@optimystic/db-core 0.24.2 → 0.25.0

package/dist/src/blocks/helpers.d.ts

@@ -1,4 +1,9 @@
 import type { BlockOperation, IBlock, BlockId, BlockStore, ReadPurpose } from "../index.js";
 export declare function get<T extends IBlock>(store: BlockStore<T>, id: BlockId, purpose?: ReadPurpose): Promise<T>;
 export declare function apply<T extends IBlock>(store: BlockStore<T>, block: IBlock, op: BlockOperation): void;
+/** Canonical sha256 of a block's content, base64url: `base64url(SHA256(canonicalJson(block)))`.
+ * The single hash used wherever two nodes must agree on what a block contains — quorum restoration
+ * content-agreement (db-p2p `selectQuorumBlock` candidates) and commit content digests. Keep ONE
+ * implementation: a drifted copy reports honest content as forged. */
+export declare function canonicalBlockHash(block: IBlock): Promise<string>;
 //# sourceMappingURL=helpers.d.ts.map

package/dist/src/blocks/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/blocks/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG5F,wBAAsB,GAAG,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAIhH;AAED,wBAAgB,KAAK,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,QAG9F"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/blocks/helpers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI5F,wBAAsB,GAAG,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAIhH;AAED,wBAAgB,KAAK,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,QAG9F;AAED;;;sEAGsE;AACtE,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIvE"}

package/dist/src/blocks/helpers.js

@@ -1,4 +1,7 @@
+import { sha256 } from "multiformats/hashes/sha2";
+import { toString as uint8ArrayToString } from "uint8arrays";
 import { applyOperation } from "../transform/helpers.js";
+import { canonicalJson } from "../utility/canonical-json.js";
 export async function get(store, id, purpose) {
     const block = await store.tryGet(id, purpose);
     if (!block)
@@ -9,4 +12,13 @@ export function apply(store, block, op) {
     applyOperation(block, op);
     store.update(block.header.id, op);
 }
+/** Canonical sha256 of a block's content, base64url: `base64url(SHA256(canonicalJson(block)))`.
+ * The single hash used wherever two nodes must agree on what a block contains — quorum restoration
+ * content-agreement (db-p2p `selectQuorumBlock` candidates) and commit content digests. Keep ONE
+ * implementation: a drifted copy reports honest content as forged. */
+export async function canonicalBlockHash(block) {
+    const bytes = new TextEncoder().encode(canonicalJson(block));
+    const digest = await sha256.digest(bytes);
+    return uint8ArrayToString(digest.digest, 'base64url');
+}
 //# sourceMappingURL=helpers.js.map

package/dist/src/blocks/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/blocks/helpers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,MAAM,CAAC,KAAK,UAAU,GAAG,CAAmB,KAAoB,EAAE,EAAW,EAAE,OAAqB;IACnG,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK;QAAE,MAAM,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,KAAK,CAAmB,KAAoB,EAAE,KAAa,EAAE,EAAkB;IAC9F,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC"}
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/blocks/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,MAAM,CAAC,KAAK,UAAU,GAAG,CAAmB,KAAoB,EAAE,EAAW,EAAE,OAAqB;IACnG,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK;QAAE,MAAM,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,KAAK,CAAmB,KAAoB,EAAE,KAAa,EAAE,EAAkB;IAC9F,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;sEAGsE;AACtE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAa;IACrD,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACvD,CAAC"}

package/dist/src/cluster/membership.d.ts

@@ -18,6 +18,13 @@ export declare const CURRENT_MEMBERSHIP_VERSION: 2;
  * it. `membershipDigest({})` (the empty set) is a fixed constant.
  */
 export declare function membershipDigest(peers: ClusterPeers): Promise<string>;
+/**
+ * Canonical membership digest for an explicit peer-id list — the same digest {@link membershipDigest}
+ * derives from a peer map's keys. ONE implementation, so a verifier reading a stored `peerIds` list
+ * (e.g. a persisted block commit proof) and a coordinator reading live `ClusterPeers` can never
+ * disagree. Sorts a copy; the caller's array is not mutated.
+ */
+export declare function membershipDigestFromIds(ids: readonly string[]): Promise<string>;
 /**
  * The membership digest that participates in a record's hashes, or `undefined` for a legacy (v1 /
  * unversioned) record. `undefined` selects the pre-binding hashing (empty-string concat is a no-op), so

package/dist/src/cluster/membership.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"membership.d.ts","sourceRoot":"","sources":["../../../src/cluster/membership.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAK3E;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AAWrD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAK3E;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,mBAAmB,GAAG,kBAAkB,CAAC,GAAG,MAAM,GAAG,SAAS,CAEhI;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAItG;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI3H;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI/J"}
+{"version":3,"file":"membership.d.ts","sourceRoot":"","sources":["../../../src/cluster/membership.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAM3E;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AAErD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAE3E;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAKrF;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,mBAAmB,GAAG,kBAAkB,CAAC,GAAG,MAAM,GAAG,SAAS,CAEhI;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAItG;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI3H;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI/J"}

package/dist/src/cluster/membership.js

@@ -1,6 +1,7 @@
 import { sha256 } from "multiformats/hashes/sha2";
 import { base58btc } from "multiformats/bases/base58";
 import { toString as uint8ArrayToString } from "uint8arrays/to-string";
+import { canonicalJson } from "../utility/canonical-json.js";
 /**
  * Membership-binding version a new coordinator emits. A record at this version folds a
  * {@link membershipDigest} of its peer set into `messageHash` / `promiseHash` / `commitHash`, so the
@@ -9,12 +10,6 @@ import { toString as uint8ArrayToString } from "uint8arrays/to-string";
  * this change.
  */
 export const CURRENT_MEMBERSHIP_VERSION = 2;
-/** Deterministic JSON: sorts object keys so the hash is independent of key insertion order. */
-function canonicalJson(value) {
-    return JSON.stringify(value, (_, v) => v && typeof v === 'object' && !Array.isArray(v)
-        ? Object.keys(v).sort().reduce((o, k) => { o[k] = v[k]; return o; }, {})
-        : v);
-}
 /**
  * Canonical membership digest for a peer set: `base64url(SHA256(canonicalJson(sorted peer-id list)))`.
  *
@@ -25,8 +20,17 @@ function canonicalJson(value) {
  * it. `membershipDigest({})` (the empty set) is a fixed constant.
  */
 export async function membershipDigest(peers) {
-    const ids = Object.keys(peers ?? {}).sort();
-    const bytes = new TextEncoder().encode(canonicalJson(ids));
+    return membershipDigestFromIds(Object.keys(peers ?? {}));
+}
+/**
+ * Canonical membership digest for an explicit peer-id list — the same digest {@link membershipDigest}
+ * derives from a peer map's keys. ONE implementation, so a verifier reading a stored `peerIds` list
+ * (e.g. a persisted block commit proof) and a coordinator reading live `ClusterPeers` can never
+ * disagree. Sorts a copy; the caller's array is not mutated.
+ */
+export async function membershipDigestFromIds(ids) {
+    const sorted = [...ids].sort();
+    const bytes = new TextEncoder().encode(canonicalJson(sorted));
     const hash = await sha256.digest(bytes);
     return uint8ArrayToString(hash.digest, 'base64url');
 }

package/dist/src/cluster/membership.js.map

@@ -1 +1 @@
-{"version":3,"file":"membership.js","sourceRoot":"","sources":["../../../src/cluster/membership.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAU,CAAC;AAErD,+FAA+F;AAC/F,SAAS,aAAa,CAAC,KAAc;IACpC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACrC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAA0B,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACjG,CAAC,CAAC,CAAC,CACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAmB;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAqE;IAC3G,OAAO,MAAM,CAAC,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAoB,EAAE,MAAe;IACpF,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,WAAmB,EAAE,OAAoB,EAAE,MAAe;IACzG,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,WAAmB,EAAE,OAAoB,EAAE,QAAmC,EAAE,MAAe;IAC7I,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"membership.js","sourceRoot":"","sources":["../../../src/cluster/membership.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAU,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAmB;IACzD,OAAO,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAsB;IACnE,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAqE;IAC3G,OAAO,MAAM,CAAC,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAoB,EAAE,MAAe;IACpF,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,WAAmB,EAAE,OAAoB,EAAE,MAAe;IACzG,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,WAAmB,EAAE,OAAoB,EAAE,QAAmC,EAAE,MAAe;IAC7I,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACrD,CAAC"}

package/dist/src/cluster/structs.d.ts

@@ -62,8 +62,15 @@ export type ClusterRecord = {
     membershipVersion?: 1 | 2;
     /** Membership digest of {@link ClusterRecord.peers}; present iff `membershipVersion === 2`. base64url. */
     membershipDigest?: string;
+    /**
+     * The transaction's operations and the block the coordinator selected the cohort by
+     * ({@link RepoMessage.coordinatingBlockIds}). There is deliberately NO top-level copy of the
+     * coordinating block ids on the record: `messageHash` covers `message` only, so a duplicate at
+     * this level would be outside every hash and any relaying peer could rewrite it — and the
+     * membership admission gate derives its own cohort view from exactly that id
+     * (`ClusterMember.deriveExpectedClusterView`). One source of truth, inside the hash.
+     */
     message: RepoMessage;
-    coordinatingBlockIds?: string[];
     promises: {
         [peerId: string]: Signature;
     };
@@ -183,5 +190,24 @@ export interface ClusterConsensusConfig {
      * single-node / local dev where you knowingly run below the safe floor.
      */
     allowUnvalidatedSmallCluster?: boolean;
+    /**
+     * What a member WITH a transaction validator does with a pend that carries no `validation`
+     * payload. See {@link UnvalidatablePendPolicy}; default 'accept'.
+     */
+    unvalidatablePendPolicy?: UnvalidatablePendPolicy;
 }
+/**
+ * What a receiver WITH a transaction checker does with a pend that carries no
+ * {@link PendRequest.validation} payload — the single-collection (`Collection.sync`) shape, which
+ * has no transaction to re-execute.
+ *
+ * - `'accept'` (default) preserves the historical behaviour: the pend is approved unchecked.
+ * - `'reject'` is the fail-closed posture for a deployment that has decided every write must be
+ *   re-checkable; it REFUSES `Collection.sync` writes, which is the point, not a bug.
+ *
+ * Irrelevant on a receiver with no checker, which never re-checks anything. Named once here and
+ * referenced by every tier that carries the knob (`ClusterConsensusConfig`, db-p2p's
+ * `ClusterPolicyOptions` and `StorageRepoOptions`) so the three cannot drift apart.
+ */
+export type UnvalidatablePendPolicy = 'accept' | 'reject';
 //# sourceMappingURL=structs.d.ts.map

package/dist/src/cluster/structs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"structs.d.ts","sourceRoot":"","sources":["../../../src/cluster/structs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE/D;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE;AAC9D;;;;;GAKG;GACD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAE3G;AAED,8GAA8G;AAC9G,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,UAAU,CAM7F;AAED,MAAM,MAAM,YAAY,GAAG;IAC1B,CAAC,EAAE,EAAE,MAAM,GAAG;QACb,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,wDAAwD;QACxD,SAAS,EAAE,MAAM,CAAC;KAClB,CAAC;CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,YAAY,CAAC;IACpB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1B,0GAA0G;IAC1G,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,WAAW,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,QAAQ,EAAE;QAAE,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IAC1C,OAAO,EAAE;QAAE,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IACzC,8FAA8F;IAC9F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6CAA6C;IAC7C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,wDAAwD;IACxD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,4DAA4D;IAC5D,eAAe,CAAC,EAAE;QACjB,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,aAAa,EAAE;YAAE,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAC;KAC5C,CAAC;CACF,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,OAAO,CAAC;AAErD,MAAM,WAAW,sBAAsB;IACtC,4GAA4G;IAC5G,sBAAsB,EAAE,MAAM,CAAC;IAC/B,kEAAkE;IAClE,uBAAuB,EAAE,MAAM,CAAC;IAChC,gDAAgD;IAChD,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qEAAqE;IACrE,oBAAoB,EAAE,OAAO,CAAC;IAC9B,0EAA0E;IAC1E,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,6EAA6E;IAC7E,wBAAwB,EAAE,MAAM,CAAC;IACjC,yDAAyD;IACzD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,sEAAsE;IACtE,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sFAAsF;IACtF,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,wEAAwE;IACxE,iCAAiC,CAAC,EAAE,MAAM,CAAC;IAC3C,sDAAsD;IACtD,iCAAiC,CAAC,EAAE,MAAM,CAAC;IAC3C,gEAAgE;IAChE,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,iFAAiF;IACjF,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,gLAAgL;IAChL,cAAc,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,UAAU,CAAC;IAC7C,4GAA4G;IAC5G,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gIAAgI;IAChI,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAC;CACvC"}
+{"version":3,"file":"structs.d.ts","sourceRoot":"","sources":["../../../src/cluster/structs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE/D;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE;AAC9D;;;;;GAKG;GACD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAE3G;AAED,8GAA8G;AAC9G,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,UAAU,CAM7F;AAED,MAAM,MAAM,YAAY,GAAG;IAC1B,CAAC,EAAE,EAAE,MAAM,GAAG;QACb,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,wDAAwD;QACxD,SAAS,EAAE,MAAM,CAAC;KAClB,CAAC;CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,YAAY,CAAC;IACpB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1B,0GAA0G;IAC1G,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;OAOG;IACH,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE;QAAE,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IAC1C,OAAO,EAAE;QAAE,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IACzC,8FAA8F;IAC9F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6CAA6C;IAC7C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,wDAAwD;IACxD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,4DAA4D;IAC5D,eAAe,CAAC,EAAE;QACjB,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,aAAa,EAAE;YAAE,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAC;KAC5C,CAAC;CACF,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,OAAO,CAAC;AAErD,MAAM,WAAW,sBAAsB;IACtC,4GAA4G;IAC5G,sBAAsB,EAAE,MAAM,CAAC;IAC/B,kEAAkE;IAClE,uBAAuB,EAAE,MAAM,CAAC;IAChC,gDAAgD;IAChD,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qEAAqE;IACrE,oBAAoB,EAAE,OAAO,CAAC;IAC9B,0EAA0E;IAC1E,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,6EAA6E;IAC7E,wBAAwB,EAAE,MAAM,CAAC;IACjC,yDAAyD;IACzD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,sEAAsE;IACtE,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sFAAsF;IACtF,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,wEAAwE;IACxE,iCAAiC,CAAC,EAAE,MAAM,CAAC;IAC3C,sDAAsD;IACtD,iCAAiC,CAAC,EAAE,MAAM,CAAC;IAC3C,gEAAgE;IAChE,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,iFAAiF;IACjF,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,gLAAgL;IAChL,cAAc,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,UAAU,CAAC;IAC7C,4GAA4G;IAC5G,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gIAAgI;IAChI,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;CAClD;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,uBAAuB,GAAG,QAAQ,GAAG,QAAQ,CAAC"}

package/dist/src/cluster/structs.js.map

@@ -1 +1 @@
-{"version":3,"file":"structs.js","sourceRoot":"","sources":["../../../src/cluster/structs.ts"],"names":[],"mappings":"AAqBA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,IAAuB,EAAE,KAAc;IAC9F,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,8BAA8B,CAAC,IAAY,EAAE,SAAoB;IAChF,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,QAAQ,CAAC,CAAC,OAAO,yBAAyB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QACxF,KAAK,UAAU,CAAC,CAAC,OAAO,yBAAyB,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QAC5F,OAAO,CAAC,CAAC,OAAO,yBAAyB,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;AACF,CAAC;AA2CD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC"}
+{"version":3,"file":"structs.js","sourceRoot":"","sources":["../../../src/cluster/structs.ts"],"names":[],"mappings":"AAqBA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,IAAuB,EAAE,KAAc;IAC9F,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,8BAA8B,CAAC,IAAY,EAAE,SAAoB;IAChF,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,QAAQ,CAAC,CAAC,OAAO,yBAAyB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QACxF,KAAK,UAAU,CAAC,CAAC,OAAO,yBAAyB,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QAC5F,OAAO,CAAC,CAAC,OAAO,yBAAyB,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;AACF,CAAC;AAkDD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC"}

package/dist/src/collection/action.d.ts

@@ -23,4 +23,18 @@ export type ActionContext = {
     /** Optional uncommitted pending action ID */
     actionId?: ActionId;
 };
+/** The id of the action that produced `rev` within `context`'s uncheckpointed committed list,
+ * or `undefined` when the list names no action at that revision.
+ *
+ * `undefined` is legitimate, not an error, and has three causes: the revision's log slot belongs
+ * to an entry that carries no action (a CHECKPOINT or an INVALIDATION entry takes a revision of
+ * its own); `rev` predates the most recent checkpoint, which is as far back as a context read off
+ * a log reaches (`Log.getActionContext`, `Log.getFrom`); or the context was never built from a
+ * log at all. A caller printing this must carry a placeholder rather than invent an id.
+ *
+ * NOTE: linear in `committed`, which grows one entry per commit between context reads; fine now —
+ * every caller is a `debug`-gated diagnostic, so this does not run on a normal path at all. If a
+ * non-diagnostic caller ever appears, index the lookup or search from the end (the entry at the
+ * context's own `rev` is normally the last one). */
+export declare function actionIdAt(context: ActionContext, rev: number): ActionId | undefined;
 //# sourceMappingURL=action.d.ts.map

package/dist/src/collection/action.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../src/collection/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC,MAAM,MAAM,MAAM,CAAC,CAAC,IAAI;IACvB,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,CAAC,CAAC;IACR,kEAAkE;IAClE,WAAW,CAAC,EAAE,cAAc,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAElH,MAAM,MAAM,SAAS,GAAG;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,gDAAgD;AAChD,MAAM,MAAM,aAAa,GAAG;IAC3B,kDAAkD;IAClD,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,uCAAuC;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACpB,CAAC"}
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../src/collection/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC,MAAM,MAAM,MAAM,CAAC,CAAC,IAAI;IACvB,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,CAAC,CAAC;IACR,kEAAkE;IAClE,WAAW,CAAC,EAAE,cAAc,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAElH,MAAM,MAAM,SAAS,GAAG;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,gDAAgD;AAChD,MAAM,MAAM,aAAa,GAAG;IAC3B,kDAAkD;IAClD,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,uCAAuC;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;;;oDAYoD;AACpD,wBAAgB,UAAU,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAEpF"}

package/dist/src/collection/action.js

@@ -1,2 +1,17 @@
-export {};
+/** The id of the action that produced `rev` within `context`'s uncheckpointed committed list,
+ * or `undefined` when the list names no action at that revision.
+ *
+ * `undefined` is legitimate, not an error, and has three causes: the revision's log slot belongs
+ * to an entry that carries no action (a CHECKPOINT or an INVALIDATION entry takes a revision of
+ * its own); `rev` predates the most recent checkpoint, which is as far back as a context read off
+ * a log reaches (`Log.getActionContext`, `Log.getFrom`); or the context was never built from a
+ * log at all. A caller printing this must carry a placeholder rather than invent an id.
+ *
+ * NOTE: linear in `committed`, which grows one entry per commit between context reads; fine now —
+ * every caller is a `debug`-gated diagnostic, so this does not run on a normal path at all. If a
+ * non-diagnostic caller ever appears, index the lookup or search from the end (the entry at the
+ * context's own `rev` is normally the last one). */
+export function actionIdAt(context, rev) {
+    return context.committed.find(entry => entry.rev === rev)?.actionId;
+}
 //# sourceMappingURL=action.js.map

package/dist/src/collection/action.js.map

@@ -1 +1 @@
-{"version":3,"file":"action.js","sourceRoot":"","sources":["../../../src/collection/action.ts"],"names":[],"mappings":""}
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../../../src/collection/action.ts"],"names":[],"mappings":"AAgCA;;;;;;;;;;;;oDAYoD;AACpD,MAAM,UAAU,UAAU,CAAC,OAAsB,EAAE,GAAW;IAC7D,OAAO,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC;AACrE,CAAC"}

package/dist/src/collection/collection.d.ts

@@ -62,13 +62,53 @@ export declare class Collection<TAction> implements ICollection<TAction> {
     /** Tracked Changes */
     readonly tracker: Tracker<IBlock>;
     private readonly filterConflict?;
+    /** Short random tag naming THIS instance (see {@link newInstanceTag}). Open paths generate
+     * it BEFORE construction (so pre-construction diagnostics such as attachToLog can carry it);
+     * the default covers direct construction in tests. */
+    readonly instanceTag: string;
     private pending;
     private readonly latchId;
+    /** The action id of a write currently in flight ON THIS INSTANCE'S BEHALF, or `undefined`
+     * outside a write. Read by {@link updateInternal}: if the committed log now carries an entry
+     * under this id, that action's work is already durable despite the failure answer that sent us
+     * back here — `NetworkTransactor.commit` commits the collection header and log tail BEFORE
+     * sweeping the remaining blocks, so a later sweep block confirming a conflict reports failure
+     * over an action whose log entry already landed. Such an entry is CONSUMED
+     * ({@link consumeOwnEntry}) rather than replayed, because replaying re-appends content the
+     * committed tail already carries, producing a duplicate entry under one action id at two
+     * revisions.
+     *
+     * The collection owns this fact rather than taking it as a `updateInternal` argument so that no
+     * refresh path can forget to supply it — {@link update} and {@link updateAndSync} are refreshes
+     * on behalf of a READER, the field is unset for them, and the consume branch cannot fire. Before
+     * this was a field, `TransactionCoordinator.commit`'s inter-attempt refresh went through
+     * `update()` and was therefore indistinguishable from a reader refresh even though the
+     * coordinator held the very id it was retrying.
+     *
+     * LIFETIME is the whole attempt CYCLE, not the latched span: it must survive the refresh
+     * BETWEEN a failed attempt and its retry, which is the only moment it is ever read. In
+     * {@link syncInternal} that cycle is contained inside the collection latch `sync()` holds; in
+     * `TransactionCoordinator.commit` the inter-attempt `update()` runs OUTSIDE the commit latch
+     * span by design (`Latches` is non-reentrant), so the coordinator's clear necessarily runs
+     * latch-free. That is safe: this is a single field write, {@link beginInFlightAction}'s
+     * disposer only clears an id it still owns, and the only reader runs under the latch — so the
+     * worst a foreign concurrent refresh can see is a cleared field (it stops consuming), never a
+     * field it should not have consumed. */
+    private inFlightActionId?;
     protected constructor(id: CollectionId, transactor: ITransactor, handlers: Record<ActionType, ActionHandler<TAction>>, source: TransactorSource<IBlock>, 
     /** Cache of unmodified blocks from the source */
     sourceCache: CacheSource<IBlock>, 
     /** Tracked Changes */
-    tracker: Tracker<IBlock>, filterConflict?: ((action: Action<TAction>, potential: Action<TAction>[]) => Action<TAction> | undefined) | undefined);
+    tracker: Tracker<IBlock>, filterConflict?: ((action: Action<TAction>, potential: Action<TAction>[]) => Action<TAction> | undefined) | undefined, 
+    /** Short random tag naming THIS instance (see {@link newInstanceTag}). Open paths generate
+     * it BEFORE construction (so pre-construction diagnostics such as attachToLog can carry it);
+     * the default covers direct construction in tests. */
+    instanceTag?: string);
+    /** A fresh instance tag: four random bytes rendered base64url — six characters, enough that
+     * two instances over one collection id do not collide by accident, short enough to ride on
+     * every trace line (same shape as the node tag in quereus-plugin-optimystic's
+     * collection-factory). Scopes {@link latchId} per instance and labels diagnostics. */
+    private static newInstanceTag;
     /** Open an EXISTING collection.
      *
      * Resolves to `undefined` when the header block probe comes back empty — an
@@ -105,13 +145,145 @@ export declare class Collection<TAction> implements ICollection<TAction> {
      * repeats the same doomed request because each retry re-runs the same losing read.
      *
      * Equal revisions still adopt `next`: the rev is unchanged but its `committed` list may be
-     * more complete than what we hold. */
+     * more complete than what we hold.
+     *
+     * This is also the one seam where lineage divergence is observable: at every revision BOTH
+     * sides name an action for, the two ids must agree. Revision
+     * numbers are per-collection counters, so two separately-built copies under one id can each
+     * occupy the same revision with DIFFERENT actions while each stays internally self-consistent
+     * — {@link reportShortfall} structurally cannot see that (its two numbers come from one
+     * chain), and this is the only place two `committed` lists meet. Naming different actions at
+     * one revision proves the two sides are different lineages (`collection:lineage-divergence`;
+     * see docs/debugging.md § "Did the refresh itself fail to close the gap?"). WHICH two sides
+     * depends on the caller, and the line says so in `site=` — see {@link DivergenceSite}, which
+     * defines the two values and what each one indicts.
+     *
+     * Every line from here also carries `tag=`, the {@link Collection.instanceTag} of the handle
+     * reporting. One process routinely holds several handles on one collection id; without the
+     * tag, two handles' lines interleave into what reads like one handle contradicting itself.
+     *
+     * Logs, does not throw — same reasoning as {@link reportShortfall}: `update()` runs
+     * blanket-style over every registered collection between commit retries, and aborting here
+     * would promote a diagnosis to production behaviour before the line has ever been seen to
+     * fire in the wild. Adoption then proceeds unchanged, which means the line is a PER-DISCOVERY
+     * report, not a per-refresh one: adopting `next` overwrites the held lineage marker with the
+     * log's, so the next refresh of this instance compares log-to-log and stays silent — even
+     * though block content materialized under the old lineage may still be in caches. The line
+     * marks the refresh that first observed the disagreement.
+     *
+     * NOTE: adoption resolves the CONTEXT disagreement, not the content one — the read caches on
+     * this instance still hold blocks materialized under the old lineage, and since the revision
+     * did not change nothing re-reads them. Conditional today: no fork has been reproduced (see
+     * the still-open upstream reproducer), so this instrument exists to find out whether one
+     * happens at all. If the line is ever seen firing in the field, decide then whether a
+     * divergence should also drop the read cache (and whether to keep re-reporting per refresh)
+     * — that is a behaviour change, and this seam deliberately makes none.
+     *
+     * The comparison is {@link earliestFork}, not a single lookup at the current revision: the
+     * two `committed` lists overlap across several revisions, and the LOWEST one they disagree at
+     * is where the lineages actually parted — a fork below the current revision was previously
+     * silent. `forkRev=` names it, `heldAction=`/`readAction=` are the two ids AT it, and
+     * `heldRev=`/`readRev=` are the two contexts' own revisions, so the line says both where the
+     * split began and how far each side has since travelled.
+     *
+     * The refusal line reports its two action ids at `readRev=` — the read's revision — on BOTH
+     * sides, because that is the only revision the two can be compared at: `next` never names an
+     * action above its own revision, so looking each side up at its own revision would compare
+     * different revisions and print two different ids for one honest lineage. Equal ids there mean
+     * the read is an older view of THIS lineage (ordinary lag, correctly refused); different ids
+     * mean a fork; `none` on the held side means this handle's own list does not reach back to the
+     * read's revision — the signature of a context bootstrapped from an over-claiming tail (see
+     * the NOTE in {@link bootstrapContext}), which is exactly the case {@link earliestFork} has no
+     * shared revision to report on.
+     *
+     * Gated on `log.enabled`, like every {@link actionIdAt} caller: the comparison buys nothing
+     * when the line has no sink, and the lists — one entry per commit between context reads,
+     * truncated at each checkpoint — are only walked on a run that has the namespace turned on.
+     * Silence proves nothing either way, because a revision is only comparable when BOTH sides
+     * name an action for it: an invented collection has no context at all, a revision slot the log
+     * gave to a checkpoint or invalidation entry names none, and a revision older than the read
+     * log's most recent checkpoint has already fallen off the read side's list. */
     private static advanceContext;
+    /** The EARLIEST revision the two contexts provably disagree about: the lowest revision both
+     * `committed` lists name an action for, where the two ids differ.
+     *
+     * Comparing only at the holder's current revision — what this used to do — misses a fork that
+     * began earlier and has since been overtaken by same-numbered commits on both sides, which is
+     * the shape a replica that forked and kept writing actually has. Taking the lowest disagreeing
+     * revision instead names the split point rather than an arbitrary later symptom of it.
+     *
+     * Revisions only one side names are skipped, not treated as disagreement: {@link actionIdAt}'s
+     * `undefined` is legitimate (checkpoint/invalidation slots, and revisions that predate the
+     * other side's most recent checkpoint), so a one-sided entry is missing evidence, not evidence
+     * of a fork.
+     *
+     * NOTE: linear in the two lists, which hold one entry per commit between context reads and
+     * truncate at each checkpoint. Every caller is `log.enabled`-gated, so this does not run at
+     * all on a normal run; if a non-diagnostic caller ever appears, index by revision instead. */
+    private static earliestFork;
+    /** Report a refresh that failed to move FORWARDS past a revision it had already read for
+     * itself — the sibling of {@link advanceContext}'s `collection:context-not-lowered`, which
+     * reports a collection declining to move BACKWARDS.
+     *
+     * `tailRev` is what the committed log tail claimed is committed under this id; `after` is
+     * where a SEPARATE read path (the chain walk) actually landed. Landing below the claim means
+     * this refresh closed nothing, which from outside the class is otherwise indistinguishable
+     * from "there was nothing newer to adopt".
+     *
+     * This detects LAG, and only lag. It CANNOT see lineage divergence: both of its numbers
+     * come from the same chain — `tailRev` off the tail block this collection's own header
+     * names, `after` from a walk of that same chain — and a forked replica is internally
+     * self-consistent, its tail claiming exactly what its own walk reaches. Two copies of one
+     * collection id holding the same revision under different actions therefore keep this line
+     * silent forever. That case is `collection:lineage-divergence`, reported from
+     * {@link advanceContext}, which compares action ids — the one value comparable across
+     * copies — rather than revision counters.
+     *
+     * Carries the same `tag=` as {@link advanceContext}'s lines, and for the same reason: several
+     * handles on one collection id otherwise read as one self-contradicting handle.
+     *
+     * Logs, does not throw: `update()` is called blanket-style over every registered collection
+     * between commit retries, and a shortfall is not yet known to be illegitimate — an abort here
+     * would promote an unproven diagnosis to production behaviour. Deliberately does NOT adopt
+     * `tailRev` either: the two numbers come from different read paths, and papering over the
+     * disagreement destroys the evidence this line exists to produce. */
+    private static reportShortfall;
     act(...actions: Action<TAction>[]): Promise<void>;
     private actInternal;
     private internalTransact;
     /** Load external changes and update our context to the latest log revision - resolve any conflicts with our pending actions. */
     update(): Promise<void>;
+    /** Drops the pending actions this sync's OWN committed entry already made durable, instead of
+     * replaying them into a duplicate entry (see {@link inFlightActionId}).
+     *
+     * `addActions` wrote exactly the snapshot pending list under this action id, and the entry's
+     * actions are therefore the LEADING `entry.actions.length` items of `this.pending` — anything
+     * staged since is behind them, because {@link actInternal} appends. Under
+     * {@link syncInternal} nothing can even be staged mid-cycle (`act()` shares the collection
+     * latch); under `TransactionCoordinator.commit` the mark spans a latch-free inter-attempt
+     * window, so an `act()` there CAN grow `pending` — still only at the tail, so the slice stays
+     * right.
+     *
+     * The guard below is the load-bearing part: `slice` fails SILENTLY if that correspondence ever
+     * breaks, dropping actions that were never committed, so an entry longer than `pending` throws
+     * instead of losing work. (See the sibling note on `syncInternal`'s post-commit replay, which
+     * rests on the same invariant.) */
+    private consumeOwnEntry;
+    /** Maps each pending action to its effective form against a remote entry: the original, a
+     * replacement, or dropped. A replacement or a discard changes the pending set; the tracker still
+     * holds the pre-filter transforms, so report it as mutated to force a replay that re-stages
+     * against the effective actions. Identity comparison per the contract: keep => same instance,
+     * replace => new instance.
+     * NOTE: a filterConflict hook that always allocates a fresh (but equal) instance instead of
+     * returning the same one forces a replay on every update — if that ever shows up as a hot path,
+     * compare by value/id here instead of by reference. */
+    private filterAgainstEntry;
+    /** Refresh this instance against the stored log: adopt the latest committed revision, resolve
+     * pending actions against everything that landed since, and replay them if anything conflicts.
+     *
+     * Takes no in-flight action id — it reads {@link inFlightActionId} off `this`, which is set for
+     * exactly the write attempt cycles that own one (see that field). Callers cannot get this wrong
+     * by omission. */
     private updateInternal;
     /** Capture the current staged state — tracker transforms plus the pending
      * action queue — so it can be restored later via {@link restorePending}.
@@ -195,6 +367,48 @@ export declare class Collection<TAction> implements ICollection<TAction> {
      * through {@link updateAndSync}, so an unnecessary flush still pays a full,
      * cache-bypassing {@link update} before discovering it has nothing to do. */
     hasUnsyncedChanges(): boolean;
+    /** The committed revision this collection currently READS at, or `undefined` for an
+     * INVENTED collection that has never adopted a committed revision
+     * ({@link createOrOpen} found no header and staged a fresh empty one).
+     *
+     * Not the revision a pending write will land at: {@link getNextRev} is this plus one
+     * (`undefined` counting as 0), so a diagnostic that prints this value BEFORE a commit
+     * is naming the revision the commit will supersede, not the one it produces.
+     *
+     * DIAGNOSTIC ONLY — do not branch on this. Every block this collection reads is
+     * materialized at this revision ({@link TransactorSource.tryGet} passes it as the
+     * read context), and the revision advances ONLY through an explicit call on THIS
+     * instance — {@link update} or {@link sync} on the single-node path, or
+     * {@link recordCommitted} when a {@link TransactionCoordinator} commits this
+     * collection (the session/consensus path, where no `update()` is involved at all).
+     * Nothing moves it passively — not time, not another collection's
+     * commit, not a peer's notification. So a collection sitting here at a lagging
+     * revision silently serves an old root with no error, and two collections in one
+     * process can be at different revisions at the same instant. That gap is invisible
+     * from outside the class without this accessor, which is the whole reason it
+     * exists: `docs/debugging.md` (§ "Which revision did a read descend?") explains
+     * how an operator reads the difference. */
+    committedRevision(): number | undefined;
+    /** The id of the action that PRODUCED the revision {@link committedRevision} reports —
+     * this collection's lineage marker at that revision — or `undefined` when the action
+     * context holds no entry at the current revision.
+     *
+     * `undefined` is legitimate, not an error: an INVENTED collection has no context at
+     * all, and otherwise {@link actionIdAt} resolves nothing at the current revision for
+     * the reasons listed there. A caller printing this must therefore carry a placeholder
+     * rather than invent an id. The contexts this class writes itself
+     * ({@link recordCommitted}, the inline bump in `syncInternal`,
+     * {@link bootstrapContext}) always do hold one.
+     *
+     * DIAGNOSTIC ONLY — do not branch on this. Its value is the one thing about a revision
+     * that IS comparable across collections and across nodes: a revision number is
+     * per-collection and says nothing on its own, so two nodes reporting the same
+     * collection id at the same revision are indistinguishable between "one collection,
+     * one node lagging" and "two separately-built collections each counting from 1". Equal
+     * action ids mean one lineage; different action ids at the same revision mean two.
+     * `docs/debugging.md` (§ "Which revision did a read descend?") spells out how an
+     * operator reads the pair. */
+    committedActionId(): ActionId | undefined;
     /** Fold a just-committed set of transforms into this collection's read cache
      * so subsequent reads (and stages) through THIS instance observe the committed
      * state, mirroring what {@link sync} does inline after a successful transact.
@@ -213,11 +427,66 @@ export declare class Collection<TAction> implements ICollection<TAction> {
     getNextRev(): number;
     /** Record a just-committed action: append its ActionRev to the committed list
      *  and advance the revision. Returns the new revision. Mirrors the inline bump
-     *  in {@link syncInternal}. */
-    recordCommitted(actionId: ActionId): number;
+     *  in {@link syncInternal} — which needs no such rev check because it computes and
+     *  uses its `newRev` inside one latched span.
+     *
+     *  @param rev - the revision this action was PENDED at, captured once (at the log
+     *  append in `TransactionCoordinator.applyActionsToCollection`) and threaded through
+     *  the pend/commit round trips. Storage assigned the action THAT number; recording it
+     *  at any other would fork this instance's revision counter from storage permanently
+     *  (context adoption is one-way — see {@link advanceContext}). With the coordinator
+     *  holding this instance's latch across the whole commit span the mismatch cannot
+     *  happen; the throw is the tripwire for any path that still bypasses the latch. */
+    recordCommitted(actionId: ActionId, rev: number): number;
+    /** Acquire this instance's latch — the same mutex {@link act}, {@link update},
+     * {@link sync}, and {@link updateAndSync} serialize behind — returning its release.
+     * Exists so a TransactionCoordinator can hold the latch across its WHOLE commit span
+     * (log append → pend → commit → local fold), keeping any refresh of this instance from
+     * interleaving with a mid-flight commit. `Latches` is non-reentrant: while holding this,
+     * the holder must not call any of those latched methods on this instance. The caller
+     * MUST call the release exactly once, in a `finally`. */
+    acquireLatch(): Promise<() => void>;
+    /** Bracket a write attempt cycle on this instance under `actionId`, so a refresh taken between
+     * a failed attempt and its retry recognises that action's own already-durable log entry (see
+     * {@link inFlightActionId} for why, and for the lifetime this must span).
+     *
+     * The returned disposer clears the mark and MUST be called in a `finally` covering every exit
+     * from the retry cycle — return, retry exhaustion, partial commit, hard error, abort. A mark
+     * left behind would let a LATER, unrelated refresh consume a foreign entry that happens to
+     * carry the same id. The clear is id-guarded, so a disposer whose mark has since been replaced
+     * by another attempt is a no-op rather than wiping the newer one; disposers may therefore be
+     * called out of order and more than once. Shaped like {@link acquireLatch} deliberately: a
+     * disposer is harder to forget than a paired `end…` call.
+     *
+     * A concurrent READER's refresh landing in that latch-free window is fine, and is reachable
+     * today (`OptimysticModule` declares `concurrencyMode = 'reentrant-reads'`, so scans inside a
+     * transaction share one instance and only serialize on the latch). Consuming is a property of
+     * the (instance, action id) pair, not of who calls: whoever refreshes first drops exactly the
+     * durable entry's actions and the write's own later refresh then finds nothing new. The leading
+     * slice stays right because {@link actInternal} APPENDS, so anything staged after the entry was
+     * written survives it.
+     *
+     * NOTE: a concurrent WRITER is the hazard. The mark deliberately outlives the latch (see
+     * {@link inFlightActionId}), so two writes overlapping on ONE instance can trample each other's:
+     * a second write that acquires the latch between the first's failed attempt and its
+     * retry-refresh replaces the id, and the first's refresh then reads the SECOND write's id —
+     * consuming that write's durable entry and dropping pending actions of its own that never
+     * landed. Not reachable today: a coordinator commit and a `sync()` both run on one session call
+     * path, which is the same assumption the participant selection in
+     * `TransactionCoordinator.commitOnce` and its `rollback` already rest on. If a second writer is
+     * ever allowed to drive the SAME instance concurrently, this must become a per-attempt token (a
+     * mark object compared by identity, refusing to replace a live one) rather than a bare id. */
+    beginInFlightAction(actionId: ActionId): () => void;
     /** Push our pending actions to the transactor */
     sync(options?: SyncOptions): Promise<void>;
+    /** Mints the one action id this sync reuses across all of its retry attempts, and owns it for
+     * the WHOLE cycle — including the inter-attempt refresh, which is the only thing that reads it
+     * (see {@link inFlightActionId}). `sync()`/`updateAndSync()` hold the collection latch across
+     * all of this, so the mark's lifetime is contained inside the latched span here; the disposer
+     * runs on every exit, including a throw out of retry exhaustion or an abort. */
     private syncInternal;
+    /** The retry loop behind {@link syncInternal}, run with `actionId` already marked in flight. */
+    private syncAttempts;
     updateAndSync(options?: SyncOptions): Promise<void>;
     selectLog(forward?: boolean): AsyncIterableIterator<Action<TAction>>;
     private replayActions;

package/dist/src/collection/collection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collection.d.ts","sourceRoot":"","sources":["../../../src/collection/collection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGrI,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAEtE,OAAO,KAAK,EAAyB,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEhG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAkBpE,MAAM,MAAM,qBAAqB,CAAC,OAAO,IAAI;IAC5C,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,iBAAiB,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC;IACtE;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,CAAA;CACvG,CAAA;AAED;2BAC2B;AAC3B,MAAM,WAAW,eAAe;IAC/B;;;;;;oCAMgC;IAChC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;+EAM2E;IAC3E,UAAU,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED;2FAC2F;AAC3F,MAAM,WAAW,kBAAkB,CAAC,OAAO;IAC1C,uDAAuD;IACvD,UAAU,EAAE,UAAU,CAAC;IACvB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3B;;;;;+DAK2D;IAC3D,OAAO,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,qBAAa,UAAU,CAAC,OAAO,CAAE,YAAW,WAAW,CAAC,OAAO,CAAC;aAK9C,EAAE,EAAE,YAAY;aAChB,UAAU,EAAE,WAAW;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,iDAAiD;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,sBAAsB;aACN,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAZjC,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,SAAS,aACQ,EAAE,EAAE,YAAY,EAChB,UAAU,EAAE,WAAW,EACtB,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,EACpD,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC;IACjD,iDAAiD;IAChC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC;IACjD,sBAAsB;IACN,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EACvB,cAAc,CAAC,GAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,aAAA;IAKzH;;;;;;;;;;;qDAWiD;WACpC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,qBAAqB,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;IAWrJ;;;;;6BAKyB;WACZ,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,qBAAqB,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAgBjJ;kFAC8E;mBACzD,WAAW;IAiBhC;;;+FAG2F;mBACtE,WAAW;IAqBhC;;;;;;;;0CAQsC;IACtC,OAAO,CAAC,MAAM,CAAC,cAAc;IAYvB,GAAG,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;YASzB,WAAW;YAKX,gBAAgB;IAc9B,gIAAgI;IAC1H,MAAM;YASE,cAAc;IA2F5B;;;;;;;;;;;;mDAY+C;IAC/C,eAAe,IAAI,kBAAkB,CAAC,OAAO,CAAC;IAQ9C;;qFAEiF;IACjF,cAAc,CAAC,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,IAAI;IAK3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oEAwCgE;IAChE,iBAAiB,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAmBrF;;;;;oEAKgE;IAChE,iBAAiB,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE;IAItC;;;qBAGiB;IACjB,mBAAmB,IAAI,IAAI;IAI3B;;;;;;;;iFAQ6E;IAC7E,kBAAkB,IAAI,OAAO;IAI7B;;;;;;;;;;;;sFAYkF;IAClF,qBAAqB,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIrE,iFAAiF;IACjF,UAAU,IAAI,MAAM;IAIpB;;mCAE+B;IAC/B,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM;IAS3C,iDAAiD;IAC3C,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW;YASlB,YAAY;IA6FpB,aAAa,CAAC,OAAO,CAAC,EAAE,WAAW;IAUlC,SAAS,CAAC,OAAO,UAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAc1D,aAAa;IAQ3B,mBAAmB,IAAI,cAAc,EAAE;IAIvC,qBAAqB,IAAI,IAAI;IAI7B;;;;;OAKG;IACH,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS;IAI9G;;;;;;;;;;;;;;;;;;;OAmBG;mBACkB,gBAAgB;CAwBrC"}
+{"version":3,"file":"collection.d.ts","sourceRoot":"","sources":["../../../src/collection/collection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAIrI,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAG3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAEtE,OAAO,KAAK,EAAyB,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEhG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAuCpE,MAAM,MAAM,qBAAqB,CAAC,OAAO,IAAI;IAC5C,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,iBAAiB,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC;IACtE;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,CAAA;CACvG,CAAA;AAED;2BAC2B;AAC3B,MAAM,WAAW,eAAe;IAC/B;;;;;;oCAMgC;IAChC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;+EAM2E;IAC3E,UAAU,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED;2FAC2F;AAC3F,MAAM,WAAW,kBAAkB,CAAC,OAAO;IAC1C,uDAAuD;IACvD,UAAU,EAAE,UAAU,CAAC;IACvB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3B;;;;;+DAK2D;IAC3D,OAAO,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,qBAAa,UAAU,CAAC,OAAO,CAAE,YAAW,WAAW,CAAC,OAAO,CAAC;aAiC9C,EAAE,EAAE,YAAY;aAChB,UAAU,EAAE,WAAW;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,iDAAiD;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,sBAAsB;aACN,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAChC;;0DAEsD;aACtC,WAAW,EAAE,MAAM;IA5CpC,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC;;;;;;;;;;;;;;;;;;;;;;;;;4CAyBwC;IACxC,OAAO,CAAC,gBAAgB,CAAC,CAAW;IAEpC,SAAS,aACQ,EAAE,EAAE,YAAY,EAChB,UAAU,EAAE,WAAW,EACtB,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,EACpD,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC;IACjD,iDAAiD;IAChC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC;IACjD,sBAAsB;IACN,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EACvB,cAAc,CAAC,GAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,aAAA;IACxH;;0DAEsD;IACtC,WAAW,GAAE,MAAoC;IAelE;;;0FAGsF;IACtF,OAAO,CAAC,MAAM,CAAC,cAAc;IAI7B;;;;;;;;;;;qDAWiD;WACpC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,qBAAqB,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;IAcrJ;;;;;6BAKyB;WACZ,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,qBAAqB,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAkBjJ;kFAC8E;mBACzD,WAAW;IAiBhC;;;+FAG2F;mBACtE,WAAW;IAwBhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mFAiE+E;IAC/E,OAAO,CAAC,MAAM,CAAC,cAAc;IA8B7B;;;;;;;;;;;;;;;kGAe8F;IAC9F,OAAO,CAAC,MAAM,CAAC,YAAY;IAmB3B;;;;;;;;;;;;;;;;;;;;;;;;;yEAyBqE;IACrE,OAAO,CAAC,MAAM,CAAC,eAAe;IAQxB,GAAG,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;YASzB,WAAW;YAKX,gBAAgB;IAc9B,gIAAgI;IAC1H,MAAM;IASZ;;;;;;;;;;;;;;uCAcmC;IACnC,OAAO,CAAC,eAAe;IAevB;;;;;;;2DAOuD;IACvD,OAAO,CAAC,kBAAkB;IAQ1B;;;;;sBAKkB;YACJ,cAAc;IA4F5B;;;;;;;;;;;;mDAY+C;IAC/C,eAAe,IAAI,kBAAkB,CAAC,OAAO,CAAC;IAQ9C;;qFAEiF;IACjF,cAAc,CAAC,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,IAAI;IAK3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oEAwCgE;IAChE,iBAAiB,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAmBrF;;;;;oEAKgE;IAChE,iBAAiB,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE;IAItC;;;qBAGiB;IACjB,mBAAmB,IAAI,IAAI;IAI3B;;;;;;;;iFAQ6E;IAC7E,kBAAkB,IAAI,OAAO;IAI7B;;;;;;;;;;;;;;;;;;;;+CAoB2C;IAC3C,iBAAiB,IAAI,MAAM,GAAG,SAAS;IAIvC;;;;;;;;;;;;;;;;;;kCAkB8B;IAC9B,iBAAiB,IAAI,QAAQ,GAAG,SAAS;IAKzC;;;;;;;;;;;;sFAYkF;IAClF,qBAAqB,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIrE,iFAAiF;IACjF,UAAU,IAAI,MAAM;IAIpB;;;;;;;;;;;wFAWoF;IACpF,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM;IAaxD;;;;;;6DAMyD;IACzD,YAAY,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;IAInC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kGA6B8F;IAC9F,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,IAAI;IASnD,iDAAiD;IAC3C,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW;IAShC;;;;oFAIgF;YAClE,YAAY;IAY1B,gGAAgG;YAClF,YAAY;IAmHpB,aAAa,CAAC,OAAO,CAAC,EAAE,WAAW;IAUlC,SAAS,CAAC,OAAO,UAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAc1D,aAAa;IAQ3B,mBAAmB,IAAI,cAAc,EAAE;IAIvC,qBAAqB,IAAI,IAAI;IAI7B;;;;;OAKG;IACH,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS;IAI9G;;;;;;;;;;;;;;;;;;;OAmBG;mBACkB,gBAAgB;CAkCrC"}