@earendil-works/chord 1.4.0 → 1.5.0

package/dist/next/remote/host-link.d.ts

@@ -0,0 +1,77 @@
+import type { Context } from "../../context/index.ts";
+import type { ChordError, Principal } from "../data/index.ts";
+import type { AnyHost } from "../host/internal.ts";
+import { type ChannelHandler, type Codec, DeflatedPart, type Limits, type Link, type Message, type Part } from "../link/internal.ts";
+import { ConsumerSide } from "./consumer.ts";
+import { ProviderSide } from "./provider.ts";
+/**
+ * How a link was made: `parent` by `connect` (holds arriving on it may name whom they act for), `child` by `accept`,
+ * `route` by a route's `resolve`.
+ */
+export type LinkRole = "parent" | "child" | "route";
+/** What a link is made with. */
+type HostLinkOptions = {
+    readonly role: LinkRole;
+    /** The peer, as this host stamps it. */
+    readonly principal: Principal;
+    /** Skips the message schema check (framing and the owners' checks still run). */
+    readonly trusted: boolean;
+    readonly codec: Codec;
+    readonly limits: Limits;
+};
+/**
+ * A link of a host, both directions over one channel. Closing it, from either end, ends both sides: the provider sides
+ * release the peer's holds, the consumer side's holds go loading until their path's next link.
+ */
+export declare class HostLink implements ChannelHandler {
+    #private;
+    readonly host: AnyHost;
+    readonly role: LinkRole;
+    readonly principal: Principal;
+    /** Whether the link is trusted: activation chains on holds arriving on it are honoured (Q5). */
+    readonly trusted: boolean;
+    /** The limits per part of what arrives on this link (Q2). */
+    readonly limits: Limits;
+    /** The parent of the work arriving on this link. */
+    readonly context: Context;
+    readonly consumer: ConsumerSide;
+    constructor(host: AnyHost, link: Link, options: HostLinkOptions, context: Context);
+    /** The peer's incarnation, from its `hello`. */
+    get peer(): string;
+    /** Whether the peer's `hello` arrived (it may have arrived while the link was made). */
+    get greeted(): boolean;
+    /** Whether the link is open; one closed already when made is not kept. */
+    get open(): boolean;
+    send(message: Message): void;
+    close(): void;
+    /** The heartbeat (see `Channel.tick`). */
+    tick(now: number, ping: number, close: number): void;
+    opened(): void;
+    /** A JSON part this host originates on this link: deflated above the threshold when the host compresses. */
+    part(json: string, context: Context): Part;
+    /** The JSON of a part arriving on this link, where it is owned, within `limits`. Throws as `openPart` does. */
+    openPart(part: Part, limits: Limits, context: Context): string | Uint8Array;
+    /**
+     * Whether `part` waits for an asynchronous inflate before its owner can open it: deflated, not inflated yet, on a
+     * host without a synchronous compressor, and within the wire limit (past it, opening refuses it uninflated).
+     */
+    inflates(part: Part | undefined, limits: Limits): part is DeflatedPart;
+    /**
+     * Inflates `parts` (deflated parts an owner admitted, each with its decoded limit) one after another with the web
+     * `DecompressionStream`, then lets the owner handle its message again (`handle`); the channel holds the link's later
+     * messages until then. A link closed meanwhile stops the inflate at once and drops the message (race 13).
+     */
+    inflate(parts: readonly (readonly [DeflatedPart, number])[], handle: () => void): Promise<void>;
+    /**
+     * A message from the peer, to its side. One whose owner first waits for an asynchronous inflate returns its promise:
+     * the channel holds later messages until it settled.
+     */
+    message(message: Message): void | Promise<void>;
+    /** `provider` holds nothing any more: it goes (its relay's upstream links are told `closed`). */
+    drop(provider: ProviderSide): void;
+    /** Ends the holds on this link that hold nothing and act for a principal `revoked` names (§4). */
+    revokeUnbound(revoked: (principal: Principal) => boolean, error: ChordError): void;
+    closed(): void;
+}
+export {};
+//# sourceMappingURL=host-link.d.ts.map

package/dist/next/remote/host-link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-link.d.ts","sourceRoot":"","sources":["../../../src/next/remote/host-link.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAEN,KAAK,cAAc,EACnB,KAAK,KAAK,EACV,YAAY,EAEZ,KAAK,MAAM,EACX,KAAK,IAAI,EACT,KAAK,OAAO,EAGZ,KAAK,IAAI,EACT,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAEpD,gCAAgC;AAChC,KAAK,eAAe,GAAG;IACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,wCAAwC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,CAAC;AAKF;;;GAGG;AACH,qBAAa,QAAS,YAAW,cAAc;;IAC9C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,gGAAgG;IAChG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAWhC,YAAY,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAchF;IAED,gDAAgD;IAChD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,wFAAwF;IACxF,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,0EAA0E;IAC1E,IAAI,IAAI,IAAI,OAAO,CAElB;IAED,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAE3B;IAED,KAAK,IAAI,IAAI,CAEZ;IAED,0CAA0C;IAC1C,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAEnD;IAED,MAAM,IAAI,IAAI,CAGb;IAED,4GAA4G;IAC5G,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAEzC;IAED,+GAA+G;IAC/G,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,CAE1E;IAED;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,IAAI,YAAY,CAOrE;IAED;;;;OAIG;IACG,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAOpG;IAED;;;OAGG;IACH,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAqC9C;IAED,iGAAiG;IACjG,IAAI,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAIjC;IAED,kGAAkG;IAClG,aAAa,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,SAAS,KAAK,OAAO,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAEjF;IAED,MAAM,IAAI,IAAI,CAMb;CAYD"}

package/dist/next/remote/host-link.js

@@ -0,0 +1,182 @@
+// One link of a host (§3, §22): its channel, its role, the peer's principal, its limits per part, and both sides: a
+// provider side per origin (holds and calls the peer sent, its own or a relay's for one of its downstream links) and
+// the consumer side (holds and calls this host sent). Message kinds are directional, so each goes to its side; a
+// revocation is honoured from the parent only. Parts are made and opened here, with the host's compressor, or inflated
+// asynchronously for their owner when the host has none.
+import { Channel, DeflatedPart, inflateAsync, openPart, originPart, } from "../link/internal.js";
+import { ConsumerSide } from "./consumer.js";
+import { ProviderSide } from "./provider.js";
+/** How many concurrent calls a host accepts on each of its links, announced in `hello`. */
+const CALLS = 256;
+/**
+ * A link of a host, both directions over one channel. Closing it, from either end, ends both sides: the provider sides
+ * release the peer's holds, the consumer side's holds go loading until their path's next link.
+ */
+export class HostLink {
+    host;
+    role;
+    principal;
+    /** Whether the link is trusted: activation chains on holds arriving on it are honoured (Q5). */
+    trusted;
+    /** The limits per part of what arrives on this link (Q2). */
+    limits;
+    /** The parent of the work arriving on this link. */
+    context;
+    consumer;
+    /**
+     * The provider side of each origin the peer sent holds for, made by its first and dropped once it holds nothing;
+     * `origin` is honoured only on parent and route links, where a relay's messages arrive (decision "Origins only from
+     * relays").
+     */
+    #providers = new Map();
+    #channel;
+    /** Aborted when the link closes: stops its asynchronous inflates at once. */
+    #closing = new AbortController();
+    constructor(host, link, options, context) {
+        this.host = host;
+        this.role = options.role;
+        this.principal = options.principal;
+        this.trusted = options.trusted;
+        this.limits = options.limits;
+        this.context = context;
+        this.consumer = new ConsumerSide(this);
+        const { codec, trusted } = options;
+        const report = (error) => host.report({ kind: "protocol_error", error });
+        const channel = { codec, incarnation: host.incarnation, calls: CALLS, trusted, report };
+        this.#channel = new Channel(link, this, channel, context);
+        // Last: a link closed already calls `closed` at once.
+        this.#channel.start();
+    }
+    /** The peer's incarnation, from its `hello`. */
+    get peer() {
+        return this.#channel.peer;
+    }
+    /** Whether the peer's `hello` arrived (it may have arrived while the link was made). */
+    get greeted() {
+        return this.#channel.opened;
+    }
+    /** Whether the link is open; one closed already when made is not kept. */
+    get open() {
+        return !this.#channel.closed;
+    }
+    send(message) {
+        this.#channel.send(message);
+    }
+    close() {
+        this.#channel.close();
+    }
+    /** The heartbeat (see `Channel.tick`). */
+    tick(now, ping, close) {
+        this.#channel.tick(now, ping, close);
+    }
+    opened() {
+        this.consumer.opened(this.#channel.peerCalls);
+        this.host.linkOpened(this);
+    }
+    /** A JSON part this host originates on this link: deflated above the threshold when the host compresses. */
+    part(json, context) {
+        return originPart(json, this.host.compression, context);
+    }
+    /** The JSON of a part arriving on this link, where it is owned, within `limits`. Throws as `openPart` does. */
+    openPart(part, limits, context) {
+        return openPart(part, limits, this.host.compression, context);
+    }
+    /**
+     * Whether `part` waits for an asynchronous inflate before its owner can open it: deflated, not inflated yet, on a
+     * host without a synchronous compressor, and within the wire limit (past it, opening refuses it uninflated).
+     */
+    inflates(part, limits) {
+        return (part instanceof DeflatedPart &&
+            part.inflated === undefined &&
+            this.host.compression === undefined &&
+            part.bytes.byteLength <= limits.part);
+    }
+    /**
+     * Inflates `parts` (deflated parts an owner admitted, each with its decoded limit) one after another with the web
+     * `DecompressionStream`, then lets the owner handle its message again (`handle`); the channel holds the link's later
+     * messages until then. A link closed meanwhile stops the inflate at once and drops the message (race 13).
+     */
+    async inflate(parts, handle) {
+        const { signal } = this.#closing;
+        for (const [part, limit] of parts) {
+            await inflateAsync(part, limit, signal, this.context);
+            if (signal.aborted)
+                return;
+        }
+        handle();
+    }
+    /**
+     * A message from the peer, to its side. One whose owner first waits for an asynchronous inflate returns its promise:
+     * the channel holds later messages until it settled.
+     */
+    message(message) {
+        // A child (a tab, a TUI) relays nothing: its origins would each get their own call window and record.
+        if (this.role === "child" && "origin" in message && message.origin !== undefined) {
+            throw new Error(`${message.kind}: an origin on a child link`);
+        }
+        switch (message.kind) {
+            case "hold":
+                this.#hold(message);
+                break;
+            case "release":
+            case "call":
+            case "abort":
+            case "retry":
+            case "ack":
+                // An origin this link has no holds for: its ids are unknown (Q1).
+                return this.#providers.get(message.origin ?? 0)?.message(message);
+            case "closed":
+                this.#providers.get(message.origin)?.closed();
+                this.#providers.delete(message.origin);
+                break;
+            case "bound":
+            case "state":
+            case "failed":
+            case "loading":
+            case "result":
+            case "error":
+            case "gone":
+                return this.consumer.message(message);
+            case "revoke":
+                // Only the parent revokes; a child or a route cannot (race 6).
+                // JSON from the parent, the app's revocation type there as here (the same app code).
+                if (this.role === "parent")
+                    this.host.revoke(message.revocation, this.context);
+                break;
+            default:
+                // `hello`, `ping` and `pong` are the channel's.
+                break;
+        }
+    }
+    /** `provider` holds nothing any more: it goes (its relay's upstream links are told `closed`). */
+    drop(provider) {
+        if (this.#providers.get(provider.origin) !== provider)
+            return;
+        this.#providers.delete(provider.origin);
+        provider.closed();
+    }
+    /** Ends the holds on this link that hold nothing and act for a principal `revoked` names (§4). */
+    revokeUnbound(revoked, error) {
+        for (const provider of this.#providers.values())
+            provider.revokeUnbound(revoked, error);
+    }
+    closed() {
+        this.#closing.abort();
+        for (const provider of this.#providers.values())
+            provider.closed();
+        this.#providers.clear();
+        this.consumer.closed();
+        this.host.unlink(this);
+    }
+    /** A `hold` goes to its origin's provider side, made for the origin's first. */
+    #hold(message) {
+        const origin = message.origin ?? 0;
+        let provider = this.#providers.get(origin);
+        if (provider === undefined) {
+            provider = new ProviderSide(this, origin, CALLS);
+            this.#providers.set(origin, provider);
+        }
+        provider.message(message);
+    }
+}
+//# sourceMappingURL=host-link.js.map

package/dist/next/remote/host-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-link.js","sourceRoot":"","sources":["../../../src/next/remote/host-link.ts"],"names":[],"mappings":"AAAA,oHAAoH;AACpH,qHAAqH;AACrH,iHAAiH;AACjH,uHAAuH;AACvH,yDAAyD;AAMzD,OAAO,EACN,OAAO,EAGP,YAAY,EACZ,YAAY,EAIZ,QAAQ,EACR,UAAU,GAEV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAmB7C,2FAA2F;AAC3F,MAAM,KAAK,GAAG,GAAG,CAAC;AAElB;;;GAGG;AACH,MAAM,OAAO,QAAQ;IACX,IAAI,CAAU;IACd,IAAI,CAAW;IACf,SAAS,CAAY;IAC9B,gGAAgG;IACvF,OAAO,CAAU;IAC1B,6DAA6D;IACpD,MAAM,CAAS;IACxB,oDAAoD;IAC3C,OAAO,CAAU;IACjB,QAAQ,CAAe;IAChC;;;;OAIG;IACM,UAAU,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC7C,QAAQ,CAAU;IAC3B,6EAA6E;IACpE,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IAE1C,YAAY,IAAa,EAAE,IAAU,EAAE,OAAwB,EAAE,OAAgB;QAChF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAQ,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACxF,IAAI,CAAC,QAAQ,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1D,sDAAsD;QACtD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,gDAAgD;IAChD,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,wFAAwF;IACxF,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,0EAA0E;IAC1E,IAAI,IAAI;QACP,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,OAAgB;QACpB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,0CAA0C;IAC1C,IAAI,CAAC,GAAW,EAAE,IAAY,EAAE,KAAa;QAC5C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,MAAM;QACL,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,4GAA4G;IAC5G,IAAI,CAAC,IAAY,EAAE,OAAgB;QAClC,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,+GAA+G;IAC/G,QAAQ,CAAC,IAAU,EAAE,MAAc,EAAE,OAAgB;QACpD,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,IAAsB,EAAE,MAAc;QAC9C,OAAO,CACN,IAAI,YAAY,YAAY;YAC5B,IAAI,CAAC,QAAQ,KAAK,SAAS;YAC3B,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS;YACnC,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CACpC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,KAAmD,EAAE,MAAkB;QACpF,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;YACnC,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO;QAC5B,CAAC;QACD,MAAM,EAAE,CAAC;IACV,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,OAAgB;QACvB,sGAAsG;QACtG,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,6BAA6B,CAAC,CAAC;QAC/D,CAAC;QACD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,MAAM;gBACV,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACpB,MAAM;YACP,KAAK,SAAS,CAAC;YACf,KAAK,MAAM,CAAC;YACZ,KAAK,OAAO,CAAC;YACb,KAAK,OAAO,CAAC;YACb,KAAK,KAAK;gBACT,kEAAkE;gBAClE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACnE,KAAK,QAAQ;gBACZ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;gBAC9C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACvC,MAAM;YACP,KAAK,OAAO,CAAC;YACb,KAAK,OAAO,CAAC;YACb,KAAK,QAAQ,CAAC;YACd,KAAK,SAAS,CAAC;YACf,KAAK,QAAQ,CAAC;YACd,KAAK,OAAO,CAAC;YACb,KAAK,MAAM;gBACV,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACvC,KAAK,QAAQ;gBACZ,+DAA+D;gBAC/D,qFAAqF;gBACrF,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAuB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC5F,MAAM;YACP;gBACC,gDAAgD;gBAChD,MAAM;QACR,CAAC;IACF,CAAC;IAED,iGAAiG;IACjG,IAAI,CAAC,QAAsB;QAC1B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,OAAO;QAC9D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxC,QAAQ,CAAC,MAAM,EAAE,CAAC;IACnB,CAAC;IAED,kGAAkG;IAClG,aAAa,CAAC,OAA0C,EAAE,KAAiB;QAC1E,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzF,CAAC;IAED,MAAM;QACL,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACnE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,OAAoD;QACzD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QACnC,IAAI,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;QACD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;CACD","sourcesContent":["// One link of a host (§3, §22): its channel, its role, the peer's principal, its limits per part, and both sides: a\n// provider side per origin (holds and calls the peer sent, its own or a relay's for one of its downstream links) and\n// the consumer side (holds and calls this host sent). Message kinds are directional, so each goes to its side; a\n// revocation is honoured from the parent only. Parts are made and opened here, with the host's compressor, or inflated\n// asynchronously for their owner when the host has none.\n\nimport type { Context } from \"../../context/index.ts\";\nimport type { JsonValue } from \"../../json.ts\";\nimport type { ChordError, Principal } from \"../data/index.ts\";\nimport type { AnyHost } from \"../host/internal.ts\";\nimport {\n\tChannel,\n\ttype ChannelHandler,\n\ttype Codec,\n\tDeflatedPart,\n\tinflateAsync,\n\ttype Limits,\n\ttype Link,\n\ttype Message,\n\topenPart,\n\toriginPart,\n\ttype Part,\n} from \"../link/internal.ts\";\nimport { ConsumerSide } from \"./consumer.ts\";\nimport { ProviderSide } from \"./provider.ts\";\n\n/**\n * How a link was made: `parent` by `connect` (holds arriving on it may name whom they act for), `child` by `accept`,\n * `route` by a route's `resolve`.\n */\nexport type LinkRole = \"parent\" | \"child\" | \"route\";\n\n/** What a link is made with. */\ntype HostLinkOptions = {\n\treadonly role: LinkRole;\n\t/** The peer, as this host stamps it. */\n\treadonly principal: Principal;\n\t/** Skips the message schema check (framing and the owners' checks still run). */\n\treadonly trusted: boolean;\n\treadonly codec: Codec;\n\treadonly limits: Limits;\n};\n\n/** How many concurrent calls a host accepts on each of its links, announced in `hello`. */\nconst CALLS = 256;\n\n/**\n * A link of a host, both directions over one channel. Closing it, from either end, ends both sides: the provider sides\n * release the peer's holds, the consumer side's holds go loading until their path's next link.\n */\nexport class HostLink implements ChannelHandler {\n\treadonly host: AnyHost;\n\treadonly role: LinkRole;\n\treadonly principal: Principal;\n\t/** Whether the link is trusted: activation chains on holds arriving on it are honoured (Q5). */\n\treadonly trusted: boolean;\n\t/** The limits per part of what arrives on this link (Q2). */\n\treadonly limits: Limits;\n\t/** The parent of the work arriving on this link. */\n\treadonly context: Context;\n\treadonly consumer: ConsumerSide;\n\t/**\n\t * The provider side of each origin the peer sent holds for, made by its first and dropped once it holds nothing;\n\t * `origin` is honoured only on parent and route links, where a relay's messages arrive (decision \"Origins only from\n\t * relays\").\n\t */\n\treadonly #providers = new Map<number, ProviderSide>();\n\treadonly #channel: Channel;\n\t/** Aborted when the link closes: stops its asynchronous inflates at once. */\n\treadonly #closing = new AbortController();\n\n\tconstructor(host: AnyHost, link: Link, options: HostLinkOptions, context: Context) {\n\t\tthis.host = host;\n\t\tthis.role = options.role;\n\t\tthis.principal = options.principal;\n\t\tthis.trusted = options.trusted;\n\t\tthis.limits = options.limits;\n\t\tthis.context = context;\n\t\tthis.consumer = new ConsumerSide(this);\n\t\tconst { codec, trusted } = options;\n\t\tconst report = (error: unknown): void => host.report({ kind: \"protocol_error\", error });\n\t\tconst channel = { codec, incarnation: host.incarnation, calls: CALLS, trusted, report };\n\t\tthis.#channel = new Channel(link, this, channel, context);\n\t\t// Last: a link closed already calls `closed` at once.\n\t\tthis.#channel.start();\n\t}\n\n\t/** The peer's incarnation, from its `hello`. */\n\tget peer(): string {\n\t\treturn this.#channel.peer;\n\t}\n\n\t/** Whether the peer's `hello` arrived (it may have arrived while the link was made). */\n\tget greeted(): boolean {\n\t\treturn this.#channel.opened;\n\t}\n\n\t/** Whether the link is open; one closed already when made is not kept. */\n\tget open(): boolean {\n\t\treturn !this.#channel.closed;\n\t}\n\n\tsend(message: Message): void {\n\t\tthis.#channel.send(message);\n\t}\n\n\tclose(): void {\n\t\tthis.#channel.close();\n\t}\n\n\t/** The heartbeat (see `Channel.tick`). */\n\ttick(now: number, ping: number, close: number): void {\n\t\tthis.#channel.tick(now, ping, close);\n\t}\n\n\topened(): void {\n\t\tthis.consumer.opened(this.#channel.peerCalls);\n\t\tthis.host.linkOpened(this);\n\t}\n\n\t/** A JSON part this host originates on this link: deflated above the threshold when the host compresses. */\n\tpart(json: string, context: Context): Part {\n\t\treturn originPart(json, this.host.compression, context);\n\t}\n\n\t/** The JSON of a part arriving on this link, where it is owned, within `limits`. Throws as `openPart` does. */\n\topenPart(part: Part, limits: Limits, context: Context): string | Uint8Array {\n\t\treturn openPart(part, limits, this.host.compression, context);\n\t}\n\n\t/**\n\t * Whether `part` waits for an asynchronous inflate before its owner can open it: deflated, not inflated yet, on a\n\t * host without a synchronous compressor, and within the wire limit (past it, opening refuses it uninflated).\n\t */\n\tinflates(part: Part | undefined, limits: Limits): part is DeflatedPart {\n\t\treturn (\n\t\t\tpart instanceof DeflatedPart &&\n\t\t\tpart.inflated === undefined &&\n\t\t\tthis.host.compression === undefined &&\n\t\t\tpart.bytes.byteLength <= limits.part\n\t\t);\n\t}\n\n\t/**\n\t * Inflates `parts` (deflated parts an owner admitted, each with its decoded limit) one after another with the web\n\t * `DecompressionStream`, then lets the owner handle its message again (`handle`); the channel holds the link's later\n\t * messages until then. A link closed meanwhile stops the inflate at once and drops the message (race 13).\n\t */\n\tasync inflate(parts: readonly (readonly [DeflatedPart, number])[], handle: () => void): Promise<void> {\n\t\tconst { signal } = this.#closing;\n\t\tfor (const [part, limit] of parts) {\n\t\t\tawait inflateAsync(part, limit, signal, this.context);\n\t\t\tif (signal.aborted) return;\n\t\t}\n\t\thandle();\n\t}\n\n\t/**\n\t * A message from the peer, to its side. One whose owner first waits for an asynchronous inflate returns its promise:\n\t * the channel holds later messages until it settled.\n\t */\n\tmessage(message: Message): void | Promise<void> {\n\t\t// A child (a tab, a TUI) relays nothing: its origins would each get their own call window and record.\n\t\tif (this.role === \"child\" && \"origin\" in message && message.origin !== undefined) {\n\t\t\tthrow new Error(`${message.kind}: an origin on a child link`);\n\t\t}\n\t\tswitch (message.kind) {\n\t\t\tcase \"hold\":\n\t\t\t\tthis.#hold(message);\n\t\t\t\tbreak;\n\t\t\tcase \"release\":\n\t\t\tcase \"call\":\n\t\t\tcase \"abort\":\n\t\t\tcase \"retry\":\n\t\t\tcase \"ack\":\n\t\t\t\t// An origin this link has no holds for: its ids are unknown (Q1).\n\t\t\t\treturn this.#providers.get(message.origin ?? 0)?.message(message);\n\t\t\tcase \"closed\":\n\t\t\t\tthis.#providers.get(message.origin)?.closed();\n\t\t\t\tthis.#providers.delete(message.origin);\n\t\t\t\tbreak;\n\t\t\tcase \"bound\":\n\t\t\tcase \"state\":\n\t\t\tcase \"failed\":\n\t\t\tcase \"loading\":\n\t\t\tcase \"result\":\n\t\t\tcase \"error\":\n\t\t\tcase \"gone\":\n\t\t\t\treturn this.consumer.message(message);\n\t\t\tcase \"revoke\":\n\t\t\t\t// Only the parent revokes; a child or a route cannot (race 6).\n\t\t\t\t// JSON from the parent, the app's revocation type there as here (the same app code).\n\t\t\t\tif (this.role === \"parent\") this.host.revoke(message.revocation as JsonValue, this.context);\n\t\t\t\tbreak;\n\t\t\tdefault:\n\t\t\t\t// `hello`, `ping` and `pong` are the channel's.\n\t\t\t\tbreak;\n\t\t}\n\t}\n\n\t/** `provider` holds nothing any more: it goes (its relay's upstream links are told `closed`). */\n\tdrop(provider: ProviderSide): void {\n\t\tif (this.#providers.get(provider.origin) !== provider) return;\n\t\tthis.#providers.delete(provider.origin);\n\t\tprovider.closed();\n\t}\n\n\t/** Ends the holds on this link that hold nothing and act for a principal `revoked` names (§4). */\n\trevokeUnbound(revoked: (principal: Principal) => boolean, error: ChordError): void {\n\t\tfor (const provider of this.#providers.values()) provider.revokeUnbound(revoked, error);\n\t}\n\n\tclosed(): void {\n\t\tthis.#closing.abort();\n\t\tfor (const provider of this.#providers.values()) provider.closed();\n\t\tthis.#providers.clear();\n\t\tthis.consumer.closed();\n\t\tthis.host.unlink(this);\n\t}\n\n\t/** A `hold` goes to its origin's provider side, made for the origin's first. */\n\t#hold(message: Extract<Message, { readonly kind: \"hold\" }>): void {\n\t\tconst origin = message.origin ?? 0;\n\t\tlet provider = this.#providers.get(origin);\n\t\tif (provider === undefined) {\n\t\t\tprovider = new ProviderSide(this, origin, CALLS);\n\t\t\tthis.#providers.set(origin, provider);\n\t\t}\n\t\tprovider.message(message);\n\t}\n}\n"]}

package/dist/next/remote/internal.d.ts

@@ -0,0 +1,6 @@
+export type { HoldRequest } from "./hold.ts";
+export { HostLink, type LinkRole } from "./host-link.ts";
+export { Path, type PathEvent, type Upstream } from "./path.ts";
+export type { ProviderSide } from "./provider.ts";
+export { RemoteObject } from "./remote-object.ts";
+//# sourceMappingURL=internal.d.ts.map

package/dist/next/remote/internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../../src/next/remote/internal.ts"],"names":[],"mappings":"AAGA,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,KAAK,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AAChE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/next/remote/internal.js

@@ -0,0 +1,6 @@
+// Remote objects for Chord's layers: a host's links (both sides of each), the paths its upstream holds take, and the
+// objects of its remote references.
+export { HostLink } from "./host-link.js";
+export { Path } from "./path.js";
+export { RemoteObject } from "./remote-object.js";
+//# sourceMappingURL=internal.js.map

package/dist/next/remote/internal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.js","sourceRoot":"","sources":["../../../src/next/remote/internal.ts"],"names":[],"mappings":"AAAA,qHAAqH;AACrH,oCAAoC;AAGpC,OAAO,EAAE,QAAQ,EAAiB,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAiC,MAAM,WAAW,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC","sourcesContent":["// Remote objects for Chord's layers: a host's links (both sides of each), the paths its upstream holds take, and the\n// objects of its remote references.\n\nexport type { HoldRequest } from \"./hold.ts\";\nexport { HostLink, type LinkRole } from \"./host-link.ts\";\nexport { Path, type PathEvent, type Upstream } from \"./path.ts\";\nexport type { ProviderSide } from \"./provider.ts\";\nexport { RemoteObject } from \"./remote-object.ts\";\n"]}

package/dist/next/remote/path.d.ts

@@ -0,0 +1,46 @@
+import { ChordError } from "../data/index.ts";
+import type { HostLink } from "./host-link.ts";
+import type { RelayedHold } from "./relay.ts";
+import type { RemoteObject } from "./remote-object.ts";
+/** What a path holds on its links: one of this host's remote references, or a hold it relays. */
+export type Upstream = RemoteObject | RelayedHold;
+/**
+ * What changed on a path without a link, for its route: a holder attached, its link dropped (its holders went
+ * loading), its last holder left.
+ */
+export type PathEvent = {
+    readonly kind: "attached";
+    readonly holder: Upstream;
+} | {
+    readonly kind: "dropped";
+} | {
+    readonly kind: "released";
+};
+/**
+ * The parent link or one route address: its current link and its holders, held on that link and again on every next
+ * one. `changed` runs when it gets a holder without a link, loses its link or its last holder (a route decides whether
+ * to resolve), saying which.
+ */
+export declare class Path {
+    #private;
+    constructor(changed: (event: PathEvent) => void);
+    /** The current link while one is open. */
+    get link(): HostLink | undefined;
+    /** Whether it had a link once (it may be down now: its holders wait for the next). */
+    get linked(): boolean;
+    /** Whether anything is held over this path. */
+    get held(): boolean;
+    /** Holds `holder` over this path: on the current link now, and on every next one. */
+    attach(holder: Upstream): void;
+    /** `holder` was released or ended; no later link holds it. */
+    detach(holder: Upstream): void;
+    /** `link` is the path's link now: every holder is held on it. */
+    connected(link: HostLink): void;
+    /** `link` closed (its sides ended their calls already): every holder goes loading until the next link. */
+    disconnected(link: HostLink): void;
+    /** Its address cannot be reached for now (a route's `resolve` failed, a suspension): every holder fails waiting. */
+    unreachable(error: ChordError): void;
+    /** Every holder, for the host's close. */
+    holders(): Upstream[];
+}
+//# sourceMappingURL=path.d.ts.map

package/dist/next/remote/path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../../../src/next/remote/path.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,iGAAiG;AACjG,MAAM,MAAM,QAAQ,GAAG,YAAY,GAAG,WAAW,CAAC;AAElD;;;GAGG;AACH,MAAM,MAAM,SAAS,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAMjC;;;;GAIG;AACH,qBAAa,IAAI;;IAOhB,YAAY,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,EAE9C;IAED,0CAA0C;IAC1C,IAAI,IAAI,IAAI,QAAQ,GAAG,SAAS,CAE/B;IAED,sFAAsF;IACtF,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,+CAA+C;IAC/C,IAAI,IAAI,IAAI,OAAO,CAElB;IAED,qFAAqF;IACrF,MAAM,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,CAI7B;IAED,8DAA8D;IAC9D,MAAM,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,CAG7B;IAED,iEAAiE;IACjE,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAI9B;IAED,0GAA0G;IAC1G,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAMjC;IAED,oHAAoH;IACpH,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAEnC;IAED,0CAA0C;IAC1C,OAAO,IAAI,QAAQ,EAAE,CAEpB;CACD"}

package/dist/next/remote/path.js

@@ -0,0 +1,73 @@
+// Paths (§3 recovery): where this host's upstream holds go, the parent link or a route address's link, across links.
+// Each new link of a path holds every holder of the path again; when it drops, every holder is told.
+import { ChordError } from "../data/index.js";
+const RELEASED = { kind: "released" };
+const DROPPED = { kind: "dropped" };
+/**
+ * The parent link or one route address: its current link and its holders, held on that link and again on every next
+ * one. `changed` runs when it gets a holder without a link, loses its link or its last holder (a route decides whether
+ * to resolve), saying which.
+ */
+export class Path {
+    #holders = new Set();
+    #changed;
+    #link;
+    /** Whether it ever had a link: a host never connected to a parent has no parent path to wait on. */
+    #linked = false;
+    constructor(changed) {
+        this.#changed = changed;
+    }
+    /** The current link while one is open. */
+    get link() {
+        return this.#link;
+    }
+    /** Whether it had a link once (it may be down now: its holders wait for the next). */
+    get linked() {
+        return this.#linked;
+    }
+    /** Whether anything is held over this path. */
+    get held() {
+        return this.#holders.size > 0;
+    }
+    /** Holds `holder` over this path: on the current link now, and on every next one. */
+    attach(holder) {
+        this.#holders.add(holder);
+        if (this.#link === undefined)
+            this.#changed({ kind: "attached", holder });
+        else
+            holder.attach(this.#link);
+    }
+    /** `holder` was released or ended; no later link holds it. */
+    detach(holder) {
+        this.#holders.delete(holder);
+        if (this.#holders.size === 0)
+            this.#changed(RELEASED);
+    }
+    /** `link` is the path's link now: every holder is held on it. */
+    connected(link) {
+        this.#link = link;
+        this.#linked = true;
+        for (const holder of this.#holders)
+            holder.attach(link);
+    }
+    /** `link` closed (its sides ended their calls already): every holder goes loading until the next link. */
+    disconnected(link) {
+        if (this.#link !== link)
+            return;
+        this.#link = undefined;
+        const error = new ChordError({ code: "unavailable", message: "the link closed" });
+        for (const holder of this.#holders)
+            holder.dropped(error);
+        this.#changed(DROPPED);
+    }
+    /** Its address cannot be reached for now (a route's `resolve` failed, a suspension): every holder fails waiting. */
+    unreachable(error) {
+        for (const holder of this.#holders)
+            holder.unreachable(error);
+    }
+    /** Every holder, for the host's close. */
+    holders() {
+        return [...this.#holders];
+    }
+}
+//# sourceMappingURL=path.js.map

package/dist/next/remote/path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.js","sourceRoot":"","sources":["../../../src/next/remote/path.ts"],"names":[],"mappings":"AAAA,qHAAqH;AACrH,qGAAqG;AAErG,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAiB9C,MAAM,QAAQ,GAAc,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAEjD,MAAM,OAAO,GAAc,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAE/C;;;;GAIG;AACH,MAAM,OAAO,IAAI;IACP,QAAQ,GAAG,IAAI,GAAG,EAAY,CAAC;IAC/B,QAAQ,CAA6B;IAC9C,KAAK,CAAuB;IAC5B,oGAAoG;IACpG,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,OAAmC;QAC9C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,0CAA0C;IAC1C,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,sFAAsF;IACtF,IAAI,MAAM;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,+CAA+C;IAC/C,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,qFAAqF;IACrF,MAAM,CAAC,MAAgB;QACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;;YACrE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,8DAA8D;IAC9D,MAAM,CAAC,MAAgB;QACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED,iEAAiE;IACjE,SAAS,CAAC,IAAc;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,0GAA0G;IAC1G,YAAY,CAAC,IAAc;QAC1B,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO;QAChC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAClF,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,oHAAoH;IACpH,WAAW,CAAC,KAAiB;QAC5B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC;IAED,0CAA0C;IAC1C,OAAO;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;CACD","sourcesContent":["// Paths (§3 recovery): where this host's upstream holds go, the parent link or a route address's link, across links.\n// Each new link of a path holds every holder of the path again; when it drops, every holder is told.\n\nimport { ChordError } from \"../data/index.ts\";\nimport type { HostLink } from \"./host-link.ts\";\nimport type { RelayedHold } from \"./relay.ts\";\nimport type { RemoteObject } from \"./remote-object.ts\";\n\n/** What a path holds on its links: one of this host's remote references, or a hold it relays. */\nexport type Upstream = RemoteObject | RelayedHold;\n\n/**\n * What changed on a path without a link, for its route: a holder attached, its link dropped (its holders went\n * loading), its last holder left.\n */\nexport type PathEvent =\n\t| { readonly kind: \"attached\"; readonly holder: Upstream }\n\t| { readonly kind: \"dropped\" }\n\t| { readonly kind: \"released\" };\n\nconst RELEASED: PathEvent = { kind: \"released\" };\n\nconst DROPPED: PathEvent = { kind: \"dropped\" };\n\n/**\n * The parent link or one route address: its current link and its holders, held on that link and again on every next\n * one. `changed` runs when it gets a holder without a link, loses its link or its last holder (a route decides whether\n * to resolve), saying which.\n */\nexport class Path {\n\treadonly #holders = new Set<Upstream>();\n\treadonly #changed: (event: PathEvent) => void;\n\t#link: HostLink | undefined;\n\t/** Whether it ever had a link: a host never connected to a parent has no parent path to wait on. */\n\t#linked = false;\n\n\tconstructor(changed: (event: PathEvent) => void) {\n\t\tthis.#changed = changed;\n\t}\n\n\t/** The current link while one is open. */\n\tget link(): HostLink | undefined {\n\t\treturn this.#link;\n\t}\n\n\t/** Whether it had a link once (it may be down now: its holders wait for the next). */\n\tget linked(): boolean {\n\t\treturn this.#linked;\n\t}\n\n\t/** Whether anything is held over this path. */\n\tget held(): boolean {\n\t\treturn this.#holders.size > 0;\n\t}\n\n\t/** Holds `holder` over this path: on the current link now, and on every next one. */\n\tattach(holder: Upstream): void {\n\t\tthis.#holders.add(holder);\n\t\tif (this.#link === undefined) this.#changed({ kind: \"attached\", holder });\n\t\telse holder.attach(this.#link);\n\t}\n\n\t/** `holder` was released or ended; no later link holds it. */\n\tdetach(holder: Upstream): void {\n\t\tthis.#holders.delete(holder);\n\t\tif (this.#holders.size === 0) this.#changed(RELEASED);\n\t}\n\n\t/** `link` is the path's link now: every holder is held on it. */\n\tconnected(link: HostLink): void {\n\t\tthis.#link = link;\n\t\tthis.#linked = true;\n\t\tfor (const holder of this.#holders) holder.attach(link);\n\t}\n\n\t/** `link` closed (its sides ended their calls already): every holder goes loading until the next link. */\n\tdisconnected(link: HostLink): void {\n\t\tif (this.#link !== link) return;\n\t\tthis.#link = undefined;\n\t\tconst error = new ChordError({ code: \"unavailable\", message: \"the link closed\" });\n\t\tfor (const holder of this.#holders) holder.dropped(error);\n\t\tthis.#changed(DROPPED);\n\t}\n\n\t/** Its address cannot be reached for now (a route's `resolve` failed, a suspension): every holder fails waiting. */\n\tunreachable(error: ChordError): void {\n\t\tfor (const holder of this.#holders) holder.unreachable(error);\n\t}\n\n\t/** Every holder, for the host's close. */\n\tholders(): Upstream[] {\n\t\treturn [...this.#holders];\n\t}\n}\n"]}

package/dist/next/remote/provider.d.ts

@@ -0,0 +1,76 @@
+import { type Context } from "../../context/index.ts";
+import { ChordError, type Principal } from "../data/index.ts";
+import { type ConsumerMessage, type OriginMessage, type ProviderMessage } from "../link/internal.ts";
+import { Hold } from "./hold.ts";
+import type { HostLink } from "./host-link.ts";
+import type { RelayedHold } from "./relay.ts";
+/**
+ * The provider side of one origin on a link. Ids are the origin's; a message naming an id this side does not know is
+ * ignored (Q1), one reusing a live id is a protocol error, and so are more concurrent calls than this side announced.
+ * This host's own `bound` and `state` messages go through the window: locally served holds wait while it is full
+ * (their ops in their members' pending queues, their bindings for the next slot). A relay forwards upstream messages
+ * at once (each upstream host keeps its own window for the origin it sees), so a slow consumer stalls only its origin.
+ */
+export declare class ProviderSide {
+    #private;
+    readonly link: HostLink;
+    /** Whose work this side serves: 0 for the peer's own, a relay's number for one of its downstream links. */
+    readonly origin: number;
+    constructor(link: HostLink, origin: number, limit: number);
+    /** Handles one message of this origin; a call whose arguments wait for an asynchronous inflate returns its promise. */
+    message(message: ProviderMessage): void | Promise<void>;
+    /**
+     * The link closed, or the origin did (`closed`): every hold is released (relayed ones by one `closed` to each
+     * upstream link) and every call aborted.
+     */
+    closed(): void;
+    /** Sends `message` on the link with this origin. */
+    send(message: OriginMessage): void;
+    /**
+     * Ends with `error` every hold of this origin that acts for a principal `revoked` names and holds nothing: served
+     * here but unbound (before the publication, refused), or relayed and waiting for its route's link.
+     */
+    revokeUnbound(revoked: (principal: Principal) => boolean, error: ChordError): void;
+    /** A pending hold turned out to be relayed: it takes the hold's place in the table. */
+    relayed(hold: RelayedHold): void;
+    /** This origin's number on upstream links (one per host, never reused), with `link` as one it relays to. */
+    relayTo(link: HostLink): number;
+    /**
+     * A message from upstream link `from` for this origin's relayed holds, forwarded with this origin: `bound` and
+     * `state` join the window's senders (their `ack` goes back to `from`), a reply ends its call, `gone` forgets its
+     * hold. A link answers only for what was relayed over it: an entry, a notice or a reply naming a hold (or a call)
+     * this origin did not relay over `from` is dropped (Q1); a `bound` or `state` left without entries is acknowledged
+     * to `from` at once. Parts travel unchecked and unparsed: the end that parses a part checks it against its own
+     * link's limits.
+     */
+    forward(message: ConsumerMessage, from: HostLink): void;
+    /** An upstream link closed: nothing more is relayed to it, nor accepted from it. */
+    unlinked(link: HostLink): void;
+    /**
+     * The upstream link of relayed hold `hold` dropped with `error`: its calls in flight fail, the hold goes loading
+     * downstream, and its path's next link holds it again.
+     */
+    upstreamDropped(hold: RelayedHold, error: ChordError): void;
+    /**
+     * Forgets a hold (released, refused or gone) and every call on it; local calls are aborted with `error` (its
+     * object's end for a gone hold, `released` otherwise).
+     */
+    forget(hold: Hold | RelayedHold, error?: ChordError): void;
+    /** A call ended with `reply` (a result or an error): its slot is free; nothing is sent for one already gone. */
+    reply(id: number, reply: Extract<OriginMessage, {
+        readonly kind: "result" | "error";
+    }>): void;
+    /** A hold's object is live: its `bound` goes now when a slot is free, else with the next free slot's bindings. */
+    bind(hold: Hold, context: Context): void;
+    /** A hold stopped waiting for a slot: it was forgotten. */
+    unbind(hold: Hold): void;
+    /**
+     * A served hold left its object's binding (slice 7b §6, model §5): its unsent pending ops and a queued `bound` are
+     * dropped (the ack slots of messages already sent stay until their `ack`), its calls in flight rejected with `error`
+     * (each slot freed once).
+     */
+    unbound(hold: Hold, error: ChordError): void;
+    /** A hold's members changed in the current batch; its flush sends or queues it. */
+    touched(hold: Hold): void;
+}
+//# sourceMappingURL=provider.d.ts.map

package/dist/next/remote/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../src/next/remote/provider.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,OAAO,EAAmB,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,UAAU,EAAgB,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE5E,OAAO,EAEN,KAAK,eAAe,EAGpB,KAAK,aAAa,EAElB,KAAK,eAAe,EAKpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAmB9C;;;;;;GAMG;AACH,qBAAa,YAAY;;IACxB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,2GAA2G;IAC3G,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAmBxB,YAAY,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAIxD;IAED,uHAAuH;IACvH,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBtD;IAED;;;OAGG;IACH,MAAM,IAAI,IAAI,CAkBb;IAED,oDAAoD;IACpD,IAAI,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAEjC;IAED;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,SAAS,KAAK,OAAO,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAOjF;IAED,uFAAuF;IACvF,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAE/B;IAED,4GAA4G;IAC5G,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAQ9B;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,CAiCtD;IAED,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAE7B;IAED;;;OAGG;IACH,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAK1D;IAED;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,WAAW,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,IAAI,CAUzD;IAED,gHAAgH;IAChH,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAA;KAAE,CAAC,GAAG,IAAI,CAI5F;IAUD,kHAAkH;IAClH,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAMvC;IAED,2DAA2D;IAC3D,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAGvB;IAED;;;;OAIG;IACH,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAO3C;IAED,mFAAmF;IACnF,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAGxB;CAgQD"}