or3-provider-sqlite 0.0.11 → 0.0.13

package/README.md

@@ -127,19 +127,27 @@ OR3_CONNECT_PROVIDER=sqlite
 
 On server startup, the Nitro plugin:
 
-1. Initializes the SQLite database (creates file if needed)
-2. Runs schema migrations automatically
-3. Registers `AuthWorkspaceStore` with ID `sqlite`
-4. Registers `SyncGatewayAdapter` when SQLite sync is selected
-5. Registers `ConnectStore` when SQLite Connect persistence is selected
-6. Registers `WebhookStore` and the admin stores (workspace access, workspace
-   settings, user search) — all runtimes except D1
-7. Registers `RateLimitProvider` with ID `sqlite` and the sync admin adapter
-8. Registers a durable `BackgroundJobProvider` with ID `sqlite`, so active chat
+1. Registers `AuthWorkspaceStore` with ID `sqlite`
+2. Registers `SyncGatewayAdapter` when SQLite conversation transfer is enabled
+3. Registers `ConnectStore` when SQLite Connect persistence is selected
+4. Registers `WebhookStore` on runtimes other than D1, and the admin store
+   provider (D1 declares server-side admin capabilities unavailable)
+5. Registers `RateLimitProvider` with ID `sqlite` and the sync admin adapter
+6. Registers a durable `BackgroundJobProvider` with ID `sqlite`, so active chat
    and workflow jobs remain addressable across Nitro HMR/module reloads
+7. Initializes the database and runs schema migrations eagerly on local
+   runtimes, or on the first Worker request for D1
 
-Registration is skipped when `auth.enabled` is `false`, or when neither SQLite
-sync, SQLite Connect, nor SQLite background jobs are selected (local-only mode).
+Registration is skipped when `auth.enabled` is `false`, or when SQLite is not
+selected for account workspaces, Connect or background jobs. Account workspaces
+use `sync.provider` even with `sync.enabled=false`; disabling conversation
+transfer does not disable the workspace store. The sync gateway remains
+unregistered while transfer is disabled.
+
+Workspace-only account storage requires `or3-provider-sqlite@0.0.12` or later.
+Version `0.0.11` skips workspace-store registration when sync, Connect and
+background jobs are all disabled, causing Chat to exit before listening.
+Upgrade the provider; conversation transfer can remain disabled.
 
 SQLite background jobs also persist mixed-runtime tool handoffs. Browser-only
 calls are atomically claimed and settled in `execution_json`; parked calls are
@@ -254,7 +262,7 @@ bun run build       # build for distribution
 
 ### Atomic workspace settings
 
-The workspace settings store implements `compareAndSet(workspaceId, key, expectedValue, nextValue)` atomically. A `null` expected value means the key must be absent; a conflict returns `false` without overwriting it. The host uses this for concurrent plugin setup saves and persistent AI spend reservations.
+The workspace settings store implements `compareAndSet(workspaceId, key, expectedValue, nextValue)` atomically. A `null` expected value means the key must be absent; a conflict returns `false` without overwriting it. The host uses this for concurrent plugin setup saves, bulk plugin enablement and permission review, and persistent AI spend reservations. A provider without this operation cannot safely run a bulk plugin rollout. A slow plugin write may outlive the HTTP response: the host reports pending after eight seconds and keeps the plugin lock until the atomic operation settles.
 
 
 ### Testing local changes in OR3 Chat
@@ -265,3 +273,19 @@ prints its selected path; restart it after provider edits. Missing repositories
 or failed builds fall back to installed packages with a warning.
 `OR3_LOCAL_PROVIDERS=false` disables local selection. Production builds use the
 installed package, so local development does not publish these changes.
+
+## Workspace Files and Trash admission
+
+Native synchronous adapters advertise workspace-item capability v1. Canonical
+posts/projects with catalog, logical Trash, or file-membership semantics require
+a current writer even when the incoming update omits those fields. Admission is
+checked inside the same write transaction, before versions or changes are
+allocated. Canonical retained post references include logically trashed catalog
+entries/documents and checkpoints. D1 does not advertise this transactional
+capability.
+
+This source change is a provider publication dependency for the host feature.
+Rebuild the provider before testing a file-linked host; follow the existing OR3
+release/update workflow separately. Local qualification does not authorize
+publication or a production migration. Files cloud exposure remains gated until
+the supported profile is qualified.

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "or3-provider-sqlite",
   "configKey": "or3-provider-sqlite",
-  "version": "0.0.11",
+  "version": "0.0.13",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/runtime/server/plugins/register.js

@@ -29,10 +29,12 @@ let d1RuntimeInitialization;
 export default defineNitroPlugin(async (nitroApp) => {
   const config = useRuntimeConfig();
   if (!config.auth?.enabled) return;
+  const workspaceSelected = config.sync?.provider === SQLITE_PROVIDER_ID;
   const syncSelected = config.sync?.enabled === true && config.sync?.provider === SQLITE_PROVIDER_ID;
   const connectSelected = config.connect?.enabled === true && config.connect?.provider === SQLITE_PROVIDER_ID;
   const backgroundJobsSelected = config.backgroundJobs?.enabled === true && config.backgroundJobs?.storageProvider === SQLITE_PROVIDER_ID;
-  if (!syncSelected && !connectSelected && !backgroundJobsSelected) return;
+  if (!workspaceSelected && !connectSelected && !backgroundJobsSelected)
+    return;
   const driver = getSqliteDriver();
   if (driver === "d1" && connectSelected) {
     throw new Error(

package/dist/runtime/server/sync/sqlite-sync-gateway-adapter.d.ts

@@ -15,10 +15,12 @@ export declare class SqliteSyncGatewayAdapter implements SyncGatewayAdapter {
         readonly snapshotBootstrap: "snapshot-v1";
         readonly historyRetention: "snapshot-v1";
         readonly backgroundGenerationHistory?: undefined;
+        readonly workspaceItems?: undefined;
     } | {
         readonly snapshotBootstrap: "snapshot-v1";
         readonly historyRetention: "snapshot-v1";
         readonly backgroundGenerationHistory: "v1";
+        readonly workspaceItems: "v1";
     };
     private get db();
     private assertCanonicalActor;

package/dist/runtime/server/sync/sqlite-sync-gateway-adapter.js

@@ -1,3 +1,4 @@
+import { hasWorkspaceItemSemantics, WORKSPACE_ITEM_CAPABILITY } from "./workspace-item-capability.js";
 import { createHash } from "node:crypto";
 import { canRunSyncHistoryGc } from "./history-gc-policy.js";
 import { createError } from "h3";
@@ -428,7 +429,8 @@ export class SqliteSyncGatewayAdapter {
     } : {
       snapshotBootstrap: "snapshot-v1",
       historyRetention: "snapshot-v1",
-      backgroundGenerationHistory: "v1"
+      backgroundGenerationHistory: "v1",
+      workspaceItems: "v1"
     };
   }
   get db() {
@@ -1068,6 +1070,20 @@ export class SqliteSyncGatewayAdapter {
     let finalServerVersion = 0;
     const hookEmissions = [];
     const runTx = raw.transaction(() => {
+      if (input.workspaceItemCapability !== WORKSPACE_ITEM_CAPABILITY) {
+        for (const op of uniqueOps) {
+          const table = SYNCED_TABLE_MAP[op.tableName];
+          if (!table || !["posts", "projects"].includes(op.tableName)) continue;
+          const canonical = raw.prepare("SELECT data_json FROM " + table + " WHERE id = ? AND workspace_id = ?").get(op.pk, workspaceId);
+          if (hasWorkspaceItemSemantics(op.tableName, op.payload) || hasWorkspaceItemSemantics(op.tableName, canonical ? JSON.parse(canonical.data_json) : void 0)) {
+            throw createError({
+              statusCode: 426,
+              statusMessage: "Update OR3 Chat to use workspace Files and Trash",
+              data: { code: "OR3_WORKSPACE_ITEM_UPDATE_REQUIRED", requiredCapability: WORKSPACE_ITEM_CAPABILITY }
+            });
+          }
+        }
+      }
       const opIds = uniqueOps.map((o) => o.stamp.opId);
       const existingOps = /* @__PURE__ */ new Map();
       const chunkSize = 500;

package/dist/runtime/server/sync/workspace-item-capability.d.ts

@@ -0,0 +1,4 @@
+export declare const WORKSPACE_ITEM_CAPABILITY: "v1";
+export type WorkspaceItemCapability = typeof WORKSPACE_ITEM_CAPABILITY;
+/** Detect semantics even when their version/content is malformed or unknown. */
+export declare function hasWorkspaceItemSemantics(tableName: string, payload: unknown): boolean;

package/dist/runtime/server/sync/workspace-item-capability.js

@@ -0,0 +1,26 @@
+const FILE_CATALOG_POST_TYPE = "or3:file";
+const WORKSPACE_ITEM_META_KEY = "or3.workspace-item";
+export const WORKSPACE_ITEM_CAPABILITY = "v1";
+function decoded(value) {
+  if (typeof value !== "string") return value;
+  try {
+    return JSON.parse(value);
+  } catch {
+    return null;
+  }
+}
+export function hasWorkspaceItemSemantics(tableName, payload) {
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) return false;
+  const row = payload;
+  if (tableName === "posts") {
+    if ((row.post_type ?? row.postType) === FILE_CATALOG_POST_TYPE) return true;
+    const meta = decoded(row.meta);
+    if (Array.isArray(meta)) return meta.some((entry) => entry?.key === WORKSPACE_ITEM_META_KEY);
+    return !!meta && typeof meta === "object" && (Object.hasOwn(meta, WORKSPACE_ITEM_META_KEY) || "key" in meta && meta.key === WORKSPACE_ITEM_META_KEY);
+  }
+  if (tableName === "projects") {
+    const entries = decoded(row.data);
+    return Array.isArray(entries) && entries.some((entry) => entry && typeof entry === "object" && entry.kind === "file");
+  }
+  return false;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "or3-provider-sqlite",
-    "version": "0.0.11",
+    "version": "0.0.13",
     "repository": {
         "type": "git",
         "url": "git+https://github.com/Saluana/or3-provider-sqlite.git"