@origintrail-official/dkg-agent 10.0.19 → 10.0.21

package/dist/sync/responder/responder-row-page.js

@@ -0,0 +1,181 @@
+import { SYNC_RESPONDER_SNAPSHOT_BUILD_MAX_BYTES_ESTIMATE, SYNC_RESPONDER_SNAPSHOT_BUILD_MAX_ROWS, SYNC_RESPONDER_SNAPSHOT_BUILD_PAGE_ROWS, isSyncRowSnapshotPagingRequiredError, } from './snapshot-cache.js';
+import { SyncRowSnapshotBudgetError } from './snapshot-budget.js';
+import { estimateStringRowHeapBytes } from '../memory-telemetry.js';
+import { metaSubjectKey } from './row-serialization.js';
+const COMPLETED_SYNC_RESPONDER_SESSION_GRACE_MS = 30_000;
+/**
+ * Session-plan getter shared by the plan-backed lanes (exact-graph and TTL SWM
+ * meta), owning the one lifecycle both must agree on:
+ *
+ *  - the explicit session refresh is consumed exactly ONCE, so when a snapshot
+ *    build crosses its budget, the immediate page-zero fallback reuses the
+ *    just-built plan instead of rebuilding (and re-counting) it against a
+ *    moving store;
+ *  - offset>0 REQUIRES the existing plan — silently rebuilding against moved
+ *    data would make the numeric offset skip or duplicate rows;
+ *  - memo expiry becomes the lane's session-expired error.
+ *
+ * The SWM data lane intentionally does not use this helper: it has no snapshot
+ * lane, so a single plan access per page means per-call refresh semantics are
+ * equivalent and simpler there.
+ */
+/**
+ * Sessionless callers (no `syncSessionId` => no memo cache key) rebuild the
+ * plan on EVERY page: per-page discovery + chunked GROUP BY cost (bounded, and
+ * still far cheaper than the deleted global-sort query), no `requireExisting`
+ * protection, and a fresh digest sidecar per plan object. Offset>0 pages
+ * against a mutating store can therefore skip or duplicate rows for such
+ * requesters — sessionless TTL paging is BEST-EFFORT, and the per-subject
+ * digest guard does NOT cover it. This matches the exposure of the old OFFSET
+ * lane (not a regression); requester-side verification still gates admission.
+ */
+export function createSessionPlanGetter(memo, cacheKey, initialRefreshPending, loadPlan, expiredMessage) {
+    let planRefreshPending = initialRefreshPending;
+    return async (pageOffset, pageSignal) => {
+        const refreshPlan = pageOffset === 0 && planRefreshPending;
+        if (refreshPlan)
+            planRefreshPending = false;
+        const plan = memo && cacheKey
+            ? await memo.get(cacheKey, () => loadPlan(pageSignal), {
+                refresh: refreshPlan,
+                requireExisting: pageOffset > 0,
+                signal: pageSignal,
+            })
+            : await loadPlan(pageSignal);
+        if (!plan)
+            throw new Error(expiredMessage);
+        return plan;
+    };
+}
+async function loadStorePagedSnapshot(cache, loadPage) {
+    const limits = cache.memo.snapshotLoadLimits ?? {
+        maxRows: SYNC_RESPONDER_SNAPSHOT_BUILD_MAX_ROWS,
+        maxBytesEstimate: SYNC_RESPONDER_SNAPSHOT_BUILD_MAX_BYTES_ESTIMATE,
+        pageRows: SYNC_RESPONDER_SNAPSHOT_BUILD_PAGE_ROWS,
+    };
+    const rows = [];
+    let bytesEstimate = 0;
+    let offset = 0;
+    // Read at most one row beyond the configured row cap. Tiny-budget tests and
+    // operators therefore never receive a 500-row temporary page merely to learn
+    // that a one-row snapshot is oversized.
+    const pageRows = Math.max(1, Math.min(Math.floor(limits.pageRows), Math.floor(limits.maxRows) + 1));
+    while (true) {
+        // The shared snapshot load is owner-independent: an individual request
+        // abort must not cancel a load used by coalesced waiters.
+        const page = await loadPage(offset, pageRows, undefined);
+        for (const row of page) {
+            const nextRows = rows.length + 1;
+            const nextBytes = bytesEstimate + estimateStringRowHeapBytes(row.s, row.p, row.o, row.g);
+            if (nextRows > limits.maxRows) {
+                throw new SyncRowSnapshotBudgetError({
+                    key: cache.key,
+                    reason: 'snapshot_rows',
+                    rows: nextRows,
+                    bytesEstimate: nextBytes,
+                    limit: limits.maxRows,
+                });
+            }
+            if (nextBytes > limits.maxBytesEstimate) {
+                throw new SyncRowSnapshotBudgetError({
+                    key: cache.key,
+                    reason: 'snapshot_bytes',
+                    rows: nextRows,
+                    bytesEstimate: nextBytes,
+                    limit: limits.maxBytesEstimate,
+                });
+            }
+            rows.push(row);
+            bytesEstimate = nextBytes;
+        }
+        if (page.length < pageRows)
+            return rows;
+        offset += page.length;
+    }
+}
+export async function readResponderRowsPage(cache, loadStoreBoundedPage, offset, limit, signal, options) {
+    const loadSnapshot = options?.loadSnapshot;
+    const subjectAtomic = options?.subjectAtomic ?? false;
+    const safeOffset = Math.max(0, Math.floor(offset));
+    const safeLimit = Math.max(0, Math.floor(limit));
+    if (safeLimit === 0)
+        return [];
+    // No session snapshot: the store-paged loader itself enforces subject
+    // atomicity where required (durable meta passes a subject-atomic loader), so
+    // this path needs no extra handling.
+    if (!cache)
+        return loadStoreBoundedPage(safeOffset, safeLimit, signal);
+    try {
+        return await readCachedRowsPage(cache, loadSnapshot ?? (() => loadStorePagedSnapshot(cache, loadStoreBoundedPage)), safeOffset, safeLimit, signal, subjectAtomic);
+    }
+    catch (error) {
+        if (!isSyncRowSnapshotPagingRequiredError(error))
+            throw error;
+        return loadStoreBoundedPage(safeOffset, safeLimit, signal);
+    }
+}
+async function readCachedRowsPage(cache, loadRows, offset, limit, signal, subjectAtomic = false) {
+    const safeOffset = Math.max(0, Math.floor(offset));
+    const safeLimit = Math.max(0, Math.floor(limit));
+    if (safeLimit === 0)
+        return [];
+    const rows = await cache.memo.get(cache.key, loadRows, {
+        refresh: cache.refresh,
+        refreshGeneration: cache.refreshGeneration,
+        // No prefix has been consumed at offset zero, so an entry evicted under
+        // responder memory pressure can be rebuilt without mixing snapshots.
+        refreshExpired: safeOffset === 0,
+        requireExisting: safeOffset > 0,
+        signal,
+    });
+    if (rows == null) {
+        throw new Error(cache.expiredMessage ?? 'Sync session snapshot expired before page completion');
+    }
+    // `rows` is an immutable snapshot. Slice it directly so serving a 500-row
+    // page allocates only that page's backing array, never a shallow copy of the
+    // complete snapshot first.
+    let pageEnd = Math.min(safeOffset + safeLimit, rows.length);
+    // Subject-atomic durable-meta lane (#1788): if the requested window ends
+    // mid-subject, EXTEND it forward until the subject changes (or the snapshot
+    // ends) so a graph-scoped seal is never split across a page — and therefore
+    // never across a sync round. Extending (never trimming) keeps a non-final
+    // page `>= safeLimit`, so it never trips the requester's empty-page EOF nor
+    // the release-on-short-page path below. Reads only in-page indices plus a
+    // bounded one-subject lookahead — never the whole snapshot. `_meta` subjects
+    // are small (a seal is 14 quads; KA descriptors ~10; membership/activity rows
+    // bounded), so the extension is O(one subject) and negligible against the
+    // #1868 64k-row meta snapshot ceiling; a pathologically large subject is
+    // still emitted whole rather than truncated, with the transport frame limit
+    // as the final guard.
+    if (subjectAtomic && pageEnd > safeOffset && pageEnd < rows.length) {
+        const trailingKey = metaSubjectKey(rows[pageEnd - 1]);
+        while (pageEnd < rows.length && metaSubjectKey(rows[pageEnd]) === trailingKey) {
+            pageEnd += 1;
+        }
+    }
+    const page = rows.slice(safeOffset, pageEnd);
+    if (page.length === 0 || (cache.releaseOnShortPage !== false && page.length < safeLimit)) {
+        cache.memo.release(cache.key, { graceMs: COMPLETED_SYNC_RESPONDER_SESSION_GRACE_MS });
+    }
+    return page;
+}
+function asAbortError(reason) {
+    return reason instanceof Error ? reason : new Error(String(reason ?? 'aborted'));
+}
+export function throwIfAborted(signal) {
+    if (signal?.aborted)
+        throw asAbortError(signal.reason);
+}
+export function raceAgainstAbort(work, signal) {
+    if (!signal)
+        return work;
+    throwIfAborted(signal);
+    return new Promise((resolve, reject) => {
+        const onAbort = () => reject(asAbortError(signal.reason));
+        signal.addEventListener('abort', onAbort, { once: true });
+        work.then(resolve, reject).finally(() => {
+            signal.removeEventListener('abort', onAbort);
+        });
+    });
+}
+//# sourceMappingURL=responder-row-page.js.map

package/dist/sync/responder/responder-row-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"responder-row-page.js","sourceRoot":"","sources":["../../../src/sync/responder/responder-row-page.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,gDAAgD,EAAE,sCAAsC,EACxF,uCAAuC,EAAE,oCAAoC,GAC9E,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,MAAM,yCAAyC,GAAG,MAAM,CAAC;AAYzD;;;;;;;;;;;;;;;GAeG;AACH;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAoC,EACpC,QAA4B,EAC5B,qBAA8B,EAC9B,QAA8C,EAC9C,cAAsB;IAEtB,IAAI,kBAAkB,GAAG,qBAAqB,CAAC;IAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE;QACtC,MAAM,WAAW,GAAG,UAAU,KAAK,CAAC,IAAI,kBAAkB,CAAC;QAC3D,IAAI,WAAW;YAAE,kBAAkB,GAAG,KAAK,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,IAAI,QAAQ;YAC3B,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;gBACrD,OAAO,EAAE,WAAW;gBACpB,eAAe,EAAE,UAAU,GAAG,CAAC;gBAC/B,MAAM,EAAE,UAAU;aACnB,CAAC;YACF,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAiCD,KAAK,UAAU,sBAAsB,CACnC,KAAmB,EACnB,QAAyB;IAEzB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI;QAC9C,OAAO,EAAE,sCAAsC;QAC/C,gBAAgB,EAAE,gDAAgD;QAClE,QAAQ,EAAE,uCAAuC;KAClD,CAAC;IACF,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,4EAA4E;IAC5E,6EAA6E;IAC7E,wCAAwC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CACtE,CAAC;IAEF,OAAO,IAAI,EAAE,CAAC;QACZ,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YACjC,MAAM,SAAS,GAAG,aAAa,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YACzF,IAAI,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,0BAA0B,CAAC;oBACnC,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,MAAM,EAAE,eAAe;oBACvB,IAAI,EAAE,QAAQ;oBACd,aAAa,EAAE,SAAS;oBACxB,KAAK,EAAE,MAAM,CAAC,OAAO;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,SAAS,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACxC,MAAM,IAAI,0BAA0B,CAAC;oBACnC,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,MAAM,EAAE,gBAAgB;oBACxB,IAAI,EAAE,QAAQ;oBACd,aAAa,EAAE,SAAS;oBACxB,KAAK,EAAE,MAAM,CAAC,gBAAgB;iBAC/B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IACxB,CAAC;AACH,CAAC;AAmBD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAA+B,EAC/B,oBAAqC,EACrC,MAAc,EACd,KAAa,EACb,MAAoB,EACpB,OAAkC;IAElC,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;IAC3C,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,KAAK,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,sEAAsE;IACtE,6EAA6E;IAC7E,qCAAqC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,oBAAoB,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,OAAO,MAAM,kBAAkB,CAC7B,KAAK,EACL,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,EAC3E,UAAU,EACV,SAAS,EACT,MAAM,EACN,aAAa,CACd,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,oCAAoC,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC9D,OAAO,oBAAoB,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAAmB,EACnB,QAA2C,EAC3C,MAAc,EACd,KAAa,EACb,MAAoB,EACpB,aAAa,GAAG,KAAK;IAErB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE;QACrD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,wEAAwE;QACxE,qEAAqE;QACrE,cAAc,EAAE,UAAU,KAAK,CAAC;QAChC,eAAe,EAAE,UAAU,GAAG,CAAC;QAC/B,MAAM;KACP,CAAC,CAAC;IACH,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,cAAc,IAAI,sDAAsD,CAAC,CAAC;IAClG,CAAC;IACD,0EAA0E;IAC1E,6EAA6E;IAC7E,2BAA2B;IAC3B,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5D,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,yEAAyE;IACzE,4EAA4E;IAC5E,sBAAsB;IACtB,IAAI,aAAa,IAAI,OAAO,GAAG,UAAU,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACnE,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACtD,OAAO,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC9E,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;QACzF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,MAAe;IACnC,OAAO,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAA+B;IAC5D,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAI,IAAgB,EAAE,MAA+B;IACnF,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACtC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/sync/responder/row-serialization.d.ts

@@ -0,0 +1,34 @@
+import type { SyncRow } from './snapshot-cache.js';
+export declare function serializeResponderRow(row: SyncRow): string;
+export declare function serializeResponderRows(rows: readonly SyncRow[]): string;
+/**
+ * Serialized (N-Quads, UTF-8) wire byte length of one responder row — the ONE
+ * byte model for response-frame budgets, shared by the byte-budget serializer
+ * and the subject-atomic extend so both reason about `maxResponseBytes` the same
+ * way (#1916). This is distinct from `estimateStringRowHeapBytes`, which
+ * estimates retained HEAP size for snapshot memory budgets only.
+ */
+export declare function serializedResponderRowByteLength(row: SyncRow): number;
+export declare function formatTerm(term: string): string;
+export declare function compareRows(a: SyncRow, b: SyncRow): number;
+/**
+ * The `(g, s)` identity a durable `_meta` row belongs to. Durable meta is
+ * ordered by `(g, s, p, o)`; a graph-scoped assertion seal is ONE `(g, s)`
+ * subject whose rows — including the batch-local control field
+ * `dkg:assertionVersion` — MUST cross the wire together in a single round, else
+ * the receiver's per-round completeness check drops the control fields
+ * permanently (#1788). Used to snap durable-meta page boundaries to subject
+ * boundaries. The `\n` separator cannot occur inside an IRI, so distinct
+ * subjects never collide.
+ */
+export declare function metaSubjectKey(row: SyncRow): string;
+/**
+ * Serialize the largest prefix that fits the negotiated response target.
+ * Pagination advances by the number of N-Quads actually parsed by the
+ * requester, so returning a prefix is cursor-safe. Always emit one row when a
+ * non-empty input contains an unexpectedly oversized row; that guarantees
+ * forward progress and leaves the transport's existing hard frame limit as the
+ * final safety boundary for that pathological single row.
+ */
+export declare function serializeResponderRowsWithinByteBudget(rows: readonly SyncRow[], maxBytes: number): string;
+//# sourceMappingURL=row-serialization.d.ts.map

package/dist/sync/responder/row-serialization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"row-serialization.d.ts","sourceRoot":"","sources":["../../../src/sync/responder/row-serialization.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAE1D;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,CAEvE;AAID;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAErE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI/C;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,MAAM,CAO1D;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAEnD;AAED;;;;;;;GAOG;AACH,wBAAgB,sCAAsC,CACpD,IAAI,EAAE,SAAS,OAAO,EAAE,EACxB,QAAQ,EAAE,MAAM,GACf,MAAM,CAaR"}

package/dist/sync/responder/row-serialization.js

@@ -0,0 +1,69 @@
+import { assertSafeIri, compareCodePoint } from '@origintrail-official/dkg-core';
+export function serializeResponderRow(row) {
+    return `${formatTerm(row.s)} <${assertSafeIri(row.p)}> ${formatTerm(row.o)} <${assertSafeIri(row.g)}> .`;
+}
+export function serializeResponderRows(rows) {
+    return rows.map(serializeResponderRow).join('\n');
+}
+const RESPONDER_ROW_ENCODER = new TextEncoder();
+/**
+ * Serialized (N-Quads, UTF-8) wire byte length of one responder row — the ONE
+ * byte model for response-frame budgets, shared by the byte-budget serializer
+ * and the subject-atomic extend so both reason about `maxResponseBytes` the same
+ * way (#1916). This is distinct from `estimateStringRowHeapBytes`, which
+ * estimates retained HEAP size for snapshot memory budgets only.
+ */
+export function serializedResponderRowByteLength(row) {
+    return RESPONDER_ROW_ENCODER.encode(serializeResponderRow(row)).byteLength;
+}
+export function formatTerm(term) {
+    if (term.startsWith('"') || term.startsWith('_:'))
+        return term;
+    if (term.startsWith('<') && term.endsWith('>'))
+        return term;
+    return `<${assertSafeIri(term)}>`;
+}
+export function compareRows(a, b) {
+    return (compareCodePoint(a.g, b.g) ||
+        compareCodePoint(a.s, b.s) ||
+        compareCodePoint(a.p, b.p) ||
+        compareCodePoint(a.o, b.o));
+}
+/**
+ * The `(g, s)` identity a durable `_meta` row belongs to. Durable meta is
+ * ordered by `(g, s, p, o)`; a graph-scoped assertion seal is ONE `(g, s)`
+ * subject whose rows — including the batch-local control field
+ * `dkg:assertionVersion` — MUST cross the wire together in a single round, else
+ * the receiver's per-round completeness check drops the control fields
+ * permanently (#1788). Used to snap durable-meta page boundaries to subject
+ * boundaries. The `\n` separator cannot occur inside an IRI, so distinct
+ * subjects never collide.
+ */
+export function metaSubjectKey(row) {
+    return `${row.g}\n${row.s}`;
+}
+/**
+ * Serialize the largest prefix that fits the negotiated response target.
+ * Pagination advances by the number of N-Quads actually parsed by the
+ * requester, so returning a prefix is cursor-safe. Always emit one row when a
+ * non-empty input contains an unexpectedly oversized row; that guarantees
+ * forward progress and leaves the transport's existing hard frame limit as the
+ * final safety boundary for that pathological single row.
+ */
+export function serializeResponderRowsWithinByteBudget(rows, maxBytes) {
+    const safeMaxBytes = Math.max(1, Math.floor(maxBytes));
+    const page = [];
+    let bytes = 0;
+    for (const row of rows) {
+        const serialized = serializeResponderRow(row);
+        const rowBytes = serializedResponderRowByteLength(row) + (page.length > 0 ? 1 : 0);
+        if (page.length > 0 && bytes + rowBytes > safeMaxBytes)
+            break;
+        page.push(serialized);
+        bytes += rowBytes;
+        if (bytes >= safeMaxBytes)
+            break;
+    }
+    return page.join('\n');
+}
+//# sourceMappingURL=row-serialization.js.map

package/dist/sync/responder/row-serialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"row-serialization.js","sourceRoot":"","sources":["../../../src/sync/responder/row-serialization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAGjF,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAwB;IAC7D,OAAO,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,qBAAqB,GAAG,IAAI,WAAW,EAAE,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAAC,GAAY;IAC3D,OAAO,qBAAqB,CAAC,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAU,EAAE,CAAU;IAChD,OAAO,CACL,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1B,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1B,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1B,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,OAAO,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sCAAsC,CACpD,IAAwB,EACxB,QAAgB;IAEhB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,gCAAgC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,GAAG,QAAQ,GAAG,YAAY;YAAE,MAAM;QAC9D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtB,KAAK,IAAI,QAAQ,CAAC;QAClB,IAAI,KAAK,IAAI,YAAY;YAAE,MAAM;IACnC,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC"}

package/dist/sync/responder/session-plan-memo.d.ts

@@ -0,0 +1,20 @@
+import type { SyncResponderSnapshotBudget } from './snapshot-budget.js';
+import { type ExactGraphPagePlan } from './exact-graph-reader.js';
+export interface SessionPlanMemo<T> {
+    get(key: string, load: () => Promise<T>, options?: {
+        refresh?: boolean;
+        requireExisting?: boolean;
+        signal?: AbortSignal;
+    }): Promise<T | null>;
+}
+interface SessionPlanBudgetAccounting<T> {
+    budget: SyncResponderSnapshotBudget;
+    phase: 'shared_memory' | 'durable_meta' | 'durable_data';
+    bytesEstimate: (value: T) => number;
+    /** Keep responder admission until an aborted store load physically settles. */
+    drainOnAbort?: boolean;
+}
+export declare function createSessionPlanMemo<T>(ttlMs: number, maxEntries: number, accounting?: SessionPlanBudgetAccounting<T>): SessionPlanMemo<T>;
+export declare function createPageOnlySessionPlanMemo<T>(ttlMs: number, maxEntries: number, budget: SyncResponderSnapshotBudget, graphPlan: (value: T) => ExactGraphPagePlan): SessionPlanMemo<T>;
+export {};
+//# sourceMappingURL=session-plan-memo.d.ts.map

package/dist/sync/responder/session-plan-memo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-plan-memo.d.ts","sourceRoot":"","sources":["../../../src/sync/responder/session-plan-memo.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,GAAG,CACD,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACtB,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC/E,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;CACtB;AAED,UAAU,2BAA2B,CAAC,CAAC;IACrC,MAAM,EAAE,2BAA2B,CAAC;IACpC,KAAK,EAAE,eAAe,GAAG,cAAc,GAAG,cAAc,CAAC;IACzD,aAAa,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,MAAM,CAAC;IACpC,+EAA+E;IAC/E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,2BAA2B,CAAC,CAAC,CAAC,GAC1C,eAAe,CAAC,CAAC,CAAC,CAyFpB;AAED,wBAAgB,6BAA6B,CAAC,CAAC,EAC7C,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,2BAA2B,EACnC,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,kBAAkB,GAC1C,eAAe,CAAC,CAAC,CAAC,CAyBpB"}

package/dist/sync/responder/session-plan-memo.js

@@ -0,0 +1,135 @@
+import { bytesToHex } from '@noble/hashes/utils.js';
+import { sha256 } from '@noble/hashes/sha2.js';
+import { raceAgainstAbort, throwIfAborted } from './responder-row-page.js';
+import { exactGraphPlanScalarBytes, snapshotBudgetError, EXACT_GRAPH_CURSOR_CACHE_MAX_BYTES_ESTIMATE, EXACT_GRAPH_PLAN_MAX_BYTES_ESTIMATE, } from './exact-graph-reader.js';
+export function createSessionPlanMemo(ttlMs, maxEntries, accounting) {
+    const cached = new Map();
+    const inflight = new Map();
+    const deleteEntry = (key, reason) => {
+        const entry = cached.get(key);
+        if (!entry)
+            return;
+        cached.delete(key);
+        if (entry.budgetEntryId)
+            accounting?.budget.remove(entry.budgetEntryId, reason);
+    };
+    const prune = (now = Date.now()) => {
+        for (const [key, entry] of cached) {
+            if (now - entry.cachedAt >= ttlMs)
+                deleteEntry(key, 'expired');
+        }
+    };
+    return {
+        async get(key, load, options) {
+            throwIfAborted(options?.signal);
+            const now = Date.now();
+            prune(now);
+            const pending = inflight.get(key);
+            if (pending) {
+                if (!accounting?.drainOnAbort)
+                    return raceAgainstAbort(pending, options?.signal);
+                if (!options?.refresh) {
+                    const value = await pending;
+                    throwIfAborted(options?.signal);
+                    return value;
+                }
+                // An explicit replacement waits for the prior physical load, then
+                // builds its own plan rather than inheriting the older generation.
+                try {
+                    await pending;
+                }
+                catch {
+                    throwIfAborted(options?.signal);
+                }
+                throwIfAborted(options?.signal);
+            }
+            const existing = cached.get(key);
+            if (!options?.refresh && existing) {
+                cached.delete(key);
+                cached.set(key, { ...existing, cachedAt: now });
+                if (existing.budgetEntryId) {
+                    // Refresh the global-budget LRU position, then stay evictable: an
+                    // entry pinned forever would let idle plans exempt themselves from
+                    // memory-pressure eviction.
+                    accounting?.budget.touch(existing.budgetEntryId);
+                    accounting?.budget.release(existing.budgetEntryId);
+                }
+                return existing.value;
+            }
+            if (options?.requireExisting)
+                return null;
+            if (!existing && cached.size >= maxEntries) {
+                deleteEntry(cached.keys().next().value, 'released');
+            }
+            const pendingLoad = load()
+                .then((value) => {
+                if (accounting?.drainOnAbort)
+                    throwIfAborted(options?.signal);
+                const replaced = cached.get(key);
+                let budgetEntryId;
+                if (accounting) {
+                    budgetEntryId = Symbol(key);
+                    // Throws the typed global budget error when the process-wide
+                    // responder budget cannot admit the plan; the failed refresh leaves
+                    // any previously-admitted plan in place (memo entry untouched).
+                    accounting.budget.admit({
+                        id: budgetEntryId,
+                        key,
+                        phase: accounting.phase,
+                        rows: 0,
+                        bytesEstimate: accounting.bytesEstimate(value),
+                        controlPlane: true,
+                        replaceId: replaced?.budgetEntryId,
+                        onEvict: () => {
+                            if (cached.get(key)?.budgetEntryId === budgetEntryId)
+                                cached.delete(key);
+                        },
+                    });
+                    accounting.budget.release(budgetEntryId);
+                }
+                // Concurrent loads for different keys can pass the entry check
+                // before either settles. Keep the cap true at settlement as well.
+                if (!cached.has(key)) {
+                    while (cached.size >= maxEntries)
+                        deleteEntry(cached.keys().next().value, 'released');
+                }
+                cached.set(key, { value, cachedAt: Date.now(), budgetEntryId });
+                return value;
+            })
+                .finally(() => inflight.delete(key));
+            inflight.set(key, pendingLoad);
+            if (!accounting?.drainOnAbort)
+                return raceAgainstAbort(pendingLoad, options?.signal);
+            const value = await pendingLoad;
+            throwIfAborted(options?.signal);
+            return value;
+        },
+    };
+}
+export function createPageOnlySessionPlanMemo(ttlMs, maxEntries, budget, graphPlan) {
+    const memo = createSessionPlanMemo(ttlMs, maxEntries, {
+        budget,
+        phase: 'durable_data',
+        drainOnAbort: true,
+        bytesEstimate: (value) => {
+            const plan = graphPlan(value);
+            const bytes = exactGraphPlanScalarBytes(plan);
+            if (bytes > EXACT_GRAPH_PLAN_MAX_BYTES_ESTIMATE) {
+                throw snapshotBudgetError({
+                    key: 'exact-data-plan', reason: 'snapshot_bytes', rows: plan.entries.length,
+                    bytesEstimate: bytes, limit: EXACT_GRAPH_PLAN_MAX_BYTES_ESTIMATE,
+                });
+            }
+            return bytes + EXACT_GRAPH_CURSOR_CACHE_MAX_BYTES_ESTIMATE;
+        },
+    });
+    return {
+        get(key, load, options) {
+            // Opaque request tokens need not have a small wire spelling. Retain a
+            // fixed-size digest of the complete server-derived scope/generation.
+            const boundedKey = bytesToHex(sha256(new TextEncoder().encode(key)));
+            return memo.get(boundedKey, load, options);
+        },
+    };
+}
+//# sourceMappingURL=session-plan-memo.js.map

package/dist/sync/responder/session-plan-memo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-plan-memo.js","sourceRoot":"","sources":["../../../src/sync/responder/session-plan-memo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,2CAA2C,EAC3C,mCAAmC,GAEpC,MAAM,yBAAyB,CAAC;AAkBjC,MAAM,UAAU,qBAAqB,CACnC,KAAa,EACb,UAAkB,EAClB,UAA2C;IAE3C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkE,CAAC;IACzF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC/C,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,MAA2C,EAAE,EAAE;QAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,KAAK,CAAC,aAAa;YAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAClF,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE;QACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YAClC,IAAI,GAAG,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK;gBAAE,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACjE,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;YAC1B,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,CAAC,GAAG,CAAC,CAAC;YACX,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,UAAU,EAAE,YAAY;oBAAE,OAAO,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjF,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;oBACtB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC;oBAC5B,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAChC,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,kEAAkE;gBAClE,mEAAmE;gBACnE,IAAI,CAAC;oBAAC,MAAM,OAAO,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAAC,CAAC;gBACjE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClC,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAClC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACnB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChD,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;oBAC3B,kEAAkE;oBAClE,mEAAmE;oBACnE,4BAA4B;oBAC5B,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;oBACjD,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;gBACrD,CAAC;gBACD,OAAO,QAAQ,CAAC,KAAK,CAAC;YACxB,CAAC;YACD,IAAI,OAAO,EAAE,eAAe;gBAAE,OAAO,IAAI,CAAC;YAC1C,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC3C,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,EAAE,UAAU,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,EAAE;iBACvB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,IAAI,UAAU,EAAE,YAAY;oBAAE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACjC,IAAI,aAAiC,CAAC;gBACtC,IAAI,UAAU,EAAE,CAAC;oBACf,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC5B,6DAA6D;oBAC7D,oEAAoE;oBACpE,gEAAgE;oBAChE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;wBACtB,EAAE,EAAE,aAAa;wBACjB,GAAG;wBACH,KAAK,EAAE,UAAU,CAAC,KAAK;wBACvB,IAAI,EAAE,CAAC;wBACP,aAAa,EAAE,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC;wBAC9C,YAAY,EAAE,IAAI;wBAClB,SAAS,EAAE,QAAQ,EAAE,aAAa;wBAClC,OAAO,EAAE,GAAG,EAAE;4BACZ,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,aAAa,KAAK,aAAa;gCAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBAC3E,CAAC;qBACF,CAAC,CAAC;oBACH,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;gBAC3C,CAAC;gBACD,+DAA+D;gBAC/D,kEAAkE;gBAClE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrB,OAAO,MAAM,CAAC,IAAI,IAAI,UAAU;wBAAE,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,EAAE,UAAU,CAAC,CAAC;gBACzF,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;gBAChE,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACvC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,EAAE,YAAY;gBAAE,OAAO,gBAAgB,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACrF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC;YAChC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAa,EACb,UAAkB,EAClB,MAAmC,EACnC,SAA2C;IAE3C,MAAM,IAAI,GAAG,qBAAqB,CAAI,KAAK,EAAE,UAAU,EAAE;QACvD,MAAM;QACN,KAAK,EAAE,cAAc;QACrB,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,GAAG,mCAAmC,EAAE,CAAC;gBAChD,MAAM,mBAAmB,CAAC;oBACxB,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;oBAC3E,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC;iBACjE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,KAAK,GAAG,2CAA2C,CAAC;QAC7D,CAAC;KACF,CAAC,CAAC;IACH,OAAO;QACL,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;YACpB,sEAAsE;YACtE,qEAAqE;YACrE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/sync/responder/sync-handler.d.ts

@@ -1,9 +1,22 @@
 import { type OperationContext } from '@origintrail-official/dkg-core';
-import type { TripleStore } from '@origintrail-official/dkg-storage';
+import { type TripleStore } from '@origintrail-official/dkg-storage';
 import { type WorkspacePublicSnapshotStore } from '@origintrail-official/dkg-publisher';
 import type { SyncRequestEnvelope } from '../auth/request-build.js';
 import { type SyncResponderSnapshotBudgetOptions } from './snapshot-budget.js';
 import { type SyncContextGraphPriorityConfig, type SyncResponderSnapshotLimitsConfig } from '../policy.js';
+import { type ExactAssetExportCache } from './exact-asset-export-cache.js';
+export interface ExperimentalExactBatchResponderResources {
+    readonly exportCache: ExactAssetExportCache;
+    readonly snapshotBudget: import('./snapshot-budget.js').SyncResponderSnapshotBudget;
+    /**
+     * Both admissions share the limiter of every other sync response. When it
+     * does not admit the stage (queue wait exceeded, queue full, displaced) they
+     * reject with Core's `ExactBatchResponderRefusal('BUSY')`, which Core answers
+     * with a refusal frame.
+     */
+    withPreAuthorizationAdmission<T>(peerId: string, signal: AbortSignal, work: () => Promise<T>): Promise<T>;
+    withAuthorizedResponseAdmission<T>(peerId: string, contextGraphId: string, signal: AbortSignal, work: () => Promise<T>): Promise<T>;
+}
 interface RegisterSyncHandlerParams {
     /**
      * `register` callable. In production this is bound to the RAW
@@ -28,6 +41,8 @@ interface RegisterSyncHandlerParams {
     authorizeSyncRequest: (request: SyncRequestEnvelope, remotePeerId: string, options?: {
         signal?: AbortSignal;
     }) => Promise<boolean>;
+    /** Default absent. Experimental registrations reuse these exact owned resources. */
+    onExperimentalExactBatchResources?: (resources: ExperimentalExactBatchResponderResources) => void;
     /**
      * Injected policy predicate (#1233): return `true` to WITHHOLD the durable
      * `_meta` snapshot for `contextGraphId` — the responder then replies with an
@@ -39,7 +54,17 @@ interface RegisterSyncHandlerParams {
      * caller reads `process.env` fresh per call, keeping the switch runtime-hot.
      */
     shouldWithholdDurableMeta?: (contextGraphId: string) => boolean;
+    /**
+     * Return `true` while `contextGraphId` must not be served in any phase yet
+     * (production: `ontology` until the startup metadata relocation finishes).
+     * The request is then refused like a busy responder, which requesters retry
+     * later, rather than answered with an empty page they would read as the
+     * graph's end.
+     */
+    servingWithheld?: (contextGraphId: string) => boolean;
     logWarn: (ctx: OperationContext, message: string) => void;
+    /** One line per exact-batch stream request refused as busy. Omitted ⇒ `logDebug`. */
+    logInfo?: (ctx: OperationContext, message: string) => void;
     logDebug: (ctx: OperationContext, message: string) => void;
     /** Primarily injectable for deterministic tests; production uses the bounded defaults below. */
     snapshotBudget?: SyncResponderSnapshotBudgetOptions;

package/dist/sync/responder/sync-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-handler.d.ts","sourceRoot":"","sources":["../../../src/sync/responder/sync-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,gBAAgB,EACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAMrE,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAqBpE,OAAO,EAGL,KAAK,kCAAkC,EACxC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAIL,KAAK,8BAA8B,EAGnC,KAAK,iCAAiC,EACvC,MAAM,cAAc,CAAC;AAwBtB,UAAU,yBAAyB;IACjC;;;;;;;;OAQG;IACH,QAAQ,EAAE,CACR,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,UAAU,CAAC,KACnG,IAAI,CAAC;IACV,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,WAAW,CAAC;IACnB,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,mBAAmB,CAAC;IAC5D,oBAAoB,EAAE,CACpB,OAAO,EAAE,mBAAmB,EAC5B,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAC/B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB;;;;;;;;;OASG;IACH,yBAAyB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC;IAChE,OAAO,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1D,QAAQ,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3D,gGAAgG;IAChG,cAAc,CAAC,EAAE,kCAAkC,CAAC;IACpD,mFAAmF;IACnF,sBAAsB,CAAC,EAAE,QAAQ,CAAC,8BAA8B,CAAC,CAAC;CACnE;AAKD,eAAO,MAAM,mCAAmC,IAAI,CAAC;AAErD,eAAO,MAAM,0CAA0C,MAAM,CAAC;AAC9D,eAAO,MAAM,0CAA0C,KAAK,CAAC;AAC7D,eAAO,MAAM,2CAA2C,KAAK,CAAC;AAC9D,eAAO,MAAM,qCAAqC,SAAU,CAAC;AAC7D,eAAO,MAAM,gDAAgD,QAAoB,CAAC;AAIlF,eAAO,MAAM,wCAAwC,QACsB,CAAC;AAC5E,eAAO,MAAM,mDAAmD,QACsB,CAAC;AAuBvF,MAAM,WAAW,mCAAmC;IAClD,MAAM,EAAE,kCAAkC,CAAC;IAC3C,gBAAgB,EAAE,OAAO,CAAC;IAC1B,yBAAyB,EAAE,OAAO,CAAC;CACpC;AAED,iGAAiG;AACjG,wBAAgB,kCAAkC,CAChD,MAAM,CAAC,EAAE,iCAAiC,EAC1C,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,EAC/D,SAAS,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAe,GAC9C,mCAAmC,CAwDrC;AAED,gGAAgG;AAChG,wBAAgB,yCAAyC,CACvD,MAAM,CAAC,EAAE,iCAAiC,EAC1C,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,EAC/D,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GACpC,kCAAkC,CAEpC;AA4KD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,yBAAyB,GAAG,IAAI,CA4kB3E"}
+{"version":3,"file":"sync-handler.d.ts","sourceRoot":"","sources":["../../../src/sync/responder/sync-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,gBAAgB,EACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAmC,KAAK,WAAW,EAAE,MAAM,mCAAmC,CAAC;AACtG,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAuBpE,OAAO,EAGL,KAAK,kCAAkC,EACxC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAIL,KAAK,8BAA8B,EAGnC,KAAK,iCAAiC,EACvC,MAAM,cAAc,CAAC;AAMtB,OAAO,EAAkE,KAAK,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAoB3I,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,OAAO,sBAAsB,EAAE,2BAA2B,CAAC;IACpF;;;;;OAKG;IACH,6BAA6B,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1G,+BAA+B,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACrI;AAED,UAAU,yBAAyB;IACjC;;;;;;;;OAQG;IACH,QAAQ,EAAE,CACR,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,UAAU,CAAC,KACnG,IAAI,CAAC;IACV,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,WAAW,CAAC;IACnB,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,mBAAmB,CAAC;IAC5D,oBAAoB,EAAE,CACpB,OAAO,EAAE,mBAAmB,EAC5B,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAC/B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,oFAAoF;IACpF,iCAAiC,CAAC,EAAE,CAAC,SAAS,EAAE,wCAAwC,KAAK,IAAI,CAAC;IAClG;;;;;;;;;OASG;IACH,yBAAyB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC;IAChE;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC;IACtD,OAAO,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1D,qFAAqF;IACrF,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3D,QAAQ,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3D,gGAAgG;IAChG,cAAc,CAAC,EAAE,kCAAkC,CAAC;IACpD,mFAAmF;IACnF,sBAAsB,CAAC,EAAE,QAAQ,CAAC,8BAA8B,CAAC,CAAC;CACnE;AAID,eAAO,MAAM,mCAAmC,IAAI,CAAC;AAErD,eAAO,MAAM,0CAA0C,MAAM,CAAC;AAC9D,eAAO,MAAM,0CAA0C,KAAK,CAAC;AAC7D,eAAO,MAAM,2CAA2C,KAAK,CAAC;AAC9D,eAAO,MAAM,qCAAqC,SAAU,CAAC;AAC7D,eAAO,MAAM,gDAAgD,QAAoB,CAAC;AAIlF,eAAO,MAAM,wCAAwC,QACsB,CAAC;AAC5E,eAAO,MAAM,mDAAmD,QACsB,CAAC;AAuBvF,MAAM,WAAW,mCAAmC;IAClD,MAAM,EAAE,kCAAkC,CAAC;IAC3C,gBAAgB,EAAE,OAAO,CAAC;IAC1B,yBAAyB,EAAE,OAAO,CAAC;CACpC;AAED,iGAAiG;AACjG,wBAAgB,kCAAkC,CAChD,MAAM,CAAC,EAAE,iCAAiC,EAC1C,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,EAC/D,SAAS,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAe,GAC9C,mCAAmC,CAwDrC;AAED,gGAAgG;AAChG,wBAAgB,yCAAyC,CACvD,MAAM,CAAC,EAAE,iCAAiC,EAC1C,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,EAC/D,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GACpC,kCAAkC,CAEpC;AA8KD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,yBAAyB,GAAG,IAAI,CA4oB3E"}