@opendatalabs/personal-server-ts-core 0.0.1-canary.df07ce2 → 0.0.1-canary.df80f08

package/dist/additions/budget.d.ts

@@ -0,0 +1,34 @@
+/** Shared accounting for one owner-wide recovery, including derived documents. */
+export declare class AdditionsBudgetExceeded extends Error {
+}
+export interface ByteBudget {
+    readonly signal?: AbortSignal;
+    readonly remaining: number;
+    readonly remainingMilliseconds?: number;
+    charge(bytes?: number): void;
+    /** Book an already-completed host receipt even when its deadline expired. */
+    recordSpent(bytes: number): void;
+}
+export declare class AdditionsBudget implements ByteBudget {
+    private readonly bytes;
+    private readonly parent?;
+    private used;
+    private exhausted;
+    private readonly deadline;
+    readonly signal: AbortSignal | undefined;
+    constructor(bytes?: number, milliseconds?: number, signal?: AbortSignal, parent?: AdditionsBudget | undefined);
+    get remainingMilliseconds(): number;
+    get remaining(): number;
+    charge(bytes?: number): void;
+    /** Hold an in-flight host allowance before another request can spend it.
+     * Settle once with the actual receipt, even after cancellation. */
+    reserve(bytes: number): {
+        settle: (spent: number) => void;
+    };
+    private refund;
+    recordSpent(bytes: number): void;
+}
+/** Cancel the actual response stream on overflow/abort, including absent or lying lengths. */
+export declare function readBoundedResponse(response: Response, budget: ByteBudget): Promise<Uint8Array>;
+export declare function readBoundedJson(response: Response, budget?: ByteBudget): Promise<unknown>;
+//# sourceMappingURL=budget.d.ts.map

package/dist/additions/budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../../src/additions/budget.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,qBAAa,uBAAwB,SAAQ,KAAK;CAAG;AAErD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,6EAA6E;IAC7E,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,qBAAa,eAAgB,YAAW,UAAU;IAM9C,OAAO,CAAC,QAAQ,CAAC,KAAK;IAGtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAR1B,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;gBAEtB,KAAK,SAAW,EACjC,YAAY,CAAC,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,WAAW,EACH,MAAM,CAAC,EAAE,eAAe,YAAA;IAc3C,IAAI,qBAAqB,WAExB;IACD,IAAI,SAAS,WAEZ;IACD,MAAM,CAAC,KAAK,SAAI;IAehB;uEACmE;IACnE,OAAO,CAAC,KAAK,EAAE,MAAM;wBAID,MAAM;;IAc1B,OAAO,CAAC,MAAM;IAId,WAAW,CAAC,KAAK,EAAE,MAAM;CAiB1B;AAED,8FAA8F;AAC9F,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CA2CrB;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,QAAQ,EAClB,MAAM,CAAC,EAAE,UAAU,GAClB,OAAO,CAAC,OAAO,CAAC,CASlB"}

package/dist/additions/budget.js

@@ -0,0 +1,144 @@
+/** Shared accounting for one owner-wide recovery, including derived documents. */
+export class AdditionsBudgetExceeded extends Error {
+}
+export class AdditionsBudget {
+    bytes;
+    parent;
+    used = 0;
+    exhausted = false;
+    deadline;
+    signal;
+    constructor(bytes = Infinity, milliseconds, signal, parent) {
+        this.bytes = bytes;
+        this.parent = parent;
+        if (bytes < 0 || (!Number.isFinite(bytes) && bytes !== Infinity))
+            throw new RangeError("Invalid additions byte budget");
+        this.deadline = performance.now() + (milliseconds ?? Infinity);
+        const timeout = milliseconds === undefined
+            ? undefined
+            : AbortSignal.timeout(milliseconds);
+        this.signal =
+            signal && timeout
+                ? AbortSignal.any([signal, timeout])
+                : (signal ?? timeout);
+    }
+    get remainingMilliseconds() {
+        return Math.max(0, this.deadline - performance.now());
+    }
+    get remaining() {
+        return Math.max(0, this.bytes - this.used);
+    }
+    charge(bytes = 0) {
+        this.signal?.throwIfAborted();
+        if (performance.now() >= this.deadline)
+            this.exhausted = true;
+        if (this.exhausted ||
+            !Number.isSafeInteger(bytes) ||
+            bytes < 0 ||
+            bytes > this.remaining) {
+            this.exhausted = true;
+            throw new AdditionsBudgetExceeded("Additions byte budget exhausted");
+        }
+        this.used += bytes;
+        this.parent?.charge(bytes);
+    }
+    /** Hold an in-flight host allowance before another request can spend it.
+     * Settle once with the actual receipt, even after cancellation. */
+    reserve(bytes) {
+        this.charge(bytes);
+        let settled = false;
+        return {
+            settle: (spent) => {
+                if (settled)
+                    throw new Error("Additions reservation already settled");
+                if (!Number.isSafeInteger(spent) || spent < 0)
+                    throw new AdditionsBudgetExceeded("Invalid reserved-byte receipt");
+                settled = true;
+                this.refund(bytes);
+                this.recordSpent(spent);
+                if (spent > bytes) {
+                    this.exhausted = true;
+                    throw new AdditionsBudgetExceeded("Reserved host allowance exceeded");
+                }
+            },
+        };
+    }
+    refund(bytes) {
+        this.used -= bytes;
+        this.parent?.refund(bytes);
+    }
+    recordSpent(bytes) {
+        if (!Number.isSafeInteger(bytes) || bytes < 0) {
+            this.exhausted = true;
+            throw new AdditionsBudgetExceeded("Invalid additions spent-byte receipt");
+        }
+        const overflow = bytes > this.remaining;
+        // These bytes were actually consumed remotely. Cancellation must not erase
+        // them, and every ancestor must observe the receipt before deadline checks.
+        this.used += bytes;
+        this.parent?.recordSpent(bytes);
+        if (overflow) {
+            this.exhausted = true;
+            throw new AdditionsBudgetExceeded("Additions byte receipt exceeds allowance");
+        }
+    }
+}
+/** Cancel the actual response stream on overflow/abort, including absent or lying lengths. */
+export async function readBoundedResponse(response, budget) {
+    budget.charge();
+    const body = response.body;
+    if (!body)
+        return new Uint8Array();
+    const reader = body.getReader();
+    const abort = () => {
+        void reader.cancel(budget.signal?.reason).catch(() => { });
+    };
+    budget.signal?.addEventListener("abort", abort, { once: true });
+    try {
+        budget.charge();
+        const length = response.headers.get("content-length");
+        if (length !== null &&
+            (!/^\d+$/.test(length) || Number(length) > budget.remaining))
+            budget.charge(budget.remaining + 1);
+        const chunks = [];
+        let size = 0;
+        while (true) {
+            const { done, value } = await reader.read();
+            budget.charge();
+            if (done)
+                break;
+            budget.charge(value.byteLength);
+            size += value.byteLength;
+            chunks.push(value);
+        }
+        // Charge the contiguous copy as well as the incoming chunks.
+        budget.charge(size);
+        const bytes = new Uint8Array(size);
+        let offset = 0;
+        for (const chunk of chunks) {
+            bytes.set(chunk, offset);
+            offset += chunk.byteLength;
+        }
+        return bytes;
+    }
+    catch (error) {
+        await reader.cancel(error).catch(() => { });
+        throw error;
+    }
+    finally {
+        budget.signal?.removeEventListener("abort", abort);
+        reader.releaseLock();
+    }
+}
+export async function readBoundedJson(response, budget) {
+    if (!budget)
+        return response.json();
+    const bytes = await readBoundedResponse(response, budget);
+    // UTF-16 decoding and JSON object materialization need room too. This bounds
+    // input work, not a hard JS heap estimate for arbitrary engine object layouts.
+    budget.charge(bytes.byteLength * 3);
+    const result = JSON.parse(new TextDecoder().decode(bytes));
+    budget.charge();
+    return result;
+}
+//# sourceMappingURL=budget.js.map

package/dist/additions/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../../src/additions/budget.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,MAAM,OAAO,uBAAwB,SAAQ,KAAK;CAAG;AAWrD,MAAM,OAAO,eAAe;IAMP;IAGA;IARX,IAAI,GAAG,CAAC,CAAC;IACT,SAAS,GAAG,KAAK,CAAC;IACT,QAAQ,CAAS;IACzB,MAAM,CAA0B;IACzC,YACmB,QAAQ,QAAQ,EACjC,YAAqB,EACrB,MAAoB,EACH,MAAwB;QAHxB,UAAK,GAAL,KAAK,CAAW;QAGhB,WAAM,GAAN,MAAM,CAAkB;QAEzC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,QAAQ,CAAC;YAC9D,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,IAAI,QAAQ,CAAC,CAAC;QAC/D,MAAM,OAAO,GACX,YAAY,KAAK,SAAS;YACxB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YACT,MAAM,IAAI,OAAO;gBACf,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACpC,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,qBAAqB;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,CAAC,KAAK,GAAG,CAAC;QACd,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAC9B,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAC9D,IACE,IAAI,CAAC,SAAS;YACd,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAC5B,KAAK,GAAG,CAAC;YACT,KAAK,GAAG,IAAI,CAAC,SAAS,EACtB,CAAC;YACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,MAAM,IAAI,uBAAuB,CAAC,iCAAiC,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD;uEACmE;IACnE,OAAO,CAAC,KAAa;QACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxB,IAAI,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBACtE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;oBAC3C,MAAM,IAAI,uBAAuB,CAAC,+BAA+B,CAAC,CAAC;gBACrE,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBACxB,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;oBAClB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;oBACtB,MAAM,IAAI,uBAAuB,CAAC,kCAAkC,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IACO,MAAM,CAAC,KAAa;QAC1B,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,WAAW,CAAC,KAAa;QACvB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,MAAM,IAAI,uBAAuB,CAAC,sCAAsC,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;QACxC,2EAA2E;QAC3E,4EAA4E;QAC5E,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,MAAM,IAAI,uBAAuB,CAC/B,0CAA0C,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAkB,EAClB,MAAkB;IAElB,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,UAAU,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC;IACF,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACtD,IACE,MAAM,KAAK,IAAI;YACf,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;YAE5D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACtC,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,IAAI;gBAAE,MAAM;YAChB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAChC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,6DAA6D;QAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAkB,EAClB,MAAmB;IAEnB,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IACpC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/additions/durable.d.ts

@@ -0,0 +1,94 @@
+import { type ByteBudget } from "./budget.js";
+import { type GatewayClient } from "@opendatalabs/vana-sdk/browser";
+import type { StorageAdapter } from "../storage/adapters/interface.js";
+import { type FencedPublicationPort, NeedsFencedPublicationError } from "../publication/publish.js";
+import type { ServerSigner } from "../signing/signer.js";
+import { type VersionToFold } from "./first-added.js";
+import { type AdditionsSummary } from "./summary.js";
+import { type VersionInventory, type VersionInventoryClient } from "./version-inventory.js";
+export declare const ADDITIONS_SUMMARY_SCOPE = "vana.system.additions";
+/** The separate hash namespace cannot collide with a literal source suffix. */
+export declare function additionsLedgerScope(scope: string): string;
+export type AdditionsRecoveryCode = "compressed_packet" | "decrypt_failed" | "data_hash_mismatch" | "metadata_hash_mismatch" | "invalid_envelope" | "unsupported_source_data" | "replay_failed" | "checkpoint_search_exhausted" | "publication_blocked" | "budget_exceeded" | "cancelled";
+export interface AdditionsRecoveryDiagnostic {
+    scope: string;
+    version: string;
+    code: AdditionsRecoveryCode;
+}
+/** Fixed operator codes only: never retain payloads or raw exception text. */
+export declare class AdditionsRecoveryError extends Error {
+    readonly code: AdditionsRecoveryCode;
+    constructor(code: AdditionsRecoveryCode, message?: string);
+}
+export interface DurableAdditionsOptions {
+    /** Transient operator observation; never persisted in ledgers or summaries. */
+    onRecoveryDiagnostic?: (event: AdditionsRecoveryDiagnostic) => void;
+    ownerAddress: string;
+    /** Include chain and Gateway origin. A service instance belongs to one owner/network. */
+    network: string;
+    inventory: VersionInventoryClient;
+    storageAdapter: StorageAdapter;
+    masterKey: Uint8Array;
+    signer: Pick<ServerSigner, "signAddData">;
+    gateway: Pick<GatewayClient, "registerDataPoint">;
+    fencedPublication?: FencedPublicationPort;
+    /** Summaries remain behind; hosts can expose the retryable recovery reason. */
+    onPublicationBlocked?: (error: NeedsFencedPublicationError) => void;
+    /** Full PS source replay defaults remain unlimited; checkpoint discovery is capped.
+     * Bounded hosts must also supply boundedWork. */
+    byteBudget?: number;
+    /** Host operations must cancel and settle all work before returning on abort.
+     * Crypto must enforce a plaintext limit before decompression/allocation.
+     * No SDK whole-object fallback is allowed under a finite budget.
+     */
+    boundedWork?: {
+        /** Clear an interrupted-publication intent only after commitment verification. */
+        confirmed?(scope: string, budget: ByteBudget): Promise<void>;
+        decrypt(encrypted: Uint8Array, password: string, budget: ByteBudget): Promise<Uint8Array>;
+        publish(scope: string, data: Record<string, unknown>, budget: ByteBudget): Promise<{
+            expectedVersion: string;
+            dataHash: string;
+            metadataHash: string;
+        }>;
+    };
+    timeBudgetMs?: number;
+    /** Session driver cancellation. All bounded operations share this signal. */
+    signal?: AbortSignal;
+    /** Existing durable delete pipeline, including exact-key cleanup/retry. */
+    deleteSystemScope?: (scope: string) => Promise<void>;
+}
+export interface DurableAdditionsService {
+    summarize(input: {
+        timezone: string;
+        days: number;
+        now: Date;
+    }): Promise<AdditionsSummary>;
+    recordUpload(version: VersionToFold | Pick<VersionToFold, "scope">, proof?: {
+        envelope: unknown;
+        encryptedSize: number;
+    }): Promise<void>;
+    /** Browser readers may request only bounded registry tombstones/journal clearing.
+     * Physical blob cleanup remains the ordinary durable deletion pipeline. */
+    deleteScope(scope: string, options?: {
+        durableOnly: true;
+        signal?: AbortSignal;
+    }): Promise<void>;
+}
+/** Reuse only a commitment still visible after the current registry deletion boundary. */
+export declare function findCheckpointRegistration(snapshot: VersionInventory, version: string, commitment: {
+    dataHash: string;
+    metadataHash: string;
+}): {
+    expectedVersion: string;
+    dataHash: string;
+    metadataHash: string;
+    status: string;
+    addedAt: string;
+    isTombstone: boolean;
+} | undefined;
+/**
+ * Revalidates commitments, rather than trusting a numeric watermark or a local
+ * mutex. Persisted lost/lower-prefix writes are repaired from the next inventory.
+ */
+export declare function createDurableAdditions(options: DurableAdditionsOptions): DurableAdditionsService;
+//# sourceMappingURL=durable.d.ts.map

package/dist/additions/durable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durable.d.ts","sourceRoot":"","sources":["../../src/additions/durable.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,UAAU,EAChB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAEL,KAAK,qBAAqB,EAC1B,2BAA2B,EAC5B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAE5B,MAAM,wBAAwB,CAAC;AAGhC,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AA6B/D,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAK1D;AAED,MAAM,MAAM,qBAAqB,GAC7B,mBAAmB,GACnB,gBAAgB,GAChB,oBAAoB,GACpB,wBAAwB,GACxB,kBAAkB,GAClB,yBAAyB,GACzB,eAAe,GACf,6BAA6B,GAC7B,qBAAqB,GACrB,iBAAiB,GACjB,WAAW,CAAC;AAChB,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,qBAAqB,CAAC;CAC7B;AACD,8EAA8E;AAC9E,qBAAa,sBAAuB,SAAQ,KAAK;IAE7C,QAAQ,CAAC,IAAI,EAAE,qBAAqB;gBAA3B,IAAI,EAAE,qBAAqB,EACpC,OAAO,GAAE,MAAa;CAKzB;AAED,MAAM,WAAW,uBAAuB;IACtC,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,2BAA2B,KAAK,IAAI,CAAC;IACpE,YAAY,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,sBAAsB,CAAC;IAClC,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,UAAU,CAAC;IACtB,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;IAC1C,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;IAClD,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IAC1C,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,2BAA2B,KAAK,IAAI,CAAC;IACpE;qDACiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE;QACZ,kFAAkF;QAClF,SAAS,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,OAAO,CACL,SAAS,EAAE,UAAU,EACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAAC;QACvB,OAAO,CACL,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;YACT,eAAe,EAAE,MAAM,CAAC;YACxB,QAAQ,EAAE,MAAM,CAAC;YACjB,YAAY,EAAE,MAAM,CAAC;SACtB,CAAC,CAAC;KACJ,CAAC;IACF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,KAAK,EAAE;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,IAAI,CAAC;KACX,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9B,YAAY,CACV,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,EACrD,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GACnD,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;+EAC2E;IAC3E,WAAW,CACT,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACpD,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AA+FD,0FAA0F;AAC1F,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE;;;;;;;cAYvD;AAOD;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAi1BzB"}