2 Commits

Author	SHA1	Message	Date
Kai ki	6ba5307c6c	fix(persistence): address PR #117 review feedback ... Adopt 8 PR-agent (Qodo) findings; 4 declined (concurrency already guarded by the putSyncedRecord/markRecordSynced guards + RPC optimistic concurrency; SQL-injection / won-equality / microtask-race are false positives — see PR reply). - markRecordSynced: guard on updatedAt too — softDeleteStory doesn't bump rev, so a same-rev newer local tombstone must not be marked synced by an older push's ack (symmetric with putSyncedRecord's guard) - recordToEnvelope: fallback timestamps to 0 not Date.now() (a corrupt record should lose LWW, not win as "now") - push/delete routes: validate rev/updatedAt as finite -> 400 (was silent 200); push: Content-Length pre-check before buffering the body - pushDeletion: idbGet a single record instead of a full-store scan - manifest: Cache-Control private,no-store + client fetch cache:no-store - cloudSyncClient: Array.isArray narrowing on items/blobs - RPC: `if found` instead of `v_row.id is not null` after RETURNING INTO Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-28 11:52:09 +08:00
Kai ki	ff12b2759f	feat(persistence): bidirectional local/cloud story sync (Supabase) ... Connect the previously-skeleton cloudStore to the client with a full bidirectional reconcile engine. Commercial build (AUTH_ENABLED) only; the open-source build is byte-for-byte unchanged — all cloud paths short-circuit when AUTH_ENABLED is false. - cloudSync.ts: reconcile engine — decideAction (pure, LWW rev->updatedAt with tombstone priority) + syncOnLogin/pushOnSave/pushDeletion (best-effort, serialized, isAuthed-gated) - cloudSyncClient.ts: browser fetch bridge (short-circuit + fault-tolerant) - /api/stories/{manifest,pull,push,delete}: RLS-guarded sync endpoints - upsert_story_if_newer RPC: optimistic concurrency (SECURITY INVOKER, auth.uid() injection, rev->updated_at guard, revoked from public) - cloudStore: +manifest/pullBlobs, save->RPC {stored,won}, softDelete w/ rev - localStore: +listAllRecordsForSync/putSyncedRecord/markRecordSynced (concurrency-guarded sync writes); types: +StorySyncMeta/StorySyncEnvelope - facade + UserChip: inject pushOnSave/pushDeletion + login-triggered reconcile Sync model: full reconcile on login + background push on save (no Realtime; eventual consistency). Conflict resolution: last-write-wins. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-28 11:20:47 +08:00