deepspace 0.27.1 → 0.28.0

package/dist/server.d.ts

@@ -3096,8 +3096,10 @@ declare function handleDelete(ctx: RecordContext, ws: WebSocket, attachment: Con
  *   that have already been authorized at the app level.
  * @param systemUpdate - When true, also skip system-managed field stripping.
  *   Used for server-initiated updates to system fields (e.g. user profile sync).
+ * @param updateOnly - When true, an absent recordId is refused instead of
+ *   created. `records.update`'s mode: updates never create.
  */
-declare function putRecord(ctx: RecordContext, collection: string, recordId: string, data: Record<string, unknown>, userId: string, userRole: string, skipUserRbac?: boolean, systemUpdate?: boolean): ToolResult;
+declare function putRecord(ctx: RecordContext, collection: string, recordId: string, data: Record<string, unknown>, userId: string, userRole: string, skipUserRbac?: boolean, systemUpdate?: boolean, updateOnly?: boolean): ToolResult;
 /**
  * Delete a record. Returns ToolResult instead of sending WS messages.
  * Performs RBAC check and broadcasts the deletion.

package/dist/server.js

@@ -408,10 +408,10 @@ async function writeQuotaSummary(bucket, key, previousEtag, summary) {
   });
   return object ? { etag: object.etag, summary } : null;
 }
-async function ensureQuotaSummary(bucket, storage, prefixes, forceMeasure = false, excludedMarkerKey) {
+async function ensureQuotaSummary(bucket, storage, prefixes, measure = "reuse", excludedMarkerKey) {
   for (let attempt = 0; attempt < 4; attempt++) {
     const current = await readQuotaSummary(bucket, storage.quotaKey);
-    if (!forceMeasure && current.summary && accountPrefixesEqual(current.summary.prefixes, prefixes)) {
+    if (measure !== "force" && current.summary && accountPrefixesEqual(current.summary.prefixes, prefixes) && !(measure === "repairDirty" && current.summary.dirty && Date.now() - current.summary.measuredAt >= QUOTA_REPAIR_COOLDOWN_MS)) {
       return current;
     }
     const usedBytes = await measuredAllocationUsage(bucket, storage, prefixes, excludedMarkerKey);
@@ -599,7 +599,7 @@ async function reserveQuotaSummary(bucket, storage, prefixes, initial, chargeByt
         bucket,
         storage,
         prefixes,
-        false,
+        "reuse",
         markerKey ?? void 0
       );
       if (!ensured) {
@@ -624,7 +624,7 @@ async function reserveQuotaSummary(bucket, storage, prefixes, initial, chargeByt
         bucket,
         storage,
         prefixes,
-        true,
+        "force",
         markerKey ?? void 0
       );
       if (!refreshed?.summary) {
@@ -717,7 +717,7 @@ async function storageUsage(bucket, storage) {
   try {
     const prefixes = await allocationPrefixes(storage);
     if (prefixes === null) return null;
-    const current = await ensureQuotaSummary(bucket, storage, prefixes);
+    const current = await ensureQuotaSummary(bucket, storage, prefixes, "repairDirty");
     return current?.summary?.usedBytes ?? null;
   } catch (error) {
     console.error("[files:quota] usage:", error);
@@ -3876,7 +3876,7 @@ function handleDelete(ctx, ws, attachment, payload) {
     ctx.send(ws, serverBuild.error(result.error));
   }
 }
-function putRecord(ctx, collection, recordId, data, userId, userRole, skipUserRbac = false, systemUpdate = false) {
+function putRecord(ctx, collection, recordId, data, userId, userRole, skipUserRbac = false, systemUpdate = false, updateOnly = false) {
   const resolved = resolveCollection(ctx, collection);
   if (!resolved.ok) return { success: false, error: resolved.error };
   const schema = resolved.schema;
@@ -3894,6 +3894,12 @@ function putRecord(ctx, collection, recordId, data, userId, userRole, skipUserRb
   }
   const existing = getRecord(ctx.sql, collection, recordId, schema);
   const isUpdate = existing !== null;
+  if (updateOnly && !isUpdate) {
+    return {
+      success: false,
+      error: `records.update: no record "${recordId}" in ${collection} \u2014 updates never create; use records.create.`
+    };
+  }
   const mergedData = isUpdate ? { ...existing.data, ...data } : { ...data };
   for (const col of columns) {
     if (col.readonly) continue;
@@ -5052,7 +5058,7 @@ async function executeTool(ctx, toolName, params, userId, userRole, skipUserRbac
       if (!collection) return { success: false, error: "Missing required param: collection" };
       if (!recordId) return { success: false, error: "Missing required param: recordId" };
       if (!data) return { success: false, error: "Missing required param: data" };
-      return putRecord(ctx, collection, recordId, data, userId, userRole, skipUserRbac);
+      return putRecord(ctx, collection, recordId, data, userId, userRole, skipUserRbac, false, true);
     }
     case "records.delete": {
       const collection = params.collection;