@feltdb/core 0.12.0 → 0.12.2

package/dist/studio-app/index.html

@@ -1,3 +1,3 @@
-<!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#17211b"/><title>FeltDB Studio</title>  <script type="module" crossorigin src="/assets/index-6f6KVx5R.js"></script>
-  <link rel="stylesheet" crossorigin href="/assets/index-BrsF-kWL.css">
+<!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#17211b"/><title>FeltDB Studio</title>  <script type="module" crossorigin src="/assets/index-DoVvbIay.js"></script>
+  <link rel="stylesheet" crossorigin href="/assets/index-CiC8VY-a.css">
 </head><body><div id="root"></div></body></html>

package/dist/telemetry.d.ts

@@ -3,6 +3,7 @@
  *
  * Privacy-preserving, anonymous telemetry for adoption analytics.
  * No source code, project names, filesystem paths, or PII collected.
+ * Disabled by default; opt in with FELTDB_TELEMETRY=1.
  * Fail-open: telemetry failures never affect FeltDB operation.
  */
 /**

package/dist/telemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA4CH;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,YAAY,GACZ,OAAO,GACP,OAAO,GACP,MAAM,GACN,iBAAiB,GACjB,qBAAqB,CAAC;AAE1B;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB;AA8CD;;;GAGG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAM;IAChC,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,UAAU,CAA+B;IACjD,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,OAAO,CAA8B;gBAEjC,WAAW,GAAE,MAAgB;IAczC;;OAEG;IACH,IAAI,CAAC,SAAS,EAAE,kBAAkB,GAAG,IAAI;IA6BzC;;OAEG;YACW,KAAK;IAqBnB;;OAEG;IACH,OAAO,CAAC,aAAa;IAarB;;;OAGG;YACW,UAAU;IA6BxB;;OAEG;IACH,OAAO,CAAC,KAAK;IAkBb;;OAEG;IACH,MAAM,IAAI,IAAI;IAId;;OAEG;IACH,OAAO,IAAI,IAAI;IASf;;OAEG;IACH,SAAS,IAAI,OAAO;IAIpB;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAKlC;AAOD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,eAAe,CAKxE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAEjE"}
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA4CH;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,YAAY,GACZ,OAAO,GACP,OAAO,GACP,MAAM,GACN,iBAAiB,GACjB,qBAAqB,CAAC;AAE1B;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB;AA8CD;;;GAGG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAM;IAChC,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,UAAU,CAA+B;IACjD,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,OAAO,CAA8B;gBAEjC,WAAW,GAAE,MAAgB;IAczC;;OAEG;IACH,IAAI,CAAC,SAAS,EAAE,kBAAkB,GAAG,IAAI;IA6BzC;;OAEG;YACW,KAAK;IAqBnB;;OAEG;IACH,OAAO,CAAC,aAAa;IAarB;;;OAGG;YACW,UAAU;IA6BxB;;OAEG;IACH,OAAO,CAAC,KAAK;IAkBb;;OAEG;IACH,MAAM,IAAI,IAAI;IAId;;OAEG;IACH,OAAO,IAAI,IAAI;IASf;;OAEG;IACH,SAAS,IAAI,OAAO;IAIpB;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAKlC;AAOD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,eAAe,CAKxE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAEjE"}

package/dist/telemetry.js

@@ -3,6 +3,7 @@
  *
  * Privacy-preserving, anonymous telemetry for adoption analytics.
  * No source code, project names, filesystem paths, or PII collected.
+ * Disabled by default; opt in with FELTDB_TELEMETRY=1.
  * Fail-open: telemetry failures never affect FeltDB operation.
  */
 const isBrowserRuntime = () => typeof window !== 'undefined' && typeof window.document !== 'undefined';
@@ -99,9 +100,9 @@ export class TelemetryClient {
     constructor(coreVersion = '0.5.7') {
         this.coreVersion = coreVersion;
         this.identity = new InstallationIdentity();
-        // Check if telemetry is disabled
-        this.enabled = environmentValue('FELTDB_TELEMETRY') !== '0' &&
-            environmentValue('FELTDB_TELEMETRY') !== 'false';
+        // Telemetry is off by default; opt in with FELTDB_TELEMETRY=1 or true
+        const optIn = environmentValue('FELTDB_TELEMETRY')?.toLowerCase();
+        this.enabled = optIn === '1' || optIn === 'true';
         // Detect browser environment
         if (isBrowserRuntime()) {
             this.runtime = 'browser';

package/dist/transaction-identity.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Transaction identity: what a transaction ID is bound to.
+ *
+ * A transaction ID names one logical transaction *and* its contents. The
+ * embedded runtimes record the ID together with a digest of the request, so a
+ * retry can be told apart from a different request that happens to reuse the
+ * ID. The design and its compatibility analysis are in
+ * `adrs/transaction-identity-and-payload-binding.md`.
+ *
+ * Everything here is synchronous and dependency-free (SHA-256 is the portable
+ * implementation in `stable-hash.ts`), because the digest must
+ * be computed before a runtime opens its commit boundary (an IndexedDB
+ * transaction cannot be held open across an `await`) and must behave the same
+ * in Node and in a browser served from an insecure origin, where
+ * `crypto.subtle` is unavailable.
+ */
+import type { AtomicTransactionRequest } from './transaction.js';
+/** The construction version this build writes. */
+export declare const TRANSACTION_DIGEST_VERSION = "txd1";
+/** A request that cannot be given an identity because it is not valid. */
+export declare class InvalidTransactionPayload extends Error {
+    constructor(message: string);
+}
+/**
+ * Serialize `value` as RFC 8785 canonical JSON.
+ *
+ * Object members are sorted by UTF-16 code unit, numbers use the ECMAScript
+ * shortest form (`-0` is `0`), strings use the standard escapes, and there is
+ * no insignificant whitespace. Members whose value is `undefined` are omitted,
+ * exactly as `JSON.stringify` and a caller who left them out would produce.
+ * Array order is preserved.
+ *
+ * Anything that is not a JSON value is refused rather than coerced: `NaN`,
+ * `Infinity`, `undefined` in an array, `BigInt`, symbols, functions, cycles,
+ * and non-plain objects such as `Date` or `Map`.
+ */
+export declare function canonicalJsonStrict(value: unknown, where?: string): string;
+/**
+ * The semantic request: what the runtime acts on, and nothing else.
+ *
+ * The transaction ID is the key the digest is stored under, so it is not part
+ * of it. Operations, preconditions and fences are ordered arrays; reordering
+ * them is a different request.
+ */
+export declare function semanticRequest(request: AtomicTransactionRequest): Record<string, unknown>;
+/**
+ * `txd1:sha256:<hex>` over the canonical form of the semantic request.
+ *
+ * @throws InvalidTransactionPayload when the request holds a non-JSON value
+ */
+export declare function transactionDigest(request: AtomicTransactionRequest): string;
+/** What a stored digest says about a retry's digest. */
+export type DigestComparison = 'match' | 'mismatch' | 'unverifiable';
+/**
+ * Compare a recorded digest with a retry's.
+ *
+ * A digest of a version this build cannot compute, or one that is not a
+ * well-formed digest at all, cannot be judged either way, so it is neither a
+ * match nor a mismatch: the caller must fail closed.
+ */
+export declare function compareDigests(stored: unknown, computed: string): DigestComparison;
+//# sourceMappingURL=transaction-identity.d.ts.map

package/dist/transaction-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-identity.d.ts","sourceRoot":"","sources":["../src/transaction-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAGjE,kDAAkD;AAClD,eAAO,MAAM,0BAA0B,SAAS,CAAC;AAKjD,0EAA0E;AAC1E,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAaD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAU,GAAG,MAAM,CAE3E;AA+DD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAM1F;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,CAG3E;AAED,wDAAwD;AACxD,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,UAAU,GAAG,cAAc,CAAC;AAErE;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAKlF"}

package/dist/transaction-identity.js

@@ -0,0 +1,138 @@
+import { sha256Hex } from './stable-hash.js';
+/** The construction version this build writes. */
+export const TRANSACTION_DIGEST_VERSION = 'txd1';
+/** `txd1:sha256:<64 lowercase hex>` -- the prefix names the whole construction. */
+const DIGEST_FORM = /^(txd\d+):sha256:[0-9a-f]{64}$/;
+/** A request that cannot be given an identity because it is not valid. */
+export class InvalidTransactionPayload extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'InvalidTransactionPayload';
+    }
+}
+/* ---------------------------------------------------------------------------
+ * Canonical JSON (RFC 8785)
+ * ------------------------------------------------------------------------ */
+const LONE_SURROGATE = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/;
+function canonicalString(text, where) {
+    if (LONE_SURROGATE.test(text))
+        throw new InvalidTransactionPayload(`${where} contains a lone surrogate, which has no UTF-8 form`);
+    return JSON.stringify(text);
+}
+/**
+ * Serialize `value` as RFC 8785 canonical JSON.
+ *
+ * Object members are sorted by UTF-16 code unit, numbers use the ECMAScript
+ * shortest form (`-0` is `0`), strings use the standard escapes, and there is
+ * no insignificant whitespace. Members whose value is `undefined` are omitted,
+ * exactly as `JSON.stringify` and a caller who left them out would produce.
+ * Array order is preserved.
+ *
+ * Anything that is not a JSON value is refused rather than coerced: `NaN`,
+ * `Infinity`, `undefined` in an array, `BigInt`, symbols, functions, cycles,
+ * and non-plain objects such as `Date` or `Map`.
+ */
+export function canonicalJsonStrict(value, where = 'value') {
+    return write(value, where, new Set());
+}
+function write(value, where, active) {
+    if (value === null)
+        return 'null';
+    switch (typeof value) {
+        case 'boolean': return value ? 'true' : 'false';
+        case 'string': return canonicalString(value, where);
+        case 'number':
+            if (!Number.isFinite(value))
+                throw new InvalidTransactionPayload(`${where} is ${value}, which is not a JSON number`);
+            return String(value);
+        case 'object': break;
+        default:
+            throw new InvalidTransactionPayload(`${where} is a ${typeof value}, which is not a JSON value`);
+    }
+    const object = value;
+    if (active.has(object))
+        throw new InvalidTransactionPayload(`${where} is part of a cycle`);
+    active.add(object);
+    try {
+        if (Array.isArray(object)) {
+            const parts = [];
+            for (let index = 0; index < object.length; index += 1) {
+                if (!(index in object) || object[index] === undefined) {
+                    throw new InvalidTransactionPayload(`${where}[${index}] is ${index in object ? 'undefined' : 'a hole'}; arrays hold JSON values only`);
+                }
+                parts.push(write(object[index], `${where}[${index}]`, active));
+            }
+            return `[${parts.join(',')}]`;
+        }
+        const prototype = Object.getPrototypeOf(object);
+        if (prototype !== Object.prototype && prototype !== null) {
+            throw new InvalidTransactionPayload(`${where} is a ${prototype?.constructor?.name ?? 'non-plain object'}; only plain objects are JSON values`);
+        }
+        const record = object;
+        const members = Object.keys(record).filter(key => record[key] !== undefined).sort();
+        return `{${members.map(key => `${canonicalString(key, `${where} key`)}:${write(record[key], `${where}.${key}`, active)}`).join(',')}}`;
+    }
+    finally {
+        active.delete(object);
+    }
+}
+/* ---------------------------------------------------------------------------
+ * The txd1 digest
+ * ------------------------------------------------------------------------ */
+function pick(source, fields, where) {
+    const record = source;
+    const picked = {};
+    for (const field of fields)
+        if (record[field] !== undefined)
+            picked[field] = record[field];
+    // `ifVersion` and `expectedVersion` are one predicate (see
+    // `normalisePrecondition`); the digest knows only the wire spelling.
+    if (picked.ifVersion !== undefined) {
+        if (picked.expectedVersion !== undefined && picked.expectedVersion !== picked.ifVersion) {
+            throw new InvalidTransactionPayload(`${where} supplies ifVersion ${String(picked.ifVersion)} and expectedVersion ${String(picked.expectedVersion)}; they are the same predicate`);
+        }
+        picked.expectedVersion = picked.ifVersion;
+        delete picked.ifVersion;
+    }
+    return picked;
+}
+const OPERATION_FIELDS = ['collection', 'id', 'value', 'requireAbsent', 'ifVersion', 'expectedVersion', 'expectedEpoch', 'expectedLeaseId'];
+const PRECONDITION_FIELDS = ['collection', 'id', 'requireAbsent', 'ifVersion', 'expectedVersion', 'expectedEpoch', 'expectedLeaseId'];
+/**
+ * The semantic request: what the runtime acts on, and nothing else.
+ *
+ * The transaction ID is the key the digest is stored under, so it is not part
+ * of it. Operations, preconditions and fences are ordered arrays; reordering
+ * them is a different request.
+ */
+export function semanticRequest(request) {
+    return {
+        operations: request.operations.map((operation, index) => pick(operation, OPERATION_FIELDS, `operations[${index}]`)),
+        preconditions: (request.preconditions ?? []).map((condition, index) => pick(condition, PRECONDITION_FIELDS, `preconditions[${index}]`)),
+        fences: (request.fences ?? []).map(fence => ({ token: fence.token, reads: fence.reads })),
+    };
+}
+/**
+ * `txd1:sha256:<hex>` over the canonical form of the semantic request.
+ *
+ * @throws InvalidTransactionPayload when the request holds a non-JSON value
+ */
+export function transactionDigest(request) {
+    const canonical = canonicalJsonStrict(semanticRequest(request), 'transaction');
+    return `${TRANSACTION_DIGEST_VERSION}:sha256:${sha256Hex(canonical)}`;
+}
+/**
+ * Compare a recorded digest with a retry's.
+ *
+ * A digest of a version this build cannot compute, or one that is not a
+ * well-formed digest at all, cannot be judged either way, so it is neither a
+ * match nor a mismatch: the caller must fail closed.
+ */
+export function compareDigests(stored, computed) {
+    if (typeof stored !== 'string')
+        return 'unverifiable';
+    const form = DIGEST_FORM.exec(stored);
+    if (!form || form[1] !== TRANSACTION_DIGEST_VERSION)
+        return 'unverifiable';
+    return stored === computed ? 'match' : 'mismatch';
+}

package/dist/transaction.d.ts

@@ -166,14 +166,37 @@ export interface AtomicTransactionResult {
     transactionId: string;
     /** True when this id was already committed; nothing was applied again. */
     duplicate: boolean;
+    /**
+     * How a duplicate was recognized (present only when `duplicate` is true on an
+     * embedded runtime):
+     * - `verified`: the id and the digest of this request both match what was
+     *   committed, so this request *is* the original one;
+     * - `legacy-unverified`: the id was committed by a build that did not record
+     *   a digest, so only the id could be checked. Treat the outcome as
+     *   uncertain if the request might differ from the original.
+     */
+    binding?: 'verified' | 'legacy-unverified';
+    /**
+     * Whether the fields below describe the original commit. `unavailable` means
+     * the durable record no longer holds the original positions (an id committed
+     * by a build that did not record them, since folded into a snapshot); they
+     * are then absent rather than guessed. Absent on a first commit, where they
+     * are always known.
+     */
+    outcome?: 'original' | 'unavailable';
     operations: number;
-    stateBefore: number;
-    stateAfter: number;
+    /**
+     * Position of the *original* commit: the store's sequence before and after
+     * it, not the store's current sequence. Absent when `outcome` is
+     * `unavailable`.
+     */
+    stateBefore?: number;
+    stateAfter?: number;
     /** Authority revision before and after this atomic commit. */
-    baseRevision: number;
-    commitRevision: number;
+    baseRevision?: number;
+    commitRevision?: number;
     /** Stable revision and operation identities; never aliases of transactionId. */
-    revisionId: string;
+    revisionId?: string;
     operationIds: string[];
 }
 /** Staging surface for one collection inside a transaction. */
@@ -234,6 +257,28 @@ export declare class AtomicTransactionError extends Error {
     readonly status?: number;
     constructor(message: string, transactionId: string, code?: string, status?: number, cause?: unknown);
 }
+/**
+ * The transaction id was already committed with a different payload.
+ *
+ * Nothing was applied and the recorded transaction is unchanged. Retrying with
+ * the same id cannot succeed: choose a new id for a new transaction, or resend
+ * the original payload to confirm the original.
+ */
+export declare class TransactionIdConflictError extends AtomicTransactionError {
+    readonly code: "IDEMPOTENCY_CONFLICT";
+    constructor(transactionId: string, message?: string);
+}
+/**
+ * The transaction id exists, but its recorded identity cannot be checked by
+ * this build (a digest of a newer construction, or a malformed one).
+ *
+ * Not a conflict and not a duplicate: neither can be established. Nothing was
+ * applied. Do not assume either outcome.
+ */
+export declare class TransactionIdUnverifiableError extends AtomicTransactionError {
+    readonly code: "IDEMPOTENCY_UNVERIFIABLE";
+    constructor(transactionId: string, message?: string);
+}
 /** Which predicate failed, and what the authority actually holds. */
 export interface ConditionalConflictDetail {
     predicate: 'version' | 'epoch' | 'lease' | 'present' | 'missing' | 'fence';

package/dist/transaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../src/transaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oCAAoC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,yDAAyD;AACzD,MAAM,WAAW,sBAAsB;IACrC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,0DAA0D;AAC1D,MAAM,WAAW,iCAAiC;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,yBAAyB;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,6BAA6B,EAAE,CAAC;IAChD,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAChC,UAAU,EAAE,iCAAiC,EAAE,CAAC;CACjD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,OAAO,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC1F;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,OAAQ,CAAC;AAIhD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAgCxF;AAED,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,iCAAiC,EAAE,CAAC;IAChD;;;;;OAKG;IACH,aAAa,CAAC,EAAE,6BAA6B,EAAE,CAAC;IAChD;;;;OAIG;IACH,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,6EAA6E;IAC7E,aAAa,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,+DAA+D;AAC/D,MAAM,WAAW,2BAA2B,CAAC,CAAC,GAAG,OAAO;IACtD,qBAAqB;IACrB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAC;IACrG;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAC;IACxG,sBAAsB;IACtB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAC;CAC/F;AAED,mDAAmD;AACnD,MAAM,WAAW,sBAAsB;IACrC,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,UAAU,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAC;IACtE;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,EAAE,6BAA6B,GAAG,sBAAsB,CAAC;IAC1E;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,EAAE,oBAAoB,GAAG,sBAAsB,CAAC;IAC3D,gCAAgC;IAChC,QAAQ,CAAC,UAAU,EAAE,SAAS,iCAAiC,EAAE,CAAC;IAClE,mCAAmC;IACnC,QAAQ,CAAC,aAAa,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACjE,gCAAgC;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,0EAA0E;AAC1E,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBACb,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAOpG;AAED,qEAAqE;AACrE,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IAC3E,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;;;;;;;;GASG;AACH,qBAAa,wBAAyB,SAAQ,sBAAsB;IAClE,SAAkB,IAAI,EAAG,qBAAqB,CAAU;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC;gBACjC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,yBAAyB;CAKxF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,GACb;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,yBAAyB,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,CAqB/E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,6BAA6B,GACvC,6BAA6B,CAU/B;AAOD,sDAAsD;AACtD,qBAAa,wBAAyB,YAAW,sBAAsB;IACrE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2C;IAClE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuC;IAChE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,MAAM,CAAS;gBAEX,aAAa,CAAC,EAAE,MAAM;IAIlC,IAAI,UAAU,IAAI,SAAS,iCAAiC,EAAE,CAE7D;IAED,UAAU,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,2BAA2B,CAAC,CAAC,CAAC;IAgErE,IAAI,aAAa,IAAI,SAAS,6BAA6B,EAAE,CAE5D;IAED,OAAO,CAAC,SAAS,EAAE,6BAA6B,GAAG,sBAAsB;IAuBzE,IAAI,MAAM,IAAI,SAAS,oBAAoB,EAAE,CAE5C;IAED,KAAK,CAAC,KAAK,EAAE,oBAAoB,GAAG,sBAAsB;IAW1D,0DAA0D;IAC1D,IAAI,IAAI,wBAAwB;CASjC"}
+{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../src/transaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oCAAoC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,yDAAyD;AACzD,MAAM,WAAW,sBAAsB;IACrC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,0DAA0D;AAC1D,MAAM,WAAW,iCAAiC;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,yBAAyB;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,6BAA6B,EAAE,CAAC;IAChD,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAChC,UAAU,EAAE,iCAAiC,EAAE,CAAC;CACjD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,OAAO,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC1F;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,OAAQ,CAAC;AAIhD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAgCxF;AAED,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,iCAAiC,EAAE,CAAC;IAChD;;;;;OAKG;IACH,aAAa,CAAC,EAAE,6BAA6B,EAAE,CAAC;IAChD;;;;OAIG;IACH,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,6EAA6E;IAC7E,aAAa,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,UAAU,GAAG,mBAAmB,CAAC;IAC3C;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,UAAU,GAAG,aAAa,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,+DAA+D;AAC/D,MAAM,WAAW,2BAA2B,CAAC,CAAC,GAAG,OAAO;IACtD,qBAAqB;IACrB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAC;IACrG;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAC;IACxG,sBAAsB;IACtB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAC;CAC/F;AAED,mDAAmD;AACnD,MAAM,WAAW,sBAAsB;IACrC,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,UAAU,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAC;IACtE;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,EAAE,6BAA6B,GAAG,sBAAsB,CAAC;IAC1E;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,EAAE,oBAAoB,GAAG,sBAAsB,CAAC;IAC3D,gCAAgC;IAChC,QAAQ,CAAC,UAAU,EAAE,SAAS,iCAAiC,EAAE,CAAC;IAClE,mCAAmC;IACnC,QAAQ,CAAC,aAAa,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACjE,gCAAgC;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,0EAA0E;AAC1E,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBACb,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAOpG;AAED;;;;;;GAMG;AACH,qBAAa,0BAA2B,SAAQ,sBAAsB;IACpE,SAAkB,IAAI,EAAG,sBAAsB,CAAU;gBAC7C,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;CAOpD;AAED;;;;;;GAMG;AACH,qBAAa,8BAA+B,SAAQ,sBAAsB;IACxE,SAAkB,IAAI,EAAG,0BAA0B,CAAU;gBACjD,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;CAOpD;AAED,qEAAqE;AACrE,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IAC3E,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;;;;;;;;GASG;AACH,qBAAa,wBAAyB,SAAQ,sBAAsB;IAClE,SAAkB,IAAI,EAAG,qBAAqB,CAAU;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC;gBACjC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,yBAAyB;CAKxF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,GACb;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,yBAAyB,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,CAqB/E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,6BAA6B,GACvC,6BAA6B,CAU/B;AAOD,sDAAsD;AACtD,qBAAa,wBAAyB,YAAW,sBAAsB;IACrE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2C;IAClE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuC;IAChE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,MAAM,CAAS;gBAEX,aAAa,CAAC,EAAE,MAAM;IAIlC,IAAI,UAAU,IAAI,SAAS,iCAAiC,EAAE,CAE7D;IAED,UAAU,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,2BAA2B,CAAC,CAAC,CAAC;IAgErE,IAAI,aAAa,IAAI,SAAS,6BAA6B,EAAE,CAE5D;IAED,OAAO,CAAC,SAAS,EAAE,6BAA6B,GAAG,sBAAsB;IAuBzE,IAAI,MAAM,IAAI,SAAS,oBAAoB,EAAE,CAE5C;IAED,KAAK,CAAC,KAAK,EAAE,oBAAoB,GAAG,sBAAsB;IAW1D,0DAA0D;IAC1D,IAAI,IAAI,wBAAwB;CASjC"}

package/dist/transaction.js

@@ -79,6 +79,34 @@ export class AtomicTransactionError extends Error {
         this.status = status;
     }
 }
+/**
+ * The transaction id was already committed with a different payload.
+ *
+ * Nothing was applied and the recorded transaction is unchanged. Retrying with
+ * the same id cannot succeed: choose a new id for a new transaction, or resend
+ * the original payload to confirm the original.
+ */
+export class TransactionIdConflictError extends AtomicTransactionError {
+    code = 'IDEMPOTENCY_CONFLICT';
+    constructor(transactionId, message) {
+        super(message ?? `Transaction ${transactionId} was already committed with a different payload`, transactionId);
+        this.name = 'TransactionIdConflictError';
+    }
+}
+/**
+ * The transaction id exists, but its recorded identity cannot be checked by
+ * this build (a digest of a newer construction, or a malformed one).
+ *
+ * Not a conflict and not a duplicate: neither can be established. Nothing was
+ * applied. Do not assume either outcome.
+ */
+export class TransactionIdUnverifiableError extends AtomicTransactionError {
+    code = 'IDEMPOTENCY_UNVERIFIABLE';
+    constructor(transactionId, message) {
+        super(message ?? `Transaction ${transactionId} exists, but its recorded identity cannot be verified by this build`, transactionId);
+        this.name = 'TransactionIdUnverifiableError';
+    }
+}
 /**
  * A transaction was refused because a precondition did not hold.
  *

package/dist/wasm/package.json

@@ -1,7 +1,7 @@
 {
   "name": "feltdb-wasm",
   "type": "module",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "files": [
     "feltdb_wasm_bg.wasm",
     "feltdb_wasm.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feltdb/core",
-  "version": "0.12.0",
+  "version": "0.12.2",
   "description": "FeltDB Core - Application-facing database with Browser, Local, and Server runtimes. Durable state, reactive APIs.",
   "license": "MIT",
   "type": "module",
@@ -61,7 +61,7 @@
     "README.md"
   ],
   "scripts": {
-    "build": "rm -rf dist && tsc && node ../../tools/stage-core-wasm.mjs && npm run build --workspace @feltdb/react && npm run build --workspace @feltdb/migration-sherpa && npm run build --workspace @feltdb/studio && npm run build --workspace create-feltdb && npm run build --workspace @feltdb/cli && node ../../tools/assemble-core-sdk.mjs",
+    "build": "rm -rf dist && tsc && node ../../tools/stage-core-wasm.mjs && npm run build --workspace @feltdb/react && npm run build --workspace @feltdb/migration-sherpa && npm run build --workspace @feltdb/studio && npm run build --workspace create-feltdb && npm run build --workspace @feltdb/cli && node ../../tools/assemble-core-sdk.mjs && node ../../tools/core-build-identity.mjs write packages/core",
     "test": "node ../../test-runner.ts",
     "test:workspace-e2e": "node --test test/workspace-connection.e2e.test.mjs test/local-development-authority-read-contract.test.mjs",
     "type-check": "tsc --noEmit"