@opendatalabs/personal-server-ts-core 1.34.2 → 1.35.1

package/dist/replication/evidence.d.ts

@@ -0,0 +1,118 @@
+import { type Hex } from "viem";
+import type { ReplicaRegistrationEvidence } from "./dpv2.js";
+declare const abi: readonly [{
+    readonly name: "dataPoints";
+    readonly type: "function";
+    readonly stateMutability: "view";
+    readonly inputs: readonly [{
+        readonly type: "address";
+        readonly name: "ownerAddress";
+    }, {
+        readonly type: "string";
+        readonly name: "scope";
+    }];
+    readonly outputs: readonly [{
+        readonly type: "tuple";
+        readonly components: readonly [{
+            readonly type: "bytes32";
+            readonly name: "id";
+        }, {
+            readonly type: "address";
+            readonly name: "owner";
+        }, {
+            readonly type: "string";
+            readonly name: "scope";
+        }, {
+            readonly type: "uint8";
+            readonly name: "status";
+        }, {
+            readonly type: "uint256";
+            readonly name: "currentVersion";
+        }, {
+            readonly type: "bytes32";
+            readonly name: "currentCommitment";
+        }, {
+            readonly type: "uint256";
+            readonly name: "createdAt";
+        }, {
+            readonly type: "uint256";
+            readonly name: "modifiedAt";
+        }, {
+            readonly type: "uint256";
+            readonly name: "totalAccesses";
+        }];
+    }];
+}, {
+    readonly name: "currentVersion";
+    readonly type: "function";
+    readonly stateMutability: "view";
+    readonly inputs: readonly [{
+        readonly type: "address";
+        readonly name: "ownerAddress";
+    }, {
+        readonly type: "string";
+        readonly name: "scope";
+    }];
+    readonly outputs: readonly [{
+        readonly type: "uint256";
+    }];
+}, {
+    readonly name: "dataCommitment";
+    readonly type: "function";
+    readonly stateMutability: "view";
+    readonly inputs: readonly [{
+        readonly type: "address";
+        readonly name: "ownerAddress";
+    }, {
+        readonly type: "string";
+        readonly name: "scope";
+    }, {
+        readonly type: "uint256";
+        readonly name: "version_";
+    }];
+    readonly outputs: readonly [{
+        readonly type: "bytes32";
+    }];
+}];
+/** A viem PublicClient satisfies this port. RPC errors must propagate, not become zero. */
+export interface ReplicaEvidenceRpc {
+    getChainId(): Promise<number>;
+    getBlock(input: {
+        blockTag: "finalized";
+    } | {
+        blockNumber: bigint;
+    }): Promise<{
+        number: bigint | null;
+        hash: Hex | null;
+        timestamp: bigint;
+    }>;
+    readContract(input: {
+        address: Hex;
+        abi: typeof abi;
+        functionName: "currentVersion" | "dataCommitment" | "dataPoints";
+        args: readonly [Hex, string] | readonly [Hex, string, bigint];
+        blockNumber: bigint;
+    }): Promise<unknown>;
+}
+/** Every failure is retryable by transport workers. No error is evidence of absence. */
+export declare class ReplicaEvidenceUnavailableError extends Error {
+    readonly retryable = true;
+    constructor(cause: unknown);
+}
+/** Independent finalized commitment verification replaces Gateway HEAD proof verification.
+ * The configured RPC/chain/registry are trusted; the Gateway is not trusted to supply hashes.
+ * Gateway omission or optimistic head mutations can delay progress; only finalized slot facts quarantine.
+ */
+export declare function createReplicaEvidenceAdapter(deps: {
+    owner: Hex;
+    registry: Hex;
+    chainId: number;
+    rpc: ReplicaEvidenceRpc;
+    gatewayUrl: string;
+    fetch?: typeof globalThis.fetch;
+    now?: () => number;
+    /** Includes ordinary chain finality lag; default 30 minutes. Never use latest as fallback. */
+    maxFinalizedAgeSeconds?: number;
+}): (scope: string, version: number) => Promise<ReplicaRegistrationEvidence>;
+export {};
+//# sourceMappingURL=evidence.d.ts.map

package/dist/replication/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../src/replication/evidence.ts"],"names":[],"mappings":"AACA,OAAO,EAA4C,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAC1E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AAK7D,QAAA,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIP,CAAC;AAEH,2FAA2F;AAC3F,MAAM,WAAW,kBAAkB;IACjC,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,QAAQ,CACN,KAAK,EAAE;QAAE,QAAQ,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GACzD,OAAO,CAAC;QACT,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,YAAY,CAAC,KAAK,EAAE;QAClB,OAAO,EAAE,GAAG,CAAC;QACb,GAAG,EAAE,OAAO,GAAG,CAAC;QAChB,YAAY,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,YAAY,CAAC;QACjE,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9D,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,wFAAwF;AACxF,qBAAa,+BAAgC,SAAQ,KAAK;IACxD,QAAQ,CAAC,SAAS,QAAQ;gBACd,KAAK,EAAE,OAAO;CAI3B;AA+BD;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE;IACjD,KAAK,EAAE,GAAG,CAAC;IACX,QAAQ,EAAE,GAAG,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,kBAAkB,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,8FAA8F;IAC9F,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,2BAA2B,CAAC,CAwK3E"}

package/dist/replication/evidence.js

@@ -0,0 +1,198 @@
+import { z } from "zod";
+import { encodeAbiParameters, keccak256, parseAbi } from "viem";
+const bytes32 = z.string().regex(/^0x[0-9a-fA-F]{64}$/);
+const address = z.string().regex(/^0x[0-9a-fA-F]{40}$/);
+const zero = `0x${"0".repeat(64)}`;
+const abi = parseAbi([
+    "function dataPoints(address ownerAddress, string scope) view returns ((bytes32 id, address owner, string scope, uint8 status, uint256 currentVersion, bytes32 currentCommitment, uint256 createdAt, uint256 modifiedAt, uint256 totalAccesses))",
+    "function currentVersion(address ownerAddress, string scope) view returns (uint256)",
+    "function dataCommitment(address ownerAddress, string scope, uint256 version_) view returns (bytes32)",
+]);
+/** Every failure is retryable by transport workers. No error is evidence of absence. */
+export class ReplicaEvidenceUnavailableError extends Error {
+    retryable = true;
+    constructor(cause) {
+        super("replica finalized evidence unavailable", { cause });
+        this.name = "ReplicaEvidenceUnavailableError";
+    }
+}
+const uint256 = z
+    .bigint()
+    .min(0n)
+    .max((1n << 256n) - 1n);
+const dataPointInfoSchema = z.object({
+    id: bytes32,
+    owner: address,
+    scope: z.string(),
+    status: z.number().int().min(0).max(3),
+    currentVersion: uint256,
+    currentCommitment: bytes32,
+    createdAt: uint256,
+    modifiedAt: uint256,
+    totalAccesses: uint256,
+});
+const statuses = ["None", "Active", "Inactive", "Unavailable"];
+const headSchema = z.object({
+    id: bytes32,
+    ownerAddress: address,
+    scope: z.string().min(1),
+    expectedVersion: z.string().regex(/^[1-9][0-9]*$/),
+    // Gateway uses active/inactive/unavailable. A deleted alias also refuses serving.
+    state: z.enum(["active", "inactive", "unavailable", "deleted"]).optional(),
+    dataHash: bytes32,
+    metadataHash: bytes32,
+    deletedAt: z.string().datetime({ offset: true }).nullable().optional(),
+});
+/** Independent finalized commitment verification replaces Gateway HEAD proof verification.
+ * The configured RPC/chain/registry are trusted; the Gateway is not trusted to supply hashes.
+ * Gateway omission or optimistic head mutations can delay progress; only finalized slot facts quarantine.
+ */
+export function createReplicaEvidenceAdapter(deps) {
+    return async (scope, version) => {
+        try {
+            address.parse(deps.owner);
+            address.parse(deps.registry);
+            const maxAge = deps.maxFinalizedAgeSeconds ?? 1800;
+            if (!Number.isSafeInteger(deps.chainId) ||
+                deps.chainId <= 0 ||
+                /^0x0{40}$/i.test(deps.registry) ||
+                !scope ||
+                !Number.isSafeInteger(version) ||
+                version < 1 ||
+                !Number.isFinite(maxAge) ||
+                maxAge <= 0)
+                throw new Error("invalid evidence configuration");
+            const base = new URL(deps.gatewayUrl);
+            if (base.protocol !== "https:" && base.protocol !== "http:")
+                throw new Error("invalid Gateway URL");
+            if ((await deps.rpc.getChainId()) !== deps.chainId)
+                throw new Error("wrong chain");
+            const block = await deps.rpc.getBlock({ blockTag: "finalized" });
+            if (typeof block.number !== "bigint" ||
+                block.number < 0n ||
+                !bytes32.safeParse(block.hash).success ||
+                typeof block.timestamp !== "bigint" ||
+                block.timestamp < 0n)
+                throw new Error("missing finalized block");
+            const checkFreshness = () => {
+                const age = (deps.now ?? Date.now)() / 1000 - Number(block.timestamp);
+                if (!Number.isFinite(age) || age < -60 || age > maxAge)
+                    throw new Error("stale finalized block");
+            };
+            checkFreshness();
+            const id = keccak256(encodeAbiParameters([{ type: "address" }, { type: "string" }], [deps.owner, scope]));
+            const [currentVersion, commitment, rawInfo] = await Promise.all([
+                deps.rpc.readContract({
+                    address: deps.registry,
+                    abi,
+                    functionName: "currentVersion",
+                    args: [deps.owner, scope],
+                    blockNumber: block.number,
+                }),
+                deps.rpc.readContract({
+                    address: deps.registry,
+                    abi,
+                    functionName: "dataCommitment",
+                    args: [deps.owner, scope, BigInt(version)],
+                    blockNumber: block.number,
+                }),
+                deps.rpc.readContract({
+                    address: deps.registry,
+                    abi,
+                    functionName: "dataPoints",
+                    args: [deps.owner, scope],
+                    blockNumber: block.number,
+                }),
+            ]);
+            if (typeof currentVersion !== "bigint" ||
+                currentVersion < 0n ||
+                currentVersion > (1n << 256n) - 1n ||
+                !bytes32.safeParse(commitment).success ||
+                currentVersion < BigInt(version) !==
+                    (commitment.toLowerCase() === zero))
+                throw new Error("invalid registry result");
+            const info = dataPointInfoSchema.parse(rawInfo);
+            if (info.id.toLowerCase() !== id ||
+                info.currentVersion !== currentVersion)
+                throw new Error("inconsistent registry identity/version");
+            if (currentVersion === 0n) {
+                // The contract computes id even for a missing mapping; all stored fields are default.
+                if (!/^0x0{40}$/i.test(info.owner) ||
+                    info.scope !== "" ||
+                    info.status !== 0 ||
+                    info.currentCommitment.toLowerCase() !== zero ||
+                    info.createdAt !== 0n ||
+                    info.modifiedAt !== 0n ||
+                    info.totalAccesses !== 0n)
+                    throw new Error("invalid absent registry row");
+            }
+            else if (info.owner.toLowerCase() !== deps.owner.toLowerCase() ||
+                info.scope !== scope ||
+                (currentVersion === BigInt(version) &&
+                    info.currentCommitment.toLowerCase() !==
+                        commitment.toLowerCase()))
+                throw new Error("inconsistent registry row");
+            base.pathname = `${base.pathname.replace(/\/$/, "")}/v1/data/${id}`;
+            base.search = "?includeDeleted=true";
+            base.hash = "";
+            const response = await (deps.fetch ?? globalThis.fetch)(base.toString());
+            let head = null;
+            if (response.status === 404) {
+                // A missing deployment/route is not the Gateway's precise unknown-head response.
+                z.object({ error: z.literal("Data point not found") }).parse(await response.json());
+            }
+            else {
+                if (!response.ok && response.status !== 410)
+                    throw new Error(`Gateway HTTP ${response.status}`);
+                const envelope = z
+                    .object({ data: headSchema })
+                    .parse(await response.json());
+                const row = envelope.data;
+                // Validate all identity fields independently; never infer scope/owner from the requested URL.
+                if (row.id.toLowerCase() !== id ||
+                    row.ownerAddress.toLowerCase() !== deps.owner.toLowerCase() ||
+                    row.scope !== scope)
+                    throw new Error("Gateway identity mismatch");
+                if (response.status === 410 && !row.deletedAt)
+                    throw new Error("unbound Gateway tombstone");
+                head = {
+                    owner: deps.owner,
+                    scope: row.scope,
+                    version: row.expectedVersion,
+                    dataHash: row.dataHash.toLowerCase(),
+                    metadataHash: row.metadataHash.toLowerCase(),
+                    deleted: row.deletedAt != null ||
+                        (row.state !== undefined && row.state !== "active"),
+                };
+            }
+            // A number-pinned read must still match the finalized hash after all I/O.
+            const pinned = await deps.rpc.getBlock({ blockNumber: block.number });
+            if (pinned.number !== block.number ||
+                pinned.hash !== block.hash ||
+                pinned.timestamp !== block.timestamp)
+                throw new Error("finalized block changed");
+            checkFreshness();
+            return {
+                head,
+                chain: {
+                    owner: deps.owner,
+                    scope,
+                    version: String(version),
+                    currentVersion: currentVersion.toString(),
+                    status: statuses[info.status],
+                    commitment: commitment,
+                    chainId: deps.chainId,
+                    registry: deps.registry,
+                    blockNumber: block.number,
+                    blockHash: block.hash,
+                    blockTimestamp: block.timestamp,
+                },
+                pending: false,
+            };
+        }
+        catch (cause) {
+            throw new ReplicaEvidenceUnavailableError(cause);
+        }
+    };
+}
+//# sourceMappingURL=evidence.js.map

package/dist/replication/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/replication/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,QAAQ,EAAY,MAAM,MAAM,CAAC;AAG1E,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACxD,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACxD,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AACnC,MAAM,GAAG,GAAG,QAAQ,CAAC;IACnB,iPAAiP;IACjP,oFAAoF;IACpF,sGAAsG;CACvG,CAAC,CAAC;AAqBH,wFAAwF;AACxF,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAC/C,SAAS,GAAG,IAAI,CAAC;IAC1B,YAAY,KAAc;QACxB,KAAK,CAAC,wCAAwC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,OAAO,GAAG,CAAC;KACd,MAAM,EAAE;KACR,GAAG,CAAC,EAAE,CAAC;KACP,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAC1B,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,cAAc,EAAE,OAAO;IACvB,iBAAiB,EAAE,OAAO;IAC1B,SAAS,EAAE,OAAO;IAClB,UAAU,EAAE,OAAO;IACnB,aAAa,EAAE,OAAO;CACvB,CAAC,CAAC;AACH,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAU,CAAC;AAExE,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,EAAE,EAAE,OAAO;IACX,YAAY,EAAE,OAAO;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;IAClD,kFAAkF;IAClF,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1E,QAAQ,EAAE,OAAO;IACjB,YAAY,EAAE,OAAO;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAU5C;IACC,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC;YACnD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;gBACnC,IAAI,CAAC,OAAO,IAAI,CAAC;gBACjB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAChC,CAAC,KAAK;gBACN,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;gBAC9B,OAAO,GAAG,CAAC;gBACX,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACxB,MAAM,IAAI,CAAC;gBAEX,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;gBACzD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO;gBAChD,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;YACjE,IACE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAChC,KAAK,CAAC,MAAM,GAAG,EAAE;gBACjB,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO;gBACtC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;gBACnC,KAAK,CAAC,SAAS,GAAG,EAAE;gBAEpB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC7C,MAAM,cAAc,GAAG,GAAG,EAAE;gBAC1B,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACtE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,GAAG,MAAM;oBACpD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC7C,CAAC,CAAC;YACF,cAAc,EAAE,CAAC;YACjB,MAAM,EAAE,GAAG,SAAS,CAClB,mBAAmB,CACjB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EACzC,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CACpB,CACF,CAAC;YACF,MAAM,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC9D,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;oBACpB,OAAO,EAAE,IAAI,CAAC,QAAQ;oBACtB,GAAG;oBACH,YAAY,EAAE,gBAAgB;oBAC9B,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;oBACzB,WAAW,EAAE,KAAK,CAAC,MAAM;iBAC1B,CAAC;gBACF,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;oBACpB,OAAO,EAAE,IAAI,CAAC,QAAQ;oBACtB,GAAG;oBACH,YAAY,EAAE,gBAAgB;oBAC9B,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;oBAC1C,WAAW,EAAE,KAAK,CAAC,MAAM;iBAC1B,CAAC;gBACF,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;oBACpB,OAAO,EAAE,IAAI,CAAC,QAAQ;oBACtB,GAAG;oBACH,YAAY,EAAE,YAAY;oBAC1B,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;oBACzB,WAAW,EAAE,KAAK,CAAC,MAAM;iBAC1B,CAAC;aACH,CAAC,CAAC;YACH,IACE,OAAO,cAAc,KAAK,QAAQ;gBAClC,cAAc,GAAG,EAAE;gBACnB,cAAc,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;gBAClC,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO;gBACtC,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC;oBAC9B,CAAE,UAAqB,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;gBAEjD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChD,IACE,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE;gBAC5B,IAAI,CAAC,cAAc,KAAK,cAAc;gBAEtC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,IAAI,cAAc,KAAK,EAAE,EAAE,CAAC;gBAC1B,sFAAsF;gBACtF,IACE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;oBAC9B,IAAI,CAAC,KAAK,KAAK,EAAE;oBACjB,IAAI,CAAC,MAAM,KAAK,CAAC;oBACjB,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,KAAK,IAAI;oBAC7C,IAAI,CAAC,SAAS,KAAK,EAAE;oBACrB,IAAI,CAAC,UAAU,KAAK,EAAE;oBACtB,IAAI,CAAC,aAAa,KAAK,EAAE;oBAEzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACnD,CAAC;iBAAM,IACL,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBACrD,IAAI,CAAC,KAAK,KAAK,KAAK;gBACpB,CAAC,cAAc,KAAK,MAAM,CAAC,OAAO,CAAC;oBACjC,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE;wBACjC,UAAqB,CAAC,WAAW,EAAE,CAAC;gBAEzC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;YACpE,IAAI,CAAC,MAAM,GAAG,sBAAsB,CAAC;YACrC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzE,IAAI,IAAI,GAAwC,IAAI,CAAC;YACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,iFAAiF;gBACjF,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,KAAK,CAC1D,MAAM,QAAQ,CAAC,IAAI,EAAE,CACtB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;oBACzC,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrD,MAAM,QAAQ,GAAG,CAAC;qBACf,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;qBAC5B,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAC1B,8FAA8F;gBAC9F,IACE,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE;oBAC3B,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;oBAC3D,GAAG,CAAC,KAAK,KAAK,KAAK;oBAEnB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS;oBAC3C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC/C,IAAI,GAAG;oBACL,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,OAAO,EAAE,GAAG,CAAC,eAAe;oBAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE;oBACpC,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE;oBAC5C,OAAO,EACL,GAAG,CAAC,SAAS,IAAI,IAAI;wBACrB,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC;iBACtD,CAAC;YACJ,CAAC;YACD,0EAA0E;YAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACtE,IACE,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAC9B,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;gBAC1B,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;gBAEpC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC7C,cAAc,EAAE,CAAC;YACjB,OAAO;gBACL,IAAI;gBACJ,KAAK,EAAE;oBACL,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,KAAK;oBACL,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;oBACxB,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;oBACzC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAE;oBAC9B,UAAU,EAAE,UAAiB;oBAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,WAAW,EAAE,KAAK,CAAC,MAAM;oBACzB,SAAS,EAAE,KAAK,CAAC,IAAK;oBACtB,cAAc,EAAE,KAAK,CAAC,SAAS;iBAChC;gBACD,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/replication/finality.d.ts

@@ -0,0 +1,16 @@
+import type { Hex } from "viem";
+/** Scheduling hints only. Every wake still requires independent finalized evidence. */
+export interface ReplicaFinalityHints {
+    head(): Promise<bigint>;
+}
+export declare function createReplicaFinalityHints(deps: {
+    rpc: {
+        getBlock(input: {
+            blockTag: "finalized";
+        }): Promise<{
+            number: bigint | null;
+            hash?: Hex | null;
+        }>;
+    };
+}): ReplicaFinalityHints;
+//# sourceMappingURL=finality.d.ts.map

package/dist/replication/finality.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finality.d.ts","sourceRoot":"","sources":["../../src/replication/finality.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEhC,uFAAuF;AACvF,MAAM,WAAW,oBAAoB;IACnC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,GAAG,EAAE;QACH,QAAQ,CAAC,KAAK,EAAE;YACd,QAAQ,EAAE,WAAW,CAAC;SACvB,GAAG,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,EAAE,GAAG,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;KAC3D,CAAC;CACH,GAAG,oBAAoB,CASvB"}

package/dist/replication/finality.js

@@ -0,0 +1,11 @@
+export function createReplicaFinalityHints(deps) {
+    return {
+        async head() {
+            const block = await deps.rpc.getBlock({ blockTag: "finalized" });
+            if (block.number === null || block.number < 0n)
+                throw new Error("missing finalized scheduling head");
+            return block.number;
+        },
+    };
+}
+//# sourceMappingURL=finality.js.map

package/dist/replication/finality.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finality.js","sourceRoot":"","sources":["../../src/replication/finality.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,0BAA0B,CAAC,IAM1C;IACC,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;YACjE,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;gBAC5C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/replication/fixtures.d.ts

@@ -0,0 +1,16 @@
+/** Executable profile vectors shared with future receiver and Lite consumers. */
+import type { DeclarationBinding, ReplicaOperation, RecordOperation } from "./envelope.js";
+export declare const binding: DeclarationBinding;
+export declare const identity: {
+    owner: string;
+    sourceId: string;
+    connectionId: string;
+    methodId: string;
+    generation: 1;
+};
+export declare const registration: ReplicaOperation;
+export declare function upsert(operationId: string, counter: number, text?: string, writerId?: string): RecordOperation & {
+    kind: "upsert";
+};
+export declare const mutableVectors: readonly RecordOperation[];
+//# sourceMappingURL=fixtures.d.ts.map

package/dist/replication/fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../src/replication/fixtures.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EAChB,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,OAAO,EAAE,kBAOrB,CAAC;AACF,eAAO,MAAM,QAAQ;;;;;;CAMpB,CAAC;AACF,eAAO,MAAM,YAAY,EAAE,gBAI1B,CAAC;AACF,wBAAgB,MAAM,CACpB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,SAAc,EAClB,QAAQ,SAAa,GACpB,eAAe,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAWtC;AACD,eAAO,MAAM,cAAc,EAAE,SAAS,eAAe,EAapD,CAAC"}

package/dist/replication/fixtures.js

@@ -0,0 +1,47 @@
+export const binding = {
+    digest: `sha256:${"a".repeat(64)}`,
+    version: "1.0.0",
+    stream: "messages",
+    semantics: "mutable_state",
+    primaryKey: ["id"],
+    schemaDigest: `sha256:${"b".repeat(64)}`,
+};
+export const identity = {
+    owner: "owner-a",
+    sourceId: "https://example.test/source",
+    connectionId: "connection-a",
+    methodId: "export",
+    generation: 1,
+};
+export const registration = {
+    ...identity,
+    kind: "connection-register",
+    revision: { counter: 1, writerId: "device-a", operationId: "register" },
+};
+export function upsert(operationId, counter, text = operationId, writerId = "device-a") {
+    return {
+        ...identity,
+        kind: "upsert",
+        declaration: binding,
+        recordKey: "same-key",
+        emittedAt: "2026-10-20T00:00:00Z",
+        data: { id: "same-key", text },
+        blobs: [],
+        revision: { counter, writerId, operationId },
+    };
+}
+export const mutableVectors = [
+    upsert("a", 2, "offline A"),
+    upsert("b", 2, "offline B", "device-b"),
+    {
+        ...identity,
+        kind: "delete",
+        declaration: binding,
+        recordKey: "same-key",
+        emittedAt: "2026-10-20T00:00:00Z",
+        deletedAt: "2026-10-20T00:00:00Z",
+        revision: { counter: 3, writerId: "device-a", operationId: "delete" },
+    },
+    upsert("resurrect", 4),
+];
+//# sourceMappingURL=fixtures.js.map

package/dist/replication/fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../src/replication/fixtures.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,MAAM,OAAO,GAAuB;IACzC,MAAM,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;IAClC,OAAO,EAAE,OAAO;IAChB,MAAM,EAAE,UAAU;IAClB,SAAS,EAAE,eAAe;IAC1B,UAAU,EAAE,CAAC,IAAI,CAAC;IAClB,YAAY,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;CACzC,CAAC;AACF,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,6BAA6B;IACvC,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,CAAU;CACvB,CAAC;AACF,MAAM,CAAC,MAAM,YAAY,GAAqB;IAC5C,GAAG,QAAQ;IACX,IAAI,EAAE,qBAAqB;IAC3B,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE;CACxE,CAAC;AACF,MAAM,UAAU,MAAM,CACpB,WAAmB,EACnB,OAAe,EACf,IAAI,GAAG,WAAW,EAClB,QAAQ,GAAG,UAAU;IAErB,OAAO;QACL,GAAG,QAAQ;QACX,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,OAAO;QACpB,SAAS,EAAE,UAAU;QACrB,SAAS,EAAE,sBAAsB;QACjC,IAAI,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;QAC9B,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;KAC7C,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,MAAM,cAAc,GAA+B;IACxD,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,WAAW,CAAC;IAC3B,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC;IACvC;QACE,GAAG,QAAQ;QACX,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,OAAO;QACpB,SAAS,EAAE,UAAU;QACrB,SAAS,EAAE,sBAAsB;QACjC,SAAS,EAAE,sBAAsB;QACjC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE;KACtE;IACD,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;CACvB,CAAC"}

package/dist/replication/host-config.d.ts

@@ -0,0 +1,52 @@
+import type { DeclarationSnapshot } from "../pdpp/types.js";
+import { type DeclarationBinding, type EnvelopeExpectation } from "./envelope.js";
+import type { MergeContext } from "./merge-plan.js";
+import type { ReplicaEnvironment } from "./writer-identity.js";
+/**
+ * The signed partition environment of a chain. `undefined` for any other
+ * chain: replication then does not start, because a guessed environment
+ * would put this device in a partition no peer shares.
+ */
+export declare function replicaEnvironmentForChain(chainId: number): ReplicaEnvironment | undefined;
+/**
+ * The owner as every replica statement and operation carries it. Hosts hold
+ * checksummed addresses; the partition compares exact strings.
+ */
+export declare function replicaPartitionOwner(address: string): string;
+/** A stream's JSON Schema; `null` when the stream declares none. */
+export type ReplicaStreamSchema = Record<string, unknown> | null;
+/** One bound stream, with the schema its operations validate against. */
+export interface RetainedReplicaDeclaration {
+    sourceId: string;
+    binding: DeclarationBinding;
+    schema: ReplicaStreamSchema;
+}
+/** The `schemaDigest` a binding carries for a stream schema. */
+export declare function replicaSchemaDigest(schema: ReplicaStreamSchema): string;
+/**
+ * One binding per declared stream of each retained declaration: the exact
+ * document digest and version, the stream's semantics and primary key, and a
+ * digest of its JSON Schema (`null` when it declares none). Throws when a
+ * stream cannot be bound; the host then does not start replication.
+ *
+ * A changed set is a rebinding (`rebinding.ts`): `beginBaseline` records a
+ * new binding generation and keeps trusting the older bindings.
+ */
+export declare function replicaDeclarationBindings(snapshots: readonly DeclarationSnapshot[]): RetainedReplicaDeclaration[];
+/**
+ * The bindings this boot writes under (`current`, for `beginBaseline`) and
+ * the trusted set every replication check uses: `current` plus every binding
+ * the database retained in an earlier generation (`history`, from
+ * `declarationHistory()`). Own operations still in flight and peers that have
+ * not upgraded yet write under those older bindings; trusting only `current`
+ * would refuse them. A history entry without a schema, or whose schema does
+ * not match its digest, is not trusted, so its operations wait.
+ */
+export declare function replicaDeclarationContext(owner: string, snapshots: readonly DeclarationSnapshot[], history?: readonly (Omit<RetainedReplicaDeclaration, "schema"> & {
+    schema?: ReplicaStreamSchema;
+})[]): {
+    current: RetainedReplicaDeclaration[];
+    expected: EnvelopeExpectation;
+    declarations: MergeContext["declarations"];
+};
+//# sourceMappingURL=host-config.d.ts.map

package/dist/replication/host-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-config.d.ts","sourceRoot":"","sources":["../../src/replication/host-config.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAQ/D;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,GACd,kBAAkB,GAAG,SAAS,CAEhC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAI7D;AAKD,oEAAoE;AACpE,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;AAEjE,yEAAyE;AACzE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED,gEAAgE;AAChE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAEvE;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,SAAS,mBAAmB,EAAE,GACxC,0BAA0B,EAAE,CAiB9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,SAAS,mBAAmB,EAAE,EACzC,OAAO,GAAE,SAAS,CAAC,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,GAAG;IAC9D,MAAM,CAAC,EAAE,mBAAmB,CAAC;CAC9B,CAAC,EAAO,GACR;IACD,OAAO,EAAE,0BAA0B,EAAE,CAAC;IACtC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,YAAY,EAAE,YAAY,CAAC,cAAc,CAAC,CAAC;CAC5C,CA6CA"}

package/dist/replication/host-config.js

@@ -0,0 +1,111 @@
+/**
+ * What both hosts derive the same way before replication starts (host
+ * contract §4.1). Desktop and the phone must agree on every value here, or
+ * each refuses the other's batches, so the derivations live in core.
+ */
+import { sha256, stringToBytes } from "viem";
+import { compileRecordSchema } from "../storage/pdpp-records/schema.js";
+import { canonicalJson, declarationBindingSchema, } from "./envelope.js";
+/** Vana mainnet carries prod data; Moksha carries dev. */
+const ENVIRONMENT_BY_CHAIN = {
+    1480: "prod",
+    14800: "dev",
+};
+/**
+ * The signed partition environment of a chain. `undefined` for any other
+ * chain: replication then does not start, because a guessed environment
+ * would put this device in a partition no peer shares.
+ */
+export function replicaEnvironmentForChain(chainId) {
+    return ENVIRONMENT_BY_CHAIN[chainId];
+}
+/**
+ * The owner as every replica statement and operation carries it. Hosts hold
+ * checksummed addresses; the partition compares exact strings.
+ */
+export function replicaPartitionOwner(address) {
+    if (!/^0x[0-9a-fA-F]{40}$/.test(address))
+        throw new TypeError("invalid replica owner address");
+    return address.toLowerCase();
+}
+const sha256Text = (text) => `sha256:${sha256(stringToBytes(text)).slice(2)}`;
+/** The `schemaDigest` a binding carries for a stream schema. */
+export function replicaSchemaDigest(schema) {
+    return sha256Text(canonicalJson(schema));
+}
+/**
+ * One binding per declared stream of each retained declaration: the exact
+ * document digest and version, the stream's semantics and primary key, and a
+ * digest of its JSON Schema (`null` when it declares none). Throws when a
+ * stream cannot be bound; the host then does not start replication.
+ *
+ * A changed set is a rebinding (`rebinding.ts`): `beginBaseline` records a
+ * new binding generation and keeps trusting the older bindings.
+ */
+export function replicaDeclarationBindings(snapshots) {
+    return [...snapshots]
+        .sort((a, b) => (a.source_id < b.source_id ? -1 : 1))
+        .flatMap((snapshot) => snapshot.streams.map((stream) => ({
+        sourceId: snapshot.source_id,
+        binding: declarationBindingSchema.parse({
+            digest: `sha256:${snapshot.digest}`,
+            version: snapshot.version,
+            stream: stream.name,
+            semantics: stream.semantics ?? "mutable_state",
+            primaryKey: stream.primary_key,
+            schemaDigest: replicaSchemaDigest(stream.schema ?? null),
+        }),
+        schema: stream.schema ?? null,
+    })));
+}
+/**
+ * The bindings this boot writes under (`current`, for `beginBaseline`) and
+ * the trusted set every replication check uses: `current` plus every binding
+ * the database retained in an earlier generation (`history`, from
+ * `declarationHistory()`). Own operations still in flight and peers that have
+ * not upgraded yet write under those older bindings; trusting only `current`
+ * would refuse them. A history entry without a schema, or whose schema does
+ * not match its digest, is not trusted, so its operations wait.
+ */
+export function replicaDeclarationContext(owner, snapshots, history = []) {
+    const current = replicaDeclarationBindings(snapshots);
+    const trusted = new Map();
+    for (const { schema, ...entry } of [...current, ...history])
+        if (schema !== undefined &&
+            replicaSchemaDigest(schema) === entry.binding.schemaDigest)
+            trusted.set(canonicalJson([entry.sourceId, entry.binding]), {
+                ...entry,
+                schema,
+            });
+    const entries = [...trusted.values()];
+    const validators = new Map();
+    // The same rule as the resource server: a stream without a schema states
+    // no shape to check.
+    const validatorFor = (entry) => {
+        let validate = validators.get(entry.binding.schemaDigest);
+        if (!validate) {
+            const compiled = entry.schema
+                ? compileRecordSchema(entry.schema)
+                : undefined;
+            validate = (data) => (compiled ? compiled(data) === true : true);
+            validators.set(entry.binding.schemaDigest, validate);
+        }
+        return validate;
+    };
+    return {
+        current,
+        expected: {
+            owner,
+            declarations: entries.map(({ sourceId, binding }) => ({
+                sourceId,
+                binding,
+            })),
+        },
+        declarations: entries.map((entry) => ({
+            sourceId: entry.sourceId,
+            binding: entry.binding,
+            validateData: validatorFor(entry),
+        })),
+    };
+}
+//# sourceMappingURL=host-config.js.map

package/dist/replication/host-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-config.js","sourceRoot":"","sources":["../../src/replication/host-config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EACL,aAAa,EACb,wBAAwB,GAGzB,MAAM,eAAe,CAAC;AAIvB,0DAA0D;AAC1D,MAAM,oBAAoB,GAAiD;IACzE,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,KAAK;CACb,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAe;IAEf,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;QACtC,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAClC,UAAU,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAYnD,gEAAgE;AAChE,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC7D,OAAO,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAAyC;IAEzC,OAAO,CAAC,GAAG,SAAS,CAAC;SAClB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACpD,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChC,QAAQ,EAAE,QAAQ,CAAC,SAAS;QAC5B,OAAO,EAAE,wBAAwB,CAAC,KAAK,CAAC;YACtC,MAAM,EAAE,UAAU,QAAQ,CAAC,MAAM,EAAE;YACnC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,eAAe;YAC9C,UAAU,EAAE,MAAM,CAAC,WAAW;YAC9B,YAAY,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC;SACzD,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;KAC9B,CAAC,CAAC,CACJ,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAa,EACb,SAAyC,EACzC,UAEO,EAAE;IAMT,MAAM,OAAO,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC9D,KAAK,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC;QACzD,IACE,MAAM,KAAK,SAAS;YACpB,mBAAmB,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,YAAY;YAE1D,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE;gBAC1D,GAAG,KAAK;gBACR,MAAM;aACP,CAAC,CAAC;IACP,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,GAAG,EAGvB,CAAC;IACJ,yEAAyE;IACzE,qBAAqB;IACrB,MAAM,YAAY,GAAG,CAAC,KAAiC,EAAE,EAAE;QACzD,IAAI,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM;gBAC3B,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC;gBACnC,CAAC,CAAC,SAAS,CAAC;YACd,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,OAAO;QACL,OAAO;QACP,QAAQ,EAAE;YACR,KAAK;YACL,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;gBACpD,QAAQ;gBACR,OAAO;aACR,CAAC,CAAC;SACJ;QACD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC;SAClC,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}