@tinycloud/replica 0.1.1-beta.0 → 0.2.0-beta.2

package/dist/replica.worker.js

@@ -9434,6 +9434,7 @@ var KVService = class extends BaseService {
           "kv"
         ));
       }
+      const requestPrefix = options.prefix === "/" ? "" : options.prefix;
       const headers = {};
       if (options.limit !== void 0) headers["x-tinycloud-limit"] = String(options.limit);
       if (options.cursor !== void 0) headers["x-tinycloud-cursor"] = options.cursor;
@@ -9443,7 +9444,7 @@ var KVService = class extends BaseService {
       const request = this.createRequestSignal(options.signal, options.timeout);
       try {
         const response = await this.invokeOperation(
-          options.prefix,
+          requestPrefix,
           KVAction.SYNC,
           void 0,
           request.signal,
@@ -9459,7 +9460,7 @@ var KVService = class extends BaseService {
         } catch {
           body = void 0;
         }
-        const page = this.normalizeChangesResponse(body);
+        const page = this.normalizeChangesResponse(body, options.prefix);
         if (!page) {
           return err(serviceError(
             ErrorCodes.NETWORK_ERROR,
@@ -9539,7 +9540,7 @@ var KVService = class extends BaseService {
       { meta }
     ));
   }
-  normalizeChangesResponse(data) {
+  normalizeChangesResponse(data, requestedPrefix) {
     if (!isJsonObject(data)) return void 0;
     const { changes, more, cursor, source, authority } = data;
     if (!Array.isArray(changes) || typeof more !== "boolean" || typeof cursor !== "string" || !isJsonObject(source) || typeof source.nodeDid !== "string" || typeof source.space !== "string" || typeof source.prefix !== "string" || !isJsonObject(authority)) {
@@ -9571,7 +9572,11 @@ var KVService = class extends BaseService {
       changes: parsed,
       more,
       cursor,
-      source: { nodeDid: source.nodeDid, space: source.space, prefix: source.prefix },
+      source: {
+        nodeDid: source.nodeDid,
+        space: source.space,
+        prefix: requestedPrefix === "/" && source.prefix === "" ? "/" : source.prefix
+      },
       authority: { notBefore, expiresAt, retainUntil }
     };
   }
@@ -14553,6 +14558,8 @@ var ReplicaErrorCode = {
   GRANT_NOT_COVERING: "GRANT_NOT_COVERING",
   GRANT_NOT_YET_VALID: "GRANT_NOT_YET_VALID",
   GRANT_EXPIRED: "GRANT_EXPIRED",
+  /** The configured node does not advertise whole-space KV sync support. */
+  REPLICATION_ROOT_UNSUPPORTED: "REPLICATION_ROOT_UNSUPPORTED",
   GRANT_REVOKED: "GRANT_REVOKED",
   /** The node refused the invocation for a reason other than revocation. */
   GRANT_UNAUTHORIZED: "GRANT_UNAUTHORIZED",
@@ -14593,18 +14600,39 @@ function isReplicaError(error, code) {
   return typeof error === "object" && error !== null && error[REPLICA_ERROR] === true && (code === void 0 || error.code === code);
 }
 
+// ../sdk-services/dist/kv/replication/prefix.js
+function assertFolderPrefix(prefix) {
+  const validFolder = typeof prefix === "string" && prefix.length > 0 && !prefix.startsWith("/") && !prefix.includes("//") && prefix.endsWith("/");
+  if (prefix !== "/" && !validFolder) {
+    const folderHint = typeof prefix === "string" ? prefix.replace(/^\/+/, "").replace(/\/+$/, "") : "";
+    const suggestion = folderHint.length > 0 && !folderHint.includes("//") ? ` Use ${JSON.stringify(`${folderHint}/`)}.` : ' Use "/" or a slash-terminated folder path such as "notes/".';
+    throw new TypeError(`Replication prefix must be "/" or a non-empty slash-terminated folder path without empty segments.${suggestion}`);
+  }
+}
+
 // src/scope.ts
+function assertFolderPrefix2(prefix) {
+  try {
+    assertFolderPrefix(prefix);
+  } catch {
+    const folderHint = typeof prefix === "string" ? prefix.replace(/^\/+/, "").replace(/\/+$/, "") : "";
+    const suggestion = prefix === "" ? 'use "/" for the whole space' : folderHint.length > 0 && !folderHint.includes("//") ? `use ${JSON.stringify(`${folderHint}/`)}` : 'use "/" for the whole space or a folder path such as "notes/"';
+    throw new ReplicaError(
+      ReplicaErrorCode.INVALID_ARGUMENT,
+      `Replication prefix ${JSON.stringify(prefix)} must be "/" or a non-empty folder path ending in / without empty segments; ${suggestion}. Run \`tc replica reset --replica <name> --purge\` and recreate it with the folder prefix.`
+    );
+  }
+}
 function kvPrefixCovers(prefix, key) {
-  if (prefix === "") return true;
-  if (prefix.endsWith("/")) return key.startsWith(prefix);
-  return key === prefix || key.startsWith(`${prefix}/`);
+  return prefix === "/" || key.startsWith(prefix);
 }
 function authorityPathCovers(grantPath, requestedPath) {
-  if (grantPath === "" || grantPath === "/") return true;
+  if (grantPath === "/") return true;
   if (grantPath.endsWith("/")) return requestedPath.startsWith(grantPath);
   return requestedPath === grantPath;
 }
 function requiresSecretsOptIn(space, prefix) {
+  if (prefix === "/") return true;
   if (space === "secrets" || space.endsWith(":secrets")) return true;
   const firstSegment = prefix.split("/", 1)[0];
   return firstSegment === "vault";
@@ -16709,6 +16737,9 @@ function parseUcanGrant(input) {
   };
 }
 function kvPathIn(resource, space) {
+  for (const root of [`${space}/kv`, `tinycloud://${space}/kv`]) {
+    if (resource === root || resource === `${root}/`) return "/";
+  }
   for (const base of [`${space}/kv/`, `tinycloud://${space}/kv/`]) {
     if (resource.startsWith(base)) return resource.slice(base.length);
   }
@@ -16730,9 +16761,8 @@ function assertGrantInstallable(grant, input) {
       `The grant was issued to ${grant.audience}, not this device (${input.deviceDid}).`
     );
   }
-  const requiredPaths = input.prefix.endsWith("/") ? [input.prefix] : [input.prefix, `${input.prefix}/`];
   for (const ability of ["tinycloud.kv/sync", "tinycloud.kv/get"]) {
-    if (!requiredPaths.every((path) => grantCovers(grant, input.space, path, ability))) {
+    if (!grantCovers(grant, input.space, input.prefix, ability)) {
       throw new ReplicaError(
         ReplicaErrorCode.GRANT_NOT_COVERING,
         `The grant does not carry ${ability} on ${input.space}/kv/${input.prefix}.`,
@@ -16787,6 +16817,23 @@ function isPrincipalDid(value) {
 }
 
 // src/transport.ts
+var featureCache = /* @__PURE__ */ new Map();
+function featuresForHost(host, fetchFn) {
+  const cached = featureCache.get(host);
+  if (cached !== void 0) return cached;
+  const discovered = fetchFn(`${host.replace(/\/+$/, "")}/info`).then(async (response) => {
+    if (!response.ok) return void 0;
+    const info = await response.json();
+    if (typeof info !== "object" || info === null || !("features" in info)) return void 0;
+    const features = info.features;
+    return Array.isArray(features) && features.every((feature) => typeof feature === "string") ? features : void 0;
+  }).catch(() => void 0);
+  featureCache.set(host, discovered);
+  void discovered.then((features) => {
+    if (features === void 0) featureCache.delete(host);
+  });
+  return discovered;
+}
 var REVOKED_CODES = /* @__PURE__ */ new Set(["AUTH_DELEGATION_REVOKED", "AUTH_DELEGATION_ANCESTOR_REVOKED"]);
 var REVOKED_BODY2 = /^(?:Invalid invocation: )?(?:delegation-revoked: [A-Za-z0-9]+|delegation-ancestor-revoked: ancestor=[A-Za-z0-9]+ (?:invoked|parent)=[A-Za-z0-9]+)$/;
 function isRevocation(error, status, request) {
@@ -16876,9 +16923,26 @@ function fetched(key, result, request) {
   }
   return { bytes: result.data.data, etag: result.data.headers.etag ?? "" };
 }
-function kvSyncTransport(kv) {
+function kvSyncTransport(kv, options = {}) {
+  const host = options.host ?? kv.host;
+  const fetchFn = options.fetch ?? globalThis.fetch.bind(globalThis);
   return {
     async syncPage({ prefix, cursor, limit, retentionGrant, signal }) {
+      if (prefix === "/") {
+        if (typeof host !== "string" || host.length === 0) {
+          throw new ReplicaError(
+            ReplicaErrorCode.INVALID_ARGUMENT,
+            "Root sync requires a node host to check kv-sync-root; pass { host } to kvSyncTransport when the KV service does not expose its host."
+          );
+        }
+        const features = await featuresForHost(host, fetchFn);
+        if (features !== void 0 && !features.includes("kv-sync-root")) {
+          throw new ReplicaError(
+            ReplicaErrorCode.REPLICATION_ROOT_UNSUPPORTED,
+            "This node doesn't support whole-space sync yet."
+          );
+        }
+      }
       const result = await kv.changes({
         prefix,
         limit,
@@ -16889,10 +16953,10 @@ function kvSyncTransport(kv) {
       if (!result.ok) throw replicaErrorFromService(result.error, "Syncing");
       return checkPage(result.data);
     },
-    async fetchContent(keys, options) {
+    async fetchContent(keys, options2) {
       const contents = /* @__PURE__ */ new Map();
       if (keys.length === 0) return contents;
-      const signal = options?.signal;
+      const signal = options2?.signal;
       const ordered = [...keys].sort(compareKeyBytes);
       const batch = await kv.batchGet(ordered, { binary: true, ...signal === void 0 ? {} : { signal } });
       if (batch.ok) {
@@ -17165,6 +17229,7 @@ var IndexedDbReplicaStore = class _IndexedDbReplicaStore {
       throw new ReplicaError(ReplicaErrorCode.RESET_REQUIRED, "The replica was purged or reopened; open it again to continue.");
     }
     if (state === void 0 || state.purged === true) return null;
+    assertFolderPrefix2(state.config.prefix);
     return {
       config: state.config,
       grant: state.grant,
@@ -17185,6 +17250,7 @@ var IndexedDbReplicaStore = class _IndexedDbReplicaStore {
     };
   }
   async init(c) {
+    assertFolderPrefix2(c.prefix);
     const generation = await this.#writeTx(
       [STORE_META],
       "Creating the replica",
@@ -18014,7 +18080,7 @@ async function handleSync(request) {
   if (state === null) throw new ReplicaError(ReplicaErrorCode.NOT_FOUND, "The replica has not been created.");
   const engine = new Replica({
     store: s.store,
-    transportFor: (grant) => kvSyncTransport(boundKv(grant, s)),
+    transportFor: (grant) => kvSyncTransport(boundKv(grant, s), { host: s.host }),
     // Siblings hear every committed page and repair batch, not only whole
     // syncs: a sync that fails on page 2 still reports page 1.
     onCommit: () => broadcastCommitted(s)