@powerhousedao/shared 6.2.3-dev.6 → 6.2.3-dev.60

package/dist/purge-v06m_oGz.js

@@ -0,0 +1,381 @@
+import { l as bytesToBase64Url$1, n as generateId, s as buildOperationSignatureMessage, t as deriveOperationId } from "./utils-CSF716ux.js";
+import { stringify } from "safe-stable-stringify";
+import { sha256 } from "@noble/hashes/sha2.js";
+//#region document-model/action-signature.ts
+const ACTION_SIGNATURE_V2_PREFIX = "v2:";
+const V2_HASH = /^v2:[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$/;
+const V2_TIMESTAMP = /^[0-9]+$/;
+const V2_SIGNATURE = /^0x[0-9a-f]{128}$/;
+const LONE_SURROGATE = /\p{Cs}/u;
+const PREIMAGE_FIELDS = [
+	"version",
+	"documentId",
+	"branch",
+	"scope",
+	"type",
+	"id",
+	"timestampUtcMs",
+	"input",
+	"signer.user.address",
+	"signer.user.networkId",
+	"signer.user.chainId",
+	"signer.app.key"
+];
+/** A value that would not survive a JSON store round trip unchanged. */
+var CanonicalJsonError = class extends Error {
+	constructor(path, detail) {
+		super(`Cannot canonicalize ${path}: ${detail}`);
+		this.name = "CanonicalJsonError";
+	}
+};
+/** Sorted-key JSON, as the state hash encodes; drops `undefined` properties. */
+function canonicalJson(value, label = "value") {
+	assertCanonical(value, label, /* @__PURE__ */ new Set());
+	return stringify(value);
+}
+/** Actions the reactor reduces itself, onto the document scope. */
+const DOCUMENT_SCOPE_ACTION_TYPES = /* @__PURE__ */ new Set([
+	"CREATE_DOCUMENT",
+	"DELETE_DOCUMENT",
+	"UPGRADE_DOCUMENT",
+	"ADD_RELATIONSHIP",
+	"REMOVE_RELATIONSHIP",
+	"UPDATE_RELATIONSHIP",
+	"PURGE_DOCUMENT"
+]);
+/** Where a document-scope action writes: `sourceId` or `documentId`. */
+function targetDocumentId(action, fallback) {
+	const input = action.input;
+	if (action.type === "ADD_RELATIONSHIP" || action.type === "REMOVE_RELATIONSHIP" || action.type === "UPDATE_RELATIONSHIP") return typeof input?.sourceId === "string" && input.sourceId.length > 0 ? input.sourceId : fallback;
+	return typeof input?.documentId === "string" && input.documentId.length > 0 ? input.documentId : fallback;
+}
+/** The log an action submitted to a job on `documentId` is stored in. */
+function actionSigningTarget(action, documentId, branch) {
+	return {
+		documentId: DOCUMENT_SCOPE_ACTION_TYPES.has(action.type) ? targetDocumentId(action, documentId) : documentId,
+		branch
+	};
+}
+/** The identity a signer writes into `context.signer`, and signs over. */
+function actionSignerIdentity(signer) {
+	return {
+		user: {
+			address: signer.user?.address ?? "",
+			networkId: signer.user?.networkId ?? "",
+			chainId: signer.user?.chainId ?? 0
+		},
+		app: {
+			name: signer.app?.name ?? "",
+			key: signer.app?.key ?? ""
+		}
+	};
+}
+/** The v2 preimage; throws `CanonicalJsonError` on an unsignable action. */
+function actionPreimageV2(action, target, signer) {
+	if (!target.documentId) throw new CanonicalJsonError("documentId", "must not be empty");
+	if (!target.branch) throw new CanonicalJsonError("branch", "must not be empty");
+	if (action.input === void 0) throw new CanonicalJsonError("input", `action ${action.id} (${action.type}) has no input`);
+	const fields = [
+		"v2",
+		target.documentId,
+		target.branch,
+		action.scope,
+		action.type,
+		action.id,
+		action.timestampUtcMs,
+		action.input,
+		signer.user.address,
+		signer.user.networkId,
+		signer.user.chainId,
+		signer.app.key
+	];
+	fields.forEach((field, i) => {
+		assertCanonical(field, PREIMAGE_FIELDS[i], /* @__PURE__ */ new Set());
+	});
+	return stringify(fields);
+}
+/** `"v2:" + base64url(sha256(preimage))`, unpadded. */
+async function hashActionV2(action, target, signer) {
+	const preimage = actionPreimageV2(action, target, signer);
+	const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(preimage));
+	return "v2:" + bytesToBase64Url(new Uint8Array(digest));
+}
+/** Signs `action` as a v2 tuple; the message layout is the legacy one. */
+async function signActionV2(params) {
+	const { action, target, signer, sign } = params;
+	const previousStateHash = params.previousStateHash ?? "";
+	if (previousStateHash.includes(", ")) throw new Error(`Cannot sign action ${action.id}: the previous state hash contains ", "`);
+	const tuple = [
+		(Date.now() / 1e3).toFixed(0),
+		signer.app.key,
+		await hashActionV2(action, target, signer),
+		previousStateHash
+	];
+	const signature = await sign(buildOperationSignatureMessage(tuple));
+	if (signature.length !== 64) throw new Error(`Cannot sign action ${action.id}: expected a 64-byte P-256 signature, got ${signature.length} bytes`);
+	return [...tuple, `0x${bytesToHex(signature)}`];
+}
+/** Element [2] carries the v2 prefix, whether or not it is well formed. */
+function isV2ActionHash(hash) {
+	return hash.startsWith("v2:");
+}
+/** The strict shape of a v2 tuple, apart from what its hash covers. */
+function v2TupleProblem(tuple) {
+	if (!V2_TIMESTAMP.test(tuple[0])) return "signing time is not decimal seconds";
+	if (!V2_HASH.test(tuple[2])) return "hash is not v2: and 43 base64url characters";
+	if (!V2_SIGNATURE.test(tuple[4])) return "signature is not 0x and 128 lowercase hex digits";
+}
+function assertCanonical(value, path, ancestors) {
+	switch (typeof value) {
+		case "string":
+			if (LONE_SURROGATE.test(value)) throw new CanonicalJsonError(path, "string holds a lone surrogate");
+			return;
+		case "boolean": return;
+		case "number":
+			if (!Number.isFinite(value)) throw new CanonicalJsonError(path, `${value} is not a JSON number`);
+			return;
+		case "undefined": throw new CanonicalJsonError(path, "undefined is not a JSON value");
+		case "bigint": throw new CanonicalJsonError(path, "BigInt is not a JSON value");
+		case "function":
+		case "symbol": throw new CanonicalJsonError(path, `${typeof value} is not a JSON value`);
+	}
+	if (value === null) return;
+	const object = value;
+	if (ancestors.has(object)) throw new CanonicalJsonError(path, "value is circular");
+	const toJSON = object.toJSON;
+	if (typeof toJSON === "function") {
+		assertCanonical(toJSON.call(object), path, new Set(ancestors).add(object));
+		return;
+	}
+	ancestors.add(object);
+	if (Array.isArray(object)) for (let i = 0; i < object.length; i++) {
+		if (!(i in object)) throw new CanonicalJsonError(`${path}[${i}]`, "array is sparse");
+		assertCanonical(object[i], `${path}[${i}]`, ancestors);
+	}
+	else for (const [key, child] of Object.entries(object)) {
+		if (LONE_SURROGATE.test(key)) throw new CanonicalJsonError(path, "key holds a lone surrogate");
+		if (child === void 0) continue;
+		assertCanonical(child, `${path}.${key}`, ancestors);
+	}
+	ancestors.delete(object);
+}
+function bytesToBase64Url(bytes) {
+	let binary = "";
+	for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);
+	return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function bytesToHex(bytes) {
+	return Array.from(bytes).map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+//#endregion
+//#region document-model/peer-agreement.ts
+/** A purged document's protocol; never preferred, so creation never selects it. */
+const DOCUMENT_PURGE_PROTOCOL = "document-purge";
+/** A peer that takes refusals of polled purge markers on the poll. */
+const MARKER_REFUSAL_FEATURE = "marker-refusal";
+const PEER_CAPABILITIES = [
+	{
+		kind: "protocol",
+		name: "base-reducer",
+		baseline: [1, 2],
+		supported: () => [1, 2],
+		preferred: () => 2,
+		optional: false
+	},
+	{
+		kind: "protocol",
+		name: "signature",
+		baseline: [2],
+		supported: () => [2],
+		optional: true
+	},
+	{
+		kind: "protocol",
+		name: DOCUMENT_PURGE_PROTOCOL,
+		baseline: [],
+		supported: () => [1],
+		optional: true
+	},
+	{
+		kind: "feature",
+		name: MARKER_REFUSAL_FEATURE,
+		baseline: [],
+		supported: () => [1]
+	}
+];
+/** `base` plus `extra`; an extra replaces a base entry of the same name. */
+function mergePeerCapabilities(base, extra) {
+	const key = (capability) => `${capability.kind}:${capability.name}`;
+	const replaced = new Set(extra.map(key));
+	return [...base.filter((capability) => !replaced.has(key(capability))), ...extra];
+}
+const PEER_MANIFEST_FORMAT = 1;
+function versionSet(values) {
+	return [...new Set(values)].sort((a, b) => a - b);
+}
+function supportsFrom(capabilities, values) {
+	const supports = {
+		protocols: {},
+		features: {}
+	};
+	for (const capability of capabilities) {
+		const target = capability.kind === "protocol" ? supports.protocols : supports.features;
+		target[capability.name] = versionSet(values(capability));
+	}
+	return supports;
+}
+/** What this reactor supports, for every capability it registers. */
+function localSupports(capabilities, flags) {
+	return supportsFrom(capabilities, (capability) => capability.supported(flags));
+}
+/** What a peer that announces nothing supports. */
+function legacySupports(capabilities) {
+	return supportsFrom(capabilities, (capability) => capability.baseline);
+}
+function manifestRevision(supports, sequence = 0) {
+	const preimage = canonicalJson({
+		protocols: supports.protocols,
+		features: supports.features,
+		sequence
+	}, "peer manifest");
+	return bytesToBase64Url$1(sha256(new TextEncoder().encode(preimage)));
+}
+function localPeerManifest(capabilities, flags, appKey, sequence = 0) {
+	const supports = localSupports(capabilities, flags);
+	return {
+		format: 1,
+		...appKey !== void 0 ? { appKey } : {},
+		sequence,
+		revision: manifestRevision(supports, sequence),
+		protocols: supports.protocols,
+		features: supports.features
+	};
+}
+/** A manifest sent before the one already held; silence carries no sequence. */
+function isOlderManifest(next, held) {
+	return next !== null && held != null && next.sequence < held.sequence;
+}
+/** A peer's manifest, or the baselines for a peer that announced none. */
+function peerSupports(manifest, capabilities) {
+	return manifest ?? legacySupports(capabilities);
+}
+function readVersionMap(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return;
+	const map = {};
+	for (const [name, versions] of Object.entries(value)) {
+		if (!Array.isArray(versions) || !versions.every((v) => Number.isInteger(v))) return;
+		map[name] = versionSet(versions);
+	}
+	return map;
+}
+/**
+* A manifest as received from a peer, or null when it is not one. Formats only
+* add fields, so one of an unknown format is read as its two maps.
+*/
+function readPeerManifest(value) {
+	if (typeof value !== "object" || value === null) return null;
+	const raw = value;
+	const protocols = readVersionMap(raw.protocols);
+	const features = readVersionMap(raw.features ?? {});
+	if (!protocols || !features) return null;
+	const sequence = Number.isSafeInteger(raw.sequence) ? raw.sequence : 0;
+	return {
+		format: 1,
+		...typeof raw.appKey === "string" ? { appKey: raw.appKey } : {},
+		sequence,
+		revision: typeof raw.revision === "string" ? raw.revision : manifestRevision({
+			protocols,
+			features
+		}, sequence),
+		protocols,
+		features
+	};
+}
+/** Only keys this reactor registers are judged; an absent key agrees. */
+function holdReason(peer, versions, capabilities) {
+	for (const capability of capabilities) {
+		if (capability.kind !== "protocol") continue;
+		const version = versions[capability.name];
+		if (version === void 0) continue;
+		const supported = peer.protocols[capability.name] ?? [];
+		if (!supported.includes(version)) return {
+			protocol: capability.name,
+			version,
+			peerSupports: supported
+		};
+	}
+}
+/** Whether a peer runs every version this reactor does, so nothing is held. */
+function coversLocal(peer, local, capabilities) {
+	for (const capability of capabilities) {
+		if (capability.kind !== "protocol") continue;
+		const theirs = peer.protocols[capability.name] ?? [];
+		if (!(local.protocols[capability.name] ?? []).every((version) => theirs.includes(version))) return false;
+	}
+	return true;
+}
+/**
+* protocolVersions for a new document: per negotiated protocol, the highest
+* version up to the local preference that every member supports, else the
+* lowest local one. `requested` wins over what is selected.
+*/
+function selectProtocolVersions(input) {
+	const members = [...input.members];
+	const selected = {};
+	for (const capability of input.capabilities) {
+		if (capability.kind !== "protocol" || !capability.preferred) continue;
+		const preferred = capability.preferred(input.flags);
+		const supported = capability.supported(input.flags);
+		let agreed = supported.filter((version) => version <= preferred);
+		for (const member of members) {
+			const theirs = member.protocols[capability.name] ?? [];
+			agreed = agreed.filter((version) => theirs.includes(version));
+		}
+		selected[capability.name] = agreed.length > 0 ? Math.max(...agreed) : Math.min(...supported);
+	}
+	return {
+		...selected,
+		...input.requested
+	};
+}
+//#endregion
+//#region document-model/purge.ts
+const PURGE_DOCUMENT = "PURGE_DOCUMENT";
+function isPurgeMarker(value) {
+	return ("operation" in value ? value.operation.action : "action" in value ? value.action : value)?.type === PURGE_DOCUMENT;
+}
+/** An unsigned marker; `purgedAtUtcIso` is the action's own timestamp. */
+function purgeDocumentAction(input, options = {}) {
+	const timestampUtcMs = options.timestampUtcMs ?? (/* @__PURE__ */ new Date()).toISOString();
+	return {
+		id: options.id ?? generateId(),
+		type: PURGE_DOCUMENT,
+		scope: "document",
+		timestampUtcMs,
+		input: {
+			documentId: input.documentId,
+			documentType: input.documentType,
+			purgedAtUtcIso: timestampUtcMs,
+			requestId: input.requestId
+		}
+	};
+}
+/** The sole row of a purged stream: document/main, index 0, skip 0, hash "". */
+function purgeMarkerOperation(action) {
+	return {
+		id: deriveOperationId(action.input.documentId, "document", "main", action.id),
+		index: 0,
+		skip: 0,
+		timestampUtcMs: action.timestampUtcMs,
+		hash: "",
+		action
+	};
+}
+/** Protocol versions of a purged id; derived, never stored. */
+function purgedProtocolVersions() {
+	return { [DOCUMENT_PURGE_PROTOCOL]: 1 };
+}
+//#endregion
+export { signActionV2 as A, DOCUMENT_SCOPE_ACTION_TYPES as C, canonicalJson as D, actionSigningTarget as E, v2TupleProblem as M, hashActionV2 as O, CanonicalJsonError as S, actionSignerIdentity as T, mergePeerCapabilities as _, purgedProtocolVersions as a, selectProtocolVersions as b, PEER_CAPABILITIES as c, holdReason as d, isOlderManifest as f, manifestRevision as g, localSupports as h, purgeMarkerOperation as i, targetDocumentId as j, isV2ActionHash as k, PEER_MANIFEST_FORMAT as l, localPeerManifest as m, isPurgeMarker as n, DOCUMENT_PURGE_PROTOCOL as o, legacySupports as p, purgeDocumentAction as r, MARKER_REFUSAL_FEATURE as s, PURGE_DOCUMENT as t, coversLocal as u, peerSupports as v, actionPreimageV2 as w, ACTION_SIGNATURE_V2_PREFIX as x, readPeerManifest as y };
+
+//# sourceMappingURL=purge-v06m_oGz.js.map

package/dist/purge-v06m_oGz.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purge-v06m_oGz.js","names":["stringifyJson","bytesToBase64Url"],"sources":["../document-model/action-signature.ts","../document-model/peer-agreement.ts","../document-model/purge.ts"],"sourcesContent":["import { stringify as stringifyJson } from \"safe-stable-stringify\";\nimport type { Action } from \"./actions.js\";\nimport { buildOperationSignatureMessage } from \"./crypto.js\";\nimport type {\n  AppActionSigner,\n  Signature,\n  UserActionSigner,\n} from \"./signatures.js\";\nimport type { ActionSigningHandler } from \"./types.js\";\n\nexport const ACTION_SIGNATURE_V2_PREFIX = \"v2:\";\n\n// 32 bytes: 42 free characters, then one whose low two bits are zero.\nconst V2_HASH = /^v2:[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$/;\nconst V2_TIMESTAMP = /^[0-9]+$/;\nconst V2_SIGNATURE = /^0x[0-9a-f]{128}$/;\nconst LONE_SURROGATE = /\\p{Cs}/u;\nconst PREIMAGE_FIELDS = [\n  \"version\",\n  \"documentId\",\n  \"branch\",\n  \"scope\",\n  \"type\",\n  \"id\",\n  \"timestampUtcMs\",\n  \"input\",\n  \"signer.user.address\",\n  \"signer.user.networkId\",\n  \"signer.user.chainId\",\n  \"signer.app.key\",\n];\n\n/** The log an operation is stored in, which a v2 tuple is bound to. */\nexport type ActionSigningTarget = {\n  documentId: string;\n  branch: string;\n};\n\n/** Who a v2 tuple attributes the action to; both halves are in the preimage. */\nexport type ActionSignerIdentity = {\n  user: UserActionSigner;\n  app: AppActionSigner;\n};\n\n/** A value that would not survive a JSON store round trip unchanged. */\nexport class CanonicalJsonError extends Error {\n  constructor(path: string, detail: string) {\n    super(`Cannot canonicalize ${path}: ${detail}`);\n    this.name = \"CanonicalJsonError\";\n  }\n}\n\n/** Sorted-key JSON, as the state hash encodes; drops `undefined` properties. */\nexport function canonicalJson(value: unknown, label = \"value\"): string {\n  assertCanonical(value, label, new Set());\n  return stringifyJson(value) as string;\n}\n\n/** Actions the reactor reduces itself, onto the document scope. */\nexport const DOCUMENT_SCOPE_ACTION_TYPES: ReadonlySet<string> = new Set([\n  \"CREATE_DOCUMENT\",\n  \"DELETE_DOCUMENT\",\n  \"UPGRADE_DOCUMENT\",\n  \"ADD_RELATIONSHIP\",\n  \"REMOVE_RELATIONSHIP\",\n  \"UPDATE_RELATIONSHIP\",\n  \"PURGE_DOCUMENT\",\n]);\n\n/** Where a document-scope action writes: `sourceId` or `documentId`. */\nexport function targetDocumentId(\n  action: { type: string; input: unknown },\n  fallback: string,\n): string {\n  const input = action.input as\n    | { documentId?: unknown; sourceId?: unknown }\n    | undefined;\n\n  if (\n    action.type === \"ADD_RELATIONSHIP\" ||\n    action.type === \"REMOVE_RELATIONSHIP\" ||\n    action.type === \"UPDATE_RELATIONSHIP\"\n  ) {\n    return typeof input?.sourceId === \"string\" && input.sourceId.length > 0\n      ? input.sourceId\n      : fallback;\n  }\n\n  return typeof input?.documentId === \"string\" && input.documentId.length > 0\n    ? input.documentId\n    : fallback;\n}\n\n/** The log an action submitted to a job on `documentId` is stored in. */\nexport function actionSigningTarget(\n  action: { type: string; input: unknown },\n  documentId: string,\n  branch: string,\n): ActionSigningTarget {\n  return {\n    documentId: DOCUMENT_SCOPE_ACTION_TYPES.has(action.type)\n      ? targetDocumentId(action, documentId)\n      : documentId,\n    branch,\n  };\n}\n\n/** The identity a signer writes into `context.signer`, and signs over. */\nexport function actionSignerIdentity(signer: {\n  user?: UserActionSigner;\n  app?: AppActionSigner;\n}): ActionSignerIdentity {\n  return {\n    user: {\n      address: signer.user?.address ?? \"\",\n      networkId: signer.user?.networkId ?? \"\",\n      chainId: signer.user?.chainId ?? 0,\n    },\n    app: {\n      name: signer.app?.name ?? \"\",\n      key: signer.app?.key ?? \"\",\n    },\n  };\n}\n\n/** The v2 preimage; throws `CanonicalJsonError` on an unsignable action. */\nexport function actionPreimageV2(\n  action: Action,\n  target: ActionSigningTarget,\n  signer: ActionSignerIdentity,\n): string {\n  if (!target.documentId) {\n    throw new CanonicalJsonError(\"documentId\", \"must not be empty\");\n  }\n  if (!target.branch) {\n    throw new CanonicalJsonError(\"branch\", \"must not be empty\");\n  }\n  if (action.input === undefined) {\n    throw new CanonicalJsonError(\n      \"input\",\n      `action ${action.id} (${action.type}) has no input`,\n    );\n  }\n  const fields: unknown[] = [\n    \"v2\",\n    target.documentId,\n    target.branch,\n    action.scope,\n    action.type,\n    action.id,\n    action.timestampUtcMs,\n    action.input,\n    signer.user.address,\n    signer.user.networkId,\n    signer.user.chainId,\n    signer.app.key,\n  ];\n  fields.forEach((field, i) => {\n    assertCanonical(field, PREIMAGE_FIELDS[i], new Set());\n  });\n  return stringifyJson(fields) as string;\n}\n\n/** `\"v2:\" + base64url(sha256(preimage))`, unpadded. */\nexport async function hashActionV2(\n  action: Action,\n  target: ActionSigningTarget,\n  signer: ActionSignerIdentity,\n): Promise<string> {\n  const preimage = actionPreimageV2(action, target, signer);\n  const digest = await crypto.subtle.digest(\n    \"SHA-256\",\n    new TextEncoder().encode(preimage),\n  );\n  return ACTION_SIGNATURE_V2_PREFIX + bytesToBase64Url(new Uint8Array(digest));\n}\n\n/** Signs `action` as a v2 tuple; the message layout is the legacy one. */\nexport async function signActionV2(params: {\n  action: Action;\n  target: ActionSigningTarget;\n  signer: ActionSignerIdentity;\n  sign: ActionSigningHandler;\n  previousStateHash?: string;\n}): Promise<Signature> {\n  const { action, target, signer, sign } = params;\n  const previousStateHash = params.previousStateHash ?? \"\";\n  if (previousStateHash.includes(\", \")) {\n    throw new Error(\n      `Cannot sign action ${action.id}: the previous state hash contains \", \"`,\n    );\n  }\n\n  const tuple: [string, string, string, string] = [\n    (Date.now() / 1000).toFixed(0),\n    signer.app.key,\n    await hashActionV2(action, target, signer),\n    previousStateHash,\n  ];\n  const signature = await sign(buildOperationSignatureMessage(tuple));\n  if (signature.length !== 64) {\n    throw new Error(\n      `Cannot sign action ${action.id}: expected a 64-byte P-256 signature, got ${signature.length} bytes`,\n    );\n  }\n  return [...tuple, `0x${bytesToHex(signature)}`];\n}\n\n/** Element [2] carries the v2 prefix, whether or not it is well formed. */\nexport function isV2ActionHash(hash: string): boolean {\n  return hash.startsWith(ACTION_SIGNATURE_V2_PREFIX);\n}\n\n/** The strict shape of a v2 tuple, apart from what its hash covers. */\nexport function v2TupleProblem(tuple: Signature): string | undefined {\n  if (!V2_TIMESTAMP.test(tuple[0])) {\n    return \"signing time is not decimal seconds\";\n  }\n  if (!V2_HASH.test(tuple[2])) {\n    return \"hash is not v2: and 43 base64url characters\";\n  }\n  if (!V2_SIGNATURE.test(tuple[4])) {\n    return \"signature is not 0x and 128 lowercase hex digits\";\n  }\n  return undefined;\n}\n\nfunction assertCanonical(\n  value: unknown,\n  path: string,\n  ancestors: Set<object>,\n): void {\n  switch (typeof value) {\n    case \"string\":\n      if (LONE_SURROGATE.test(value)) {\n        throw new CanonicalJsonError(path, \"string holds a lone surrogate\");\n      }\n      return;\n    case \"boolean\":\n      return;\n    case \"number\":\n      if (!Number.isFinite(value)) {\n        throw new CanonicalJsonError(path, `${value} is not a JSON number`);\n      }\n      return;\n    case \"undefined\":\n      throw new CanonicalJsonError(path, \"undefined is not a JSON value\");\n    case \"bigint\":\n      throw new CanonicalJsonError(path, \"BigInt is not a JSON value\");\n    case \"function\":\n    case \"symbol\":\n      throw new CanonicalJsonError(path, `${typeof value} is not a JSON value`);\n  }\n\n  if (value === null) {\n    return;\n  }\n\n  const object = value as object;\n  if (ancestors.has(object)) {\n    throw new CanonicalJsonError(path, \"value is circular\");\n  }\n\n  const toJSON = (object as { toJSON?: unknown }).toJSON;\n  if (typeof toJSON === \"function\") {\n    assertCanonical(\n      (toJSON as () => unknown).call(object),\n      path,\n      new Set(ancestors).add(object),\n    );\n    return;\n  }\n\n  ancestors.add(object);\n  if (Array.isArray(object)) {\n    for (let i = 0; i < object.length; i++) {\n      if (!(i in object)) {\n        throw new CanonicalJsonError(`${path}[${i}]`, \"array is sparse\");\n      }\n      assertCanonical(object[i], `${path}[${i}]`, ancestors);\n    }\n  } else {\n    for (const [key, child] of Object.entries(object)) {\n      if (LONE_SURROGATE.test(key)) {\n        throw new CanonicalJsonError(path, \"key holds a lone surrogate\");\n      }\n      if (child === undefined) {\n        continue;\n      }\n      assertCanonical(child, `${path}.${key}`, ancestors);\n    }\n  }\n  ancestors.delete(object);\n}\n\nfunction bytesToBase64Url(bytes: Uint8Array): string {\n  let binary = \"\";\n  for (let i = 0; i < bytes.length; i++) {\n    binary += String.fromCharCode(bytes[i]);\n  }\n  return btoa(binary)\n    .replace(/\\+/g, \"-\")\n    .replace(/\\//g, \"_\")\n    .replace(/=+$/, \"\");\n}\n\nfunction bytesToHex(bytes: Uint8Array): string {\n  return Array.from(bytes)\n    .map((byte) => byte.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n}\n","import { sha256 } from \"@noble/hashes/sha2.js\";\nimport { canonicalJson } from \"./action-signature.js\";\nimport { bytesToBase64Url } from \"./crypto.js\";\n\n/** The reactor feature flags a capability's support is a function of. */\nexport type PeerCapabilityFlags = {\n  readonly [flag: string]: boolean | undefined;\n};\n\n/** A document protocol, named by its `protocolVersions` key. */\nexport type ProtocolCapability = {\n  kind: \"protocol\";\n  name: string;\n  /** What a peer that announces nothing is assumed to support. */\n  baseline: readonly number[];\n  supported(flags: PeerCapabilityFlags): readonly number[];\n  /** The version new documents take when peers agree. Absent: not negotiated. */\n  preferred?(flags: PeerCapabilityFlags): number;\n  /** A header may omit the key. */\n  optional: boolean;\n};\n\n/** A feature that changes what a peer sends or expects on the wire. */\nexport type FeatureCapability = {\n  kind: \"feature\";\n  name: string;\n  baseline: readonly number[];\n  supported(flags: PeerCapabilityFlags): readonly number[];\n};\n\nexport type PeerCapability = ProtocolCapability | FeatureCapability;\n\n/** A purged document's protocol; never preferred, so creation never selects it. */\nexport const DOCUMENT_PURGE_PROTOCOL = \"document-purge\";\n\n/** A peer that takes refusals of polled purge markers on the poll. */\nexport const MARKER_REFUSAL_FEATURE = \"marker-refusal\";\n\n// Baselines are frozen at what the last release without peer agreement runs.\nexport const PEER_CAPABILITIES: readonly PeerCapability[] = [\n  {\n    kind: \"protocol\",\n    name: \"base-reducer\",\n    baseline: [1, 2],\n    supported: () => [1, 2],\n    preferred: () => 2,\n    optional: false,\n  },\n  {\n    kind: \"protocol\",\n    name: \"signature\",\n    baseline: [2],\n    supported: () => [2],\n    optional: true,\n  },\n  {\n    kind: \"protocol\",\n    name: DOCUMENT_PURGE_PROTOCOL,\n    baseline: [],\n    supported: () => [1],\n    optional: true,\n  },\n  {\n    kind: \"feature\",\n    name: MARKER_REFUSAL_FEATURE,\n    baseline: [],\n    supported: () => [1],\n  },\n];\n\n/** `base` plus `extra`; an extra replaces a base entry of the same name. */\nexport function mergePeerCapabilities(\n  base: readonly PeerCapability[],\n  extra: readonly PeerCapability[],\n): PeerCapability[] {\n  const key = (capability: PeerCapability) =>\n    `${capability.kind}:${capability.name}`;\n  const replaced = new Set(extra.map(key));\n  return [\n    ...base.filter((capability) => !replaced.has(key(capability))),\n    ...extra,\n  ];\n}\n\nexport const PEER_MANIFEST_FORMAT = 1;\n\nexport type Supports = {\n  protocols: { [protocol: string]: readonly number[] };\n  features: { [feature: string]: readonly number[] };\n};\n\nexport type PeerManifest = Supports & {\n  format: 1;\n  /** The signer's did:key, when configured; informational. */\n  appKey?: string;\n  /** Grows with every start of the reactor; a peer ignores an older one. */\n  sequence: number;\n  /** base64url(sha256(canonicalJson(Supports & { sequence }))) */\n  revision: string;\n};\n\nfunction versionSet(values: readonly number[]): number[] {\n  return [...new Set(values)].sort((a, b) => a - b);\n}\n\nfunction supportsFrom(\n  capabilities: readonly PeerCapability[],\n  values: (capability: PeerCapability) => readonly number[],\n): Supports {\n  const supports: Supports = { protocols: {}, features: {} };\n  for (const capability of capabilities) {\n    const target =\n      capability.kind === \"protocol\" ? supports.protocols : supports.features;\n    target[capability.name] = versionSet(values(capability));\n  }\n  return supports;\n}\n\n/** What this reactor supports, for every capability it registers. */\nexport function localSupports(\n  capabilities: readonly PeerCapability[],\n  flags: PeerCapabilityFlags,\n): Supports {\n  return supportsFrom(capabilities, (capability) =>\n    capability.supported(flags),\n  );\n}\n\n/** What a peer that announces nothing supports. */\nexport function legacySupports(\n  capabilities: readonly PeerCapability[],\n): Supports {\n  return supportsFrom(capabilities, (capability) => capability.baseline);\n}\n\nexport function manifestRevision(supports: Supports, sequence = 0): string {\n  const preimage = canonicalJson(\n    { protocols: supports.protocols, features: supports.features, sequence },\n    \"peer manifest\",\n  );\n  return bytesToBase64Url(sha256(new TextEncoder().encode(preimage)));\n}\n\nexport function localPeerManifest(\n  capabilities: readonly PeerCapability[],\n  flags: PeerCapabilityFlags,\n  appKey?: string,\n  sequence = 0,\n): PeerManifest {\n  const supports = localSupports(capabilities, flags);\n  return {\n    format: PEER_MANIFEST_FORMAT,\n    ...(appKey !== undefined ? { appKey } : {}),\n    sequence,\n    revision: manifestRevision(supports, sequence),\n    protocols: supports.protocols,\n    features: supports.features,\n  };\n}\n\n/** A manifest sent before the one already held; silence carries no sequence. */\nexport function isOlderManifest(\n  next: PeerManifest | null,\n  held: PeerManifest | null | undefined,\n): boolean {\n  return next !== null && held != null && next.sequence < held.sequence;\n}\n\n/** A peer's manifest, or the baselines for a peer that announced none. */\nexport function peerSupports(\n  manifest: PeerManifest | null,\n  capabilities: readonly PeerCapability[],\n): Supports {\n  return manifest ?? legacySupports(capabilities);\n}\n\nfunction readVersionMap(\n  value: unknown,\n): { [name: string]: readonly number[] } | undefined {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    return undefined;\n  }\n  const map: { [name: string]: readonly number[] } = {};\n  for (const [name, versions] of Object.entries(value)) {\n    if (\n      !Array.isArray(versions) ||\n      !versions.every((v) => Number.isInteger(v))\n    ) {\n      return undefined;\n    }\n    map[name] = versionSet(versions as number[]);\n  }\n  return map;\n}\n\n/**\n * A manifest as received from a peer, or null when it is not one. Formats only\n * add fields, so one of an unknown format is read as its two maps.\n */\nexport function readPeerManifest(value: unknown): PeerManifest | null {\n  if (typeof value !== \"object\" || value === null) {\n    return null;\n  }\n  const raw = value as Record<string, unknown>;\n  const protocols = readVersionMap(raw.protocols);\n  const features = readVersionMap(raw.features ?? {});\n  if (!protocols || !features) {\n    return null;\n  }\n  const sequence = Number.isSafeInteger(raw.sequence)\n    ? (raw.sequence as number)\n    : 0;\n  return {\n    format: PEER_MANIFEST_FORMAT,\n    ...(typeof raw.appKey === \"string\" ? { appKey: raw.appKey } : {}),\n    sequence,\n    revision:\n      typeof raw.revision === \"string\"\n        ? raw.revision\n        : manifestRevision({ protocols, features }, sequence),\n    protocols,\n    features,\n  };\n}\n\n/** Why a document may not go to a peer. */\nexport type HoldReason = {\n  protocol: string;\n  version: number;\n  peerSupports: readonly number[];\n};\n\n/** Only keys this reactor registers are judged; an absent key agrees. */\nexport function holdReason(\n  peer: Supports,\n  versions: { readonly [protocol: string]: number },\n  capabilities: readonly PeerCapability[],\n): HoldReason | undefined {\n  for (const capability of capabilities) {\n    if (capability.kind !== \"protocol\") continue;\n    const version = versions[capability.name] as number | undefined;\n    if (version === undefined) continue;\n    const supported = peer.protocols[capability.name] ?? [];\n    if (!supported.includes(version)) {\n      return { protocol: capability.name, version, peerSupports: supported };\n    }\n  }\n  return undefined;\n}\n\n/** Whether a peer runs every version this reactor does, so nothing is held. */\nexport function coversLocal(\n  peer: Supports,\n  local: Supports,\n  capabilities: readonly PeerCapability[],\n): boolean {\n  for (const capability of capabilities) {\n    if (capability.kind !== \"protocol\") continue;\n    const theirs = peer.protocols[capability.name] ?? [];\n    const ours = local.protocols[capability.name] ?? [];\n    if (!ours.every((version) => theirs.includes(version))) {\n      return false;\n    }\n  }\n  return true;\n}\n\n/**\n * protocolVersions for a new document: per negotiated protocol, the highest\n * version up to the local preference that every member supports, else the\n * lowest local one. `requested` wins over what is selected.\n */\nexport function selectProtocolVersions(input: {\n  capabilities: readonly PeerCapability[];\n  flags: PeerCapabilityFlags;\n  members: Iterable<Supports>;\n  requested?: { readonly [protocol: string]: number };\n}): { [protocol: string]: number } {\n  const members = [...input.members];\n  const selected: { [protocol: string]: number } = {};\n  for (const capability of input.capabilities) {\n    if (capability.kind !== \"protocol\" || !capability.preferred) continue;\n    const preferred = capability.preferred(input.flags);\n    const supported = capability.supported(input.flags);\n    let agreed = supported.filter((version) => version <= preferred);\n    for (const member of members) {\n      const theirs = member.protocols[capability.name] ?? [];\n      agreed = agreed.filter((version) => theirs.includes(version));\n    }\n    selected[capability.name] =\n      agreed.length > 0 ? Math.max(...agreed) : Math.min(...supported);\n  }\n  return { ...selected, ...input.requested };\n}\n","import type { Action } from \"./actions.js\";\nimport type { Operation, OperationWithContext } from \"./operations.js\";\nimport { DOCUMENT_PURGE_PROTOCOL } from \"./peer-agreement.js\";\nimport type { PurgeDocumentAction, PurgeDocumentActionInput } from \"./types.js\";\nimport { deriveOperationId, generateId } from \"./utils.js\";\n\nexport const PURGE_DOCUMENT = \"PURGE_DOCUMENT\";\n\nexport type PurgeMarkerOperation = Operation & { action: PurgeDocumentAction };\n\ntype ActionLike = Pick<Action, \"type\">;\n\nexport function isPurgeMarker(value: Action): value is PurgeDocumentAction;\nexport function isPurgeMarker(value: Operation): value is PurgeMarkerOperation;\nexport function isPurgeMarker(\n  value: OperationWithContext,\n): value is OperationWithContext & { operation: PurgeMarkerOperation };\nexport function isPurgeMarker(\n  value: ActionLike | { action?: ActionLike } | { operation: Operation },\n): boolean;\nexport function isPurgeMarker(\n  value: ActionLike | { action?: ActionLike } | { operation: Operation },\n): boolean {\n  const action =\n    \"operation\" in value\n      ? value.operation.action\n      : \"action\" in value\n        ? value.action\n        : (value as ActionLike);\n  return action?.type === PURGE_DOCUMENT;\n}\n\n/** An unsigned marker; `purgedAtUtcIso` is the action's own timestamp. */\nexport function purgeDocumentAction(\n  input: Omit<PurgeDocumentActionInput, \"purgedAtUtcIso\">,\n  options: { id?: string; timestampUtcMs?: string } = {},\n): PurgeDocumentAction {\n  const timestampUtcMs = options.timestampUtcMs ?? new Date().toISOString();\n  return {\n    id: options.id ?? generateId(),\n    type: PURGE_DOCUMENT,\n    scope: \"document\",\n    timestampUtcMs,\n    input: {\n      documentId: input.documentId,\n      documentType: input.documentType,\n      purgedAtUtcIso: timestampUtcMs,\n      requestId: input.requestId,\n    },\n  };\n}\n\n/** The sole row of a purged stream: document/main, index 0, skip 0, hash \"\". */\nexport function purgeMarkerOperation(\n  action: PurgeDocumentAction,\n): PurgeMarkerOperation {\n  return {\n    id: deriveOperationId(\n      action.input.documentId,\n      \"document\",\n      \"main\",\n      action.id,\n    ),\n    index: 0,\n    skip: 0,\n    timestampUtcMs: action.timestampUtcMs,\n    hash: \"\",\n    action,\n  };\n}\n\n/** Protocol versions of a purged id; derived, never stored. */\nexport function purgedProtocolVersions(): { [protocol: string]: number } {\n  return { [DOCUMENT_PURGE_PROTOCOL]: 1 };\n}\n"],"mappings":";;;;AAUA,MAAa,6BAA6B;AAG1C,MAAM,UAAU;AAChB,MAAM,eAAe;AACrB,MAAM,eAAe;AACrB,MAAM,iBAAiB;AACvB,MAAM,kBAAkB;CACtB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAeA,IAAa,qBAAb,cAAwC,MAAM;CAC5C,YAAY,MAAc,QAAgB;EACxC,MAAM,uBAAuB,KAAK,IAAI,QAAQ;EAC9C,KAAK,OAAO;CACd;AACF;;AAGA,SAAgB,cAAc,OAAgB,QAAQ,SAAiB;CACrE,gBAAgB,OAAO,uBAAO,IAAI,IAAI,CAAC;CACvC,OAAOA,UAAc,KAAK;AAC5B;;AAGA,MAAa,8CAAmD,IAAI,IAAI;CACtE;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAGD,SAAgB,iBACd,QACA,UACQ;CACR,MAAM,QAAQ,OAAO;CAIrB,IACE,OAAO,SAAS,sBAChB,OAAO,SAAS,yBAChB,OAAO,SAAS,uBAEhB,OAAO,OAAO,OAAO,aAAa,YAAY,MAAM,SAAS,SAAS,IAClE,MAAM,WACN;CAGN,OAAO,OAAO,OAAO,eAAe,YAAY,MAAM,WAAW,SAAS,IACtE,MAAM,aACN;AACN;;AAGA,SAAgB,oBACd,QACA,YACA,QACqB;CACrB,OAAO;EACL,YAAY,4BAA4B,IAAI,OAAO,IAAI,IACnD,iBAAiB,QAAQ,UAAU,IACnC;EACJ;CACF;AACF;;AAGA,SAAgB,qBAAqB,QAGZ;CACvB,OAAO;EACL,MAAM;GACJ,SAAS,OAAO,MAAM,WAAW;GACjC,WAAW,OAAO,MAAM,aAAa;GACrC,SAAS,OAAO,MAAM,WAAW;EACnC;EACA,KAAK;GACH,MAAM,OAAO,KAAK,QAAQ;GAC1B,KAAK,OAAO,KAAK,OAAO;EAC1B;CACF;AACF;;AAGA,SAAgB,iBACd,QACA,QACA,QACQ;CACR,IAAI,CAAC,OAAO,YACV,MAAM,IAAI,mBAAmB,cAAc,mBAAmB;CAEhE,IAAI,CAAC,OAAO,QACV,MAAM,IAAI,mBAAmB,UAAU,mBAAmB;CAE5D,IAAI,OAAO,UAAU,KAAA,GACnB,MAAM,IAAI,mBACR,SACA,UAAU,OAAO,GAAG,IAAI,OAAO,KAAK,eACtC;CAEF,MAAM,SAAoB;EACxB;EACA,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO,KAAK;EACZ,OAAO,KAAK;EACZ,OAAO,KAAK;EACZ,OAAO,IAAI;CACb;CACA,OAAO,SAAS,OAAO,MAAM;EAC3B,gBAAgB,OAAO,gBAAgB,oBAAI,IAAI,IAAI,CAAC;CACtD,CAAC;CACD,OAAOA,UAAc,MAAM;AAC7B;;AAGA,eAAsB,aACpB,QACA,QACA,QACiB;CACjB,MAAM,WAAW,iBAAiB,QAAQ,QAAQ,MAAM;CACxD,MAAM,SAAS,MAAM,OAAO,OAAO,OACjC,WACA,IAAI,YAAY,CAAC,CAAC,OAAO,QAAQ,CACnC;CACA,OAAA,QAAoC,iBAAiB,IAAI,WAAW,MAAM,CAAC;AAC7E;;AAGA,eAAsB,aAAa,QAMZ;CACrB,MAAM,EAAE,QAAQ,QAAQ,QAAQ,SAAS;CACzC,MAAM,oBAAoB,OAAO,qBAAqB;CACtD,IAAI,kBAAkB,SAAS,IAAI,GACjC,MAAM,IAAI,MACR,sBAAsB,OAAO,GAAG,wCAClC;CAGF,MAAM,QAA0C;GAC7C,KAAK,IAAI,IAAI,IAAA,CAAM,QAAQ,CAAC;EAC7B,OAAO,IAAI;EACX,MAAM,aAAa,QAAQ,QAAQ,MAAM;EACzC;CACF;CACA,MAAM,YAAY,MAAM,KAAK,+BAA+B,KAAK,CAAC;CAClE,IAAI,UAAU,WAAW,IACvB,MAAM,IAAI,MACR,sBAAsB,OAAO,GAAG,4CAA4C,UAAU,OAAO,OAC/F;CAEF,OAAO,CAAC,GAAG,OAAO,KAAK,WAAW,SAAS,GAAG;AAChD;;AAGA,SAAgB,eAAe,MAAuB;CACpD,OAAO,KAAK,WAAA,KAAqC;AACnD;;AAGA,SAAgB,eAAe,OAAsC;CACnE,IAAI,CAAC,aAAa,KAAK,MAAM,EAAE,GAC7B,OAAO;CAET,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,GACxB,OAAO;CAET,IAAI,CAAC,aAAa,KAAK,MAAM,EAAE,GAC7B,OAAO;AAGX;AAEA,SAAS,gBACP,OACA,MACA,WACM;CACN,QAAQ,OAAO,OAAf;EACE,KAAK;GACH,IAAI,eAAe,KAAK,KAAK,GAC3B,MAAM,IAAI,mBAAmB,MAAM,+BAA+B;GAEpE;EACF,KAAK,WACH;EACF,KAAK;GACH,IAAI,CAAC,OAAO,SAAS,KAAK,GACxB,MAAM,IAAI,mBAAmB,MAAM,GAAG,MAAM,sBAAsB;GAEpE;EACF,KAAK,aACH,MAAM,IAAI,mBAAmB,MAAM,+BAA+B;EACpE,KAAK,UACH,MAAM,IAAI,mBAAmB,MAAM,4BAA4B;EACjE,KAAK;EACL,KAAK,UACH,MAAM,IAAI,mBAAmB,MAAM,GAAG,OAAO,MAAM,qBAAqB;CAC5E;CAEA,IAAI,UAAU,MACZ;CAGF,MAAM,SAAS;CACf,IAAI,UAAU,IAAI,MAAM,GACtB,MAAM,IAAI,mBAAmB,MAAM,mBAAmB;CAGxD,MAAM,SAAU,OAAgC;CAChD,IAAI,OAAO,WAAW,YAAY;EAChC,gBACG,OAAyB,KAAK,MAAM,GACrC,MACA,IAAI,IAAI,SAAS,CAAC,CAAC,IAAI,MAAM,CAC/B;EACA;CACF;CAEA,UAAU,IAAI,MAAM;CACpB,IAAI,MAAM,QAAQ,MAAM,GACtB,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;EACtC,IAAI,EAAE,KAAK,SACT,MAAM,IAAI,mBAAmB,GAAG,KAAK,GAAG,EAAE,IAAI,iBAAiB;EAEjE,gBAAgB,OAAO,IAAI,GAAG,KAAK,GAAG,EAAE,IAAI,SAAS;CACvD;MAEA,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,GAAG;EACjD,IAAI,eAAe,KAAK,GAAG,GACzB,MAAM,IAAI,mBAAmB,MAAM,4BAA4B;EAEjE,IAAI,UAAU,KAAA,GACZ;EAEF,gBAAgB,OAAO,GAAG,KAAK,GAAG,OAAO,SAAS;CACpD;CAEF,UAAU,OAAO,MAAM;AACzB;AAEA,SAAS,iBAAiB,OAA2B;CACnD,IAAI,SAAS;CACb,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAChC,UAAU,OAAO,aAAa,MAAM,EAAE;CAExC,OAAO,KAAK,MAAM,CAAC,CAChB,QAAQ,OAAO,GAAG,CAAC,CACnB,QAAQ,OAAO,GAAG,CAAC,CACnB,QAAQ,OAAO,EAAE;AACtB;AAEA,SAAS,WAAW,OAA2B;CAC7C,OAAO,MAAM,KAAK,KAAK,CAAC,CACrB,KAAK,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CACjD,KAAK,EAAE;AACZ;;;;ACrRA,MAAa,0BAA0B;;AAGvC,MAAa,yBAAyB;AAGtC,MAAa,oBAA+C;CAC1D;EACE,MAAM;EACN,MAAM;EACN,UAAU,CAAC,GAAG,CAAC;EACf,iBAAiB,CAAC,GAAG,CAAC;EACtB,iBAAiB;EACjB,UAAU;CACZ;CACA;EACE,MAAM;EACN,MAAM;EACN,UAAU,CAAC,CAAC;EACZ,iBAAiB,CAAC,CAAC;EACnB,UAAU;CACZ;CACA;EACE,MAAM;EACN,MAAM;EACN,UAAU,CAAC;EACX,iBAAiB,CAAC,CAAC;EACnB,UAAU;CACZ;CACA;EACE,MAAM;EACN,MAAM;EACN,UAAU,CAAC;EACX,iBAAiB,CAAC,CAAC;CACrB;AACF;;AAGA,SAAgB,sBACd,MACA,OACkB;CAClB,MAAM,OAAO,eACX,GAAG,WAAW,KAAK,GAAG,WAAW;CACnC,MAAM,WAAW,IAAI,IAAI,MAAM,IAAI,GAAG,CAAC;CACvC,OAAO,CACL,GAAG,KAAK,QAAQ,eAAe,CAAC,SAAS,IAAI,IAAI,UAAU,CAAC,CAAC,GAC7D,GAAG,KACL;AACF;AAEA,MAAa,uBAAuB;AAiBpC,SAAS,WAAW,QAAqC;CACvD,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC;AAClD;AAEA,SAAS,aACP,cACA,QACU;CACV,MAAM,WAAqB;EAAE,WAAW,CAAC;EAAG,UAAU,CAAC;CAAE;CACzD,KAAK,MAAM,cAAc,cAAc;EACrC,MAAM,SACJ,WAAW,SAAS,aAAa,SAAS,YAAY,SAAS;EACjE,OAAO,WAAW,QAAQ,WAAW,OAAO,UAAU,CAAC;CACzD;CACA,OAAO;AACT;;AAGA,SAAgB,cACd,cACA,OACU;CACV,OAAO,aAAa,eAAe,eACjC,WAAW,UAAU,KAAK,CAC5B;AACF;;AAGA,SAAgB,eACd,cACU;CACV,OAAO,aAAa,eAAe,eAAe,WAAW,QAAQ;AACvE;AAEA,SAAgB,iBAAiB,UAAoB,WAAW,GAAW;CACzE,MAAM,WAAW,cACf;EAAE,WAAW,SAAS;EAAW,UAAU,SAAS;EAAU;CAAS,GACvE,eACF;CACA,OAAOC,mBAAiB,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC;AACpE;AAEA,SAAgB,kBACd,cACA,OACA,QACA,WAAW,GACG;CACd,MAAM,WAAW,cAAc,cAAc,KAAK;CAClD,OAAO;EACL,QAAA;EACA,GAAI,WAAW,KAAA,IAAY,EAAE,OAAO,IAAI,CAAC;EACzC;EACA,UAAU,iBAAiB,UAAU,QAAQ;EAC7C,WAAW,SAAS;EACpB,UAAU,SAAS;CACrB;AACF;;AAGA,SAAgB,gBACd,MACA,MACS;CACT,OAAO,SAAS,QAAQ,QAAQ,QAAQ,KAAK,WAAW,KAAK;AAC/D;;AAGA,SAAgB,aACd,UACA,cACU;CACV,OAAO,YAAY,eAAe,YAAY;AAChD;AAEA,SAAS,eACP,OACmD;CACnD,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE;CAEF,MAAM,MAA6C,CAAC;CACpD,KAAK,MAAM,CAAC,MAAM,aAAa,OAAO,QAAQ,KAAK,GAAG;EACpD,IACE,CAAC,MAAM,QAAQ,QAAQ,KACvB,CAAC,SAAS,OAAO,MAAM,OAAO,UAAU,CAAC,CAAC,GAE1C;EAEF,IAAI,QAAQ,WAAW,QAAoB;CAC7C;CACA,OAAO;AACT;;;;;AAMA,SAAgB,iBAAiB,OAAqC;CACpE,IAAI,OAAO,UAAU,YAAY,UAAU,MACzC,OAAO;CAET,MAAM,MAAM;CACZ,MAAM,YAAY,eAAe,IAAI,SAAS;CAC9C,MAAM,WAAW,eAAe,IAAI,YAAY,CAAC,CAAC;CAClD,IAAI,CAAC,aAAa,CAAC,UACjB,OAAO;CAET,MAAM,WAAW,OAAO,cAAc,IAAI,QAAQ,IAC7C,IAAI,WACL;CACJ,OAAO;EACL,QAAA;EACA,GAAI,OAAO,IAAI,WAAW,WAAW,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC;EAC/D;EACA,UACE,OAAO,IAAI,aAAa,WACpB,IAAI,WACJ,iBAAiB;GAAE;GAAW;EAAS,GAAG,QAAQ;EACxD;EACA;CACF;AACF;;AAUA,SAAgB,WACd,MACA,UACA,cACwB;CACxB,KAAK,MAAM,cAAc,cAAc;EACrC,IAAI,WAAW,SAAS,YAAY;EACpC,MAAM,UAAU,SAAS,WAAW;EACpC,IAAI,YAAY,KAAA,GAAW;EAC3B,MAAM,YAAY,KAAK,UAAU,WAAW,SAAS,CAAC;EACtD,IAAI,CAAC,UAAU,SAAS,OAAO,GAC7B,OAAO;GAAE,UAAU,WAAW;GAAM;GAAS,cAAc;EAAU;CAEzE;AAEF;;AAGA,SAAgB,YACd,MACA,OACA,cACS;CACT,KAAK,MAAM,cAAc,cAAc;EACrC,IAAI,WAAW,SAAS,YAAY;EACpC,MAAM,SAAS,KAAK,UAAU,WAAW,SAAS,CAAC;EAEnD,IAAI,EADS,MAAM,UAAU,WAAW,SAAS,CAAC,EAAA,CACxC,OAAO,YAAY,OAAO,SAAS,OAAO,CAAC,GACnD,OAAO;CAEX;CACA,OAAO;AACT;;;;;;AAOA,SAAgB,uBAAuB,OAKJ;CACjC,MAAM,UAAU,CAAC,GAAG,MAAM,OAAO;CACjC,MAAM,WAA2C,CAAC;CAClD,KAAK,MAAM,cAAc,MAAM,cAAc;EAC3C,IAAI,WAAW,SAAS,cAAc,CAAC,WAAW,WAAW;EAC7D,MAAM,YAAY,WAAW,UAAU,MAAM,KAAK;EAClD,MAAM,YAAY,WAAW,UAAU,MAAM,KAAK;EAClD,IAAI,SAAS,UAAU,QAAQ,YAAY,WAAW,SAAS;EAC/D,KAAK,MAAM,UAAU,SAAS;GAC5B,MAAM,SAAS,OAAO,UAAU,WAAW,SAAS,CAAC;GACrD,SAAS,OAAO,QAAQ,YAAY,OAAO,SAAS,OAAO,CAAC;EAC9D;EACA,SAAS,WAAW,QAClB,OAAO,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI,KAAK,IAAI,GAAG,SAAS;CACnE;CACA,OAAO;EAAE,GAAG;EAAU,GAAG,MAAM;CAAU;AAC3C;;;AC/RA,MAAa,iBAAiB;AAc9B,SAAgB,cACd,OACS;CAOT,QALE,eAAe,QACX,MAAM,UAAU,SAChB,YAAY,QACV,MAAM,SACL,MAAA,EACM,SAAS;AAC1B;;AAGA,SAAgB,oBACd,OACA,UAAoD,CAAC,GAChC;CACrB,MAAM,iBAAiB,QAAQ,mCAAkB,IAAI,KAAK,EAAA,CAAE,YAAY;CACxE,OAAO;EACL,IAAI,QAAQ,MAAM,WAAW;EAC7B,MAAM;EACN,OAAO;EACP;EACA,OAAO;GACL,YAAY,MAAM;GAClB,cAAc,MAAM;GACpB,gBAAgB;GAChB,WAAW,MAAM;EACnB;CACF;AACF;;AAGA,SAAgB,qBACd,QACsB;CACtB,OAAO;EACL,IAAI,kBACF,OAAO,MAAM,YACb,YACA,QACA,OAAO,EACT;EACA,OAAO;EACP,MAAM;EACN,gBAAgB,OAAO;EACvB,MAAM;EACN;CACF;AACF;;AAGA,SAAgB,yBAAyD;CACvE,OAAO,GAAG,0BAA0B,EAAE;AACxC"}

package/dist/registry/index.d.ts

@@ -1,16 +1,15 @@
-import { B as DEFAULT_REGISTRY_URL } from "../types-CpnWmiFY.js";
-import { B as RegistryPackageMap, F as PackageInfo, H as RegistryPackageStatus, I as PackageListItem, L as PackagePage, R as RegistryPackage, V as RegistryPackageSource, z as RegistryPackageList } from "../types-YqLqb0Zb.js";
+import { U as DEFAULT_REGISTRY_URL } from "../types-DzleLgA8.js";
+import { B as PackagePage, F as PACKAGE_MODULE_TYPES, G as RegistryPackageSource, H as RegistryPackage, I as PackageFacets, K as RegistryPackageStatus, L as PackageInfo, R as PackageListItem, U as RegistryPackageList, V as Page, W as RegistryPackageMap, z as PackageModuleType } from "../types-CfU91XFU.js";
 import { slimManifest } from "./manifest-slim.js";
 import { toCdnUrl } from "./urls.js";
 import { getUpdateTarget, parseInstallSpec } from "./updates.js";
-
 //#region registry/registry.d.ts
 /**
  * Extract the host portion of a registry URL — what npm uses as the key in
  * `~/.npmrc` for per-registry tokens (e.g. `//registry.vetra.io/`).
  */
-declare function registryAuthKey(registryUrl: string): string;
-interface ResolveRegistryUrlOptions {
+export declare function registryAuthKey(registryUrl: string): string;
+export interface ResolveRegistryUrlOptions {
   /** Explicit registry URL (e.g. from --registry flag). Highest priority. */
   registry?: string;
   /** Project path to read powerhouse.config.json from. */
@@ -21,13 +20,13 @@ interface ResolveRegistryUrlOptions {
 /**
  * Resolve the registry URL with priority: flag > env > config > default.
  */
-declare function resolveRegistryUrl(options: ResolveRegistryUrlOptions): string;
+export declare function resolveRegistryUrl(options: ResolveRegistryUrlOptions): string;
 /**
  * Check if the user is authenticated with the given npm registry.
  * Returns the username on success, throws on failure.
  */
-declare function checkNpmAuth(registryUrl: string): Promise<string>;
-interface NpmPublishOptions {
+export declare function checkNpmAuth(registryUrl: string): Promise<string>;
+export interface NpmPublishOptions {
   /** Registry URL to publish to. */
   registryUrl: string;
   /** Working directory (project root). */
@@ -38,7 +37,7 @@ interface NpmPublishOptions {
    *  `_authToken` config flag rather than read from the user's `.npmrc`. */
   authToken?: string;
 }
-interface NpmPublishResult {
+export interface NpmPublishResult {
   /** stdout from npm publish. */
   stdout: string;
 }
@@ -50,14 +49,14 @@ interface NpmPublishResult {
  * `--//host/:_authToken=<token>` flag (npm's standard form for per-registry
  * tokens) so we never have to write to `~/.npmrc`.
  */
-declare function npmPublish(options: NpmPublishOptions): Promise<NpmPublishResult>;
+export declare function npmPublish(options: NpmPublishOptions): Promise<NpmPublishResult>;
 /**
  * Write `_authToken=<token>` for the given registry host into `~/.npmrc`,
  * preserving any other lines. Replaces the existing entry for the same key
  * if present. Returns the absolute path to the npmrc that was written.
  */
-declare function writeRegistryAuthToken(registryUrl: string, token: string): Promise<string>;
-interface NpmUnpublishOptions {
+export declare function writeRegistryAuthToken(registryUrl: string, token: string): Promise<string>;
+export interface NpmUnpublishOptions {
   /** Registry URL to unpublish from. */
   registryUrl: string;
   /** Working directory (project root). */
@@ -69,7 +68,7 @@ interface NpmUnpublishOptions {
   /** Bearer token for the registry (same semantics as `NpmPublishOptions.authToken`). */
   authToken?: string;
 }
-interface NpmUnpublishResult {
+export interface NpmUnpublishResult {
   /** stdout from npm unpublish. */
   stdout: string;
 }
@@ -78,7 +77,8 @@ interface NpmUnpublishResult {
  * Always passes `--force` because npm otherwise refuses to unpublish packages
  * older than 72h (a public-npmjs safeguard that doesn't apply to private registries).
  */
-declare function npmUnpublish(options: NpmUnpublishOptions): Promise<NpmUnpublishResult>;
+export declare function npmUnpublish(options: NpmUnpublishOptions): Promise<NpmUnpublishResult>;
 //#endregion
-export { DEFAULT_REGISTRY_URL, NpmPublishOptions, NpmPublishResult, NpmUnpublishOptions, NpmUnpublishResult, PackageInfo, PackageListItem, PackagePage, RegistryPackage, RegistryPackageList, RegistryPackageMap, RegistryPackageSource, RegistryPackageStatus, ResolveRegistryUrlOptions, checkNpmAuth, getUpdateTarget, npmPublish, npmUnpublish, parseInstallSpec, registryAuthKey, resolveRegistryUrl, slimManifest, toCdnUrl, writeRegistryAuthToken };
+export { DEFAULT_REGISTRY_URL, PACKAGE_MODULE_TYPES, PackageFacets, PackageInfo, PackageListItem, PackageModuleType, PackagePage, Page, RegistryPackage, RegistryPackageList, RegistryPackageMap, RegistryPackageSource, RegistryPackageStatus, getUpdateTarget, parseInstallSpec, slimManifest, toCdnUrl };
+export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/registry/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../registry/registry.ts"],"mappings":";;;;;;;;;;;iBAgBgB,eAAA,CAAgB,WAAA;AAAA,UAQf,yBAAA;;EAEf,QAAA;EAVc;EAYd,WAAA;;EAEA,GAAA,GAAM,MAAA;AAAA;AANR;;;AAAA,iBAYgB,kBAAA,CAAmB,OAAA,EAAS,yBAAA;;;;;iBAiBtB,YAAA,CAAa,WAAA,WAAsB,OAAA;AAAA,UAIxC,iBAAA;EArBD;EAuBd,WAAA;;EAEA,GAAA;EAzBmE;EA2BnE,IAAA;EAVgC;;EAahC,SAAA;AAAA;AAAA,UAGe,gBAAA;EAZiB;EAchC,MAAA;AAAA;;;;;;;AAFF;;iBAasB,UAAA,CACpB,OAAA,EAAS,iBAAA,GACR,OAAA,CAAQ,gBAAA;;;AAFX;;;iBAiBsB,sBAAA,CACpB,WAAA,UACA,KAAA,WACC,OAAA;AAAA,UAmBc,mBAAA;EArCd;EAuCD,WAAA;EAvCQ;EAyCR,GAAA;EA1CA;EA4CA,IAAA;EA3CS;EA6CT,IAAA;EA7CyB;EA+CzB,SAAA;AAAA;AAAA,UAGe,kBAAA;EAhCP;EAkCR,MAAA;AAAA;;;;AAfF;;iBAuBsB,YAAA,CACpB,OAAA,EAAS,mBAAA,GACR,OAAA,CAAQ,kBAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../registry/registry.ts"],"mappings":";;;;;;;;;;wBAgBgB,gBAAgB;iBAQf;;EAEf;;EAEA;;EAEA,MAAM;;;;;wBAMQ,mBAAmB,SAAS;;;;;wBAiBtB,aAAa,sBAAsB;iBAIxC;;EAEf;;EAEA;;EAEA;;;EAGA;;iBAGe;;EAEf;;;;;;;;;;wBAWoB,WACpB,SAAS,oBACR,QAAQ;;;;;;wBAeW,uBACpB,qBACA,gBACC;iBAmBc;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;iBAGe;;EAEf;;;;;;;wBAQoB,aACpB,SAAS,sBACR,QAAQ"}

package/dist/registry/index.js

@@ -5,14 +5,32 @@ import { promises, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import spawn from "cross-spawn";
+//#region registry/types.ts
+/** Manifest module lists accepted by the `moduleType` filter. */
+const PACKAGE_MODULE_TYPES = [
+	"documentModels",
+	"editors",
+	"apps",
+	"subgraphs",
+	"processors"
+];
 const DEFAULT_REGISTRY_URL = "https://registry.vetra.io";
 const POWERHOUSE_CONFIG_FILE = "powerhouse.config.json";
-join(homedir(), ".ph");
+const HOME_DIR = homedir();
+join(HOME_DIR, ".ph");
 const VERSIONED_PEER_DEPENDENCIES = ["document-model", "@powerhousedao/reactor-browser"];
-const FEATURE_DEPENDENCIES = { analyticsProcessor: {
-	peerVersioned: ["@powerhousedao/analytics-engine-core"],
-	peerExternal: {}
-} };
+const FEATURE_DEPENDENCIES = {
+	analyticsProcessor: {
+		peerVersioned: ["@powerhousedao/analytics-engine-core"],
+		peerExternal: {},
+		devVersioned: []
+	},
+	piece: {
+		peerVersioned: [],
+		peerExternal: {},
+		devVersioned: ["@powerhousedao/pieces-framework"]
+	}
+};
 [...VERSIONED_PEER_DEPENDENCIES, ...FEATURE_DEPENDENCIES.analyticsProcessor.peerVersioned];
 const DEFAULT_CONFIG = {
 	documentModelsDir: "./document-models",
@@ -155,6 +173,6 @@ async function npmUnpublish(options) {
 	], { cwd }) };
 }
 //#endregion
-export { DEFAULT_REGISTRY_URL, checkNpmAuth, getUpdateTarget, npmPublish, npmUnpublish, parseInstallSpec, registryAuthKey, resolveRegistryUrl, slimManifest, toCdnUrl, writeRegistryAuthToken };
+export { DEFAULT_REGISTRY_URL, PACKAGE_MODULE_TYPES, checkNpmAuth, getUpdateTarget, npmPublish, npmUnpublish, parseInstallSpec, registryAuthKey, resolveRegistryUrl, slimManifest, toCdnUrl, writeRegistryAuthToken };
 
 //# sourceMappingURL=index.js.map