@interop/wallet-core 0.90.0 → 0.92.0

package/dist/sync/pull.d.ts

@@ -7,7 +7,7 @@ import type { Json, ProjectionAction, SyncStore, WasSyncPort, WireDoc } from './
  *
  * Decryption runs here, outside the store transaction, so a slow/failing decrypt
  * never holds the store's write lock. A document whose body cannot be decrypted
- * (legacy plaintext row, corrupt/foreign envelope, key mismatch) is skipped with
+ * (legacy plaintext body, corrupt/foreign envelope, key mismatch) is skipped with
  * a `none` projection rather than throwing: the body is still stored and the
  * checkpoint advances past it, so one poison document can never permanently
  * wedge the feed for the whole replica. A document that decrypts but fails the
@@ -15,17 +15,17 @@ import type { Json, ProjectionAction, SyncStore, WasSyncPort, WireDoc } from './
  * possibly a buggy or schema-incompatible writer) is skipped the same way:
  * stored, checkpoint advanced, never projected.
  *
- * The decrypt is addressed: the feed row's own `id` goes to `decryptDoc`, and
+ * The decrypt is addressed: the feed document's own `id` goes to `decryptDoc`, and
  * the cipher refuses an envelope sealed for some other resource with was-
  * client's `IntegrityError`. That refusal has two causes and the reader
  * cannot tell them apart: a host that moved one resource's stored envelope
- * under another resource's id, and a row minted by a writer that predates
- * addressed sealing (the legacy contacts rows
+ * under another resource's id, and a document minted by a writer that
+ * predates addressed sealing (the legacy contacts documents
  * `docs/cross-replica-sync-compatibility.md` records as a stated loss, which
  * every fresh replica bootstrap re-reads). It is logged apart from the
  * ordinary undecryptable skip so a caller can count it, but the benign cause
  * is the common one and an alert on it needs a rate rather than a single
- * event. The projection outcome is the same `none`: the row is not applied,
+ * event. The projection outcome is the same `none`: the document is not applied,
  * the body is still stored, and the checkpoint advances past it.
  *
  * @param doc {WireDoc}

package/dist/sync/pull.js

@@ -41,7 +41,7 @@ import { log } from '../log.js';
  *
  * Decryption runs here, outside the store transaction, so a slow/failing decrypt
  * never holds the store's write lock. A document whose body cannot be decrypted
- * (legacy plaintext row, corrupt/foreign envelope, key mismatch) is skipped with
+ * (legacy plaintext body, corrupt/foreign envelope, key mismatch) is skipped with
  * a `none` projection rather than throwing: the body is still stored and the
  * checkpoint advances past it, so one poison document can never permanently
  * wedge the feed for the whole replica. A document that decrypts but fails the
@@ -49,17 +49,17 @@ import { log } from '../log.js';
  * possibly a buggy or schema-incompatible writer) is skipped the same way:
  * stored, checkpoint advanced, never projected.
  *
- * The decrypt is addressed: the feed row's own `id` goes to `decryptDoc`, and
+ * The decrypt is addressed: the feed document's own `id` goes to `decryptDoc`, and
  * the cipher refuses an envelope sealed for some other resource with was-
  * client's `IntegrityError`. That refusal has two causes and the reader
  * cannot tell them apart: a host that moved one resource's stored envelope
- * under another resource's id, and a row minted by a writer that predates
- * addressed sealing (the legacy contacts rows
+ * under another resource's id, and a document minted by a writer that
+ * predates addressed sealing (the legacy contacts documents
  * `docs/cross-replica-sync-compatibility.md` records as a stated loss, which
  * every fresh replica bootstrap re-reads). It is logged apart from the
  * ordinary undecryptable skip so a caller can count it, but the benign cause
  * is the common one and an alert on it needs a rate rather than a single
- * event. The projection outcome is the same `none`: the row is not applied,
+ * event. The projection outcome is the same `none`: the document is not applied,
  * the body is still stored, and the checkpoint advances past it.
  *
  * @param doc {WireDoc}

package/dist/sync/push.d.ts

@@ -1,9 +1,10 @@
 import type { ResolveConflict, SyncStore, WasSyncPort } from './types.js';
 /**
- * Pushes every dirty row for one feed, sequentially (bounds sockets/CPU, and
- * keeps conflict reconciliation deterministic). Honors `signal` between rows.
- * A non-conflict error from any row propagates so the engine aborts the cycle
- * and backs off; already-pushed rows in the batch stay settled.
+ * Pushes every dirty resource replica for one feed, sequentially (bounds
+ * sockets/CPU, and keeps conflict reconciliation deterministic). Honors
+ * `signal` between resource replicas. A non-conflict error from any resource
+ * replica propagates so the engine aborts the cycle and backs off;
+ * already-pushed resource replicas in the batch stay settled.
  *
  * @param options {object}
  * @param options.port {WasSyncPort}
@@ -12,8 +13,8 @@ import type { ResolveConflict, SyncStore, WasSyncPort } from './types.js';
  * @param [options.writerId] {string}   this writer's attribution label, sent
  *   as `Writer-Id` on every write and delete; absent sends none
  * @param [options.signal] {AbortSignal}
- * @returns {Promise<{ pushed: number; conflictsResolved: number }>}   dirty rows
- *   processed this cycle, and how many invoked the LWW resolver (a positive
+ * @returns {Promise<{ pushed: number; conflictsResolved: number }>}   dirty
+ *   resource replicas processed this cycle, and how many invoked the LWW resolver (a positive
  *   count means the caller should rerun so a local-wins re-push settles)
  */
 export declare function runPush({ port, store, resolveConflict, writerId, signal }: {

package/dist/sync/push.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../src/sync/push.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAQ,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAqM/E;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,OAAO,CAAC,EAC5B,IAAI,EACJ,KAAK,EACL,eAAe,EACf,QAAQ,EACR,MAAM,EACP,EAAE;IACD,IAAI,EAAE,WAAW,CAAA;IACjB,KAAK,EAAE,SAAS,CAAA;IAChB,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC,CAyBzD"}
+{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../src/sync/push.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAQ,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AA0M/E;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,OAAO,CAAC,EAC5B,IAAI,EACJ,KAAK,EACL,eAAe,EACf,QAAQ,EACR,MAAM,EACP,EAAE;IACD,IAAI,EAAE,WAAW,CAAA;IACjB,KAAK,EAAE,SAAS,CAAA;IAChB,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC,CAyBzD"}

package/dist/sync/push.js

@@ -2,23 +2,23 @@
  * Copyright (c) 2026 Interop Alliance. All rights reserved.
  */
 /**
- * The push side of the WAS replication engine core: fan each dirty local row out
- * to a conditional WAS write, then reconcile per the content-addressed conflict
- * table.
+ * The push side of the WAS replication engine core: fan each dirty local
+ * resource replica out to a conditional WAS write, then reconcile per the
+ * content-addressed conflict table.
  *
- * On a content-addressed collection an id's `data` never mutates, so a live row
- * only ever pushes as a create (`If-None-Match: *`) and a tombstone as a delete;
- * there is no update path. A mutable (last-write-wins) collection pushes a live
- * row as a create while never-acked (`version 0`) and as an in-place update
- * (`If-Match`) once acked, and settles a `412` through its injected
- * {@link ResolveConflict} policy.
+ * On a content-addressed collection an id's `data` never mutates, so a live
+ * resource replica only ever pushes as a create (`If-None-Match: *`) and a
+ * tombstone as a delete; there is no update path. A mutable (last-write-wins)
+ * collection pushes a live resource replica as a create while never-acked
+ * (`version 0`) and as an in-place update (`If-Match`) once acked, and settles
+ * a `412` through its injected {@link ResolveConflict} policy.
  *
  * This loop covers the CONTENT sub-resource only (`data` / `version`, at
  * `PUT/DELETE /:id`). It does not drive the independently-versioned METADATA
  * sub-resource (`custom` / `metaVersion`, at `PUT /:id/meta`): a replica that
  * syncs user-writable metadata (the web wallet's RxDB driver, via
- * `WasSyncPort.putMeta`) keeps that half in its own push handler. It is left out
- * of this core deliberately -- none of the wallet Space collections
+ * `WasSyncPort.putMeta`) keeps that half in its own push handler. It is left
+ * out of this core deliberately -- none of the wallet Space collections
  * (`private-credentials`, `public-credentials`, `wallet-activity`, `contacts`,
  * `contacts-history`) versions its metadata independently of its content, so
  * folding a `putMeta` diff into this loop would add an untested code path with
@@ -34,14 +34,15 @@
  */
 import { isSyncConflictError, isSyncNotFoundError } from '@interop/was-client/sync';
 /**
- * Pushes a dirty live row. A never-acked row (`version 0`) is a create
- * (`PUT /:id` with `If-None-Match: *`); an acked row (`version > 0`) is an
- * in-place update (`If-Match` over its stored `etag`, echoed back verbatim --
- * absent only against a backend that never returned one) -- reachable only on
- * a mutable collection, since a content-addressed row never mutates in place.
- * On success the acked `version` / `etag` are recorded and the row goes clean
- * -- unless a local write landed while the write was in flight, which the
- * row's `revision` token detects (see {@link SyncStore.markPushed}) so the
+ * Pushes a dirty live resource replica. A never-acked resource replica
+ * (`version 0`) is a create (`PUT /:id` with `If-None-Match: *`); an acked
+ * resource replica (`version > 0`) is an in-place update (`If-Match` over its
+ * stored `etag`, echoed back verbatim -- absent only against a backend that
+ * never returned one) -- reachable only on a mutable collection, since a
+ * content-addressed resource replica never mutates in place. On success the
+ * acked `version` / `etag` are recorded and the resource replica goes clean --
+ * unless a local write landed while the write was in flight, which the resource
+ * replica's `revision` token detects (see {@link SyncStore.markPushed}) so the
  * newer write stays dirty for the rerun cycle.
  *
  * A `412` is settled by the collection's policy:
@@ -53,19 +54,21 @@ import { isSyncConflictError, isSyncNotFoundError } from '@interop/was-client/sy
  *   absent/tombstone -> deletion wins, adopt the tombstone and delete the
  *   projection (a later re-add re-encrypts to a fresh id, so nothing is blocked).
  */
-async function pushUpsert({ port, store, row, resolveConflict, writerId }) {
+async function pushUpsert({ port, store, replica, resolveConflict, writerId }) {
     try {
         const ack = await port.putContent({
-            id: row.id,
-            data: row.data ?? null,
-            ...(row.version > 0 ? { ifMatch: row.etag } : { ifNoneMatch: true }),
+            id: replica.id,
+            data: replica.data ?? null,
+            ...(replica.version > 0
+                ? { ifMatch: replica.etag }
+                : { ifNoneMatch: true }),
             ...(writerId !== undefined && { writerId })
         });
         await store.markPushed({
-            id: row.id,
+            id: replica.id,
             version: ack.version,
             etag: ack.etag,
-            ...(row.revision !== undefined && { revision: row.revision })
+            ...(replica.revision !== undefined && { revision: replica.revision })
         });
         return { conflictResolved: false };
     }
@@ -75,26 +78,27 @@ async function pushUpsert({ port, store, row, resolveConflict, writerId }) {
         }
         if (resolveConflict) {
             await resolveConflict({
-                id: row.id,
-                version: row.version,
-                data: row.data
+                id: replica.id,
+                version: replica.version,
+                data: replica.data
             });
-            // The resolver may have left the row dirty (local-wins re-encrypt); the
-            // caller reruns so the re-push settles within the same sync run.
+            // The resolver may have left the resource replica dirty (local-wins
+            // re-encrypt); the caller reruns so the re-push settles within the same
+            // sync run.
             return { conflictResolved: true };
         }
-        const master = await port.get({ id: row.id });
+        const master = await port.get({ id: replica.id });
         // An absent or tombstoned resource surfaces as `get` resolving null.
         if (master === null) {
             await store.adoptLatest({
-                id: row.id,
+                id: replica.id,
                 latest: null,
                 projection: { kind: 'delete' }
             });
         }
         else {
             await store.adoptLatest({
-                id: row.id,
+                id: replica.id,
                 latest: master,
                 projection: { kind: 'none' }
             });
@@ -136,51 +140,53 @@ async function tryDelete({ port, store, id, ifMatch, revision, writerId }) {
     }
 }
 /**
- * Pushes a dirty tombstone. `DELETE /:id` with `If-Match` over the row's stored
- * `etag` when the row was ever acked (`version > 0`), unconditional otherwise:
+ * Pushes a dirty tombstone. `DELETE /:id` with `If-Match` over the resource
+ * replica's stored `etag` when the resource replica was ever acked (`version >
+ * 0`), unconditional otherwise:
  * - `204` / `404` -> settled (clean).
  * - `412` then master absent/tombstone -> delete/delete race, settled.
  * - `412` then master live -> retry once with the master's fresh `etag`; a
- *   second `412` leaves the row dirty for the next cycle (the next pull
- *   refreshes its `version` / `etag` via the dirty-deleted-vs-live rule, so the
- *   retry's `If-Match` becomes current).
+ *   second `412` leaves the resource replica dirty for the next cycle (the next
+ *   pull refreshes its `version` / `etag` via the dirty-deleted-vs-live rule,
+ *   so the retry's `If-Match` becomes current).
  */
-async function pushDelete({ port, store, row, writerId }) {
-    const revisionAck = row.revision !== undefined ? { revision: row.revision } : {};
-    const firstIfMatch = row.version > 0 ? row.etag : undefined;
+async function pushDelete({ port, store, replica, writerId }) {
+    const revisionAck = replica.revision !== undefined ? { revision: replica.revision } : {};
+    const firstIfMatch = replica.version > 0 ? replica.etag : undefined;
     if (await tryDelete({
         port,
         store,
-        id: row.id,
+        id: replica.id,
         ifMatch: firstIfMatch,
         writerId,
         ...revisionAck
     })) {
         return;
     }
-    const master = await port.get({ id: row.id });
+    const master = await port.get({ id: replica.id });
     if (master === null) {
         // delete/delete race -- the resource is already a tombstone / absent.
-        await store.markDeletedPushed({ id: row.id, ...revisionAck });
+        await store.markDeletedPushed({ id: replica.id, ...revisionAck });
         return;
     }
-    // Second attempt with the master's current etag. If it too hits 412 we
-    // simply leave the row dirty (tryDelete returned false and made no store
-    // write).
+    // Second attempt with the master's current etag. If it too hits 412 we simply
+    // leave the resource replica dirty (tryDelete returned false and made no
+    // store write).
     await tryDelete({
         port,
         store,
-        id: row.id,
+        id: replica.id,
         ifMatch: master.etag,
         writerId,
         ...revisionAck
     });
 }
 /**
- * Pushes every dirty row for one feed, sequentially (bounds sockets/CPU, and
- * keeps conflict reconciliation deterministic). Honors `signal` between rows.
- * A non-conflict error from any row propagates so the engine aborts the cycle
- * and backs off; already-pushed rows in the batch stay settled.
+ * Pushes every dirty resource replica for one feed, sequentially (bounds
+ * sockets/CPU, and keeps conflict reconciliation deterministic). Honors
+ * `signal` between resource replicas. A non-conflict error from any resource
+ * replica propagates so the engine aborts the cycle and backs off;
+ * already-pushed resource replicas in the batch stay settled.
  *
  * @param options {object}
  * @param options.port {WasSyncPort}
@@ -189,26 +195,26 @@ async function pushDelete({ port, store, row, writerId }) {
  * @param [options.writerId] {string}   this writer's attribution label, sent
  *   as `Writer-Id` on every write and delete; absent sends none
  * @param [options.signal] {AbortSignal}
- * @returns {Promise<{ pushed: number; conflictsResolved: number }>}   dirty rows
- *   processed this cycle, and how many invoked the LWW resolver (a positive
+ * @returns {Promise<{ pushed: number; conflictsResolved: number }>}   dirty
+ *   resource replicas processed this cycle, and how many invoked the LWW resolver (a positive
  *   count means the caller should rerun so a local-wins re-push settles)
  */
 export async function runPush({ port, store, resolveConflict, writerId, signal }) {
-    const rows = await store.getDirtyRows();
+    const replicas = await store.getDirtyResourceReplicas();
     let pushed = 0;
     let conflictsResolved = 0;
-    for (const row of rows) {
+    for (const replica of replicas) {
         if (signal?.aborted) {
             break;
         }
-        if (row.deleted) {
-            await pushDelete({ port, store, row, writerId });
+        if (replica.deleted) {
+            await pushDelete({ port, store, replica, writerId });
         }
         else {
             const { conflictResolved } = await pushUpsert({
                 port,
                 store,
-                row,
+                replica,
                 resolveConflict,
                 writerId
             });

package/dist/sync/push.js.map

@@ -1 +1 @@
-{"version":3,"file":"push.js","sourceRoot":"","sources":["../../src/sync/push.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,0BAA0B,CAAA;AAGjC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,KAAK,UAAU,UAAU,CAAC,EACxB,IAAI,EACJ,KAAK,EACL,GAAG,EACH,eAAe,EACf,QAAQ,EAaT;IACC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YAChC,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;YACtB,GAAG,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACpE,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,KAAK,CAAC,UAAU,CAAC;YACrB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;SAC9D,CAAC,CAAA;QACF,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAA;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,CAAA;QACX,CAAC;QACD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,eAAe,CAAC;gBACpB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;aACf,CAAC,CAAA;YACF,wEAAwE;YACxE,iEAAiE;YACjE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAA;QACnC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QAC7C,qEAAqE;QACrE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC,WAAW,CAAC;gBACtB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC/B,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC,WAAW,CAAC;gBACtB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aAC7B,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAA;IACpC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CAAC,EACvB,IAAI,EACJ,KAAK,EACL,EAAE,EACF,OAAO,EACP,QAAQ,EACR,QAAQ,EAQT;IACC,MAAM,WAAW,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YACnC,EAAE;YACF,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;YACzC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,KAAK,CAAC,iBAAiB,CAAC;YAC5B,EAAE;YACF,OAAO,EAAE,GAAG,EAAE,OAAO;YACrB,IAAI,EAAE,GAAG,EAAE,IAAI;YACf,GAAG,WAAW;SACf,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;YACrD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,UAAU,CAAC,EACxB,IAAI,EACJ,KAAK,EACL,GAAG,EACH,QAAQ,EAWT;IACC,MAAM,WAAW,GACf,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3D,IACE,MAAM,SAAS,CAAC;QACd,IAAI;QACJ,KAAK;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,YAAY;QACrB,QAAQ;QACR,GAAG,WAAW;KACf,CAAC,EACF,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;IAC7C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,sEAAsE;QACtE,MAAM,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;QAC7D,OAAM;IACR,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,UAAU;IACV,MAAM,SAAS,CAAC;QACd,IAAI;QACJ,KAAK;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC,IAAI;QACpB,QAAQ;QACR,GAAG,WAAW;KACf,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAC5B,IAAI,EACJ,KAAK,EACL,eAAe,EACf,QAAQ,EACR,MAAM,EAOP;IACC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,CAAA;IACvC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,iBAAiB,GAAG,CAAC,CAAA;IACzB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAK;QACP,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;QAClD,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,UAAU,CAAC;gBAC5C,IAAI;gBACJ,KAAK;gBACL,GAAG;gBACH,eAAe;gBACf,QAAQ;aACT,CAAC,CAAA;YACF,IAAI,gBAAgB,EAAE,CAAC;gBACrB,iBAAiB,IAAI,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,CAAA;IACb,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;AACtC,CAAC"}
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../../src/sync/push.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,0BAA0B,CAAA;AAGjC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,KAAK,UAAU,UAAU,CAAC,EACxB,IAAI,EACJ,KAAK,EACL,OAAO,EACP,eAAe,EACf,QAAQ,EAaT;IACC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YAChC,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;YAC1B,GAAG,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC;gBACrB,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;gBAC3B,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAC1B,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,KAAK,CAAC,UAAU,CAAC;YACrB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;SACtE,CAAC,CAAA;QACF,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAA;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,CAAA;QACX,CAAC;QACD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,eAAe,CAAC;gBACpB,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAA;YACF,oEAAoE;YACpE,wEAAwE;YACxE,YAAY;YACZ,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAA;QACnC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;QACjD,qEAAqE;QACrE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC,WAAW,CAAC;gBACtB,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC/B,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC,WAAW,CAAC;gBACtB,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aAC7B,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAA;IACpC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CAAC,EACvB,IAAI,EACJ,KAAK,EACL,EAAE,EACF,OAAO,EACP,QAAQ,EACR,QAAQ,EAQT;IACC,MAAM,WAAW,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YACnC,EAAE;YACF,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;YACzC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,KAAK,CAAC,iBAAiB,CAAC;YAC5B,EAAE;YACF,OAAO,EAAE,GAAG,EAAE,OAAO;YACrB,IAAI,EAAE,GAAG,EAAE,IAAI;YACf,GAAG,WAAW;SACf,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;YACrD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,UAAU,CAAC,EACxB,IAAI,EACJ,KAAK,EACL,OAAO,EACP,QAAQ,EAWT;IACC,MAAM,WAAW,GACf,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACtE,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IACnE,IACE,MAAM,SAAS,CAAC;QACd,IAAI;QACJ,KAAK;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,YAAY;QACrB,QAAQ;QACR,GAAG,WAAW;KACf,CAAC,EACF,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;IACjD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,sEAAsE;QACtE,MAAM,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;QACjE,OAAM;IACR,CAAC;IAED,8EAA8E;IAC9E,yEAAyE;IACzE,gBAAgB;IAChB,MAAM,SAAS,CAAC;QACd,IAAI;QACJ,KAAK;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,MAAM,CAAC,IAAI;QACpB,QAAQ;QACR,GAAG,WAAW;KACf,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAC5B,IAAI,EACJ,KAAK,EACL,eAAe,EACf,QAAQ,EACR,MAAM,EAOP;IACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,wBAAwB,EAAE,CAAA;IACvD,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,iBAAiB,GAAG,CAAC,CAAA;IACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAK;QACP,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,UAAU,CAAC;gBAC5C,IAAI;gBACJ,KAAK;gBACL,OAAO;gBACP,eAAe;gBACf,QAAQ;aACT,CAAC,CAAA;YACF,IAAI,gBAAgB,EAAE,CAAC;gBACrB,iBAAiB,IAAI,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,CAAA;IACb,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;AACtC,CAAC"}

package/dist/sync/remint.d.ts

@@ -1,44 +1,48 @@
 import type { DocCipher, Json, SyncStore } from './types.js';
 /**
- * Re-mints every pending (dirty, never-acked, live) row whose envelope the
- * given cipher cannot route to an epoch it knows -- the create-loss path for
- * an eager minter, run after adopting a published descriptor this client did
- * not install itself (`ensureWalletSpaceEpochs` returning an adopted
- * descriptor for a collection it had already minted against; the envelope, not
- * the `installed` flag, decides per row) and before the next push.
+ * Re-mints every pending (dirty, never-acked, live) resource replica whose
+ * envelope the given cipher cannot route to an epoch it knows -- the
+ * create-loss path for an eager minter, run after adopting a published
+ * descriptor this client did not install itself (`ensureWalletSpaceEpochs`
+ * returning an adopted descriptor for a collection it had already minted
+ * against; the envelope, not the `installed` flag, decides per resource
+ * replica) and before the next push.
  *
- * Each such row is decrypted through `decryptStale` (the pre-adoption cipher,
- * or a plaintext-projection read keyed by the row id), re-encrypted with
- * `cipher` (built from the adopted descriptor, so under its current epoch),
- * and handed to {@link SyncStore.replacePending} -- which may re-key the row,
- * since the re-mint is a fresh encryption. Rows already readable under the
- * adopted descriptor, acked rows (`version > 0` -- they HAVE feed existence
- * and are never re-minted), and tombstones are left untouched.
+ * Each such resource replica is decrypted through `decryptStale` (the
+ * pre-adoption cipher, or a plaintext-projection read keyed by the resource
+ * replica id), re-encrypted with `cipher` (built from the adopted descriptor,
+ * so under its current epoch), and handed to {@link SyncStore.replacePending}
+ * -- which may re-key the resource replica, since the re-mint is a fresh
+ * encryption. Resource replicas already readable under the adopted descriptor,
+ * acked resource replicas (`version > 0` -- they HAVE feed existence and are
+ * never re-minted), and tombstones are left untouched.
  *
  * Two decrypt failures are told apart. An unknown epoch is the create-loss
- * shape this helper exists for, and the row is re-minted. An addressing
- * refusal (was-client's `IntegrityError`: the envelope is sealed for some
- * other resource id, the shape a row minted by a pre-addressed writer has) is
- * left where it is, logged once, and the pass moves to the next row -- the
- * row is not this helper's to settle, and aborting the pass over it would
- * strand every other pending row under the losing epoch and block the
- * adoption from ever completing. Any other decrypt failure still propagates.
+ * shape this helper exists for, and the resource replica is re-minted. An
+ * addressing refusal (was-client's `IntegrityError`: the envelope is sealed for
+ * some other resource id, the shape a resource replica minted by a
+ * pre-addressed writer has) is left where it is, logged once, and the pass
+ * moves to the next resource replica -- the resource replica is not this
+ * helper's to settle, and aborting the pass over it would strand every other
+ * pending resource replica under the losing epoch and block the adoption from
+ * ever completing. Any other decrypt failure still propagates.
  *
  * A replace the store SKIPS (`{ applied: false }` -- a local write bumped the
- * row's revision between the snapshot and the replace, so the row now holds a
- * body this pass never saw) is not counted as re-minted: the whole pass
- * re-snapshots and re-probes, settling the row under its fresh revision. Only
- * rows still unroutable are re-processed; the retry is bounded by
- * {@link MAX_REMINT_ATTEMPTS}, and a pass that exhausts the bound throws
- * rather than returning -- a row left sealed under the losing epoch MUST NOT
- * be pushed, since it would land on the feed as a permanently unroutable
- * entry.
+ * resource replica's revision between the snapshot and the replace, so the
+ * resource replica now holds a body this pass never saw) is not counted as
+ * re-minted: the whole pass re-snapshots and re-probes, settling the resource
+ * replica under its fresh revision. Only resource replicas still unroutable are
+ * re-processed; the retry is bounded by {@link MAX_REMINT_ATTEMPTS}, and a pass
+ * that exhausts the bound throws rather than returning -- a resource replica
+ * left sealed under the losing epoch MUST NOT be pushed, since it would land on
+ * the feed as a permanently unroutable entry.
  *
  * The store parameter is narrowed to one that implements `replacePending`
  * (optional on {@link SyncStore} itself, since a lazy-minting consumer never
  * re-mints): the requirement is a compile-time one, not a runtime throw.
  *
- * Idempotent: a re-run finds the re-minted rows readable and does nothing.
+ * Idempotent: a re-run finds the re-minted resource replicas readable and does
+ * nothing.
  *
  * @param options {object}
  * @param options.store {SyncStore}   must implement `replacePending`
@@ -46,11 +50,11 @@ import type { DocCipher, Json, SyncStore } from './types.js';
  *   descriptor
  * @param options.decryptStale {function}   opens envelopes minted before the
  *   adoption; receives `{ id, envelope }` so a projection-backed caller can
- *   look the plaintext up by row id instead of decrypting
- * @param [options.signal] {AbortSignal}   checked between rows
+ *   look the plaintext up by resource replica id instead of decrypting
+ * @param [options.signal] {AbortSignal}   checked between resource replicas
  * @returns {Promise<{ pending: number; reminted: number }>}   pending live
- *   rows the first pass scanned, and how many rows were re-minted (applied
- *   replaces only, across all passes)
+ *   resource replicas the first pass scanned, and how many were re-minted
+ *   (applied replaces only, across all passes)
  */
 export declare function remintPendingEnvelopes({ store, cipher, decryptStale, signal }: {
     store: SyncStore & {

package/dist/sync/remint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remint.d.ts","sourceRoot":"","sources":["../../src/sync/remint.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAU5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,KAAK,EACL,MAAM,EACN,YAAY,EACZ,MAAM,EACP,EAAE;IACD,KAAK,EAAE,SAAS,GAAG;QACjB,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAA;KACzD,CAAA;IACD,MAAM,EAAE,SAAS,CAAA;IACjB,YAAY,EAAE,CAAC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACxE,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA2EjD"}
+{"version":3,"file":"remint.d.ts","sourceRoot":"","sources":["../../src/sync/remint.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAW5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,KAAK,EACL,MAAM,EACN,YAAY,EACZ,MAAM,EACP,EAAE;IACD,KAAK,EAAE,SAAS,GAAG;QACjB,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAA;KACzD,CAAA;IACD,MAAM,EAAE,SAAS,CAAA;IACjB,YAAY,EAAE,CAAC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACxE,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAgFjD"}