@abloatai/transaction 0.37.0

package/dist/transactions/settlement/commitEnvelope.js

@@ -0,0 +1,162 @@
+/**
+ * Runtime contracts for retry-safe commits.
+ *
+ * `commitEnvelopeMemberSchema` is the compact pointer stored on an in-memory
+ * transaction. `durableCommitEnvelopeSchema` is the actual outbox record: one
+ * atomic IndexedDB value containing the stable request key, exact ordered wire
+ * operations, and the source mutations it supersedes.
+ */
+import { z } from 'zod';
+import { readDependencySchema, trackDependencySchema } from '../../coordination/schema.js';
+import { wireCommitOperationSchema } from '../../wire/frames.js';
+import { correlationIdSchema } from '../../wire/commit.js';
+import { idempotencyKeySchema } from './idempotencyKey.js';
+import { snapshotJsonValue } from '../../utils/json.js';
+export const COMMIT_ENVELOPE_VERSION = 1;
+export const COMMIT_ENVELOPE_RECORD_PREFIX = 'commit-envelope:';
+/** One transaction's position in a commit; this is not the envelope itself. */
+export const commitEnvelopeMemberSchema = z
+    .strictObject({
+    idempotencyKey: idempotencyKeySchema,
+    operationIndex: z.number().int().nonnegative(),
+    operationCount: z.number().int().positive(),
+    sealedAt: z.number().int().nonnegative().optional(),
+    sequence: z.number().int().nonnegative().optional(),
+})
+    .refine(({ operationIndex, operationCount }) => operationIndex < operationCount, { message: 'operationIndex must be smaller than operationCount' });
+/** One operation stored exactly as the current commit transport sends it. */
+export const durableCommitOperationSchema = wireCommitOperationSchema
+    .pick({
+    type: true,
+    model: true,
+    id: true,
+    input: true,
+    transactionId: true,
+    readAt: true,
+    onStale: true,
+    fenceToken: true,
+})
+    .extend({
+    model: z.string().min(1),
+    id: z.string().min(1),
+    input: z.record(z.string(), z.unknown()).optional(),
+    transactionId: z.string().min(1).optional(),
+    options: z
+        .strictObject({
+        idempotencyKey: z.string().min(1).max(255).nullable().optional(),
+        label: z.string().min(1).max(255).optional(),
+    })
+        .optional(),
+});
+const durableCommitOptionsSchema = z.strictObject({
+    reads: z.array(readDependencySchema).nullable().optional(),
+    track: z.array(trackDependencySchema).nullable().optional(),
+});
+export const commitOutboxScopeSchema = z.strictObject({
+    organizationId: z.string().min(1),
+    participantId: z.string().min(1),
+    namespace: z.string().min(1),
+});
+/**
+ * One crash-durable logical commit. Keeping every operation in one record makes
+ * membership and order atomic: recovery can observe the old record or the new
+ * record, never half an envelope.
+ */
+export const durableCommitEnvelopeSchema = z
+    .strictObject({
+    id: z.string().startsWith(COMMIT_ENVELOPE_RECORD_PREFIX),
+    type: z.literal('commit_envelope'),
+    storageVersion: z.literal(COMMIT_ENVELOPE_VERSION),
+    origin: z.enum(['model_batch', 'atomic_commit']),
+    idempotencyKey: idempotencyKeySchema,
+    operations: z.array(durableCommitOperationSchema).min(1).max(500),
+    // Bookkeeping cardinality is independent of the 500 wire-operation cap:
+    // hundreds of same-row offline patches may coalesce into one operation.
+    sourceMutationIds: z.array(z.string().min(1)).default([]),
+    commitOptions: durableCommitOptionsSchema.default({}),
+    scope: commitOutboxScopeSchema.optional(),
+    createdAt: z.number().int().nonnegative(),
+    sealedAt: z.number().int().nonnegative(),
+    /**
+     * Monotonic evidence that a connected source accepted this exact request.
+     * Its server and customer idempotency keys are permanent, so an accepted
+     * envelope remains replayable until the WAL echo confirms it.
+     */
+    acceptedAt: z.number().int().nonnegative().optional(),
+    /** Opaque server-derived source-batch identity paired with `acceptedAt`. */
+    correlationId: correlationIdSchema.optional(),
+    /** Monotonic within one client; disambiguates writes sealed in the same ms. */
+    sequence: z.number().int().nonnegative().optional(),
+    timestamp: z.number().int().nonnegative(),
+})
+    .superRefine((envelope, context) => {
+    if (envelope.id !== commitEnvelopeRecordId(envelope.idempotencyKey)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['id'],
+            message: 'Envelope record id must be derived from its idempotency key',
+        });
+    }
+    if (new Set(envelope.sourceMutationIds).size !== envelope.sourceMutationIds.length) {
+        context.addIssue({
+            code: 'custom',
+            path: ['sourceMutationIds'],
+            message: 'Source mutation ids must be unique',
+        });
+    }
+    if ((envelope.acceptedAt === undefined) !== (envelope.correlationId === undefined)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['acceptedAt'],
+            message: 'Accepted commit envelopes require both acceptedAt and correlationId',
+        });
+    }
+    if (envelope.acceptedAt !== undefined &&
+        envelope.acceptedAt < envelope.sealedAt) {
+        context.addIssue({
+            code: 'custom',
+            path: ['acceptedAt'],
+            message: 'Commit envelope cannot be accepted before it is sealed',
+        });
+    }
+    if (envelope.origin === 'model_batch') {
+        const transactionIds = envelope.operations.map((operation) => operation.transactionId);
+        if (transactionIds.some((id) => typeof id !== 'string' || id.length === 0)) {
+            context.addIssue({
+                code: 'custom',
+                path: ['operations'],
+                message: 'Every model-batch operation must carry a transactionId',
+            });
+        }
+        else if (new Set(transactionIds).size !== transactionIds.length) {
+            context.addIssue({
+                code: 'custom',
+                path: ['operations'],
+                message: 'Model-batch transactionIds must be unique',
+            });
+        }
+    }
+});
+export function commitEnvelopeRecordId(idempotencyKey) {
+    return `${COMMIT_ENVELOPE_RECORD_PREFIX}${idempotencyKey}`;
+}
+/** Constructs validated member metadata when an in-memory batch is formed. */
+export function createCommitEnvelopeMember(value) {
+    return commitEnvelopeMemberSchema.parse(value);
+}
+/**
+ * Freezes the exact JSON request that will be persisted and sent. The shared
+ * snapshot contract makes framework proxies plain and rejects values that
+ * would be lost or corrupted by JSON serialization.
+ */
+export function createDurableCommitEnvelope(value) {
+    const candidate = {
+        ...value,
+        id: commitEnvelopeRecordId(value.idempotencyKey),
+        type: 'commit_envelope',
+        storageVersion: COMMIT_ENVELOPE_VERSION,
+        timestamp: value.sealedAt,
+    };
+    return durableCommitEnvelopeSchema.parse(snapshotJsonValue(candidate, '$.commitEnvelope'));
+}
+//# sourceMappingURL=commitEnvelope.js.map

package/dist/transactions/settlement/commitEnvelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commitEnvelope.js","sourceRoot":"","sources":["../../../src/transactions/settlement/commitEnvelope.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC3F,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAU,CAAC;AAClD,MAAM,CAAC,MAAM,6BAA6B,GAAG,kBAAkB,CAAC;AAEhE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,YAAY,CAAC;IACZ,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC9C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,MAAM,CACL,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,GAAG,cAAc,EACvE,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAClE,CAAC;AAIJ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,4BAA4B,GAAG,yBAAyB;KAClE,IAAI,CAAC;IACJ,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,IAAI;IACX,aAAa,EAAE,IAAI;IACnB,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,IAAI;CACjB,CAAC;KACD,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,CAAC;SACP,YAAY,CAAC;QACZ,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAChE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KAC7C,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAKL,MAAM,0BAA0B,GAAG,CAAC,CAAC,YAAY,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1D,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC;IACpD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,YAAY,CAAC;IACZ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,6BAA6B,CAAC;IACxD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAChD,cAAc,EAAE,oBAAoB;IACpC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjE,wEAAwE;IACxE,wEAAwE;IACxE,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,aAAa,EAAE,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,KAAK,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACrD,4EAA4E;IAC5E,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC7C,+EAA+E;IAC/E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC1C,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACjC,IAAI,QAAQ,CAAC,EAAE,KAAK,sBAAsB,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACpE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QACnF,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,mBAAmB,CAAC;YAC3B,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,EAAE,CAAC;QACnF,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,qEAAqE;SAC/E,CAAC,CAAC;IACL,CAAC;IACD,IACE,QAAQ,CAAC,UAAU,KAAK,SAAS;QACjC,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,QAAQ,EACvC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,wDAAwD;SAClE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACtC,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACvF,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAC3E,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,CAAC;gBACpB,OAAO,EAAE,wDAAwD;aAClE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;YAClE,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,CAAC;gBACpB,OAAO,EAAE,2CAA2C;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,MAAM,UAAU,sBAAsB,CAAC,cAAsB;IAC3D,OAAO,GAAG,6BAA6B,GAAG,cAAc,EAAE,CAAC;AAC7D,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,0BAA0B,CACxC,KAAiD;IAEjD,OAAO,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAGC;IAED,MAAM,SAAS,GAAG;QAChB,GAAG,KAAK;QACR,EAAE,EAAE,sBAAsB,CAAC,KAAK,CAAC,cAAc,CAAC;QAChD,IAAI,EAAE,iBAA0B;QAChC,cAAc,EAAE,uBAAuB;QACvC,SAAS,EAAE,KAAK,CAAC,QAAQ;KAC1B,CAAC;IACF,OAAO,2BAA2B,CAAC,KAAK,CACtC,iBAAiB,CAAC,SAAS,EAAE,kBAAkB,CAAC,CACjD,CAAC;AACJ,CAAC"}

package/dist/transactions/settlement/httpCommitEnvelope.d.ts

@@ -0,0 +1,54 @@
+/** Crash-durable exact HTTP request used by the stateless agent client. */
+import { z } from 'zod';
+export declare const HTTP_COMMIT_ENVELOPE_VERSION: 1;
+export declare const HTTP_COMMIT_ENVELOPE_PREFIX = "http-commit-envelope:";
+/** Stay one hour inside the server's 24-hour idempotency retention window. */
+export declare const HTTP_COMMIT_REPLAY_WINDOW_MS: number;
+/** Snapshot the JSON contract once, then make object-key order canonical. */
+export declare function canonicalHttpCommitBody(value: unknown): string;
+export declare const durableHttpCommitEnvelopeSchema: z.ZodObject<{
+    id: z.ZodString;
+    type: z.ZodLiteral<"http_commit_envelope">;
+    storageVersion: z.ZodLiteral<1>;
+    idempotencyKey: z.core.$ZodBranded<z.ZodString, "IdempotencyKey", "out">;
+    protocolVersion: z.ZodDefault<z.ZodNumber>;
+    request: z.ZodObject<{
+        method: z.ZodEnum<{
+            DELETE: "DELETE";
+            POST: "POST";
+            PATCH: "PATCH";
+        }>;
+        path: z.ZodString;
+        body: z.ZodString;
+    }, z.core.$strict>;
+    scopeNamespace: z.ZodString;
+    createdAt: z.ZodNumber;
+    sealedAt: z.ZodNumber;
+    acceptedAt: z.ZodOptional<z.ZodNumber>;
+    correlationId: z.ZodOptional<z.ZodString>;
+    sequence: z.ZodOptional<z.ZodNumber>;
+    timestamp: z.ZodNumber;
+}, z.core.$strict>;
+export type DurableHttpCommitEnvelope = z.infer<typeof durableHttpCommitEnvelopeSchema>;
+/**
+ * The HTTP verbs a durable commit envelope can carry, projected out of the
+ * persisted schema above. Callers that build, seal, or dispatch an envelope
+ * take this rather than restating the verbs: the envelope is a stored contract,
+ * so a verb the schema does not accept must not be constructible.
+ */
+export type DurableHttpCommitMethod = DurableHttpCommitEnvelope['request']['method'];
+export declare function httpCommitEnvelopeRecordId(idempotencyKey: string, scopeNamespace?: string): string;
+export declare function createDurableHttpCommitEnvelope(input: {
+    idempotencyKey: string;
+    request: {
+        method: DurableHttpCommitMethod;
+        path: string;
+        body: unknown;
+    };
+    scopeNamespace: string;
+    createdAt?: number;
+    sealedAt?: number;
+    sequence?: number;
+}): DurableHttpCommitEnvelope;
+export declare function isHttpCommitReplayExpired(envelope: Pick<DurableHttpCommitEnvelope, 'sealedAt' | 'acceptedAt'>, now?: number): boolean;
+//# sourceMappingURL=httpCommitEnvelope.d.ts.map

package/dist/transactions/settlement/httpCommitEnvelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpCommitEnvelope.d.ts","sourceRoot":"","sources":["../../../src/transactions/settlement/httpCommitEnvelope.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,4BAA4B,EAAG,CAAU,CAAC;AACvD,eAAO,MAAM,2BAA2B,0BAA0B,CAAC;AACnE,8EAA8E;AAC9E,eAAO,MAAM,4BAA4B,QAAsB,CAAC;AA4BhE,6EAA6E;AAC7E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE9D;AAED,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;kBAuIxC,CAAC;AAEL,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC;AAErF,wBAAgB,0BAA0B,CACxC,cAAc,EAAE,MAAM,EACtB,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAMR;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE;QACP,MAAM,EAAE,uBAAuB,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,OAAO,CAAC;KACf,CAAC;IACF,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,yBAAyB,CAsB5B;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,IAAI,CAAC,yBAAyB,EAAE,UAAU,GAAG,YAAY,CAAC,EACpE,GAAG,SAAa,GACf,OAAO,CAMT"}

package/dist/transactions/settlement/httpCommitEnvelope.js

@@ -0,0 +1,208 @@
+/** Crash-durable exact HTTP request used by the stateless agent client. */
+import { z } from 'zod';
+import { v5 as uuidv5 } from 'uuid';
+import { snapshotJsonValue, stableStringify } from '../../utils/json.js';
+import { correlationIdSchema } from '../../wire/commit.js';
+import { PROTOCOL_VERSION } from '../../wire/protocolVersion.js';
+import { idempotencyKeySchema } from './idempotencyKey.js';
+export const HTTP_COMMIT_ENVELOPE_VERSION = 1;
+export const HTTP_COMMIT_ENVELOPE_PREFIX = 'http-commit-envelope:';
+/** Stay one hour inside the server's 24-hour idempotency retention window. */
+export const HTTP_COMMIT_REPLAY_WINDOW_MS = 23 * 60 * 60 * 1000;
+const HTTP_COMMIT_SCOPE_ID_NAMESPACE = '043e8f73-86fc-5f62-af46-935d68fca729';
+const commitPathSchema = z.literal('/v1/commits');
+const modelCollectionPathSchema = z.string().regex(/^\/v1\/models\/[^/]+$/);
+const modelEntityPathSchema = z.string().regex(/^\/v1\/models\/[^/]+\/[^/]+$/);
+function hasSafeModelPathSegments(path) {
+    if (!path.startsWith('/v1/models/'))
+        return true;
+    try {
+        return path
+            .slice('/v1/models/'.length)
+            .split('/')
+            .every((segment) => {
+            const decoded = decodeURIComponent(segment);
+            return (decoded.length > 0 &&
+                decoded !== '.' &&
+                decoded !== '..' &&
+                !decoded.includes('/') &&
+                !decoded.includes('\\'));
+        });
+    }
+    catch {
+        return false;
+    }
+}
+/** Snapshot the JSON contract once, then make object-key order canonical. */
+export function canonicalHttpCommitBody(value) {
+    return stableStringify(snapshotJsonValue(value, '$.body'));
+}
+export const durableHttpCommitEnvelopeSchema = z
+    .strictObject({
+    id: z.string().startsWith(HTTP_COMMIT_ENVELOPE_PREFIX),
+    type: z.literal('http_commit_envelope'),
+    storageVersion: z.literal(HTTP_COMMIT_ENVELOPE_VERSION),
+    idempotencyKey: idempotencyKeySchema,
+    /**
+     * The wire contract used when this exact request was sealed. Entries from
+     * before protocol versioning omitted the field and are v1 by definition.
+     */
+    protocolVersion: z.number().int().positive().default(1),
+    request: z.strictObject({
+        method: z.enum(['POST', 'PATCH', 'DELETE']),
+        path: z.string().startsWith('/'),
+        body: z.string().refine((body) => {
+            try {
+                JSON.parse(body);
+                return true;
+            }
+            catch {
+                return false;
+            }
+        }, 'HTTP commit body must be valid JSON'),
+    }),
+    scopeNamespace: z.string().min(1),
+    createdAt: z.number().int().nonnegative(),
+    sealedAt: z.number().int().nonnegative(),
+    /**
+     * Monotonic evidence that the server accepted this exact request for a
+     * connected source. Such server keys are permanent, so this envelope must
+     * remain replayable past the ordinary hosted 24-hour window until its WAL
+     * echo confirms.
+     */
+    acceptedAt: z.number().int().nonnegative().optional(),
+    /** Opaque server-derived source-batch identity paired with `acceptedAt`. */
+    correlationId: correlationIdSchema.optional(),
+    /** Monotonic within one client; disambiguates writes sealed in the same ms. */
+    sequence: z.number().int().nonnegative().optional(),
+    timestamp: z.number().int().nonnegative(),
+})
+    .superRefine((envelope, context) => {
+    const legacyId = httpCommitEnvelopeRecordId(envelope.idempotencyKey);
+    const scopedId = httpCommitEnvelopeRecordId(envelope.idempotencyKey, envelope.scopeNamespace);
+    if (envelope.id !== legacyId && envelope.id !== scopedId) {
+        context.addIssue({
+            code: 'custom',
+            path: ['id'],
+            message: 'HTTP envelope id must be derived from its idempotency key',
+        });
+    }
+    if (envelope.sealedAt < envelope.createdAt) {
+        context.addIssue({
+            code: 'custom',
+            path: ['sealedAt'],
+            message: 'HTTP envelope cannot be sealed before it is created',
+        });
+    }
+    if ((envelope.acceptedAt === undefined) !== (envelope.correlationId === undefined)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['acceptedAt'],
+            message: 'Accepted HTTP envelopes require both acceptedAt and correlationId',
+        });
+    }
+    if (envelope.acceptedAt !== undefined &&
+        envelope.acceptedAt < envelope.sealedAt) {
+        context.addIssue({
+            code: 'custom',
+            path: ['acceptedAt'],
+            message: 'HTTP envelope cannot be accepted before it is sealed',
+        });
+    }
+    const { method, path } = envelope.request;
+    const allowedPath = method === 'POST'
+        ? commitPathSchema.safeParse(path).success ||
+            modelCollectionPathSchema.safeParse(path).success
+        : modelEntityPathSchema.safeParse(path).success;
+    if (!allowedPath || !hasSafeModelPathSegments(path)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['request', 'path'],
+            message: 'HTTP outbox records may target only commit or model-mutation routes',
+        });
+        return;
+    }
+    let body;
+    try {
+        body = JSON.parse(envelope.request.body);
+    }
+    catch {
+        return; // The field-level JSON refinement reports this.
+    }
+    if (typeof body !== 'object' || body === null || Array.isArray(body)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['request', 'body'],
+            message: 'HTTP commit body must be a JSON object',
+        });
+        return;
+    }
+    const record = body;
+    // `envelope.idempotencyKey` is replayed as the `Idempotency-Key` header.
+    // Older sealed bodies may also carry `idempotencyKey`/`clientTxId`; accept
+    // and replay them byte-for-byte, but current requests do not duplicate the
+    // key in JSON.
+    if (path === '/v1/commits') {
+        if (!Array.isArray(record.operations) || record.operations.length === 0) {
+            context.addIssue({
+                code: 'custom',
+                path: ['request', 'body'],
+                message: 'Commit-route body must carry operations',
+            });
+        }
+    }
+    else if (method === 'POST' && typeof record.id !== 'string') {
+        context.addIssue({
+            code: 'custom',
+            path: ['request', 'body', 'id'],
+            message: 'Model-create body must carry its entity id',
+        });
+    }
+    else if (method === 'PATCH' &&
+        (typeof record.data !== 'object' || record.data === null || Array.isArray(record.data))) {
+        context.addIssue({
+            code: 'custom',
+            path: ['request', 'body', 'data'],
+            message: 'Model-update body must carry a JSON object patch',
+        });
+    }
+});
+export function httpCommitEnvelopeRecordId(idempotencyKey, scopeNamespace) {
+    if (!scopeNamespace) {
+        return `${HTTP_COMMIT_ENVELOPE_PREFIX}${idempotencyKey}`;
+    }
+    const scopeId = uuidv5(scopeNamespace, HTTP_COMMIT_SCOPE_ID_NAMESPACE);
+    return `${HTTP_COMMIT_ENVELOPE_PREFIX}${scopeId}:${idempotencyKey}`;
+}
+export function createDurableHttpCommitEnvelope(input) {
+    const now = Date.now();
+    const createdAt = input.createdAt ?? now;
+    const sealedAt = input.sealedAt ?? now;
+    const body = canonicalHttpCommitBody(input.request.body);
+    return durableHttpCommitEnvelopeSchema.parse({
+        id: httpCommitEnvelopeRecordId(input.idempotencyKey, input.scopeNamespace),
+        type: 'http_commit_envelope',
+        storageVersion: HTTP_COMMIT_ENVELOPE_VERSION,
+        idempotencyKey: input.idempotencyKey,
+        protocolVersion: PROTOCOL_VERSION,
+        request: {
+            method: input.request.method,
+            path: input.request.path,
+            body,
+        },
+        scopeNamespace: input.scopeNamespace,
+        createdAt,
+        sealedAt,
+        ...(input.sequence !== undefined ? { sequence: input.sequence } : {}),
+        timestamp: sealedAt,
+    });
+}
+export function isHttpCommitReplayExpired(envelope, now = Date.now()) {
+    // Connected-source mutation-log and customer idempotency keys are
+    // permanent. Once acceptance is durable, age can no longer make replay
+    // ambiguous; only the matching WAL echo may settle the envelope.
+    if (envelope.acceptedAt !== undefined)
+        return false;
+    return now - envelope.sealedAt >= HTTP_COMMIT_REPLAY_WINDOW_MS;
+}
+//# sourceMappingURL=httpCommitEnvelope.js.map

package/dist/transactions/settlement/httpCommitEnvelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpCommitEnvelope.js","sourceRoot":"","sources":["../../../src/transactions/settlement/httpCommitEnvelope.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAU,CAAC;AACvD,MAAM,CAAC,MAAM,2BAA2B,GAAG,uBAAuB,CAAC;AACnE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAChE,MAAM,8BAA8B,GAAG,sCAAsC,CAAC;AAE9E,MAAM,gBAAgB,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AAClD,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAC5E,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAE/E,SAAS,wBAAwB,CAAC,IAAY;IAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,IAAI;aACR,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC;aAC3B,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE;YACjB,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC5C,OAAO,CACL,OAAO,CAAC,MAAM,GAAG,CAAC;gBAClB,OAAO,KAAK,GAAG;gBACf,OAAO,KAAK,IAAI;gBAChB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACtB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CACxB,CAAC;QACJ,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,eAAe,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,YAAY,CAAC;IACZ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,2BAA2B,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACvC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC;IACvD,cAAc,EAAE,oBAAoB;IACpC;;;OAGG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC/B,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,EAAE,qCAAqC,CAAC;KAC1C,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC;;;;;OAKG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACrD,4EAA4E;IAC5E,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC7C,+EAA+E;IAC/E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC1C,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACjC,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,0BAA0B,CACzC,QAAQ,CAAC,cAAc,EACvB,QAAQ,CAAC,cAAc,CACxB,CAAC;IACF,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,2DAA2D;SACrE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC3C,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,EAAE,CAAC;QACnF,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,mEAAmE;SAC7E,CAAC,CAAC;IACL,CAAC;IACD,IACE,QAAQ,CAAC,UAAU,KAAK,SAAS;QACjC,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,QAAQ,EACvC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC1C,MAAM,WAAW,GACf,MAAM,KAAK,MAAM;QACf,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO;YACxC,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO;QACnD,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;IACpD,IAAI,CAAC,WAAW,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;YACzB,OAAO,EAAE,qEAAqE;SAC/E,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAY,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,gDAAgD;IAC1D,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;YACzB,OAAO,EAAE,wCAAwC;SAClD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,eAAe;IACf,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;gBACzB,OAAO,EAAE,yCAAyC;aACnD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC9D,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC;YAC/B,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;SAAM,IACL,MAAM,KAAK,OAAO;QAClB,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EACvF,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,kDAAkD;SAC5D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAcL,MAAM,UAAU,0BAA0B,CACxC,cAAsB,EACtB,cAAuB;IAEvB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,GAAG,2BAA2B,GAAG,cAAc,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,EAAE,8BAA8B,CAAC,CAAC;IACvE,OAAO,GAAG,2BAA2B,GAAG,OAAO,IAAI,cAAc,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAW/C;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC;IACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC;IACvC,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,+BAA+B,CAAC,KAAK,CAAC;QAC3C,EAAE,EAAE,0BAA0B,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC;QAC1E,IAAI,EAAE,sBAAsB;QAC5B,cAAc,EAAE,4BAA4B;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,eAAe,EAAE,gBAAgB;QACjC,OAAO,EAAE;YACP,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;YAC5B,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;YACxB,IAAI;SACL;QACD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS;QACT,QAAQ;QACR,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,QAAoE,EACpE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,kEAAkE;IAClE,uEAAuE;IACvE,iEAAiE;IACjE,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,GAAG,GAAG,QAAQ,CAAC,QAAQ,IAAI,4BAA4B,CAAC;AACjE,CAAC"}

package/dist/transactions/settlement/idempotencyKey.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Identity shared by the durable write records.
+ *
+ * A retry must reuse the same non-empty key so the server can recognize the
+ * same logical write. This is a persistence invariant, not a second commit
+ * protocol.
+ */
+import { z } from 'zod';
+export declare const idempotencyKeySchema: z.core.$ZodBranded<z.ZodString, "IdempotencyKey", "out">;
+export type IdempotencyKey = z.output<typeof idempotencyKeySchema>;
+//# sourceMappingURL=idempotencyKey.d.ts.map

package/dist/transactions/settlement/idempotencyKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotencyKey.d.ts","sourceRoot":"","sources":["../../../src/transactions/settlement/idempotencyKey.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,oBAAoB,0DAAuD,CAAC;AACzF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/transactions/settlement/idempotencyKey.js

@@ -0,0 +1,10 @@
+/**
+ * Identity shared by the durable write records.
+ *
+ * A retry must reuse the same non-empty key so the server can recognize the
+ * same logical write. This is a persistence invariant, not a second commit
+ * protocol.
+ */
+import { z } from 'zod';
+export const idempotencyKeySchema = z.string().min(1).max(255).brand();
+//# sourceMappingURL=idempotencyKey.js.map

package/dist/transactions/settlement/idempotencyKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotencyKey.js","sourceRoot":"","sources":["../../../src/transactions/settlement/idempotencyKey.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAoB,CAAC"}

package/dist/transactions/settlement/pendingWrite.d.ts

@@ -0,0 +1,113 @@
+/**
+ * The persisted shape of a write awaiting a definitive outcome.
+ *
+ * Owns one authoritative union over the two durable commit envelopes — the
+ * WebSocket envelope and its HTTP counterpart — so an injected store and the
+ * engine that reads back from it agree on exactly one set of records. The
+ * envelope schemas in this directory remain authoritative for their own fields;
+ * this module only unions them.
+ *
+ * The port that persists these records is a behavior contract, not a persisted
+ * shape, so it lives outside this directory in `src/durableWrites.ts`.
+ */
+import { z } from 'zod';
+/** Every write shape that Ablo may ask an injected store to persist. */
+export declare const pendingWriteSchema: z.ZodUnion<readonly [z.ZodObject<{
+    id: z.ZodString;
+    type: z.ZodLiteral<"commit_envelope">;
+    storageVersion: z.ZodLiteral<1>;
+    origin: z.ZodEnum<{
+        model_batch: "model_batch";
+        atomic_commit: "atomic_commit";
+    }>;
+    idempotencyKey: z.core.$ZodBranded<z.ZodString, "IdempotencyKey", "out">;
+    operations: z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            CREATE: "CREATE";
+            UPDATE: "UPDATE";
+            DELETE: "DELETE";
+            ARCHIVE: "ARCHIVE";
+            UNARCHIVE: "UNARCHIVE";
+        }>;
+        readAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        onStale: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+            reject: "reject";
+            overwrite: "overwrite";
+            notify: "notify";
+        }>>>;
+        fenceToken: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        model: z.ZodString;
+        id: z.ZodString;
+        input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        transactionId: z.ZodOptional<z.ZodString>;
+        options: z.ZodOptional<z.ZodObject<{
+            idempotencyKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            label: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strip>>;
+    sourceMutationIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    commitOptions: z.ZodDefault<z.ZodObject<{
+        reads: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+            model: z.ZodString;
+            id: z.ZodString;
+            readAt: z.ZodNumber;
+            fields: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+            onStale: z.ZodOptional<z.ZodEnum<{
+                reject: "reject";
+                overwrite: "overwrite";
+                notify: "notify";
+            }>>;
+        }, z.core.$strip>, z.ZodObject<{
+            group: z.ZodString;
+            readAt: z.ZodNumber;
+            onStale: z.ZodOptional<z.ZodEnum<{
+                reject: "reject";
+                overwrite: "overwrite";
+                notify: "notify";
+            }>>;
+        }, z.core.$strip>]>>>>;
+        track: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+            id: z.ZodString;
+            model: z.ZodString;
+            readAt: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>, z.ZodObject<{
+            group: z.ZodString;
+            readAt: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>]>>>>;
+    }, z.core.$strict>>;
+    scope: z.ZodOptional<z.ZodObject<{
+        organizationId: z.ZodString;
+        participantId: z.ZodString;
+        namespace: z.ZodString;
+    }, z.core.$strict>>;
+    createdAt: z.ZodNumber;
+    sealedAt: z.ZodNumber;
+    acceptedAt: z.ZodOptional<z.ZodNumber>;
+    correlationId: z.ZodOptional<z.ZodString>;
+    sequence: z.ZodOptional<z.ZodNumber>;
+    timestamp: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    id: z.ZodString;
+    type: z.ZodLiteral<"http_commit_envelope">;
+    storageVersion: z.ZodLiteral<1>;
+    idempotencyKey: z.core.$ZodBranded<z.ZodString, "IdempotencyKey", "out">;
+    protocolVersion: z.ZodDefault<z.ZodNumber>;
+    request: z.ZodObject<{
+        method: z.ZodEnum<{
+            DELETE: "DELETE";
+            POST: "POST";
+            PATCH: "PATCH";
+        }>;
+        path: z.ZodString;
+        body: z.ZodString;
+    }, z.core.$strict>;
+    scopeNamespace: z.ZodString;
+    createdAt: z.ZodNumber;
+    sealedAt: z.ZodNumber;
+    acceptedAt: z.ZodOptional<z.ZodNumber>;
+    correlationId: z.ZodOptional<z.ZodString>;
+    sequence: z.ZodOptional<z.ZodNumber>;
+    timestamp: z.ZodNumber;
+}, z.core.$strict>]>;
+export type PendingWrite = z.infer<typeof pendingWriteSchema>;
+//# sourceMappingURL=pendingWrite.d.ts.map

package/dist/transactions/settlement/pendingWrite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pendingWrite.d.ts","sourceRoot":"","sources":["../../../src/transactions/settlement/pendingWrite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,wEAAwE;AACxE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAG7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/transactions/settlement/pendingWrite.js

@@ -0,0 +1,21 @@
+/**
+ * The persisted shape of a write awaiting a definitive outcome.
+ *
+ * Owns one authoritative union over the two durable commit envelopes — the
+ * WebSocket envelope and its HTTP counterpart — so an injected store and the
+ * engine that reads back from it agree on exactly one set of records. The
+ * envelope schemas in this directory remain authoritative for their own fields;
+ * this module only unions them.
+ *
+ * The port that persists these records is a behavior contract, not a persisted
+ * shape, so it lives outside this directory in `src/durableWrites.ts`.
+ */
+import { z } from 'zod';
+import { durableCommitEnvelopeSchema } from './commitEnvelope.js';
+import { durableHttpCommitEnvelopeSchema } from './httpCommitEnvelope.js';
+/** Every write shape that Ablo may ask an injected store to persist. */
+export const pendingWriteSchema = z.union([
+    durableCommitEnvelopeSchema,
+    durableHttpCommitEnvelopeSchema,
+]);
+//# sourceMappingURL=pendingWrite.js.map

package/dist/transactions/settlement/pendingWrite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pendingWrite.js","sourceRoot":"","sources":["../../../src/transactions/settlement/pendingWrite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE1E,wEAAwE;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC;IACxC,2BAA2B;IAC3B,+BAA+B;CAChC,CAAC,CAAC"}