@opendatalabs/personal-server-ts-core 1.34.2 → 1.35.0

package/dist/replication/limits.js

@@ -0,0 +1,182 @@
+/** Protocol limits shared by replication senders, admission, and stream readers. */
+import { MAX_DECLARATION_BYTES } from "../pdpp/declaration-limits.js";
+export const REPLICA_MAX_FRAGMENTS = 100_000;
+/** vana-storage DEFAULT_MAX_BLOB_SIZE. Compare the actual encrypted request. */
+export const REPLICA_MAX_BLOB_BYTES = 100 * 1024 * 1024;
+/** Per-fragment framing allowance used by the #500 aggregate ciphertext check. */
+export const REPLICA_FRAGMENT_OVERHEAD_BYTES = 4096;
+/** Same source-write bounds used by the Node PDPP routes. */
+export const REPLICA_SOURCE_MAX_BLOB_BYTES = 512 * 1024 * 1024;
+export const REPLICA_SOURCE_MAX_RECORD_JSON_BYTES = 512 * 1024 * 1024;
+/** Node capture's persisted batch target and operation count. */
+export const REPLICA_BATCH_TARGET_BYTES = 32 * 1024 * 1024;
+export const REPLICA_BATCH_OPERATION_LIMIT = 10_000;
+/** Node prepares 4 MiB payload chunks before #500 encryption overhead. */
+export const REPLICA_DEFAULT_FRAGMENT_BYTES = 4 * 1024 * 1024;
+export const REPLICA_MAX_OPERATIONS = REPLICA_BATCH_OPERATION_LIMIT;
+/** One retained evidence row is created for each manifest fragment. */
+export const REPLICA_MAX_EVIDENCE_ROWS = REPLICA_MAX_FRAGMENTS;
+export const REPLICA_LIMITS_VERSION = 2;
+/**
+ * Operation metadata can repeat the record key and carries declaration-bound
+ * source/method identifiers. Bound that overhead by a second ingest body plus
+ * the largest retained declaration and fixed replication fields.
+ */
+export const REPLICA_MAX_OPERATION_ENVELOPE_BYTES = REPLICA_SOURCE_MAX_RECORD_JSON_BYTES + MAX_DECLARATION_BYTES + 64 * 1024;
+/** The payload-level header is fixed apart from its retained declaration IDs. */
+export const REPLICA_MAX_PAYLOAD_ENVELOPE_BYTES = 2 * MAX_DECLARATION_BYTES + 64 * 1024;
+export const REPLICA_MAX_SINGLE_OPERATION_BYTES = 4 * Math.ceil(REPLICA_SOURCE_MAX_BLOB_BYTES / 3) +
+    REPLICA_SOURCE_MAX_RECORD_JSON_BYTES +
+    REPLICA_MAX_OPERATION_ENVELOPE_BYTES;
+/**
+ * The first operation may exceed the target, then later operations may fill
+ * the target; otherwise every operation fits the target and count is binding.
+ */
+export const REPLICA_MAX_TOTAL_BYTES = Math.max(REPLICA_BATCH_TARGET_BYTES + REPLICA_MAX_SINGLE_OPERATION_BYTES, REPLICA_BATCH_OPERATION_LIMIT * REPLICA_BATCH_TARGET_BYTES) + REPLICA_MAX_PAYLOAD_ENVELOPE_BYTES;
+/** Each streamed operation is bounded by the admitted payload that contains it. */
+export const REPLICA_MAX_OPERATION_BYTES = REPLICA_MAX_TOTAL_BYTES;
+/** A blob cannot exceed the actual Node source write cap. */
+export const REPLICA_MAX_SINGLE_BLOB_BYTES = REPLICA_SOURCE_MAX_BLOB_BYTES;
+/** Base64 blob bytes are part of totalBytes, so their sum cannot exceed it. */
+export const REPLICA_MAX_BLOB_TOTAL_BYTES = REPLICA_MAX_TOTAL_BYTES;
+/**
+ * The maximum encrypted fragment bytes for a payload of `totalBytes` and
+ * `count` fragments: base64 payload bytes plus #500's per-fragment framing.
+ */
+export function replicaFramedBytesBound(totalBytes, count) {
+    return (4 * Math.ceil(totalBytes / 3) +
+        count * (4 + REPLICA_FRAGMENT_OVERHEAD_BYTES));
+}
+/** Maximum declared encrypted bytes for an honest payload and 100,000 fragments. */
+export const REPLICA_MAX_AGGREGATE_CIPHERTEXT_BYTES = 4 * Math.ceil(REPLICA_MAX_TOTAL_BYTES / 3) +
+    REPLICA_MAX_FRAGMENTS * (4 + REPLICA_FRAGMENT_OVERHEAD_BYTES);
+/** Four live representations: ciphertext, plaintext, parsed JSON and decoded bytes. */
+export const REPLICA_LIVE_COPY_FACTOR = 4;
+/** The retained JSON string plus its parsed operation tree. */
+export const REPLICA_ENVELOPE_LIVE_COPY_FACTOR = 2;
+/** 100 MiB #500 per-object cap × four copies = 400 MiB, below this budget. */
+export const REPLICA_DEFAULT_BYTE_BUDGET_BYTES = 512 * 1024 * 1024;
+export const REPLICA_DEFAULT_LIMITS = Object.freeze({
+    maxSourceBlobBytes: REPLICA_SOURCE_MAX_BLOB_BYTES,
+    maxRecordJsonBytes: REPLICA_SOURCE_MAX_RECORD_JSON_BYTES,
+    maxManifestCiphertextBytes: REPLICA_MAX_BLOB_BYTES,
+    maxFragmentCiphertextBytes: REPLICA_MAX_BLOB_BYTES,
+    maxAggregateCiphertextBytes: REPLICA_MAX_AGGREGATE_CIPHERTEXT_BYTES,
+    maxFragments: REPLICA_MAX_FRAGMENTS,
+    maxEvidenceRows: REPLICA_MAX_EVIDENCE_ROWS,
+    maxTotalBytes: REPLICA_MAX_TOTAL_BYTES,
+    maxOperations: REPLICA_MAX_OPERATIONS,
+    maxOperationBytes: REPLICA_MAX_OPERATION_BYTES,
+    maxSingleBlobBytes: REPLICA_MAX_SINGLE_BLOB_BYTES,
+    maxBlobTotalBytes: REPLICA_MAX_BLOB_TOTAL_BYTES,
+});
+export function replicaResourceLimits(overrides = {}) {
+    return Object.freeze({ ...REPLICA_DEFAULT_LIMITS, ...overrides });
+}
+/** Reservation ledger shared by concurrently running replication steps. */
+export class ReplicaByteBudget {
+    maxBytes;
+    reservedBytes = 0;
+    reservations = new Map();
+    constructor(maxBytes) {
+        this.maxBytes = maxBytes;
+        if (!Number.isSafeInteger(maxBytes) || maxBytes < 0)
+            throw new RangeError("invalid replication byte budget");
+    }
+    get reserved() {
+        return this.reservedBytes;
+    }
+    reserve(bytes, group = {}) {
+        if (!Number.isSafeInteger(bytes) || bytes < 0)
+            throw new RangeError("invalid replication reservation");
+        const availableBytes = this.maxBytes - this.reservedBytes;
+        const groupBytes = this.reservations.get(group) ?? 0;
+        if (bytes > availableBytes && groupBytes !== this.reservedBytes)
+            return { kind: "resource_busy", requestedBytes: bytes, availableBytes };
+        const nextReservedBytes = this.reservedBytes + bytes;
+        const nextGroupBytes = groupBytes + bytes;
+        if (!Number.isSafeInteger(nextReservedBytes) ||
+            !Number.isSafeInteger(nextGroupBytes))
+            throw new RangeError("replication reservation exhausted");
+        this.reservedBytes = nextReservedBytes;
+        this.reservations.set(group, nextGroupBytes);
+        let released = false;
+        return () => {
+            if (released)
+                return;
+            released = true;
+            this.reservedBytes -= bytes;
+            const remaining = (this.reservations.get(group) ?? 0) - bytes;
+            if (remaining === 0)
+                this.reservations.delete(group);
+            else
+                this.reservations.set(group, remaining);
+        };
+    }
+}
+const admissionBrand = Symbol("ReplicaAdmission");
+export class ReplicaResourceLimitError extends Error {
+    limit;
+    actual;
+    maximum;
+    code = "replica_resource_limit_exceeded";
+    constructor(limit, actual, maximum) {
+        super("replica resource limit exceeded");
+        this.limit = limit;
+        this.actual = actual;
+        this.maximum = maximum;
+        this.name = "ReplicaResourceLimitError";
+    }
+}
+export class ReplicaResourceBusyError extends Error {
+    code = "resource_busy";
+    constructor() {
+        super("replica object reservation is busy");
+        this.name = "ReplicaResourceBusyError";
+    }
+}
+/** Check manifest-declared totals and issue an object-reservation capability. */
+export function admit(manifest, budget, identity, limits = REPLICA_DEFAULT_LIMITS) {
+    if (manifest.fragments.length > limits.maxEvidenceRows)
+        return unsupported("retained_evidence_rows");
+    if (manifest.fragments.length > limits.maxFragments)
+        return unsupported("fragment_count");
+    if (manifest.fragments.some((fragment) => fragment.bytes > limits.maxFragmentCiphertextBytes))
+        return unsupported("fragment_ciphertext_bytes");
+    const ciphertextBytes = manifest.fragments.reduce((total, fragment) => total + fragment.bytes, 0);
+    if (!Number.isSafeInteger(ciphertextBytes) ||
+        ciphertextBytes > limits.maxAggregateCiphertextBytes ||
+        ciphertextBytes >
+            replicaFramedBytesBound(manifest.totalBytes, manifest.fragments.length))
+        return unsupported("aggregate_ciphertext_bytes");
+    if (!Number.isSafeInteger(manifest.totalBytes) ||
+        manifest.totalBytes < 1 ||
+        manifest.totalBytes > limits.maxTotalBytes)
+        return unsupported("total_bytes");
+    const reservationGroup = {};
+    return Object.freeze({
+        [admissionBrand]: true,
+        admissionId: `${identity.repositoryId}:${identity.owner}:${identity.manifestDigest}`,
+        ...identity,
+        payloadBytes: manifest.totalBytes,
+        limitsVersion: REPLICA_LIMITS_VERSION,
+        reserveObject(ciphertextBytes, group = {}) {
+            if (!Number.isSafeInteger(ciphertextBytes) || ciphertextBytes < 0)
+                throw new RangeError("invalid replica object size");
+            return budget.reserve(ciphertextBytes * REPLICA_LIVE_COPY_FACTOR, group);
+        },
+        reserveEnvelope(jsonBytes, group = reservationGroup) {
+            if (!Number.isSafeInteger(jsonBytes) || jsonBytes < 0)
+                throw new RangeError("invalid replica envelope size");
+            return budget.reserve(jsonBytes * REPLICA_ENVELOPE_LIVE_COPY_FACTOR, group);
+        },
+    });
+}
+function unsupported(limit) {
+    return {
+        kind: "resource_unsupported",
+        limit,
+        limitsVersion: REPLICA_LIMITS_VERSION,
+    };
+}
+//# sourceMappingURL=limits.js.map

package/dist/replication/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../src/replication/limits.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAC7C,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,kFAAkF;AAClF,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAEpD,6DAA6D;AAC7D,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/D,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACtE,iEAAiE;AACjE,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3D,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AACpD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9D,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AACpE,uEAAuE;AACvE,MAAM,CAAC,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AAC/D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC;;;;GAIG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAC/C,oCAAoC,GAAG,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3E,iFAAiF;AACjF,MAAM,CAAC,MAAM,kCAAkC,GAC7C,CAAC,GAAG,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AACxC,MAAM,CAAC,MAAM,kCAAkC,GAC7C,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,CAAC;IAChD,oCAAoC;IACpC,oCAAoC,CAAC;AAEvC;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAClC,IAAI,CAAC,GAAG,CACN,0BAA0B,GAAG,kCAAkC,EAC/D,6BAA6B,GAAG,0BAA0B,CAC3D,GAAG,kCAAkC,CAAC;AACzC,mFAAmF;AACnF,MAAM,CAAC,MAAM,2BAA2B,GAAG,uBAAuB,CAAC;AACnE,6DAA6D;AAC7D,MAAM,CAAC,MAAM,6BAA6B,GAAG,6BAA6B,CAAC;AAC3E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AAEpE;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,KAAa;IACvE,OAAO,CACL,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QAC7B,KAAK,GAAG,CAAC,CAAC,GAAG,+BAA+B,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,sCAAsC,GACjD,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,uBAAuB,GAAG,CAAC,CAAC;IAC1C,qBAAqB,GAAG,CAAC,CAAC,GAAG,+BAA+B,CAAC,CAAC;AAChE,uFAAuF;AACvF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAC1C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC;AACnD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAiBnE,MAAM,CAAC,MAAM,sBAAsB,GAA0B,MAAM,CAAC,MAAM,CAAC;IACzE,kBAAkB,EAAE,6BAA6B;IACjD,kBAAkB,EAAE,oCAAoC;IACxD,0BAA0B,EAAE,sBAAsB;IAClD,0BAA0B,EAAE,sBAAsB;IAClD,2BAA2B,EAAE,sCAAsC;IACnE,YAAY,EAAE,qBAAqB;IACnC,eAAe,EAAE,yBAAyB;IAC1C,aAAa,EAAE,uBAAuB;IACtC,aAAa,EAAE,sBAAsB;IACrC,iBAAiB,EAAE,2BAA2B;IAC9C,kBAAkB,EAAE,6BAA6B;IACjD,iBAAiB,EAAE,4BAA4B;CAChD,CAAC,CAAC;AAEH,MAAM,UAAU,qBAAqB,CACnC,YAA4C,EAAE;IAE9C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,sBAAsB,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AACpE,CAAC;AAaD,2EAA2E;AAC3E,MAAM,OAAO,iBAAiB;IAIP;IAHb,aAAa,GAAG,CAAC,CAAC;IACT,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1D,YAAqB,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;QACnC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;YACjD,MAAM,IAAI,UAAU,CAAC,iCAAiC,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,QAAgB,EAAE;QACvC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAC3C,MAAM,IAAI,UAAU,CAAC,iCAAiC,CAAC,CAAC;QAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,KAAK,GAAG,cAAc,IAAI,UAAU,KAAK,IAAI,CAAC,aAAa;YAC7D,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAC1E,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QACrD,MAAM,cAAc,GAAG,UAAU,GAAG,KAAK,CAAC;QAC1C,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC;YACxC,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC;YAErC,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,GAAG,iBAAiB,CAAC;QACvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAC7C,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,GAAG,EAAE;YACV,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;YAC5B,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;YAC9D,IAAI,SAAS,KAAK,CAAC;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;;gBAChD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC,CAAC;IACJ,CAAC;CACF;AAED,MAAM,cAAc,GAAkB,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAqBjE,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAIvC;IACA;IACA;IALF,IAAI,GAAG,iCAAiC,CAAC;IAElD,YACW,KAAa,EACb,MAAc,EACd,OAAe;QAExB,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAJhC,UAAK,GAAL,KAAK,CAAQ;QACb,WAAM,GAAN,MAAM,CAAQ;QACd,YAAO,GAAP,OAAO,CAAQ;QAGxB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,GAAG,eAAe,CAAC;IAEhC;QACE,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,UAAU,KAAK,CACnB,QAAiC,EACjC,MAAyB,EACzB,QAAyE,EACzE,SAAgC,sBAAsB;IAEtD,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe;QACpD,OAAO,WAAW,CAAC,wBAAwB,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY;QACjD,OAAO,WAAW,CAAC,gBAAgB,CAAC,CAAC;IACvC,IACE,QAAQ,CAAC,SAAS,CAAC,IAAI,CACrB,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,0BAA0B,CACjE;QAED,OAAO,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAC/C,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,EAC3C,CAAC,CACF,CAAC;IACF,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC;QACtC,eAAe,GAAG,MAAM,CAAC,2BAA2B;QACpD,eAAe;YACb,uBAAuB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;QAEzE,OAAO,WAAW,CAAC,4BAA4B,CAAC,CAAC;IACnD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1C,QAAQ,CAAC,UAAU,GAAG,CAAC;QACvB,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC,aAAa;QAE1C,OAAO,WAAW,CAAC,aAAa,CAAC,CAAC;IAEpC,MAAM,gBAAgB,GAAG,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,CAAC,cAAc,CAAC,EAAE,IAAa;QAC/B,WAAW,EAAE,GAAG,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,cAAc,EAAE;QACpF,GAAG,QAAQ;QACX,YAAY,EAAE,QAAQ,CAAC,UAAU;QACjC,aAAa,EAAE,sBAAsB;QACrC,aAAa,CAAC,eAAuB,EAAE,KAAK,GAAG,EAAE;YAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,eAAe,GAAG,CAAC;gBAC/D,MAAM,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAC;YACtD,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,GAAG,wBAAwB,EAAE,KAAK,CAAC,CAAC;QAC3E,CAAC;QACD,eAAe,CAAC,SAAiB,EAAE,KAAK,GAAG,gBAAgB;YACzD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;gBACnD,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC,OAAO,CACnB,SAAS,GAAG,iCAAiC,EAC7C,KAAK,CACN,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,KAAK;QACL,aAAa,EAAE,sBAAsB;KACtC,CAAC;AACJ,CAAC"}

package/dist/replication/merge-plan.d.ts

@@ -0,0 +1,92 @@
+import type { DeclarationBinding, RecordOperation, ReplicaOperation } from "./envelope.js";
+/** Provisional decisions: revise this profile here, then update the pinned vectors. */
+export declare const REPLICA_POLICY: {
+    readonly mutableOrder: "lamport-writer-operation";
+    readonly retainLosers: true;
+    readonly laterUpsertResurrects: true;
+    readonly declarationVersions: "same-shape-versions-merge-by-revision";
+    readonly carriedDeclarations: "same-shape-versions-trusted-by-key";
+    readonly appendOnlyConflict: "quarantine-until-separately-authorized-repair";
+    readonly authorization: "single-issuer-data-and-connection-evidence-only";
+};
+export interface MergeContext {
+    owner: string;
+    /** Retained, digest-verified declarations. Validation must use that exact schema. */
+    declarations: readonly {
+        sourceId: string;
+        binding: DeclarationBinding;
+        validateData: (data: Record<string, unknown>) => boolean;
+    }[];
+}
+/**
+ * Every reason a plan issue can carry. Hosts branch on these strings, so a new
+ * reason is a profile change. The last group is added by the Node receiver to
+ * its own copy of the plan; `visibility-engine.ts` states those decisions as
+ * typed projection fields instead.
+ */
+export type MergeIssueReason = "wrong_owner" | "operation_id_equivocation" | "connection_deleted" | "incompatible_connection_binding" | "missing_connection_registration" | "invalid_generation_reset" | "missing_generation_reset" | "old_generation" | "missing_declaration" | "incompatible_declaration" | "append_only_delete" | "invalid_record_data" | "incompatible_record_declaration" | "append_only_content_conflict" | "missing_local_connection" | "missing_or_invalid_blob" | "unverified_completion" | "incompatible_completion_declaration";
+export interface MergeIssue {
+    reason: MergeIssueReason;
+    operations: ReplicaOperation[];
+}
+export interface MergedRecord {
+    identity: {
+        owner: string;
+        sourceId: string;
+        connectionId: string;
+        generation: number;
+        stream: string;
+        recordKey: string;
+    };
+    winner: RecordOperation | null;
+    losers: RecordOperation[];
+    quarantined: boolean;
+}
+export interface ReplicaMergePlan {
+    records: MergedRecord[];
+    conflicts: MergeIssue[];
+    rejected: MergeIssue[];
+    pending: MergeIssue[];
+    suppressed: MergeIssue[];
+}
+/**
+ * An operation pending on its declaration (missing or incompatible) never
+ * applies, so it neither certifies nor withdraws a stream's completion.
+ */
+export declare const declarationWait: (reason: MergeIssueReason) => reason is "missing_declaration" | "incompatible_declaration";
+/** How a device treats the binding an operation carries (`resolveDeclaration`). */
+export type DeclarationResolution<T> = {
+    status: "retained";
+    declaration: T;
+} | {
+    status: "compatible";
+} | {
+    status: "incompatible";
+} | {
+    status: "missing";
+};
+/**
+ * A retained binding validates its operations against its own schema. A
+ * binding this device does not retain, but with the shape
+ * (`declarationShape`) of a retained binding of the same source, is
+ * compatible: another version of a stream this device already trusts, which
+ * a peer of the same owner wrote under and signed into its batch. Its schema
+ * is not known here, so its operations validate by primary key only. A
+ * binding of a retained stream with another shape is incompatible and never
+ * applies. Any other binding is missing: it names a stream this device does
+ * not declare yet, and its operations wait.
+ */
+export declare function resolveDeclaration<T extends {
+    sourceId: string;
+    binding: DeclarationBinding;
+}>(declarations: readonly T[], sourceId: string, binding: DeclarationBinding): DeclarationResolution<T>;
+/**
+ * Recompute from the complete retained operation set, including lifecycle evidence.
+ * The host must retain losers, conflicts, pending operations and tombstones across calls.
+ * This is the full-history oracle: `evaluate` in `visibility-engine.ts` derives
+ * the projection from it, and every bounded engine is tested against it.
+ * This converges; it cannot establish which offline scrape is freshest upstream.
+ * No I/O, local history version allocation, grant copying, or repair authorization.
+ */
+export declare function planReplicaMerge(context: MergeContext, input: readonly ReplicaOperation[]): ReplicaMergePlan;
+//# sourceMappingURL=merge-plan.d.ts.map

package/dist/replication/merge-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-plan.d.ts","sourceRoot":"","sources":["../../src/replication/merge-plan.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EACjB,MAAM,eAAe,CAAC;AAIvB,uFAAuF;AACvF,eAAO,MAAM,cAAc;;;;;;;;CAQjB,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,YAAY,EAAE,SAAS;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,kBAAkB,CAAC;QAC5B,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;KAC1D,EAAE,CAAC;CACL;AACD;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,2BAA2B,GAC3B,oBAAoB,GACpB,iCAAiC,GACjC,iCAAiC,GACjC,0BAA0B,GAC1B,0BAA0B,GAC1B,gBAAgB,GAChB,qBAAqB,GACrB,0BAA0B,GAC1B,oBAAoB,GACpB,qBAAqB,GACrB,iCAAiC,GACjC,8BAA8B,GAE9B,0BAA0B,GAC1B,yBAAyB,GACzB,uBAAuB,GACvB,qCAAqC,CAAC;AAC1C,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC;AACD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;CACtB;AACD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,UAAU,EAAE,UAAU,EAAE,CAAC;CAC1B;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,GAAI,QAAQ,gBAAgB,iEACmB,CAAC;AAE5E,mFAAmF;AACnF,MAAM,MAAM,qBAAqB,CAAC,CAAC,IAC/B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,CAAC,CAAA;CAAE,GACtC;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,GACxB;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,GAC1B;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAE1B;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,CAAC,SAAS;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,EAE3D,YAAY,EAAE,SAAS,CAAC,EAAE,EAC1B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,kBAAkB,GAC1B,qBAAqB,CAAC,CAAC,CAAC,CAe1B;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,SAAS,gBAAgB,EAAE,GACjC,gBAAgB,CAiNlB"}

package/dist/replication/merge-plan.js

@@ -0,0 +1,229 @@
+import { computeRecordKeyFromData } from "../storage/pdpp-records/record-key.js";
+import { canonicalJson, declarationShape, replicaOperationSchema, } from "./envelope.js";
+import { connectionKey } from "./identity.js";
+import { compareRevisions } from "./revision.js";
+/** Provisional decisions: revise this profile here, then update the pinned vectors. */
+export const REPLICA_POLICY = {
+    mutableOrder: "lamport-writer-operation",
+    retainLosers: true,
+    laterUpsertResurrects: true,
+    declarationVersions: "same-shape-versions-merge-by-revision",
+    carriedDeclarations: "same-shape-versions-trusted-by-key",
+    appendOnlyConflict: "quarantine-until-separately-authorized-repair",
+    authorization: "single-issuer-data-and-connection-evidence-only",
+};
+/**
+ * An operation pending on its declaration (missing or incompatible) never
+ * applies, so it neither certifies nor withdraws a stream's completion.
+ */
+export const declarationWait = (reason) => reason === "missing_declaration" || reason === "incompatible_declaration";
+/**
+ * A retained binding validates its operations against its own schema. A
+ * binding this device does not retain, but with the shape
+ * (`declarationShape`) of a retained binding of the same source, is
+ * compatible: another version of a stream this device already trusts, which
+ * a peer of the same owner wrote under and signed into its batch. Its schema
+ * is not known here, so its operations validate by primary key only. A
+ * binding of a retained stream with another shape is incompatible and never
+ * applies. Any other binding is missing: it names a stream this device does
+ * not declare yet, and its operations wait.
+ */
+export function resolveDeclaration(declarations, sourceId, binding) {
+    const stream = declarations.filter((entry) => entry.sourceId === sourceId && entry.binding.stream === binding.stream);
+    const exact = stream.find((entry) => canonicalJson(entry.binding) === canonicalJson(binding));
+    if (exact)
+        return { status: "retained", declaration: exact };
+    if (!stream.length)
+        return { status: "missing" };
+    return stream.some((entry) => declarationShape(entry.binding) === declarationShape(binding))
+        ? { status: "compatible" }
+        : { status: "incompatible" };
+}
+/**
+ * Recompute from the complete retained operation set, including lifecycle evidence.
+ * The host must retain losers, conflicts, pending operations and tombstones across calls.
+ * This is the full-history oracle: `evaluate` in `visibility-engine.ts` derives
+ * the projection from it, and every bounded engine is tested against it.
+ * This converges; it cannot establish which offline scrape is freshest upstream.
+ * No I/O, local history version allocation, grant copying, or repair authorization.
+ */
+export function planReplicaMerge(context, input) {
+    const result = {
+        records: [],
+        conflicts: [],
+        rejected: [],
+        pending: [],
+        suppressed: [],
+    };
+    const issue = (bucket, reason, operations) => bucket.push({ reason, operations });
+    const byId = new Map();
+    /** Every owned operation, equivocated variants included. */
+    const evidence = [];
+    for (const raw of input) {
+        const operation = replicaOperationSchema.parse(raw);
+        if (operation.owner !== context.owner) {
+            issue(result.rejected, "wrong_owner", [operation]);
+            continue;
+        }
+        const id = canonicalJson([
+            operation.revision.writerId,
+            operation.revision.operationId,
+        ]);
+        evidence.push(operation);
+        const variants = byId.get(id) ?? new Map();
+        variants.set(canonicalJson(operation), operation);
+        byId.set(id, variants);
+    }
+    const blockedConnections = new Set();
+    const operations = [];
+    for (const variants of byId.values()) {
+        if (variants.size > 1) {
+            const colliding = [...variants.values()];
+            issue(result.conflicts, "operation_id_equivocation", colliding);
+            for (const operation of colliding)
+                blockedConnections.add(connectionKey(operation));
+        }
+        else
+            operations.push([...variants.values()][0]);
+    }
+    const connections = new Map();
+    for (const operation of operations) {
+        const key = connectionKey(operation);
+        const list = connections.get(key) ?? [];
+        list.push(operation);
+        connections.set(key, list);
+    }
+    // A logical id cannot be rebound to another producer, even when its source
+    // differs. Equivocated variants still count as source evidence: dropping
+    // them must not make a source-binding conflict disappear (#426).
+    for (const entries of connections.values()) {
+        const first = entries[0];
+        const sources = new Set(evidence
+            .filter((op) => op.connectionId === first.connectionId)
+            .map((op) => op.sourceId));
+        if (sources.size > 1)
+            blockedConnections.add(connectionKey(first));
+    }
+    for (const [key, entries] of connections) {
+        if (entries.some((op) => op.kind === "connection-delete")) {
+            issue(result.suppressed, "connection_deleted", entries);
+            continue;
+        }
+        const methods = new Set(entries.map((op) => op.methodId));
+        if (blockedConnections.has(key) || methods.size !== 1) {
+            issue(result.conflicts, "incompatible_connection_binding", entries);
+            continue;
+        }
+        if (!entries.some((op) => op.kind === "connection-register")) {
+            issue(result.pending, "missing_connection_registration", entries);
+            continue;
+        }
+        const resets = entries.filter((op) => op.kind === "connection-reset");
+        if (resets.some((op) => op.generation !== op.previousGeneration + 1)) {
+            issue(result.conflicts, "invalid_generation_reset", entries);
+            continue;
+        }
+        const generation = Math.max(1, ...resets.map((op) => op.generation));
+        const generations = new Set([1, ...resets.map((op) => op.generation)]);
+        if (generations.size !== generation) {
+            issue(result.pending, "missing_generation_reset", entries);
+            continue;
+        }
+        const records = new Map();
+        for (const operation of entries) {
+            if (operation.kind !== "upsert" && operation.kind !== "delete")
+                continue;
+            if (operation.generation < generation) {
+                issue(result.suppressed, "old_generation", [operation]);
+                continue;
+            }
+            if (operation.generation > generation) {
+                issue(result.pending, "missing_generation_reset", [operation]);
+                continue;
+            }
+            const resolved = resolveDeclaration(context.declarations, operation.sourceId, operation.declaration);
+            if (resolved.status === "missing" || resolved.status === "incompatible") {
+                issue(result.pending, `${resolved.status}_declaration`, [operation]);
+                continue;
+            }
+            const validateData = resolved.status === "retained"
+                ? resolved.declaration.validateData
+                : () => true;
+            if (operation.kind === "delete" &&
+                operation.declaration.semantics === "append_only") {
+                issue(result.rejected, "append_only_delete", [operation]);
+                continue;
+            }
+            if (operation.kind === "upsert") {
+                let valid = false;
+                try {
+                    valid =
+                        computeRecordKeyFromData(operation.data, operation.declaration.primaryKey) === operation.recordKey && validateData(operation.data);
+                }
+                catch {
+                    /* Invalid data/key cannot enter winner selection. */
+                }
+                if (!valid) {
+                    issue(result.rejected, "invalid_record_data", [operation]);
+                    continue;
+                }
+            }
+            const recordId = canonicalJson([
+                operation.declaration.stream,
+                operation.recordKey,
+            ]);
+            const list = records.get(recordId) ?? [];
+            list.push(operation);
+            records.set(recordId, list);
+        }
+        for (const candidates of records.values()) {
+            candidates.sort((a, b) => compareRevisions(a.revision, b.revision));
+            const first = candidates[0];
+            // Versions of one declared stream are one record (a rebinding); only a
+            // changed shape makes the same record key name two records.
+            const shapes = new Set(candidates.map((op) => declarationShape(op.declaration)));
+            const content = new Set(candidates.map((op) => canonicalJson(op.kind === "upsert" ? { data: op.data, blobs: op.blobs } : null)));
+            const quarantined = shapes.size > 1 ||
+                (first.declaration.semantics === "append_only" && content.size > 1);
+            if (quarantined)
+                issue(result.conflicts, shapes.size > 1
+                    ? "incompatible_record_declaration"
+                    : "append_only_content_conflict", candidates);
+            result.records.push({
+                identity: {
+                    owner: first.owner,
+                    sourceId: first.sourceId,
+                    connectionId: first.connectionId,
+                    generation,
+                    stream: first.declaration.stream,
+                    recordKey: first.recordKey,
+                },
+                winner: quarantined ? null : candidates[candidates.length - 1],
+                losers: quarantined ? candidates : candidates.slice(0, -1),
+                quarantined,
+            });
+        }
+    }
+    // Normalize every output, including diagnostics; replay multiplicity is unobservable.
+    for (const bucket of [
+        result.conflicts,
+        result.rejected,
+        result.pending,
+        result.suppressed,
+    ]) {
+        const unique = new Map();
+        for (const entry of bucket) {
+            entry.operations = [
+                ...new Map(entry.operations.map((op) => [canonicalJson(op), op])).values(),
+            ].sort((a, b) => compareText(canonicalJson(a), canonicalJson(b)));
+            unique.set(canonicalJson(entry), entry);
+        }
+        bucket.splice(0, bucket.length, ...[...unique.values()].sort((a, b) => compareText(canonicalJson(a), canonicalJson(b))));
+    }
+    result.records.sort((a, b) => compareText(canonicalJson(a.identity), canonicalJson(b.identity)));
+    return result;
+}
+function compareText(a, b) {
+    return a < b ? -1 : a > b ? 1 : 0;
+}
+//# sourceMappingURL=merge-plan.js.map

package/dist/replication/merge-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-plan.js","sourceRoot":"","sources":["../../src/replication/merge-plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AAMvB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,uFAAuF;AACvF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY,EAAE,0BAA0B;IACxC,YAAY,EAAE,IAAI;IAClB,qBAAqB,EAAE,IAAI;IAC3B,mBAAmB,EAAE,uCAAuC;IAC5D,mBAAmB,EAAE,oCAAoC;IACzD,kBAAkB,EAAE,+CAA+C;IACnE,aAAa,EAAE,iDAAiD;CACxD,CAAC;AA8DX;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAwB,EAAE,EAAE,CAC1D,MAAM,KAAK,qBAAqB,IAAI,MAAM,KAAK,0BAA0B,CAAC;AAS5E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAGhC,YAA0B,EAC1B,QAAgB,EAChB,OAA2B;IAE3B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CACzE,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,OAAO,CAAC,CACnE,CAAC;IACF,IAAI,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACjD,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,gBAAgB,CAAC,OAAO,CAAC,CACzE;QACC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE;QAC1B,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAqB,EACrB,KAAkC;IAElC,MAAM,MAAM,GAAqB;QAC/B,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,EAAE;QACX,UAAU,EAAE,EAAE;KACf,CAAC;IACF,MAAM,KAAK,GAAG,CACZ,MAAoB,EACpB,MAAwB,EACxB,UAA8B,EAC9B,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAyC,CAAC;IAC9D,4DAA4D;IAC5D,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YACtC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;YACnD,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,aAAa,CAAC;YACvB,SAAS,CAAC,QAAQ,CAAC,QAAQ;YAC3B,SAAS,CAAC,QAAQ,CAAC,WAAW;SAC/B,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QAC3C,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACrC,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACzC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,2BAA2B,EAAE,SAAS,CAAC,CAAC;YAChE,KAAK,MAAM,SAAS,IAAI,SAAS;gBAC/B,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,CAAC;;YAAM,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC1D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrB,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,2EAA2E;IAC3E,yEAAyE;IACzE,iEAAiE;IACjE,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,QAAQ;aACL,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,CAAC;aACtD,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAC5B,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC;YAAE,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,mBAAmB,CAAC,EAAE,CAAC;YAC1D,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1D,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,iCAAiC,EAAE,OAAO,CAAC,CAAC;YACpE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,qBAAqB,CAAC,EAAE,CAAC;YAC7D,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,iCAAiC,EAAE,OAAO,CAAC,CAAC;YAClE,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,kBAAkB,GAAG,CAAC,CAAC,EAAE,CAAC;YACrE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACpC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;QACrD,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;YAChC,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACzE,IAAI,SAAS,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC;gBACtC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;gBACxD,SAAS;YACX,CAAC;YACD,IAAI,SAAS,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC;gBACtC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,0BAA0B,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC/D,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,kBAAkB,CACjC,OAAO,CAAC,YAAY,EACpB,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,WAAW,CACtB,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBACxE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;gBACrE,SAAS;YACX,CAAC;YACD,MAAM,YAAY,GAChB,QAAQ,CAAC,MAAM,KAAK,UAAU;gBAC5B,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY;gBACnC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YACjB,IACE,SAAS,CAAC,IAAI,KAAK,QAAQ;gBAC3B,SAAS,CAAC,WAAW,CAAC,SAAS,KAAK,aAAa,EACjD,CAAC;gBACD,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,oBAAoB,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC1D,SAAS;YACX,CAAC;YACD,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAChC,IAAI,KAAK,GAAG,KAAK,CAAC;gBAClB,IAAI,CAAC;oBACH,KAAK;wBACH,wBAAwB,CACtB,SAAS,CAAC,IAAI,EACd,SAAS,CAAC,WAAW,CAAC,UAAU,CACjC,KAAK,SAAS,CAAC,SAAS,IAAI,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC9D,CAAC;gBAAC,MAAM,CAAC;oBACP,qDAAqD;gBACvD,CAAC;gBACD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,qBAAqB,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC3D,SAAS;gBACX,CAAC;YACH,CAAC;YACD,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC7B,SAAS,CAAC,WAAW,CAAC,MAAM;gBAC5B,SAAS,CAAC,SAAS;aACpB,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpE,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC5B,uEAAuE;YACvE,4DAA4D;YAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CACzD,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACpB,aAAa,CACX,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CACjE,CACF,CACF,CAAC;YACF,MAAM,WAAW,GACf,MAAM,CAAC,IAAI,GAAG,CAAC;gBACf,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,KAAK,aAAa,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YACtE,IAAI,WAAW;gBACb,KAAK,CACH,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,IAAI,GAAG,CAAC;oBACb,CAAC,CAAC,iCAAiC;oBACnC,CAAC,CAAC,8BAA8B,EAClC,UAAU,CACX,CAAC;YACJ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBAClB,QAAQ,EAAE;oBACR,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,UAAU;oBACV,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM;oBAChC,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B;gBACD,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC9D,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC1D,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,sFAAsF;IACtF,KAAK,MAAM,MAAM,IAAI;QACnB,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,UAAU;KAClB,EAAE,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,UAAU,GAAG;gBACjB,GAAG,IAAI,GAAG,CACR,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CACtD,CAAC,MAAM,EAAE;aACX,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,CAAC,MAAM,CACX,CAAC,EACD,MAAM,CAAC,MAAM,EACb,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACpC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAChD,CACF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC3B,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAClE,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACvC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC"}

package/dist/replication/namespace.d.ts

@@ -0,0 +1,4 @@
+/** Dedicated SDK-compatible source name; never a legacy source or permission. */
+export declare const REPLICA_SCOPE_PREFIX = "pdpp_replica_v1";
+export declare function isReplicaScope(scope: string): boolean;
+//# sourceMappingURL=namespace.d.ts.map

package/dist/replication/namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../src/replication/namespace.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AACtD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAKrD"}

package/dist/replication/namespace.js

@@ -0,0 +1,7 @@
+/** Dedicated SDK-compatible source name; never a legacy source or permission. */
+export const REPLICA_SCOPE_PREFIX = "pdpp_replica_v1";
+export function isReplicaScope(scope) {
+    return (scope === REPLICA_SCOPE_PREFIX ||
+        scope.startsWith(`${REPLICA_SCOPE_PREFIX}.`));
+}
+//# sourceMappingURL=namespace.js.map

package/dist/replication/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../src/replication/namespace.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AACtD,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,CACL,KAAK,KAAK,oBAAoB;QAC9B,KAAK,CAAC,UAAU,CAAC,GAAG,oBAAoB,GAAG,CAAC,CAC7C,CAAC;AACJ,CAAC"}