            scope,
-            updateId,
-        }))
-            .run();
-    });
-    return updateId;
-}
-/**
- * Append a locally authored update to the history tail AND queue it, as one
- * row in one transaction. A crash can therefore never leave the op restorable
- * from history while missing from the outgoing queue, where a null-marker
- * restore would classify it as covered and never send it.
- */
-export async function enqueueDocumentPendingUpdateWithHistory(execSql, scope, pendingUpdate, options) {
-    const createdAt = new Date().toISOString();
-    return getClientSQLitePersistenceRuntime(execSql).transaction(async (tx) => {
-        if (options) {
-            const matchingDocuments = await tx
-                .select({ localId: documents.localId })
-                .from(documents)
-                .where(and(eq(documents.appKind, scope.appKind), eq(documents.localId, scope.localId), sql `${documents.documentId} IS ${options.expectedDocumentId}`, eq(documents.recoveryGeneration, options.expectedRecoveryGeneration)))
-                .limit(1);
-            if (matchingDocuments.length === 0) {
-                return null;
-            }
-        }
-        return insertDocumentPendingUpdateWithHistoryInTransaction({
-            createdAt,
-            pendingUpdate,
-            scope,
-            tx,
-        });
-    }, { behavior: "immediate" });
-}
-export async function insertDocumentPendingUpdateWithHistoryInTransaction(input) {
-    const updateId = crypto.randomUUID();
-    await input.tx
-        .insert(documentHistoryUpdates)
-        .values(queuedUpdateRow({
-        createdAt: input.createdAt,
-        origin: "local",
-        pendingUpdate: input.pendingUpdate,
-        scope: input.scope,
-        updateId,
-    }))
-        .run();
-    return updateId;
-}
-/**
- * Assign a fresh id to a queued update, keeping every other column. A lost
- * sync ack leaves the server holding the update under the original id with
- * ciphertext a rebuilt submission can never reproduce (each rebuild encrypts
- * with a fresh IV), so the id is permanently poisoned: every resubmission
- * 409s and the whole outgoing batch rolls back. Re-keying lets the next sync
- * pass submit the same ops under a conflict-free id; the server-side copy is
- * harmless because CRDT update import is idempotent.
- *
- * Returns null when no row carries the id, so callers never report progress
- * for a row that lives in some other queue (or nowhere). The UPDATE's own
- * RETURNING row is the progress signal — a pre-flight SELECT would race a
- * second tab sharing the SQLite file, which can settle the row between the
- * read and the write and turn "rekeyed" into a spurious re-arm.
- *
- * The persisted per-row bound is enforced here as well: a row already at
- * MAX_PENDING_UPDATE_REKEYS is left untouched and reported as no progress.
- * The in-memory lane counter bounds a busy-loop within one session; this
- * bound survives restarts, so a poisoned row cannot re-key forever at three
- * passes per launch.
- */
-export const MAX_PENDING_UPDATE_REKEYS = 5;
-/**
- * Reset the durable re-key budget for every queued update in a scope. The
- * cap exists to stop a server that keeps conflicting fresh ids from driving
- * a network-speed loop — but a budget burned during an unrelated outage
- * (e.g. yesterday's stale-bundle deadlock 409ing every submit) should not be
- * terminal forever. An explicit manual retry is the deliberate, rate-limited
- * signal that conditions changed, so it gets a fresh budget.
- */
-export async function resetDocumentPendingUpdateRekeyBudget(execSql, scope) {
-    await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {
-        await db
-            .update(documentHistoryUpdates)
-            .set({ rekeyCount: 0 })
-            .where(queuedInScope(scope));
-    });
-}
-export async function rekeyDocumentPendingUpdate(execSql, id) {
-    const nextId = crypto.randomUUID();
-    let rekeyed = false;
-    await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {
-        const updated = await db
-            .update(documentHistoryUpdates)
-            .set({
-            updateId: nextId,
-            rekeyCount: sql `${documentHistoryUpdates.rekeyCount} + 1`,
-        })
-            .where(and(eq(documentHistoryUpdates.updateId, id), lt(documentHistoryUpdates.rekeyCount, MAX_PENDING_UPDATE_REKEYS)))
-            .returning({ id: documentHistoryUpdates.updateId });
-        rekeyed = updated.length > 0;
-    });
-    return rekeyed ? nextId : null;
-}
-/**
- * Settle queued updates: an outbox row is deleted, and a tail row stops being
- * queued but stays as history until compaction folds it into a checkpoint.
- */
-export async function settleQueuedDocumentUpdatesInTransaction(tx, scope, updateIds) {
-    const uniqueIds = [...new Set(updateIds)];
-    if (uniqueIds.length === 0)
-        return;
-    const selected = and(eq(documentHistoryUpdates.appKind, scope.appKind), eq(documentHistoryUpdates.localId, scope.localId), inArray(documentHistoryUpdates.updateId, uniqueIds));
-    await unqueueSelectedUpdates(tx, selected);
-}
-async function unqueueSelectedUpdates(tx, selected) {
-    await tx
-        .delete(documentHistoryUpdates)
-        .where(and(selected, eq(documentHistoryUpdates.origin, OUTBOX_ORIGIN)))
-        .run();
-    await tx
-        .update(documentHistoryUpdates)
-        .set({
-        updateId: null,
-        partialStartVersionVector: null,
-        partialEndVersionVector: null,
-        sourceVersionVector: null,
-        rekeyCount: 0,
-    })
-        .where(selected)
-        .run();
-}
-/** Settle one queued update by id, whatever its scope. */
-export async function settleDocumentPendingUpdate(execSql, id) {
-    await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {
-        await unqueueSelectedUpdates(db, eq(documentHistoryUpdates.updateId, id));
-    });
-}
-/**
- * Stop queueing every update in the given scopes: outbox rows are dropped,
- * and local tail rows keep their content as history (it is already in the
- * document).
- */
-export async function unqueueDocumentScopesInTransaction(tx, scopes) {
-    if (scopes.length === 0)
-        return;
-    await unqueueSelectedUpdates(tx, or(...scopes.map(queuedInScope)));
-}
-export async function unqueueDocumentPendingUpdates(execSql, scope) {
-    await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {
-        await unqueueDocumentScopesInTransaction(db, [scope]);
-    });
-}
-//# sourceMappingURL=documentPendingUpdatePersistence.js.map

package/data/sqlite/documentPendingUpdatePersistence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"documentPendingUpdatePersistence.js","sourceRoot":"","sources":["documentPendingUpdatePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,GAAG,EACH,GAAG,EACH,EAAE,EACF,OAAO,EACP,SAAS,EACT,EAAE,EACF,EAAE,EAEF,GAAG,GACJ,MAAM,aAAa,CAAC;AAOrB,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE7D,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAG/E;;;;;GAKG;AACH,MAAM,aAAa,GAAG,QAAQ,CAAC;AAK/B,SAAS,aAAa,CAAC,KAAoB;IACzC,OAAO,GAAG,CACR,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACjD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACjD,SAAS,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,GAA6B;IAE7B,yEAAyE;IACzE,0EAA0E;IAC1E,IACE,GAAG,CAAC,yBAAyB,KAAK,IAAI;QACtC,GAAG,CAAC,uBAAuB,KAAK,IAAI,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,yBAAyB,EAAE,GAAG,CAAC,yBAAyB;QACxD,uBAAuB,EAAE,GAAG,CAAC,uBAAuB;QACpD,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,EAAa,EACb,OAAe,EACf,QAA2B;IAE3B,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,cAAc,CAAC,EAAE,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC;SAC3D,IAAI,CAAC,sBAAsB,CAAC;SAC5B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAC3C,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,SAAS,CAAC,EAClD,SAAS,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAC3C,CACF;SACA,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,EAAa,EACb,KAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,6BAA6B,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE;QACjE,KAAK,CAAC,OAAO;KACd,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAgB,EAChB,KAAoB;IAEpB,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,EAAE,EAAE,sBAAsB,CAAC,QAAQ;QACnC,UAAU,EAAE,sBAAsB,CAAC,UAAU;QAC7C,yBAAyB,EACvB,sBAAsB,CAAC,yBAAyB;QAClD,uBAAuB,EAAE,sBAAsB,CAAC,uBAAuB;QACvE,mBAAmB,EAAE,sBAAsB,CAAC,mBAAmB;QAC/D,UAAU,EAAE,sBAAsB,CAAC,UAAU;KAC9C,CAAC;SACD,IAAI,CAAC,sBAAsB,CAAC;SAC5B,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SAC3B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,GAAG,CAAA,OAAO,CAAC,CAAC,CAAC;IAEnE,OAAO,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AAC5C,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,KAM/B;IACC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;QAC5B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;QAC5B,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,UAAU;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,yBAAyB,EAAE,KAAK,CAAC,aAAa,CAAC,yBAAyB;QACxE,uBAAuB,EAAE,KAAK,CAAC,aAAa,CAAC,uBAAuB;QACpE,mBAAmB,EAAE,KAAK,CAAC,aAAa,CAAC,mBAAmB,IAAI,IAAI;KACrE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAgB,EAChB,KAAoB,EACpB,aAAkC;IAElC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACrC,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,EAAE;aACL,MAAM,CAAC,sBAAsB,CAAC;aAC9B,MAAM,CACL,eAAe,CAAC;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,aAAa;YACrB,aAAa;YACb,KAAK;YACL,QAAQ;SACT,CAAC,CACH;aACA,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,OAAgB,EAChB,KAAoB,EACpB,aAAkC,EAClC,OAGC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,OAAO,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAC3D,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,iBAAiB,GAAG,MAAM,EAAE;iBAC/B,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;iBACtC,IAAI,CAAC,SAAS,CAAC;iBACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACpC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACpC,GAAG,CAAA,GAAG,SAAS,CAAC,UAAU,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAC7D,EAAE,CACA,SAAS,CAAC,kBAAkB,EAC5B,OAAO,CAAC,0BAA0B,CACnC,CACF,CACF;iBACA,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,mDAAmD,CAAC;YACzD,SAAS;YACT,aAAa;YACb,KAAK;YACL,EAAE;SACH,CAAC,CAAC;IACL,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mDAAmD,CAAC,KAKzE;IACC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACrC,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,sBAAsB,CAAC;SAC9B,MAAM,CACL,eAAe,CAAC;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,OAAO;QACf,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ;KACT,CAAC,CACH;SACA,GAAG,EAAE,CAAC;IACT,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,OAAgB,EAChB,KAAoB;IAEpB,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,EAAE;aACL,MAAM,CAAC,sBAAsB,CAAC;aAC9B,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;aACtB,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAgB,EAChB,EAAU;IAEV,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,OAAO,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,sBAAsB,CAAC;aAC9B,GAAG,CAAC;YACH,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,GAAG,CAAA,GAAG,sBAAsB,CAAC,UAAU,MAAM;SAC1D,CAAC;aACD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,sBAAsB,CAAC,QAAQ,EAAE,EAAE,CAAC,EACvC,EAAE,CAAC,sBAAsB,CAAC,UAAU,EAAE,yBAAyB,CAAC,CACjE,CACF;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,sBAAsB,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,EAAkB,EAClB,KAAoB,EACpB,SAA4B;IAE5B,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACnC,MAAM,QAAQ,GAAG,GAAG,CAClB,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACjD,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACjD,OAAO,CAAC,sBAAsB,CAAC,QAAQ,EAAE,SAAS,CAAC,CACpD,CAAC;IACF,MAAM,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,EAAkB,EAClB,QAAyB;IAEzB,MAAM,EAAE;SACL,MAAM,CAAC,sBAAsB,CAAC;SAC9B,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,sBAAsB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;SACtE,GAAG,EAAE,CAAC;IACT,MAAM,EAAE;SACL,MAAM,CAAC,sBAAsB,CAAC;SAC9B,GAAG,CAAC;QACH,QAAQ,EAAE,IAAI;QACd,yBAAyB,EAAE,IAAI;QAC/B,uBAAuB,EAAE,IAAI;QAC7B,mBAAmB,EAAE,IAAI;QACzB,UAAU,EAAE,CAAC;KACd,CAAC;SACD,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,EAAE,CAAC;AACX,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAgB,EAChB,EAAU;IAEV,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC,sBAAsB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,EAAkB,EAClB,MAAgC;IAEhC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChC,MAAM,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAgB,EAChB,KAAoB;IAEpB,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,kCAAkC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  and,\n  asc,\n  eq,\n  inArray,\n  isNotNull,\n  lt,\n  or,\n  type SQL,\n  sql,\n} from \"drizzle-orm\";\nimport type {\n  DocumentScope,\n  PendingUpdateFields,\n  PendingUpdateRecord,\n  SelectedPendingUpdateRow,\n} from \"./documentPersistenceTypes\";\nimport { documentHistoryUpdates, documents } from \"./schema\";\nimport type { ClientSQLiteTransactionScope } from \"./sqlitePersistenceRuntime\";\nimport { getClientSQLitePersistenceRuntime } from \"./sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"./sqlSchema\";\n\n/**\n * Queued updates are the rows of the local update log that carry an\n * `updateId`. A tail row (origin \"local\") stays in the log after settlement as\n * history until compaction; an \"outbox\" row has no tail role and settlement\n * deletes it.\n */\nconst OUTBOX_ORIGIN = \"outbox\";\n\ntype QueueStatement = Pick<ClientSQLiteTransactionScope, \"delete\" | \"update\">;\ntype QueueRead = Pick<ClientSQLiteTransactionScope, \"selectDistinct\">;\n\nfunction queuedInScope(scope: DocumentScope) {\n  return and(\n    eq(documentHistoryUpdates.appKind, scope.appKind),\n    eq(documentHistoryUpdates.localId, scope.localId),\n    isNotNull(documentHistoryUpdates.updateId),\n  );\n}\n\nfunction mapSelectedPendingUpdate(\n  row: SelectedPendingUpdateRow,\n): PendingUpdateRecord {\n  // A queued row always carries its submission vectors; a row without them\n  // cannot be submitted and must fail closed rather than send empty ranges.\n  if (\n    row.partialStartVersionVector === null ||\n    row.partialEndVersionVector === null\n  ) {\n    throw new Error(\"Queued document update is missing its version vectors\");\n  }\n  return {\n    id: String(row.id ?? \"\"),\n    updateData: row.updateData,\n    partialStartVersionVector: row.partialStartVersionVector,\n    partialEndVersionVector: row.partialEndVersionVector,\n    sourceVersionVector: row.sourceVersionVector,\n    rekeyCount: row.rekeyCount,\n  };\n}\n\n/** The ids among `localIds` (one app kind) with at least one queued update. */\nexport async function listLocalIdsWithQueuedUpdates(\n  db: QueueRead,\n  appKind: string,\n  localIds: readonly string[],\n): Promise<string[]> {\n  const uniqueIds = [...new Set(localIds)];\n  if (uniqueIds.length === 0) return [];\n  const rows = await db\n    .selectDistinct({ localId: documentHistoryUpdates.localId })\n    .from(documentHistoryUpdates)\n    .where(\n      and(\n        eq(documentHistoryUpdates.appKind, appKind),\n        inArray(documentHistoryUpdates.localId, uniqueIds),\n        isNotNull(documentHistoryUpdates.updateId),\n      ),\n    )\n    .orderBy(asc(documentHistoryUpdates.localId));\n  return rows.map((row) => row.localId);\n}\n\nexport async function hasQueuedDocumentUpdates(\n  db: QueueRead,\n  scope: DocumentScope,\n): Promise<boolean> {\n  const ids = await listLocalIdsWithQueuedUpdates(db, scope.appKind, [\n    scope.localId,\n  ]);\n  return ids.length > 0;\n}\n\nexport async function listDocumentPendingUpdates(\n  execSql: ExecSql,\n  scope: DocumentScope,\n): Promise<PendingUpdateRecord[]> {\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({\n      id: documentHistoryUpdates.updateId,\n      updateData: documentHistoryUpdates.updateData,\n      partialStartVersionVector:\n        documentHistoryUpdates.partialStartVersionVector,\n      partialEndVersionVector: documentHistoryUpdates.partialEndVersionVector,\n      sourceVersionVector: documentHistoryUpdates.sourceVersionVector,\n      rekeyCount: documentHistoryUpdates.rekeyCount,\n    })\n    .from(documentHistoryUpdates)\n    .where(queuedInScope(scope))\n    .orderBy(asc(documentHistoryUpdates.createdAt), asc(sql`rowid`));\n\n  return rows.map(mapSelectedPendingUpdate);\n}\n\n/** One log row for a queued update; `origin` decides its tail role. */\nexport function queuedUpdateRow(input: {\n  createdAt: string;\n  origin: \"local\" | typeof OUTBOX_ORIGIN;\n  pendingUpdate: PendingUpdateFields;\n  scope: DocumentScope;\n  updateId: string;\n}) {\n  return {\n    id: crypto.randomUUID(),\n    appKind: input.scope.appKind,\n    localId: input.scope.localId,\n    updateData: input.pendingUpdate.updateData,\n    origin: input.origin,\n    createdAt: input.createdAt,\n    updateId: input.updateId,\n    partialStartVersionVector: input.pendingUpdate.partialStartVersionVector,\n    partialEndVersionVector: input.pendingUpdate.partialEndVersionVector,\n    sourceVersionVector: input.pendingUpdate.sourceVersionVector ?? null,\n  };\n}\n\n/**\n * Queue an update that has no history-tail role: container metadata (its\n * content is its checkpoint) and full-state re-uploads after a remote reset.\n */\nexport async function enqueueDocumentPendingUpdate(\n  execSql: ExecSql,\n  scope: DocumentScope,\n  pendingUpdate: PendingUpdateFields,\n): Promise<string> {\n  const updateId = crypto.randomUUID();\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    await db\n      .insert(documentHistoryUpdates)\n      .values(\n        queuedUpdateRow({\n          createdAt: new Date().toISOString(),\n          origin: OUTBOX_ORIGIN,\n          pendingUpdate,\n          scope,\n          updateId,\n        }),\n      )\n      .run();\n  });\n  return updateId;\n}\n\n/**\n * Append a locally authored update to the history tail AND queue it, as one\n * row in one transaction. A crash can therefore never leave the op restorable\n * from history while missing from the outgoing queue, where a null-marker\n * restore would classify it as covered and never send it.\n */\nexport async function enqueueDocumentPendingUpdateWithHistory(\n  execSql: ExecSql,\n  scope: DocumentScope,\n  pendingUpdate: PendingUpdateFields,\n  options?: {\n    expectedDocumentId: string | null;\n    expectedRecoveryGeneration: number;\n  },\n): Promise<string | null> {\n  const createdAt = new Date().toISOString();\n  return getClientSQLitePersistenceRuntime(execSql).transaction(\n    async (tx) => {\n      if (options) {\n        const matchingDocuments = await tx\n          .select({ localId: documents.localId })\n          .from(documents)\n          .where(\n            and(\n              eq(documents.appKind, scope.appKind),\n              eq(documents.localId, scope.localId),\n              sql`${documents.documentId} IS ${options.expectedDocumentId}`,\n              eq(\n                documents.recoveryGeneration,\n                options.expectedRecoveryGeneration,\n              ),\n            ),\n          )\n          .limit(1);\n        if (matchingDocuments.length === 0) {\n          return null;\n        }\n      }\n\n      return insertDocumentPendingUpdateWithHistoryInTransaction({\n        createdAt,\n        pendingUpdate,\n        scope,\n        tx,\n      });\n    },\n    { behavior: \"immediate\" },\n  );\n}\n\nexport async function insertDocumentPendingUpdateWithHistoryInTransaction(input: {\n  createdAt: string;\n  pendingUpdate: PendingUpdateFields;\n  scope: DocumentScope;\n  tx: ClientSQLiteTransactionScope;\n}): Promise<string> {\n  const updateId = crypto.randomUUID();\n  await input.tx\n    .insert(documentHistoryUpdates)\n    .values(\n      queuedUpdateRow({\n        createdAt: input.createdAt,\n        origin: \"local\",\n        pendingUpdate: input.pendingUpdate,\n        scope: input.scope,\n        updateId,\n      }),\n    )\n    .run();\n  return updateId;\n}\n\n/**\n * Assign a fresh id to a queued update, keeping every other column. A lost\n * sync ack leaves the server holding the update under the original id with\n * ciphertext a rebuilt submission can never reproduce (each rebuild encrypts\n * with a fresh IV), so the id is permanently poisoned: every resubmission\n * 409s and the whole outgoing batch rolls back. Re-keying lets the next sync\n * pass submit the same ops under a conflict-free id; the server-side copy is\n * harmless because CRDT update import is idempotent.\n *\n * Returns null when no row carries the id, so callers never report progress\n * for a row that lives in some other queue (or nowhere). The UPDATE's own\n * RETURNING row is the progress signal — a pre-flight SELECT would race a\n * second tab sharing the SQLite file, which can settle the row between the\n * read and the write and turn \"rekeyed\" into a spurious re-arm.\n *\n * The persisted per-row bound is enforced here as well: a row already at\n * MAX_PENDING_UPDATE_REKEYS is left untouched and reported as no progress.\n * The in-memory lane counter bounds a busy-loop within one session; this\n * bound survives restarts, so a poisoned row cannot re-key forever at three\n * passes per launch.\n */\nexport const MAX_PENDING_UPDATE_REKEYS = 5;\n\n/**\n * Reset the durable re-key budget for every queued update in a scope. The\n * cap exists to stop a server that keeps conflicting fresh ids from driving\n * a network-speed loop — but a budget burned during an unrelated outage\n * (e.g. yesterday's stale-bundle deadlock 409ing every submit) should not be\n * terminal forever. An explicit manual retry is the deliberate, rate-limited\n * signal that conditions changed, so it gets a fresh budget.\n */\nexport async function resetDocumentPendingUpdateRekeyBudget(\n  execSql: ExecSql,\n  scope: DocumentScope,\n): Promise<void> {\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    await db\n      .update(documentHistoryUpdates)\n      .set({ rekeyCount: 0 })\n      .where(queuedInScope(scope));\n  });\n}\n\nexport async function rekeyDocumentPendingUpdate(\n  execSql: ExecSql,\n  id: string,\n): Promise<string | null> {\n  const nextId = crypto.randomUUID();\n  let rekeyed = false;\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    const updated = await db\n      .update(documentHistoryUpdates)\n      .set({\n        updateId: nextId,\n        rekeyCount: sql`${documentHistoryUpdates.rekeyCount} + 1`,\n      })\n      .where(\n        and(\n          eq(documentHistoryUpdates.updateId, id),\n          lt(documentHistoryUpdates.rekeyCount, MAX_PENDING_UPDATE_REKEYS),\n        ),\n      )\n      .returning({ id: documentHistoryUpdates.updateId });\n    rekeyed = updated.length > 0;\n  });\n  return rekeyed ? nextId : null;\n}\n\n/**\n * Settle queued updates: an outbox row is deleted, and a tail row stops being\n * queued but stays as history until compaction folds it into a checkpoint.\n */\nexport async function settleQueuedDocumentUpdatesInTransaction(\n  tx: QueueStatement,\n  scope: DocumentScope,\n  updateIds: readonly string[],\n): Promise<void> {\n  const uniqueIds = [...new Set(updateIds)];\n  if (uniqueIds.length === 0) return;\n  const selected = and(\n    eq(documentHistoryUpdates.appKind, scope.appKind),\n    eq(documentHistoryUpdates.localId, scope.localId),\n    inArray(documentHistoryUpdates.updateId, uniqueIds),\n  );\n  await unqueueSelectedUpdates(tx, selected);\n}\n\nasync function unqueueSelectedUpdates(\n  tx: QueueStatement,\n  selected: SQL | undefined,\n): Promise<void> {\n  await tx\n    .delete(documentHistoryUpdates)\n    .where(and(selected, eq(documentHistoryUpdates.origin, OUTBOX_ORIGIN)))\n    .run();\n  await tx\n    .update(documentHistoryUpdates)\n    .set({\n      updateId: null,\n      partialStartVersionVector: null,\n      partialEndVersionVector: null,\n      sourceVersionVector: null,\n      rekeyCount: 0,\n    })\n    .where(selected)\n    .run();\n}\n\n/** Settle one queued update by id, whatever its scope. */\nexport async function settleDocumentPendingUpdate(\n  execSql: ExecSql,\n  id: string,\n): Promise<void> {\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    await unqueueSelectedUpdates(db, eq(documentHistoryUpdates.updateId, id));\n  });\n}\n\n/**\n * Stop queueing every update in the given scopes: outbox rows are dropped,\n * and local tail rows keep their content as history (it is already in the\n * document).\n */\nexport async function unqueueDocumentScopesInTransaction(\n  tx: QueueStatement,\n  scopes: readonly DocumentScope[],\n): Promise<void> {\n  if (scopes.length === 0) return;\n  await unqueueSelectedUpdates(tx, or(...scopes.map(queuedInScope)));\n}\n\nexport async function unqueueDocumentPendingUpdates(\n  execSql: ExecSql,\n  scope: DocumentScope,\n): Promise<void> {\n  await getClientSQLitePersistenceRuntime(execSql).runMutation(async (db) => {\n    await unqueueDocumentScopesInTransaction(db, [scope]);\n  });\n}\n"]}

package/data/sqlite/documentPersistence.d.ts

@@ -1,22 +0,0 @@
-import { type DocumentSyncPullContinuation } from "../documents/shared/pullContinuation.js";
-import type { DocumentRecord } from "./documentPersistenceTypes.js";
-import { type ExecSql } from "./sqlSchema.js";
-export declare function ensureDocumentTables(execSql: ExecSql): Promise<void>;
-export declare function ensureDocumentProjectionTables(execSql: ExecSql): Promise<void>;
-/** Replace only the exact rejected continuation with a durable recovery marker. */
-export declare function invalidateDocumentSyncPullContinuation(execSql: ExecSql, input: {
-    accessEpoch: number;
-    accessStateHash: string | null;
-    appKind: string;
-    continuation: DocumentSyncPullContinuation;
-    contentKeyBundle: string | null;
-    documentId: string;
-    documentKekTargets: string | null;
-    documentManifestBundle: string | null;
-    lastCommitLsn: string | null;
-    localId: string;
-}): Promise<DocumentRecord | null>;
-export { enqueueDocumentPendingUpdate, enqueueDocumentPendingUpdateWithHistory, listDocumentPendingUpdates, MAX_PENDING_UPDATE_REKEYS, rekeyDocumentPendingUpdate, resetDocumentPendingUpdateRekeyBudget, settleDocumentPendingUpdate, unqueueDocumentPendingUpdates, } from "./documentPendingUpdatePersistence.js";
-export type { DocumentRecord, DocumentScope, PendingUpdateFields, PendingUpdateRecord, } from "./documentPersistenceTypes.js";
-export { deleteDocumentRecord, documentRecordSelection, findLocalIdByDocumentId, loadDocumentRecord, mapSelectedDocumentRecord, } from "./documentRecordPersistence.js";
-export { clearDocumentSyncFailure, hasRecordedTerminalSyncFailures, recordDocumentSyncFailure, } from "./documentSyncFailurePersistence.js";

package/data/sqlite/documentPersistence.js

@@ -1,35 +0,0 @@
-import { and, eq, sql } from "drizzle-orm";
-import { DOCUMENT_SYNC_PULL_RECOVERY_REQUIRED, serializeDocumentSyncPullContinuation, } from "../documents/shared/pullContinuation.js";
-import { loadDocumentRecord } from "./documentRecordPersistence.js";
-import { documentProjectionTables, documents, documentTables } from "./schema.js";
-import { getClientSQLitePersistenceRuntime } from "./sqlitePersistenceRuntime.js";
-import { ensureSqlTables, runSerializedSqlMutation, } from "./sqlSchema.js";
-export function ensureDocumentTables(execSql) {
-    return ensureSqlTables(execSql, documentTables);
-}
-export function ensureDocumentProjectionTables(execSql) {
-    return ensureSqlTables(execSql, documentProjectionTables);
-}
-/** Replace only the exact rejected continuation with a durable recovery marker. */
-export async function invalidateDocumentSyncPullContinuation(execSql, input) {
-    await ensureDocumentTables(execSql);
-    const expectedContinuation = serializeDocumentSyncPullContinuation(input.continuation);
-    if (expectedContinuation === null)
-        return null;
-    return runSerializedSqlMutation(execSql, async (lockedExecSql) => {
-        const { db } = getClientSQLitePersistenceRuntime(lockedExecSql);
-        await db
-            .update(documents)
-            .set({ pullContinuation: DOCUMENT_SYNC_PULL_RECOVERY_REQUIRED })
-            .where(and(eq(documents.appKind, input.appKind), eq(documents.localId, input.localId), eq(documents.documentId, input.documentId), eq(documents.accessEpoch, input.accessEpoch), sql `${documents.accessStateHash} IS ${input.accessStateHash}`, sql `${documents.contentKeyBundle} IS ${input.contentKeyBundle}`, sql `${documents.documentKekTargets} IS ${input.documentKekTargets}`, sql `${documents.documentManifestBundle} IS ${input.documentManifestBundle}`, sql `${documents.lastCommitLsn} IS ${input.lastCommitLsn}`, eq(documents.pullContinuation, expectedContinuation)))
-            .run();
-        return loadDocumentRecord(lockedExecSql, {
-            appKind: input.appKind,
-            localId: input.localId,
-        });
-    });
-}
-export { enqueueDocumentPendingUpdate, enqueueDocumentPendingUpdateWithHistory, listDocumentPendingUpdates, MAX_PENDING_UPDATE_REKEYS, rekeyDocumentPendingUpdate, resetDocumentPendingUpdateRekeyBudget, settleDocumentPendingUpdate, unqueueDocumentPendingUpdates, } from "./documentPendingUpdatePersistence.js";
-export { deleteDocumentRecord, documentRecordSelection, findLocalIdByDocumentId, loadDocumentRecord, mapSelectedDocumentRecord, } from "./documentRecordPersistence.js";
-export { clearDocumentSyncFailure, hasRecordedTerminalSyncFailures, recordDocumentSyncFailure, } from "./documentSyncFailurePersistence.js";
-//# sourceMappingURL=documentPersistence.js.map

package/data/sqlite/documentPersistence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"documentPersistence.js","sourceRoot":"","sources":["documentPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,oCAAoC,EAEpC,qCAAqC,GACtC,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/E,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAEL,eAAe,EACf,wBAAwB,GACzB,MAAM,aAAa,CAAC;AAErB,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAAgB;IAEhB,OAAO,eAAe,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;AAC5D,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,OAAgB,EAChB,KAWC;IAED,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,oBAAoB,GAAG,qCAAqC,CAChE,KAAK,CAAC,YAAY,CACnB,CAAC;IACF,IAAI,oBAAoB,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,aAAa,CAAC,CAAC;QAChE,MAAM,EAAE;aACL,MAAM,CAAC,SAAS,CAAC;aACjB,GAAG,CAAC,EAAE,gBAAgB,EAAE,oCAAoC,EAAE,CAAC;aAC/D,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACpC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACpC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAC1C,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAC5C,GAAG,CAAA,GAAG,SAAS,CAAC,eAAe,OAAO,KAAK,CAAC,eAAe,EAAE,EAC7D,GAAG,CAAA,GAAG,SAAS,CAAC,gBAAgB,OAAO,KAAK,CAAC,gBAAgB,EAAE,EAC/D,GAAG,CAAA,GAAG,SAAS,CAAC,kBAAkB,OAAO,KAAK,CAAC,kBAAkB,EAAE,EACnE,GAAG,CAAA,GAAG,SAAS,CAAC,sBAAsB,OAAO,KAAK,CAAC,sBAAsB,EAAE,EAC3E,GAAG,CAAA,GAAG,SAAS,CAAC,aAAa,OAAO,KAAK,CAAC,aAAa,EAAE,EACzD,EAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CACrD,CACF;aACA,GAAG,EAAE,CAAC;QACT,OAAO,kBAAkB,CAAC,aAAa,EAAE;YACvC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EACL,4BAA4B,EAC5B,uCAAuC,EACvC,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,qCAAqC,EACrC,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,oCAAoC,CAAC;AAO5C,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,wBAAwB,EACxB,+BAA+B,EAC/B,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC","sourcesContent":["import { and, eq, sql } from \"drizzle-orm\";\nimport {\n  DOCUMENT_SYNC_PULL_RECOVERY_REQUIRED,\n  type DocumentSyncPullContinuation,\n  serializeDocumentSyncPullContinuation,\n} from \"../documents/shared/pullContinuation\";\nimport type { DocumentRecord } from \"./documentPersistenceTypes\";\nimport { loadDocumentRecord } from \"./documentRecordPersistence\";\nimport { documentProjectionTables, documents, documentTables } from \"./schema\";\nimport { getClientSQLitePersistenceRuntime } from \"./sqlitePersistenceRuntime\";\nimport {\n  type ExecSql,\n  ensureSqlTables,\n  runSerializedSqlMutation,\n} from \"./sqlSchema\";\n\nexport function ensureDocumentTables(execSql: ExecSql): Promise<void> {\n  return ensureSqlTables(execSql, documentTables);\n}\n\nexport function ensureDocumentProjectionTables(\n  execSql: ExecSql,\n): Promise<void> {\n  return ensureSqlTables(execSql, documentProjectionTables);\n}\n\n/** Replace only the exact rejected continuation with a durable recovery marker. */\nexport async function invalidateDocumentSyncPullContinuation(\n  execSql: ExecSql,\n  input: {\n    accessEpoch: number;\n    accessStateHash: string | null;\n    appKind: string;\n    continuation: DocumentSyncPullContinuation;\n    contentKeyBundle: string | null;\n    documentId: string;\n    documentKekTargets: string | null;\n    documentManifestBundle: string | null;\n    lastCommitLsn: string | null;\n    localId: string;\n  },\n): Promise<DocumentRecord | null> {\n  await ensureDocumentTables(execSql);\n  const expectedContinuation = serializeDocumentSyncPullContinuation(\n    input.continuation,\n  );\n  if (expectedContinuation === null) return null;\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    const { db } = getClientSQLitePersistenceRuntime(lockedExecSql);\n    await db\n      .update(documents)\n      .set({ pullContinuation: DOCUMENT_SYNC_PULL_RECOVERY_REQUIRED })\n      .where(\n        and(\n          eq(documents.appKind, input.appKind),\n          eq(documents.localId, input.localId),\n          eq(documents.documentId, input.documentId),\n          eq(documents.accessEpoch, input.accessEpoch),\n          sql`${documents.accessStateHash} IS ${input.accessStateHash}`,\n          sql`${documents.contentKeyBundle} IS ${input.contentKeyBundle}`,\n          sql`${documents.documentKekTargets} IS ${input.documentKekTargets}`,\n          sql`${documents.documentManifestBundle} IS ${input.documentManifestBundle}`,\n          sql`${documents.lastCommitLsn} IS ${input.lastCommitLsn}`,\n          eq(documents.pullContinuation, expectedContinuation),\n        ),\n      )\n      .run();\n    return loadDocumentRecord(lockedExecSql, {\n      appKind: input.appKind,\n      localId: input.localId,\n    });\n  });\n}\n\nexport {\n  enqueueDocumentPendingUpdate,\n  enqueueDocumentPendingUpdateWithHistory,\n  listDocumentPendingUpdates,\n  MAX_PENDING_UPDATE_REKEYS,\n  rekeyDocumentPendingUpdate,\n  resetDocumentPendingUpdateRekeyBudget,\n  settleDocumentPendingUpdate,\n  unqueueDocumentPendingUpdates,\n} from \"./documentPendingUpdatePersistence\";\nexport type {\n  DocumentRecord,\n  DocumentScope,\n  PendingUpdateFields,\n  PendingUpdateRecord,\n} from \"./documentPersistenceTypes\";\nexport {\n  deleteDocumentRecord,\n  documentRecordSelection,\n  findLocalIdByDocumentId,\n  loadDocumentRecord,\n  mapSelectedDocumentRecord,\n} from \"./documentRecordPersistence\";\nexport {\n  clearDocumentSyncFailure,\n  hasRecordedTerminalSyncFailures,\n  recordDocumentSyncFailure,\n} from \"./documentSyncFailurePersistence\";\n"]}

package/data/sqlite/documentPersistenceTypes.d.ts

@@ -1,79 +0,0 @@
-import type { ContainerAccessLevel } from "../../internal/crypto/index.js";
-import type { DocumentSyncPullContinuation } from "../documents/shared/pullContinuation.js";
-export interface DocumentRecord {
-    id: string;
-    documentId: string | null;
-    /**
-     * Durable fence advanced by an atomic raw-history recovery install. Writers
-     * capture this before waiting for the mutation queue and must refuse to
-     * publish when recovery advanced it first.
-     */
-    recoveryGeneration?: number;
-    /** Former server id reserved for deterministic post-purge recreation. */
-    recoveryDocumentId?: string | null;
-    /**
-     * Encoded end version vector of the persisted content frontier. Content
-     * itself lives in the durable history (checkpoint + tail); this column
-     * exists so priming and coverage predicates can compare versions from a
-     * narrow indexed column. Empty string means "never hydrated".
-     */
-    snapshotEndVersion: string;
-    accessEpoch: number;
-    accessStateHash?: string | null;
-    effectiveAccessLevel?: ContainerAccessLevel | null;
-    lastCommitLsn?: string | null;
-    contentKeyBundle?: string | null;
-    documentKekTargets?: string | null;
-    documentManifestBundle?: string | null;
-    pendingBaseVersion?: string | null;
-    pullContinuation?: DocumentSyncPullContinuation | null;
-    /**
-     * The durable continuation column was non-null but could not be decoded.
-     * Keep forcing a page-one pull until a successful settlement replaces the
-     * malformed value; ordinary local saves must preserve that recovery signal.
-     */
-    pullContinuationRecoveryRequired?: true;
-}
-export interface PendingUpdateFields {
-    updateData: string;
-    partialStartVersionVector: string;
-    partialEndVersionVector: string;
-    sourceVersionVector?: string | null;
-}
-export interface PendingUpdateRecord extends PendingUpdateFields {
-    id: string;
-    /**
-     * Times this row was assigned a fresh id by lost-ack conflict recovery.
-     * Persisted so the bound survives restarts; absent means zero (rows from
-     * simple test doubles).
-     */
-    rekeyCount?: number | undefined;
-}
-export interface DocumentScope {
-    appKind: string;
-    localId: string;
-}
-export interface SelectedDocumentRecordRow {
-    id: string;
-    documentId: string | null;
-    recoveryGeneration: number;
-    recoveryDocumentId: string | null;
-    snapshotEndVersion: string;
-    accessEpoch: number;
-    accessStateHash: string | null;
-    effectiveAccessLevel: string | null;
-    lastCommitLsn: string | null;
-    contentKeyBundle: string | null;
-    documentKekTargets: string | null;
-    documentManifestBundle: string | null;
-    pendingBaseVersion: string | null;
-    pullContinuation: string | null;
-}
-export interface SelectedPendingUpdateRow {
-    id: string | null;
-    updateData: string;
-    partialStartVersionVector: string | null;
-    partialEndVersionVector: string | null;
-    sourceVersionVector: string | null;
-    rekeyCount: number;
-}

package/data/sqlite/documentPersistenceTypes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"documentPersistenceTypes.js","sourceRoot":"","sources":["documentPersistenceTypes.ts"],"names":[],"mappings":"","sourcesContent":["import type { ContainerAccessLevel } from \"@tearleads/crypto\";\nimport type { DocumentSyncPullContinuation } from \"../documents/shared/pullContinuation\";\n\nexport interface DocumentRecord {\n  id: string;\n  documentId: string | null;\n  /**\n   * Durable fence advanced by an atomic raw-history recovery install. Writers\n   * capture this before waiting for the mutation queue and must refuse to\n   * publish when recovery advanced it first.\n   */\n  recoveryGeneration?: number;\n  /** Former server id reserved for deterministic post-purge recreation. */\n  recoveryDocumentId?: string | null;\n  /**\n   * Encoded end version vector of the persisted content frontier. Content\n   * itself lives in the durable history (checkpoint + tail); this column\n   * exists so priming and coverage predicates can compare versions from a\n   * narrow indexed column. Empty string means \"never hydrated\".\n   */\n  snapshotEndVersion: string;\n  accessEpoch: number;\n  accessStateHash?: string | null;\n  effectiveAccessLevel?: ContainerAccessLevel | null;\n  lastCommitLsn?: string | null;\n  contentKeyBundle?: string | null;\n  documentKekTargets?: string | null;\n  documentManifestBundle?: string | null;\n  pendingBaseVersion?: string | null;\n  pullContinuation?: DocumentSyncPullContinuation | null;\n  /**\n   * The durable continuation column was non-null but could not be decoded.\n   * Keep forcing a page-one pull until a successful settlement replaces the\n   * malformed value; ordinary local saves must preserve that recovery signal.\n   */\n  pullContinuationRecoveryRequired?: true;\n}\n\nexport interface PendingUpdateFields {\n  updateData: string;\n  partialStartVersionVector: string;\n  partialEndVersionVector: string;\n  sourceVersionVector?: string | null;\n}\n\nexport interface PendingUpdateRecord extends PendingUpdateFields {\n  id: string;\n  /**\n   * Times this row was assigned a fresh id by lost-ack conflict recovery.\n   * Persisted so the bound survives restarts; absent means zero (rows from\n   * simple test doubles).\n   */\n  rekeyCount?: number | undefined;\n}\n\nexport interface DocumentScope {\n  appKind: string;\n  localId: string;\n}\n\nexport interface SelectedDocumentRecordRow {\n  id: string;\n  documentId: string | null;\n  recoveryGeneration: number;\n  recoveryDocumentId: string | null;\n  snapshotEndVersion: string;\n  accessEpoch: number;\n  accessStateHash: string | null;\n  effectiveAccessLevel: string | null;\n  lastCommitLsn: string | null;\n  contentKeyBundle: string | null;\n  documentKekTargets: string | null;\n  documentManifestBundle: string | null;\n  pendingBaseVersion: string | null;\n  pullContinuation: string | null;\n}\n\nexport interface SelectedPendingUpdateRow {\n  id: string | null;\n  updateData: string;\n  partialStartVersionVector: string | null;\n  partialEndVersionVector: string | null;\n  sourceVersionVector: string | null;\n  rekeyCount: number;\n}\n"]}