store

Starts atomic transactions for operations.

Atomic document reads and mutations.

CascadeTransaction lists the documents a hard delete must also delete. Stores that support cascade delete policies implement it.

Collection schema, predicates, pagination, locale, projection, and lock controls.

Validated values and metadata for one document insertion.

An authorized update with values and one explicit publication-head intent.

A stored document with status and version metadata.

Collection and document identity for framework-owned cleanup.

A map of field names to typed values.

An immutable scalar, object, list, or populated document value.

Draft or published document state.

Choose active, trashed, or all documents in a store request.

Row-lock strength required by a semantic read.

One retained version snapshot for a document.

A paginated result and total count.

One access-filtered unique-value query over a direct field.

Ascending unique values with ordinary page metadata.

One half-open range over a direct unique index.

A count-free bounded range result.

PublicationAction is the status transition performed by a scheduled task.

SchemaRecoveryError reports stored content that cannot be interpreted safely under the active schema. Adapters must preserve the stored content and supply only schema paths and actionable diagnostics, never the unknown payload.

WriteIntent selects the atomic relationship between a versioned document's mutable working content and its at-most-one published head.

What a Value holds: null, string, number, boolean, object, list, or a populated document.

Deep-copy a field value map.

Deep-copy document values and localization metadata.

Construct a typed number field value.

Construct a typed boolean field value.

Construct an explicit null field value.

Construct a defensively copied nested object value.

Construct a defensively copied list value.

Wrap a populated relationship document.

Construct a typed string field value.

Normalize an authentication identity to its adapter-neutral storage and lookup key.

Validate the bounded direct-field distinct contract.

Normalize list paging and calculate safe half-open result bounds.

Validate one canonical adapter-neutral document ID.

CountedPage returns the normalized page for documents read at the bounds ListPageBounds computes for the requested page, limit and exact total.

HasLiveHead reports whether a working document read for an update has a live head. Authoring reads of draft-enabled collections carry the live revision. Without drafts, every write publishes or removes the live head together with the working status, so the document is published exactly when its live head exists.

TrimUncountedPage removes the overflow row from a SkipTotal read of at most limit+1 documents and reports whether it existed. Adapters trim before population so the overflow row is never materialized further.

UncountedPageBounds normalizes a SkipTotal list read without a total. The adapter reads at most limit+1 rows starting at offset; an offset of math.MaxInt cannot hold a document.

Begin reads against one stable database snapshot.

Optional count-free bounded unique-index range reads.

Optional access-filtered unique-value reads.

Find requested upload keys referenced by current, trashed, or versioned documents.

Serialize object-key adoption and destructive deletion across processes.

Connectivity health check.

Verify the database is usable by an exact manifest and internally complete migration state.

Verify the complete applied migration ledger against executable history.

Persist opaque per-user application/admin settings.

Atomically acquire, refresh, take over, and release authoring locks.

One opaque per-user setting.

One expiring exclusive authoring lease.

Caller and access filters for one bounded frozen selection.

Canonical ascending IDs and explicit overflow state.

A bounded object-key reference query across upload schemas.

Persistence required by auth-enabled collections.

Bounded pruning of expired auth state.

Private password and lockout state associated with one user document.

A persisted one-way digest of a single-use recovery secret.

A persisted opaque session digest and safe metadata.

A persisted API-key digest and safe metadata.

Create private credentials in the owning document transaction.

Serialize and atomically create the first admin credential.

Optional authorized account-lock reset.

Reset account lockout in an already-authorized document transaction.

Expired session and API-key counts removed by one bounded cycle.

Stable single-use authentication token purpose.

An access-filtered version-history query.

Same-transaction snapshot persistence and access-filtered history reads.

Adapter-neutral revision-fenced future publish record.

Adapter-neutral durable task data.

General-purpose durable queue persistence.

Persisted task lifecycle.

Persisted deterministic retry schedule.

A bounded SKIP LOCKED claim filter and lease.

Bounded local task inspection filter.

One lease-fenced attempt failure and optional retry delay.

One permanent-delete reconciliation request.

Deterministic schema constraints preventing permanent deletion.

The schema owner and field that restrict a hard delete.

A shared recursive population materialization budget.

The maximum documents returned by one bounded unique-index window.

The maximum object-key set accepted by one upload-reference query.

The default maximum number of nested documents materialized by one populated response.

The maximum expired-session or API-key maintenance batch.

The maximum encoded JSON size for durable task input or output.

The maximum persisted UTF-8 task failure message size.

The maximum task claim, list, prune, queue-filter, or slug-filter batch.

The maximum configured durable task attempt count.

The maximum UTF-8 byte length of a durable task concurrency key.

The maximum UTF-8 byte length of each collection or document ID in a task reference.

The maximum durable task retry delay.

The maximum configured durable task handler timeout.

The minimum retention period for a terminal durable task record.

The maximum retention period for a terminal durable task record.

The maximum lease duration for one claimed durable task.

Create a concurrency-safe recursive population budget.

Validate a maintenance batch from 1 through 500.

Validate one bounded unique-index range request.

Validate a complete durable task before admission.

Validate a bounded non-empty JSON task payload.

Validate one worker lease request.

Validate one task-list query.

Validate a lifecycle-safe document reference.

Validate a prune or adapter batch bound.

Validate an operationally bounded task lease.

Validate persisted failure and retry metadata.

Validate worker lease-release delay and failure metadata.

Stable adapter error sentinels.

Public variable ErrAuthInitialized from github.com/riducms/ridu/store.

Public variable ErrConflict from github.com/riducms/ridu/store.

Public variable ErrDeleteRestricted from github.com/riducms/ridu/store.

Public variable ErrNotFound from github.com/riducms/ridu/store.

Public variable ErrPopulationLimit from github.com/riducms/ridu/store.

Public variable ErrTaskLeaseLost from github.com/riducms/ridu/store.