@opendatalabs/personal-server-ts-core 1.34.1 → 1.35.0

package/dist/replication/copies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"copies.d.ts","sourceRoot":"","sources":["../../src/replication/copies.ts"],"names":[],"mappings":"AAWA,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,GAAG,EAET,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAC1B,MAAM,cAAc,CAAC;AAEtB,eAAO,MAAM,sBAAsB,wgHAgElC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;IAC7B,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,eAAe,CAAC;IAC1B,SAAS,EAAE,SAAS,YAAY,EAAE,CAAC;IACnC,wEAAwE;IACxE,KAAK,EAAE,SAAS;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACpD;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,uEAAuE;AACvE,qBAAa,kBAAmB,SAAQ,KAAK;IAE/B,QAAQ,CAAC,MAAM,EAAE,MAAM;IADnC,QAAQ,CAAC,IAAI,0BAA0B;gBAClB,MAAM,EAAE,MAAM;CAIpC;AAED,gFAAgF;AAChF,MAAM,WAAW,iBAAiB,CAAC,CAAC,GAAG,oBAAoB;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,cAAc,CACZ,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAC1B,EAAE,EAAE,MAAM,GACT,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1B,4EAA4E;IAC5E,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D;;;OAGG;IACH,OAAO,EAAE;QACP,IAAI,CACF,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,eAAe,EACzB,SAAS,EAAE,MAAM,GAChB,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1B,IAAI,CACF,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,WAAW,GAAG,aAAa,GACjC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;KAC3B,CAAC;IACF,+DAA+D;IAC/D,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7E;;;OAGG;IACH,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,GAAG,IAAI,MAAM,CAAC;CACf;AAwCD;;;GAGG;AACH,wBAAiB,mBAAmB,CAAC,CAAC,SAAS,oBAAoB,EACjE,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,GACd,aAAa,CAAC,eAAe,EAAE,CAAC,CAAC,CAqBnC;AAiCD,wBAAgB,aAAa,CAAC,CAAC,SAAS,oBAAoB,EAC1D,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;iBA0DpB,MAAM,WACD;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;sBAtCrB,MAAM;eA8KlB,MAAM;iBAEW,GAAG;;;;;IAMhC;;;;OAIG;gBAEK,UAAU,WACP;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;iBAC9B,GAAG,GAAG,SAAS;kBAAY,YAAY;;IA8GxD;;;;OAIG;sBACgB;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,aAAa,CAAC;KACrB;IAwDD,2EAA2E;gBA7QzD,MAAM,YAAY,YAAY;oBAqC1B,MAAM,UAAU,MAAM;IA2O5C;;;;;;;OAOG;mBACa;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE;EA2FnD;AACD,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,oBAAoB,IAAI,UAAU,CAC3E,OAAO,aAAa,CAAC,CAAC,CAAC,CACxB,CAAC"}

package/dist/replication/copies.js

@@ -0,0 +1,437 @@
+/**
+ * Batch-copy retention, finalized-fact history and batch disposition
+ * (contract v3.1, replica-copy-promotion-contract-1021-v3.md), as storage
+ * effects that Node (`server/src/storage/pdpp-replica-copies.ts`) and
+ * PS-Lite (`lite/src/replication-engine.ts`) both run. Replica tables only;
+ * the host supplies canonical import, connection withdrawal, the pending
+ * preview and pending byte custody. Every transition is idempotent under
+ * replay; the caller owns the transaction.
+ */
+import { sha256 } from "@noble/hashes/sha256";
+import { bytesToHex } from "@noble/hashes/utils";
+import { canonicalJson, REPLICA_TEXT_PART_BYTES, replicaTextParts, } from "./envelope.js";
+import { decideCopyPromotion, indexEvidenceFromFacts, replicaCopyKey, } from "./copy-promotion.js";
+import { replicaChainCommitment } from "./dpv2.js";
+import { sql, } from "./effects.js";
+export const REPLICA_COPY_MIGRATION = `
+CREATE TABLE IF NOT EXISTS pdpp_replica_copies (
+  id TEXT NOT NULL,
+  copy_key TEXT NOT NULL,
+  writer_id TEXT NOT NULL,
+  batch_id TEXT NOT NULL,
+  sequence INTEGER NOT NULL,
+  previous_json TEXT,
+  fragment_count INTEGER NOT NULL CHECK (fragment_count >= 1),
+  fragment_commitments_json TEXT NOT NULL,
+  envelope_digest TEXT NOT NULL,
+  envelope_json TEXT NOT NULL,
+  blobs_json TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('pending','confirmed','quarantined')),
+  reason TEXT CHECK (reason IS NULL OR reason IN ('copy_conflict','finalized_conflict')),
+  CHECK ((state = 'quarantined') = (reason IS NOT NULL)),
+  PRIMARY KEY (id, copy_key)
+);
+CREATE TABLE IF NOT EXISTS pdpp_replica_copy_envelope_parts (
+  id TEXT NOT NULL, copy_key TEXT NOT NULL, part INTEGER NOT NULL,
+  json TEXT NOT NULL,
+  PRIMARY KEY (id, copy_key, part)
+);
+CREATE TABLE IF NOT EXISTS pdpp_replica_copy_blob_parts (
+  id TEXT NOT NULL, copy_key TEXT NOT NULL, part INTEGER NOT NULL,
+  json TEXT NOT NULL,
+  PRIMARY KEY (id, copy_key, part)
+);
+CREATE TABLE IF NOT EXISTS pdpp_replica_copy_rejects (
+  id TEXT NOT NULL, reject_key TEXT NOT NULL, claimed_copy_key TEXT,
+  reason TEXT NOT NULL, received_at INTEGER NOT NULL,
+  PRIMARY KEY (id, reject_key)
+);
+CREATE TRIGGER IF NOT EXISTS pdpp_copy_rejects_no_update BEFORE UPDATE ON pdpp_replica_copy_rejects BEGIN SELECT RAISE(ABORT, 'copy rejects are append-only'); END;
+CREATE TRIGGER IF NOT EXISTS pdpp_copy_rejects_no_delete BEFORE DELETE ON pdpp_replica_copy_rejects BEGIN SELECT RAISE(ABORT, 'copy rejects are append-only'); END;
+CREATE TABLE IF NOT EXISTS pdpp_replica_finalized_facts (
+  seq INTEGER PRIMARY KEY AUTOINCREMENT,
+  chain_id INTEGER NOT NULL, registry TEXT NOT NULL, owner TEXT NOT NULL,
+  scope TEXT NOT NULL, fragment_index INTEGER NOT NULL, id TEXT NOT NULL,
+  slot_version TEXT NOT NULL DEFAULT '1', current_version TEXT NOT NULL, status TEXT NOT NULL, commitment TEXT NOT NULL,
+  block_number TEXT NOT NULL, block_hash TEXT NOT NULL, eligible INTEGER NOT NULL,
+  observed_at INTEGER NOT NULL
+);
+CREATE INDEX IF NOT EXISTS pdpp_finalized_facts_id ON pdpp_replica_finalized_facts(id, fragment_index, seq);
+CREATE INDEX IF NOT EXISTS pdpp_finalized_facts_scope ON pdpp_replica_finalized_facts(scope, seq);
+CREATE TRIGGER IF NOT EXISTS pdpp_finalized_facts_no_update BEFORE UPDATE ON pdpp_replica_finalized_facts BEGIN SELECT RAISE(ABORT, 'finalized facts are append-only'); END;
+CREATE TRIGGER IF NOT EXISTS pdpp_finalized_facts_no_delete BEFORE DELETE ON pdpp_replica_finalized_facts BEGIN SELECT RAISE(ABORT, 'finalized facts are append-only'); END;
+CREATE TABLE IF NOT EXISTS pdpp_replica_batch_disposition (
+  id TEXT PRIMARY KEY,
+  writer_id TEXT NOT NULL,
+  sequence INTEGER NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('open','promoted','terminal')),
+  promoted_copy_key TEXT,
+  terminal_reason TEXT,
+  CHECK ((state = 'promoted') = (promoted_copy_key IS NOT NULL)),
+  CHECK ((state = 'terminal') = (terminal_reason IS NOT NULL))
+);
+CREATE INDEX IF NOT EXISTS pdpp_batch_disposition_writer ON pdpp_replica_batch_disposition(writer_id, sequence);
+CREATE TRIGGER IF NOT EXISTS pdpp_batch_disposition_absorbing BEFORE UPDATE ON pdpp_replica_batch_disposition
+WHEN OLD.state = 'terminal' OR (OLD.state = 'promoted' AND NEW.state = 'open')
+BEGIN SELECT RAISE(ABORT, 'batch disposition transitions are absorbing'); END;
+CREATE TABLE IF NOT EXISTS pdpp_replica_promotion_receipts (
+  id TEXT PRIMARY KEY, copy_key TEXT NOT NULL, envelope_digest TEXT NOT NULL
+);
+`;
+/** Precondition failures a caller can act on; never exception text. */
+export class ReplicaCopyRefused extends Error {
+    reason;
+    code = "replica_copy_refused";
+    constructor(reason) {
+        super(reason);
+        this.reason = reason;
+        this.name = "ReplicaCopyRefused";
+    }
+}
+const lowerHex = /^0x[0-9a-f]{64}$/;
+const ROW_COLUMNS = "id,copy_key,writer_id,batch_id,sequence,previous_json,fragment_count,fragment_commitments_json,envelope_digest,state,reason";
+/**
+ * A copy's envelope. Copies staged before the parts table keep it in
+ * `envelope_json`; later copies leave that empty and keep it in parts.
+ */
+export function* replicaCopyEnvelope(id, copyKey) {
+    const whole = yield* sql.get("SELECT envelope_json FROM pdpp_replica_copies WHERE id=? AND copy_key=?", id, copyKey);
+    if (!whole)
+        throw new Error("unknown replica copy");
+    if (whole.envelope_json)
+        return JSON.parse(whole.envelope_json);
+    let json = "";
+    for (let part = 0;; part++) {
+        const row = yield* sql.get("SELECT json FROM pdpp_replica_copy_envelope_parts WHERE id=? AND copy_key=? AND part=?", id, copyKey, part);
+        if (!row)
+            break;
+        json += row.json;
+    }
+    return JSON.parse(json);
+}
+/**
+ * A copy's blob descriptors as JSON. Copies staged before the parts table
+ * keep them in `blobs_json`; later copies leave that empty and keep them in
+ * parts, so a batch of many small blobs never builds one SQL value above
+ * the phone's bound.
+ */
+function* copyBlobsJson(id, copyKey) {
+    const whole = yield* sql.get("SELECT blobs_json FROM pdpp_replica_copies WHERE id=? AND copy_key=?", id, copyKey);
+    if (!whole)
+        throw new Error("unknown replica copy");
+    if (whole.blobs_json)
+        return whole.blobs_json;
+    let json = "";
+    for (let part = 0;; part++) {
+        const row = yield* sql.get("SELECT json FROM pdpp_replica_copy_blob_parts WHERE id=? AND copy_key=? AND part=?", id, copyKey, part);
+        if (!row)
+            break;
+        json += row.json;
+    }
+    return json;
+}
+export function replicaCopies(host) {
+    // Without the envelope: a phone's SQL call returns at most about 1 MiB.
+    const rows = (id) => sql.all(`SELECT ${ROW_COLUMNS} FROM pdpp_replica_copies WHERE id=? ORDER BY copy_key`, id);
+    const envelopeOf = (id, copyKey) => replicaCopyEnvelope(id, copyKey);
+    const blobsOf = function* (id, copyKey) {
+        return JSON.parse(yield* copyBlobsJson(id, copyKey));
+    };
+    const dispositionRow = (id) => sql.get("SELECT * FROM pdpp_replica_batch_disposition WHERE id=?", id);
+    function* disposition(id) {
+        const row = yield* dispositionRow(id);
+        if (!row || row.state === "open")
+            return { state: "open" };
+        if (row.state === "promoted")
+            return { state: "promoted", copyKey: row.promoted_copy_key };
+        return { state: "terminal", reason: row.terminal_reason };
+    }
+    function* evidence(id) {
+        const facts = yield* sql.all("SELECT * FROM pdpp_replica_finalized_facts WHERE id=? ORDER BY fragment_index,seq", id);
+        const byIndex = new Map();
+        for (const f of facts)
+            byIndex.set(f.fragment_index, [
+                ...(byIndex.get(f.fragment_index) ?? []),
+                {
+                    chainId: f.chain_id,
+                    registry: f.registry,
+                    owner: f.owner,
+                    version: f.slot_version,
+                    currentVersion: f.current_version,
+                    status: f.status,
+                    commitment: f.commitment,
+                    blockNumber: BigInt(f.block_number),
+                    blockHash: f.block_hash,
+                    eligible: f.eligible === 1,
+                },
+            ]);
+        return new Map([...byIndex].map(([index, list]) => [
+            index,
+            indexEvidenceFromFacts(list),
+        ]));
+    }
+    function* decide(id, refetch) {
+        return decideCopyPromotion({
+            id,
+            disposition: yield* disposition(id),
+            copies: (yield* rows(id)).map((row) => ({
+                copyKey: row.copy_key,
+                fragmentCommitments: JSON.parse(row.fragment_commitments_json),
+                validity: "valid",
+            })),
+            evidence: yield* evidence(id),
+            refetch,
+        });
+    }
+    /** Raise reasons only: copy_conflict < finalized_conflict; confirmed copies stay. */
+    function* quarantine(id, keys, reason, includeConfirmed = false) {
+        for (const key of keys) {
+            const row = yield* sql.get("SELECT state,reason FROM pdpp_replica_copies WHERE id=? AND copy_key=?", id, key);
+            if (!row)
+                continue;
+            if (row.state === "confirmed" && !includeConfirmed)
+                continue;
+            if (row.reason === "finalized_conflict")
+                continue;
+            if (row.reason === reason)
+                continue;
+            yield* sql.run("UPDATE pdpp_replica_copies SET state='quarantined',reason=? WHERE id=? AND copy_key=?", reason, id, key);
+        }
+    }
+    /** Keep the read side's single pending preview equal to the copy states. */
+    function* syncPreview(id) {
+        const all = yield* rows(id);
+        const pending = all.filter((row) => row.state === "pending");
+        if (pending.length === 1) {
+            const row = pending[0];
+            yield* host.preview.show(id, yield* envelopeOf(id, row.copy_key), yield* copyBlobsJson(id, row.copy_key));
+        }
+        else
+            yield* host.preview.hide(id, all.some((row) => row.state === "confirmed")
+                ? "confirmed"
+                : "quarantined");
+    }
+    function* apply(id, decision) {
+        if (decision.kind === "terminal")
+            yield* terminate(id, decision.reason);
+        else if (decision.kind !== "promote")
+            yield* quarantine(id, decision.quarantine, "copy_conflict");
+        yield* syncPreview(id);
+    }
+    /** The batch at (writer, sequence - 1), and whether it may precede this one. */
+    function* predecessorOf(row) {
+        const previous = row.previous_json
+            ? JSON.parse(row.previous_json)
+            : null;
+        if (row.sequence === 1)
+            return previous
+                ? { kind: "terminal", reason: "predecessor_mismatch" }
+                : undefined;
+        if (!previous)
+            return { kind: "terminal", reason: "predecessor_mismatch" };
+        const predecessor = canonicalJson([row.writer_id, previous.batch]);
+        const state = yield* dispositionRow(predecessor);
+        if (state?.state === "terminal")
+            return { kind: "terminal", reason: "predecessor_terminal" };
+        if (state?.state !== "promoted" || state.sequence !== row.sequence - 1)
+            return { kind: "wait_predecessor", predecessor };
+        const receipt = yield* sql.get("SELECT envelope_digest FROM pdpp_replica_promotion_receipts WHERE id=?", predecessor);
+        return receipt?.envelope_digest === previous.digest
+            ? undefined
+            : { kind: "terminal", reason: "predecessor_mismatch" };
+    }
+    /**
+     * Terminal transition (contract F3, amendments A and H): the batch and every
+     * later batch of its writer become terminal; their valid copies rise to
+     * finalized_conflict; every connection a promoted batch in that set touched
+     * is withdrawn from all readers in this same transaction.
+     */
+    function* terminate(id, reason) {
+        const root = yield* dispositionRow(id);
+        if (!root)
+            return;
+        const chain = yield* sql.all("SELECT id,state,promoted_copy_key FROM pdpp_replica_batch_disposition WHERE writer_id=? AND sequence>=? ORDER BY sequence", root.writer_id, root.sequence);
+        const connections = new Set();
+        for (const batch of chain) {
+            if (batch.state === "promoted" && batch.promoted_copy_key) {
+                for (const op of (yield* envelopeOf(batch.id, batch.promoted_copy_key))
+                    .operations)
+                    connections.add(op.connectionId);
+            }
+            if (batch.state !== "terminal")
+                yield* sql.run("UPDATE pdpp_replica_batch_disposition SET state='terminal',promoted_copy_key=NULL,terminal_reason=? WHERE id=?", batch.id === id ? reason : "predecessor_terminal", batch.id);
+            yield* quarantine(batch.id, (yield* rows(batch.id)).map((row) => row.copy_key), "finalized_conflict", true);
+            yield* syncPreview(batch.id);
+        }
+        for (const instance of connections)
+            yield* host.quarantineConnection(instance);
+    }
+    return {
+        decide,
+        disposition,
+        *copies(id) {
+            return (yield* rows(id)).map((row) => ({
+                copyKey: row.copy_key,
+                state: row.state,
+                reason: row.reason,
+                envelopeDigest: row.envelope_digest,
+            }));
+        },
+        /**
+         * Retain one valid copy (contract §3 "Stage copy", amendment C), then
+         * decide and apply the quarantine set. Returns the copy key and decision.
+         * An input failing a validity check is recorded as a reject only.
+         */
+        *stage(copy, refetch) {
+            const pairs = copy.fragments.map((f) => [f.dataHash, f.metadataHash]);
+            const invalid = copy.id !== canonicalJson([copy.writer, copy.batch])
+                ? "identity_mismatch"
+                : !copy.fragments.length
+                    ? "empty"
+                    : pairs.flat().some((h) => !lowerHex.test(h))
+                        ? "hash_encoding"
+                        : copy.envelope.owner !== host.owner
+                            ? "owner"
+                            : undefined;
+            if (invalid) {
+                yield* sql.run("INSERT OR IGNORE INTO pdpp_replica_copy_rejects VALUES (?,?,?,?,?)", copy.id, bytesToHex(sha256(new TextEncoder().encode(canonicalJson(pairs)))), null, invalid, host.now());
+                return {
+                    copyKey: undefined,
+                    decision: yield* decide(copy.id, refetch),
+                };
+            }
+            const commitments = copy.fragments.map((f) => replicaChainCommitment(f.dataHash, f.metadataHash).toLowerCase());
+            const copyKey = replicaCopyKey(commitments);
+            yield* sql.run("INSERT OR IGNORE INTO pdpp_replica_batch_disposition (id,writer_id,sequence,state) VALUES (?,?,?,'open')", copy.id, copy.writer, copy.sequence);
+            const existing = yield* sql.get("SELECT envelope_digest,fragment_commitments_json FROM pdpp_replica_copies WHERE id=? AND copy_key=?", copy.id, copyKey);
+            if (existing) {
+                // Same key, different content would need a keccak collision.
+                if (existing.envelope_digest !== copy.envelopeDigest ||
+                    existing.fragment_commitments_json !== canonicalJson(commitments))
+                    yield* terminate(copy.id, "finalized_conflict");
+            }
+            else {
+                yield* sql.run("INSERT INTO pdpp_replica_copies VALUES (?,?,?,?,?,?,?,?,?,'','','pending',NULL)", copy.id, copyKey, copy.writer, copy.batch, copy.sequence, copy.previous ? canonicalJson(copy.previous) : null, copy.fragments.length, canonicalJson(commitments), copy.envelopeDigest);
+                for (const [part, json] of replicaTextParts(canonicalJson(copy.blobs), REPLICA_TEXT_PART_BYTES).entries())
+                    yield* sql.run("INSERT INTO pdpp_replica_copy_blob_parts VALUES (?,?,?,?)", copy.id, copyKey, part, json);
+                const parts = replicaTextParts(canonicalJson(copy.envelope), REPLICA_TEXT_PART_BYTES);
+                for (const [part, json] of parts.entries())
+                    yield* sql.run("INSERT INTO pdpp_replica_copy_envelope_parts VALUES (?,?,?,?)", copy.id, copyKey, part, json);
+            }
+            // A later batch of a terminal writer chain is terminal on staging (H).
+            const earlierTerminal = yield* sql.get("SELECT 1 FROM pdpp_replica_batch_disposition WHERE writer_id=? AND sequence<? AND state='terminal' LIMIT 1", copy.writer, copy.sequence);
+            if (earlierTerminal && (yield* disposition(copy.id)).state !== "terminal")
+                yield* terminate(copy.id, "predecessor_terminal");
+            // A copy arriving after promotion decides reconcile_promoted, which
+            // quarantines it below; the confirmed copy is untouched.
+            const decision = yield* decide(copy.id, refetch);
+            if (decision.kind !== "promote")
+                yield* apply(copy.id, decision);
+            else {
+                yield* quarantine(copy.id, decision.quarantine, "copy_conflict");
+                yield* syncPreview(copy.id);
+            }
+            return { copyKey, decision };
+        },
+        /**
+         * Append a verified finalized fact for one registered slot (F2). A fact
+         * from another owner is refused (a diagnostic, never a fact). Returns
+         * true when it is new.
+         */
+        *recordFact(input) {
+            if (input.fact.owner.toLowerCase() !== host.owner.toLowerCase())
+                throw new ReplicaCopyRefused("fact_authority");
+            // A poll that observes the same state at a later block adds nothing a
+            // decision reads (the latest fact's content is unchanged), so polling
+            // a waiting slot does not grow the history.
+            const latest = (yield* sql.all("SELECT current_version,status,commitment,block_number,eligible FROM pdpp_replica_finalized_facts WHERE chain_id=? AND registry=? AND owner=? AND scope=? AND slot_version=? ORDER BY seq", input.fact.chainId, input.fact.registry.toLowerCase(), input.fact.owner.toLowerCase(), input.scope, input.fact.version)).reduce((a, b) => a === undefined || BigInt(b.block_number) >= BigInt(a.block_number)
+                ? b
+                : a, undefined);
+            if (latest &&
+                BigInt(latest.block_number) <= input.fact.blockNumber &&
+                latest.current_version === input.fact.currentVersion &&
+                latest.status === input.fact.status &&
+                latest.commitment === input.fact.commitment.toLowerCase() &&
+                latest.eligible === (input.fact.eligible ? 1 : 0))
+                return false;
+            return ((yield* sql.run("INSERT INTO pdpp_replica_finalized_facts (chain_id,registry,owner,scope,fragment_index,id,slot_version,current_version,status,commitment,block_number,block_hash,eligible,observed_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?)", input.fact.chainId, input.fact.registry.toLowerCase(), input.fact.owner.toLowerCase(), input.scope, input.fragmentIndex, input.id, input.fact.version, input.fact.currentVersion, input.fact.status, input.fact.commitment.toLowerCase(), input.fact.blockNumber.toString(), input.fact.blockHash.toLowerCase(), input.fact.eligible ? 1 : 0, host.now())).changes > 0);
+        },
+        /** Apply a non-promoting decision's durable effects (coordinator step). */
+        apply,
+        terminate,
+        /**
+         * Promote one copy (contract §3, amendments E and F): re-decide and
+         * re-check the predecessor; import the copy under a savepoint; confirm
+         * it, quarantine the rest, record the disposition and the receipt. A
+         * replay of a completed promotion returns the original receipt and
+         * changes nothing. A bare promote (no key) is refused when more than one
+         * copy is retained.
+         */
+        *promote(input) {
+            const all = yield* rows(input.id);
+            if (input.copyKey === undefined && all.length !== 1)
+                throw new ReplicaCopyRefused("ambiguous_copy");
+            const copyKey = (input.copyKey ?? all[0].copy_key).toLowerCase();
+            const receipt = yield* sql.get("SELECT copy_key,envelope_digest FROM pdpp_replica_promotion_receipts WHERE id=?", input.id);
+            const state = yield* disposition(input.id);
+            if (state.state === "terminal")
+                return { kind: "terminal", reason: state.reason };
+            if (state.state === "promoted" && receipt?.copy_key === copyKey)
+                return {
+                    kind: "promoted",
+                    copyKey: copyKey,
+                    envelopeDigest: receipt.envelope_digest,
+                    replay: true,
+                };
+            const decision = yield* decide(input.id, { attempts: 0, budget: 1 });
+            if (decision.kind === "terminal") {
+                yield* terminate(input.id, decision.reason);
+                return { kind: "terminal", reason: decision.reason };
+            }
+            if (decision.kind !== "promote" || decision.copyKey !== copyKey)
+                throw new ReplicaCopyRefused("not_promotable");
+            const row = all.find((r) => r.copy_key === copyKey);
+            const precondition = yield* predecessorOf(row);
+            if (precondition?.kind === "terminal") {
+                yield* terminate(input.id, precondition.reason);
+                return precondition;
+            }
+            if (precondition)
+                return precondition;
+            if (receipt && receipt.copy_key !== copyKey) {
+                yield* terminate(input.id, "receipt_conflict");
+                return { kind: "terminal", reason: "receipt_conflict" };
+            }
+            // The import runs in a savepoint: an invariant violation inside it
+            // rolls back the import alone, and the terminal transition commits.
+            const blobs = yield* blobsOf(input.id, copyKey);
+            try {
+                yield* host.savepoint(host.importEnvelope(yield* envelopeOf(input.id, copyKey), blobs, input.id));
+            }
+            catch (error) {
+                if (!(error instanceof ReplicaCopyRefused))
+                    throw error;
+                yield* terminate(input.id, error.reason);
+                return { kind: "terminal", reason: error.reason };
+            }
+            yield* sql.run("UPDATE pdpp_replica_copies SET state='confirmed',reason=NULL WHERE id=? AND copy_key=?", input.id, copyKey);
+            yield* quarantine(input.id, decision.quarantine, "copy_conflict");
+            yield* sql.run("UPDATE pdpp_replica_batch_disposition SET state='promoted',promoted_copy_key=? WHERE id=?", copyKey, input.id);
+            yield* sql.run("INSERT INTO pdpp_replica_promotion_receipts VALUES (?,?,?)", input.id, copyKey, row.envelope_digest);
+            yield* syncPreview(input.id);
+            const kept = new Set();
+            for (const r of yield* rows(input.id))
+                if (r.copy_key !== copyKey)
+                    for (const b of yield* blobsOf(input.id, r.copy_key))
+                        kept.add(b.blobId);
+            yield* host.releaseBytes(input.id, blobs.map((b) => b.blobId).filter((b) => !kept.has(b)));
+            return {
+                kind: "promoted",
+                copyKey: copyKey,
+                envelopeDigest: row.envelope_digest,
+                replay: false,
+            };
+        },
+    };
+}
+//# sourceMappingURL=copies.js.map

package/dist/replication/copies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copies.js","sourceRoot":"","sources":["../../src/replication/copies.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,GAMf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EACL,GAAG,GAGJ,MAAM,cAAc,CAAC;AAEtB,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgErC,CAAC;AA2BF,uEAAuE;AACvE,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEtB;IADZ,IAAI,GAAG,sBAAsB,CAAC;IACvC,YAAqB,MAAc;QACjC,KAAK,CAAC,MAAM,CAAC,CAAC;QADK,WAAM,GAAN,MAAM,CAAQ;QAEjC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAsCD,MAAM,QAAQ,GAAG,kBAAkB,CAAC;AAepC,MAAM,WAAW,GACf,6HAA6H,CAAC;AAsBhI;;;GAGG;AACH,MAAM,SAAS,CAAC,CAAC,mBAAmB,CAClC,EAAU,EACV,OAAe;IAEf,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAC1B,yEAAyE,EACzE,EAAE,EACF,OAAO,CACR,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,aAAa;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAoB,CAAC;IAC5D,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,IAAI,GAAG,CAAC,GAAI,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACxB,wFAAwF,EACxF,EAAE,EACF,OAAO,EACP,IAAI,CACL,CAAC;QACF,IAAI,CAAC,GAAG;YAAE,MAAM;QAChB,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,QAAQ,CAAC,CAAC,aAAa,CACrB,EAAU,EACV,OAAe;IAEf,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAC1B,sEAAsE,EACtE,EAAE,EACF,OAAO,CACR,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC,UAAU,CAAC;IAC9C,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,IAAI,GAAG,CAAC,GAAI,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACxB,oFAAoF,EACpF,EAAE,EACF,OAAO,EACP,IAAI,CACL,CAAC;QACF,IAAI,CAAC,GAAG;YAAE,MAAM;QAChB,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAA0B;IAG1B,wEAAwE;IACxE,MAAM,IAAI,GAAG,CAAC,EAAU,EAAa,EAAE,CACrC,GAAG,CAAC,GAAG,CACL,UAAU,WAAW,wDAAwD,EAC7E,EAAE,CACH,CAAC;IACJ,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,OAAe,EAAE,EAAE,CACjD,mBAAmB,CAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,EAAU,EAAE,OAAe;QACpD,OAAO,IAAI,CAAC,KAAK,CACf,KAAK,CAAC,CAAC,aAAa,CAAI,EAAE,EAAE,OAAO,CAAC,CACd,CAAC;IAC3B,CAAC,CAAC;IACF,MAAM,cAAc,GAAG,CAAC,EAAU,EAAkC,EAAE,CACpE,GAAG,CAAC,GAAG,CACL,yDAAyD,EACzD,EAAE,CACH,CAAC;IACJ,QAAQ,CAAC,CAAC,WAAW,CAAC,EAAU;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3D,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU;YAC1B,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,iBAAwB,EAAE,CAAC;QACtE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,eAAgB,EAAE,CAAC;IAC7D,CAAC;IACD,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAU;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAC1B,mFAAmF,EACnF,EAAE,CACH,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,KAAK;YACnB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE;gBAC5B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBACxC;oBACE,OAAO,EAAE,CAAC,CAAC,QAAQ;oBACnB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,OAAO,EAAE,CAAC,CAAC,YAAY;oBACvB,cAAc,EAAE,CAAC,CAAC,eAAe;oBACjC,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,UAAU,EAAE,CAAC,CAAC,UAAiB;oBAC/B,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;oBACnC,SAAS,EAAE,CAAC,CAAC,UAAiB;oBAC9B,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC;iBAC3B;aACF,CAAC,CAAC;QACL,OAAO,IAAI,GAAG,CACZ,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YAClC,KAAK;YACL,sBAAsB,CAAC,IAAI,CAAC;SAC7B,CAAC,CACH,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,CAAC,MAAM,CACd,EAAU,EACV,OAA6C;QAE7C,OAAO,mBAAmB,CAAC;YACzB,EAAE;YACF,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACtC,OAAO,EAAE,GAAG,CAAC,QAAe;gBAC5B,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAU;gBACvE,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,QAAQ,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,qFAAqF;IACrF,QAAQ,CAAC,CAAC,UAAU,CAClB,EAAU,EACV,IAAuB,EACvB,MAA8C,EAC9C,gBAAgB,GAAG,KAAK;QAExB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACxB,wEAAwE,EACxE,EAAE,EACF,GAAG,CACJ,CAAC;YACF,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,gBAAgB;gBAAE,SAAS;YAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,oBAAoB;gBAAE,SAAS;YAClD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,SAAS;YACpC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACZ,uFAAuF,EACvF,MAAM,EACN,EAAE,EACF,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IACD,4EAA4E;IAC5E,QAAQ,CAAC,CAAC,WAAW,CAAC,EAAU;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YACxB,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB,EAAE,EACF,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,EACnC,KAAK,CAAC,CAAC,aAAa,CAAI,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAC1C,CAAC;QACJ,CAAC;;YACC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB,EAAE,EACF,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,WAAW,CAAC;gBAC1C,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,aAAa,CAClB,CAAC;IACN,CAAC;IACD,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAU,EAAE,QAAsB;QAChD,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;YAAE,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;aACnE,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;YAClC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAC9D,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,gFAAgF;IAChF,QAAQ,CAAC,CAAC,aAAa,CAAC,GAAQ;QAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa;YAChC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAiB;YAChD,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC;YACpB,OAAO,QAAQ;gBACb,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,sBAAsB,EAAE;gBACtD,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAC3E,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,KAAK,EAAE,KAAK,KAAK,UAAU;YAC7B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAC9D,IAAI,KAAK,EAAE,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,GAAG,CAAC;YACpE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAC5B,wEAAwE,EACxE,WAAW,CACZ,CAAC;QACF,OAAO,OAAO,EAAE,eAAe,KAAK,QAAQ,CAAC,MAAM;YACjD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC3D,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,CAAC,SAAS,CAAC,EAAU,EAAE,MAAc;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAK1B,2HAA2H,EAC3H,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QACtC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC1D,KAAK,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;qBACpE,UAAU;oBACX,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU;gBAC5B,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACZ,gHAAgH,EAChH,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,EACjD,KAAK,CAAC,EAAE,CACT,CAAC;YACJ,KAAK,CAAC,CAAC,UAAU,CACf,KAAK,CAAC,EAAE,EACR,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAClD,oBAAoB,EACpB,IAAI,CACL,CAAC;YACF,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,WAAW;YAChC,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO;QACL,MAAM;QACN,WAAW;QACX,CAAC,MAAM,CAAC,EAAU;YAChB,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACrC,OAAO,EAAE,GAAG,CAAC,QAAe;gBAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,GAAG,CAAC,eAAe;aACpC,CAAC,CAAC,CAAC;QACN,CAAC;QACD;;;;WAIG;QACH,CAAC,KAAK,CACJ,IAAgB,EAChB,OAA6C;YAE7C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YACtE,MAAM,OAAO,GACX,IAAI,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBAClD,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM;oBACtB,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBAC3C,CAAC,CAAC,eAAe;wBACjB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;4BAClC,CAAC,CAAC,OAAO;4BACT,CAAC,CAAC,SAAS,CAAC;YACtB,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACZ,oEAAoE,EACpE,IAAI,CAAC,EAAE,EACP,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAClE,IAAI,EACJ,OAAO,EACP,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;gBACF,OAAO;oBACL,OAAO,EAAE,SAAS;oBAClB,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC;iBAC1C,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACpC,CAAC,CAAC,EAAE,EAAE,CACJ,sBAAsB,CACpB,CAAC,CAAC,QAAe,EACjB,CAAC,CAAC,YAAmB,CACtB,CAAC,WAAW,EAAS,CACzB,CAAC;YACF,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5C,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACZ,0GAA0G,EAC1G,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,QAAQ,CACd,CAAC;YACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAI7B,qGAAqG,EACrG,IAAI,CAAC,EAAE,EACP,OAAO,CACR,CAAC;YACF,IAAI,QAAQ,EAAE,CAAC;gBACb,6DAA6D;gBAC7D,IACE,QAAQ,CAAC,eAAe,KAAK,IAAI,CAAC,cAAc;oBAChD,QAAQ,CAAC,yBAAyB,KAAK,aAAa,CAAC,WAAW,CAAC;oBAEjE,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACZ,iFAAiF,EACjF,IAAI,CAAC,EAAE,EACP,OAAO,EACP,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EACnD,IAAI,CAAC,SAAS,CAAC,MAAM,EACrB,aAAa,CAAC,WAAW,CAAC,EAC1B,IAAI,CAAC,cAAc,CACpB,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,gBAAgB,CACzC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EACzB,uBAAuB,CACxB,CAAC,OAAO,EAAE;oBACT,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACZ,2DAA2D,EAC3D,IAAI,CAAC,EAAE,EACP,OAAO,EACP,IAAI,EACJ,IAAI,CACL,CAAC;gBACJ,MAAM,KAAK,GAAG,gBAAgB,CAC5B,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC5B,uBAAuB,CACxB,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE;oBACxC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACZ,+DAA+D,EAC/D,IAAI,CAAC,EAAE,EACP,OAAO,EACP,IAAI,EACJ,IAAI,CACL,CAAC;YACN,CAAC;YACD,uEAAuE;YACvE,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACpC,4GAA4G,EAC5G,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,QAAQ,CACd,CAAC;YACF,IAAI,eAAe,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU;gBACvE,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAAC;YACpD,oEAAoE;YACpE,yDAAyD;YACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;iBAC5D,CAAC;gBACJ,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;gBACjE,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC/B,CAAC;QACD;;;;WAIG;QACH,CAAC,UAAU,CAAC,KAKX;YACC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAC7D,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;YAQjD,sEAAsE;YACtE,sEAAsE;YACtE,4CAA4C;YAC5C,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAC5B,0LAA0L,EAC1L,KAAK,CAAC,IAAI,CAAC,OAAO,EAClB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EACjC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAC9B,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,IAAI,CAAC,OAAO,CACnB,CAAC,CAAC,MAAM,CACP,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;gBACjE,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,CAAC,EACP,SAAS,CACV,CAAC;YACF,IACE,MAAM;gBACN,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW;gBACrD,MAAM,CAAC,eAAe,KAAK,KAAK,CAAC,IAAI,CAAC,cAAc;gBACpD,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM;gBACnC,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;gBACzD,MAAM,CAAC,QAAQ,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAEjD,OAAO,KAAK,CAAC;YACf,OAAO,CACL,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACb,6NAA6N,EAC7N,KAAK,CAAC,IAAI,CAAC,OAAO,EAClB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EACjC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAC9B,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,IAAI,CAAC,OAAO,EAClB,KAAK,CAAC,IAAI,CAAC,cAAc,EACzB,KAAK,CAAC,IAAI,CAAC,MAAM,EACjB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,EACnC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,EACjC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAClC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC3B,IAAI,CAAC,GAAG,EAAE,CACX,CAAC,CAAC,OAAO,GAAG,CAAC,CACf,CAAC;QACJ,CAAC;QACD,2EAA2E;QAC3E,KAAK;QACL,SAAS;QACT;;;;;;;WAOG;QACH,CAAC,OAAO,CAAC,KAAuC;YAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBACjD,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YAClE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAI5B,iFAAiF,EACjF,KAAK,CAAC,EAAE,CACT,CAAC;YACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3C,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU;gBAC5B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YACpD,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,EAAE,QAAQ,KAAK,OAAO;gBAC7D,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,OAAc;oBACvB,cAAc,EAAE,OAAO,CAAC,eAAe;oBACvC,MAAM,EAAE,IAAI;iBACb,CAAC;YACJ,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YACrE,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACjC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YACvD,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO;gBAC7D,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;YACjD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAE,CAAC;YACrD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,YAAY,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;gBACtC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;gBAChD,OAAO,YAAY,CAAC;YACtB,CAAC;YACD,IAAI,YAAY;gBAAE,OAAO,YAAY,CAAC;YACtC,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC5C,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;gBAC/C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;YAC1D,CAAC;YACD,mEAAmE;YACnE,oEAAoE;YACpE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAChD,IAAI,CAAC;gBACH,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CACnB,IAAI,CAAC,cAAc,CACjB,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,EACpC,KAAK,EACL,KAAK,CAAC,EAAE,CACT,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACxD,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBACzC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YACpD,CAAC;YACD,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACZ,wFAAwF,EACxF,KAAK,CAAC,EAAE,EACR,OAAO,CACR,CAAC;YACF,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;YAClE,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACZ,2FAA2F,EAC3F,OAAO,EACP,KAAK,CAAC,EAAE,CACT,CAAC;YACF,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACZ,4DAA4D,EAC5D,KAAK,CAAC,EAAE,EACR,OAAO,EACP,GAAG,CAAC,eAAe,CACpB,CAAC;YACF,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO;oBACxB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC;wBAClD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACzB,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CACtB,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CACvD,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,OAAc;gBACvB,cAAc,EAAE,GAAG,CAAC,eAAe;gBACnC,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/replication/copy-promotion.d.ts

@@ -0,0 +1,132 @@
+/**
+ * Batch-copy promotion, contract v3.1
+ * (replica-copy-promotion-contract-1021-v3.md). Two or more payloads can claim
+ * one batch identity (writer, batch); each is a copy, named by `copyKey`. Only
+ * verified finalized chain facts choose between them. Pure: no I/O, no clock.
+ */
+export type Hex = `0x${string}`;
+/**
+ * keccak256(abi.encode(string "pdpp.replica.copy.v1", bytes32[] commitments)),
+ * commitments in slot order. A manifest-carried batch has one slot: its
+ * manifest. Always recomputed locally from the verified (dataHash,
+ * metadataHash) pairs, never taken from a sender.
+ */
+export declare function replicaCopyKey(fragmentCommitments: readonly Hex[]): Hex;
+export interface RetainedCopy {
+    copyKey: Hex;
+    /** Per fragment index; length is the copy's declared fragment count. */
+    fragmentCommitments: readonly Hex[];
+    /** Storage never passes a corrupt input (it is a reject); ignored if it does. */
+    validity: "valid" | "corrupt";
+}
+/** What the finalized chain says about one registered slot of a copy. */
+export type IndexEvidence = 
+/** Never verified, or the last attempt was unavailable. */
+{
+    kind: "unknown";
+}
+/** Finalized currentVersion below the slot: not registered yet. */
+ | {
+    kind: "absent";
+}
+/**
+ * Finalized currentVersion at or above the slot, any status. `eligible`:
+ * the registration state was "confirmed" at that fact (status Active,
+ * agreeing live head).
+ */
+ | {
+    kind: "committed";
+    commitment: Hex;
+    eligible: boolean;
+}
+/** Absorbing, derived from the fact history. */
+ | {
+    kind: "contradiction";
+};
+export type CopyDisposition = {
+    state: "open";
+} | {
+    state: "promoted";
+    copyKey: Hex;
+} | {
+    state: "terminal";
+    reason: string;
+};
+export interface CopyDecisionInput {
+    id: string;
+    disposition: CopyDisposition;
+    /** All retained copies of `id`. */
+    copies: readonly RetainedCopy[];
+    /** By fragment index. */
+    evidence: ReadonlyMap<number, IndexEvidence>;
+    refetch: {
+        attempts: number;
+        budget: number;
+    };
+}
+/** Every quarantine list is sorted, unique, and names only valid copies. */
+export type CopyDecision = {
+    kind: "terminal";
+    reason: "finalized_conflict";
+    quarantine: Hex[];
+} | {
+    kind: "wait";
+    on: "finality";
+    quarantine: Hex[];
+} | {
+    kind: "promote";
+    copyKey: Hex;
+    quarantine: Hex[];
+} | {
+    kind: "reconcile_promoted";
+    copyKey: Hex;
+    quarantine: Hex[];
+} | {
+    kind: "refetch";
+    quarantine: Hex[];
+} | {
+    kind: "owner";
+    reason: "copy_conflict_unresolved";
+    quarantine: Hex[];
+};
+/**
+ * The one copy-promotion rule (contract v2 §2 with amendments B, G and I).
+ * First matching rule wins:
+ * 1. terminal disposition or any contradiction → terminal;
+ * 2. promoted p: p missing or disproved → terminal, else reconcile_promoted;
+ * 3. more than one proven copy → terminal (needs a hash collision);
+ * 4. exactly one proven copy → promote;
+ * 5. every copy disproved and finality known → refetch, then owner at budget;
+ * 6. otherwise → wait for finality.
+ * Never arrival order, size, counter, deadline or hint. The predecessor check
+ * is the caller's precondition, not part of this decision.
+ */
+/** Completed non-matching re-downloads before the owner decides (contract F4). */
+export declare const REPLICA_REFETCH_BUDGET = 5;
+export declare function decideCopyPromotion(input: CopyDecisionInput): CopyDecision;
+/** One verified finalized fact for one registered slot (contract F2). */
+export interface FinalizedFact {
+    chainId: number;
+    registry: string;
+    owner: string;
+    /** The slot's version. Its commitment is write-once on chain. */
+    version: string;
+    currentVersion: string;
+    status: string;
+    commitment: Hex;
+    blockNumber: bigint;
+    blockHash: Hex;
+    /** replicaRegistrationState(...) === "confirmed" when the fact was verified. */
+    eligible: boolean;
+}
+/**
+ * The evidence of one slot from its verified fact history (amendment D).
+ * Versions append, so a currentVersion above the slot is normal. A slot's
+ * commitment is write-once, so contradiction is absorbing: two commitments
+ * for the slot, an absent fact later than a committed one, facts about two
+ * slots, one block number with two hashes, or facts from two authorities.
+ * Otherwise the fact with the highest block number decides, and among facts
+ * at that block the last observed. `facts` must be in observation order.
+ */
+export declare function indexEvidenceFromFacts(facts: readonly FinalizedFact[]): IndexEvidence;
+//# sourceMappingURL=copy-promotion.d.ts.map

package/dist/replication/copy-promotion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"copy-promotion.d.ts","sourceRoot":"","sources":["../../src/replication/copy-promotion.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,EAAE,CAAC;AAEhC;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,mBAAmB,EAAE,SAAS,GAAG,EAAE,GAAG,GAAG,CAUvE;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,GAAG,CAAC;IACb,wEAAwE;IACxE,mBAAmB,EAAE,SAAS,GAAG,EAAE,CAAC;IACpC,iFAAiF;IACjF,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;CAC/B;AAED,yEAAyE;AACzE,MAAM,MAAM,aAAa;AACvB,2DAA2D;AACzD;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE;AACrB,mEAAmE;GACjE;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE;AACpB;;;;GAIG;GACD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,GAAG,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE;AAC3D,gDAAgD;GAC9C;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAE9B,MAAM,MAAM,eAAe,GACvB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,GAAG,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,eAAe,CAAC;IAC7B,mCAAmC;IACnC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IAChC,yBAAyB;IACzB,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC7C,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/C;AAED,4EAA4E;AAC5E,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,UAAU,EAAE,GAAG,EAAE,CAAA;CAAE,GACrE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,GAAG,EAAE,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC;IAAC,UAAU,EAAE,GAAG,EAAE,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC;IAAC,UAAU,EAAE,GAAG,EAAE,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,GAAG,EAAE,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,0BAA0B,CAAC;IAAC,UAAU,EAAE,GAAG,EAAE,CAAA;CAAE,CAAC;AAI7E;;;;;;;;;;;GAWG;AACH,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,GAAG,YAAY,CAkE1E;AAED,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,GAAG,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,GAAG,CAAC;IACf,gFAAgF;IAChF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,SAAS,aAAa,EAAE,GAC9B,aAAa,CA0Cf"}