5 Commits

Include renames

Author	SHA1	Message	Date
Claude	cb9ff514a0	Signed requests: X-Nonce header; composite: sync skips unconfirmed writes ... - Requests carry a random X-Nonce, signed as ${timestamp}:${nonce}:${path}:${body}. The server rejects a nonce the same key already used within the timestamp window. Identical requests at the same moment (two tabs, parallel reads) are now distinct, replacing the per-process increasing-timestamp workaround. - Composite: a sync no longer reverts keys with local writes the source hasn't confirmed yet (in flight or queued); they briefly disappeared when a sync's scan ran before the write reached the source. Pending keys are reloaded from a persistent queue on start. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017Qxbkp4tA7G5SCWjzWuxmE	2026-10-23 14:50:16 +00:00
Claude	68d1a1c8e9	Add encryption, Chromium tests and a README ... - KVStorageEncrypted: AES-GCM per value (fresh IV, storage key as AAD), keys stay readable; decrypts and re-emits pushed changes and passes subscriptions through, so it can be a composite source. generateKey / exportKey / importKey / deriveKey (PBKDF2). - KVStorageHttpServer: allowOrigins (CORS), including cache-control for SSE preflights. - Chromium tests (Vitest browser mode + Playwright) against a real cross-origin server: conformance for IndexedDB, encrypted, HTTP and composite stores; signed requests and SSE; two devices syncing, offline writes surviving a reload. New CI job. - Composite fixes found by those tests: sync() during a running sync schedules one more (changes between the first scan and the stream connecting were missed); a queued write the source refuses is dropped, restored and reported (onError) instead of blocking the queue forever. - README with examples, mirrored in test/readme.test.ts. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017Qxbkp4tA7G5SCWjzWuxmE	2026-10-23 14:25:22 +00:00
Claude	631c75428b	Plain operations: last write wins, hash-keyed events, simpler composite ... - KV: one write primitive, write(changes) with { key, value? }; writeIfAbsent removed. The server executes exactly what clients send and never reads values, so they can be encrypted end to end. Adds setFields/getFields on the base class. - HTTP: no server history or event ids; SSE relays every change (own writes included) and the client emits resync when a dropped stream reconnects. - Composite: writes apply locally, then go to the source (undone locally if refused); pushed changes are applied and announced only where they differ from local values; offline writes go to a queue store (any KV storage); sync() = replay, diff, replay. Removes KVReplicaSet, KVOutbox, KeyCounter, SerialQueue and RetryTimer. - Events: id = <time>_<sha256(time + canonical data)>, so concurrent appends never collide and retries can't duplicate; no versions or ConcurrencyError. - Event-sourced documents: read, resolve, append, apply; catchUp folds in foreign events; getAt takes an event id. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017Qxbkp4tA7G5SCWjzWuxmE	2026-10-23 13:33:07 +00:00
Claude	df7de27e20	Composite: don't undo writes made while a full sync is scanning ... A write made during a full sync could be scanned in the replica but not in the (read-ahead) source scan, so the diff removed it, and echo tracking then consumed the server's echo. Keys written during a sync are now left out of the diff. Deterministic regression test with a read-ahead source. Also exclude -0 from the Extended JSON property test (JSON has no -0). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017Qxbkp4tA7G5SCWjzWuxmE	2026-10-23 08:47:18 +00:00
Claude	4ffbc7e78d	Add KVStorageComposite, IndexedDB storage and SSE change streams ... - Every KV storage emits change events (base class owns writeMany/removeMany/ writeIfAbsent; implementations provide protected apply* methods) - KVStorageHttpServer streams changes over SSE (GET /events) with a resumable history; KVStorageHttp.watch() subscribes and resumes via Last-Event-ID - KVStorageIndexedDB for local persistence - KVStorageComposite keeps replicas of a source in sync: local reads, resume instead of full sync, offline outbox replayed in order, echo tracking - Values may contain bigint/Uint8Array (Extended JSON over the network) - Vendor sse-session, event-emitter and extended-json (no runtime deps) - Freeze child nodes so shadowed state on children fails loudly - CI on Node 22, 24 and 26 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017Qxbkp4tA7G5SCWjzWuxmE	2026-10-23 08:41:42 +00:00