@interop/wallet-core 0.83.1 → 0.85.0

package/dist/sync/push.d.ts

@@ -9,15 +9,18 @@ import type { ResolveConflict, SyncStore, WasSyncPort } from './types.js';
  * @param options.port {WasSyncPort}
  * @param options.store {SyncStore}
  * @param [options.resolveConflict] {ResolveConflict}   mutable-collection policy
+ * @param [options.writerId] {string}   this writer's attribution label, sent
+ *   as `Writer-Id` on every write and delete; absent sends none
  * @param [options.signal] {AbortSignal}
  * @returns {Promise<{ pushed: number; conflictsResolved: number }>}   dirty rows
  *   processed this cycle, and how many invoked the LWW resolver (a positive
  *   count means the caller should rerun so a local-wins re-push settles)
  */
-export declare function runPush({ port, store, resolveConflict, signal }: {
+export declare function runPush({ port, store, resolveConflict, writerId, signal }: {
     port: WasSyncPort;
     store: SyncStore;
     resolveConflict?: ResolveConflict;
+    writerId?: string;
     signal?: AbortSignal;
 }): Promise<{
     pushed: number;

package/dist/sync/push.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../src/sync/push.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAQ,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AA2L/E;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,OAAO,CAAC,EAC5B,IAAI,EACJ,KAAK,EACL,eAAe,EACf,MAAM,EACP,EAAE;IACD,IAAI,EAAE,WAAW,CAAA;IACjB,KAAK,EAAE,SAAS,CAAA;IAChB,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC,CAwBzD"}
+{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../src/sync/push.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAQ,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAqM/E;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,OAAO,CAAC,EAC5B,IAAI,EACJ,KAAK,EACL,eAAe,EACf,QAAQ,EACR,MAAM,EACP,EAAE;IACD,IAAI,EAAE,WAAW,CAAA;IACjB,KAAK,EAAE,SAAS,CAAA;IAChB,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC,CAyBzD"}

package/dist/sync/push.js

@@ -24,6 +24,13 @@
  * folding a `putMeta` diff into this loop would add an untested code path with
  * no collection to exercise it. The `WasSyncPort.putMeta` capability stays
  * optional on the port for the driver that needs it.
+ *
+ * Every content write and delete carries the engine's injected `writerId`, when
+ * one was injected, as the `Writer-Id` header (the WAS writer-attribution
+ * label). The label is minted app-side; this loop never mints, persists, or
+ * derives one. The server's declare-or-clear rule means a write without it
+ * clears the stored label, so an engine run without a `writerId` attributes
+ * nothing rather than leaving a previous writer's label in place.
  */
 import { isSyncConflictError, isSyncNotFoundError } from '@interop/was-client/sync';
 /**
@@ -46,12 +53,13 @@ import { isSyncConflictError, isSyncNotFoundError } from '@interop/was-client/sy
  *   absent/tombstone -> deletion wins, adopt the tombstone and delete the
  *   projection (a later re-add re-encrypts to a fresh id, so nothing is blocked).
  */
-async function pushUpsert({ port, store, row, resolveConflict }) {
+async function pushUpsert({ port, store, row, resolveConflict, writerId }) {
     try {
         const ack = await port.putContent({
             id: row.id,
             data: row.data ?? null,
-            ...(row.version > 0 ? { ifMatch: row.etag } : { ifNoneMatch: true })
+            ...(row.version > 0 ? { ifMatch: row.etag } : { ifNoneMatch: true }),
+            ...(writerId !== undefined && { writerId })
         });
         await store.markPushed({
             id: row.id,
@@ -100,12 +108,13 @@ async function pushUpsert({ port, store, row, resolveConflict }) {
  * on a `412` so the caller can re-read and retry. Any other error propagates to
  * the engine's backoff.
  */
-async function tryDelete({ port, store, id, ifMatch, revision }) {
+async function tryDelete({ port, store, id, ifMatch, revision, writerId }) {
     const revisionAck = revision !== undefined ? { revision } : {};
     try {
         const ack = await port.deleteContent({
             id,
-            ...(ifMatch !== undefined && { ifMatch })
+            ...(ifMatch !== undefined && { ifMatch }),
+            ...(writerId !== undefined && { writerId })
         });
         await store.markDeletedPushed({
             id,
@@ -136,7 +145,7 @@ async function tryDelete({ port, store, id, ifMatch, revision }) {
  *   refreshes its `version` / `etag` via the dirty-deleted-vs-live rule, so the
  *   retry's `If-Match` becomes current).
  */
-async function pushDelete({ port, store, row }) {
+async function pushDelete({ port, store, row, writerId }) {
     const revisionAck = row.revision !== undefined ? { revision: row.revision } : {};
     const firstIfMatch = row.version > 0 ? row.etag : undefined;
     if (await tryDelete({
@@ -144,6 +153,7 @@ async function pushDelete({ port, store, row }) {
         store,
         id: row.id,
         ifMatch: firstIfMatch,
+        writerId,
         ...revisionAck
     })) {
         return;
@@ -162,6 +172,7 @@ async function pushDelete({ port, store, row }) {
         store,
         id: row.id,
         ifMatch: master.etag,
+        writerId,
         ...revisionAck
     });
 }
@@ -175,12 +186,14 @@ async function pushDelete({ port, store, row }) {
  * @param options.port {WasSyncPort}
  * @param options.store {SyncStore}
  * @param [options.resolveConflict] {ResolveConflict}   mutable-collection policy
+ * @param [options.writerId] {string}   this writer's attribution label, sent
+ *   as `Writer-Id` on every write and delete; absent sends none
  * @param [options.signal] {AbortSignal}
  * @returns {Promise<{ pushed: number; conflictsResolved: number }>}   dirty rows
  *   processed this cycle, and how many invoked the LWW resolver (a positive
  *   count means the caller should rerun so a local-wins re-push settles)
  */
-export async function runPush({ port, store, resolveConflict, signal }) {
+export async function runPush({ port, store, resolveConflict, writerId, signal }) {
     const rows = await store.getDirtyRows();
     let pushed = 0;
     let conflictsResolved = 0;
@@ -189,14 +202,15 @@ export async function runPush({ port, store, resolveConflict, signal }) {
             break;
         }
         if (row.deleted) {
-            await pushDelete({ port, store, row });
+            await pushDelete({ port, store, row, writerId });
         }
         else {
             const { conflictResolved } = await pushUpsert({
                 port,
                 store,
                 row,
-                resolveConflict
+                resolveConflict,
+                writerId
             });
             if (conflictResolved) {
                 conflictsResolved += 1;

package/dist/sync/push.js.map

@@ -1 +1 @@
-{"version":3,"file":"push.js","sourceRoot":"","sources":["../../src/sync/push.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,0BAA0B,CAAA;AAGjC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,KAAK,UAAU,UAAU,CAAC,EACxB,IAAI,EACJ,KAAK,EACL,GAAG,EACH,eAAe,EAYhB;IACC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YAChC,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;YACtB,GAAG,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;SACrE,CAAC,CAAA;QACF,MAAM,KAAK,CAAC,UAAU,CAAC;YACrB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;SAC9D,CAAC,CAAA;QACF,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAA;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,CAAA;QACX,CAAC;QACD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,eAAe,CAAC;gBACpB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;aACf,CAAC,CAAA;YACF,wEAAwE;YACxE,iEAAiE;YACjE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAA;QACnC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QAC7C,qEAAqE;QACrE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC,WAAW,CAAC;gBACtB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC/B,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC,WAAW,CAAC;gBACtB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aAC7B,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAA;IACpC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CAAC,EACvB,IAAI,EACJ,KAAK,EACL,EAAE,EACF,OAAO,EACP,QAAQ,EAOT;IACC,MAAM,WAAW,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YACnC,EAAE;YACF,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;SAC1C,CAAC,CAAA;QACF,MAAM,KAAK,CAAC,iBAAiB,CAAC;YAC5B,EAAE;YACF,OAAO,EAAE,GAAG,EAAE,OAAO;YACrB,IAAI,EAAE,GAAG,EAAE,IAAI;YACf,GAAG,WAAW;SACf,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;YACrD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,UAAU,CAAC,EACxB,IAAI,EACJ,KAAK,EACL,GAAG,EAUJ;IACC,MAAM,WAAW,GACf,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3D,IACE,MAAM,SAAS,CAAC;QACd,IAAI;QACJ,KAAK;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,YAAY;QACrB,GAAG,WAAW;KACf,CAAC,EACF,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;IAC7C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,sEAAsE;QACtE,MAAM,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;QAC7D,OAAM;IACR,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,UAAU;IACV,MAAM,SAAS,CAAC;QACd,IAAI;QACJ,KAAK;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC,IAAI;QACpB,GAAG,WAAW;KACf,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAC5B,IAAI,EACJ,KAAK,EACL,eAAe,EACf,MAAM,EAMP;IACC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,CAAA;IACvC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,iBAAiB,GAAG,CAAC,CAAA;IACzB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAK;QACP,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QACxC,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,UAAU,CAAC;gBAC5C,IAAI;gBACJ,KAAK;gBACL,GAAG;gBACH,eAAe;aAChB,CAAC,CAAA;YACF,IAAI,gBAAgB,EAAE,CAAC;gBACrB,iBAAiB,IAAI,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,CAAA;IACb,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;AACtC,CAAC"}
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../../src/sync/push.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,0BAA0B,CAAA;AAGjC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,KAAK,UAAU,UAAU,CAAC,EACxB,IAAI,EACJ,KAAK,EACL,GAAG,EACH,eAAe,EACf,QAAQ,EAaT;IACC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YAChC,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;YACtB,GAAG,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACpE,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,KAAK,CAAC,UAAU,CAAC;YACrB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;SAC9D,CAAC,CAAA;QACF,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAA;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,CAAA;QACX,CAAC;QACD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,eAAe,CAAC;gBACpB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;aACf,CAAC,CAAA;YACF,wEAAwE;YACxE,iEAAiE;YACjE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAA;QACnC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QAC7C,qEAAqE;QACrE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC,WAAW,CAAC;gBACtB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC/B,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC,WAAW,CAAC;gBACtB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aAC7B,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAA;IACpC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CAAC,EACvB,IAAI,EACJ,KAAK,EACL,EAAE,EACF,OAAO,EACP,QAAQ,EACR,QAAQ,EAQT;IACC,MAAM,WAAW,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YACnC,EAAE;YACF,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;YACzC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,KAAK,CAAC,iBAAiB,CAAC;YAC5B,EAAE;YACF,OAAO,EAAE,GAAG,EAAE,OAAO;YACrB,IAAI,EAAE,GAAG,EAAE,IAAI;YACf,GAAG,WAAW;SACf,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;YACrD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,UAAU,CAAC,EACxB,IAAI,EACJ,KAAK,EACL,GAAG,EACH,QAAQ,EAWT;IACC,MAAM,WAAW,GACf,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3D,IACE,MAAM,SAAS,CAAC;QACd,IAAI;QACJ,KAAK;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,YAAY;QACrB,QAAQ;QACR,GAAG,WAAW;KACf,CAAC,EACF,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;IAC7C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,sEAAsE;QACtE,MAAM,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;QAC7D,OAAM;IACR,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,UAAU;IACV,MAAM,SAAS,CAAC;QACd,IAAI;QACJ,KAAK;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC,IAAI;QACpB,QAAQ;QACR,GAAG,WAAW;KACf,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAC5B,IAAI,EACJ,KAAK,EACL,eAAe,EACf,QAAQ,EACR,MAAM,EAOP;IACC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,CAAA;IACvC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,iBAAiB,GAAG,CAAC,CAAA;IACzB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAK;QACP,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;QAClD,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,UAAU,CAAC;gBAC5C,IAAI;gBACJ,KAAK;gBACL,GAAG;gBACH,eAAe;gBACf,QAAQ;aACT,CAAC,CAAA;YACF,IAAI,gBAAgB,EAAE,CAAC;gBACrB,iBAAiB,IAAI,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,CAAA;IACb,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;AACtC,CAAC"}

package/dist/sync/types.d.ts

@@ -165,6 +165,28 @@ export interface SyncStore {
         latest: MasterState | null;
         projection: ProjectionAction;
     }): Promise<void>;
+    /**
+     * Which of these feed revisions does the replica already hold? Answers with
+     * the ids whose local row records exactly that `etag` as its validator (the
+     * one a push ack or an earlier pull recorded). The pull loop asks it only
+     * about live feed documents carrying the engine's own `writerId`, and skips
+     * the decrypt of each confirmed one, applying it with a `none` projection
+     * (see `pull.ts`). The label is host-visible plaintext, so the skip also
+     * requires the `etag` match. That match limits the skip to a revision the
+     * replica already records. It does not authenticate the label or the
+     * envelope, since the `etag` is host-supplied too. A host that replays an
+     * older envelope under the current `etag` gets the local projection left
+     * as it was, where a decrypt would have rolled it back.
+     *
+     * Optional: a store that omits it turns echo suppression off, and every
+     * echo is decrypted as before.
+     */
+    heldRevisions?(options: {
+        documents: {
+            id: string;
+            etag: string;
+        }[];
+    }): Promise<Set<string>>;
     /**
      * Replaces the body of a pending row (dirty, never-acked, live -- no feed
      * existence) with a re-minted envelope, re-keying the row from `id` to

package/dist/sync/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sync/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,0BAA0B,CAAA;AACjC,YAAY,EACV,IAAI,EACJ,cAAc,EACd,OAAO,EACP,WAAW,EACX,QAAQ,EACR,WAAW,EACX,SAAS,EACV,MAAM,0BAA0B,CAAA;AAEjC,OAAO,KAAK,EACV,IAAI,EACJ,WAAW,EACX,cAAc,EACd,OAAO,EACR,MAAM,0BAA0B,CAAA;AAEjC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAC3B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GAC1B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAE3E;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;CAClB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;AAEnB;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,aAAa,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAA;IAEpD;;OAEG;IACH,YAAY,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAEpC;;;;;;;;OAQG;IACH,eAAe,CAAC,OAAO,EAAE;QACvB,SAAS,EAAE,OAAO,EAAE,CAAA;QACpB,UAAU,EAAE,cAAc,CAAA;QAC1B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;KAC3C,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB;;;;;;;;;;OAUG;IACH,UAAU,CAAC,OAAO,EAAE;QAClB,EAAE,EAAE,MAAM,CAAA;QACV,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAC3B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB;;;;;;OAMG;IACH,iBAAiB,CAAC,OAAO,EAAE;QACzB,EAAE,EAAE,MAAM,CAAA;QACV,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAC3B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB;;;;;;;;OAQG;IACH,WAAW,CAAC,OAAO,EAAE;QACnB,EAAE,EAAE,MAAM,CAAA;QACV,MAAM,EAAE,WAAW,GAAG,IAAI,CAAA;QAC1B,UAAU,EAAE,gBAAgB,CAAA;KAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,cAAc,CAAC,CAAC,OAAO,EAAE;QACvB,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,EAAE,IAAI,CAAA;QACd,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAC3B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CAClC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sync/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,0BAA0B,CAAA;AACjC,YAAY,EACV,IAAI,EACJ,cAAc,EACd,OAAO,EACP,WAAW,EACX,QAAQ,EACR,WAAW,EACX,SAAS,EACV,MAAM,0BAA0B,CAAA;AAEjC,OAAO,KAAK,EACV,IAAI,EACJ,WAAW,EACX,cAAc,EACd,OAAO,EACR,MAAM,0BAA0B,CAAA;AAEjC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAC3B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GAC1B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAE3E;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;CAClB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;AAEnB;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,aAAa,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAA;IAEpD;;OAEG;IACH,YAAY,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAEpC;;;;;;;;OAQG;IACH,eAAe,CAAC,OAAO,EAAE;QACvB,SAAS,EAAE,OAAO,EAAE,CAAA;QACpB,UAAU,EAAE,cAAc,CAAA;QAC1B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;KAC3C,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB;;;;;;;;;;OAUG;IACH,UAAU,CAAC,OAAO,EAAE;QAClB,EAAE,EAAE,MAAM,CAAA;QACV,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAC3B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB;;;;;;OAMG;IACH,iBAAiB,CAAC,OAAO,EAAE;QACzB,EAAE,EAAE,MAAM,CAAA;QACV,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAC3B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB;;;;;;;;OAQG;IACH,WAAW,CAAC,OAAO,EAAE;QACnB,EAAE,EAAE,MAAM,CAAA;QACV,MAAM,EAAE,WAAW,GAAG,IAAI,CAAA;QAC1B,UAAU,EAAE,gBAAgB,CAAA;KAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB;;;;;;;;;;;;;;;OAeG;IACH,aAAa,CAAC,CAAC,OAAO,EAAE;QACtB,SAAS,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAC1C,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAExB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,cAAc,CAAC,CAAC,OAAO,EAAE;QACvB,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,EAAE,IAAI,CAAA;QACd,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAC3B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CAClC"}

package/dist/writers/entry.d.ts

@@ -0,0 +1,95 @@
+/**
+ * The version-1 roster entry. A type alias rather than an interface, so it
+ * is assignable to was-client's `JsonObject`.
+ */
+export type RegisteredWriterEntry = {
+    version: 1;
+    /**
+     * The writer's `writerId`, verbatim. The resource id is a hash of it, so a
+     * reader takes the id from here.
+     */
+    writerId: string;
+    /**
+     * An enrolled wallet client's own signing-key multibase, the key the
+     * client-labels record and `listAccountClients` rows are keyed by. Absent
+     * for a non-wallet writer.
+     */
+    signingKeyMultibase?: string;
+    /**
+     * A coarse platform self-description, or the user's rename of it.
+     */
+    label: string;
+    /**
+     * ISO 8601 UTC timestamp of the writer's latest liveness touch.
+     */
+    lastSeen: string;
+    /**
+     * `false` once a sweep found `lastSeen` past the inactivity TTL. The writer's
+     * next touch sets it back to `true`.
+     */
+    active: boolean;
+};
+/**
+ * The expiry and liveness policy of the roster. Every replica that sweeps
+ * must use the same values, or two sweepers disagree about which entries are
+ * orphans.
+ */
+export interface RegisteredWriterPolicy {
+    /**
+     * How long an entry may go untouched before a sweep marks it inactive.
+     */
+    inactiveAfterMs: number;
+    /**
+     * The entry count past which a sweep (or an enrollment) deletes the
+     * oldest-`lastSeen` entries.
+     */
+    maxEntries: number;
+    /**
+     * The least time between two liveness touches by the same writer.
+     */
+    touchIntervalMs: number;
+}
+/**
+ * The default policy: inactive after 90 days, at most 64 entries, touched at
+ * most once a day. A wallet that overrides any of these passes the same
+ * override on every replica.
+ */
+export declare const REGISTERED_WRITER_POLICY: RegisteredWriterPolicy;
+/**
+ * The domain label of the resource id hash.
+ */
+export declare const REGISTERED_WRITER_ID_LABEL = "registered-writers/v1";
+/**
+ * The resource id of one writer's entry under one account: the first 16
+ * bytes of `sha256(utf8('registered-writers/v1|' + accountDid + '|' +
+ * writerId))`, formatted as an EDV document id.
+ *
+ * The id is deterministic, so a registration and a touch are idempotent
+ * upserts. It hides the `writerId` from the storage host and does not link
+ * one `writerId` across accounts.
+ *
+ * @param options {object}
+ * @param options.accountDid {string}   the account whose Space holds the roster
+ * @param options.writerId {string}
+ * @returns {string}
+ */
+export declare function registeredWriterResourceId({ accountDid, writerId }: {
+    accountDid: string;
+    writerId: string;
+}): string;
+/**
+ * Resolves a partial policy override against the defaults.
+ *
+ * @param [policy] {Partial<RegisteredWriterPolicy>}
+ * @returns {RegisteredWriterPolicy}
+ */
+export declare function registeredWriterPolicy(policy?: Partial<RegisteredWriterPolicy>): RegisteredWriterPolicy;
+/**
+ * Reads a stored body as a roster entry, or `undefined` when it is not one.
+ * A malformed entry is skipped by every reader, and never repaired.
+ *
+ * @param body {unknown}
+ * @returns {RegisteredWriterEntry | undefined}
+ */
+export declare function parseRegisteredWriterEntry(body: unknown): RegisteredWriterEntry | undefined;
+//# sourceMappingURL=entry.d.ts.map

package/dist/writers/entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.d.ts","sourceRoot":"","sources":["../../src/writers/entry.ts"],"names":[],"mappings":"AAgBA;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,CAAC,CAAA;IACV;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAA;IACb;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,MAAM,EAAE,OAAO,CAAA;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,eAAe,EAAE,MAAM,CAAA;IACvB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB;;OAEG;IACH,eAAe,EAAE,MAAM,CAAA;CACxB;AAID;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,EAAE,sBAItC,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,0BAA0B,0BAA0B,CAAA;AAEjE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,UAAU,EACV,QAAQ,EACT,EAAE;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,MAAM,CAKT;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,GACvC,sBAAsB,CAExB;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,OAAO,GACZ,qBAAqB,GAAG,SAAS,CA2BnC"}

package/dist/writers/entry.js

@@ -0,0 +1,90 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The writer roster's entry: its version-1 shape, the shape check every
+ * reader runs, the resource id an entry lives at, and the expiry policy both
+ * wallets sweep under.
+ *
+ * An entry is advisory display data. Its writer asserts every field about
+ * itself, and nothing checks them beyond shape. `signingKeyMultibase` links a
+ * wallet writer to its enrolled client only when the verified did:webvh
+ * document lists that key, and no field is an input to any authorization.
+ */
+import { sha256 } from '@noble/hashes/sha2.js';
+import { edvIdFromBytes } from '@interop/was-client/edv/cipher';
+const DAY_MS = 24 * 60 * 60 * 1000;
+/**
+ * The default policy: inactive after 90 days, at most 64 entries, touched at
+ * most once a day. A wallet that overrides any of these passes the same
+ * override on every replica.
+ */
+export const REGISTERED_WRITER_POLICY = {
+    inactiveAfterMs: 90 * DAY_MS,
+    maxEntries: 64,
+    touchIntervalMs: DAY_MS
+};
+/**
+ * The domain label of the resource id hash.
+ */
+export const REGISTERED_WRITER_ID_LABEL = 'registered-writers/v1';
+/**
+ * The resource id of one writer's entry under one account: the first 16
+ * bytes of `sha256(utf8('registered-writers/v1|' + accountDid + '|' +
+ * writerId))`, formatted as an EDV document id.
+ *
+ * The id is deterministic, so a registration and a touch are idempotent
+ * upserts. It hides the `writerId` from the storage host and does not link
+ * one `writerId` across accounts.
+ *
+ * @param options {object}
+ * @param options.accountDid {string}   the account whose Space holds the roster
+ * @param options.writerId {string}
+ * @returns {string}
+ */
+export function registeredWriterResourceId({ accountDid, writerId }) {
+    const input = new TextEncoder().encode(`${REGISTERED_WRITER_ID_LABEL}|${accountDid}|${writerId}`);
+    return edvIdFromBytes(sha256(input).subarray(0, 16));
+}
+/**
+ * Resolves a partial policy override against the defaults.
+ *
+ * @param [policy] {Partial<RegisteredWriterPolicy>}
+ * @returns {RegisteredWriterPolicy}
+ */
+export function registeredWriterPolicy(policy) {
+    return { ...REGISTERED_WRITER_POLICY, ...policy };
+}
+/**
+ * Reads a stored body as a roster entry, or `undefined` when it is not one.
+ * A malformed entry is skipped by every reader, and never repaired.
+ *
+ * @param body {unknown}
+ * @returns {RegisteredWriterEntry | undefined}
+ */
+export function parseRegisteredWriterEntry(body) {
+    if (body === null || typeof body !== 'object') {
+        return undefined;
+    }
+    const { version, writerId, signingKeyMultibase, label, lastSeen, active } = body;
+    if (version !== 1 ||
+        typeof writerId !== 'string' ||
+        writerId === '' ||
+        typeof label !== 'string' ||
+        typeof lastSeen !== 'string' ||
+        Number.isNaN(Date.parse(lastSeen)) ||
+        typeof active !== 'boolean' ||
+        (signingKeyMultibase !== undefined &&
+            typeof signingKeyMultibase !== 'string')) {
+        return undefined;
+    }
+    return {
+        version: 1,
+        writerId,
+        ...(signingKeyMultibase !== undefined && { signingKeyMultibase }),
+        label,
+        lastSeen,
+        active
+    };
+}
+//# sourceMappingURL=entry.js.map

package/dist/writers/entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.js","sourceRoot":"","sources":["../../src/writers/entry.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AAuD/D,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAElC;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA2B;IAC9D,eAAe,EAAE,EAAE,GAAG,MAAM;IAC5B,UAAU,EAAE,EAAE;IACd,eAAe,EAAE,MAAM;CACxB,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,uBAAuB,CAAA;AAEjE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,UAAU,EACV,QAAQ,EAIT;IACC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACpC,GAAG,0BAA0B,IAAI,UAAU,IAAI,QAAQ,EAAE,CAC1D,CAAA;IACD,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAwC;IAExC,OAAO,EAAE,GAAG,wBAAwB,EAAE,GAAG,MAAM,EAAE,CAAA;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAAa;IAEb,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,GACvE,IAA+B,CAAA;IACjC,IACE,OAAO,KAAK,CAAC;QACb,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,KAAK,EAAE;QACf,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,QAAQ,KAAK,QAAQ;QAC5B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClC,OAAO,MAAM,KAAK,SAAS;QAC3B,CAAC,mBAAmB,KAAK,SAAS;YAChC,OAAO,mBAAmB,KAAK,QAAQ,CAAC,EAC1C,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,QAAQ;QACR,GAAG,CAAC,mBAAmB,KAAK,SAAS,IAAI,EAAE,mBAAmB,EAAE,CAAC;QACjE,KAAK;QACL,QAAQ;QACR,MAAM;KACP,CAAA;AACH,CAAC"}

package/dist/writers/index.d.ts

@@ -0,0 +1,17 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The writer roster: the `registered-writers` collection's entry shape, its
+ * resource id, the storage seam and WAS adapter, lazy registration with the
+ * throttled liveness touch, the sweep-on-read with two-phase expiry, and the
+ * join a history view resolves a revision's `writerId` through. Every field
+ * is advisory display data, and none is an input to any decision.
+ */
+export { REGISTERED_WRITER_ID_LABEL, REGISTERED_WRITER_POLICY, parseRegisteredWriterEntry, registeredWriterPolicy, registeredWriterResourceId } from './entry.js';
+export type { RegisteredWriterEntry, RegisteredWriterPolicy } from './entry.js';
+export { wasRegisteredWritersStore } from './store.js';
+export type { RegisteredWritersStore, StoredRegisteredWriter } from './store.js';
+export { registerWriterOnSecondSession, renameRegisteredWriter, resolveRegisteredWriter, sweepRegisteredWriters } from './roster.js';
+export type { RegisteredWritersSweep, ResolvedWriter, WriterRegistrationOutcome, WriterFirstSeenRecord, WriterFirstSeenStore } from './roster.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/writers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/writers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;GAMG;AACH,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,EAC3B,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAA;AACtD,YAAY,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAChF,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,sBAAsB,EACtB,cAAc,EACd,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,aAAa,CAAA"}

package/dist/writers/index.js

@@ -0,0 +1,14 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The writer roster: the `registered-writers` collection's entry shape, its
+ * resource id, the storage seam and WAS adapter, lazy registration with the
+ * throttled liveness touch, the sweep-on-read with two-phase expiry, and the
+ * join a history view resolves a revision's `writerId` through. Every field
+ * is advisory display data, and none is an input to any decision.
+ */
+export { REGISTERED_WRITER_ID_LABEL, REGISTERED_WRITER_POLICY, parseRegisteredWriterEntry, registeredWriterPolicy, registeredWriterResourceId } from './entry.js';
+export { wasRegisteredWritersStore } from './store.js';
+export { registerWriterOnSecondSession, renameRegisteredWriter, resolveRegisteredWriter, sweepRegisteredWriters } from './roster.js';
+//# sourceMappingURL=index.js.map

package/dist/writers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/writers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;GAMG;AACH,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,EAC3B,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAA;AAEtD,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,aAAa,CAAA"}

package/dist/writers/roster.d.ts

@@ -0,0 +1,152 @@
+import type { RegisteredWriterEntry, RegisteredWriterPolicy } from './entry.js';
+import type { RegisteredWritersStore } from './store.js';
+/**
+ * The writer first-seen record, kept client-local: the account and
+ * `writerId` this client's writer first appeared under, and when it last
+ * touched its roster entry. One slot, so a writer that moves to another
+ * account starts over.
+ */
+export interface WriterFirstSeenRecord {
+    accountDid: string;
+    writerId: string;
+    /**
+     * ISO 8601 UTC start of the session the record was written in.
+     */
+    firstSessionAt: string;
+    /**
+     * ISO 8601 UTC time of the latest successful registration or touch.
+     */
+    lastTouchedAt?: string;
+}
+/**
+ * The client-local seam for the writer first-seen record. Where it lives is
+ * the wallet's choice. A forget of this client's local state clears it along with
+ * the `writerId`.
+ */
+export interface WriterFirstSeenStore {
+    get(): Promise<unknown>;
+    put(record: WriterFirstSeenRecord): Promise<void>;
+}
+/**
+ * What {@link registerWriterOnSecondSession} did.
+ *
+ * - `deferred` -- the writer has not yet been encountered in a second session
+ *   under this account; the first-seen record is (re)written and the roster
+ *   is untouched.
+ * - `fresh` -- the latest touch is within the touch interval; no I/O.
+ * - `registered` -- a new entry was written (or a malformed one replaced).
+ * - `touched` -- the existing entry's `lastSeen` was advanced.
+ * - `raced` -- every attempt lost a conditional write; the next call retries.
+ */
+export type WriterRegistrationOutcome = 'deferred' | 'fresh' | 'registered' | 'touched' | 'raced';
+/**
+ * Registers this client's writer in the roster once it is encountered in a
+ * second session under the account, and touches its `lastSeen` at most once
+ * per touch interval after that. Call it on the wallet's connect or sync path;
+ * calls within the interval cost no I/O.
+ *
+ * A new entry takes `label`. A touch keeps the stored label, so a rename
+ * stands, and refreshes `signingKeyMultibase` when one is given. Registering
+ * a new entry first makes room under the entry cap, deleting the
+ * oldest-`lastSeen` entries.
+ *
+ * @param options {object}
+ * @param options.store {RegisteredWritersStore}
+ * @param options.local {WriterFirstSeenStore}
+ * @param options.accountDid {string}   the account whose Space holds the roster
+ * @param options.writerId {string}   this client's writer
+ * @param options.label {string}   the coarse platform self-description a new
+ *   entry takes
+ * @param options.sessionStartedAt {Date}   when the current session began; a
+ *   first-seen record written at or after it is this session's own
+ * @param [options.signingKeyMultibase] {string}   an enrolled wallet client's
+ *   own signing-key multibase
+ * @param [options.now] {Date}
+ * @param [options.policy] {Partial<RegisteredWriterPolicy>}
+ * @returns {Promise<WriterRegistrationOutcome>}
+ */
+export declare function registerWriterOnSecondSession({ store, local, accountDid, writerId, label, sessionStartedAt, signingKeyMultibase, now, policy }: {
+    store: RegisteredWritersStore;
+    local: WriterFirstSeenStore;
+    accountDid: string;
+    writerId: string;
+    label: string;
+    sessionStartedAt: Date;
+    signingKeyMultibase?: string;
+    now?: Date;
+    policy?: Partial<RegisteredWriterPolicy>;
+}): Promise<WriterRegistrationOutcome>;
+/**
+ * Renames this client's writer. The rename lands only on a registered entry;
+ * before registration there is nothing to rename, and the call returns
+ * `false`.
+ *
+ * @param options {object}
+ * @param options.store {RegisteredWritersStore}
+ * @param options.accountDid {string}
+ * @param options.writerId {string}
+ * @param options.label {string}   the new label; blank is refused
+ * @returns {Promise<boolean>}   whether an entry was renamed
+ */
+export declare function renameRegisteredWriter({ store, accountDid, writerId, label }: {
+    store: RegisteredWritersStore;
+    accountDid: string;
+    writerId: string;
+    label: string;
+}): Promise<boolean>;
+/**
+ * The outcome of a sweep: the entries left standing, and what it changed.
+ */
+export interface RegisteredWritersSweep {
+    entries: RegisteredWriterEntry[];
+    markedInactive: string[];
+    deleted: string[];
+}
+/**
+ * Reads the roster and sweeps it: the sweep-on-read every history view runs.
+ * Safe to run from any replica, and concurrently.
+ *
+ * @param options {object}
+ * @param options.store {RegisteredWritersStore}
+ * @param options.accountDid {string}   the account whose Space holds the roster
+ * @param [options.now] {Date}
+ * @param [options.policy] {Partial<RegisteredWriterPolicy>}
+ * @returns {Promise<RegisteredWritersSweep>}
+ */
+export declare function sweepRegisteredWriters({ store, accountDid, now, policy }: {
+    store: RegisteredWritersStore;
+    accountDid: string;
+    now?: Date;
+    policy?: Partial<RegisteredWriterPolicy>;
+}): Promise<RegisteredWritersSweep>;
+/**
+ * How a history view renders one revision's writer. `undefined` from
+ * {@link resolveRegisteredWriter} means no entry: the view renders its
+ * fallback label ("another session").
+ */
+export interface ResolvedWriter {
+    label: string;
+    active: boolean;
+    /**
+     * Present only when the entry's `signingKeyMultibase` is an enrolled
+     * client's key in the verified account document. The view may then link
+     * the revision to that client's row. Absent, the label stands unlinked.
+     */
+    clientSigningKeyMultibase?: string;
+}
+/**
+ * Resolves a revision's `writerId` against the swept roster.
+ *
+ * @param options {object}
+ * @param options.writerId {string}
+ * @param options.entries {RegisteredWriterEntry[]}   a sweep's `entries`
+ * @param options.enrolledSigningKeys {ReadonlySet<string>}   the signing-key
+ *   multibases of the enrolled clients in the verified account document
+ * @returns {ResolvedWriter | undefined}
+ */
+export declare function resolveRegisteredWriter({ writerId, entries, enrolledSigningKeys }: {
+    writerId: string;
+    entries: RegisteredWriterEntry[];
+    enrolledSigningKeys: ReadonlySet<string>;
+}): ResolvedWriter | undefined;
+//# sourceMappingURL=roster.d.ts.map

package/dist/writers/roster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roster.d.ts","sourceRoot":"","sources":["../../src/writers/roster.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAC/E,OAAO,KAAK,EAAE,sBAAsB,EAA0B,MAAM,YAAY,CAAA;AAEhF;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB;;OAEG;IACH,cAAc,EAAE,MAAM,CAAA;IACtB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IACvB,GAAG,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAClD;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,yBAAyB,GACnC,UAAU,GAAG,OAAO,GAAG,YAAY,GAAG,SAAS,GAAG,OAAO,CAAA;AAyI3D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,6BAA6B,CAAC,EAClD,KAAK,EACL,KAAK,EACL,UAAU,EACV,QAAQ,EACR,KAAK,EACL,gBAAgB,EAChB,mBAAmB,EACnB,GAAgB,EAChB,MAAM,EACP,EAAE;IACD,KAAK,EAAE,sBAAsB,CAAA;IAC7B,KAAK,EAAE,oBAAoB,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,gBAAgB,EAAE,IAAI,CAAA;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,GAAG,CAAC,EAAE,IAAI,CAAA;IACV,MAAM,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAA;CACzC,GAAG,OAAO,CAAC,yBAAyB,CAAC,CA0ErC;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,KAAK,EACL,UAAU,EACV,QAAQ,EACR,KAAK,EACN,EAAE;IACD,KAAK,EAAE,sBAAsB,CAAA;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBnB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,qBAAqB,EAAE,CAAA;IAChC,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAiGD;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,KAAK,EACL,UAAU,EACV,GAAgB,EAChB,MAAM,EACP,EAAE;IACD,KAAK,EAAE,sBAAsB,CAAA;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,CAAC,EAAE,IAAI,CAAA;IACV,MAAM,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAA;CACzC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAUlC;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,OAAO,CAAA;IACf;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,EACtC,QAAQ,EACR,OAAO,EACP,mBAAmB,EACpB,EAAE;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,qBAAqB,EAAE,CAAA;IAChC,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CACzC,GAAG,cAAc,GAAG,SAAS,CAa7B"}