@mdbase-dev/sdk 0.0.0-stage → 0.1.0-beta.153

package/dist/records/witness.d.ts

@@ -0,0 +1,19 @@
+import { MdbaseError } from "../errors.js";
+import { type Problem, type RecordView } from "../wire.js";
+export declare const include: {
+    body: boolean;
+    document: boolean;
+    effective: boolean;
+};
+export declare const MAX_BYTES: number;
+export declare function complete(record: RecordView, id?: string): void;
+export declare function protectedRecord(record: RecordView): boolean;
+export declare function confirmed(record: RecordView): boolean;
+/** Clone native data, never reconstruct source or invent confirmed metadata. */
+export declare function copy(record: RecordView): RecordView;
+export declare function problem(error: unknown): Problem;
+export declare function refusal(code: "conflict" | "outcome_unknown" | "unavailable" | "cancelled", message: string, reason: string): MdbaseError;
+/** Serialized retained-data accounting, not a measured heap/custody claim. */
+export declare function recordBytes(record: RecordView): number;
+export declare function textBytes(text: string): number;
+export declare function timeout(value: number | undefined): number;

package/dist/records/witness.js

@@ -0,0 +1,64 @@
+import { decode, encode } from "../cbor.js";
+import { MdbaseError, mdbaseError } from "../errors.js";
+import { revisionOf } from "../values.js";
+import { recordView } from "../wire.js";
+export const include = { body: true, document: true, effective: true };
+export const MAX_BYTES = 8 * 1024 * 1024;
+export function complete(record, id) {
+    if ((record.document?.length ?? 0) > MAX_BYTES ||
+        (record.body?.length ?? 0) > MAX_BYTES)
+        throw mdbaseError("invalid_request", "native record exceeds the record session source budget", "record_session_budget");
+    if ((id !== undefined && record.id !== id) ||
+        typeof record.document !== "string" ||
+        typeof record.body !== "string" ||
+        revisionOf(record.document) !== record.revision) {
+        throw mdbaseError("invalid_request", "record session needs actual complete, revision-consistent source and identity", "record_witness_required");
+    }
+}
+export function protectedRecord(record) {
+    return (record.state.hold !== undefined ||
+        (record.state.unresolved !== undefined && record.state.unresolved !== 0));
+}
+export function confirmed(record) {
+    return record.state.state === "confirmed" && !protectedRecord(record);
+}
+/** Clone native data, never reconstruct source or invent confirmed metadata. */
+export function copy(record) {
+    return recordView.dec(decode(encode(recordView.enc(record))));
+}
+export function problem(error) {
+    if (error instanceof MdbaseError)
+        return error.toProblem();
+    if (error instanceof Error &&
+        (error.name === "AbortError" || error.name === "TimeoutError"))
+        return mdbaseError("cancelled", error.message).toProblem();
+    return mdbaseError("internal", error instanceof Error ? error.message : "record session failure").toProblem();
+}
+export function refusal(code, message, reason) {
+    return new MdbaseError({
+        code,
+        message,
+        reason,
+        recovery: code === "conflict"
+            ? "resolve_conflict"
+            : code === "outcome_unknown"
+                ? "resolve_outcome"
+                : "retry",
+    });
+}
+/** Serialized retained-data accounting, not a measured heap/custody claim. */
+export function recordBytes(record) {
+    return encode(recordView.enc(record)).byteLength * 2;
+}
+export function textBytes(text) {
+    if (text.length > MAX_BYTES)
+        throw mdbaseError("invalid_request", "record session draft exceeds retained budget", "record_session_budget");
+    return new TextEncoder().encode(text).byteLength * 2;
+}
+export function timeout(value) {
+    const n = value ?? 30_000;
+    if (!Number.isSafeInteger(n) || n < 1 || n > 120_000)
+        throw mdbaseError("invalid_request", "record session timeout must be 1..120000ms", "invalid_timeout");
+    return n;
+}
+//# sourceMappingURL=witness.js.map

package/dist/records/witness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"witness.js","sourceRoot":"","sources":["../../src/records/witness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAiC,MAAM,YAAY,CAAC;AACvE,MAAM,CAAC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACvE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,UAAU,QAAQ,CAAC,MAAkB,EAAE,EAAW;IACpD,IACI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,SAAS;QAC1C,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,SAAS;QAEtC,MAAM,WAAW,CACb,iBAAiB,EACjB,wDAAwD,EACxD,uBAAuB,CAC1B,CAAC;IACN,IACI,CAAC,EAAE,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,QAAQ,EACjD,CAAC;QACC,MAAM,WAAW,CACb,iBAAiB,EACjB,+EAA+E,EAC/E,yBAAyB,CAC5B,CAAC;IACN,CAAC;AACL,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,MAAkB;IAC9C,OAAO,CACH,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;QAC/B,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC,CAC3E,CAAC;AACN,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,MAAkB;IACxC,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;AAC1E,CAAC;AACD,gFAAgF;AAChF,MAAM,UAAU,IAAI,CAAC,MAAkB;IACnC,OAAO,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,KAAc;IAClC,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC;IAC3D,IACI,KAAK,YAAY,KAAK;QACtB,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;QAE9D,OAAO,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC;IAC/D,OAAO,WAAW,CACd,UAAU,EACV,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CACpE,CAAC,SAAS,EAAE,CAAC;AAClB,CAAC;AACD,MAAM,UAAU,OAAO,CACnB,IAAkE,EAClE,OAAe,EACf,MAAc;IAEd,OAAO,IAAI,WAAW,CAAC;QACnB,IAAI;QACJ,OAAO;QACP,MAAM;QACN,QAAQ,EACJ,IAAI,KAAK,UAAU;YACf,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,IAAI,KAAK,iBAAiB;gBAC1B,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,OAAO;KACtB,CAAC,CAAC;AACP,CAAC;AACD,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,MAAkB;IAC1C,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;AACzD,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,IAAY;IAClC,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS;QACvB,MAAM,WAAW,CACb,iBAAiB,EACjB,8CAA8C,EAC9C,uBAAuB,CAC1B,CAAC;IACN,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;AACzD,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,KAAyB;IAC7C,MAAM,CAAC,GAAG,KAAK,IAAI,MAAM,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO;QAChD,MAAM,WAAW,CACb,iBAAiB,EACjB,4CAA4C,EAC5C,iBAAiB,CACpB,CAAC;IACN,OAAO,CAAC,CAAC;AACb,CAAC"}

package/dist/records.d.ts

@@ -0,0 +1,23 @@
+import type { MdbaseClient, RecordRef } from "./client.js";
+import type { RecordLease, RecordOpenOptions, Records } from "./records/types.js";
+export type { RecordLease, RecordOpenOptions, RecordSession, RecordSessionSnapshot, RecordSessionState, RecordRecovery, RecordRecoveryRef, RecordResolution, RecordFlushOptions, RecordFlushResult, Records, } from "./records/types.js";
+/** One native record session per UUID/client. Last release suspends delivery and
+ * autosave; dirty/recovering data stays owned here until explicitly settled.
+ * Retained sessions are bounded, never evicted to make another open succeed. */
+export declare class RecordsApi implements Records {
+    private readonly client;
+    private slots;
+    private bytes;
+    private closed;
+    private opening;
+    private watch;
+    private offWatch;
+    private offStatus;
+    constructor(client: MdbaseClient);
+    open(ref: RecordRef, options?: RecordOpenOptions): Promise<RecordLease>;
+    private acquire;
+    private startWatch;
+    private stopWatch;
+    /** Client close aborts delivery, never submits a replacement or discards drafts. */
+    dispose(): void;
+}

package/dist/records.js

@@ -0,0 +1,234 @@
+import { mdbaseError } from "./errors.js";
+import { uuid, hash } from "./codec.js";
+import { RecordSessionImpl } from "./records/session.js";
+import { complete, include, MAX_BYTES, problem, timeout, } from "./records/witness.js";
+/** One native record session per UUID/client. Last release suspends delivery and
+ * autosave; dirty/recovering data stays owned here until explicitly settled.
+ * Retained sessions are bounded, never evicted to make another open succeed. */
+export class RecordsApi {
+    client;
+    slots = new Map();
+    bytes = 0;
+    closed = false;
+    opening = Promise.resolve();
+    watch = null;
+    offWatch = null;
+    offStatus = null;
+    constructor(client) {
+        this.client = client;
+    }
+    open(ref, options = {}) {
+        const captured = {
+            ...options,
+            autosave: options.autosave
+                ? { ...options.autosave }
+                : options.autosave,
+            ...(options.recovery ? { recovery: { ...options.recovery } } : {}),
+        };
+        if (captured.recovery) {
+            captured.recovery = {
+                ...captured.recovery,
+                mutationId: uuid.dec(uuid.enc(captured.recovery.mutationId)),
+                recordId: uuid.dec(uuid.enc(captured.recovery.recordId)),
+            };
+            if (captured.recovery.baseRevision !== null)
+                hash.enc(captured.recovery.baseRevision);
+        }
+        timeout(captured.timeoutMs);
+        if (captured.autosave &&
+            (!Number.isSafeInteger(captured.autosave.idleMs) ||
+                captured.autosave.idleMs < 1 ||
+                captured.autosave.idleMs > 120_000)) {
+            throw mdbaseError("invalid_request", "record autosave idleMs must be 1..120000", "invalid_autosave");
+        }
+        // Serialize acquisition, not callers' signals or the record write intents.
+        const selected = typeof ref === "string"
+            ? ref
+            : "id" in ref
+                ? ref.id
+                : { path: ref.path };
+        const acquire = this.opening
+            .catch(() => { })
+            .then(() => this.acquire(selected, captured));
+        this.opening = acquire.then(() => { }, () => { });
+        return acquire;
+    }
+    async acquire(ref, options) {
+        if (this.closed)
+            throw mdbaseError("unavailable", "record sessions client closed");
+        options.signal?.throwIfAborted();
+        const current = await this.client.get(ref, include, options.signal);
+        options.signal?.throwIfAborted();
+        if (this.closed)
+            throw mdbaseError("unavailable", "record sessions client closed");
+        complete(current);
+        // Generic get may use a path; UUID selection must not be rebound.
+        const id = typeof ref === "string" ? ref : "id" in ref ? ref.id : undefined;
+        const expected = id === undefined ? undefined : uuid.dec(uuid.enc(id));
+        if (expected !== undefined && expected !== current.id)
+            throw mdbaseError("invalid_request", "record open readback changed the requested UUID", "record_identity_mismatch");
+        const policy = JSON.stringify([
+            options.autosave ? options.autosave.idleMs : false,
+            options.timeoutMs ?? 30_000,
+        ]);
+        let slot = this.slots.get(current.id);
+        if (slot && slot.leases > 0 && slot.policy !== policy)
+            throw mdbaseError("invalid_request", "active record leases must use the same autosave policy", "record_lease_policy");
+        if (!slot) {
+            if (this.slots.size >= 64)
+                throw mdbaseError("invalid_request", "retained record sessions exceed 64; settle drafts before opening more", "record_session_budget");
+            slot = {
+                session: null,
+                leases: 0,
+                bytes: 0,
+                policy,
+            };
+            const owned = slot;
+            try {
+                slot.session = new RecordSessionImpl(this.client, current, (bytes) => {
+                    const total = this.bytes - owned.bytes + bytes;
+                    if (total > MAX_BYTES)
+                        throw mdbaseError("invalid_request", "record session retained data exceeds 8MiB", "record_session_budget");
+                    this.bytes = total;
+                    owned.bytes = bytes;
+                });
+                await slot.session.restore(options.signal, options.recovery);
+                options.signal?.throwIfAborted();
+            }
+            catch (error) {
+                this.bytes -= owned.bytes;
+                throw error;
+            }
+            this.slots.set(current.id, slot);
+        }
+        else {
+            await slot.session.restore(options.signal, options.recovery);
+            options.signal?.throwIfAborted();
+        }
+        slot.leases++;
+        slot.policy = policy;
+        slot.session.resume(options);
+        this.startWatch();
+        const owned = slot;
+        let released = false;
+        const offs = new Set();
+        const ensure = () => {
+            if (released)
+                throw mdbaseError("cancelled", "record lease released");
+        };
+        const session = Object.freeze({
+            getSnapshot: owned.session.getSnapshot,
+            subscribe: (listener) => {
+                ensure();
+                const off = owned.session.subscribe(listener);
+                offs.add(off);
+                return () => {
+                    offs.delete(off);
+                    off();
+                };
+            },
+            setBody: (body) => {
+                ensure();
+                owned.session.setBody(body);
+            },
+            patchFrontmatter: (patch) => {
+                ensure();
+                owned.session.patchFrontmatter(patch);
+            },
+            resolve: (choice) => {
+                ensure();
+                owned.session.resolve(choice);
+            },
+            flush: (opts) => {
+                ensure();
+                return owned.session.flush(opts);
+            },
+        });
+        const release = () => {
+            if (released)
+                return;
+            released = true;
+            options.signal?.removeEventListener("abort", release);
+            for (const off of offs)
+                off();
+            offs.clear();
+            if (--owned.leases === 0) {
+                owned.session.suspend();
+                if (!owned.session.retained) {
+                    this.bytes -= owned.bytes;
+                    this.slots.delete(current.id);
+                }
+            }
+            if (![...this.slots.values()].some((s) => s.leases > 0))
+                this.stopWatch();
+        };
+        options.signal?.addEventListener("abort", release, { once: true });
+        if (options.signal?.aborted) {
+            release();
+            options.signal.throwIfAborted();
+        }
+        // Same-UUID hydration catches changes between initial get and watch startup.
+        void owned.session.refresh();
+        return Object.freeze({ session, release });
+    }
+    startWatch() {
+        if (this.watch)
+            return;
+        const watch = this.client.watchChanges(undefined, (batch) => {
+            for (const [id, slot] of this.slots)
+                if (slot.leases > 0 &&
+                    (batch.reset ||
+                        batch.changes.some((change) => change.id === id)))
+                    void slot.session.refresh();
+        });
+        this.watch = watch;
+        // An own write's confirmation is not announced as a change again, so a
+        // settled pending write refreshes the sessions from the status push.
+        let pending = -1;
+        this.offStatus = this.client.onStatus((s) => {
+            const settled = s.pending < pending;
+            pending = s.pending;
+            if (settled && this.watch === watch)
+                for (const slot of this.slots.values())
+                    if (slot.leases > 0)
+                        void slot.session.refresh();
+        });
+        this.offWatch = watch.subscribe((state, error) => {
+            if (this.watch !== watch)
+                return;
+            if (state === "active") {
+                for (const slot of this.slots.values())
+                    if (slot.leases > 0)
+                        void slot.session.refresh();
+            }
+            else if (error) {
+                for (const slot of this.slots.values())
+                    if (slot.leases > 0)
+                        slot.session.observerProblem(error.toProblem());
+            }
+        });
+        watch.ready.catch((error) => {
+            if (this.watch === watch)
+                for (const slot of this.slots.values())
+                    if (slot.leases > 0)
+                        slot.session.observerProblem(problem(error));
+        });
+    }
+    stopWatch() {
+        this.offWatch?.();
+        this.offWatch = null;
+        this.offStatus?.();
+        this.offStatus = null;
+        const watch = this.watch;
+        this.watch = null;
+        watch?.();
+    }
+    /** Client close aborts delivery, never submits a replacement or discards drafts. */
+    dispose() {
+        this.closed = true;
+        this.stopWatch();
+        for (const slot of this.slots.values())
+            slot.session.suspend();
+    }
+}
+//# sourceMappingURL=records.js.map

package/dist/records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"records.js","sourceRoot":"","sources":["../src/records.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EACH,QAAQ,EACR,OAAO,EACP,SAAS,EACT,OAAO,EACP,OAAO,GACV,MAAM,sBAAsB,CAAC;AA0B9B;;gFAEgF;AAChF,MAAM,OAAO,UAAU;IAQU;IAPrB,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;IAChC,KAAK,GAAG,CAAC,CAAC;IACV,MAAM,GAAG,KAAK,CAAC;IACf,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3C,KAAK,GAAwB,IAAI,CAAC;IAClC,QAAQ,GAAwB,IAAI,CAAC;IACrC,SAAS,GAAwB,IAAI,CAAC;IAC9C,YAA6B,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;IAAG,CAAC;IACrD,IAAI,CACA,GAAc,EACd,UAA6B,EAAE;QAE/B,MAAM,QAAQ,GAAG;YACb,GAAG,OAAO;YACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBACtB,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE;gBACzB,CAAC,CAAC,OAAO,CAAC,QAAQ;YACtB,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC;QACF,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpB,QAAQ,CAAC,QAAQ,GAAG;gBAChB,GAAG,QAAQ,CAAC,QAAQ;gBACpB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAC5D,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;aAC3D,CAAC;YACF,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,KAAK,IAAI;gBACvC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC5B,IACI,QAAQ,CAAC,QAAQ;YACjB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5C,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAC5B,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,EACzC,CAAC;YACC,MAAM,WAAW,CACb,iBAAiB,EACjB,0CAA0C,EAC1C,kBAAkB,CACrB,CAAC;QACN,CAAC;QACD,2EAA2E;QAC3E,MAAM,QAAQ,GACV,OAAO,GAAG,KAAK,QAAQ;YACnB,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,IAAI,IAAI,GAAG;gBACX,CAAC,CAAC,GAAG,CAAC,EAAE;gBACR,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO;aACvB,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;aACf,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CACvB,GAAG,EAAE,GAAE,CAAC,EACR,GAAG,EAAE,GAAE,CAAC,CACX,CAAC;QACF,OAAO,OAAO,CAAC;IACnB,CAAC;IACO,KAAK,CAAC,OAAO,CACjB,GAAc,EACd,OAA0B;QAE1B,IAAI,IAAI,CAAC,MAAM;YACX,MAAM,WAAW,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;QACtE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,MAAM;YACX,MAAM,WAAW,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;QACtE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClB,kEAAkE;QAClE,MAAM,EAAE,GACJ,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,MAAM,QAAQ,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,OAAO,CAAC,EAAE;YACjD,MAAM,WAAW,CACb,iBAAiB,EACjB,iDAAiD,EACjD,0BAA0B,CAC7B,CAAC;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YAClD,OAAO,CAAC,SAAS,IAAI,MAAM;SAC9B,CAAC,CAAC;QACH,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YACjD,MAAM,WAAW,CACb,iBAAiB,EACjB,wDAAwD,EACxD,qBAAqB,CACxB,CAAC;QACN,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE;gBACrB,MAAM,WAAW,CACb,iBAAiB,EACjB,uEAAuE,EACvE,uBAAuB,CAC1B,CAAC;YACN,IAAI,GAAG;gBACH,OAAO,EAAE,IAAoC;gBAC7C,MAAM,EAAE,CAAC;gBACT,KAAK,EAAE,CAAC;gBACR,MAAM;aACT,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC;gBACD,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAiB,CAChC,IAAI,CAAC,MAAM,EACX,OAAO,EACP,CAAC,KAAK,EAAE,EAAE;oBACN,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;oBAC/C,IAAI,KAAK,GAAG,SAAS;wBACjB,MAAM,WAAW,CACb,iBAAiB,EACjB,2CAA2C,EAC3C,uBAAuB,CAC1B,CAAC;oBACN,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;oBACnB,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;gBACxB,CAAC,CACJ,CAAC;gBACF,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC7D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,MAAM,KAAK,CAAC;YAChB,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC;QACnB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAc,CAAC;QACnC,MAAM,MAAM,GAAG,GAAG,EAAE;YAChB,IAAI,QAAQ;gBACR,MAAM,WAAW,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;QAChE,CAAC,CAAC;QACF,MAAM,OAAO,GAAkB,MAAM,CAAC,MAAM,CAAC;YACzC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;YACtC,SAAS,EAAE,CAAC,QAAoB,EAAE,EAAE;gBAChC,MAAM,EAAE,CAAC;gBACT,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAC9C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,OAAO,GAAG,EAAE;oBACR,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACjB,GAAG,EAAE,CAAC;gBACV,CAAC,CAAC;YACN,CAAC;YACD,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE;gBACtB,MAAM,EAAE,CAAC;gBACT,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;YACD,gBAAgB,EAAE,CACd,KAAuD,EACzD,EAAE;gBACA,MAAM,EAAE,CAAC;gBACT,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,EAAE,CAAC,MAA+C,EAAE,EAAE;gBACzD,MAAM,EAAE,CAAC;gBACT,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;YACD,KAAK,EAAE,CAAC,IAA2C,EAAE,EAAE;gBACnD,MAAM,EAAE,CAAC;gBACT,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,CAAC;SACJ,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,EAAE;YACjB,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,GAAG,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;oBAC1B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;oBAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAClC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBACnD,IAAI,CAAC,SAAS,EAAE,CAAC;QACzB,CAAC,CAAC;QACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACpC,CAAC;QACD,6EAA6E;QAC7E,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;IACO,UAAU;QACd,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;YACxD,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;gBAC/B,IACI,IAAI,CAAC,MAAM,GAAG,CAAC;oBACf,CAAC,KAAK,CAAC,KAAK;wBACR,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;oBAErD,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,uEAAuE;QACvE,qEAAqE;QACrE,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE;YACxC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;YACpC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;YACpB,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBAClC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;wBAAE,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC7C,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO;YACjC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBAClC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;wBAAE,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACzD,CAAC;iBAAM,IAAI,KAAK,EAAE,CAAC;gBACf,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBAClC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;wBACf,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAC5D,CAAC;QACL,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACxB,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBACpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBAClC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;wBACf,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;IACP,CAAC;IACO,SAAS;QACb,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,KAAK,EAAE,EAAE,CAAC;IACd,CAAC;IACD,oFAAoF;IACpF,OAAO;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACnE,CAAC;CACJ"}

package/dist/runtime/wasm.d.ts

@@ -0,0 +1,69 @@
+import type { InProcessConnectOptions, InProcessRuntime } from "../transport/inprocess.js";
+import type { FramePort } from "../transport/port.js";
+/** Shared ABI shape for the optional trusted app host (SDK-internal). */
+export interface Exports {
+    memory: WebAssembly.Memory;
+    alloc(len: number): number;
+    dealloc(ptr: number, len: number): void;
+    rt_info(): bigint;
+    rt_open(ptr: number, len: number): bigint;
+    rt_open_profile?(ptr: number, len: number, tag: number): bigint;
+    rt_hello(gptr: number, glen: number, ptr: number, len: number): bigint;
+    rt_frame(session: bigint, ptr: number, len: number): void;
+    rt_close(session: bigint): void;
+    rt_tick(now: number): void;
+    rt_poll(): bigint;
+}
+export interface RuntimeInfo {
+    abiMajor: number;
+    runtimeVersion: string;
+    sem: {
+        major: number;
+        minor: number;
+    };
+    serves: {
+        major: number;
+        minor: number;
+    }[];
+}
+/** Trusted host initialization policy, not a grant/session/query override. */
+export type QueryExecutionProfile = "memory_constrained" | "desktop";
+export interface OpenConfig {
+    collection: string;
+    replicaId: string;
+    deviceId: string;
+    mode: "local_only" | "synced";
+    /** An end-to-end (private) collection. */
+    e2e?: boolean;
+    /** Explicit selection requires the exact bootstrap export before key allocation.
+     * Omission permits legacy modules; it does not prove constrained enforcement. */
+    queryExecutionProfile?: QueryExecutionProfile;
+    /** Device secrets from the host's key storage, never the vault. */
+    signSecretKey: Uint8Array;
+    kemSecretKey: Uint8Array;
+}
+/** A `runtime.wasm` instance hosting one collection. */
+export declare class WasmRuntime implements InProcessRuntime {
+    private instance;
+    private ports;
+    private timer;
+    private opened;
+    protected constructor(instance: Exports | null);
+    protected get x(): Exports;
+    protected discard(): void;
+    /** Instantiate from the module's bytes (decoded by the embedding loader). */
+    static instantiate(bytes: BufferSource): Promise<WasmRuntime>;
+    protected put(b: Uint8Array): [number, number];
+    protected takeOut(packed: bigint): Uint8Array;
+    info(): RuntimeInfo;
+    /** Open the replica. */
+    open(c: OpenConfig): void;
+    /** Run timers now. */
+    tick(): void;
+    /** An in-process port. The first frame sent must be `hello`. */
+    connect(o?: InProcessConnectOptions & {
+        clientKey?: Uint8Array;
+    }): FramePort;
+    private flush;
+    dispose(): void;
+}