C API v2, v1 data migration 015, v1 removal (DEV-1150 part 3c)

.github/workflows/tests.yml

@@ -44,72 +44,11 @@ jobs:
         key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}
 
     - name: Run unit tests
-      run: cargo test --workspace --lib
+      run: cargo test -p replicant-client --lib --tests
 
     - name: Run doc tests
       run: cargo test --workspace --doc
 
-  integration-tests:
-    name: Integration Tests
-    runs-on: ubuntu-latest
-    env:
-      SQLX_OFFLINE: true
-
-    services:
-      postgres:
-        image: postgres:16
-        env:
-          POSTGRES_USER: postgres
-          POSTGRES_PASSWORD: postgres
-          POSTGRES_DB: replicant_server_test
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd pg_isready
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-
-    steps:
-    - uses: actions/checkout@v3
-
-    - name: Install Rust
-      uses: dtolnay/rust-toolchain@stable
-
-    - name: Cache cargo registry
-      uses: actions/cache@v3
-      with:
-        path: ~/.cargo/registry
-        key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
-
-    - name: Cache cargo build
-      uses: actions/cache@v3
-      with:
-        path: target
-        key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}
-
-    - name: Set up Elixir
-      uses: erlef/setup-beam@v1
-      with:
-        elixir-version: '1.17'
-        otp-version: '27'
-
-    # The harness boots the stripped server (a library: no HTTP server of its
-    # own) behind a minimal endpoint that mounts ReplicantServer.Sync.Socket on
-    # :4000, seeds an enrolled user + credential (and one legacy nil-user
-    # credential for the negative test), and runs the gated integration suite.
-    # It clones the server itself at the pinned SERVER_REF, so no separate
-    # checkout/credential/health steps are needed here.
-    - name: Boot stripped server + run integration suite
-      env:
-        REPLICANT_SERVER_REF: '19ffa7a'  # origin/main (PR #8 + #9 merged: canonical hash + sender-echo fix)
-        REPLICANT_SERVER_DIR: /tmp/replicant-server-interop
-        INTEROP_DB_HOST: localhost
-        INTEROP_DB_USER: postgres
-        INTEROP_DB_PASS: postgres
-        INTEROP_DB_NAME: replicant_server_test
-      run: ./test/run_phoenix_interop_local.sh
-
   lint:
     name: Lint
     runs-on: ubuntu-latest

CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## Unreleased
+
+### Breaking: protocol v2 and C API v2 (server 0.5.0 required)
+- One engine per data dir per process, shared by every handle; `replicant_create` takes a `ReplicantConfig` and never waits on the network.
+- New: `replicant_get_state`, `replicant_reconnect`, `replicant_abi_version` (C API v2 is ABI 1.0: `REPLICANT_ABI_VERSION_MAJOR`/`MINOR`), the C++ wrapper `replicant.hpp`, Kept copies (`replicant_list_recovered`, `replicant_dismiss_recovered`, `replicant_restore_document`, `replicant_restore_fields`), `replicant_list_parked`, `DatabaseChanged`, `IdentityAdopted`, `EventOrigin::OtherProcess`, results `ErrorNewerSchema`, `ErrorMigrationFailed`, `ErrorBusy`, `ErrorWrongThread`, `ErrorNoCallbacks`, `ErrorDocumentGone`, `ErrorBufferTooSmall`, `ErrorTokenRejected`, `ReplicantConfig.list_merge`, `struct_size` on `ReplicantConfig` and `ReplicantState`, error code `Diverged` (and `DeleteRefused` reserved), kept-copy reasons `delete_superseded`, `delete_refused`, `delete_publication` and `unmigratable`.
+- Error codes: 1002 `InvalidSignature`, 2001 `ConnectionFailed`, 2002 `Timeout`, 2102 `InvalidTimestamp`, 3001 `MissingParams`, 3002 `TopicUserMismatch` and 5001 `UpdateConflict` are gone (a host that still matches them never sees them). Renamed, same number: 1001 `InvalidApiKey` → `AuthInvalid`, 1003 `CredentialNotEnrolled` → `NotEnrolled`, 2101 `TimestampExpired` → `ClockSkew`.
+- Removed from callbacks and reads: `IdentityChanged`, `author_name`, `document_count`, `sync_revision`; `user_id` is now `owner_id` in callbacks and in the document JSON of `replicant_get_document`, `replicant_get_all_documents` and `replicant_search_documents`. C constants of the result, error-code, event and origin enums carry their type name as a prefix.
+- Changed: `DocumentChanged` replaces Created/Updated; callbacks carry owner, author, visibility, read-only, document ids and kept copies on errors, and conflict reasons; deletes are conditional (a newer version from another device undoes a delete, reported as `ConflictDetected` `delete_superseded`); `replicant_enroll_claim` takes the data dir, stores the credentials itself and returns only the user id; one callback per kind (registering again replaces it), and callbacks run only on the thread that first registered; `create_document_with_id` refuses an existing or deleted id.
+- An engine halted as signed out, or on refused credentials (`AuthInvalid`, `AccountDisabled`, `identity_drift`), re-reads the stored credentials every 3 s, so a sign-in in another process (the standalone app) reaches open plugins within about 3 s. Credentials the server refused are not tried again until they change. A sign-out while halted on a credential or account refusal reports `NotEnrolled`. Stored credentials that can never be read (key file missing, credentials not decryptable) count as signed out: `NotEnrolled`.
+- Removed: the v1 client, `replicant-core`, `replicant-seed`, the JUCE wrapper; `replicant_store_credentials`, `replicant_load_credentials` and `REPLICANT_CREDENTIAL_MAX_LEN` (secrets never cross the C API: sign in with `replicant_enroll_claim`, sign out with `replicant_clear_credentials`, and read sign-in status from `replicant_get_state` and `replicant_get_user_id`).
+- The first open migrates a v1 database, after copying it to `<database>.v1-backup` (or `<database>.v1-backup-<unix seconds>` when that exists; a backup is never replaced, and a second is written only for a file restored from a backup); rows it cannot read are kept as `unmigratable` copies. After that, older builds cannot open it (`VersionMissing`): upgrade the app and every plugin format together and quit hosts before installing.
+- Titles: the library knows no content keys. `ReplicantConfig.title_pointer` (a JSON Pointer, e.g. `"/title"`) names the string that is a document's `title` in reads, callbacks, kept copies and the `title:` search field; without it every title is null. The server's title is no longer used. Every process on a data dir must pass the same pointer: the shared-engine check (`ErrorConfigMismatch`) covers handles in one process only, so a different pointer in another process is not detected. Each launch with a different pointer recomputes every title and the search index, and titles end up mixed while both run (migration 016 records the pointer used).
+
 ## 0.6.4
 
 Patch release: no API change. Event timing changes for hosts that relied on the