mindoodb 0.0.85 → 0.0.88

package/dist/cloudflare/storeRpc.js

@@ -0,0 +1,85 @@
+"use strict";
+/**
+ * Entry stores of a database object, reached from another object.
+ *
+ * Peer replication runs in the server object but the stores live in the
+ * database objects. The existing store RPC ({@link RpcContentAddressedStore} /
+ * {@link StoreRpcServer}) carries the calls: JSON for metadata, raw bytes for
+ * entry payloads, over internal requests between the objects.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StoreRpcBytes = void 0;
+exports.remoteObjectStore = remoteObjectStore;
+const RpcContentAddressedStore_1 = require("../core/appendonlystores/rpc/RpcContentAddressedStore");
+const http_1 = require("./http");
+const RPC_PATH = "/internal/store-rpc";
+class DurableObjectStoreRpcTransport {
+    constructor(stub, headers) {
+        this.stub = stub;
+        this.headers = headers;
+    }
+    async call(request) {
+        const response = await this.stub.fetch(`${http_1.INTERNAL_ORIGIN}${RPC_PATH}`, {
+            method: "POST",
+            headers: { ...this.headers, "content-type": "application/json" },
+            body: JSON.stringify(request),
+        });
+        const body = (await response.json());
+        if (!response.ok) {
+            throw new Error(body.error ?? `Store RPC ${request.method} failed: HTTP ${response.status}`);
+        }
+        return body.result;
+    }
+    async sendBytes(blobId, bytes) {
+        const response = await this.stub.fetch(`${http_1.INTERNAL_ORIGIN}${RPC_PATH}/bytes/${encodeURIComponent(blobId)}`, {
+            method: "PUT",
+            headers: this.headers,
+            body: bytes,
+        });
+        if (!response.ok)
+            throw new Error(`Store RPC upload failed: HTTP ${response.status}`);
+    }
+    async receiveBytes(blobId) {
+        const response = await this.stub.fetch(`${http_1.INTERNAL_ORIGIN}${RPC_PATH}/bytes/${encodeURIComponent(blobId)}`, {
+            headers: this.headers,
+        });
+        if (!response.ok)
+            throw new Error(`Store RPC download failed: HTTP ${response.status}`);
+        return new Uint8Array(await response.arrayBuffer());
+    }
+}
+/** A store of `dbId` in the object `stub`; `headers` address and authorize the call. */
+function remoteObjectStore(stub, headers, tenantId, dbId, kind) {
+    return new RpcContentAddressedStore_1.RpcContentAddressedStore(new DurableObjectStoreRpcTransport(stub, headers), { scope: tenantId, dbId, kind }, RpcContentAddressedStore_1.SQLITE_STORE_RPC_METHODS);
+}
+/** Payload buffers between the calls of one store RPC exchange. */
+class StoreRpcBytes {
+    constructor() {
+        this.buffers = new Map();
+    }
+    async take(blobId) {
+        const bytes = this.buffers.get(blobId) ?? null;
+        this.buffers.delete(blobId);
+        return bytes;
+    }
+    async offer(blobId, bytes) {
+        this.buffers.set(blobId, bytes);
+    }
+    /** Serve the byte routes under {@link RPC_PATH}; null for anything else. */
+    async handle(path, request) {
+        const match = /^\/internal\/store-rpc\/bytes\/([^/]+)$/.exec(path);
+        if (!match)
+            return null;
+        const blobId = decodeURIComponent(match[1]);
+        if (request.method === "PUT") {
+            this.buffers.set(blobId, new Uint8Array(await request.arrayBuffer()));
+            return (0, http_1.jsonResponse)(200, { ok: true });
+        }
+        const bytes = await this.take(blobId);
+        return bytes
+            ? new Response(bytes, { headers: { "content-type": "application/octet-stream" } })
+            : (0, http_1.jsonResponse)(404, { error: "Unknown buffer" });
+    }
+}
+exports.StoreRpcBytes = StoreRpcBytes;
+//# sourceMappingURL=storeRpc.js.map

package/dist/cloudflare/storeRpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storeRpc.js","sourceRoot":"","sources":["../../src/cloudflare/storeRpc.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAqDH,8CAYC;AA/DD,oGAK+D;AAG/D,iCAAuD;AAGvD,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AAEvC,MAAM,8BAA8B;IAClC,YACmB,IAAuB,EACvB,OAA+B;QAD/B,SAAI,GAAJ,IAAI,CAAmB;QACvB,YAAO,GAAP,OAAO,CAAwB;IAC/C,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,OAAwB;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,sBAAe,GAAG,QAAQ,EAAE,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyC,CAAC;QAC7E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,aAAa,OAAO,CAAC,MAAM,iBAAiB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,KAAiB;QAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,sBAAe,GAAG,QAAQ,UAAU,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE;YAC1G,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,KAA4B;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,sBAAe,GAAG,QAAQ,UAAU,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE;YAC1G,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,OAAO,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;CACF;AAED,wFAAwF;AACxF,SAAgB,iBAAiB,CAC/B,IAAuB,EACvB,OAA+B,EAC/B,QAAgB,EAChB,IAAY,EACZ,IAAe;IAEf,OAAO,IAAI,mDAAwB,CACjC,IAAI,8BAA8B,CAAC,IAAI,EAAE,OAAO,CAAC,EACjD,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAC/B,mDAAwB,CACzB,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAa,aAAa;IAA1B;QACmB,YAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IA0B3D,CAAC;IAxBC,KAAK,CAAC,IAAI,CAAC,MAAc;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,KAAiB;QAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,OAAgB;QACzC,MAAM,KAAK,GAAG,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACtE,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,OAAO,KAAK;YACV,CAAC,CAAC,IAAI,QAAQ,CAAC,KAA4B,EAAE,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,EAAE,CAAC;YACzG,CAAC,CAAC,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACrD,CAAC;CACF;AA3BD,sCA2BC"}

package/dist/cloudflare/types.d.ts

@@ -0,0 +1,101 @@
+/**
+ * The slice of the Cloudflare Workers runtime API the MindooDB host uses.
+ *
+ * Declared here instead of depending on `@cloudflare/workers-types`, so the
+ * host compiles and unit-tests with the rest of the package. Shapes follow
+ * the runtime: https://developers.cloudflare.com/durable-objects/api/
+ */
+export type SqlStorageValue = ArrayBuffer | string | number | null;
+export interface SqlStorageCursor<T = Record<string, SqlStorageValue>> extends Iterable<T> {
+    toArray(): T[];
+    readonly rowsWritten: number;
+}
+export interface SqlStorage {
+    exec<T = Record<string, SqlStorageValue>>(query: string, ...bindings: unknown[]): SqlStorageCursor<T>;
+}
+export interface DurableObjectStorage {
+    readonly sql: SqlStorage;
+    deleteAll(): Promise<void>;
+    getAlarm(): Promise<number | null>;
+    setAlarm(scheduledTime: number | Date): Promise<void>;
+    deleteAlarm(): Promise<void>;
+}
+export interface DurableObjectId {
+    toString(): string;
+}
+export interface DurableObjectState {
+    readonly id: DurableObjectId;
+    readonly storage: DurableObjectStorage;
+    waitUntil(promise: Promise<unknown>): void;
+    blockConcurrencyWhile<T>(callback: () => Promise<T>): Promise<T>;
+}
+export interface DurableObjectStub {
+    fetch(input: Request | string, init?: RequestInit): Promise<Response>;
+}
+export interface DurableObjectNamespace {
+    idFromName(name: string): DurableObjectId;
+    get(id: DurableObjectId): DurableObjectStub;
+}
+/** The slice of an R2 bucket binding used for large entries. */
+export interface R2Bucket {
+    put(key: string, value: ArrayBuffer | ArrayBufferView): Promise<unknown>;
+    get(key: string): Promise<{
+        arrayBuffer(): Promise<ArrayBuffer>;
+    } | null>;
+    delete(keys: string | string[]): Promise<void>;
+    list(options?: {
+        prefix?: string;
+        cursor?: string;
+        limit?: number;
+    }): Promise<{
+        objects: Array<{
+            key: string;
+        }>;
+        truncated: boolean;
+        cursor?: string;
+    }>;
+}
+/** Workers Rate Limiting binding (`ratelimits` in the wrangler config). */
+export interface RateLimitBinding {
+    limit(options: {
+        key: string;
+    }): Promise<{
+        success: boolean;
+    }>;
+}
+export interface ExecutionContext {
+    waitUntil(promise: Promise<unknown>): void;
+}
+/** Bindings and variables of the MindooDB Worker (see `cloudflare/wrangler.jsonc`). */
+export interface MindooCloudflareEnv {
+    MINDOODB_SERVER: DurableObjectNamespace;
+    MINDOODB_DATABASES: DurableObjectNamespace;
+    /**
+     * Optional R2 bucket for entries too large for Durable Object SQLite
+     * (rows are capped at 2 MB). Without it such entries are refused.
+     */
+    MINDOODB_LARGE_ENTRIES?: R2Bucket;
+    /** `server.identity.json` content (secret). Created by `cloudflare/scripts/setup.mjs`. */
+    MINDOODB_SERVER_IDENTITY?: string;
+    /** Password of the server identity (secret). */
+    MINDOODB_SERVER_PASSWORD?: string;
+    /** Base64 secret from which per-tenant sync-token keys are derived (secret). */
+    MINDOODB_JWT_SECRET?: string;
+    /** Initial `config.json` (capabilities); `PUT /system/config` stores a replacement. */
+    MINDOODB_SERVER_CONFIG?: string;
+    /** Comma-separated allowed CORS origins, like the Node server's env var. */
+    MINDOODB_CORS_ORIGIN?: string;
+    /** JSON body limit, e.g. "5mb" (default). */
+    MINDOODB_JSON_BODY_LIMIT?: string;
+    /** RFC 3161 providers, same syntax as on Node. */
+    MINDOODB_TSA_PROVIDERS?: string;
+    MINDOODB_ALLOW_INSECURE_SYNC_URLS?: string;
+    /** Optional rate limiters; without them the tier is not enforced. */
+    MINDOODB_RATE_LIMIT_GLOBAL?: RateLimitBinding;
+    MINDOODB_RATE_LIMIT_AUTH?: RateLimitBinding;
+    MINDOODB_RATE_LIMIT_SYNC?: RateLimitBinding;
+    MINDOODB_RATE_LIMIT_SYSTEM?: RateLimitBinding;
+    MINDOODB_RATE_LIMIT_TIMESTAMP?: RateLimitBinding;
+    MINDOODB_RATE_LIMIT_PEER?: RateLimitBinding;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cloudflare/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cloudflare/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAEnE,MAAM,WAAW,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAE,SAAQ,QAAQ,CAAC,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC,EAAE,CAAC;IACf,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;CACvG;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,IAAI,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3C,qBAAqB,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAAC;IAC1C,GAAG,CAAC,EAAE,EAAE,eAAe,GAAG,iBAAiB,CAAC;CAC7C;AAED,gEAAgE;AAChE,MAAM,WAAW,QAAQ;IACvB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC1E,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5E,OAAO,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAChC,SAAS,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;CACJ;AAED,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;CAC5C;AAED,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,sBAAsB,CAAC;IACxC,kBAAkB,EAAE,sBAAsB,CAAC;IAC3C;;;OAGG;IACH,sBAAsB,CAAC,EAAE,QAAQ,CAAC;IAElC,0FAA0F;IAC1F,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,gDAAgD;IAChD,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uFAAuF;IACvF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,4EAA4E;IAC5E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,6CAA6C;IAC7C,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,kDAAkD;IAClD,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iCAAiC,CAAC,EAAE,MAAM,CAAC;IAE3C,qEAAqE;IACrE,0BAA0B,CAAC,EAAE,gBAAgB,CAAC;IAC9C,wBAAwB,CAAC,EAAE,gBAAgB,CAAC;IAC5C,wBAAwB,CAAC,EAAE,gBAAgB,CAAC;IAC5C,0BAA0B,CAAC,EAAE,gBAAgB,CAAC;IAC9C,6BAA6B,CAAC,EAAE,gBAAgB,CAAC;IACjD,wBAAwB,CAAC,EAAE,gBAAgB,CAAC;CAC7C"}

package/dist/cloudflare/types.js

@@ -0,0 +1,10 @@
+"use strict";
+/**
+ * The slice of the Cloudflare Workers runtime API the MindooDB host uses.
+ *
+ * Declared here instead of depending on `@cloudflare/workers-types`, so the
+ * host compiles and unit-tests with the rest of the package. Shapes follow
+ * the runtime: https://developers.cloudflare.com/durable-objects/api/
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cloudflare/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/cloudflare/types.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG"}

package/dist/cloudflare/worker.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The MindooDB Worker: routes every request of the MindooDB HTTP API to the
+ * Durable Object that serves it.
+ *
+ * - `/system/*` (including `/system/peer/*` and `/system/cluster/*`) and
+ *   discovery → the server object (config, tenants, key bag, peer replication)
+ * - `/:tenantId/auth/*`, `/:tenantId/timestamps/*`, the event stream → the
+ *   tenant's `directory` object
+ * - `/:tenantId/sync/:kind/:op` → the object of the database named by `dbId`
+ *   (query string for GET, JSON body, or the binary message header)
+ *
+ * Paths, status codes and bodies match the Node server. The cron trigger
+ * drives peer replication (`scheduled`).
+ */
+import type { ExecutionContext, MindooCloudflareEnv } from "./types";
+declare const _default: {
+    fetch(request: Request, env: MindooCloudflareEnv, _ctx: ExecutionContext): Promise<Response>;
+    /**
+     * Cron trigger (`triggers.crons` in wrangler.jsonc): one peer replication
+     * pass. Replication runs only when `config.json` sets `cluster.autoSync`.
+     */
+    scheduled(_controller: unknown, env: MindooCloudflareEnv, ctx: ExecutionContext): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=worker.d.ts.map

package/dist/cloudflare/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/cloudflare/worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA0BH,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;;mBAoJ9C,OAAO,OAAO,mBAAmB,QAAQ,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAsBlG;;;OAGG;2BAC0B,OAAO,OAAO,mBAAmB,OAAO,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;;AA3BvG,wBAoCE"}

package/dist/cloudflare/worker.js

@@ -0,0 +1,170 @@
+"use strict";
+/**
+ * The MindooDB Worker: routes every request of the MindooDB HTTP API to the
+ * Durable Object that serves it.
+ *
+ * - `/system/*` (including `/system/peer/*` and `/system/cluster/*`) and
+ *   discovery → the server object (config, tenants, key bag, peer replication)
+ * - `/:tenantId/auth/*`, `/:tenantId/timestamps/*`, the event stream → the
+ *   tenant's `directory` object
+ * - `/:tenantId/sync/:kind/:op` → the object of the database named by `dbId`
+ *   (query string for GET, JSON body, or the binary message header)
+ *
+ * Paths, status codes and bodies match the Node server. The cron trigger
+ * drives peer replication (`scheduled`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const binaryEntryFraming_1 = require("../core/appendonlystores/network/binaryEntryFraming");
+const validation_1 = require("../server/validation");
+const http_1 = require("./http");
+const host_1 = require("./host");
+const DIRECTORY_DB_ID = "directory";
+/** Copy of the request for an object, with internal headers set and client-supplied ones dropped. */
+function forward(request, url, body, headers) {
+    const forwarded = new Headers();
+    request.headers.forEach((value, name) => {
+        if (!name.toLowerCase().startsWith("x-mindoodb-"))
+            forwarded.set(name, value);
+    });
+    for (const [name, value] of Object.entries(headers))
+        forwarded.set(name, value);
+    return new Request(`${http_1.INTERNAL_ORIGIN}${url.pathname}${url.search}`, {
+        method: request.method,
+        headers: forwarded,
+        body: body && request.method !== "GET" && request.method !== "HEAD" ? body : undefined,
+    });
+}
+/** The database a sync request is for, from wherever the client put `dbId`. */
+function syncDbId(request, url, body, name) {
+    if (request.method === "GET") {
+        const dbId = url.searchParams.get("dbId");
+        return name === "events" ? dbId || DIRECTORY_DB_ID : dbId;
+    }
+    if (!body)
+        return undefined;
+    const contentType = (request.headers.get("content-type") ?? "").split(";")[0].trim().toLowerCase();
+    if (contentType === binaryEntryFraming_1.BINARY_ENTRIES_CONTENT_TYPE) {
+        try {
+            return (0, binaryEntryFraming_1.decodeBinaryEntryMessage)(body).header.dbId;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    try {
+        return JSON.parse(new TextDecoder().decode(body))?.dbId;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function handle(request, env, route, url, clientIp) {
+    const internal = { [http_1.INTERNAL_HEADER.clientIp]: clientIp };
+    switch (route.kind) {
+        case "health":
+            return (0, http_1.jsonResponse)(200, { status: "ok", timestamp: Date.now() });
+        case "notFound":
+            return (0, http_1.jsonResponse)(404, { error: "Not found" });
+        case "unsupported":
+            return (0, http_1.jsonResponse)(501, { error: `${route.feature} is not available on this server` });
+        case "serverInfo":
+        case "clusterMirrors":
+        case "publicInfosFingerprints":
+            return (0, host_1.serverObject)(env).fetch(forward(request, url, null, internal));
+        case "peer":
+        case "system": {
+            // Peer routes are server-to-server traffic with their own budget, as on
+            // Node: the admin budget would throttle replication to a crawl.
+            const limited = route.kind === "peer"
+                ? await (0, host_1.rateLimited)(env.MINDOODB_RATE_LIMIT_PEER, `peer:${(0, http_1.clientAddressKey)(clientIp)}`, "Too many peer requests, please try again later")
+                : await (0, host_1.rateLimited)(env.MINDOODB_RATE_LIMIT_SYSTEM, `system:${(0, http_1.clientAddressKey)(clientIp)}`, "Too many system requests, please try again later");
+            if (limited)
+                return limited;
+            const body = request.body ? new Uint8Array(await request.arrayBuffer()) : null;
+            return (0, host_1.serverObject)(env).fetch(forward(request, url, body, internal));
+        }
+    }
+    // Everything below is tenant-scoped.
+    const tenantId = route.tenantId.toLowerCase();
+    try {
+        (0, validation_1.validateTenantIdFormat)(tenantId);
+    }
+    catch {
+        return (0, http_1.jsonResponse)(400, { error: "Invalid tenant ID format" });
+    }
+    const body = request.body ? new Uint8Array(await request.arrayBuffer()) : null;
+    const settings = (0, host_1.createHostSettings)(env);
+    if (body && settings.jsonBodyLimitBytes !== null && body.byteLength > settings.jsonBodyLimitBytes) {
+        return (0, http_1.jsonResponse)(413, { error: "Request body too large" });
+    }
+    const toObject = (dbId, extra = {}) => (0, host_1.databaseObject)(env, tenantId, dbId).fetch(forward(request, url, body, {
+        ...internal,
+        ...extra,
+        [host_1.OBJECT_HEADER.tenantId]: tenantId,
+        [host_1.OBJECT_HEADER.dbId]: dbId,
+    }));
+    if (route.kind !== "sync") {
+        return toObject(DIRECTORY_DB_ID);
+    }
+    let dbId;
+    try {
+        dbId = (0, validation_1.validateIdentifier)(syncDbId(request, url, body, route.name), "dbId");
+    }
+    catch (error) {
+        // The object reports a missing tenant first, as the Node server does.
+        const message = error instanceof validation_1.ValidationError ? error.message : "Invalid dbId";
+        const probe = await toObject(DIRECTORY_DB_ID);
+        return probe.status === 404 ? probe : (0, http_1.jsonResponse)(400, { error: message });
+    }
+    if (route.name !== "events") {
+        return toObject(dbId);
+    }
+    // The read gate of an event stream runs in the database it names; the
+    // stream itself lives in the tenant's directory object, where every
+    // database of the tenant publishes its changes.
+    if (dbId !== DIRECTORY_DB_ID) {
+        const gateUrl = new URL(url);
+        gateUrl.pathname = url.pathname.replace(/\/events\/?$/i, "/capabilities");
+        const gate = await (0, host_1.databaseObject)(env, tenantId, dbId).fetch(forward(request, gateUrl, null, {
+            ...internal,
+            [host_1.OBJECT_HEADER.tenantId]: tenantId,
+            [host_1.OBJECT_HEADER.dbId]: dbId,
+        }));
+        if (!gate.ok)
+            return gate;
+        return toObject(DIRECTORY_DB_ID, { [http_1.INTERNAL_HEADER.eventsGatePassed]: "1" });
+    }
+    return toObject(DIRECTORY_DB_ID);
+}
+exports.default = {
+    async fetch(request, env, _ctx) {
+        const origins = (0, http_1.parseCorsOrigins)(env.MINDOODB_CORS_ORIGIN);
+        const preflight = (0, http_1.corsPreflight)(request, origins);
+        if (preflight)
+            return preflight;
+        const url = new URL(request.url);
+        const clientIp = request.headers.get("cf-connecting-ip") ?? "unknown";
+        try {
+            const limited = await (0, host_1.rateLimited)(env.MINDOODB_RATE_LIMIT_GLOBAL, `global:${(0, http_1.clientAddressKey)(clientIp)}`, "Too many requests, please try again later");
+            const response = limited ?? (await handle(request, env, (0, http_1.matchRoute)(request.method, url.pathname), url, clientIp));
+            return (0, http_1.decorateResponse)(request, response, origins);
+        }
+        catch (error) {
+            console.error("[MindooDB Worker] Unhandled error:", error);
+            return (0, http_1.decorateResponse)(request, (0, http_1.jsonResponse)(500, { error: "Internal server error" }), origins);
+        }
+    },
+    /**
+     * Cron trigger (`triggers.crons` in wrangler.jsonc): one peer replication
+     * pass. Replication runs only when `config.json` sets `cluster.autoSync`.
+     */
+    async scheduled(_controller, env, ctx) {
+        ctx.waitUntil((0, host_1.serverObject)(env)
+            .fetch(`${http_1.INTERNAL_ORIGIN}/internal/cluster/tick`, { method: "POST", headers: (0, host_1.internalHeaders)() })
+            .then(async (response) => {
+            if (!response.ok)
+                console.error(`[MindooDB Worker] Cluster tick failed: ${await response.text()}`);
+        }));
+    },
+};
+//# sourceMappingURL=worker.js.map

package/dist/cloudflare/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/cloudflare/worker.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AAEH,4FAG6D;AAC7D,qDAAmG;AACnG,iCAUgB;AAChB,iCAOgB;AAGhB,MAAM,eAAe,GAAG,WAAW,CAAC;AAEpC,qGAAqG;AACrG,SAAS,OAAO,CACd,OAAgB,EAChB,GAAQ,EACR,IAAuB,EACvB,OAA+B;IAE/B,MAAM,SAAS,GAAG,IAAI,OAAO,EAAE,CAAC;IAChC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACtC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChF,OAAO,IAAI,OAAO,CAAC,GAAG,sBAAe,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE;QACnE,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAE,IAA4B,CAAC,CAAC,CAAC,SAAS;KAChH,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,OAAgB,EAAE,GAAQ,EAAE,IAAuB,EAAE,IAAY;IACjF,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnG,IAAI,WAAW,KAAK,gDAA2B,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,OAAO,IAAA,6CAAwB,EAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAwB,EAAE,IAAI,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,OAAgB,EAChB,GAAwB,EACxB,KAAmB,EACnB,GAAQ,EACR,QAAgB;IAEhB,MAAM,QAAQ,GAAG,EAAE,CAAC,sBAAe,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC1D,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAEpE,KAAK,UAAU;YACb,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAEnD,KAAK,aAAa;YAChB,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,kCAAkC,EAAE,CAAC,CAAC;QAE1F,KAAK,YAAY,CAAC;QAClB,KAAK,gBAAgB,CAAC;QACtB,KAAK,yBAAyB;YAC5B,OAAO,IAAA,mBAAY,EAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAExE,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,wEAAwE;YACxE,gEAAgE;YAChE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM;gBACnC,CAAC,CAAC,MAAM,IAAA,kBAAW,EACf,GAAG,CAAC,wBAAwB,EAC5B,QAAQ,IAAA,uBAAgB,EAAC,QAAQ,CAAC,EAAE,EACpC,gDAAgD,CACjD;gBACH,CAAC,CAAC,MAAM,IAAA,kBAAW,EACf,GAAG,CAAC,0BAA0B,EAC9B,UAAU,IAAA,uBAAgB,EAAC,QAAQ,CAAC,EAAE,EACtC,kDAAkD,CACnD,CAAC;YACN,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/E,OAAO,IAAA,mBAAY,EAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,IAAA,mCAAsB,EAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,MAAM,QAAQ,GAAG,IAAA,yBAAkB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,IAAI,IAAI,QAAQ,CAAC,kBAAkB,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAClG,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,QAAgC,EAAE,EAAE,EAAE,CACpE,IAAA,qBAAc,EAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CACvC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE;QAC1B,GAAG,QAAQ;QACX,GAAG,KAAK;QACR,CAAC,oBAAa,CAAC,QAAQ,CAAC,EAAE,QAAQ;QAClC,CAAC,oBAAa,CAAC,IAAI,CAAC,EAAE,IAAI;KAC3B,CAAC,CACH,CAAC;IAEJ,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,+BAAkB,EAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sEAAsE;QACtE,MAAM,OAAO,GAAG,KAAK,YAAY,4BAAe,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;QAClF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,sEAAsE;IACtE,oEAAoE;IACpE,gDAAgD;IAChD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,IAAA,qBAAc,EAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAC1D,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;YAC9B,GAAG,QAAQ;YACX,CAAC,oBAAa,CAAC,QAAQ,CAAC,EAAE,QAAQ;YAClC,CAAC,oBAAa,CAAC,IAAI,CAAC,EAAE,IAAI;SAC3B,CAAC,CACH,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,sBAAe,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,QAAQ,CAAC,eAAe,CAAC,CAAC;AACnC,CAAC;AAED,kBAAe;IACb,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,GAAwB,EAAE,IAAsB;QAC5E,MAAM,OAAO,GAAG,IAAA,uBAAgB,EAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAA,oBAAa,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAEhC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,SAAS,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAW,EAC/B,GAAG,CAAC,0BAA0B,EAC9B,UAAU,IAAA,uBAAgB,EAAC,QAAQ,CAAC,EAAE,EACtC,2CAA2C,CAC5C,CAAC;YACF,MAAM,QAAQ,GACZ,OAAO,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,IAAA,iBAAU,EAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YACnG,OAAO,IAAA,uBAAgB,EAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,IAAA,uBAAgB,EAAC,OAAO,EAAE,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,WAAoB,EAAE,GAAwB,EAAE,GAAqB;QACnF,GAAG,CAAC,SAAS,CACX,IAAA,mBAAY,EAAC,GAAG,CAAC;aACd,KAAK,CAAC,GAAG,sBAAe,wBAAwB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAA,sBAAe,GAAE,EAAE,CAAC;aACjG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YACvB,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,CAAC,KAAK,CAAC,0CAA0C,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrG,CAAC,CAAC,CACL,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/core/BaseMindooDB.d.ts

@@ -1,4 +1,5 @@
-import { MindooDB, CreateOptions, DeleteOptions, ListDocumentIdsOptions, InaccessibleDocumentInfo, ListDocumentCreationDatesOptions, DocumentCreationDate, IterateChangesOptions, UndeleteOptions, ChangeOptions, PatchOptions, DocumentDagAnalysisTimestamp, DocumentDagAnalysisResult, DocumentDagBranchMaterializationResult, DocumentRestoreResult, DocumentDagEntryDetails, DocumentConflictAnalysisEvent, DocumentConflictAnalysisOptions, DocumentConflictBaseValue, DocumentConflictBaseValueQuery, DocumentConflictReport, DocumentConflictReportOptions, ConflictScanCheckpoint, MindooDoc, MindooTenant, ProcessChangesCursor, ProcessChangesResult, DocumentHistoryResult, RevisionCursor, ChangeRevisionResult, AttachmentConfig, DocumentCacheConfig, SnapshotConfig, SigningKeyPair, PerformanceCallback, ProcessChangeSummaryResult, IncompleteAttachmentUploadReclaimResult, SyncOptions, SyncResult, DocumentHistoryPageOptions, DocumentHistoryPageResult, MindooJsonPatch, MindooTextCursorOptions, MindooTextCursorPosition, MindooTextCursorPositionsResult, MindooTextCursorsResult, MindooJsonPatchResult, MindooRichTextPatch, MindooRichTextPatchResult, MindooRichTextStepPatch, MindooDocumentUpdate, MindooRichTextSnapshot, MindooAutomergeSnapshot, MindooAutomergeChangesPatch, MindooAutomergePatchResult, MindooTextPatch, MindooTextPatchResult, StartBackgroundWarmerOptions, BackgroundWarmerProgress, DbChangeListener } from "./types";
+import { MindooDB, CreateOptions, DeleteOptions, ListDocumentIdsOptions, InaccessibleDocumentInfo, ListDocumentCreationDatesOptions, DocumentCreationDate, IterateChangesOptions, UndeleteOptions, ChangeOptions, PatchOptions, DocumentDagAnalysisTimestamp, DocumentDagAnalysisResult, DocumentDagBranchMaterializationResult, DocumentRestoreResult, DocumentDagEntryDetails, DocumentConflictAnalysisEvent, DocumentConflictAnalysisOptions, DocumentConflictBaseValue, DocumentConflictBaseValueQuery, DocumentConflictReport, DocumentConflictReportOptions, ConflictScanCheckpoint, MindooDoc, MindooFieldType, MindooTenant, ProcessChangesCursor, ProcessChangesResult, DocumentHistoryResult, RevisionCursor, ChangeRevisionResult, AttachmentConfig, DocumentCacheConfig, SnapshotConfig, SigningKeyPair, PerformanceCallback, ProcessChangeSummaryResult, IncompleteAttachmentUploadReclaimResult, SyncOptions, SyncResult, DocumentHistoryPageOptions, DocumentHistoryPageResult, MindooJsonPatch, MindooTextCursorOptions, MindooTextCursorPosition, MindooTextCursorPositionsResult, MindooTextCursorsResult, MindooJsonPatchResult, MindooRichTextPatch, MindooRichTextPatchResult, MindooRichTextStepPatch, MindooDocumentUpdate, MindooRichTextSnapshot, MindooAutomergeSnapshot, MindooAutomergeChangesPatch, MindooAutomergePatchResult, MindooTextPatch, MindooTextPatchResult, StartBackgroundWarmerOptions, BackgroundWarmerProgress, DbChangeListener } from "./types";
+import type { BuiltinIngestEntry } from "./types";
 import { BaseMindooTenant } from "./BaseMindooTenant";
 import type { ContentAddressedStore } from "./appendonlystores/types";
 import { type DocumentHistoryPurgeOutcome } from "./appendonlystores/purgeDocumentHistory";
@@ -203,6 +204,25 @@ export declare class BaseMindooDB implements MindooDB {
      */
     private revisionFeedDocCache;
     private readonly revisionFeedCacheLimit;
+    /**
+     * Revisions of documents whose fold suffix holds un-witnessed entries, keyed
+     * by the exact fold (entry order, witness state and prefix). The feed
+     * re-discovers such entries on every resume, since their trusted time is the
+     * provisional `now`; while nothing about the document changed, only that
+     * trusted time differs, so the revisions are re-emitted from here instead
+     * of being loaded, verified, decrypted and folded again. Without it, every
+     * pass re-folded every un-witnessed document: registering N users offline
+     * cost O(N) per registration. An entry is replaced on any change and
+     * dropped once the document has no un-witnessed entries left.
+     *
+     * Each revision holds its own document state, so the cache is bounded: a
+     * document with a longer suffix, or one arriving when the cache is full, is
+     * folded every pass as before.
+     */
+    private provisionalRevisionCache;
+    private provisionalRevisionCacheSize;
+    private readonly provisionalRevisionCacheLimit;
+    private readonly provisionalRevisionCacheDocLimit;
     /**
      * Window size for batching encrypted-payload loads while folding a document's
      * revision suffix ({@link foldDocRevisions}): one {@link ContentAddressedStore.getEntries}
@@ -293,6 +313,16 @@ export declare class BaseMindooDB implements MindooDB {
     private syncStoreChangesInFlight;
     /** Shared follow-up run for callers that arrive mid-sync. */
     private syncStoreChangesQueued;
+    /**
+     * > 0 while this database hands a sealed document's wrap list to the tenant
+     * ({@link ingestSealed}). Unwrapping may resolve the own User-Key, which
+     * reads `directory` (grants, username hashes) and so calls
+     * {@link syncStoreChanges} on it. When this database *is* `directory` (a
+     * sealed admin document there, e.g. a mail gateway configuration sealed to
+     * the gateway), that call would wait for the very run that is waiting for
+     * it. Such nested calls return at once and read the index as it is.
+     */
+    private sealedIngestDepth;
     private changeListeners;
     private pendingChangeNotifications;
     private changeNotifyTimer;
@@ -435,19 +465,28 @@ export declare class BaseMindooDB implements MindooDB {
      * — a peer sync — and therefore have to apply the admin/owner rules
      * themselves.
      *
-     * Deliberately the same check the load path uses, so an entry admitted here
-     * is one that will also materialize. The alternative, accepting on ingest
-     * and dropping on load, leaves the entry sitting in the store and pushes it
-     * on to the server at the next sync, where it is refused and fails the run.
+     * This is the server's write rule ({@link evaluateBuiltinWrite}), not the
+     * lenient load-path filter. The load path may fail open because whatever it
+     * reads already passed a server; an entry arriving from a peer has passed
+     * nothing, so an owner hash that cannot be resolved is a refusal here, as it
+     * is on the server. Everything this admits also passes the load path, so an
+     * admitted entry still materializes.
+     *
+     * `batch` is the rest of the delivery: a new document arrives as its
+     * `doc_create` plus later changes in one batch, and the create is what names
+     * the owner. Pass entries with their payload (`encryptedData`) where you have
+     * it; a `doc_create` of a userkey document is decrypted to read
+     * `username_hash`.
      *
      * Returns false for databases without a builtin invariant, so callers can
      * ask unconditionally.
      */
-    violatesBuiltinWriteInvariant(entry: {
-        entryType?: string;
-        createdByPublicKey: string;
-        docId?: string;
-    }): Promise<boolean>;
+    violatesBuiltinWriteInvariant(entry: BuiltinIngestEntry, batch?: readonly BuiltinIngestEntry[]): Promise<boolean>;
+    /** Reason the builtin invariant refuses `entry` from a peer, or null. */
+    private builtinIngestDenial;
+    private isAdminKey;
+    /** `username_hash` out of a userkey document's `doc_create` payload. */
+    private usernameHashFromCreateEntry;
     private ensureSignerUsernameHash;
     /**
      * Owner of a personal `userdirectory` document: the person who signed its
@@ -1037,6 +1076,38 @@ export declare class BaseMindooDB implements MindooDB {
      * {@link MindooDB.purgeDocumentHistory}).
      */
     purgeDocumentHistory(docId: string): Promise<DocumentHistoryPurgeOutcome>;
+    /**
+     * Request the hard delete of deleted documents in a personal database
+     * (`mmail_…`, `mmailout_…`; docs/accesscontrol.md §6.11, "Purge"). Writes a
+     * purge request document (`purgereq_…`, `$publicinfos`) that names the
+     * documents; push it like any change. The server accepts it only from the
+     * owner's devices, a service with a matching `accessPrefixes` grant or the
+     * tenant admin, and only for documents that are deleted; it then removes
+     * their history and refuses it from then on. Every replica (also this one)
+     * removes the documents when it next pulls the request
+     * ({@link applyPurgeRequests}).
+     *
+     * @returns The id of the purge request document.
+     */
+    requestPurgeOfDeletedDocuments(docIds: string[]): Promise<string>;
+    /**
+     * The document ids the purge requests of this personal database name
+     * (§6.11). Empty for any other database. With `onlyAccepted`, only requests
+     * the server has accepted (their `doc_create` carries a witness receipt):
+     * a request that is still local, or that the server refused, purges
+     * nothing, so a refused request never loses data that stays on the server.
+     */
+    getPurgeRequestedDocIds(options?: {
+        onlyAccepted?: boolean;
+    }): Promise<Set<string>>;
+    /**
+     * Execute the purge requests of this personal database locally (§6.11):
+     * remove every named document that still has entries here. Idempotent; runs
+     * after every docs pull of a personal database.
+     *
+     * @returns How many documents were removed in this run.
+     */
+    applyPurgeRequests(): Promise<number>;
     /**
      * Drop everything this instance derived from a document whose store entries
      * were purged: the L1/L2 caches, summary values and full-text tokens (via
@@ -1319,6 +1390,12 @@ export declare class BaseMindooDB implements MindooDB {
     private prepareFreshDocumentCreate;
     getDocument(docId: string): Promise<MindooDoc>;
     getDocumentAtTimestamp(docId: string, timestamp: number): Promise<MindooDoc | null>;
+    /**
+     * Hands a sealed document's newest wrap list to the tenant, with nested
+     * {@link syncStoreChanges} calls on this database short-circuited meanwhile
+     * (see {@link sealedIngestDepth}).
+     */
+    private ingestSealed;
     /**
      * Unwrap a `$sealed:` DEK from entry recipient wraps into the tenant session
      * cache. `loadDocumentInternal` already does this; history, timestamp, and
@@ -1851,6 +1928,14 @@ export declare class BaseMindooDB implements MindooDB {
     private resolveReadableInternalDoc;
     applyJsonPatch(doc: MindooDoc, patch: MindooJsonPatch, options?: PatchOptions): Promise<MindooJsonPatchResult>;
     private changeDocInternal;
+    /** "counter" / "atomic" for the CRDT scalars that read as plain values, otherwise null. */
+    private automergeScalarKind;
+    /** Whether the text at `path` carries marks or block markers (rich text). */
+    private isRichTextAt;
+    private fieldTypeAt;
+    getFieldType(doc: MindooDoc, path: string | Array<string | number>): Promise<MindooFieldType | undefined>;
+    /** Replays the edits a changeDoc() callback made through getData(), see ChangeDocDraft. */
+    private applyChangeDocDraftOps;
     private validateTextPatch;
     private validateJsonPatch;
     private isAutomergeCounter;