@optimystic/db-p2p 0.13.5 → 0.14.0

package/dist/src/reactivity/subscription-manager.js

@@ -0,0 +1,302 @@
+/**
+ * Reactivity — subscription manager (db-p2p, wires to the cohort-topic substrate).
+ *
+ * Drives a subscriber's lifecycle against the participant-facing {@link CohortTopicService}: register at
+ * cohort-topic tier **T3 (luxury)** with the reactivity `appPayload`, renew to keep the registration
+ * alive within its TTL (Edge 60 s / Core 90 s), and withdraw by ceasing renewal — all the cohort-topic
+ * standard (`docs/reactivity.md` §Subscription). The reactivity-specific shape lives in db-core: the
+ * tail-anchored `topicId = H(tailId ‖ "reactivity")`, the {@link SubscribeAppPayloadV1}, and the
+ * subscriber-side verify/deliver path ({@link ReactivitySubscriber}).
+ *
+ * Inbound notifications are handed to {@link ReactivitySubscriptionManager.onNotification}, which runs
+ * the db-core delivery path (verify against the cached tail-cohort `MembershipCertV1` with one
+ * fetch-and-retry, revision-contiguity, gap → backfill seam, `(collectionId, revision)` dedupe, surface).
+ * The notification transport (the reactivity application protocol that delivers `NotificationV1` frames
+ * to a subscriber's primary) is the sibling tickets' concern; this manager owns attach + delivery logic.
+ */
+import { Tier, reactivityTopicId, subscribeAppPayloadBytes, subscriberTtlForProfile, deltaMaxForProfile, createNotificationVerifier, createReactivitySubscriber, createBackfillRequester, createStickyCohortHintCache, createRejoinJitter, applyResumeReply, detectRotation, planReRegistration, bytesToB64url, } from "@optimystic/db-core";
+import { RotationRedirectError } from "./recover-transport.js";
+import { createLogger } from "../logger.js";
+const log = createLogger("reactivity-subscription");
+/** Wires one reactivity subscription to the cohort-topic substrate at tier T3. */
+export class ReactivitySubscriptionManager {
+    service;
+    collectionId;
+    collectionIdB64;
+    tailIdAtAttach;
+    topicId;
+    ttlMs;
+    deltaMaxBytes;
+    lastKnownRev;
+    subscriber;
+    verifier;
+    options;
+    cohortHintCache;
+    clock;
+    tailIdAtAttachB64;
+    rejoinJitter;
+    /** Resolved ring coordinate signed into a {@link ResumeV1} (real coord, or the collectionId placeholder). */
+    subscriberCoord;
+    /** True iff {@link subscriberCoord} fell back to the collectionId placeholder (no real coord supplied). */
+    subscriberCoordIsFallback;
+    /** The successor tail a rotation has already been surfaced for, so the notice fires once per rotation. */
+    rotationHandledFor;
+    /** Memoized db-core backfill driver (built on first gap, once `this.subscriber` is assigned). */
+    backfillRequester;
+    handle;
+    constructor(options) {
+        this.options = options;
+        this.service = options.service;
+        this.collectionId = options.collectionId;
+        this.collectionIdB64 = bytesToB64url(options.collectionId);
+        this.tailIdAtAttach = options.tailIdAtAttach;
+        this.topicId = reactivityTopicId(options.tailIdAtAttach);
+        this.ttlMs = options.ttlMs ?? (options.profile !== undefined ? subscriberTtlForProfile(options.profile) : undefined) ?? DEFAULT_SUBSCRIBER_TTL_MS;
+        this.deltaMaxBytes = options.deltaMaxBytes ?? (options.profile !== undefined ? deltaMaxForProfile(options.profile) : DEFAULT_EDGE_SAFE_DELTA_MAX);
+        this.lastKnownRev = options.lastKnownRev ?? 0;
+        this.cohortHintCache = options.cohortHintCache ?? createStickyCohortHintCache();
+        this.clock = options.clock ?? (() => Date.now());
+        this.tailIdAtAttachB64 = bytesToB64url(options.tailIdAtAttach);
+        this.rejoinJitter = options.rejoinJitter ?? createRejoinJitter();
+        this.subscriberCoordIsFallback = options.subscriberCoord === undefined;
+        this.subscriberCoord = options.subscriberCoord ?? this.collectionIdB64;
+        // Verify against the tail cohort's membership cert (the verifier owns the one fetch-and-retry).
+        this.verifier = createNotificationVerifier({ verifier: this.service.verifier(), tier: Tier.T3 });
+        this.subscriber = createReactivitySubscriber({
+            collectionId: this.collectionIdB64,
+            verifier: this.verifier,
+            deliver: options.deliver,
+            // Bind the seam to a method so it resolves the (possibly transport-backed) driver lazily —
+            // `this.subscriber` is not yet assigned during this very call.
+            requestBackfill: (from, to) => this.onBackfillGap(from, to),
+            lastKnownRev: this.lastKnownRev,
+        });
+    }
+    /**
+     * The subscriber detected a revision gap. When a {@link ReactivitySubscriptionManagerOptions.backfillTransport}
+     * + signer are configured, drive the db-core {@link createBackfillRequester} (build → sign → send →
+     * replay reply through delivery → underflow escalation, built lazily once); otherwise fall back to the
+     * explicit {@link ReactivitySubscriptionManagerOptions.requestBackfill} callback (or no-op).
+     */
+    onBackfillGap(from, to) {
+        const { backfillTransport, signBackfill } = this.options;
+        if (backfillTransport !== undefined && signBackfill !== undefined) {
+            if (this.backfillRequester === undefined) {
+                this.backfillRequester = createBackfillRequester({
+                    collectionId: this.collectionIdB64,
+                    sign: signBackfill,
+                    transport: backfillTransport,
+                    subscriber: this.subscriber,
+                    clock: this.clock,
+                    onUnderflow: this.options.onBackfillUnderflow,
+                });
+            }
+            // Fire-and-forget off the gap seam (NOT the deliver path — backfill is hint-only and must never
+            // block or fault commit/delivery). The driver resolves (no throw) on an `available`-window
+            // underflow — that path is handled by `onBackfillUnderflow`; only a genuine **transport failure**
+            // rejects, which escalates here. `escalateBackfill` never rejects, so nothing leaks as an
+            // unhandled rejection.
+            void this.backfillRequester(from, to).catch(() => { void this.escalateBackfill(from, to); });
+            return;
+        }
+        this.options.requestBackfill?.(from, to);
+    }
+    /**
+     * A backfill RPC failed at the transport (the sticky-hint dial + cohort-walk fallback inside the
+     * transport were already exhausted). Re-attempt up to {@link ReactivitySubscriptionManagerOptions.backfillMaxRetries}
+     * times, then escalate to {@link resume} (when a resume transport is configured) and finally to
+     * {@link ReactivitySubscriptionManagerOptions.onChainRead}. Never rejects (it runs detached off the gap
+     * seam) and never touches the commit/delivery path.
+     */
+    async escalateBackfill(from, to) {
+        const max = this.options.backfillMaxRetries ?? DEFAULT_BACKFILL_MAX_RETRIES;
+        for (let attempt = 1; attempt <= max; attempt++) {
+            try {
+                await this.backfillRequester(from, to);
+                return; // a re-attempt closed (or underflow-escalated) the gap
+            }
+            catch (err) {
+                if (err instanceof RotationRedirectError) {
+                    // The serving cohort's outgoing tail rotated: move to the new tree (no chain-read fallback).
+                    this.honorRotationRedirect(err);
+                    return;
+                }
+                log("backfill retry %d/%d for [%d,%d] failed: %o", attempt, max, from, to, err);
+            }
+        }
+        // Still failing after the bounded retries: fall back to a resume (a wider recovery window) when one is
+        // wired, else signal a chain read. Distinct from the underflow seam, which carries the held window.
+        if (this.options.resumeTransport !== undefined && this.options.signResume !== undefined) {
+            try {
+                await this.resume();
+                return;
+            }
+            catch (err) {
+                log("backfill escalation to resume() failed for [%d,%d]: %o", from, to, err);
+            }
+        }
+        this.options.onChainRead?.(undefined, undefined);
+    }
+    /** The live registration handle, or `undefined` before the first {@link register}. */
+    get registration() {
+        return this.handle;
+    }
+    /** Last contiguously-delivered revision. */
+    get lastRevision() {
+        return this.subscriber.lastRevision;
+    }
+    /** Register the subscriber at tier T3 with the reactivity `appPayload`. */
+    async register() {
+        const appPayload = subscribeAppPayloadBytes({
+            collectionId: bytesToB64url(this.collectionId),
+            tailIdAtAttach: bytesToB64url(this.tailIdAtAttach),
+            lastKnownRev: this.lastKnownRev,
+            deltaMaxBytes: this.deltaMaxBytes,
+        });
+        this.handle = await this.service.register({
+            topicId: this.topicId,
+            tier: Tier.T3,
+            appPayload,
+            ttl: this.ttlMs,
+        });
+        return this.handle;
+    }
+    /** Run one renewal cycle (keep-alive touch). No-op before the first {@link register}. */
+    async renew() {
+        if (this.handle === undefined) {
+            return;
+        }
+        await this.service.renew(this.handle);
+    }
+    /** Withdraw: stop renewing and send a best-effort signed tombstone so the cohort frees the
+     * registration immediately (TTL expiry remains the fallback if the primary is unreachable). */
+    async withdraw() {
+        if (this.handle !== undefined) {
+            await this.service.withdraw(this.handle);
+        }
+    }
+    /**
+     * Resume after a sleep/flap (`docs/reactivity.md` §Resume). Sends one {@link ResumeV1} from
+     * `lastRevision + 1` to the serving cohort over the injected {@link ResumeTransport} and applies the
+     * classified reply via the db-core {@link applyResumeReply}: a `backfill` / `checkpoint_window` reply
+     * replays its entries through the delivery path (verified, deduped); `out_of_window` and an untrusted
+     * checkpoint escalate to {@link ReactivitySubscriptionManagerOptions.onChainRead}; `tail_rotated`
+     * escalates to {@link ReactivitySubscriptionManagerOptions.onTailRotated} and invalidates the sticky
+     * cohort-hint cache (the cached primary is under the old tree). Throws if no resume transport/signer
+     * was configured.
+     *
+     * The sticky cohort-hint cache (Edge) lets a resume after a brief flap dial the cached primary directly
+     * for a one-RT recovery instead of re-walking from `d_max`; it is the transport's to consult via
+     * {@link cohortHint}.
+     */
+    async resume() {
+        const { resumeTransport, signResume } = this.options;
+        if (resumeTransport === undefined || signResume === undefined) {
+            throw new Error("ReactivitySubscriptionManager.resume: no resumeTransport/signResume configured");
+        }
+        if (this.subscriberCoordIsFallback) {
+            log("resume: no real ring coordinate supplied; signing ResumeV1 with the collectionId as a placeholder subscriberCoord (collection=%s)", this.collectionIdB64);
+        }
+        const unsigned = {
+            v: 1,
+            collectionId: this.collectionIdB64,
+            fromRevision: this.subscriber.lastRevision + 1,
+            latestKnownTailId: bytesToB64url(this.tailIdAtAttach),
+            subscriberCoord: this.subscriberCoord,
+            timestamp: this.clock(),
+        };
+        const req = { ...unsigned, signature: signResume(unsigned) };
+        let reply;
+        try {
+            reply = await resumeTransport(req);
+        }
+        catch (err) {
+            if (err instanceof RotationRedirectError) {
+                // The resume reached the serving cohort's outgoing (draining) tail: honor the redirect (surface
+                // the rotation through onRotation, invalidate the sticky cache) and resolve as a tail rotation —
+                // never throw the redirect out to the caller / the gap seam's commit-delivery path.
+                this.honorRotationRedirect(err);
+                return "tail_rotated";
+            }
+            throw err;
+        }
+        return applyResumeReply(reply, {
+            subscriber: this.subscriber,
+            verifier: this.verifier,
+            onCheckpointDigest: this.options.onCheckpointDigest,
+            onChainRead: this.options.onChainRead,
+            onTailRotated: (newTailId, newRevisionAtRotation) => {
+                // The cached primary is under the now-stale tree; drop it so the re-registration re-walks.
+                this.cohortHintCache.invalidate(this.collectionIdB64);
+                this.options.onTailRotated?.(newTailId, newRevisionAtRotation);
+            },
+        });
+    }
+    /** The sticky cohort-hint cache backing one-RT resume after a flap (Edge). */
+    get cohortHint() {
+        return this.cohortHintCache;
+    }
+    /**
+     * Run the db-core delivery path for one inbound notification, then check for tail rotation
+     * (`docs/reactivity.md` §Tail rotation): a delivered `tailId` that differs from `tailIdAtAttach`, or a
+     * `rotationHint` pre-announce, invalidates the sticky cohort-hint cache (the cached primary is under the
+     * old tree) and surfaces a jittered re-registration plan via {@link ReactivitySubscriptionManagerOptions.onRotation}.
+     * Fired at most once per successor tail.
+     */
+    async onNotification(n) {
+        const outcome = await this.subscriber.onNotification(n);
+        this.checkRotation(n);
+        return outcome;
+    }
+    /** Detect a tail rotation from an inbound notification and surface it once per successor tail. */
+    checkRotation(n) {
+        const detection = detectRotation(this.tailIdAtAttachB64, n);
+        if (!detection.rotated || detection.newTailId === undefined) {
+            return;
+        }
+        this.surfaceRotation(detection.newTailId, detection.preAnnounced);
+    }
+    /**
+     * Surface a rotation to the host **once per successor tail** (`docs/reactivity.md` §Tail rotation):
+     * invalidate the sticky cohort-hint cache (the cached primary is under the now-stale tree, so a later
+     * resume re-walks) and — when an {@link ReactivitySubscriptionManagerOptions.onRotation} observer is
+     * configured — hand it a jittered re-registration plan carrying `lastRevision` (continuous across the
+     * rotation). The single seam both the notification-driven detection ({@link checkRotation}) and the
+     * recover-driven {@link RotationRedirectError} ({@link honorRotationRedirect}) end in; the
+     * {@link rotationHandledFor} guard self-corrects across a chained OLD→A→B rotation.
+     */
+    surfaceRotation(newTailId, preAnnounced) {
+        if (newTailId === this.rotationHandledFor) {
+            return; // already surfaced this successor
+        }
+        this.rotationHandledFor = newTailId;
+        // The cached primary is under the now-stale tree; drop it so the re-registration re-walks.
+        this.cohortHintCache.invalidate(this.collectionIdB64);
+        if (this.options.onRotation === undefined) {
+            return;
+        }
+        const plan = planReRegistration({
+            hint: { newTailId },
+            lastRevision: this.subscriber.lastRevision,
+            now: this.clock(),
+            jitter: this.rejoinJitter,
+        });
+        this.options.onRotation({ newTailId, preAnnounced, plan });
+    }
+    /**
+     * Honor a recover-surfaced {@link RotationRedirectError}: the serving cohort's outgoing tail rotated and
+     * bounced this request to the new tree. Route it through the **same** {@link surfaceRotation} seam a
+     * delivered pre-announce uses (`preAnnounced: false`), so both the notify-driven and recover-driven
+     * rotation paths converge on one `RotationNotice` for the host's re-registration scheduler to consume.
+     */
+    honorRotationRedirect(err) {
+        this.surfaceRotation(err.redirect.newTailId, false);
+    }
+}
+/** Default application-level backfill re-attempts after a transport failure before escalating to resume/chain. */
+const DEFAULT_BACKFILL_MAX_RETRIES = 1;
+/** Fallback subscriber TTL when neither `ttlMs` nor `profile` is supplied (Core default). */
+const DEFAULT_SUBSCRIBER_TTL_MS = 90_000;
+/** Edge-safe delta budget when neither `deltaMaxBytes` nor `profile` is supplied: decline deltas. */
+const DEFAULT_EDGE_SAFE_DELTA_MAX = 0;
+//# sourceMappingURL=subscription-manager.js.map

package/dist/src/reactivity/subscription-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription-manager.js","sourceRoot":"","sources":["../../../src/reactivity/subscription-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACN,IAAI,EACJ,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,0BAA0B,EAC1B,0BAA0B,EAC1B,uBAAuB,EACvB,2BAA2B,EAC3B,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,aAAa,GAkBb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,GAAG,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AAwGpD,kFAAkF;AAClF,MAAM,OAAO,6BAA6B;IACxB,OAAO,CAAqB;IAC5B,YAAY,CAAa;IACzB,eAAe,CAAS;IACxB,cAAc,CAAa;IAC3B,OAAO,CAAa;IACpB,KAAK,CAAS;IACd,aAAa,CAAS;IACtB,YAAY,CAAS;IACrB,UAAU,CAAuB;IACjC,QAAQ,CAAuB;IAC/B,OAAO,CAAuC;IAC9C,eAAe,CAAwB;IACvC,KAAK,CAAe;IACpB,iBAAiB,CAAS;IAC1B,YAAY,CAAe;IAC5C,6GAA6G;IAC5F,eAAe,CAAS;IACzC,2GAA2G;IAC1F,yBAAyB,CAAU;IACpD,0GAA0G;IAClG,kBAAkB,CAAU;IACpC,iGAAiG;IACzF,iBAAiB,CAA0D;IAC3E,MAAM,CAAsB;IAEpC,YAAY,OAA6C;QACxD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,yBAAyB,CAAC;QAClJ,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;QAClJ,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,2BAA2B,EAAE,CAAC;QAChF,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,iBAAiB,GAAG,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC/D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,kBAAkB,EAAE,CAAC;QACjE,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC;QACvE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC;QACvE,gGAAgG;QAChG,IAAI,CAAC,QAAQ,GAAG,0BAA0B,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACjG,IAAI,CAAC,UAAU,GAAG,0BAA0B,CAAC;YAC5C,YAAY,EAAE,IAAI,CAAC,eAAe;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,2FAA2F;YAC3F,+DAA+D;YAC/D,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,EAAQ,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;YACjE,YAAY,EAAE,IAAI,CAAC,YAAY;SAC/B,CAAC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,aAAa,CAAC,IAAY,EAAE,EAAU;QAC7C,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACzD,IAAI,iBAAiB,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YACnE,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBAC1C,IAAI,CAAC,iBAAiB,GAAG,uBAAuB,CAAC;oBAChD,YAAY,EAAE,IAAI,CAAC,eAAe;oBAClC,IAAI,EAAE,YAAY;oBAClB,SAAS,EAAE,iBAAiB;oBAC5B,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB;iBAC7C,CAAC,CAAC;YACJ,CAAC;YACD,gGAAgG;YAChG,2FAA2F;YAC3F,kGAAkG;YAClG,0FAA0F;YAC1F,uBAAuB;YACvB,KAAK,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7F,OAAO;QACR,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,EAAU;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;QAC5E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,iBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACxC,OAAO,CAAC,uDAAuD;YAChE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;oBAC1C,6FAA6F;oBAC7F,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;oBAChC,OAAO;gBACR,CAAC;gBACD,GAAG,CAAC,6CAA6C,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACjF,CAAC;QACF,CAAC;QACD,uGAAuG;QACvG,oGAAoG;QACpG,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACzF,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpB,OAAO;YACR,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,wDAAwD,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9E,CAAC;QACF,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;IAED,sFAAsF;IACtF,IAAI,YAAY;QACf,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,4CAA4C;IAC5C,IAAI,YAAY;QACf,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;IACrC,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,QAAQ;QACb,MAAM,UAAU,GAAG,wBAAwB,CAAC;YAC3C,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC;YAC9C,cAAc,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC;YAClD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,EAAE;YACb,UAAU;YACV,GAAG,EAAE,IAAI,CAAC,KAAK;SACf,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,KAAK;QACV,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO;QACR,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED;mGAC+F;IAC/F,KAAK,CAAC,QAAQ;QACb,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;IACF,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,MAAM;QACX,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACrD,IAAI,eAAe,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACpC,GAAG,CAAC,mIAAmI,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAChK,CAAC;QACD,MAAM,QAAQ,GAAgC;YAC7C,CAAC,EAAE,CAAC;YACJ,YAAY,EAAE,IAAI,CAAC,eAAe;YAClC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY,GAAG,CAAC;YAC9C,iBAAiB,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC;YACrD,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE;SACvB,CAAC;QACF,MAAM,GAAG,GAAa,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,IAAI,KAAoB,CAAC;QACzB,IAAI,CAAC;YACJ,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;gBAC1C,gGAAgG;gBAChG,iGAAiG;gBACjG,oFAAoF;gBACpF,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;gBAChC,OAAO,cAAc,CAAC;YACvB,CAAC;YACD,MAAM,GAAG,CAAC;QACX,CAAC;QACD,OAAO,gBAAgB,CAAC,KAAK,EAAE;YAC9B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB;YACnD,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACrC,aAAa,EAAE,CAAC,SAAS,EAAE,qBAAqB,EAAQ,EAAE;gBACzD,2FAA2F;gBAC3F,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBACtD,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;YAChE,CAAC;SACD,CAAC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,IAAI,UAAU;QACb,OAAO,IAAI,CAAC,eAAe,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,cAAc,CAAC,CAAiB;QACrC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACtB,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,kGAAkG;IAC1F,aAAa,CAAC,CAAiB;QACtC,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC7D,OAAO;QACR,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;;;OAQG;IACK,eAAe,CAAC,SAAiB,EAAE,YAAqB;QAC/D,IAAI,SAAS,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC3C,OAAO,CAAC,kCAAkC;QAC3C,CAAC;QACD,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC;QACpC,2FAA2F;QAC3F,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO;QACR,CAAC;QACD,MAAM,IAAI,GAAG,kBAAkB,CAAC;YAC/B,IAAI,EAAE,EAAE,SAAS,EAAE;YACnB,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY;YAC1C,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE;YACjB,MAAM,EAAE,IAAI,CAAC,YAAY;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,GAA0B;QACvD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;CACD;AAED,kHAAkH;AAClH,MAAM,4BAA4B,GAAG,CAAC,CAAC;AACvC,6FAA6F;AAC7F,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,qGAAqG;AACrG,MAAM,2BAA2B,GAAG,CAAC,CAAC"}

package/dist/src/reactivity/topic-bytes.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Reactivity — the one pinned `BlockId` → raw tail-bytes encoding, shared by origination and subscription.
+ *
+ * `reactivityTopicId` (db-core) hashes `H(tailBytes ‖ "reactivity")` to derive the topic's `coord_0`
+ * cohort. Origination (the cohort-change membership gate, {@link
+ * import("../cohort-topic/reactivity-membership-gate.js").createReactivitySelfMembershipGate}) and the
+ * subscriber side (the production subscribe factory that converts a `BlockId` `tailIdAtAttach` to the bytes
+ * {@link import("./subscription-manager.js").ReactivitySubscriptionManager} feeds `reactivityTopicId`) MUST
+ * feed it the **same** bytes for a given tail, or they resolve different coords and origination silently
+ * never reaches subscribers (green tests, dead feature).
+ *
+ * This module is that single source of truth: `reactivityTailBytes(tailId) = TextEncoder().encode(tailId)`,
+ * the synchronous block-id→bytes convention the rest of db-p2p already uses for ring hashing of tail ids
+ * (`cluster/client.ts`, `repo/client.ts`). db-core's async `blockIdToBytes` (which `sha256`s the utf8 bytes
+ * first) is deliberately NOT used: it would (a) double-hash relative to the spec's `H(tailId ‖ "reactivity")`
+ * and (b) force the synchronous origination gate to become async.
+ *
+ * It lives in the reactivity surface (not buried in the gate) so the subscribe path and the gate import the
+ * exact same function rather than re-deriving the encoding independently. The
+ * `cohort-topic/reactivity-membership-gate.ts` module re-exports it for its existing callers.
+ */
+import type { BlockId } from "@optimystic/db-core";
+/**
+ * The pinned `BlockId` → raw tail bytes encoding fed into `reactivityTopicId`: the **raw** utf8 bytes of the
+ * tail block-id string (NOT a pre-hashed routing key, NOT db-core's double-hashing `blockIdToBytes`).
+ *
+ * Load-bearing: origination and the subscriber side must call this **same** function for a given tail (see
+ * the module doc) — a mismatch resolves different `coord_0`s and origination silently never reaches
+ * subscribers. The `topic-bytes-encoding` spec pins the coord-equality both ways.
+ */
+export declare function reactivityTailBytes(tailId: BlockId): Uint8Array;
+//# sourceMappingURL=topic-bytes.d.ts.map

package/dist/src/reactivity/topic-bytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic-bytes.d.ts","sourceRoot":"","sources":["../../../src/reactivity/topic-bytes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAInD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,CAE/D"}

package/dist/src/reactivity/topic-bytes.js

@@ -0,0 +1,34 @@
+/**
+ * Reactivity — the one pinned `BlockId` → raw tail-bytes encoding, shared by origination and subscription.
+ *
+ * `reactivityTopicId` (db-core) hashes `H(tailBytes ‖ "reactivity")` to derive the topic's `coord_0`
+ * cohort. Origination (the cohort-change membership gate, {@link
+ * import("../cohort-topic/reactivity-membership-gate.js").createReactivitySelfMembershipGate}) and the
+ * subscriber side (the production subscribe factory that converts a `BlockId` `tailIdAtAttach` to the bytes
+ * {@link import("./subscription-manager.js").ReactivitySubscriptionManager} feeds `reactivityTopicId`) MUST
+ * feed it the **same** bytes for a given tail, or they resolve different coords and origination silently
+ * never reaches subscribers (green tests, dead feature).
+ *
+ * This module is that single source of truth: `reactivityTailBytes(tailId) = TextEncoder().encode(tailId)`,
+ * the synchronous block-id→bytes convention the rest of db-p2p already uses for ring hashing of tail ids
+ * (`cluster/client.ts`, `repo/client.ts`). db-core's async `blockIdToBytes` (which `sha256`s the utf8 bytes
+ * first) is deliberately NOT used: it would (a) double-hash relative to the spec's `H(tailId ‖ "reactivity")`
+ * and (b) force the synchronous origination gate to become async.
+ *
+ * It lives in the reactivity surface (not buried in the gate) so the subscribe path and the gate import the
+ * exact same function rather than re-deriving the encoding independently. The
+ * `cohort-topic/reactivity-membership-gate.ts` module re-exports it for its existing callers.
+ */
+const utf8 = new TextEncoder();
+/**
+ * The pinned `BlockId` → raw tail bytes encoding fed into `reactivityTopicId`: the **raw** utf8 bytes of the
+ * tail block-id string (NOT a pre-hashed routing key, NOT db-core's double-hashing `blockIdToBytes`).
+ *
+ * Load-bearing: origination and the subscriber side must call this **same** function for a given tail (see
+ * the module doc) — a mismatch resolves different `coord_0`s and origination silently never reaches
+ * subscribers. The `topic-bytes-encoding` spec pins the coord-equality both ways.
+ */
+export function reactivityTailBytes(tailId) {
+    return utf8.encode(tailId);
+}
+//# sourceMappingURL=topic-bytes.js.map

package/dist/src/reactivity/topic-bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic-bytes.js","sourceRoot":"","sources":["../../../src/reactivity/topic-bytes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAe;IAClD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC"}

package/dist/src/repo/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/repo/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAC7F,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAC3D,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,qBAAa,UAAW,SAAQ,cAAe,YAAW,KAAK;IACC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM;IAA/F,OAAO;IAIP,mCAAmC;WACrB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,UAAU;IAI9F,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAO5E,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,GAAG,YAAY,CAAC;IAOxF,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvE,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAOpF,OAAO,CAAC,oBAAoB;YASd,kBAAkB;IA6ChC,OAAO,CAAC,wBAAwB;IAoBhC,OAAO,CAAC,kCAAkC;CAQ1C"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/repo/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAC7F,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAC3D,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,qBAAa,UAAW,SAAQ,cAAe,YAAW,KAAK;IACC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM;IAA/F,OAAO;IAIP,mCAAmC;WACrB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,UAAU;IAI9F,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAO5E,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,GAAG,YAAY,CAAC;IAOxF,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvE,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAOpF,OAAO,CAAC,oBAAoB;YASd,kBAAkB;YAkElB,wBAAwB;YA6BxB,kCAAkC;CAQhD"}

package/dist/src/repo/client.js

@@ -1,3 +1,4 @@
+import { blockIdsForTransforms, blockIdToBytes } from "@optimystic/db-core";
 import { ProtocolClient } from "../protocol-client.js";
 import { peerIdFromString } from "@libp2p/peer-id";
 export class RepoClient extends ProtocolClient {
@@ -41,20 +42,36 @@ export class RepoClient extends ProtocolClient {
         };
         const correlationId = this.extractCorrelationId(operations);
         const deadline = options.expiration ?? (Date.now() + 30_000);
-        const msLeft = Math.max(1, deadline - Date.now());
-        const withTimeout = async (fn) => {
-            return await Promise.race([
-                fn(),
-                new Promise((_, reject) => setTimeout(() => reject(new Error('RepoClient timeout')), msLeft))
-            ]);
-        };
-        let response;
+        const deadlineMs = Math.max(1, deadline - Date.now());
         const preferred = (this.protocolPrefix ?? '/db-p2p') + '/repo/1.0.0';
-        response = await withTimeout(() => super.processMessage(message, preferred, {
-            signal: options?.signal,
-            correlationId,
-            dialTimeoutMs: options?.dialTimeoutMs,
-        }));
+        // Drive the remaining `expiration` budget through an AbortController whose
+        // abort *reason* is the caller-facing `'RepoClient timeout'` Error, combined
+        // with any caller signal. processMessage forwards `signal` to both the dial
+        // and the response-read and calls `stream.abort(signal.reason)` on abort, so —
+        // unlike the old `Promise.race`, whose losing branch left the inner read
+        // running and leaked a pending read + stream on every timed-out RPC to a silent
+        // peer — the deadline now genuinely cancels the inner read while the caller
+        // still observes an error whose `.message === 'RepoClient timeout'`.
+        //
+        // Intentionally no `responseTimeoutMs`: the combined signal already bounds the
+        // read at `deadlineMs`. A second, shorter cap would surface as
+        // ResponseTimeoutError and mask the caller-facing 'RepoClient timeout' message.
+        const deadlineController = new AbortController();
+        const timer = setTimeout(() => deadlineController.abort(new Error('RepoClient timeout')), deadlineMs);
+        const combinedSignal = options?.signal
+            ? AbortSignal.any([options.signal, deadlineController.signal])
+            : deadlineController.signal;
+        let response;
+        try {
+            response = await super.processMessage(message, preferred, {
+                signal: combinedSignal,
+                correlationId,
+                dialTimeoutMs: options?.dialTimeoutMs,
+            });
+        }
+        finally {
+            clearTimeout(timer);
+        }
         if (response?.redirect?.peers?.length) {
             if (hop >= 2) {
                 throw new Error('Redirect loop detected in RepoClient (max hops reached)');
@@ -65,35 +82,46 @@ export class RepoClient extends ProtocolClient {
             if (next.id === currentIdStr) {
                 throw new Error('Redirect loop detected in RepoClient (same peer)');
             }
-            // cache hint
-            this.recordCoordinatorForOpsIfSupported(operations, nextId);
+            // cache hint — await so the recorded key bytes match what findCoordinator
+            // later looks up (blockIdToBytes is async); deterministic ordering also
+            // keeps the hint testable. The redirect retry below is async anyway.
+            await this.recordCoordinatorForOpsIfSupported(operations, nextId);
             // single-hop retry against target peer using repo protocol
             const nextClient = RepoClient.create(nextId, this.peerNetwork, this.protocolPrefix);
             return await nextClient.processRepoMessage(operations, options, hop + 1);
         }
         return response;
     }
-    extractKeyFromOperations(ops) {
+    async extractKeyFromOperations(ops) {
         const op = ops[0];
+        // The recorded key MUST be the sha256 digest produced by blockIdToBytes — the
+        // exact bytes findCoordinator/recordCoordinator key the coordinator cache on
+        // (NetworkTransactor passes blockIdToBytes(blockId)). Raw utf8 of the id would
+        // never match, so the hint would silently never be retrieved.
         if ('get' in op) {
             const id = op.get.blockIds[0];
-            return id ? new TextEncoder().encode(id) : undefined;
+            return id ? await blockIdToBytes(id) : undefined;
         }
         if ('pend' in op) {
-            const id = Object.keys(op.pend.transforms)[0];
-            return id ? new TextEncoder().encode(id) : undefined;
+            // Key on a real block id the pend touches, NOT a structural transforms field
+            // name ('inserts'/'updates'/'deletes'); see RepoService.deriveBlockKey.
+            const id = blockIdsForTransforms(op.pend.transforms)[0];
+            return id ? await blockIdToBytes(id) : undefined;
         }
         if ('commit' in op) {
-            return new TextEncoder().encode(op.commit.tailId);
+            // Anchor on blockIds[0] (where CoordinatorRepo.commit runs consensus +
+            // verifyResponsibility), NOT tailId — they differ for a non-tail batch.
+            const id = op.commit.blockIds[0];
+            return id ? await blockIdToBytes(id) : undefined;
         }
         if ('cancel' in op) {
             const id = op.cancel.actionRef.blockIds[0];
-            return id ? new TextEncoder().encode(id) : undefined;
+            return id ? await blockIdToBytes(id) : undefined;
         }
         return undefined;
     }
-    recordCoordinatorForOpsIfSupported(ops, peerId) {
-        const keyBytes = this.extractKeyFromOperations(ops);
+    async recordCoordinatorForOpsIfSupported(ops, peerId) {
+        const keyBytes = await this.extractKeyFromOperations(ops);
         const pn = this.peerNetwork;
         if (keyBytes != null && typeof pn?.recordCoordinator === 'function') {
             pn.recordCoordinator(keyBytes, peerId);

package/dist/src/repo/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/repo/client.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,OAAO,UAAW,SAAQ,cAAc;IAC2B;IAAxE,YAAoB,MAAc,EAAE,WAAyB,EAAW,cAAuB;QAC9F,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAD4C,mBAAc,GAAd,cAAc,CAAS;IAE/F,CAAC;IAED,mCAAmC;IAC5B,MAAM,CAAC,MAAM,CAAC,MAAc,EAAE,WAAyB,EAAE,cAAuB;QACtF,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAoB,EAAE,OAAuB;QACtD,OAAO,IAAI,CAAC,kBAAkB,CAC7B,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EACpB,OAAO,CACP,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAoB,EAAE,OAAuB;QACvD,OAAO,IAAI,CAAC,kBAAkB,CAC7B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACnB,OAAO,CACP,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAuB,EAAE,OAAuB;QAC5D,OAAO,IAAI,CAAC,kBAAkB,CAC7B,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,EAC3B,OAAO,CACP,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAsB,EAAE,OAAuB;QAC3D,OAAO,IAAI,CAAC,kBAAkB,CAC7B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EACrB,OAAO,CACP,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,UAAqC;QACjE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,IAAI,MAAM,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC1C,IAAI,QAAQ,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC9C,IAAI,QAAQ,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QACxD,OAAO,SAAS,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC/B,UAAqC,EACrC,OAAuB,EACvB,MAAc,CAAC;QAEf,MAAM,OAAO,GAAgB;YAC5B,UAAU;YACV,UAAU,EAAE,OAAO,CAAC,UAAU;SAC9B,CAAC;QACF,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAA;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QACjD,MAAM,WAAW,GAAG,KAAK,EAAK,EAAoB,EAAc,EAAE;YACjE,OAAO,MAAM,OAAO,CAAC,IAAI,CAAI;gBAC5B,EAAE,EAAE;gBACJ,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;aACpG,CAAC,CAAA;QACH,CAAC,CAAA;QACD,IAAI,QAAa,CAAA;QACjB,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,SAAS,CAAC,GAAG,aAAa,CAAA;QACpE,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAM,OAAO,EAAE,SAAS,EAAE;YAChF,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,aAAa;YACb,aAAa,EAAE,OAAO,EAAE,aAAa;SACrC,CAAC,CAAC,CAAA;QAEH,IAAI,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACvC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;YAC3E,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAA;YAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC1G,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACxC,IAAI,IAAI,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;YACpE,CAAC;YACD,aAAa;YACb,IAAI,CAAC,kCAAkC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YAC3D,2DAA2D;YAC3D,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;YACnF,OAAO,MAAM,UAAU,CAAC,kBAAkB,CAAI,UAAU,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,CAAC,CAAA;QAC5E,CAAC;QACD,OAAO,QAAa,CAAC;IACtB,CAAC;IAEO,wBAAwB,CAAC,GAA8B;QAC9D,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YACjB,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC9B,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtD,CAAC;QACD,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;YAClB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtD,CAAC;QACD,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;YACpB,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;YACpB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC3C,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtD,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAEO,kCAAkC,CAAC,GAA8B,EAAE,MAAc;QACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAA;QACnD,MAAM,EAAE,GAAQ,IAAI,CAAC,WAAkB,CAAA;QACvC,IAAI,QAAQ,IAAI,IAAI,IAAI,OAAO,EAAE,EAAE,iBAAiB,KAAK,UAAU,EAAE,CAAC;YACrE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QACvC,CAAC;IACF,CAAC;CAED"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/repo/client.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,OAAO,UAAW,SAAQ,cAAc;IAC2B;IAAxE,YAAoB,MAAc,EAAE,WAAyB,EAAW,cAAuB;QAC9F,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAD4C,mBAAc,GAAd,cAAc,CAAS;IAE/F,CAAC;IAED,mCAAmC;IAC5B,MAAM,CAAC,MAAM,CAAC,MAAc,EAAE,WAAyB,EAAE,cAAuB;QACtF,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAoB,EAAE,OAAuB;QACtD,OAAO,IAAI,CAAC,kBAAkB,CAC7B,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EACpB,OAAO,CACP,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAoB,EAAE,OAAuB;QACvD,OAAO,IAAI,CAAC,kBAAkB,CAC7B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACnB,OAAO,CACP,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAuB,EAAE,OAAuB;QAC5D,OAAO,IAAI,CAAC,kBAAkB,CAC7B,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,EAC3B,OAAO,CACP,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAsB,EAAE,OAAuB;QAC3D,OAAO,IAAI,CAAC,kBAAkB,CAC7B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EACrB,OAAO,CACP,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,UAAqC;QACjE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,IAAI,MAAM,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC1C,IAAI,QAAQ,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC9C,IAAI,QAAQ,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QACxD,OAAO,SAAS,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC/B,UAAqC,EACrC,OAAuB,EACvB,MAAc,CAAC;QAEf,MAAM,OAAO,GAAgB;YAC5B,UAAU;YACV,UAAU,EAAE,OAAO,CAAC,UAAU;SAC9B,CAAC;QACF,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAA;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QACrD,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,SAAS,CAAC,GAAG,aAAa,CAAA;QAEpE,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,+EAA+E;QAC/E,yEAAyE;QACzE,gFAAgF;QAChF,4EAA4E;QAC5E,qEAAqE;QACrE,EAAE;QACF,+EAA+E;QAC/E,+DAA+D;QAC/D,gFAAgF;QAChF,MAAM,kBAAkB,GAAG,IAAI,eAAe,EAAE,CAAA;QAChD,MAAM,KAAK,GAAG,UAAU,CACvB,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAC/D,UAAU,CACV,CAAA;QACD,MAAM,cAAc,GAAG,OAAO,EAAE,MAAM;YACrC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC9D,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAA;QAC5B,IAAI,QAAa,CAAA;QACjB,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CAAM,OAAO,EAAE,SAAS,EAAE;gBAC9D,MAAM,EAAE,cAAc;gBACtB,aAAa;gBACb,aAAa,EAAE,OAAO,EAAE,aAAa;aACrC,CAAC,CAAA;QACH,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;QAED,IAAI,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACvC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;YAC3E,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAA;YAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC1G,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACxC,IAAI,IAAI,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;YACpE,CAAC;YACD,0EAA0E;YAC1E,wEAAwE;YACxE,qEAAqE;YACrE,MAAM,IAAI,CAAC,kCAAkC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACjE,2DAA2D;YAC3D,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;YACnF,OAAO,MAAM,UAAU,CAAC,kBAAkB,CAAI,UAAU,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,CAAC,CAAA;QAC5E,CAAC;QACD,OAAO,QAAa,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,GAA8B;QACpE,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,8EAA8E;QAC9E,6EAA6E;QAC7E,+EAA+E;QAC/E,8DAA8D;QAC9D,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YACjB,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC9B,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;YAClB,6EAA6E;YAC7E,wEAAwE;YACxE,MAAM,EAAE,GAAG,qBAAqB,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,CAAC;QACD,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;YACpB,uEAAuE;YACvE,wEAAwE;YACxE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACjC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,CAAC;QACD,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;YACpB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC3C,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,kCAAkC,CAAC,GAA8B,EAAE,MAAc;QAC9F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAA;QACzD,MAAM,EAAE,GAAQ,IAAI,CAAC,WAAkB,CAAA;QACvC,IAAI,QAAQ,IAAI,IAAI,IAAI,OAAO,EAAE,EAAE,iBAAiB,KAAK,UAAU,EAAE,CAAC;YACrE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QACvC,CAAC;IACF,CAAC;CAED"}

package/dist/src/repo/service.d.ts

@@ -1,4 +1,4 @@
-import type { Startable, Logger, StreamHandler, PeerId } from '@libp2p/interface';
+import type { Startable, Logger, StreamHandler, PeerId, Libp2p } from '@libp2p/interface';
 import type { IRepo, RepoMessage } from '@optimystic/db-core';
 import { type RedirectPayload } from './redirect.js';
 interface BaseComponents {
@@ -18,6 +18,13 @@ export type RepoServiceComponents = BaseComponents & {
     networkManager?: NetworkManagerLike;
     peerId?: PeerId;
     getConnectionAddrs?: (peerId: PeerId) => string[];
+    /**
+     * Optional libp2p node. The production wiring injects the node post-construction
+     * via {@link RepoService.setLibp2p} (the `components.libp2p` proxy does not
+     * reliably resolve from inside a service at request time); this field is a
+     * best-effort fallback resolver used only when no node has been injected.
+     */
+    libp2p?: Libp2p;
 };
 export type RepoServiceInit = {
     protocol?: string;
@@ -50,8 +57,23 @@ export declare class RepoService implements Startable {
     private running;
     /** Responsibility K - how many peers are responsible for a key (for redirect decisions) */
     private readonly responsibilityK;
+    /**
+     * The libp2p node, injected post-construction by the node wiring (see
+     * libp2p-node-base.ts, mirroring how `networkManager`/`fret` receive theirs).
+     * The libp2p `components.libp2p` proxy does NOT reliably resolve from inside a
+     * service at request time, so the redirect path resolves the network manager,
+     * self identity, and connection addrs through this explicitly-set reference.
+     */
+    private libp2pRef;
     constructor(components: RepoServiceComponents, init?: RepoServiceInit);
     readonly [Symbol.toStringTag] = "@libp2p/repo-service";
+    /**
+     * Inject the running libp2p node. Called once post-construction by the node
+     * wiring so the redirect path can resolve the network manager / self id / addrs.
+     */
+    setLibp2p(libp2p: Libp2p): void;
+    /** Resolve the libp2p node: the injected ref first, then the (best-effort) components proxy. */
+    private getLibp2p;
     /**
      * Start the service
      */
@@ -63,6 +85,29 @@ export declare class RepoService implements Startable {
     private getNetworkManager;
     private getSelfId;
     private getPeerAddrs;
+    /**
+     * Derive the redirect routing key and op name for a single operation.
+     *
+     * The key MUST be the block the corresponding handler actually coordinates and
+     * verifies responsibility on, so redirect routing stays consistent with where the
+     * op is executed:
+     *   - get    → blockIds[0]
+     *   - pend   → blockIdsForTransforms(transforms)[0]
+     *   - cancel → actionRef.blockIds[0]
+     *   - commit → blockIds[0]  (CoordinatorRepo.commit anchors consensus on
+     *     getClusterSize(blockIds[0]) / executeClusterTransaction(blockIds[0]) and guards
+     *     with verifyResponsibility(blockIds) — NOT tailId; for a per-block commit batch
+     *     whose blockIds[0] !== tailId, keying on tailId redirected the commit to the
+     *     collection tail's cluster, which then fails verifyResponsibility for the non-tail block.)
+     *
+     * Returns blockKey === undefined when the op carries no routable key (e.g. a cancel
+     * with an empty blockIds list), in which case the caller handles it locally without a
+     * redirect check.
+     */
+    deriveBlockKey(operation: RepoMessage['operations'][number]): {
+        blockKey: string | undefined;
+        opName: string;
+    };
     /**
      * Check if this node should redirect the request for a given key.
      * Returns a RedirectPayload if not responsible, null if should handle locally.

package/dist/src/repo/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/repo/service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAsB,aAAa,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AACrG,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAG7D,OAAO,EAAe,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA;AAOjE,UAAU,cAAc;IACvB,MAAM,EAAE;QAAE,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;KAAE,CAAC;IACnD,SAAS,EAAE;QACV,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;QACjF,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;KAC7C,CAAA;CACD;AAED,MAAM,WAAW,kBAAkB;IAClC,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;CAC9C;AAED,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG;IACpD,IAAI,EAAE,KAAK,CAAA;IACX,cAAc,CAAC,EAAE,kBAAkB,CAAA;IACnC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,EAAE,CAAA;CACjD,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB,CAAA;AAED,wBAAgB,WAAW,CAAC,IAAI,GAAE,eAAoB,GAAG,CAAC,UAAU,EAAE,qBAAqB,KAAK,WAAW,CAE1G;AAED;;GAEG;AACH,qBAAa,WAAY,YAAW,SAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAQ;IAC1C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAQ;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAO;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,OAAO,CAAS;IACxB,2FAA2F;IAC3F,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;gBAE5B,UAAU,EAAE,qBAAqB,EAAE,IAAI,GAAE,eAAoB;IAYzE,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,0BAAyB;IAEtD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAa5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,YAAY;IAapB;;;;OAIG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA2B5G;;OAEG;IACH,OAAO,CAAC,oBAAoB;CA0E5B"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/repo/service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAsB,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC7G,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAG7D,OAAO,EAAe,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA;AAOjE,UAAU,cAAc;IACvB,MAAM,EAAE;QAAE,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;KAAE,CAAC;IACnD,SAAS,EAAE;QACV,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;QACjF,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;KAC7C,CAAA;CACD;AAED,MAAM,WAAW,kBAAkB;IAClC,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;CAC9C;AAED,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG;IACpD,IAAI,EAAE,KAAK,CAAA;IACX,cAAc,CAAC,EAAE,kBAAkB,CAAA;IACnC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,EAAE,CAAA;IACjD;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB,CAAA;AAED,wBAAgB,WAAW,CAAC,IAAI,GAAE,eAAoB,GAAG,CAAC,UAAU,EAAE,qBAAqB,KAAK,WAAW,CAE1G;AAED;;GAEG;AACH,qBAAa,WAAY,YAAW,SAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAQ;IAC1C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAQ;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAO;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,OAAO,CAAS;IACxB,2FAA2F;IAC3F,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,CAAoB;gBAEzB,UAAU,EAAE,qBAAqB,EAAE,IAAI,GAAE,eAAoB;IAYzE,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,0BAAyB;IAEtD;;;OAGG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B,gGAAgG;IAChG,OAAO,CAAC,SAAS;IAIjB;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAa5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,YAAY;IAapB;;;;;;;;;;;;;;;;;;OAkBG;IACH,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,GAAG;QAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAgB9G;;;;OAIG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAiC5G;;OAEG;IACH,OAAO,CAAC,oBAAoB;CAqD5B"}