@evolu/common 6.0.1-preview.8 → 7.0.0

package/src/Evolu/Protocol.ts

@@ -3,29 +3,39 @@
  *
  * Evolu Protocol is a local-first, end-to-end encrypted binary synchronization
  * protocol optimized for minimal size and maximum speed. It enables data sync
- * between a client and a relay, clients in a peer-to-peer (P2P) setup, or
- * relays with each other.
+ * between a client and a relay. In the future, direct peer-to-peer (P2P) sync
+ * between clients will be possible without a relay.
+ *
+ * Relays don't need to sync with each other—clients using those relays will
+ * sync them eventually. If a relay is offline (e.g., for maintenance), it will
+ * sync automatically later via client sync logic. For relay backup using
+ * SQLite, see https://sqlite.org/rsync.html (uses a similar algorithm to Evolu
+ * RBSR).
  *
  * Evolu Protocol is designed for SQLite but can be extended to any database. It
  * implements [Range-Based Set
  * Reconciliation](https://arxiv.org/abs/2212.13567). To learn how RBSR works,
  * check [Negentropy](https://logperiodic.com/rbsr.html). Evolu Protocol is
  * similar to Negentropy but uses different encoding and also provides data
- * transfer and ownership.
+ * transfer, ownership, real-time broadcasting, request-response semantics, and
+ * error handling.
  *
- * ### Message Structure
+ * ### Message structure
  *
  * | Field                          | Notes                     |
  * | :----------------------------- | :------------------------ |
  * | **Header**                     |                           |
  * | - {@link protocolVersion}      |                           |
  * | - {@link OwnerId}              | {@link Owner}             |
- * | **Initiator**                  |                           |
- * | - {@link WriteKeyMode}         |                           |
- * | - {@link WriteKey}             | If WriteKeyMode >= 1      |
- * | - {@link WriteKey}             | If WriteKeyMode = 2 (new) |
- * | **Non-initiator**              |                           |
+ * | - messageType                  | {@link MessageType}       |
+ * | **Request (messageType=0)**    |                           |
+ * | - hasWriteKey                  | 0 = no, 1 = yes           |
+ * | - {@link OwnerWriteKey}        | If hasWriteKey = 1        |
+ * | - subscriptionFlag             | {@link SubscriptionFlags} |
+ * | **Response (messageType=1)**   |                           |
  * | - {@link ProtocolErrorCode}    |                           |
+ * | **Broadcast (messageType=2)**  |                           |
+ * | - (no additional fields)       |                           |
  * | **Messages**                   |                           |
  * | - {@link NonNegativeInt}       | A number of messages.     |
  * | - {@link EncryptedCrdtMessage} |                           |
@@ -33,21 +43,14 @@
  * | - {@link NonNegativeInt}       | Number of ranges.         |
  * | - {@link Range}                |                           |
  *
- * ### WriteKey Validation
- *
- * The initiator sends WriteKeyMode and optionally one or two WriteKeys. One key
- * for write operations and two for key rotation (current and new). Note that
- * it's ok to not send any key if initiator is going to be synced with readonly
- * owner. The non-initiator validates them immediately after parsing the
- * initiator header, before processing any messages or ranges.
- *
- * ### WriteKey Rotation
+ * ### WriteKey validation
  *
- * When initiator's {@link WriteKeyMode} is `Rotation`, two WriteKeys are
- * present:
- *
- * 1. Current WriteKey (for validation)
- * 2. New WriteKey (to be stored)
+ * The initiator sends a hasWriteKey flag and optionally a WriteKey. The
+ * WriteKey is required when sending messages as a secure token proving the
+ * initiator can write changes. It's ok to not send a WriteKey if the initiator
+ * is only syncing (read-only) and not sending messages. The non-initiator
+ * validates the WriteKey immediately after parsing the initiator header, before
+ * processing any messages or ranges.
  *
  * ### Synchronization
  *
@@ -61,38 +64,48 @@
  * if further sync is needed or possible, continuing until both sides are
  * synchronized.
  *
+ * The **non-initiator always responds** to provide sync completion feedback,
+ * even with empty messages containing only the header and no error. This allows
+ * the initiator to detect when synchronization is complete.
+ *
  * Both **Messages** and **Ranges** are optional, allowing each side to send,
  * sync, or only subscribe data as needed.
  *
- * When the initiator sends data, the {@link WriteKey} is required in Messages as
- * a secure token proving the initiator can write changes. The non-initiator
- * responds without a {@link WriteKey}, since the initiator’s request already
- * signals it wants data. If the non-initiator detects an issue, it sends an
- * error code via the `Error` field in the header back to the initiator. In
- * relay-to-relay or P2P sync, both sides may require the {@link WriteKey}
- * depending on who is the initiator.
+ * When the initiator sends data, the {@link OwnerWriteKey} is required as a
+ * secure token proving the initiator can write changes. The non-initiator
+ * responds without a {@link OwnerWriteKey}, since the initiator’s request
+ * already signals it wants data. If the non-initiator detects an issue, it
+ * sends an error code via the `Error` field in the header back to the
+ * initiator. In relay-to-relay or P2P sync, both sides may require the
+ * {@link OwnerWriteKey} depending on who is the initiator.
  *
- * ### Protocol Errors
+ * ### Protocol errors
  *
  * The protocol uses error codes in the header to signal issues:
  *
  * - {@link ProtocolWriteKeyError}: The provided WriteKey is invalid or missing.
- * - {@link ProtocolWriteError}: A write operation failed (e.g., due to storage
- *   limits or billing).
- * - {@link ProtocolSyncError}: A generic or unexpected synchronization failure
+ * - {@link ProtocolWriteError}: A serious relay-side write failure occurred.
+ * - {@link ProtocolQuotaError}: Storage or billing quota exceeded.
+ * - {@link ProtocolSyncError}: A serious relay-side synchronization failure
  *   occurred.
- * - {@link ProtocolUnsupportedVersionError}: Protocol version mismatch.
+ * - {@link ProtocolVersionError}: Protocol version mismatch.
  * - {@link ProtocolInvalidDataError}: The message is malformed or corrupted.
  *
- * All protocol errors except `ProtocolInvalidDataError` include the `ownerId`
+ * All protocol errors except `ProtocolInvalidDataError` include the `OwnerId`
  * to allow clients to associate errors with the correct owner.
  *
- * ### Message Size Limit
+ * ### Message size limit
  *
  * The protocol enforces a strict maximum size for all messages, defined by
- * {@link maxProtocolMessageSize}. This ensures every {@link ProtocolMessage} is
- * less than or equal to this limit, eliminating the need for applications to
- * fragment and reconstruct messages during transmission.
+ * {@link ProtocolMessageMaxSize}. This ensures every {@link ProtocolMessage} is
+ * less than or equal to this limit, enabling stateless transports, simplified
+ * relay implementation, and predictable memory usage. When all messages don't
+ * fit within the limit, the protocol automatically continues synchronization in
+ * subsequent rounds using range-based reconciliation.
+ *
+ * Database mutations are limited to 640KB, which is smaller than the protocol
+ * message limit to ensure efficient sync with
+ * {@link defaultProtocolMessageRangesMaxSize}.
  *
  * ### Why Binary?
  *
@@ -100,13 +113,12 @@
  *
  * - Encrypted data doesn’t compress well, unlike plain JSON.
  * - Message size must be controlled during creation.
- * - Sequential byte reading is faster than parsing and can avoid conversions.
+ * - Sequential byte reading is faster than parsing and avoids conversions.
  *
  * It uses structure-aware encoding, significantly outperforming generic binary
  * serialization formats with the following optimizations:
  *
  * - **NonNegativeInt:** Up to 33% smaller than MessagePack.
- * - **Base64Url Strings:** Up to 25% size reduction.
  * - **DateIso:** Up to 75% smaller.
  * - **Timestamp Encoding:** Delta encoding for milliseconds and run-length
  *   encoding (RLE) for counters and NodeIds.
@@ -136,16 +148,41 @@
  * Version negotiation is per-owner, allowing Evolu Protocol to evolve safely
  * over time and provide clear feedback about version mismatches.
  *
+ * ### Credible exit
+ *
+ * The protocol specification is intentionally non-configurable to ensure
+ * universal compatibility. This design allows applications (users) to switch
+ * between any compliant relay without negotiation or compatibility checks
+ * beyond version matching. Relays are generic infrastructure that any
+ * application can use interchangeably making exit from any single provider
+ * technically feasible and economically viable.
+ *
  * @module
  */
 
-import { sha256 } from "@noble/hashes/sha2";
-import { pack, unpack, unpackMultiple } from "msgpackr";
+/**
+ * TODO:
+ *
+ * - The client-relay naming convention in functions like
+ *   `applyProtocolMessageAsClient` and `applyProtocolMessageAsRelay` is not
+ *   ideal. In the future, clients will be able to sync directly with each other
+ *   (P2P), making the current naming misleading. Consider using
+ *   initiator/non-initiator terminology instead, and consolidate into a single
+ *   `applyProtocolMessage` function with conditional arguments to reduce code
+ *   duplication.
+ * - Replace try-catch with Result + new Error (to preserve stacktraces). Measure
+ *   Result overhead, it should be super small.
+ * - Allow clients to broadcast messages that are not persisted by relays. This
+ *   would enable real-time ephemeral data (like cursor positions, typing
+ *   indicators) to be forwarded by relays without storage overhead.
+ */
+
+import { Packr } from "msgpackr";
 import { isNonEmptyReadonlyArray, NonEmptyReadonlyArray } from "../Array.js";
 import { assert } from "../Assert.js";
+import { Brand } from "../Brand.js";
 import {
   Buffer,
-  BufferError,
   bytesToHex,
   bytesToUtf8,
   createBuffer,
@@ -153,9 +190,9 @@ import {
   utf8ToBytes,
 } from "../Buffer.js";
 import {
-  CreateRandomBytesDep,
+  createPadmePadding,
   EncryptionKey,
-  padmePaddingLength,
+  RandomBytesDep,
   SymmetricCryptoDecryptError,
   SymmetricCryptoDep,
 } from "../Crypto.js";
@@ -166,253 +203,188 @@ import { err, ok, Result } from "../Result.js";
 import { SqliteValue } from "../Sqlite.js";
 import {
   Base64Url,
-  DateIsoString,
+  base64UrlToUint8Array,
+  between,
+  DateIso,
   Id,
-  idTypeValueLength,
-  JsonValueFromString,
-  maxLength,
-  NanoId,
+  IdBytes,
+  idBytesToId,
+  idBytesTypeValueLength,
+  idToIdBytes,
+  Int,
+  Json,
+  jsonToJsonValue,
   NonNegativeInt,
   Number,
-  object,
   PositiveInt,
-  record,
+  uint8ArrayToBase64Url,
 } from "../Type.js";
-import { Brand, Predicate } from "../Types.js";
+import { Predicate } from "../Types.js";
 import {
+  BaseOwnerError,
   Owner,
   OwnerId,
-  OwnerWithWriteAccess,
-  WriteKey,
-  writeKeyLength,
+  OwnerIdBytes,
+  ownerIdToOwnerIdBytes,
+  OwnerWriteKey,
+  ownerWriteKeyLength,
 } from "./Owner.js";
 import {
-  BinaryTimestamp,
-  binaryTimestampToTimestamp,
+  BaseRange,
+  CrdtMessage,
+  DbChange,
+  EncryptedCrdtMessage,
+  EncryptedDbChange,
+  Fingerprint,
+  FingerprintRange,
+  fingerprintSize,
+  InfiniteUpperBound,
+  Range,
+  RangeType,
+  RangeUpperBound,
+  SkipRange,
+  StorageDep,
+  TimestampsRange,
+} from "./Storage.js";
+import {
   Counter,
+  eqTimestamp,
   Millis,
   NodeId,
   Timestamp,
-  timestampToBinaryTimestamp,
+  TimestampBytes,
+  timestampBytesLength,
+  timestampBytesToTimestamp,
+  timestampToTimestampBytes,
 } from "./Timestamp.js";
 
-/** Maximum size of the entire protocol message in bytes. */
-export const maxProtocolMessageSize = 1_000_000 as PositiveInt;
-
-/** Maximum size of the ranges in bytes. */
-export const maxProtocolMessageRangesSize = 30_000 as PositiveInt;
-
-/** Evolu Protocol Message. */
-export type ProtocolMessage = Uint8Array & Brand<"ProtocolMessage">;
-
-/** Evolu Protocol version. */
-export const protocolVersion = 0 as NonNegativeInt;
-
-export const ProtocolErrorCode = {
-  NoError: 0,
-  /** A code for {@link ProtocolWriteKeyError}. */
-  WriteKeyError: 1,
-  /** A code for {@link ProtocolWriteError}. */
-  WriteError: 2,
-  /** A code for {@link ProtocolSyncError}. */
-  SyncError: 3,
-} as const;
-
-type ProtocolErrorCode =
-  (typeof ProtocolErrorCode)[keyof typeof ProtocolErrorCode];
-
-export const WriteKeyMode = {
-  None: 0,
-  Single: 1,
-  Rotation: 2,
-} as const;
-
-type WriteKeyMode = (typeof WriteKeyMode)[keyof typeof WriteKeyMode];
-
 /**
- * Evolu Protocol Storage
+ * Evolu uses MessagePack for numbers and JSONs.
  *
- * The protocol is agnostic to storage implementation details—any storage can be
- * plugged in, as long as it implements this interface. Implementations must
- * handle their own errors; return values only indicates overall success or
- * failure.
+ * - `variableMapSize: true` - More compact maps, ~5-10% slower encoding
+ * - `useRecords: false` - Standard MessagePack without extensions
  */
-export interface Storage {
-  readonly getSize: (ownerId: BinaryOwnerId) => NonNegativeInt | null;
+const packr = new Packr({ variableMapSize: true, useRecords: false });
 
-  readonly fingerprint: (
-    ownerId: BinaryOwnerId,
-    begin: NonNegativeInt,
-    end: NonNegativeInt,
-  ) => Fingerprint | null;
-
-  /**
-   * Computes fingerprints with their upper bounds in one call.
-   *
-   * This function can be replaced with many fingerprint/findLowerBound calls,
-   * but implementations can leverage it for batching and more efficient
-   * fingerprint computation.
-   */
-  readonly fingerprintRanges: (
-    ownerId: BinaryOwnerId,
-    buckets: ReadonlyArray<NonNegativeInt>,
-    upperBound?: RangeUpperBound,
-  ) => ReadonlyArray<FingerprintRange> | null;
-
-  readonly findLowerBound: (
-    ownerId: BinaryOwnerId,
-    begin: NonNegativeInt,
-    end: NonNegativeInt,
-    upperBound: RangeUpperBound,
-  ) => NonNegativeInt | null;
-
-  readonly iterate: (
-    ownerId: BinaryOwnerId,
-    begin: NonNegativeInt,
-    end: NonNegativeInt,
-    callback: (timestamp: BinaryTimestamp, index: NonNegativeInt) => boolean,
-  ) => void;
-
-  /** Validates the {@link WriteKey} for the given {@link Owner}. */
-  readonly validateWriteKey: (
-    ownerId: BinaryOwnerId,
-    writeKey: WriteKey,
-  ) => boolean;
-
-  /** Sets the {@link WriteKey} for the given {@link Owner}. */
-  readonly setWriteKey: (ownerId: BinaryOwnerId, writeKey: WriteKey) => boolean;
-
-  /** Write encrypted {@link CrdtMessage}s to storage. */
-  readonly writeMessages: (
-    ownerId: BinaryOwnerId,
-    messages: NonEmptyReadonlyArray<EncryptedCrdtMessage>,
-  ) => boolean;
-
-  /** Read encrypted {@link DbChange}s from storage. */
-  readonly readDbChange: (
-    ownerId: BinaryOwnerId,
-    timestamp: BinaryTimestamp,
-  ) => EncryptedDbChange | null;
-
-  /** Delete all data for the given {@link Owner}. */
-  readonly deleteOwner: (ownerId: BinaryOwnerId) => boolean;
-}
-
-export interface StorageDep {
-  readonly storage: Storage;
-}
-
-/** An encrypted {@link CrdtMessage}. */
-export interface EncryptedCrdtMessage {
-  readonly timestamp: Timestamp;
-  readonly change: EncryptedDbChange;
-}
-
-/** Encrypted DbChange */
-export type EncryptedDbChange = Uint8Array & Brand<"EncryptedDbChange">;
+const minProtocolMessageMaxSize = 1_000_000;
+const maxProtocolMessageMaxSize = 100_000_000;
 
 /**
- * A CRDT message that combines a unique {@link Timestamp} with a
- * {@link DbChange}.
+ * Protocol message maximum size.
+ *
+ * Defines the upper limit for how large a single protocol message can be.
+ * Implementations must enforce a maximum size between 1MB and 100MB to ensure
+ * compatibility across all Evolu implementations (the maximum size of mutation
+ * change is hardcoded and enforced hence the maximum size can't be smaller).
+ *
+ * Larger maximum sizes can be configured by relays to reduce roundtrips. For
+ * example, a dedicated relay with ample resources could configure a 100MB
+ * maximum to minimize roundtrips for large syncs.
+ *
+ * Only relays can safely configure larger sizes, as clients will handle them.
+ * Increasing this value on the client side would break compatibility with
+ * relays that enforce smaller limits.
  */
-export interface CrdtMessage {
-  readonly timestamp: Timestamp;
-  readonly change: DbChange;
-}
+export const ProtocolMessageMaxSize = between(
+  minProtocolMessageMaxSize,
+  maxProtocolMessageMaxSize,
+)(Int);
 
-/**
- * Base64Url string with maximum length of 256 characters. Encoding strings as
- * Base64UrlString saves up to 25% in size compared to regular strings.
- */
-export const Base64Url256 = maxLength(256)(Base64Url);
-export type Base64Url256 = typeof Base64Url256.Type;
+export type ProtocolMessageMaxSize = typeof ProtocolMessageMaxSize.Type;
 
 /**
- * A DbChange is a change to a table row. Together with a unique
- * {@link Timestamp}, it forms a {@link CrdtMessage}.
+ * Default {@link ProtocolMessageMaxSize} (1MB).
+ *
+ * The standard size used across Evolu implementations. Relays with more
+ * resources can configure larger sizes to reduce roundtrips.
  */
-export const DbChange = object({
-  table: Base64Url256,
-  id: Id,
-  values: record(Base64Url256, SqliteValue),
-});
-export type DbChange = typeof DbChange.Type;
-
-export const RangeType = {
-  Fingerprint: 1,
-  Skip: 0,
-  Timestamps: 2,
-} as const;
-
-export type RangeType = (typeof RangeType)[keyof typeof RangeType];
-
-export const InfiniteUpperBound = Symbol("InfiniteUpperBound");
-export type InfiniteUpperBound = typeof InfiniteUpperBound;
+export const defaultProtocolMessageMaxSize =
+  minProtocolMessageMaxSize as ProtocolMessageMaxSize;
 
 /**
- * Union type for Range's upperBound: either a {@link BinaryTimestamp} or
- * {@link InfiniteUpperBound}.
+ * Protocol message ranges maximum size.
+ *
+ * Defines the upper limit for how large the ranges section of a protocol
+ * message can be. Implementations must enforce a maximum size between 3KB and
+ * 100KB to ensure compatibility.
+ *
+ * The upper bound is set to ensure ranges fit within the default 1MB
+ * {@link defaultProtocolMessageMaxSize}, maintaining compatibility between all
+ * clients and relays.
  */
-export type RangeUpperBound = BinaryTimestamp | InfiniteUpperBound;
-
-interface BaseRange {
-  readonly upperBound: RangeUpperBound;
-}
-
-export interface SkipRange extends BaseRange {
-  readonly type: typeof RangeType.Skip;
-}
-
-export interface FingerprintRange extends BaseRange {
-  readonly type: typeof RangeType.Fingerprint;
-  readonly fingerprint: Fingerprint;
-}
+export const ProtocolMessageRangesMaxSize = between(3_000, 100_000)(Int);
+export type ProtocolMessageRangesMaxSize =
+  typeof ProtocolMessageRangesMaxSize.Type;
 
 /**
- * A cryptographic hash used for efficiently comparing collections of
- * {@link BinaryTimestamp}s.
+ * Default {@link ProtocolMessageRangesMaxSize} (30KB).
  *
- * It consists of the first {@link fingerprintSize} bytes of the SHA-256 hash of
- * one or more timestamps.
+ * The standard size used across Evolu implementations. Relays with more
+ * resources can configure larger sizes to reduce roundtrips.
  */
-export type Fingerprint = Uint8Array & Brand<"Fingerprint">;
+export const defaultProtocolMessageRangesMaxSize =
+  30_000 as ProtocolMessageRangesMaxSize;
 
-export const fingerprintSize = 12 as NonNegativeInt;
+/** Evolu Protocol Message. */
+export type ProtocolMessage = Uint8Array & Brand<"ProtocolMessage">;
 
-/** A fingerprint of an empty range. */
-export const zeroFingerprint = new Uint8Array(fingerprintSize) as Fingerprint;
+/** Evolu Protocol version. */
+export const protocolVersion = NonNegativeInt.orThrow(1);
+
+export const MessageType = {
+  /** Request message from initiator (client) to non-initiator (relay). */
+  Request: 0,
+  /** Response message from non-initiator (relay) to initiator (client). */
+  Response: 1,
+  /** Broadcast message from non-initiator (relay) to subscribed clients. */
+  Broadcast: 2,
+} as const;
 
-export interface TimestampsRange extends BaseRange {
-  readonly type: typeof RangeType.Timestamps;
-  readonly timestamps: ReadonlyArray<BinaryTimestamp>;
-}
+export type MessageType = (typeof MessageType)[keyof typeof MessageType];
 
-export interface TimestampsRangeWithTimestampsBuffer extends BaseRange {
-  readonly type: typeof RangeType.Timestamps;
-  readonly timestamps: TimestampsBuffer;
-}
+export const SubscriptionFlags = {
+  /** No subscription changes for this owner. */
+  None: 0,
+  /** Subscribe to updates for this owner. */
+  Subscribe: 1,
+  /** Unsubscribe from updates for this owner. */
+  Unsubscribe: 2,
+} as const;
+
+export type SubscriptionFlag =
+  (typeof SubscriptionFlags)[keyof typeof SubscriptionFlags];
+
+export const ProtocolErrorCode = {
+  NoError: 0,
+  /** A code for {@link ProtocolWriteKeyError}. */
+  WriteKeyError: 1,
+  /** A code for {@link ProtocolWriteError}. */
+  WriteError: 2,
+  /** A code for {@link ProtocolQuotaError}. */
+  QuotaError: 3,
+  /** A code for {@link ProtocolSyncError}. */
+  SyncError: 4,
+} as const;
 
-export type Range = SkipRange | FingerprintRange | TimestampsRange;
+type ProtocolErrorCode =
+  (typeof ProtocolErrorCode)[keyof typeof ProtocolErrorCode];
 
 export type ProtocolError =
-  | ProtocolUnsupportedVersionError
+  | ProtocolVersionError
   | ProtocolInvalidDataError
   | ProtocolWriteKeyError
   | ProtocolWriteError
-  | ProtocolSyncError;
-
-/** Base interface for all protocol errors. */
-export interface ProtocolErrorBase {
-  readonly ownerId: OwnerId;
-}
+  | ProtocolSyncError
+  | ProtocolQuotaError
+  | ProtocolTimestampMismatchError;
 
 /**
  * Represents a version mismatch in the Evolu Protocol. Occurs when the
  * initiator and non-initiator are using incompatible protocol versions.
  */
-export interface ProtocolUnsupportedVersionError extends ProtocolErrorBase {
-  readonly type: "ProtocolUnsupportedVersionError";
-  readonly unsupportedVersion: NonNegativeInt;
+export interface ProtocolVersionError extends BaseOwnerError {
+  readonly type: "ProtocolVersionError";
+  readonly version: NonNegativeInt;
   /** Indicates which side is obsolete and should update. */
   readonly isInitiator: boolean;
 }
@@ -424,44 +396,72 @@ export interface ProtocolInvalidDataError {
   readonly error: unknown;
 }
 
-/** Error when a {@link WriteKey} is invalid, missing, or fails validation. */
-export interface ProtocolWriteKeyError extends ProtocolErrorBase {
+/** Error when a {@link OwnerWriteKey} is invalid, missing, or fails validation. */
+export interface ProtocolWriteKeyError extends BaseOwnerError {
   readonly type: "ProtocolWriteKeyError";
 }
 
 /**
- * Error when a write fails due to storage limits or billing requirements.
- * Indicates the need to expand capacity or resolve payment issues.
+ * Error indicating a serious relay-side write failure. Clients should log this
+ * error and show a generic sync error to the user.
  */
-export interface ProtocolWriteError extends ProtocolErrorBase {
+export interface ProtocolWriteError extends BaseOwnerError {
   readonly type: "ProtocolWriteError";
 }
 
 /**
- * Error indicating a synchronization failure during the protocol exchange. Used
- * for unexpected or generic sync errors not covered by other error types.
+ * Error when storage or billing quota is exceeded.
+ *
+ * When relay rejects writes due to quota, the affected device stops syncing
+ * because RBSR requires both sides to converge—if the relay won't accept the
+ * client's data, they can never reach the same state. Only the device with
+ * excess local data is affected. Other devices that haven't exceeded quota can
+ * still sync normally.
+ *
+ * Clients should prompt the user to contact the relay provider or upgrade their
+ * plan. Quota monitoring and management is the relay provider's
+ * responsibility.
  */
-export interface ProtocolSyncError extends ProtocolErrorBase {
+export interface ProtocolQuotaError extends BaseOwnerError {
+  readonly type: "ProtocolQuotaError";
+}
+
+/**
+ * Error indicating a serious relay-side synchronization failure. Clients should
+ * log this error and show a generic sync error to the user.
+ */
+export interface ProtocolSyncError extends BaseOwnerError {
   readonly type: "ProtocolSyncError";
 }
 
+/**
+ * Error when embedded timestamp doesn't match expected timestamp in
+ * EncryptedDbChange. Indicates potential tampering or corruption of CRDT
+ * messages.
+ */
+export interface ProtocolTimestampMismatchError {
+  readonly type: "ProtocolTimestampMismatchError";
+  readonly expected: Timestamp;
+  readonly timestamp: Timestamp;
+}
+
 /**
  * Creates a {@link ProtocolMessage} from CRDT messages.
  *
- * If the message size would exceed {@link maxProtocolMessageSize}, the protocol
- * ensures all messages will be sent in the next round(s) even over
+ * If the message size would exceed {@link defaultProtocolMessageMaxSize}, the
+ * protocol ensures all messages will be sent in the next round(s) even over
  * unidirectional and stateless transports.
  */
 export const createProtocolMessageFromCrdtMessages =
-  (deps: SymmetricCryptoDep & CreateRandomBytesDep) =>
+  (deps: RandomBytesDep & SymmetricCryptoDep) =>
   (
-    owner: OwnerWithWriteAccess,
+    owner: Owner,
     messages: NonEmptyReadonlyArray<CrdtMessage>,
-    maxSize?: PositiveInt,
+    maxSize?: ProtocolMessageMaxSize,
   ): ProtocolMessage => {
     const buffer = createProtocolMessageBuffer(owner.id, {
-      type: "initiator",
-      totalMaxSize: maxSize ?? maxProtocolMessageSize,
+      messageType: MessageType.Request,
+      totalMaxSize: maxSize ?? defaultProtocolMessageMaxSize,
       writeKey: owner.writeKey,
     });
 
@@ -469,7 +469,7 @@ export const createProtocolMessageFromCrdtMessages =
 
     for (const message of messages) {
       const change = encodeAndEncryptDbChange(deps)(
-        message.change,
+        message,
         owner.encryptionKey,
       );
       const encryptedCrdtMessage = { timestamp: message.timestamp, change };
@@ -490,14 +490,14 @@ export const createProtocolMessageFromCrdtMessages =
        *
        * The ideal approach would be to send three ranges (skip, fingerprint,
        * skip) where the fingerprint of unsent messages would act as narrow sync
-       * probe. I think we can send {@link zeroFingerprint} which can be
-       * interpreted as an indication that the other side should reply with
+       * probe. I think we can send `zeroFingerprint` which can be interpreted
+       * as an indication that the other side should reply with
        * {@link TimestampsRange}, so no need to restart syncing.
        *
        * For now, using a random fingerprint avoids extra complexity and is good
        * enough for this case.
        */
-      const randomFingerprint = deps.createRandomBytes(
+      const randomFingerprint = deps.randomBytes.create(
         fingerprintSize,
       ) as unknown as Fingerprint;
 
@@ -515,17 +515,23 @@ export const createProtocolMessageFromCrdtMessages =
 /** Creates a {@link ProtocolMessage} for sync. */
 export const createProtocolMessageForSync =
   (deps: StorageDep) =>
-  (ownerId: OwnerId): ProtocolMessage | null => {
-    const buffer = createProtocolMessageBuffer(ownerId, { type: "initiator" });
-    const binaryOwnerId = ownerIdToBinaryOwnerId(ownerId);
+  (
+    ownerId: OwnerId,
+    subscriptionFlag?: SubscriptionFlag,
+  ): ProtocolMessage | null => {
+    const buffer = createProtocolMessageBuffer(ownerId, {
+      messageType: MessageType.Request,
+      subscriptionFlag: subscriptionFlag ?? SubscriptionFlags.None,
+    });
+    const ownerIdBytes = ownerIdToOwnerIdBytes(ownerId);
 
-    const size = deps.storage.getSize(binaryOwnerId);
+    const size = deps.storage.getSize(ownerIdBytes);
     // Errors are handled by the storage.
     if (size == null) return null;
 
     splitRange(deps)(
-      binaryOwnerId,
-      0 as NonNegativeInt,
+      ownerIdBytes,
+      NonNegativeInt.orThrow(0),
       size,
       InfiniteUpperBound,
       buffer,
@@ -534,18 +540,13 @@ export const createProtocolMessageForSync =
     return buffer.unwrap();
   };
 
-/** Creates a ProtocolMessage for {@link WriteKey} rotation. */
-export const createProtocolMessageForWriteKeyRotation = (
+export const createProtocolMessageForUnsubscribe = (
   ownerId: OwnerId,
-  currentWriteKey: WriteKey,
-  newWriteKey: WriteKey,
-): ProtocolMessage => {
-  const buffer = createProtocolMessageBuffer(ownerId, {
-    type: "initiator",
-    writeKey: [currentWriteKey, newWriteKey],
-  });
-  return buffer.unwrap();
-};
+): ProtocolMessage =>
+  createProtocolMessageBuffer(ownerId, {
+    messageType: MessageType.Request,
+    subscriptionFlag: SubscriptionFlags.Unsubscribe,
+  }).unwrap();
 
 /**
  * Mutable builder for constructing {@link ProtocolMessage} respecting size
@@ -574,24 +575,27 @@ export interface ProtocolMessageBuffer {
 export const createProtocolMessageBuffer = (
   ownerId: OwnerId,
   options: {
-    readonly totalMaxSize?: PositiveInt | undefined;
-    readonly rangesMaxSize?: PositiveInt | undefined;
+    readonly totalMaxSize?: ProtocolMessageMaxSize | undefined;
+    readonly rangesMaxSize?: ProtocolMessageRangesMaxSize | undefined;
     readonly version?: NonNegativeInt;
   } & (
     | {
-        readonly type: "initiator";
-        /** Single key or [current, new] for rotation. */
-        readonly writeKey?: WriteKey | readonly [WriteKey, WriteKey];
+        readonly messageType: typeof MessageType.Request;
+        readonly writeKey?: OwnerWriteKey;
+        readonly subscriptionFlag?: SubscriptionFlag;
       }
     | {
-        readonly type: "non-initiator";
+        readonly messageType: typeof MessageType.Response;
         readonly errorCode: ProtocolErrorCode;
       }
+    | {
+        readonly messageType: typeof MessageType.Broadcast;
+      }
   ),
 ): ProtocolMessageBuffer => {
   const {
-    totalMaxSize = maxProtocolMessageSize,
-    rangesMaxSize = maxProtocolMessageRangesSize,
+    totalMaxSize = defaultProtocolMessageMaxSize,
+    rangesMaxSize = defaultProtocolMessageRangesMaxSize,
     version = protocolVersion,
   } = options;
 
@@ -609,20 +613,19 @@ export const createProtocolMessageBuffer = (
   };
 
   encodeNonNegativeInt(buffers.header, version);
-  buffers.header.extend(ownerIdToBinaryOwnerId(ownerId));
+  buffers.header.extend(ownerIdToOwnerIdBytes(ownerId));
+  buffers.header.extend([options.messageType]);
 
-  if (options.type === "initiator") {
+  if (options.messageType === MessageType.Request) {
     if (!options.writeKey) {
-      buffers.header.extend([WriteKeyMode.None]);
-    } else if (!Array.isArray(options.writeKey)) {
-      buffers.header.extend([WriteKeyMode.Single]);
-      buffers.header.extend(options.writeKey as WriteKey);
+      buffers.header.extend([0]);
     } else {
-      buffers.header.extend([WriteKeyMode.Rotation]);
-      buffers.header.extend(options.writeKey[0] as WriteKey); // current
-      buffers.header.extend(options.writeKey[1] as WriteKey); // new
+      buffers.header.extend([1]);
+      buffers.header.extend(options.writeKey);
     }
-  } else {
+    const subscriptionFlag = options.subscriptionFlag ?? SubscriptionFlags.None;
+    buffers.header.extend([subscriptionFlag]);
+  } else if (options.messageType === MessageType.Response) {
     buffers.header.extend([options.errorCode]);
   }
 
@@ -631,7 +634,7 @@ export const createProtocolMessageBuffer = (
   const isWithinSizeLimits = () => getSize() <= totalMaxSize;
 
   const getSize = () =>
-    (getHeaderAndMessagesSize() + getRangesSize()) as PositiveInt;
+    PositiveInt.orThrow(getHeaderAndMessagesSize() + getRangesSize());
 
   const getHeaderAndMessagesSize = () =>
     buffers.header.getLength() +
@@ -705,10 +708,15 @@ export const createProtocolMessageBuffer = (
     },
 
     addRange: (range) => {
+      assert(
+        options.messageType !== MessageType.Broadcast,
+        "Cannot add a range into broadcast message",
+      );
       assert(
         !isLastRangeInfinite,
         "Cannot add a range after an InfiniteUpperBound range",
       );
+
       isLastRangeInfinite = range.upperBound === InfiniteUpperBound;
 
       /**
@@ -718,13 +726,16 @@ export const createProtocolMessageBuffer = (
        */
       if (range.upperBound !== InfiniteUpperBound)
         buffers.ranges.timestamps.add(
-          binaryTimestampToTimestamp(range.upperBound),
+          timestampBytesToTimestamp(range.upperBound),
         );
       else {
         buffers.ranges.timestamps.addInfinite();
       }
 
-      encodeNonNegativeInt(buffers.ranges.types, range.type as NonNegativeInt);
+      encodeNonNegativeInt(
+        buffers.ranges.types,
+        NonNegativeInt.orThrow(range.type),
+      );
 
       switch (range.type) {
         case RangeType.Skip:
@@ -765,6 +776,11 @@ export const createProtocolMessageBuffer = (
   };
 };
 
+export interface TimestampsRangeWithTimestampsBuffer extends BaseRange {
+  readonly type: typeof RangeType.Timestamps;
+  readonly timestamps: TimestampsBuffer;
+}
+
 export interface TimestampsBuffer {
   readonly add: (timestamp: Timestamp) => void;
   readonly addInfinite: () => void;
@@ -774,7 +790,7 @@ export interface TimestampsBuffer {
 }
 
 export const createTimestampsBuffer = (): TimestampsBuffer => {
-  let count = 0 as NonNegativeInt;
+  let count = NonNegativeInt.orThrow(0);
   const countBuffer = createBuffer();
 
   const syncCount = () => {
@@ -841,9 +857,9 @@ const createRunLengthEncoder = <T>(
   encodeValue: (buffer: Buffer, value: T) => void,
 ): RunLengthEncoder<T> => {
   const buffer = createBuffer();
-  let previousLength = 0 as NonNegativeInt;
+  let previousLength = NonNegativeInt.orThrow(0);
   let previousValue = null as T | null;
-  let runLength = 0 as NonNegativeInt;
+  let runLength = NonNegativeInt.orThrow(0);
 
   return {
     add: (value) => {
@@ -852,7 +868,7 @@ const createRunLengthEncoder = <T>(
         buffer.truncate(previousLength);
       } else {
         previousValue = value;
-        runLength = 1 as NonNegativeInt;
+        runLength = NonNegativeInt.orThrow(1);
       }
       previousLength = buffer.getLength();
       encodeValue(buffer, value);
@@ -866,40 +882,61 @@ const createRunLengthEncoder = <T>(
 };
 
 export interface ApplyProtocolMessageAsClientOptions {
-  getWriteKey?: (ownerId: OwnerId) => WriteKey | null;
+  getWriteKey?: (ownerId: OwnerId) => OwnerWriteKey | null;
 
-  /** For testing purposes only; should not be used in production. */
-  version?: NonNegativeInt;
+  rangesMaxSize?: ProtocolMessageRangesMaxSize;
 
-  totalMaxSize?: PositiveInt;
-  rangesMaxSize?: PositiveInt;
+  /** For tests only. */
+  version?: NonNegativeInt;
 }
 
+/**
+ * Result type for {@link applyProtocolMessageAsClient} that distinguishes
+ * between responses to client requests and broadcast messages.
+ */
+export type ApplyProtocolMessageAsClientResult =
+  | { readonly type: "response"; readonly message: ProtocolMessage }
+  | { readonly type: "no-response" }
+  | { readonly type: "broadcast" };
+
 export const applyProtocolMessageAsClient =
   (deps: StorageDep) =>
-  (
+  async (
     inputMessage: Uint8Array,
-    {
-      getWriteKey,
-      version = protocolVersion,
-      totalMaxSize,
-      rangesMaxSize,
-    }: ApplyProtocolMessageAsClientOptions = {},
-  ): Result<ProtocolMessage | null, ProtocolError> =>
-    tryDecodeProtocolData<ProtocolMessage | null, ProtocolError>(
-      inputMessage,
-      (input) => {
-        const [requestedVersion, ownerId] = decodeVersionAndOwner(input);
-
-        if (requestedVersion !== version) {
-          return err<ProtocolUnsupportedVersionError>({
-            type: "ProtocolUnsupportedVersionError",
-            unsupportedVersion: requestedVersion,
-            isInitiator: version < requestedVersion,
-            ownerId,
-          });
-        }
+    options: ApplyProtocolMessageAsClientOptions = {},
+  ): Promise<
+    Result<
+      ApplyProtocolMessageAsClientResult,
+      | ProtocolInvalidDataError
+      | ProtocolSyncError
+      | ProtocolVersionError
+      | ProtocolWriteError
+      | ProtocolWriteKeyError
+      | ProtocolQuotaError
+    >
+  > => {
+    try {
+      const input = createBuffer(inputMessage);
+      const [requestedVersion, ownerId] = decodeVersionAndOwner(input);
+      const version = options.version ?? protocolVersion;
+
+      if (requestedVersion !== version) {
+        return err<ProtocolVersionError>({
+          type: "ProtocolVersionError",
+          version: requestedVersion,
+          isInitiator: version < requestedVersion,
+          ownerId,
+        });
+      }
+
+      const messageType = input.shift() as MessageType;
+      assert(
+        messageType === MessageType.Response ||
+          messageType === MessageType.Broadcast,
+        "Invalid MessageType",
+      );
 
+      if (messageType === MessageType.Response) {
         const errorCode = input.shift() as ProtocolErrorCode;
         if (errorCode !== ProtocolErrorCode.NoError) {
           switch (errorCode) {
@@ -913,6 +950,11 @@ export const applyProtocolMessageAsClient =
                 type: "ProtocolWriteError",
                 ownerId,
               });
+            case ProtocolErrorCode.QuotaError:
+              return err<ProtocolQuotaError>({
+                type: "ProtocolQuotaError",
+                ownerId,
+              });
             case ProtocolErrorCode.SyncError:
               return err<ProtocolSyncError>({
                 type: "ProtocolSyncError",
@@ -924,183 +966,248 @@ export const applyProtocolMessageAsClient =
               );
           }
         }
+      }
 
-        const messages = decodeMessages(input);
-        const binaryOwnerId = ownerIdToBinaryOwnerId(ownerId);
+      const messages = decodeMessages(input);
+      const ownerIdBytes = ownerIdToOwnerIdBytes(ownerId);
 
-        if (
-          isNonEmptyReadonlyArray(messages) &&
-          !deps.storage.writeMessages(binaryOwnerId, messages)
-        ) {
-          return ok(null);
-        }
+      if (isNonEmptyReadonlyArray(messages)) {
+        const writeResult = await deps.storage.writeMessages(
+          ownerIdBytes,
+          messages,
+        );
+        // Errors are handled by the Storage. Here we just stop syncing.
+        if (!writeResult.ok) return ok({ type: "no-response" });
+      }
 
-        if (!getWriteKey) return ok(null);
-        const writeKey = getWriteKey(ownerId);
-        if (writeKey == null) return ok(null);
+      // Now: No writeKey, no sync.
+      // TODO: Allow to sync SharedReadonlyOwner
+      // Without local changes, writeKey will not be required.
+      // With local changes, writeKey will be required and if not provided,
+      // the sync will stop.
+      const writeKey = options.getWriteKey?.(ownerId);
+      if (writeKey == null) {
+        return ok({ type: "no-response" });
+      }
 
-        const output = createProtocolMessageBuffer(ownerId, {
-          type: "initiator",
-          writeKey,
-          totalMaxSize,
-          rangesMaxSize,
-        });
+      if (messageType === MessageType.Broadcast) {
+        return ok({ type: "broadcast" });
+      }
 
-        return sync(deps)("initiator", input, output, binaryOwnerId);
-      },
-    );
+      const ranges = decodeRanges(input);
+
+      if (!isNonEmptyReadonlyArray(ranges)) {
+        return ok({ type: "no-response" });
+      }
+
+      const output = createProtocolMessageBuffer(ownerId, {
+        messageType: MessageType.Request,
+        writeKey,
+        rangesMaxSize: options.rangesMaxSize,
+      });
+
+      const syncResult = sync(deps)(ranges, output, ownerIdBytes);
+
+      // Client sync error (handled via Storage) or no changes.
+      if (!syncResult.ok || !syncResult.value) {
+        return ok({ type: "no-response" });
+      }
+
+      return ok({ type: "response", message: output.unwrap() });
+    } catch (error) {
+      return err<ProtocolInvalidDataError>({
+        type: "ProtocolInvalidDataError",
+        data: inputMessage,
+        error,
+      });
+    }
+  };
 
 export interface ApplyProtocolMessageAsRelayOptions {
   /** To subscribe an owner for broadcasting. */
   subscribe?: (ownerId: OwnerId) => void;
 
+  /** To unsubscribe an owner from broadcasting. */
+  unsubscribe?: (ownerId: OwnerId) => void;
+
   /** To broadcast a protocol message to all subscribers. */
   broadcast?: (ownerId: OwnerId, message: ProtocolMessage) => void;
 
-  totalMaxSize?: PositiveInt;
-  rangesMaxSize?: PositiveInt;
+  totalMaxSize?: ProtocolMessageMaxSize;
+  rangesMaxSize?: ProtocolMessageRangesMaxSize;
+}
+
+/**
+ * Result type for {@link applyProtocolMessageAsRelay}.
+ *
+ * Unlike {@link ApplyProtocolMessageAsClientResult}, relays always respond with
+ * a message to provide sync completion feedback. This ensures the initiator can
+ * reliably detect when synchronization is complete, even when there's nothing
+ * to sync. Clients may choose not to respond in certain cases (like when they
+ * receive broadcast messages or when they lack a write key for syncing).
+ */
+export interface ApplyProtocolMessageAsRelayResult {
+  readonly type: "response";
+  readonly message: ProtocolMessage;
 }
 
 export const applyProtocolMessageAsRelay =
   (deps: StorageDep) =>
-  (
+  async (
     inputMessage: Uint8Array,
-    {
-      subscribe,
-      broadcast,
-      totalMaxSize,
-      rangesMaxSize,
-    }: ApplyProtocolMessageAsRelayOptions = {},
-    /** For testing purposes only; should not be used in production. */
+    options: ApplyProtocolMessageAsRelayOptions = {},
+    /** For tests only. */
     version = protocolVersion,
-  ): Result<ProtocolMessage | null, ProtocolInvalidDataError> =>
-    tryDecodeProtocolData(inputMessage, (input) => {
+  ): Promise<
+    Result<ApplyProtocolMessageAsRelayResult, ProtocolInvalidDataError>
+  > => {
+    try {
+      const input = createBuffer(inputMessage);
       const [requestedVersion, ownerId] = decodeVersionAndOwner(input);
-      const binaryOwnerId = ownerIdToBinaryOwnerId(ownerId);
+      const ownerIdBytes = ownerIdToOwnerIdBytes(ownerId);
 
       if (requestedVersion !== version) {
         // Non-initiator responds with its version and ownerId.
         const output = createBuffer();
         encodeNonNegativeInt(output, version);
-        output.extend(binaryOwnerId);
-        return ok(output.unwrap() as ProtocolMessage);
+        output.extend(ownerIdBytes);
+        return ok({
+          type: "response",
+          message: output.unwrap() as ProtocolMessage,
+        });
       }
 
-      subscribe?.(ownerId);
-
-      const writeKeyMode = input.shift() as WriteKeyMode;
-      let writeKey: WriteKey | undefined;
-      let newWriteKey: WriteKey | undefined;
-
-      if (writeKeyMode !== WriteKeyMode.None) {
-        writeKey = input.shiftN(writeKeyLength) as WriteKey;
-        switch (writeKeyMode) {
-          case WriteKeyMode.Single:
-            break;
-          case WriteKeyMode.Rotation:
-            newWriteKey = input.shiftN(writeKeyLength) as WriteKey;
-            break;
-          default:
-            throw new ProtocolDecodeError(
-              `Invalid WriteKeyMode: ${writeKeyMode}`,
-            );
-        }
+      const messageType = input.shift() as MessageType;
+      assert(messageType === MessageType.Request, "Invalid MessageType");
+
+      const hasWriteKey = input.shift();
+      let writeKey: OwnerWriteKey | undefined;
+
+      if (hasWriteKey === 1) {
+        writeKey = input.shiftN(ownerWriteKeyLength) as OwnerWriteKey;
+      }
+
+      const subscriptionFlag = input.shift() as SubscriptionFlag;
+
+      switch (subscriptionFlag) {
+        case SubscriptionFlags.Subscribe:
+          options.subscribe?.(ownerId);
+          break;
+        case SubscriptionFlags.Unsubscribe:
+          options.unsubscribe?.(ownerId);
+          break;
+        case SubscriptionFlags.None:
+          break;
       }
 
       if (writeKey) {
-        const isValid = deps.storage.validateWriteKey(binaryOwnerId, writeKey);
+        const isValid = deps.storage.validateWriteKey(ownerIdBytes, writeKey);
         if (!isValid) {
-          return ok(
-            createProtocolMessageBuffer(ownerId, {
-              type: "non-initiator",
+          return ok({
+            type: "response",
+            message: createProtocolMessageBuffer(ownerId, {
+              messageType: MessageType.Response,
               errorCode: ProtocolErrorCode.WriteKeyError,
             }).unwrap(),
-          );
-        }
-
-        if (newWriteKey) {
-          const rotationSuccess = deps.storage.setWriteKey(
-            binaryOwnerId,
-            newWriteKey,
-          );
-          if (!rotationSuccess) {
-            return ok(
-              createProtocolMessageBuffer(ownerId, {
-                type: "non-initiator",
-                errorCode: ProtocolErrorCode.WriteError,
-              }).unwrap(),
-            );
-          }
+          });
         }
       }
 
       const messages = decodeMessages(input);
 
       if (isNonEmptyReadonlyArray(messages)) {
-        if (!writeKey)
-          return ok(
-            createProtocolMessageBuffer(ownerId, {
-              type: "non-initiator",
+        if (!writeKey) {
+          return ok({
+            type: "response",
+            message: createProtocolMessageBuffer(ownerId, {
+              messageType: MessageType.Response,
               errorCode: ProtocolErrorCode.WriteKeyError,
             }).unwrap(),
-          );
+          });
+        }
+
+        const writeResult = await deps.storage.writeMessages(
+          ownerIdBytes,
+          messages,
+        );
 
-        // Only broadcast if there's no ranges.
-        if (broadcast && input.getLength() === 0) {
+        if (!writeResult.ok) {
+          const errorCode =
+            writeResult.error.type === "StorageWriteError"
+              ? ProtocolErrorCode.WriteError
+              : ProtocolErrorCode.QuotaError;
+          const message = createProtocolMessageBuffer(ownerId, {
+            messageType: MessageType.Response,
+            errorCode,
+          }).unwrap();
+          return ok({ type: "response", message });
+        }
+
+        /**
+         * Broadcast messages to all subscribed owners for real-time
+         * synchronization between clients.
+         *
+         * Messages are only broadcasted after successful write to ensure
+         * devices that can still sync aren't affected by quota errors, and to
+         * prevent using a half-working relay service (broadcasting without
+         * persistence).
+         *
+         * When a relay's database is deleted or clients migrate to a new relay
+         * (without data migration), clients will sync their data to the relay,
+         * and the relay will broadcast those messages to other connected
+         * clients. Those clients may receive messages they already have, but
+         * this is safe because Evolu sync is idempotent. As the relay becomes
+         * more synchronized with clients over time, fewer duplicate messages
+         * will be broadcasted.
+         */
+        if (options.broadcast) {
           const broadcastBuffer = createProtocolMessageBuffer(ownerId, {
-            type: "non-initiator",
-            errorCode: ProtocolErrorCode.NoError,
-            totalMaxSize,
-            rangesMaxSize,
+            messageType: MessageType.Broadcast,
+            totalMaxSize: options.totalMaxSize,
+            rangesMaxSize: options.rangesMaxSize,
             version,
           });
           for (const message of messages) {
             broadcastBuffer.addMessage(message);
           }
-          broadcast(ownerId, broadcastBuffer.unwrap());
+          options.broadcast(ownerId, broadcastBuffer.unwrap());
         }
-
-        if (!deps.storage.writeMessages(binaryOwnerId, messages))
-          return ok(
-            createProtocolMessageBuffer(ownerId, {
-              type: "non-initiator",
-              errorCode: ProtocolErrorCode.WriteError,
-            }).unwrap(),
-          );
       }
 
+      const ranges = decodeRanges(input);
+
       const output = createProtocolMessageBuffer(ownerId, {
-        type: "non-initiator",
+        messageType: MessageType.Response,
         errorCode: ProtocolErrorCode.NoError,
-        totalMaxSize,
-        rangesMaxSize,
+        totalMaxSize: options.totalMaxSize,
+        rangesMaxSize: options.rangesMaxSize,
       });
 
-      return sync(deps)("non-initiator", input, output, binaryOwnerId);
-    });
+      // Non-initiators always respond to provide sync completion feedback,
+      // even when there's nothing to sync.
+      if (!isNonEmptyReadonlyArray(ranges)) {
+        return ok({ type: "response", message: output.unwrap() });
+      }
 
-/**
- * Wraps Evolu Protocol decoding functions, which use exceptions instead of
- * {@link Result} to provide stack traces for debugging and reduce allocation
- * overhead in success cases.
- */
-const tryDecodeProtocolData = <T, E>(
-  data: Uint8Array,
-  callback: (buffer: Buffer) => Result<T, E | ProtocolInvalidDataError>,
-) => {
-  try {
-    return callback(createBuffer(data));
-  } catch (error: unknown) {
-    if (error instanceof ProtocolDecodeError || error instanceof BufferError)
+      const syncResult = sync(deps)(ranges, output, ownerIdBytes);
+
+      const message = syncResult.ok
+        ? output.unwrap()
+        : createProtocolMessageBuffer(ownerId, {
+            messageType: MessageType.Response,
+            errorCode: syncResult.error,
+          }).unwrap();
+
+      // Non-initiators always respond to provide sync completion feedback,
+      return ok({ type: "response", message });
+    } catch (error) {
       return err<ProtocolInvalidDataError>({
         type: "ProtocolInvalidDataError",
-        data,
+        data: inputMessage,
         error,
       });
-
-    throw error;
-  }
-};
+    }
+  };
 
 const decodeVersionAndOwner = (input: Buffer): [NonNegativeInt, OwnerId] => {
   // This structure must never change across protocol versions. The version
@@ -1108,7 +1215,7 @@ const decodeVersionAndOwner = (input: Buffer): [NonNegativeInt, OwnerId] => {
   // to enable version negotiation and owner identification before any other
   // processing occurs.
   const version = decodeNonNegativeInt(input);
-  const ownerId = decodeOwnerId(input);
+  const ownerId = decodeId(input) as OwnerId;
   return [version, ownerId];
 };
 
@@ -1143,38 +1250,17 @@ const decodeMessages = (
 const sync =
   (deps: StorageDep) =>
   (
-    role: "initiator" | "non-initiator",
-    input: Buffer,
+    ranges: NonEmptyReadonlyArray<Range>,
     output: ProtocolMessageBuffer,
-    ownerId: BinaryOwnerId,
-  ): Result<ProtocolMessage | null, never> => {
-    const ranges = decodeRanges(input);
-
-    if (!isNonEmptyReadonlyArray(ranges)) {
-      // Nothing to sync.
-      return ok(null);
-    }
-
-    const binaryOwnerId = binaryOwnerIdToOwnerId(ownerId);
+    ownerIdBytes: OwnerIdBytes,
+  ): Result<boolean, typeof ProtocolErrorCode.SyncError> => {
     const outputInitialSize = output.getSize();
 
-    const syncFail = () => {
-      // Only the relay (non-initiator) reports sync errors, not the client (initiator).
-      if (role === "initiator") {
-        return ok(null);
-      }
-      const message = createProtocolMessageBuffer(binaryOwnerId, {
-        type: "non-initiator",
-        errorCode: ProtocolErrorCode.SyncError,
-      });
-      return ok(message.unwrap());
-    };
-
-    const storageSize = deps.storage.getSize(ownerId);
-    if (storageSize == null) return syncFail();
+    const storageSize = deps.storage.getSize(ownerIdBytes);
+    if (storageSize == null) return err(ProtocolErrorCode.SyncError);
 
     let prevUpperBound: RangeUpperBound | null = null;
-    let prevIndex = 0 as NonNegativeInt;
+    let prevIndex = NonNegativeInt.orThrow(0);
 
     let skip = false;
     let nonSkipRangeAdded = false;
@@ -1211,7 +1297,11 @@ const sync =
     const addFingerprintForRemainingRange = (
       begin: NonNegativeInt,
     ): boolean => {
-      const fingerprint = deps.storage.fingerprint(ownerId, begin, storageSize);
+      const fingerprint = deps.storage.fingerprint(
+        ownerIdBytes,
+        begin,
+        storageSize,
+      );
       if (!fingerprint) return false;
       // There is always a space for a ramaining range.
       output.addRange({
@@ -1227,12 +1317,12 @@ const sync =
 
       const lower = prevIndex;
       let upper = deps.storage.findLowerBound(
-        ownerId,
+        ownerIdBytes,
         prevIndex,
         storageSize,
         currentUpperBound,
       );
-      if (upper == null) return syncFail();
+      if (upper == null) return err(ProtocolErrorCode.SyncError);
 
       switch (range.type) {
         case RangeType.Skip: {
@@ -1242,11 +1332,11 @@ const sync =
 
         case RangeType.Fingerprint: {
           const ourFingerprint = deps.storage.fingerprint(
-            ownerId,
+            ownerIdBytes,
             lower,
             upper,
           );
-          if (ourFingerprint == null) return syncFail();
+          if (ourFingerprint == null) return err(ProtocolErrorCode.SyncError);
 
           if (eqArrayNumber(range.fingerprint, ourFingerprint)) {
             skipRange(range);
@@ -1254,15 +1344,16 @@ const sync =
             if (output.canSplitRange()) {
               coalesceSkipsBeforeAdd();
               splitRange(deps)(
-                ownerId,
+                ownerIdBytes,
                 lower,
                 upper,
                 currentUpperBound,
                 output,
               );
             } else {
-              if (!addFingerprintForRemainingRange(upper)) return syncFail();
-              return ok(output.unwrap());
+              return addFingerprintForRemainingRange(upper)
+                ? ok(true)
+                : err(ProtocolErrorCode.SyncError);
             }
           }
           break;
@@ -1276,45 +1367,53 @@ const sync =
           );
           const ourTimestamps = createTimestampsBuffer();
 
-          let storageError = false as boolean;
+          let cantReadDbChange = false as boolean;
           let exceeded = false as boolean;
 
-          deps.storage.iterate(ownerId, lower, upper, (timestamp, index) => {
-            const timestampString = timestamp.join();
-            const timestampBinary = binaryTimestampToTimestamp(timestamp);
-
-            let message: EncryptedCrdtMessage | null = null;
+          deps.storage.iterate(
+            ownerIdBytes,
+            lower,
+            upper,
+            (timestamp, index) => {
+              const timestampString = timestamp.join();
+              const timestampBinary = timestampBytesToTimestamp(timestamp);
+
+              let message: EncryptedCrdtMessage | null = null;
+
+              if (timestampsWeNeed.has(timestampString)) {
+                timestampsWeNeed.delete(timestampString);
+              } else {
+                const dbChange = deps.storage.readDbChange(
+                  ownerIdBytes,
+                  timestamp,
+                );
+                if (dbChange == null) {
+                  cantReadDbChange = true;
+                  return false;
+                }
+                message = {
+                  timestamp: timestampBinary,
+                  change: dbChange,
+                };
+              }
 
-            if (timestampsWeNeed.has(timestampString)) {
-              timestampsWeNeed.delete(timestampString);
-            } else {
-              const dbChange = deps.storage.readDbChange(ownerId, timestamp);
-              if (dbChange == null) {
-                storageError = true;
+              if (
+                !output.canAddTimestampsRangeAndMessage(ourTimestamps, message)
+              ) {
+                exceeded = true;
+                endBound = timestamp;
+                upper = index;
                 return false;
               }
-              message = {
-                timestamp: timestampBinary,
-                change: dbChange,
-              };
-            }
-
-            if (
-              !output.canAddTimestampsRangeAndMessage(ourTimestamps, message)
-            ) {
-              exceeded = true;
-              endBound = timestamp;
-              upper = index;
-              return false;
-            }
 
-            ourTimestamps.add(timestampBinary);
-            if (message) output.addMessage(message);
-            return true;
-          });
+              ourTimestamps.add(timestampBinary);
+              if (message) output.addMessage(message);
+              return true;
+            },
+          );
 
-          if (storageError) {
-            return syncFail();
+          if (cantReadDbChange) {
+            return err(ProtocolErrorCode.SyncError);
           }
 
           const addRange = () => {
@@ -1329,9 +1428,9 @@ const sync =
           if (exceeded) {
             addRange();
             if (!addFingerprintForRemainingRange(upper)) {
-              return syncFail();
+              return err(ProtocolErrorCode.SyncError);
             }
-            return ok(output.unwrap());
+            return ok(true);
           }
 
           // If we need something, we have to respond with our timestamps.
@@ -1351,19 +1450,20 @@ const sync =
 
     // If all ranges were skipped, there are no changes and sync is complete.
     const hasChange = output.getSize() > outputInitialSize;
-    return ok(hasChange ? output.unwrap() : null);
+
+    return ok(hasChange);
   };
 
 const splitRange =
   (deps: StorageDep) =>
   (
-    ownerId: BinaryOwnerId,
+    ownerId: OwnerIdBytes,
     lower: NonNegativeInt,
     upper: NonNegativeInt,
     upperBound: RangeUpperBound,
     buffer: ProtocolMessageBuffer,
   ): void => {
-    const itemCount = (upper - lower) as NonNegativeInt;
+    const itemCount = NonNegativeInt.orThrow(upper - lower);
     const buckets = computeBalancedBuckets(itemCount);
 
     if (!buckets.ok) {
@@ -1375,10 +1475,10 @@ const splitRange =
 
       deps.storage.iterate(
         ownerId,
-        0 as NonNegativeInt,
+        NonNegativeInt.orThrow(0),
         itemCount,
         (timestamp) => {
-          range.timestamps.add(binaryTimestampToTimestamp(timestamp));
+          range.timestamps.add(timestampBytesToTimestamp(timestamp));
           return true;
         },
       );
@@ -1391,7 +1491,10 @@ const splitRange =
     const fingerprintRangesBuckets =
       lower === 0
         ? buckets.value
-        : [lower, ...buckets.value.map((b) => (b + lower) as NonNegativeInt)];
+        : [
+            lower,
+            ...buckets.value.map((b) => NonNegativeInt.orThrow(b + lower)),
+          ];
 
     const fingerprintRanges = deps.storage.fingerprintRanges(
       ownerId,
@@ -1415,7 +1518,7 @@ const decodeRanges = (buffer: Buffer): ReadonlyArray<Range> => {
   const rangesCount = decodeNonNegativeInt(buffer);
   if (rangesCount === 0) return [];
 
-  const timestampsCount = (rangesCount - 1) as NonNegativeInt;
+  const timestampsCount = NonNegativeInt.orThrow(rangesCount - 1);
   const timestamps = decodeTimestamps(buffer, timestampsCount);
   const rangeTypes: Array<RangeType> = [];
 
@@ -1437,7 +1540,7 @@ const decodeRanges = (buffer: Buffer): ReadonlyArray<Range> => {
   for (let i = 0; i < rangesCount; i++) {
     const upperBound =
       i < timestampsCount
-        ? timestampToBinaryTimestamp(timestamps[i])
+        ? timestampToTimestampBytes(timestamps[i])
         : InfiniteUpperBound;
 
     const rangeType = rangeTypes[i];
@@ -1459,7 +1562,7 @@ const decodeRanges = (buffer: Buffer): ReadonlyArray<Range> => {
 
       case RangeType.Timestamps: {
         const timestamps = decodeTimestamps(buffer).map(
-          timestampToBinaryTimestamp,
+          timestampToTimestampBytes,
         );
         ranges.push({
           type: RangeType.Timestamps,
@@ -1487,7 +1590,7 @@ const decodeTimestamps = (
   for (let i = 0; i < length; i++) {
     const deltaMillis = decodeNonNegativeInt(buffer);
     const millis = Millis.from(previousMillis + deltaMillis);
-    if (!millis.ok) throw new Error(millis.error.type);
+    if (!millis.ok) throw new ProtocolDecodeError(millis.error.type);
     millises.push(millis.value);
     previousMillis = millis.value;
   }
@@ -1496,7 +1599,7 @@ const decodeTimestamps = (
   let counterIndex = 0;
   while (counterIndex < length) {
     const counter = Counter.from(decodeNonNegativeInt(buffer));
-    if (!counter.ok) throw new Error(counter.error.type);
+    if (!counter.ok) throw new ProtocolDecodeError(counter.error.type);
     const runLength = decodeNonNegativeInt(buffer);
     for (let i = 0; i < runLength; i++) {
       counters.push(counter.value);
@@ -1527,127 +1630,31 @@ const decodeTimestamps = (
   return timestamps;
 };
 
-/** Binary representation of {@link Id}. */
-export type BinaryId = Uint8Array & Brand<"BinaryId">;
-
-export const binaryIdLength = 16 as NonNegativeInt;
-
-export const idToBinaryId = (id: Id): BinaryId =>
-  base64Url256ToBytes(id) as BinaryId;
-
-export const binaryIdToId = (binaryId: BinaryId): Id =>
-  decodeId(createBuffer(binaryId));
-
-/** Binary representation of {@link OwnerId}. */
-export type BinaryOwnerId = Uint8Array & Brand<"BinaryOwnerId">;
-
-export const ownerIdToBinaryOwnerId = (ownerId: OwnerId): BinaryOwnerId =>
-  base64Url256ToBytes(ownerId) as BinaryOwnerId;
-
-export const binaryOwnerIdToOwnerId = (binaryOwnerId: BinaryOwnerId): OwnerId =>
-  decodeOwnerId(createBuffer(binaryOwnerId));
-
-/**
- * Union type for all variants of Base64Url strings with limited length. All
- * these types use Base64Url alphabet and are < 256 characters.
- */
-export type Base64Url256Variant = Base64Url256 | Id | NanoId | OwnerId;
-
-/**
- * Alphabet used for Base64Url encoding. This is copied from the `nanoid`
- * library to avoid dependency on a specific version of `nanoid`.
- */
-const urlAlphabet =
-  "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
-
-/**
- * Converts a Base64Url string to a Uint8Array for binary storage. This encoding
- * is more space-efficient than UTF-8 for Base64Url strings.
- */
-export const base64Url256ToBytes = (
-  string: Base64Url256Variant,
-): globalThis.Uint8Array => {
-  const totalBits = string.length * 6; // 6 bits per character
-  const byteLength = Math.ceil(totalBits / 8);
-  const value = new globalThis.Uint8Array(byteLength);
-
-  let bitBuffer = 0;
-  let bitsInBuffer = 0;
-  let byteIndex = 0;
-
-  for (const char of string) {
-    const charValue = urlAlphabet.indexOf(char);
-    bitBuffer = (bitBuffer << 6) | charValue;
-    bitsInBuffer += 6;
-    while (bitsInBuffer >= 8) {
-      bitsInBuffer -= 8;
-      value[byteIndex++] = (bitBuffer >> bitsInBuffer) & 0xff;
-    }
-  }
-
-  if (bitsInBuffer > 0 && byteIndex < byteLength) {
-    value[byteIndex] = (bitBuffer << (8 - bitsInBuffer)) & 0xff;
-  }
-
-  return value;
+const decodeId = (buffer: Buffer): Id => {
+  const bytes = buffer.shiftN(idBytesTypeValueLength);
+  return idBytesToId(bytes as IdBytes);
 };
 
-export const decodeBase64Url256 = (
-  buffer: Buffer,
-  stringLength: number,
-): Base64Url256Variant => {
-  const bytes = buffer.shiftN(
-    Math.ceil((stringLength * 6) / 8) as NonNegativeInt,
-  );
-
-  let bitBuffer = 0;
-  let bitsInBuffer = 0;
-  let string = "";
-
-  for (const byte of bytes) {
-    bitBuffer = (bitBuffer << 8) | byte;
-    bitsInBuffer += 8;
-    while (bitsInBuffer >= 6) {
-      bitsInBuffer -= 6;
-      if (string.length < stringLength) {
-        const charValue = (bitBuffer >> bitsInBuffer) & 0x3f;
-        if (charValue < 0 || charValue >= urlAlphabet.length) {
-          throw new ProtocolDecodeError("invalid charValue");
-        }
-        string += urlAlphabet[charValue];
-      }
-    }
-  }
-
-  const result = Base64Url256.from(string);
-  if (!result.ok) throw new ProtocolDecodeError(result.error.type);
-
-  return result.value;
-};
-
-const decodeId = (buffer: Buffer): Id =>
-  decodeBase64Url256(buffer, idTypeValueLength) as Id;
-
-/** Not all 16 bytes are valid {@link OwnerId}. */
-const decodeOwnerId = (buffer: Buffer): OwnerId => decodeId(buffer) as OwnerId;
-
 /**
  * Evolu uses MessagePack to handle all number variants except for
  * NonNegativeInt. For NonNegativeInt, Evolu provides more efficient encoding.
  */
 export const encodeNumber = (buffer: Buffer, number: number): void => {
-  buffer.extend(pack(number));
+  buffer.extend(packr.pack(number));
 };
 
 export const decodeNumber = (buffer: Buffer): number => {
   let number: unknown;
   let end: unknown;
 
-  unpackMultiple(buffer.unwrap(), (n, _, e) => {
-    number = n;
-    end = e;
-    return false;
-  });
+  packr.unpackMultiple(
+    buffer.unwrap(),
+    (n: unknown, _: unknown, e: unknown) => {
+      number = n;
+      end = e;
+      return false;
+    },
+  );
 
   const endResult = NonNegativeInt.fromUnknown(end);
   if (!endResult.ok) throw new ProtocolDecodeError(endResult.error.type);
@@ -1659,42 +1666,90 @@ export const decodeNumber = (buffer: Buffer): number => {
   return numberResult.value;
 };
 
-export const binaryTimestampToFingerprint = (
-  timestamp: BinaryTimestamp,
-): Fingerprint => {
-  const hash = sha256(timestamp).slice(0, fingerprintSize);
-  return hash as Fingerprint;
+/**
+ * Encodes an array of boolean flags into a single byte.
+ *
+ * Each element in the array corresponds to a bit (0-7). Array can have 0-8
+ * elements.
+ *
+ * ### Example
+ *
+ * ```ts
+ * encodeFlags(buffer, [true, false, true]); // Encodes bits 0, 1, 2
+ * ```
+ */
+export const encodeFlags = (
+  buffer: Buffer,
+  flags: ReadonlyArray<boolean>,
+): void => {
+  let byte = 0;
+  for (let i = 0; i < flags.length && i < 8; i++) {
+    if (flags[i]) {
+      byte |= 1 << i;
+    }
+  }
+  buffer.extend([byte]);
+};
+
+/**
+ * Decodes a byte into an array of boolean flags.
+ *
+ * ### Example
+ *
+ * ```ts
+ * const flags = decodeFlags(buffer, 3); // Decode 3 flags
+ * ```
+ */
+export const decodeFlags = (
+  buffer: Buffer,
+  count: PositiveInt,
+): ReadonlyArray<boolean> => {
+  const byte = buffer.shift();
+  const flags: Array<boolean> = [];
+  for (let i = 0; i < count && i < 8; i++) {
+    flags.push((byte & (1 << i)) !== 0);
+  }
+  return flags;
 };
 
 /**
  * Encodes and encrypts a {@link DbChange} using the provided owner's encryption
  * key. Returns an encrypted binary representation as {@link EncryptedDbChange}.
+ *
+ * The format includes the protocol version for backward compatibility and the
+ * timestamp for tamper-proof verification that the timestamp matches the change
+ * data.
  */
 export const encodeAndEncryptDbChange =
   (deps: SymmetricCryptoDep) =>
-  (change: DbChange, key: EncryptionKey): EncryptedDbChange => {
+  (message: CrdtMessage, key: EncryptionKey): EncryptedDbChange => {
     const buffer = createBuffer();
 
-    encodeBase64Url256(buffer, change.table);
+    encodeNonNegativeInt(buffer, protocolVersion);
 
-    buffer.extend(idToBinaryId(change.id));
+    // Encode the timestamp to prevent tampering (e.g., a malicious relay
+    // assigning this EncryptedDbChange to a different EncryptedCrdtMessage)
+    buffer.extend(timestampToTimestampBytes(message.timestamp));
 
-    const entries = objectToEntries(change.values).map(
-      ([column, value]): [Base64Url256, SqliteValue] => {
-        return [column, value];
-      },
-    );
+    encodeFlags(buffer, [
+      message.change.isInsert,
+      message.change.isDelete != null,
+      message.change.isDelete ?? false,
+    ]);
 
-    encodeLength(buffer, entries);
+    encodeString(buffer, message.change.table);
+    buffer.extend(idToIdBytes(message.change.id));
+
+    const entries = objectToEntries(message.change.values);
 
+    encodeLength(buffer, entries);
     for (const [column, value] of entries) {
-      encodeBase64Url256(buffer, column);
+      encodeString(buffer, column);
       encodeSqliteValue(buffer, value);
     }
 
-    const paddingLength = padmePaddingLength(buffer.getLength());
-    // Add zero bytes as PADMÉ padding - these will be ignored during decoding.
-    buffer.extend(new Uint8Array(paddingLength));
+    // Add PADMÉ padding (ignored during decoding)
+    buffer.extend(createPadmePadding(buffer.getLength()));
 
     const { nonce, ciphertext } = deps.symmetricCrypto.encrypt(
       buffer.unwrap(),
@@ -1710,50 +1765,82 @@ export const encodeAndEncryptDbChange =
   };
 
 /**
- * Decrypts and decodes an {@link EncryptedDbChange} using the provided owner's
- * encryption key.
+ * Decrypts and decodes an {@link EncryptedCrdtMessage} using the provided
+ * owner's encryption key. Verifies that the embedded timestamp matches the
+ * expected timestamp to ensure message integrity.
  */
 export const decryptAndDecodeDbChange =
   (deps: SymmetricCryptoDep) =>
   (
-    change: EncryptedDbChange,
+    message: EncryptedCrdtMessage,
     key: EncryptionKey,
-  ): Result<DbChange, SymmetricCryptoDecryptError | ProtocolInvalidDataError> =>
-    tryDecodeProtocolData<DbChange, SymmetricCryptoDecryptError>(
-      change,
-      (buffer) => {
-        const nonce = buffer.shiftN(deps.symmetricCrypto.nonceLength);
-
-        const ciphertextLength = decodeLength(buffer);
-        const ciphertext = buffer.shiftN(ciphertextLength);
-
-        const plaintextBytes = deps.symmetricCrypto.decrypt(
-          ciphertext,
-          key,
-          nonce,
-        );
-        if (!plaintextBytes.ok) return plaintextBytes;
+  ): Result<
+    DbChange,
+    | SymmetricCryptoDecryptError
+    | ProtocolInvalidDataError
+    | ProtocolTimestampMismatchError
+  > => {
+    try {
+      const buffer = createBuffer(message.change);
+
+      const nonce = buffer.shiftN(deps.symmetricCrypto.nonceLength);
+      const ciphertext = buffer.shiftN(decodeLength(buffer));
+
+      const plaintextBytes = deps.symmetricCrypto.decrypt(
+        ciphertext,
+        key,
+        nonce,
+      );
+      if (!plaintextBytes.ok) return plaintextBytes;
 
-        buffer.reset();
-        buffer.extend(plaintextBytes.value);
+      buffer.reset();
+      buffer.extend(plaintextBytes.value);
 
-        const table = decodeBase64Url256WithLength(buffer);
-        const id = decodeId(buffer);
+      // Decode version (for future compatibility, not need yet)
+      decodeNonNegativeInt(buffer);
 
-        const length = decodeLength(buffer);
-        const values = Object.create(null) as Record<string, SqliteValue>;
+      const timestamp = timestampBytesToTimestamp(
+        buffer.shiftN(timestampBytesLength) as TimestampBytes,
+      );
 
-        for (let i = 0; i < length; i++) {
-          const column = decodeBase64Url256WithLength(buffer);
-          const value = decodeSqliteValue(buffer);
-          values[column] = value;
-        }
+      if (!eqTimestamp(timestamp, message.timestamp)) {
+        return err<ProtocolTimestampMismatchError>({
+          type: "ProtocolTimestampMismatchError",
+          expected: message.timestamp,
+          timestamp,
+        });
+      }
 
-        const dbChange = { table, id, values };
+      const flags = decodeFlags(buffer, PositiveInt.orThrow(3));
+      const table = decodeString(buffer);
+      const id = decodeId(buffer);
 
-        return ok(dbChange);
-      },
-    );
+      const length = decodeLength(buffer);
+      const values = Object.create(null) as Record<string, SqliteValue>;
+
+      for (let i = 0; i < length; i++) {
+        const column = decodeString(buffer);
+        const value = decodeSqliteValue(buffer);
+        values[column] = value;
+      }
+
+      const dbChange = DbChange.orThrow({
+        table,
+        id,
+        values,
+        isInsert: flags[0],
+        isDelete: flags[1] ? flags[2] : null,
+      });
+
+      return ok(dbChange);
+    } catch (error) {
+      return err<ProtocolInvalidDataError>({
+        type: "ProtocolInvalidDataError",
+        data: message.change,
+        error,
+      });
+    }
+  };
 
 /**
  * Encodes a non-negative integer into a variable-length integer format. It's
@@ -1811,7 +1898,7 @@ export const decodeNonNegativeInt = (buffer: Buffer): NonNegativeInt => {
 };
 
 export const encodeLength = (buffer: Buffer, value: ArrayLike<any>): void => {
-  encodeNonNegativeInt(buffer, value.length as NonNegativeInt);
+  encodeNonNegativeInt(buffer, NonNegativeInt.orThrow(value.length));
 };
 
 export const decodeLength = decodeNonNegativeInt;
@@ -1833,23 +1920,10 @@ export const encodeNodeId = (buffer: Buffer, nodeId: NodeId): void => {
 };
 
 export const decodeNodeId = (buffer: Buffer): NodeId => {
-  const bytes = buffer.shiftN(8 as NonNegativeInt);
+  const bytes = buffer.shiftN(NonNegativeInt.orThrow(8));
   return bytesToHex(bytes) as NodeId;
 };
 
-export const encodeBase64Url256 = (
-  buffer: Buffer,
-  string: Base64Url256Variant,
-): void => {
-  encodeLength(buffer, string);
-  buffer.extend(base64Url256ToBytes(string));
-};
-
-export const decodeBase64Url256WithLength = (buffer: Buffer): Base64Url256 => {
-  const length = decodeLength(buffer);
-  return decodeBase64Url256(buffer, length) as Base64Url256;
-};
-
 // Small ints are encoded into ProtocolValueType, saving one byte per int.
 const isSmallInt: Predicate<number> = (value: number) =>
   value >= 0 && value < 20;
@@ -1858,23 +1932,26 @@ export const ProtocolValueType = {
   // 0-19 small ints
 
   // SQLite types
-  String: 20 as NonNegativeInt,
-  Number: 21 as NonNegativeInt,
-  Null: 22 as NonNegativeInt,
-  Binary: 23 as NonNegativeInt,
+  String: NonNegativeInt.orThrow(20),
+  Number: NonNegativeInt.orThrow(21),
+  Null: NonNegativeInt.orThrow(22),
+  Bytes: NonNegativeInt.orThrow(23),
   // We can add more types for other DBs or anything else later.
 
   // Optimized types
-  Id: 30 as NonNegativeInt,
-  Base64Url256: 31 as NonNegativeInt,
-  NonNegativeInt: 32 as NonNegativeInt,
-  Json: 33 as NonNegativeInt,
+  NonNegativeInt: NonNegativeInt.orThrow(30),
+
+  // String optimizations
+  EmptyString: NonNegativeInt.orThrow(31), // 1 byte vs 2 bytes (50% reduction)
+  Base64Url: NonNegativeInt.orThrow(32),
+  Id: NonNegativeInt.orThrow(33),
+  Json: NonNegativeInt.orThrow(34),
 
   // new Date().toISOString()   - 24 bytes
   // encoded with fixed length  - 8 bytes
   // encode as NonNegativeInt   - 6 bytes (additional 25% reduction)
-  DateIsoWithNonNegativeTime: 34 as NonNegativeInt,
-  DateIsoWithNegativeTime: 35 as NonNegativeInt, // 9 bytes
+  DateIsoWithNonNegativeTime: NonNegativeInt.orThrow(35),
+  DateIsoWithNegativeTime: NonNegativeInt.orThrow(36), // 9 bytes
 
   // TODO: Operations (from 40)
   // Increment, Decrement, Patch, whatever.
@@ -1888,9 +1965,14 @@ export const encodeSqliteValue = (buffer: Buffer, value: SqliteValue): void => {
 
   switch (typeof value) {
     case "string": {
-      const dateIsoString = DateIsoString.from(value);
-      if (dateIsoString.ok) {
-        const time = new Date(dateIsoString.value).getTime();
+      if (value === "") {
+        encodeNonNegativeInt(buffer, ProtocolValueType.EmptyString);
+        return;
+      }
+
+      const dateIso = DateIso.fromParent(value);
+      if (dateIso.ok) {
+        const time = new Date(dateIso.value).getTime();
         if (NonNegativeInt.is(time)) {
           encodeNonNegativeInt(
             buffer,
@@ -1907,27 +1989,34 @@ export const encodeSqliteValue = (buffer: Buffer, value: SqliteValue): void => {
         return;
       }
 
-      const base64Url256 = Base64Url256.from(value);
-      if (base64Url256.ok) {
-        if (base64Url256.value.length === idTypeValueLength) {
-          encodeNonNegativeInt(buffer, ProtocolValueType.Id);
-          buffer.extend(base64Url256ToBytes(base64Url256.value));
-          return;
-        }
-        encodeNonNegativeInt(buffer, ProtocolValueType.Base64Url256);
-        encodeBase64Url256(buffer, base64Url256.value);
+      const id = Id.fromParent(value);
+      if (id.ok) {
+        encodeNonNegativeInt(buffer, ProtocolValueType.Id);
+        buffer.extend(idToIdBytes(id.value));
         return;
       }
 
-      const jsonValue = JsonValueFromString.fromParent(value);
-      if (jsonValue.ok) {
-        const jsonBytes = pack(jsonValue.value);
+      const json = Json.fromParent(value);
+      // Only encode as Json if it survives JSON.parse/JSON.stringify round-trip.
+      // Some valid JSON strings like "-0E0" get normalized to "0" during parsing,
+      // which would cause data corruption if we don't verify round-trip safety.
+      if (json.ok && JSON.stringify(jsonToJsonValue(json.value)) === value) {
+        const jsonBytes = packr.pack(jsonToJsonValue(json.value));
         encodeNonNegativeInt(buffer, ProtocolValueType.Json);
         encodeLength(buffer, jsonBytes);
         buffer.extend(jsonBytes);
         return;
       }
 
+      const base64Url = Base64Url.fromParent(value);
+      if (base64Url.ok) {
+        encodeNonNegativeInt(buffer, ProtocolValueType.Base64Url);
+        const bytes = base64UrlToUint8Array(base64Url.value);
+        encodeLength(buffer, bytes);
+        buffer.extend(bytes);
+        return;
+      }
+
       encodeNonNegativeInt(buffer, ProtocolValueType.String);
       encodeString(buffer, value);
       return;
@@ -1949,7 +2038,7 @@ export const encodeSqliteValue = (buffer: Buffer, value: SqliteValue): void => {
     }
   }
 
-  encodeNonNegativeInt(buffer, ProtocolValueType.Binary);
+  encodeNonNegativeInt(buffer, ProtocolValueType.Bytes);
   encodeLength(buffer, value);
   buffer.extend(value);
 };
@@ -1964,39 +2053,50 @@ export const decodeSqliteValue = (buffer: Buffer): SqliteValue => {
   switch (type) {
     case ProtocolValueType.String:
       return decodeString(buffer);
+
     case ProtocolValueType.Number:
       return decodeNumber(buffer);
+
     case ProtocolValueType.Null:
       return null;
-    case ProtocolValueType.Binary: {
+
+    case ProtocolValueType.Bytes: {
       const length = decodeLength(buffer);
       return buffer.shiftN(length);
     }
-    case ProtocolValueType.Id: {
+
+    case ProtocolValueType.Id:
       return decodeId(buffer);
-    }
-    case ProtocolValueType.Base64Url256:
-      return decodeBase64Url256WithLength(buffer);
+
     case ProtocolValueType.NonNegativeInt:
       return decodeNonNegativeInt(buffer);
+
     case ProtocolValueType.Json: {
       const length = decodeLength(buffer);
       const bytes = buffer.shiftN(length);
-      return JSON.stringify(unpack(bytes));
+      return JSON.stringify(packr.unpack(bytes));
     }
+
     case ProtocolValueType.DateIsoWithNonNegativeTime:
     case ProtocolValueType.DateIsoWithNegativeTime: {
       const time =
         type === ProtocolValueType.DateIsoWithNonNegativeTime
           ? decodeNonNegativeInt(buffer)
           : decodeNumber(buffer);
-      const dateIsoString = DateIsoString.fromParent(
-        new Date(time).toISOString(),
-      );
-      if (!dateIsoString.ok)
-        throw new ProtocolDecodeError(dateIsoString.error.type);
-      return dateIsoString.value;
+      const dateIso = DateIso.fromParent(new Date(time).toISOString());
+      if (!dateIso.ok) throw new ProtocolDecodeError(dateIso.error.type);
+      return dateIso.value;
+    }
+
+    case ProtocolValueType.EmptyString:
+      return "";
+
+    case ProtocolValueType.Base64Url: {
+      const length = decodeLength(buffer);
+      const bytes = buffer.shiftN(length);
+      return uint8ArrayToBase64Url(bytes);
     }
+
     default:
       throw new ProtocolDecodeError("invalid ProtocolValueType");
   }