@fungi.computer/puffball 0.0.0-stage → 0.0.1

package/docs/api/cloudflare.md

@@ -0,0 +1,1044 @@
+<!-- Generated by Botanical API docs (TypeDoc + typedoc-plugin-markdown). Do not edit. -->
+
+[**@fungi.computer/puffball**](README.md)
+
+---
+
+[@fungi.computer/puffball](README.md) / cloudflare
+
+# cloudflare
+
+## Type Aliases
+
+### AssetR2Object
+
+```ts
+type AssetR2Object = object;
+```
+
+Native R2 metadata: checksums are validated by R2, not custom metadata claims.
+
+#### Properties
+
+##### version
+
+```ts
+readonly version: string;
+```
+
+##### size
+
+```ts
+readonly size: number;
+```
+
+##### checksums
+
+```ts
+readonly checksums: object;
+```
+
+###### sha256?
+
+```ts
+readonly optional sha256?: ArrayBuffer;
+```
+
+---
+
+### AssetR2Bucket
+
+```ts
+type AssetR2Bucket = object;
+```
+
+Native R2 operations required to verify and serve one asset build.
+
+#### Methods
+
+##### head()
+
+```ts
+head(key): Promise<AssetR2Object | null>;
+```
+
+Read immutable object metadata without loading its body.
+
+###### Parameters
+
+| Parameter | Type     |
+| --------- | -------- |
+| `key`     | `string` |
+
+###### Returns
+
+`Promise`\<[`AssetR2Object`](#assetr2object) \| `null`\>
+
+##### get()
+
+```ts
+get(key): Promise<AssetR2Object & object | null>;
+```
+
+Read immutable object metadata and its streaming body.
+
+###### Parameters
+
+| Parameter | Type     |
+| --------- | -------- |
+| `key`     | `string` |
+
+###### Returns
+
+`Promise`\<[`AssetR2Object`](#assetr2object) & `object` \| `null`\>
+
+---
+
+### AppReleaseTransitionObligation
+
+```ts
+type AppReleaseTransitionObligation = object;
+```
+
+Durable catalog-scoped fact awaiting delivery to a separately owned Team.
+
+#### Properties
+
+##### sequence
+
+```ts
+readonly sequence: number;
+```
+
+##### transition
+
+```ts
+readonly transition: ReleaseTransition;
+```
+
+##### transitionId
+
+```ts
+readonly transitionId: AppTransitionId;
+```
+
+##### affectedPublicSurfaceIds
+
+```ts
+readonly affectedPublicSurfaceIds: readonly PublicSurfaceId[];
+```
+
+##### affectedSurfaces
+
+```ts
+readonly affectedSurfaces: readonly AppReleaseAffectedSurface[];
+```
+
+Catalog-owned material needed by a Team without a second catalog read.
+
+##### affectedBuyerApps
+
+```ts
+readonly affectedBuyerApps: readonly AppId[];
+```
+
+##### enumeration
+
+```ts
+readonly enumeration: object;
+```
+
+The last opaque Global Team cursor and whether enumeration is complete.
+
+###### cursor
+
+```ts
+readonly cursor: string | null;
+```
+
+###### complete
+
+```ts
+readonly complete: boolean;
+```
+
+##### state
+
+```ts
+readonly state: "pending" | "acknowledged";
+```
+
+---
+
+### AppReleaseAffectedSurface
+
+```ts
+type AppReleaseAffectedSurface = object;
+```
+
+Catalog-owned public-Surface material carried with a transition obligation.
+
+#### Properties
+
+##### publicSurfaceId
+
+```ts
+readonly publicSurfaceId: PublicSurfaceId;
+```
+
+##### appId
+
+```ts
+readonly appId: AppId;
+```
+
+##### stableRoute
+
+```ts
+readonly stableRoute: StableRoute;
+```
+
+---
+
+### AppReleaseTeamRecipient
+
+```ts
+type AppReleaseTeamRecipient = object;
+```
+
+Durable delivery state for one Team recipient of a transition obligation.
+
+#### Properties
+
+##### teamId
+
+```ts
+readonly teamId: string;
+```
+
+##### state
+
+```ts
+readonly state: "pending" | "applied" | "no-op" | "expired";
+```
+
+---
+
+### AppReleaseTeamRecipientPage
+
+```ts
+type AppReleaseTeamRecipientPage = object;
+```
+
+One ordered page of Team IDs returned by the separately owned Team directory.
+
+#### Properties
+
+##### cursor?
+
+```ts
+readonly optional cursor?: string | null;
+```
+
+Null identifies the first page; all later cursors remain opaque strings.
+
+##### nextCursor?
+
+```ts
+readonly optional nextCursor?: string | null;
+```
+
+##### teamIds
+
+```ts
+readonly teamIds: readonly string[];
+```
+
+##### complete
+
+```ts
+readonly complete: boolean;
+```
+
+---
+
+### AppReleaseTeamRecipientOutcome
+
+```ts
+type AppReleaseTeamRecipientOutcome = "applied" | "no-op" | "expired";
+```
+
+Terminal delivery outcome recorded for one Team recipient.
+
+---
+
+### AppReleaseTransitionObligationStore
+
+```ts
+type AppReleaseTransitionObligationStore = object;
+```
+
+D1-only at-least-once read/ack seam; Team routing remains outside App Release.
+
+#### Methods
+
+##### readByTransitionId()
+
+```ts
+readByTransitionId(transitionId): Promise<AppReleaseStoreResult<
+  | AppReleaseTransitionObligation
+  | {
+  kind: "absent";
+}>>;
+```
+
+Read one obligation by its immutable transition identity, or report it absent.
+
+###### Parameters
+
+| Parameter      | Type                                          |
+| -------------- | --------------------------------------------- |
+| `transitionId` | [`AppTransitionId`](index.md#apptransitionid) |
+
+###### Returns
+
+`Promise`\<[`AppReleaseStoreResult`](index.md#appreleasestoreresult)\< \|
+[`AppReleaseTransitionObligation`](#appreleasetransitionobligation) \| \{
+`kind`: `"absent"`; \}\>\>
+
+##### read()
+
+```ts
+read(options): Promise<AppReleaseStoreResult<readonly AppReleaseTransitionObligation[]>>;
+```
+
+Read pending obligations after a sequence cursor in ascending sequence order.
+
+###### Parameters
+
+| Parameter                | Type                                                  |
+| ------------------------ | ----------------------------------------------------- |
+| `options`                | \{ `afterSequence?`: `number`; `limit?`: `number`; \} |
+| `options.afterSequence?` | `number`                                              |
+| `options.limit?`         | `number`                                              |
+
+###### Returns
+
+`Promise`\<[`AppReleaseStoreResult`](index.md#appreleasestoreresult)\<readonly
+[`AppReleaseTransitionObligation`](#appreleasetransitionobligation)[]\>\>
+
+##### recordTeamRecipientPage()
+
+```ts
+recordTeamRecipientPage(sequence, page): Promise<AppReleaseStoreResult<
+  | AppReleaseTransitionObligation
+  | {
+  kind: "absent";
+}>>;
+```
+
+Persist the next ordered Team-recipient page; identical replays are idempotent.
+
+###### Parameters
+
+| Parameter  | Type                                                          |
+| ---------- | ------------------------------------------------------------- |
+| `sequence` | `number`                                                      |
+| `page`     | [`AppReleaseTeamRecipientPage`](#appreleaseteamrecipientpage) |
+
+###### Returns
+
+`Promise`\<[`AppReleaseStoreResult`](index.md#appreleasestoreresult)\< \|
+[`AppReleaseTransitionObligation`](#appreleasetransitionobligation) \| \{
+`kind`: `"absent"`; \}\>\>
+
+##### readPendingTeamRecipients()
+
+```ts
+readPendingTeamRecipients(options): Promise<AppReleaseStoreResult<readonly AppReleaseTeamRecipient[]>>;
+```
+
+Read pending recipients for one obligation in stable Team-ID order.
+
+###### Parameters
+
+| Parameter          | Type                                            |
+| ------------------ | ----------------------------------------------- |
+| `options`          | \{ `sequence`: `number`; `limit?`: `number`; \} |
+| `options.sequence` | `number`                                        |
+| `options.limit?`   | `number`                                        |
+
+###### Returns
+
+`Promise`\<[`AppReleaseStoreResult`](index.md#appreleasestoreresult)\<readonly
+[`AppReleaseTeamRecipient`](#appreleaseteamrecipient)[]\>\>
+
+##### recordTeamRecipientOutcome()
+
+```ts
+recordTeamRecipientOutcome(
+   sequence,
+   teamId,
+   outcome
+): Promise<AppReleaseStoreResult<
+  | AppReleaseTeamRecipient
+  | {
+  kind: "absent";
+}>>;
+```
+
+Record a pending recipient's terminal outcome; conflicting replays fail.
+
+###### Parameters
+
+| Parameter  | Type                                                                |
+| ---------- | ------------------------------------------------------------------- |
+| `sequence` | `number`                                                            |
+| `teamId`   | `string`                                                            |
+| `outcome`  | [`AppReleaseTeamRecipientOutcome`](#appreleaseteamrecipientoutcome) |
+
+###### Returns
+
+`Promise`\<[`AppReleaseStoreResult`](index.md#appreleasestoreresult)\< \|
+[`AppReleaseTeamRecipient`](#appreleaseteamrecipient) \| \{ `kind`: `"absent"`;
+\}\>\>
+
+##### acknowledge()
+
+```ts
+acknowledge(sequence): Promise<AppReleaseStoreResult<
+  | AppReleaseTransitionObligation
+  | {
+  kind: "absent";
+}>>;
+```
+
+Acknowledge only after enumeration is complete and no recipients remain pending.
+
+###### Parameters
+
+| Parameter  | Type     |
+| ---------- | -------- |
+| `sequence` | `number` |
+
+###### Returns
+
+`Promise`\<[`AppReleaseStoreResult`](index.md#appreleasestoreresult)\< \|
+[`AppReleaseTransitionObligation`](#appreleasetransitionobligation) \| \{
+`kind`: `"absent"`; \}\>\>
+
+---
+
+### AppReleaseSurfaceTransitionBasis
+
+```ts
+type AppReleaseSurfaceTransitionBasis =
+  | {
+      kind: "absent";
+    }
+  | {
+      kind: "ambiguous";
+    }
+  | {
+      kind: "none";
+      appId: AppId;
+      publicSurfaceId: PublicSurfaceId;
+    }
+  | {
+      kind: "selected";
+      appId: AppId;
+      publicSurfaceId: PublicSurfaceId;
+      releaseId: ReleaseId;
+      sequence: number;
+      eligibility: "eligible" | "ineligible";
+      checkedAt: number;
+    };
+```
+
+Selected Release basis from the same D1 authority snapshot, including its
+transition sequence.
+
+#### Union Members
+
+##### Type Literal
+
+```ts
+{
+  kind: "absent";
+}
+```
+
+---
+
+##### Type Literal
+
+```ts
+{
+  kind: "ambiguous";
+}
+```
+
+---
+
+##### Type Literal
+
+```ts
+{
+  kind: "none";
+  appId: AppId;
+  publicSurfaceId: PublicSurfaceId;
+}
+```
+
+---
+
+##### Type Literal
+
+```ts
+{
+  kind: "selected";
+  appId: AppId;
+  publicSurfaceId: PublicSurfaceId;
+  releaseId: ReleaseId;
+  sequence: number;
+  eligibility: "eligible" | "ineligible";
+  checkedAt: number;
+}
+```
+
+| Name              | Type                                          | Description                                                        |
+| ----------------- | --------------------------------------------- | ------------------------------------------------------------------ |
+| `kind`            | `"selected"`                                  | -                                                                  |
+| `appId`           | [`AppId`](index.md#appid)                     | -                                                                  |
+| `publicSurfaceId` | [`PublicSurfaceId`](index.md#publicsurfaceid) | -                                                                  |
+| `releaseId`       | [`ReleaseId`](index.md#releaseid)             | -                                                                  |
+| `sequence`        | `number`                                      | -                                                                  |
+| `eligibility`     | `"eligible"` \| `"ineligible"`                | -                                                                  |
+| `checkedAt`       | `number`                                      | Authority-read start time; consumers may only shorten its horizon. |
+
+---
+
+### AppReleaseD1QueryResult
+
+```ts
+type AppReleaseD1QueryResult = object;
+```
+
+Structural result returned by the D1 operations used by App Release.
+
+#### Properties
+
+##### success
+
+```ts
+readonly success: boolean;
+```
+
+Whether D1 completed the operation successfully.
+
+##### results
+
+```ts
+readonly results: readonly unknown[];
+```
+
+Untrusted row values returned by the operation.
+
+---
+
+### AppReleaseD1PreparedStatement
+
+```ts
+type AppReleaseD1PreparedStatement = object;
+```
+
+Structural prepared-statement surface needed by the D1-backed store.
+
+#### Methods
+
+##### bind()
+
+```ts
+bind(...values): AppReleaseD1PreparedStatement;
+```
+
+Bind positional values and return the statement to execute.
+
+###### Parameters
+
+| Parameter   | Type        |
+| ----------- | ----------- |
+| ...`values` | `unknown`[] |
+
+###### Returns
+
+[`AppReleaseD1PreparedStatement`](#appreleased1preparedstatement)
+
+##### first()
+
+```ts
+first(): Promise<object | null>;
+```
+
+Read the first untrusted row, or `null` when none exists.
+
+###### Returns
+
+`Promise`\<`object` \| `null`\>
+
+##### all()
+
+```ts
+all(): Promise<AppReleaseD1QueryResult>;
+```
+
+Read all matching rows.
+
+###### Returns
+
+`Promise`\<[`AppReleaseD1QueryResult`](#appreleased1queryresult)\>
+
+##### run()
+
+```ts
+run(): Promise<AppReleaseD1QueryResult>;
+```
+
+Execute a mutating statement.
+
+###### Returns
+
+`Promise`\<[`AppReleaseD1QueryResult`](#appreleased1queryresult)\>
+
+---
+
+### AppReleaseD1Database
+
+```ts
+type AppReleaseD1Database = object;
+```
+
+Structural D1 surface kept independent of Cloudflare vendor declarations.
+
+#### Methods
+
+##### prepare()
+
+```ts
+prepare(query): AppReleaseD1PreparedStatement;
+```
+
+Prepare one SQL statement for binding and execution.
+
+###### Parameters
+
+| Parameter | Type     |
+| --------- | -------- |
+| `query`   | `string` |
+
+###### Returns
+
+[`AppReleaseD1PreparedStatement`](#appreleased1preparedstatement)
+
+##### batch()
+
+```ts
+batch(statements): Promise<readonly AppReleaseD1QueryResult[]>;
+```
+
+Execute a group of statements atomically in native D1.
+
+###### Parameters
+
+| Parameter    | Type                                                                         |
+| ------------ | ---------------------------------------------------------------------------- |
+| `statements` | readonly [`AppReleaseD1PreparedStatement`](#appreleased1preparedstatement)[] |
+
+###### Returns
+
+`Promise`\<readonly [`AppReleaseD1QueryResult`](#appreleased1queryresult)[]\>
+
+---
+
+### AppReleaseR2Object
+
+```ts
+type AppReleaseR2Object = object;
+```
+
+Structural R2 object surface needed by the artifact reader.
+
+#### Properties
+
+##### version
+
+```ts
+readonly version: string;
+```
+
+Native immutable object version checked for referenced App children.
+
+##### size
+
+```ts
+readonly size: number;
+```
+
+Object size in bytes, checked before the body is buffered.
+
+##### httpMetadata?
+
+```ts
+readonly optional httpMetadata?: object;
+```
+
+HTTP metadata retained with the object, when present.
+
+###### contentType?
+
+```ts
+readonly optional contentType?: string;
+```
+
+Declared media type for the stored object.
+
+#### Methods
+
+##### arrayBuffer()
+
+```ts
+arrayBuffer(): Promise<ArrayBuffer>;
+```
+
+Read the immutable object body.
+
+###### Returns
+
+`Promise`\<`ArrayBuffer`\>
+
+---
+
+### AppReleaseR2Bucket
+
+```ts
+type AppReleaseR2Bucket = object;
+```
+
+Structural R2 surface kept independent of Cloudflare vendor declarations.
+
+#### Methods
+
+##### get()
+
+```ts
+get(key): Promise<AppReleaseR2Object | null>;
+```
+
+Read one object by its opaque storage key.
+
+###### Parameters
+
+| Parameter | Type     |
+| --------- | -------- |
+| `key`     | `string` |
+
+###### Returns
+
+`Promise`\<[`AppReleaseR2Object`](#appreleaser2object) \| `null`\>
+
+---
+
+### ErasureBucket
+
+```ts
+type ErasureBucket = AppReleaseR2Bucket & object;
+```
+
+R2 operations used by the scoped Team erasure owner.
+
+#### Type Declaration
+
+| Name       | Type                                       | Description                                                      |
+| ---------- | ------------------------------------------ | ---------------------------------------------------------------- |
+| `head()`   | (`key`) => `Promise`\<`object` \| `null`\> | Read the metadata for an exact object key.                       |
+| `delete()` | (`key`) => `Promise`\<`void`\>             | Delete an exact object key after catalog references are checked. |
+
+---
+
+### ArtifactSnapshotPolicy
+
+```ts
+type ArtifactSnapshotPolicy = Readonly<{
+  maxBytes: number;
+  maxManifestBytes?: number;
+}>;
+```
+
+Trusted composition limit for reading one immutable artifact.
+
+## Variables
+
+### appArtifactErasureReadbackSchema
+
+```ts
+const appArtifactErasureReadbackSchema: Struct<{
+  clear: Boolean;
+  personalClear: Boolean;
+  retainedArtifacts: $Array<
+    Struct<{
+      disposition_id: String;
+      app_id: refine<AppId, String>;
+      release_ids_json: String;
+      artifact_roots_json: String;
+      created_at: Number;
+      state: Literals<
+        readonly ["pending", "retaining", "retained", "revoking", "revoked"]
+      >;
+      request_id: NullOr<String>;
+      reason: NullOr<String>;
+      completed_at: NullOr<Number>;
+      releaseIds: $Array<refine<ReleaseId, String>>;
+    }>
+  >;
+  remaining: $Array<String>;
+  pending: $Array<String>;
+  obligationTeams: $Array<String>;
+  obligationPages: $Array<String>;
+  objects: $Array<String>;
+}>;
+```
+
+The erasure coordinator consumes this owner-issued readback, including
+outstanding buyer custody.
+
+---
+
+### APP\_RELEASE\_D1\_FRESH\_SCHEMA
+
+```ts
+const APP_RELEASE_D1_FRESH_SCHEMA: string;
+```
+
+The one current App Release D1 schema for an empty catalog.
+
+## Functions
+
+### createTeamAppReleaseErasure()
+
+```ts
+function createTeamAppReleaseErasure(
+  database,
+  bucket,
+  assetPolicy?,
+  now?,
+): object;
+```
+
+Read every catalog reference before deleting content-addressed R2 objects.
+
+#### Parameters
+
+| Parameter                       | Type                                                                                                               | Default value     |
+| ------------------------------- | ------------------------------------------------------------------------------------------------------------------ | ----------------- |
+| `database`                      | [`AppReleaseD1Database`](#appreleased1database)                                                                    | `undefined`       |
+| `bucket`                        | [`ErasureBucket`](#erasurebucket)                                                                                  | `undefined`       |
+| `assetPolicy?`                  | \{ `maxManifestBytes`: `number`; `maxObjects`: `number`; `maxObjectBytes`: `number`; `maxTotalBytes`: `number`; \} | `undefined`       |
+| `assetPolicy.maxManifestBytes?` | `number`                                                                                                           | `positiveInteger` |
+| `assetPolicy.maxObjects?`       | `number`                                                                                                           | `positiveInteger` |
+| `assetPolicy.maxObjectBytes?`   | `number`                                                                                                           | `positiveInteger` |
+| `assetPolicy.maxTotalBytes?`    | `number`                                                                                                           | `positiveInteger` |
+| `now?`                          | () => `number`                                                                                                     | `Date.now`        |
+
+#### Returns
+
+| Name               | Type                                                                                                                                                                                                                                                                       | Description                                                               |
+| ------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------- |
+| `verifyManifest()` | ( `teamId`, `appIds`, `keys` ) => `Promise`\<\{ `teamId`: `string`; `apps`: `object`[]; `repositories`: `string`[]; \}\>                                                                                                                                                   | Reject any live App or R2 key outside this Team's current or retry scope. |
+| `preflight()`      | (`teamId`) => `Promise`\<\{ `teamId`: `string`; `apps`: `object`[]; `repositories`: `string`[]; \}\>                                                                                                                                                                       | Inventory Team catalog rows, exclusive objects, and source repositories.  |
+| `erase()`          | (`teamId`) => `Promise`\<\{ `apps`: `number`; \}\>                                                                                                                                                                                                                         | Remove one Team's catalog and exclusive objects, resuming pending jobs.   |
+| `readback()`       | ( `teamId`, `appIds`, `keys` ) => `Promise`\<\{ `clear`: `boolean`; `personalClear`: `boolean`; `retainedArtifacts`: `object`[]; `remaining`: `string`[]; `pending`: `string`[]; `obligationTeams`: `string`[]; `obligationPages`: `string`[]; `objects`: `string`[]; \}\> | Verify the named Apps, pending jobs, obligations and exclusive objects.   |
+
+---
+
+### createD1TeamAppPublisherRegistry()
+
+```ts
+function createD1TeamAppPublisherRegistry(database): TeamAppPublisherRegistry;
+```
+
+Create the native registry that joins a Team publisher to one App/source.
+
+#### Parameters
+
+| Parameter  | Type                                            |
+| ---------- | ----------------------------------------------- |
+| `database` | [`AppReleaseD1Database`](#appreleased1database) |
+
+#### Returns
+
+[`TeamAppPublisherRegistry`](publisher.md#teamapppublisherregistry)
+
+---
+
+### createD1AppReleaseStore()
+
+```ts
+function createD1AppReleaseStore(database): PromiseAppReleaseStore & object;
+```
+
+Create the D1-backed App Release store with private public-website authority.
+
+#### Parameters
+
+| Parameter  | Type                                            |
+| ---------- | ----------------------------------------------- |
+| `database` | [`AppReleaseD1Database`](#appreleased1database) |
+
+#### Returns
+
+[`PromiseAppReleaseStore`](index.md#promiseappreleasestore) & `object`
+
+---
+
+### createR2ArtifactReader()
+
+```ts
+function createR2ArtifactReader(bucket, policy?, assets?): ArtifactReader;
+```
+
+Create the R2-backed artifact reader for opaque artifact references.
+
+Asset manifests are verified cheaply for delivery: the root bytes are
+digest-checked here, while the asset handler checks the requested object.
+Publication callers pass `verification: "publication"` to retain the complete
+manifest object sweep.
+
+#### Parameters
+
+| Parameter                         | Type                                                                                                                                                                                                 | Default value                      |
+| --------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------- |
+| `bucket`                          | [`AppReleaseR2Bucket`](#appreleaser2bucket)                                                                                                                                                          | `undefined`                        |
+| `policy`                          | [`ArtifactSnapshotPolicy`](#artifactsnapshotpolicy)                                                                                                                                                  | `DEFAULT_ARTIFACT_SNAPSHOT_POLICY` |
+| `assets?`                         | \{ `bucket`: `Pick`\<[`AssetR2Bucket`](#assetr2bucket), `"head"`\>; `policy`: \{ `maxManifestBytes`: `number`; `maxObjects`: `number`; `maxObjectBytes`: `number`; `maxTotalBytes`: `number`; \}; \} | `undefined`                        |
+| `assets.bucket?`                  | `Pick`\<[`AssetR2Bucket`](#assetr2bucket), `"head"`\>                                                                                                                                                | `undefined`                        |
+| `assets.policy?`                  | \{ `maxManifestBytes`: `number`; `maxObjects`: `number`; `maxObjectBytes`: `number`; `maxTotalBytes`: `number`; \}                                                                                   | `undefined`                        |
+| `assets.policy.maxManifestBytes?` | `number`                                                                                                                                                                                             | `positiveInteger`                  |
+| `assets.policy.maxObjects?`       | `number`                                                                                                                                                                                             | `positiveInteger`                  |
+| `assets.policy.maxObjectBytes?`   | `number`                                                                                                                                                                                             | `positiveInteger`                  |
+| `assets.policy.maxTotalBytes?`    | `number`                                                                                                                                                                                             | `positiveInteger`                  |
+
+#### Returns
+
+[`ArtifactReader`](index.md#artifactreader)
+
+---
+
+### createD1TransitionObligationStore()
+
+```ts
+function createD1TransitionObligationStore(
+  database,
+): AppReleaseTransitionObligationStore;
+```
+
+Open the D1-only obligation adjunct for a future owner-driven dispatcher. The
+ordinary App Release store contract intentionally does not expose it.
+
+#### Parameters
+
+| Parameter  | Type                                            |
+| ---------- | ----------------------------------------------- |
+| `database` | [`AppReleaseD1Database`](#appreleased1database) |
+
+#### Returns
+
+[`AppReleaseTransitionObligationStore`](#appreleasetransitionobligationstore)
+
+---
+
+### readD1SurfaceTransitionBasis()
+
+```ts
+function readD1SurfaceTransitionBasis(
+  database,
+  stableRoute,
+  releaseId,
+  now?,
+): Promise<AppReleaseStoreResult<AppReleaseSurfaceTransitionBasis>>;
+```
+
+Resolve one previously selected Release on a Surface and retain the exact
+transition sequence. The Release need not remain the Surface's current default,
+but it must still be verified, active, and owned by that Surface.
+
+#### Parameters
+
+| Parameter     | Type                                            | Default value |
+| ------------- | ----------------------------------------------- | ------------- |
+| `database`    | [`AppReleaseD1Database`](#appreleased1database) | `undefined`   |
+| `stableRoute` | [`StableRoute`](index.md#stableroute)           | `undefined`   |
+| `releaseId`   | [`ReleaseId`](index.md#releaseid)               | `undefined`   |
+| `now`         | () => `number`                                  | `Date.now`    |
+
+#### Returns
+
+`Promise`\<[`AppReleaseStoreResult`](index.md#appreleasestoreresult)\<[`AppReleaseSurfaceTransitionBasis`](#appreleasesurfacetransitionbasis)\>\>
+
+---
+
+### matchEligibleSurfaceTransitionBasis()
+
+```ts
+function matchEligibleSurfaceTransitionBasis(
+  result,
+  expected,
+): {
+  kind: "selected";
+  appId: AppId;
+  publicSurfaceId: PublicSurfaceId;
+  releaseId: ReleaseId;
+  sequence: number;
+  eligibility: "eligible" | "ineligible";
+  checkedAt: number;
+} | null;
+```
+
+Match one eligible selected Release without leaking store-result branching to
+consumers.
+
+#### Parameters
+
+| Parameter  | Type                                                                                                                                 |
+| ---------- | ------------------------------------------------------------------------------------------------------------------------------------ |
+| `result`   | [`AppReleaseStoreResult`](index.md#appreleasestoreresult)\<[`AppReleaseSurfaceTransitionBasis`](#appreleasesurfacetransitionbasis)\> |
+| `expected` | `Readonly`\<\{ `appId`: [`AppId`](index.md#appid); `releaseId`: [`ReleaseId`](index.md#releaseid); `sequence?`: `number`; \}\>       |
+
+#### Returns
+
+##### Type Literal
+
+```ts
+{
+  kind: "selected";
+  appId: AppId;
+  publicSurfaceId: PublicSurfaceId;
+  releaseId: ReleaseId;
+  sequence: number;
+  eligibility: "eligible" | "ineligible";
+  checkedAt: number;
+}
+```
+
+| Name              | Type                                          | Description                                                        |
+| ----------------- | --------------------------------------------- | ------------------------------------------------------------------ |
+| `kind`            | `"selected"`                                  | -                                                                  |
+| `appId`           | [`AppId`](index.md#appid)                     | -                                                                  |
+| `publicSurfaceId` | [`PublicSurfaceId`](index.md#publicsurfaceid) | -                                                                  |
+| `releaseId`       | [`ReleaseId`](index.md#releaseid)             | -                                                                  |
+| `sequence`        | `number`                                      | -                                                                  |
+| `eligibility`     | `"eligible"` \| `"ineligible"`                | -                                                                  |
+| `checkedAt`       | `number`                                      | Authority-read start time; consumers may only shorten its horizon. |
+
+---
+
+`null`