@cero-base/core 1.1.1 → 1.3.0

package/src/lib/utils.js

@@ -1,7 +1,8 @@
 import crypto from 'crypto'
+import b4a from 'b4a'
 import { Readable } from 'streamx'
 import z32 from 'z32'
-import { encode, decode, isValid } from 'hypercore-id-encoding'
+import { encode, decode } from 'hypercore-id-encoding'
 
 import { ROLE_PERMS, RANK } from './constants.js'
 
@@ -28,12 +29,18 @@ export const toId = encode
  */
 export const toKey = decode
 
-/**
- * Test whether a string is a well-formed canonical id.
- *
- * @type {(id: string) => boolean}
- */
-export const isKeyId = isValid
+// Domain-separated payloads for writer-admission signatures. Binding the db
+// key makes an admission unreplayable across rooms; the tag pins the format.
+// v2 — pre-1.2 signatures (writer‖appender / bare writer) no longer verify.
+const ADD_WRITER_TAG = b4a.from('cero/add-writer/v2')
+const CLAIM_WRITER_TAG = b4a.from('cero/claim-writer/v2')
+
+/** @type {(dbKey: Uint8Array, writer: Uint8Array, appender: Uint8Array) => Uint8Array} */
+export const addWriterPayload = (dbKey, writer, appender) =>
+  b4a.concat([ADD_WRITER_TAG, dbKey, writer, appender])
+
+/** @type {(dbKey: Uint8Array, writer: Uint8Array) => Uint8Array} */
+export const claimWriterPayload = (dbKey, writer) => b4a.concat([CLAIM_WRITER_TAG, dbKey, writer])
 
 /**
  * Whether `role` is granted `perm` under the default policy.
@@ -63,7 +70,6 @@ export const outranks = (a, b) => RANK[a] != null && RANK[b] != null && RANK[a]
  */
 export function subscribe({ get, watch }) {
   let stop = null
-  let version = 0
   let last
   const stream = new Readable({
     destroy(cb) {
@@ -78,15 +84,30 @@ export function subscribe({ get, watch }) {
     stream.push(data)
   }
 
+  // Coalesce: one get() in flight at a time. Ticks that land mid-read mark
+  // dirty and fold into a single trailing re-read — a write burst costs one
+  // extra snapshot instead of one concurrent scan per tick, and only the
+  // latest state is emitted.
+  let running = false
+  let dirty = false
   const push = async () => {
     if (stream.destroyed) return
-    const v = ++version
+    if (running) {
+      dirty = true
+      return
+    }
+    running = true
     try {
-      const data = await get()
-      if (v !== version || stream.destroyed) return
-      emit(data)
+      do {
+        dirty = false
+        const data = await get()
+        if (stream.destroyed) return
+        emit(data)
+      } while (dirty)
     } catch (e) {
       stream.destroy(e)
+    } finally {
+      running = false
     }
   }