lix 0.17.1

Embeddable version control for apps and AI agents.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128

//! Mandatory native setting-presence proofs for repository format v79.
//! Backfill is migration-owned; ordinary opening never repairs a missing proof.
use super::api::MigrationOptions;
use crate::LixError;
use crate::storage_adapter::{
    Storage, StorageAdapter, StorageKey, StoragePrecondition, StorageWrite, StorageWriteOptions,
};

/// Older logical migrations execute native SQL while their old marker is still
/// fenced in the hidden epoch. Install additive proofs first without changing
/// the old control codec. Finish publishes the v79 marker with the final proof.
pub(super) async fn backfill<S>(
    adapter: &StorageAdapter<S>,
    options: MigrationOptions,
    finish: bool,
) -> Result<(), LixError>
where
    S: Storage + Clone + Send + Sync + 'static,
{
    let read = super::MigrationPlanningRead::new(adapter).await?;
    let marker = crate::storage_adapter::PointReadPlan::new(
        crate::init::REPOSITORY_PROTOCOL_SPACE,
        &[StorageKey(bytes::Bytes::from_static(
            crate::init::REPOSITORY_PROTOCOL_KEY,
        ))],
    )
    .materialize(&read, Default::default())
    .await?
    .value
    .into_iter()
    .next()
    .flatten();
    let Some(crate::storage_adapter::StorageProjectedValue::FullValue(marker)) = marker else {
        return Err(LixError::new(
            "LIX_ERROR_MIGRATION_FAILED",
            "setting witness migration has no protocol marker",
        ));
    };
    if marker.as_ref() == crate::init::REPOSITORY_PROTOCOL_VALUE
        || marker.as_ref() == crate::init::REPOSITORY_PROTOCOL_V79
    {
        return Ok(());
    }
    if finish && marker.as_ref() != crate::init::REPOSITORY_PROTOCOL_V78 {
        return Err(LixError::new(
            "LIX_ERROR_MIGRATION_FAILED",
            "setting witness publication requires the completed v78 migration",
        ));
    }
    let observed = crate::branch::BranchHeadControlContext::new()
        .reader(&read)
        .load_observed(&[crate::GLOBAL_BRANCH_ID.to_owned()])
        .await?
        .pop()
        .ok_or_else(|| {
            LixError::new(
                "LIX_ERROR_MIGRATION_FAILED",
                "global branch observation is absent",
            )
        })?;
    let control = observed.control.ok_or_else(|| {
        LixError::new(
            "LIX_ERROR_MIGRATION_FAILED",
            "global branch control is absent",
        )
    })?;
    let mut writes = adapter.new_write_set();
    let mut guards = crate::hot_state::stage_deterministic_identity_witness_migration(
        &read,
        &mut writes,
        control.tracked_generation,
        control.current_state_revision,
        options.max_changes,
        options.max_preflight_bytes,
    )
    .await?;
    guards.push(crate::branch::branch_head_control_precondition(
        crate::GLOBAL_BRANCH_ID,
        observed.raw_token,
    )?);
    guards.push(
        crate::storage_adapter::repository_mutation_revision_precondition(
            crate::storage_adapter::load_repository_mutation_revision(&read).await?,
        ),
    );
    guards.push(StoragePrecondition::KeyValueEquals {
        space: crate::init::REPOSITORY_PROTOCOL_SPACE,
        key: StorageKey(bytes::Bytes::copy_from_slice(
            crate::init::REPOSITORY_PROTOCOL_KEY,
        )),
        expected: marker,
    });
    if finish {
        writes.put(
            crate::init::REPOSITORY_PROTOCOL_SPACE,
            crate::init::REPOSITORY_PROTOCOL_KEY,
            crate::init::REPOSITORY_PROTOCOL_V79,
        );
    }
    drop(read);
    // Migration already owns the hidden epoch and must preserve its copied
    // authority/replica role. Ordinary writer admission would append ownership
    // absence guards and reject a valid owned candidate.
    let mut write = adapter
        .begin_migration_write(StorageWriteOptions {
            preconditions: guards,
            await_durable: true,
            ..Default::default()
        })
        .await?;
    let staged: Result<(), LixError> = async {
        let stats = writes.lower_into(&mut write).await?;
        if stats.staged_puts != 0 || stats.staged_deletes != 0 {
            crate::storage_adapter::stage_mutation_revision(&mut write).await?;
        }
        Ok(())
    }
    .await;
    if let Err(error) = staged {
        let _ = write.rollback().await;
        return Err(error);
    }
    write.commit().await?;
    Ok(())
}

#[cfg(test)]
mod tests;