@cero-base/cero 1.16.1 → 1.17.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cero-base/cero",
-  "version": "1.16.1",
+  "version": "1.17.0",
   "description": "The ideal p2p API — everything is a handle, handles contain refs, refs contain rows.",
   "type": "module",
   "sideEffects": false,
@@ -95,7 +95,7 @@
     "test:node": "ls test/*.test.js | xargs -P1 -n1 brittle-node"
   },
   "dependencies": {
-    "@cero-base/core": "^1.16.1",
+    "@cero-base/core": "^1.17.0",
     "b4a": "^1.8.1",
     "bare-abort-controller": "^1.1.2",
     "bare-crypto": "^1.15.3",

package/src/build/schemas.js

@@ -15,11 +15,11 @@ export const main = {
     sig: required(bytes),
     isIndexer: bool,
     ts: int,
-    // Who this writer belongs to, and at what rank. Admission carries its own
-    // authorization so add-writer can refuse exactly when the paired
-    // add-member would — the two apply independently, so without this a
-    // refused grant still leaves an admitted writer behind. Absent on a
-    // device you add for yourself (bootstrap), where there is nothing to cap.
+    // Who this writer belongs to. The paired add-member decides the rank in
+    // the same transaction, and a refused grant discards this admission with
+    // it — so `role` is unread since 77e5ed0 and stays only for older peers.
+    // Absent on a device you add for yourself (recovery), where the device
+    // binds to the master identity.
     memberId: string,
     role: string
   },

package/src/handle/index.js

@@ -598,11 +598,9 @@ export class Handle extends ReadyResource {
         sig,
         master: this.identity.publicKey,
         writer: writerKey,
-        // admission carries who and at what rank, so a grant we cannot make
-        // admits nobody — the two ops apply independently and cannot roll
-        // each other back
+        // the device binds to the joiner; add-member in the same transaction
+        // decides the rank, and a refusal discards both
         memberId: member.id,
-        role,
         ts: member.updatedAt || Date.now()
       })
       await tx.call('add-member', member)
@@ -684,21 +682,25 @@ export class Handle extends ReadyResource {
 
       const ts = Date.now()
       const writerKey = child.store.writerKey
-      await child.store.call('add-writer', {
-        master: this.identity.publicKey,
-        writer: writerKey,
-        sig: this.identity.sign(
-          addWriterPayload(child.store.key, writerKey, child.store.writerKey)
-        ),
-        ts
-      })
-      await child.store.call('add-member', {
-        id: this.identity.id,
-        key: writerKey,
-        role: 'owner',
-        name: null,
-        createdAt: ts,
-        updatedAt: ts
+      // admit the core and seat the owner in one append — the same shape as
+      // accept(), so a room's first two ops land together like every later pair
+      await child.store.tx(async (tx) => {
+        await tx.call('add-writer', {
+          master: this.identity.publicKey,
+          writer: writerKey,
+          sig: this.identity.sign(
+            addWriterPayload(child.store.key, writerKey, child.store.writerKey)
+          ),
+          ts
+        })
+        await tx.call('add-member', {
+          id: this.identity.id,
+          key: writerKey,
+          role: 'owner',
+          name: null,
+          createdAt: ts,
+          updatedAt: ts
+        })
       })
       await this.store.call('add-handle', {
         id,