@volter/teams 0.2.37 → 0.2.39

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/teams",
-  "version": "0.2.37",
+  "version": "0.2.39",
   "type": "module",
   "description": "Volter Teams, the neutral team plane: machine identity and daemon core, the local door and server link, admission from machine grants, product doors, and the Teams server's neutral routes (company RFC 0008).",
   "license": "MIT",

package/server/core.mjs

@@ -64,7 +64,7 @@ export async function maintain(api,{budgetMs=MAINTAIN_BUDGET_MS}={}){const now=a
   const failed=[];let more=false;const counts={};
   const left=()=>Date.now()<deadline;
   const q=(sql,params=[])=>api.store.query(sql,params),one=(sql,params=[])=>api.store.one(sql,params),tx=(statements)=>api.store.transaction(statements);
-  const step=async(name,work)=>{if(!left()){more=true;return;}try{await work();}catch(error){failed.push(name);console.error(`maintain ${name}: ${error.message}`);}};
+  const step=async(name,work)=>{if(!left()){more=true;return;}try{await (api.work?api.work(`maintain.${name}`,work):work());}catch(error){failed.push(name);console.error(`maintain ${name}: ${error.message}`);}};
   const count=(name,n)=>{if(n>0)counts[name]=(counts[name]??0)+n;};
   // Deletes go first, each in a transaction of its own: on a full database an insert fails, and a run that begins with
   // one never reaches the deletes that would make room.

package/server/machine-events.mjs

@@ -4,7 +4,7 @@ import { writeSse, holdStream } from './events.mjs';
 export function machineTransition(api, team, machine, linked) {
   // Serialize the read/change/event across asynchronous store calls. A replaced
   // link remains linked; only the current link's close records a departure.
-  const next = (api.machineTransitionWork ?? Promise.resolve()).then(async () => {
+  const work = async () => {
     const row = await api.store.one('SELECT name,revoked_at FROM machines WHERE team_id=? AND id=?', [team, machine]);
     if (!row) return;
     const present = linked ?? api.machineLinks?.has(`${team}\0${machine}`);
@@ -17,7 +17,8 @@ export function machineTransition(api, team, machine, linked) {
       { sql: 'INSERT INTO machine_presence_events(team_id,machine_id,name,linked,created_at) VALUES (?,?,?,?,?)', params: [team,machine,row.name,value,at] },
     ]);
     api.events.publish(team, { type: 'machine_transition' });
-  });
+  };
+  const next = (api.machineTransitionWork ?? Promise.resolve()).then(() => api.work ? api.work('machineTransition', work) : work());
   api.machineTransitionWork = next.catch(error => { console.error(`machine transition ${machine}: ${error.message}`); });
   return next;
 }

package/server/migrations/026.mjs

@@ -0,0 +1,32 @@
+// Capture prefixes are server-owned SHA-256 continuations. Preparing an old session
+// is resumable; a request never reopens its entire transcript. No message body is copied.
+export default `
+CREATE TABLE capture_prefix_state (
+  team_id TEXT NOT NULL, session_id TEXT NOT NULL, source_id TEXT NOT NULL,
+  revision INTEGER NOT NULL, generation TEXT NOT NULL,
+  count INTEGER NOT NULL, target_count INTEGER NOT NULL, sha_state TEXT NOT NULL,
+  checkpoint_count INTEGER NOT NULL, checkpoint_bytes INTEGER NOT NULL,
+  invalid INTEGER NOT NULL DEFAULT 0,
+  PRIMARY KEY(team_id,session_id,source_id)
+) STRICT;
+CREATE TABLE capture_prefix_checkpoints (
+  team_id TEXT NOT NULL, session_id TEXT NOT NULL, source_id TEXT NOT NULL,
+  generation TEXT NOT NULL, count INTEGER NOT NULL, digest TEXT NOT NULL, sha_state TEXT NOT NULL,
+  PRIMARY KEY(team_id,session_id,source_id,generation,count)
+) STRICT;
+CREATE TABLE capture_prefix_keys (
+  team_id TEXT NOT NULL, session_id TEXT NOT NULL, source_id TEXT NOT NULL,
+  generation TEXT NOT NULL, native_key TEXT NOT NULL, ordinal INTEGER NOT NULL,
+  PRIMARY KEY(team_id,session_id,source_id,generation,native_key)
+) STRICT;
+CREATE INDEX capture_prefix_keys_ordinal ON capture_prefix_keys(team_id,session_id,source_id,generation,ordinal);
+CREATE TABLE capture_prefix_garbage (
+  team_id TEXT NOT NULL, session_id TEXT NOT NULL, source_id TEXT NOT NULL, generation TEXT NOT NULL,
+  PRIMARY KEY(team_id,session_id,source_id,generation)
+) STRICT;
+CREATE TABLE capture_prefix_warm_queue (
+  ticket INTEGER PRIMARY KEY AUTOINCREMENT,
+  team_id TEXT NOT NULL, session_id TEXT NOT NULL, source_id TEXT NOT NULL,
+  UNIQUE(team_id,session_id,source_id)
+) STRICT;
+`;

package/server/migrations/index.mjs

@@ -24,7 +24,8 @@ import m022 from './022.mjs';
 import m023 from './023.mjs';
 import m024 from './024.mjs';
 import m025 from './025.mjs';
-export const MIGRATIONS = [m001, m002, m003, m004, m005, m006, m007, m008, m009, m010, m011, m012, m013, m014, m015, m016, m017, m018, m019, m020, m021, m022, m023, m024, m025];
+import m026 from './026.mjs';
+export const MIGRATIONS = [m001, m002, m003, m004, m005, m006, m007, m008, m009, m010, m011, m012, m013, m014, m015, m016, m017, m018, m019, m020, m021, m022, m023, m024, m025, m026];
 /** A message row's `until_revision` while its session's current version still holds it (schema 9). */
 export const OPEN_REVISION = Number.MAX_SAFE_INTEGER;
 /** SQL: message row `m` belongs to the version at revision ?1 (bind the revision twice). */

package/server/published-events.mjs

@@ -132,6 +132,9 @@ export async function publishedEventRoute(ctx) {
     for(const session of new Set(body.sessions)){
       const natives=(await api.store.query("SELECT DISTINCT json_extract(descriptor_json,'$.native_session_id') AS native FROM bindings WHERE team_id=? AND session_id=?",[auth.team_id,session])).map(row=>row.native).filter(Boolean);
       const statements=[];
+      // Purging text also removes every continuation buffer that can contain
+      // its last SHA block, including retired generations. Never retain a redacted byte there.
+      for(const table of ['capture_prefix_state','capture_prefix_checkpoints','capture_prefix_keys','capture_prefix_garbage','capture_prefix_warm_queue'])statements.push(stmt(`DELETE FROM ${table} WHERE team_id=? AND session_id=?`,auth.team_id,session));
       for(const value of body.values){
         statements.push(stmt('UPDATE messages SET value_json=replace(value_json,?,?),search_text=replace(search_text,?,?) WHERE team_id=? AND session_id=? AND (instr(value_json,?)>0 OR instr(search_text,?)>0)',value,marker,value,marker,auth.team_id,session,value,value));
         if(natives.length)statements.push(stmt(`UPDATE capture_parts SET payload_json=replace(payload_json,?,?) WHERE team_id=? AND instr(payload_json,?)>0 AND capture_id IN (SELECT id FROM captures WHERE team_id=? AND native_id IN (${natives.map(()=>'?').join(',')}))`,value,marker,auth.team_id,value,auth.team_id,...natives));