@earendil-works/chord 1.4.0 → 1.5.1

package/dist/data/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/data/errors.ts"],"names":[],"mappings":"AAAA,uHAAuH;AACvH,uDAAuD;AAIvD,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,2GAA2G;AAC3G,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,CAAC;IAC9F,iBAAiB,EAAE,CAAC,UAAU,CAAC;IAC/B,SAAS,EAAE,CAAC,SAAS,CAAC;IACtB,IAAI,EAAE,EAAE;IACR,SAAS,EAAE,EAAE;IACb,4GAA4G;IAC5G,4GAA4G;IAC5G,8CAA8C;IAC9C,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC;IAChE,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,sHAAsH;IACtH,4GAA4G;IAC5G,WAAW,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,CAAC;IAC1G,OAAO,EAAE,EAAE;CACF,CAAC;AAmBX,MAAM,eAAgB,SAAQ,KAAK;IACzB,IAAI,CAAiB;IACrB,MAAM,CAA+B;IACrC,OAAO,CAAwB;IAExC,YAAY,IAAoB,EAAE,OAAsB;QACvD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,yDAAyD;IACzD,MAAM;QACL,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAChD,sEAAsE;QACtE,OAAO;YACN,IAAI;YACJ,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,OAAO;YACP,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC3B,CAAC;IACrB,CAAC;CACD;AAKD;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,eAAmF,CAAC;AAE9G,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAC3B,KAAc,EACd,IAAQ;IAER,OAAO,KAAK,YAAY,UAAU,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC5B,IAAI,CAAS;IACb,OAAO,CAAwB;IAExC,YAAY,IAAY,EAAE,OAAe,EAAE,OAAmB;QAC7D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACxB,CAAC;CACD;AAED,uGAAuG;AACvG,MAAM,UAAU,OAAO,CACtB,MAAmC,EACnC,OAAe,EACf,OAAmB;IAEnB,+DAA+D;IAC/D,OAAO,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAA6C,CAAC;AAClH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,OAAmB;IAC7D,+DAA+D;IAC/D,OAAO,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAA+C,CAAC;AAC9G,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,KAAa;IACzD,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,KAAK,KAAK,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AACnG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC9C,6DAA6D;IAC7D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,aAAa,CAAC,eAAe,CAAC,CAAC;IACxG,MAAM,IAAI,GAAG,GAA8B,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,aAAa,CAAC,gBAAgB,GAAG,GAAG,CAAC,CAAC;IAC9G,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC;QAAE,MAAM,aAAa,CAAC,cAAc,CAAC,CAAC;IAC/G,MAAM,OAAO,GAAsB,mBAAmB,CAAC,IAAsB,CAAC,CAAC;IAC/E,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAgB,CAAC,EAAE,CAAC;QACrF,MAAM,aAAa,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,aAAa,CAAC,yBAAyB,CAAC,CAAC;IAChF,0CAA0C;IAC1C,OAAO,IAAI,UAAU,CAAC,IAAsB,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAExE,SAAS,aAAa,CAAC,OAAe;IACrC,OAAO,IAAI,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;AACzD,CAAC","sourcesContent":["// ChordError: Chord's one error type, its codes and reasons (link protocol) and its wire form; and PluginError, what a\n// plugin throws to give its callers a code of its own.\n\nimport type { JsonValue } from \"../json.ts\";\n\n/** Version of the error table below on links; adding or moving a code or reason bumps it. */\nexport const PROTOCOL_VERSION = 1;\n\n/** Every code with the reasons it may carry. `invalid` requires a reason; every other code may omit it. */\nexport const CHORD_ERROR_REASONS = {\n\tinvalid: [\"args\", \"params\", \"member\", \"host_address\", \"reentrant\", \"read_after_bulk\", \"cycle\"],\n\tcontract_mismatch: [\"updating\"],\n\tforbidden: [\"revoked\"],\n\tgone: [],\n\tnot_ready: [],\n\t// No reason: released by its holder. `ended`: its object ended; `closed`: its host, store or native closed;\n\t// `settled`: used after the call or run it belonged to settled; `version`: an old handle after a migration;\n\t// `discarded`: a transaction cut at the seal.\n\treleased: [\"ended\", \"closed\", \"settled\", \"version\", \"discarded\"],\n\ttoo_large: [\"part\"],\n\t// `undeclared`: a registry no plugin serves on this host; `version`: waiting for a dependency refused for its version\n\t// (it heals with another host's reload); `reload_cycle`: old work waiting on its own drain during a reload.\n\tunavailable: [\"locked\", \"park_timeout\", \"busy\", \"storage_failed\", \"undeclared\", \"version\", \"reload_cycle\"],\n\taborted: [],\n} as const;\n\nexport type ChordErrorCode = keyof typeof CHORD_ERROR_REASONS;\n\nexport type ChordErrorReason<C extends ChordErrorCode = ChordErrorCode> = (typeof CHORD_ERROR_REASONS)[C][number];\n\n/** The wire form of a ChordError and its constructor argument: one member per code, so wrong pairings fail to type. */\ntype ChordErrorJson = { [C in ChordErrorCode]: ErrorFields<C> }[ChordErrorCode];\n\ntype ErrorFields<C extends ChordErrorCode> = {\n\treadonly code: C;\n\treadonly message: string;\n\treadonly details?: JsonValue;\n} & (C extends \"invalid\"\n\t? { readonly reason: ChordErrorReason<C> }\n\t: [ChordErrorReason<C>] extends [never]\n\t\t? { readonly reason?: undefined }\n\t\t: { readonly reason?: ChordErrorReason<C> });\n\nclass ChordErrorClass extends Error {\n\treadonly code: ChordErrorCode;\n\treadonly reason: ChordErrorReason | undefined;\n\treadonly details: JsonValue | undefined;\n\n\tconstructor(init: ChordErrorJson, options?: ErrorOptions) {\n\t\tsuper(init.message, options);\n\t\tthis.name = \"ChordError\";\n\t\tthis.code = init.code;\n\t\tthis.reason = init.reason;\n\t\tthis.details = init.details;\n\t}\n\n\t/** The wire form; stack and cause never cross a link. */\n\ttoJSON(): ChordErrorJson {\n\t\tconst { code, reason, message, details } = this;\n\t\t// The fields were copied from a ChordErrorJson, so the pairing holds.\n\t\treturn {\n\t\t\tcode,\n\t\t\t...(reason === undefined ? {} : { reason }),\n\t\t\tmessage,\n\t\t\t...(details === undefined ? {} : { details }),\n\t\t} as ChordErrorJson;\n\t}\n}\n\n/** A Chord failure. Narrowing on `code` narrows `reason`. */\nexport type ChordError = ChordErrorClass & ChordErrorJson;\n\n/**\n * Creates a ChordError: `new ChordError({ code: \"invalid\", reason: \"args\", message })`. A class cannot declare its\n * instances as a tagged union; this constructor signature does.\n */\nexport const ChordError = ChordErrorClass as new (init: ChordErrorJson, options?: ErrorOptions) => ChordError;\n\n/** Whether `error` is a ChordError, optionally with the given code. */\nexport function isChordError<C extends ChordErrorCode = ChordErrorCode>(\n\terror: unknown,\n\tcode?: C,\n): error is Extract<ChordError, { readonly code: C }> {\n\treturn error instanceof ChordError && (code === undefined || error.code === code);\n}\n\n/**\n * An error a plugin throws for its callers: its own `code`, a message and JSON `details`. Only these cross a link\n * (never a stack or a cause); a consumer rethrows it as a PluginError.\n */\nexport class PluginError extends Error {\n\treadonly code: string;\n\treadonly details: JsonValue | undefined;\n\n\tconstructor(code: string, message: string, details?: JsonValue) {\n\t\tsuper(message);\n\t\tthis.name = \"PluginError\";\n\t\tthis.code = code;\n\t\tthis.details = details;\n\t}\n}\n\n/** An `invalid` error with the given reason: a plugin throws it for arguments or params it refuses. */\nexport function invalid(\n\treason: ChordErrorReason<\"invalid\">,\n\tmessage: string,\n\tdetails?: JsonValue,\n): Extract<ChordError, { readonly code: \"invalid\" }> {\n\t// The constructor's return type cannot narrow on its argument.\n\treturn new ChordError({ code: \"invalid\", reason, message, details }) as Extract<ChordError, { code: \"invalid\" }>;\n}\n\n/**\n * A `forbidden` error without a reason: what a plugin or an `authorize` throws for a principal it refuses (`revoked` is\n * Chord's own, for a revoked authority).\n */\nexport function forbidden(message: string, details?: JsonValue): Extract<ChordError, { readonly code: \"forbidden\" }> {\n\t// The constructor's return type cannot narrow on its argument.\n\treturn new ChordError({ code: \"forbidden\", message, details }) as Extract<ChordError, { code: \"forbidden\" }>;\n}\n\n/** `error` itself when it is a ChordError, otherwise an `unavailable` error naming `label`, with `error` as cause. */\nexport function asChordError(error: unknown, label: string): ChordError {\n\tif (isChordError(error)) return error;\n\tconst message = error instanceof Error ? error.message : String(error);\n\treturn new ChordError({ code: \"unavailable\", message: `${label}: ${message}` }, { cause: error });\n}\n\n/**\n * Rebuilds a ChordError from a link. Checks the envelope only: a known code, a reason allowed for it (required for\n * `invalid`), a string message, no other keys. `details` is kept by reference.\n */\nexport function chordErrorFromJson(raw: unknown): ChordError {\n\t// Trust boundary: `raw` is fresh JSON from the link decoder.\n\tif (typeof raw !== \"object\" || raw === null || Array.isArray(raw)) throw envelopeError(\"not an object\");\n\tconst json = raw as Record<string, unknown>;\n\tfor (const key of Object.keys(json)) if (!ENVELOPE_KEYS.has(key)) throw envelopeError(`unknown key \"${key}\"`);\n\tconst { code, reason, message } = json;\n\tif (typeof code !== \"string\" || !Object.hasOwn(CHORD_ERROR_REASONS, code)) throw envelopeError(\"unknown code\");\n\tconst reasons: readonly string[] = CHORD_ERROR_REASONS[code as ChordErrorCode];\n\tif (reason === undefined ? code === \"invalid\" : !reasons.includes(reason as string)) {\n\t\tthrow envelopeError(`reason not allowed for ${code}`);\n\t}\n\tif (typeof message !== \"string\") throw envelopeError(\"message is not a string\");\n\t// The checks above establish the pairing.\n\treturn new ChordError(json as ChordErrorJson);\n}\n\nconst ENVELOPE_KEYS = new Set([\"code\", \"reason\", \"message\", \"details\"]);\n\nfunction envelopeError(problem: string): Error {\n\treturn new Error(`Invalid ChordError JSON: ${problem}`);\n}\n"]}

package/dist/data/failure.d.ts

@@ -0,0 +1,26 @@
+import { ChordError } from "./errors.ts";
+/** Why an object, or a request, is failed; the kind comes from the failing stage, never from the error code. */
+export type FailureCause = {
+    readonly kind: "transient";
+    readonly error: ChordError;
+} | {
+    readonly kind: "broken";
+    readonly error: ChordError;
+} | {
+    readonly kind: "waiting";
+    readonly error: ChordError;
+};
+/** Marks an open's failure as broken (bad configuration): `throw broken(error)`. */
+export declare function broken(cause: unknown): Error;
+/** The cause of a value thrown by an open: broken when it came from `broken()`, transient otherwise. */
+export declare function openFailure(thrown: unknown, label: string): FailureCause;
+/**
+ * The `waiting` cause of a dependent parked on `blocker`, which failed with `error`: `unavailable`, its message always
+ * "waiting for <blocker>: <root cause>" (the root found through any "waiting for …: " of `error`'s message), so a ring
+ * of waiting attempts passing causes round reaches the same message after one round; within 500 characters, the
+ * label clipped first, the root only past its share. `error` is its cause.
+ */
+export declare function waitingFor(blocker: string, error: ChordError): FailureCause;
+/** Whether two failure causes say the same (a wake compares causes by value): kind, code, reason and message. */
+export declare function sameCause(a: FailureCause, b: FailureCause): boolean;
+//# sourceMappingURL=failure.d.ts.map

package/dist/data/failure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure.d.ts","sourceRoot":"","sources":["../../src/data/failure.ts"],"names":[],"mappings":"AAIA,OAAO,EAAgB,UAAU,EAAE,MAAM,aAAa,CAAC;AAEvD,gHAAgH;AAChH,MAAM,MAAM,YAAY,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC;AAE5D,oFAAoF;AACpF,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAE5C;AAED,wGAAwG;AACxG,wBAAgB,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,CAGxE;AAiBD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,YAAY,CAgB3E;AAkBD,iHAAiH;AACjH,wBAAgB,SAAS,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,GAAG,OAAO,CAMnE"}

package/dist/data/failure.js

@@ -0,0 +1,77 @@
+// Failure causes: transient (the object's own effect failed: retry later), broken (its own code, a cycle or authority:
+// retry by hand) or waiting (not its fault: no provider, no fitting version, a dependency that failed; woken by an
+// event). The failing stage decides, never the error code.
+import { asChordError, ChordError } from "./errors.js";
+/** Marks an open's failure as broken (bad configuration): `throw broken(error)`. */
+export function broken(cause) {
+    return new BrokenOpen(cause);
+}
+/** The cause of a value thrown by an open: broken when it came from `broken()`, transient otherwise. */
+export function openFailure(thrown, label) {
+    if (thrown instanceof BrokenOpen)
+        return { kind: "broken", error: asChordError(thrown.cause, label) };
+    return { kind: "transient", error: asChordError(thrown, label) };
+}
+/** The longest message a `waiting` cause of a dependent carries (telemetry's rule for error messages). */
+const MESSAGE_LIMIT = 500;
+/** How a dependent's message names its blocker: the nearest one first. */
+const PREFIX = "waiting for ";
+/** The separator after a blocker's label. */
+const SEPARATOR = ": ";
+/** The marker of a clipped label or root. */
+const CLIPPED = "…";
+/** The most of the 500 characters the root cause takes when both are long: the nearest blocker keeps the rest. */
+const ROOT_LIMIT = 320;
+/**
+ * The `waiting` cause of a dependent parked on `blocker`, which failed with `error`: `unavailable`, its message always
+ * "waiting for <blocker>: <root cause>" (the root found through any "waiting for …: " of `error`'s message), so a ring
+ * of waiting attempts passing causes round reaches the same message after one round; within 500 characters, the
+ * label clipped first, the root only past its share. `error` is its cause.
+ */
+export function waitingFor(blocker, error) {
+    let root = rootMessage(error.message);
+    let label = blocker;
+    const room = MESSAGE_LIMIT - PREFIX.length - SEPARATOR.length;
+    if (label.length + root.length > room) {
+        const rootRoom = Math.max(ROOT_LIMIT, room - label.length);
+        if (root.length > rootRoom)
+            root = clipped(root, rootRoom);
+        if (label.length + root.length > room)
+            label = clipped(label, room - root.length);
+    }
+    const message = `${PREFIX}${label}${SEPARATOR}${root}`;
+    // A version refusal, here or along the chain, keeps its reason: it heals with another host's reload.
+    const version = error.code === "contract_mismatch" || (error.code === "unavailable" && error.reason === "version");
+    const init = version
+        ? { code: "unavailable", reason: "version", message }
+        : { code: "unavailable", message };
+    return { kind: "waiting", error: new ChordError(init, { cause: error }) };
+}
+/** `text` within `length` characters, clipped with "…" when longer. */
+function clipped(text, length) {
+    return text.length <= length ? text : `${text.slice(0, length - CLIPPED.length)}${CLIPPED}`;
+}
+/** The root cause in a "waiting for X: root" message: past every leading "waiting for …: ". */
+function rootMessage(message) {
+    let rest = message;
+    while (rest.startsWith(PREFIX)) {
+        const end = rest.indexOf(SEPARATOR, PREFIX.length);
+        if (end < 0)
+            break;
+        rest = rest.slice(end + SEPARATOR.length);
+    }
+    return rest;
+}
+/** Whether two failure causes say the same (a wake compares causes by value): kind, code, reason and message. */
+export function sameCause(a, b) {
+    const { error: left } = a;
+    const { error: right } = b;
+    return (a.kind === b.kind && left.code === right.code && left.reason === right.reason && left.message === right.message);
+}
+class BrokenOpen extends Error {
+    constructor(cause) {
+        super(cause instanceof Error ? cause.message : String(cause), { cause });
+        this.name = "BrokenOpen";
+    }
+}
+//# sourceMappingURL=failure.js.map

package/dist/data/failure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure.js","sourceRoot":"","sources":["../../src/data/failure.ts"],"names":[],"mappings":"AAAA,uHAAuH;AACvH,mHAAmH;AACnH,2DAA2D;AAE3D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQvD,oFAAoF;AACpF,MAAM,UAAU,MAAM,CAAC,KAAc;IACpC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,WAAW,CAAC,MAAe,EAAE,KAAa;IACzD,IAAI,MAAM,YAAY,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;IACtG,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,0GAA0G;AAC1G,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,0EAA0E;AAC1E,MAAM,MAAM,GAAG,cAAc,CAAC;AAE9B,6CAA6C;AAC7C,MAAM,SAAS,GAAG,IAAI,CAAC;AAEvB,6CAA6C;AAC7C,MAAM,OAAO,GAAG,GAAG,CAAC;AAEpB,kHAAkH;AAClH,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,KAAiB;IAC5D,IAAI,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,KAAK,GAAG,OAAO,CAAC;IACpB,MAAM,IAAI,GAAG,aAAa,GAAG,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAC9D,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ;YAAE,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI;YAAE,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,IAAI,EAAE,CAAC;IACvD,qGAAqG;IACrG,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACnH,MAAM,IAAI,GAAG,OAAO;QACnB,CAAC,CAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAY;QAChE,CAAC,CAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAY,CAAC;IAC/C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,uEAAuE;AACvE,SAAS,OAAO,CAAC,IAAY,EAAE,MAAc;IAC5C,OAAO,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;AAC7F,CAAC;AAED,+FAA+F;AAC/F,SAAS,WAAW,CAAC,OAAe;IACnC,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM;QACnB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,SAAS,CAAC,CAAe,EAAE,CAAe;IACzD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3B,OAAO,CACN,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAC/G,CAAC;AACH,CAAC;AAED,MAAM,UAAW,SAAQ,KAAK;IAC7B,YAAY,KAAc;QACzB,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC1B,CAAC;CACD","sourcesContent":["// Failure causes: transient (the object's own effect failed: retry later), broken (its own code, a cycle or authority:\n// retry by hand) or waiting (not its fault: no provider, no fitting version, a dependency that failed; woken by an\n// event). The failing stage decides, never the error code.\n\nimport { asChordError, ChordError } from \"./errors.ts\";\n\n/** Why an object, or a request, is failed; the kind comes from the failing stage, never from the error code. */\nexport type FailureCause =\n\t| { readonly kind: \"transient\"; readonly error: ChordError }\n\t| { readonly kind: \"broken\"; readonly error: ChordError }\n\t| { readonly kind: \"waiting\"; readonly error: ChordError };\n\n/** Marks an open's failure as broken (bad configuration): `throw broken(error)`. */\nexport function broken(cause: unknown): Error {\n\treturn new BrokenOpen(cause);\n}\n\n/** The cause of a value thrown by an open: broken when it came from `broken()`, transient otherwise. */\nexport function openFailure(thrown: unknown, label: string): FailureCause {\n\tif (thrown instanceof BrokenOpen) return { kind: \"broken\", error: asChordError(thrown.cause, label) };\n\treturn { kind: \"transient\", error: asChordError(thrown, label) };\n}\n\n/** The longest message a `waiting` cause of a dependent carries (telemetry's rule for error messages). */\nconst MESSAGE_LIMIT = 500;\n\n/** How a dependent's message names its blocker: the nearest one first. */\nconst PREFIX = \"waiting for \";\n\n/** The separator after a blocker's label. */\nconst SEPARATOR = \": \";\n\n/** The marker of a clipped label or root. */\nconst CLIPPED = \"…\";\n\n/** The most of the 500 characters the root cause takes when both are long: the nearest blocker keeps the rest. */\nconst ROOT_LIMIT = 320;\n\n/**\n * The `waiting` cause of a dependent parked on `blocker`, which failed with `error`: `unavailable`, its message always\n * \"waiting for <blocker>: <root cause>\" (the root found through any \"waiting for …: \" of `error`'s message), so a ring\n * of waiting attempts passing causes round reaches the same message after one round; within 500 characters, the\n * label clipped first, the root only past its share. `error` is its cause.\n */\nexport function waitingFor(blocker: string, error: ChordError): FailureCause {\n\tlet root = rootMessage(error.message);\n\tlet label = blocker;\n\tconst room = MESSAGE_LIMIT - PREFIX.length - SEPARATOR.length;\n\tif (label.length + root.length > room) {\n\t\tconst rootRoom = Math.max(ROOT_LIMIT, room - label.length);\n\t\tif (root.length > rootRoom) root = clipped(root, rootRoom);\n\t\tif (label.length + root.length > room) label = clipped(label, room - root.length);\n\t}\n\tconst message = `${PREFIX}${label}${SEPARATOR}${root}`;\n\t// A version refusal, here or along the chain, keeps its reason: it heals with another host's reload.\n\tconst version = error.code === \"contract_mismatch\" || (error.code === \"unavailable\" && error.reason === \"version\");\n\tconst init = version\n\t\t? ({ code: \"unavailable\", reason: \"version\", message } as const)\n\t\t: ({ code: \"unavailable\", message } as const);\n\treturn { kind: \"waiting\", error: new ChordError(init, { cause: error }) };\n}\n\n/** `text` within `length` characters, clipped with \"…\" when longer. */\nfunction clipped(text: string, length: number): string {\n\treturn text.length <= length ? text : `${text.slice(0, length - CLIPPED.length)}${CLIPPED}`;\n}\n\n/** The root cause in a \"waiting for X: root\" message: past every leading \"waiting for …: \". */\nfunction rootMessage(message: string): string {\n\tlet rest = message;\n\twhile (rest.startsWith(PREFIX)) {\n\t\tconst end = rest.indexOf(SEPARATOR, PREFIX.length);\n\t\tif (end < 0) break;\n\t\trest = rest.slice(end + SEPARATOR.length);\n\t}\n\treturn rest;\n}\n\n/** Whether two failure causes say the same (a wake compares causes by value): kind, code, reason and message. */\nexport function sameCause(a: FailureCause, b: FailureCause): boolean {\n\tconst { error: left } = a;\n\tconst { error: right } = b;\n\treturn (\n\t\ta.kind === b.kind && left.code === right.code && left.reason === right.reason && left.message === right.message\n\t);\n}\n\nclass BrokenOpen extends Error {\n\tconstructor(cause: unknown) {\n\t\tsuper(cause instanceof Error ? cause.message : String(cause), { cause });\n\t\tthis.name = \"BrokenOpen\";\n\t}\n}\n"]}

package/dist/data/index.d.ts

@@ -0,0 +1,4 @@
+export { ChordError, type ChordErrorCode, type ChordErrorReason, forbidden, invalid, isChordError, PluginError, } from "./errors.ts";
+export { broken, type FailureCause } from "./failure.ts";
+export type { Principal, PrincipalKeyFunction } from "./principal.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/data/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/data/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACN,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,SAAS,EACT,OAAO,EACP,YAAY,EACZ,WAAW,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AACzD,YAAY,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/data/index.js

@@ -0,0 +1,5 @@
+// Data for apps: Chord's errors (with `invalid` and `forbidden`, the two a plugin throws), plugin errors, principals,
+// and how a plugin's open reports a broken configuration.
+export { ChordError, forbidden, invalid, isChordError, PluginError, } from "./errors.js";
+export { broken } from "./failure.js";
+//# sourceMappingURL=index.js.map

package/dist/data/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/data/index.ts"],"names":[],"mappings":"AAAA,sHAAsH;AACtH,0DAA0D;AAE1D,OAAO,EACN,UAAU,EAGV,SAAS,EACT,OAAO,EACP,YAAY,EACZ,WAAW,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAqB,MAAM,cAAc,CAAC","sourcesContent":["// Data for apps: Chord's errors (with `invalid` and `forbidden`, the two a plugin throws), plugin errors, principals,\n// and how a plugin's open reports a broken configuration.\n\nexport {\n\tChordError,\n\ttype ChordErrorCode,\n\ttype ChordErrorReason,\n\tforbidden,\n\tinvalid,\n\tisChordError,\n\tPluginError,\n} from \"./errors.ts\";\nexport { broken, type FailureCause } from \"./failure.ts\";\nexport type { Principal, PrincipalKeyFunction } from \"./principal.ts\";\n"]}

package/dist/data/internal.d.ts

@@ -0,0 +1,7 @@
+export { bindProvider, binds, type CheckedArgs, checkArgs, type Provider, type Value } from "./args.ts";
+export { asChordError, CHORD_ERROR_REASONS, chordErrorFromJson, invalid, PROTOCOL_VERSION, } from "./errors.ts";
+export { openFailure, sameCause, waitingFor } from "./failure.ts";
+export { checkAddress, checkParams, identityKey } from "./params.ts";
+export { canonicalJson, principalKey, samePrincipal } from "./principal.ts";
+export { check, validatorFor } from "./validator.ts";
+//# sourceMappingURL=internal.d.ts.map

package/dist/data/internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../src/data/internal.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,WAAW,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAE,KAAK,KAAK,EAAE,MAAM,WAAW,CAAC;AACxG,OAAO,EACN,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,OAAO,EACP,gBAAgB,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/data/internal.js

@@ -0,0 +1,8 @@
+// Data for Chord's layers: per-call checks of params and arguments, principal keys, and errors on the wire.
+export { bindProvider, binds, checkArgs } from "./args.js";
+export { asChordError, CHORD_ERROR_REASONS, chordErrorFromJson, invalid, PROTOCOL_VERSION, } from "./errors.js";
+export { openFailure, sameCause, waitingFor } from "./failure.js";
+export { checkAddress, checkParams, identityKey } from "./params.js";
+export { canonicalJson, principalKey, samePrincipal } from "./principal.js";
+export { check, validatorFor } from "./validator.js";
+//# sourceMappingURL=internal.js.map

package/dist/data/internal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.js","sourceRoot":"","sources":["../../src/data/internal.ts"],"names":[],"mappings":"AAAA,4GAA4G;AAE5G,OAAO,EAAE,YAAY,EAAE,KAAK,EAAoB,SAAS,EAA6B,MAAM,WAAW,CAAC;AACxG,OAAO,EACN,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,OAAO,EACP,gBAAgB,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["// Data for Chord's layers: per-call checks of params and arguments, principal keys, and errors on the wire.\n\nexport { bindProvider, binds, type CheckedArgs, checkArgs, type Provider, type Value } from \"./args.ts\";\nexport {\n\tasChordError,\n\tCHORD_ERROR_REASONS,\n\tchordErrorFromJson,\n\tinvalid,\n\tPROTOCOL_VERSION,\n} from \"./errors.ts\";\nexport { openFailure, sameCause, waitingFor } from \"./failure.ts\";\nexport { checkAddress, checkParams, identityKey } from \"./params.ts\";\nexport { canonicalJson, principalKey, samePrincipal } from \"./principal.ts\";\nexport { check, validatorFor } from \"./validator.ts\";\n"]}

package/dist/data/params.d.ts

@@ -0,0 +1,20 @@
+import type { Context } from "../context/index.ts";
+import { type Contract, type ParamsOf, type ShapeOf } from "../contracts/contract.ts";
+import { type Address } from "../contracts/host-kind.ts";
+import { type ParamsData } from "../contracts/params.ts";
+/**
+ * Checks `raw` against the contract's params with one compiled closed-object check (`invalid/params` on failure) and
+ * returns the caller's own object with its key: the field values in declared order, each escaped, joined with `|`.
+ */
+export declare function checkParams<C extends Contract>(contract: C, raw: unknown, context: Context): {
+    readonly params: ParamsOf<C>;
+    readonly key: string;
+};
+/** The in-process identity of an object: `name|key|principalKey`, each part escaped; `local` has no principal. */
+export declare function identityKey<C extends Contract>(contract: C, key: string, ...principalKey: ShapeOf<C>["kind"] extends "local" ? [] : [principalKey: string]): string;
+/**
+ * An address from a kind's name and params as a hold names it or a `hostAddress` returned it: the params checked
+ * against the kind's with one compiled closed-object check (`invalid/host_address` on failure), the key computed.
+ */
+export declare function checkAddress(kind: string, params: ParamsData, raw: unknown, context: Context): Address;
+//# sourceMappingURL=params.d.ts.map

package/dist/data/params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../../src/data/params.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,KAAK,QAAQ,EAAgB,KAAK,QAAQ,EAAE,KAAK,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACpG,OAAO,EAAE,KAAK,OAAO,EAAc,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAW,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGlE;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,QAAQ,EAC7C,QAAQ,EAAE,CAAC,EACX,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,OAAO,GACd;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAMxD;AAED,kHAAkH;AAClH,wBAAgB,WAAW,CAAC,CAAC,SAAS,QAAQ,EAC7C,QAAQ,EAAE,CAAC,EACX,GAAG,EAAE,MAAM,EACX,GAAG,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,OAAO,GAAG,EAAE,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,GAC/E,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAKtG"}

package/dist/data/params.js

@@ -0,0 +1,31 @@
+// Params and identity: the checked params of a get, their key, and the in-process identity of an object.
+import { contractData } from "../contracts/contract.js";
+import { addressKey } from "../contracts/host-kind.js";
+import { joinKey } from "../contracts/params.js";
+import { check, validatorFor } from "./validator.js";
+/**
+ * Checks `raw` against the contract's params with one compiled closed-object check (`invalid/params` on failure) and
+ * returns the caller's own object with its key: the field values in declared order, each escaped, joined with `|`.
+ */
+export function checkParams(contract, raw, context) {
+    const { params } = contractData(contract);
+    check(validatorFor(params, context), raw, "params", context);
+    // The check above establishes the params type.
+    const checked = raw;
+    return { params: checked, key: joinKey(params.fields.map((field) => String(checked[field]))) };
+}
+/** The in-process identity of an object: `name|key|principalKey`, each part escaped; `local` has no principal. */
+export function identityKey(contract, key, ...principalKey) {
+    return joinKey([contract.name, key, ...principalKey]);
+}
+/**
+ * An address from a kind's name and params as a hold names it or a `hostAddress` returned it: the params checked
+ * against the kind's with one compiled closed-object check (`invalid/host_address` on failure), the key computed.
+ */
+export function checkAddress(kind, params, raw, context) {
+    check(validatorFor(params, context), raw, "host_address", context);
+    // The check above establishes a flat record of the kind's scalar fields.
+    const values = raw;
+    return { kind, params: values, key: addressKey(kind, params, values) };
+}
+//# sourceMappingURL=params.js.map

package/dist/data/params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.js","sourceRoot":"","sources":["../../src/data/params.ts"],"names":[],"mappings":"AAAA,yGAAyG;AAGzG,OAAO,EAAiB,YAAY,EAA+B,MAAM,0BAA0B,CAAC;AACpG,OAAO,EAAgB,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,OAAO,EAAmB,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAErD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAC1B,QAAW,EACX,GAAY,EACZ,OAAgB;IAEhB,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,+CAA+C;IAC/C,MAAM,OAAO,GAAG,GAA4E,CAAC;IAC7F,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAChG,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,WAAW,CAC1B,QAAW,EACX,GAAW,EACX,GAAG,YAA8E;IAEjF,OAAO,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAkB,EAAE,GAAY,EAAE,OAAgB;IAC5F,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACnE,yEAAyE;IACzE,MAAM,MAAM,GAAG,GAA8D,CAAC;IAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;AACxE,CAAC","sourcesContent":["// Params and identity: the checked params of a get, their key, and the in-process identity of an object.\n\nimport type { Context } from \"../context/index.ts\";\nimport { type Contract, contractData, type ParamsOf, type ShapeOf } from \"../contracts/contract.ts\";\nimport { type Address, addressKey } from \"../contracts/host-kind.ts\";\nimport { joinKey, type ParamsData } from \"../contracts/params.ts\";\nimport { check, validatorFor } from \"./validator.ts\";\n\n/**\n * Checks `raw` against the contract's params with one compiled closed-object check (`invalid/params` on failure) and\n * returns the caller's own object with its key: the field values in declared order, each escaped, joined with `|`.\n */\nexport function checkParams<C extends Contract>(\n\tcontract: C,\n\traw: unknown,\n\tcontext: Context,\n): { readonly params: ParamsOf<C>; readonly key: string } {\n\tconst { params } = contractData(contract);\n\tcheck(validatorFor(params, context), raw, \"params\", context);\n\t// The check above establishes the params type.\n\tconst checked = raw as ParamsOf<C> & { readonly [field: string]: string | number | boolean };\n\treturn { params: checked, key: joinKey(params.fields.map((field) => String(checked[field]))) };\n}\n\n/** The in-process identity of an object: `name|key|principalKey`, each part escaped; `local` has no principal. */\nexport function identityKey<C extends Contract>(\n\tcontract: C,\n\tkey: string,\n\t...principalKey: ShapeOf<C>[\"kind\"] extends \"local\" ? [] : [principalKey: string]\n): string {\n\treturn joinKey([contract.name, key, ...principalKey]);\n}\n\n/**\n * An address from a kind's name and params as a hold names it or a `hostAddress` returned it: the params checked\n * against the kind's with one compiled closed-object check (`invalid/host_address` on failure), the key computed.\n */\nexport function checkAddress(kind: string, params: ParamsData, raw: unknown, context: Context): Address {\n\tcheck(validatorFor(params, context), raw, \"host_address\", context);\n\t// The check above establishes a flat record of the kind's scalar fields.\n\tconst values = raw as { readonly [field: string]: string | number | boolean };\n\treturn { kind, params: values, key: addressKey(kind, params, values) };\n}\n"]}

package/dist/data/principal.d.ts

@@ -0,0 +1,22 @@
+import type { Context } from "../context/index.ts";
+import type { JsonValue } from "../json.ts";
+/** An app's principal: plain JSON with a `kind`. Chord never persists it. */
+export type Principal = {
+    readonly kind: string;
+    readonly [field: string]: JsonValue;
+};
+/** An app's own principal key; it must be the same function on every host. */
+export type PrincipalKeyFunction<P extends Principal = Principal> = (principal: P) => string;
+/**
+ * The key of a principal: its canonical JSON, or `customKey(principal)`. Cached per principal object; a custom key's
+ * cache is keyed by the function too, so a live principal never retains a dropped function.
+ */
+export declare function principalKey<P extends Principal>(principal: P, context: Context, customKey?: PrincipalKeyFunction<P>): string;
+/** Canonical JSON: sorted object keys, `-0` written as `0`. Counts one walk. */
+export declare function canonicalJson(value: JsonValue, context: Context): string;
+/**
+ * Whether `principal` is `other`: the same default key (canonical JSON), each computed once per principal object; no
+ * principal (`undefined`) is none.
+ */
+export declare function samePrincipal(principal: Principal | undefined, other: Principal, context: Context): boolean;
+//# sourceMappingURL=principal.d.ts.map

package/dist/data/principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.d.ts","sourceRoot":"","sources":["../../src/data/principal.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAG5C,6EAA6E;AAC7E,MAAM,MAAM,SAAS,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEvF,8EAA8E;AAC9E,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC,KAAK,MAAM,CAAC;AAE7F;;;GAGG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,SAAS,EAC/C,SAAS,EAAE,CAAC,EACZ,OAAO,EAAE,OAAO,EAChB,SAAS,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,GACjC,MAAM,CAQR;AAeD,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAGxE;AAYD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAE3G"}

package/dist/data/principal.js

@@ -0,0 +1,49 @@
+// Principals: the app's caller identities, and the keys Chord derives from them.
+import { chordMetrics } from "../telemetry.js";
+/**
+ * The key of a principal: its canonical JSON, or `customKey(principal)`. Cached per principal object; a custom key's
+ * cache is keyed by the function too, so a live principal never retains a dropped function.
+ */
+export function principalKey(principal, context, customKey) {
+    const cache = customKey === undefined ? defaultKeys : customKeyCache(customKey);
+    let key = cache.get(principal);
+    if (key === undefined) {
+        key = customKey === undefined ? canonicalJson(principal, context) : customKey(principal);
+        cache.set(principal, key);
+    }
+    return key;
+}
+const defaultKeys = new WeakMap();
+const customKeys = new WeakMap();
+function customKeyCache(customKey) {
+    let cache = customKeys.get(customKey);
+    if (cache === undefined) {
+        cache = new WeakMap();
+        customKeys.set(customKey, cache);
+    }
+    return cache;
+}
+/** Canonical JSON: sorted object keys, `-0` written as `0`. Counts one walk. */
+export function canonicalJson(value, context) {
+    chordMetrics(context.telemetry.metrics).counter("chord.data.walks").add(1);
+    return canonical(value);
+}
+function canonical(value) {
+    // JSON.stringify writes -0 as 0.
+    if (value === null || typeof value !== "object")
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(",")}]`;
+    const fields = Object.keys(value)
+        .sort()
+        .map((key) => `${JSON.stringify(key)}:${canonical(value[key])}`);
+    return `{${fields.join(",")}}`;
+}
+/**
+ * Whether `principal` is `other`: the same default key (canonical JSON), each computed once per principal object; no
+ * principal (`undefined`) is none.
+ */
+export function samePrincipal(principal, other, context) {
+    return principal !== undefined && principalKey(principal, context) === principalKey(other, context);
+}
+//# sourceMappingURL=principal.js.map

package/dist/data/principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.js","sourceRoot":"","sources":["../../src/data/principal.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAIjF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAQ/C;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC3B,SAAY,EACZ,OAAgB,EAChB,SAAmC;IAEnC,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAChF,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvB,GAAG,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACzF,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,WAAW,GAAG,IAAI,OAAO,EAAqB,CAAC;AAErD,MAAM,UAAU,GAAG,IAAI,OAAO,EAA2D,CAAC;AAE1F,SAAS,cAAc,CAAC,SAAsC;IAC7D,IAAI,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,GAAG,IAAI,OAAO,EAAE,CAAC;QACtB,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,KAAgB,EAAE,OAAgB;IAC/D,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,SAAS,CAAC,KAAgB;IAClC,iCAAiC;IACjC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAC/B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC,CAAC;IACnE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,SAAgC,EAAE,KAAgB,EAAE,OAAgB;IACjG,OAAO,SAAS,KAAK,SAAS,IAAI,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACrG,CAAC","sourcesContent":["// Principals: the app's caller identities, and the keys Chord derives from them.\n\nimport type { Context } from \"../context/index.ts\";\nimport type { JsonValue } from \"../json.ts\";\nimport { chordMetrics } from \"../telemetry.ts\";\n\n/** An app's principal: plain JSON with a `kind`. Chord never persists it. */\nexport type Principal = { readonly kind: string; readonly [field: string]: JsonValue };\n\n/** An app's own principal key; it must be the same function on every host. */\nexport type PrincipalKeyFunction<P extends Principal = Principal> = (principal: P) => string;\n\n/**\n * The key of a principal: its canonical JSON, or `customKey(principal)`. Cached per principal object; a custom key's\n * cache is keyed by the function too, so a live principal never retains a dropped function.\n */\nexport function principalKey<P extends Principal>(\n\tprincipal: P,\n\tcontext: Context,\n\tcustomKey?: PrincipalKeyFunction<P>,\n): string {\n\tconst cache = customKey === undefined ? defaultKeys : customKeyCache(customKey);\n\tlet key = cache.get(principal);\n\tif (key === undefined) {\n\t\tkey = customKey === undefined ? canonicalJson(principal, context) : customKey(principal);\n\t\tcache.set(principal, key);\n\t}\n\treturn key;\n}\n\nconst defaultKeys = new WeakMap<Principal, string>();\n\nconst customKeys = new WeakMap<PrincipalKeyFunction<never>, WeakMap<Principal, string>>();\n\nfunction customKeyCache(customKey: PrincipalKeyFunction<never>): WeakMap<Principal, string> {\n\tlet cache = customKeys.get(customKey);\n\tif (cache === undefined) {\n\t\tcache = new WeakMap();\n\t\tcustomKeys.set(customKey, cache);\n\t}\n\treturn cache;\n}\n\n/** Canonical JSON: sorted object keys, `-0` written as `0`. Counts one walk. */\nexport function canonicalJson(value: JsonValue, context: Context): string {\n\tchordMetrics(context.telemetry.metrics).counter(\"chord.data.walks\").add(1);\n\treturn canonical(value);\n}\n\nfunction canonical(value: JsonValue): string {\n\t// JSON.stringify writes -0 as 0.\n\tif (value === null || typeof value !== \"object\") return JSON.stringify(value);\n\tif (Array.isArray(value)) return `[${value.map(canonical).join(\",\")}]`;\n\tconst fields = Object.keys(value)\n\t\t.sort()\n\t\t.map((key) => `${JSON.stringify(key)}:${canonical(value[key]!)}`);\n\treturn `{${fields.join(\",\")}}`;\n}\n\n/**\n * Whether `principal` is `other`: the same default key (canonical JSON), each computed once per principal object; no\n * principal (`undefined`) is none.\n */\nexport function samePrincipal(principal: Principal | undefined, other: Principal, context: Context): boolean {\n\treturn principal !== undefined && principalKey(principal, context) === principalKey(other, context);\n}\n"]}

package/dist/data/validator.d.ts

@@ -0,0 +1,12 @@
+import { type JsonSchema, type Validator } from "@earendil-works/pi-schema";
+import type { Context } from "../context/index.ts";
+/** A Chord-owned record holding a schema: a snapshot, or a contract's params. */
+type SchemaOwner = {
+    readonly schema: JsonSchema;
+};
+/** The validator of an owner's schema, compiled on first use (counted) and cached weakly by the owner. */
+export declare function validatorFor(owner: SchemaOwner, context: Context): Validator;
+/** Checks `value` (counted); a failure throws `invalid/<reason>` with the first error's JSON Pointer path. */
+export declare function check(validator: Validator, value: unknown, reason: "args" | "params" | "host_address", context: Context): void;
+export {};
+//# sourceMappingURL=validator.d.ts.map

package/dist/data/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/data/validator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAW,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAInD,iFAAiF;AACjF,KAAK,WAAW,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC;AAEnD,0GAA0G;AAC1G,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,SAAS,CAS5E;AAID,8GAA8G;AAC9G,wBAAgB,KAAK,CACpB,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,cAAc,EAC1C,OAAO,EAAE,OAAO,GACd,IAAI,CAGN"}

package/dist/data/validator.js

@@ -0,0 +1,35 @@
+// Compiled checks: pi-schema validators of Chord-owned schemas, and the `invalid` error of a failed check.
+import { compile } from "@earendil-works/pi-schema";
+import { chordMetrics } from "../telemetry.js";
+import { invalid } from "./errors.js";
+/** The validator of an owner's schema, compiled on first use (counted) and cached weakly by the owner. */
+export function validatorFor(owner, context) {
+    let validator = validators.get(owner);
+    if (validator === undefined) {
+        chordMetrics(context.telemetry.metrics).counter("chord.data.compilations").add(1);
+        // `format` is an annotation (decided for the schema switch): no format checks are compiled in.
+        validator = compile(owner.schema);
+        validators.set(owner, validator);
+    }
+    return validator;
+}
+const validators = new WeakMap();
+/** Checks `value` (counted); a failure throws `invalid/<reason>` with the first error's JSON Pointer path. */
+export function check(validator, value, reason, context) {
+    chordMetrics(context.telemetry.metrics).counter("chord.data.validations").add(1);
+    if (!validator.check(value))
+        throw failedCheck(validator, value, reason, context);
+}
+/**
+ * The error of a failed check: the first error of the validator's explanation (counted: it walks the schema). A
+ * missing field is reported at the field ("missing"), an unknown one at its own path ("unknown field"); the value
+ * itself at `/`.
+ */
+function failedCheck(validator, value, reason, context) {
+    chordMetrics(context.telemetry.metrics).counter("chord.data.walks").add(1);
+    // A value that failed the check has at least one error.
+    const error = validator.errors(value)[0];
+    const path = error.path || "/";
+    return invalid(reason, `${reason}${path === "/" ? "" : path}: ${error.message}`, { path });
+}
+//# sourceMappingURL=validator.js.map

package/dist/data/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/data/validator.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAE3G,OAAO,EAAE,OAAO,EAAmC,MAAM,2BAA2B,CAAC;AAErF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAmB,OAAO,EAAE,MAAM,aAAa,CAAC;AAKvD,0GAA0G;AAC1G,MAAM,UAAU,YAAY,CAAC,KAAkB,EAAE,OAAgB;IAChE,IAAI,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7B,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,+FAA+F;QAC/F,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,OAAO,EAA0B,CAAC;AAEzD,8GAA8G;AAC9G,MAAM,UAAU,KAAK,CACpB,SAAoB,EACpB,KAAc,EACd,MAA0C,EAC1C,OAAgB;IAEhB,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CACnB,SAAoB,EACpB,KAAc,EACd,MAA0C,EAC1C,OAAgB;IAEhB,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3E,wDAAwD;IACxD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC;IAC/B,OAAO,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5F,CAAC","sourcesContent":["// Compiled checks: pi-schema validators of Chord-owned schemas, and the `invalid` error of a failed check.\n\nimport { compile, type JsonSchema, type Validator } from \"@earendil-works/pi-schema\";\nimport type { Context } from \"../context/index.ts\";\nimport { chordMetrics } from \"../telemetry.ts\";\nimport { type ChordError, invalid } from \"./errors.ts\";\n\n/** A Chord-owned record holding a schema: a snapshot, or a contract's params. */\ntype SchemaOwner = { readonly schema: JsonSchema };\n\n/** The validator of an owner's schema, compiled on first use (counted) and cached weakly by the owner. */\nexport function validatorFor(owner: SchemaOwner, context: Context): Validator {\n\tlet validator = validators.get(owner);\n\tif (validator === undefined) {\n\t\tchordMetrics(context.telemetry.metrics).counter(\"chord.data.compilations\").add(1);\n\t\t// `format` is an annotation (decided for the schema switch): no format checks are compiled in.\n\t\tvalidator = compile(owner.schema);\n\t\tvalidators.set(owner, validator);\n\t}\n\treturn validator;\n}\n\nconst validators = new WeakMap<SchemaOwner, Validator>();\n\n/** Checks `value` (counted); a failure throws `invalid/<reason>` with the first error's JSON Pointer path. */\nexport function check(\n\tvalidator: Validator,\n\tvalue: unknown,\n\treason: \"args\" | \"params\" | \"host_address\",\n\tcontext: Context,\n): void {\n\tchordMetrics(context.telemetry.metrics).counter(\"chord.data.validations\").add(1);\n\tif (!validator.check(value)) throw failedCheck(validator, value, reason, context);\n}\n\n/**\n * The error of a failed check: the first error of the validator's explanation (counted: it walks the schema). A\n * missing field is reported at the field (\"missing\"), an unknown one at its own path (\"unknown field\"); the value\n * itself at `/`.\n */\nfunction failedCheck(\n\tvalidator: Validator,\n\tvalue: unknown,\n\treason: \"args\" | \"params\" | \"host_address\",\n\tcontext: Context,\n): ChordError {\n\tchordMetrics(context.telemetry.metrics).counter(\"chord.data.walks\").add(1);\n\t// A value that failed the check has at least one error.\n\tconst error = validator.errors(value)[0]!;\n\tconst path = error.path || \"/\";\n\treturn invalid(reason, `${reason}${path === \"/\" ? \"\" : path}: ${error.message}`, { path });\n}\n"]}

package/dist/delta/apply-immutable-trusted.js

@@ -87,10 +87,9 @@ function copyPath(root, path, length, owned) {
 function shallowCopy(value) {
     if (Array.isArray(value))
         return Array.from(value);
-    const result = Object.create(Object.getPrototypeOf(value) === null ? null : Object.prototype);
-    for (const key of Object.keys(value))
-        defineData(result, key, value[key]);
-    return result;
+    // Spread and `Object.assign()` onto a null-prototype object define own data properties, `__proto__` included, as
+    // `defineData()` per key does, at a fraction of its cost.
+    return Object.getPrototypeOf(value) === null ? Object.assign(Object.create(null), value) : { ...value };
 }
 function read(target, key) {
     return target[key];

package/dist/delta/apply-immutable-trusted.js.map

@@ -1 +1 @@
-{"version":3,"file":"apply-immutable-trusted.js","sourceRoot":"","sources":["../../src/delta/apply-immutable-trusted.ts"],"names":[],"mappings":"AAMA,MAAM,eAAe,GAAuB;IAC3C,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,IAAI;IAChB,YAAY,EAAE,IAAI;CAClB,CAAC;AAEF,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAI,MAAS,EAAE,UAAyB;IAC5E,IAAI,IAAI,GAAG,MAA8B,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,OAAO,EAAU,CAAC;IACpC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1B,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACpB,SAAS;QACV,CAAC;QACD,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACxE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;YACzG,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;gBAC5F,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,SAAS;QACV,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAC5D,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QACnC,QAAQ,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,KAAK,GAAG;gBACP,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,MAAM;YACP,KAAK,GAAG;gBACP,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,IAAI,OAAO,GAAG,KAAK,QAAQ;wBAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;oBAC9F,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1C,CAAC;;oBAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAClD,MAAM;YACP,KAAK,GAAG,EAAE,CAAC;gBACV,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACzC,IAAI,OAAO,OAAO,KAAK,QAAQ;oBAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;gBAC9F,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5D,MAAM;YACP,CAAC;YACD,KAAK,GAAG,EAAE,CAAC;gBACV,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACzC,IAAI,OAAO,OAAO,KAAK,QAAQ;oBAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;gBAChG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5D,MAAM;YACP,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,IAAoB,CAAC;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAe,EAAE,IAAU,EAAE,MAAc,EAAE,KAAsB;IACpF,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACzF,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,WAAW,GAAG,UAA2B,CAAC;IAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QAC1F,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,WAAW,GAAG,KAAK,CAAC;YACpB,SAAS;QACV,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAChC,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACvC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,WAAW,GAAG,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,WAAW,CAAC,KAAoB;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAG3F,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAE,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,MAAqB,EAAE,GAAQ;IAC5C,OAAQ,MAAiC,CAAC,GAAG,CAAE,CAAC;AACjD,CAAC;AAED,SAAS,UAAU,CAAC,MAAqB,EAAE,GAAQ,EAAE,KAAgB;IACpE,eAAe,CAAC,KAAK,GAAG,KAAK,CAAC;IAC9B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IACpD,eAAe,CAAC,KAAK,GAAG,SAAS,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,MAAmB,EAAE,KAAa,EAAE,MAAc,EAAE,KAA2B;IACrG,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IACpC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,GAAG,SAAS,GAAG,KAAK,CAAC;QAClC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,SAAS,CAAC,CAAC;IACpE,CAAC;SAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,SAAS,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,GAAG,SAAS,GAAG,KAAK,CAAC;IACnC,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE;QAAE,UAAU,CAAC,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,cAAc,CAAC,MAAmB,EAAE,WAA8B;IAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACrG,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAE,CAAE,CAAC;AACzG,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IAClC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AACpD,CAAC","sourcesContent":["import type { JsonValue } from \"../json.ts\";\nimport type { Op, Path, Seg } from \"./index.ts\";\n\ntype JsonContainer = JsonValue[] | Record<string, JsonValue>;\ntype CopiedPath = { root: JsonValue; target: JsonContainer };\n\nconst DATA_DESCRIPTOR: PropertyDescriptor = {\n\tvalue: undefined,\n\twritable: true,\n\tenumerable: true,\n\tconfigurable: true,\n};\n\n/** Apply self-produced trusted operations while copying each touched container once. */\nexport function applyImmutableTrusted<T>(target: T, operations: readonly Op[]): T {\n\tlet root = target as unknown as JsonValue;\n\tconst owned = new WeakSet<object>();\n\tfor (const operation of operations) {\n\t\tif (operation[0] === \"r\") {\n\t\t\troot = operation[1];\n\t\t\tcontinue;\n\t\t}\n\t\tif (operation[0] === \"p\" || operation[0] === \"m\") {\n\t\t\tconst copied = copyPath(root, operation[1], operation[1].length, owned);\n\t\t\troot = copied.root;\n\t\t\tif (!Array.isArray(copied.target)) throw new TypeError(\"Trusted array operation target is not an array\");\n\t\t\tif (operation[0] === \"p\") spliceTrusted(copied.target, operation[2], operation[3], operation[4]);\n\t\t\telse permuteTrusted(copied.target, operation[2]);\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst path = operation[1];\n\t\tconst copied = copyPath(root, path, path.length - 1, owned);\n\t\troot = copied.root;\n\t\tconst key = path[path.length - 1]!;\n\t\tswitch (operation[0]) {\n\t\t\tcase \"s\":\n\t\t\t\tdefineData(copied.target, key, operation[2]);\n\t\t\t\tbreak;\n\t\t\tcase \"d\":\n\t\t\t\tif (Array.isArray(copied.target)) {\n\t\t\t\t\tif (typeof key !== \"number\") throw new TypeError(\"Trusted array deletion key is not numeric\");\n\t\t\t\t\tspliceTrusted(copied.target, key, 1, []);\n\t\t\t\t} else Reflect.deleteProperty(copied.target, key);\n\t\t\t\tbreak;\n\t\t\tcase \"a\": {\n\t\t\t\tconst current = read(copied.target, key);\n\t\t\t\tif (typeof current !== \"string\") throw new TypeError(\"Trusted append target is not a string\");\n\t\t\t\tdefineData(copied.target, key, `${current}${operation[2]}`);\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase \"t\": {\n\t\t\t\tconst current = read(copied.target, key);\n\t\t\t\tif (typeof current !== \"string\") throw new TypeError(\"Trusted truncate target is not a string\");\n\t\t\t\tdefineData(copied.target, key, current.slice(operation[2]));\n\t\t\t\tbreak;\n\t\t\t}\n\t\t}\n\t}\n\treturn root as unknown as T;\n}\n\nfunction copyPath(root: JsonValue, path: Path, length: number, owned: WeakSet<object>): CopiedPath {\n\tif (!isContainer(root)) throw new TypeError(\"Trusted operation root is not a container\");\n\tlet copiedRoot = root;\n\tif (!owned.has(root)) {\n\t\tcopiedRoot = shallowCopy(root);\n\t\towned.add(copiedRoot);\n\t}\n\tlet destination = copiedRoot as JsonContainer;\n\tfor (let index = 0; index < length; index++) {\n\t\tconst segment = path[index]!;\n\t\tconst child = read(destination, segment);\n\t\tif (!isContainer(child)) throw new TypeError(\"Trusted operation path is not a container\");\n\t\tif (owned.has(child)) {\n\t\t\tdestination = child;\n\t\t\tcontinue;\n\t\t}\n\t\tconst copy = shallowCopy(child);\n\t\tdefineData(destination, segment, copy);\n\t\towned.add(copy);\n\t\tdestination = copy;\n\t}\n\treturn { root: copiedRoot, target: destination };\n}\n\nfunction shallowCopy(value: JsonContainer): JsonContainer {\n\tif (Array.isArray(value)) return Array.from(value);\n\tconst result = Object.create(Object.getPrototypeOf(value) === null ? null : Object.prototype) as Record<\n\t\tstring,\n\t\tJsonValue\n\t>;\n\tfor (const key of Object.keys(value)) defineData(result, key, value[key]!);\n\treturn result;\n}\n\nfunction read(target: JsonContainer, key: Seg): JsonValue {\n\treturn (target as Record<Seg, JsonValue>)[key]!;\n}\n\nfunction defineData(target: JsonContainer, key: Seg, value: JsonValue): void {\n\tDATA_DESCRIPTOR.value = value;\n\tObject.defineProperty(target, key, DATA_DESCRIPTOR);\n\tDATA_DESCRIPTOR.value = undefined;\n}\n\nfunction spliceTrusted(target: JsonValue[], start: number, remove: number, items: readonly JsonValue[]): void {\n\tconst oldLength = target.length;\n\tconst delta = items.length - remove;\n\tif (delta > 0) {\n\t\ttarget.length = oldLength + delta;\n\t\ttarget.copyWithin(start + items.length, start + remove, oldLength);\n\t} else if (delta < 0) {\n\t\ttarget.copyWithin(start + items.length, start + remove, oldLength);\n\t\ttarget.length = oldLength + delta;\n\t}\n\tfor (let index = 0; index < items.length; index++) defineData(target, start + index, items[index]!);\n}\n\nfunction permuteTrusted(target: JsonValue[], permutation: readonly number[]): void {\n\tif (target.length !== permutation.length) throw new TypeError(\"Trusted permutation length mismatch\");\n\tconst previous = target.slice();\n\tfor (let index = 0; index < permutation.length; index++) target[index] = previous[permutation[index]!]!;\n}\n\nfunction isContainer(value: unknown): value is JsonContainer {\n\treturn value !== null && typeof value === \"object\";\n}\n"]}
+{"version":3,"file":"apply-immutable-trusted.js","sourceRoot":"","sources":["../../src/delta/apply-immutable-trusted.ts"],"names":[],"mappings":"AAMA,MAAM,eAAe,GAAuB;IAC3C,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,IAAI;IAChB,YAAY,EAAE,IAAI;CAClB,CAAC;AAEF,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAI,MAAS,EAAE,UAAyB;IAC5E,IAAI,IAAI,GAAG,MAA8B,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,OAAO,EAAU,CAAC;IACpC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1B,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACpB,SAAS;QACV,CAAC;QACD,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACxE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;YACzG,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;gBAC5F,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,SAAS;QACV,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAC5D,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QACnC,QAAQ,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,KAAK,GAAG;gBACP,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,MAAM;YACP,KAAK,GAAG;gBACP,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,IAAI,OAAO,GAAG,KAAK,QAAQ;wBAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;oBAC9F,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1C,CAAC;;oBAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAClD,MAAM;YACP,KAAK,GAAG,EAAE,CAAC;gBACV,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACzC,IAAI,OAAO,OAAO,KAAK,QAAQ;oBAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;gBAC9F,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5D,MAAM;YACP,CAAC;YACD,KAAK,GAAG,EAAE,CAAC;gBACV,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACzC,IAAI,OAAO,OAAO,KAAK,QAAQ;oBAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;gBAChG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5D,MAAM;YACP,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,IAAoB,CAAC;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAe,EAAE,IAAU,EAAE,MAAc,EAAE,KAAsB;IACpF,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACzF,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,WAAW,GAAG,UAA2B,CAAC;IAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QAC1F,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,WAAW,GAAG,KAAK,CAAC;YACpB,SAAS;QACV,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAChC,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACvC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,WAAW,GAAG,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,WAAW,CAAC,KAAoB;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,iHAAiH;IACjH,0DAA0D;IAC1D,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;AACzG,CAAC;AAED,SAAS,IAAI,CAAC,MAAqB,EAAE,GAAQ;IAC5C,OAAQ,MAAiC,CAAC,GAAG,CAAE,CAAC;AACjD,CAAC;AAED,SAAS,UAAU,CAAC,MAAqB,EAAE,GAAQ,EAAE,KAAgB;IACpE,eAAe,CAAC,KAAK,GAAG,KAAK,CAAC;IAC9B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IACpD,eAAe,CAAC,KAAK,GAAG,SAAS,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,MAAmB,EAAE,KAAa,EAAE,MAAc,EAAE,KAA2B;IACrG,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IACpC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,GAAG,SAAS,GAAG,KAAK,CAAC;QAClC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,SAAS,CAAC,CAAC;IACpE,CAAC;SAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,SAAS,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,GAAG,SAAS,GAAG,KAAK,CAAC;IACnC,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE;QAAE,UAAU,CAAC,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,cAAc,CAAC,MAAmB,EAAE,WAA8B;IAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACrG,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAE,CAAE,CAAC;AACzG,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IAClC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AACpD,CAAC","sourcesContent":["import type { JsonValue } from \"../json.ts\";\nimport type { Op, Path, Seg } from \"./index.ts\";\n\ntype JsonContainer = JsonValue[] | Record<string, JsonValue>;\ntype CopiedPath = { root: JsonValue; target: JsonContainer };\n\nconst DATA_DESCRIPTOR: PropertyDescriptor = {\n\tvalue: undefined,\n\twritable: true,\n\tenumerable: true,\n\tconfigurable: true,\n};\n\n/** Apply self-produced trusted operations while copying each touched container once. */\nexport function applyImmutableTrusted<T>(target: T, operations: readonly Op[]): T {\n\tlet root = target as unknown as JsonValue;\n\tconst owned = new WeakSet<object>();\n\tfor (const operation of operations) {\n\t\tif (operation[0] === \"r\") {\n\t\t\troot = operation[1];\n\t\t\tcontinue;\n\t\t}\n\t\tif (operation[0] === \"p\" || operation[0] === \"m\") {\n\t\t\tconst copied = copyPath(root, operation[1], operation[1].length, owned);\n\t\t\troot = copied.root;\n\t\t\tif (!Array.isArray(copied.target)) throw new TypeError(\"Trusted array operation target is not an array\");\n\t\t\tif (operation[0] === \"p\") spliceTrusted(copied.target, operation[2], operation[3], operation[4]);\n\t\t\telse permuteTrusted(copied.target, operation[2]);\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst path = operation[1];\n\t\tconst copied = copyPath(root, path, path.length - 1, owned);\n\t\troot = copied.root;\n\t\tconst key = path[path.length - 1]!;\n\t\tswitch (operation[0]) {\n\t\t\tcase \"s\":\n\t\t\t\tdefineData(copied.target, key, operation[2]);\n\t\t\t\tbreak;\n\t\t\tcase \"d\":\n\t\t\t\tif (Array.isArray(copied.target)) {\n\t\t\t\t\tif (typeof key !== \"number\") throw new TypeError(\"Trusted array deletion key is not numeric\");\n\t\t\t\t\tspliceTrusted(copied.target, key, 1, []);\n\t\t\t\t} else Reflect.deleteProperty(copied.target, key);\n\t\t\t\tbreak;\n\t\t\tcase \"a\": {\n\t\t\t\tconst current = read(copied.target, key);\n\t\t\t\tif (typeof current !== \"string\") throw new TypeError(\"Trusted append target is not a string\");\n\t\t\t\tdefineData(copied.target, key, `${current}${operation[2]}`);\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase \"t\": {\n\t\t\t\tconst current = read(copied.target, key);\n\t\t\t\tif (typeof current !== \"string\") throw new TypeError(\"Trusted truncate target is not a string\");\n\t\t\t\tdefineData(copied.target, key, current.slice(operation[2]));\n\t\t\t\tbreak;\n\t\t\t}\n\t\t}\n\t}\n\treturn root as unknown as T;\n}\n\nfunction copyPath(root: JsonValue, path: Path, length: number, owned: WeakSet<object>): CopiedPath {\n\tif (!isContainer(root)) throw new TypeError(\"Trusted operation root is not a container\");\n\tlet copiedRoot = root;\n\tif (!owned.has(root)) {\n\t\tcopiedRoot = shallowCopy(root);\n\t\towned.add(copiedRoot);\n\t}\n\tlet destination = copiedRoot as JsonContainer;\n\tfor (let index = 0; index < length; index++) {\n\t\tconst segment = path[index]!;\n\t\tconst child = read(destination, segment);\n\t\tif (!isContainer(child)) throw new TypeError(\"Trusted operation path is not a container\");\n\t\tif (owned.has(child)) {\n\t\t\tdestination = child;\n\t\t\tcontinue;\n\t\t}\n\t\tconst copy = shallowCopy(child);\n\t\tdefineData(destination, segment, copy);\n\t\towned.add(copy);\n\t\tdestination = copy;\n\t}\n\treturn { root: copiedRoot, target: destination };\n}\n\nfunction shallowCopy(value: JsonContainer): JsonContainer {\n\tif (Array.isArray(value)) return Array.from(value);\n\t// Spread and `Object.assign()` onto a null-prototype object define own data properties, `__proto__` included, as\n\t// `defineData()` per key does, at a fraction of its cost.\n\treturn Object.getPrototypeOf(value) === null ? Object.assign(Object.create(null), value) : { ...value };\n}\n\nfunction read(target: JsonContainer, key: Seg): JsonValue {\n\treturn (target as Record<Seg, JsonValue>)[key]!;\n}\n\nfunction defineData(target: JsonContainer, key: Seg, value: JsonValue): void {\n\tDATA_DESCRIPTOR.value = value;\n\tObject.defineProperty(target, key, DATA_DESCRIPTOR);\n\tDATA_DESCRIPTOR.value = undefined;\n}\n\nfunction spliceTrusted(target: JsonValue[], start: number, remove: number, items: readonly JsonValue[]): void {\n\tconst oldLength = target.length;\n\tconst delta = items.length - remove;\n\tif (delta > 0) {\n\t\ttarget.length = oldLength + delta;\n\t\ttarget.copyWithin(start + items.length, start + remove, oldLength);\n\t} else if (delta < 0) {\n\t\ttarget.copyWithin(start + items.length, start + remove, oldLength);\n\t\ttarget.length = oldLength + delta;\n\t}\n\tfor (let index = 0; index < items.length; index++) defineData(target, start + index, items[index]!);\n}\n\nfunction permuteTrusted(target: JsonValue[], permutation: readonly number[]): void {\n\tif (target.length !== permutation.length) throw new TypeError(\"Trusted permutation length mismatch\");\n\tconst previous = target.slice();\n\tfor (let index = 0; index < permutation.length; index++) target[index] = previous[permutation[index]!]!;\n}\n\nfunction isContainer(value: unknown): value is JsonContainer {\n\treturn value !== null && typeof value === \"object\";\n}\n"]}

package/dist/delta/diff.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/delta/diff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAqB,KAAK,EAAE,EAAmD,MAAM,YAAY,CAAC;AA8fzG,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,GAAG,EAAE,EAAE,CAUvE"}
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/delta/diff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAqB,KAAK,EAAE,EAA+D,MAAM,YAAY,CAAC;AAggBrH,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,GAAG,EAAE,EAAE,CAUvE"}

package/dist/delta/diff.js

@@ -1,4 +1,4 @@
-import { overlap, RESERVED_SEGMENTS } from "./index.js";
+import { overlap, ownedSlice, RESERVED_SEGMENTS } from "./index.js";
 const DEFAULT_OVERLAP_SCAN = 65_536;
 const MAX_DELTA_OPERATIONS = 4_096;
 const overflowedBatches = new WeakSet();
@@ -64,11 +64,13 @@ const permutation = (before, after) => {
     }
     return result;
 };
+// O(length): comparing two revisions reads both strings, and slicing a rope makes V8 flatten all of it. A writer that
+// knows what it appended records it with appendText() instead of diffing.
 const emitString = (before, after, path, operations) => {
     if (before === after)
         return;
     if (after.length > before.length && after.slice(0, before.length) === before) {
-        emitOperation(operations, ["a", path, after.slice(before.length)]);
+        emitOperation(operations, ["a", path, ownedSlice(after, before.length)]);
         return;
     }
     const shared = overlap(before, after, DEFAULT_OVERLAP_SCAN);
@@ -78,7 +80,7 @@ const emitString = (before, after, path, operations) => {
     }
     emitOperation(operations, ["t", path, before.length - shared]);
     if (after.length > shared)
-        emitOperation(operations, ["a", path, after.slice(shared)]);
+        emitOperation(operations, ["a", path, ownedSlice(after, shared)]);
 };
 const MAX_IDENTITY_CANDIDATES = 200_000;
 const MAX_SEMANTIC_CELLS = 65_536;