emdash 0.37.0 → 0.39.0

package/dist/collection-deletion-C3Xixmkx.mjs

@@ -0,0 +1,436 @@
+import { n as isMissingTableError } from "./db-errors-CBD5yMro.mjs";
+import { t as validateIdentifier } from "./validate-DANX1-Qi.mjs";
+import { l as isPostgres } from "./dialect-helpers-CtYdsX4W.mjs";
+import { o as decodeCursor, s as encodeCursor } from "./types-BkUg2yHx.mjs";
+import { t as withTransaction } from "./transaction-BcJO4Tmc.mjs";
+import { t as FTSManager } from "./fts-manager-DMb0sbIQ.mjs";
+import { n as verifyMediaUsageCaptureTriggers } from "./capture-triggers-gxQxnxrJ.mjs";
+import { sql } from "kysely";
+import { ulid } from "ulidx";
+
+//#region src/media/usage/collection-deletion.ts
+const ACTIVATION_KEY = "incremental_capture";
+const VIRTUAL_DIALECT_ID = "virtual:emdash/dialect";
+var MediaUsageCollectionDeletionRepository = class {
+	constructor(db) {
+		this.db = db;
+	}
+	async createTombstone(input) {
+		assertIdentity(input);
+		const now = timestampOffset(this.db, 0);
+		await this.db.insertInto("_emdash_media_usage_collection_deletions").values({
+			collection_id: input.collectionId,
+			collection_slug: input.collectionSlug,
+			force_delete: input.forceDelete ? 1 : 0,
+			state: "pending",
+			phase: "fence",
+			next_attempt_at: now,
+			updated_at: now
+		}).onConflict((conflict) => conflict.column("collection_id").doNothing()).execute();
+		const row = await this.db.selectFrom("_emdash_media_usage_collection_deletions").selectAll().where("collection_id", "=", input.collectionId).executeTakeFirstOrThrow();
+		if (row.collection_slug !== input.collectionSlug || Boolean(row.force_delete) !== input.forceDelete) throw new Error("Collection deletion tombstone identity conflicts with existing work");
+		return rowToRecord(row);
+	}
+	async claim(input) {
+		if (!input.collectionId || !isPhase(input.phase)) throw new Error("Collection deletion claim requires an exact identity and phase");
+		if (!Number.isSafeInteger(input.leaseDurationSeconds) || input.leaseDurationSeconds < 1) throw new Error("Collection deletion lease duration must be a positive whole number");
+		const leaseToken = ulid();
+		const row = await this.db.updateTable("_emdash_media_usage_collection_deletions").set({
+			state: "leased",
+			lease_token: leaseToken,
+			lease_expires_at: timestampOffset(this.db, input.leaseDurationSeconds),
+			updated_at: timestampOffset(this.db, 0)
+		}).where("collection_id", "=", input.collectionId).where("phase", "=", input.phase).where((eb) => eb.or([eb.and([eb("state", "in", ["pending", "retry"]), timestampIsDue(this.db, "next_attempt_at")]), eb.and([eb("state", "=", "leased"), timestampIsDue(this.db, "lease_expires_at")])])).returningAll().executeTakeFirst();
+		if (!row) return null;
+		return {
+			...rowToRecord(row),
+			leaseToken
+		};
+	}
+	async findBySlug(collectionSlug) {
+		validateIdentifier(collectionSlug, "collection slug");
+		try {
+			const row = await this.db.selectFrom("_emdash_media_usage_collection_deletions").selectAll().where("collection_slug", "=", collectionSlug).executeTakeFirst();
+			return row ? rowToRecord(row) : null;
+		} catch (error) {
+			if (isMissingTableError(error)) return null;
+			throw error;
+		}
+	}
+	async findDue(limit) {
+		if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100) throw new Error("Collection deletion candidate limit must be from 1 to 100");
+		const nextAttemptIsDue = timestampIsDue(this.db, "next_attempt_at");
+		return (await sql`
+			WITH pending_candidates AS (
+				SELECT * FROM _emdash_media_usage_collection_deletions
+				WHERE state = 'pending' AND ${nextAttemptIsDue}
+				ORDER BY next_attempt_at, updated_at, collection_id
+				LIMIT ${limit}
+			), retry_candidates AS (
+				SELECT * FROM _emdash_media_usage_collection_deletions
+				WHERE state = 'retry' AND ${nextAttemptIsDue}
+				ORDER BY next_attempt_at, updated_at, collection_id
+				LIMIT ${limit}
+			), leased_candidates AS (
+				SELECT * FROM _emdash_media_usage_collection_deletions
+				WHERE state = 'leased' AND ${timestampIsDue(this.db, "lease_expires_at")}
+				ORDER BY lease_expires_at, updated_at, collection_id
+				LIMIT ${limit}
+			), candidates AS (
+				SELECT * FROM pending_candidates
+				UNION ALL SELECT * FROM retry_candidates
+				UNION ALL SELECT * FROM leased_candidates
+			)
+			SELECT * FROM candidates
+			ORDER BY CASE WHEN state = 'leased' THEN lease_expires_at ELSE next_attempt_at END,
+				updated_at,
+				collection_id
+			LIMIT ${limit}
+		`.execute(this.db)).rows.map(rowToRecord);
+	}
+	async hasNonterminal() {
+		return await this.db.selectFrom("_emdash_media_usage_collection_deletions").select("collection_id").where("state", "in", [
+			"pending",
+			"retry",
+			"leased"
+		]).limit(1).executeTakeFirst() !== void 0;
+	}
+	async findOperatorPage(options) {
+		const state = options.state ?? "failed";
+		if (!isState(state)) throw new Error("Invalid collection deletion state");
+		const limit = options.limit ?? 50;
+		if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100) throw new Error("Collection deletion operator limit must be from 1 to 100");
+		const cursor = options.cursor ? decodeCursor(options.cursor) : null;
+		let query = this.db.selectFrom("_emdash_media_usage_collection_deletions").selectAll().where("state", "=", state);
+		if (cursor) query = query.where((eb) => eb.or([eb("updated_at", "<", cursor.orderValue), eb.and([eb("updated_at", "=", cursor.orderValue), eb("collection_id", "<", cursor.id)])]));
+		const rows = await query.orderBy("updated_at", "desc").orderBy("collection_id", "desc").limit(limit + 1).execute();
+		const items = rows.slice(0, limit).map(rowToOperatorItem);
+		const result = { items };
+		if (rows.length > limit && items.length > 0) {
+			const last = items.at(-1);
+			result.nextCursor = encodeCursor(last.updatedAt, last.collectionId);
+		}
+		return result;
+	}
+	async retryOperatorDeletion(input) {
+		if (!input.collectionId) throw new Error("Collection deletion retry requires an ID");
+		const observed = await this.db.selectFrom("_emdash_media_usage_collection_deletions").selectAll().where("collection_id", "=", input.collectionId).executeTakeFirst();
+		if (!observed) return { outcome: "not_found" };
+		if (observed.state === "leased" && observed.lease_expires_at) {
+			const live = await this.db.selectFrom("_emdash_media_usage_collection_deletions").select("lease_expires_at").where("collection_id", "=", input.collectionId).where("state", "=", "leased").where(liveLease(this.db)).executeTakeFirst();
+			if (live?.lease_expires_at) return {
+				outcome: "lease_active",
+				leaseExpiresAt: live.lease_expires_at
+			};
+		}
+		const now = timestampOffset(this.db, 0);
+		const reopened = await this.db.updateTable("_emdash_media_usage_collection_deletions").set({
+			state: "pending",
+			attempt_count: 0,
+			next_attempt_at: now,
+			lease_token: null,
+			lease_expires_at: null,
+			last_error_code: null,
+			updated_at: now
+		}).where("collection_id", "=", input.collectionId).where((eb) => eb.or([eb("state", "in", ["failed", "retry"]), eb.and([eb("state", "=", "leased"), timestampIsDue(this.db, "lease_expires_at")])])).returningAll().executeTakeFirst();
+		if (reopened) return {
+			outcome: "pending",
+			changed: true,
+			item: rowToOperatorItem(reopened)
+		};
+		return { outcome: "conflict" };
+	}
+	async checkpoint(input) {
+		const result = await this.db.updateTable("_emdash_media_usage_collection_deletions").set({
+			phase: input.toPhase,
+			attempt_count: 0,
+			last_error_code: null,
+			updated_at: timestampOffset(this.db, 0)
+		}).where("collection_id", "=", input.collectionId).where("state", "=", "leased").where("phase", "=", input.fromPhase).where("lease_token", "=", input.leaseToken).where(liveLease(this.db)).executeTakeFirst();
+		return Number(result.numUpdatedRows ?? 0) === 1;
+	}
+	async release(input) {
+		const now = timestampOffset(this.db, 0);
+		const result = await this.db.updateTable("_emdash_media_usage_collection_deletions").set({
+			state: "pending",
+			next_attempt_at: now,
+			lease_token: null,
+			lease_expires_at: null,
+			attempt_count: 0,
+			last_error_code: null,
+			updated_at: now
+		}).where("collection_id", "=", input.collectionId).where("state", "=", "leased").where("lease_token", "=", input.leaseToken).where(liveLease(this.db)).executeTakeFirst();
+		return Number(result.numUpdatedRows ?? 0) === 1;
+	}
+	async cancelFence(input) {
+		const result = await this.db.deleteFrom("_emdash_media_usage_collection_deletions").where("collection_id", "=", input.collectionId).where("state", "=", "leased").where("phase", "=", "fence").where("lease_token", "=", input.leaseToken).where(liveLease(this.db)).executeTakeFirst();
+		return Number(result.numDeletedRows ?? 0) === 1;
+	}
+	async recordFailure(input) {
+		const result = await this.db.updateTable("_emdash_media_usage_collection_deletions").set({
+			state: input.terminal ? "failed" : "retry",
+			attempt_count: sql`attempt_count + 1`,
+			next_attempt_at: timestampOffset(this.db, input.retryDelaySeconds),
+			lease_token: null,
+			lease_expires_at: null,
+			last_error_code: input.errorCode,
+			updated_at: timestampOffset(this.db, 0)
+		}).where("collection_id", "=", input.collectionId).where("state", "=", "leased").where("lease_token", "=", input.leaseToken).where(liveLease(this.db)).executeTakeFirst();
+		return Number(result.numUpdatedRows ?? 0) === 1;
+	}
+	async deleteRegistryAndCheckpoint(input) {
+		return withTransaction(this.db, async (trx) => {
+			await trx.deleteFrom("_emdash_collections").where("id", "=", input.collectionId).where("slug", "=", input.collectionSlug).where((eb) => eb.exists(eb.selectFrom("_emdash_media_usage_collection_deletions as deletion").select("deletion.collection_id").where("deletion.collection_id", "=", input.collectionId).where("deletion.collection_slug", "=", input.collectionSlug).where("deletion.state", "=", "leased").where("deletion.phase", "=", "registry").where("deletion.lease_token", "=", input.leaseToken).where(liveLease(trx, "deletion.lease_expires_at")))).execute();
+			const checkpoint = await trx.updateTable("_emdash_media_usage_collection_deletions").set({
+				phase: "table",
+				updated_at: timestampOffset(trx, 0)
+			}).where("collection_id", "=", input.collectionId).where("collection_slug", "=", input.collectionSlug).where("state", "=", "leased").where("phase", "=", "registry").where("lease_token", "=", input.leaseToken).where(liveLease(trx)).executeTakeFirst();
+			return Number(checkpoint.numUpdatedRows ?? 0) === 1;
+		});
+	}
+};
+async function deleteActivatedMediaUsageCollection(db, input, options = {}) {
+	const frontPhaseLimit = options.frontPhaseLimit ?? 3;
+	if (!Number.isSafeInteger(frontPhaseLimit) || frontPhaseLimit < 1 || frontPhaseLimit > 3) throw new Error("Collection deletion front-phase limit must be from 1 to 3");
+	validateIdentifier(input.collectionSlug, "collection slug");
+	const repository = new MediaUsageCollectionDeletionRepository(db);
+	let deletion = await repository.findBySlug(input.collectionSlug);
+	if (deletion && input.collectionId && deletion.collectionId !== input.collectionId) throw new Error("Collection deletion tombstone identity conflict");
+	if (!deletion) {
+		let activation;
+		try {
+			activation = await db.selectFrom("_emdash_media_usage_activation").select("state").where("task_key", "=", ACTIVATION_KEY).executeTakeFirst();
+		} catch (error) {
+			if (!isMissingTableError(error)) throw error;
+		}
+		if (!activation || activation.state === "expanded") return "inactive";
+		if (activation.state !== "active") throw new Error("Media usage activation must be active before collection deletion");
+		if (!input.collectionId) return "not_found";
+		await assertActivatedCollectionDeletionReady(db, {
+			collectionId: input.collectionId,
+			collectionSlug: input.collectionSlug
+		});
+		deletion = await repository.createTombstone({
+			collectionId: input.collectionId,
+			collectionSlug: input.collectionSlug,
+			forceDelete: input.forceDelete
+		});
+	}
+	if (deletion.phase !== "fence" && deletion.phase !== "registry" && deletion.phase !== "table") return "deleted";
+	const claim = options.claimed ?? await repository.claim({
+		collectionId: deletion.collectionId,
+		phase: deletion.phase,
+		leaseDurationSeconds: 300
+	});
+	if (!claim) return "in_progress";
+	if (claim.collectionId !== deletion.collectionId || claim.phase !== deletion.phase) throw new Error("Collection deletion claim identity conflict");
+	let phase = claim.phase;
+	let processedFrontPhases = 0;
+	const lease = {
+		collectionId: claim.collectionId,
+		leaseToken: claim.leaseToken
+	};
+	if (phase === "fence") {
+		const captureState = await findCollectionCaptureState(db, claim);
+		if (captureState !== "active" && captureState !== "deleting") throw new Error("Activated collection deletion requires a fenced capture lifecycle");
+		if (!await verifyMediaUsageCaptureTriggers(db, claim)) throw new Error("Activated collection deletion requires the exact capture trigger set");
+		if (captureState === "active") {
+			const result = await executeCollectionDeletionGuard(db, {
+				action: "fence",
+				collectionId: claim.collectionId,
+				collectionSlug: claim.collectionSlug,
+				leaseToken: claim.leaseToken,
+				forceDelete: claim.forceDelete
+			});
+			if (result.outcome === "has_content") {
+				if (!await repository.cancelFence(lease)) throw new Error("Collection deletion lost its fence while preserving content");
+				return "has_content";
+			}
+			if (result.outcome !== "fenced") throw new Error("Collection deletion lost its fence");
+		}
+		if (!await repository.checkpoint({
+			...lease,
+			fromPhase: "fence",
+			toPhase: "registry"
+		})) throw new Error("Collection deletion lost its fence checkpoint");
+		phase = "registry";
+		processedFrontPhases++;
+		if (processedFrontPhases >= frontPhaseLimit) {
+			if (!await repository.release(lease)) throw new Error("Collection deletion lost its handoff");
+			return "advanced";
+		}
+	}
+	if (phase === "registry") {
+		if (!await repository.deleteRegistryAndCheckpoint({
+			...lease,
+			collectionSlug: claim.collectionSlug
+		})) throw new Error("Collection deletion lost its registry checkpoint");
+		phase = "table";
+		processedFrontPhases++;
+		if (processedFrontPhases >= frontPhaseLimit) {
+			if (!await repository.release(lease)) throw new Error("Collection deletion lost its handoff");
+			return "advanced";
+		}
+	}
+	if (phase === "table") {
+		if ((await executeCollectionDeletionGuard(db, {
+			action: "drop",
+			collectionId: claim.collectionId,
+			collectionSlug: claim.collectionSlug,
+			leaseToken: claim.leaseToken
+		})).outcome !== "dropped") throw new Error("Collection deletion lost its table fence");
+		if (!await repository.checkpoint({
+			...lease,
+			fromPhase: "table",
+			toPhase: "work"
+		})) throw new Error("Collection deletion lost its table checkpoint");
+	}
+	if (!await repository.release(lease)) throw new Error("Collection deletion lost its cleanup handoff");
+	return "deleted";
+}
+async function isMediaUsageCollectionSlugDeleting(db, collectionSlug) {
+	validateIdentifier(collectionSlug, "collection slug");
+	try {
+		return await db.selectFrom("_emdash_media_usage_collection_deletions").select("collection_id").where("collection_slug", "=", collectionSlug).executeTakeFirst() !== void 0;
+	} catch (error) {
+		if (isMissingTableError(error)) return false;
+		throw error;
+	}
+}
+async function assertActivatedCollectionDeletionReady(db, identity) {
+	if (await findCollectionCaptureState(db, identity) !== "active") throw new Error("Activated collection deletion requires an active capture lifecycle");
+	if (!await verifyMediaUsageCaptureTriggers(db, identity)) throw new Error("Activated collection deletion requires the exact capture trigger set");
+}
+async function findCollectionCaptureState(db, identity) {
+	return (await db.selectFrom("_emdash_media_usage_index_status").select("capture_state").where("adapter_id", "=", "content-media").where("scope_type", "=", "collection").where("scope_key", "=", identity.collectionSlug).where("collection_id", "=", identity.collectionId).executeTakeFirst())?.capture_state ?? null;
+}
+async function executeCollectionDeletionGuard(db, input) {
+	const executeAdapterGuard = await loadAdapterCollectionDeletionGuard();
+	if (executeAdapterGuard) {
+		const { default: config } = await import("virtual:emdash/config");
+		return executeAdapterGuard(config.database?.config, input);
+	}
+	return executeLocalCollectionDeletionGuard(db, input);
+}
+async function loadAdapterCollectionDeletionGuard() {
+	try {
+		return (await import("virtual:emdash/dialect")).executeCollectionDeletionGuard;
+	} catch (error) {
+		if (isVirtualDialectUnavailableError(error)) return void 0;
+		throw error;
+	}
+}
+function isVirtualDialectUnavailableError(error) {
+	if (!(error instanceof Error) || !("code" in error)) return false;
+	if (error.code === "ERR_MODULE_NOT_FOUND") return error.message.includes(VIRTUAL_DIALECT_ID);
+	return error.code === "ERR_UNSUPPORTED_ESM_URL_SCHEME" && error.message.includes("Received protocol 'virtual:'");
+}
+async function executeLocalCollectionDeletionGuard(db, input) {
+	assertGuardInput(input);
+	return db.transaction().execute(async (trx) => {
+		if (!await lockLiveTombstone(trx, input)) return { outcome: "stale" };
+		if (input.action === "fence") return fenceCollection(trx, input);
+		await new FTSManager(trx).dropFtsTable(input.collectionSlug);
+		await sql`DROP TABLE IF EXISTS ${sql.ref(`ec_${input.collectionSlug}`)}`.execute(trx);
+		return { outcome: "dropped" };
+	});
+}
+async function fenceCollection(trx, input) {
+	const tableName = `ec_${input.collectionSlug}`;
+	validateIdentifier(tableName, "content table");
+	if (isPostgres(trx)) await sql`LOCK TABLE ${sql.ref(tableName)} IN SHARE ROW EXCLUSIVE MODE`.execute(trx);
+	if (!input.forceDelete) {
+		if ((await sql`
+			SELECT 1 AS present FROM ${sql.ref(tableName)}
+			WHERE deleted_at IS NULL
+			LIMIT 1
+		`.execute(trx)).rows.length > 0) return { outcome: "has_content" };
+	}
+	const result = await trx.updateTable("_emdash_media_usage_index_status as status").set({
+		capture_state: "deleting",
+		updated_at: timestampOffset(trx, 0)
+	}).where("status.adapter_id", "=", "content-media").where("status.scope_type", "=", "collection").where("status.scope_key", "=", input.collectionSlug).where("status.collection_id", "=", input.collectionId).where("status.capture_state", "=", "active").where((eb) => eb.exists(eb.selectFrom("_emdash_collections as collection").select("collection.id").where("collection.id", "=", input.collectionId).where("collection.slug", "=", input.collectionSlug))).executeTakeFirst();
+	return Number(result.numUpdatedRows ?? 0) === 1 ? { outcome: "fenced" } : { outcome: "stale" };
+}
+async function lockLiveTombstone(trx, input) {
+	const phase = input.action === "fence" ? "fence" : "table";
+	if (isPostgres(trx)) return await trx.selectFrom("_emdash_media_usage_collection_deletions").select("collection_id").where("collection_id", "=", input.collectionId).where("collection_slug", "=", input.collectionSlug).where("state", "=", "leased").where("phase", "=", phase).where("lease_token", "=", input.leaseToken).where(liveLease(trx)).forUpdate().executeTakeFirst() !== void 0;
+	const locked = await trx.updateTable("_emdash_media_usage_collection_deletions").set({ updated_at: sql`updated_at` }).where("collection_id", "=", input.collectionId).where("collection_slug", "=", input.collectionSlug).where("state", "=", "leased").where("phase", "=", phase).where("lease_token", "=", input.leaseToken).where(liveLease(trx)).executeTakeFirst();
+	return Number(locked.numUpdatedRows ?? 0) === 1;
+}
+function assertIdentity(input) {
+	if (!input.collectionId) throw new Error("Collection deletion requires a collection ID");
+	validateIdentifier(input.collectionSlug, "collection slug");
+}
+function assertGuardInput(input) {
+	assertIdentity(input);
+	if (!input.leaseToken) throw new Error("Collection deletion requires a lease token");
+}
+function liveLease(db, column = "lease_expires_at") {
+	const leaseExpiresAt = sql.ref(column);
+	return isPostgres(db) ? sql`${leaseExpiresAt}::timestamptz > clock_timestamp()` : sql`${leaseExpiresAt} > strftime('%Y-%m-%dT%H:%M:%fZ', 'now')`;
+}
+function timestampIsDue(db, column) {
+	return isPostgres(db) ? sql`${sql.ref(column)} <= to_char(
+			statement_timestamp() AT TIME ZONE 'UTC',
+			'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'
+		)` : sql`${sql.ref(column)} <= strftime('%Y-%m-%dT%H:%M:%fZ', 'now')`;
+}
+function timestampOffset(db, offsetSeconds) {
+	if (isPostgres(db)) return sql`to_char(
+			(clock_timestamp() AT TIME ZONE 'UTC') + (${offsetSeconds} * INTERVAL '1 second'),
+			'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'
+		)`;
+	return sql`strftime(
+		'%Y-%m-%dT%H:%M:%fZ',
+		'now',
+		${`${offsetSeconds >= 0 ? "+" : ""}${offsetSeconds} seconds`}
+	)`;
+}
+function collectionDeletionCurrentTimestamp(db) {
+	return timestampOffset(db, 0);
+}
+function rowToRecord(row) {
+	if (!isState(row.state) || !isPhase(row.phase)) throw new Error("Invalid media usage collection deletion lifecycle");
+	return {
+		collectionId: row.collection_id,
+		collectionSlug: row.collection_slug,
+		forceDelete: Boolean(row.force_delete),
+		state: row.state,
+		phase: row.phase,
+		workCursor: row.work_cursor,
+		sourceKey: row.source_key,
+		occurrenceCursor: row.occurrence_cursor,
+		attemptCount: row.attempt_count,
+		nextAttemptAt: row.next_attempt_at,
+		leaseToken: row.lease_token,
+		leaseExpiresAt: row.lease_expires_at,
+		lastErrorCode: row.last_error_code,
+		createdAt: row.created_at,
+		updatedAt: row.updated_at
+	};
+}
+function rowToOperatorItem(row) {
+	const deletion = rowToRecord(row);
+	return {
+		collectionId: deletion.collectionId,
+		collectionSlug: deletion.collectionSlug,
+		state: deletion.state,
+		phase: deletion.phase,
+		attemptCount: deletion.attemptCount,
+		nextAttemptAt: deletion.nextAttemptAt,
+		leaseExpiresAt: deletion.leaseExpiresAt,
+		lastErrorCode: deletion.lastErrorCode,
+		updatedAt: deletion.updatedAt
+	};
+}
+function isState(value) {
+	return value === "pending" || value === "retry" || value === "leased" || value === "failed";
+}
+function isPhase(value) {
+	return value === "fence" || value === "registry" || value === "table" || value === "work" || value === "sources" || value === "status" || value === "finalize";
+}
+
+//#endregion
+export { isMediaUsageCollectionSlugDeleting as i, collectionDeletionCurrentTimestamp as n, deleteActivatedMediaUsageCollection as r, MediaUsageCollectionDeletionRepository as t };
+//# sourceMappingURL=collection-deletion-C3Xixmkx.mjs.map

package/dist/collection-deletion-C3Xixmkx.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection-deletion-C3Xixmkx.mjs","names":[],"sources":["../src/media/usage/collection-deletion.ts"],"sourcesContent":["import { sql, type Kysely, type RawBuilder, type Selectable, type Transaction } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport { isPostgres } from \"../../database/dialect-helpers.js\";\nimport {\n\tdecodeCursor,\n\tencodeCursor,\n\ttype FindManyResult,\n} from \"../../database/repositories/types.js\";\nimport { withTransaction } from \"../../database/transaction.js\";\nimport type { Database, MediaUsageCollectionDeletionTable } from \"../../database/types.js\";\nimport { validateIdentifier } from \"../../database/validate.js\";\nimport type {\n\tCollectionDeletionGuardInput,\n\tCollectionDeletionGuardResult,\n} from \"../../db/adapters.js\";\nimport { FTSManager } from \"../../search/fts-manager.js\";\nimport { isMissingTableError } from \"../../utils/db-errors.js\";\nimport { verifyMediaUsageCaptureTriggers } from \"./capture-triggers.js\";\n\nconst ACTIVATION_KEY = \"incremental_capture\";\nconst VIRTUAL_DIALECT_ID = \"virtual:emdash/dialect\";\n\nexport type MediaUsageCollectionDeletionState = \"pending\" | \"retry\" | \"leased\" | \"failed\";\nexport type MediaUsageCollectionDeletionPhase =\n\t| \"fence\"\n\t| \"registry\"\n\t| \"table\"\n\t| \"work\"\n\t| \"sources\"\n\t| \"status\"\n\t| \"finalize\";\n\nexport interface MediaUsageCollectionDeletionRecord {\n\tcollectionId: string;\n\tcollectionSlug: string;\n\tforceDelete: boolean;\n\tstate: MediaUsageCollectionDeletionState;\n\tphase: MediaUsageCollectionDeletionPhase;\n\tworkCursor: string | null;\n\tsourceKey: string | null;\n\toccurrenceCursor: string | null;\n\tattemptCount: number;\n\tnextAttemptAt: string;\n\tleaseToken: string | null;\n\tleaseExpiresAt: string | null;\n\tlastErrorCode: string | null;\n\tcreatedAt: string;\n\tupdatedAt: string;\n}\n\nexport interface MediaUsageCollectionDeletionOperatorItem {\n\tcollectionId: string;\n\tcollectionSlug: string;\n\tstate: MediaUsageCollectionDeletionState;\n\tphase: MediaUsageCollectionDeletionPhase;\n\tattemptCount: number;\n\tnextAttemptAt: string;\n\tleaseExpiresAt: string | null;\n\tlastErrorCode: string | null;\n\tupdatedAt: string;\n}\n\nexport type MediaUsageCollectionDeletionRetryResult =\n\t| { outcome: \"pending\"; changed: boolean; item: MediaUsageCollectionDeletionOperatorItem }\n\t| { outcome: \"lease_active\"; leaseExpiresAt: string }\n\t| { outcome: \"not_found\" }\n\t| { outcome: \"conflict\" };\n\nexport class MediaUsageCollectionDeletionRepository {\n\tconstructor(private db: Kysely<Database>) {}\n\n\tasync createTombstone(input: {\n\t\tcollectionId: string;\n\t\tcollectionSlug: string;\n\t\tforceDelete: boolean;\n\t}): Promise<MediaUsageCollectionDeletionRecord> {\n\t\tassertIdentity(input);\n\t\tconst now = timestampOffset(this.db, 0);\n\t\tawait this.db\n\t\t\t.insertInto(\"_emdash_media_usage_collection_deletions\")\n\t\t\t.values({\n\t\t\t\tcollection_id: input.collectionId,\n\t\t\t\tcollection_slug: input.collectionSlug,\n\t\t\t\tforce_delete: input.forceDelete ? 1 : 0,\n\t\t\t\tstate: \"pending\",\n\t\t\t\tphase: \"fence\",\n\t\t\t\tnext_attempt_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t})\n\t\t\t.onConflict((conflict) => conflict.column(\"collection_id\").doNothing())\n\t\t\t.execute();\n\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_media_usage_collection_deletions\")\n\t\t\t.selectAll()\n\t\t\t.where(\"collection_id\", \"=\", input.collectionId)\n\t\t\t.executeTakeFirstOrThrow();\n\t\tif (\n\t\t\trow.collection_slug !== input.collectionSlug ||\n\t\t\tBoolean(row.force_delete) !== input.forceDelete\n\t\t) {\n\t\t\tthrow new Error(\"Collection deletion tombstone identity conflicts with existing work\");\n\t\t}\n\t\treturn rowToRecord(row);\n\t}\n\n\tasync claim(input: {\n\t\tcollectionId: string;\n\t\tphase: MediaUsageCollectionDeletionPhase;\n\t\tleaseDurationSeconds: number;\n\t}): Promise<(MediaUsageCollectionDeletionRecord & { leaseToken: string }) | null> {\n\t\tif (!input.collectionId || !isPhase(input.phase)) {\n\t\t\tthrow new Error(\"Collection deletion claim requires an exact identity and phase\");\n\t\t}\n\t\tif (!Number.isSafeInteger(input.leaseDurationSeconds) || input.leaseDurationSeconds < 1) {\n\t\t\tthrow new Error(\"Collection deletion lease duration must be a positive whole number\");\n\t\t}\n\t\tconst leaseToken = ulid();\n\t\tconst row = await this.db\n\t\t\t.updateTable(\"_emdash_media_usage_collection_deletions\")\n\t\t\t.set({\n\t\t\t\tstate: \"leased\",\n\t\t\t\tlease_token: leaseToken,\n\t\t\t\tlease_expires_at: timestampOffset(this.db, input.leaseDurationSeconds),\n\t\t\t\tupdated_at: timestampOffset(this.db, 0),\n\t\t\t})\n\t\t\t.where(\"collection_id\", \"=\", input.collectionId)\n\t\t\t.where(\"phase\", \"=\", input.phase)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"state\", \"in\", [\"pending\", \"retry\"]),\n\t\t\t\t\t\ttimestampIsDue(this.db, \"next_attempt_at\"),\n\t\t\t\t\t]),\n\t\t\t\t\teb.and([eb(\"state\", \"=\", \"leased\"), timestampIsDue(this.db, \"lease_expires_at\")]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (!row) return null;\n\t\treturn { ...rowToRecord(row), leaseToken };\n\t}\n\n\tasync findBySlug(collectionSlug: string): Promise<MediaUsageCollectionDeletionRecord | null> {\n\t\tvalidateIdentifier(collectionSlug, \"collection slug\");\n\t\ttry {\n\t\t\tconst row = await this.db\n\t\t\t\t.selectFrom(\"_emdash_media_usage_collection_deletions\")\n\t\t\t\t.selectAll()\n\t\t\t\t.where(\"collection_slug\", \"=\", collectionSlug)\n\t\t\t\t.executeTakeFirst();\n\t\t\treturn row ? rowToRecord(row) : null;\n\t\t} catch (error) {\n\t\t\tif (isMissingTableError(error)) return null;\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tasync findDue(limit: number): Promise<MediaUsageCollectionDeletionRecord[]> {\n\t\tif (!Number.isSafeInteger(limit) || limit < 1 || limit > 100) {\n\t\t\tthrow new Error(\"Collection deletion candidate limit must be from 1 to 100\");\n\t\t}\n\t\tconst nextAttemptIsDue = timestampIsDue(this.db, \"next_attempt_at\");\n\t\tconst leaseIsDue = timestampIsDue(this.db, \"lease_expires_at\");\n\t\tconst result = await sql<Selectable<MediaUsageCollectionDeletionTable>>`\n\t\t\tWITH pending_candidates AS (\n\t\t\t\tSELECT * FROM _emdash_media_usage_collection_deletions\n\t\t\t\tWHERE state = 'pending' AND ${nextAttemptIsDue}\n\t\t\t\tORDER BY next_attempt_at, updated_at, collection_id\n\t\t\t\tLIMIT ${limit}\n\t\t\t), retry_candidates AS (\n\t\t\t\tSELECT * FROM _emdash_media_usage_collection_deletions\n\t\t\t\tWHERE state = 'retry' AND ${nextAttemptIsDue}\n\t\t\t\tORDER BY next_attempt_at, updated_at, collection_id\n\t\t\t\tLIMIT ${limit}\n\t\t\t), leased_candidates AS (\n\t\t\t\tSELECT * FROM _emdash_media_usage_collection_deletions\n\t\t\t\tWHERE state = 'leased' AND ${leaseIsDue}\n\t\t\t\tORDER BY lease_expires_at, updated_at, collection_id\n\t\t\t\tLIMIT ${limit}\n\t\t\t), candidates AS (\n\t\t\t\tSELECT * FROM pending_candidates\n\t\t\t\tUNION ALL SELECT * FROM retry_candidates\n\t\t\t\tUNION ALL SELECT * FROM leased_candidates\n\t\t\t)\n\t\t\tSELECT * FROM candidates\n\t\t\tORDER BY CASE WHEN state = 'leased' THEN lease_expires_at ELSE next_attempt_at END,\n\t\t\t\tupdated_at,\n\t\t\t\tcollection_id\n\t\t\tLIMIT ${limit}\n\t\t`.execute(this.db);\n\t\treturn result.rows.map(rowToRecord);\n\t}\n\n\tasync hasNonterminal(): Promise<boolean> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_media_usage_collection_deletions\")\n\t\t\t.select(\"collection_id\")\n\t\t\t.where(\"state\", \"in\", [\"pending\", \"retry\", \"leased\"])\n\t\t\t.limit(1)\n\t\t\t.executeTakeFirst();\n\t\treturn row !== undefined;\n\t}\n\n\tasync findOperatorPage(options: {\n\t\tstate?: MediaUsageCollectionDeletionState;\n\t\tlimit?: number;\n\t\tcursor?: string;\n\t}): Promise<FindManyResult<MediaUsageCollectionDeletionOperatorItem>> {\n\t\tconst state = options.state ?? \"failed\";\n\t\tif (!isState(state)) throw new Error(\"Invalid collection deletion state\");\n\t\tconst limit = options.limit ?? 50;\n\t\tif (!Number.isSafeInteger(limit) || limit < 1 || limit > 100) {\n\t\t\tthrow new Error(\"Collection deletion operator limit must be from 1 to 100\");\n\t\t}\n\t\tconst cursor = options.cursor ? decodeCursor(options.cursor) : null;\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"_emdash_media_usage_collection_deletions\")\n\t\t\t.selectAll()\n\t\t\t.where(\"state\", \"=\", state);\n\t\tif (cursor) {\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"updated_at\", \"<\", cursor.orderValue),\n\t\t\t\t\teb.and([eb(\"updated_at\", \"=\", cursor.orderValue), eb(\"collection_id\", \"<\", cursor.id)]),\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\t\tconst rows = await query\n\t\t\t.orderBy(\"updated_at\", \"desc\")\n\t\t\t.orderBy(\"collection_id\", \"desc\")\n\t\t\t.limit(limit + 1)\n\t\t\t.execute();\n\t\tconst items = rows.slice(0, limit).map(rowToOperatorItem);\n\t\tconst result: FindManyResult<MediaUsageCollectionDeletionOperatorItem> = { items };\n\t\tif (rows.length > limit && items.length > 0) {\n\t\t\tconst last = items.at(-1)!;\n\t\t\tresult.nextCursor = encodeCursor(last.updatedAt, last.collectionId);\n\t\t}\n\t\treturn result;\n\t}\n\n\tasync retryOperatorDeletion(input: {\n\t\tcollectionId: string;\n\t}): Promise<MediaUsageCollectionDeletionRetryResult> {\n\t\tif (!input.collectionId) throw new Error(\"Collection deletion retry requires an ID\");\n\t\tconst observed = await this.db\n\t\t\t.selectFrom(\"_emdash_media_usage_collection_deletions\")\n\t\t\t.selectAll()\n\t\t\t.where(\"collection_id\", \"=\", input.collectionId)\n\t\t\t.executeTakeFirst();\n\t\tif (!observed) return { outcome: \"not_found\" };\n\t\tif (observed.state === \"leased\" && observed.lease_expires_at) {\n\t\t\tconst live = await this.db\n\t\t\t\t.selectFrom(\"_emdash_media_usage_collection_deletions\")\n\t\t\t\t.select(\"lease_expires_at\")\n\t\t\t\t.where(\"collection_id\", \"=\", input.collectionId)\n\t\t\t\t.where(\"state\", \"=\", \"leased\")\n\t\t\t\t.where(liveLease(this.db))\n\t\t\t\t.executeTakeFirst();\n\t\t\tif (live?.lease_expires_at) {\n\t\t\t\treturn { outcome: \"lease_active\", leaseExpiresAt: live.lease_expires_at };\n\t\t\t}\n\t\t}\n\t\tconst now = timestampOffset(this.db, 0);\n\t\tconst reopened = await this.db\n\t\t\t.updateTable(\"_emdash_media_usage_collection_deletions\")\n\t\t\t.set({\n\t\t\t\tstate: \"pending\",\n\t\t\t\tattempt_count: 0,\n\t\t\t\tnext_attempt_at: now,\n\t\t\t\tlease_token: null,\n\t\t\t\tlease_expires_at: null,\n\t\t\t\tlast_error_code: null,\n\t\t\t\tupdated_at: now,\n\t\t\t})\n\t\t\t.where(\"collection_id\", \"=\", input.collectionId)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"state\", \"in\", [\"failed\", \"retry\"]),\n\t\t\t\t\teb.and([eb(\"state\", \"=\", \"leased\"), timestampIsDue(this.db, \"lease_expires_at\")]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (reopened) {\n\t\t\treturn { outcome: \"pending\", changed: true, item: rowToOperatorItem(reopened) };\n\t\t}\n\t\treturn { outcome: \"conflict\" };\n\t}\n\n\tasync checkpoint(input: {\n\t\tcollectionId: string;\n\t\tleaseToken: string;\n\t\tfromPhase: MediaUsageCollectionDeletionPhase;\n\t\ttoPhase: MediaUsageCollectionDeletionPhase;\n\t}): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.updateTable(\"_emdash_media_usage_collection_deletions\")\n\t\t\t.set({\n\t\t\t\tphase: input.toPhase,\n\t\t\t\tattempt_count: 0,\n\t\t\t\tlast_error_code: null,\n\t\t\t\tupdated_at: timestampOffset(this.db, 0),\n\t\t\t})\n\t\t\t.where(\"collection_id\", \"=\", input.collectionId)\n\t\t\t.where(\"state\", \"=\", \"leased\")\n\t\t\t.where(\"phase\", \"=\", input.fromPhase)\n\t\t\t.where(\"lease_token\", \"=\", input.leaseToken)\n\t\t\t.where(liveLease(this.db))\n\t\t\t.executeTakeFirst();\n\t\treturn Number(result.numUpdatedRows ?? 0) === 1;\n\t}\n\n\tasync release(input: { collectionId: string; leaseToken: string }): Promise<boolean> {\n\t\tconst now = timestampOffset(this.db, 0);\n\t\tconst result = await this.db\n\t\t\t.updateTable(\"_emdash_media_usage_collection_deletions\")\n\t\t\t.set({\n\t\t\t\tstate: \"pending\",\n\t\t\t\tnext_attempt_at: now,\n\t\t\t\tlease_token: null,\n\t\t\t\tlease_expires_at: null,\n\t\t\t\tattempt_count: 0,\n\t\t\t\tlast_error_code: null,\n\t\t\t\tupdated_at: now,\n\t\t\t})\n\t\t\t.where(\"collection_id\", \"=\", input.collectionId)\n\t\t\t.where(\"state\", \"=\", \"leased\")\n\t\t\t.where(\"lease_token\", \"=\", input.leaseToken)\n\t\t\t.where(liveLease(this.db))\n\t\t\t.executeTakeFirst();\n\t\treturn Number(result.numUpdatedRows ?? 0) === 1;\n\t}\n\n\tasync cancelFence(input: { collectionId: string; leaseToken: string }): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_emdash_media_usage_collection_deletions\")\n\t\t\t.where(\"collection_id\", \"=\", input.collectionId)\n\t\t\t.where(\"state\", \"=\", \"leased\")\n\t\t\t.where(\"phase\", \"=\", \"fence\")\n\t\t\t.where(\"lease_token\", \"=\", input.leaseToken)\n\t\t\t.where(liveLease(this.db))\n\t\t\t.executeTakeFirst();\n\t\treturn Number(result.numDeletedRows ?? 0) === 1;\n\t}\n\n\tasync recordFailure(input: {\n\t\tcollectionId: string;\n\t\tleaseToken: string;\n\t\terrorCode: string;\n\t\tterminal: boolean;\n\t\tretryDelaySeconds: number;\n\t}): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.updateTable(\"_emdash_media_usage_collection_deletions\")\n\t\t\t.set({\n\t\t\t\tstate: input.terminal ? \"failed\" : \"retry\",\n\t\t\t\tattempt_count: sql<number>`attempt_count + 1`,\n\t\t\t\tnext_attempt_at: timestampOffset(this.db, input.retryDelaySeconds),\n\t\t\t\tlease_token: null,\n\t\t\t\tlease_expires_at: null,\n\t\t\t\tlast_error_code: input.errorCode,\n\t\t\t\tupdated_at: timestampOffset(this.db, 0),\n\t\t\t})\n\t\t\t.where(\"collection_id\", \"=\", input.collectionId)\n\t\t\t.where(\"state\", \"=\", \"leased\")\n\t\t\t.where(\"lease_token\", \"=\", input.leaseToken)\n\t\t\t.where(liveLease(this.db))\n\t\t\t.executeTakeFirst();\n\t\treturn Number(result.numUpdatedRows ?? 0) === 1;\n\t}\n\n\tasync deleteRegistryAndCheckpoint(input: {\n\t\tcollectionId: string;\n\t\tcollectionSlug: string;\n\t\tleaseToken: string;\n\t}): Promise<boolean> {\n\t\treturn withTransaction(this.db, async (trx) => {\n\t\t\tawait trx\n\t\t\t\t.deleteFrom(\"_emdash_collections\")\n\t\t\t\t.where(\"id\", \"=\", input.collectionId)\n\t\t\t\t.where(\"slug\", \"=\", input.collectionSlug)\n\t\t\t\t.where((eb) =>\n\t\t\t\t\teb.exists(\n\t\t\t\t\t\teb\n\t\t\t\t\t\t\t.selectFrom(\"_emdash_media_usage_collection_deletions as deletion\")\n\t\t\t\t\t\t\t.select(\"deletion.collection_id\")\n\t\t\t\t\t\t\t.where(\"deletion.collection_id\", \"=\", input.collectionId)\n\t\t\t\t\t\t\t.where(\"deletion.collection_slug\", \"=\", input.collectionSlug)\n\t\t\t\t\t\t\t.where(\"deletion.state\", \"=\", \"leased\")\n\t\t\t\t\t\t\t.where(\"deletion.phase\", \"=\", \"registry\")\n\t\t\t\t\t\t\t.where(\"deletion.lease_token\", \"=\", input.leaseToken)\n\t\t\t\t\t\t\t.where(liveLease(trx, \"deletion.lease_expires_at\")),\n\t\t\t\t\t),\n\t\t\t\t)\n\t\t\t\t.execute();\n\n\t\t\tconst checkpoint = await trx\n\t\t\t\t.updateTable(\"_emdash_media_usage_collection_deletions\")\n\t\t\t\t.set({ phase: \"table\", updated_at: timestampOffset(trx, 0) })\n\t\t\t\t.where(\"collection_id\", \"=\", input.collectionId)\n\t\t\t\t.where(\"collection_slug\", \"=\", input.collectionSlug)\n\t\t\t\t.where(\"state\", \"=\", \"leased\")\n\t\t\t\t.where(\"phase\", \"=\", \"registry\")\n\t\t\t\t.where(\"lease_token\", \"=\", input.leaseToken)\n\t\t\t\t.where(liveLease(trx))\n\t\t\t\t.executeTakeFirst();\n\t\t\treturn Number(checkpoint.numUpdatedRows ?? 0) === 1;\n\t\t});\n\t}\n}\n\nexport type ActivatedCollectionDeletionOutcome =\n\t| \"inactive\"\n\t| \"not_found\"\n\t| \"in_progress\"\n\t| \"advanced\"\n\t| \"deleted\"\n\t| \"has_content\";\n\nexport async function deleteActivatedMediaUsageCollection(\n\tdb: Kysely<Database>,\n\tinput: {\n\t\tcollectionSlug: string;\n\t\tcollectionId?: string;\n\t\tforceDelete: boolean;\n\t},\n\toptions: {\n\t\tfrontPhaseLimit?: number;\n\t\tclaimed?: MediaUsageCollectionDeletionRecord & { leaseToken: string };\n\t} = {},\n): Promise<ActivatedCollectionDeletionOutcome> {\n\tconst frontPhaseLimit = options.frontPhaseLimit ?? 3;\n\tif (!Number.isSafeInteger(frontPhaseLimit) || frontPhaseLimit < 1 || frontPhaseLimit > 3) {\n\t\tthrow new Error(\"Collection deletion front-phase limit must be from 1 to 3\");\n\t}\n\tvalidateIdentifier(input.collectionSlug, \"collection slug\");\n\tconst repository = new MediaUsageCollectionDeletionRepository(db);\n\tlet deletion = await repository.findBySlug(input.collectionSlug);\n\tif (deletion && input.collectionId && deletion.collectionId !== input.collectionId) {\n\t\tthrow new Error(\"Collection deletion tombstone identity conflict\");\n\t}\n\tif (!deletion) {\n\t\tlet activation: { state: string } | undefined;\n\t\ttry {\n\t\t\tactivation = await db\n\t\t\t\t.selectFrom(\"_emdash_media_usage_activation\")\n\t\t\t\t.select(\"state\")\n\t\t\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t\t\t.executeTakeFirst();\n\t\t} catch (error) {\n\t\t\tif (!isMissingTableError(error)) throw error;\n\t\t}\n\t\tif (!activation || activation.state === \"expanded\") return \"inactive\";\n\t\tif (activation.state !== \"active\") {\n\t\t\tthrow new Error(\"Media usage activation must be active before collection deletion\");\n\t\t}\n\t\tif (!input.collectionId) return \"not_found\";\n\t\tawait assertActivatedCollectionDeletionReady(db, {\n\t\t\tcollectionId: input.collectionId,\n\t\t\tcollectionSlug: input.collectionSlug,\n\t\t});\n\t\tdeletion = await repository.createTombstone({\n\t\t\tcollectionId: input.collectionId,\n\t\t\tcollectionSlug: input.collectionSlug,\n\t\t\tforceDelete: input.forceDelete,\n\t\t});\n\t}\n\n\tif (deletion.phase !== \"fence\" && deletion.phase !== \"registry\" && deletion.phase !== \"table\") {\n\t\treturn \"deleted\";\n\t}\n\tconst claim =\n\t\toptions.claimed ??\n\t\t(await repository.claim({\n\t\t\tcollectionId: deletion.collectionId,\n\t\t\tphase: deletion.phase,\n\t\t\tleaseDurationSeconds: 5 * 60,\n\t\t}));\n\tif (!claim) return \"in_progress\";\n\tif (claim.collectionId !== deletion.collectionId || claim.phase !== deletion.phase) {\n\t\tthrow new Error(\"Collection deletion claim identity conflict\");\n\t}\n\tlet phase = claim.phase;\n\tlet processedFrontPhases = 0;\n\tconst lease = { collectionId: claim.collectionId, leaseToken: claim.leaseToken };\n\n\tif (phase === \"fence\") {\n\t\tconst captureState = await findCollectionCaptureState(db, claim);\n\t\tif (captureState !== \"active\" && captureState !== \"deleting\") {\n\t\t\tthrow new Error(\"Activated collection deletion requires a fenced capture lifecycle\");\n\t\t}\n\t\tif (!(await verifyMediaUsageCaptureTriggers(db, claim))) {\n\t\t\tthrow new Error(\"Activated collection deletion requires the exact capture trigger set\");\n\t\t}\n\t\tif (captureState === \"active\") {\n\t\t\tconst result = await executeCollectionDeletionGuard(db, {\n\t\t\t\taction: \"fence\",\n\t\t\t\tcollectionId: claim.collectionId,\n\t\t\t\tcollectionSlug: claim.collectionSlug,\n\t\t\t\tleaseToken: claim.leaseToken,\n\t\t\t\tforceDelete: claim.forceDelete,\n\t\t\t});\n\t\t\tif (result.outcome === \"has_content\") {\n\t\t\t\tif (!(await repository.cancelFence(lease))) {\n\t\t\t\t\tthrow new Error(\"Collection deletion lost its fence while preserving content\");\n\t\t\t\t}\n\t\t\t\treturn \"has_content\";\n\t\t\t}\n\t\t\tif (result.outcome !== \"fenced\") throw new Error(\"Collection deletion lost its fence\");\n\t\t}\n\t\tif (\n\t\t\t!(await repository.checkpoint({\n\t\t\t\t...lease,\n\t\t\t\tfromPhase: \"fence\",\n\t\t\t\ttoPhase: \"registry\",\n\t\t\t}))\n\t\t) {\n\t\t\tthrow new Error(\"Collection deletion lost its fence checkpoint\");\n\t\t}\n\t\tphase = \"registry\";\n\t\tprocessedFrontPhases++;\n\t\tif (processedFrontPhases >= frontPhaseLimit) {\n\t\t\tif (!(await repository.release(lease)))\n\t\t\t\tthrow new Error(\"Collection deletion lost its handoff\");\n\t\t\treturn \"advanced\";\n\t\t}\n\t}\n\n\tif (phase === \"registry\") {\n\t\tif (\n\t\t\t!(await repository.deleteRegistryAndCheckpoint({\n\t\t\t\t...lease,\n\t\t\t\tcollectionSlug: claim.collectionSlug,\n\t\t\t}))\n\t\t) {\n\t\t\tthrow new Error(\"Collection deletion lost its registry checkpoint\");\n\t\t}\n\t\tphase = \"table\";\n\t\tprocessedFrontPhases++;\n\t\tif (processedFrontPhases >= frontPhaseLimit) {\n\t\t\tif (!(await repository.release(lease)))\n\t\t\t\tthrow new Error(\"Collection deletion lost its handoff\");\n\t\t\treturn \"advanced\";\n\t\t}\n\t}\n\n\tif (phase === \"table\") {\n\t\tconst result = await executeCollectionDeletionGuard(db, {\n\t\t\taction: \"drop\",\n\t\t\tcollectionId: claim.collectionId,\n\t\t\tcollectionSlug: claim.collectionSlug,\n\t\t\tleaseToken: claim.leaseToken,\n\t\t});\n\t\tif (result.outcome !== \"dropped\") throw new Error(\"Collection deletion lost its table fence\");\n\t\tif (\n\t\t\t!(await repository.checkpoint({\n\t\t\t\t...lease,\n\t\t\t\tfromPhase: \"table\",\n\t\t\t\ttoPhase: \"work\",\n\t\t\t}))\n\t\t) {\n\t\t\tthrow new Error(\"Collection deletion lost its table checkpoint\");\n\t\t}\n\t}\n\n\tif (!(await repository.release(lease))) {\n\t\tthrow new Error(\"Collection deletion lost its cleanup handoff\");\n\t}\n\treturn \"deleted\";\n}\n\nexport async function isMediaUsageCollectionSlugDeleting(\n\tdb: Kysely<Database>,\n\tcollectionSlug: string,\n): Promise<boolean> {\n\tvalidateIdentifier(collectionSlug, \"collection slug\");\n\ttry {\n\t\tconst row = await db\n\t\t\t.selectFrom(\"_emdash_media_usage_collection_deletions\")\n\t\t\t.select(\"collection_id\")\n\t\t\t.where(\"collection_slug\", \"=\", collectionSlug)\n\t\t\t.executeTakeFirst();\n\t\treturn row !== undefined;\n\t} catch (error) {\n\t\tif (isMissingTableError(error)) return false;\n\t\tthrow error;\n\t}\n}\n\nasync function assertActivatedCollectionDeletionReady(\n\tdb: Kysely<Database>,\n\tidentity: { collectionId: string; collectionSlug: string },\n): Promise<void> {\n\tconst captureState = await findCollectionCaptureState(db, identity);\n\tif (captureState !== \"active\") {\n\t\tthrow new Error(\"Activated collection deletion requires an active capture lifecycle\");\n\t}\n\tif (!(await verifyMediaUsageCaptureTriggers(db, identity))) {\n\t\tthrow new Error(\"Activated collection deletion requires the exact capture trigger set\");\n\t}\n}\n\nasync function findCollectionCaptureState(\n\tdb: Kysely<Database>,\n\tidentity: { collectionId: string; collectionSlug: string },\n): Promise<string | null> {\n\tconst lifecycle = await db\n\t\t.selectFrom(\"_emdash_media_usage_index_status\")\n\t\t.select(\"capture_state\")\n\t\t.where(\"adapter_id\", \"=\", \"content-media\")\n\t\t.where(\"scope_type\", \"=\", \"collection\")\n\t\t.where(\"scope_key\", \"=\", identity.collectionSlug)\n\t\t.where(\"collection_id\", \"=\", identity.collectionId)\n\t\t.executeTakeFirst();\n\treturn lifecycle?.capture_state ?? null;\n}\n\nasync function executeCollectionDeletionGuard(\n\tdb: Kysely<Database>,\n\tinput: CollectionDeletionGuardInput,\n): Promise<CollectionDeletionGuardResult> {\n\tconst executeAdapterGuard = await loadAdapterCollectionDeletionGuard();\n\tif (executeAdapterGuard) {\n\t\tconst { default: config } = await import(\"virtual:emdash/config\");\n\t\treturn executeAdapterGuard(config.database?.config, input);\n\t}\n\treturn executeLocalCollectionDeletionGuard(db, input);\n}\n\nasync function loadAdapterCollectionDeletionGuard(): Promise<\n\timport(\"../../db/adapters.js\").ExecuteCollectionDeletionGuard | undefined\n> {\n\ttry {\n\t\tconst dialect = await import(\"virtual:emdash/dialect\");\n\t\treturn dialect.executeCollectionDeletionGuard;\n\t} catch (error) {\n\t\tif (isVirtualDialectUnavailableError(error)) return undefined;\n\t\tthrow error;\n\t}\n}\n\nexport function isVirtualDialectUnavailableError(error: unknown): boolean {\n\tif (!(error instanceof Error) || !(\"code\" in error)) return false;\n\tif (error.code === \"ERR_MODULE_NOT_FOUND\") return error.message.includes(VIRTUAL_DIALECT_ID);\n\treturn (\n\t\terror.code === \"ERR_UNSUPPORTED_ESM_URL_SCHEME\" &&\n\t\terror.message.includes(\"Received protocol 'virtual:'\")\n\t);\n}\n\nexport async function executeLocalCollectionDeletionGuard(\n\tdb: Kysely<Database>,\n\tinput: CollectionDeletionGuardInput,\n): Promise<CollectionDeletionGuardResult> {\n\tassertGuardInput(input);\n\treturn db.transaction().execute(async (trx) => {\n\t\tif (!(await lockLiveTombstone(trx, input))) return { outcome: \"stale\" };\n\t\tif (input.action === \"fence\") return fenceCollection(trx, input);\n\n\t\tconst fts = new FTSManager(trx);\n\t\tawait fts.dropFtsTable(input.collectionSlug);\n\t\tawait sql`DROP TABLE IF EXISTS ${sql.ref(`ec_${input.collectionSlug}`)}`.execute(trx);\n\t\treturn { outcome: \"dropped\" };\n\t});\n}\n\nasync function fenceCollection(\n\ttrx: Transaction<Database>,\n\tinput: Extract<CollectionDeletionGuardInput, { action: \"fence\" }>,\n): Promise<CollectionDeletionGuardResult> {\n\tconst tableName = `ec_${input.collectionSlug}`;\n\tvalidateIdentifier(tableName, \"content table\");\n\tif (isPostgres(trx)) {\n\t\tawait sql`LOCK TABLE ${sql.ref(tableName)} IN SHARE ROW EXCLUSIVE MODE`.execute(trx);\n\t}\n\n\tif (!input.forceDelete) {\n\t\tconst content = await sql<{ present: number }>`\n\t\t\tSELECT 1 AS present FROM ${sql.ref(tableName)}\n\t\t\tWHERE deleted_at IS NULL\n\t\t\tLIMIT 1\n\t\t`.execute(trx);\n\t\tif (content.rows.length > 0) return { outcome: \"has_content\" };\n\t}\n\n\tconst result = await trx\n\t\t.updateTable(\"_emdash_media_usage_index_status as status\")\n\t\t.set({ capture_state: \"deleting\", updated_at: timestampOffset(trx, 0) })\n\t\t.where(\"status.adapter_id\", \"=\", \"content-media\")\n\t\t.where(\"status.scope_type\", \"=\", \"collection\")\n\t\t.where(\"status.scope_key\", \"=\", input.collectionSlug)\n\t\t.where(\"status.collection_id\", \"=\", input.collectionId)\n\t\t.where(\"status.capture_state\", \"=\", \"active\")\n\t\t.where((eb) =>\n\t\t\teb.exists(\n\t\t\t\teb\n\t\t\t\t\t.selectFrom(\"_emdash_collections as collection\")\n\t\t\t\t\t.select(\"collection.id\")\n\t\t\t\t\t.where(\"collection.id\", \"=\", input.collectionId)\n\t\t\t\t\t.where(\"collection.slug\", \"=\", input.collectionSlug),\n\t\t\t),\n\t\t)\n\t\t.executeTakeFirst();\n\treturn Number(result.numUpdatedRows ?? 0) === 1 ? { outcome: \"fenced\" } : { outcome: \"stale\" };\n}\n\nasync function lockLiveTombstone(\n\ttrx: Transaction<Database>,\n\tinput: CollectionDeletionGuardInput,\n): Promise<boolean> {\n\tconst phase = input.action === \"fence\" ? \"fence\" : \"table\";\n\tif (isPostgres(trx)) {\n\t\tconst row = await trx\n\t\t\t.selectFrom(\"_emdash_media_usage_collection_deletions\")\n\t\t\t.select(\"collection_id\")\n\t\t\t.where(\"collection_id\", \"=\", input.collectionId)\n\t\t\t.where(\"collection_slug\", \"=\", input.collectionSlug)\n\t\t\t.where(\"state\", \"=\", \"leased\")\n\t\t\t.where(\"phase\", \"=\", phase)\n\t\t\t.where(\"lease_token\", \"=\", input.leaseToken)\n\t\t\t.where(liveLease(trx))\n\t\t\t.forUpdate()\n\t\t\t.executeTakeFirst();\n\t\treturn row !== undefined;\n\t}\n\n\tconst locked = await trx\n\t\t.updateTable(\"_emdash_media_usage_collection_deletions\")\n\t\t.set({ updated_at: sql<string>`updated_at` })\n\t\t.where(\"collection_id\", \"=\", input.collectionId)\n\t\t.where(\"collection_slug\", \"=\", input.collectionSlug)\n\t\t.where(\"state\", \"=\", \"leased\")\n\t\t.where(\"phase\", \"=\", phase)\n\t\t.where(\"lease_token\", \"=\", input.leaseToken)\n\t\t.where(liveLease(trx))\n\t\t.executeTakeFirst();\n\treturn Number(locked.numUpdatedRows ?? 0) === 1;\n}\n\nfunction assertIdentity(input: { collectionId: string; collectionSlug: string }): void {\n\tif (!input.collectionId) throw new Error(\"Collection deletion requires a collection ID\");\n\tvalidateIdentifier(input.collectionSlug, \"collection slug\");\n}\n\nfunction assertGuardInput(input: CollectionDeletionGuardInput): void {\n\tassertIdentity(input);\n\tif (!input.leaseToken) throw new Error(\"Collection deletion requires a lease token\");\n}\n\nfunction liveLease(db: Kysely<Database>, column = \"lease_expires_at\"): RawBuilder<boolean> {\n\tconst leaseExpiresAt = sql.ref(column);\n\treturn isPostgres(db)\n\t\t? sql<boolean>`${leaseExpiresAt}::timestamptz > clock_timestamp()`\n\t\t: sql<boolean>`${leaseExpiresAt} > strftime('%Y-%m-%dT%H:%M:%fZ', 'now')`;\n}\n\nfunction timestampIsDue(\n\tdb: Kysely<Database>,\n\tcolumn: \"next_attempt_at\" | \"lease_expires_at\",\n): RawBuilder<boolean> {\n\treturn isPostgres(db)\n\t\t? sql<boolean>`${sql.ref(column)} <= to_char(\n\t\t\tstatement_timestamp() AT TIME ZONE 'UTC',\n\t\t\t'YYYY-MM-DD\"T\"HH24:MI:SS.MS\"Z\"'\n\t\t)`\n\t\t: sql<boolean>`${sql.ref(column)} <= strftime('%Y-%m-%dT%H:%M:%fZ', 'now')`;\n}\n\nfunction timestampOffset(db: Kysely<Database>, offsetSeconds: number): RawBuilder<string> {\n\tif (isPostgres(db)) {\n\t\treturn sql<string>`to_char(\n\t\t\t(clock_timestamp() AT TIME ZONE 'UTC') + (${offsetSeconds} * INTERVAL '1 second'),\n\t\t\t'YYYY-MM-DD\"T\"HH24:MI:SS.MS\"Z\"'\n\t\t)`;\n\t}\n\treturn sql<string>`strftime(\n\t\t'%Y-%m-%dT%H:%M:%fZ',\n\t\t'now',\n\t\t${`${offsetSeconds >= 0 ? \"+\" : \"\"}${offsetSeconds} seconds`}\n\t)`;\n}\n\nexport function collectionDeletionCurrentTimestamp(db: Kysely<Database>): RawBuilder<string> {\n\treturn timestampOffset(db, 0);\n}\n\nfunction rowToRecord(\n\trow: Selectable<MediaUsageCollectionDeletionTable>,\n): MediaUsageCollectionDeletionRecord {\n\tif (!isState(row.state) || !isPhase(row.phase)) {\n\t\tthrow new Error(\"Invalid media usage collection deletion lifecycle\");\n\t}\n\treturn {\n\t\tcollectionId: row.collection_id,\n\t\tcollectionSlug: row.collection_slug,\n\t\tforceDelete: Boolean(row.force_delete),\n\t\tstate: row.state,\n\t\tphase: row.phase,\n\t\tworkCursor: row.work_cursor,\n\t\tsourceKey: row.source_key,\n\t\toccurrenceCursor: row.occurrence_cursor,\n\t\tattemptCount: row.attempt_count,\n\t\tnextAttemptAt: row.next_attempt_at,\n\t\tleaseToken: row.lease_token,\n\t\tleaseExpiresAt: row.lease_expires_at,\n\t\tlastErrorCode: row.last_error_code,\n\t\tcreatedAt: row.created_at,\n\t\tupdatedAt: row.updated_at,\n\t};\n}\n\nfunction rowToOperatorItem(\n\trow: Selectable<MediaUsageCollectionDeletionTable>,\n): MediaUsageCollectionDeletionOperatorItem {\n\tconst deletion = rowToRecord(row);\n\treturn {\n\t\tcollectionId: deletion.collectionId,\n\t\tcollectionSlug: deletion.collectionSlug,\n\t\tstate: deletion.state,\n\t\tphase: deletion.phase,\n\t\tattemptCount: deletion.attemptCount,\n\t\tnextAttemptAt: deletion.nextAttemptAt,\n\t\tleaseExpiresAt: deletion.leaseExpiresAt,\n\t\tlastErrorCode: deletion.lastErrorCode,\n\t\tupdatedAt: deletion.updatedAt,\n\t};\n}\n\nfunction isState(value: string): value is MediaUsageCollectionDeletionState {\n\treturn value === \"pending\" || value === \"retry\" || value === \"leased\" || value === \"failed\";\n}\n\nfunction isPhase(value: string): value is MediaUsageCollectionDeletionPhase {\n\treturn (\n\t\tvalue === \"fence\" ||\n\t\tvalue === \"registry\" ||\n\t\tvalue === \"table\" ||\n\t\tvalue === \"work\" ||\n\t\tvalue === \"sources\" ||\n\t\tvalue === \"status\" ||\n\t\tvalue === \"finalize\"\n\t);\n}\n"],"mappings":";;;;;;;;;;;AAoBA,MAAM,iBAAiB;AACvB,MAAM,qBAAqB;AAgD3B,IAAa,yCAAb,MAAoD;CACnD,YAAY,AAAQ,IAAsB;EAAtB;;CAEpB,MAAM,gBAAgB,OAI0B;AAC/C,iBAAe,MAAM;EACrB,MAAM,MAAM,gBAAgB,KAAK,IAAI,EAAE;AACvC,QAAM,KAAK,GACT,WAAW,2CAA2C,CACtD,OAAO;GACP,eAAe,MAAM;GACrB,iBAAiB,MAAM;GACvB,cAAc,MAAM,cAAc,IAAI;GACtC,OAAO;GACP,OAAO;GACP,iBAAiB;GACjB,YAAY;GACZ,CAAC,CACD,YAAY,aAAa,SAAS,OAAO,gBAAgB,CAAC,WAAW,CAAC,CACtE,SAAS;EAEX,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,2CAA2C,CACtD,WAAW,CACX,MAAM,iBAAiB,KAAK,MAAM,aAAa,CAC/C,yBAAyB;AAC3B,MACC,IAAI,oBAAoB,MAAM,kBAC9B,QAAQ,IAAI,aAAa,KAAK,MAAM,YAEpC,OAAM,IAAI,MAAM,sEAAsE;AAEvF,SAAO,YAAY,IAAI;;CAGxB,MAAM,MAAM,OAIsE;AACjF,MAAI,CAAC,MAAM,gBAAgB,CAAC,QAAQ,MAAM,MAAM,CAC/C,OAAM,IAAI,MAAM,iEAAiE;AAElF,MAAI,CAAC,OAAO,cAAc,MAAM,qBAAqB,IAAI,MAAM,uBAAuB,EACrF,OAAM,IAAI,MAAM,qEAAqE;EAEtF,MAAM,aAAa,MAAM;EACzB,MAAM,MAAM,MAAM,KAAK,GACrB,YAAY,2CAA2C,CACvD,IAAI;GACJ,OAAO;GACP,aAAa;GACb,kBAAkB,gBAAgB,KAAK,IAAI,MAAM,qBAAqB;GACtE,YAAY,gBAAgB,KAAK,IAAI,EAAE;GACvC,CAAC,CACD,MAAM,iBAAiB,KAAK,MAAM,aAAa,CAC/C,MAAM,SAAS,KAAK,MAAM,MAAM,CAChC,OAAO,OACP,GAAG,GAAG,CACL,GAAG,IAAI,CACN,GAAG,SAAS,MAAM,CAAC,WAAW,QAAQ,CAAC,EACvC,eAAe,KAAK,IAAI,kBAAkB,CAC1C,CAAC,EACF,GAAG,IAAI,CAAC,GAAG,SAAS,KAAK,SAAS,EAAE,eAAe,KAAK,IAAI,mBAAmB,CAAC,CAAC,CACjF,CAAC,CACF,CACA,cAAc,CACd,kBAAkB;AACpB,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO;GAAE,GAAG,YAAY,IAAI;GAAE;GAAY;;CAG3C,MAAM,WAAW,gBAA4E;AAC5F,qBAAmB,gBAAgB,kBAAkB;AACrD,MAAI;GACH,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,2CAA2C,CACtD,WAAW,CACX,MAAM,mBAAmB,KAAK,eAAe,CAC7C,kBAAkB;AACpB,UAAO,MAAM,YAAY,IAAI,GAAG;WACxB,OAAO;AACf,OAAI,oBAAoB,MAAM,CAAE,QAAO;AACvC,SAAM;;;CAIR,MAAM,QAAQ,OAA8D;AAC3E,MAAI,CAAC,OAAO,cAAc,MAAM,IAAI,QAAQ,KAAK,QAAQ,IACxD,OAAM,IAAI,MAAM,4DAA4D;EAE7E,MAAM,mBAAmB,eAAe,KAAK,IAAI,kBAAkB;AA6BnE,UA3Be,MAAM,GAAkD;;;kCAGvC,iBAAiB;;YAEvC,MAAM;;;gCAGc,iBAAiB;;YAErC,MAAM;;;iCAXG,eAAe,KAAK,IAAI,mBAAmB,CAcpB;;YAEhC,MAAM;;;;;;;;;;WAUP,MAAM;IACb,QAAQ,KAAK,GAAG,EACJ,KAAK,IAAI,YAAY;;CAGpC,MAAM,iBAAmC;AAOxC,SANY,MAAM,KAAK,GACrB,WAAW,2CAA2C,CACtD,OAAO,gBAAgB,CACvB,MAAM,SAAS,MAAM;GAAC;GAAW;GAAS;GAAS,CAAC,CACpD,MAAM,EAAE,CACR,kBAAkB,KACL;;CAGhB,MAAM,iBAAiB,SAI+C;EACrE,MAAM,QAAQ,QAAQ,SAAS;AAC/B,MAAI,CAAC,QAAQ,MAAM,CAAE,OAAM,IAAI,MAAM,oCAAoC;EACzE,MAAM,QAAQ,QAAQ,SAAS;AAC/B,MAAI,CAAC,OAAO,cAAc,MAAM,IAAI,QAAQ,KAAK,QAAQ,IACxD,OAAM,IAAI,MAAM,2DAA2D;EAE5E,MAAM,SAAS,QAAQ,SAAS,aAAa,QAAQ,OAAO,GAAG;EAC/D,IAAI,QAAQ,KAAK,GACf,WAAW,2CAA2C,CACtD,WAAW,CACX,MAAM,SAAS,KAAK,MAAM;AAC5B,MAAI,OACH,SAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAG,cAAc,KAAK,OAAO,WAAW,EACxC,GAAG,IAAI,CAAC,GAAG,cAAc,KAAK,OAAO,WAAW,EAAE,GAAG,iBAAiB,KAAK,OAAO,GAAG,CAAC,CAAC,CACvF,CAAC,CACF;EAEF,MAAM,OAAO,MAAM,MACjB,QAAQ,cAAc,OAAO,CAC7B,QAAQ,iBAAiB,OAAO,CAChC,MAAM,QAAQ,EAAE,CAChB,SAAS;EACX,MAAM,QAAQ,KAAK,MAAM,GAAG,MAAM,CAAC,IAAI,kBAAkB;EACzD,MAAM,SAAmE,EAAE,OAAO;AAClF,MAAI,KAAK,SAAS,SAAS,MAAM,SAAS,GAAG;GAC5C,MAAM,OAAO,MAAM,GAAG,GAAG;AACzB,UAAO,aAAa,aAAa,KAAK,WAAW,KAAK,aAAa;;AAEpE,SAAO;;CAGR,MAAM,sBAAsB,OAEyB;AACpD,MAAI,CAAC,MAAM,aAAc,OAAM,IAAI,MAAM,2CAA2C;EACpF,MAAM,WAAW,MAAM,KAAK,GAC1B,WAAW,2CAA2C,CACtD,WAAW,CACX,MAAM,iBAAiB,KAAK,MAAM,aAAa,CAC/C,kBAAkB;AACpB,MAAI,CAAC,SAAU,QAAO,EAAE,SAAS,aAAa;AAC9C,MAAI,SAAS,UAAU,YAAY,SAAS,kBAAkB;GAC7D,MAAM,OAAO,MAAM,KAAK,GACtB,WAAW,2CAA2C,CACtD,OAAO,mBAAmB,CAC1B,MAAM,iBAAiB,KAAK,MAAM,aAAa,CAC/C,MAAM,SAAS,KAAK,SAAS,CAC7B,MAAM,UAAU,KAAK,GAAG,CAAC,CACzB,kBAAkB;AACpB,OAAI,MAAM,iBACT,QAAO;IAAE,SAAS;IAAgB,gBAAgB,KAAK;IAAkB;;EAG3E,MAAM,MAAM,gBAAgB,KAAK,IAAI,EAAE;EACvC,MAAM,WAAW,MAAM,KAAK,GAC1B,YAAY,2CAA2C,CACvD,IAAI;GACJ,OAAO;GACP,eAAe;GACf,iBAAiB;GACjB,aAAa;GACb,kBAAkB;GAClB,iBAAiB;GACjB,YAAY;GACZ,CAAC,CACD,MAAM,iBAAiB,KAAK,MAAM,aAAa,CAC/C,OAAO,OACP,GAAG,GAAG,CACL,GAAG,SAAS,MAAM,CAAC,UAAU,QAAQ,CAAC,EACtC,GAAG,IAAI,CAAC,GAAG,SAAS,KAAK,SAAS,EAAE,eAAe,KAAK,IAAI,mBAAmB,CAAC,CAAC,CACjF,CAAC,CACF,CACA,cAAc,CACd,kBAAkB;AACpB,MAAI,SACH,QAAO;GAAE,SAAS;GAAW,SAAS;GAAM,MAAM,kBAAkB,SAAS;GAAE;AAEhF,SAAO,EAAE,SAAS,YAAY;;CAG/B,MAAM,WAAW,OAKI;EACpB,MAAM,SAAS,MAAM,KAAK,GACxB,YAAY,2CAA2C,CACvD,IAAI;GACJ,OAAO,MAAM;GACb,eAAe;GACf,iBAAiB;GACjB,YAAY,gBAAgB,KAAK,IAAI,EAAE;GACvC,CAAC,CACD,MAAM,iBAAiB,KAAK,MAAM,aAAa,CAC/C,MAAM,SAAS,KAAK,SAAS,CAC7B,MAAM,SAAS,KAAK,MAAM,UAAU,CACpC,MAAM,eAAe,KAAK,MAAM,WAAW,CAC3C,MAAM,UAAU,KAAK,GAAG,CAAC,CACzB,kBAAkB;AACpB,SAAO,OAAO,OAAO,kBAAkB,EAAE,KAAK;;CAG/C,MAAM,QAAQ,OAAuE;EACpF,MAAM,MAAM,gBAAgB,KAAK,IAAI,EAAE;EACvC,MAAM,SAAS,MAAM,KAAK,GACxB,YAAY,2CAA2C,CACvD,IAAI;GACJ,OAAO;GACP,iBAAiB;GACjB,aAAa;GACb,kBAAkB;GAClB,eAAe;GACf,iBAAiB;GACjB,YAAY;GACZ,CAAC,CACD,MAAM,iBAAiB,KAAK,MAAM,aAAa,CAC/C,MAAM,SAAS,KAAK,SAAS,CAC7B,MAAM,eAAe,KAAK,MAAM,WAAW,CAC3C,MAAM,UAAU,KAAK,GAAG,CAAC,CACzB,kBAAkB;AACpB,SAAO,OAAO,OAAO,kBAAkB,EAAE,KAAK;;CAG/C,MAAM,YAAY,OAAuE;EACxF,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,2CAA2C,CACtD,MAAM,iBAAiB,KAAK,MAAM,aAAa,CAC/C,MAAM,SAAS,KAAK,SAAS,CAC7B,MAAM,SAAS,KAAK,QAAQ,CAC5B,MAAM,eAAe,KAAK,MAAM,WAAW,CAC3C,MAAM,UAAU,KAAK,GAAG,CAAC,CACzB,kBAAkB;AACpB,SAAO,OAAO,OAAO,kBAAkB,EAAE,KAAK;;CAG/C,MAAM,cAAc,OAMC;EACpB,MAAM,SAAS,MAAM,KAAK,GACxB,YAAY,2CAA2C,CACvD,IAAI;GACJ,OAAO,MAAM,WAAW,WAAW;GACnC,eAAe,GAAW;GAC1B,iBAAiB,gBAAgB,KAAK,IAAI,MAAM,kBAAkB;GAClE,aAAa;GACb,kBAAkB;GAClB,iBAAiB,MAAM;GACvB,YAAY,gBAAgB,KAAK,IAAI,EAAE;GACvC,CAAC,CACD,MAAM,iBAAiB,KAAK,MAAM,aAAa,CAC/C,MAAM,SAAS,KAAK,SAAS,CAC7B,MAAM,eAAe,KAAK,MAAM,WAAW,CAC3C,MAAM,UAAU,KAAK,GAAG,CAAC,CACzB,kBAAkB;AACpB,SAAO,OAAO,OAAO,kBAAkB,EAAE,KAAK;;CAG/C,MAAM,4BAA4B,OAIb;AACpB,SAAO,gBAAgB,KAAK,IAAI,OAAO,QAAQ;AAC9C,SAAM,IACJ,WAAW,sBAAsB,CACjC,MAAM,MAAM,KAAK,MAAM,aAAa,CACpC,MAAM,QAAQ,KAAK,MAAM,eAAe,CACxC,OAAO,OACP,GAAG,OACF,GACE,WAAW,uDAAuD,CAClE,OAAO,yBAAyB,CAChC,MAAM,0BAA0B,KAAK,MAAM,aAAa,CACxD,MAAM,4BAA4B,KAAK,MAAM,eAAe,CAC5D,MAAM,kBAAkB,KAAK,SAAS,CACtC,MAAM,kBAAkB,KAAK,WAAW,CACxC,MAAM,wBAAwB,KAAK,MAAM,WAAW,CACpD,MAAM,UAAU,KAAK,4BAA4B,CAAC,CACpD,CACD,CACA,SAAS;GAEX,MAAM,aAAa,MAAM,IACvB,YAAY,2CAA2C,CACvD,IAAI;IAAE,OAAO;IAAS,YAAY,gBAAgB,KAAK,EAAE;IAAE,CAAC,CAC5D,MAAM,iBAAiB,KAAK,MAAM,aAAa,CAC/C,MAAM,mBAAmB,KAAK,MAAM,eAAe,CACnD,MAAM,SAAS,KAAK,SAAS,CAC7B,MAAM,SAAS,KAAK,WAAW,CAC/B,MAAM,eAAe,KAAK,MAAM,WAAW,CAC3C,MAAM,UAAU,IAAI,CAAC,CACrB,kBAAkB;AACpB,UAAO,OAAO,WAAW,kBAAkB,EAAE,KAAK;IACjD;;;AAYJ,eAAsB,oCACrB,IACA,OAKA,UAGI,EAAE,EACwC;CAC9C,MAAM,kBAAkB,QAAQ,mBAAmB;AACnD,KAAI,CAAC,OAAO,cAAc,gBAAgB,IAAI,kBAAkB,KAAK,kBAAkB,EACtF,OAAM,IAAI,MAAM,4DAA4D;AAE7E,oBAAmB,MAAM,gBAAgB,kBAAkB;CAC3D,MAAM,aAAa,IAAI,uCAAuC,GAAG;CACjE,IAAI,WAAW,MAAM,WAAW,WAAW,MAAM,eAAe;AAChE,KAAI,YAAY,MAAM,gBAAgB,SAAS,iBAAiB,MAAM,aACrE,OAAM,IAAI,MAAM,kDAAkD;AAEnE,KAAI,CAAC,UAAU;EACd,IAAI;AACJ,MAAI;AACH,gBAAa,MAAM,GACjB,WAAW,iCAAiC,CAC5C,OAAO,QAAQ,CACf,MAAM,YAAY,KAAK,eAAe,CACtC,kBAAkB;WACZ,OAAO;AACf,OAAI,CAAC,oBAAoB,MAAM,CAAE,OAAM;;AAExC,MAAI,CAAC,cAAc,WAAW,UAAU,WAAY,QAAO;AAC3D,MAAI,WAAW,UAAU,SACxB,OAAM,IAAI,MAAM,mEAAmE;AAEpF,MAAI,CAAC,MAAM,aAAc,QAAO;AAChC,QAAM,uCAAuC,IAAI;GAChD,cAAc,MAAM;GACpB,gBAAgB,MAAM;GACtB,CAAC;AACF,aAAW,MAAM,WAAW,gBAAgB;GAC3C,cAAc,MAAM;GACpB,gBAAgB,MAAM;GACtB,aAAa,MAAM;GACnB,CAAC;;AAGH,KAAI,SAAS,UAAU,WAAW,SAAS,UAAU,cAAc,SAAS,UAAU,QACrF,QAAO;CAER,MAAM,QACL,QAAQ,WACP,MAAM,WAAW,MAAM;EACvB,cAAc,SAAS;EACvB,OAAO,SAAS;EAChB,sBAAsB;EACtB,CAAC;AACH,KAAI,CAAC,MAAO,QAAO;AACnB,KAAI,MAAM,iBAAiB,SAAS,gBAAgB,MAAM,UAAU,SAAS,MAC5E,OAAM,IAAI,MAAM,8CAA8C;CAE/D,IAAI,QAAQ,MAAM;CAClB,IAAI,uBAAuB;CAC3B,MAAM,QAAQ;EAAE,cAAc,MAAM;EAAc,YAAY,MAAM;EAAY;AAEhF,KAAI,UAAU,SAAS;EACtB,MAAM,eAAe,MAAM,2BAA2B,IAAI,MAAM;AAChE,MAAI,iBAAiB,YAAY,iBAAiB,WACjD,OAAM,IAAI,MAAM,oEAAoE;AAErF,MAAI,CAAE,MAAM,gCAAgC,IAAI,MAAM,CACrD,OAAM,IAAI,MAAM,uEAAuE;AAExF,MAAI,iBAAiB,UAAU;GAC9B,MAAM,SAAS,MAAM,+BAA+B,IAAI;IACvD,QAAQ;IACR,cAAc,MAAM;IACpB,gBAAgB,MAAM;IACtB,YAAY,MAAM;IAClB,aAAa,MAAM;IACnB,CAAC;AACF,OAAI,OAAO,YAAY,eAAe;AACrC,QAAI,CAAE,MAAM,WAAW,YAAY,MAAM,CACxC,OAAM,IAAI,MAAM,8DAA8D;AAE/E,WAAO;;AAER,OAAI,OAAO,YAAY,SAAU,OAAM,IAAI,MAAM,qCAAqC;;AAEvF,MACC,CAAE,MAAM,WAAW,WAAW;GAC7B,GAAG;GACH,WAAW;GACX,SAAS;GACT,CAAC,CAEF,OAAM,IAAI,MAAM,gDAAgD;AAEjE,UAAQ;AACR;AACA,MAAI,wBAAwB,iBAAiB;AAC5C,OAAI,CAAE,MAAM,WAAW,QAAQ,MAAM,CACpC,OAAM,IAAI,MAAM,uCAAuC;AACxD,UAAO;;;AAIT,KAAI,UAAU,YAAY;AACzB,MACC,CAAE,MAAM,WAAW,4BAA4B;GAC9C,GAAG;GACH,gBAAgB,MAAM;GACtB,CAAC,CAEF,OAAM,IAAI,MAAM,mDAAmD;AAEpE,UAAQ;AACR;AACA,MAAI,wBAAwB,iBAAiB;AAC5C,OAAI,CAAE,MAAM,WAAW,QAAQ,MAAM,CACpC,OAAM,IAAI,MAAM,uCAAuC;AACxD,UAAO;;;AAIT,KAAI,UAAU,SAAS;AAOtB,OANe,MAAM,+BAA+B,IAAI;GACvD,QAAQ;GACR,cAAc,MAAM;GACpB,gBAAgB,MAAM;GACtB,YAAY,MAAM;GAClB,CAAC,EACS,YAAY,UAAW,OAAM,IAAI,MAAM,2CAA2C;AAC7F,MACC,CAAE,MAAM,WAAW,WAAW;GAC7B,GAAG;GACH,WAAW;GACX,SAAS;GACT,CAAC,CAEF,OAAM,IAAI,MAAM,gDAAgD;;AAIlE,KAAI,CAAE,MAAM,WAAW,QAAQ,MAAM,CACpC,OAAM,IAAI,MAAM,+CAA+C;AAEhE,QAAO;;AAGR,eAAsB,mCACrB,IACA,gBACmB;AACnB,oBAAmB,gBAAgB,kBAAkB;AACrD,KAAI;AAMH,SALY,MAAM,GAChB,WAAW,2CAA2C,CACtD,OAAO,gBAAgB,CACvB,MAAM,mBAAmB,KAAK,eAAe,CAC7C,kBAAkB,KACL;UACP,OAAO;AACf,MAAI,oBAAoB,MAAM,CAAE,QAAO;AACvC,QAAM;;;AAIR,eAAe,uCACd,IACA,UACgB;AAEhB,KADqB,MAAM,2BAA2B,IAAI,SAAS,KAC9C,SACpB,OAAM,IAAI,MAAM,qEAAqE;AAEtF,KAAI,CAAE,MAAM,gCAAgC,IAAI,SAAS,CACxD,OAAM,IAAI,MAAM,uEAAuE;;AAIzF,eAAe,2BACd,IACA,UACyB;AASzB,SARkB,MAAM,GACtB,WAAW,mCAAmC,CAC9C,OAAO,gBAAgB,CACvB,MAAM,cAAc,KAAK,gBAAgB,CACzC,MAAM,cAAc,KAAK,aAAa,CACtC,MAAM,aAAa,KAAK,SAAS,eAAe,CAChD,MAAM,iBAAiB,KAAK,SAAS,aAAa,CAClD,kBAAkB,GACF,iBAAiB;;AAGpC,eAAe,+BACd,IACA,OACyC;CACzC,MAAM,sBAAsB,MAAM,oCAAoC;AACtE,KAAI,qBAAqB;EACxB,MAAM,EAAE,SAAS,WAAW,MAAM,OAAO;AACzC,SAAO,oBAAoB,OAAO,UAAU,QAAQ,MAAM;;AAE3D,QAAO,oCAAoC,IAAI,MAAM;;AAGtD,eAAe,qCAEb;AACD,KAAI;AAEH,UADgB,MAAM,OAAO,2BACd;UACP,OAAO;AACf,MAAI,iCAAiC,MAAM,CAAE,QAAO;AACpD,QAAM;;;AAIR,SAAgB,iCAAiC,OAAyB;AACzE,KAAI,EAAE,iBAAiB,UAAU,EAAE,UAAU,OAAQ,QAAO;AAC5D,KAAI,MAAM,SAAS,uBAAwB,QAAO,MAAM,QAAQ,SAAS,mBAAmB;AAC5F,QACC,MAAM,SAAS,oCACf,MAAM,QAAQ,SAAS,+BAA+B;;AAIxD,eAAsB,oCACrB,IACA,OACyC;AACzC,kBAAiB,MAAM;AACvB,QAAO,GAAG,aAAa,CAAC,QAAQ,OAAO,QAAQ;AAC9C,MAAI,CAAE,MAAM,kBAAkB,KAAK,MAAM,CAAG,QAAO,EAAE,SAAS,SAAS;AACvE,MAAI,MAAM,WAAW,QAAS,QAAO,gBAAgB,KAAK,MAAM;AAGhE,QADY,IAAI,WAAW,IAAI,CACrB,aAAa,MAAM,eAAe;AAC5C,QAAM,GAAG,wBAAwB,IAAI,IAAI,MAAM,MAAM,iBAAiB,GAAG,QAAQ,IAAI;AACrF,SAAO,EAAE,SAAS,WAAW;GAC5B;;AAGH,eAAe,gBACd,KACA,OACyC;CACzC,MAAM,YAAY,MAAM,MAAM;AAC9B,oBAAmB,WAAW,gBAAgB;AAC9C,KAAI,WAAW,IAAI,CAClB,OAAM,GAAG,cAAc,IAAI,IAAI,UAAU,CAAC,8BAA8B,QAAQ,IAAI;AAGrF,KAAI,CAAC,MAAM,aAMV;OALgB,MAAM,GAAwB;8BAClB,IAAI,IAAI,UAAU,CAAC;;;IAG7C,QAAQ,IAAI,EACF,KAAK,SAAS,EAAG,QAAO,EAAE,SAAS,eAAe;;CAG/D,MAAM,SAAS,MAAM,IACnB,YAAY,6CAA6C,CACzD,IAAI;EAAE,eAAe;EAAY,YAAY,gBAAgB,KAAK,EAAE;EAAE,CAAC,CACvE,MAAM,qBAAqB,KAAK,gBAAgB,CAChD,MAAM,qBAAqB,KAAK,aAAa,CAC7C,MAAM,oBAAoB,KAAK,MAAM,eAAe,CACpD,MAAM,wBAAwB,KAAK,MAAM,aAAa,CACtD,MAAM,wBAAwB,KAAK,SAAS,CAC5C,OAAO,OACP,GAAG,OACF,GACE,WAAW,oCAAoC,CAC/C,OAAO,gBAAgB,CACvB,MAAM,iBAAiB,KAAK,MAAM,aAAa,CAC/C,MAAM,mBAAmB,KAAK,MAAM,eAAe,CACrD,CACD,CACA,kBAAkB;AACpB,QAAO,OAAO,OAAO,kBAAkB,EAAE,KAAK,IAAI,EAAE,SAAS,UAAU,GAAG,EAAE,SAAS,SAAS;;AAG/F,eAAe,kBACd,KACA,OACmB;CACnB,MAAM,QAAQ,MAAM,WAAW,UAAU,UAAU;AACnD,KAAI,WAAW,IAAI,CAYlB,QAXY,MAAM,IAChB,WAAW,2CAA2C,CACtD,OAAO,gBAAgB,CACvB,MAAM,iBAAiB,KAAK,MAAM,aAAa,CAC/C,MAAM,mBAAmB,KAAK,MAAM,eAAe,CACnD,MAAM,SAAS,KAAK,SAAS,CAC7B,MAAM,SAAS,KAAK,MAAM,CAC1B,MAAM,eAAe,KAAK,MAAM,WAAW,CAC3C,MAAM,UAAU,IAAI,CAAC,CACrB,WAAW,CACX,kBAAkB,KACL;CAGhB,MAAM,SAAS,MAAM,IACnB,YAAY,2CAA2C,CACvD,IAAI,EAAE,YAAY,GAAW,cAAc,CAAC,CAC5C,MAAM,iBAAiB,KAAK,MAAM,aAAa,CAC/C,MAAM,mBAAmB,KAAK,MAAM,eAAe,CACnD,MAAM,SAAS,KAAK,SAAS,CAC7B,MAAM,SAAS,KAAK,MAAM,CAC1B,MAAM,eAAe,KAAK,MAAM,WAAW,CAC3C,MAAM,UAAU,IAAI,CAAC,CACrB,kBAAkB;AACpB,QAAO,OAAO,OAAO,kBAAkB,EAAE,KAAK;;AAG/C,SAAS,eAAe,OAA+D;AACtF,KAAI,CAAC,MAAM,aAAc,OAAM,IAAI,MAAM,+CAA+C;AACxF,oBAAmB,MAAM,gBAAgB,kBAAkB;;AAG5D,SAAS,iBAAiB,OAA2C;AACpE,gBAAe,MAAM;AACrB,KAAI,CAAC,MAAM,WAAY,OAAM,IAAI,MAAM,6CAA6C;;AAGrF,SAAS,UAAU,IAAsB,SAAS,oBAAyC;CAC1F,MAAM,iBAAiB,IAAI,IAAI,OAAO;AACtC,QAAO,WAAW,GAAG,GAClB,GAAY,GAAG,eAAe,qCAC9B,GAAY,GAAG,eAAe;;AAGlC,SAAS,eACR,IACA,QACsB;AACtB,QAAO,WAAW,GAAG,GAClB,GAAY,GAAG,IAAI,IAAI,OAAO,CAAC;;;OAI/B,GAAY,GAAG,IAAI,IAAI,OAAO,CAAC;;AAGnC,SAAS,gBAAgB,IAAsB,eAA2C;AACzF,KAAI,WAAW,GAAG,CACjB,QAAO,GAAW;+CAC2B,cAAc;;;AAI5D,QAAO,GAAW;;;IAGf,GAAG,iBAAiB,IAAI,MAAM,KAAK,cAAc,UAAU;;;AAI/D,SAAgB,mCAAmC,IAA0C;AAC5F,QAAO,gBAAgB,IAAI,EAAE;;AAG9B,SAAS,YACR,KACqC;AACrC,KAAI,CAAC,QAAQ,IAAI,MAAM,IAAI,CAAC,QAAQ,IAAI,MAAM,CAC7C,OAAM,IAAI,MAAM,oDAAoD;AAErE,QAAO;EACN,cAAc,IAAI;EAClB,gBAAgB,IAAI;EACpB,aAAa,QAAQ,IAAI,aAAa;EACtC,OAAO,IAAI;EACX,OAAO,IAAI;EACX,YAAY,IAAI;EAChB,WAAW,IAAI;EACf,kBAAkB,IAAI;EACtB,cAAc,IAAI;EAClB,eAAe,IAAI;EACnB,YAAY,IAAI;EAChB,gBAAgB,IAAI;EACpB,eAAe,IAAI;EACnB,WAAW,IAAI;EACf,WAAW,IAAI;EACf;;AAGF,SAAS,kBACR,KAC2C;CAC3C,MAAM,WAAW,YAAY,IAAI;AACjC,QAAO;EACN,cAAc,SAAS;EACvB,gBAAgB,SAAS;EACzB,OAAO,SAAS;EAChB,OAAO,SAAS;EAChB,cAAc,SAAS;EACvB,eAAe,SAAS;EACxB,gBAAgB,SAAS;EACzB,eAAe,SAAS;EACxB,WAAW,SAAS;EACpB;;AAGF,SAAS,QAAQ,OAA2D;AAC3E,QAAO,UAAU,aAAa,UAAU,WAAW,UAAU,YAAY,UAAU;;AAGpF,SAAS,QAAQ,OAA2D;AAC3E,QACC,UAAU,WACV,UAAU,cACV,UAAU,WACV,UAAU,UACV,UAAU,aACV,UAAU,YACV,UAAU"}

package/dist/collection-slugs-cache-D9auiKmI.mjs

@@ -0,0 +1,85 @@
+import { getRequestContext } from "./request-context.mjs";
+import { r as requestCached } from "./request-cache-DaMhSQdx.mjs";
+
+//#region src/schema/collection-slugs-cache.ts
+const HOLDER_KEY = Symbol.for("emdash:collection-slugs");
+const g = globalThis;
+const holder = g[HOLDER_KEY] ?? (() => {
+	const h = {
+		promise: null,
+		fetchedAt: 0
+	};
+	g[HOLDER_KEY] = h;
+	return h;
+})();
+const REVALIDATE_WINDOW_MS = 6e4;
+let revalidateWindowMs = REVALIDATE_WINDOW_MS;
+async function fetchSlugs(db) {
+	const rows = await db.selectFrom("_emdash_collections").select("slug").execute();
+	return new Set(rows.map((row) => row.slug));
+}
+function loadSlugs(db) {
+	if (holder.promise) return holder.promise;
+	const promise = fetchSlugs(db).catch((error) => {
+		if (holder.promise === promise) holder.promise = null;
+		throw error;
+	});
+	holder.promise = promise;
+	holder.fetchedAt = Date.now();
+	return promise;
+}
+/**
+* Keep only the collections that have a `_emdash_collections` row, i.e. whose
+* `ec_*` table the registry has created. When the filter would drop a
+* collection and the cached set is older than the revalidation window, the
+* set is re-fetched once so a collection created by another isolate becomes
+* visible without waiting for an isolate recycle.
+*/
+async function filterToRegisteredCollections(db, collections) {
+	if (collections.length === 0) return [];
+	if (getRequestContext()?.dbIsIsolated === true) {
+		const slugs = await requestCached("collection-slugs", () => fetchSlugs(db));
+		return collections.filter((slug) => slugs.has(slug));
+	}
+	let slugs = await loadSlugs(db);
+	let present = collections.filter((slug) => slugs.has(slug));
+	if (present.length < collections.length && Date.now() - holder.fetchedAt > revalidateWindowMs) {
+		holder.promise = null;
+		slugs = await loadSlugs(db);
+		present = collections.filter((slug) => slugs.has(slug));
+	}
+	return present;
+}
+/**
+* Seed the cache with slugs an init-time read already fetched, so the first
+* render on a cold isolate pays no extra query. Called by the runtime's
+* auto-seed gate.
+*/
+function primeRegisteredCollections(slugs) {
+	holder.promise = Promise.resolve(new Set(slugs));
+	holder.fetchedAt = Date.now();
+}
+/**
+* Drop the cached slug set so the next reader re-fetches. Called from every
+* schema-mutation path (`invalidateUrlPatternCache`, `SchemaRegistry`
+* create/delete). Other isolates converge through bounded revalidation.
+*/
+function resetRegisteredCollectionsCache() {
+	holder.promise = null;
+	holder.fetchedAt = 0;
+}
+/**
+* Note that a query hit a missing `ec_*` table despite the slug filter: the
+* cached set is stale (the collection was deleted on another isolate) or the
+* registry has drifted from the physical schema. Drops the cached set at most
+* once per revalidation window, so the delete case converges like the create
+* case while genuine drift costs one slug re-fetch per window instead of one
+* per render.
+*/
+function noteStaleRegisteredCollections() {
+	if (Date.now() - holder.fetchedAt > revalidateWindowMs) resetRegisteredCollectionsCache();
+}
+
+//#endregion
+export { resetRegisteredCollectionsCache as i, noteStaleRegisteredCollections as n, primeRegisteredCollections as r, filterToRegisteredCollections as t };
+//# sourceMappingURL=collection-slugs-cache-D9auiKmI.mjs.map

package/dist/collection-slugs-cache-D9auiKmI.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection-slugs-cache-D9auiKmI.mjs","names":[],"sources":["../src/schema/collection-slugs-cache.ts"],"sourcesContent":["/**\n * Per-isolate cache of registered collection slugs (`_emdash_collections`).\n *\n * Term counting scopes its per-collection UNION to a taxonomy's declared\n * collections, but a declared collection is not necessarily a created one:\n * the migration-seeded defaults declare `posts` whether or not that\n * collection ever exists. Querying optimistically and catching the\n * missing-table error keeps results correct, yet the failed statement itself\n * is logged by the database — on D1 it surfaces as a `no such table` error\n * span per taxonomy per uncached render. Filtering declared collections\n * against the registry up front means the failing statement is never sent.\n *\n * Stored on globalThis behind a Symbol key (same pattern as the taxonomy-defs\n * cache in `taxonomies/index.ts`) so bundler chunk duplication cannot produce\n * two independent caches. The promise is cached, so concurrent cold readers\n * share one in-flight query; a rejection evicts the entry.\n *\n * Freshness:\n * - Primed for free at isolate boot: runtime init's auto-seed gate already\n *   reads `_emdash_collections` and hands the slugs to\n *   `primeRegisteredCollections`, so cold isolates pay no extra query.\n * - Every schema-mutation path resets it: `invalidateUrlPatternCache()`\n *   (admin API, MCP, WordPress import, seed application) and\n *   `SchemaRegistry.createCollection`/`deleteCollection` for direct callers.\n * - Creations on *other* isolates surface through bounded revalidation: the\n *   set is re-fetched only when the filter would actually drop a declared\n *   collection and the cached copy is older than the revalidation window.\n *   Sites whose declared collections all exist — the steady state — never\n *   revalidate; a site with a genuinely absent collection pays one slug read\n *   per window instead of one failing statement per render, and a collection\n *   created elsewhere starts counting within the window.\n *\n * Isolated databases bypass the cache (playground / DO preview requests set\n * `requestContext.dbIsIsolated`): they point at a divergent schema, so the\n * slug set is fetched per request instead, deduped by the request cache.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../database/types.js\";\nimport { requestCached } from \"../request-cache.js\";\nimport { getRequestContext } from \"../request-context.js\";\n\ninterface SlugsHolder {\n\tpromise: Promise<Set<string>> | null;\n\t/** When the cached promise was created; gates bounded revalidation. */\n\tfetchedAt: number;\n}\n\nconst HOLDER_KEY = Symbol.for(\"emdash:collection-slugs\");\nconst g = globalThis as Record<symbol, unknown>;\nconst holder: SlugsHolder =\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- globalThis singleton pattern (see request-cache.ts)\n\t(g[HOLDER_KEY] as SlugsHolder | undefined) ??\n\t(() => {\n\t\tconst h: SlugsHolder = { promise: null, fetchedAt: 0 };\n\t\tg[HOLDER_KEY] = h;\n\t\treturn h;\n\t})();\n\nconst REVALIDATE_WINDOW_MS = 60_000;\nlet revalidateWindowMs = REVALIDATE_WINDOW_MS;\n\nasync function fetchSlugs(db: Kysely<Database>): Promise<Set<string>> {\n\tconst rows = await db.selectFrom(\"_emdash_collections\").select(\"slug\").execute();\n\treturn new Set(rows.map((row) => row.slug));\n}\n\nfunction loadSlugs(db: Kysely<Database>): Promise<Set<string>> {\n\tif (holder.promise) return holder.promise;\n\tconst promise = fetchSlugs(db).catch((error: unknown) => {\n\t\tif (holder.promise === promise) holder.promise = null;\n\t\tthrow error;\n\t});\n\tholder.promise = promise;\n\tholder.fetchedAt = Date.now();\n\treturn promise;\n}\n\n/**\n * Keep only the collections that have a `_emdash_collections` row, i.e. whose\n * `ec_*` table the registry has created. When the filter would drop a\n * collection and the cached set is older than the revalidation window, the\n * set is re-fetched once so a collection created by another isolate becomes\n * visible without waiting for an isolate recycle.\n */\nexport async function filterToRegisteredCollections(\n\tdb: Kysely<Database>,\n\tcollections: readonly string[],\n): Promise<string[]> {\n\tif (collections.length === 0) return [];\n\tif (getRequestContext()?.dbIsIsolated === true) {\n\t\tconst slugs = await requestCached(\"collection-slugs\", () => fetchSlugs(db));\n\t\treturn collections.filter((slug) => slugs.has(slug));\n\t}\n\tlet slugs = await loadSlugs(db);\n\tlet present = collections.filter((slug) => slugs.has(slug));\n\tif (present.length < collections.length && Date.now() - holder.fetchedAt > revalidateWindowMs) {\n\t\tholder.promise = null;\n\t\tslugs = await loadSlugs(db);\n\t\tpresent = collections.filter((slug) => slugs.has(slug));\n\t}\n\treturn present;\n}\n\n/**\n * Seed the cache with slugs an init-time read already fetched, so the first\n * render on a cold isolate pays no extra query. Called by the runtime's\n * auto-seed gate.\n */\nexport function primeRegisteredCollections(slugs: readonly string[]): void {\n\tholder.promise = Promise.resolve(new Set(slugs));\n\tholder.fetchedAt = Date.now();\n}\n\n/**\n * Drop the cached slug set so the next reader re-fetches. Called from every\n * schema-mutation path (`invalidateUrlPatternCache`, `SchemaRegistry`\n * create/delete). Other isolates converge through bounded revalidation.\n */\nexport function resetRegisteredCollectionsCache(): void {\n\tholder.promise = null;\n\tholder.fetchedAt = 0;\n}\n\n/**\n * Note that a query hit a missing `ec_*` table despite the slug filter: the\n * cached set is stale (the collection was deleted on another isolate) or the\n * registry has drifted from the physical schema. Drops the cached set at most\n * once per revalidation window, so the delete case converges like the create\n * case while genuine drift costs one slug re-fetch per window instead of one\n * per render.\n */\nexport function noteStaleRegisteredCollections(): void {\n\tif (Date.now() - holder.fetchedAt > revalidateWindowMs) {\n\t\tresetRegisteredCollectionsCache();\n\t}\n}\n\n/**\n * Test/internal helper: reset the cache and restore the production\n * revalidation window.\n */\nexport function resetRegisteredCollectionsCacheForTests(): void {\n\tresetRegisteredCollectionsCache();\n\trevalidateWindowMs = REVALIDATE_WINDOW_MS;\n}\n\n/**\n * Test-only: shorten the revalidation window so the cross-isolate refresh\n * path can be exercised without waiting out the production window.\n *\n * @internal\n */\nexport function setRegisteredCollectionsRevalidateWindowForTests(ms: number): void {\n\trevalidateWindowMs = ms;\n}\n"],"mappings":";;;;AAiDA,MAAM,aAAa,OAAO,IAAI,0BAA0B;AACxD,MAAM,IAAI;AACV,MAAM,SAEJ,EAAE,sBACI;CACN,MAAM,IAAiB;EAAE,SAAS;EAAM,WAAW;EAAG;AACtD,GAAE,cAAc;AAChB,QAAO;IACJ;AAEL,MAAM,uBAAuB;AAC7B,IAAI,qBAAqB;AAEzB,eAAe,WAAW,IAA4C;CACrE,MAAM,OAAO,MAAM,GAAG,WAAW,sBAAsB,CAAC,OAAO,OAAO,CAAC,SAAS;AAChF,QAAO,IAAI,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC;;AAG5C,SAAS,UAAU,IAA4C;AAC9D,KAAI,OAAO,QAAS,QAAO,OAAO;CAClC,MAAM,UAAU,WAAW,GAAG,CAAC,OAAO,UAAmB;AACxD,MAAI,OAAO,YAAY,QAAS,QAAO,UAAU;AACjD,QAAM;GACL;AACF,QAAO,UAAU;AACjB,QAAO,YAAY,KAAK,KAAK;AAC7B,QAAO;;;;;;;;;AAUR,eAAsB,8BACrB,IACA,aACoB;AACpB,KAAI,YAAY,WAAW,EAAG,QAAO,EAAE;AACvC,KAAI,mBAAmB,EAAE,iBAAiB,MAAM;EAC/C,MAAM,QAAQ,MAAM,cAAc,0BAA0B,WAAW,GAAG,CAAC;AAC3E,SAAO,YAAY,QAAQ,SAAS,MAAM,IAAI,KAAK,CAAC;;CAErD,IAAI,QAAQ,MAAM,UAAU,GAAG;CAC/B,IAAI,UAAU,YAAY,QAAQ,SAAS,MAAM,IAAI,KAAK,CAAC;AAC3D,KAAI,QAAQ,SAAS,YAAY,UAAU,KAAK,KAAK,GAAG,OAAO,YAAY,oBAAoB;AAC9F,SAAO,UAAU;AACjB,UAAQ,MAAM,UAAU,GAAG;AAC3B,YAAU,YAAY,QAAQ,SAAS,MAAM,IAAI,KAAK,CAAC;;AAExD,QAAO;;;;;;;AAQR,SAAgB,2BAA2B,OAAgC;AAC1E,QAAO,UAAU,QAAQ,QAAQ,IAAI,IAAI,MAAM,CAAC;AAChD,QAAO,YAAY,KAAK,KAAK;;;;;;;AAQ9B,SAAgB,kCAAwC;AACvD,QAAO,UAAU;AACjB,QAAO,YAAY;;;;;;;;;;AAWpB,SAAgB,iCAAuC;AACtD,KAAI,KAAK,KAAK,GAAG,OAAO,YAAY,mBACnC,kCAAiC"}