@cello-protocol/daemon 0.0.168 → 0.0.170

package/dist/document-amendment-store.js

@@ -1,76 +1,90 @@
 /**
- * DOD-MP-AMEND-1 (daemon half) — the append-only amendment store.
+ * SYNC-P1 (daemon half) — the fork-tolerant entry store.
  *
- * One row per epoch per document, holding the amendment AS RECEIVED — the wire bytes, never a
- * re-encode. The bytes are the truth: `chain` decodes them on read, so what replay consumes is
- * exactly what was signed, and a codec asymmetry can never silently rewrite an agreed record
- * (the class of defect TRACE-1 found in the proposal codec).
+ * One row per ENTRY (keyed by entry hash — never by an epoch slot), holding the entry AS
+ * RECEIVED — the wire bytes, never a re-encode. The bytes are the truth: `chain` decodes them on
+ * read, so what the fold consumes is exactly what was signed, and a codec asymmetry can never
+ * silently rewrite an agreed record (the class of defect TRACE-1 found in the proposal codec).
  *
- * The store owns persistence and chain SHAPE:
- * - **Contiguity** — epoch N appends only onto N-1 rows. An out-of-order arrival is refused by
- *   name, not buffered; amendment-lag buffering is DOD-MP-INBOUND-N-1's design, and until it
- *   lands the honest behaviour is a loud refusal the sender retries.
- * - **Fork refusal** — a different amendment at an occupied epoch is `document_amendment_conflict`,
- *   first record kept. Two rivals for one epoch is a governance fork; absorbing either silently
- *   would have two holders replay different arrangements with no error anywhere.
- * - **Idempotent redelivery** — the same bytes again is `recorded: false`, not an error and not a
- *   second row.
+ * The store owns persistence and ANCESTRY CLOSURE:
+ * - **Held until whole (R14)** — an entry lands in `document_entries` only when every parent has
+ *   landed. Otherwise it waits in `document_entries_pending`: recorded, never applied, never in a
+ *   watermark, promoted the moment its ancestry completes — cascade included. The invariant this
+ *   buys: everything in `document_entries` has its FULL ancestry there too.
+ * - **Fork tolerance** — two entries claiming the same epoch or the same author seq are BOTH
+ *   stored. Ruling on conflicts is the causal fold's job (`deriveDocumentState`), not the
+ *   store's; the old chain-gap and epoch-conflict refusals are gone WITH the epoch spine.
+ * - **Idempotent redelivery** — the same bytes again is `recorded: false`, not an error and not
+ *   a second row.
+ * - **Watermarks** — per author, the highest CONTIGUOUS seq with its head hash(es). Two heads at
+ *   one seq is an equivocation made visible for the exchange to resolve, never silently picked.
  *
- * What the store does NOT judge: signatures, policy, subject semantics. `deriveArrangement`
- * (protocol-types) rules on those at every consumption, and the inbound path rules BEFORE
- * appending. A row in this table is a claim to be replayed, not an admitted fact.
+ * What the store does NOT judge: signatures, policy, subject semantics. The fold rules on those
+ * at every consumption, and the inbound path rules BEFORE appending. A row in these tables is a
+ * claim to be folded, not an admitted fact.
  */
 import { decodeDocumentAmendment, documentAmendmentHash, } from "@cello-protocol/protocol-types";
 /**
- * Shared with `DocumentStore`, which also execs this (the :353 shared-definition precedent there):
- * every epoch producer already holds a DocumentStore, and `currentDocumentEpoch` reads this table
- * through it — so the table must exist whichever module constructs first. Keep the two consumers
- * on THIS one string.
+ * Drop columns a previous milestone left behind, birth-gated: only what the table actually still
+ * has is touched, so this is safe on a database created yesterday and on one created before the
+ * column existed. Dead schema is not free — it is the design a future author reads and rebuilds.
  */
-export const DOCUMENT_AMENDMENTS_CREATE_SQL = `
-  CREATE TABLE IF NOT EXISTS document_amendments (
+export function dropLegacyColumns(db, table, columns) {
+    const held = new Set(db.prepare(`PRAGMA table_info(${table})`).all().map((c) => c.name));
+    for (const column of columns) {
+        if (held.has(column))
+            db.exec(`ALTER TABLE ${table} DROP COLUMN ${column}`);
+    }
+}
+export function dropLegacyEpochColumn(db, table) {
+    dropLegacyColumns(db, table, ["epoch_id"]);
+}
+export const DOCUMENT_ENTRIES_CREATE_SQL = `
+  CREATE TABLE IF NOT EXISTS document_entries (
+    owner_agent_id  TEXT    NOT NULL,
+    document_id     TEXT    NOT NULL,
+    entry_hash      TEXT    NOT NULL,
+    author_agent_id TEXT    NOT NULL,
+    author_seq      INTEGER NOT NULL,
+    received_bytes  BLOB    NOT NULL,
+    recorded_at     INTEGER NOT NULL,
+    PRIMARY KEY (owner_agent_id, document_id, entry_hash)
+  );
+  CREATE INDEX IF NOT EXISTS idx_document_entries_author
+    ON document_entries (owner_agent_id, document_id, author_agent_id, author_seq);
+  CREATE TABLE IF NOT EXISTS document_entries_pending (
     owner_agent_id  TEXT    NOT NULL,
     document_id     TEXT    NOT NULL,
-    epoch_id        INTEGER NOT NULL,
-    amendment_hash  TEXT    NOT NULL,
+    entry_hash      TEXT    NOT NULL,
+    author_agent_id TEXT    NOT NULL,
     received_bytes  BLOB    NOT NULL,
     recorded_at     INTEGER NOT NULL,
-    PRIMARY KEY (owner_agent_id, document_id, epoch_id)
+    PRIMARY KEY (owner_agent_id, document_id, entry_hash)
   );
 `;
 /**
- * The last membership event naming this agent in an ordered chain — ONE implementation, because
- * two walks (the inbound refusal's and the publish gate's) disagreeing about whether someone was
- * removed is two daemons disagreeing about the arrangement.
+ * Ceiling on HELD entries per (document, author). An honest author's pending set is a short gap
+ * awaiting one delivery; a hostile known author fabricating parents could otherwise grow the
+ * pending table without bound (review F4).
  */
-export function walkMembership(chain, agentId) {
-    let state = "untouched";
-    let epochId = null;
-    for (const env of chain) {
-        if (env.body.subject_agent_id !== agentId)
-            continue;
-        if (env.body.kind === "add_holder") {
-            state = "holder";
-            epochId = env.body.epoch_id;
-        }
-        else if (env.body.kind === "remove_holder") {
-            state = "removed";
-            epochId = env.body.epoch_id;
-        }
-    }
-    return { state, epochId };
-}
+export const MAX_PENDING_PER_AUTHOR = 64;
 export class DocumentAmendmentStore {
     #db;
     #logger;
     constructor(db, logger) {
         this.#db = db;
         this.#logger = logger;
-        this.#db.exec(DOCUMENT_AMENDMENTS_CREATE_SQL);
+        // D7/D9 residue sweep (review F5/F6): the epoch-keyed legacy table and the withdrawals
+        // table have no reader or writer left — never born on a fresh database, dropped in place
+        // on one that predates the pivot.
+        this.#db.exec(`DROP TABLE IF EXISTS document_amendments`);
+        this.#db.exec(DOCUMENT_ENTRIES_CREATE_SQL);
+        dropLegacyEpochColumn(this.#db, "document_entries");
     }
     /**
-     * Append one amendment from its wire bytes. Decodes first — malformed bytes refuse with the
-     * decoder's named reason and nothing is stored.
+     * Append one entry from its wire bytes. Decodes first — malformed bytes refuse with the
+     * decoder's named reason and nothing is stored. An entry with missing parents is HELD; an
+     * arrival that completes held ancestry promotes the whole cascade.
      */
     append(ownerAgentId, documentId, receivedBytes, nowMs) {
         const env = decodeDocumentAmendment(receivedBytes);
@@ -78,74 +92,175 @@ export class DocumentAmendmentStore {
             throw new Error(`document_amendment_wrong_document: the bytes name ${env.body.document_id}, appending ` +
                 `under ${documentId}`);
         }
-        const epochId = env.body.epoch_id;
         const hash = Buffer.from(documentAmendmentHash(env.body)).toString("hex");
-        const existing = this.#db
-            .prepare(`SELECT amendment_hash FROM document_amendments
-          WHERE owner_agent_id = ? AND document_id = ? AND epoch_id = ?`)
-            .get(ownerAgentId, documentId, epochId);
-        if (existing) {
-            if (existing.amendment_hash === hash) {
-                return { recorded: false, epochId, amendmentHash: hash };
+        if (this.#hasEntry(ownerAgentId, documentId, hash)) {
+            return { recorded: false, held: false, entryHash: hash, promoted: [] };
+        }
+        if (this.#hasPending(ownerAgentId, documentId, hash)) {
+            return { recorded: false, held: true, entryHash: hash, promoted: [] };
+        }
+        const missing = env.body.parents.filter((p) => !this.#hasEntry(ownerAgentId, documentId, p));
+        if (missing.length > 0) {
+            const author = env.body.author_agent_id;
+            const backlog = this.#db
+                .prepare(`SELECT COUNT(*) AS n FROM document_entries_pending
+            WHERE owner_agent_id = ? AND document_id = ? AND author_agent_id = ?`)
+                .get(ownerAgentId, documentId, author);
+            if (backlog.n >= MAX_PENDING_PER_AUTHOR) {
+                throw new Error(`document_pending_cap: ${author} already has ${backlog.n} entries held awaiting ` +
+                    `parents — the ceiling is ${MAX_PENDING_PER_AUTHOR}, and an honest gap is never ` +
+                    `this deep; deliver the missing ancestry first`);
             }
-            this.#logger.error("document.amendment.conflict", {
+            this.#db
+                .prepare(`INSERT INTO document_entries_pending
+             (owner_agent_id, document_id, entry_hash, author_agent_id, received_bytes, recorded_at)
+           VALUES (?, ?, ?, ?, ?, ?)`)
+                .run(ownerAgentId, documentId, hash, author, Buffer.from(receivedBytes), nowMs);
+            this.#logger.info("document.entry.held", {
                 documentId,
-                epochId,
-                storedHash: existing.amendment_hash,
-                rivalHash: hash,
+                entryHash: hash,
+                author: env.body.author_agent_id,
+                authorSeq: env.body.author_seq,
+                kind: env.body.kind,
+                missingParents: missing,
             });
-            throw new Error(`document_amendment_conflict: epoch ${epochId} of ${documentId} already holds ` +
-                `${existing.amendment_hash} and a rival amendment ${hash} arrived — a governance fork, ` +
-                `refused with the first record kept`);
-        }
-        const prior = this.currentEpoch(ownerAgentId, documentId);
-        if (epochId !== prior + 1) {
-            throw new Error(`document_amendment_chain_gap: epoch ${epochId} cannot append onto epoch ${prior} — ` +
-                `amendments land contiguously, and an out-of-order arrival is retried by its sender, ` +
-                `never buffered silently`);
+            return { recorded: true, held: true, entryHash: hash, promoted: [] };
         }
-        this.#db
-            .prepare(`INSERT INTO document_amendments
-           (owner_agent_id, document_id, epoch_id, amendment_hash, received_bytes, recorded_at)
-         VALUES (?, ?, ?, ?, ?, ?)`)
-            .run(ownerAgentId, documentId, epochId, hash, 
-        // Copied — the caller may reuse or zero its buffer after we return.
-        Buffer.from(receivedBytes), nowMs);
-        this.#logger.info("document.amendment.recorded", {
-            documentId,
-            epochId,
-            amendmentHash: hash,
-            kind: env.body.kind,
-        });
-        return { recorded: true, epochId, amendmentHash: hash };
+        this.#insertEntry(ownerAgentId, documentId, hash, env, receivedBytes, nowMs);
+        const promoted = this.#promoteReady(ownerAgentId, documentId, nowMs);
+        return { recorded: true, held: false, entryHash: hash, promoted };
     }
-    /** The ordered chain, decoded from the stored received bytes. */
+    /** Every applied entry, decoded from the stored received bytes. The set is ancestry-closed. */
     chain(ownerAgentId, documentId) {
         const rows = this.#db
-            .prepare(`SELECT received_bytes FROM document_amendments
+            .prepare(`SELECT received_bytes FROM document_entries
           WHERE owner_agent_id = ? AND document_id = ?
-          ORDER BY epoch_id ASC`)
+          ORDER BY author_seq ASC, entry_hash ASC`)
             .all(ownerAgentId, documentId);
         return rows.map((r) => decodeDocumentAmendment(new Uint8Array(r.received_bytes)));
     }
+    /** Held entries and exactly which parents they still wait on (R37's receiver-side record). */
+    pending(ownerAgentId, documentId) {
+        const rows = this.#db
+            .prepare(`SELECT entry_hash, received_bytes, recorded_at FROM document_entries_pending
+          WHERE owner_agent_id = ? AND document_id = ?
+          ORDER BY recorded_at ASC, entry_hash ASC`)
+            .all(ownerAgentId, documentId);
+        return rows.map((r) => {
+            const env = decodeDocumentAmendment(new Uint8Array(r.received_bytes));
+            return {
+                entryHash: r.entry_hash,
+                missingParents: env.body.parents.filter((p) => !this.#hasEntry(ownerAgentId, documentId, p)),
+                recordedAtMs: r.recorded_at,
+            };
+        });
+    }
+    /**
+     * This author's applied entries with seq strictly beyond `afterSeq`, as WIRE BYTES in seq
+     * order — what a reconcile reply carries to a peer whose watermark for this author is behind
+     * ours (R10 step 2/3). Forked seqs both ship: the peer's fold rules on them like ours did.
+     */
+    entriesByAuthorAfter(ownerAgentId, documentId, authorAgentId, afterSeq) {
+        const rows = this.#db
+            .prepare(`SELECT received_bytes FROM document_entries
+          WHERE owner_agent_id = ? AND document_id = ? AND author_agent_id = ? AND author_seq > ?
+          ORDER BY author_seq ASC, entry_hash ASC`)
+            .all(ownerAgentId, documentId, authorAgentId, afterSeq);
+        return rows.map((r) => new Uint8Array(r.received_bytes));
+    }
     /**
-     * DOD-MP-REMOVE-1 — this agent's LAST membership event in the recorded chain.
-     * "holder" = admitted (or never touched by any membership amendment — genesis membership is
-     * the CALLER's fact, not this table's); "removed" = the last event naming them was
-     * remove_holder, with the epoch it happened at, so a refusal can name the removal rather than
-     * a generic condition. Reads the recorded chain only — validity was ruled before append
-     * (the standing invariant).
+     * Per-author position: the highest CONTIGUOUS seq held and the head hash(es) at it. A held
+     * (pending) entry is not counted — a gap ends the walk (R13: report contiguous, never highest
+     * received).
      */
-    membershipOf(ownerAgentId, documentId, agentId) {
-        return walkMembership(this.chain(ownerAgentId, documentId), agentId);
+    watermarks(ownerAgentId, documentId) {
+        const rows = this.#db
+            .prepare(`SELECT author_agent_id, author_seq, entry_hash FROM document_entries
+          WHERE owner_agent_id = ? AND document_id = ?
+          ORDER BY author_agent_id ASC, author_seq ASC, entry_hash ASC`)
+            .all(ownerAgentId, documentId);
+        const byAuthor = new Map();
+        for (const r of rows) {
+            let seqs = byAuthor.get(r.author_agent_id);
+            if (!seqs) {
+                seqs = new Map();
+                byAuthor.set(r.author_agent_id, seqs);
+            }
+            const at = seqs.get(r.author_seq);
+            if (at)
+                at.push(r.entry_hash);
+            else
+                seqs.set(r.author_seq, [r.entry_hash]);
+        }
+        const out = new Map();
+        for (const [author, seqs] of byAuthor) {
+            let seq = 0;
+            while (seqs.has(seq + 1))
+                seq++;
+            if (seq === 0)
+                continue;
+            out.set(author, { seq, headHashes: seqs.get(seq) });
+        }
+        return out;
+    }
+    #hasEntry(ownerAgentId, documentId, hash) {
+        return (this.#db
+            .prepare(`SELECT 1 FROM document_entries
+            WHERE owner_agent_id = ? AND document_id = ? AND entry_hash = ?`)
+            .get(ownerAgentId, documentId, hash) !== undefined);
+    }
+    #hasPending(ownerAgentId, documentId, hash) {
+        return (this.#db
+            .prepare(`SELECT 1 FROM document_entries_pending
+            WHERE owner_agent_id = ? AND document_id = ? AND entry_hash = ?`)
+            .get(ownerAgentId, documentId, hash) !== undefined);
     }
-    /** The highest recorded epoch, or 0 — genesis — when no amendment exists. */
-    currentEpoch(ownerAgentId, documentId) {
-        const r = this.#db
-            .prepare(`SELECT MAX(epoch_id) AS max_epoch FROM document_amendments
-          WHERE owner_agent_id = ? AND document_id = ?`)
-            .get(ownerAgentId, documentId);
-        return r?.max_epoch ?? 0;
+    #insertEntry(ownerAgentId, documentId, hash, env, bytes, nowMs) {
+        this.#db
+            .prepare(`INSERT INTO document_entries
+           (owner_agent_id, document_id, entry_hash, author_agent_id, author_seq,
+            received_bytes, recorded_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`)
+            .run(ownerAgentId, documentId, hash, env.body.author_agent_id, env.body.author_seq, 
+        // Copied — the caller may reuse or zero its buffer after we return.
+        Buffer.from(bytes), nowMs);
+        this.#logger.info("document.entry.recorded", {
+            documentId,
+            entryHash: hash,
+            author: env.body.author_agent_id,
+            authorSeq: env.body.author_seq,
+            kind: env.body.kind,
+        });
+    }
+    /** Move every pending entry whose ancestry is now complete — repeated until a pass moves none. */
+    #promoteReady(ownerAgentId, documentId, nowMs) {
+        const promoted = [];
+        for (;;) {
+            const rows = this.#db
+                .prepare(`SELECT entry_hash, received_bytes FROM document_entries_pending
+            WHERE owner_agent_id = ? AND document_id = ?`)
+                .all(ownerAgentId, documentId);
+            let movedThisPass = false;
+            for (const row of rows) {
+                const env = decodeDocumentAmendment(new Uint8Array(row.received_bytes));
+                const ready = env.body.parents.every((p) => this.#hasEntry(ownerAgentId, documentId, p));
+                if (!ready)
+                    continue;
+                this.#insertEntry(ownerAgentId, documentId, row.entry_hash, env, new Uint8Array(row.received_bytes), nowMs);
+                this.#db
+                    .prepare(`DELETE FROM document_entries_pending
+              WHERE owner_agent_id = ? AND document_id = ? AND entry_hash = ?`)
+                    .run(ownerAgentId, documentId, row.entry_hash);
+                this.#logger.info("document.entry.promoted", {
+                    documentId,
+                    entryHash: row.entry_hash,
+                });
+                promoted.push({ entryHash: row.entry_hash, envelope: env });
+                movedThisPass = true;
+            }
+            if (!movedThisPass)
+                return promoted;
+        }
     }
 }
 //# sourceMappingURL=document-amendment-store.js.map

package/dist/document-amendment-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"document-amendment-store.js","sourceRoot":"","sources":["../src/document-amendment-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GAEtB,MAAM,gCAAgC,CAAC;AAIxC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;;;;;;;CAU7C,CAAC;AAOF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,KAA2C,EAC3C,OAAe;IAEf,IAAI,KAAK,GAA+B,WAAW,CAAC;IACpD,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,OAAO;YAAE,SAAS;QACpD,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACnC,KAAK,GAAG,QAAQ,CAAC;YACjB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC9B,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7C,KAAK,GAAG,SAAS,CAAC;YAClB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAUD,MAAM,OAAO,sBAAsB;IACxB,GAAG,CAAiB;IACpB,OAAO,CAAS;IAEzB,YAAY,EAAkB,EAAE,MAAc;QAC5C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAChD,CAAC;IAED;;;OAGG;IACH,MAAM,CACJ,YAAoB,EACpB,UAAkB,EAClB,aAAyB,EACzB,KAAa;QAEb,MAAM,GAAG,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;QACnD,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,qDAAqD,GAAG,CAAC,IAAI,CAAC,WAAW,cAAc;gBACrF,SAAS,UAAU,EAAE,CACxB,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG;aACtB,OAAO,CACN;wEACgE,CACjE;aACA,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAA4C,CAAC;QACrF,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;gBACrC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;YAC3D,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAChD,UAAU;gBACV,OAAO;gBACP,UAAU,EAAE,QAAQ,CAAC,cAAc;gBACnC,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,OAAO,UAAU,iBAAiB;gBAC7E,GAAG,QAAQ,CAAC,cAAc,0BAA0B,IAAI,gCAAgC;gBACxF,oCAAoC,CACvC,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC1D,IAAI,OAAO,KAAK,KAAK,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,uCAAuC,OAAO,6BAA6B,KAAK,KAAK;gBACnF,sFAAsF;gBACtF,yBAAyB,CAC5B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;mCAE2B,CAC5B;aACA,GAAG,CACF,YAAY,EACZ,UAAU,EACV,OAAO,EACP,IAAI;QACJ,oEAAoE;QACpE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAC1B,KAAK,CACN,CAAC;QACJ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,6BAA6B,EAAE;YAC/C,UAAU;YACV,OAAO;YACP,aAAa,EAAE,IAAI;YACnB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;SACpB,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,YAAoB,EAAE,UAAkB;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;gCAEwB,CACzB;aACA,GAAG,CAAC,YAAY,EAAE,UAAU,CAA0C,CAAC;QAC1E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAED;;;;;;;OAOG;IACH,YAAY,CACV,YAAoB,EACpB,UAAkB,EAClB,OAAe;QAEf,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,6EAA6E;IAC7E,YAAY,CAAC,YAAoB,EAAE,UAAkB;QACnD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG;aACf,OAAO,CACN;uDAC+C,CAChD;aACA,GAAG,CAAC,YAAY,EAAE,UAAU,CAA8C,CAAC;QAC9E,OAAO,CAAC,EAAE,SAAS,IAAI,CAAC,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"document-amendment-store.js","sourceRoot":"","sources":["../src/document-amendment-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GAEtB,MAAM,gCAAgC,CAAC;AAsBxC;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAiB,EAAE,KAAa,EAAE,OAA0B;IAC5F,MAAM,IAAI,GAAG,IAAI,GAAG,CACjB,EAAE,CAAC,OAAO,CAAC,qBAAqB,KAAK,GAAG,CAAC,CAAC,GAAG,EAA+B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACjG,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,EAAE,CAAC,IAAI,CAAC,eAAe,KAAK,gBAAgB,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,EAAiB,EAAE,KAAa;IACpE,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;;;;;;;;;;;;;;;;;;;CAsB1C,CAAC;AA2BF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AASzC,MAAM,OAAO,sBAAsB;IACxB,GAAG,CAAiB;IACpB,OAAO,CAAS;IAEzB,YAAY,EAAkB,EAAE,MAAc;QAC5C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,uFAAuF;QACvF,yFAAyF;QACzF,kCAAkC;QAClC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC3C,qBAAqB,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACH,MAAM,CACJ,YAAoB,EACpB,UAAkB,EAClB,aAAyB,EACzB,KAAa;QAEb,MAAM,GAAG,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;QACnD,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,qDAAqD,GAAG,CAAC,IAAI,CAAC,WAAW,cAAc;gBACrF,SAAS,UAAU,EAAE,CACxB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE1E,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACzE,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACxE,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,CACpD,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC;YACxC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG;iBACrB,OAAO,CACN;iFACuE,CACxE;iBACA,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,MAAM,CAAkB,CAAC;YAC1D,IAAI,OAAO,CAAC,CAAC,IAAI,sBAAsB,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,gBAAgB,OAAO,CAAC,CAAC,yBAAyB;oBAC/E,4BAA4B,sBAAsB,+BAA+B;oBACjF,+CAA+C,CAClD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG;iBACL,OAAO,CACN;;qCAE2B,CAC5B;iBACA,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;YAClF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE;gBACvC,UAAU;gBACV,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,eAAe;gBAChC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU;gBAC9B,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,cAAc,EAAE,OAAO;aACxB,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACvE,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACrE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACpE,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,YAAoB,EAAE,UAAkB;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;kDAE0C,CAC3C;aACA,GAAG,CAAC,YAAY,EAAE,UAAU,CAA0C,CAAC;QAC1E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,8FAA8F;IAC9F,OAAO,CAAC,YAAoB,EAAE,UAAkB;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;mDAE2C,CAC5C;aACA,GAAG,CAAC,YAAY,EAAE,UAAU,CAI7B,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACpB,MAAM,GAAG,GAAG,uBAAuB,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YACtE,OAAO;gBACL,SAAS,EAAE,CAAC,CAAC,UAAU;gBACvB,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,CACpD;gBACD,YAAY,EAAE,CAAC,CAAC,WAAW;aAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAClB,YAAoB,EACpB,UAAkB,EAClB,aAAqB,EACrB,QAAgB;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;kDAE0C,CAC3C;aACA,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,CAEtD,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,YAAoB,EAAE,UAAkB;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;uEAE+D,CAChE;aACA,GAAG,CAAC,YAAY,EAAE,UAAU,CAI7B,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;gBACjB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAClC,IAAI,EAAE;gBAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;;gBACzB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA2B,CAAC;QAC/C,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;YACtC,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;gBAAE,GAAG,EAAE,CAAC;YAChC,IAAI,GAAG,KAAK,CAAC;gBAAE,SAAS;YACxB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAE,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,SAAS,CAAC,YAAoB,EAAE,UAAkB,EAAE,IAAY;QAC9D,OAAO,CACL,IAAI,CAAC,GAAG;aACL,OAAO,CACN;4EACkE,CACnE;aACA,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,SAAS,CACrD,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,YAAoB,EAAE,UAAkB,EAAE,IAAY;QAChE,OAAO,CACL,IAAI,CAAC,GAAG;aACL,OAAO,CACN;4EACkE,CACnE;aACA,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,SAAS,CACrD,CAAC;IACJ,CAAC;IAED,YAAY,CACV,YAAoB,EACpB,UAAkB,EAClB,IAAY,EACZ,GAA8B,EAC9B,KAAiB,EACjB,KAAa;QAEb,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;;sCAG8B,CAC/B;aACA,GAAG,CACF,YAAY,EACZ,UAAU,EACV,IAAI,EACJ,GAAG,CAAC,IAAI,CAAC,eAAe,EACxB,GAAG,CAAC,IAAI,CAAC,UAAU;QACnB,oEAAoE;QACpE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAClB,KAAK,CACN,CAAC;QACJ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE;YAC3C,UAAU;YACV,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,eAAe;YAChC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU;YAC9B,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;IAED,kGAAkG;IAClG,aAAa,CAAC,YAAoB,EAAE,UAAkB,EAAE,KAAa;QACnE,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;iBAClB,OAAO,CACN;yDAC+C,CAChD;iBACA,GAAG,CAAC,YAAY,EAAE,UAAU,CAG7B,CAAC;YACH,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,uBAAuB,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;gBACxE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACzC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,CAC5C,CAAC;gBACF,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,IAAI,CAAC,YAAY,CACf,YAAY,EACZ,UAAU,EACV,GAAG,CAAC,UAAU,EACd,GAAG,EACH,IAAI,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,EAClC,KAAK,CACN,CAAC;gBACF,IAAI,CAAC,GAAG;qBACL,OAAO,CACN;8EACkE,CACnE;qBACA,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;gBACjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE;oBAC3C,UAAU;oBACV,SAAS,EAAE,GAAG,CAAC,UAAU;iBAC1B,CAAC,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC5D,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;YACD,IAAI,CAAC,aAAa;gBAAE,OAAO,QAAQ,CAAC;QACtC,CAAC;IACH,CAAC;CACF"}

package/dist/document-delivery-transport.d.ts

@@ -12,12 +12,8 @@
  * because opening is the expensive half — a directory negotiation, a dial, and a seal — and a
  * backlog of pending envelopes for one peer would otherwise pay it per envelope. It is also the
  * behaviour an operator expects when they are mid-conversation about the document: the change lands
- * in the same sealed record as the discussion, without anyone passing a session hint.
- *
- * An explicit `sessionHint` overrides the choice but NOT the validation — a hint naming a session
- * that is not active with this peer is refused rather than silently replaced by the daemon's own
- * pick, because the one reason to pass a hint is to control which sealed record the change lands
- * in, and quietly choosing a different one defeats exactly that.
+ * in the same sealed record as the discussion. (SYNC-D10: the explicit session hint is deleted —
+ * the daemon's reuse-most-recent choice is the whole rule.)
  *
  * ── WHAT AN ACK IS HERE, AND WHAT IT IS NOT ───────────────────────────────────────────────────
  *
@@ -33,8 +29,6 @@
  * permanent-redelivery shape this milestone has already fixed once. The worker records the envelope
  * as delivered, leaves it unacked, and asks again on the capped backoff.
  */
-import type { DocumentDeliveryTransport } from "./document-delivery.js";
-import type { DocumentEnvelopeRow } from "./document-store.js";
 import { DiscoveryUnavailableError } from "./document-reachability.js";
 import type { DiscoveryOutcome } from "./cross-node-negotiation.js";
 import type { Logger } from "./types.js";
@@ -46,7 +40,13 @@ export interface DocumentTransportDeps {
      * audit record: the tree is the sequence space both sides count in, so a sender that skips it
      * falls one behind per frame and the peer silently drops what it has already consumed.
      */
-    appendLeaf(agentName: string, sessionId: string, contentHash: Uint8Array, correlationId: string): void;
+    /** DOD-M12B-INDEX-1: `assignedSeq` is the relay's position for this frame — the leaf goes THERE,
+     *  not at the tail. A document leaf rides the same session sequence counter a message does, so it
+     *  is subject to exactly the same divergence. Undefined when no relay answered. */
+    appendLeaf(agentName: string, sessionId: string, contentHash: Uint8Array, frameBytes: Uint8Array, correlationId: string, assignedSeq?: number): {
+        placed: boolean;
+        leafIndex: number | null;
+    };
     /** The agent this worker delivers for. One worker per attended agent. */
     agentName: string;
     /** `runDiscoveryLookup`, supplied by the composition root — it lives in a closure there. */
@@ -76,62 +76,21 @@ export interface DocumentTransportDeps {
         ok: true;
         delivered: true;
         relayRefusal?: string;
+        sequenceNumber?: number;
     } | {
         ok: true;
         delivered: false;
         parked: true;
         relayRefusal?: string;
+        sequenceNumber?: number;
     } | {
         ok: false;
         reason: string;
         error: string;
+        sequenceNumber?: number;
     }>;
-    /** Encode a document envelope row onto the wire, and its content hash. */
-    encodeEnvelope(envelope: DocumentEnvelopeRow): {
-        bytes: Uint8Array;
-        hash: Uint8Array;
-    };
-    /**
-     * Wait for the peer to ANSWER this envelope, bounded. Resolves true if the ack landed.
-     *
-     * The seal below tears the session down, and the teardown drops any content still held for
-     * ordering — so an ack that arrives correctly and is held for a gap is DELETED rather than
-     * applied. Measured on a live daemon: the ack was sent, logged `session.content.held`, and the
-     * session was destroyed three seconds later with it still buffered. The sender then re-sent the
-     * envelope every tick until the unacked ceiling retired it.
-     *
-     * Waiting here is deliberately indifferent to WHY the answer is slow — held for ordering, a slow
-     * relay, a busy peer. The rule is simply that we do not tear down the channel an answer is due
-     * on until it has arrived or we have given up on it.
-     */
-    /** Waits for THE DIALED HOLDER'S answer — any other holder's ack must not resolve it (H1). */
-    awaitAck(envelopeHash: string, expectedAckerAgentId: string, timeoutMs: number): Promise<{
-        admitted: boolean;
-    } | null>;
-    /**
-     * Try to fill this session's ordering gaps, so anything HELD can be released.
-     *
-     * Without it the grace above cannot help in the very case it was written for. An ack whose
-     * canonical sequence lands ahead of our tree is HELD, and held content is not routed to the
-     * document layer at all — it waits for `#releaseHeld`, which only runs when the missing
-     * in-between sequence arrives. So the ack sits in a buffer, nothing settles, the grace expires in
-     * full, and the seal then discards it. The wait alone converted a fast silent failure into a slow
-     * one.
-     *
-     * A no-op when the session has no gap, so the ordinary delivery pays nothing.
-     */
-    drainHeld(sessionId: string, correlationId: string): Promise<void>;
     logger: Logger;
 }
-/**
- * How long a session WE opened stays up waiting for the peer's answer.
- *
- * Sized against the observed round trip, not guessed: on a live cross-region session the ack was
- * on the wire ~375ms after the frame landed, and the seal ceremony itself takes ~3s. Ten seconds
- * covers a slow relay and a park-and-recover round without keeping an autonomous session alive
- * long enough to be mistaken for a conversation.
- */
-export declare const DELIVERY_ACK_GRACE_MS = 10000;
 /**
  * Everything this transport sends is document-domain traffic, so 0x04 is the default rather than
  * something each call site remembers. A refusal overrides it with 0x05 — the two are distinguished
@@ -145,6 +104,45 @@ export declare const DELIVERY_ACK_GRACE_MS = 10000;
  * this path submitted every document leaf as a MESSAGE.
  */
 export declare const DOCUMENT_LEAF_KIND = 4;
+/**
+ * The document frame carrier (SYNC-P4: D1/D2/D4 deleted — this used to live in the delivery
+ * worker's module). Two capabilities survive: a reachability probe, and putting already-encoded
+ * bytes on a session the transport opens or reuses then seals. There is no `deliver` and no ack
+ * wait — content confirmation is the peer's position at the next reconcile exchange.
+ */
+export interface DocumentDeliveryTransport {
+    /**
+     * Is the peer reachable right now? `discovery_lookup` today. Returns false rather than throwing
+     * for an ordinary "not online"; a throw means the LOOKUP failed, which is a different fact and
+     * must not be recorded as the peer being away.
+     */
+    isPeerReachable(peerAgentId: string, correlationId: string): Promise<{
+        reachable: boolean;
+        unknownAgent: boolean;
+    }>;
+    /**
+     * Send already-encoded bytes to a peer over the open-or-reuse-then-seal path. `documentId` is
+     * for the log line only. `parked: true` means the relay took it because the peer had no live
+     * counterparty — it is NOT with them yet, and only the next exchange proves anything landed.
+     */
+    sendBytes(input: {
+        peerAgentId: string;
+        documentId: string;
+        bytes: Uint8Array;
+        correlationId: string;
+        /** The witnessed leaf DOMAIN. Defaults to the document kind (0x04); a refusal passes 0x05. */
+        leafKind?: number;
+    }): Promise<{
+        ok: true;
+        sessionId: string;
+        sessionOpened: boolean;
+        parked?: boolean;
+    } | {
+        ok: false;
+        reason: string;
+        detail?: string;
+    }>;
+}
 export declare function createDocumentDeliveryTransport(deps: DocumentTransportDeps): DocumentDeliveryTransport;
 export { DiscoveryUnavailableError };
 //# sourceMappingURL=document-delivery-transport.d.ts.map

package/dist/document-delivery-transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document-delivery-transport.d.ts","sourceRoot":"","sources":["../src/document-delivery-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAExE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAA6B,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAClG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGzC,MAAM,WAAW,qBAAqB;IACpC;;;;;;OAMG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACvG,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClF;;;;;OAKG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,wDAAwD;IACxD,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACrE,4EAA4E;IAC5E,WAAW,CACT,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/F,wCAAwC;IACxC,WAAW,CACT,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,UAAU,EACnB,WAAW,EAAE,UAAU,EACvB,aAAa,EAAE,MAAM;IACrB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CACN;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,IAAI,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GACpD;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,IAAI,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GACnE;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAC/C,CAAC;IACF,0EAA0E;IAC1E,cAAc,CAAC,QAAQ,EAAE,mBAAmB,GAAG;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC;IACvF;;;;;;;;;;;;OAYG;IACH,8FAA8F;IAC9F,QAAQ,CACN,YAAY,EAAE,MAAM,EACpB,oBAAoB,EAAE,MAAM,EAC5B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACzC;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAE5C;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB,IAAgB,CAAC;AAEhD,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,qBAAqB,GAC1B,yBAAyB,CAsS3B;AAED,OAAO,EAAE,yBAAyB,EAAE,CAAC"}
+{"version":3,"file":"document-delivery-transport.d.ts","sourceRoot":"","sources":["../src/document-delivery-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAA6B,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAClG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGzC,MAAM,WAAW,qBAAqB;IACpC;;;;;;OAMG;IACH;;uFAEmF;IACnF,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC9L,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClF;;;;;OAKG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,wDAAwD;IACxD,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACrE,4EAA4E;IAC5E,WAAW,CACT,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/F,wCAAwC;IACxC,WAAW,CACT,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,UAAU,EACnB,WAAW,EAAE,UAAU,EACvB,aAAa,EAAE,MAAM;IACrB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAGN;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,IAAI,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7E;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,IAAI,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5F;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CACxE,CAAC;IACF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB,IAAgB,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,eAAe,CACb,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC1D;;;;OAIG;IACH,SAAS,CAAC,KAAK,EAAE;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,UAAU,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,8FAA8F;QAC9F,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CACP;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GACzE;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CACjD,CAAC;CACH;AAED,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,qBAAqB,GAC1B,yBAAyB,CAiK3B;AAED,OAAO,EAAE,yBAAyB,EAAE,CAAC"}