@amalgm/shell 0.1.164-preview.36072132286 → 0.1.164-preview.36809057014

package/dist/declaration-absorption.js

@@ -0,0 +1,119 @@
+/**
+ * Register's enclosing law. W's ground may enclose workspaces this machine
+ * already materializes. Each one the authority holds as its own root is
+ * absorbed: its accepted subtree joins W's head with every identity kept,
+ * and its root leaves the head in the same commit. Only its root record
+ * changes: it is re-placed where W's walk found it, under its parentUUID
+ * and name there, and a `workspace`, which only a root can be, becomes a
+ * `folder`.
+ *
+ * Absorbed ground rides as each inventory already holds it. The head
+ * carries its accepted records, and sharing (B) keeps its own rows
+ * (declaration-save.ts), so local work there, including an identity the walk
+ * found moved out of it, stays owed to ordinary Detect. Only identities an
+ * inventory lacks enter from the walk.
+ */
+import { canonicalVersion, eachStep, refusal, } from "@amalgm/live";
+import { pathWithin } from "./files-register-host.js";
+import { acceptedResultRootResolver, acceptedRoot, deriveContainerVersionsSteps, } from "./graph-publication.js";
+import { eachInTurns, finishStepsInTurns } from "./turns.js";
+/** The bound workspaces W's ground encloses. */
+export function enclosedWorkspaces(bindings, workspaceId, directory) {
+    return bindings.filter((binding) => binding.workspaceId !== workspaceId && pathWithin(directory, binding.directory));
+}
+/** The root AV holds this identity in, or null when AV never accepted it. */
+export async function acceptedHolder(view, uuid) {
+    const tailed = view.tail.results.find((result) => result.uuid === uuid);
+    if (tailed)
+        return acceptedResultRootResolver(view.tail.results, view.located)(tailed);
+    return view.head.graph.locate(uuid);
+}
+/** The enclosed workspaces W absorbs on this view. One held inside another
+ * enclosed workspace rides with it. Anything else refuses: ground whose own
+ * declaration the authority has not accepted, or that it holds inside a root
+ * this machine does not enclose, would move identities W never observed. */
+export async function absorbedRoots(view, workspaceId, enclosed, held) {
+    const enclosedIds = new Set(enclosed.map((entry) => entry.workspaceId));
+    const absorbed = [];
+    for (const { workspaceId: inner, directory } of enclosed) {
+        const refused = (why) => refusal(`files register refuses workspace ${workspaceId}: `
+            + `the workspace ${inner} it encloses at ${directory} ${why}`);
+        if (held.has(inner))
+            throw refused("still awaits its own registration; register it again first");
+        const holder = await acceptedHolder(view, inner);
+        if (holder === null)
+            throw refused("was never accepted");
+        if (holder !== inner) {
+            if (enclosedIds.has(holder))
+                continue;
+            throw refused(`is accepted inside root ${holder}, which this workspace does not enclose`);
+        }
+        const tailed = view.tail.results.find((result) => result.uuid === inner);
+        const status = (tailed ?? await view.head.graph.rootRecord(inner)).status;
+        if (status !== "active")
+            throw refused(`is ${status} in the accepted graph`);
+        absorbed.push(inner);
+    }
+    return absorbed;
+}
+/** An absorbed root's own record, re-placed where W's walk found it. */
+export function placeAbsorbedRoot(record, placement, sha256Hex) {
+    const type = record.type === "workspace" ? "folder" : record.type;
+    const placed = { ...record, type, parentUUID: placement.parentUUID, name: placement.name };
+    return { ...placed, version: canonicalVersion(placed, sha256Hex) };
+}
+/** D's records for W: the walk outside absorbed ground, minus identities AV
+ * already holds there, plus each absorbed root exactly as AV holds it with
+ * its root re-placed. Container versions derive from D's own membership. */
+export async function absorbingDeclaration(view, workspaceId, walked, absorbed, sha256Hex) {
+    if (absorbed.length === 0)
+        return walked;
+    const walkedById = new Map();
+    await eachInTurns(walked, (record) => { walkedById.set(record.uuid, record); });
+    const accepted = new Map();
+    for (const root of absorbed) {
+        const placement = walkedById.get(root);
+        if (!placement) {
+            throw refusal(`files register refuses workspace ${workspaceId}: its enrollment policy leaves out `
+                + `the workspace ${root} it encloses, so that workspace has no place in its graph`);
+        }
+        await eachInTurns((await acceptedRoot(view, root, sha256Hex)).values(), (record) => {
+            accepted.set(record.uuid, record.uuid === root ? placeAbsorbedRoot(record, placement, sha256Hex) : record);
+        });
+    }
+    const inside = await finishStepsInTurns(absorbedGroundSteps(walked, absorbed));
+    const records = [];
+    await eachInTurns(walked, (record) => {
+        if (!inside.has(record.uuid) && !accepted.has(record.uuid))
+            records.push(record);
+    });
+    await eachInTurns(accepted.values(), (record) => { records.push(record); });
+    return finishStepsInTurns(deriveContainerVersionsSteps(records, sha256Hex));
+}
+/** Every walked identity inside an absorbed root, the root included. */
+function* absorbedGroundSteps(walked, absorbed) {
+    const children = new Map();
+    yield* eachStep(walked, ({ uuid, parentUUID }) => {
+        if (parentUUID === null)
+            return;
+        const siblings = children.get(parentUUID);
+        if (siblings)
+            siblings.push(uuid);
+        else
+            children.set(parentUUID, [uuid]);
+    });
+    const inside = new Set();
+    const pending = [...absorbed];
+    function* reached() {
+        for (let uuid = pending.pop(); uuid !== undefined; uuid = pending.pop())
+            yield uuid;
+    }
+    yield* eachStep(reached(), (uuid) => {
+        if (inside.has(uuid))
+            return;
+        inside.add(uuid);
+        pending.push(...children.get(uuid) ?? []);
+    });
+    return inside;
+}
+//# sourceMappingURL=declaration-absorption.js.map

package/dist/declaration-absorption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declaration-absorption.js","sourceRoot":"","sources":["../src/declaration-absorption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACL,gBAAgB,EAChB,QAAQ,EACR,OAAO,GAKR,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EACL,0BAA0B,EAC1B,YAAY,EACZ,4BAA4B,GAE7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAQ7D,gDAAgD;AAChD,MAAM,UAAU,kBAAkB,CAChC,QAAmC,EACnC,WAAmB,EACnB,SAAiB;IAEjB,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,WAAW,IAAI,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AACvH,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAkB,EAAE,IAAY;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACxE,IAAI,MAAM;QAAE,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;;4EAG4E;AAC5E,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAkB,EAClB,WAAmB,EACnB,QAAmC,EACnC,IAAyB;IAEzB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,QAAQ,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,oCAAoC,WAAW,IAAI;cACxF,iBAAiB,KAAK,mBAAmB,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,OAAO,CAAC,4DAA4D,CAAC,CAAC;QACjG,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YACtC,MAAM,OAAO,CAAC,2BAA2B,MAAM,yCAAyC,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1E,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM,OAAO,CAAC,MAAM,MAAM,wBAAwB,CAAC,CAAC;QAC7E,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAC/B,MAAyB,EACzB,SAAyD,EACzD,SAAoB;IAEpB,MAAM,IAAI,GAAe,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAC9E,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;IAC3F,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;4EAE4E;AAC5E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAkB,EAClB,WAAmB,EACnB,MAAoC,EACpC,QAA2B,EAC3B,SAAoB;IAEpB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAC;IACxD,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IACtD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,oCAAoC,WAAW,qCAAqC;kBAC9F,iBAAiB,IAAI,2DAA2D,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,WAAW,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE;YACjF,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7G,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,kBAAkB,CAAC,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,wEAAwE;AACxE,QAAQ,CAAC,CAAC,mBAAmB,CAC3B,MAAoC,EACpC,QAA2B;IAE3B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7C,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;QAC/C,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO;QAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YAC7B,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC9B,QAAQ,CAAC,CAAC,OAAO;QACf,KAAK,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,KAAK,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;YAAE,MAAM,IAAI,CAAC;IACtF,CAAC;IACD,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;QAClC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/declaration-chain.d.ts

@@ -0,0 +1,36 @@
+import type Database from "better-sqlite3";
+import { type CloudEntityRecord, type Sha256Hex } from "@amalgm/live";
+import { type ContentBoundary } from "./content-clock.js";
+import type { GroundRow } from "./ground-row.js";
+export interface DeclarationChain {
+    /** The core records D declares: the reference, and its folder when the
+     * accepted view lacks it. */
+    readonly records: readonly CloudEntityRecord[];
+    /** Rows for the chain's two addresses, reference first, as observed when
+     * derived. */
+    readonly chained: readonly GroundRow[];
+    /** What local ground named at each chained address when derived. */
+    readonly named: readonly (string | null)[];
+    /** B rows for exactly the declared records. */
+    readonly shared: readonly GroundRow[];
+    /** The containers whose membership the chain decides: its folder, then
+     * the core root. */
+    readonly containers: readonly string[];
+}
+/** Derive W's chain in core ground. `accepted` is AV's core root. */
+export declare function deriveDeclarationChain(input: {
+    readonly database: Database.Database;
+    readonly resourceId: string;
+    readonly userRoot: string;
+    readonly bindingDir: string;
+    readonly coreRootId: string;
+    readonly workspaceId: string;
+    readonly accepted: ReadonlyMap<string, CloudEntityRecord>;
+    /** The core root's content clock, stamped before this read. */
+    readonly clock: ContentBoundary | null;
+    /** The UUID minted for an address no row names; see `addressMinter`. */
+    readonly mint: (relativePath: string) => string;
+    readonly sha256Hex: Sha256Hex;
+}): DeclarationChain;
+/** One UUID per address, however often the chain is derived again. */
+export declare function addressMinter(mint: () => string): (relativePath: string) => string;

package/dist/declaration-chain.js

@@ -0,0 +1,96 @@
+/**
+ * The core records one Register declaration adds beside its root W: W's
+ * managed reference, and the `workspaces` folder that holds it while the
+ * accepted view lacks that folder.
+ *
+ * Identity follows local ground: sharing (B) first, then observation (O), so
+ * repeating a declaration names the same UUIDs. A folder no local row names
+ * adopts the accepted folder in its slot, and only then is a UUID minted, once
+ * per address for the whole Register.
+ * Both are read from the rendered reference itself: a reference that is gone
+ * ends the declaration, because D would name ground this machine no longer
+ * holds.
+ *
+ * Core Detect keeps observing the same ground while Register works. The chain
+ * is derived on the main thread; the only facts it read that can move before
+ * its commit are what local ground names at its two addresses. The commit
+ * reads those again on the saver thread and never writes a chain whose
+ * identities moved.
+ */
+import { lstatSync } from "node:fs";
+import { basename, join } from "node:path";
+import { canonicalVersion, membershipHash, refusal } from "@amalgm/live";
+import { leafBoundary } from "./content-clock.js";
+import { namedAt } from "./declaration-save.js";
+import { findReference } from "./files-register-host.js";
+import { sourceFingerprint } from "./source-signature.js";
+const WORKSPACES = "workspaces";
+/** Derive W's chain in core ground. `accepted` is AV's core root. */
+export function deriveDeclarationChain(input) {
+    const { database, resourceId, userRoot, coreRootId, workspaceId, accepted, sha256Hex } = input;
+    const folderPath = join(userRoot, WORKSPACES);
+    const referencePath = findReference(folderPath, input.bindingDir, workspaceId);
+    if (referencePath === null) {
+        throw refusal(`workspace ${workspaceId} has no reference in ${folderPath}; run files register again`);
+    }
+    const name = basename(referencePath);
+    const referenceRelative = `${WORKSPACES}/${name}`;
+    const named = [referenceRelative, WORKSPACES].map(relativePath => namedAt(database, resourceId, coreRootId, relativePath));
+    const acceptedFolder = [...accepted.values()].find(record => record.parentUUID === coreRootId
+        && record.name === WORKSPACES && record.type === "folder" && record.status === "active");
+    const folderId = named[1] ?? acceptedFolder?.uuid ?? input.mint(WORKSPACES);
+    const acceptedAsFolder = accepted.get(folderId);
+    if (acceptedAsFolder && (acceptedAsFolder.status !== "active" || acceptedAsFolder.type !== "folder")) {
+        throw refusal(`${folderPath} is ${acceptedAsFolder.status} ${acceptedAsFolder.type} ${folderId} in the accepted graph`);
+    }
+    const reference = canonical({
+        uuid: named[0] ?? input.mint(referenceRelative),
+        type: "reference", parentUUID: folderId, name, payloadVersion: workspaceId,
+    }, sha256Hex);
+    const folder = canonical({
+        uuid: folderId, type: "folder", parentUUID: coreRootId, name: WORKSPACES,
+        payloadVersion: membershipHash([{ uuid: reference.uuid, name }], sha256Hex),
+    }, sha256Hex);
+    const row = (record, relativePath, absolutePath) => {
+        const stats = lstatSync(absolutePath, { bigint: true });
+        return {
+            resourceId, rootUUID: coreRootId, uuid: record.uuid, type: record.type,
+            parentUUID: record.parentUUID, name: record.name, status: "active", version: record.version,
+            payloadVersion: record.payloadVersion, transportVersion: null, relativePath, absolutePath,
+            contentVerifiedNs: record.type === "reference" ? leafBoundary(input.clock, stats) : null,
+            ...sourceFingerprint(stats),
+        };
+    };
+    const chained = [row(reference, referenceRelative, referencePath), row(folder, WORKSPACES, folderPath)];
+    const declaresFolder = acceptedAsFolder === undefined;
+    return {
+        records: declaresFolder ? [reference, folder] : [reference],
+        chained,
+        named,
+        shared: declaresFolder ? chained : [chained[0]],
+        containers: [folderId, coreRootId],
+    };
+}
+/** One UUID per address, however often the chain is derived again. */
+export function addressMinter(mint) {
+    const minted = new Map();
+    return (relativePath) => {
+        let uuid = minted.get(relativePath);
+        if (uuid === undefined)
+            minted.set(relativePath, uuid = mint());
+        return uuid;
+    };
+}
+function canonical(fields, sha256Hex) {
+    const derived = fields.type === "folder";
+    return {
+        ...fields,
+        status: "active",
+        // A folder's payload is its membership, which never travels.
+        payloadVersion: derived ? null : fields.payloadVersion,
+        fileMode: null,
+        transportVersion: null,
+        version: canonicalVersion({ ...fields, status: "active" }, sha256Hex),
+    };
+}
+//# sourceMappingURL=declaration-chain.js.map

package/dist/declaration-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declaration-chain.js","sourceRoot":"","sources":["../src/declaration-chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,OAAO,EAA0C,MAAM,cAAc,CAAC;AAEjH,OAAO,EAAE,YAAY,EAAwB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,MAAM,UAAU,GAAG,YAAY,CAAC;AAkBhC,qEAAqE;AACrE,MAAM,UAAU,sBAAsB,CAAC,KAatC;IACC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC/F,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC/E,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,OAAO,CAAC,aAAa,WAAW,wBAAwB,UAAU,4BAA4B,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IACrC,MAAM,iBAAiB,GAAG,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;IAC3H,MAAM,cAAc,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU;WACxF,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,cAAc,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5E,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,gBAAgB,IAAI,CAAC,gBAAgB,CAAC,MAAM,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACrG,MAAM,OAAO,CAAC,GAAG,UAAU,OAAO,gBAAgB,CAAC,MAAM,IAAI,gBAAgB,CAAC,IAAI,IAAI,QAAQ,wBAAwB,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC;QAC1B,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAC/C,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW;KAC3E,EAAE,SAAS,CAAC,CAAC;IACd,MAAM,MAAM,GAAG,SAAS,CAAC;QACvB,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU;QACxE,cAAc,EAAE,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC;KAC5E,EAAE,SAAS,CAAC,CAAC;IACd,MAAM,GAAG,GAAG,CAAC,MAAyB,EAAE,YAAoB,EAAE,YAAoB,EAAa,EAAE;QAC/F,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO;YACL,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI;YACtE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;YAC3F,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY;YACzF,iBAAiB,EAAE,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;YACxF,GAAG,iBAAiB,CAAC,KAAK,CAAC;SAC5B,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IACxG,MAAM,cAAc,GAAG,gBAAgB,KAAK,SAAS,CAAC;IACtD,OAAO;QACL,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,OAAO;QACP,KAAK;QACL,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;QAChD,UAAU,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,aAAa,CAAC,IAAkB;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,OAAO,CAAC,YAAY,EAAE,EAAE;QACtB,IAAI,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,MAA2F,EAC3F,SAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;IACzC,OAAO;QACL,GAAG,MAAM;QACT,MAAM,EAAE,QAAQ;QAChB,6DAA6D;QAC7D,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc;QACtD,QAAQ,EAAE,IAAI;QACd,gBAAgB,EAAE,IAAI;QACtB,OAAO,EAAE,gBAAgB,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;KACtE,CAAC;AACJ,CAAC"}

package/dist/declaration-commit.d.ts

@@ -0,0 +1,31 @@
+import type { DeclarationChain } from "./declaration-chain.js";
+import type { DeclarationJournalEntry } from "./declaration-journal.js";
+import type { RepositorySealCandidate } from "./detection/seal-law.js";
+import type { RepositoryObservationPair } from "./git-repository-host.js";
+import type { GroundRow } from "./ground-row.js";
+import type { SourceProof } from "./source-proof.js";
+/** Core ground moved the chain after D was derived. */
+export declare class DeclarationChainMoved extends Error {
+    constructor();
+}
+/** W's walk: rows in its own root, admitted only while its witnesses close. */
+export interface DeclarationWalk {
+    /** Its semantic phase has already answered. */
+    readonly source: SourceProof;
+    readonly repositoryObservations: readonly RepositoryObservationPair[];
+    readonly observed: readonly GroundRow[];
+    readonly selected: readonly GroundRow[];
+    /** Repository seals, installed only with the rows they describe. */
+    readonly seals: readonly RepositorySealCandidate[];
+}
+export declare function commitDeclaration(file: string, input: {
+    readonly resourceId: string;
+    readonly coreRootId: string;
+    readonly walk: DeclarationWalk | null;
+    /** The enclosed roots D absorbs. */
+    readonly absorbed: readonly string[];
+    /** Every bound root W's ground encloses. */
+    readonly enclosed: readonly string[];
+    readonly chain: DeclarationChain;
+    readonly journal: DeclarationJournalEntry;
+}): Promise<void>;

package/dist/declaration-commit.js

@@ -0,0 +1,49 @@
+/**
+ * Admit one Register declaration D beside its journal row, and nothing else.
+ *
+ * Register admits D and the bookkeeping needed to install D: W's observation
+ * (O) and selection (B) exactly as its walk captured them, sharing's own rows
+ * of any ground W absorbs, W's chain in core, and the container versions
+ * those change in each inventory. Every other observation stays owed to
+ * ordinary Detect.
+ *
+ * The walk's witnesses are judged on a content thread and its admission runs
+ * here as the save posts, so W stands exactly as captured: Register holds W's
+ * ground, and saves commit in post order. The save (declaration-save.ts)
+ * reads the chain's addresses again on the saver thread, and a chain whose
+ * identities moved since D was derived commits nothing: the caller derives
+ * again. A re-fold after the authority moved commits no walk. W's rows
+ * already stand, and local work in W after its walk becomes ordinary Records
+ * once the declaration is accepted.
+ */
+import { closePhysicallyOffThread } from "./content-capture-pool.js";
+import { save } from "./ground-saver.js";
+/** Core ground moved the chain after D was derived. */
+export class DeclarationChainMoved extends Error {
+    constructor() {
+        super("the declaration's core chain moved after its publication was derived");
+        this.name = "DeclarationChainMoved";
+    }
+}
+export async function commitDeclaration(file, input) {
+    const { walk } = input;
+    if (walk)
+        await closePhysicallyOffThread(walk.source, "complete");
+    const { value } = await save(file, "register.declare", {
+        resourceId: input.resourceId,
+        coreRootId: input.coreRootId,
+        walk: walk && {
+            repositoryObservations: walk.repositoryObservations.map(({ proof: _proof, ...pair }) => pair),
+            observed: walk.observed,
+            selected: walk.selected,
+            seals: walk.seals,
+        },
+        absorbed: input.absorbed,
+        enclosed: input.enclosed,
+        chain: input.chain,
+        journal: input.journal,
+    });
+    if (value === "moved")
+        throw new DeclarationChainMoved();
+}
+//# sourceMappingURL=declaration-commit.js.map

package/dist/declaration-commit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declaration-commit.js","sourceRoot":"","sources":["../src/declaration-commit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAMrE,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAGzC,uDAAuD;AACvD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C;QACE,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC9E,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAaD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAUrD;IACC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,IAAI,IAAI;QAAE,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE;QACrD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,IAAI,EAAE,IAAI,IAAI;YACZ,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;YAC7F,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB;QACD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IACH,IAAI,KAAK,KAAK,OAAO;QAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;AAC3D,CAAC"}

package/dist/declaration-hold.d.ts

@@ -0,0 +1,22 @@
+/**
+ * A Register declaration holds its root back from ordinary Detect until the
+ * authority has accepted it. A bound root is held while a publication row
+ * owns its declaration, or while sharing (B) has never recorded the root:
+ * then the declaration exists only as a local binding that no Register has
+ * committed yet.
+ *
+ * Held ground is observed, never selected. Its reference in core stays out of
+ * Send, and its own root admits no Record, so ordinary Detect can never
+ * publish a declaration piecemeal before the graph head that introduces it.
+ * The publication outcome wakes the ground it held.
+ */
+import type Database from "better-sqlite3";
+/** A Watch pass could not conclude because these roots are held: the
+ * publication outcome, never a timer, wakes them. */
+export declare class DeclarationHeld extends Error {
+    readonly roots: readonly string[];
+    constructor(roots: readonly string[]);
+}
+/** The held subset of these bound roots, read on the caller's connection so
+ * it joins whatever read transaction the caller is in. */
+export declare function heldDeclarations(database: Database.Database, bindings: Iterable<string>): Set<string>;

package/dist/declaration-hold.js

@@ -0,0 +1,24 @@
+import { cachedStatement } from "./sqlite.js";
+/** A Watch pass could not conclude because these roots are held: the
+ * publication outcome, never a timer, wakes them. */
+export class DeclarationHeld extends Error {
+    roots;
+    constructor(roots) {
+        super(`${roots.join(", ")} held by a Register declaration awaiting the authority`);
+        this.roots = roots;
+        this.name = "DeclarationHeld";
+    }
+}
+/** The held subset of these bound roots, read on the caller's connection so
+ * it joins whatever read transaction the caller is in. */
+export function heldDeclarations(database, bindings) {
+    const journaled = cachedStatement(database, "SELECT 1 FROM snapshot_publications WHERE declaration_root = ? LIMIT 1").pluck();
+    const shared = cachedStatement(database, "SELECT 1 FROM detection_notebook WHERE uuid = ?").pluck();
+    const held = new Set();
+    for (const root of bindings) {
+        if (journaled.get(root) !== undefined || shared.get(root) === undefined)
+            held.add(root);
+    }
+    return held;
+}
+//# sourceMappingURL=declaration-hold.js.map

package/dist/declaration-hold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declaration-hold.js","sourceRoot":"","sources":["../src/declaration-hold.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C;qDACqD;AACrD,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACnB;IAArB,YAAqB,KAAwB;QAC3C,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QADhE,UAAK,GAAL,KAAK,CAAmB;QAE3C,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;0DAC0D;AAC1D,MAAM,UAAU,gBAAgB,CAAC,QAA2B,EAAE,QAA0B;IACtF,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,EACxC,wEAAwE,CAAC,CAAC,KAAK,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,iDAAiD,CAAC,CAAC,KAAK,EAAE,CAAC;IACpG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/declaration-journal.d.ts

@@ -0,0 +1,62 @@
+/**
+ * The Register declaration journal: one durable row per graph-head commit that
+ * introduces a workspace declaration D.
+ *
+ * Register is the only graph-head publisher, and every row it journals owns
+ * exactly one declaration, named by its root W. The row carries the small
+ * facts the authority must be told, the canonical operation bytes that submit
+ * as-is, and the pages the head newly names. D is never stored twice: its
+ * records are read back from those pages.
+ *
+ * pending: intended, retried under the same mutation id until the authority
+ *   answers. Once submitted, its outcome may exist only at the authority, so
+ *   nothing may supersede it.
+ * rejected: the authority conclusively refused this mutation. It is never
+ *   replayed; the next Register re-folds its D onto the current accepted view
+ *   under a new mutation id.
+ *
+ * While any row names W, W's ground is held from ordinary Detect. Every write
+ * here runs on the ground file's saver thread (ground-save-ops.ts).
+ */
+import type Database from "better-sqlite3";
+/** One immutable graph page exactly as it must be sealed. */
+export interface JournaledGraphPage {
+    readonly sha256: string;
+    readonly bytes: Buffer;
+}
+export interface DeclarationJournalEntry {
+    readonly mutationId: string;
+    readonly resourceId: string;
+    /** W: the root whose declaration this row owns. */
+    readonly declarationRoot: string;
+    /** The core records D adds beside W: its reference and any ancestor the
+     * accepted view lacked. */
+    readonly declaredIds: readonly string[];
+    readonly authorityEpoch: number;
+    readonly baseVersion: number;
+    readonly snapshotChecksum: string;
+    /** N: the complete accepted prefix this publication folded. */
+    readonly deliveryWatermark: number;
+    readonly operationKind: string;
+    readonly replacementRootIds: readonly string[];
+    /** Canonical operation bytes — stableJson of the head commit. */
+    readonly operationBlob: Buffer;
+    /** Pages the committed head did not already name. */
+    readonly pages: readonly JournaledGraphPage[];
+    readonly status: "pending" | "rejected";
+    /** True once a submit attempt was durably declared for this row. */
+    readonly submitted: boolean;
+}
+export declare function readDeclarationJournal(database: Database.Database): DeclarationJournalEntry[];
+/** Journal one declaration publication, superseding that declaration's
+ * earlier rows. Runs inside the caller's transaction, so the row lands with
+ * whatever the caller commits beside it. A submitted pending row for the same
+ * declaration may already be accepted, so it refuses supersession. */
+export declare function journalDeclaration(database: Database.Database, entry: DeclarationJournalEntry): void;
+/** Durably declare a submit attempt before the first frame leaves. From this
+ * moment the outcome may exist only at the authority. */
+export declare function markDeclarationSubmitted(database: Database.Database, mutationId: string): void;
+/** The authority conclusively refused this exact mutation. */
+export declare function markDeclarationRejected(database: Database.Database, mutationId: string): void;
+/** The authority accepted it: the declaration no longer holds its ground. */
+export declare function clearDeclaration(database: Database.Database, mutationId: string): void;

package/dist/declaration-journal.js

@@ -0,0 +1,99 @@
+import { GRAPH_HEAD_OPERATION_KIND, stableJson } from "@amalgm/live";
+export function readDeclarationJournal(database) {
+    const pagesByMutation = new Map();
+    for (const page of database.prepare(`
+    SELECT mutation_id AS mutationId, sha256, bytes
+      FROM snapshot_publication_pages ORDER BY mutation_id, page_index
+  `).iterate()) {
+        const carried = pagesByMutation.get(page.mutationId) ?? [];
+        carried.push({ sha256: page.sha256, bytes: page.bytes });
+        pagesByMutation.set(page.mutationId, carried);
+    }
+    return database.prepare(`
+    SELECT mutation_id AS mutationId, resource_id AS resourceId,
+           declaration_root AS declarationRoot, meta_json AS metaJson,
+           operation_blob AS operationBlob, status, submitted_at AS submittedAt
+      FROM snapshot_publications ORDER BY sequence
+  `).all().map((row) => {
+        const meta = JSON.parse(row.metaJson);
+        // A row that names no exact replacement or declaration is damage, never a
+        // skippable row: dropping it could supersede a submitted mutation whose
+        // outcome exists only at the authority.
+        const deliveryWatermark = Number(meta.deliveryWatermark);
+        if (meta.operationKind !== GRAPH_HEAD_OPERATION_KIND
+            || !Array.isArray(meta.replacementRootIds) || !meta.replacementRootIds.includes(row.declarationRoot)
+            || !Array.isArray(meta.declaredIds)
+            || !Number.isSafeInteger(deliveryWatermark) || deliveryWatermark < 0) {
+            throw new Error(`declaration publication ${row.mutationId} is not an exact graph-head declaration`);
+        }
+        return {
+            mutationId: row.mutationId,
+            resourceId: row.resourceId,
+            declarationRoot: row.declarationRoot,
+            declaredIds: meta.declaredIds.map(String),
+            authorityEpoch: Number(meta.authorityEpoch),
+            baseVersion: Number(meta.baseVersion),
+            snapshotChecksum: String(meta.snapshotChecksum),
+            deliveryWatermark,
+            operationKind: meta.operationKind,
+            replacementRootIds: meta.replacementRootIds.map(String),
+            operationBlob: row.operationBlob,
+            pages: pagesByMutation.get(row.mutationId) ?? [],
+            status: row.status === "rejected" ? "rejected" : "pending",
+            submitted: row.submittedAt !== null,
+        };
+    });
+}
+/** Journal one declaration publication, superseding that declaration's
+ * earlier rows. Runs inside the caller's transaction, so the row lands with
+ * whatever the caller commits beside it. A submitted pending row for the same
+ * declaration may already be accepted, so it refuses supersession. */
+export function journalDeclaration(database, entry) {
+    if (!database.inTransaction)
+        throw new Error("a declaration journals inside its caller's transaction");
+    if (database.prepare(`
+    SELECT 1 FROM snapshot_publications
+     WHERE declaration_root = ? AND status = 'pending' AND submitted_at IS NOT NULL LIMIT 1
+  `).get(entry.declarationRoot) !== undefined) {
+        throw new Error(`declaration ${entry.declarationRoot} has a submitted publication whose outcome is unknown`);
+    }
+    database.prepare(`
+    DELETE FROM snapshot_publication_pages WHERE mutation_id IN (
+      SELECT mutation_id FROM snapshot_publications WHERE declaration_root = ?)
+  `).run(entry.declarationRoot);
+    database.prepare("DELETE FROM snapshot_publications WHERE declaration_root = ?").run(entry.declarationRoot);
+    database.prepare(`
+    INSERT INTO snapshot_publications(
+      mutation_id, resource_id, declaration_root, meta_json, operation_blob, created_at
+    ) VALUES (?, ?, ?, ?, ?, ?)
+  `).run(entry.mutationId, entry.resourceId, entry.declarationRoot, stableJson({
+        declaredIds: entry.declaredIds,
+        authorityEpoch: entry.authorityEpoch,
+        baseVersion: entry.baseVersion,
+        snapshotChecksum: entry.snapshotChecksum,
+        deliveryWatermark: entry.deliveryWatermark,
+        operationKind: entry.operationKind,
+        replacementRootIds: entry.replacementRootIds,
+    }), entry.operationBlob, Date.now());
+    const insertPage = database.prepare(`
+    INSERT INTO snapshot_publication_pages(mutation_id, page_index, sha256, bytes) VALUES (?, ?, ?, ?)
+  `);
+    entry.pages.forEach((page, index) => insertPage.run(entry.mutationId, index, page.sha256, page.bytes));
+}
+/** Durably declare a submit attempt before the first frame leaves. From this
+ * moment the outcome may exist only at the authority. */
+export function markDeclarationSubmitted(database, mutationId) {
+    database.prepare("UPDATE snapshot_publications SET submitted_at = ? WHERE mutation_id = ?")
+        .run(Date.now(), mutationId);
+}
+/** The authority conclusively refused this exact mutation. */
+export function markDeclarationRejected(database, mutationId) {
+    database.prepare("UPDATE snapshot_publications SET status = 'rejected' WHERE mutation_id = ?")
+        .run(mutationId);
+}
+/** The authority accepted it: the declaration no longer holds its ground. */
+export function clearDeclaration(database, mutationId) {
+    database.prepare("DELETE FROM snapshot_publication_pages WHERE mutation_id = ?").run(mutationId);
+    database.prepare("DELETE FROM snapshot_publications WHERE mutation_id = ?").run(mutationId);
+}
+//# sourceMappingURL=declaration-journal.js.map

package/dist/declaration-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declaration-journal.js","sourceRoot":"","sources":["../src/declaration-journal.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AA0CrE,MAAM,UAAU,sBAAsB,CAAC,QAA2B;IAChE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAgC,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC;;;GAGnC,CAAC,CAAC,OAAO,EAAqE,EAAE,CAAC;QAChF,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,OAAQ,QAAQ,CAAC,OAAO,CAAC;;;;;GAKxB,CAAC,CAAC,GAAG,EAQH,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAgD,CAAC;QACrF,0EAA0E;QAC1E,wEAAwE;QACxE,wCAAwC;QACxC,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,aAAa,KAAK,yBAAyB;eAC/C,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC;eACjG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;eAChC,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,UAAU,yCAAyC,CAAC,CAAC;QACtG,CAAC;QACD,OAAO;YACL,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;YACzC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;YAC3C,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;YACrC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;YAC/C,iBAAiB;YACjB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC;YACvD,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE;YAChD,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAmB,CAAC,CAAC,CAAC,SAAkB;YAC5E,SAAS,EAAE,GAAG,CAAC,WAAW,KAAK,IAAI;SACpC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;sEAGsE;AACtE,MAAM,UAAU,kBAAkB,CAAC,QAA2B,EAAE,KAA8B;IAC5F,IAAI,CAAC,QAAQ,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACvG,IAAI,QAAQ,CAAC,OAAO,CAAC;;;GAGpB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC,eAAe,uDAAuD,CAAC,CAAC;IAC/G,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC;;;GAGhB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC5G,QAAQ,CAAC,OAAO,CAAC;;;;GAIhB,CAAC,CAAC,GAAG,CACJ,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,eAAe,EACrB,UAAU,CAAC;QACT,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;KACvB,CAAC,EACxB,KAAK,CAAC,aAAa,EACnB,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;IACF,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC;;GAEnC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACzG,CAAC;AAED;yDACyD;AACzD,MAAM,UAAU,wBAAwB,CAAC,QAA2B,EAAE,UAAkB;IACtF,QAAQ,CAAC,OAAO,CAAC,yEAAyE,CAAC;SACxF,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;AACjC,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,uBAAuB,CAAC,QAA2B,EAAE,UAAkB;IACrF,QAAQ,CAAC,OAAO,CAAC,4EAA4E,CAAC;SAC3F,GAAG,CAAC,UAAU,CAAC,CAAC;AACrB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,QAA2B,EAAE,UAAkB;IAC9E,QAAQ,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACjG,QAAQ,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC9F,CAAC"}

package/dist/declaration-save.d.ts

@@ -0,0 +1,31 @@
+import type Database from "better-sqlite3";
+import type { DeclarationChain } from "./declaration-chain.js";
+import { type DeclarationJournalEntry } from "./declaration-journal.js";
+import { type RepositorySealCandidate } from "./detection/seal-law.js";
+import type { RepositoryObservationPair } from "./git-repository-host.js";
+import { type GroundRow } from "./ground-row.js";
+/** One declaration as data. */
+export interface DeclarationSave {
+    readonly resourceId: string;
+    readonly coreRootId: string;
+    /** W's walk, or null for a re-fold whose walk already stands. */
+    readonly walk: {
+        readonly repositoryObservations: readonly Omit<RepositoryObservationPair, "proof">[];
+        readonly observed: readonly GroundRow[];
+        readonly selected: readonly GroundRow[];
+        readonly seals: readonly RepositorySealCandidate[];
+    } | null;
+    /** The enclosed roots W absorbs. */
+    readonly absorbed: readonly string[];
+    /** Every bound root W's ground encloses; its rows join W's root. */
+    readonly enclosed: readonly string[];
+    readonly chain: DeclarationChain;
+    readonly journal: DeclarationJournalEntry;
+}
+/** The UUID local ground names at one core address: B first, then O. */
+export declare function namedAt(database: Database.Database, resourceId: string, coreRootId: string, relativePath: string): string | null;
+/** `register.declare`: nothing when an address moved. O rows already held
+ * under the chain's identities stand as observed, and rows at its addresses
+ * under other identities are displaced: sharing names the identity, and
+ * observation re-derives the rest on its next pass. */
+export declare function saveDeclaration(database: Database.Database, input: DeclarationSave): "committed" | "moved";