@opendatalabs/personal-server-ts-core 1.6.0 → 1.8.0

package/dist/sync/pending-blob-deletions.js

@@ -0,0 +1,116 @@
+function markerId(key) {
+    const range = key.range ? `${key.range.from}-${key.range.to}` : "";
+    return `${key.scope}\u0000${key.version ?? ""}\u0000${range}`;
+}
+function normalizeRange(value) {
+    if (typeof value !== "object" || value === null)
+        return undefined;
+    const { from, to } = value;
+    if (typeof from !== "string" ||
+        typeof to !== "string" ||
+        !/^\d+$/.test(from) ||
+        !/^\d+$/.test(to) ||
+        BigInt(from) > BigInt(to)) {
+        return undefined;
+    }
+    return { from, to };
+}
+/**
+ * Accept the stored value from either marker generation: exact keys
+ * (`{ scope, version }`) or the pre-key format that recorded whole scopes,
+ * which maps to a version-less marker the retry expands into exact keys.
+ */
+export function normalizePendingBlobDeletions(stored) {
+    if (!Array.isArray(stored))
+        return [];
+    const keys = [];
+    for (const item of stored) {
+        if (typeof item === "string") {
+            keys.push({ scope: item, version: null });
+        }
+        else if (typeof item === "object" &&
+            item !== null &&
+            typeof item.scope === "string") {
+            const version = item.version;
+            const range = typeof version === "string"
+                ? undefined
+                : normalizeRange(item.range);
+            keys.push({
+                scope: item.scope,
+                version: typeof version === "string" ? version : null,
+                ...(range ? { range } : {}),
+            });
+        }
+    }
+    return keys;
+}
+/**
+ * Every operation is a read-modify-write of the whole marker set, so the
+ * store serialises them: a delete recording keys while a sync cycle's retry
+ * clears others must not lose either update. Ordering is FIFO, and a failed
+ * operation never blocks the ones queued behind it.
+ */
+export function createPendingBlobDeletionStore(kv) {
+    let queue = Promise.resolve();
+    function serialized(operation) {
+        const run = queue.then(operation, operation);
+        queue = run.catch(() => undefined);
+        return run;
+    }
+    async function current() {
+        return normalizePendingBlobDeletions(await kv.read());
+    }
+    return {
+        list() {
+            return serialized(current);
+        },
+        add(keys) {
+            return serialized(async () => {
+                if (keys.length === 0)
+                    return;
+                const existing = await current();
+                const known = new Set(existing.map(markerId));
+                const next = [...existing];
+                for (const key of keys) {
+                    const id = markerId(key);
+                    if (known.has(id))
+                        continue;
+                    known.add(id);
+                    next.push({
+                        scope: key.scope,
+                        version: key.version,
+                        ...(key.range ? { range: { ...key.range } } : {}),
+                    });
+                }
+                if (next.length === existing.length)
+                    return;
+                await kv.write(next);
+            });
+        },
+        remove(keys) {
+            return serialized(async () => {
+                if (keys.length === 0)
+                    return;
+                const existing = await current();
+                const gone = new Set(keys.map(markerId));
+                const next = existing.filter((key) => !gone.has(markerId(key)));
+                if (next.length === existing.length)
+                    return;
+                await kv.write(next);
+            });
+        },
+    };
+}
+/** Non-durable store: markers survive only for the process lifetime. */
+export function createMemoryPendingBlobDeletionStore() {
+    let keys = [];
+    return createPendingBlobDeletionStore({
+        async read() {
+            return keys;
+        },
+        async write(next) {
+            keys = next.map((key) => ({ ...key }));
+        },
+    });
+}
+//# sourceMappingURL=pending-blob-deletions.js.map

package/dist/sync/pending-blob-deletions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-blob-deletions.js","sourceRoot":"","sources":["../../src/sync/pending-blob-deletions.ts"],"names":[],"mappings":"AAkBA,SAAS,QAAQ,CAAC,GAAwB;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,OAAO,GAAG,GAAG,CAAC,KAAK,SAAS,GAAG,CAAC,OAAO,IAAI,EAAE,SAAS,KAAK,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,cAAc,CACrB,KAAc;IAEd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,KAAyC,CAAC;IAC/D,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,OAAO,EAAE,KAAK,QAAQ;QACtB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,EACzB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAe;IAEf,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,IAAI,GAA0B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;aAAM,IACL,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,OAAQ,IAA4B,CAAC,KAAK,KAAK,QAAQ,EACvD,CAAC;YACD,MAAM,OAAO,GAAI,IAA8B,CAAC,OAAO,CAAC;YACxD,MAAM,KAAK,GACT,OAAO,OAAO,KAAK,QAAQ;gBACzB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,cAAc,CAAE,IAA4B,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC;gBACR,KAAK,EAAG,IAA0B,CAAC,KAAK;gBACxC,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;gBACrD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,EAAyB;IAEzB,IAAI,KAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEhD,SAAS,UAAU,CAAI,SAA2B;QAChD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7C,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,UAAU,OAAO;QACpB,OAAO,6BAA6B,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,OAAO;QACL,IAAI;YACF,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,GAAG,CAAC,IAAI;YACN,OAAO,UAAU,CAAC,KAAK,IAAI,EAAE;gBAC3B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBAC9B,MAAM,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC9C,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;gBAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACzB,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;wBAAE,SAAS;oBAC5B,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACd,IAAI,CAAC,IAAI,CAAC;wBACR,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;wBACpB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAClD,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;oBAAE,OAAO;gBAC5C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,IAAI;YACT,OAAO,UAAU,CAAC,KAAK,IAAI,EAAE;gBAC3B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBAC9B,MAAM,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAChE,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;oBAAE,OAAO;gBAC5C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oCAAoC;IAClD,IAAI,IAAI,GAA0B,EAAE,CAAC;IACrC,OAAO,8BAA8B,CAAC;QACpC,KAAK,CAAC,IAAI;YACR,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,IAAI;YACd,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QACzC,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/sync/scope-deletions.d.ts

@@ -0,0 +1,155 @@
+import type { DataPointFeedPort, DataPointFeedRecord } from "../ports/index.js";
+import type { IndexEntry } from "../storage/index/types.js";
+/**
+ * Where a deletion verdict came from. `assumed-live` is the only source that
+ * is never verified: the tracker had no fact and could not reach the gateway.
+ */
+export type ScopeDeletionSource = "feed" | "gateway" | "local-delete" | "assumed-live";
+export type ScopeDeletionVerdict = {
+    deleted: true;
+    deletedAt: string;
+    /**
+     * The tombstone's registry version, or null when the gateway did not
+     * say (a 410 without a body). Null covers every local entry.
+     */
+    version: string | null;
+    source: Exclude<ScopeDeletionSource, "assumed-live">;
+    /**
+     * False when the tombstone is older than `maxStalenessMs`, the
+     * re-check could not reach the gateway, and the last known state is
+     * being served (fail-safe: refuse rather than resurrect).
+     */
+    verified: boolean;
+} | {
+    deleted: false;
+    source: ScopeDeletionSource;
+    /** False when the verdict is a fallback because the gateway was unreachable. */
+    verified: boolean;
+};
+export interface ScopeDeletionResolveOptions {
+    /**
+     * `if-stale` (default): trust a fresh feed pass or a recent per-scope
+     * verdict, and only ask the gateway when neither exists.
+     * `always`: ask the gateway unless a recent per-scope verdict exists. Used
+     * for local misses, where "never had it" and "deleted long ago" look the
+     * same to the local index and a fresh feed pass cannot tell them apart.
+     */
+    consultGateway?: "if-stale" | "always";
+}
+/**
+ * Per-process memory of which scopes the gateway has tombstoned, kept current
+ * by every component that talks to the registry, so reads can refuse deleted
+ * data without a gateway round-trip per request.
+ *
+ * Facts flow in from:
+ *   - the download worker (every listed row, deleted or live, plus a
+ *     "feed pass complete" marker when the listing had no further pages),
+ *   - the upload worker (a successful registration means the scope is live),
+ *   - the delete worker (a landed tombstone means the scope is deleted),
+ *   - direct gateway lookups made by `resolve` itself.
+ *
+ * Every remembered verdict, live or deleted, ages out after `maxStalenessMs`
+ * and is then re-established from the feed or a gateway lookup. Consistency
+ * window, stated explicitly:
+ *   - a tombstone landed by THIS replica is visible to its reads immediately;
+ *   - a tombstone landed by ANOTHER replica is visible here once the download
+ *     feed lists it (one sync poll interval while sync is healthy), or after
+ *     at most `maxStalenessMs` plus one gateway lookup when the feed is not
+ *     fresh (sync off, blocked, or a multi-page backlog);
+ *   - a re-add on another replica after a tombstone becomes visible here on
+ *     the same schedule: the feed lists the live row, or the tombstone ages
+ *     out and the next read re-checks the gateway;
+ *   - while the gateway is unreachable the tracker serves its last known
+ *     state (`verified: false`) rather than failing every read; it re-checks
+ *     after `gatewayRetryMs`. A partitioned replica therefore keeps serving
+ *     its local copy (or keeps refusing a tombstoned scope) until
+ *     connectivity returns, and never longer than `maxStalenessMs` after it
+ *     does.
+ */
+export interface ScopeDeletionTracker {
+    /**
+     * Record a gateway tombstone for `scope`. `source` names who learned it
+     * (default "feed"; the delete worker passes "local-delete").
+     */
+    markDeleted(scope: string, tombstone: ScopeTombstone, source?: Exclude<ScopeDeletionSource, "assumed-live">): void;
+    /** Record that the registry holds a live (non-tombstoned) row for `scope`. */
+    markLive(scope: string): void;
+    /**
+     * Record that a deletion-aware feed listing completed with no further
+     * pages: every tombstone up to `at` has been fed through `markDeleted`.
+     * `full` means the listing started from no cursor and therefore covered
+     * the whole registry, so a scope re-added since its tombstone would have
+     * been listed live (and marked live); only then are the remembered
+     * tombstones re-validated as of `at`. An incremental pass (`since` the
+     * cursor) proves nothing about tombstones it did not list, so those keep
+     * ageing and are re-checked at the gateway after `maxStalenessMs`.
+     */
+    noteFeedSynced(at?: Date, options?: {
+        full?: boolean;
+    }): void;
+    /** Synchronous view: a known tombstone, or null when none is known. */
+    knownDeletion(scope: string): ScopeTombstone | null;
+    /** Milliseconds since the last complete feed pass, or null if none yet. */
+    feedAgeMs(): number | null;
+    /** Async verdict, consulting the gateway only as described above. */
+    resolve(scope: string, options?: ScopeDeletionResolveOptions): Promise<ScopeDeletionVerdict>;
+    readonly maxStalenessMs: number;
+}
+export interface ScopeTombstone {
+    deletedAt: string;
+    /** Registry version of the tombstone; null when unknown (covers everything). */
+    version: string | null;
+}
+export interface ScopeDeletionTrackerOptions {
+    /** Deletion-aware registry lookup for on-demand checks. Optional: without it the tracker only knows what it is told. */
+    feed?: DataPointFeedPort;
+    /** Data owner used for on-demand lookups. Optional for the same reason. */
+    serverOwner?: string;
+    /**
+     * How old a complete feed pass or a per-scope verdict (live or deleted)
+     * may be before `resolve` asks the gateway again. Default 120_000 (two
+     * default sync poll intervals, so one missed cycle does not turn every
+     * read into a lookup).
+     */
+    maxStalenessMs?: number;
+    /** Back-off after a failed gateway lookup before trying again. Default 15_000. */
+    gatewayRetryMs?: number;
+    /** Upper bound on remembered live verdicts (probing unknown scopes must not grow memory without bound). Default 10_000. */
+    maxLiveEntries?: number;
+    now?: () => Date;
+    logger?: {
+        warn?(payload: Record<string, unknown>, message: string): void;
+    };
+}
+export declare const DEFAULT_SCOPE_DELETION_MAX_STALENESS_MS = 120000;
+export declare const DEFAULT_SCOPE_DELETION_GATEWAY_RETRY_MS = 15000;
+export declare function createScopeDeletionTracker(options?: ScopeDeletionTrackerOptions): ScopeDeletionTracker;
+/**
+ * A tombstone is visible either as `deletedAt` (a feed that models deletion)
+ * or, from a gateway that lists tombstones as plain rows, as the tombstone
+ * commitments themselves; `addedAt` is then the deletion time.
+ */
+export declare function deletionTimestamp(record: (Pick<DataPointFeedRecord, "dataHash" | "metadataHash" | "addedAt"> & {
+    deletedAt?: string | null;
+}) | null): string | null;
+/**
+ * The tombstone's registry version as the gateway reported it, normalised to
+ * a positive decimal string, or null when it did not say (the 410 fallback
+ * synthesises "0").
+ */
+export declare function tombstoneVersion(record: Pick<DataPointFeedRecord, "expectedVersion"> | null): string | null;
+/**
+ * True when a local index entry is part of what a gateway tombstone deleted,
+ * decided causally rather than by comparing clocks across machines:
+ *   - a synced entry is covered when its registry version is at or below
+ *     the tombstone's (the tombstone superseded it);
+ *   - an unsynced entry is covered unless it was ingested with knowledge of
+ *     this tombstone or a later one (`afterTombstoneVersion` >= tombstone
+ *     version), which makes it a deliberate re-add;
+ *   - a tombstone of unknown version covers everything.
+ * Data ingested concurrently with a deletion elsewhere (before this replica
+ * learned of it) is therefore covered too: refusing to resurrect is the
+ * failure this guards against, and the window is one sync poll interval.
+ */
+export declare function isEntryCoveredByTombstone(entry: Pick<IndexEntry, "version" | "dataPointId" | "afterTombstoneVersion">, tombstone: Pick<ScopeTombstone, "version">): boolean;
+//# sourceMappingURL=scope-deletions.d.ts.map

package/dist/sync/scope-deletions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-deletions.d.ts","sourceRoot":"","sources":["../../src/sync/scope-deletions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAG5D;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAC7B,MAAM,GAAG,SAAS,GAAG,cAAc,GAAG,cAAc,CAAC;AAEvD,MAAM,MAAM,oBAAoB,GAC5B;IACE,OAAO,EAAE,IAAI,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;IACrD;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAC;CACnB,GACD;IACE,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,mBAAmB,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEN,MAAM,WAAW,2BAA2B;IAC1C;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;CACxC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,WAAW,CACT,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,cAAc,EACzB,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,EAAE,cAAc,CAAC,GACpD,IAAI,CAAC;IACR,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9D,uEAAuE;IACvE,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC;IACpD,2EAA2E;IAC3E,SAAS,IAAI,MAAM,GAAG,IAAI,CAAC;IAC3B,qEAAqE;IACrE,OAAO,CACL,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,2BAA2B,GACpC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,wHAAwH;IACxH,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2HAA2H;IAC3H,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE;QACP,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KAChE,CAAC;CACH;AAED,eAAO,MAAM,uCAAuC,SAAU,CAAC;AAC/D,eAAO,MAAM,uCAAuC,QAAS,CAAC;AAS9D,wBAAgB,0BAA0B,CACxC,OAAO,GAAE,2BAAgC,GACxC,oBAAoB,CA+LtB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EACF,CAAC,IAAI,CAAC,mBAAmB,EAAE,UAAU,GAAG,cAAc,GAAG,SAAS,CAAC,GAAG;IACpE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC,GACF,IAAI,GACP,MAAM,GAAG,IAAI,CAIf;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,GAAG,IAAI,GAC1D,MAAM,GAAG,IAAI,CAEf;AAOD;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,GAAG,aAAa,GAAG,uBAAuB,CAAC,EAC5E,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,GACzC,OAAO,CAcT"}

package/dist/sync/scope-deletions.js

@@ -0,0 +1,225 @@
+import { isTombstoneRecord } from "./tombstone.js";
+export const DEFAULT_SCOPE_DELETION_MAX_STALENESS_MS = 120_000;
+export const DEFAULT_SCOPE_DELETION_GATEWAY_RETRY_MS = 15_000;
+const DEFAULT_MAX_LIVE_ENTRIES = 10_000;
+export function createScopeDeletionTracker(options = {}) {
+    const maxStalenessMs = options.maxStalenessMs ?? DEFAULT_SCOPE_DELETION_MAX_STALENESS_MS;
+    const gatewayRetryMs = options.gatewayRetryMs ?? DEFAULT_SCOPE_DELETION_GATEWAY_RETRY_MS;
+    const maxLiveEntries = options.maxLiveEntries ?? DEFAULT_MAX_LIVE_ENTRIES;
+    const now = options.now ?? (() => new Date());
+    const nowMs = () => now().getTime();
+    // scope -> tombstone. Kept until the registry shows the scope live, but
+    // re-validated once older than maxStalenessMs (a re-add elsewhere must not
+    // leave this replica answering 410 forever).
+    const deleted = new Map();
+    // scope -> when a gateway lookup last confirmed the scope live (ms).
+    const live = new Map();
+    let lastFeedSyncMs = null;
+    let lastGatewayFailureMs = null;
+    // Coalesce concurrent lookups of the same scope into one request.
+    const inflight = new Map();
+    function rememberLive(scope, at) {
+        deleted.delete(scope);
+        live.delete(scope);
+        live.set(scope, at);
+        // Map preserves insertion order; the first key is the oldest verdict.
+        while (live.size > maxLiveEntries) {
+            const oldest = live.keys().next().value;
+            if (oldest === undefined)
+                break;
+            live.delete(oldest);
+        }
+    }
+    function rememberDeleted(scope, tombstone, source) {
+        deleted.set(scope, {
+            deletedAt: tombstone.deletedAt,
+            version: normalizeVersion(tombstone.version),
+            source,
+            verifiedAtMs: nowMs(),
+        });
+        live.delete(scope);
+    }
+    function isFresh(at) {
+        return at !== null && nowMs() - at <= maxStalenessMs;
+    }
+    function verdictFromRecord(scope, record) {
+        const deletedAt = deletionTimestamp(record);
+        if (deletedAt !== null) {
+            const version = tombstoneVersion(record);
+            rememberDeleted(scope, { deletedAt, version }, "gateway");
+            return {
+                deleted: true,
+                deletedAt,
+                version,
+                source: "gateway",
+                verified: true,
+            };
+        }
+        rememberLive(scope, nowMs());
+        return { deleted: false, source: "gateway", verified: true };
+    }
+    /**
+     * Ask the registry. Null when it cannot be asked right now (no feed or
+     * owner wired, inside the failure back-off, or the request failed): the
+     * caller falls back to its last known state.
+     */
+    async function lookup(scope) {
+        const feed = options.feed;
+        const owner = options.serverOwner;
+        if (!feed || !owner)
+            return null;
+        if (lastGatewayFailureMs !== null &&
+            nowMs() - lastGatewayFailureMs < gatewayRetryMs) {
+            return null;
+        }
+        const pending = inflight.get(scope);
+        if (pending)
+            return pending;
+        const request = (async () => {
+            try {
+                const record = await feed.getDataPoint({
+                    ownerAddress: owner,
+                    scope,
+                });
+                lastGatewayFailureMs = null;
+                return verdictFromRecord(scope, record);
+            }
+            catch (err) {
+                lastGatewayFailureMs = nowMs();
+                options.logger?.warn?.({
+                    scope,
+                    error: err instanceof Error ? err.message : String(err),
+                    retryAfterMs: gatewayRetryMs,
+                }, "Could not check gateway deletion state; serving last known state");
+                return null;
+            }
+            finally {
+                inflight.delete(scope);
+            }
+        })();
+        inflight.set(scope, request);
+        return request;
+    }
+    return {
+        maxStalenessMs,
+        markDeleted(scope, tombstone, source = "feed") {
+            rememberDeleted(scope, tombstone, source);
+        },
+        markLive(scope) {
+            rememberLive(scope, nowMs());
+        },
+        noteFeedSynced(at, options) {
+            lastFeedSyncMs = (at ?? now()).getTime();
+            if (!options?.full)
+                return;
+            // A full listing would have shown any re-add as a live row (and marked
+            // it live above), so every tombstone still here is confirmed. Tombstones
+            // an incremental pass happened to list were refreshed by markDeleted.
+            for (const tombstone of deleted.values()) {
+                tombstone.verifiedAtMs = Math.max(tombstone.verifiedAtMs, lastFeedSyncMs);
+            }
+        },
+        knownDeletion(scope) {
+            const known = deleted.get(scope);
+            return known === undefined
+                ? null
+                : { deletedAt: known.deletedAt, version: known.version };
+        },
+        feedAgeMs() {
+            return lastFeedSyncMs === null ? null : nowMs() - lastFeedSyncMs;
+        },
+        async resolve(scope, resolveOptions) {
+            const known = deleted.get(scope);
+            if (known !== undefined) {
+                if (isFresh(known.verifiedAtMs)) {
+                    return {
+                        deleted: true,
+                        deletedAt: known.deletedAt,
+                        version: known.version,
+                        source: known.source,
+                        verified: true,
+                    };
+                }
+                // Stale tombstone: the scope may have been re-added elsewhere. Ask;
+                // if the registry cannot be reached, keep refusing (never resurrect
+                // on a guess) and say the verdict is unverified.
+                const rechecked = await lookup(scope);
+                if (rechecked !== null)
+                    return rechecked;
+                return {
+                    deleted: true,
+                    deletedAt: known.deletedAt,
+                    version: known.version,
+                    source: known.source,
+                    verified: false,
+                };
+            }
+            if (isFresh(live.get(scope) ?? null)) {
+                return { deleted: false, source: "gateway", verified: true };
+            }
+            const consult = resolveOptions?.consultGateway ?? "if-stale";
+            if (consult === "if-stale" && isFresh(lastFeedSyncMs)) {
+                return { deleted: false, source: "feed", verified: true };
+            }
+            return ((await lookup(scope)) ?? {
+                deleted: false,
+                source: "assumed-live",
+                verified: false,
+            });
+        },
+    };
+}
+/**
+ * A tombstone is visible either as `deletedAt` (a feed that models deletion)
+ * or, from a gateway that lists tombstones as plain rows, as the tombstone
+ * commitments themselves; `addedAt` is then the deletion time.
+ */
+export function deletionTimestamp(record) {
+    if (!record)
+        return null;
+    if (record.deletedAt)
+        return record.deletedAt;
+    return isTombstoneRecord(record) ? record.addedAt : null;
+}
+/**
+ * The tombstone's registry version as the gateway reported it, normalised to
+ * a positive decimal string, or null when it did not say (the 410 fallback
+ * synthesises "0").
+ */
+export function tombstoneVersion(record) {
+    return normalizeVersion(record?.expectedVersion ?? null);
+}
+function normalizeVersion(value) {
+    if (typeof value !== "string" || !/^\d+$/.test(value))
+        return null;
+    return BigInt(value) > 0n ? BigInt(value).toString() : null;
+}
+/**
+ * True when a local index entry is part of what a gateway tombstone deleted,
+ * decided causally rather than by comparing clocks across machines:
+ *   - a synced entry is covered when its registry version is at or below
+ *     the tombstone's (the tombstone superseded it);
+ *   - an unsynced entry is covered unless it was ingested with knowledge of
+ *     this tombstone or a later one (`afterTombstoneVersion` >= tombstone
+ *     version), which makes it a deliberate re-add;
+ *   - a tombstone of unknown version covers everything.
+ * Data ingested concurrently with a deletion elsewhere (before this replica
+ * learned of it) is therefore covered too: refusing to resurrect is the
+ * failure this guards against, and the window is one sync poll interval.
+ */
+export function isEntryCoveredByTombstone(entry, tombstone) {
+    const version = normalizeVersion(tombstone.version);
+    if (version === null)
+        return true;
+    const tombstoned = BigInt(version);
+    if (entry.dataPointId !== null)
+        return BigInt(entry.version) <= tombstoned;
+    const marker = entry.afterTombstoneVersion;
+    if (marker === null ||
+        marker === undefined ||
+        !Number.isSafeInteger(marker)) {
+        return true;
+    }
+    return BigInt(marker) < tombstoned;
+}
+//# sourceMappingURL=scope-deletions.js.map

package/dist/sync/scope-deletions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-deletions.js","sourceRoot":"","sources":["../../src/sync/scope-deletions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAyInD,MAAM,CAAC,MAAM,uCAAuC,GAAG,OAAO,CAAC;AAC/D,MAAM,CAAC,MAAM,uCAAuC,GAAG,MAAM,CAAC;AAC9D,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAQxC,MAAM,UAAU,0BAA0B,CACxC,UAAuC,EAAE;IAEzC,MAAM,cAAc,GAClB,OAAO,CAAC,cAAc,IAAI,uCAAuC,CAAC;IACpE,MAAM,cAAc,GAClB,OAAO,CAAC,cAAc,IAAI,uCAAuC,CAAC;IACpE,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAEpC,wEAAwE;IACxE,2EAA2E;IAC3E,6CAA6C;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,qEAAqE;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,IAAI,oBAAoB,GAAkB,IAAI,CAAC;IAC/C,kEAAkE;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgD,CAAC;IAEzE,SAAS,YAAY,CAAC,KAAa,EAAE,EAAU;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpB,sEAAsE;QACtE,OAAO,IAAI,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YACxC,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,SAAS,eAAe,CACtB,KAAa,EACb,SAAyB,EACzB,MAAgC;QAEhC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE;YACjB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC;YAC5C,MAAM;YACN,YAAY,EAAE,KAAK,EAAE;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,SAAS,OAAO,CAAC,EAAiB;QAChC,OAAO,EAAE,KAAK,IAAI,IAAI,KAAK,EAAE,GAAG,EAAE,IAAI,cAAc,CAAC;IACvD,CAAC;IAED,SAAS,iBAAiB,CACxB,KAAa,EACb,MAAkC;QAElC,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACzC,eAAe,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;YAC1D,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS;gBACT,OAAO;gBACP,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,IAAI;aACf,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,MAAM,CAAC,KAAa;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;QAClC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACjC,IACE,oBAAoB,KAAK,IAAI;YAC7B,KAAK,EAAE,GAAG,oBAAoB,GAAG,cAAc,EAC/C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;oBACrC,YAAY,EAAE,KAAK;oBACnB,KAAK;iBACN,CAAC,CAAC;gBACH,oBAAoB,GAAG,IAAI,CAAC;gBAC5B,OAAO,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,oBAAoB,GAAG,KAAK,EAAE,CAAC;gBAC/B,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CACpB;oBACE,KAAK;oBACL,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;oBACvD,YAAY,EAAE,cAAc;iBAC7B,EACD,kEAAkE,CACnE,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO;QACL,cAAc;QAEd,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM;YAC3C,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,QAAQ,CAAC,KAAK;YACZ,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/B,CAAC;QAED,cAAc,CAAC,EAAE,EAAE,OAAO;YACxB,cAAc,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,IAAI;gBAAE,OAAO;YAC3B,uEAAuE;YACvE,yEAAyE;YACzE,sEAAsE;YACtE,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzC,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAC/B,SAAS,CAAC,YAAY,EACtB,cAAc,CACf,CAAC;YACJ,CAAC;QACH,CAAC;QAED,aAAa,CAAC,KAAK;YACjB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACjC,OAAO,KAAK,KAAK,SAAS;gBACxB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7D,CAAC;QAED,SAAS;YACP,OAAO,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,cAAc,CAAC;QACnE,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc;YACjC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;oBAChC,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,QAAQ,EAAE,IAAI;qBACf,CAAC;gBACJ,CAAC;gBACD,oEAAoE;gBACpE,oEAAoE;gBACpE,iDAAiD;gBACjD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAI,SAAS,KAAK,IAAI;oBAAE,OAAO,SAAS,CAAC;gBACzC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK;iBAChB,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;gBACrC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC/D,CAAC;YACD,MAAM,OAAO,GAAG,cAAc,EAAE,cAAc,IAAI,UAAU,CAAC;YAC7D,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;gBACtD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC5D,CAAC;YACD,OAAO,CACL,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI;gBACvB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,cAAc;gBACtB,QAAQ,EAAE,KAAK;aAChB,CACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAIQ;IAER,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC;IAC9C,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA2D;IAE3D,OAAO,gBAAgB,CAAC,MAAM,EAAE,eAAe,IAAI,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAgC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAA4E,EAC5E,SAA0C;IAE1C,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC;IAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,CAAC;IAC3C,IACE,MAAM,KAAK,IAAI;QACf,MAAM,KAAK,SAAS;QACpB,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;AACrC,CAAC"}

package/dist/sync/tombstone.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Durable-deletion tombstone commitments.
+ *
+ * A deletion is an owner-signed DPv2 AddData for version `current + 1` whose
+ * dataHash / metadataHash are these well-known constants. The gateway, the
+ * SDK and every personal server derive the SAME bytes from the same UTF-8
+ * labels, so a tombstone is recognisable on-chain and in every feed without
+ * any out-of-band flag. Do not change the labels: they are the cross-repo
+ * contract.
+ *
+ * TODO(vana-sdk > 3.14.0): the SDK now exports TOMBSTONE_DATA_HASH,
+ * TOMBSTONE_METADATA_HASH, isTombstoneHashes(), isDataPointTombstone() and
+ * deriveDataPointId() with these exact values. Switch to those exports and
+ * drop the local copies once the PS pins a release that ships them.
+ */
+export declare const TOMBSTONE_DATA_HASH_LABEL = "vana.data-point.tombstone.v1";
+export declare const TOMBSTONE_METADATA_HASH_LABEL = "vana.data-point.tombstone.metadata.v1";
+/** keccak256(utf8("vana.data-point.tombstone.v1")) */
+export declare const TOMBSTONE_DATA_HASH: `0x${string}`;
+/** keccak256(utf8("vana.data-point.tombstone.metadata.v1")) */
+export declare const TOMBSTONE_METADATA_HASH: `0x${string}`;
+/** True when a data-point record's commitments are the tombstone constants. */
+export declare function isTombstoneRecord(record: {
+    dataHash: string;
+    metadataHash: string;
+}): boolean;
+//# sourceMappingURL=tombstone.d.ts.map

package/dist/sync/tombstone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tombstone.d.ts","sourceRoot":"","sources":["../../src/sync/tombstone.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,yBAAyB,iCAAiC,CAAC;AACxE,eAAO,MAAM,6BAA6B,0CACD,CAAC;AAE1C,sDAAsD;AACtD,eAAO,MAAM,mBAAmB,EAAE,KAAK,MAAM,EAE5C,CAAC;AAEF,+DAA+D;AAC/D,eAAO,MAAM,uBAAuB,EAAE,KAAK,MAAM,EAEhD,CAAC;AAEF,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAKV"}

package/dist/sync/tombstone.js

@@ -0,0 +1,28 @@
+import { keccak256, stringToHex } from "viem";
+/**
+ * Durable-deletion tombstone commitments.
+ *
+ * A deletion is an owner-signed DPv2 AddData for version `current + 1` whose
+ * dataHash / metadataHash are these well-known constants. The gateway, the
+ * SDK and every personal server derive the SAME bytes from the same UTF-8
+ * labels, so a tombstone is recognisable on-chain and in every feed without
+ * any out-of-band flag. Do not change the labels: they are the cross-repo
+ * contract.
+ *
+ * TODO(vana-sdk > 3.14.0): the SDK now exports TOMBSTONE_DATA_HASH,
+ * TOMBSTONE_METADATA_HASH, isTombstoneHashes(), isDataPointTombstone() and
+ * deriveDataPointId() with these exact values. Switch to those exports and
+ * drop the local copies once the PS pins a release that ships them.
+ */
+export const TOMBSTONE_DATA_HASH_LABEL = "vana.data-point.tombstone.v1";
+export const TOMBSTONE_METADATA_HASH_LABEL = "vana.data-point.tombstone.metadata.v1";
+/** keccak256(utf8("vana.data-point.tombstone.v1")) */
+export const TOMBSTONE_DATA_HASH = keccak256(stringToHex(TOMBSTONE_DATA_HASH_LABEL));
+/** keccak256(utf8("vana.data-point.tombstone.metadata.v1")) */
+export const TOMBSTONE_METADATA_HASH = keccak256(stringToHex(TOMBSTONE_METADATA_HASH_LABEL));
+/** True when a data-point record's commitments are the tombstone constants. */
+export function isTombstoneRecord(record) {
+    return (record.dataHash.toLowerCase() === TOMBSTONE_DATA_HASH &&
+        record.metadataHash.toLowerCase() === TOMBSTONE_METADATA_HASH);
+}
+//# sourceMappingURL=tombstone.js.map

package/dist/sync/tombstone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tombstone.js","sourceRoot":"","sources":["../../src/sync/tombstone.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAE9C;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,8BAA8B,CAAC;AACxE,MAAM,CAAC,MAAM,6BAA6B,GACxC,uCAAuC,CAAC;AAE1C,sDAAsD;AACtD,MAAM,CAAC,MAAM,mBAAmB,GAAkB,SAAS,CACzD,WAAW,CAAC,yBAAyB,CAAC,CACvC,CAAC;AAEF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,uBAAuB,GAAkB,SAAS,CAC7D,WAAW,CAAC,6BAA6B,CAAC,CAC3C,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,MAGjC;IACC,OAAO,CACL,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,mBAAmB;QACrD,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,uBAAuB,CAC9D,CAAC;AACJ,CAAC"}