@amalgm/live 0.2.27 → 0.2.29

package/dist/contracts/mutation.d.ts

@@ -1,51 +0,0 @@
-/**
- * Durable mutations — one edit, one identity, forever.
- *
- * The hard product invariant (realtime-sdk.md §4, §5): one surface edit
- * creates one logical mutation with one `mutationId`, stable across every
- * retry, journaled before local materialization, and deduplicated by
- * `(resourceId, mutationId)` at every door. Transport may pack, compress,
- * or chunk envelopes — it may never merge identities.
- *
- * After acceptance the authority adds server-derived fields. A
- * client-supplied actor, role, official version, or commit time is never
- * trusted (realtime-sdk.md §5).
- */
-import { type Checked } from './validate.js';
-export interface LiveMutation<Operation = unknown> {
-    readonly resourceId: string;
-    /** Fences writes across authority handoffs: a stale epoch is refused. */
-    readonly authorityEpoch: number;
-    /** Stable across retries. A retry never manufactures a second edit. */
-    readonly mutationId: string;
-    readonly deviceId: string;
-    /** The official per-resource version this edit was built against. */
-    readonly baseVersion: number;
-    /** Data contract of the operation, e.g. "text-yjs@1". */
-    readonly contract: string;
-    readonly operation: Operation;
-}
-/** Server-derived facts stamped by the authority on acceptance. */
-export interface AcceptedMutation<Operation = unknown> extends LiveMutation<Operation> {
-    readonly actorId: string;
-    /** Official per-resource version assigned by the authority. */
-    readonly version: number;
-    readonly committedAt: number;
-}
-/**
- * Durable mutation state, separate from connection state
- * (realtime-sdk.md §7). Terminal states preserve local work: `rejected`
- * and `conflicted` never discard the losing side (axiom: never a silent
- * winner).
- */
-export declare const MUTATION_STATES: readonly ["saving-local", "saved-local", "syncing", "synced", "rejected", "conflicted"];
-export type MutationState = (typeof MUTATION_STATES)[number];
-/**
- * The cloud dedupes both entry doors on this key; repeating an accepted
- * mutation returns the original ack. NUL-separated: ids may contain any
- * printable character, so a printable separator could collide two
- * different identities.
- */
-export declare const mutationKey: (m: Pick<LiveMutation, "resourceId" | "mutationId">) => string;
-export declare function checkLiveMutation(input: unknown): Checked<LiveMutation>;
-//# sourceMappingURL=mutation.d.ts.map

package/dist/contracts/mutation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mutation.d.ts","sourceRoot":"","sources":["../../src/contracts/mutation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,OAAO,EAAsD,MAAM,eAAe,CAAC;AAEjG,MAAM,WAAW,YAAY,CAAC,SAAS,GAAG,OAAO;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B;AAED,mEAAmE;AACnE,MAAM,WAAW,gBAAgB,CAAC,SAAS,GAAG,OAAO,CAAE,SAAQ,YAAY,CAAC,SAAS,CAAC;IACpF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,eAAO,MAAM,eAAe,yFAOlB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,WAAW,GAAI,GAAG,IAAI,CAAC,YAAY,EAAE,YAAY,GAAG,YAAY,CAAC,KAAG,MACzC,CAAC;AAKzC,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAevE"}

package/dist/contracts/mutation.js

@@ -1,55 +0,0 @@
-/**
- * Durable mutations — one edit, one identity, forever.
- *
- * The hard product invariant (realtime-sdk.md §4, §5): one surface edit
- * creates one logical mutation with one `mutationId`, stable across every
- * retry, journaled before local materialization, and deduplicated by
- * `(resourceId, mutationId)` at every door. Transport may pack, compress,
- * or chunk envelopes — it may never merge identities.
- *
- * After acceptance the authority adds server-derived fields. A
- * client-supplied actor, role, official version, or commit time is never
- * trusted (realtime-sdk.md §5).
- */
-import { pass, failShape, isRecord, isNonEmptyString, isSeq } from './validate.js';
-/**
- * Durable mutation state, separate from connection state
- * (realtime-sdk.md §7). Terminal states preserve local work: `rejected`
- * and `conflicted` never discard the losing side (axiom: never a silent
- * winner).
- */
-export const MUTATION_STATES = [
-    'saving-local', // selected journal is persisting the edit
-    'saved-local', // journal contains it; runtime-routed edits are also materialized
-    'syncing', // leased/pending in the outbox view
-    'synced', // cloud accepted and assigned the official version
-    'rejected', // cloud refused (permission/schema); local work preserved
-    'conflicted', // contract requires an explicit merge decision; both sides survive
-];
-/**
- * The cloud dedupes both entry doors on this key; repeating an accepted
- * mutation returns the original ack. NUL-separated: ids may contain any
- * printable character, so a printable separator could collide two
- * different identities.
- */
-export const mutationKey = (m) => `${m.resourceId}\u0000${m.mutationId}`;
-const EXAMPLE = '{ resourceId: "r1", authorityEpoch: 1, mutationId: "m-7", deviceId: "d1", baseVersion: 12, contract: "text-yjs@1", operation: {...} }';
-export function checkLiveMutation(input) {
-    if (!isRecord(input))
-        return failShape(EXAMPLE, `got ${input === null ? 'null' : typeof input}`);
-    for (const field of ['resourceId', 'mutationId', 'deviceId', 'contract']) {
-        if (!isNonEmptyString(input[field])) {
-            return failShape(EXAMPLE, `${field} was ${JSON.stringify(input[field])}, not a non-empty string`);
-        }
-    }
-    if (!isSeq(input.authorityEpoch)) {
-        return failShape(EXAMPLE, `authorityEpoch was ${JSON.stringify(input.authorityEpoch)}, not a non-negative integer`);
-    }
-    if (!isSeq(input.baseVersion)) {
-        return failShape(EXAMPLE, `baseVersion was ${JSON.stringify(input.baseVersion)}, not a non-negative integer`);
-    }
-    if (!('operation' in input))
-        return failShape(EXAMPLE, 'operation was missing');
-    return pass(input);
-}
-//# sourceMappingURL=mutation.js.map

package/dist/contracts/mutation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mutation.js","sourceRoot":"","sources":["../../src/contracts/mutation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAgB,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAwBjG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,cAAc,EAAE,0CAA0C;IAC1D,aAAa,EAAE,kEAAkE;IACjF,SAAS,EAAE,oCAAoC;IAC/C,QAAQ,EAAE,mDAAmD;IAC7D,UAAU,EAAE,0DAA0D;IACtE,YAAY,EAAE,mEAAmE;CACzE,CAAC;AAGX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAkD,EAAU,EAAE,CACxF,GAAG,CAAC,CAAC,UAAU,SAAS,CAAC,CAAC,UAAU,EAAE,CAAC;AAEzC,MAAM,OAAO,GACX,uIAAuI,CAAC;AAE1I,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC,OAAO,EAAE,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;IACjG,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,CAAU,EAAE,CAAC;QAClF,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC,OAAO,EAAE,GAAG,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC,OAAO,EAAE,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,8BAA8B,CAAC,CAAC;IACtH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC,OAAO,EAAE,mBAAmB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,8BAA8B,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,KAAgC,CAAC,CAAC;AAChD,CAAC"}

package/dist/machines/journal.d.ts

@@ -1,63 +0,0 @@
-/**
- * The mutation journal machine — journal first, materialize second.
- *
- * The hard rule (cloud-mutation-discipline.md): one SDK commit creates one
- * durable mutation identity; the journal row is written BEFORE the local
- * materialization, and that same row is the cloud outbox record. There is
- * no second outgoing table and no contract-specific retry loop.
- *
- * This machine owns the state transitions and their legality. The host
- * supplies the durable store through the `MutationJournalStore` port and
- * performs the actual materialization and network submission; the cloud
- * pump drives `claim → synced/rejected/conflicted`.
- */
-import { type LiveMutation, type MutationState } from '../contracts/mutation.js';
-export interface JournalRow<Operation = unknown> {
-    readonly mutation: LiveMutation<Operation>;
-    readonly state: MutationState;
-    /** Set once the cloud assigns the official per-resource version. */
-    readonly officialVersion?: number;
-    /** Present on `rejected`/`conflicted`; local work is preserved either way. */
-    readonly reason?: string;
-}
-/** The durable store port. Every method is synchronous from the machine's view; a host may back it with SQLite, IndexedDB, or memory. */
-export interface MutationJournalStore<Operation = unknown> {
-    read(key: string): JournalRow<Operation> | null;
-    write(key: string, row: JournalRow<Operation>): void;
-    /** The outbox is a filtered view of this journal — never a second table. */
-    pendingShared(): readonly JournalRow<Operation>[];
-}
-export type JournalDecision<Operation = unknown> = 
-/** New identity: the row is journaled; the host must now materialize, then call `advance(key, 'saved-local')`. */
-{
-    readonly outcome: 'journaled';
-    readonly row: JournalRow<Operation>;
-}
-/** Same `(resourceId, mutationId)` seen before: return the existing row — a retry never creates a second edit. */
- | {
-    readonly outcome: 'duplicate';
-    readonly row: JournalRow<Operation>;
-};
-export declare class MutationJournal<Operation = unknown> {
-    private readonly store;
-    constructor(store: MutationJournalStore<Operation>);
-    /** SDK commit: journal the mutation before anything else happens. Idempotent by mutation identity. */
-    commit(mutation: LiveMutation<Operation>): JournalDecision<Operation>;
-    /**
-     * Advance a mutation's state along the discipline's order. An illegal
-     * transition throws — it is a programming error in the host, not a wire
-     * condition, and hiding it would corrupt the journal's meaning.
-     */
-    advance(key: string, to: MutationState, detail?: {
-        officialVersion?: number;
-        reason?: string;
-    }): JournalRow<Operation>;
-    /**
-     * Crash recovery: an unfinished materialization is resumed from the
-     * journal already on disk — rows still `saving-local` need their
-     * materialization re-applied (idempotently), rows `saved-local` and
-     * later resume from the pump.
-     */
-    unfinishedMaterializations(): readonly JournalRow<Operation>[];
-}
-//# sourceMappingURL=journal.d.ts.map

package/dist/machines/journal.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"journal.d.ts","sourceRoot":"","sources":["../../src/machines/journal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,aAAa,EAAe,MAAM,0BAA0B,CAAC;AAE9F,MAAM,WAAW,UAAU,CAAC,SAAS,GAAG,OAAO;IAC7C,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,yIAAyI;AACzI,MAAM,WAAW,oBAAoB,CAAC,SAAS,GAAG,OAAO;IACvD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;IACrD,4EAA4E;IAC5E,aAAa,IAAI,SAAS,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;CACnD;AAWD,MAAM,MAAM,eAAe,CAAC,SAAS,GAAG,OAAO;AAC7C,kHAAkH;AAChH;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;CAAE;AACxE,kHAAkH;GAChH;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;CAAE,CAAC;AAE3E,qBAAa,eAAe,CAAC,SAAS,GAAG,OAAO;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,oBAAoB,CAAC,SAAS,CAAC;IAEnE,sGAAsG;IACtG,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,GAAG,eAAe,CAAC,SAAS,CAAC;IASrE;;;;OAIG;IACH,OAAO,CACL,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,aAAa,EACjB,MAAM,GAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GACzD,UAAU,CAAC,SAAS,CAAC;IAqBxB;;;;;OAKG;IACH,0BAA0B,IAAI,SAAS,UAAU,CAAC,SAAS,CAAC,EAAE;CAG/D"}

package/dist/machines/journal.js

@@ -1,71 +0,0 @@
-/**
- * The mutation journal machine — journal first, materialize second.
- *
- * The hard rule (cloud-mutation-discipline.md): one SDK commit creates one
- * durable mutation identity; the journal row is written BEFORE the local
- * materialization, and that same row is the cloud outbox record. There is
- * no second outgoing table and no contract-specific retry loop.
- *
- * This machine owns the state transitions and their legality. The host
- * supplies the durable store through the `MutationJournalStore` port and
- * performs the actual materialization and network submission; the cloud
- * pump drives `claim → synced/rejected/conflicted`.
- */
-import { mutationKey } from '../contracts/mutation.js';
-const LEGAL = {
-    'saving-local': ['saved-local'],
-    'saved-local': ['syncing'],
-    syncing: ['synced', 'rejected', 'conflicted', 'saved-local'], // saved-local: a lease expired; the pump re-claims
-    synced: [],
-    rejected: [],
-    conflicted: [],
-};
-export class MutationJournal {
-    store;
-    constructor(store) {
-        this.store = store;
-    }
-    /** SDK commit: journal the mutation before anything else happens. Idempotent by mutation identity. */
-    commit(mutation) {
-        const key = mutationKey(mutation);
-        const existing = this.store.read(key);
-        if (existing)
-            return { outcome: 'duplicate', row: existing };
-        const row = { mutation, state: 'saving-local' };
-        this.store.write(key, row);
-        return { outcome: 'journaled', row };
-    }
-    /**
-     * Advance a mutation's state along the discipline's order. An illegal
-     * transition throws — it is a programming error in the host, not a wire
-     * condition, and hiding it would corrupt the journal's meaning.
-     */
-    advance(key, to, detail = {}) {
-        const row = this.store.read(key);
-        if (!row) {
-            throw new Error(`no journal row for "${key}" — commit() the mutation before advancing it`);
-        }
-        if (!LEGAL[row.state].includes(to)) {
-            throw new Error(`illegal journal transition "${row.state}" → "${to}" for "${key}" — ` +
-                `the order is saving-local → saved-local → syncing → synced|rejected|conflicted`);
-        }
-        const next = {
-            mutation: row.mutation,
-            state: to,
-            ...(detail.officialVersion !== undefined ? { officialVersion: detail.officialVersion } : {}),
-            ...(detail.reason !== undefined ? { reason: detail.reason } : {}),
-        };
-        this.store.write(key, next);
-        return next;
-    }
-    /**
-     * Crash recovery: an unfinished materialization is resumed from the
-     * journal already on disk — rows still `saving-local` need their
-     * materialization re-applied (idempotently), rows `saved-local` and
-     * later resume from the pump.
-     */
-    unfinishedMaterializations() {
-        return this.store.pendingShared().filter((row) => row.state === 'saving-local');
-    }
-}
-//# sourceMappingURL=journal.js.map

package/dist/machines/journal.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../src/machines/journal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAyC,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAmB9F,MAAM,KAAK,GAA8D;IACvE,cAAc,EAAE,CAAC,aAAa,CAAC;IAC/B,aAAa,EAAE,CAAC,SAAS,CAAC;IAC1B,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,CAAC,EAAE,mDAAmD;IACjH,MAAM,EAAE,EAAE;IACV,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,EAAE;CACf,CAAC;AAQF,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,KAAsC;QAAtC,UAAK,GAAL,KAAK,CAAiC;IAAG,CAAC;IAEvE,sGAAsG;IACtG,MAAM,CAAC,QAAiC;QACtC,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;QAC7D,MAAM,GAAG,GAA0B,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,OAAO,CACL,GAAW,EACX,EAAiB,EACjB,SAAwD,EAAE;QAE1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,+CAA+C,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,+BAA+B,GAAG,CAAC,KAAK,QAAQ,EAAE,UAAU,GAAG,MAAM;gBACnE,gFAAgF,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAA0B;YAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,EAAE;YACT,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,0BAA0B;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC;IAClF,CAAC;CACF"}

package/dist/machines/ordering.d.ts

@@ -1,53 +0,0 @@
-/**
- * The sequence ledger — ordered, gap-free application of state events.
- *
- * Client obligations (local-live-protocol.md §6): never re-apply an event
- * at or below the applied seq; on a gap, run exactly one backfill at a
- * time (`GET /state/events?after=`); on backfill failure or a `reset`
- * frame, converge on a full re-sync. Every decision is returned as data —
- * the host performs the fetches.
- */
-import type { StateEvent } from '../contracts/events.js';
-export type LedgerDecision = 
-/** In order: apply to local state, advance the ledger. */
-{
-    readonly action: 'apply';
-    readonly event: StateEvent;
-}
-/** At or below the applied seq: drop silently (duplicate delivery is normal). */
- | {
-    readonly action: 'skip-duplicate';
-    readonly event: StateEvent;
-}
-/** A gap opened. Run one backfill after `after`; the event is buffered and will replay once the gap closes. */
- | {
-    readonly action: 'backfill';
-    readonly after: number;
-    readonly buffered: StateEvent;
-}
-/** A backfill is already in flight: buffer only (single-flight obligation). */
- | {
-    readonly action: 'buffer';
-    readonly buffered: StateEvent;
-};
-export declare class SequenceLedger {
-    #private;
-    constructor(appliedSeq: number);
-    get appliedSeq(): number;
-    get backfilling(): boolean;
-    /** Feed one live event; act on the returned decision. */
-    accept(event: StateEvent): LedgerDecision;
-    /**
-     * Deliver the backfill body. Returns the events to apply, in order,
-     * merged with everything buffered while the backfill was in flight.
-     * Backfilled and buffered ranges may overlap; the ledger dedupes by seq.
-     */
-    completeBackfill(events: readonly StateEvent[]): StateEvent[];
-    /** Whether `completeBackfill` left the ledger still gapped — the caller must re-sync. */
-    needsResync(nextBufferedSeq?: number): boolean;
-    /** Backfill failed, or a `reset` frame arrived: drop everything and let the caller re-snapshot. */
-    abandonToResync(): void;
-    /** A full snapshot installed at `seq` supersedes anything older. */
-    resumeFrom(seq: number): void;
-}
-//# sourceMappingURL=ordering.d.ts.map

package/dist/machines/ordering.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ordering.d.ts","sourceRoot":"","sources":["../../src/machines/ordering.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,MAAM,cAAc;AACxB,0DAA0D;AACxD;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE;AAC1D,iFAAiF;GAC/E;IAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE;AACnE,+GAA+G;GAC7G;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;CAAE;AACxF,+EAA+E;GAC7E;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;CAAE,CAAC;AAEjE,qBAAa,cAAc;;gBAKb,UAAU,EAAE,MAAM;IAI9B,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED,yDAAyD;IACzD,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc;IAezC;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,UAAU,EAAE;IAmB7D,yFAAyF;IACzF,WAAW,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO;IAI9C,mGAAmG;IACnG,eAAe,IAAI,IAAI;IAKvB,oEAAoE;IACpE,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;CAY9B"}

package/dist/machines/ordering.js

@@ -1,87 +0,0 @@
-/**
- * The sequence ledger — ordered, gap-free application of state events.
- *
- * Client obligations (local-live-protocol.md §6): never re-apply an event
- * at or below the applied seq; on a gap, run exactly one backfill at a
- * time (`GET /state/events?after=`); on backfill failure or a `reset`
- * frame, converge on a full re-sync. Every decision is returned as data —
- * the host performs the fetches.
- */
-export class SequenceLedger {
-    #appliedSeq;
-    #backfilling = false;
-    #buffer = [];
-    constructor(appliedSeq) {
-        this.#appliedSeq = appliedSeq;
-    }
-    get appliedSeq() {
-        return this.#appliedSeq;
-    }
-    get backfilling() {
-        return this.#backfilling;
-    }
-    /** Feed one live event; act on the returned decision. */
-    accept(event) {
-        if (event.seq <= this.#appliedSeq)
-            return { action: 'skip-duplicate', event };
-        if (this.#backfilling) {
-            this.#insertBuffered(event);
-            return { action: 'buffer', buffered: event };
-        }
-        if (event.seq === this.#appliedSeq + 1) {
-            this.#appliedSeq = event.seq;
-            return { action: 'apply', event };
-        }
-        this.#backfilling = true;
-        this.#insertBuffered(event);
-        return { action: 'backfill', after: this.#appliedSeq, buffered: event };
-    }
-    /**
-     * Deliver the backfill body. Returns the events to apply, in order,
-     * merged with everything buffered while the backfill was in flight.
-     * Backfilled and buffered ranges may overlap; the ledger dedupes by seq.
-     */
-    completeBackfill(events) {
-        this.#backfilling = false;
-        const merged = [...events, ...this.#buffer].sort((a, b) => a.seq - b.seq);
-        this.#buffer = [];
-        const toApply = [];
-        for (const event of merged) {
-            if (event.seq <= this.#appliedSeq)
-                continue;
-            if (event.seq !== this.#appliedSeq + 1) {
-                // The backfill itself was gappy — the buffer cannot repair it.
-                // Converge on the recovery rule: full re-sync.
-                this.#buffer = [];
-                return toApply;
-            }
-            this.#appliedSeq = event.seq;
-            toApply.push(event);
-        }
-        return toApply;
-    }
-    /** Whether `completeBackfill` left the ledger still gapped — the caller must re-sync. */
-    needsResync(nextBufferedSeq) {
-        return nextBufferedSeq !== undefined && nextBufferedSeq > this.#appliedSeq + 1;
-    }
-    /** Backfill failed, or a `reset` frame arrived: drop everything and let the caller re-snapshot. */
-    abandonToResync() {
-        this.#backfilling = false;
-        this.#buffer = [];
-    }
-    /** A full snapshot installed at `seq` supersedes anything older. */
-    resumeFrom(seq) {
-        this.#appliedSeq = seq;
-        this.#backfilling = false;
-        this.#buffer = this.#buffer.filter((event) => event.seq > seq);
-    }
-    #insertBuffered(event) {
-        // Keep the buffer sorted and deduped; delivery may repeat frames.
-        const at = this.#buffer.findIndex((held) => held.seq >= event.seq);
-        if (at === -1)
-            this.#buffer.push(event);
-        else if (this.#buffer[at].seq !== event.seq)
-            this.#buffer.splice(at, 0, event);
-    }
-}
-//# sourceMappingURL=ordering.js.map

package/dist/machines/ordering.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ordering.js","sourceRoot":"","sources":["../../src/machines/ordering.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAcH,MAAM,OAAO,cAAc;IACzB,WAAW,CAAS;IACpB,YAAY,GAAG,KAAK,CAAC;IACrB,OAAO,GAAiB,EAAE,CAAC;IAE3B,YAAY,UAAkB;QAC5B,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;IAChC,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,yDAAyD;IACzD,MAAM,CAAC,KAAiB;QACtB,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;QAC9E,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,MAA6B;QAC5C,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,WAAW;gBAAE,SAAS;YAC5C,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;gBACvC,+DAA+D;gBAC/D,+CAA+C;gBAC/C,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;gBAClB,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,yFAAyF;IACzF,WAAW,CAAC,eAAwB;QAClC,OAAO,eAAe,KAAK,SAAS,IAAI,eAAe,GAAG,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;IACjF,CAAC;IAED,mGAAmG;IACnG,eAAe;QACb,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;IACpB,CAAC;IAED,oEAAoE;IACpE,UAAU,CAAC,GAAW;QACpB,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QACvB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IACjE,CAAC;IAED,eAAe,CAAC,KAAiB;QAC/B,kEAAkE;QAClE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACnC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAE,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAClF,CAAC;CACF"}