@openlfcp/client 0.2.0-beta.7 → 0.2.0-beta.9

package/dist/data-unit.js

@@ -23,10 +23,12 @@ export async function createDataUnit(options) {
     const plaintext = options.profile.encode(options.value);
     const seq = await options.sequences.reserveNext(atHead.resourceId, actor);
     options.guard?.claim(atHead.resourceId, actor, seq);
-    if ((seq === 1n) !== (options.previousUnitId === null))
-        throw new LfcpError("INVALID_STRUCTURE", seq === 1n
-            ? "the actor's first unit (sequence 1) must have a null previous unit (§26.2)"
-            : `sequence ${seq} needs the actor's unit at sequence ${seq - 1n} as its previous unit (§26.2)`);
+    // §26.2: sequence 1 names no previous unit. A later one names the writer's
+    // latest own unit still accepted, or none: after a first unit that went
+    // stale (a Key Epoch cut it off) or was abandoned, the unit at 2 has a null
+    // previous, and a receiver that accepted nothing of the actor links it.
+    if (seq === 1n && options.previousUnitId !== null)
+        throw new LfcpError("INVALID_STRUCTURE", "the actor's first unit (sequence 1) must have a null previous unit (§26.2)");
     const sealed = sealDataUnit({
         resourceId: atHead.resourceId,
         dataEpoch: epoch,

package/dist/outbound.js

@@ -36,6 +36,8 @@ const PER_OBJECT = new Set([
 const CODE_NAMES = new Map(Object.entries(ERROR_CODE).map(([name, code]) => [code, name]));
 /** Room left in a message for the envelope and body around the objects. */
 const OVERHEAD = 1024;
+/** How many expired flights are remembered for a late answer. */
+const EXPIRED_KEPT = 1024;
 const AT_ONCE = { nextAttempt: () => null };
 /** Data Units by actor, then actor sequence; unparsable bytes last (they are blocked when sent). */
 function unitOrder(a, b) {
@@ -65,6 +67,16 @@ export class OutboundQueue {
     #maxMessageBytes = DEFAULT_MAX_MESSAGE_BYTES;
     /** message ID hex → what it carried */
     #flights = new Map();
+    /**
+     * Flights that expired unanswered (#expire), by message ID, the most
+     * recent {@link EXPIRED_KEPT}: a late answer to one is still an answer to
+     * our message, correlated for §4.1's acceptance evidence. Without them, an
+     * ACK handled after the timeout sweep (a busy event loop: the sweep's
+     * timer runs before the waiting message) dequeued the items as
+     * uncorrelated, their batch was "evidence-unavailable" for good, and no
+     * later ACK could change it (the Shared Tasks soak of 0.4.0-beta.17).
+     */
+    #expired = new Map();
     /** item ID hex → message ID hex */
     #inFlight = new Map();
     /**
@@ -99,6 +111,9 @@ export class OutboundQueue {
             if (flight.deadline > at)
                 continue;
             this.#flights.delete(key);
+            this.#expired.set(key, flight);
+            if (this.#expired.size > EXPIRED_KEPT)
+                this.#expired.delete(this.#expired.keys().next().value);
             for (const id of flight.itemIds)
                 if (this.#inFlight.get(toHex(id)) === key) {
                     this.#inFlight.delete(toHex(id));
@@ -261,8 +276,12 @@ export class OutboundQueue {
             return undefined;
         const key = toHex(messageId);
         const flight = this.#flights.get(key);
-        if (flight === undefined)
-            return undefined;
+        if (flight === undefined) {
+            // A late answer to a message whose flight expired: ours, correlated.
+            const late = this.#expired.get(key);
+            this.#expired.delete(key);
+            return late;
+        }
         this.#flights.delete(key);
         for (const id of flight.itemIds) {
             if (this.#inFlight.get(toHex(id)) === key)

package/dist/storage.js

@@ -283,9 +283,13 @@ export async function createQueuedDataUnit(storage, options, also = []) {
 }
 async function createQueuedDataUnitNow(storage, options, also, resource, actor) {
     const { onCreated, previousUnitId, ...create } = options;
-    const previous = previousUnitId !== undefined
-        ? previousUnitId
-        : await latestAcceptedOwnUnit(storage, resource, actor);
+    const latest = await latestAcceptedOwnUnit(storage, resource, actor);
+    // §26.2: a null previous only when the writer holds no own unit as
+    // accepted (before its first, or after a first that went stale); while it
+    // holds one, a receiver that accepted it would hold this unit for good.
+    if (previousUnitId === null && latest !== null)
+        throw new LfcpError("INVALID_STRUCTURE", "the writer still holds an accepted own unit: its next unit names it as previous (§26.2)");
+    const previous = previousUnitId !== undefined ? previousUnitId : latest;
     const created = await createDataUnit({
         ...create,
         previousUnitId: previous,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openlfcp/client",
-  "version": "0.2.0-beta.7",
+  "version": "0.2.0-beta.9",
   "description": "LFCP client: session, Control Plane and Data Plane synchronization.",
   "keywords": [
     "openlfcp",
@@ -42,9 +42,9 @@
     "tag": "beta"
   },
   "dependencies": {
-    "@openlfcp/core": "^0.2.0-beta.7",
-    "@openlfcp/crypto": "^0.2.0-beta.7",
-    "@openlfcp/storage": "^0.2.0-beta.7",
-    "@openlfcp/wire": "^0.2.0-beta.7"
+    "@openlfcp/core": "^0.2.0-beta.9",
+    "@openlfcp/storage": "^0.2.0-beta.9",
+    "@openlfcp/wire": "^0.2.0-beta.9",
+    "@openlfcp/crypto": "^0.2.0-beta.9"
   }
 }