@openlfcp/shared-objects 0.3.0 → 0.4.0

package/dist/data-profile.d.ts

@@ -184,4 +184,24 @@ export declare class SharedObjectsDataProfile {
      */
     exclude(unitIds: readonly DataUnitId[]): SharedObjectsExcludeResult;
 }
+/**
+ * The codec of one unit of this profile, bound to its Resource and signer
+ * (§8, §11, SO-SEC1): a unit carries only changes of its signer's §8 actor,
+ * so no Principal can write into another Principal's Automerge history.
+ * Anything else is PROFILE_INVALID / CHANGE_ACTOR_MISMATCH. The same check
+ * whether a receiver merges the unit or a rotation judges it.
+ */
+export declare function sharedObjectsCodecFor(unit: {
+    readonly resourceId: ResourceId;
+    readonly actor: PrincipalId;
+}): SharedObjectsCodec;
+/**
+ * This profile's per-unit check without a replica (structurally the client's
+ * UnitProfile): for the identity flows' rotation frontier
+ * (FlowOptions.profiles), which judges units as recipients do.
+ */
+export declare const sharedObjectsUnitProfile: Readonly<{
+    dataProfile: "org.openlfcp.shared-objects.v1";
+    codecFor: typeof sharedObjectsCodecFor;
+}>;
 //# sourceMappingURL=data-profile.d.ts.map

package/dist/data-profile.js

@@ -155,16 +155,7 @@ export class SharedObjectsDataProfile {
         return [...this.#pending.values()].map((b) => b.unitId);
     }
     codecFor(unit) {
-        const actor = toHex(deriveActorId(unit.resourceId, unit.actor));
-        // §8, §11 (SO-SEC1): a unit carries only changes of its signer's §8
-        // actor, so no Principal can write into another Principal's Automerge
-        // history. Anything else is PROFILE_INVALID / CHANGE_ACTOR_MISMATCH.
-        const bound = (change) => checkChangeActor(change, actor);
-        return {
-            dataProfile: PROFILE_ID,
-            encode: (change) => frameChange(bound(change).bytes),
-            decode: (plaintext) => bound(unframeChange(plaintext)),
-        };
+        return sharedObjectsCodecFor(unit);
     }
     apply(unit, change) {
         const key = toHex(unit.unitId);
@@ -362,4 +353,29 @@ function rebuildChanges(before, after) {
     }
     return out;
 }
+/**
+ * The codec of one unit of this profile, bound to its Resource and signer
+ * (§8, §11, SO-SEC1): a unit carries only changes of its signer's §8 actor,
+ * so no Principal can write into another Principal's Automerge history.
+ * Anything else is PROFILE_INVALID / CHANGE_ACTOR_MISMATCH. The same check
+ * whether a receiver merges the unit or a rotation judges it.
+ */
+export function sharedObjectsCodecFor(unit) {
+    const actor = toHex(deriveActorId(unit.resourceId, unit.actor));
+    const bound = (change) => checkChangeActor(change, actor);
+    return {
+        dataProfile: PROFILE_ID,
+        encode: (change) => frameChange(bound(change).bytes),
+        decode: (plaintext) => bound(unframeChange(plaintext)),
+    };
+}
+/**
+ * This profile's per-unit check without a replica (structurally the client's
+ * UnitProfile): for the identity flows' rotation frontier
+ * (FlowOptions.profiles), which judges units as recipients do.
+ */
+export const sharedObjectsUnitProfile = Object.freeze({
+    dataProfile: PROFILE_ID,
+    codecFor: sharedObjectsCodecFor,
+});
 //# sourceMappingURL=data-profile.js.map

package/dist/identity/index.d.ts

@@ -1,6 +1,6 @@
 /** IDENTITY-PROFILE-01 §§2–4. No authority is inferred from document metadata. */
 export { checkIdentityUnit, IDENTITY_ADMISSION_ORDER, IdentityAdmission, type IdentityAdmissionDiagnostic, IdentityAdmissionError, } from "./admission.js";
-export { type IdentityIntent, type IdentityOptions, type IdentityReceiveResult, type IdentityRefusal, IdentityReplica, type IdentityUnit, identityCodec, identitySnapshotCodec, } from "./replica.js";
+export { type IdentityIntent, type IdentityOptions, type IdentityReceiveResult, type IdentityRefusal, IdentityReplica, type IdentityUnit, identityCodec, identityCodecFor, identitySnapshotCodec, identityUnitProfile, } from "./replica.js";
 export { IDENTITY_DIAGNOSTIC_ORDER, type IdentityDiagnostic, type IdentityProblem, type IdentityValidation, validateIdentity, } from "./schema.js";
 export { type DeviceEntry, deriveIdentityActorId, IDENTITY_PROFILE_ID, type IdentityDocument, type IdentityEpoch, type IdentityWriter, type IdentityWriterClass, isResourceRef, type PairingRequest, type ResourceRef, type RosterEntry, } from "./values.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/identity/index.js

@@ -1,6 +1,6 @@
 /** IDENTITY-PROFILE-01 §§2–4. No authority is inferred from document metadata. */
 export { checkIdentityUnit, IDENTITY_ADMISSION_ORDER, IdentityAdmission, IdentityAdmissionError, } from "./admission.js";
-export { IdentityReplica, identityCodec, identitySnapshotCodec, } from "./replica.js";
+export { IdentityReplica, identityCodec, identityCodecFor, identitySnapshotCodec, identityUnitProfile, } from "./replica.js";
 export { IDENTITY_DIAGNOSTIC_ORDER, validateIdentity, } from "./schema.js";
 export { deriveIdentityActorId, IDENTITY_PROFILE_ID, isResourceRef, } from "./values.js";
 //# sourceMappingURL=index.js.map

package/dist/identity/replica.d.ts

@@ -104,6 +104,30 @@ export declare const identityCodec: Readonly<{
     encode: (change: CheckedChange) => Uint8Array;
     decode: typeof unframeChange;
 }>;
+/**
+ * The codec of one unit of the Identity Profile, bound to its Resource and
+ * signer (§3: a change in another actor's sequence is CHANGE_ACTOR_MISMATCH).
+ * The writer-class rules (AI0–AI4) need the Control state at the unit's
+ * control_ref and stay with the document's admission (IdentityReplica.receive).
+ */
+export declare function identityCodecFor(unit: {
+    readonly resourceId: ResourceId;
+    readonly actor: PrincipalId;
+}): Readonly<{
+    dataProfile: "org.openlfcp.identity.v1";
+    encode: (change: CheckedChange) => Uint8Array;
+    decode: (plaintext: Uint8Array) => CheckedChange;
+}>;
+/**
+ * The Identity Profile's per-unit check without a replica (structurally the
+ * client's UnitProfile): for the identity flows' rotation frontier
+ * (FlowOptions.profiles), so a rotation of the Identity Resource judges its
+ * units as recipients do.
+ */
+export declare const identityUnitProfile: Readonly<{
+    dataProfile: "org.openlfcp.identity.v1";
+    codecFor: typeof identityCodecFor;
+}>;
 export declare const identitySnapshotCodec: Readonly<{
     dataProfile: "org.openlfcp.identity.v1";
     encode: typeof frameSnapshot;

package/dist/identity/replica.js

@@ -1,5 +1,6 @@
 import * as A from "@automerge/automerge";
 import { bytesEqual, dataEpoch, LfcpError, toHex, } from "@openlfcp/core";
+import { checkChangeActor } from "../admission/actor.js";
 import { checkChange, checkSaveHeader, frameChange, frameSnapshot, parsedOf, refusedChangeHash, unframeChange, unframeSnapshot, } from "../admission/framing.js";
 import { checkSnapshotExpansion, SNAPSHOT_LIMITS_FLOOR, } from "../admission/limits.js";
 import { ReferenceHistory } from "../admission/references.js";
@@ -376,6 +377,31 @@ export const identityCodec = Object.freeze({
     encode: (change) => frameChange(change.bytes),
     decode: unframeChange,
 });
+/**
+ * The codec of one unit of the Identity Profile, bound to its Resource and
+ * signer (§3: a change in another actor's sequence is CHANGE_ACTOR_MISMATCH).
+ * The writer-class rules (AI0–AI4) need the Control state at the unit's
+ * control_ref and stay with the document's admission (IdentityReplica.receive).
+ */
+export function identityCodecFor(unit) {
+    const actor = toHex(deriveIdentityActorId(unit.resourceId, unit.actor));
+    const bound = (change) => checkChangeActor(change, actor);
+    return Object.freeze({
+        dataProfile: IDENTITY_PROFILE_ID,
+        encode: (change) => frameChange(bound(change).bytes),
+        decode: (plaintext) => bound(unframeChange(plaintext)),
+    });
+}
+/**
+ * The Identity Profile's per-unit check without a replica (structurally the
+ * client's UnitProfile): for the identity flows' rotation frontier
+ * (FlowOptions.profiles), so a rotation of the Identity Resource judges its
+ * units as recipients do.
+ */
+export const identityUnitProfile = Object.freeze({
+    dataProfile: IDENTITY_PROFILE_ID,
+    codecFor: identityCodecFor,
+});
 export const identitySnapshotCodec = Object.freeze({
     dataProfile: IDENTITY_PROFILE_ID,
     encode: frameSnapshot,

package/dist/index.d.ts

@@ -6,7 +6,7 @@
 export declare const PACKAGE = "@openlfcp/shared-objects";
 export { type CheckedChange, checkChange, checkSaveHeader, frameChange, frameSnapshot, unframeChange, unframeSnapshot, } from "./admission/framing.js";
 export { CHANGE_LIMITS, type ChunkExpansion, checkChangeExpansion, checkSnapshotExpansion, MAX_DOCUMENT_DEPTH, SNAPSHOT_LIMITS_FLOOR, type SnapshotLimits, } from "./admission/limits.js";
-export { type SharedObjectsApplyResult, type SharedObjectsBatchResult, type SharedObjectsCheckpoint, type SharedObjectsCodec, SharedObjectsDataProfile, type SharedObjectsDiagnostic, type SharedObjectsExcludeResult, type SharedObjectsListenerFailure, type SharedObjectsSnapshotCodec, type SharedObjectsUnit, } from "./data-profile.js";
+export { type SharedObjectsApplyResult, type SharedObjectsBatchResult, type SharedObjectsCheckpoint, type SharedObjectsCodec, SharedObjectsDataProfile, type SharedObjectsDiagnostic, type SharedObjectsExcludeResult, type SharedObjectsListenerFailure, type SharedObjectsSnapshotCodec, type SharedObjectsUnit, sharedObjectsCodecFor, sharedObjectsUnitProfile, } from "./data-profile.js";
 export { applyBatchChecked, applyChecked, type BatchReceiveResult, type BuiltReplica, isWasmTrap, type LocalChange, type ObjectChange, ObjectIdCollisionError, type ObjectStatus, type ReceiveResult, type ReplicaIntent, type ReplicaOptions, type ReplicaValidation, type ResolveFieldConflict, resolveFieldConflict, SCALAR_FIELDS, type ScalarField, type ScalarView, SharedObjectsReplica, type TaskView, } from "./replica.js";
 export { addTag, assign, cancel, clearDue, clearScheduled, complete, createTask, deleteTask, type NewTask, type ParsedTask, ProfileError, parseTask, removeTag, reopen, restoreTask, setDue, setPriority, setScheduled, setStatus, setTitle, type Task, type TaskChange, type TaskIntent, type TaskPriority, type TaskStatus, taskToJson, unassign, } from "./task.js";
 export { DIAGNOSTIC_ORDER, firstPerField, isMap, type Json, objectProblems, type ProfileDiagnostic, ProfileInvalidError, type ProfileProblem, pointerToken, type RootValidation, validateRoot, validateTransition, } from "./validate.js";

package/dist/index.js

@@ -6,7 +6,7 @@
 export const PACKAGE = "@openlfcp/shared-objects";
 export { checkChange, checkSaveHeader, frameChange, frameSnapshot, unframeChange, unframeSnapshot, } from "./admission/framing.js";
 export { CHANGE_LIMITS, checkChangeExpansion, checkSnapshotExpansion, MAX_DOCUMENT_DEPTH, SNAPSHOT_LIMITS_FLOOR, } from "./admission/limits.js";
-export { SharedObjectsDataProfile, } from "./data-profile.js";
+export { SharedObjectsDataProfile, sharedObjectsCodecFor, sharedObjectsUnitProfile, } from "./data-profile.js";
 export { applyBatchChecked, applyChecked, isWasmTrap, ObjectIdCollisionError, resolveFieldConflict, SCALAR_FIELDS, SharedObjectsReplica, } from "./replica.js";
 export { addTag, assign, cancel, clearDue, clearScheduled, complete, createTask, deleteTask, ProfileError, parseTask, removeTag, reopen, restoreTask, setDue, setPriority, setScheduled, setStatus, setTitle, taskToJson, unassign, } from "./task.js";
 export { DIAGNOSTIC_ORDER, firstPerField, isMap, objectProblems, ProfileInvalidError, pointerToken, validateRoot, validateTransition, } from "./validate.js";

package/dist/sections/data-profile.d.ts

@@ -209,4 +209,21 @@ export declare class SharedSectionsDataProfile {
         readonly principal: PrincipalId;
     }): SharedSectionsDataProfile;
 }
+/**
+ * The codec of one unit of this profile, bound to its signer's section actor
+ * (§2): a change of another actor is PROFILE_INVALID / CHANGE_ACTOR_MISMATCH.
+ * The same check whether a receiver merges the unit or a rotation judges it.
+ */
+export declare function sectionsCodecFor(unit: {
+    readonly resourceId: ResourceId;
+    readonly actor: PrincipalId;
+}): SectionsCodec;
+/**
+ * This profile's per-unit check without a replica (structurally the client's
+ * UnitProfile): for the identity flows' rotation frontier (FlowOptions.profiles).
+ */
+export declare const sectionsUnitProfile: Readonly<{
+    dataProfile: "org.openlfcp.shared-sections.v1";
+    codecFor: typeof sectionsCodecFor;
+}>;
 //# sourceMappingURL=data-profile.d.ts.map

package/dist/sections/data-profile.js

@@ -105,13 +105,7 @@ export class SharedSectionsDataProfile {
     }
     /** The codec of one unit, bound to its signer's section actor (§2). */
     codecFor(unit) {
-        const actor = toHex(deriveSectionActorId(unit.resourceId, unit.actor));
-        const bound = (c) => checkChangeActor(c, actor);
-        return {
-            dataProfile: SECTIONS_PROFILE_ID,
-            encode: (change) => frameChange(bound(change).bytes),
-            decode: (plaintext) => bound(unframeChange(plaintext)),
-        };
+        return sectionsCodecFor(unit);
     }
     /**
      * SDK-SECTIONS-INTEGRATION-01 §3.1: the binding through which a sync
@@ -401,4 +395,26 @@ export class SharedSectionsDataProfile {
         return profile;
     }
 }
+/**
+ * The codec of one unit of this profile, bound to its signer's section actor
+ * (§2): a change of another actor is PROFILE_INVALID / CHANGE_ACTOR_MISMATCH.
+ * The same check whether a receiver merges the unit or a rotation judges it.
+ */
+export function sectionsCodecFor(unit) {
+    const actor = toHex(deriveSectionActorId(unit.resourceId, unit.actor));
+    const bound = (c) => checkChangeActor(c, actor);
+    return {
+        dataProfile: SECTIONS_PROFILE_ID,
+        encode: (change) => frameChange(bound(change).bytes),
+        decode: (plaintext) => bound(unframeChange(plaintext)),
+    };
+}
+/**
+ * This profile's per-unit check without a replica (structurally the client's
+ * UnitProfile): for the identity flows' rotation frontier (FlowOptions.profiles).
+ */
+export const sectionsUnitProfile = Object.freeze({
+    dataProfile: SECTIONS_PROFILE_ID,
+    codecFor: sectionsCodecFor,
+});
 //# sourceMappingURL=data-profile.js.map

package/dist/sections/index.d.ts

@@ -8,7 +8,7 @@
  * shared `@openlfcp/shared-objects/admission` with SECTIONS_ACTOR_DOMAIN.
  */
 export { ADMISSION_ORDER, type AdmissionDiagnostic, SectionAdmissionError, } from "./admission.js";
-export { type SectionsApplyResult, type SectionsBatchResult, type SectionsCheckpoint, type SectionsCodec, type SectionsCommitBinding, type SectionsExcludeResult, type SectionsListenerFailure, type SectionsNodesChanged, type SectionsSnapshotBinding, type SectionsSnapshotCodec, type SectionsStagedOperation, type SectionsUnit, SharedSectionsDataProfile, } from "./data-profile.js";
+export { type SectionsApplyResult, type SectionsBatchResult, type SectionsCheckpoint, type SectionsCodec, type SectionsCommitBinding, type SectionsExcludeResult, type SectionsListenerFailure, type SectionsNodesChanged, type SectionsSnapshotBinding, type SectionsSnapshotCodec, type SectionsStagedOperation, type SectionsUnit, SharedSectionsDataProfile, sectionsCodecFor, sectionsUnitProfile, } from "./data-profile.js";
 export { type ProfileModel, profileModel, SUPPORTED_DATA_PROFILES, taskRefModel, } from "./dispatch.js";
 export { SectionDocument, type ValueType } from "./document.js";
 export { AUTHORING_BUDGET, type SectionIntent, type SectionIntentCode, SectionIntentError, type SectionLocalChange, type SectionReceiveResult, type SectionRefusal, SectionReplica, type SectionReplicaOptions, type SectionSnapshot, type SectionSnapshotNode, type SectionUnit, type StagedSectionChange, type TextEdit, } from "./replica.js";

package/dist/sections/index.js

@@ -8,7 +8,7 @@
  * shared `@openlfcp/shared-objects/admission` with SECTIONS_ACTOR_DOMAIN.
  */
 export { ADMISSION_ORDER, SectionAdmissionError, } from "./admission.js";
-export { SharedSectionsDataProfile, } from "./data-profile.js";
+export { SharedSectionsDataProfile, sectionsCodecFor, sectionsUnitProfile, } from "./data-profile.js";
 export { profileModel, SUPPORTED_DATA_PROFILES, taskRefModel, } from "./dispatch.js";
 export { SectionDocument } from "./document.js";
 export { AUTHORING_BUDGET, SectionIntentError, SectionReplica, } from "./replica.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openlfcp/shared-objects",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "SHARED-OBJECTS-PROFILE-01 (org.openlfcp.shared-objects.v1) implementation.",
   "keywords": [
     "openlfcp",
@@ -57,8 +57,8 @@
   "dependencies": {
     "@automerge/automerge": "3.5.0",
     "fflate": "0.8.3",
-    "@openlfcp/core": "^0.3.0",
-    "@openlfcp/crypto": "^0.3.0"
+    "@openlfcp/crypto": "^0.4.0",
+    "@openlfcp/core": "^0.4.0"
   },
   "devDependencies": {
     "fast-check": "4.10.2"