@tinycloud/sdk-services 3.3.0-beta.7 → 3.3.0

package/dist/{scope-B-m6cKH-.d.ts → scope-BHTkk5Yk.d.ts}

@@ -1,4 +1,4 @@
-import { R as Result, F as FetchFunction } from './types-BjH0ZtGy.js';
+import { e as RetryStats, R as Result, f as FetchFunction } from './types-eVS1Whuf.js';
 import { REPLICA_KV_STORES } from './kv/replication/contractConstants.js';
 import { ReplicaConsentAnchor, ReplicaGrantPolicy } from './kv/replication/grantPolicyTypes.js';
 
@@ -334,6 +334,8 @@ interface KVResponse<T = unknown> {
      * Response headers with metadata.
      */
     headers: KVResponseHeaders;
+    /** Attempts and total backoff for the request behind this response; see `RetryPolicy`. */
+    retry?: RetryStats;
 }
 /**
  * Response from KV list operations.
@@ -1172,7 +1174,12 @@ interface ReplicaQuotaSpec {
 /** Node/CLI page admission keeps its existing blob/entry interpretation. */
 interface ReplicaPageAdmission {
     partitionId: string;
-    /** Sum of the page's new blob bytes (node admission hook's existing metric). */
+    /**
+     * Node/CLI: the page's NET blob bytes, only blob content counted (not the database, WAL, rows or
+     * pending store): new blobs not already stored, minus blobs only replaced or deleted entries
+     * referenced. Negative when the page frees more than it adds; a page with `blobBytes <= 0` is
+     * always admitted. Browser hosts keep their own ledger metric.
+     */
     blobBytes: number;
     /** Number of entry writes; not the browser ciphertext-row accounting metric. */
     entries: number;
@@ -1779,6 +1786,10 @@ interface ReplicationOptions {
     /**
      * Replica byte budget; absent means unbounded. Browser: origin-wide across every partition.
      * Node/CLI: per profile (per storage dir). Forwarded to storage via `KVReplicaSpec.quota`.
+     * Node/CLI bounds the COMMITTED replica blob content only; the database, WAL, rows and the
+     * pending store are not counted. During a page commit the previous blobs of replaced entries
+     * stay until the commit completes, so on-disk bytes can transiently reach `maxBytes` plus the
+     * bytes that page replaces. Orphaned blobs left by a crash are counted until collected on open.
      */
     maxBytes?: number;
     /** Browser free-space floor; default DEFAULT_MIN_FREE_BYTES (64 MiB). Ignored on node/CLI. */

package/dist/{scope-B7oeKdLM.d.cts → scope-DMhalRFn.d.cts}

@@ -1,4 +1,4 @@
-import { R as Result, F as FetchFunction } from './types-BjH0ZtGy.cjs';
+import { e as RetryStats, R as Result, f as FetchFunction } from './types-eVS1Whuf.cjs';
 import { REPLICA_KV_STORES } from './kv/replication/contractConstants.cjs';
 import { ReplicaConsentAnchor, ReplicaGrantPolicy } from './kv/replication/grantPolicyTypes.cjs';
 
@@ -334,6 +334,8 @@ interface KVResponse<T = unknown> {
      * Response headers with metadata.
      */
     headers: KVResponseHeaders;
+    /** Attempts and total backoff for the request behind this response; see `RetryPolicy`. */
+    retry?: RetryStats;
 }
 /**
  * Response from KV list operations.
@@ -1172,7 +1174,12 @@ interface ReplicaQuotaSpec {
 /** Node/CLI page admission keeps its existing blob/entry interpretation. */
 interface ReplicaPageAdmission {
     partitionId: string;
-    /** Sum of the page's new blob bytes (node admission hook's existing metric). */
+    /**
+     * Node/CLI: the page's NET blob bytes, only blob content counted (not the database, WAL, rows or
+     * pending store): new blobs not already stored, minus blobs only replaced or deleted entries
+     * referenced. Negative when the page frees more than it adds; a page with `blobBytes <= 0` is
+     * always admitted. Browser hosts keep their own ledger metric.
+     */
     blobBytes: number;
     /** Number of entry writes; not the browser ciphertext-row accounting metric. */
     entries: number;
@@ -1779,6 +1786,10 @@ interface ReplicationOptions {
     /**
      * Replica byte budget; absent means unbounded. Browser: origin-wide across every partition.
      * Node/CLI: per profile (per storage dir). Forwarded to storage via `KVReplicaSpec.quota`.
+     * Node/CLI bounds the COMMITTED replica blob content only; the database, WAL, rows and the
+     * pending store are not counted. During a page commit the previous blobs of replaced entries
+     * stay until the commit completes, so on-disk bytes can transiently reach `maxBytes` plus the
+     * bytes that page replaces. Orphaned blobs left by a crash are counted until collected on open.
      */
     maxBytes?: number;
     /** Browser free-space floor; default DEFAULT_MIN_FREE_BYTES (64 MiB). Ignored on node/CLI. */

package/dist/sql/index.cjs

@@ -45,7 +45,7 @@ var ErrorCodes = {
   PERMISSION_DENIED: "PERMISSION_DENIED",
   // Node retry signals (tinycloud-node #347). `meta.retryable` says whether a
   // retry is safe; `meta.retryAfterMs` carries the node's Retry-After.
-  /** HTTP 503 `sql_busy:<stage>` / `unavailable_retryable`: nothing was applied; retry after `meta.retryAfterMs`. */
+  /** HTTP 503 `sql_busy:<stage>` / `unavailable_retryable`/`read_audit_busy`: nothing was applied; retry after `meta.retryAfterMs`. */
   NODE_BUSY: "NODE_BUSY",
   /** HTTP 503 `request_timeout`: the node's deadline passed before any write began; nothing was applied. */
   REQUEST_TIMEOUT: "REQUEST_TIMEOUT",
@@ -86,11 +86,12 @@ var ErrorCodes = {
   DUCKDB_READONLY_VIOLATION: "DUCKDB_READONLY_VIOLATION"
 };
 var defaultRetryPolicy = {
-  maxAttempts: 3,
+  maxAttempts: 4,
   backoff: "exponential",
-  baseDelayMs: 1e3,
-  maxDelayMs: 1e4,
-  retryableErrors: [ErrorCodes.NETWORK_ERROR, ErrorCodes.TIMEOUT]
+  baseDelayMs: 250,
+  maxDelayMs: 4e3,
+  retryableErrors: [ErrorCodes.NODE_BUSY, ErrorCodes.REQUEST_TIMEOUT],
+  maxTotalMs: 12e3
 };
 var TelemetryEvents = {
   SPAN: "telemetry.span",
@@ -175,7 +176,7 @@ function nodeRetryError(service, message, response, errorText) {
   const body = errorText.trim();
   const [, token, stage] = /^([a-z_]+)(?::\s*([a-z_]+):)?/.exec(body) ?? [];
   let code;
-  if (response.status === 503 && (token === "sql_busy" || token === "unavailable_retryable")) {
+  if (response.status === 503 && (token === "sql_busy" || token === "unavailable_retryable" || token === "read_audit_busy")) {
     code = ErrorCodes.NODE_BUSY;
   } else if (response.status === 503 && token === "request_timeout") {
     code = ErrorCodes.REQUEST_TIMEOUT;
@@ -514,6 +515,18 @@ var BaseService = class {
     }
     return controller.signal;
   }
+  /** POST a signed invocation with retry; `mint` re-signs per attempt, `init.headers` add to the signed ones. */
+  invokeWithRetry(url, mint, { headers: extra, ...init } = {}) {
+    const build = () => {
+      const signed = mint();
+      return {
+        method: "POST",
+        ...init,
+        headers: Array.isArray(signed) ? [...signed, ...Object.entries(extra ?? {})] : { ...signed, ...extra }
+      };
+    };
+    return this.context.invokeWithRetry ? this.context.invokeWithRetry(url, build) : this.context.fetch(url, build());
+  }
   /**
    * Create the abort signal for one request, bounded by the request timeout.
    *
@@ -965,18 +978,19 @@ var SQLService = class extends BaseService {
   }
   // === Private helpers ===
   async invokeSQL(dbName, actions, body, signal) {
-    const session = this.context.session;
     const actionList = Array.isArray(actions) ? actions : [actions];
-    const headers = actionList.length === 1 ? this.context.invoke(session, "sql", dbName, actionList[0]) : this.invokeSQLAny(session, dbName, actionList);
-    return this.context.fetch(`${this.host}/invoke`, {
-      method: "POST",
-      headers: {
-        ...headers,
-        "Content-Type": "application/json"
+    return this.invokeWithRetry(
+      `${this.host}/invoke`,
+      () => {
+        const session = this.context.session;
+        return actionList.length === 1 ? this.context.invoke(session, "sql", dbName, actionList[0]) : this.invokeSQLAny(session, dbName, actionList);
       },
-      body: JSON.stringify(body),
-      signal
-    });
+      {
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+        signal
+      }
+    );
   }
   actionForSql(sql, fallback) {
     const token = firstSqlToken(sql);