@opendatalabs/personal-server-ts-core 1.33.8 → 1.34.0

package/dist/storage/pdpp-records/interface.d.ts

@@ -0,0 +1,104 @@
+import type { RecordDataValidator } from "./ingest-plan.js";
+import type { ChangesSinceOptions, ChangesSincePage, IngestResult, ListRecordsOptions, ListRecordsPage, PdppBlobMeta, PdppRecordEnvelopeInput, PdppStoredRecord, StreamListing, StreamSemantics } from "./types.js";
+/**
+ * Persistence index for PDPP records. Implementable by a SQLite backend
+ * (desktop, `sqlite-store.ts`) and an in-memory backend that stands in for
+ * the Enclave runtime (`memory-store.ts`) — real Enclave persistence
+ * integration needs the supplied Enclave runtime and is out of scope here.
+ */
+export interface PdppRecordStore {
+    /**
+     * Decides each envelope with `planIngest` and writes the accepted ones
+     * atomically: a thrown error rolls back every write from this call, it
+     * never leaves partial version/history state. Each envelope gets exactly
+     * one outcome in `results`. A rejected envelope writes nothing and does
+     * not fail the rest of the batch. An `unchanged` envelope writes nothing
+     * either: no version, no history row, no write-clock tick.
+     *
+     * Declarations are looked up per envelope by `(stream, instance)`, since
+     * one stream name can belong to several sources.
+     *
+     * The SQLite PS backend also accepts a method and generation. It validates
+     * the generation in this transaction and binds an empty instance to that
+     * method with its first accepted write. That backend rejects every
+     * envelope of a call that omits the binding, with `method_required`.
+     *
+     * `validateData` rejects an upsert whose data does not conform to the
+     * declared stream schema; that envelope writes nothing.
+     */
+    ingestBatch(envelopes: PdppRecordEnvelopeInput[], streamSemantics: (stream: string, instance: string) => StreamSemantics, primaryKeyFields: (stream: string, instance: string) => string[], binding?: {
+        method: string;
+        generation: number;
+    }, validateData?: RecordDataValidator): IngestResult;
+    getRecord(instance: string, stream: string, recordKey: string): PdppStoredRecord | undefined;
+    listRecords(stream: string, options: ListRecordsOptions): ListRecordsPage;
+    /**
+     * Owner-authenticated explicit delete directive (DELETE endpoint). Only
+     * valid for mutable_state streams; returns false if the stream is
+     * append_only or the record does not exist.
+     */
+    deleteRecord(instance: string, stream: string, recordKey: string, deletedAt: string, streamSemantics: StreamSemantics): boolean;
+    changesSince(stream: string, options: ChangesSinceOptions): ChangesSincePage;
+    listStreams(instanceIds: string[]): StreamListing[];
+    putBlobMeta(meta: PdppBlobMeta): void;
+    getBlobMeta(blobId: string): PdppBlobMeta | undefined;
+    /**
+     * Atomically persists blob bytes and their metadata together (metadata and
+     * bytes are never written as two separate, independently-failable steps —
+     * the existing-row check and the write happen inside one transaction, not
+     * a check followed by a racing upsert). blob_id is derived from the bytes
+     * themselves (content-addressed: `sha256:<hex>`, this store's own
+     * convention, not a spec-core requirement), not supplied by the caller —
+     * a producer cannot claim an arbitrary id for its bytes, and identical
+     * bytes always resolve to the same blob_id regardless of which ingest
+     * wrote them first.
+     *
+     * Re-storing bytes that hash to an already-known blob_id is a verified
+     * no-op only when mimeType matches AND the previously-stored bytes
+     * actually still hash/size-match their own recorded metadata:
+     *   - metadata-only row (no bytes ever stored, e.g. a legacy fixture that
+     *     called `putBlobMeta` directly): completed by writing the bytes now.
+     *   - existing bytes verified intact and mimeType matches: idempotent
+     *     no-op, returns the existing metadata unchanged.
+     *   - existing bytes present but corrupt/truncated relative to their own
+     *     metadata: throws BlobConflictError rather than silently reporting
+     *     success over content that can no longer be trusted, or silently
+     *     overwriting it as if this were the first write.
+     *   - mimeType differs from the existing record (regardless of byte
+     *     health): throws BlobConflictError — refusing to let a second write
+     *     silently redefine what an existing blob_id means.
+     */
+    storeBlobBytes(bytes: Uint8Array, mimeType: string): PdppBlobMeta;
+    /**
+     * Reads back bytes for a blob_id, verifying the stored payload's actual
+     * size and SHA-256 still match the recorded metadata before returning
+     * anything. Returns undefined when the blob has metadata-only rows (legacy
+     * or test fixtures that called `putBlobMeta` directly), no bytes were ever
+     * stored, or the stored bytes are corrupt/truncated relative to their own
+     * metadata -- fail closed rather than deliver unverified bytes under a
+     * trusted-looking 200.
+     */
+    getBlobBytes(blobId: string): Uint8Array<ArrayBuffer> | undefined;
+    /**
+     * Finds every non-deleted record that references a `blob_id` via
+     * `data.blob_ref.blob_id` (spec §4 "Binary data (blob_ref)"). Identical
+     * blob bytes can legitimately be referenced by more than one record or
+     * instance, so callers must check every returned reference and grant
+     * access if ANY one passes their authorization constraints (spec §8 "Get
+     * a blob") -- an inaccessible reference must never hide an accessible
+     * one. A `blob_id` alone is never sufficient to authorize access: the
+     * resource server must verify the grant includes a stream containing a
+     * record that references this blob, that record passes all grant
+     * filters, and `blob_ref` is in the grant's authorized field projection.
+     * Returns an empty array if no ingested record currently references this
+     * blob_id.
+     */
+    findBlobReferences(blobId: string): BlobReference[];
+    close(): void;
+}
+export interface BlobReference {
+    instance: string;
+    stream: string;
+    recordKey: string;
+}
+//# sourceMappingURL=interface.d.ts.map

package/dist/storage/pdpp-records/interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../../src/storage/pdpp-records/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,EACb,eAAe,EAChB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;;;;;;;;;;;;OAkBG;IACH,WAAW,CACT,SAAS,EAAE,uBAAuB,EAAE,EACpC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,eAAe,EACtE,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,EAAE,EAChE,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,EAChD,YAAY,CAAC,EAAE,mBAAmB,GACjC,YAAY,CAAC;IAEhB,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,gBAAgB,GAAG,SAAS,CAAC;IAEhC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,eAAe,CAAC;IAE1E;;;;OAIG;IACH,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,eAAe,GAC/B,OAAO,CAAC;IAEX,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,gBAAgB,CAAC;IAE7E,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAEpD,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;IAEtC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;IAEtD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,CAAC;IAElE;;;;;;;;OAQG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC;IAElE;;;;;;;;;;;;;OAaG;IACH,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,EAAE,CAAC;IAEpD,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/storage/pdpp-records/interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=interface.js.map

package/dist/storage/pdpp-records/interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface.js","sourceRoot":"","sources":["../../../src/storage/pdpp-records/interface.ts"],"names":[],"mappings":""}

package/dist/storage/pdpp-records/memory-store.d.ts

@@ -0,0 +1,9 @@
+import type { PdppRecordStore } from "./interface.js";
+/**
+ * In-memory PdppRecordStore. Stands in for the Enclave runtime for this
+ * lane's own tests and as a second implementation of the shared interface.
+ * This is NOT a real Enclave persistence integration — that needs the
+ * supplied Enclave runtime, which this lane does not have access to.
+ */
+export declare function createMemoryRecordStore(): PdppRecordStore;
+//# sourceMappingURL=memory-store.d.ts.map

package/dist/storage/pdpp-records/memory-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-store.d.ts","sourceRoot":"","sources":["../../../src/storage/pdpp-records/memory-store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAsDtD;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,eAAe,CAsgBzD"}

package/dist/storage/pdpp-records/memory-store.js

@@ -0,0 +1,466 @@
+import { createHash } from "node:crypto";
+import { randomUUID } from "node:crypto";
+import { planIngest, summarizeIngest, } from "./ingest-plan.js";
+import { decodeCursor, encodeCursor } from "./cursor.js";
+import { BlobConflictError, CursorExpiredError, InvalidCursorError, } from "./types.js";
+import { InvalidCursorSyntaxError } from "./cursor.js";
+function blobIdForBytes(bytes) {
+    return `sha256:${createHash("sha256").update(bytes).digest("hex")}`;
+}
+function rowKey(instance, stream, recordKey) {
+    return `${instance}\0${stream}\0${recordKey}`;
+}
+function parseOffset(value) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) {
+        throw new InvalidCursorError();
+    }
+    return value;
+}
+/**
+ * In-memory PdppRecordStore. Stands in for the Enclave runtime for this
+ * lane's own tests and as a second implementation of the shared interface.
+ * This is NOT a real Enclave persistence integration — that needs the
+ * supplied Enclave runtime, which this lane does not have access to.
+ */
+export function createMemoryRecordStore() {
+    const current = new Map();
+    const history = [];
+    const blobs = new Map();
+    const blobBytes = new Map();
+    const epoch = randomUUID();
+    let writeClock = 0; // monotonic logical clock, avoids wall-clock ties in tests
+    function nextWriteTimestamp() {
+        writeClock += 1;
+        // Encode as an ISO-ish sortable string using the logical clock so
+        // multiple writes within the same millisecond still order correctly.
+        return new Date(writeClock).toISOString();
+    }
+    function cursorEpoch() {
+        return epoch;
+    }
+    function assertCursorScope(payload, stream) {
+        if (payload.stream !== stream) {
+            throw new CursorExpiredError();
+        }
+        if (payload.epoch !== cursorEpoch()) {
+            throw new CursorExpiredError();
+        }
+    }
+    function ingestBatch(envelopes, streamSemantics, primaryKeyFields, _binding, validateData) {
+        const results = [];
+        // Stage writes and commit them together, so a thrown error leaves no
+        // partial state (the in-memory twin of the SQLite transaction). Later
+        // envelopes read the staged rows, so two envelopes for one key are
+        // decided in order.
+        const staged = new Map();
+        const stagedHistory = [];
+        const read = (key) => staged.get(key) ?? current.get(key);
+        envelopes.forEach((envelope, index) => {
+            const plan = planIngest(index, envelope, streamSemantics(envelope.stream, envelope.instance), primaryKeyFields(envelope.stream, envelope.instance), (recordKey) => {
+                const row = read(rowKey(envelope.instance, envelope.stream, recordKey));
+                if (!row)
+                    return undefined;
+                return row.deleted
+                    ? { deleted: true, data: null }
+                    : { deleted: false, data: row.data };
+            }, validateData);
+            results.push(plan.outcome);
+            if (!plan.write)
+                return;
+            const { recordKey, data } = plan.write;
+            const key = rowKey(envelope.instance, envelope.stream, recordKey);
+            const version = (read(key)?.version ?? 0) + 1;
+            const row = data === null
+                ? {
+                    instance: envelope.instance,
+                    stream: envelope.stream,
+                    recordKey,
+                    version,
+                    deletedAt: envelope.emitted_at,
+                    emittedAt: envelope.emitted_at,
+                    deleted: true,
+                }
+                : {
+                    instance: envelope.instance,
+                    stream: envelope.stream,
+                    recordKey,
+                    data,
+                    version,
+                    emittedAt: envelope.emitted_at,
+                    deleted: false,
+                };
+            staged.set(key, row);
+            stagedHistory.push({
+                instance: envelope.instance,
+                stream: envelope.stream,
+                recordKey,
+                version,
+                writtenAt: nextWriteTimestamp(),
+                row,
+            });
+        });
+        for (const [key, row] of staged)
+            current.set(key, row);
+        history.push(...stagedHistory);
+        return summarizeIngest(results);
+    }
+    function getRecord(instance, stream, recordKey) {
+        const row = current.get(rowKey(instance, stream, recordKey));
+        if (!row || row.deleted)
+            return undefined;
+        return row;
+    }
+    function projectFields(data, fields) {
+        if (!fields)
+            return data;
+        const projected = {};
+        for (const field of fields) {
+            if (field in data)
+                projected[field] = data[field];
+        }
+        return projected;
+    }
+    function sortKey(row) {
+        // cursor_field is modeled here as emittedAt (stand-in for the declared
+        // cursor_field — the ingest path only knows emitted_at, per-stream
+        // declared cursor fields are a SourceDeclaration concern the RS route
+        // layer resolves before calling into the store).
+        return [row.emittedAt, row.recordKey];
+    }
+    function listRecords(stream, options) {
+        let startAfter = null;
+        if (options.cursor) {
+            const payload = decodeCursor(options.cursor);
+            if (payload.kind !== "list")
+                throw new InvalidCursorError();
+            assertCursorScope(payload, stream);
+            if (payload.order !== options.order)
+                throw new InvalidCursorError();
+            startAfter = [payload.sortValue ?? "", payload.recordKey];
+        }
+        const rows = Array.from(current.values()).filter((row) => !row.deleted &&
+            row.stream === stream &&
+            options.instanceIds.includes(row.instance));
+        rows.sort((a, b) => {
+            const [aVal, aKey] = sortKey(a);
+            const [bVal, bKey] = sortKey(b);
+            const cmp = aVal === bVal ? aKey.localeCompare(bKey) : aVal < bVal ? -1 : 1;
+            return options.order === "asc" ? cmp : -cmp;
+        });
+        let filtered = rows;
+        if (startAfter) {
+            const [afterVal, afterKey] = startAfter;
+            filtered = rows.filter((row) => {
+                const [val, key] = sortKey(row);
+                const cmp = val === afterVal
+                    ? key.localeCompare(afterKey)
+                    : val < afterVal
+                        ? -1
+                        : 1;
+                return options.order === "asc" ? cmp > 0 : cmp < 0;
+            });
+        }
+        const page = filtered.slice(0, options.limit);
+        const hasMore = filtered.length > options.limit;
+        const last = page[page.length - 1];
+        return {
+            data: page.map((row) => ({
+                ...row,
+                data: projectFields(row.data, options.fields),
+            })),
+            hasMore,
+            nextCursor: hasMore && last
+                ? encodeCursor({
+                    kind: "list",
+                    stream,
+                    epoch: cursorEpoch(),
+                    order: options.order,
+                    sortValue: sortKey(last)[0],
+                    recordKey: last.recordKey,
+                })
+                : undefined,
+        };
+    }
+    function deleteRecord(instance, stream, recordKey, deletedAt, streamSemantics) {
+        if (streamSemantics === "append_only")
+            return false;
+        const key = rowKey(instance, stream, recordKey);
+        const existing = current.get(key);
+        if (!existing || existing.deleted)
+            return false;
+        const version = existing.version + 1;
+        const tombstone = {
+            instance,
+            stream,
+            recordKey,
+            version,
+            deletedAt,
+            emittedAt: deletedAt,
+            deleted: true,
+        };
+        current.set(key, tombstone);
+        history.push({
+            instance,
+            stream,
+            recordKey,
+            version,
+            writtenAt: nextWriteTimestamp(),
+            row: tombstone,
+        });
+        return true;
+    }
+    function changesSince(stream, options) {
+        let horizon;
+        let sinceHorizon;
+        let offset = 0;
+        if (options.cursor) {
+            // Continuing an already-anchored session: horizon and sinceHorizon
+            // both come from the page cursor, not re-derived from changesSince.
+            const payload = decodeCursor(options.cursor);
+            if (payload.kind !== "changes_since")
+                throw new InvalidCursorError();
+            assertCursorScope(payload, stream);
+            horizon = payload.horizon;
+            sinceHorizon = payload.sinceHorizon;
+            offset = parseOffset(payload.offset);
+        }
+        else if (options.changesSince) {
+            let payload;
+            try {
+                payload = decodeCursor(options.changesSince);
+            }
+            catch (err) {
+                if (err instanceof InvalidCursorSyntaxError) {
+                    throw new CursorExpiredError();
+                }
+                throw err;
+            }
+            if (payload.kind !== "changes_since")
+                throw new InvalidCursorError();
+            assertCursorScope(payload, stream);
+            // The incoming token is the *previous* session's horizon. This
+            // session's page-1 horizon is anchored fresh at "now" so writes that
+            // land mid-session don't leak into this session's later pages.
+            sinceHorizon = payload.horizon;
+            horizon = nextWriteTimestamp();
+        }
+        else {
+            // First-ever sync: no baseline, every current record is "changed".
+            sinceHorizon = null;
+            horizon = nextWriteTimestamp();
+        }
+        // Every write strictly after `horizon` is excluded from every page of
+        // this session (session-horizon anchoring) — new writes surface only
+        // via the next session's `changes_since`.
+        const relevant = history.filter((entry) => entry.stream === stream &&
+            options.instanceIds.includes(entry.instance) &&
+            entry.writtenAt <= horizon);
+        const latestAsOfHorizon = new Map();
+        for (const entry of relevant) {
+            const k = rowKey(entry.instance, entry.stream, entry.recordKey);
+            const prior = latestAsOfHorizon.get(k);
+            if (!prior || entry.version > prior.version) {
+                latestAsOfHorizon.set(k, entry);
+            }
+        }
+        const changed = [];
+        for (const entry of latestAsOfHorizon.values()) {
+            if (sinceHorizon !== null) {
+                const wroteSincePrior = history.some((h) => h.stream === entry.stream &&
+                    h.recordKey === entry.recordKey &&
+                    h.instance === entry.instance &&
+                    h.writtenAt > sinceHorizon &&
+                    h.writtenAt <= horizon);
+                if (!wroteSincePrior)
+                    continue;
+            }
+            if (entry.row.deleted) {
+                changed.push(entry.row);
+                continue;
+            }
+            const projectedNow = projectFields(entry.row.data, options.fields);
+            if (sinceHorizon !== null && options.fields) {
+                // Eligibility MUST be computed on the grant-authorized projection
+                // (spec §4): if only unauthorized fields changed since the prior
+                // session horizon, this record must not appear as "changed".
+                const priorEntry = [...history]
+                    .filter((h) => h.stream === entry.stream &&
+                    h.recordKey === entry.recordKey &&
+                    h.instance === entry.instance &&
+                    h.writtenAt <= sinceHorizon)
+                    .sort((a, b) => b.version - a.version)[0];
+                if (priorEntry && !priorEntry.row.deleted) {
+                    const priorProjected = projectFields(priorEntry.row.data, options.fields);
+                    if (JSON.stringify(priorProjected) === JSON.stringify(projectedNow)) {
+                        continue;
+                    }
+                }
+            }
+            // Return the RAW (unprojected) row here, not `projectedNow`. Eligibility
+            // above legitimately needs the grant-authorized projection to decide
+            // "did the authorized fields change" without leaking a hidden-field
+            // change. But a caller enforcing time_constraint against `row.data`
+            // (packages/server/src/routes/pdpp-records.ts) needs the real field
+            // value, not one already stripped to the grant's fields — projecting
+            // here would silently break that filter for any grant whose fields
+            // don't happen to include the time_constraint field. Field projection
+            // for the response is the caller's job, applied AFTER any filtering
+            // that reads real field values.
+            changed.push(entry.row);
+        }
+        changed.sort((a, b) => a.recordKey.localeCompare(b.recordKey));
+        const page = changed.slice(offset, offset + options.limit);
+        const hasMore = offset + options.limit < changed.length;
+        return {
+            data: page,
+            hasMore,
+            nextCursor: hasMore
+                ? encodeCursor({
+                    kind: "changes_since",
+                    stream,
+                    epoch: cursorEpoch(),
+                    horizon,
+                    sinceHorizon,
+                    offset: offset + options.limit,
+                })
+                : undefined,
+            nextChangesSince: hasMore
+                ? undefined
+                : encodeCursor({
+                    kind: "changes_since",
+                    stream,
+                    epoch: cursorEpoch(),
+                    horizon,
+                    sinceHorizon: null,
+                    offset: 0,
+                }),
+        };
+    }
+    function listStreams(instanceIds) {
+        const byStream = new Map();
+        for (const row of current.values()) {
+            if (row.deleted)
+                continue;
+            if (!instanceIds.includes(row.instance))
+                continue;
+            const entry = byStream.get(row.stream) ?? { count: 0, lastUpdated: null };
+            entry.count += 1;
+            const updated = row.emittedAt;
+            if (!entry.lastUpdated || updated > entry.lastUpdated) {
+                entry.lastUpdated = updated;
+            }
+            byStream.set(row.stream, entry);
+        }
+        return Array.from(byStream.entries()).map(([stream, v]) => ({
+            stream,
+            recordCount: v.count,
+            lastUpdated: v.lastUpdated,
+        }));
+    }
+    function findBlobReferences(blobId) {
+        // Scanned on demand rather than maintained as a separate mutable index:
+        // this store already holds every current row in memory, and a scan
+        // avoids a second piece of state that could drift from `current` on
+        // every ingest/delete. A record's blob reference lives at
+        // `data.blob_ref.blob_id` per spec §4 "Binary data (blob_ref)". Every
+        // matching non-deleted row is returned -- identical bytes can
+        // legitimately be referenced by more than one record.
+        const references = [];
+        for (const row of current.values()) {
+            if (row.deleted)
+                continue;
+            const blobRef = row.data.blob_ref;
+            if (blobRef &&
+                typeof blobRef === "object" &&
+                blobRef.blob_id === blobId) {
+                references.push({
+                    instance: row.instance,
+                    stream: row.stream,
+                    recordKey: row.recordKey,
+                });
+            }
+        }
+        return references;
+    }
+    /** True only when the stored bytes actually hash/size-match `meta`. */
+    function storedBytesVerify(meta) {
+        const bytes = blobBytes.get(meta.blobId);
+        if (!bytes)
+            return false;
+        if (bytes.byteLength !== meta.sizeBytes)
+            return false;
+        return createHash("sha256").update(bytes).digest("hex") === meta.sha256;
+    }
+    function storeBlobBytes(bytes, mimeType) {
+        const blobId = blobIdForBytes(bytes);
+        const existing = blobs.get(blobId);
+        if (existing) {
+            const sha256 = blobId.slice("sha256:".length);
+            if (existing.mimeType !== mimeType ||
+                existing.sha256 !== sha256 ||
+                existing.sizeBytes !== bytes.byteLength) {
+                throw new BlobConflictError(blobId, existing);
+            }
+            if (!blobBytes.has(existing.blobId)) {
+                // Metadata-only row (legacy/test fixture via putBlobMeta, or a prior
+                // write that never got this far): complete it with real bytes now,
+                // rather than reporting a false "already stored" no-op.
+                blobBytes.set(blobId, bytes.slice());
+                return existing;
+            }
+            if (!storedBytesVerify(existing)) {
+                // Bytes are present but corrupt relative to their own metadata.
+                // Reporting success here would hand back an existing-looking
+                // success while the underlying content stays broken; refuse
+                // instead of silently repairing or silently succeeding.
+                throw new BlobConflictError(blobId, existing);
+            }
+            // Verified idempotent no-op: content and mimeType both match.
+            return existing;
+        }
+        const sha256 = blobId.slice("sha256:".length);
+        const meta = {
+            blobId,
+            mimeType,
+            sizeBytes: bytes.byteLength,
+            sha256,
+        };
+        // Bytes and metadata become visible together: no reader can observe one
+        // without the other.
+        blobBytes.set(blobId, bytes.slice());
+        blobs.set(blobId, meta);
+        return meta;
+    }
+    function getBlobBytes(blobId) {
+        const meta = blobs.get(blobId);
+        const bytes = blobBytes.get(blobId);
+        if (!meta || !bytes)
+            return undefined;
+        if (bytes.byteLength !== meta.sizeBytes)
+            return undefined;
+        const actualHash = createHash("sha256").update(bytes).digest("hex");
+        if (actualHash !== meta.sha256)
+            return undefined;
+        return bytes.slice();
+    }
+    return {
+        ingestBatch,
+        getRecord,
+        listRecords,
+        deleteRecord,
+        changesSince,
+        listStreams,
+        putBlobMeta: (meta) => blobs.set(meta.blobId, meta),
+        getBlobMeta: (blobId) => blobs.get(blobId),
+        storeBlobBytes,
+        getBlobBytes,
+        findBlobReferences,
+        close: () => {
+            current.clear();
+            history.length = 0;
+            blobs.clear();
+            blobBytes.clear();
+        },
+    };
+}
+//# sourceMappingURL=memory-store.js.map

package/dist/storage/pdpp-records/memory-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-store.js","sourceRoot":"","sources":["../../../src/storage/pdpp-records/memory-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,UAAU,EACV,eAAe,GAEhB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GAcnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAEvD,SAAS,cAAc,CAAC,KAAiB;IACvC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAID,SAAS,MAAM,CAAC,QAAgB,EAAE,MAAc,EAAE,SAAiB;IACjE,OAAO,GAAG,QAAQ,KAAK,MAAM,KAAK,SAAS,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,kBAAkB,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IAChD,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,2DAA2D;IAE/E,SAAS,kBAAkB;QACzB,UAAU,IAAI,CAAC,CAAC;QAChB,kEAAkE;QAClE,qEAAqE;QACrE,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,SAAS,WAAW;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,iBAAiB,CACxB,OAA4C,EAC5C,MAAc;QAEd,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAED,SAAS,WAAW,CAClB,SAAoC,EACpC,eAAsE,EACtE,gBAAgE,EAChE,QAAiD,EACjD,YAAkC;QAElC,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,qEAAqE;QACrE,sEAAsE;QACtE,mEAAmE;QACnE,oBAAoB;QACpB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;QAChD,MAAM,aAAa,GAAmB,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElE,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,UAAU,CACrB,KAAK,EACL,QAAQ,EACR,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,EACnD,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,EACpD,CAAC,SAAS,EAAE,EAAE;gBACZ,MAAM,GAAG,GAAG,IAAI,CACd,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CACtD,CAAC;gBACF,IAAI,CAAC,GAAG;oBAAE,OAAO,SAAS,CAAC;gBAC3B,OAAO,GAAG,CAAC,OAAO;oBAChB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;oBAC/B,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;YACzC,CAAC,EACD,YAAY,CACb,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,KAAK;gBAAE,OAAO;YAExB,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;YACvC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,GAAG,GACP,IAAI,KAAK,IAAI;gBACX,CAAC,CAAC;oBACE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,SAAS;oBACT,OAAO;oBACP,SAAS,EAAE,QAAQ,CAAC,UAAU;oBAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;oBAC9B,OAAO,EAAE,IAAI;iBACd;gBACH,CAAC,CAAC;oBACE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,SAAS;oBACT,IAAI;oBACJ,OAAO;oBACP,SAAS,EAAE,QAAQ,CAAC,UAAU;oBAC9B,OAAO,EAAE,KAAK;iBACf,CAAC;YACR,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrB,aAAa,CAAC,IAAI,CAAC;gBACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,SAAS;gBACT,OAAO;gBACP,SAAS,EAAE,kBAAkB,EAAE;gBAC/B,GAAG;aACJ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;QAE/B,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,SAAS,SAAS,CAChB,QAAgB,EAChB,MAAc,EACd,SAAiB;QAEjB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC1C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,SAAS,aAAa,CACpB,IAA6B,EAC7B,MAA4B;QAE5B,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,IAAI,IAAI;gBAAE,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,SAAS,OAAO,CAAC,GAAqB;QACpC,uEAAuE;QACvE,mEAAmE;QACnE,sEAAsE;QACtE,iDAAiD;QACjD,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,SAAS,WAAW,CAClB,MAAc,EACd,OAA2B;QAE3B,IAAI,UAAU,GAA4B,IAAI,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;gBAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;YAC5D,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACnC,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;gBAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACpE,UAAU,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC9C,CAAC,GAAG,EAA2B,EAAE,CAC/B,CAAC,GAAG,CAAC,OAAO;YACZ,GAAG,CAAC,MAAM,KAAK,MAAM;YACrB,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC7C,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACjB,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,GAAG,GACP,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClE,OAAO,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC;YACxC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC7B,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;gBAChC,MAAM,GAAG,GACP,GAAG,KAAK,QAAQ;oBACd,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC;oBAC7B,CAAC,CAAC,GAAG,GAAG,QAAQ;wBACd,CAAC,CAAC,CAAC,CAAC;wBACJ,CAAC,CAAC,CAAC,CAAC;gBACV,OAAO,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEnC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACvB,GAAG,GAAG;gBACN,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;aAC9C,CAAC,CAAC;YACH,OAAO;YACP,UAAU,EACR,OAAO,IAAI,IAAI;gBACb,CAAC,CAAC,YAAY,CAAC;oBACX,IAAI,EAAE,MAAM;oBACZ,MAAM;oBACN,KAAK,EAAE,WAAW,EAAE;oBACpB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,CAAC;gBACJ,CAAC,CAAC,SAAS;SAChB,CAAC;IACJ,CAAC;IAED,SAAS,YAAY,CACnB,QAAgB,EAChB,MAAc,EACd,SAAiB,EACjB,SAAiB,EACjB,eAAgC;QAEhC,IAAI,eAAe,KAAK,aAAa;YAAE,OAAO,KAAK,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAEhD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC;QACrC,MAAM,SAAS,GAAwB;YACrC,QAAQ;YACR,MAAM;YACN,SAAS;YACT,OAAO;YACP,SAAS;YACT,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,IAAI;SACd,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ;YACR,MAAM;YACN,SAAS;YACT,OAAO;YACP,SAAS,EAAE,kBAAkB,EAAE;YAC/B,GAAG,EAAE,SAAS;SACf,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,YAAY,CACnB,MAAc,EACd,OAA4B;QAE5B,IAAI,OAAe,CAAC;QACpB,IAAI,YAA2B,CAAC;QAChC,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,mEAAmE;YACnE,oEAAoE;YACpE,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe;gBAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACrE,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACnC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAC1B,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;YACpC,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAChC,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC;gBACH,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;oBAC5C,MAAM,IAAI,kBAAkB,EAAE,CAAC;gBACjC,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe;gBAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACrE,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACnC,+DAA+D;YAC/D,qEAAqE;YACrE,+DAA+D;YAC/D,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;YAC/B,OAAO,GAAG,kBAAkB,EAAE,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,mEAAmE;YACnE,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,GAAG,kBAAkB,EAAE,CAAC;QACjC,CAAC;QAED,sEAAsE;QACtE,qEAAqE;QACrE,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,KAAK,MAAM;YACvB,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC5C,KAAK,CAAC,SAAS,IAAI,OAAO,CAC7B,CAAC;QAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAwB,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC5C,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC1B,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;oBACzB,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;oBAC/B,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;oBAC7B,CAAC,CAAC,SAAS,GAAG,YAAY;oBAC1B,CAAC,CAAC,SAAS,IAAI,OAAO,CACzB,CAAC;gBACF,IAAI,CAAC,eAAe;oBAAE,SAAS;YACjC,CAAC;YAED,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAEnE,IAAI,YAAY,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC5C,kEAAkE;gBAClE,iEAAiE;gBACjE,6DAA6D;gBAC7D,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC;qBAC5B,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;oBACzB,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;oBAC/B,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;oBAC7B,CAAC,CAAC,SAAS,IAAI,YAAY,CAC9B;qBACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5C,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;oBAC1C,MAAM,cAAc,GAAG,aAAa,CAClC,UAAU,CAAC,GAAG,CAAC,IAAI,EACnB,OAAO,CAAC,MAAM,CACf,CAAC;oBACF,IAAI,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;wBACpE,SAAS;oBACX,CAAC;gBACH,CAAC;YACH,CAAC;YAED,yEAAyE;YACzE,qEAAqE;YACrE,oEAAoE;YACpE,oEAAoE;YACpE,oEAAoE;YACpE,qEAAqE;YACrE,mEAAmE;YACnE,sEAAsE;YACtE,oEAAoE;YACpE,gCAAgC;YAChC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAE/D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;QAExD,OAAO;YACL,IAAI,EAAE,IAAI;YACV,OAAO;YACP,UAAU,EAAE,OAAO;gBACjB,CAAC,CAAC,YAAY,CAAC;oBACX,IAAI,EAAE,eAAe;oBACrB,MAAM;oBACN,KAAK,EAAE,WAAW,EAAE;oBACpB,OAAO;oBACP,YAAY;oBACZ,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK;iBAC/B,CAAC;gBACJ,CAAC,CAAC,SAAS;YACb,gBAAgB,EAAE,OAAO;gBACvB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,YAAY,CAAC;oBACX,IAAI,EAAE,eAAe;oBACrB,MAAM;oBACN,KAAK,EAAE,WAAW,EAAE;oBACpB,OAAO;oBACP,YAAY,EAAE,IAAI;oBAClB,MAAM,EAAE,CAAC;iBACV,CAAC;SACP,CAAC;IACJ,CAAC;IAED,SAAS,WAAW,CAAC,WAAqB;QACxC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAGrB,CAAC;QACJ,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,IAAI,GAAG,CAAC,OAAO;gBAAE,SAAS;YAC1B,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAC1E,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;YACjB,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtD,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC;YAC9B,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1D,MAAM;YACN,WAAW,EAAE,CAAC,CAAC,KAAK;YACpB,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,SAAS,kBAAkB,CAAC,MAAc;QACxC,wEAAwE;QACxE,mEAAmE;QACnE,oEAAoE;QACpE,0DAA0D;QAC1D,sEAAsE;QACtE,8DAA8D;QAC9D,sDAAsD;QACtD,MAAM,UAAU,GAAG,EAAE,CAAC;QACtB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,IAAI,GAAG,CAAC,OAAO;gBAAE,SAAS;YAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,QAA6C,CAAC;YACvE,IACE,OAAO;gBACP,OAAO,OAAO,KAAK,QAAQ;gBAC3B,OAAO,CAAC,OAAO,KAAK,MAAM,EAC1B,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC;oBACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,uEAAuE;IACvE,SAAS,iBAAiB,CAAC,IAAkB;QAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QACtD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC;IAC1E,CAAC;IAED,SAAS,cAAc,CAAC,KAAiB,EAAE,QAAgB;QACzD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC9C,IACE,QAAQ,CAAC,QAAQ,KAAK,QAAQ;gBAC9B,QAAQ,CAAC,MAAM,KAAK,MAAM;gBAC1B,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,UAAU,EACvC,CAAC;gBACD,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpC,qEAAqE;gBACrE,mEAAmE;gBACnE,wDAAwD;gBACxD,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBACrC,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,gEAAgE;gBAChE,6DAA6D;gBAC7D,4DAA4D;gBAC5D,wDAAwD;gBACxD,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAChD,CAAC;YACD,8DAA8D;YAC9D,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAiB;YACzB,MAAM;YACN,QAAQ;YACR,SAAS,EAAE,KAAK,CAAC,UAAU;YAC3B,MAAM;SACP,CAAC;QACF,wEAAwE;QACxE,qBAAqB;QACrB,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACrC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,YAAY,CAAC,MAAc;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QACtC,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1D,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,UAAU,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACjD,OAAO,KAAK,CAAC,KAAK,EAA6B,CAAC;IAClD,CAAC;IAED,OAAO;QACL,WAAW;QACX,SAAS;QACT,WAAW;QACX,YAAY;QACZ,YAAY;QACZ,WAAW;QACX,WAAW,EAAE,CAAC,IAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;QACjE,WAAW,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QAClD,cAAc;QACd,YAAY;QACZ,kBAAkB;QAClB,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YACnB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/storage/pdpp-records/portable.d.ts

@@ -0,0 +1,9 @@
+/** Record decisions and contracts shared by Node and browser runtimes. */
+export * from "./types.js";
+export type { PdppRecordStore, BlobReference } from "./interface.js";
+export { encodeRecordKey, computeRecordKeyFromData, keyMatchesData, RecordKeyError, } from "./record-key.js";
+export * from "./cursor.js";
+export * from "./ingest-plan.js";
+export * from "./stream-declaration.js";
+export * from "./enforcement.js";
+//# sourceMappingURL=portable.d.ts.map

package/dist/storage/pdpp-records/portable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portable.d.ts","sourceRoot":"","sources":["../../../src/storage/pdpp-records/portable.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,cAAc,YAAY,CAAC;AAC3B,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,cAAc,EACd,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC"}

package/dist/storage/pdpp-records/portable.js

@@ -0,0 +1,8 @@
+/** Record decisions and contracts shared by Node and browser runtimes. */
+export * from "./types.js";
+export { encodeRecordKey, computeRecordKeyFromData, keyMatchesData, RecordKeyError, } from "./record-key.js";
+export * from "./cursor.js";
+export * from "./ingest-plan.js";
+export * from "./stream-declaration.js";
+export * from "./enforcement.js";
+//# sourceMappingURL=portable.js.map

package/dist/storage/pdpp-records/portable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portable.js","sourceRoot":"","sources":["../../../src/storage/pdpp-records/portable.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,cAAc,YAAY,CAAC;AAE3B,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,cAAc,EACd,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC"}