@optimystic/db-p2p 0.24.1 → 0.25.0

package/dist/src/storage/i-block-storage.d.ts

@@ -1,43 +1,84 @@
-import type { IBlock, Transform, ActionId, ActionRev } from "@optimystic/db-core";
-/** Interface for block-level storage operations */
+import type { BlockId, IBlock, Transform, ActionId, ActionRev } from "@optimystic/db-core";
+import type { BlockCommitProof } from "../cluster/commit-proof.js";
+import type { BlockWriteLatch } from "./block-latch.js";
+/**
+ * Thrown by {@link IBlockStorage.getBlock} when the block has metadata here but the target revision
+ * lies outside the locally held revision ranges — this node holds no local records that can serve
+ * it. Not a fault: it is the signal a caller that is allowed to heal (only `StorageRepo.get`, under
+ * the block's write latch) turns into a {@link IBlockStorage.restoreRevision}; every other caller
+ * treats it like any other unreadable-base condition.
+ *
+ * It lives beside the interface rather than beside `BlockStorage` because it is part of the
+ * `getBlock` contract: an alternate `IBlockStorage` implementation must be able to throw it, and
+ * `StorageRepo` must be able to catch it, without either depending on the concrete implementation.
+ */
+export declare class RevisionNotCoveredError extends Error {
+    readonly blockId: BlockId;
+    readonly rev: number;
+    constructor(blockId: BlockId, rev: number);
+}
+/**
+ * Interface for block-level storage operations.
+ *
+ * **One block, one write lock.** Every method that writes — metadata, revision records, action
+ * transforms, pending records, materializations, proofs — takes a {@link BlockWriteLatch} token as
+ * its LAST parameter. The token is proof the caller holds this block's write latch
+ * (`blockWriteLatchKey(blockId)`, see `block-latch.ts`), which is the only thing that keeps two
+ * writers' read-modify-writes of the metadata blob from silently undoing each other. Only
+ * `acquireBlockWriteLatch` / `withBlockWriteLatch` can mint a token, and an implementation must
+ * reject a token minted for a different block.
+ */
 export interface IBlockStorage {
     /** Gets the latest revision information for this block */
     getLatest(): Promise<ActionRev | undefined>;
     /**
-     * Gets a materialized block at the given revision.
-     * Returns undefined when the block has no materialized content yet — either
-     * no metadata exists, or metadata exists (seeded by a pending transaction)
-     * but no revision has been committed. Throws only when a specific `rev` was
-     * requested but cannot be located.
+     * Gets a materialized block at the given revision, from LOCAL records only — this never fetches
+     * from a peer. Returns `undefined` when this node has never seen the block (no metadata) or when
+     * it is pending-only (metadata seeded by a pending transaction, nothing committed) and no `rev`
+     * was named. Throws {@link RevisionNotCoveredError} when the target revision (`rev`, or `latest.rev`)
+     * lies outside `meta.ranges` — the caller decides whether to heal that gap with
+     * {@link restoreRevision} under the block's write latch (`StorageRepo.get` does; the commit path
+     * deliberately does not). Throws a plain `Error` when the revision is covered but cannot be
+     * materialized from the records held (truncated history — genuine corruption).
      */
     getBlock(rev?: number): Promise<{
         block: IBlock;
         actionRev: ActionRev;
     } | undefined>;
+    /**
+     * Fill a gap in local revision history by fetching `rev` from a peer (the restore wire) and
+     * recording the vetted coverage. No-op when `rev` is already covered. Throws when the block has
+     * no metadata here (a never-seen block is not restored at this layer — see the note in
+     * `BlockStorage.getBlock`) or when no peer could supply an acceptable archive.
+     */
+    restoreRevision(rev: number, latch: BlockWriteLatch): Promise<void>;
     /** Gets an action by ID */
     getTransaction(actionId: ActionId): Promise<Transform | undefined>;
+    /** The commit proof stored for a revision, if one was retained (see IRawStorage.getBlockProof). */
+    getBlockProof(rev: number): Promise<BlockCommitProof | undefined>;
+    /** Persists the commit proof for a revision (see IRawStorage.saveBlockProof). */
+    saveBlockProof(rev: number, proof: BlockCommitProof, latch: BlockWriteLatch): Promise<void>;
     /** Gets a pending action by ID */
     getPendingTransaction(actionId: ActionId): Promise<Transform | undefined>;
     /** Lists all pending action IDs */
     listPendingTransactions(): AsyncIterable<ActionId>;
-    /** Saves a pending action */
-    savePendingTransaction(actionId: ActionId, transform: Transform): Promise<void>;
+    /** Saves a pending action (seeding this block's metadata when it has none). */
+    savePendingTransaction(actionId: ActionId, transform: Transform, latch: BlockWriteLatch): Promise<void>;
     /** Deletes a pending action */
-    deletePendingTransaction(actionId: ActionId): Promise<void>;
+    deletePendingTransaction(actionId: ActionId, latch: BlockWriteLatch): Promise<void>;
     /** Lists revisions in ascending or descending order between startRev and endRev (inclusive) */
     listRevisions(startRev: number, endRev: number): AsyncIterable<ActionRev>;
     /** Saves a materialized block */
-    saveMaterializedBlock(actionId: ActionId, block: IBlock | undefined): Promise<void>;
+    saveMaterializedBlock(actionId: ActionId, block: IBlock | undefined, latch: BlockWriteLatch): Promise<void>;
     /**
      * Delete the materialized copy at `prior` if it is now redundant under the checkpoint
      * retention policy (not the tip, not its range floor, not a checkpoint rev). The forward
      * transform for `prior.rev` is retained, so the rev stays reconstructible by replay.
      * No-op if `prior.rev` must be retained or has no materialization (e.g. a tombstone rev).
-     * Must be called under the per-block commit latch (serialized against concurrent commit).
      */
-    pruneSupersededMaterialization(prior: ActionRev): Promise<void>;
+    pruneSupersededMaterialization(prior: ActionRev, latch: BlockWriteLatch): Promise<void>;
     /** Saves a revision */
-    saveRevision(rev: number, actionId: ActionId): Promise<void>;
+    saveRevision(rev: number, actionId: ActionId, latch: BlockWriteLatch): Promise<void>;
     /**
      * Promotes a pending action to committed, MOVING the record from the pending namespace to the
      * committed one in a single atomic step.
@@ -50,9 +91,9 @@ export interface IBlockStorage {
      * and is reported as a phantom conflicting action by `StorageRepo.pend` on every later write to
      * the block.
      */
-    promotePendingTransaction(actionId: ActionId): Promise<void>;
+    promotePendingTransaction(actionId: ActionId, latch: BlockWriteLatch): Promise<void>;
     /** Sets the latest revision information */
-    setLatest(latest: ActionRev): Promise<void>;
+    setLatest(latest: ActionRev, latch: BlockWriteLatch): Promise<void>;
     /**
      * Persist a replica of a block received out-of-band (churn re-replication).
      *
@@ -70,8 +111,18 @@ export interface IBlockStorage {
      * No-op (still durable) when an equal-or-newer revision is already present: `latest`
      * is never downgraded. Idempotent for a fixed `(rev, actionId)`. Returns the
      * effective latest `ActionRev`.
+     *
+     * `proof` is persisted for `source.rev` and MUST already be verified by the caller against
+     * these exact bytes (`verifyBlockCommitProofContent` — the digest check is what binds a proof
+     * to the block content). An unverified proof passed here would be re-served onward as evidence
+     * this node never checked. The monotonic no-op persists nothing, proof included — a proof for an
+     * already-held revision is back-filled one layer up, by `StorageRepo.saveReplicatedBlock`, which
+     * first checks the declared digest against LOCAL content (these bytes may not be the held bytes).
+     *
+     * `source` and `proof` are positional-but-optional (pass `undefined` when absent) so the latch
+     * token can stay in the last position like every other writer.
      */
-    saveReplica(block: IBlock, source?: ActionRev): Promise<ActionRev>;
+    saveReplica(block: IBlock, source: ActionRev | undefined, proof: BlockCommitProof | undefined, latch: BlockWriteLatch): Promise<ActionRev>;
     /**
      * Writes a forward TOMBSTONE revision that reverses a block creation: persists `rev → actionId`,
      * a `{ delete: true }` transform, and NO materialized block, then merges `[rev, rev+1]` into
@@ -85,7 +136,7 @@ export interface IBlockStorage {
      * Idempotent for a fixed `(rev, actionId)`; never downgrades `latest` (a no-op — still durable —
      * when an equal-or-newer revision is already present). Returns the effective latest `ActionRev`.
      */
-    saveDeletion(source: ActionRev): Promise<ActionRev>;
+    saveDeletion(source: ActionRev, latch: BlockWriteLatch): Promise<ActionRev>;
     /**
      * Reconciles `metadata.latest` with the highest contiguous fully-promoted revision in
      * the revisions table. Intended for post-crash recovery of the Crash-D3 gap, where
@@ -99,7 +150,7 @@ export interface IBlockStorage {
      *
      * Idempotent and monotonic (latest only advances forward).
      */
-    recover(): Promise<{
+    recover(latch: BlockWriteLatch): Promise<{
         reconciled: boolean;
         latest?: ActionRev;
     }>;

package/dist/src/storage/i-block-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"i-block-storage.d.ts","sourceRoot":"","sources":["../../../src/storage/i-block-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAElF,mDAAmD;AACnD,MAAM,WAAW,aAAa;IAC1B,0DAA0D;IAC1D,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IAE5C;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IAErF,2BAA2B;IAC3B,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IAEnE,kCAAkC;IAClC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IAE1E,mCAAmC;IACnC,uBAAuB,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEnD,6BAA6B;IAC7B,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhF,+BAA+B;IAC/B,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5D,+FAA+F;IAC/F,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAE1E,iCAAiC;IACjC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpF;;;;;;OAMG;IACH,8BAA8B,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhE,uBAAuB;IACvB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7D;;;;;;;;;;;OAWG;IACH,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7D,2CAA2C;IAC3C,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5C;;;;;;;;;;;;;;;;;OAiBG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEnE;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEpD;;;;;;;;;;;;OAYG;IACH,OAAO,IAAI,OAAO,CAAC;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAA;KAAE,CAAC,CAAC;CACnE"}
+{"version":3,"file":"i-block-storage.d.ts","sourceRoot":"","sources":["../../../src/storage/i-block-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD;;;;;;;;;;GAUG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM;gBAAtC,OAAO,EAAE,OAAO,EAAW,GAAG,EAAE,MAAM;CAI3D;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC1B,0DAA0D;IAC1D,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IAE5C;;;;;;;;;OASG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IAErF;;;;;OAKG;IACH,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpE,2BAA2B;IAC3B,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IAEnE,mGAAmG;IACnG,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAElE,iFAAiF;IACjF,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5F,kCAAkC;IAClC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IAE1E,mCAAmC;IACnC,uBAAuB,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEnD,+EAA+E;IAC/E,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAExG,+BAA+B;IAC/B,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpF,+FAA+F;IAC/F,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAE1E,iCAAiC;IACjC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5G;;;;;OAKG;IACH,8BAA8B,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAExF,uBAAuB;IACvB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErF;;;;;;;;;;;OAWG;IACH,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErF,2CAA2C;IAC3C,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpE;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,SAAS,EAAE,KAAK,EAAE,gBAAgB,GAAG,SAAS,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAE3I;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAE5E;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAA;KAAE,CAAC,CAAC;CACzF"}

package/dist/src/storage/i-block-storage.js

@@ -1,2 +1,22 @@
-export {};
+/**
+ * Thrown by {@link IBlockStorage.getBlock} when the block has metadata here but the target revision
+ * lies outside the locally held revision ranges — this node holds no local records that can serve
+ * it. Not a fault: it is the signal a caller that is allowed to heal (only `StorageRepo.get`, under
+ * the block's write latch) turns into a {@link IBlockStorage.restoreRevision}; every other caller
+ * treats it like any other unreadable-base condition.
+ *
+ * It lives beside the interface rather than beside `BlockStorage` because it is part of the
+ * `getBlock` contract: an alternate `IBlockStorage` implementation must be able to throw it, and
+ * `StorageRepo` must be able to catch it, without either depending on the concrete implementation.
+ */
+export class RevisionNotCoveredError extends Error {
+    blockId;
+    rev;
+    constructor(blockId, rev) {
+        super(`Block ${blockId} revision ${rev} is not covered by local records`);
+        this.blockId = blockId;
+        this.rev = rev;
+        this.name = 'RevisionNotCoveredError';
+    }
+}
 //# sourceMappingURL=i-block-storage.js.map

package/dist/src/storage/i-block-storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"i-block-storage.js","sourceRoot":"","sources":["../../../src/storage/i-block-storage.ts"],"names":[],"mappings":""}
+{"version":3,"file":"i-block-storage.js","sourceRoot":"","sources":["../../../src/storage/i-block-storage.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;GAUG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC5B;IAA2B;IAAhD,YAAqB,OAAgB,EAAW,GAAW;QAC1D,KAAK,CAAC,SAAS,OAAO,aAAa,GAAG,kCAAkC,CAAC,CAAC;QADtD,YAAO,GAAP,OAAO,CAAS;QAAW,QAAG,GAAH,GAAG,CAAQ;QAE1D,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACvC,CAAC;CACD"}

package/dist/src/storage/i-raw-storage.d.ts

@@ -1,5 +1,7 @@
 import type { BlockId, ActionId, ActionRev, Transform, IBlock } from "@optimystic/db-core";
+import type { BlockCommitProof } from "../cluster/commit-proof.js";
 import type { BlockMetadata } from "./struct.js";
+import type { StoreIdentity } from "./store-identity.js";
 export interface IRawStorage {
     getMetadata(blockId: BlockId): Promise<BlockMetadata | undefined>;
     saveMetadata(blockId: BlockId, metadata: BlockMetadata): Promise<void>;
@@ -13,9 +15,45 @@ export interface IRawStorage {
     listPendingTransactions(blockId: BlockId): AsyncIterable<ActionId>;
     getTransaction(blockId: BlockId, actionId: ActionId): Promise<Transform | undefined>;
     saveTransaction(blockId: BlockId, actionId: ActionId, transform: Transform): Promise<void>;
+    /**
+     * The commit proof stored for a revision, if one was retained. Keyed by revision: the proof lives
+     * and dies with the REVISION record, not the materialization, so the checkpoint sweep
+     * (`pruneSupersededMaterialization`) never touches it — that is what lets it outlive the
+     * 60-second in-memory commit-cert TTL. Whatever deletes a revision record must delete its proof;
+     * no such site exists today (`RawStoreDriver` has no revision delete at all — invalidations write
+     * compensating FORWARD revisions), so this is a contract note, not a wired path.
+     */
+    getBlockProof(blockId: BlockId, rev: number): Promise<BlockCommitProof | undefined>;
+    saveBlockProof(blockId: BlockId, rev: number, proof: BlockCommitProof): Promise<void>;
     getMaterializedBlock(blockId: BlockId, actionId: ActionId): Promise<IBlock | undefined>;
     saveMaterializedBlock(blockId: BlockId, actionId: ActionId, block?: IBlock): Promise<void>;
     promotePendingTransaction(blockId: BlockId, actionId: ActionId): Promise<void>;
+    /**
+     * A stable, process-scoped string naming what this storage is ultimately backed by (a
+     * resolved directory, an open database handle). Wrappers pass it through from whatever they
+     * wrap, so a cache and the storage it fronts name the same store — e.g.
+     * `new CachedRawStorage(new FileRawStorage(dir)).getStoreIdentity()` is `'file:<resolved dir>'`.
+     *
+     * Contract — note it is ONE-DIRECTIONAL; read both halves before consuming it:
+     * - Two storages over DIFFERENT locations MUST NOT return equal strings. So **equality
+     *   proves sameness**, and a consumer may merge on it. (The fs backend documents one exotic
+     *   Windows exception at its own site.)
+     * - Two storages over the SAME location SHOULD return equal strings, but this is
+     *   best-effort and several backends knowingly under-approximate: two handles opened over
+     *   one database, or two spellings of one directory that cannot be collapsed synchronously,
+     *   read as two identities. So **inequality proves nothing** — never treat it as evidence
+     *   that two storages are distinct stores. Each backend's `NOTE:` states its own gaps.
+     * - Every string is scheme-prefixed so backends cannot collide: `file:`, `sqlite-handle:`,
+     *   `idb-handle:`, `leveldb-handle:`. Compared for equality only — never parsed.
+     * - Stable for the storage object's whole life; fixed at construction.
+     * - OPTIONAL BY DESIGN. A backend that cannot honour the contract omits the method entirely
+     *   and callers fall back to per-object behavior. Never install a stub that returns
+     *   `undefined` — feature-detection (`typeof storage.getStoreIdentity === 'function'`) must
+     *   see the backend's true capability, the same trap `KvRawStorage`'s class doc calls out
+     *   for `listBlockIds`.
+     * - It identifies the STORE, not its contents.
+     */
+    getStoreIdentity?(): StoreIdentity;
     /**
      * Approximate bytes currently stored by this backend.
      *

package/dist/src/storage/i-raw-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"i-raw-storage.d.ts","sourceRoot":"","sources":["../../../src/storage/i-raw-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,WAAW,WAAW;IAE3B,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAClE,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGvE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;IAC1E,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,4HAA4H;IAC5H,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAG5F,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IAC5F,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClG,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEnE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IACrF,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAG3F,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxF,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAG3F,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/E;;;;;;;OAOG;IACH,uBAAuB,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAE5C;;;;;;;;;;;;;;;;;;OAkBG;IACH,YAAY,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;CACxC"}
+{"version":3,"file":"i-raw-storage.d.ts","sourceRoot":"","sources":["../../../src/storage/i-raw-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,WAAW,WAAW;IAE3B,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAClE,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGvE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;IAC1E,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,4HAA4H;IAC5H,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAG5F,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IAC5F,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClG,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEnE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IACrF,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3F;;;;;;;OAOG;IACH,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACpF,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGtF,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxF,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAG3F,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/E;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,gBAAgB,CAAC,IAAI,aAAa,CAAC;IAEnC;;;;;;;OAOG;IACH,uBAAuB,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAE5C;;;;;;;;;;;;;;;;;;OAkBG;IACH,YAAY,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;CACxC"}

package/dist/src/storage/kv-raw-storage.d.ts

@@ -1,20 +1,21 @@
 import type { BlockId, ActionId, ActionRev, Transform, IBlock } from "@optimystic/db-core";
+import type { BlockCommitProof } from "../cluster/commit-proof.js";
 import type { BlockMetadata } from "./struct.js";
 import type { IRawStorage } from "./i-raw-storage.js";
 import type { RawStoreDriver } from "./raw-store-driver.js";
+import type { StoreIdentity } from "./store-identity.js";
 /**
  * Shared ordered-KV storage kernel. Implements the full {@link IRawStorage}
  * surface over a {@link RawStoreDriver}, owning all value (de)serialization and
- * call orchestration so each backend only has to expose its five logical stores
+ * call orchestration so each backend only has to expose its six logical stores
  * as bytes-valued maps over its native mechanism.
  *
  * The genuinely-shared logic lives ABOVE the storage primitive: the JSON/string
- * codec for the four value types, `listRevisions`' lo/hi/reverse bound
- * computation, `saveMaterializedBlock`'s put-or-delete branch, and the
- * passthroughs. Key layout / storage topology stays in the driver, because the
- * backends do NOT share one — LevelDB is a single ordered byte keyspace, SQLite
- * five relational tables, IndexedDB five object stores, the filesystem a
- * directory tree.
+ * codec for the value types, `listRevisions`' lo/hi/reverse bound computation,
+ * `saveMaterializedBlock`'s put-or-delete branch, and the passthroughs. Key
+ * layout / storage topology stays in the driver, because the backends do NOT
+ * share one — LevelDB is a single ordered byte keyspace, SQLite six relational
+ * tables, IndexedDB six object stores, the filesystem a directory tree.
  */
 export declare class KvRawStorage implements IRawStorage {
     private readonly driver;
@@ -22,10 +23,13 @@ export declare class KvRawStorage implements IRawStorage {
      * Optional passthroughs are wired in the constructor ONLY when the driver
      * provides them, so a `StorageMonitor` / owned-block seed that feature-detects
      * (`typeof storage.listBlockIds === 'function'`) sees the driver's true
-     * capability instead of a stub that silently reports 0 / no seed.
+     * capability instead of a stub that silently reports 0 / no seed. The same rule
+     * governs `getStoreIdentity`: a stub returning `undefined` would make every store
+     * look identity-less to consumers that dedupe on it.
      */
     listBlockIds?: () => AsyncIterable<BlockId>;
     getApproximateBytesUsed?: () => Promise<number>;
+    getStoreIdentity?: () => StoreIdentity;
     constructor(driver: RawStoreDriver);
     getMetadata(blockId: BlockId): Promise<BlockMetadata | undefined>;
     saveMetadata(blockId: BlockId, metadata: BlockMetadata): Promise<void>;
@@ -38,6 +42,8 @@ export declare class KvRawStorage implements IRawStorage {
     listPendingTransactions(blockId: BlockId): AsyncIterable<ActionId>;
     getTransaction(blockId: BlockId, actionId: ActionId): Promise<Transform | undefined>;
     saveTransaction(blockId: BlockId, actionId: ActionId, transform: Transform): Promise<void>;
+    getBlockProof(blockId: BlockId, rev: number): Promise<BlockCommitProof | undefined>;
+    saveBlockProof(blockId: BlockId, rev: number, proof: BlockCommitProof): Promise<void>;
     getMaterializedBlock(blockId: BlockId, actionId: ActionId): Promise<IBlock | undefined>;
     saveMaterializedBlock(blockId: BlockId, actionId: ActionId, block?: IBlock): Promise<void>;
     promotePendingTransaction(blockId: BlockId, actionId: ActionId): Promise<void>;

package/dist/src/storage/kv-raw-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kv-raw-storage.d.ts","sourceRoot":"","sources":["../../../src/storage/kv-raw-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D;;;;;;;;;;;;;GAaG;AACH,qBAAa,YAAa,YAAW,WAAW;IAUnC,OAAO,CAAC,QAAQ,CAAC,MAAM;IATnC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5C,uBAAuB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;gBAEnB,MAAM,EAAE,cAAc;IAW7C,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAejE,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;IAKzE,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7E,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC;IAc5F,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAK3F,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjG,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5E,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC;IAMnE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAKpF,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAM1F,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAKvF,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW1F,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAGpF"}
+{"version":3,"file":"kv-raw-storage.d.ts","sourceRoot":"","sources":["../../../src/storage/kv-raw-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD;;;;;;;;;;;;GAYG;AACH,qBAAa,YAAa,YAAW,WAAW;IAanC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAZnC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5C,uBAAuB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,gBAAgB,CAAC,EAAE,MAAM,aAAa,CAAC;gBAEV,MAAM,EAAE,cAAc;IAc7C,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAejE,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;IAKzE,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7E,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC;IAc5F,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAK3F,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjG,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5E,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC;IAMnE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAKpF,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAa1F,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAKnF,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMrF,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAKvF,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW1F,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAGpF"}

package/dist/src/storage/kv-raw-storage.js

@@ -2,16 +2,15 @@ import { encodeJson, decodeJson, encodeActionId, decodeActionId } from "./raw-st
 /**
  * Shared ordered-KV storage kernel. Implements the full {@link IRawStorage}
  * surface over a {@link RawStoreDriver}, owning all value (de)serialization and
- * call orchestration so each backend only has to expose its five logical stores
+ * call orchestration so each backend only has to expose its six logical stores
  * as bytes-valued maps over its native mechanism.
  *
  * The genuinely-shared logic lives ABOVE the storage primitive: the JSON/string
- * codec for the four value types, `listRevisions`' lo/hi/reverse bound
- * computation, `saveMaterializedBlock`'s put-or-delete branch, and the
- * passthroughs. Key layout / storage topology stays in the driver, because the
- * backends do NOT share one — LevelDB is a single ordered byte keyspace, SQLite
- * five relational tables, IndexedDB five object stores, the filesystem a
- * directory tree.
+ * codec for the value types, `listRevisions`' lo/hi/reverse bound computation,
+ * `saveMaterializedBlock`'s put-or-delete branch, and the passthroughs. Key
+ * layout / storage topology stays in the driver, because the backends do NOT
+ * share one — LevelDB is a single ordered byte keyspace, SQLite six relational
+ * tables, IndexedDB six object stores, the filesystem a directory tree.
  */
 export class KvRawStorage {
     driver;
@@ -19,12 +18,18 @@ export class KvRawStorage {
      * Optional passthroughs are wired in the constructor ONLY when the driver
      * provides them, so a `StorageMonitor` / owned-block seed that feature-detects
      * (`typeof storage.listBlockIds === 'function'`) sees the driver's true
-     * capability instead of a stub that silently reports 0 / no seed.
+     * capability instead of a stub that silently reports 0 / no seed. The same rule
+     * governs `getStoreIdentity`: a stub returning `undefined` would make every store
+     * look identity-less to consumers that dedupe on it.
      */
     listBlockIds;
     getApproximateBytesUsed;
+    getStoreIdentity;
     constructor(driver) {
         this.driver = driver;
+        if (driver.storeIdentity) {
+            this.getStoreIdentity = () => driver.storeIdentity();
+        }
         if (driver.listBlockIds) {
             this.listBlockIds = () => driver.listBlockIds();
         }
@@ -39,7 +44,7 @@ export class KvRawStorage {
     }
     // NOTE: every value write funnels through the driver put/delete calls in the
     // methods below (saveMetadata / saveRevision / save*Transaction /
-    // saveMaterializedBlock). This is the single choke point where an incremental
+    // saveBlockProof / saveMaterializedBlock). This is the single choke point where an incremental
     // byte counter would hook in, replacing the per-driver full-scan
     // getApproximateBytesUsed. The chosen capacity-estimate mechanism is instead a
     // short-TTL cache over the full scan in StorageMonitor (see storage-monitor.ts
@@ -91,6 +96,21 @@ export class KvRawStorage {
     async saveTransaction(blockId, actionId, transform) {
         await this.driver.putTransaction(blockId, actionId, encodeJson(transform));
     }
+    // --- Commit proofs (their OWN (blockId, rev)-keyed store — see RawStoreDriver.getProof) ---
+    //
+    // Proofs deliberately do NOT share the transactions keyspace. Action ids are
+    // chosen by whoever originates a write and are never re-derived or format-checked
+    // by the storing node, so no reserved action-id prefix can be relied on: a client
+    // pending an action literally named `~proof:5`, or a peer's restore archive naming
+    // one, used to land on the same key as revision 5's proof and silently overwrite it
+    // (or be overwritten by it). Separate stores make that collision unrepresentable.
+    async getBlockProof(blockId, rev) {
+        const bytes = await this.driver.getProof(blockId, rev);
+        return bytes === undefined ? undefined : decodeJson(bytes);
+    }
+    async saveBlockProof(blockId, rev, proof) {
+        await this.driver.putProof(blockId, rev, encodeJson(proof));
+    }
     // --- Materialized blocks ---
     async getMaterializedBlock(blockId, actionId) {
         const bytes = await this.driver.getMaterialized(blockId, actionId);

package/dist/src/storage/kv-raw-storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"kv-raw-storage.js","sourceRoot":"","sources":["../../../src/storage/kv-raw-storage.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE9F;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,YAAY;IAUK;IAT7B;;;;;OAKG;IACH,YAAY,CAAgC;IAC5C,uBAAuB,CAAyB;IAEhD,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;QAClD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,YAAa,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACjC,IAAI,CAAC,uBAAuB,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAqB,EAAE,CAAC;QACrE,CAAC;IACF,CAAC;IAED,mBAAmB;IAEnB,KAAK,CAAC,WAAW,CAAC,OAAgB;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACrD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAgB,KAAK,CAAC,CAAC;IAC3E,CAAC;IAED,6EAA6E;IAC7E,kEAAkE;IAClE,8EAA8E;IAC9E,iEAAiE;IACjE,+EAA+E;IAC/E,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,uEAAuE;IACvE,0DAA0D;IAC1D,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,QAAuB;QAC3D,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,oBAAoB;IAEpB,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,GAAW;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1D,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,GAAW,EAAE,QAAkB;QACnE,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,CAAC,aAAa,CAAC,OAAgB,EAAE,QAAgB,EAAE,MAAc;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,0BAA0B;QAC1B,MAAM,SAAS,GAAG,QAAQ,IAAI,MAAM,CAAC;QACrC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QACzC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzC,IAAI,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1F,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,CAAC;IACF,CAAC;IAED,+BAA+B;IAE/B,KAAK,CAAC,qBAAqB,CAAC,OAAgB,EAAE,QAAkB;QAC/D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9D,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAY,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,OAAgB,EAAE,QAAkB,EAAE,SAAoB;QACtF,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,OAAgB,EAAE,QAAkB;QAClE,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,CAAC,uBAAuB,CAAC,OAAgB;QAC9C,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,iCAAiC;IAEjC,KAAK,CAAC,cAAc,CAAC,OAAgB,EAAE,QAAkB;QACxD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAY,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAgB,EAAE,QAAkB,EAAE,SAAoB;QAC/E,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,8BAA8B;IAE9B,KAAK,CAAC,oBAAoB,CAAC,OAAgB,EAAE,QAAkB;QAC9D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAS,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB,EAAE,QAAkB,EAAE,KAAc;QAC/E,kFAAkF;QAClF,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACP,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;IAED,wEAAwE;IAExE,KAAK,CAAC,yBAAyB,CAAC,OAAgB,EAAE,QAAkB;QACnE,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;CACD"}
+{"version":3,"file":"kv-raw-storage.js","sourceRoot":"","sources":["../../../src/storage/kv-raw-storage.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE9F;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,YAAY;IAaK;IAZ7B;;;;;;;OAOG;IACH,YAAY,CAAgC;IAC5C,uBAAuB,CAAyB;IAChD,gBAAgB,CAAuB;IAEvC,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;QAClD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1B,IAAI,CAAC,gBAAgB,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAc,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,YAAa,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACjC,IAAI,CAAC,uBAAuB,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAqB,EAAE,CAAC;QACrE,CAAC;IACF,CAAC;IAED,mBAAmB;IAEnB,KAAK,CAAC,WAAW,CAAC,OAAgB;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACrD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAgB,KAAK,CAAC,CAAC;IAC3E,CAAC;IAED,6EAA6E;IAC7E,kEAAkE;IAClE,+FAA+F;IAC/F,iEAAiE;IACjE,+EAA+E;IAC/E,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,uEAAuE;IACvE,0DAA0D;IAC1D,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,QAAuB;QAC3D,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,oBAAoB;IAEpB,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,GAAW;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1D,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,GAAW,EAAE,QAAkB;QACnE,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,CAAC,aAAa,CAAC,OAAgB,EAAE,QAAgB,EAAE,MAAc;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,0BAA0B;QAC1B,MAAM,SAAS,GAAG,QAAQ,IAAI,MAAM,CAAC;QACrC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QACzC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzC,IAAI,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1F,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,CAAC;IACF,CAAC;IAED,+BAA+B;IAE/B,KAAK,CAAC,qBAAqB,CAAC,OAAgB,EAAE,QAAkB;QAC/D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9D,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAY,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,OAAgB,EAAE,QAAkB,EAAE,SAAoB;QACtF,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,OAAgB,EAAE,QAAkB;QAClE,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,CAAC,uBAAuB,CAAC,OAAgB;QAC9C,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,iCAAiC;IAEjC,KAAK,CAAC,cAAc,CAAC,OAAgB,EAAE,QAAkB;QACxD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAY,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAgB,EAAE,QAAkB,EAAE,SAAoB;QAC/E,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,6FAA6F;IAC7F,EAAE;IACF,6EAA6E;IAC7E,kFAAkF;IAClF,kFAAkF;IAClF,mFAAmF;IACnF,oFAAoF;IACpF,kFAAkF;IAElF,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,GAAW;QAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAmB,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAgB,EAAE,GAAW,EAAE,KAAuB;QAC1E,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,8BAA8B;IAE9B,KAAK,CAAC,oBAAoB,CAAC,OAAgB,EAAE,QAAkB;QAC9D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAS,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB,EAAE,QAAkB,EAAE,KAAc;QAC/E,kFAAkF;QAClF,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACP,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;IAED,wEAAwE;IAExE,KAAK,CAAC,yBAAyB,CAAC,OAAgB,EAAE,QAAkB;QACnE,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;CACD"}

package/dist/src/storage/memory-store-driver.d.ts

@@ -1,7 +1,7 @@
 import type { BlockId, ActionId } from "@optimystic/db-core";
 import type { RawStoreDriver } from "./raw-store-driver.js";
 /**
- * In-memory {@link RawStoreDriver}: the five logical block-storage stores as
+ * In-memory {@link RawStoreDriver}: the six logical block-storage stores as
  * `Map`s of `Uint8Array` values. `KvRawStorage` hands this driver bytes produced
  * by `JSON`-encode and reads them back via `JSON`-decode, so every get yields a
  * fresh object and every save stored an independent byte snapshot BY
@@ -15,6 +15,7 @@ export declare class MemoryStoreDriver implements RawStoreDriver {
     private readonly revisions;
     private readonly pending;
     private readonly transactions;
+    private readonly proofs;
     private readonly materialized;
     private revisionKey;
     private actionKey;
@@ -29,6 +30,8 @@ export declare class MemoryStoreDriver implements RawStoreDriver {
     listPendingActionIds(blockId: BlockId): AsyncIterable<ActionId>;
     getTransaction(blockId: BlockId, actionId: ActionId): Promise<Uint8Array | undefined>;
     putTransaction(blockId: BlockId, actionId: ActionId, value: Uint8Array): Promise<void>;
+    getProof(blockId: BlockId, rev: number): Promise<Uint8Array | undefined>;
+    putProof(blockId: BlockId, rev: number, value: Uint8Array): Promise<void>;
     getMaterialized(blockId: BlockId, actionId: ActionId): Promise<Uint8Array | undefined>;
     putMaterialized(blockId: BlockId, actionId: ActionId, value: Uint8Array): Promise<void>;
     deleteMaterialized(blockId: BlockId, actionId: ActionId): Promise<void>;

package/dist/src/storage/memory-store-driver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-store-driver.d.ts","sourceRoot":"","sources":["../../../src/storage/memory-store-driver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;;;;;;GASG;AACH,qBAAa,iBAAkB,YAAW,cAAc;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkC;IAC3D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiC;IAC3D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAE9D,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,SAAS;IAMX,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAI9D,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAM/D,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAI3E,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3E,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,aAAa,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAqBhH,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAIjF,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlF,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjE,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC;IAiBhE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAIrF,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtF,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAItF,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvF,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAY3D,YAAY,IAAI,aAAa,CAAC,OAAO,CAAC;IAUvC,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC;CAY7C"}
+{"version":3,"file":"memory-store-driver.d.ts","sourceRoot":"","sources":["../../../src/storage/memory-store-driver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;;;;;;GASG;AACH,qBAAa,iBAAkB,YAAW,cAAc;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkC;IAC3D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiC;IAC3D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAE9D,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,SAAS;IAMX,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAI9D,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAM/D,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAI3E,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3E,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,aAAa,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAqBhH,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAIjF,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlF,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjE,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC;IAiBhE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAIrF,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtF,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAIxE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAMzE,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAItF,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvF,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB3D,YAAY,IAAI,aAAa,CAAC,OAAO,CAAC;IAUvC,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC;CAY7C"}

package/dist/src/storage/memory-store-driver.js

@@ -1,5 +1,5 @@
 /**
- * In-memory {@link RawStoreDriver}: the five logical block-storage stores as
+ * In-memory {@link RawStoreDriver}: the six logical block-storage stores as
  * `Map`s of `Uint8Array` values. `KvRawStorage` hands this driver bytes produced
  * by `JSON`-encode and reads them back via `JSON`-decode, so every get yields a
  * fresh object and every save stored an independent byte snapshot BY
@@ -13,6 +13,7 @@ export class MemoryStoreDriver {
     revisions = new Map(); // `${blockId}:${rev}` -> actionId bytes
     pending = new Map(); // `${blockId}:${actionId}` -> transform bytes
     transactions = new Map();
+    proofs = new Map(); // `${blockId}:${rev}` -> proof bytes
     materialized = new Map();
     revisionKey(blockId, rev) {
         return `${blockId}:${rev}`;
@@ -83,6 +84,13 @@ export class MemoryStoreDriver {
     async putTransaction(blockId, actionId, value) {
         this.transactions.set(this.actionKey(blockId, actionId), value);
     }
+    // --- proofs (keyed like revisions, NOT like actions — see RawStoreDriver.getProof) ---
+    async getProof(blockId, rev) {
+        return this.proofs.get(this.revisionKey(blockId, rev));
+    }
+    async putProof(blockId, rev, value) {
+        this.proofs.set(this.revisionKey(blockId, rev), value);
+    }
     // --- materialized ---
     async getMaterialized(blockId, actionId) {
         return this.materialized.get(this.actionKey(blockId, actionId));
@@ -104,6 +112,18 @@ export class MemoryStoreDriver {
         this.pending.delete(key);
     }
     // --- optional passthroughs ---
+    // Deliberately NO storeIdentity(): two MemoryStoreDrivers hold two independent Maps and are
+    // genuinely two different stores, so there is no shared "location" for them to name.
+    //
+    // NOTE: one driver object shared by two `KvRawStorage` wrappers is NOT covered. `withReadCache`
+    // falls back to keying on the STORAGE object, not the driver, so those two wrappers are two
+    // keys and get two read caches over one Map — the divergence dedupe exists to remove. Harmless
+    // today: this driver is a test fixture and every shipping backend's driver reports an identity,
+    // so the identity-less path only ever sees genuinely distinct stores. If a host ever wires
+    // `rawStorageFactory: () => new KvRawStorage(oneSharedDriver)` for two consumers, give this
+    // driver `identityForHandle('memory', this)` (store-identity.ts) — that makes the two wrappers
+    // name one store — and re-premise `local-transactor-read-cache.spec.ts`, which currently
+    // asserts the non-dedupe.
     async *listBlockIds() {
         // Snapshot the keys before yielding so a concurrent putMetadata during the scan
         // doesn't invalidate a live map iterator. Fresh in-memory storage is empty, so at
@@ -118,7 +138,7 @@ export class MemoryStoreDriver {
         for (const [blockId, value] of this.metadata) {
             total += blockId.length + value.byteLength;
         }
-        for (const store of [this.revisions, this.pending, this.transactions, this.materialized]) {
+        for (const store of [this.revisions, this.pending, this.transactions, this.proofs, this.materialized]) {
             for (const [key, value] of store) {
                 total += key.length + value.byteLength;
             }

package/dist/src/storage/memory-store-driver.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory-store-driver.js","sourceRoot":"","sources":["../../../src/storage/memory-store-driver.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AACH,MAAM,OAAO,iBAAiB;IACZ,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1C,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC,CAAC,wCAAwC;IACnF,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC,CAAI,8CAA8C;IAC1F,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEtD,WAAW,CAAC,OAAgB,EAAE,GAAW;QAChD,OAAO,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC;IAC5B,CAAC;IAEO,SAAS,CAAC,OAAgB,EAAE,QAAkB;QACrD,OAAO,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,mBAAmB;IAEnB,KAAK,CAAC,WAAW,CAAC,OAAgB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,KAAiB;QACpD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,oBAAoB;IAEpB,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,GAAW;QAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,GAAW,EAAE,KAAiB;QACjE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,CAAC,cAAc,CAAC,OAAgB,EAAE,EAAU,EAAE,EAAU,EAAE,OAAgB;QAC/E,yEAAyE;QACzE,2EAA2E;QAC3E,6EAA6E;QAC7E,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,IAAI,GAAG,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YACjE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YAC5B,CAAC;QACF,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,MAAM,CAAC;QACd,CAAC;IACF,CAAC;IAED,kBAAkB;IAElB,KAAK,CAAC,UAAU,CAAC,OAAgB,EAAE,QAAkB;QACpD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAgB,EAAE,QAAkB,EAAE,KAAiB;QACvE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,QAAkB;QACvD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,CAAC,oBAAoB,CAAC,OAAgB;QAC3C,MAAM,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC;QAC7B,gFAAgF;QAChF,oDAAoD;QACpD,MAAM,GAAG,GAAe,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACnD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAa,CAAC,CAAC;YACpD,CAAC;QACF,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACtB,MAAM,EAAE,CAAC;QACV,CAAC;IACF,CAAC;IAED,uBAAuB;IAEvB,KAAK,CAAC,cAAc,CAAC,OAAgB,EAAE,QAAkB;QACxD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAgB,EAAE,QAAkB,EAAE,KAAiB;QAC3E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,uBAAuB;IAEvB,KAAK,CAAC,eAAe,CAAC,OAAgB,EAAE,QAAkB;QACzD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAgB,EAAE,QAAkB,EAAE,KAAiB;QAC5E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAgB,EAAE,QAAkB;QAC5D,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,8EAA8E;IAE9E,KAAK,CAAC,OAAO,CAAC,OAAgB,EAAE,QAAkB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,wBAAwB,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,gCAAgC;IAEhC,KAAK,CAAC,CAAC,YAAY;QAClB,gFAAgF;QAChF,kFAAkF;QAClF,+EAA+E;QAC/E,6CAA6C;QAC7C,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACxD,MAAM,OAAO,CAAC;QACf,CAAC;IACF,CAAC;IAED,KAAK,CAAC,oBAAoB;QACzB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,KAAK,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;gBAClC,KAAK,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;YACxC,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;CACD"}
+{"version":3,"file":"memory-store-driver.js","sourceRoot":"","sources":["../../../src/storage/memory-store-driver.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AACH,MAAM,OAAO,iBAAiB;IACZ,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1C,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC,CAAC,wCAAwC;IACnF,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC,CAAI,8CAA8C;IAC1F,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC,CAAO,qCAAqC;IACnF,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEtD,WAAW,CAAC,OAAgB,EAAE,GAAW;QAChD,OAAO,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC;IAC5B,CAAC;IAEO,SAAS,CAAC,OAAgB,EAAE,QAAkB;QACrD,OAAO,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,mBAAmB;IAEnB,KAAK,CAAC,WAAW,CAAC,OAAgB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,KAAiB;QACpD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,oBAAoB;IAEpB,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,GAAW;QAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,GAAW,EAAE,KAAiB;QACjE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,CAAC,cAAc,CAAC,OAAgB,EAAE,EAAU,EAAE,EAAU,EAAE,OAAgB;QAC/E,yEAAyE;QACzE,2EAA2E;QAC3E,6EAA6E;QAC7E,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,IAAI,GAAG,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YACjE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YAC5B,CAAC;QACF,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,MAAM,CAAC;QACd,CAAC;IACF,CAAC;IAED,kBAAkB;IAElB,KAAK,CAAC,UAAU,CAAC,OAAgB,EAAE,QAAkB;QACpD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAgB,EAAE,QAAkB,EAAE,KAAiB;QACvE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,QAAkB;QACvD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,CAAC,oBAAoB,CAAC,OAAgB;QAC3C,MAAM,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC;QAC7B,gFAAgF;QAChF,oDAAoD;QACpD,MAAM,GAAG,GAAe,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACnD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAa,CAAC,CAAC;YACpD,CAAC;QACF,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACtB,MAAM,EAAE,CAAC;QACV,CAAC;IACF,CAAC;IAED,uBAAuB;IAEvB,KAAK,CAAC,cAAc,CAAC,OAAgB,EAAE,QAAkB;QACxD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAgB,EAAE,QAAkB,EAAE,KAAiB;QAC3E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,wFAAwF;IAExF,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,GAAW;QAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,GAAW,EAAE,KAAiB;QAC9D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,uBAAuB;IAEvB,KAAK,CAAC,eAAe,CAAC,OAAgB,EAAE,QAAkB;QACzD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAgB,EAAE,QAAkB,EAAE,KAAiB;QAC5E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAgB,EAAE,QAAkB;QAC5D,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,8EAA8E;IAE9E,KAAK,CAAC,OAAO,CAAC,OAAgB,EAAE,QAAkB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,wBAAwB,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,gCAAgC;IAEhC,4FAA4F;IAC5F,qFAAqF;IACrF,EAAE;IACF,gGAAgG;IAChG,4FAA4F;IAC5F,+FAA+F;IAC/F,gGAAgG;IAChG,2FAA2F;IAC3F,4FAA4F;IAC5F,+FAA+F;IAC/F,yFAAyF;IACzF,0BAA0B;IAE1B,KAAK,CAAC,CAAC,YAAY;QAClB,gFAAgF;QAChF,kFAAkF;QAClF,+EAA+E;QAC/E,6CAA6C;QAC7C,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACxD,MAAM,OAAO,CAAC;QACf,CAAC;IACF,CAAC;IAED,KAAK,CAAC,oBAAoB;QACzB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,KAAK,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACvG,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;gBAClC,KAAK,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;YACxC,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;CACD"}

package/dist/src/storage/raw-store-codec.js

@@ -1,8 +1,8 @@
 /**
  * Value codec shared by every `KvRawStorage`-backed store. Values cross the
  * `RawStoreDriver` boundary as `Uint8Array`, so this module is the single place
- * that turns `BlockMetadata`/`Transform`/`IBlock` (via JSON) and the `ActionId`
- * string (via UTF-8) into bytes and back.
+ * that turns `BlockMetadata`/`Transform`/`IBlock`/`BlockCommitProof` (via JSON)
+ * and the `ActionId` string (via UTF-8) into bytes and back.
  *
  * Because a get always decodes fresh bytes into a NEW object and a save always
  * encodes an independent byte copy, the clone-on-store / clone-on-read invariant

package/dist/src/storage/raw-store-driver.d.ts

@@ -1,9 +1,10 @@
 import type { BlockId, ActionId } from "@optimystic/db-core";
+import type { StoreIdentity } from "./store-identity.js";
 /**
  * Bytes-valued, per-logical-store driver surface. Each backend implements the
- * five block-storage stores (metadata, revisions, pending, transactions,
- * materialized) over its native mechanism (LevelDB tag-ranges, five SQLite
- * tables, five IndexedDB object stores, five filesystem subdirectories, five
+ * six block-storage stores (metadata, revisions, pending, transactions,
+ * materialized, proofs) over its native mechanism (LevelDB tag-ranges, six SQLite
+ * tables, six IndexedDB object stores, six filesystem subdirectories, six
  * in-memory maps). `KvRawStorage` layers all JSON serialization and call
  * orchestration on top — drivers never (de)serialize values and never see the
  * `BlockMetadata`/`Transform`/`IBlock` types. Drivers speak only
@@ -47,6 +48,22 @@ export interface RawStoreDriver {
     listPendingActionIds(blockId: BlockId): AsyncIterable<ActionId>;
     getTransaction(blockId: BlockId, actionId: ActionId): Promise<Uint8Array | undefined>;
     putTransaction(blockId: BlockId, actionId: ActionId, value: Uint8Array): Promise<void>;
+    /**
+     * proofs store — keyed by (blockId, rev), the same key shape as the revisions
+     * store. A revision's `BlockCommitProof` lives here and NOWHERE in the
+     * transactions store: an action id is chosen by whoever originates a write
+     * (a client's `pend`, a peer's restore archive) and is never re-derived or
+     * format-checked, so any reserved action-id convention could be collided with
+     * by an ordinary write. Separate keyspaces make the collision unrepresentable.
+     *
+     * There is deliberately NO `deleteProof`: a proof lives and dies with its
+     * REVISION record, and no revision-delete site exists today (`RawStoreDriver`
+     * has no revision delete at all — invalidations write compensating FORWARD
+     * revisions). Whatever ever deletes a revision record must delete its proof;
+     * until such a site exists this is a contract note, not a wired path.
+     */
+    getProof(blockId: BlockId, rev: number): Promise<Uint8Array | undefined>;
+    putProof(blockId: BlockId, rev: number, value: Uint8Array): Promise<void>;
     getMaterialized(blockId: BlockId, actionId: ActionId): Promise<Uint8Array | undefined>;
     putMaterialized(blockId: BlockId, actionId: ActionId, value: Uint8Array): Promise<void>;
     deleteMaterialized(blockId: BlockId, actionId: ActionId): Promise<void>;
@@ -59,6 +76,30 @@ export interface RawStoreDriver {
      * entry exists. This is the ONLY cross-key atomic operation the kernel requires.
      */
     promote(blockId: BlockId, actionId: ActionId): Promise<void>;
+    /**
+     * Optional — a stable, process-scoped string naming what this driver is backed by (a
+     * resolved directory, an open database handle). Passed through by the kernel and by every
+     * wrapper, so a cache and the storage it fronts name the same store.
+     *
+     * Contract — note it is ONE-DIRECTIONAL; read both halves before consuming it:
+     * - Two drivers over DIFFERENT locations MUST NOT return equal strings. So **equality
+     *   proves sameness**, and a consumer may merge on it. (The fs driver documents one exotic
+     *   Windows exception at its own site.)
+     * - Two drivers over the SAME location SHOULD return equal strings, but this is
+     *   best-effort and several backends knowingly under-approximate: two handles opened over
+     *   one database, or two spellings of one directory that cannot be collapsed synchronously,
+     *   read as two identities. So **inequality proves nothing** — never treat it as evidence
+     *   that two drivers are distinct stores. Each backend's `NOTE:` states its own gaps.
+     * - Every string is scheme-prefixed so backends cannot collide: `file:`, `sqlite-handle:`,
+     *   `idb-handle:`, `leveldb-handle:`. Compared for equality only — never parsed.
+     * - Stable for the driver object's whole life; fixed at construction.
+     * - OPTIONAL BY DESIGN. A driver that cannot honour the contract omits the method entirely
+     *   and callers fall back to per-object behavior. Never install a stub that returns
+     *   `undefined` — feature-detection (`typeof driver.storeIdentity === 'function'`) must see
+     *   the driver's true capability.
+     * - It identifies the STORE, not its contents.
+     */
+    storeIdentity?(): StoreIdentity;
     /** Optional — enumerate block ids with durable metadata (startup seed). Passed through by the kernel. */
     listBlockIds?(): AsyncIterable<BlockId>;
     /** Optional — best cheap byte estimate. Passed through by the kernel. */