flowstate-rxdb-d1 Package Skill

Package: @epicdm/flowstate-rxdb-d1 Repository: epic-flowstate-community Path: packages/flowstate-rxdb-d1 Version: 1.0.8

Use this published Dojo skill as the package-level entrypoint. For detailed workflows, use the package-local skills listed below.

Primary Package Workflow

Auth Tenant ACL

Use this skill when Worker behavior depends on who is calling, which org/workspace they can access, and which fields they can read or write.

Auth Paths

The Worker supports:

JWT token parsing and revocation checks.
internal service auth with x-internal-secret.
peer callback/shared-secret paths for selected /peers/* routes.
service tokens with data scopes for internal operations.

Authorization Layers

Check these together:

org/workspace tenancy
collection scope requirements
class-level permissions
record ACL filters
protected fields
service-account org grants

Watch Outs

Internal secrets should be long enough and compared with timing-safe helpers.
Peer shared-secret logic is security-sensitive and can become expensive as active peers grow.
Do not bypass tenant filtering for convenience in aggregate/query paths.
Protected field lists should use the most specific matching grantee before wildcard defaults.

Package Skill Inventory

Package Skill Inventory: @epicdm/flowstate-rxdb-d1

Package path: packages/flowstate-rxdb-d1.

Skill Map

Skill	Type	Trigger	Teaches	Dojo
`flowstate-rxdb-d1`	orchestrator	Use when a task touches D1 replication, Worker REST contracts, sync, schema generation, peers, or deployment	Package entry points, public npm API versus repo runtime surface, routing	local-only
`flowstate-rxdb-d1-client-replication`	workflow	Use when wiring `replicateCloudflareD1`, `WsManager`, pull/push, live sync, modifiers, or token refresh	RxDB replication plugin, HTTP pull, WebSocket push/live, leader election	ready-after-review
`flowstate-rxdb-d1-worker-rest-contracts`	workflow/reference	Use when changing Worker REST routes, query/get/set/delete/aggregate behavior, JSON fields, or errors	REST path contract, D1 dispatch, protected fields, fast path versus DO path	ready-after-review
`flowstate-rxdb-d1-auth-tenant-acl`	reference	Use when changing token parsing, internal auth, peer auth, CLP, ACL, scopes, protected fields, or tenant filters	Auth paths, service scopes, tenancy enforcement, security watch outs	ready-after-review
`flowstate-rxdb-d1-schema-migrations`	maintenance	Use when changing Drizzle tables, migrations, rollbacks, generated RxDB/Zod schemas, or D1-only tables	Schema source of truth, generator sequence, migration checks	ready-after-review
`flowstate-rxdb-d1-virtual-collections`	reference	Use when changing `records`-backed VCA routing, dynamic schema lookup, aliases, or table resolution	Virtual routing points and resolver sync	ready-after-review
`flowstate-rxdb-d1-peer-sync`	workflow	Use when changing peer invite/accept/status/config/resync APIs or peer secrets/checkpoints	`/peers/*` API contracts and internal service integration	ready-after-review
`flowstate-rxdb-d1-durable-object-sync`	troubleshooting/reference	Use when debugging WebSocket auth, pull/push conflicts, broadcasts, reconnect, or hibernation	Durable Object sync lifecycle and failure modes	ready-after-review

Anti-Sprawl Decision

Do not create one skill per Drizzle table, Worker handler, or generated schema. The package should be taught through operational surfaces: client replication, Worker REST, auth/tenant/ACL, schema/migration tooling, virtual collections, peer sync, and Durable Object sync.

Review Gate

Package Skill Review: @epicdm/flowstate-rxdb-d1

Package path: packages/flowstate-rxdb-d1.

Review Result

Status: drafted, source-backed, verified, pending publication.

The skillset distinguishes public npm replication APIs from repo-local Worker/runtime/schema surfaces, and it groups the package into operational skills.

Checks

Source review: completed from package exports, client replication source, Worker routing, Drizzle layout, peer sync review, and generated artifact drift.
Skill inventory: completed.
Skill files: completed.
ASCII/frontmatter scan: passed.
Package typecheck: passed.
Package tests: passed, 57 suites and 781 tests, with 3 suites and 64 tests skipped.
Package lint: passed with 18 existing warnings.
Package build: passed.
Generated Dojo replacement: pending.
Cloud Dojo publication: pending.

Verification Commands

Run before publication:

yarn workspace @epicdm/flowstate-rxdb-d1 typecheck
yarn workspace @epicdm/flowstate-rxdb-d1 test --runInBand
yarn workspace @epicdm/flowstate-rxdb-d1 lint
yarn workspace @epicdm/flowstate-rxdb-d1 build

Optional runtime checks:

yarn workspace @epicdm/flowstate-rxdb-d1 build:worker
yarn workspace @epicdm/flowstate-rxdb-d1 test:e2e:d1

Publication Gate

Do not publish existing .flowstate/dojo artifacts until they are rebuilt from reviewed package skills.

flowstate-epic-flowstate-community-epicdm-flowstate-rxdb-d1

Tags

Publisher

Versions

Skill