@earendil-works/chord 1.5.0 → 1.5.1

package/dist/host/staging.js

@@ -0,0 +1,304 @@
+// Staging (slice 7b §2; per plugin, decision "Per plugin at startup and reload"): each plugin's setup runs into a table of
+// its own (the types it serves with their providers, the registries it serves, its facet contributions) with `load`'s
+// checks, merged into the staged table beside the live one, where a type or registry another plugin serves already
+// fails the plugin; and an object's new factory run against a recording `self`, which keeps what the factory declares
+// (documents, tables, jobs, contributions, requests with their contract versions) and activates, binds and opens
+// nothing, so a reload decides which plugins keep their old code before its commit, and a restart knows the requests
+// its successor will make (its readiness).
+// `load` stages its facets the same way and publishes them.
+import { contractData } from "../contracts/internal.js";
+import { bindProvider, checkParams } from "../data/internal.js";
+import { checkProvider } from "../registries/internal.js";
+import { checkLiveQuery } from "../store/live-query.js";
+import { tableSqlName } from "../store/sql.js";
+import { setUp } from "./facet.js";
+import { retrySource } from "./retry-on.js";
+/** An npm package name, scoped or not. */
+const PLUGIN_NAME = /^(?:@[a-z0-9~-][a-z0-9._~-]*\/)?[a-z0-9~-][a-z0-9._~-]*$/;
+/** Whether `name` is a valid plugin name: an npm package name, scoped or not (the plugins component checks it too). */
+export function isPluginName(name) {
+    return PLUGIN_NAME.test(name);
+}
+/**
+ * Throws for the first plugin of `facets` whose name is no npm package name: a programming error, so `load` and
+ * `reload` throw before they change anything (decision "Mistakes that wait are reported at once" (d)).
+ */
+export function checkPluginNames(facets) {
+    for (const { name } of facets)
+        if (!isPluginName(name))
+            throw new Error(`"${name}" is not a valid plugin name`);
+}
+/** A staged table with nothing in it. */
+export function emptyStaged() {
+    return { types: new Map(), registries: new Map(), plugins: new Map() };
+}
+/**
+ * Runs one plugin's setup (its name checked by `checkPluginNames` before) and checks what it declared: a type or
+ * registry it serves twice, a remote type on a host without a principal or address, every provider's `accepts`
+ * (`checkAccepts`) and every registry provider's shape. Throws the first error, naming the plugin.
+ */
+export function stagePlugin({ name, facet }, host) {
+    // The host's presence lists are typed for its `P`.
+    const references = host.references;
+    const types = new Map();
+    const registries = new Map();
+    try {
+        const { served, contributions } = setUp(name, facet, references);
+        for (const entry of served)
+            stageEntry(name, entry, types, registries, host);
+        return { name, types, registries, contributions };
+    }
+    catch (error) {
+        throw named(error, `plugin "${name}"`);
+    }
+}
+/**
+ * Merges `plugin` into `staged`; a type or registry another plugin serves there already refuses it (its error
+ * returned, nothing merged).
+ */
+export function addStaged(staged, plugin) {
+    for (const name of plugin.types.keys()) {
+        const other = staged.types.get(name);
+        if (other !== undefined)
+            return new Error(`plugin "${plugin.name}": ${name} is served twice (plugin "${other.plugin}")`);
+    }
+    for (const name of plugin.registries.keys()) {
+        const other = staged.registries.get(name);
+        if (other !== undefined) {
+            return new Error(`plugin "${plugin.name}": registry ${name} is served twice (plugin "${other.plugin}")`);
+        }
+    }
+    for (const [name, served] of plugin.types)
+        staged.types.set(name, served);
+    for (const [name, registry] of plugin.registries)
+        staged.registries.set(name, registry);
+    staged.plugins.set(plugin.name, plugin);
+    return undefined;
+}
+/** Stages one served entry of `plugin` into its tables: a registry's provider, or a type as `Served`. */
+function stageEntry(plugin, entry, types, registries, host) {
+    if (entry.kind === "registry") {
+        const { registry, provider } = entry;
+        if (registries.has(registry.name))
+            throw new Error(`registry ${registry.name} is served twice`);
+        checkProvider(registry.name, provider);
+        registries.set(registry.name, { plugin, registry, provider });
+        return;
+    }
+    const { contract, factory, options } = entry;
+    if (types.has(contract.name))
+        throw new Error(`${contract.name} is served twice`);
+    // A client serves only local types (§3): a remote object is owned by a principal of the host serving it.
+    if (contract.kind === "remote" && host.principal === undefined) {
+        throw new Error(`${contract.name}: a host without a principal serves only local types`);
+    }
+    // A remote object lives on the host its `hostAddress` names: only a host with an address can be that host.
+    if (contract.kind === "remote" && host.address === undefined) {
+        throw new Error(`${contract.name}: a host without an address serves only local types`);
+    }
+    const provider = bindProvider(contract, options.accepts ?? {});
+    const common = { plugin, provider, linger: options.linger ?? 0, traced: options.untraced !== true };
+    // The contract's kind decides the factory's signature and the contract's shape.
+    const served = contract.kind === "local"
+        ? {
+            ...common,
+            kind: "local",
+            contract: contract,
+            factory: factory,
+            hostLifetime: contractData(contract).params.fields.length === 0,
+        }
+        : {
+            ...common,
+            kind: "remote",
+            contract: contract,
+            factory: factory,
+        };
+    types.set(contract.name, served);
+}
+/**
+ * Runs `served`'s factory for `object` (its params and principal) against a recording `self` and returns what it
+ * declared. Every declaration check an attempt makes runs, without effects (declared twice; persisted data in a type
+ * without a stable identity, on a host without a store, or claimed by another owner; contributions outside
+ * host-lifetime objects, or twice; `retryOn` sources that do not outlive the attempt; params; a document or job
+ * declared at an older version than the object's, or at its version with another schema); a throw is the factory's.
+ * Handles it hands out are inert, except registry values (the host's own, which `retryOn` checks by kind).
+ */
+export function recordFactory(object, served, context) {
+    const recording = new RecordingSelf(object, served, context);
+    // A recording `self` takes every declaration a factory makes, its handles inert.
+    const self = recording;
+    try {
+        if (served.kind === "local")
+            served.factory(object.params, self);
+        // A remote object's identity has its principal.
+        else
+            served.factory(object.params, object.principal, self);
+    }
+    catch (error) {
+        throw named(error, `plugin "${served.plugin}", ${object.label}`);
+    }
+    finally {
+        recording.declaring = false;
+    }
+    return recording.recorded;
+}
+/** A staging error naming where it happened (`what`): its message prefixed, the error itself its cause. */
+function named(error, what) {
+    const message = error instanceof Error ? error.message : String(error);
+    return new Error(`${what}: ${message}`, { cause: error });
+}
+/**
+ * The value of every handle a recording `self` hands out: any property or call gives it again, and it is never a
+ * thenable. Typed `never` (a cast: it stands for every handle type, and nothing reads it as one).
+ */
+const INERT = new Proxy(() => { }, {
+    get: (_target, property) => (property === "then" ? undefined : INERT),
+    apply: () => INERT,
+});
+/** A factory's `self` during staging: it records declarations and checks them; it activates nothing. */
+class RecordingSelf {
+    declaring = true;
+    #object;
+    #served;
+    #context;
+    #documents = new Map();
+    #tables = new Map();
+    #jobs = new Map();
+    #contributions = new Map();
+    #requests = [];
+    constructor(object, served, context) {
+        this.#object = object;
+        this.#served = served;
+        this.#context = context;
+    }
+    get recorded() {
+        return {
+            documents: [...this.#documents.values()],
+            tables: [...this.#tables.values()],
+            jobs: [...this.#jobs.values()],
+            contributions: [...this.#contributions.values()],
+            requests: this.#requests,
+        };
+    }
+    state(definition) {
+        this.#assertDeclaring("state");
+        const what = `state "${definition.name}"`;
+        if (this.#documents.has(definition.name))
+            throw new Error(`${this.#object.label}: ${what} is declared twice`);
+        if (definition.persist)
+            this.#assertClaimable(what, ["chord"]);
+        this.#object.documents.check(definition);
+        this.#documents.set(definition.name, definition);
+        return INERT;
+    }
+    table(definition) {
+        this.#assertDeclaring("table");
+        const store = this.#assertPersistable(`table "${definition.name}"`);
+        if (this.#tables.has(definition.name)) {
+            throw new Error(`${this.#object.label}: table "${definition.name}" is declared twice`);
+        }
+        const object = this.#object;
+        store.claims.assertTable(tableSqlName(object.served.contract.name, definition.name), object);
+        this.#tables.set(definition.name, definition);
+        return INERT;
+    }
+    /** A live query over a table this factory declared (its handle is inert: the query names the table), limited. */
+    query(_table, q, limit) {
+        this.#assertDeclaring("query");
+        const label = this.#object.label;
+        const table = this.#tables.get(q.table.name);
+        if (table !== q.table)
+            throw new Error(`${label}: self.query: the table is not one this factory declared`);
+        checkLiveQuery(table, q, limit, label);
+        return INERT;
+    }
+    derive() {
+        this.#assertDeclaring("derive");
+        return INERT;
+    }
+    get(Type, params) {
+        this.#assertDeclaring("get");
+        const checked = checkParams(Type, params, this.#context);
+        this.#requests.push({ kind: "type", contract: Type, params: checked.params });
+        return INERT;
+    }
+    registry(R) {
+        this.#assertDeclaring("registry");
+        this.#requests.push({ kind: "registry", registry: R });
+        // The host's own value (an attempt declares the same one): `retryOn` checks its kind.
+        return this.#object.host.registryRecord(R.name).value(R.version);
+    }
+    writable() {
+        this.#assertDeclaring("writable");
+        return INERT;
+    }
+    retryOn(...sources) {
+        this.#assertDeclaring("retryOn");
+        for (const source of sources)
+            retrySource(source, this.#object.label);
+    }
+    contribute(R) {
+        this.#assertDeclaring("contribute");
+        const served = this.#served;
+        const { label } = this.#object;
+        // R21: plugin code is bundled without type checks.
+        if (served.kind !== "local" || !served.hostLifetime) {
+            throw new Error(`${label}: self.contribute is valid only in a local type with empty params`);
+        }
+        if (this.#contributions.has(R.name))
+            throw new Error(`${label}: registry ${R.name} is contributed to twice`);
+        this.#contributions.set(R.name, R);
+    }
+    open() {
+        this.#assertDeclaring("open");
+        return INERT;
+    }
+    tx() {
+        throw new Error(`${this.#object.label}: self.tx runs in calls, not in a factory`);
+    }
+    follow() {
+        this.#assertDeclaring("follow");
+        return INERT;
+    }
+    on() {
+        this.#assertDeclaring("on");
+    }
+    onLive() {
+        this.#assertDeclaring("onLive");
+    }
+    job(definition) {
+        this.#assertDeclaring("job");
+        const object = this.#object;
+        if (this.#jobs.has(definition.name))
+            throw new Error(`${object.label}: job "${definition.name}" is declared twice`);
+        if (definition.persist !== undefined) {
+            this.#assertClaimable(`job "${definition.name}"`, ["chord.jobs", "chord.job-states"]);
+        }
+        object.checkJob(definition);
+        this.#jobs.set(definition.name, definition);
+        return INERT;
+    }
+    /** Persisted data needs a stable identity (P3) and the host's store, as an attempt checks; returns the store. */
+    #assertPersistable(what) {
+        const served = this.#served;
+        const { host, label } = this.#object;
+        if (served.kind !== "local" || contractData(served.contract).params.fields.length > 0) {
+            throw new Error(`${label}: ${what}: persist needs a stable identity (a local type with empty params)`);
+        }
+        if (host.store === undefined)
+            throw new Error(`${label}: ${what}: persist needs a store`);
+        return host.store;
+    }
+    /** Persisted documents in `namespaces`: as `#assertPersistable`, and not claimed by another owner. */
+    #assertClaimable(what, namespaces) {
+        const store = this.#assertPersistable(what);
+        const object = this.#object;
+        for (const namespace of namespaces)
+            store.claims.assertDocuments(object.served.contract.name, namespace, object);
+    }
+    #assertDeclaring(declaration) {
+        if (!this.declaring)
+            throw new Error(`${this.#object.label}: self.${declaration} is valid only in the factory`);
+    }
+}
+//# sourceMappingURL=staging.js.map

package/dist/host/staging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staging.js","sourceRoot":"","sources":["../../src/host/staging.ts"],"names":[],"mappings":"AAAA,2HAA2H;AAC3H,sHAAsH;AACtH,mHAAmH;AACnH,sHAAsH;AACtH,iHAAiH;AACjH,qHAAqH;AACrH,2CAA2C;AAC3C,4DAA4D;AAI5D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAIhE,OAAO,EAAE,aAAa,EAA4B,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAK/C,OAAO,EAAwD,KAAK,EAAE,MAAM,YAAY,CAAC;AAGzF,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAqC5C,0CAA0C;AAC1C,MAAM,WAAW,GAAG,0DAA0D,CAAC;AAE/E,uHAAuH;AACvH,MAAM,UAAU,YAAY,CAAC,IAAY;IACxC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAA4C;IAC5E,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,MAAM;QAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,8BAA8B,CAAC,CAAC;AACjH,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,WAAW;IAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAsB,EAAE,IAAI,EAAE,KAAK,EAAkB,EAAE,IAAiB;IAClG,mDAAmD;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAmF,CAAC;IAC5G,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IACrD,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACjE,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,KAAK,CAAC,KAAK,EAAE,WAAW,IAAI,GAAG,CAAC,CAAC;IACxC,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,MAAoB;IAC7D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS;YACtB,OAAO,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,IAAI,MAAM,IAAI,6BAA6B,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IAClG,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,IAAI,eAAe,IAAI,6BAA6B,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QAC1G,CAAC;IACF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1E,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,UAAU;QAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,yGAAyG;AACzG,SAAS,UAAU,CAClB,MAAc,EACd,KAAkB,EAClB,KAA0B,EAC1B,UAAuC,EACvC,IAAiB;IAEjB,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QACrC,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,QAAQ,CAAC,IAAI,kBAAkB,CAAC,CAAC;QAChG,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9D,OAAO;IACR,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC7C,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,kBAAkB,CAAC,CAAC;IAClF,yGAAyG;IACzG,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,sDAAsD,CAAC,CAAC;IACzF,CAAC;IACD,2GAA2G;IAC3G,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,qDAAqD,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;IACpG,gFAAgF;IAChF,MAAM,MAAM,GACX,QAAQ,CAAC,IAAI,KAAK,OAAO;QACxB,CAAC,CAAC;YACA,GAAG,MAAM;YACT,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,QAAyB;YACnC,OAAO,EAAE,OAAwD;YACjE,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;SAC/D;QACF,CAAC,CAAC;YACA,GAAG,MAAM;YACT,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,QAA0B;YACpC,OAAO,EAAE,OAAyD;SAClE,CAAC;IACL,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAClC,CAAC;AAiBD;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,MAAc,EAAE,OAAgB;IAClF,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7D,iFAAiF;IACjF,MAAM,IAAI,GAAG,SAAiC,CAAC;IAC/C,IAAI,CAAC;QACJ,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjE,gDAAgD;;YAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAU,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,KAAK,CAAC,KAAK,EAAE,WAAW,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;YAAS,CAAC;QACV,SAAS,CAAC,SAAS,GAAG,KAAK,CAAC;IAC7B,CAAC;IACD,OAAO,SAAS,CAAC,QAAQ,CAAC;AAC3B,CAAC;AAED,2GAA2G;AAC3G,SAAS,KAAK,CAAC,KAAc,EAAE,IAAY;IAC1C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,KAAK,GAAU,IAAI,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE;IACxC,GAAG,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK;CAClB,CAAU,CAAC;AAEZ,wGAAwG;AACxG,MAAM,aAAa;IAClB,SAAS,GAAG,IAAI,CAAC;IACR,OAAO,CAAc;IACrB,OAAO,CAAS;IAChB,QAAQ,CAAU;IAClB,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC9C,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC7C,KAAK,GAAG,IAAI,GAAG,EAAoD,CAAC;IACpE,cAAc,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC/D,SAAS,GAAc,EAAE,CAAC;IAEnC,YAAY,MAAmB,EAAE,MAAc,EAAE,OAAgB;QAChE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,IAAI,QAAQ;QACX,OAAO;YACN,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAClC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC9B,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YAChD,QAAQ,EAAE,IAAI,CAAC,SAAS;SACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAyB;QAC9B,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,UAAU,UAAU,CAAC,IAAI,GAAG,CAAC;QAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,oBAAoB,CAAC,CAAC;QAC9G,IAAI,UAAU,CAAC,OAAO;YAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,UAA2B;QAChC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,qBAAqB,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC;IACd,CAAC;IAED,iHAAiH;IACjH,KAAK,CAAC,MAAe,EAAE,CAAQ,EAAE,KAAc;QAC9C,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,CAAC,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0DAA0D,CAAC,CAAC;QAC3G,cAAc,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM;QACL,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,GAAG,CAAC,IAAc,EAAE,MAAe;QAClC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,OAAO,KAAK,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,CAA6B;QACrC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,sFAAsF;QACtF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,QAAQ;QACP,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAG,OAA2B;QACrC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACjC,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,UAAU,CAAC,CAA6B;QACvC,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAC/B,mDAAmD;QACnD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mEAAmE,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC,IAAI,0BAA0B,CAAC,CAAC;QAC7G,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,IAAI;QACH,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC;IACd,CAAC;IAED,EAAE;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,2CAA2C,CAAC,CAAC;IACnF,CAAC;IAED,MAAM;QACL,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,EAAE;QACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM;QACL,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED,GAAG,CAAC,UAAoD;QACvD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAI,qBAAqB,CAAC,CAAC;QAChF,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,UAAU,CAAC,IAAI,GAAG,EAAE,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC;IACd,CAAC;IAED,iHAAiH;IACjH,kBAAkB,CAAC,IAAY;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,IAAI,oEAAoE,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,IAAI,yBAAyB,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,sGAAsG;IACtG,gBAAgB,CAAC,IAAY,EAAE,UAA6B;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,KAAK,MAAM,SAAS,IAAI,UAAU;YAAE,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAClH,CAAC;IAED,gBAAgB,CAAC,WAAmB;QACnC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,UAAU,WAAW,+BAA+B,CAAC,CAAC;IACjH,CAAC;CACD","sourcesContent":["// Staging (slice 7b §2; per plugin, decision \"Per plugin at startup and reload\"): each plugin's setup runs into a table of\n// its own (the types it serves with their providers, the registries it serves, its facet contributions) with `load`'s\n// checks, merged into the staged table beside the live one, where a type or registry another plugin serves already\n// fails the plugin; and an object's new factory run against a recording `self`, which keeps what the factory declares\n// (documents, tables, jobs, contributions, requests with their contract versions) and activates, binds and opens\n// nothing, so a reload decides which plugins keep their old code before its commit, and a restart knows the requests\n// its successor will make (its readiness).\n// `load` stages its facets the same way and publishes them.\n\nimport type { Context } from \"../context/index.ts\";\nimport type { Contract, ParamsOf } from \"../contracts/index.ts\";\nimport { contractData } from \"../contracts/internal.ts\";\nimport type { Principal } from \"../data/index.ts\";\nimport { bindProvider, checkParams } from \"../data/internal.ts\";\nimport type { AnyDefinition } from \"../documents/internal.ts\";\nimport type { JobDefinition } from \"../jobs/index.ts\";\nimport type { Registry, RegistryProvider } from \"../registries/index.ts\";\nimport { checkProvider, type RegistryValueSource } from \"../registries/internal.ts\";\nimport { checkLiveQuery } from \"../store/live-query.ts\";\nimport type { Query } from \"../store/query.ts\";\nimport { tableSqlName } from \"../store/sql.ts\";\nimport type { ChordStore } from \"../store/store.ts\";\nimport type { TableDefinition } from \"../store/table.ts\";\nimport type { Watchable } from \"../watch.ts\";\nimport type { StoreSelf } from \"./attempt.ts\";\nimport { type Facet, type FacetContribution, type ServedEntry, setUp } from \"./facet.ts\";\nimport type { ChordObject, LocalContract, RemoteContract, Served } from \"./object.ts\";\nimport type { Presence } from \"./presence.ts\";\nimport { retrySource } from \"./retry-on.ts\";\n\n/** A plugin's facet as `load` and `reload` take it: its name (its `package.json` name) and its facet. */\nexport type PluginFacet<P extends Principal = Principal> = { readonly name: string; readonly facet: Facet<P> };\n\n/** A registry a staged plugin serves: the defining plugin, the token and its provider. */\nexport type StagedRegistry = {\n\treadonly plugin: string;\n\treadonly registry: Registry<unknown, unknown>;\n\treadonly provider: RegistryProvider<unknown, unknown>;\n};\n\n/** One plugin's setup, run and checked: what it serves and contributes, nothing published yet. */\nexport type StagedPlugin = {\n\treadonly name: string;\n\t/** The served types by name, each with its plugin, factory, provider (its `accepts` checked) and `linger`. */\n\treadonly types: ReadonlyMap<string, Served>;\n\t/** The served registries by name. */\n\treadonly registries: ReadonlyMap<string, StagedRegistry>;\n\t/** The facet contributions, in the setup's order. */\n\treadonly contributions: readonly FacetContribution[];\n};\n\n/** A plugin set's staged plugins, merged: what they serve, by name, and each plugin's own table. */\nexport type Staged = {\n\treadonly types: Map<string, Served>;\n\treadonly registries: Map<string, StagedRegistry>;\n\treadonly plugins: Map<string, StagedPlugin>;\n};\n\n/** What staging needs of its host: whom it acts as, where it lives, and its presence lists for setups. */\nexport type StagingHost = {\n\treadonly principal: Principal | undefined;\n\treadonly address: unknown;\n\treferences<C extends Contract>(Type: C): Watchable<readonly Presence<C, Principal>[]>;\n};\n\n/** An npm package name, scoped or not. */\nconst PLUGIN_NAME = /^(?:@[a-z0-9~-][a-z0-9._~-]*\\/)?[a-z0-9~-][a-z0-9._~-]*$/;\n\n/** Whether `name` is a valid plugin name: an npm package name, scoped or not (the plugins component checks it too). */\nexport function isPluginName(name: string): boolean {\n\treturn PLUGIN_NAME.test(name);\n}\n\n/**\n * Throws for the first plugin of `facets` whose name is no npm package name: a programming error, so `load` and\n * `reload` throw before they change anything (decision \"Mistakes that wait are reported at once\" (d)).\n */\nexport function checkPluginNames(facets: readonly { readonly name: string }[]): void {\n\tfor (const { name } of facets) if (!isPluginName(name)) throw new Error(`\"${name}\" is not a valid plugin name`);\n}\n\n/** A staged table with nothing in it. */\nexport function emptyStaged(): Staged {\n\treturn { types: new Map(), registries: new Map(), plugins: new Map() };\n}\n\n/**\n * Runs one plugin's setup (its name checked by `checkPluginNames` before) and checks what it declared: a type or\n * registry it serves twice, a remote type on a host without a principal or address, every provider's `accepts`\n * (`checkAccepts`) and every registry provider's shape. Throws the first error, naming the plugin.\n */\nexport function stagePlugin<P extends Principal>({ name, facet }: PluginFacet<P>, host: StagingHost): StagedPlugin {\n\t// The host's presence lists are typed for its `P`.\n\tconst references = host.references as <C extends Contract>(Type: C) => Watchable<readonly Presence<C, P>[]>;\n\tconst types = new Map<string, Served>();\n\tconst registries = new Map<string, StagedRegistry>();\n\ttry {\n\t\tconst { served, contributions } = setUp(name, facet, references);\n\t\tfor (const entry of served) stageEntry(name, entry, types, registries, host);\n\t\treturn { name, types, registries, contributions };\n\t} catch (error) {\n\t\tthrow named(error, `plugin \"${name}\"`);\n\t}\n}\n\n/**\n * Merges `plugin` into `staged`; a type or registry another plugin serves there already refuses it (its error\n * returned, nothing merged).\n */\nexport function addStaged(staged: Staged, plugin: StagedPlugin): Error | undefined {\n\tfor (const name of plugin.types.keys()) {\n\t\tconst other = staged.types.get(name);\n\t\tif (other !== undefined)\n\t\t\treturn new Error(`plugin \"${plugin.name}\": ${name} is served twice (plugin \"${other.plugin}\")`);\n\t}\n\tfor (const name of plugin.registries.keys()) {\n\t\tconst other = staged.registries.get(name);\n\t\tif (other !== undefined) {\n\t\t\treturn new Error(`plugin \"${plugin.name}\": registry ${name} is served twice (plugin \"${other.plugin}\")`);\n\t\t}\n\t}\n\tfor (const [name, served] of plugin.types) staged.types.set(name, served);\n\tfor (const [name, registry] of plugin.registries) staged.registries.set(name, registry);\n\tstaged.plugins.set(plugin.name, plugin);\n\treturn undefined;\n}\n\n/** Stages one served entry of `plugin` into its tables: a registry's provider, or a type as `Served`. */\nfunction stageEntry(\n\tplugin: string,\n\tentry: ServedEntry,\n\ttypes: Map<string, Served>,\n\tregistries: Map<string, StagedRegistry>,\n\thost: StagingHost,\n): void {\n\tif (entry.kind === \"registry\") {\n\t\tconst { registry, provider } = entry;\n\t\tif (registries.has(registry.name)) throw new Error(`registry ${registry.name} is served twice`);\n\t\tcheckProvider(registry.name, provider);\n\t\tregistries.set(registry.name, { plugin, registry, provider });\n\t\treturn;\n\t}\n\tconst { contract, factory, options } = entry;\n\tif (types.has(contract.name)) throw new Error(`${contract.name} is served twice`);\n\t// A client serves only local types (§3): a remote object is owned by a principal of the host serving it.\n\tif (contract.kind === \"remote\" && host.principal === undefined) {\n\t\tthrow new Error(`${contract.name}: a host without a principal serves only local types`);\n\t}\n\t// A remote object lives on the host its `hostAddress` names: only a host with an address can be that host.\n\tif (contract.kind === \"remote\" && host.address === undefined) {\n\t\tthrow new Error(`${contract.name}: a host without an address serves only local types`);\n\t}\n\tconst provider = bindProvider(contract, options.accepts ?? {});\n\tconst common = { plugin, provider, linger: options.linger ?? 0, traced: options.untraced !== true };\n\t// The contract's kind decides the factory's signature and the contract's shape.\n\tconst served: Served =\n\t\tcontract.kind === \"local\"\n\t\t\t? {\n\t\t\t\t\t...common,\n\t\t\t\t\tkind: \"local\",\n\t\t\t\t\tcontract: contract as LocalContract,\n\t\t\t\t\tfactory: factory as Extract<Served, { kind: \"local\" }>[\"factory\"],\n\t\t\t\t\thostLifetime: contractData(contract).params.fields.length === 0,\n\t\t\t\t}\n\t\t\t: {\n\t\t\t\t\t...common,\n\t\t\t\t\tkind: \"remote\",\n\t\t\t\t\tcontract: contract as RemoteContract,\n\t\t\t\t\tfactory: factory as Extract<Served, { kind: \"remote\" }>[\"factory\"],\n\t\t\t\t};\n\ttypes.set(contract.name, served);\n}\n\n/** What a recorded factory declared: what a reload's fate and checks need, nothing activated. */\nexport type Recorded = {\n\treadonly documents: readonly AnyDefinition[];\n\treadonly tables: readonly TableDefinition[];\n\treadonly jobs: readonly JobDefinition<unknown, unknown, unknown>[];\n\treadonly contributions: readonly Registry<unknown, unknown>[];\n\t/** Its requests: the types it gets (`self.get`, with their checked params) and the registries it reads (`self.registry`). */\n\treadonly requests: readonly Request[];\n};\n\n/** A recorded request, with the contract version it was made at: a type and its params, or a registry. */\nexport type Request =\n\t| { readonly kind: \"type\"; readonly contract: Contract; readonly params: ParamsOf<Contract> }\n\t| { readonly kind: \"registry\"; readonly registry: Registry<unknown, unknown> };\n\n/**\n * Runs `served`'s factory for `object` (its params and principal) against a recording `self` and returns what it\n * declared. Every declaration check an attempt makes runs, without effects (declared twice; persisted data in a type\n * without a stable identity, on a host without a store, or claimed by another owner; contributions outside\n * host-lifetime objects, or twice; `retryOn` sources that do not outlive the attempt; params; a document or job\n * declared at an older version than the object's, or at its version with another schema); a throw is the factory's.\n * Handles it hands out are inert, except registry values (the host's own, which `retryOn` checks by kind).\n */\nexport function recordFactory(object: ChordObject, served: Served, context: Context): Recorded {\n\tconst recording = new RecordingSelf(object, served, context);\n\t// A recording `self` takes every declaration a factory makes, its handles inert.\n\tconst self = recording as unknown as StoreSelf;\n\ttry {\n\t\tif (served.kind === \"local\") served.factory(object.params, self);\n\t\t// A remote object's identity has its principal.\n\t\telse served.factory(object.params, object.principal!, self);\n\t} catch (error) {\n\t\tthrow named(error, `plugin \"${served.plugin}\", ${object.label}`);\n\t} finally {\n\t\trecording.declaring = false;\n\t}\n\treturn recording.recorded;\n}\n\n/** A staging error naming where it happened (`what`): its message prefixed, the error itself its cause. */\nfunction named(error: unknown, what: string): Error {\n\tconst message = error instanceof Error ? error.message : String(error);\n\treturn new Error(`${what}: ${message}`, { cause: error });\n}\n\n/**\n * The value of every handle a recording `self` hands out: any property or call gives it again, and it is never a\n * thenable. Typed `never` (a cast: it stands for every handle type, and nothing reads it as one).\n */\nconst INERT: never = new Proxy(() => {}, {\n\tget: (_target, property) => (property === \"then\" ? undefined : INERT),\n\tapply: () => INERT,\n}) as never;\n\n/** A factory's `self` during staging: it records declarations and checks them; it activates nothing. */\nclass RecordingSelf {\n\tdeclaring = true;\n\treadonly #object: ChordObject;\n\treadonly #served: Served;\n\treadonly #context: Context;\n\treadonly #documents = new Map<string, AnyDefinition>();\n\treadonly #tables = new Map<string, TableDefinition>();\n\treadonly #jobs = new Map<string, JobDefinition<unknown, unknown, unknown>>();\n\treadonly #contributions = new Map<string, Registry<unknown, unknown>>();\n\treadonly #requests: Request[] = [];\n\n\tconstructor(object: ChordObject, served: Served, context: Context) {\n\t\tthis.#object = object;\n\t\tthis.#served = served;\n\t\tthis.#context = context;\n\t}\n\n\tget recorded(): Recorded {\n\t\treturn {\n\t\t\tdocuments: [...this.#documents.values()],\n\t\t\ttables: [...this.#tables.values()],\n\t\t\tjobs: [...this.#jobs.values()],\n\t\t\tcontributions: [...this.#contributions.values()],\n\t\t\trequests: this.#requests,\n\t\t};\n\t}\n\n\tstate(definition: AnyDefinition): never {\n\t\tthis.#assertDeclaring(\"state\");\n\t\tconst what = `state \"${definition.name}\"`;\n\t\tif (this.#documents.has(definition.name)) throw new Error(`${this.#object.label}: ${what} is declared twice`);\n\t\tif (definition.persist) this.#assertClaimable(what, [\"chord\"]);\n\t\tthis.#object.documents.check(definition);\n\t\tthis.#documents.set(definition.name, definition);\n\t\treturn INERT;\n\t}\n\n\ttable(definition: TableDefinition): never {\n\t\tthis.#assertDeclaring(\"table\");\n\t\tconst store = this.#assertPersistable(`table \"${definition.name}\"`);\n\t\tif (this.#tables.has(definition.name)) {\n\t\t\tthrow new Error(`${this.#object.label}: table \"${definition.name}\" is declared twice`);\n\t\t}\n\t\tconst object = this.#object;\n\t\tstore.claims.assertTable(tableSqlName(object.served.contract.name, definition.name), object);\n\t\tthis.#tables.set(definition.name, definition);\n\t\treturn INERT;\n\t}\n\n\t/** A live query over a table this factory declared (its handle is inert: the query names the table), limited. */\n\tquery(_table: unknown, q: Query, limit: unknown): never {\n\t\tthis.#assertDeclaring(\"query\");\n\t\tconst label = this.#object.label;\n\t\tconst table = this.#tables.get(q.table.name);\n\t\tif (table !== q.table) throw new Error(`${label}: self.query: the table is not one this factory declared`);\n\t\tcheckLiveQuery(table, q, limit, label);\n\t\treturn INERT;\n\t}\n\n\tderive(): never {\n\t\tthis.#assertDeclaring(\"derive\");\n\t\treturn INERT;\n\t}\n\n\tget(Type: Contract, params: unknown): never {\n\t\tthis.#assertDeclaring(\"get\");\n\t\tconst checked = checkParams(Type, params, this.#context);\n\t\tthis.#requests.push({ kind: \"type\", contract: Type, params: checked.params });\n\t\treturn INERT;\n\t}\n\n\tregistry(R: Registry<unknown, unknown>): RegistryValueSource {\n\t\tthis.#assertDeclaring(\"registry\");\n\t\tthis.#requests.push({ kind: \"registry\", registry: R });\n\t\t// The host's own value (an attempt declares the same one): `retryOn` checks its kind.\n\t\treturn this.#object.host.registryRecord(R.name).value(R.version);\n\t}\n\n\twritable(): never {\n\t\tthis.#assertDeclaring(\"writable\");\n\t\treturn INERT;\n\t}\n\n\tretryOn(...sources: readonly unknown[]): void {\n\t\tthis.#assertDeclaring(\"retryOn\");\n\t\tfor (const source of sources) retrySource(source, this.#object.label);\n\t}\n\n\tcontribute(R: Registry<unknown, unknown>): void {\n\t\tthis.#assertDeclaring(\"contribute\");\n\t\tconst served = this.#served;\n\t\tconst { label } = this.#object;\n\t\t// R21: plugin code is bundled without type checks.\n\t\tif (served.kind !== \"local\" || !served.hostLifetime) {\n\t\t\tthrow new Error(`${label}: self.contribute is valid only in a local type with empty params`);\n\t\t}\n\t\tif (this.#contributions.has(R.name)) throw new Error(`${label}: registry ${R.name} is contributed to twice`);\n\t\tthis.#contributions.set(R.name, R);\n\t}\n\n\topen(): never {\n\t\tthis.#assertDeclaring(\"open\");\n\t\treturn INERT;\n\t}\n\n\ttx(): never {\n\t\tthrow new Error(`${this.#object.label}: self.tx runs in calls, not in a factory`);\n\t}\n\n\tfollow(): never {\n\t\tthis.#assertDeclaring(\"follow\");\n\t\treturn INERT;\n\t}\n\n\ton(): void {\n\t\tthis.#assertDeclaring(\"on\");\n\t}\n\n\tonLive(): void {\n\t\tthis.#assertDeclaring(\"onLive\");\n\t}\n\n\tjob(definition: JobDefinition<unknown, unknown, unknown>): never {\n\t\tthis.#assertDeclaring(\"job\");\n\t\tconst object = this.#object;\n\t\tif (this.#jobs.has(definition.name))\n\t\t\tthrow new Error(`${object.label}: job \"${definition.name}\" is declared twice`);\n\t\tif (definition.persist !== undefined) {\n\t\t\tthis.#assertClaimable(`job \"${definition.name}\"`, [\"chord.jobs\", \"chord.job-states\"]);\n\t\t}\n\t\tobject.checkJob(definition);\n\t\tthis.#jobs.set(definition.name, definition);\n\t\treturn INERT;\n\t}\n\n\t/** Persisted data needs a stable identity (P3) and the host's store, as an attempt checks; returns the store. */\n\t#assertPersistable(what: string): ChordStore {\n\t\tconst served = this.#served;\n\t\tconst { host, label } = this.#object;\n\t\tif (served.kind !== \"local\" || contractData(served.contract).params.fields.length > 0) {\n\t\t\tthrow new Error(`${label}: ${what}: persist needs a stable identity (a local type with empty params)`);\n\t\t}\n\t\tif (host.store === undefined) throw new Error(`${label}: ${what}: persist needs a store`);\n\t\treturn host.store;\n\t}\n\n\t/** Persisted documents in `namespaces`: as `#assertPersistable`, and not claimed by another owner. */\n\t#assertClaimable(what: string, namespaces: readonly string[]): void {\n\t\tconst store = this.#assertPersistable(what);\n\t\tconst object = this.#object;\n\t\tfor (const namespace of namespaces) store.claims.assertDocuments(object.served.contract.name, namespace, object);\n\t}\n\n\t#assertDeclaring(declaration: string): void {\n\t\tif (!this.declaring) throw new Error(`${this.#object.label}: self.${declaration} is valid only in the factory`);\n\t}\n}\n"]}

package/dist/host/unbound-clock.d.ts

@@ -0,0 +1,23 @@
+import type { ChordError } from "../data/index.ts";
+/** What the clock reports: a request waiting unbound for `waitingFor` since `since` (`Date.now()` time), and why. */
+export type UnboundLong = {
+    readonly kind: "unbound_long";
+    /** The type's name, or `registry <name>`. */
+    readonly waitingFor: string;
+    readonly error: ChordError;
+    readonly since: number;
+};
+/** A host's waits not reported yet and the one timer of their sweep. */
+export declare class UnboundClock {
+    #private;
+    constructor(report: (error: UnboundLong) => void);
+    /** `request` waits unbound for `waitingFor` with `error`: reported after 5 s unless it stops before. */
+    start(request: object, waitingFor: string, error: ChordError): void;
+    /** The wait of `request` has a new error (a registry's failure changed): the report names the latest. */
+    failed(request: object, error: ChordError): void;
+    /** `request` bound, ended or was woken: no report for this wait. */
+    stop(request: object): void;
+    /** The host closed: nothing is reported any more. */
+    close(): void;
+}
+//# sourceMappingURL=unbound-clock.d.ts.map

package/dist/host/unbound-clock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unbound-clock.d.ts","sourceRoot":"","sources":["../../src/host/unbound-clock.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,qHAAqH;AACrH,MAAM,MAAM,WAAW,GAAG;IACzB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,6CAA6C;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB,CAAC;AAQF,wEAAwE;AACxE,qBAAa,YAAY;;IAMxB,YAAY,MAAM,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,EAE/C;IAED,wGAAwG;IACxG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAIlE;IAED,yGAAyG;IACzG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAG/C;IAED,oEAAoE;IACpE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAI1B;IAED,qDAAqD;IACrD,KAAK,IAAI,IAAI,CAIZ;CAiBD"}

package/dist/host/unbound-clock.js

@@ -0,0 +1,58 @@
+// The `unbound_long` report (decision "Mistakes that wait are reported at once" (c)): a request waiting unbound after
+// the host's publication (a type or registry not served here, not at its version, a registry whose first `compose`
+// threw) is reported once through `onError` after 5 s, naming what it waits for and why; it keeps waiting as before.
+// One clock per host, one timer armed for the earliest wait not reported yet: no timer per request.
+/** How long a request waits unbound before it is reported (decided: 5 s). */
+const REPORTED_AFTER = 5_000;
+/** A host's waits not reported yet and the one timer of their sweep. */
+export class UnboundClock {
+    /** By request, in the order they started, so by `since`: the sweep reads from the front and stops at the first due later. */
+    #waits = new Map();
+    #report;
+    #timer;
+    constructor(report) {
+        this.#report = report;
+    }
+    /** `request` waits unbound for `waitingFor` with `error`: reported after 5 s unless it stops before. */
+    start(request, waitingFor, error) {
+        if (this.#waits.has(request))
+            return;
+        this.#waits.set(request, { waitingFor, error, since: Date.now() });
+        this.#timer ??= setTimeout(() => this.#sweep(), REPORTED_AFTER);
+    }
+    /** The wait of `request` has a new error (a registry's failure changed): the report names the latest. */
+    failed(request, error) {
+        const wait = this.#waits.get(request);
+        if (wait !== undefined)
+            wait.error = error;
+    }
+    /** `request` bound, ended or was woken: no report for this wait. */
+    stop(request) {
+        if (!this.#waits.delete(request) || this.#waits.size > 0)
+            return;
+        clearTimeout(this.#timer);
+        this.#timer = undefined;
+    }
+    /** The host closed: nothing is reported any more. */
+    close() {
+        this.#waits.clear();
+        clearTimeout(this.#timer);
+        this.#timer = undefined;
+    }
+    /** Reports every wait due, each once, then arms the timer for the next one, if any. */
+    #sweep() {
+        this.#timer = undefined;
+        const now = Date.now();
+        for (const [request, wait] of this.#waits) {
+            const due = wait.since + REPORTED_AFTER;
+            if (due > now) {
+                this.#timer = setTimeout(() => this.#sweep(), due - now);
+                return;
+            }
+            this.#waits.delete(request);
+            const { waitingFor, error, since } = wait;
+            this.#report({ kind: "unbound_long", waitingFor, error, since });
+        }
+    }
+}
+//# sourceMappingURL=unbound-clock.js.map

package/dist/host/unbound-clock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unbound-clock.js","sourceRoot":"","sources":["../../src/host/unbound-clock.ts"],"names":[],"mappings":"AAAA,sHAAsH;AACtH,mHAAmH;AACnH,qHAAqH;AACrH,oGAAoG;AAgBpG,6EAA6E;AAC7E,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B,wEAAwE;AACxE,MAAM,OAAO,YAAY;IACxB,6HAA6H;IACpH,MAAM,GAAG,IAAI,GAAG,EAAgB,CAAC;IACjC,OAAO,CAA+B;IAC/C,MAAM,CAA4C;IAElD,YAAY,MAAoC;QAC/C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,wGAAwG;IACxG,KAAK,CAAC,OAAe,EAAE,UAAkB,EAAE,KAAiB;QAC3D,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QACrC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC;IACjE,CAAC;IAED,yGAAyG;IACzG,MAAM,CAAC,OAAe,EAAE,KAAiB;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAC5C,CAAC;IAED,oEAAoE;IACpE,IAAI,CAAC,OAAe;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO;QACjE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;IACzB,CAAC;IAED,qDAAqD;IACrD,KAAK;QACJ,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;IACzB,CAAC;IAED,uFAAuF;IACvF,MAAM;QACL,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC;YACxC,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;gBACzD,OAAO;YACR,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;IACF,CAAC;CACD","sourcesContent":["// The `unbound_long` report (decision \"Mistakes that wait are reported at once\" (c)): a request waiting unbound after\n// the host's publication (a type or registry not served here, not at its version, a registry whose first `compose`\n// threw) is reported once through `onError` after 5 s, naming what it waits for and why; it keeps waiting as before.\n// One clock per host, one timer armed for the earliest wait not reported yet: no timer per request.\n\nimport type { ChordError } from \"../data/index.ts\";\n\n/** What the clock reports: a request waiting unbound for `waitingFor` since `since` (`Date.now()` time), and why. */\nexport type UnboundLong = {\n\treadonly kind: \"unbound_long\";\n\t/** The type's name, or `registry <name>`. */\n\treadonly waitingFor: string;\n\treadonly error: ChordError;\n\treadonly since: number;\n};\n\n/** One wait not reported yet: what it waits for, its latest error, since when. */\ntype Wait = { readonly waitingFor: string; error: ChordError; readonly since: number };\n\n/** How long a request waits unbound before it is reported (decided: 5 s). */\nconst REPORTED_AFTER = 5_000;\n\n/** A host's waits not reported yet and the one timer of their sweep. */\nexport class UnboundClock {\n\t/** By request, in the order they started, so by `since`: the sweep reads from the front and stops at the first due later. */\n\treadonly #waits = new Map<object, Wait>();\n\treadonly #report: (error: UnboundLong) => void;\n\t#timer: ReturnType<typeof setTimeout> | undefined;\n\n\tconstructor(report: (error: UnboundLong) => void) {\n\t\tthis.#report = report;\n\t}\n\n\t/** `request` waits unbound for `waitingFor` with `error`: reported after 5 s unless it stops before. */\n\tstart(request: object, waitingFor: string, error: ChordError): void {\n\t\tif (this.#waits.has(request)) return;\n\t\tthis.#waits.set(request, { waitingFor, error, since: Date.now() });\n\t\tthis.#timer ??= setTimeout(() => this.#sweep(), REPORTED_AFTER);\n\t}\n\n\t/** The wait of `request` has a new error (a registry's failure changed): the report names the latest. */\n\tfailed(request: object, error: ChordError): void {\n\t\tconst wait = this.#waits.get(request);\n\t\tif (wait !== undefined) wait.error = error;\n\t}\n\n\t/** `request` bound, ended or was woken: no report for this wait. */\n\tstop(request: object): void {\n\t\tif (!this.#waits.delete(request) || this.#waits.size > 0) return;\n\t\tclearTimeout(this.#timer);\n\t\tthis.#timer = undefined;\n\t}\n\n\t/** The host closed: nothing is reported any more. */\n\tclose(): void {\n\t\tthis.#waits.clear();\n\t\tclearTimeout(this.#timer);\n\t\tthis.#timer = undefined;\n\t}\n\n\t/** Reports every wait due, each once, then arms the timer for the next one, if any. */\n\t#sweep(): void {\n\t\tthis.#timer = undefined;\n\t\tconst now = Date.now();\n\t\tfor (const [request, wait] of this.#waits) {\n\t\t\tconst due = wait.since + REPORTED_AFTER;\n\t\t\tif (due > now) {\n\t\t\t\tthis.#timer = setTimeout(() => this.#sweep(), due - now);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tthis.#waits.delete(request);\n\t\t\tconst { waitingFor, error, since } = wait;\n\t\t\tthis.#report({ kind: \"unbound_long\", waitingFor, error, since });\n\t\t}\n\t}\n}\n"]}

package/dist/host/unbound.d.ts

@@ -0,0 +1,37 @@
+import type { ChordError, FailureCause, Principal } from "../data/index.ts";
+import type { UnboundClock } from "./unbound-clock.ts";
+/** A request in the index: a reference made here or a hold that arrived over a link. */
+export interface UnboundRequest {
+    /** Whom it acts for: revocation ends the requests of a revoked principal. */
+    readonly principal: Principal | undefined;
+    /** The name it waits for became usable (or the host published): it runs its check again, leaving the index first. */
+    wake(): void;
+    /** It is revoked, or its host closes: it ends with `error` (a hold sends `gone`), leaving the index. */
+    end(error: ChordError): void;
+}
+/** A host's unbound requests by name. */
+export declare class UnboundIndex {
+    #private;
+    constructor(clock: UnboundClock);
+    /**
+     * Indexes `request` under `name` (once; again after a wake), waiting for the publication (no `cause`) or for a
+     * provider that fits (`cause`, on the clock).
+     */
+    add(name: string, request: UnboundRequest, cause: FailureCause | undefined): void;
+    /** `request` ended or binds: it leaves the index. */
+    delete(name: string, request: UnboundRequest): void;
+    /** The names requests wait for, sorted. */
+    names(): string[];
+    /** The host's publication: every request indexed (by any name) runs its check again, out of the index first. */
+    wakeAll(): void;
+    /**
+     * A reload's publication: the requests indexed under `names` (the types and registries it serves) run their check
+     * again, out of the index first; the others stay (carry-over "Publications wake per name").
+     */
+    wake(names: Iterable<string>): void;
+    /** Every indexed request acting for a principal `revoked` names ends with `error`. */
+    revoke(revoked: (principal: Principal) => boolean, error: ChordError): void;
+    /** The host closed: every indexed request ends with `error`. */
+    close(error: ChordError): void;
+}
+//# sourceMappingURL=unbound.d.ts.map

package/dist/host/unbound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unbound.d.ts","sourceRoot":"","sources":["../../src/host/unbound.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IAC1C,qHAAqH;IACrH,IAAI,IAAI,IAAI,CAAC;IACb,wGAAwG;IACxG,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;CAC7B;AAED,yCAAyC;AACzC,qBAAa,YAAY;;IAIxB,YAAY,KAAK,EAAE,YAAY,EAE9B;IAED;;;OAGG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,GAAG,SAAS,GAAG,IAAI,CAQhF;IAED,qDAAqD;IACrD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAKlD;IAED,2CAA2C;IAC3C,KAAK,IAAI,MAAM,EAAE,CAEhB;IAED,gHAAgH;IAChH,OAAO,IAAI,IAAI,CAKd;IAED;;;OAGG;IACH,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,CAUlC;IAED,sFAAsF;IACtF,MAAM,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,SAAS,KAAK,OAAO,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAM1E;IAED,gEAAgE;IAChE,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAK7B;CACD"}

package/dist/host/unbound.js

@@ -0,0 +1,88 @@
+// The unbound index (dependency model §1, §4): the requests a host decided cannot bind yet, by the name they wait for.
+// Before the host's first publication every hold arriving on its links, and a request made here while `load` runs the
+// setups (before `load` this host's own requests throw), waits here (`unpublished`); after it, those its check left
+// unbound (`not_served`, `version`): a reference made here, a hold that arrived over a link and was refused for a name.
+// A publication wakes the requests of the names it serves (`load`'s every one, a reload's those of its names); a
+// request leaves when it ends (released, settled, given up, its link or origin closed, revoked) or binds. A request
+// waiting with a cause (after the publication) is on the host's `UnboundClock` while it is indexed: reported after 5 s.
+/** A host's unbound requests by name. */
+export class UnboundIndex {
+    #byName = new Map();
+    #clock;
+    constructor(clock) {
+        this.#clock = clock;
+    }
+    /**
+     * Indexes `request` under `name` (once; again after a wake), waiting for the publication (no `cause`) or for a
+     * provider that fits (`cause`, on the clock).
+     */
+    add(name, request, cause) {
+        let requests = this.#byName.get(name);
+        if (requests === undefined) {
+            requests = new Set();
+            this.#byName.set(name, requests);
+        }
+        requests.add(request);
+        if (cause !== undefined)
+            this.#clock.start(request, name, cause.error);
+    }
+    /** `request` ended or binds: it leaves the index. */
+    delete(name, request) {
+        const requests = this.#byName.get(name);
+        if (requests === undefined || !requests.delete(request))
+            return;
+        this.#clock.stop(request);
+        if (requests.size === 0)
+            this.#byName.delete(name);
+    }
+    /** The names requests wait for, sorted. */
+    names() {
+        return [...this.#byName.keys()].sort();
+    }
+    /** The host's publication: every request indexed (by any name) runs its check again, out of the index first. */
+    wakeAll() {
+        const all = [...this.#byName.values()].flatMap((requests) => [...requests]);
+        this.#byName.clear();
+        for (const request of all)
+            this.#clock.stop(request);
+        for (const request of all)
+            request.wake();
+    }
+    /**
+     * A reload's publication: the requests indexed under `names` (the types and registries it serves) run their check
+     * again, out of the index first; the others stay (carry-over "Publications wake per name").
+     */
+    wake(names) {
+        const woken = [];
+        for (const name of names) {
+            const requests = this.#byName.get(name);
+            if (requests === undefined)
+                continue;
+            this.#byName.delete(name);
+            woken.push(...requests);
+        }
+        for (const request of woken)
+            this.#clock.stop(request);
+        for (const request of woken)
+            request.wake();
+    }
+    /** Every indexed request acting for a principal `revoked` names ends with `error`. */
+    revoke(revoked, error) {
+        for (const requests of [...this.#byName.values()]) {
+            for (const request of [...requests]) {
+                if (request.principal !== undefined && revoked(request.principal))
+                    request.end(error);
+            }
+        }
+    }
+    /** The host closed: every indexed request ends with `error`. */
+    close(error) {
+        const all = [...this.#byName.values()].flatMap((requests) => [...requests]);
+        this.#byName.clear();
+        for (const request of all)
+            this.#clock.stop(request);
+        for (const request of all)
+            request.end(error);
+    }
+}
+//# sourceMappingURL=unbound.js.map

package/dist/host/unbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unbound.js","sourceRoot":"","sources":["../../src/host/unbound.ts"],"names":[],"mappings":"AAAA,uHAAuH;AACvH,sHAAsH;AACtH,oHAAoH;AACpH,wHAAwH;AACxH,iHAAiH;AACjH,oHAAoH;AACpH,wHAAwH;AAexH,yCAAyC;AACzC,MAAM,OAAO,YAAY;IACf,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IACjD,MAAM,CAAe;IAE9B,YAAY,KAAmB;QAC9B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,GAAG,CAAC,IAAY,EAAE,OAAuB,EAAE,KAA+B;QACzE,IAAI,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtB,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IAED,qDAAqD;IACrD,MAAM,CAAC,IAAY,EAAE,OAAuB;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO;QAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,2CAA2C;IAC3C,KAAK;QACJ,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,gHAAgH;IAChH,OAAO;QACN,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,GAAG;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrD,KAAK,MAAM,OAAO,IAAI,GAAG;YAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,KAAuB;QAC3B,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QACzB,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,KAAK,MAAM,OAAO,IAAI,KAAK;YAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,sFAAsF;IACtF,MAAM,CAAC,OAA0C,EAAE,KAAiB;QACnE,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACnD,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;gBACrC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACvF,CAAC;QACF,CAAC;IACF,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,KAAiB;QACtB,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,GAAG;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrD,KAAK,MAAM,OAAO,IAAI,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;CACD","sourcesContent":["// The unbound index (dependency model §1, §4): the requests a host decided cannot bind yet, by the name they wait for.\n// Before the host's first publication every hold arriving on its links, and a request made here while `load` runs the\n// setups (before `load` this host's own requests throw), waits here (`unpublished`); after it, those its check left\n// unbound (`not_served`, `version`): a reference made here, a hold that arrived over a link and was refused for a name.\n// A publication wakes the requests of the names it serves (`load`'s every one, a reload's those of its names); a\n// request leaves when it ends (released, settled, given up, its link or origin closed, revoked) or binds. A request\n// waiting with a cause (after the publication) is on the host's `UnboundClock` while it is indexed: reported after 5 s.\n\nimport type { ChordError, FailureCause, Principal } from \"../data/index.ts\";\nimport type { UnboundClock } from \"./unbound-clock.ts\";\n\n/** A request in the index: a reference made here or a hold that arrived over a link. */\nexport interface UnboundRequest {\n\t/** Whom it acts for: revocation ends the requests of a revoked principal. */\n\treadonly principal: Principal | undefined;\n\t/** The name it waits for became usable (or the host published): it runs its check again, leaving the index first. */\n\twake(): void;\n\t/** It is revoked, or its host closes: it ends with `error` (a hold sends `gone`), leaving the index. */\n\tend(error: ChordError): void;\n}\n\n/** A host's unbound requests by name. */\nexport class UnboundIndex {\n\treadonly #byName = new Map<string, Set<UnboundRequest>>();\n\treadonly #clock: UnboundClock;\n\n\tconstructor(clock: UnboundClock) {\n\t\tthis.#clock = clock;\n\t}\n\n\t/**\n\t * Indexes `request` under `name` (once; again after a wake), waiting for the publication (no `cause`) or for a\n\t * provider that fits (`cause`, on the clock).\n\t */\n\tadd(name: string, request: UnboundRequest, cause: FailureCause | undefined): void {\n\t\tlet requests = this.#byName.get(name);\n\t\tif (requests === undefined) {\n\t\t\trequests = new Set();\n\t\t\tthis.#byName.set(name, requests);\n\t\t}\n\t\trequests.add(request);\n\t\tif (cause !== undefined) this.#clock.start(request, name, cause.error);\n\t}\n\n\t/** `request` ended or binds: it leaves the index. */\n\tdelete(name: string, request: UnboundRequest): void {\n\t\tconst requests = this.#byName.get(name);\n\t\tif (requests === undefined || !requests.delete(request)) return;\n\t\tthis.#clock.stop(request);\n\t\tif (requests.size === 0) this.#byName.delete(name);\n\t}\n\n\t/** The names requests wait for, sorted. */\n\tnames(): string[] {\n\t\treturn [...this.#byName.keys()].sort();\n\t}\n\n\t/** The host's publication: every request indexed (by any name) runs its check again, out of the index first. */\n\twakeAll(): void {\n\t\tconst all = [...this.#byName.values()].flatMap((requests) => [...requests]);\n\t\tthis.#byName.clear();\n\t\tfor (const request of all) this.#clock.stop(request);\n\t\tfor (const request of all) request.wake();\n\t}\n\n\t/**\n\t * A reload's publication: the requests indexed under `names` (the types and registries it serves) run their check\n\t * again, out of the index first; the others stay (carry-over \"Publications wake per name\").\n\t */\n\twake(names: Iterable<string>): void {\n\t\tconst woken: UnboundRequest[] = [];\n\t\tfor (const name of names) {\n\t\t\tconst requests = this.#byName.get(name);\n\t\t\tif (requests === undefined) continue;\n\t\t\tthis.#byName.delete(name);\n\t\t\twoken.push(...requests);\n\t\t}\n\t\tfor (const request of woken) this.#clock.stop(request);\n\t\tfor (const request of woken) request.wake();\n\t}\n\n\t/** Every indexed request acting for a principal `revoked` names ends with `error`. */\n\trevoke(revoked: (principal: Principal) => boolean, error: ChordError): void {\n\t\tfor (const requests of [...this.#byName.values()]) {\n\t\t\tfor (const request of [...requests]) {\n\t\t\t\tif (request.principal !== undefined && revoked(request.principal)) request.end(error);\n\t\t\t}\n\t\t}\n\t}\n\n\t/** The host closed: every indexed request ends with `error`. */\n\tclose(error: ChordError): void {\n\t\tconst all = [...this.#byName.values()].flatMap((requests) => [...requests]);\n\t\tthis.#byName.clear();\n\t\tfor (const request of all) this.#clock.stop(request);\n\t\tfor (const request of all) request.end(error);\n\t}\n}\n"]}

package/dist/host/uuid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uuid.d.ts","sourceRoot":"","sources":["../../src/host/uuid.ts"],"names":[],"mappings":"AAUA,6BAA6B;AAC7B,wBAAgB,MAAM,IAAI,MAAM,CA0B/B"}

package/dist/host/uuid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uuid.js","sourceRoot":"","sources":["../../src/host/uuid.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAElG,MAAM,YAAY,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;AAEtC,8EAA8E;AAC9E,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC;AAEvB,sGAAsG;AACtG,IAAI,QAA4B,CAAC;AAEjC,6BAA6B;AAC7B,MAAM,UAAU,MAAM;IACrB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;IACtD,aAAa,GAAG,SAAS,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,QAAQ;YACP,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,GAAG,CAAC;gBAC1B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,GAAG,CAAC;gBAC1B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,GAAG,CAAC;gBAC1B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;gBACzB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IACpB,CAAC;SAAM,CAAC;QACP,IAAI,QAAQ,KAAK,YAAY;YAAE,MAAM,IAAI,UAAU,CAAC,qCAAqC,CAAC,CAAC;QAC3F,QAAQ,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE;QAAE,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACvG,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACpD,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC7C,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACpD,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC7C,KAAK,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;IAC7C,KAAK,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAE,GAAG,IAAI,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5E,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACrJ,CAAC","sourcesContent":["// UUIDv7 (§3, code copied from pi-ai's `uuidv7`): time-ordered ids, minted for host incarnations.\n\nconst MAX_SEQUENCE = (1n << 41n) - 1n;\n\n/** The last timestamp used: a clock going backwards keeps the ids ordered. */\nlet lastTimestamp = -1;\n\n/** A random start, then incremented per id, so ids within one millisecond stay ordered and unique. */\nlet sequence: bigint | undefined;\n\n/** A time-ordered UUIDv7. */\nexport function uuidv7(): string {\n\tconst timestamp = Math.max(Date.now(), lastTimestamp);\n\tlastTimestamp = timestamp;\n\tconst bytes = new Uint8Array(16);\n\tglobalThis.crypto.getRandomValues(bytes);\n\tif (sequence === undefined) {\n\t\tsequence =\n\t\t\t(BigInt(bytes[1]!) << 32n) |\n\t\t\t(BigInt(bytes[2]!) << 24n) |\n\t\t\t(BigInt(bytes[3]!) << 16n) |\n\t\t\t(BigInt(bytes[4]!) << 8n) |\n\t\t\tBigInt(bytes[5]!);\n\t} else {\n\t\tif (sequence === MAX_SEQUENCE) throw new RangeError(\"UUIDv7 generator sequence exhausted\");\n\t\tsequence++;\n\t}\n\tconst time = BigInt(timestamp);\n\tfor (let index = 5; index >= 0; index--) bytes[index] = Number(time >> BigInt((5 - index) * 8)) & 0xff;\n\tbytes[6] = 0x70 | Number((sequence >> 37n) & 0x0fn);\n\tbytes[7] = Number((sequence >> 29n) & 0xffn);\n\tbytes[8] = 0x80 | Number((sequence >> 23n) & 0x3fn);\n\tbytes[9] = Number((sequence >> 15n) & 0xffn);\n\tbytes[10] = Number((sequence >> 7n) & 0xffn);\n\tbytes[11] = Number((sequence & 0x7fn) << 1n) | (bytes[11]! & 0x01);\n\tconst hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\"));\n\treturn `${hex.slice(0, 4).join(\"\")}-${hex.slice(4, 6).join(\"\")}-${hex.slice(6, 8).join(\"\")}-${hex.slice(8, 10).join(\"\")}-${hex.slice(10).join(\"\")}`;\n}\n"]}