@feltdb/core 0.4.17 → 0.5.0

package/dist/operation-admission.d.ts

@@ -0,0 +1,141 @@
+/**
+ * Atomic Idempotent Operation Admission
+ *
+ * Defines the durable operation admission contract for FeltDB.
+ * Guarantees: exactly one operation identity per idempotency key,
+ * atomic durability, and convergence across concurrent callers.
+ */
+/**
+ * Input contract for admitting a durable operation
+ */
+export interface OperationAdmissionInput {
+    /** Unique idempotency key supplied by caller */
+    idempotencyKey: string;
+    /** Operation kind (e.g., "execution", "coordination", "verification") */
+    kind: string;
+    /** Optional immutable operation fingerprint for conflict detection */
+    operationFingerprint?: string;
+    /** Caller-supplied metadata */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Operation lifecycle status
+ */
+export type OperationStatus = 'accepted' | 'executing' | 'completed' | 'failed' | 'cancelled';
+/**
+ * Durable operation record with versioned lifecycle
+ */
+export interface DurableOperation {
+    /** FeltDB-generated operation identity (ULIDv7 or similar) */
+    operationId: string;
+    /** Caller's idempotency key */
+    idempotencyKey: string;
+    /** Operation kind (immutable) */
+    kind: string;
+    /** Current operation status in lifecycle */
+    status: OperationStatus;
+    /** Version number (increments by 1 on each successful transition) */
+    version: number;
+    /** Timestamp when operation was admitted */
+    createdAt: number;
+    /** Timestamp when execution started */
+    startedAt?: number;
+    /** Timestamp when operation terminal state reached */
+    completedAt?: number;
+    /** Operation fingerprint for conflict detection */
+    operationFingerprint?: string;
+    /** Caller metadata */
+    metadata?: Record<string, unknown>;
+    /** Result/outcome for terminal states */
+    resultSnapshot?: unknown;
+    /** Error message for failed operations */
+    error?: string;
+}
+/**
+ * Result of an operation admission attempt
+ */
+export interface OperationAdmissionResult {
+    /** True if this caller admitted the operation; false if it already existed */
+    admitted: boolean;
+    /** FeltDB-generated operation identity (same for all callers with same idempotencyKey) */
+    operationId: string;
+    /** The durable operation record */
+    operation: DurableOperation;
+}
+/**
+ * Conflict error when idempotency key is reused with different operation semantics
+ */
+export interface IdempotencyConflictError {
+    code: 'IDEMPOTENCY_CONFLICT';
+    idempotencyKey: string;
+    existingKind: string;
+    requestedKind: string;
+    existingFingerprint?: string;
+    requestedFingerprint?: string;
+    message: string;
+}
+/**
+ * Input for atomic operation lifecycle transition
+ */
+export interface OperationTransitionInput {
+    /** Operation ID to transition */
+    operationId: string;
+    /** Expected current version (for CAS) */
+    expectedVersion: number;
+    /** Target status after transition */
+    to: OperationStatus;
+    /** Result data for terminal states */
+    resultSnapshot?: unknown;
+    /** Error message for failed operations */
+    error?: string;
+    /** Metadata for the transition event */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Result of a transition attempt
+ */
+export interface OperationTransitionResult {
+    /** True if transition succeeded */
+    transitioned: boolean;
+    /** Reason for failure (if transitioned = false) */
+    reason?: 'VERSION_CONFLICT' | 'INVALID_TRANSITION' | 'NOT_FOUND';
+    /** Current operation state (after transition or at rejection) */
+    operation: DurableOperation;
+}
+/**
+ * Validates operation admission inputs
+ */
+export declare function validateOperationAdmissionInput(input: OperationAdmissionInput): {
+    valid: boolean;
+    error?: string;
+};
+/**
+ * Checks if two operations conflict based on immutable semantics
+ */
+export declare function operationsConflict(existing: DurableOperation, requested: OperationAdmissionInput): IdempotencyConflictError | null;
+/**
+ * Generates a stable operation ID
+ * In production, use ULIDv7 for sortability and distributed uniqueness
+ */
+export declare function generateOperationId(): string;
+/**
+ * Validates that a transition is legal according to the state machine
+ */
+export declare function isValidTransition(fromStatus: OperationStatus, toStatus: OperationStatus): boolean;
+/**
+ * Checks if a status is a terminal state
+ */
+export declare function isTerminalStatus(status: OperationStatus): boolean;
+/**
+ * Validates transition input
+ */
+export declare function validateTransitionInput(input: OperationTransitionInput): {
+    valid: boolean;
+    error?: string;
+};
+/**
+ * Checks if a terminal transition is idempotent
+ * (same result data means it's the same transition, not a new one)
+ */
+export declare function isIdempotentTerminalTransition(existingOp: DurableOperation, requestedResult?: unknown, requestedError?: string): boolean;
+//# sourceMappingURL=operation-admission.d.ts.map

package/dist/operation-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-admission.d.ts","sourceRoot":"","sources":["../src/operation-admission.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,gDAAgD;IAChD,cAAc,EAAE,MAAM,CAAC;IAEvB,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IAEb,sEAAsE;IACtE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE9F;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,WAAW,EAAE,MAAM,CAAC;IAEpB,+BAA+B;IAC/B,cAAc,EAAE,MAAM,CAAC;IAEvB,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IAEb,4CAA4C;IAC5C,MAAM,EAAE,eAAe,CAAC;IAExB,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAEhB,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAElB,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,sDAAsD;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,mDAAmD;IACnD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B,sBAAsB;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnC,yCAAyC;IACzC,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,8EAA8E;IAC9E,QAAQ,EAAE,OAAO,CAAC;IAElB,0FAA0F;IAC1F,WAAW,EAAE,MAAM,CAAC;IAEpB,mCAAmC;IACnC,SAAS,EAAE,gBAAgB,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IAEpB,yCAAyC;IACzC,eAAe,EAAE,MAAM,CAAC;IAExB,qCAAqC;IACrC,EAAE,EAAE,eAAe,CAAC;IAEpB,sCAAsC;IACtC,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,mCAAmC;IACnC,YAAY,EAAE,OAAO,CAAC;IAEtB,mDAAmD;IACnD,MAAM,CAAC,EAAE,kBAAkB,GAAG,oBAAoB,GAAG,WAAW,CAAC;IAEjE,iEAAiE;IACjE,SAAS,EAAE,gBAAgB,CAAC;CAC7B;AAED;;GAEG;AACH,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,uBAAuB,GAC7B;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAsBpC;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,gBAAgB,EAC1B,SAAS,EAAE,uBAAuB,GACjC,wBAAwB,GAAG,IAAI,CA4BjC;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAO5C;AAgBD;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,eAAe,EAC3B,QAAQ,EAAE,eAAe,GACxB,OAAO,CAGT;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAEjE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,wBAAwB,GAC9B;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAmBpC;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,gBAAgB,EAC5B,eAAe,CAAC,EAAE,OAAO,EACzB,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAkBT"}

package/dist/operation-admission.js

@@ -0,0 +1,135 @@
+/**
+ * Atomic Idempotent Operation Admission
+ *
+ * Defines the durable operation admission contract for FeltDB.
+ * Guarantees: exactly one operation identity per idempotency key,
+ * atomic durability, and convergence across concurrent callers.
+ */
+/**
+ * Validates operation admission inputs
+ */
+export function validateOperationAdmissionInput(input) {
+    if (!input.idempotencyKey || typeof input.idempotencyKey !== 'string') {
+        return { valid: false, error: 'idempotencyKey must be a non-empty string' };
+    }
+    if (!input.kind || typeof input.kind !== 'string') {
+        return { valid: false, error: 'kind must be a non-empty string' };
+    }
+    if (input.idempotencyKey.length > 255) {
+        return { valid: false, error: 'idempotencyKey must be <= 255 characters' };
+    }
+    if (input.kind.length > 64) {
+        return { valid: false, error: 'kind must be <= 64 characters' };
+    }
+    if (input.operationFingerprint && input.operationFingerprint.length > 255) {
+        return { valid: false, error: 'operationFingerprint must be <= 255 characters' };
+    }
+    return { valid: true };
+}
+/**
+ * Checks if two operations conflict based on immutable semantics
+ */
+export function operationsConflict(existing, requested) {
+    // Same idempotencyKey must have same kind
+    if (existing.kind !== requested.kind) {
+        return {
+            code: 'IDEMPOTENCY_CONFLICT',
+            idempotencyKey: existing.idempotencyKey,
+            existingKind: existing.kind,
+            requestedKind: requested.kind,
+            message: `Operation kind mismatch for idempotencyKey "${existing.idempotencyKey}": existing="${existing.kind}", requested="${requested.kind}"`,
+        };
+    }
+    // If fingerprint is supplied, it must match
+    if (requested.operationFingerprint) {
+        if (existing.operationFingerprint !== requested.operationFingerprint) {
+            return {
+                code: 'IDEMPOTENCY_CONFLICT',
+                idempotencyKey: existing.idempotencyKey,
+                existingKind: existing.kind,
+                requestedKind: requested.kind,
+                existingFingerprint: existing.operationFingerprint,
+                requestedFingerprint: requested.operationFingerprint,
+                message: `Operation fingerprint mismatch for idempotencyKey "${existing.idempotencyKey}": existing="${existing.operationFingerprint}", requested="${requested.operationFingerprint}"`,
+            };
+        }
+    }
+    return null;
+}
+/**
+ * Generates a stable operation ID
+ * In production, use ULIDv7 for sortability and distributed uniqueness
+ */
+export function generateOperationId() {
+    // Format: timestamp (13 bytes) + random (12 bytes) = 25 chars
+    // For now, use a simple format; consider switching to proper ULID
+    const timestamp = Date.now();
+    const random = Math.random().toString(36).substring(2, 15) +
+        Math.random().toString(36).substring(2, 15);
+    return `op-${timestamp}-${random}`;
+}
+/**
+ * Legal state transitions in the operation lifecycle
+ *
+ * Invariant: Each successful transition increments version by exactly 1.
+ * Terminal states (completed, failed, cancelled) have no outgoing transitions.
+ */
+const LEGAL_TRANSITIONS = {
+    accepted: ['executing', 'cancelled'],
+    executing: ['completed', 'failed', 'cancelled'],
+    completed: [], // Terminal: no transitions allowed
+    failed: [], // Terminal: no transitions allowed
+    cancelled: [], // Terminal: no transitions allowed
+};
+/**
+ * Validates that a transition is legal according to the state machine
+ */
+export function isValidTransition(fromStatus, toStatus) {
+    const allowedTargets = LEGAL_TRANSITIONS[fromStatus] || [];
+    return allowedTargets.includes(toStatus);
+}
+/**
+ * Checks if a status is a terminal state
+ */
+export function isTerminalStatus(status) {
+    return ['completed', 'failed', 'cancelled'].includes(status);
+}
+/**
+ * Validates transition input
+ */
+export function validateTransitionInput(input) {
+    if (!input.operationId || typeof input.operationId !== 'string') {
+        return { valid: false, error: 'operationId must be a non-empty string' };
+    }
+    if (typeof input.expectedVersion !== 'number' || input.expectedVersion < 0) {
+        return { valid: false, error: 'expectedVersion must be a non-negative number' };
+    }
+    if (!input.to || typeof input.to !== 'string') {
+        return { valid: false, error: 'to must specify a target status' };
+    }
+    const validStatuses = ['accepted', 'executing', 'completed', 'failed', 'cancelled'];
+    if (!validStatuses.includes(input.to)) {
+        return { valid: false, error: `to must be one of: ${validStatuses.join(', ')}` };
+    }
+    return { valid: true };
+}
+/**
+ * Checks if a terminal transition is idempotent
+ * (same result data means it's the same transition, not a new one)
+ */
+export function isIdempotentTerminalTransition(existingOp, requestedResult, requestedError) {
+    // If operation is already in terminal state
+    if (!isTerminalStatus(existingOp.status)) {
+        return false; // Not a terminal op
+    }
+    // For completed operations, check result
+    if (existingOp.status === 'completed') {
+        return JSON.stringify(existingOp.resultSnapshot) === JSON.stringify(requestedResult);
+    }
+    // For failed operations, check error message
+    if (existingOp.status === 'failed') {
+        return existingOp.error === requestedError;
+    }
+    // For cancelled operations, idempotent
+    return true;
+}

package/dist/revision-recovery.d.ts

@@ -0,0 +1,162 @@
+/**
+ * Revision Recovery: Audited Recovery from Invalid Historical Revisions
+ *
+ * Provides mechanisms to safely recover from corrupt/invalid historical revisions
+ * under strict safety constraints and comprehensive audit trail requirements.
+ */
+/**
+ * Authorization level required for revision recovery operations
+ */
+export type RecoveryAuthorization = 'ELEVATED' | 'ADMIN' | 'EMERGENCY';
+/**
+ * Compatibility classification for manifest changes
+ */
+export type CompatibilityClassification = 'COMPATIBLE' | 'WARNING' | 'INCOMPATIBLE';
+/**
+ * Recovery mode indicating what was approved
+ */
+export type RecoveryMode = 'SAFE_COMPATIBLE' | 'WARNING_APPROVED' | 'DESTRUCTIVE_APPROVED';
+/**
+ * Input for recovering an application revision
+ */
+export interface RevisionRecoveryInput {
+    /** Application ID being recovered */
+    applicationId: string;
+    /** Current revision that is invalid/corrupt (must match actual current) */
+    expectedCurrentRevision: string;
+    /** Target revision to promote to (must be valid and integrity-checked) */
+    targetRevision: string;
+    /** Elevated authorization level required */
+    authorization: RecoveryAuthorization;
+    /** Actor (user/service) approving recovery */
+    actor: string;
+    /** Explicit reason for recovery */
+    reason: string;
+    /** Environment being recovered */
+    environment?: string;
+    /** Allow destructive schema changes if compatibility check requires it */
+    allowDestructiveChange?: boolean;
+    /** Explicit reason for approving destructive changes (required if allowDestructiveChange=true) */
+    destructiveChangeReason?: string;
+    /** Idempotency key for recovery operation */
+    recoveryId?: string;
+}
+/**
+ * Audit record for a completed revision recovery
+ */
+export interface RevisionRecoveryAudit {
+    /** Unique audit record ID */
+    auditId: string;
+    /** Application being recovered */
+    applicationId: string;
+    /** Source (corrupt) revision being abandoned */
+    sourceRevision: string;
+    /** Recomputed hash of source revision (for verification) */
+    sourceRevisionHash: string;
+    /** Target revision being promoted to */
+    targetRevision: string;
+    /** Hash of target revision */
+    targetRevisionHash: string;
+    /** Hash of previous audit record in chain (for immutability) */
+    previousAuditHash?: string;
+    /** Hash of this audit record */
+    auditHash: string;
+    /** Actor who approved recovery */
+    approvedBy: string;
+    /** Recovery reason provided */
+    reason: string;
+    /** Authorization level that was required */
+    authorizationLevel: RecoveryAuthorization;
+    /** Mode of recovery (what was approved) */
+    recoveryMode: RecoveryMode;
+    /** Compatibility classification from diff analysis */
+    compatibilityClassification: CompatibilityClassification;
+    /** Detailed compatibility issues found (if any) */
+    compatibilityIssues?: string[];
+    /** Destructive change approval reason (if applicable) */
+    destructiveChangeReason?: string;
+    /** Timestamp of recovery */
+    recoveredAt: number;
+    /** Idempotency key for the recovery operation */
+    recoveryId: string;
+    /** Status of recovery operation */
+    status: 'COMPLETED' | 'PARTIAL' | 'ROLLED_BACK';
+    /** Marker indicating source revision must never be moved back to */
+    markedUntrustedUntilRevision: string;
+}
+/**
+ * Result of a revision recovery attempt
+ */
+export interface RevisionRecoveryResult {
+    /** Whether recovery succeeded */
+    success: boolean;
+    /** Error code if recovery failed */
+    errorCode?: 'PERMISSION_DENIED' | 'CONFLICT' | 'INCOMPATIBLE_SCHEMA' | 'CORRUPT_REVISION_UNMOVABLE' | 'STORAGE_FAILURE' | 'VALIDATION_FAILED';
+    /** Human-readable error message */
+    errorMessage?: string;
+    /** Audit record created (present if recovery succeeds or partially completes) */
+    audit?: RevisionRecoveryAudit;
+    /** Current revision pointer after recovery attempt */
+    currentRevision: string;
+    /** Whether audit record was durable persisted */
+    auditDurable: boolean;
+    /** Pointer was successfully moved to target */
+    pointerMoved: boolean;
+    /** Source revision was marked untrusted */
+    sourceMarkedUntrusted: boolean;
+}
+/**
+ * Revision state tracking for corrupt/untrusted revisions
+ */
+export interface RevisionState {
+    /** Revision ID */
+    revisionId: string;
+    /** Whether revision is valid/trusted */
+    trusted: boolean;
+    /** Marker: any revision equal to or before this cannot be promoted to */
+    untrustedUntilRevision?: string;
+    /** Reason revision was marked untrusted (if applicable) */
+    untrustedReason?: string;
+    /** Timestamp when marked untrusted */
+    markedUntrustedAt?: number;
+    /** Reference to recovery audit that marked it untrusted */
+    recoveryAuditId?: string;
+}
+/**
+ * Compatibility check result
+ */
+export interface CompatibilityCheckResult {
+    /** Overall compatibility classification */
+    classification: CompatibilityClassification;
+    /** List of specific issues or warnings found */
+    issues: Array<{
+        category: 'SCHEMA_CHANGE' | 'DATA_LOSS' | 'REFERENCE_BREAKING' | 'INDEX_REMOVAL';
+        severity: 'WARNING' | 'INCOMPATIBLE';
+        detail: string;
+    }>;
+    /** Whether any data loss would occur */
+    causesDataLoss: boolean;
+    /** Whether this is a breaking change */
+    isBreakingChange: boolean;
+    /** Recommended action */
+    recommendation: string;
+}
+/**
+ * Validates revision recovery input
+ */
+export declare function validateRevisionRecoveryInput(input: RevisionRecoveryInput): {
+    valid: boolean;
+    error?: string;
+};
+/**
+ * Generates cryptographic hash for audit record chain
+ */
+export declare function generateAuditHash(data: Record<string, unknown>, previousHash?: string): string;
+/**
+ * Checks if a revision pointer transition would violate untrust markers
+ */
+export declare function wouldViolateUntrustworthiness(fromRevision: string, toRevision: string, revisionStates: Map<string, RevisionState>): {
+    violates: boolean;
+    reason?: string;
+};
+//# sourceMappingURL=revision-recovery.d.ts.map

package/dist/revision-recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revision-recovery.d.ts","sourceRoot":"","sources":["../src/revision-recovery.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,OAAO,GAAG,WAAW,CAAC;AAEvE;;GAEG;AACH,MAAM,MAAM,2BAA2B,GAAG,YAAY,GAAG,SAAS,GAAG,cAAc,CAAC;AAEpF;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,sBAAsB,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAC;IAEtB,2EAA2E;IAC3E,uBAAuB,EAAE,MAAM,CAAC;IAEhC,0EAA0E;IAC1E,cAAc,EAAE,MAAM,CAAC;IAEvB,4CAA4C;IAC5C,aAAa,EAAE,qBAAqB,CAAC;IAErC,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;IAEd,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IAEf,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,0EAA0E;IAC1E,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAEjC,kGAAkG;IAClG,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAEjC,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAEhB,kCAAkC;IAClC,aAAa,EAAE,MAAM,CAAC;IAEtB,gDAAgD;IAChD,cAAc,EAAE,MAAM,CAAC;IAEvB,4DAA4D;IAC5D,kBAAkB,EAAE,MAAM,CAAC;IAE3B,wCAAwC;IACxC,cAAc,EAAE,MAAM,CAAC;IAEvB,8BAA8B;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAE3B,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAElB,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;IAEnB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IAEf,4CAA4C;IAC5C,kBAAkB,EAAE,qBAAqB,CAAC;IAE1C,2CAA2C;IAC3C,YAAY,EAAE,YAAY,CAAC;IAE3B,sDAAsD;IACtD,2BAA2B,EAAE,2BAA2B,CAAC;IAEzD,mDAAmD;IACnD,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE/B,yDAAyD;IACzD,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAEjC,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAC;IAEpB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IAEnB,mCAAmC;IACnC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,aAAa,CAAC;IAEhD,oEAAoE;IACpE,4BAA4B,EAAE,MAAM,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IAEjB,oCAAoC;IACpC,SAAS,CAAC,EAAE,mBAAmB,GAAG,UAAU,GAAG,qBAAqB,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,mBAAmB,CAAC;IAE9I,mCAAmC;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,iFAAiF;IACjF,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAE9B,sDAAsD;IACtD,eAAe,EAAE,MAAM,CAAC;IAExB,iDAAiD;IACjD,YAAY,EAAE,OAAO,CAAC;IAEtB,+CAA+C;IAC/C,YAAY,EAAE,OAAO,CAAC;IAEtB,2CAA2C;IAC3C,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kBAAkB;IAClB,UAAU,EAAE,MAAM,CAAC;IAEnB,wCAAwC;IACxC,OAAO,EAAE,OAAO,CAAC;IAEjB,yEAAyE;IACzE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC,2DAA2D;IAC3D,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,sCAAsC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,2DAA2D;IAC3D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,2CAA2C;IAC3C,cAAc,EAAE,2BAA2B,CAAC;IAE5C,gDAAgD;IAChD,MAAM,EAAE,KAAK,CAAC;QACZ,QAAQ,EAAE,eAAe,GAAG,WAAW,GAAG,oBAAoB,GAAG,eAAe,CAAC;QACjF,QAAQ,EAAE,SAAS,GAAG,cAAc,CAAC;QACrC,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IAEH,wCAAwC;IACxC,cAAc,EAAE,OAAO,CAAC;IAExB,wCAAwC;IACxC,gBAAgB,EAAE,OAAO,CAAC;IAE1B,yBAAyB;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,qBAAqB,GAC3B;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAoCpC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAS9F;AAED;;GAEG;AACH,wBAAgB,6BAA6B,CAC3C,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACzC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAgBxC"}

package/dist/revision-recovery.js

@@ -0,0 +1,69 @@
+/**
+ * Revision Recovery: Audited Recovery from Invalid Historical Revisions
+ *
+ * Provides mechanisms to safely recover from corrupt/invalid historical revisions
+ * under strict safety constraints and comprehensive audit trail requirements.
+ */
+/**
+ * Validates revision recovery input
+ */
+export function validateRevisionRecoveryInput(input) {
+    if (!input.applicationId || typeof input.applicationId !== 'string') {
+        return { valid: false, error: 'applicationId must be a non-empty string' };
+    }
+    if (!input.expectedCurrentRevision || typeof input.expectedCurrentRevision !== 'string') {
+        return { valid: false, error: 'expectedCurrentRevision must be a non-empty string' };
+    }
+    if (!input.targetRevision || typeof input.targetRevision !== 'string') {
+        return { valid: false, error: 'targetRevision must be a non-empty string' };
+    }
+    if (!input.authorization || !['ELEVATED', 'ADMIN', 'EMERGENCY'].includes(input.authorization)) {
+        return { valid: false, error: 'authorization must be ELEVATED, ADMIN, or EMERGENCY' };
+    }
+    if (!input.actor || typeof input.actor !== 'string') {
+        return { valid: false, error: 'actor must be a non-empty string' };
+    }
+    if (!input.reason || typeof input.reason !== 'string' || input.reason.length < 10) {
+        return { valid: false, error: 'reason must be a string with at least 10 characters' };
+    }
+    if (input.expectedCurrentRevision === input.targetRevision) {
+        return { valid: false, error: 'expectedCurrentRevision and targetRevision must be different' };
+    }
+    if (input.allowDestructiveChange === true) {
+        if (!input.destructiveChangeReason || typeof input.destructiveChangeReason !== 'string' || input.destructiveChangeReason.length < 10) {
+            return { valid: false, error: 'destructiveChangeReason must be provided and at least 10 characters when allowDestructiveChange=true' };
+        }
+    }
+    return { valid: true };
+}
+/**
+ * Generates cryptographic hash for audit record chain
+ */
+export function generateAuditHash(data, previousHash) {
+    // In production, use SHA-256 or similar
+    // For now, use a simple hash based on JSON serialization
+    const payload = JSON.stringify({ ...data, previousHash });
+    // Use Buffer for Node.js, or btoa for browser environments
+    const encoded = typeof btoa !== 'undefined'
+        ? btoa(payload)
+        : Buffer.from(payload).toString('base64');
+    return encoded.substring(0, 64);
+}
+/**
+ * Checks if a revision pointer transition would violate untrust markers
+ */
+export function wouldViolateUntrustworthiness(fromRevision, toRevision, revisionStates) {
+    const state = revisionStates.get(fromRevision);
+    if (!state || !state.untrustedUntilRevision) {
+        return { violates: false };
+    }
+    // Check if trying to move back to or through an untrusted revision
+    // This is a simplified check; production would need proper revision ordering
+    if (toRevision === state.untrustedUntilRevision || state.untrustedUntilRevision === fromRevision) {
+        return {
+            violates: true,
+            reason: `Revision ${fromRevision} is marked untrusted and cannot be moved back to`,
+        };
+    }
+    return { violates: false };
+}

package/dist/state-contract.d.ts

@@ -1,3 +1,4 @@
+import { RevisionRecoveryInput, RevisionRecoveryResult } from './revision-recovery';
 /** Transport types for the Rust-owned FeltDB state contract. */
 export type PrimitiveType = 'string' | 'integer' | 'number' | 'boolean' | 'timestamp' | 'date' | 'time' | 'json' | 'uuid' | 'decimal' | 'money' | 'bigint' | 'email' | 'url' | 'phone' | 'binary' | 'file' | 'geo_point' | 'object';
 export type FieldType = {
@@ -174,6 +175,7 @@ export declare class StateContractClient {
         transactionId?: string;
         causalParent?: number;
     }): Promise<TransactionResult>;
+    recoverApplicationRevision(input: RevisionRecoveryInput): Promise<RevisionRecoveryResult>;
 }
 export {};
 //# sourceMappingURL=state-contract.d.ts.map

package/dist/state-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state-contract.d.ts","sourceRoot":"","sources":["../src/state-contract.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,MAAM,MAAM,aAAa,GAAC,QAAQ,GAAC,SAAS,GAAC,QAAQ,GAAC,SAAS,GAAC,WAAW,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,SAAS,GAAC,OAAO,GAAC,QAAQ,GAAC,OAAO,GAAC,KAAK,GAAC,OAAO,GAAC,QAAQ,GAAC,MAAM,GAAC,WAAW,GAAC,QAAQ,CAAC;AAC9L,MAAM,MAAM,SAAS,GAAC;IAAC,IAAI,EAAC,WAAW,CAAC;IAAA,SAAS,EAAC,aAAa,CAAA;CAAC,GAAC;IAAC,IAAI,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,EAAE,CAAA;CAAC,GAAC;IAAC,IAAI,EAAC,WAAW,CAAC;IAAA,UAAU,EAAC,MAAM,CAAA;CAAC,GAAC;IAAC,IAAI,EAAC,OAAO,CAAC;IAAA,KAAK,EAAC,SAAS,CAAA;CAAC,GAAC;IAAC,IAAI,EAAC,KAAK,CAAC;IAAA,MAAM,EAAC,SAAS,CAAA;CAAC,GAAC;IAAC,IAAI,EAAC,QAAQ,CAAC;IAAA,UAAU,CAAC,EAAC,MAAM,CAAA;CAAC,CAAC;AACpO,MAAM,WAAW,UAAU;IAAC,IAAI,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,SAAS,CAAC;IAAA,QAAQ,CAAC,EAAC,OAAO,CAAC;IAAA,QAAQ,CAAC,EAAC,OAAO,CAAC;IAAA,OAAO,CAAC,EAAC,OAAO,CAAC;IAAA,WAAW,CAAC,EAAC;QAAC,OAAO,CAAC,EAAC,MAAM,CAAC;QAAA,OAAO,CAAC,EAAC,MAAM,CAAC;QAAA,UAAU,CAAC,EAAC,MAAM,CAAC;QAAA,UAAU,CAAC,EAAC,MAAM,CAAC;QAAA,OAAO,CAAC,EAAC,MAAM,CAAA;KAAC,CAAC;IAAA,QAAQ,CAAC,EAAC,MAAM,CAAA;CAAC;AACxO,MAAM,WAAW,WAAW;IAAC,gBAAgB,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC;QAAC,IAAI,EAAC,MAAM,CAAC;QAAA,OAAO,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,UAAU,EAAE,CAAC;QAAA,OAAO,EAAC;YAAC,IAAI,EAAC,MAAM,CAAC;YAAA,MAAM,EAAC,MAAM,EAAE,CAAC;YAAA,MAAM,CAAC,EAAC,OAAO,CAAC;YAAA,MAAM,CAAC,EAAC,OAAO,CAAC;YAAA,OAAO,EAAC,MAAM,CAAA;SAAC,EAAE,CAAA;KAAC,EAAE,CAAA;CAAC;AAC1Q,MAAM,MAAM,WAAW,GAAC;IAAC,QAAQ,EAAC,IAAI,GAAC,KAAK,GAAC,IAAI,GAAC,KAAK,GAAC,IAAI,GAAC,KAAK,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,OAAO,CAAA;CAAC,GAAC;IAAC,QAAQ,EAAC,IAAI,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,OAAO,EAAE,CAAA;CAAC,GAAC;IAAC,QAAQ,EAAC,UAAU,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,OAAO,CAAA;CAAC,GAAC;IAAC,QAAQ,EAAC,YAAY,GAAC,UAAU,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,MAAM,CAAA;CAAC,GAAC;IAAC,QAAQ,EAAC,QAAQ,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,OAAO,CAAA;CAAC,GAAC;IAAC,QAAQ,EAAC,KAAK,GAAC,IAAI,CAAC;IAAA,OAAO,EAAC,WAAW,EAAE,CAAA;CAAC,GAAC;IAAC,QAAQ,EAAC,KAAK,CAAC;IAAA,MAAM,EAAC,WAAW,CAAA;CAAC,CAAC;AAC3X,MAAM,WAAW,cAAc;IAAC,UAAU,EAAC,MAAM,CAAC;IAAA,MAAM,CAAC,EAAC,WAAW,CAAC;IAAA,QAAQ,CAAC,EAAC;QAAC,KAAK,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,KAAK,GAAC,MAAM,CAAA;KAAC,EAAE,CAAC;IAAA,KAAK,CAAC,EAAC,MAAM,CAAC;IAAA,MAAM,CAAC,EAAC,MAAM,CAAC;IAAA,MAAM,CAAC,EAAC,MAAM,CAAC;IAAA,UAAU,CAAC,EAAC,MAAM,EAAE,CAAC;IAAA,QAAQ,CAAC,EAAC,MAAM,EAAE,CAAC;IAAA,UAAU,CAAC,EAAC;QAAC,IAAI,EAAC,MAAM,CAAC;QAAA,QAAQ,EAAC,OAAO,GAAC,KAAK,GAAC,KAAK,GAAC,KAAK,GAAC,KAAK,CAAC;QAAA,KAAK,CAAC,EAAC,MAAM,CAAA;KAAC,EAAE,CAAC;IAAA,UAAU,CAAC,EAAC;QAAC,KAAK,EAAC,MAAM,CAAC;QAAA,UAAU,EAAC,MAAM,CAAC;QAAA,UAAU,CAAC,EAAC,MAAM,EAAE,CAAC;QAAA,OAAO,EAAC,MAAM,CAAA;KAAC,EAAE,CAAA;CAAC;AAClX,MAAM,WAAW,WAAW,CAAC,CAAC,GAAC,MAAM,CAAC,MAAM,EAAC,OAAO,CAAC;IAAE,QAAQ,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,oBAAoB,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;IAAA,OAAO,EAAC,CAAC,EAAE,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC,MAAM,EAAC,OAAO,CAAC,EAAE,CAAC;IAAA,WAAW,CAAC,EAAC,MAAM,CAAC;IAAA,IAAI,EAAC;QAAC,cAAc,EAAC,MAAM,CAAC;QAAA,UAAU,EAAC,MAAM,CAAC;QAAA,KAAK,CAAC,EAAC,MAAM,CAAC;QAAA,aAAa,EAAC,OAAO,CAAA;KAAC,CAAA;CAAC;AAC3V,MAAM,WAAW,oBAAoB;IAAC,IAAI,EAAC,QAAQ,GAAC,QAAQ,GAAC,QAAQ,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,EAAE,EAAC,MAAM,CAAC;IAAA,KAAK,CAAC,EAAC,OAAO,CAAC;IAAA,UAAU,CAAC,EAAC,MAAM,CAAA;CAAC;AACpI,MAAM,WAAW,iBAAiB;IAAC,cAAc,EAAC,MAAM,CAAC;IAAA,YAAY,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;IAAA,SAAS,EAAC,OAAO,CAAC;IAAA,KAAK,EAAC,OAAO,CAAA;CAAC;AACpK,MAAM,WAAW,YAAY;IAAC,IAAI,EAAC,mBAAmB,GAAC,qBAAqB,GAAC,sBAAsB,GAAC,iBAAiB,GAAC,UAAU,GAAC,iBAAiB,GAAC,eAAe,GAAC,eAAe,GAAC,oBAAoB,GAAC,yBAAyB,GAAC,gBAAgB,GAAC,mBAAmB,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,QAAQ,CAAC,EAAC,OAAO,CAAC;IAAA,MAAM,CAAC,EAAC,OAAO,CAAC;IAAA,QAAQ,CAAC,EAAC,MAAM,CAAC;IAAA,WAAW,CAAC,EAAC,MAAM,CAAC;IAAA,eAAe,CAAC,EAAC,MAAM,CAAA;CAAC;AAErX,cAAM,kBAAkB;IACtB,QAAQ,CAAC,UAAU,EAAC,oBAAoB,EAAE,CAAI;IAC9C,UAAU,CAAC,IAAI,EAAC,MAAM;qBAAoB,MAAM,SAAO,OAAO;qBAA0F,MAAM,SAAO,OAAO,YAAU;YAAC,SAAS,CAAC,EAAC,MAAM,CAAA;SAAC;qBAA8G,MAAM,YAAU;YAAC,SAAS,CAAC,EAAC,MAAM,CAAA;SAAC;;CAC3V;AACD,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAA8D,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAA5F,MAAM,EAAC;QAAC,aAAa,EAAC,MAAM,CAAC;QAAA,UAAU,EAAC,MAAM,CAAC;QAAA,WAAW,CAAC,EAAC,MAAM,CAAA;KAAC,EAAkB,OAAO,SAAG;YAC9G,OAAO;IACrB,MAAM;gBAA4L,WAAW;;IAC7M,YAAY;IACZ,KAAK,CAAC,CAAC,GAAC,MAAM,CAAC,MAAM,EAAC,OAAO,CAAC,EAAE,KAAK,EAAC,cAAc;IAC9C,WAAW,CAAC,IAAI,EAAC,CAAC,EAAE,EAAC,kBAAkB,KAAG,IAAI,GAAC,OAAO,CAAC,IAAI,CAAC,EAAC,OAAO,CAAC,EAAC;QAAC,aAAa,CAAC,EAAC,MAAM,CAAC;QAAA,YAAY,CAAC,EAAC,MAAM,CAAA;KAAC;CACzH"}
+{"version":3,"file":"state-contract.d.ts","sourceRoot":"","sources":["../src/state-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAGpF,gEAAgE;AAChE,MAAM,MAAM,aAAa,GAAC,QAAQ,GAAC,SAAS,GAAC,QAAQ,GAAC,SAAS,GAAC,WAAW,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,SAAS,GAAC,OAAO,GAAC,QAAQ,GAAC,OAAO,GAAC,KAAK,GAAC,OAAO,GAAC,QAAQ,GAAC,MAAM,GAAC,WAAW,GAAC,QAAQ,CAAC;AAC9L,MAAM,MAAM,SAAS,GAAC;IAAC,IAAI,EAAC,WAAW,CAAC;IAAA,SAAS,EAAC,aAAa,CAAA;CAAC,GAAC;IAAC,IAAI,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,EAAE,CAAA;CAAC,GAAC;IAAC,IAAI,EAAC,WAAW,CAAC;IAAA,UAAU,EAAC,MAAM,CAAA;CAAC,GAAC;IAAC,IAAI,EAAC,OAAO,CAAC;IAAA,KAAK,EAAC,SAAS,CAAA;CAAC,GAAC;IAAC,IAAI,EAAC,KAAK,CAAC;IAAA,MAAM,EAAC,SAAS,CAAA;CAAC,GAAC;IAAC,IAAI,EAAC,QAAQ,CAAC;IAAA,UAAU,CAAC,EAAC,MAAM,CAAA;CAAC,CAAC;AACpO,MAAM,WAAW,UAAU;IAAC,IAAI,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,SAAS,CAAC;IAAA,QAAQ,CAAC,EAAC,OAAO,CAAC;IAAA,QAAQ,CAAC,EAAC,OAAO,CAAC;IAAA,OAAO,CAAC,EAAC,OAAO,CAAC;IAAA,WAAW,CAAC,EAAC;QAAC,OAAO,CAAC,EAAC,MAAM,CAAC;QAAA,OAAO,CAAC,EAAC,MAAM,CAAC;QAAA,UAAU,CAAC,EAAC,MAAM,CAAC;QAAA,UAAU,CAAC,EAAC,MAAM,CAAC;QAAA,OAAO,CAAC,EAAC,MAAM,CAAA;KAAC,CAAC;IAAA,QAAQ,CAAC,EAAC,MAAM,CAAA;CAAC;AACxO,MAAM,WAAW,WAAW;IAAC,gBAAgB,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC;QAAC,IAAI,EAAC,MAAM,CAAC;QAAA,OAAO,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,UAAU,EAAE,CAAC;QAAA,OAAO,EAAC;YAAC,IAAI,EAAC,MAAM,CAAC;YAAA,MAAM,EAAC,MAAM,EAAE,CAAC;YAAA,MAAM,CAAC,EAAC,OAAO,CAAC;YAAA,MAAM,CAAC,EAAC,OAAO,CAAC;YAAA,OAAO,EAAC,MAAM,CAAA;SAAC,EAAE,CAAA;KAAC,EAAE,CAAA;CAAC;AAC1Q,MAAM,MAAM,WAAW,GAAC;IAAC,QAAQ,EAAC,IAAI,GAAC,KAAK,GAAC,IAAI,GAAC,KAAK,GAAC,IAAI,GAAC,KAAK,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,OAAO,CAAA;CAAC,GAAC;IAAC,QAAQ,EAAC,IAAI,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,OAAO,EAAE,CAAA;CAAC,GAAC;IAAC,QAAQ,EAAC,UAAU,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,OAAO,CAAA;CAAC,GAAC;IAAC,QAAQ,EAAC,YAAY,GAAC,UAAU,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,MAAM,CAAA;CAAC,GAAC;IAAC,QAAQ,EAAC,QAAQ,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,OAAO,CAAA;CAAC,GAAC;IAAC,QAAQ,EAAC,KAAK,GAAC,IAAI,CAAC;IAAA,OAAO,EAAC,WAAW,EAAE,CAAA;CAAC,GAAC;IAAC,QAAQ,EAAC,KAAK,CAAC;IAAA,MAAM,EAAC,WAAW,CAAA;CAAC,CAAC;AAC3X,MAAM,WAAW,cAAc;IAAC,UAAU,EAAC,MAAM,CAAC;IAAA,MAAM,CAAC,EAAC,WAAW,CAAC;IAAA,QAAQ,CAAC,EAAC;QAAC,KAAK,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,KAAK,GAAC,MAAM,CAAA;KAAC,EAAE,CAAC;IAAA,KAAK,CAAC,EAAC,MAAM,CAAC;IAAA,MAAM,CAAC,EAAC,MAAM,CAAC;IAAA,MAAM,CAAC,EAAC,MAAM,CAAC;IAAA,UAAU,CAAC,EAAC,MAAM,EAAE,CAAC;IAAA,QAAQ,CAAC,EAAC,MAAM,EAAE,CAAC;IAAA,UAAU,CAAC,EAAC;QAAC,IAAI,EAAC,MAAM,CAAC;QAAA,QAAQ,EAAC,OAAO,GAAC,KAAK,GAAC,KAAK,GAAC,KAAK,GAAC,KAAK,CAAC;QAAA,KAAK,CAAC,EAAC,MAAM,CAAA;KAAC,EAAE,CAAC;IAAA,UAAU,CAAC,EAAC;QAAC,KAAK,EAAC,MAAM,CAAC;QAAA,UAAU,EAAC,MAAM,CAAC;QAAA,UAAU,CAAC,EAAC,MAAM,EAAE,CAAC;QAAA,OAAO,EAAC,MAAM,CAAA;KAAC,EAAE,CAAA;CAAC;AAClX,MAAM,WAAW,WAAW,CAAC,CAAC,GAAC,MAAM,CAAC,MAAM,EAAC,OAAO,CAAC;IAAE,QAAQ,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,oBAAoB,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;IAAA,OAAO,EAAC,CAAC,EAAE,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC,MAAM,EAAC,OAAO,CAAC,EAAE,CAAC;IAAA,WAAW,CAAC,EAAC,MAAM,CAAC;IAAA,IAAI,EAAC;QAAC,cAAc,EAAC,MAAM,CAAC;QAAA,UAAU,EAAC,MAAM,CAAC;QAAA,KAAK,CAAC,EAAC,MAAM,CAAC;QAAA,aAAa,EAAC,OAAO,CAAA;KAAC,CAAA;CAAC;AAC3V,MAAM,WAAW,oBAAoB;IAAC,IAAI,EAAC,QAAQ,GAAC,QAAQ,GAAC,QAAQ,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,EAAE,EAAC,MAAM,CAAC;IAAA,KAAK,CAAC,EAAC,OAAO,CAAC;IAAA,UAAU,CAAC,EAAC,MAAM,CAAA;CAAC;AACpI,MAAM,WAAW,iBAAiB;IAAC,cAAc,EAAC,MAAM,CAAC;IAAA,YAAY,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;IAAA,SAAS,EAAC,OAAO,CAAC;IAAA,KAAK,EAAC,OAAO,CAAA;CAAC;AACpK,MAAM,WAAW,YAAY;IAAC,IAAI,EAAC,mBAAmB,GAAC,qBAAqB,GAAC,sBAAsB,GAAC,iBAAiB,GAAC,UAAU,GAAC,iBAAiB,GAAC,eAAe,GAAC,eAAe,GAAC,oBAAoB,GAAC,yBAAyB,GAAC,gBAAgB,GAAC,mBAAmB,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,QAAQ,CAAC,EAAC,OAAO,CAAC;IAAA,MAAM,CAAC,EAAC,OAAO,CAAC;IAAA,QAAQ,CAAC,EAAC,MAAM,CAAC;IAAA,WAAW,CAAC,EAAC,MAAM,CAAC;IAAA,eAAe,CAAC,EAAC,MAAM,CAAA;CAAC;AAErX,cAAM,kBAAkB;IACtB,QAAQ,CAAC,UAAU,EAAC,oBAAoB,EAAE,CAAI;IAC9C,UAAU,CAAC,IAAI,EAAC,MAAM;qBAAoB,MAAM,SAAO,OAAO;qBAA0F,MAAM,SAAO,OAAO,YAAU;YAAC,SAAS,CAAC,EAAC,MAAM,CAAA;SAAC;qBAA8G,MAAM,YAAU;YAAC,SAAS,CAAC,EAAC,MAAM,CAAA;SAAC;;CAC3V;AACD,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAA8D,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAA5F,MAAM,EAAC;QAAC,aAAa,EAAC,MAAM,CAAC;QAAA,UAAU,EAAC,MAAM,CAAC;QAAA,WAAW,CAAC,EAAC,MAAM,CAAA;KAAC,EAAkB,OAAO,SAAG;YAC9G,OAAO;IAmBrB,MAAM;gBAA4L,WAAW;;IAC7M,YAAY;IACZ,KAAK,CAAC,CAAC,GAAC,MAAM,CAAC,MAAM,EAAC,OAAO,CAAC,EAAE,KAAK,EAAC,cAAc;IAC9C,WAAW,CAAC,IAAI,EAAC,CAAC,EAAE,EAAC,kBAAkB,KAAG,IAAI,GAAC,OAAO,CAAC,IAAI,CAAC,EAAC,OAAO,CAAC,EAAC;QAAC,aAAa,CAAC,EAAC,MAAM,CAAC;QAAA,YAAY,CAAC,EAAC,MAAM,CAAA;KAAC;IACxH,0BAA0B,CAAC,KAAK,EAAC,qBAAqB;CACvD"}

package/dist/state-contract.js

@@ -1,3 +1,4 @@
+import { FeltDBErrorCode } from './error-codes';
 class TransactionBuilder {
     constructor() {
         this.operations = [];
@@ -9,16 +10,25 @@ export class StateContractClient {
         this.target = target;
         this.baseUrl = baseUrl;
     }
-    async request(path, options) { const response = await fetch(`${this.baseUrl}${path}`, { ...options, headers: { ...(options?.body ? { 'Content-Type': 'application/json' } : {}), ...options?.headers } }); const body = await response.json(); if (!response.ok) {
-        let failure = body;
-        try {
-            failure = JSON.parse(body.error);
+    async request(path, options) {
+        const response = await fetch(`${this.baseUrl}${path}`, { ...options, headers: { ...(options?.body ? { 'Content-Type': 'application/json' } : {}), ...options?.headers } });
+        const body = await response.json();
+        if (!response.ok) {
+            const error = {
+                code: body.code || FeltDBErrorCode.INTERNAL_ERROR,
+                message: body.message || 'FeltDB request failed',
+                request_id: body.request_id || 'unknown',
+                transaction_id: body.transaction_id,
+                http_status: response.status,
+                recovery_hint: body.recovery_hint,
+            };
+            throw Object.assign(new Error(error.message), { status: response.status, feltdb_error: error });
         }
-        catch { }
-        throw Object.assign(new Error(failure?.message || body.error || 'FeltDB state request failed'), { status: response.status, failure });
-    } return body; }
+        return body;
+    }
     schema() { const q = new URLSearchParams({ application_id: this.target.applicationId, revision_id: this.target.revisionId, environment: this.target.environment || 'production' }); return this.request(`/v1/schema?${q}`); }
     stateVersion() { const q = new URLSearchParams({ application_id: this.target.applicationId, revision_id: this.target.revisionId, environment: this.target.environment || 'production' }); return this.request(`/v1/state/version?${q}`); }
     query(query) { return this.request('/v1/query', { method: 'POST', body: JSON.stringify({ application_id: this.target.applicationId, revision_id: this.target.revisionId, environment: this.target.environment || 'production', query }) }); }
     async transaction(work, options) { const tx = new TransactionBuilder(); await work(tx); return this.request('/v1/transactions', { method: 'POST', body: JSON.stringify({ application_id: this.target.applicationId, revision_id: this.target.revisionId, environment: this.target.environment || 'production', transaction: { transaction_id: options?.transactionId, tenant_id: 'transport', application_id: this.target.applicationId, revision_id: this.target.revisionId, schema_version: 0, causal_parent: options?.causalParent, authorization: { subject: 'transport', tenant_id: 'transport', application_id: this.target.applicationId, revision_id: this.target.revisionId, capabilities: [] }, operations: tx.operations } }) }); }
+    recoverApplicationRevision(input) { return this.request('/v1/revision/recover', { method: 'POST', body: JSON.stringify({ ...input, environment: input.environment || this.target.environment || 'production' }) }); }
 }