feat(sync): sync support for the native app #68

Merged

eliott merged 10 commits from feat/sync-support into develop

2026-10-16 17:06:05 +02:00

eliott commented

2026-10-15 18:31:53 +02:00

Owner

Sync support for the native app

Gives offline clients a way to pull everything that changed for a user since a cursor, including deletions and global rows, and to push a batch of local changes with client-minted ids, resolved by last write wins. The REST endpoints and the web app are unchanged.

Spec: docs/superpowers/specs/2026-10-13-api-sync-support-design.md. Consumer: rollnote-app branch feat/foundation.

What is in

updatedAt (NOT NULL, millisecond precision) and syncedAt (server write time, the only pull cursor) on the 11 synced tables, with sync indexes; new sync_tombstone and sync_reset tables; migration 0028_sync_support with backfills.
Tombstones written in the same transaction as every hard delete, cascades included; import commit and data wipe record a reset.
GET /sync/status, GET /sync/pull/:entity (keyset on (syncedAt, id)), GET /sync/tombstones, POST /sync/push (up to 200 ops, one transaction per op, statuses applied | stale | renumbered | missing-parent | rejected | retry, shoot row locks for frame writes, clock clamp, nulling of references to tombstoned rows).
Better-Auth expo() plugin, rollnote:// trusted origin (plus exp:// in development), origin checks kept on in tests.
JSON body limit raised to 1 MB for push batches.
Version 0.11.0.

Verification

Lint and build clean; 152 unit and 186 integration tests (testcontainers), including a two-client convergence suite, tombstone cascades, overlap and reset cases. The native foundation's device acceptance ran against this branch.

Notes

Migration 0028 collides with the uncommitted 0028 in the main checkout (isGlobal NOT NULL, film_format unique); whichever merges second must be renumbered and its snapshot regenerated.
No tombstone prune scheduler yet; resyncBefore already covers the 180-day retention edge.

https://claude.ai/code/session_013Ew5mX388EkuWC6ytSKkdc

## Sync support for the native app Gives offline clients a way to pull everything that changed for a user since a cursor, including deletions and global rows, and to push a batch of local changes with client-minted ids, resolved by last write wins. The REST endpoints and the web app are unchanged. Spec: `docs/superpowers/specs/2026-10-13-api-sync-support-design.md`. Consumer: `rollnote-app` branch `feat/foundation`. ### What is in - `updatedAt` (NOT NULL, millisecond precision) and `syncedAt` (server write time, the only pull cursor) on the 11 synced tables, with sync indexes; new `sync_tombstone` and `sync_reset` tables; migration `0028_sync_support` with backfills. - Tombstones written in the same transaction as every hard delete, cascades included; import commit and data wipe record a reset. - `GET /sync/status`, `GET /sync/pull/:entity` (keyset on `(syncedAt, id)`), `GET /sync/tombstones`, `POST /sync/push` (up to 200 ops, one transaction per op, statuses `applied | stale | renumbered | missing-parent | rejected | retry`, shoot row locks for frame writes, clock clamp, nulling of references to tombstoned rows). - Better-Auth `expo()` plugin, `rollnote://` trusted origin (plus `exp://` in development), origin checks kept on in tests. - JSON body limit raised to 1 MB for push batches. - Version 0.11.0. ### Verification Lint and build clean; 152 unit and 186 integration tests (testcontainers), including a two-client convergence suite, tombstone cascades, overlap and reset cases. The native foundation's device acceptance ran against this branch. ### Notes - Migration 0028 collides with the uncommitted `0028` in the main checkout (isGlobal NOT NULL, film_format unique); whichever merges second must be renumbered and its snapshot regenerated. - No tombstone prune scheduler yet; `resyncBefore` already covers the 180-day retention edge. https://claude.ai/code/session_013Ew5mX388EkuWC6ytSKkdc

eliott added 8 commits

2026-10-15 18:31:53 +02:00

feat(auth): trust the native app scheme via the Better-Auth Expo plugin 8cf8daf3e4

feat(db): updatedAt on every synced table, sync_tombstone and sync_reset tables ea076b900c

feat(sync): last-write-wins and keyset rules b688799789

feat(sync): tombstones on every delete path, reset on data wipe, updatedAt on renumber a306375569

feat(sync): status, keyset pull and tombstone endpoints ad120eb2af

feat(sync): batch push with last-write-wins, renumbering and tombstones a0724ba129

feat(sync): convergence test, protocol docs, bump to 0.11.0 a0db20a59c

fix(sync): server-owned syncedAt cursor, shoot locks on pushed frame writes, retry status, clock clamp, 1 mb bodies, resyncBefore

tests / test (pull_request) Failing after 2m20s

Details

a7e27da5ae

eliott added the

run-ci

label

2026-10-15 18:32:11 +02:00

eliott added 1 commit

2026-10-15 18:53:58 +02:00

refactor(sync): split push and pull services for the complexity gate

tests / test (pull_request) Successful in 3m15s

Details

774583c25a

Split every function the Fallow new-only gate flagged (CRAP >= 30) into
helpers with cyclomatic complexity of at most 4, without changing
behaviour. Pure decisions (error-to-outcome mapping, insert and update
values, frame renumbering outcome, validation message, date revival,
unique candidate, resync edge, page splitting) move to sync-rules.ts with
unit tests; the DB steps become small private methods. The per-op
transaction and the shoot locking order are unchanged. The convergence
spec's pullAll helper is split into per-entity, per-row and tombstone
helpers.

Claude-Session: https://claude.ai/code/session_013Ew5mX388EkuWC6ytSKkdc

eliott added 1 commit

2026-10-15 22:57:16 +02:00

Merge branch 'develop' into feat/sync-support a25887cb4c

eliott merged commit f179cd9840 into develop

2026-10-16 17:06:05 +02:00

eliott deleted branch feat/sync-support

2026-10-16 17:06:05 +02:00

eliott referenced this pull request from a commit

2026-10-16 17:06:06 +02:00

Merge pull request 'feat(sync): sync support for the native app' (#68) from feat/sync-support into develop