@fileverse-dev/ddoc 4.2.0-durability-7 → 4.2.0-rotation-2

package/dist/{index-Cmue3Umx.mjs → index-CtHz5niS.mjs}

@@ -1,4 +1,4 @@
-import { k as Ql, b as Zl, s as eh } from "./index-BM0vGxD5.mjs";
+import { k as Ql, b as Zl, s as eh } from "./index-BzWshzFX.mjs";
 let An = [], Xr = [];
 (() => {
   let s = "lc,34,7n,7,7b,19,,,,2,,2,,,20,b,1c,l,g,,2t,7,2,6,2,2,,4,z,,u,r,2j,b,1m,9,9,,o,4,,9,,3,,5,17,3,3b,f,,w,1j,,,,4,8,4,,3,7,a,2,t,,1m,,,,2,4,8,,9,,a,2,q,,2,2,1l,,4,2,4,2,2,3,3,,u,2,3,,b,2,1l,,4,5,,2,4,,k,2,m,6,,,1m,,,2,,4,8,,7,3,a,2,u,,1n,,,,c,,9,,14,,3,,1l,3,5,3,,4,7,2,b,2,t,,1m,,2,,2,,3,,5,2,7,2,b,2,s,2,1l,2,,,2,4,8,,9,,a,2,t,,20,,4,,2,3,,,8,,29,,2,7,c,8,2q,,2,9,b,6,22,2,r,,,,,,1j,e,,5,,2,5,b,,10,9,,2u,4,,6,,2,2,2,p,2,4,3,g,4,d,,2,2,6,,f,,jj,3,qa,3,t,3,t,2,u,2,1s,2,,7,8,,2,b,9,,19,3,3b,2,y,,3a,3,4,2,9,,6,3,63,2,2,,1m,,,7,,,,,2,8,6,a,2,,1c,h,1r,4,1c,7,,,5,,14,9,c,2,w,4,2,2,,3,1k,,,2,3,,,3,1m,8,2,2,48,3,,d,,7,4,,6,,3,2,5i,1m,,5,ek,,5f,x,2da,3,3x,,2o,w,fe,6,2x,2,n9w,4,,a,w,2,28,2,7k,,3,,4,,p,2,5,,47,2,q,i,d,,12,8,p,b,1a,3,1c,,2,4,2,2,13,,1v,6,2,2,2,2,c,,8,,1b,,1f,,,3,2,2,5,2,,,16,2,8,,6m,,2,,4,,fn4,,kh,g,g,g,a6,2,gt,,6a,,45,5,1ae,3,,2,5,4,14,3,4,,4l,2,fx,4,ar,2,49,b,4w,,1i,f,1k,3,1d,4,2,2,1x,3,10,5,,8,1q,,c,2,1g,9,a,4,2,,2n,3,2,,,2,6,,4g,,3,8,l,2,1l,2,,,,,m,,e,7,3,5,5f,8,2,3,,,n,,29,,2,6,,,2,,,2,,2,6j,,2,4,6,2,,2,r,2,2d,8,2,,,2,2y,,,,2,6,,,2t,3,2,4,,5,77,9,,2,6t,,a,2,,,4,,40,4,2,2,4,,w,a,14,6,2,4,8,,9,6,2,3,1a,d,,2,ba,7,,6,,,2a,m,2,7,,2,,2,3e,6,3,,,2,,7,,,20,2,3,,,,9n,2,f0b,5,1n,7,t4,,1r,4,29,,f5k,2,43q,,,3,4,5,8,8,2,7,u,4,44,3,1iz,1j,4,1e,8,,e,,m,5,,f,11s,7,,h,2,7,,2,,5,79,7,c5,4,15s,7,31,7,240,5,gx7k,2o,3k,6o".split(",").map((e) => e ? parseInt(e, 36) : 1);

package/dist/index.d.ts

@@ -14,6 +14,8 @@ export type { DdocExportModalProps, ExportFormatOption, ExportTabOption, } from
 export type { VersionTabSnapshot } from './package/components/tabs/utils/version-diff-snapshot';
 export { Editor } from '@tiptap/react';
 export type { CollaborationProps, CollabConnectionConfig, CollabSessionMeta, CollabServices, CollabCallbacks, CollabState, CollabError, CollabErrorCode, CollabStatus, } from './package/sync-local/types';
+export { encryptForRoomKey, decryptForRoomKey, } from './package/sync-local/crypto/room-key';
+export { fetchSessionState, seedSession, } from './package/sync-local/session-tools';
 export type { CommentMutationMeta, SuggestionType } from './package/types';
 export type { IComment } from './package/extensions/comment/comment.ts';
 export type { FontDescriptor } from './package/types';

package/dist/index.es.js

@@ -1,15 +1,19 @@
-import { D as e, a as o, E as t, P as d, f as r, h as i, m as n, e as E, c as m, d as u, u as C, v as l } from "./index-BM0vGxD5.mjs";
+import { D as a, a as o, E as t, P as d, f as r, i, g as n, l as m, h as E, m as c, e as l, n as p, c as u, d as C, u as f, v as D } from "./index-BzWshzFX.mjs";
 export {
-  e as DdocEditor,
+  a as DdocEditor,
   o as DdocExportModal,
   t as Editor,
   d as PreviewDdocEditor,
   r as buildVersionDiffSnapshot,
-  i as handleContentPrint,
-  n as mergeTabAwareYjsUpdates,
-  E as sanitizeCustomCss,
-  m as useEditorCommands,
-  u as useExportHeadlessEditorContent,
-  C as useHeadlessEditor,
-  l as validateCustomCss
+  i as decryptForRoomKey,
+  n as encryptForRoomKey,
+  m as fetchSessionState,
+  E as handleContentPrint,
+  c as mergeTabAwareYjsUpdates,
+  l as sanitizeCustomCss,
+  p as seedSession,
+  u as useEditorCommands,
+  C as useExportHeadlessEditorContent,
+  f as useHeadlessEditor,
+  D as validateCustomCss
 };

package/dist/{markdown-source-pane-COOcYwSm.mjs → markdown-source-pane-yvufyN4Y.mjs}

@@ -1,9 +1,9 @@
 var Vr = Object.defineProperty;
 var Wr = (t, e, O) => e in t ? Vr(t, e, { enumerable: !0, configurable: !0, writable: !0, value: O }) : t[e] = O;
 var gt = (t, e, O) => Wr(t, typeof e != "symbol" ? e + "" : e, O);
-import { j as Cr } from "./index-BM0vGxD5.mjs";
+import { j as Cr } from "./index-BzWshzFX.mjs";
 import { useRef as pe, useEffect as St } from "react";
-import { s as y, A as pO, T as dO, a as Gr, S as et, b as Lr, P as fO, E as j, i as QO, c as _, D as le, k as tt, F as Ar, M as Pt, W as Er, R as Ur, d as mO, N as oe, e as V, f as Mr, g as Ot, h as ce, p as $O, j as Y, t as h, l as Ir, I as rt, L as at, m as ye, n as ue, o as Qe, q as gO, r as te, u as SO, v as Br, w as Nr, x as PO, y as kO, z as Dr, B as Fr, C as Kr, G as Oe, H as ZO, J as Jr, K as kt, O as Hr, Q as ea, U as ta, V as Oa, X as ra, Y as aa, Z as ia, _ as sa, $ as na, a0 as la, a1 as oa, a2 as ca } from "./index-Cmue3Umx.mjs";
+import { s as y, A as pO, T as dO, a as Gr, S as et, b as Lr, P as fO, E as j, i as QO, c as _, D as le, k as tt, F as Ar, M as Pt, W as Er, R as Ur, d as mO, N as oe, e as V, f as Mr, g as Ot, h as ce, p as $O, j as Y, t as h, l as Ir, I as rt, L as at, m as ye, n as ue, o as Qe, q as gO, r as te, u as SO, v as Br, w as Nr, x as PO, y as kO, z as Dr, B as Fr, C as Kr, G as Oe, H as ZO, J as Jr, K as kt, O as Hr, Q as ea, U as ta, V as Oa, X as ra, Y as aa, Z as ia, _ as sa, $ as na, a0 as la, a1 as oa, a2 as ca } from "./index-CtHz5niS.mjs";
 class ua {
   /**
   Create a new completion context. (Mostly useful for testing

package/dist/package/sync-local/SyncManager.d.ts

@@ -9,6 +9,11 @@ export declare class SyncManager {
     private socketClient;
     private roomKey;
     private roomKeyBytes;
+    private rotating;
+    private roomKeyBytesPrev;
+    private pendingRotationKey;
+    private healingPromise;
+    private staleAckRetries;
     private encryptMirror;
     private fileKeyEpoch;
     private mirrorIdleTimer;
@@ -51,6 +56,10 @@ export declare class SyncManager {
         documentTitle: string;
     }): Promise<void>;
     terminateSession(): Promise<void>;
+    /** In-place roomKey migration on CUTOVER: pause dispatch, swap the key, re-auth the same
+     *  socket, re-broadcast awareness, then flush. See SocketClient.rekey for the wire side. */
+    rekey(newRoomKey: string, newAppLock?: string, newEditUcan?: string): Promise<void>;
+    private onDecryptMiss;
     enqueueLocalUpdate(update: Uint8Array): void;
     private flushUpdates;
     private awaitFlush;
@@ -60,9 +69,12 @@ export declare class SyncManager {
      * (before MongoDB write), so content reaches observers in near-real-time.
      */
     private sendUpdateBatch;
+    private sendUpdateBatchAttempt;
     private isRevocationResponse;
+    private isSessionTerminatedResponse;
     private classifyRevocation;
     private handleWriteRevocation;
+    private surfaceSessionTerminated;
     private maybeAuthorSnapshotAfterSend;
     private scheduleMirror;
     private authorMirror;
@@ -72,6 +84,7 @@ export declare class SyncManager {
     private handleConnectionError;
     private handleReconnection;
     private connectSocket;
+    private tryDecrypt;
     private decodeInto;
     private catchUpFloor;
     private authorSnapshot;

package/dist/package/sync-local/crypto/room-key.d.ts

@@ -0,0 +1,2 @@
+export declare const encryptForRoomKey: (roomKey: string, bytes: Uint8Array) => string;
+export declare const decryptForRoomKey: (roomKey: string, ciphertext: string) => Uint8Array;

package/dist/package/sync-local/session-tools.d.ts

@@ -0,0 +1,31 @@
+import { CollabConnectionConfig } from './types';
+
+/**
+ * Headless hydrate: pulls the OLD session's durable log and decrypts it with `roomKey`.
+ * The old session still exists server-side — termination only rejects writes, so a
+ * joinOnly read succeeds even after cutover. Mirrors the connect-time hydration pull
+ * (SyncManager.catchUpFloor / decodeInto), minus the Y.Doc/floor bookkeeping. Throws on
+ * connect/auth/pull failure; an individual undecryptable row is skipped, not fatal.
+ */
+export declare function fetchSessionState(args: {
+    ddocId: string;
+    roomKey: string;
+    ownerAuth: CollabConnectionConfig;
+}): Promise<Uint8Array[]>;
+/**
+ * Headless seed: pushes `state` into a brand-new session as a single owner snapshot,
+ * encrypted under `newRoomKey`. `floorSeq: 0` — the target session is freshly created by
+ * the rotate op and holds no rows yet, so there is nothing to catch up before stamping.
+ *
+ * Caller ordering: must run AFTER the rotate op has already created the target session.
+ * This function's own owner `/auth` is create-or-join — calling it first would create the
+ * target session itself and, as an owner /auth, sweep (terminate) any other non-terminated
+ * session for this document, which is the OLD session that's supposed to keep draining
+ * stragglers during the rotation window. Seeding early collapses that drain early.
+ */
+export declare function seedSession(args: {
+    ddocId: string;
+    newRoomKey: string;
+    state: Uint8Array;
+    ownerAuth: CollabConnectionConfig;
+}): Promise<void>;

package/dist/package/sync-local/socketClient.d.ts

@@ -22,6 +22,23 @@ interface ISocketClientConfig {
     } | {
         status: 'unavailable';
     }>;
+    onRotationPrepare?: (inner: {
+        epoch: number;
+        gp: string;
+        appLock?: string;
+    }) => Promise<string | {
+        roomKey: string;
+        editUcan?: string;
+    } | null>;
+    onEpochAvailable?: (data: {
+        roomId: string;
+        epoch: number;
+        payload: string;
+    }) => void | Promise<void>;
+    onCutover?: (data: {
+        roomId: string;
+        epoch: number;
+    }) => void | Promise<void>;
     actorHandle?: string;
     joinOnly?: boolean;
     onHandshakeData?: (response: {
@@ -70,6 +87,9 @@ export declare class SocketClient {
     private awareness;
     private connectionAttemptErrorCount;
     private _onHandshakeData;
+    private _onEpochAvailable;
+    private _onCutover;
+    private _rotating;
     constructor(config: ISocketClientConfig);
     registerAwareness(awareness: Awareness): void;
     private _stampSocketId;
@@ -100,12 +120,15 @@ export declare class SocketClient {
     broadcastAwareness(awarenessUpdate: string): Promise<void>;
     disconnect: () => void;
     reauth: () => void;
+    rekey(newRoomKey: string, newAppLock?: string, newEditUcan?: string): Promise<void>;
+    ackEpochLoaded(documentId: string, epoch: number): Promise<void>;
     terminateSession: () => Promise<void>;
     flushBeacon(mergedUpdate: string): void;
     private getCollaborationKeyPair;
     private isUcanValid;
     private getOwnerToken;
     private buildSessionToken;
+    private _authenticate;
     private _handleHandShake;
     private _handleAwarenessUpdate;
     connectSocket(config: ISocketInitConfig): Promise<void>;

package/dist/package/sync-local/types/index.d.ts

@@ -36,6 +36,21 @@ export interface CollabConnectionConfig {
     } | {
         status: 'unavailable';
     }>;
+    /** Host signal: resolves the rotated roomKey for the given epoch payload (GP: gate release
+     *  unwrap of `gp`; workspace: app-key unwrap of `appLock`). Returns the new base64 roomKey —
+     *  or, for a gate-admitted editor, `{ roomKey, editUcan }`: the same gate release that unwraps
+     *  the relay also mints the new-epoch editUcan, and the cutover re-auth must present THAT token
+     *  (a re-mint through the host's fresh-open flow can race the deferred publish and hand back a
+     *  stale-epoch claim). `null` if this actor can't resolve it (falls back to the decrypt-miss
+     *  self-heal path). Opaque to the package. */
+    onRotationPrepare?: (inner: {
+        epoch: number;
+        gp: string;
+        appLock?: string;
+    }) => Promise<string | {
+        roomKey: string;
+        editUcan?: string;
+    } | null>;
     /** Host signal: an anonymous per-connection actor handle (public rail). Record-only; opaque. */
     actorHandle?: string;
     /** Host signal (non-creator workspace member): join-only. The server never creates or
@@ -71,7 +86,7 @@ export type CollabError = {
     message: string;
     recoverable: boolean;
 };
-export type CollabStatus = 'idle' | 'connecting' | 'syncing' | 'ready' | 'reconnecting' | 'error' | 'terminated';
+export type CollabStatus = 'idle' | 'connecting' | 'syncing' | 'ready' | 'reconnecting' | 'rotating' | 'error' | 'terminated';
 export type CollabState = {
     status: 'idle';
 } | {
@@ -85,6 +100,10 @@ export type CollabState = {
     status: 'reconnecting';
     attempt: number;
     maxAttempts: number;
+}
+/** roomKey migration in flight — distinct from `terminated` so consumers don't mistake it for a kick. */
+ | {
+    status: 'rotating';
 } | {
     status: 'error';
     error: CollabError;
@@ -113,6 +132,10 @@ export type CollabEvent = {
 } | {
     type: 'SESSION_TERMINATED';
     reason?: string;
+}
+/** roomKey cutover in progress; no-op on status — lets the manager gate re-entrancy itself. */
+ | {
+    type: 'CUTOVER';
 } | {
     type: 'RESET';
 };
@@ -134,6 +157,11 @@ export interface CollabCallbacks {
     }) => void;
     /** Live rename from the room owner; title is roomKey-encrypted. */
     onTitleUpdate?: (encryptedTitle: string | null) => void;
+    /** Decrypt-miss self-heal: resolves the CURRENT-epoch roomKey (same resolution the host
+     *  uses for `onRotationPrepare`, minus the relay payload — re-read the blob's
+     *  `wrappedRoomKey` / appLock). Returns the new base64 roomKey, or `null` if this actor
+     *  can't resolve one (the miss is then a real revocation, not a rotation lag). */
+    onRotationSelfHeal?: () => Promise<string | null>;
 }
 /** Discriminated union — TypeScript enforces config+services only when enabled */
 export type CollaborationProps = {

package/dist/{split-view-toolbar-Da3BRk-r.mjs → split-view-toolbar-CQsqHInM.mjs}

@@ -1,7 +1,7 @@
-import { j as d } from "./index-BM0vGxD5.mjs";
+import { j as d } from "./index-BzWshzFX.mjs";
 import { useRef as I, useState as N, useEffect as D } from "react";
 import { DynamicDropdown as E, Tooltip as R, IconButton as O } from "@fileverse/ui";
-import { a3 as A, a4 as P, c as y } from "./index-Cmue3Umx.mjs";
+import { a3 as A, a4 as P, c as y } from "./index-CtHz5niS.mjs";
 const p = (e, t, o = t) => {
   const { state: s } = e, l = s.changeByRange((n) => {
     const u = s.sliceDoc(n.from, n.to), r = s.sliceDoc(

package/package.json

@@ -2,7 +2,7 @@
   "name": "@fileverse-dev/ddoc",
   "private": false,
   "description": "DDoc",
-  "version": "4.2.0-durability-7",
+  "version": "4.2.0-rotation-2",
   "main": "dist/index.es.js",
   "module": "dist/index.es.js",
   "exports": {