orez-sync-cf-host 0.11.1 → 0.11.2

package/dist/host.js

@@ -1,6 +1,6 @@
 import { DurableObject } from 'cloudflare:workers';
-import { createSocketHost } from 'orez-lite/realtime';
 import { createSyncExecutor } from 'orez-sync-executor/core';
+import { createSocketHost } from 'orez-sync-executor/realtime';
 import { validatePullCaps, validateSyncHostConfig } from './config.js';
 import { createQueryCompiler } from './query-compiler.js';
 import { resolveQueryPatch } from './query-patch.js';
@@ -1026,6 +1026,13 @@ export function createSyncDurableObject(config) {
                     if (queryAware && body.queries) {
                         const queries = body.queries;
                         if (Array.isArray(queries.patch)) {
+                            // matches the browser host: a query-aware namespace with no
+                            // resolver refuses the patch (400) instead of crashing (500).
+                            // #queryAwareOverride can force queryAware on, so this is
+                            // reachable even though validateSyncHostConfig passes.
+                            if (!config.resolveQueries) {
+                                throw requestError('query put requires a server-resolved named query');
+                            }
                             // resolveQueries may be async and needs `env` (a consumer can
                             // delegate the transform to its app's real synced-queries
                             // endpoint over an app service binding — authenticate runs in the
@@ -1690,12 +1697,17 @@ export function createSyncDurableObject(config) {
             // subscriptions have to be replayed before this frame is applied.
             await this.#realtimeRehydrate(host);
             const connection = this.#realtimeConnections.get(socket);
-            if (!connection)
+            if (!connection) {
+                // a wake-only socket (no clientGroupID on the upgrade) has no realtime
+                // identity, so a frame here is a subscription that can never deliver.
+                // Closing names the cause; ignoring it would look like streaming that
+                // silently stopped.
+                socket.close(1008, 'realtime frames require clientGroupID on the wake upgrade');
                 return;
+            }
             connection.handleMessage(message);
-            // The hub may authorize asynchronously, so the topic set this frame
-            // changed is not final until that settles.
-            await Promise.resolve();
+            // handleMessage moves the owned-topic set synchronously before any async
+            // delivery work starts, so the set is final when it returns.
             this.#realtimePersist(socket, connection);
         }
         webSocketClose(socket, code, reason, _wasClean) {

package/dist/query-patch.d.ts

@@ -6,9 +6,10 @@ export type QueryResolutionRequest = {
 /**
  * One resolved query, positionally matched to the request at the same index.
  *
- * An `error` fails only its own query rather than the whole patch, so a client
- * that registers one unknown query alongside nine good ones is told which one
- * is unknown.
+ * An `error` fails the whole patch (the pull is refused as one unit), but the
+ * refusal names the query it came from and carries its resolver error, so a
+ * client that registers one unknown query alongside nine good ones is told
+ * which one is unknown.
  */
 export type QueryResolution = {
     readonly ast: JsonValue;

package/dist/query-patch.js

@@ -34,6 +34,8 @@ export async function resolveQueryPatch(patch, resolve, transformVersion, fail)
     if (puts.length === 0)
         return [...patch];
     const resolved = await resolve(requests);
+    // broken positional arity is a host-side resolver bug, not a client error,
+    // so it deliberately bypasses fail() and surfaces as a 500
     if (resolved.length !== requests.length) {
         throw new Error(`query resolver returned ${resolved.length} results for ${requests.length} queries`);
     }
@@ -41,7 +43,8 @@ export async function resolveQueryPatch(patch, resolve, transformVersion, fail)
     for (const put of puts) {
         const resolution = resolved[requestByKey.get(put.key)];
         if (!resolution || 'error' in resolution) {
-            throw fail(`unknown or unsupported named query: ${put.name}`);
+            const detail = resolution && 'error' in resolution ? `: ${resolution.error}` : '';
+            throw fail(`unknown or unsupported named query: ${put.name}${detail}`);
         }
         result[put.index] = {
             op: 'put',

package/dist/types.d.ts

@@ -1,8 +1,8 @@
 import type { QueryResolution, QueryResolutionRequest } from './query-patch.js';
 import type { TransactionQueryBudget } from './transaction-query.js';
 import type { Schema } from '@rocicorp/zero';
-import type { StreamingManifest } from 'orez-lite/realtime';
 import type { ExecResult, MutatorRegistry, NormalizedClaims, SqlStatementMetadata, VisibilityConfig } from 'orez-sync-executor';
+import type { StreamingManifest } from 'orez-sync-executor/realtime';
 export { visibility, type VisibilityExpression, type VisibilityFilter, type VisibilityOperand, type VisibilityValue, } from './visibility.js';
 export type { VisibilityConfig } from 'orez-sync-executor';
 export type { QueryResolution, QueryResolutionRequest } from './query-patch.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orez-sync-cf-host",
-  "version": "0.11.1",
+  "version": "0.11.2",
   "type": "module",
   "exports": {
     ".": {
@@ -60,7 +60,7 @@
     "typecheck": "bun run build:dist:platform && tsc --noEmit"
   },
   "dependencies": {
-    "orez-sync-executor": "0.11.1"
+    "orez-sync-executor": "0.11.2"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "4.20260617.1",