@mdbase-dev/connect 0.1.0-beta.110 → 0.1.0-beta.112

package/dist/browser/mdbase-connect.min.js.sha384

@@ -1 +1 @@
-sha384-87GfQ8HHeR0B68yJLi01ycH5DHMGUf0jbXDsLhhpaYD8jpF/qvol4yQtP7hdPExh
+sha384-uKL9FxAY8Ji2mQSA44JTIIarA2CnPGN3EFC4jxk1Kx+OfDsPbFr2J+iwlH/p77Qz

package/dist/connection-transport.d.ts

@@ -34,6 +34,8 @@ export declare class ConnectionTransport {
     disableDirectAccess(): void;
     /** Return pending writes without exposing authority transport credentials. */
     pendingMutations(): readonly PendingMutationSummary[];
+    /** The request ID of an interrupted update to one record, if any. */
+    pendingUpdate(path: string): Promise<string | null>;
     pendingMutation(requestId: string): PendingMutationSummary | null;
     recoverPendingMutation<Result>(requestId: string, options?: ConnectRequestOptions): Promise<Result>;
     performOperation<Result>(operation: CollectionOperation, input: unknown, options?: ConnectRequestOptions): Promise<Result>;

package/dist/connection-transport.js

@@ -1,3 +1,4 @@
+import { interruptedUpdate, updatedRecordDigest } from "./record-digest.js";
 import { OPERATION_TRANSPORT_PROTOCOL_VERSION, isConnectProblem, mutationOperationIdentifier } from "@mdbase-dev/connect-protocol";
 import { decryptRelayResponse, encryptRelayRequest, RelayCryptoError } from "./crypto.js";
 import { MdbaseConnectError, connectError, serverConnectError } from "./errors.js";
@@ -5,7 +6,7 @@ import { ConnectionFileTransport } from "./connection-file-transport.js";
 import { authorityProofHeaders } from "./authority-proof.js";
 import { performAuthorizationRefresh } from "./authorization-refresh.js";
 import { PendingMutationStore } from "./pending-mutation-store.js";
-import { directFallbackStatus, encryptedOperationError, fetchOperationRequest, isMutation, localNetworkPermission, loopbackRequest, operationFingerprint, operationTransportError, sameAuthorization, throwIfCancelled, unknownMutationOutcome, withOperationDeadline } from "./operation-helpers.js";
+import { directFallbackResponse, encryptedOperationError, fetchOperationRequest, isMutation, localNetworkPermission, loopbackRequest, operationFingerprint, operationTransportError, sameAuthorization, throwIfCancelled, unknownMutationOutcome, withOperationDeadline } from "./operation-helpers.js";
 import { apiError, decodeJsonResponse, parseStored, } from "./runtime-utils.js";
 import { readStoredToken } from "./stored-token.js";
 import { requestOptionsWithinBudget, withCooperativeRequestBudget, withRequestBudget } from "./request-budget.js";
@@ -108,23 +109,16 @@ export class ConnectionTransport {
     }
     /** Return pending writes without exposing authority transport credentials. */
     pendingMutations() {
-        return this.storedPendingMutations().map((pending) => ({
-            requestId: pending.requestId,
-            operation: this.pendingMutationStore.identifier(pending),
-            fingerprint: pending.inputFingerprint,
-            status: "outcome_unknown",
-            createdAt: new Date(pending.createdAt).toISOString()
-        }));
+        return this.storedPendingMutations().map((pending) => this.pendingMutationStore.summary(pending));
+    }
+    /** The request ID of an interrupted update to one record, if any. */
+    async pendingUpdate(path) {
+        const collectionId = this.currentToken()?.collectionId;
+        return collectionId ? interruptedUpdate(this.storedPendingMutations(), collectionId, path) : null;
     }
     pendingMutation(requestId) {
         const pending = this.storedPendingMutation(requestId);
-        return pending ? {
-            requestId: pending.requestId,
-            operation: this.pendingMutationStore.identifier(pending),
-            fingerprint: pending.inputFingerprint,
-            status: "outcome_unknown",
-            createdAt: new Date(pending.createdAt).toISOString()
-        } : null;
+        return pending ? this.pendingMutationStore.summary(pending) : null;
     }
     async recoverPendingMutation(requestId, options) {
         const pending = this.storedPendingMutation(requestId);
@@ -372,10 +366,13 @@ export class ConnectionTransport {
         let requestId = pendingRequestId ?? crypto.randomUUID();
         let pending = null;
         let inputFingerprint;
+        let updatedRecord;
         if (pendingRequestId !== undefined) {
             pending = this.storedPendingMutation(pendingRequestId);
             inputFingerprint = pending?.inputFingerprint
                 ?? await operationFingerprint(operation, input);
+            if (!pending)
+                updatedRecord = await updatedRecordDigest(token.collectionId, operation, input);
             if (pending) {
                 if (pending.collectionId !== token.collectionId
                     || pending.operation !== operation
@@ -420,6 +417,7 @@ export class ConnectionTransport {
                             operation,
                             mutation: mutation,
                             inputFingerprint: inputFingerprint,
+                            ...(updatedRecord ? { recordDigest: updatedRecord } : {}),
                             requestId,
                             envelope: encryptedRequest,
                             createdAt: Date.now()
@@ -452,6 +450,7 @@ export class ConnectionTransport {
                     operation,
                     mutation: mutation,
                     inputFingerprint: inputFingerprint,
+                    ...(updatedRecord ? { recordDigest: updatedRecord } : {}),
                     requestId,
                     request,
                     createdAt: Date.now()
@@ -467,7 +466,7 @@ export class ConnectionTransport {
                     body: JSON.stringify(encryptedRequest),
                     signal: options.signal
                 }));
-                if (!directFallbackStatus(response.status)
+                if (!await directFallbackResponse(response)
                     || await isExplicitConnectorBusyResponse(response)) {
                     if (response.ok) {
                         this.markDirectAvailable();
@@ -603,9 +602,15 @@ export class ConnectionTransport {
     }
     async probeDirectAccess(signal) {
         this.setDirectStatus("checking");
-        if (await probeLoopbackAccess(this.loopbackUrl, OPERATION_TRANSPORT_PROTOCOL_VERSION, signal)) {
-            this.markDirectAvailable();
-            return "available";
+        try {
+            if (await probeLoopbackAccess(this.loopbackUrl, OPERATION_TRANSPORT_PROTOCOL_VERSION, signal)) {
+                this.markDirectAvailable();
+                return "available";
+            }
+        }
+        catch (error) {
+            this.markDirectUnavailable();
+            throw error;
         }
         if ((await localNetworkPermission()) === "denied")
             return this.setDirectStatus("denied");

package/dist/connection.d.ts

@@ -4,6 +4,7 @@ import { type ConnectionTransportInternals } from "./connection-transport.js";
 import type { DirectAccessStatus, MdbaseAuthorizationCapabilities, MdbaseConnectionInfo, MdbaseConnectionRoute, MdbaseSyncConnection } from "./connection-types.js";
 import type { GrantKeyStore } from "./crypto.js";
 import { MdbaseFileClient } from "./files.js";
+import { MdbaseRecords } from "./records.js";
 import { type Application } from "./internal-types.js";
 import type { MdbaseNativeNotificationRegistration, MdbaseNativeNotificationRegistrationOptions, MdbaseNotificationRegistration, MdbaseNotificationRegistrationOptions } from "./notifications.js";
 import type { ChangesInput, CollectionChangesPage, CollectionDescription, CollectionSetupApplyResult, CollectionSetupAssessment, ApplyCollectionSetupInput, ApplyTypePackInput, AssessCollectionSetupInput, AssessTypePackInput, CreateInput, CreateTypeInput, CreateViewSourceInput, DeleteInput, DeletePreflightResult, DeleteProgressOptions, DeleteResult, DeleteViewSourceInput, DeleteViewSourceResult, ExecuteViewInput, MdbaseDesiredTimer, MdbaseTimer, MdbaseTimerList, MdbaseTimerReconciliation, ConnectRequestOptions, PendingMutation, QueryAllOptions, QueryInput, QueryPage, QueryPagesOptions, QueryResult, ReadInput, ReadTypeInput, ReadViewSourceInput, RenameInput, RenamePreflightResult, RenameProgressOptions, RenameResult, RecordDocument, SavedViewExecution, SavedViewPage, SavedViewPagesOptions, SavedViewList, SavedViewSourceDocument, TypePackApplyResult, TypePackAssessment, UpdateInput, UpdateTypeInput, UpdateViewSourceInput, MdbaseWatchSubscription, WatchInput } from "./operation-types.js";
@@ -74,6 +75,8 @@ export declare class MdbaseConnection<Frontmatter extends JsonObject = JsonObjec
     private readonly notifications;
     private readonly transport;
     readonly files: MdbaseFileClient;
+    /** Editable record sessions shared by every view of this connection. */
+    readonly records: MdbaseRecords<Frontmatter>;
     private readonly connectionListeners;
     constructor(internals: MdbaseConnectionInternals<Frontmatter>, collectionId: string);
     get displayName(): string;

package/dist/connection.js

@@ -5,6 +5,7 @@ import { ConnectionNotifications } from "./connection-notifications.js";
 import { ConnectionTransport } from "./connection-transport.js";
 import { MdbaseConnectError, connectProblem, operationProblem } from "./errors.js";
 import { MdbaseFileClient } from "./files.js";
+import { MdbaseRecords } from "./records.js";
 import { DEFAULT_OPERATIONS } from "./internal-types.js";
 import { assertDeletePreview, assertRenamePreview, deleteEstimate, isCancellation, renameEstimate, throwIfCancelled, uniqueOperations } from "./operation-helpers.js";
 import { AUTHORIZATION_PROBLEM_CODES, COLLECTION_CHANGES_PROBLEM_CODES, COLLECTION_MUTATION_PROBLEM_CODES, DIRECT_ACCESS_PROBLEM_CODES, NOTIFICATION_PROBLEM_CODES, REGISTRATION_PROBLEM_CODES, captureConnectOutcome, connectFailure, connectSuccess } from "./outcomes.js";
@@ -17,6 +18,8 @@ export class MdbaseConnection {
     notifications;
     transport;
     files;
+    /** Editable record sessions shared by every view of this connection. */
+    records;
     connectionListeners = new Set();
     constructor(internals, collectionId) {
         this.internals = internals;
@@ -38,6 +41,7 @@ export class MdbaseConnection {
         }, {
             downloadPart: (session, partIndex, expectedLength, signal) => this.transport.files.downloadHostedPart(session, partIndex, expectedLength, signal)
         }, internals.timeouts);
+        this.records = new MdbaseRecords(this, (path) => this.transport.pendingUpdate(path));
         this.collectionClient = new MdbaseCollectionClient(new CollectionRequestCoordinator({
             operation: (operation, input, requestOptions) => this.transport.performOperation(operation, input, requestOptions)
         }, internals.timeouts.requestMs), internals.timeouts.requestMs);

package/dist/crypto.js

@@ -1,4 +1,5 @@
 import { OPERATION_TRANSPORT_PROTOCOL_VERSION, GRANT_ENCRYPTION_PROTOCOL_VERSION, AUTHORITY_PROOF_DOMAIN, AUTHORITY_PROOF_HEADERS, AUTHORITY_PROOF_VERSION, RELAY_ENCRYPTION_SUITE, isConnectProblem } from "@mdbase-dev/connect-protocol";
+import { base64UrlBytes, bytesToBase64Url } from "./base64.js";
 const DATABASE_NAME = "mdbase-connect-keys";
 const STORE_NAME = "grant-keys";
 const MAX_U64 = 18446744073709551615n;
@@ -206,7 +207,7 @@ export async function decryptRelayResponse(store, handle, binding, request, resp
             iv: nonce(request.counter),
             additionalData: new TextEncoder().encode(aad(metadata, "response")),
             tagLength: 128
-        }, key, toArrayBuffer(base64UrlToBytes(response.ciphertext)));
+        }, key, base64UrlToBytes(response.ciphertext));
         const value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(plaintext));
         if (value?.ok === true && "result" in value)
             return value;
@@ -364,12 +365,6 @@ function nonce(counter) {
     view.setBigUint64(4, value, false);
     return result;
 }
-function bytesToBase64Url(bytes) {
-    let binary = "";
-    for (const byte of bytes)
-        binary += String.fromCharCode(byte);
-    return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
-}
 async function sha256Base64Url(value) {
     const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(value));
     return bytesToBase64Url(new Uint8Array(digest));
@@ -377,9 +372,7 @@ async function sha256Base64Url(value) {
 function base64UrlToBytes(value) {
     if (!/^[A-Za-z0-9_-]+$/.test(value))
         throw new RelayCryptoError("invalid_base64", "Encrypted relay data is malformed.");
-    const padding = "=".repeat((4 - value.length % 4) % 4);
-    const binary = atob(value.replaceAll("-", "+").replaceAll("_", "/") + padding);
-    return Uint8Array.from(binary, (character) => character.charCodeAt(0));
+    return base64UrlBytes(value);
 }
 function p256PublicKey(value) {
     const bytes = base64UrlToBytes(value);

package/dist/direct-access.js

@@ -1,5 +1,6 @@
 import { loopbackRequest } from "./operation-helpers.js";
-import { decodeJsonResponse } from "./runtime-utils.js";
+import { decodeJsonResponse, portableApplicationOrigin } from "./runtime-utils.js";
+import { serverConnectError } from "./errors.js";
 export function tokenSupportsDirectAccess(token, mode) {
     if (!token || token.authority || !token.encryption || !token.grantId || !token.keyHandle) {
         return false;
@@ -8,22 +9,26 @@ export function tokenSupportsDirectAccess(token, mode) {
         return false;
     return typeof location === "undefined"
         || !token.applicationOrigin
-        || token.applicationOrigin === location.origin;
+        || token.applicationOrigin === portableApplicationOrigin();
 }
 export async function probeLoopbackAccess(loopbackUrl, expectedOperationProtocol, signal) {
+    let response;
     try {
-        const response = await fetch(`${loopbackUrl}/v1/ready`, loopbackRequest({
+        response = await fetch(`${loopbackUrl}/v1/ready`, loopbackRequest({
             method: "GET",
             cache: "no-store",
             signal
         }));
-        const body = await decodeJsonResponse(response, "invalid_operation_response", "The connector returned an invalid readiness response.").catch(() => null);
-        return response.ok
-            && body?.service === "mdbase-connect"
-            && body?.loopback_protocol_version === 1
-            && body?.operation_transport_protocol_version === expectedOperationProtocol;
     }
     catch {
         return false;
     }
+    if (response.status === 403) {
+        throw serverConnectError("operation_failed", "The connector rejected direct access from this application. Relay access remains available.", { status: response.status });
+    }
+    const body = await decodeJsonResponse(response, "invalid_operation_response", "The connector returned an invalid readiness response.").catch(() => null);
+    return response.ok
+        && body?.service === "mdbase-connect"
+        && body?.loopback_protocol_version === 1
+        && body?.operation_transport_protocol_version === expectedOperationProtocol;
 }

package/dist/errors.d.ts

@@ -39,7 +39,7 @@ export declare function serverConnectError(serverCode: string, message: string,
     status?: number;
     cause?: unknown;
 }): MdbaseConnectError;
-export declare function operationProblem<Result>(envelope: MdbaseOperationEnvelope<Result>): KnownConnectProblem<"collection_configuration_invalid" | "collection_invalid" | "collection_type_registry_invalid" | "collection_version_unsupported" | "operation_invalid">;
+export declare function operationProblem<Result>(envelope: MdbaseOperationEnvelope<Result>): KnownConnectProblem<"collection_configuration_invalid" | "collection_invalid" | "collection_type_registry_invalid" | "collection_version_unsupported" | "concurrent_modification" | "file_not_found" | "invalid_path" | "operation_invalid">;
 /** True only when repeating an operation is safe without asking the user. */
 export declare function isRetryableConnectError(error: unknown): boolean;
 export {};

package/dist/errors.js

@@ -68,6 +68,11 @@ export function serverConnectError(serverCode, message, options = {}) {
 export function operationProblem(envelope) {
     const code = diagnosticProblemCode(envelope.diagnostics);
     const message = diagnosticMessage(envelope.diagnostics);
+    // mdbase reports these record conditions as diagnostics; hosted authorities
+    // report them as problems. Surface one code for both.
+    if (code === "concurrent_modification" || code === "file_not_found" || code === "invalid_path") {
+        return connectProblem(code, message, { operationOutcome: "rejected" });
+    }
     if (code === "collection_version_unsupported") {
         const versions = diagnosticVersions(envelope.diagnostics);
         return connectProblem(code, message, {
@@ -110,6 +115,10 @@ function diagnosticProblemCode(diagnostics) {
     if (["collection_invalid", "collection_open_failed"]
         .some((code) => codes.has(code)))
         return "collection_invalid";
+    for (const code of ["concurrent_modification", "file_not_found", "invalid_path"]) {
+        if (codes.has(code))
+            return code;
+    }
     return "operation_invalid";
 }
 function diagnosticVersions(diagnostics) {

package/dist/index.d.ts

@@ -11,6 +11,10 @@ export type { MdbaseCapabilityState, MdbaseCapabilityEvidence, MdbaseEffectiveCa
 export { MdbaseConnectError, isRetryableConnectError } from "./errors.js";
 export type { ConnectErrorContext } from "./errors.js";
 export { MdbaseFileClient } from "./files.js";
+export { MdbaseRecords } from "./records.js";
+export type { MdbaseRecordLease, MdbaseRecordOpenOptions } from "./records.js";
+export { MdbaseRecordSession } from "./record-session.js";
+export type { MdbaseRecordResolution, MdbaseRecordSessionOptions, MdbaseRecordSessionSnapshot, MdbaseRecordSessionState } from "./record-session.js";
 export type { MdbaseFileSource, CollectionFileDescriptor, MdbaseFileDeleteReceipt, MdbaseFileStreamSource, MdbaseFileProgress, MdbaseFileListOptions, MdbaseFileUploadOptions, MdbaseFileStreamUploadOptions, MdbaseFileDownloadOptions, MdbaseFileMoveOptions, MdbaseFileDeleteOptions } from "./files.js";
 export { parseMdbasePushPayload, parseMdbaseNativeNotificationData, showMdbasePushNotification } from "./notifications.js";
 export type { MdbaseNotificationRegistrationOptions, MdbaseNotificationRegistration, MdbaseNativeNotificationRegistrationOptions, MdbaseNativeNotificationRegistration, MdbaseNativeNotificationData, MdbasePushPayload } from "./notifications.js";

package/dist/index.js

@@ -4,6 +4,8 @@ export { MdbaseConnection } from "./connection.js";
 export { effectiveCapabilities } from "./capabilities.js";
 export { MdbaseConnectError, isRetryableConnectError } from "./errors.js";
 export { MdbaseFileClient } from "./files.js";
+export { MdbaseRecords } from "./records.js";
+export { MdbaseRecordSession } from "./record-session.js";
 export { parseMdbasePushPayload, parseMdbaseNativeNotificationData, showMdbasePushNotification } from "./notifications.js";
 export { externalStore } from "./external-store.js";
 export { MdbaseBrowserSelection, MdbaseMemorySelection } from "./selection.js";

package/dist/internal-types.d.ts

@@ -82,6 +82,8 @@ export interface PendingMutation {
     operation: CollectionOperation;
     mutation?: MutationOperationIdentifier;
     inputFingerprint: string;
+    /** `recordDigest(collectionId, path)` of an update's record, never the path itself. */
+    recordDigest?: string;
     requestId: string;
     envelope?: EncryptedRelayOperationRequest;
     /** Exact plaintext protocol request for transports that do not use a grant envelope. */

package/dist/local-file-transport.js

@@ -3,7 +3,7 @@ import { decryptRelayResponse, encryptRelayRequest } from "./crypto.js";
 import { MdbaseConnectError, connectError, serverConnectError } from "./errors.js";
 import { GrantFileTransferCipher } from "./file-crypto.js";
 import { GrantKeyLeaseSet, retainCurrentGrantToken } from "./grant-key-leases.js";
-import { directFallbackStatus, loopbackRequest } from "./operation-helpers.js";
+import { directFallbackResponse, loopbackRequest } from "./operation-helpers.js";
 import { apiError, decodeJsonResponse } from "./runtime-utils.js";
 import { isConnectorBusy, isExplicitConnectorBusyResponse, MAX_CONNECTOR_BUSY_RETRIES, waitForConnectorAvailability } from "./transient-retry.js";
 /** Keeps grant-bound file crypto and loopback framing out of the operation transport. */
@@ -42,7 +42,7 @@ export class LocalFileTransport {
                     throw error;
                 this.options.onDirectUnavailable();
             }
-            if (response && (!directFallbackStatus(response.status)
+            if (response && (!await directFallbackResponse(response)
                 || await isExplicitConnectorBusyResponse(response))) {
                 if (response.ok)
                     this.options.onDirectAvailable();
@@ -134,7 +134,7 @@ export class LocalFileTransport {
                     throw error;
                 this.options.onDirectUnavailable();
             }
-            if (response && (!directFallbackStatus(response.status)
+            if (response && (!await directFallbackResponse(response)
                 || await isExplicitConnectorBusyResponse(response))) {
                 if (response.ok)
                     this.options.onDirectAvailable();
@@ -180,7 +180,7 @@ export class LocalFileTransport {
                     throw error;
                 this.options.onDirectUnavailable();
             }
-            if (response && (!directFallbackStatus(response.status)
+            if (response && (!await directFallbackResponse(response)
                 || await isExplicitConnectorBusyResponse(response))) {
                 if (response.ok)
                     this.options.onDirectAvailable();

package/dist/operation-helpers.d.ts

@@ -7,7 +7,7 @@ export type LoopbackRequestInit = RequestInit & {
 };
 export declare function loopbackRequest(init: RequestInit): LoopbackRequestInit;
 export declare function localNetworkPermission(): Promise<PermissionState | null>;
-export declare function directFallbackStatus(status: number): boolean;
+export declare function directFallbackResponse(response: Response): Promise<boolean>;
 export declare function isMutation(operation: CollectionOperation, input?: unknown): boolean;
 export declare function withOperationDeadline(request: EncryptedRelayOperationRequest, deadlineUnixMs?: number): EncryptedRelayOperationRequest;
 export declare function uniqueOperations(operations: CollectionOperation[]): CollectionOperation[];

package/dist/operation-helpers.js

@@ -16,8 +16,13 @@ export async function localNetworkPermission() {
         return null;
     }
 }
-export function directFallbackStatus(status) {
-    return status === 404 || status === 405 || status === 426 || status >= 500;
+export async function directFallbackResponse(response) {
+    const { status } = response;
+    if (status === 404 || status === 405 || status === 426 || status >= 500)
+        return true;
+    // Loopback rejects browser requests before execution with an empty 403.
+    // Structured grant/policy rejections must remain terminal, not route failures.
+    return status === 403 && (await response.clone().text()).trim() === "";
 }
 export function isMutation(operation, input) {
     return isMutatingOperation(operation, input);

package/dist/outcomes.d.ts

@@ -28,18 +28,18 @@ export type SessionProblemCode = AuthorizationProblemCode | "collection_not_read
 export declare const SESSION_PROBLEM_CODES: readonly ["discovery_failed", "invalid_operation_response", "invalid_application_manifest", "invalid_request", "manifest_load_failed", "rate_limited", "temporarily_unavailable", "timeout", "access_denied", "application_declaration_mismatch", "application_identity_unavailable", "approval_window_blocked", "authorization_binding_incompatible", "authorization_cancelled", "authorization_replayed", "browser_required", "capability_contract_incompatible", "collection_access_denied", "collection_configuration_invalid", "collection_contracts_missing", "collection_incompatible", "collection_invalid", "collection_kind_unsupported", "collection_mismatch", "collection_not_found", "collection_type_registry_invalid", "collection_version_unsupported", "connector_identity_changed", "connector_offline", "connector_upgrade_required", "device_authorization_failed", "durable_mutation_unsupported", "encryption_required", "expired_token", "invalid_application_authorization", "invalid_callback", "invalid_device_authorization_response", "invalid_token_response", "legacy_scope_reauthorization_required", "scope_denied", "reconnect_required", "token_exchange_failed", "transport_protocol_incompatible", "collection_not_ready", "collection_not_selected", "operation_cancelled", "session_destroyed", "session_not_started", "session_starting", "unknown_collection"];
 export type CollectionSetupProblemCode = "collection_configuration_invalid" | "collection_invalid" | "collection_type_registry_invalid" | "collection_version_unsupported";
 export type CollectionDescriptionProblemCode = CommonOperationProblemCode | CollectionSetupProblemCode;
-export type CollectionReadProblemCode = CollectionDescriptionProblemCode | "invalid_path" | "operation_invalid";
+export type CollectionReadProblemCode = CollectionDescriptionProblemCode | "file_not_found" | "invalid_path" | "operation_invalid";
 export type CollectionQueryProblemCode = CollectionReadProblemCode | "cursor_capacity_exhausted" | "generation_expired" | "invalid_read_cursor" | "query_snapshot_changed" | "sandbox_unsupported";
 export type CollectionMutationProblemCode = CollectionReadProblemCode | "concurrent_modification" | "invalid_preflight" | "pending_mutation_unresolved";
 export type CollectionChangesProblemCode = CollectionDescriptionProblemCode | "change_cursor_reset";
 export type CollectionTypeProblemCode = CollectionMutationProblemCode | "type_pack_provision_failed";
 export declare const COLLECTION_SETUP_PROBLEM_CODES: readonly ["collection_configuration_invalid", "collection_invalid", "collection_type_registry_invalid", "collection_version_unsupported"];
 export declare const COLLECTION_DESCRIPTION_PROBLEM_CODES: readonly ["access_denied", "access_paused", "application_declaration_mismatch", "authorization_binding_incompatible", "authorization_expired", "capability_contract_incompatible", "collection_access_denied", "connector_identity_changed", "connector_offline", "connector_upgrade_required", "direct_operation_rejected", "durable_mutation_unsupported", "operation_outcome_unknown", "encryption_required", "encrypted_relay_rejected", "hosted_provider_unavailable", "insufficient_access", "invalid_encrypted_response", "invalid_operation_response", "invalid_request", "missing_grant_key", "mutation_recovery_expired", "mutation_request_conflict", "not_authorized", "operation_cancelled", "operation_failed", "rate_limited", "relay_authorization_expired", "relay_unavailable", "temporarily_unavailable", "timeout", "transport_protocol_incompatible", "unsupported_operation", "collection_configuration_invalid", "collection_invalid", "collection_type_registry_invalid", "collection_version_unsupported"];
-export declare const COLLECTION_READ_PROBLEM_CODES: readonly ["access_denied", "access_paused", "application_declaration_mismatch", "authorization_binding_incompatible", "authorization_expired", "capability_contract_incompatible", "collection_access_denied", "connector_identity_changed", "connector_offline", "connector_upgrade_required", "direct_operation_rejected", "durable_mutation_unsupported", "operation_outcome_unknown", "encryption_required", "encrypted_relay_rejected", "hosted_provider_unavailable", "insufficient_access", "invalid_encrypted_response", "invalid_operation_response", "invalid_request", "missing_grant_key", "mutation_recovery_expired", "mutation_request_conflict", "not_authorized", "operation_cancelled", "operation_failed", "rate_limited", "relay_authorization_expired", "relay_unavailable", "temporarily_unavailable", "timeout", "transport_protocol_incompatible", "unsupported_operation", "collection_configuration_invalid", "collection_invalid", "collection_type_registry_invalid", "collection_version_unsupported", "invalid_path", "operation_invalid"];
-export declare const COLLECTION_QUERY_PROBLEM_CODES: readonly ["access_denied", "access_paused", "application_declaration_mismatch", "authorization_binding_incompatible", "authorization_expired", "capability_contract_incompatible", "collection_access_denied", "connector_identity_changed", "connector_offline", "connector_upgrade_required", "direct_operation_rejected", "durable_mutation_unsupported", "operation_outcome_unknown", "encryption_required", "encrypted_relay_rejected", "hosted_provider_unavailable", "insufficient_access", "invalid_encrypted_response", "invalid_operation_response", "invalid_request", "missing_grant_key", "mutation_recovery_expired", "mutation_request_conflict", "not_authorized", "operation_cancelled", "operation_failed", "rate_limited", "relay_authorization_expired", "relay_unavailable", "temporarily_unavailable", "timeout", "transport_protocol_incompatible", "unsupported_operation", "collection_configuration_invalid", "collection_invalid", "collection_type_registry_invalid", "collection_version_unsupported", "invalid_path", "operation_invalid", "cursor_capacity_exhausted", "generation_expired", "invalid_read_cursor", "query_snapshot_changed", "sandbox_unsupported"];
-export declare const COLLECTION_MUTATION_PROBLEM_CODES: readonly ["access_denied", "access_paused", "application_declaration_mismatch", "authorization_binding_incompatible", "authorization_expired", "capability_contract_incompatible", "collection_access_denied", "connector_identity_changed", "connector_offline", "connector_upgrade_required", "direct_operation_rejected", "durable_mutation_unsupported", "operation_outcome_unknown", "encryption_required", "encrypted_relay_rejected", "hosted_provider_unavailable", "insufficient_access", "invalid_encrypted_response", "invalid_operation_response", "invalid_request", "missing_grant_key", "mutation_recovery_expired", "mutation_request_conflict", "not_authorized", "operation_cancelled", "operation_failed", "rate_limited", "relay_authorization_expired", "relay_unavailable", "temporarily_unavailable", "timeout", "transport_protocol_incompatible", "unsupported_operation", "collection_configuration_invalid", "collection_invalid", "collection_type_registry_invalid", "collection_version_unsupported", "invalid_path", "operation_invalid", "concurrent_modification", "invalid_preflight", "pending_mutation_unresolved"];
+export declare const COLLECTION_READ_PROBLEM_CODES: readonly ["access_denied", "access_paused", "application_declaration_mismatch", "authorization_binding_incompatible", "authorization_expired", "capability_contract_incompatible", "collection_access_denied", "connector_identity_changed", "connector_offline", "connector_upgrade_required", "direct_operation_rejected", "durable_mutation_unsupported", "operation_outcome_unknown", "encryption_required", "encrypted_relay_rejected", "hosted_provider_unavailable", "insufficient_access", "invalid_encrypted_response", "invalid_operation_response", "invalid_request", "missing_grant_key", "mutation_recovery_expired", "mutation_request_conflict", "not_authorized", "operation_cancelled", "operation_failed", "rate_limited", "relay_authorization_expired", "relay_unavailable", "temporarily_unavailable", "timeout", "transport_protocol_incompatible", "unsupported_operation", "collection_configuration_invalid", "collection_invalid", "collection_type_registry_invalid", "collection_version_unsupported", "file_not_found", "invalid_path", "operation_invalid"];
+export declare const COLLECTION_QUERY_PROBLEM_CODES: readonly ["access_denied", "access_paused", "application_declaration_mismatch", "authorization_binding_incompatible", "authorization_expired", "capability_contract_incompatible", "collection_access_denied", "connector_identity_changed", "connector_offline", "connector_upgrade_required", "direct_operation_rejected", "durable_mutation_unsupported", "operation_outcome_unknown", "encryption_required", "encrypted_relay_rejected", "hosted_provider_unavailable", "insufficient_access", "invalid_encrypted_response", "invalid_operation_response", "invalid_request", "missing_grant_key", "mutation_recovery_expired", "mutation_request_conflict", "not_authorized", "operation_cancelled", "operation_failed", "rate_limited", "relay_authorization_expired", "relay_unavailable", "temporarily_unavailable", "timeout", "transport_protocol_incompatible", "unsupported_operation", "collection_configuration_invalid", "collection_invalid", "collection_type_registry_invalid", "collection_version_unsupported", "file_not_found", "invalid_path", "operation_invalid", "cursor_capacity_exhausted", "generation_expired", "invalid_read_cursor", "query_snapshot_changed", "sandbox_unsupported"];
+export declare const COLLECTION_MUTATION_PROBLEM_CODES: readonly ["access_denied", "access_paused", "application_declaration_mismatch", "authorization_binding_incompatible", "authorization_expired", "capability_contract_incompatible", "collection_access_denied", "connector_identity_changed", "connector_offline", "connector_upgrade_required", "direct_operation_rejected", "durable_mutation_unsupported", "operation_outcome_unknown", "encryption_required", "encrypted_relay_rejected", "hosted_provider_unavailable", "insufficient_access", "invalid_encrypted_response", "invalid_operation_response", "invalid_request", "missing_grant_key", "mutation_recovery_expired", "mutation_request_conflict", "not_authorized", "operation_cancelled", "operation_failed", "rate_limited", "relay_authorization_expired", "relay_unavailable", "temporarily_unavailable", "timeout", "transport_protocol_incompatible", "unsupported_operation", "collection_configuration_invalid", "collection_invalid", "collection_type_registry_invalid", "collection_version_unsupported", "file_not_found", "invalid_path", "operation_invalid", "concurrent_modification", "invalid_preflight", "pending_mutation_unresolved"];
 export declare const COLLECTION_CHANGES_PROBLEM_CODES: readonly ["access_denied", "access_paused", "application_declaration_mismatch", "authorization_binding_incompatible", "authorization_expired", "capability_contract_incompatible", "collection_access_denied", "connector_identity_changed", "connector_offline", "connector_upgrade_required", "direct_operation_rejected", "durable_mutation_unsupported", "operation_outcome_unknown", "encryption_required", "encrypted_relay_rejected", "hosted_provider_unavailable", "insufficient_access", "invalid_encrypted_response", "invalid_operation_response", "invalid_request", "missing_grant_key", "mutation_recovery_expired", "mutation_request_conflict", "not_authorized", "operation_cancelled", "operation_failed", "rate_limited", "relay_authorization_expired", "relay_unavailable", "temporarily_unavailable", "timeout", "transport_protocol_incompatible", "unsupported_operation", "collection_configuration_invalid", "collection_invalid", "collection_type_registry_invalid", "collection_version_unsupported", "change_cursor_reset"];
-export declare const COLLECTION_TYPE_PROBLEM_CODES: readonly ["access_denied", "access_paused", "application_declaration_mismatch", "authorization_binding_incompatible", "authorization_expired", "capability_contract_incompatible", "collection_access_denied", "connector_identity_changed", "connector_offline", "connector_upgrade_required", "direct_operation_rejected", "durable_mutation_unsupported", "operation_outcome_unknown", "encryption_required", "encrypted_relay_rejected", "hosted_provider_unavailable", "insufficient_access", "invalid_encrypted_response", "invalid_operation_response", "invalid_request", "missing_grant_key", "mutation_recovery_expired", "mutation_request_conflict", "not_authorized", "operation_cancelled", "operation_failed", "rate_limited", "relay_authorization_expired", "relay_unavailable", "temporarily_unavailable", "timeout", "transport_protocol_incompatible", "unsupported_operation", "collection_configuration_invalid", "collection_invalid", "collection_type_registry_invalid", "collection_version_unsupported", "invalid_path", "operation_invalid", "concurrent_modification", "invalid_preflight", "pending_mutation_unresolved", "type_pack_provision_failed"];
+export declare const COLLECTION_TYPE_PROBLEM_CODES: readonly ["access_denied", "access_paused", "application_declaration_mismatch", "authorization_binding_incompatible", "authorization_expired", "capability_contract_incompatible", "collection_access_denied", "connector_identity_changed", "connector_offline", "connector_upgrade_required", "direct_operation_rejected", "durable_mutation_unsupported", "operation_outcome_unknown", "encryption_required", "encrypted_relay_rejected", "hosted_provider_unavailable", "insufficient_access", "invalid_encrypted_response", "invalid_operation_response", "invalid_request", "missing_grant_key", "mutation_recovery_expired", "mutation_request_conflict", "not_authorized", "operation_cancelled", "operation_failed", "rate_limited", "relay_authorization_expired", "relay_unavailable", "temporarily_unavailable", "timeout", "transport_protocol_incompatible", "unsupported_operation", "collection_configuration_invalid", "collection_invalid", "collection_type_registry_invalid", "collection_version_unsupported", "file_not_found", "invalid_path", "operation_invalid", "concurrent_modification", "invalid_preflight", "pending_mutation_unresolved", "type_pack_provision_failed"];
 export declare function connectSuccess<Value>(value: Value, diagnostics?: MdbaseDiagnostic[]): ConnectSuccess<Value>;
 export declare function connectFailure<Code extends ConnectProblemCode>(problem: ConnectProblem<Code>): ConnectFailure<Code>;
 export declare function captureConnectOutcome<Value, Code extends ConnectProblemCode>(operation: () => Promise<Value>, allowedCodes: readonly Code[]): Promise<ConnectOutcome<Value, Code>>;

package/dist/outcomes.js

@@ -129,6 +129,7 @@ export const COLLECTION_DESCRIPTION_PROBLEM_CODES = [
 ];
 export const COLLECTION_READ_PROBLEM_CODES = [
     ...COLLECTION_DESCRIPTION_PROBLEM_CODES,
+    "file_not_found",
     "invalid_path",
     "operation_invalid"
 ];

package/dist/pending-mutation-store.d.ts

@@ -1,5 +1,6 @@
 import { type MutationOperationIdentifier } from "@mdbase-dev/connect-protocol";
 import type { PendingMutation } from "./internal-types.js";
+import type { PendingMutationSummary } from "./operation-types.js";
 export declare class PendingMutationStore {
     private readonly storage;
     private readonly baseKey;
@@ -7,6 +8,8 @@ export declare class PendingMutationStore {
     list(collectionId: string | null): PendingMutation[];
     find(collectionId: string | null, requestId: string): PendingMutation | null;
     identifier(pending: PendingMutation): MutationOperationIdentifier;
+    /** A pending write without its authority transport credentials. */
+    summary(pending: PendingMutation): PendingMutationSummary;
     store(pending: PendingMutation): void;
     take(requestId: string): PendingMutation | null;
     private key;

package/dist/pending-mutation-store.js

@@ -37,6 +37,16 @@ export class PendingMutationStore {
     identifier(pending) {
         return pending.mutation ?? mutationOperationIdentifier(pending.operation, pending.request?.input ?? (pending.operation === "sync" ? { action: "mutate" } : {})) ?? (pending.operation === "sync" ? "sync:mutate" : pending.operation);
     }
+    /** A pending write without its authority transport credentials. */
+    summary(pending) {
+        return {
+            requestId: pending.requestId,
+            operation: this.identifier(pending),
+            fingerprint: pending.inputFingerprint,
+            status: "outcome_unknown",
+            createdAt: new Date(pending.createdAt).toISOString()
+        };
+    }
     store(pending) {
         this.storage.setItem(this.key(pending.requestId), JSON.stringify(pending));
     }

package/dist/record-digest.d.ts

@@ -0,0 +1,14 @@
+/**
+ * An equality token for one record in one collection. Stored with a pending
+ * update so an editing session can find its own interrupted write after a
+ * reload without the record path ever being persisted.
+ */
+export declare function recordDigest(collectionId: string, path: string): Promise<string>;
+/** The digest a new pending mutation stores: only updates name a record. */
+export declare function updatedRecordDigest(collectionId: string, operation: string, input: unknown): Promise<string | undefined>;
+/** The request ID of a stored interrupted update to one record, if any. */
+export declare function interruptedUpdate(pending: readonly {
+    operation: string;
+    requestId: string;
+    recordDigest?: string;
+}[], collectionId: string, path: string): Promise<string | null>;

package/dist/record-digest.js

@@ -0,0 +1,20 @@
+/**
+ * An equality token for one record in one collection. Stored with a pending
+ * update so an editing session can find its own interrupted write after a
+ * reload without the record path ever being persisted.
+ */
+export async function recordDigest(collectionId, path) {
+    const bytes = new TextEncoder().encode(`${collectionId}\n${path}`);
+    const digest = new Uint8Array(await globalThis.crypto.subtle.digest("SHA-256", bytes));
+    return Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+/** The digest a new pending mutation stores: only updates name a record. */
+export async function updatedRecordDigest(collectionId, operation, input) {
+    const path = input?.path;
+    return operation === "update" && typeof path === "string" ? recordDigest(collectionId, path) : undefined;
+}
+/** The request ID of a stored interrupted update to one record, if any. */
+export async function interruptedUpdate(pending, collectionId, path) {
+    const digest = await recordDigest(collectionId, path);
+    return pending.find((entry) => entry.operation === "update" && entry.recordDigest === digest)?.requestId ?? null;
+}