mindoodb 0.0.85 → 0.0.86

package/README-server.md

@@ -1,6 +1,7 @@
 # MindooDB reference server
 
 Node.js/Express sources: `src/node/server/`. Docker: `src/node/server/Dockerfile`.
+Serverless on Cloudflare Workers + Durable Objects: `cloudflare/README.md` (same API, same core: `docs/server-hosts.md`).
 
 A Node.js/Express server implementing the MindooDB sync API with:
 

package/README.md

@@ -7,8 +7,6 @@ Apps collaborate and sync data without ever giving a server access to the conten
 
 Data is encrypted on the client before it leaves the device. Even someone with full access to your infrastructure — database dumps, backups, logs — gets nothing but ciphertext. No plaintext on the server, no server-side keys, no trust required.
 
-> ⚠️ **Beta software**: This project is in early development and not yet recommended for production use. APIs may change without notice.
-
 Use AI to explore this repository:
 
 [![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/klehmann/MindooDB)
@@ -71,7 +69,7 @@ Haven is the fastest way to see MindooDB in action, and a real home for day-to-d
 - **Multi-tenant by design** — run work, personal, and cross-company tenants side by side, each cryptographically independent, all in one browser.
 - **Installable PWA** — add it to an iPhone, iPad, or Android home screen and launch it in standalone mode; encrypted `.mdbhaven-backup` files move a whole environment between browsers.
 
-Haven Community is **free** (in beta) and is the same client the MindooDB team uses in-house. Try it at **[haven.mindoodb.com](https://haven.mindoodb.com)**, read the full [Haven Handbook](./docs/haven-handbook.md), or explore more at [mindoodb.com](https://www.mindoodb.com).
+Haven Community is **free** and is the same client the MindooDB team uses in-house. Try it at **[haven.mindoodb.com](https://haven.mindoodb.com)**, read the full [Haven Handbook](./docs/haven-handbook.md), or explore more at [mindoodb.com](https://www.mindoodb.com).
 
 > Prefer to build directly on the engine? Keep reading — the Quick Start below is all code.
 
@@ -83,9 +81,11 @@ Haven Community is **free** (in beta) and is the same client the MindooDB team u
 pnpm add mindoodb
 ```
 
-> 📦 **Published regularly on npm.** We ship new versions frequently to [npmjs.com/package/mindoodb](https://www.npmjs.com/package/mindoodb), so pull updates often to stay current with fixes and API changes during the beta.
+> 📦 **Published regularly on npm.** We ship new versions frequently to [npmjs.com/package/mindoodb](https://www.npmjs.com/package/mindoodb), so pull updates often to stay current with fixes and API changes.
 
 > 📱 **React Native / Expo?** See the [React Native setup guide](./docs/reactnative.md) for mobile-specific instructions with native performance.
+>
+> ☕ **Kotlin or Java?** See [MindooDB for Kotlin and Java](./docs/kotlin-jvm.md): a coroutine client that drives the same engine through a Node.js sidecar.
 
 ### Pick Your Runtime
 
@@ -335,10 +335,12 @@ See: [Use Cases Documentation](./docs/usecases/README.md)
 
 - [Haven Handbook](./docs/haven-handbook.md) — Complete guide to Haven, the graphical MindooDB collaboration client
 - [Getting Started](./docs/getting-started.md) — Fast setup for Node.js, Web, and React Native
+- [Reading and Writing Documents](./docs/reading-and-writing.md) — `getData()`, nested and list edits in `changeDoc()`, field types (`MindooValue.atomic`/`counter`/`timestamp`, text, rich text), `getFieldType()`, patch APIs and how concurrent edits merge
 - [Best Practices](./docs/best-practices.md) — What append-only storage, local-first replicas, client-side-only querying, and encryption-based read access mean for application design: summary-first querying, patch-sized writes, growth planning, collaboration expectations, and Haven app mappings
 - [Example Snippets](./docs/examples/README.md) — Copy-paste Todo starters for all runtimes
 - [Architecture Specification](./docs/specification.md) — Full technical details
 - [React Native Guide](./docs/reactnative.md) — Native Automerge setup and troubleshooting
+- [Kotlin and Java](./docs/kotlin-jvm.md) — JVM backends via the Kotlin client and the Node.js sidecar
 - [Virtual Views](./docs/virtualview.md) — Aggregations and cross-database views
 - [Ad-hoc Queries & Reactive Updates](./docs/adhoc-queries.md) — Summary buffer, `db.query()`, nested `include` lookups, ephemeral views, live queries and change listeners
 - [Full-Text Search](./docs/fulltext-search.md) — Client-side encrypted full-text index, `db.searchText()`, the query `text` clause, attachment text extraction

package/dist/cloudflare/DurableObjectSql.d.ts

@@ -0,0 +1,56 @@
+/**
+ * MindooDB stores and server state on a Durable Object's SQLite database.
+ *
+ * Durable Object SQL is synchronous and commits every write of one event-loop
+ * turn atomically; it rejects BEGIN/COMMIT. The store backend therefore runs
+ * without explicit transactions (batches are still serialized), and since the
+ * executor never awaits real I/O, a whole `putEntries` batch lands in one
+ * implicit transaction.
+ */
+import { type ExternalContentStore, type SqliteExecutor, type SqliteStoreBackend } from "../core/appendonlystores/sqlite/SqliteDriver";
+import { SqliteContentAddressedStore } from "../core/appendonlystores/sqlite/SqliteContentAddressedStore";
+import type { StoreKind } from "../core/appendonlystores/types";
+import type { ServerDataStore } from "../server/ServerDataStore";
+import type { R2Bucket, SqlStorage } from "./types";
+/**
+ * Durable Object SQLite limits a BLOB, and a row, to 2 MB. Entries above this
+ * are refused with a clear error instead of a storage exception mid-batch —
+ * unless an R2 bucket takes them (see {@link r2ContentStore}).
+ */
+export declare const MAX_DURABLE_OBJECT_ENTRY_BYTES: number;
+/** {@link SqliteExecutor} over `ctx.storage.sql`. */
+export declare function createDurableObjectSqlExecutor(sql: SqlStorage): SqliteExecutor;
+/** Payloads from this size on go to R2; well below the row limit, rare in practice. */
+export declare const R2_CONTENT_THRESHOLD_BYTES: number;
+/**
+ * Payloads of one store in R2, under `<keyPrefix><contentHash>`. The key
+ * prefix names the tenant, database and store, so stores never share
+ * objects and a database's objects can be removed by prefix.
+ */
+export declare function r2ContentStore(bucket: R2Bucket, keyPrefix: string): ExternalContentStore;
+/** Remove every object under `prefix`. */
+export declare function deleteR2Prefix(bucket: R2Bucket, prefix: string): Promise<void>;
+/** Durable Object SQLite refuses statements with more bound parameters than this. */
+export declare const DURABLE_OBJECT_MAX_BOUND_PARAMETERS = 100;
+export declare function createDurableObjectStoreBackend(sql: SqlStorage, tablePrefix: string, externalContent?: ExternalContentStore): SqliteStoreBackend;
+/** A content-addressed store whose tables carry `tablePrefix` in the object's database. */
+export declare function createDurableObjectStore(sql: SqlStorage, dbId: string, storeKind: StoreKind, tablePrefix: string, externalContent?: ExternalContentStore): SqliteContentAddressedStore;
+/**
+ * {@link ServerDataStore} on a key/value table. "Directories" are derived from
+ * the `/`-separated keys, as on the file system.
+ */
+export declare class DurableObjectServerDataStore implements ServerDataStore {
+    private readonly sql;
+    constructor(sql: SqlStorage);
+    private static normalize;
+    exists(key: string): boolean;
+    readBytes(key: string): Uint8Array | null;
+    readText(key: string): string | null;
+    writeBytes(key: string, value: Uint8Array): void;
+    writeText(key: string, value: string): void;
+    listDirectories(prefix: string): string[];
+    /** Names of the values directly below `prefix` (not the directories). */
+    listFiles(prefix: string): string[];
+    deleteTree(prefix: string): void;
+}
+//# sourceMappingURL=DurableObjectSql.d.ts.map

package/dist/cloudflare/DurableObjectSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DurableObjectSql.d.ts","sourceRoot":"","sources":["../../src/cloudflare/DurableObjectSql.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EAExB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,6DAA6D,CAAC;AAC1G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEpD;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,QAA8B,CAAC;AAc1E,qDAAqD;AACrD,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,UAAU,GAAG,cAAc,CAkB9E;AAED,uFAAuF;AACvF,eAAO,MAAM,0BAA0B,QAAc,CAAC;AAEtD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAiBxF;AAED,0CAA0C;AAC1C,wBAAsB,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASpF;AAED,qFAAqF;AACrF,eAAO,MAAM,mCAAmC,MAAM,CAAC;AAEvD,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,UAAU,EACf,WAAW,EAAE,MAAM,EACnB,eAAe,CAAC,EAAE,oBAAoB,GACrC,kBAAkB,CAOpB;AAED,2FAA2F;AAC3F,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,SAAS,EACpB,WAAW,EAAE,MAAM,EACnB,eAAe,CAAC,EAAE,oBAAoB,GACrC,2BAA2B,CAM7B;AAED;;;GAGG;AACH,qBAAa,4BAA6B,YAAW,eAAe;IACtD,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,UAAU;IAM5C,OAAO,CAAC,MAAM,CAAC,SAAS;IAIxB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAc5B,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAUzC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAKpC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI;IAahD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAI3C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAmBzC,yEAAyE;IACzE,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAcnC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;CAajC"}

package/dist/cloudflare/DurableObjectSql.js

@@ -0,0 +1,180 @@
+"use strict";
+/**
+ * MindooDB stores and server state on a Durable Object's SQLite database.
+ *
+ * Durable Object SQL is synchronous and commits every write of one event-loop
+ * turn atomically; it rejects BEGIN/COMMIT. The store backend therefore runs
+ * without explicit transactions (batches are still serialized), and since the
+ * executor never awaits real I/O, a whole `putEntries` batch lands in one
+ * implicit transaction.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DurableObjectServerDataStore = exports.DURABLE_OBJECT_MAX_BOUND_PARAMETERS = exports.R2_CONTENT_THRESHOLD_BYTES = exports.MAX_DURABLE_OBJECT_ENTRY_BYTES = void 0;
+exports.createDurableObjectSqlExecutor = createDurableObjectSqlExecutor;
+exports.r2ContentStore = r2ContentStore;
+exports.deleteR2Prefix = deleteR2Prefix;
+exports.createDurableObjectStoreBackend = createDurableObjectStoreBackend;
+exports.createDurableObjectStore = createDurableObjectStore;
+const SqliteDriver_1 = require("../core/appendonlystores/sqlite/SqliteDriver");
+const SqliteContentAddressedStore_1 = require("../core/appendonlystores/sqlite/SqliteContentAddressedStore");
+/**
+ * Durable Object SQLite limits a BLOB, and a row, to 2 MB. Entries above this
+ * are refused with a clear error instead of a storage exception mid-batch —
+ * unless an R2 bucket takes them (see {@link r2ContentStore}).
+ */
+exports.MAX_DURABLE_OBJECT_ENTRY_BYTES = 2 * 1024 * 1024 - 64 * 1024;
+function toBinding(value) {
+    if (value instanceof Uint8Array) {
+        if (value.byteLength > exports.MAX_DURABLE_OBJECT_ENTRY_BYTES) {
+            throw new Error(`Entry of ${value.byteLength} bytes exceeds the ${exports.MAX_DURABLE_OBJECT_ENTRY_BYTES}-byte limit of this server`);
+        }
+        return value.buffer.slice(value.byteOffset, value.byteOffset + value.byteLength);
+    }
+    return value;
+}
+/** {@link SqliteExecutor} over `ctx.storage.sql`. */
+function createDurableObjectSqlExecutor(sql) {
+    return {
+        async exec(statement) {
+            sql.exec(statement);
+        },
+        async run(statement, params = []) {
+            const cursor = sql.exec(statement, ...params.map(toBinding));
+            cursor.toArray();
+            return { changes: cursor.rowsWritten };
+        },
+        async get(statement, params = []) {
+            const rows = sql.exec(statement, ...params.map(toBinding)).toArray();
+            return rows[0];
+        },
+        async all(statement, params = []) {
+            return sql.exec(statement, ...params.map(toBinding)).toArray();
+        },
+    };
+}
+/** Payloads from this size on go to R2; well below the row limit, rare in practice. */
+exports.R2_CONTENT_THRESHOLD_BYTES = 1024 * 1024;
+/**
+ * Payloads of one store in R2, under `<keyPrefix><contentHash>`. The key
+ * prefix names the tenant, database and store, so stores never share
+ * objects and a database's objects can be removed by prefix.
+ */
+function r2ContentStore(bucket, keyPrefix) {
+    return {
+        thresholdBytes: exports.R2_CONTENT_THRESHOLD_BYTES,
+        async put(contentHash, bytes) {
+            await bucket.put(`${keyPrefix}${contentHash}`, bytes);
+        },
+        async get(contentHash) {
+            const object = await bucket.get(`${keyPrefix}${contentHash}`);
+            return object ? new Uint8Array(await object.arrayBuffer()) : null;
+        },
+        async delete(contentHash) {
+            await bucket.delete(`${keyPrefix}${contentHash}`);
+        },
+        async clear() {
+            await deleteR2Prefix(bucket, keyPrefix);
+        },
+    };
+}
+/** Remove every object under `prefix`. */
+async function deleteR2Prefix(bucket, prefix) {
+    let cursor;
+    do {
+        const page = await bucket.list({ prefix, cursor, limit: 1000 });
+        if (page.objects.length > 0) {
+            await bucket.delete(page.objects.map((object) => object.key));
+        }
+        cursor = page.truncated ? page.cursor : undefined;
+    } while (cursor);
+}
+/** Durable Object SQLite refuses statements with more bound parameters than this. */
+exports.DURABLE_OBJECT_MAX_BOUND_PARAMETERS = 100;
+function createDurableObjectStoreBackend(sql, tablePrefix, externalContent) {
+    return (0, SqliteDriver_1.createSqlBackend)(createDurableObjectSqlExecutor(sql), {
+        tablePrefix,
+        explicitTransactions: false,
+        externalContent,
+        maxBoundParameters: exports.DURABLE_OBJECT_MAX_BOUND_PARAMETERS,
+    });
+}
+/** A content-addressed store whose tables carry `tablePrefix` in the object's database. */
+function createDurableObjectStore(sql, dbId, storeKind, tablePrefix, externalContent) {
+    return new SqliteContentAddressedStore_1.SqliteContentAddressedStore(dbId, storeKind, createDurableObjectStoreBackend(sql, tablePrefix, externalContent));
+}
+/**
+ * {@link ServerDataStore} on a key/value table. "Directories" are derived from
+ * the `/`-separated keys, as on the file system.
+ */
+class DurableObjectServerDataStore {
+    constructor(sql) {
+        this.sql = sql;
+        sql.exec("CREATE TABLE IF NOT EXISTS mindoo_server_kv (key TEXT PRIMARY KEY NOT NULL, value BLOB NOT NULL)");
+    }
+    static normalize(key) {
+        return key.split("/").filter((part) => part.length > 0).join("/");
+    }
+    exists(key) {
+        const normalized = DurableObjectServerDataStore.normalize(key);
+        if (normalized === "")
+            return true;
+        const row = this.sql
+            .exec("SELECT 1 AS present FROM mindoo_server_kv WHERE key = ? OR substr(key, 1, ?) = ? LIMIT 1", normalized, normalized.length + 1, `${normalized}/`)
+            .toArray();
+        return row.length > 0;
+    }
+    readBytes(key) {
+        const rows = this.sql
+            .exec("SELECT value FROM mindoo_server_kv WHERE key = ?", DurableObjectServerDataStore.normalize(key))
+            .toArray();
+        return rows.length > 0 ? new Uint8Array(rows[0].value) : null;
+    }
+    readText(key) {
+        const bytes = this.readBytes(key);
+        return bytes === null ? null : new TextDecoder().decode(bytes);
+    }
+    writeBytes(key, value) {
+        if (value.byteLength > exports.MAX_DURABLE_OBJECT_ENTRY_BYTES) {
+            throw new Error(`Server state "${key}" is ${value.byteLength} bytes; Durable Object storage holds at most 2 MB per value`);
+        }
+        this.sql.exec("INSERT INTO mindoo_server_kv(key, value) VALUES(?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value", DurableObjectServerDataStore.normalize(key), value.buffer.slice(value.byteOffset, value.byteOffset + value.byteLength));
+    }
+    writeText(key, value) {
+        this.writeBytes(key, new TextEncoder().encode(value));
+    }
+    listDirectories(prefix) {
+        const normalized = DurableObjectServerDataStore.normalize(prefix);
+        const base = normalized === "" ? "" : `${normalized}/`;
+        const rows = this.sql
+            .exec("SELECT key FROM mindoo_server_kv WHERE substr(key, 1, ?) = ?", base.length, base)
+            .toArray();
+        const names = new Set();
+        for (const { key } of rows) {
+            const rest = key.substring(base.length);
+            const slash = rest.indexOf("/");
+            if (slash > 0)
+                names.add(rest.substring(0, slash));
+        }
+        return [...names];
+    }
+    /** Names of the values directly below `prefix` (not the directories). */
+    listFiles(prefix) {
+        const normalized = DurableObjectServerDataStore.normalize(prefix);
+        const base = normalized === "" ? "" : `${normalized}/`;
+        return this.sql
+            .exec("SELECT key FROM mindoo_server_kv WHERE substr(key, 1, ?) = ?", base.length, base)
+            .toArray()
+            .map(({ key }) => key.substring(base.length))
+            .filter((rest) => rest.length > 0 && !rest.includes("/"));
+    }
+    deleteTree(prefix) {
+        const normalized = DurableObjectServerDataStore.normalize(prefix);
+        if (normalized === "") {
+            this.sql.exec("DELETE FROM mindoo_server_kv");
+            return;
+        }
+        this.sql.exec("DELETE FROM mindoo_server_kv WHERE key = ? OR substr(key, 1, ?) = ?", normalized, normalized.length + 1, `${normalized}/`);
+    }
+}
+exports.DurableObjectServerDataStore = DurableObjectServerDataStore;
+//# sourceMappingURL=DurableObjectSql.js.map

package/dist/cloudflare/DurableObjectSql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DurableObjectSql.js","sourceRoot":"","sources":["../../src/cloudflare/DurableObjectSql.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAkCH,wEAkBC;AAUD,wCAiBC;AAGD,wCASC;AAKD,0EAWC;AAGD,4DAYC;AAxHD,+EAMsD;AACtD,6GAA0G;AAK1G;;;;GAIG;AACU,QAAA,8BAA8B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1E,SAAS,SAAS,CAAC,KAAkB;IACnC,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,UAAU,GAAG,sCAA8B,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,YAAY,KAAK,CAAC,UAAU,sBAAsB,sCAA8B,4BAA4B,CAC7G,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qDAAqD;AACrD,SAAgB,8BAA8B,CAAC,GAAe;IAC5D,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,SAAS;YAClB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,EAAE;YAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7D,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,EAAE;YAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,CAAC,CAAwC,CAAC;QACxD,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,EAAE;YAC9B,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAA+B,CAAC;QAC9F,CAAC;KACF,CAAC;AACJ,CAAC;AAED,uFAAuF;AAC1E,QAAA,0BAA0B,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD;;;;GAIG;AACH,SAAgB,cAAc,CAAC,MAAgB,EAAE,SAAiB;IAChE,OAAO;QACL,cAAc,EAAE,kCAA0B;QAC1C,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK;YAC1B,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,GAAG,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,WAAW;YACnB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,GAAG,WAAW,EAAE,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,WAAW;YACtB,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,SAAS,GAAG,WAAW,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0CAA0C;AACnC,KAAK,UAAU,cAAc,CAAC,MAAgB,EAAE,MAAc;IACnE,IAAI,MAA0B,CAAC;IAC/B,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC,QAAQ,MAAM,EAAE;AACnB,CAAC;AAED,qFAAqF;AACxE,QAAA,mCAAmC,GAAG,GAAG,CAAC;AAEvD,SAAgB,+BAA+B,CAC7C,GAAe,EACf,WAAmB,EACnB,eAAsC;IAEtC,OAAO,IAAA,+BAAgB,EAAC,8BAA8B,CAAC,GAAG,CAAC,EAAE;QAC3D,WAAW;QACX,oBAAoB,EAAE,KAAK;QAC3B,eAAe;QACf,kBAAkB,EAAE,2CAAmC;KACxD,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,SAAgB,wBAAwB,CACtC,GAAe,EACf,IAAY,EACZ,SAAoB,EACpB,WAAmB,EACnB,eAAsC;IAEtC,OAAO,IAAI,yDAA2B,CACpC,IAAI,EACJ,SAAS,EACT,+BAA+B,CAAC,GAAG,EAAE,WAAW,EAAE,eAAe,CAAC,CACnE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAa,4BAA4B;IACvC,YAA6B,GAAe;QAAf,QAAG,GAAH,GAAG,CAAY;QAC1C,GAAG,CAAC,IAAI,CACN,kGAAkG,CACnG,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,SAAS,CAAC,GAAW;QAClC,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,MAAM,UAAU,GAAG,4BAA4B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,UAAU,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,IAAI,CACH,0FAA0F,EAC1F,UAAU,EACV,UAAU,CAAC,MAAM,GAAG,CAAC,EACrB,GAAG,UAAU,GAAG,CACjB;aACA,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,SAAS,CAAC,GAAW;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,IAAI,CACH,kDAAkD,EAClD,4BAA4B,CAAC,SAAS,CAAC,GAAG,CAAC,CAC5C;aACA,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAED,QAAQ,CAAC,GAAW;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,UAAU,CAAC,GAAW,EAAE,KAAiB;QACvC,IAAI,KAAK,CAAC,UAAU,GAAG,sCAA8B,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,iBAAiB,GAAG,QAAQ,KAAK,CAAC,UAAU,6DAA6D,CAC1G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,6GAA6G,EAC7G,4BAA4B,CAAC,SAAS,CAAC,GAAG,CAAC,EAC3C,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAC1E,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,GAAW,EAAE,KAAa;QAClC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,eAAe,CAAC,MAAc;QAC5B,MAAM,UAAU,GAAG,4BAA4B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,CAAC;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,IAAI,CACH,8DAA8D,EAC9D,IAAI,CAAC,MAAM,EACX,IAAI,CACL;aACA,OAAO,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,KAAK,GAAG,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACpB,CAAC;IAED,yEAAyE;IACzE,SAAS,CAAC,MAAc;QACtB,MAAM,UAAU,GAAG,4BAA4B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,CAAC;QACvD,OAAO,IAAI,CAAC,GAAG;aACZ,IAAI,CACH,8DAA8D,EAC9D,IAAI,CAAC,MAAM,EACX,IAAI,CACL;aACA,OAAO,EAAE;aACT,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;aAC5C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,MAAM,UAAU,GAAG,4BAA4B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,qEAAqE,EACrE,UAAU,EACV,UAAU,CAAC,MAAM,GAAG,CAAC,EACrB,GAAG,UAAU,GAAG,CACjB,CAAC;IACJ,CAAC;CACF;AAxGD,oEAwGC"}

package/dist/cloudflare/MindooDatabaseObject.d.ts

@@ -0,0 +1,86 @@
+/**
+ * One Durable Object per (tenant, database), named `<tenantId>/<dbId>`.
+ *
+ * Each object runs the platform-neutral server core for its database: the
+ * docs and attachments stores live in the object's SQLite, and access control
+ * runs locally with the same code as on Node. For that it needs the tenant's
+ * directory, so every object other than `directory` keeps a read-only replica
+ * of the directory store and pulls new entries from the tenant's directory
+ * object before it serves a request (at most every few seconds, immediately
+ * when the directory announces a change, and once more when a request was
+ * denied — a grant may just have arrived).
+ *
+ * The `directory` object is also the tenant's hub: it answers the auth
+ * handshake (challenges are kept in memory), proxies RFC 3161 requests, holds
+ * the Server-Sent-Events streams and receives the change events of the other
+ * databases, and knows which databases the tenant has.
+ */
+import type { DurableObjectState, MindooCloudflareEnv } from "./types";
+export declare class MindooDatabaseObject {
+    private readonly ctx;
+    private readonly env;
+    private readonly settings;
+    private readonly cryptoAdapter;
+    private dataStore;
+    private stores;
+    private tenantId;
+    private dbId;
+    private tenantState;
+    private tenantStateLoad;
+    private tenantManager;
+    private core;
+    /** Change events of the whole tenant; only used in the directory object. */
+    private readonly eventBus;
+    private replicaCheckedAt;
+    private replicaRefresh;
+    /** Payload buffers of store RPC exchanges with the server object. */
+    private readonly rpcBytes;
+    /**
+     * Requests that carry entry payloads run one at a time: a batch of
+     * attachment chunks is up to ~25 MB plus its encrypted copies, and the
+     * isolate has 128 MB. Metadata requests are not queued.
+     */
+    private payloadQueue;
+    private withPayloadSlot;
+    constructor(ctx: DurableObjectState, env: MindooCloudflareEnv);
+    private openStorage;
+    private get isDirectory();
+    fetch(request: Request): Promise<Response>;
+    /** The object's own stores, and the directory (own or replica). */
+    private store;
+    /** R2 keys of this object's large entries start with this. */
+    private r2Prefix;
+    private loadTenantState;
+    private fetchTenantState;
+    /** Tell the tenant's directory object that this database exists. */
+    private registerWithDirectory;
+    private createCore;
+    private directoryObject;
+    /** Let the server object push an accepted write on to the peers. */
+    private reportToCluster;
+    private forwardEvent;
+    private registeredDatabases;
+    /** Directory object: let every database pull the directory and run its purges. */
+    private notifyDatabasesOfDirectoryChange;
+    /**
+     * Pull new directory entries into the replica. Returns whether anything
+     * arrived. Concurrent callers share one pull.
+     */
+    private refreshDirectoryReplica;
+    private pullDirectory;
+    /** Directory object: one page of directory entries after `cursor`. */
+    private directoryChanges;
+    private internal;
+    /**
+     * This object's stores for peer replication in the server object. Pulled
+     * entries of purged documents are refused, as on Node.
+     */
+    private storeRpc;
+    /** Delete everything of a removed tenant (the directory object first wipes the others). */
+    private wipe;
+    private public;
+    private sync;
+    /** Server-Sent-Events stream on the tenant's event bus (directory object only). */
+    private openEventStream;
+}
+//# sourceMappingURL=MindooDatabaseObject.d.ts.map

package/dist/cloudflare/MindooDatabaseObject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MindooDatabaseObject.d.ts","sourceRoot":"","sources":["../../src/cloudflare/MindooDatabaseObject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA2DH,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAyBvE,qBAAa,oBAAoB;IA+B7B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,GAAG;IA/BtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA8B;IAC5D,OAAO,CAAC,SAAS,CAAgC;IACjD,OAAO,CAAC,MAAM,CAAkD;IAChE,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,IAAI,CAAuB;IACnC,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,eAAe,CAAqC;IAC5D,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,IAAI,CAAmC;IAC/C,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsB;IAC/C,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,cAAc,CAAiC;IACvD,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAChD;;;;OAIG;IACH,OAAO,CAAC,YAAY,CAAuC;IAE3D,OAAO,CAAC,eAAe;gBAOJ,GAAG,EAAE,kBAAkB,EACvB,GAAG,EAAE,mBAAmB;IAM3C,OAAO,CAAC,WAAW;IAMnB,OAAO,KAAK,WAAW,GAEtB;IAEK,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IA2BhD,mEAAmE;IACnE,OAAO,CAAC,KAAK;IAwBb,8DAA8D;IAC9D,OAAO,CAAC,QAAQ;YAMF,eAAe;YAaf,gBAAgB;IAqD9B,oEAAoE;YACtD,qBAAqB;IAYnC,OAAO,CAAC,UAAU;IAyFlB,OAAO,CAAC,eAAe;IAIvB,oEAAoE;YACtD,eAAe;YAYf,YAAY;IAc1B,OAAO,CAAC,mBAAmB;IAK3B,kFAAkF;IAClF,OAAO,CAAC,gCAAgC;IAaxC;;;OAGG;YACW,uBAAuB;YAUvB,aAAa;IA0C3B,sEAAsE;YACxD,gBAAgB;YAchB,QAAQ;IAuCtB;;;OAGG;YACW,QAAQ;IAsCtB,2FAA2F;YAC7E,IAAI;YA0BJ,MAAM;YAyDN,IAAI;IAyClB,mFAAmF;IACnF,OAAO,CAAC,eAAe;CAoCxB"}