@opendatalabs/personal-server-ts-core 1.34.2 → 1.35.1

package/dist/replication/visibility-policy.d.ts

@@ -0,0 +1,26 @@
+/** One policy for every replica read surface. Reader identity is supplied by the trusted host. */
+export type ReplicaReader = "owner" | "grant";
+export type ReplicaVisibilityState = "confirmed" | "pending" | "quarantined" | "conflicted";
+export type ReplicaRecordOrigin = "local" | "received";
+export interface ReplicaVisibilityPolicy {
+    owner: "confirmed-only" | "include-pending";
+    grant: "confirmed-only";
+}
+export declare const DEFAULT_REPLICA_VISIBILITY_POLICY: Readonly<ReplicaVisibilityPolicy>;
+export declare function replicaStateVisible(state: ReplicaVisibilityState, reader?: ReplicaReader, policy?: ReplicaVisibilityPolicy, origin?: ReplicaRecordOrigin): boolean;
+/** The marker describes every pending effect, including a removal. */
+export declare function replicaPendingMetadata(): {
+    confirmation: "not yet confirmed";
+    visibility: "pending";
+};
+/** Identity ambiguity is visible to the owner without declaring received data authoritative. */
+export declare function replicaConflictMetadata(): {
+    visibility: "conflicted";
+    status: "account conflict";
+};
+/** The host supplies the durable identity-ambiguity fact, never a request parameter. */
+export declare function replicaConnectionVisibility(bindingConflict: boolean): {
+    state: "conflicted";
+    reason: "source_binding";
+} | undefined;
+//# sourceMappingURL=visibility-policy.d.ts.map

package/dist/replication/visibility-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"visibility-policy.d.ts","sourceRoot":"","sources":["../../src/replication/visibility-policy.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;AAC9C,MAAM,MAAM,sBAAsB,GAChC,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,YAAY,CAAC;AACzD,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,UAAU,CAAC;AACvD,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CAAC;IAC5C,KAAK,EAAE,gBAAgB,CAAC;CACzB;AACD,eAAO,MAAM,iCAAiC,EAAE,QAAQ,CAAC,uBAAuB,CAI7E,CAAC;AACJ,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,sBAAsB,EAC7B,MAAM,GAAE,aAAuB,EAC/B,MAAM,GAAE,uBAA2D,EACnE,MAAM,GAAE,mBAAgC,GACvC,OAAO,CAQT;AAED,sEAAsE;AACtE,wBAAgB,sBAAsB;;;EAKrC;AAED,gGAAgG;AAChG,wBAAgB,uBAAuB;;;EAKtC;AAED,wFAAwF;AACxF,wBAAgB,2BAA2B,CAAC,eAAe,EAAE,OAAO;;;cAInE"}

package/dist/replication/visibility-policy.js

@@ -0,0 +1,33 @@
+export const DEFAULT_REPLICA_VISIBILITY_POLICY = {
+    owner: "include-pending",
+    grant: "confirmed-only",
+};
+export function replicaStateVisible(state, reader = "grant", policy = DEFAULT_REPLICA_VISIBILITY_POLICY, origin = "received") {
+    if (state === "conflicted")
+        return reader === "owner" && origin === "local";
+    return (state === "confirmed" ||
+        (state === "pending" &&
+            reader === "owner" &&
+            policy.owner === "include-pending"));
+}
+/** The marker describes every pending effect, including a removal. */
+export function replicaPendingMetadata() {
+    return {
+        confirmation: "not yet confirmed",
+        visibility: "pending",
+    };
+}
+/** Identity ambiguity is visible to the owner without declaring received data authoritative. */
+export function replicaConflictMetadata() {
+    return {
+        visibility: "conflicted",
+        status: "account conflict",
+    };
+}
+/** The host supplies the durable identity-ambiguity fact, never a request parameter. */
+export function replicaConnectionVisibility(bindingConflict) {
+    return bindingConflict
+        ? { state: "conflicted", reason: "source_binding" }
+        : undefined;
+}
+//# sourceMappingURL=visibility-policy.js.map

package/dist/replication/visibility-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visibility-policy.js","sourceRoot":"","sources":["../../src/replication/visibility-policy.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,iCAAiC,GAC5C;IACE,KAAK,EAAE,iBAAiB;IACxB,KAAK,EAAE,gBAAgB;CACxB,CAAC;AACJ,MAAM,UAAU,mBAAmB,CACjC,KAA6B,EAC7B,SAAwB,OAAO,EAC/B,SAAkC,iCAAiC,EACnE,SAA8B,UAAU;IAExC,IAAI,KAAK,KAAK,YAAY;QAAE,OAAO,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,OAAO,CAAC;IAC5E,OAAO,CACL,KAAK,KAAK,WAAW;QACrB,CAAC,KAAK,KAAK,SAAS;YAClB,MAAM,KAAK,OAAO;YAClB,MAAM,CAAC,KAAK,KAAK,iBAAiB,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,YAAY,EAAE,mBAA4B;QAC1C,UAAU,EAAE,SAAkB;KAC/B,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,UAAU,EAAE,YAAqB;QACjC,MAAM,EAAE,kBAA2B;KACpC,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,2BAA2B,CAAC,eAAwB;IAClE,OAAO,eAAe;QACpB,CAAC,CAAC,EAAE,KAAK,EAAE,YAAqB,EAAE,MAAM,EAAE,gBAAyB,EAAE;QACrE,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/replication/writer-identity-store.d.ts

@@ -0,0 +1,100 @@
+/**
+ * This server's replica writer identity (host contract §3.2), as storage
+ * effects Node (`server/src/storage/pdpp-replica-writer-identity.ts`) and
+ * PS-Lite (`lite/src/replication-engine.ts`) both run. Each row is one
+ * incarnation: the gateway registration and writer nonce it was derived
+ * from, and the two writer ids. The current identity is the highest
+ * incarnation. Rows are never changed, so an older writer id can never be
+ * derived again on this database.
+ */
+import { type ReplicaRosterPort, type ReplicaRosterRecord } from "./roster.js";
+import { type ReplicaWriterSeed } from "./writer-identity.js";
+import { type ReplicationRefusal } from "./door.js";
+import { type ReplicaEffect } from "./effects.js";
+import type { ReplicationTimers } from "./host-driver.js";
+export declare const REPLICA_WRITER_IDENTITY_MIGRATION = "\nCREATE TABLE IF NOT EXISTS pdpp_replica_writer_identity (\n  incarnation INTEGER PRIMARY KEY AUTOINCREMENT,\n  owner TEXT NOT NULL,\n  server TEXT NOT NULL,\n  server_id TEXT NOT NULL,\n  writer_nonce TEXT NOT NULL UNIQUE,\n  transport_writer TEXT NOT NULL UNIQUE,\n  operation_writer TEXT NOT NULL UNIQUE\n);\nCREATE TRIGGER IF NOT EXISTS pdpp_replica_writer_identity_no_update BEFORE UPDATE ON pdpp_replica_writer_identity\nBEGIN SELECT RAISE(ABORT, 'replica writer identity is append-only'); END;\nCREATE TRIGGER IF NOT EXISTS pdpp_replica_writer_identity_no_delete BEFORE DELETE ON pdpp_replica_writer_identity\nBEGIN SELECT RAISE(ABORT, 'replica writer identity is append-only'); END;\n";
+export interface ReplicaWriterIdentity {
+    incarnation: number;
+    seed: ReplicaWriterSeed;
+    transportWriter: string;
+    operationWriter: string;
+}
+/** Writer identity cannot be created or changed for this database. */
+export declare class ReplicaWriterIdentityError extends Error {
+    readonly code: "replica_identity_requires_fresh_journal" | "replica_identity_owner_mismatch" | "replica_identity_not_registered";
+    constructor(code: "replica_identity_requires_fresh_journal" | "replica_identity_owner_mismatch" | "replica_identity_not_registered");
+}
+/**
+ * What a boot rotation that threw means (host contract §3.2): a database
+ * without an identity yet (`no_identity`; its first identity draws a new
+ * nonce anyway) or a closed door (`replication_off`). `undefined` for a real
+ * failure, which the host rethrows.
+ */
+export declare function replicaWriterRotationOutcome(error: unknown): "no_identity" | "replication_off" | undefined;
+/** The current identity, or undefined before the first enable. */
+export declare function currentReplicaWriterIdentity(): ReplicaEffect<ReplicaWriterIdentity | undefined>;
+/** What the identity writes need from their host, in its transaction. */
+export interface ReplicaWriterIdentityHost {
+    /** The replication door is open. */
+    admitted(): ReplicaEffect<boolean>;
+    /** No operation was captured locally yet (the first identity needs this). */
+    journalEmpty(): ReplicaEffect<boolean>;
+}
+/**
+ * Create or update the identity from this server's own gateway record, in
+ * the caller's write transaction. Idempotent for the current registration.
+ * A new registration id (the address registered again) starts a new
+ * incarnation with a new nonce.
+ *
+ * The first identity requires an empty replica journal: operations captured
+ * before it carry another writer id, which receivers refuse. Throws
+ * `ReplicationRefusedError` instead of writing once the door is closed.
+ */
+export declare function establishReplicaWriterIdentity(host: ReplicaWriterIdentityHost, input: {
+    owner: string;
+    server: string;
+    record: ReplicaRosterRecord | null;
+    nonce?: string;
+}): ReplicaEffect<ReplicaWriterIdentity>;
+/**
+ * A new nonce under the same registration, before new writes, in the
+ * caller's write transaction. See the Node host for when to call it.
+ */
+export declare function rotateReplicaWriterIdentity(host: Pick<ReplicaWriterIdentityHost, "admitted">, input?: {
+    nonce?: string;
+}): ReplicaEffect<ReplicaWriterIdentity>;
+export type ReplicaWriterIdentityState = {
+    tag: "ready";
+    identity: ReplicaWriterIdentity;
+} | {
+    tag: "waiting";
+    reason: "server_not_registered" | "roster_unavailable";
+}
+/** The replication door closed; it stays closed. */
+ | {
+    tag: "refused";
+    reason: ReplicationRefusal;
+};
+/**
+ * Enable step: read this server's own roster record and establish or
+ * update the identity from it. Waits while the server is not registered,
+ * revoked, or registered under another owner. While the roster is
+ * unavailable an existing identity stays usable; a missing one waits. A read
+ * that outlasts `deadlineMs` (default: the coordinator's attempt deadline)
+ * counts as unavailable. The roster read writes nothing; if the door closes
+ * during it, the identity write refuses.
+ *
+ * `current` reads the identity; `establish` runs
+ * `establishReplicaWriterIdentity` in one write transaction.
+ */
+export declare function enableReplicaWriterIdentity(input: {
+    owner: string;
+    server: string;
+    roster: ReplicaRosterPort;
+    signal?: AbortSignal;
+    deadlineMs?: number;
+    timers?: Pick<ReplicationTimers, "setTimeout" | "clearTimeout">;
+    current(): ReplicaWriterIdentity | undefined | Promise<ReplicaWriterIdentity | undefined>;
+    establish(record: ReplicaRosterRecord | null): ReplicaWriterIdentity | Promise<ReplicaWriterIdentity>;
+}): Promise<ReplicaWriterIdentityState>;
+//# sourceMappingURL=writer-identity-store.d.ts.map

package/dist/replication/writer-identity-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer-identity-store.d.ts","sourceRoot":"","sources":["../../src/replication/writer-identity-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAA2B,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAO,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,eAAO,MAAM,iCAAiC,0rBAc7C,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,iBAAiB,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;CACzB;AAYD,sEAAsE;AACtE,qBAAa,0BAA2B,SAAQ,KAAK;IAEjD,QAAQ,CAAC,IAAI,EACT,yCAAyC,GACzC,iCAAiC,GACjC,iCAAiC;gBAH5B,IAAI,EACT,yCAAyC,GACzC,iCAAiC,GACjC,iCAAiC;CAKxC;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,OAAO,GACb,aAAa,GAAG,iBAAiB,GAAG,SAAS,CAQ/C;AAED,kEAAkE;AAClE,wBAAiB,4BAA4B,IAAI,aAAa,CAC5D,qBAAqB,GAAG,SAAS,CAClC,CAiBA;AAED,yEAAyE;AACzE,MAAM,WAAW,yBAAyB;IACxC,oCAAoC;IACpC,QAAQ,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,6EAA6E;IAC7E,YAAY,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;CACxC;AAsCD;;;;;;;;;GASG;AACH,wBAAiB,8BAA8B,CAC7C,IAAI,EAAE,yBAAyB,EAC/B,KAAK,EAAE;IACL,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,aAAa,CAAC,qBAAqB,CAAC,CAuBtC;AAED;;;GAGG;AACH,wBAAiB,2BAA2B,CAC1C,IAAI,EAAE,IAAI,CAAC,yBAAyB,EAAE,UAAU,CAAC,EACjD,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7B,aAAa,CAAC,qBAAqB,CAAC,CAQtC;AAED,MAAM,MAAM,0BAA0B,GAClC;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,qBAAqB,CAAA;CAAE,GACjD;IACE,GAAG,EAAE,SAAS,CAAC;IACf,MAAM,EAAE,uBAAuB,GAAG,oBAAoB,CAAC;CACxD;AACH,oDAAoD;GAClD;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC;AA+CnD;;;;;;;;;;;GAWG;AACH,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,cAAc,CAAC,CAAC;IAChE,OAAO,IACH,qBAAqB,GACrB,SAAS,GACT,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC/C,SAAS,CACP,MAAM,EAAE,mBAAmB,GAAG,IAAI,GACjC,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAC3D,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA+BtC"}

package/dist/replication/writer-identity-store.js

@@ -0,0 +1,218 @@
+/**
+ * This server's replica writer identity (host contract §3.2), as storage
+ * effects Node (`server/src/storage/pdpp-replica-writer-identity.ts`) and
+ * PS-Lite (`lite/src/replication-engine.ts`) both run. Each row is one
+ * incarnation: the gateway registration and writer nonce it was derived
+ * from, and the two writer ids. The current identity is the highest
+ * incarnation. Rows are never changed, so an older writer id can never be
+ * derived again on this database.
+ */
+import { ReplicaRosterUnavailableError, } from "./roster.js";
+import { deriveReplicaWriters, randomReplicaWriterNonce, replicaWriterSeedSchema, } from "./writer-identity.js";
+import { ReplicationRefusedError } from "./door.js";
+import { sql } from "./effects.js";
+import { REPLICA_ATTEMPT_TIMEOUT_MS } from "./coordinator.js";
+export const REPLICA_WRITER_IDENTITY_MIGRATION = `
+CREATE TABLE IF NOT EXISTS pdpp_replica_writer_identity (
+  incarnation INTEGER PRIMARY KEY AUTOINCREMENT,
+  owner TEXT NOT NULL,
+  server TEXT NOT NULL,
+  server_id TEXT NOT NULL,
+  writer_nonce TEXT NOT NULL UNIQUE,
+  transport_writer TEXT NOT NULL UNIQUE,
+  operation_writer TEXT NOT NULL UNIQUE
+);
+CREATE TRIGGER IF NOT EXISTS pdpp_replica_writer_identity_no_update BEFORE UPDATE ON pdpp_replica_writer_identity
+BEGIN SELECT RAISE(ABORT, 'replica writer identity is append-only'); END;
+CREATE TRIGGER IF NOT EXISTS pdpp_replica_writer_identity_no_delete BEFORE DELETE ON pdpp_replica_writer_identity
+BEGIN SELECT RAISE(ABORT, 'replica writer identity is append-only'); END;
+`;
+/** Writer identity cannot be created or changed for this database. */
+export class ReplicaWriterIdentityError extends Error {
+    code;
+    constructor(code) {
+        super(code);
+        this.code = code;
+        this.name = "ReplicaWriterIdentityError";
+    }
+}
+/**
+ * What a boot rotation that threw means (host contract §3.2): a database
+ * without an identity yet (`no_identity`; its first identity draws a new
+ * nonce anyway) or a closed door (`replication_off`). `undefined` for a real
+ * failure, which the host rethrows.
+ */
+export function replicaWriterRotationOutcome(error) {
+    if (error instanceof ReplicaWriterIdentityError &&
+        error.code === "replica_identity_not_registered")
+        return "no_identity";
+    if (error instanceof ReplicationRefusedError)
+        return "replication_off";
+    return undefined;
+}
+/** The current identity, or undefined before the first enable. */
+export function* currentReplicaWriterIdentity() {
+    const row = yield* sql.get("SELECT * FROM pdpp_replica_writer_identity ORDER BY incarnation DESC LIMIT 1");
+    return row
+        ? {
+            incarnation: row.incarnation,
+            seed: {
+                owner: row.owner,
+                server: row.server,
+                serverId: row.server_id,
+                writerNonce: row.writer_nonce,
+            },
+            transportWriter: row.transport_writer,
+            operationWriter: row.operation_writer,
+        }
+        : undefined;
+}
+/**
+ * The only identity write. Run inside the caller's transaction, so the door
+ * check and the insert are atomic: once the door is closed, no identity is
+ * established or rotated.
+ */
+function* insert(host, seed) {
+    if (!(yield* host.admitted()))
+        throw new ReplicationRefusedError("reenable_refused");
+    const s = replicaWriterSeedSchema.parse(seed);
+    const writers = deriveReplicaWriters(s);
+    yield* sql.run("INSERT INTO pdpp_replica_writer_identity (owner,server,server_id,writer_nonce,transport_writer,operation_writer) VALUES (?,?,?,?,?,?)", s.owner, s.server, s.serverId, s.writerNonce, writers.transport, writers.operation);
+    return (yield* currentReplicaWriterIdentity());
+}
+/** Registered now, under this owner. Anything else is not registered for it. */
+function registeredId(record, owner) {
+    if (!record ||
+        record.revokedAt !== null ||
+        record.owner.toLowerCase() !== owner)
+        throw new ReplicaWriterIdentityError("replica_identity_not_registered");
+    return record.id.toLowerCase();
+}
+/**
+ * Create or update the identity from this server's own gateway record, in
+ * the caller's write transaction. Idempotent for the current registration.
+ * A new registration id (the address registered again) starts a new
+ * incarnation with a new nonce.
+ *
+ * The first identity requires an empty replica journal: operations captured
+ * before it carry another writer id, which receivers refuse. Throws
+ * `ReplicationRefusedError` instead of writing once the door is closed.
+ */
+export function* establishReplicaWriterIdentity(host, input) {
+    const owner = input.owner.toLowerCase();
+    const server = input.server.toLowerCase();
+    const serverId = registeredId(input.record, owner);
+    const current = yield* currentReplicaWriterIdentity();
+    if (current && current.seed.owner !== owner)
+        throw new ReplicaWriterIdentityError("replica_identity_owner_mismatch");
+    if (current &&
+        current.seed.server === server &&
+        current.seed.serverId === serverId)
+        return current;
+    if (!current && !(yield* host.journalEmpty()))
+        throw new ReplicaWriterIdentityError("replica_identity_requires_fresh_journal");
+    return yield* insert(host, {
+        owner,
+        server,
+        serverId,
+        writerNonce: input.nonce ?? randomReplicaWriterNonce(),
+    });
+}
+/**
+ * A new nonce under the same registration, before new writes, in the
+ * caller's write transaction. See the Node host for when to call it.
+ */
+export function* rotateReplicaWriterIdentity(host, input = {}) {
+    const current = yield* currentReplicaWriterIdentity();
+    if (!current)
+        throw new ReplicaWriterIdentityError("replica_identity_not_registered");
+    return yield* insert(host, {
+        ...current.seed,
+        writerNonce: input.nonce ?? randomReplicaWriterNonce(),
+    });
+}
+/**
+ * One bounded roster read. A gateway that never answers must not hold the
+ * single-flight step, so the read races a deadline: on it the lookup's signal
+ * aborts, the late answer is dropped and the read counts as unavailable,
+ * which `enableReplicaWriterIdentity` already settles as a Wait. The host's
+ * own abort is forwarded to the lookup.
+ */
+async function readRoster(input) {
+    const lookup = new AbortController();
+    const forward = () => lookup.abort(input.signal.reason);
+    if (input.signal?.aborted)
+        forward();
+    else
+        input.signal?.addEventListener("abort", forward, { once: true });
+    let timer;
+    const deadline = new Promise((_resolve, reject) => {
+        timer = input.timers.setTimeout(() => {
+            const error = new DOMException("replica roster deadline", "TimeoutError");
+            lookup.abort(error);
+            reject(new ReplicaRosterUnavailableError({ cause: error }));
+        }, input.deadlineMs);
+    });
+    try {
+        return await Promise.race([
+            input.roster.server(input.server.toLowerCase(), {
+                signal: lookup.signal,
+            }),
+            deadline,
+        ]);
+    }
+    finally {
+        input.timers.clearTimeout(timer);
+        input.signal?.removeEventListener("abort", forward);
+    }
+}
+const defaultTimers = {
+    setTimeout: (run, ms) => globalThis.setTimeout(run, ms),
+    clearTimeout: (handle) => globalThis.clearTimeout(handle),
+};
+/**
+ * Enable step: read this server's own roster record and establish or
+ * update the identity from it. Waits while the server is not registered,
+ * revoked, or registered under another owner. While the roster is
+ * unavailable an existing identity stays usable; a missing one waits. A read
+ * that outlasts `deadlineMs` (default: the coordinator's attempt deadline)
+ * counts as unavailable. The roster read writes nothing; if the door closes
+ * during it, the identity write refuses.
+ *
+ * `current` reads the identity; `establish` runs
+ * `establishReplicaWriterIdentity` in one write transaction.
+ */
+export async function enableReplicaWriterIdentity(input) {
+    let record;
+    try {
+        record = await readRoster({
+            roster: input.roster,
+            server: input.server,
+            signal: input.signal,
+            deadlineMs: input.deadlineMs ?? REPLICA_ATTEMPT_TIMEOUT_MS,
+            timers: input.timers ?? defaultTimers,
+        });
+    }
+    catch (error) {
+        if (!(error instanceof ReplicaRosterUnavailableError))
+            throw error;
+        const current = await input.current();
+        return current &&
+            current.seed.server === input.server.toLowerCase() &&
+            current.seed.owner === input.owner.toLowerCase()
+            ? { tag: "ready", identity: current }
+            : { tag: "waiting", reason: "roster_unavailable" };
+    }
+    try {
+        return { tag: "ready", identity: await input.establish(record) };
+    }
+    catch (error) {
+        if (error instanceof ReplicaWriterIdentityError &&
+            error.code === "replica_identity_not_registered")
+            return { tag: "waiting", reason: "server_not_registered" };
+        if (error instanceof ReplicationRefusedError)
+            return { tag: "refused", reason: error.reason };
+        throw error;
+    }
+}
+//# sourceMappingURL=writer-identity-store.js.map

package/dist/replication/writer-identity-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer-identity-store.js","sourceRoot":"","sources":["../../src/replication/writer-identity-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,6BAA6B,GAG9B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,GAExB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,uBAAuB,EAA2B,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,GAAG,EAAsB,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAG9D,MAAM,CAAC,MAAM,iCAAiC,GAAG;;;;;;;;;;;;;;CAchD,CAAC;AAmBF,sEAAsE;AACtE,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAExC;IADX,YACW,IAG4B;QAErC,KAAK,CAAC,IAAI,CAAC,CAAC;QALH,SAAI,GAAJ,IAAI,CAGwB;QAGrC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,IACE,KAAK,YAAY,0BAA0B;QAC3C,KAAK,CAAC,IAAI,KAAK,iCAAiC;QAEhD,OAAO,aAAa,CAAC;IACvB,IAAI,KAAK,YAAY,uBAAuB;QAAE,OAAO,iBAAiB,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kEAAkE;AAClE,MAAM,SAAS,CAAC,CAAC,4BAA4B;IAG3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACxB,8EAA8E,CAC/E,CAAC;IACF,OAAO,GAAG;QACR,CAAC,CAAC;YACE,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,IAAI,EAAE;gBACJ,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,WAAW,EAAE,GAAG,CAAC,YAAY;aAC9B;YACD,eAAe,EAAE,GAAG,CAAC,gBAAgB;YACrC,eAAe,EAAE,GAAG,CAAC,gBAAgB;SACtC;QACH,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAUD;;;;GAIG;AACH,QAAQ,CAAC,CAAC,MAAM,CACd,IAAiD,EACjD,IAAuB;IAEvB,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;IACxD,MAAM,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACxC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CACZ,uIAAuI,EACvI,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,MAAM,EACR,CAAC,CAAC,QAAQ,EACV,CAAC,CAAC,WAAW,EACb,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,CAClB,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,CAAC,4BAA4B,EAAE,CAAE,CAAC;AAClD,CAAC;AAED,gFAAgF;AAChF,SAAS,YAAY,CAAC,MAAkC,EAAE,KAAa;IACrE,IACE,CAAC,MAAM;QACP,MAAM,CAAC,SAAS,KAAK,IAAI;QACzB,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK;QAEpC,MAAM,IAAI,0BAA0B,CAAC,iCAAiC,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,SAAS,CAAC,CAAC,8BAA8B,CAC7C,IAA+B,EAC/B,KAKC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,4BAA4B,EAAE,CAAC;IACtD,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK;QACzC,MAAM,IAAI,0BAA0B,CAAC,iCAAiC,CAAC,CAAC;IAC1E,IACE,OAAO;QACP,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM;QAC9B,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAElC,OAAO,OAAO,CAAC;IACjB,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3C,MAAM,IAAI,0BAA0B,CAClC,yCAAyC,CAC1C,CAAC;IACJ,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QACzB,KAAK;QACL,MAAM;QACN,QAAQ;QACR,WAAW,EAAE,KAAK,CAAC,KAAK,IAAI,wBAAwB,EAAE;KACvD,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,SAAS,CAAC,CAAC,2BAA2B,CAC1C,IAAiD,EACjD,QAA4B,EAAE;IAE9B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,4BAA4B,EAAE,CAAC;IACtD,IAAI,CAAC,OAAO;QACV,MAAM,IAAI,0BAA0B,CAAC,iCAAiC,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QACzB,GAAG,OAAO,CAAC,IAAI;QACf,WAAW,EAAE,KAAK,CAAC,KAAK,IAAI,wBAAwB,EAAE;KACvD,CAAC,CAAC;AACL,CAAC;AAWD;;;;;;GAMG;AACH,KAAK,UAAU,UAAU,CAAC,KAMzB;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAO,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,EAAE,CAAC;;QAChC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,KAAc,CAAC;IACnB,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACvD,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;YACnC,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,yBAAyB,EAAE,cAAc,CAAC,CAAC;YAC1E,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,6BAA6B,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAmB,EAAE;gBAC/D,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC;YACF,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,MAAM,aAAa,GAA2D;IAC5E,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC;IACvD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CACvB,UAAU,CAAC,YAAY,CAAC,MAAuC,CAAC;CACnE,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAcjD;IACC,IAAI,MAAkC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,UAAU,CAAC;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,0BAA0B;YAC1D,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,aAAa;SACtC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,6BAA6B,CAAC;YAAE,MAAM,KAAK,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO,OAAO;YACZ,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;YAClD,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;YAChD,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE;YACrC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,0BAA0B;YAC3C,KAAK,CAAC,IAAI,KAAK,iCAAiC;YAEhD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAC7D,IAAI,KAAK,YAAY,uBAAuB;YAC1C,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAClD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/replication/writer-identity.d.ts

@@ -0,0 +1,252 @@
+/**
+ * Who may write (host contract §3). A device signs each batch with its
+ * registered PS server key. Writer ids are derived from that signer, so a
+ * receiver checks them from the signature and the roster alone. Nothing is
+ * bound on first contact.
+ */
+import { z } from "zod";
+import { type Hex } from "viem";
+import { type ReplicaRosterRecord } from "./roster.js";
+export declare const REPLICA_WRITER_DOMAIN = "vana-pdpp-replica-writer-v1";
+export type ReplicaWriterRole = "transport" | "operation";
+export type ReplicaEnvironment = "dev" | "prod";
+/**
+ * Declared by a runtime that rotates the writer identity at boot when the
+ * host asks (host contract §3.2). A host checks it before it relies on the
+ * rotation.
+ */
+export declare const REPLICA_WRITER_ROTATION_CONTRACT = "replica-writer-rotation-v1";
+/**
+ * What a boot did with the host's rotation request. `rotated`: a new nonce
+ * before any write of this boot. `no_identity`: this database has no writer
+ * identity yet, so its first one gets a new nonce anyway. `replication_off`:
+ * replication does not run in this boot (flag off or a closed door), so
+ * there is no writer to rotate. `not_requested`: the host did not ask.
+ */
+export type ReplicaWriterRotation = "rotated" | "no_identity" | "replication_off" | "not_requested";
+/** Everything a writer id is derived from. Hex values are lowercase. */
+export declare const replicaWriterSeedSchema: z.ZodObject<{
+    owner: z.ZodString;
+    server: z.ZodString;
+    serverId: z.ZodString;
+    writerNonce: z.ZodString;
+}, z.core.$strict>;
+export type ReplicaWriterSeed = z.infer<typeof replicaWriterSeedSchema>;
+export interface ReplicaWriters {
+    transport: string;
+    operation: string;
+}
+/**
+ * writerId(role) = first 16 bytes of SHA-256 over the length-prefixed domain
+ * tag, owner, server, serverId, role and writer nonce. Each field is its byte
+ * length (4 bytes, big-endian) then its bytes. 32 lowercase hex characters.
+ */
+export declare function deriveReplicaWriterId(seed: ReplicaWriterSeed, role: ReplicaWriterRole): string;
+/** The transport and operation writers of one seed. They always come as a pair. */
+export declare function deriveReplicaWriters(seed: ReplicaWriterSeed): ReplicaWriters;
+/** A fresh 16-byte writer nonce. */
+export declare function randomReplicaWriterNonce(): string;
+/**
+ * The signed batch statement (EIP-712 `PdppReplicaBatch`). With the writer
+ * scope, which the seed derives, it covers every field a receiver reads from
+ * a manifest and the registration slot the manifest is valid at.
+ */
+export declare const replicaBatchStatementSchema: z.ZodObject<{
+    owner: z.ZodString;
+    server: z.ZodString;
+    serverId: z.ZodString;
+    environment: z.ZodEnum<{
+        dev: "dev";
+        prod: "prod";
+    }>;
+    writerNonce: z.ZodString;
+    version: z.ZodNumber;
+    batch: z.ZodString;
+    sequence: z.ZodNumber;
+    previous: z.ZodString;
+    previousBatch: z.ZodUnion<readonly [z.ZodString, z.ZodLiteral<"">]>;
+    collectedAt: z.ZodString;
+    digest: z.ZodString;
+    totalBytes: z.ZodNumber;
+    count: z.ZodNumber;
+    fragments: z.ZodString;
+}, z.core.$strict>;
+export type ReplicaBatchStatement = z.infer<typeof replicaBatchStatementSchema>;
+/** The statement, its signature and the EIP-712 domain chain it was signed for. */
+export declare const replicaBatchAuthoritySchema: z.ZodObject<{
+    chainId: z.ZodNumber;
+    statement: z.ZodObject<{
+        owner: z.ZodString;
+        server: z.ZodString;
+        serverId: z.ZodString;
+        environment: z.ZodEnum<{
+            dev: "dev";
+            prod: "prod";
+        }>;
+        writerNonce: z.ZodString;
+        version: z.ZodNumber;
+        batch: z.ZodString;
+        sequence: z.ZodNumber;
+        previous: z.ZodString;
+        previousBatch: z.ZodUnion<readonly [z.ZodString, z.ZodLiteral<"">]>;
+        collectedAt: z.ZodString;
+        digest: z.ZodString;
+        totalBytes: z.ZodNumber;
+        count: z.ZodNumber;
+        fragments: z.ZodString;
+    }, z.core.$strict>;
+    signature: z.ZodString;
+}, z.core.$strict>;
+export type ReplicaBatchAuthority = z.infer<typeof replicaBatchAuthoritySchema>;
+/** EIP-712 typed data for one statement: domain "Vana PDPP Replica", version "1". */
+export declare function replicaBatchTypedData(chainId: number, statement: ReplicaBatchStatement): {
+    domain: {
+        name: string;
+        version: string;
+        chainId: number;
+    };
+    types: {
+        readonly PdppReplicaBatch: readonly [{
+            readonly name: "owner";
+            readonly type: "address";
+        }, {
+            readonly name: "server";
+            readonly type: "address";
+        }, {
+            readonly name: "serverId";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "environment";
+            readonly type: "string";
+        }, {
+            readonly name: "writerNonce";
+            readonly type: "bytes16";
+        }, {
+            readonly name: "version";
+            readonly type: "uint64";
+        }, {
+            readonly name: "batch";
+            readonly type: "string";
+        }, {
+            readonly name: "sequence";
+            readonly type: "uint64";
+        }, {
+            readonly name: "previous";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "previousBatch";
+            readonly type: "string";
+        }, {
+            readonly name: "collectedAt";
+            readonly type: "string";
+        }, {
+            readonly name: "digest";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "totalBytes";
+            readonly type: "uint64";
+        }, {
+            readonly name: "count";
+            readonly type: "uint32";
+        }, {
+            readonly name: "fragments";
+            readonly type: "bytes32";
+        }];
+    };
+    primaryType: "PdppReplicaBatch";
+    message: {
+        owner: Hex;
+        server: Hex;
+        serverId: Hex;
+        writerNonce: Hex;
+        previous: Hex;
+        digest: Hex;
+        fragments: Hex;
+        version: bigint;
+        sequence: bigint;
+        totalBytes: bigint;
+        count: number;
+        environment: "dev" | "prod";
+        batch: string;
+        previousBatch: string;
+        collectedAt: string;
+    };
+};
+/** The registered PS server key: Node `key.json` or the Lite server identity. */
+export interface ReplicaBatchSigner {
+    address: string;
+    signTypedData(params: ReturnType<typeof replicaBatchTypedData>): Promise<`0x${string}`>;
+}
+/** What one receiver accepts: its own owner, chain and environment. */
+export interface ReplicaPartition {
+    owner: string;
+    chainId: number;
+    environment: ReplicaEnvironment;
+}
+/** What the carrier claims about a batch; the statement must sign exactly this. */
+export interface ReplicaBatchFacts {
+    /** The DPv2 version of the writer scope that registers the batch. */
+    version: number;
+    batch: string;
+    sequence: number;
+    previous: {
+        batch: string;
+        digest: string;
+    } | null;
+    collectedAt: string;
+    /** `sha256:<hex>` of the assembled batch. */
+    digest: string;
+    totalBytes: number;
+    /** Every fragment in index order: sha256 of its exact stored bytes and their length. */
+    fragments: readonly {
+        digest: string;
+        bytes: number;
+    }[];
+}
+/**
+ * SHA-256 over the ordered fragment list: for each entry its 32-byte digest,
+ * then its length as 8 bytes, big-endian.
+ */
+export declare function replicaFragmentListDigest(fragments: ReplicaBatchFacts["fragments"]): string;
+/** Sign one batch with the server key. The signer must be the seed's server. */
+export declare function signReplicaBatch(input: {
+    signer: ReplicaBatchSigner;
+    partition: ReplicaPartition;
+    seed: ReplicaWriterSeed;
+    facts: ReplicaBatchFacts;
+}): Promise<ReplicaBatchAuthority>;
+/** Typed refusals; each one quarantines only the item that failed. */
+export type ReplicaAuthorityRefusal = "signature_invalid" | "partition_mismatch" | "server_not_registered" | "roster_owner_mismatch" | "writer_mismatch";
+export type ReplicaAuthorityVerdict = {
+    tag: "authorized";
+    seed: ReplicaWriterSeed;
+    writers: ReplicaWriters;
+} | {
+    tag: "refused";
+    reason: ReplicaAuthorityRefusal;
+}
+/** The roster could not be read and no fresh answer is cached. */
+ | {
+    tag: "wait";
+    server: string;
+};
+/**
+ * Receiver checks 2-5 of host contract §3.4, in order. The carrier supplies
+ * its claimed facts and the transport writer of the scope it was registered
+ * in, so this does not depend on how the carrier names objects.
+ * `roster` throws when it cannot answer; that is a Wait, never acceptance.
+ */
+export declare function authorizeReplicaBatch(input: {
+    authority: unknown;
+    facts: ReplicaBatchFacts;
+    transportWriter: string;
+    receiver: ReplicaPartition;
+    roster: (server: `0x${string}`) => Promise<ReplicaRosterRecord | null>;
+}): Promise<ReplicaAuthorityVerdict>;
+/** Check 7: every operation of an authorized batch names its operation writer. */
+export declare function replicaOperationWriterRefusal(operations: readonly {
+    revision: {
+        writerId: string;
+    };
+}[], writers: ReplicaWriters): "writer_mismatch" | undefined;
+//# sourceMappingURL=writer-identity.d.ts.map

package/dist/replication/writer-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer-identity.d.ts","sourceRoot":"","sources":["../../src/replication/writer-identity.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAOL,KAAK,GAAG,EACT,MAAM,MAAM,CAAC;AACd,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,qBAAqB,gCAAgC,CAAC;AACnE,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,WAAW,CAAC;AAC1D,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,MAAM,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,+BAA+B,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAC/B,SAAS,GAAG,aAAa,GAAG,iBAAiB,GAAG,eAAe,CAAC;AASlE,wEAAwE;AACxE,eAAO,MAAM,uBAAuB;;;;;kBASlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE,iBAAiB,GACtB,MAAM,CAkBR;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,GAAG,cAAc,CAK5E;AAED,oCAAoC;AACpC,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD;AAED;;;;GAIG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;kBAqBtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,mFAAmF;AACnF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;kBAItC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAsBhF,qFAAqF;AACrF,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAQF,GAAG;gBACD,GAAG;kBACC,GAAG;qBACG,GAAG;kBACT,GAAG;gBACP,GAAG;mBACG,GAAG;;;;;;;;;;EAO1C;AAED,iFAAiF;AACjF,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CACX,MAAM,EAAE,UAAU,CAAC,OAAO,qBAAqB,CAAC,GAC/C,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;CAC3B;AAED,uEAAuE;AACvE,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,kBAAkB,CAAC;CACjC;AAED,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,wFAAwF;IACxF,SAAS,EAAE,SAAS;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACzD;AAKD;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,iBAAiB,CAAC,WAAW,CAAC,GACxC,MAAM,CAcR;AA8BD,gFAAgF;AAChF,wBAAsB,gBAAgB,CAAC,KAAK,EAAE;IAC5C,MAAM,EAAE,kBAAkB,CAAC;IAC3B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,iBAAiB,CAAC;CAC1B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAgBjC;AAED,sEAAsE;AACtE,MAAM,MAAM,uBAAuB,GAC/B,mBAAmB,GACnB,oBAAoB,GACpB,uBAAuB,GACvB,uBAAuB,GACvB,iBAAiB,CAAC;AAEtB,MAAM,MAAM,uBAAuB,GAC/B;IACE,GAAG,EAAE,YAAY,CAAC;IAClB,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,EAAE,cAAc,CAAC;CACzB,GACD;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE;AACrD,kEAAkE;GAChE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAoBpC;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,iBAAiB,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;CACxE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA8DnC;AAED,kFAAkF;AAClF,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,SAAS;IAAE,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EAAE,EACzD,OAAO,EAAE,cAAc,GACtB,iBAAiB,GAAG,SAAS,CAI/B"}