@sekiban/dcb-runtime 0.2.0 → 0.2.2

package/dist/tag/TagSqlSchema.d.ts

@@ -8,7 +8,7 @@
  * still in development and the operator ruling for G43 is to reset those test
  * records rather than introduce a mixed-format or rollback protocol.
  */
-export declare const TAG_SQL_SCHEMA_DDL = "\n  PRAGMA foreign_keys = ON;\n\n  CREATE TABLE IF NOT EXISTS tag_identity (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    tag TEXT NOT NULL UNIQUE,\n    created_at TEXT NOT NULL\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_control (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    schema_version INTEGER NOT NULL CHECK (schema_version = 3),\n    head_suid TEXT NOT NULL,\n    clock_offset_ms INTEGER NOT NULL,\n    clock_now_ms INTEGER,\n    version INTEGER NOT NULL,\n    repair_owner TEXT,\n    repair_lease_until INTEGER,\n    highest_repair_epoch INTEGER NOT NULL,\n    repair_scope_version INTEGER NOT NULL,\n    created_at TEXT NOT NULL,\n    updated_at TEXT NOT NULL,\n    FOREIGN KEY (singleton) REFERENCES tag_identity(singleton) ON DELETE RESTRICT\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_reservation (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    attempt_id TEXT NOT NULL,\n    epoch INTEGER NOT NULL,\n    reservation_token TEXT NOT NULL UNIQUE,\n    expected_head TEXT NOT NULL,\n    expires_at INTEGER NOT NULL,\n    alarm_due_at INTEGER NOT NULL,\n    FOREIGN KEY (singleton) REFERENCES tag_identity(singleton) ON DELETE RESTRICT\n  );\n  CREATE INDEX IF NOT EXISTS tag_reservation_due_idx ON tag_reservation(alarm_due_at);\n\n  CREATE TABLE IF NOT EXISTS tag_epoch (\n    attempt_id TEXT PRIMARY KEY,\n    highest_epoch INTEGER NOT NULL,\n    sealed_epoch INTEGER,\n    confirmation_epoch INTEGER\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_tombstone (\n    attempt_id TEXT PRIMARY KEY,\n    epoch INTEGER NOT NULL\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_event (\n    service_id TEXT NOT NULL,\n    event_id TEXT NOT NULL,\n    attempt_id TEXT NOT NULL,\n    suid TEXT NOT NULL,\n    payload TEXT NOT NULL,\n    event_tags_json TEXT NOT NULL,\n    allocator_lineage_id TEXT NOT NULL,\n    event_type TEXT NOT NULL,\n    provenance TEXT NOT NULL CHECK (provenance = 'g32'),\n    timestamp TEXT NOT NULL,\n    event_json TEXT NOT NULL,\n    PRIMARY KEY (service_id, event_id),\n    UNIQUE (suid)\n  );\n  CREATE INDEX IF NOT EXISTS tag_event_suid_idx ON tag_event(suid);\n  CREATE INDEX IF NOT EXISTS tag_event_attempt_idx ON tag_event(attempt_id, event_id);\n\n  CREATE TABLE IF NOT EXISTS tag_head (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    service_id TEXT NOT NULL,\n    head_suid TEXT NOT NULL,\n    FOREIGN KEY (singleton) REFERENCES tag_identity(singleton) ON DELETE RESTRICT\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_committed_membership (\n    service_id TEXT NOT NULL,\n    event_id TEXT NOT NULL,\n    tag TEXT NOT NULL,\n    committed_at TEXT NOT NULL,\n    PRIMARY KEY (service_id, event_id, tag),\n    FOREIGN KEY (service_id, event_id)\n      REFERENCES tag_event(service_id, event_id) ON DELETE RESTRICT,\n    FOREIGN KEY (tag) REFERENCES tag_identity(tag) ON DELETE RESTRICT\n  );\n  CREATE INDEX IF NOT EXISTS tag_committed_membership_tag_idx\n    ON tag_committed_membership(tag, service_id, event_id);\n\n  CREATE TABLE IF NOT EXISTS tag_outbox_obligation (\n    obligation_sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    service_id TEXT NOT NULL,\n    event_id TEXT NOT NULL,\n    attempt_id TEXT NOT NULL,\n    suid TEXT NOT NULL,\n    payload TEXT NOT NULL,\n    allocator_lineage_id TEXT NOT NULL,\n    event_type TEXT NOT NULL,\n    provenance TEXT NOT NULL CHECK (provenance = 'g32'),\n    timestamp TEXT NOT NULL,\n    canonical_bytes BLOB NOT NULL,\n    event_digest TEXT NOT NULL,\n    declared_tag_set_json TEXT NOT NULL,\n    local_committed_membership_json TEXT NOT NULL,\n    status TEXT NOT NULL CHECK (status IN ('pending', 'acknowledged', 'poison')),\n    next_attempt_at INTEGER NOT NULL,\n    attempt_count INTEGER NOT NULL DEFAULT 0,\n    enqueued_at INTEGER,\n    acknowledged_at INTEGER,\n    last_error TEXT,\n    UNIQUE (service_id, event_id, attempt_id),\n    FOREIGN KEY (service_id, event_id)\n      REFERENCES tag_event(service_id, event_id) ON DELETE RESTRICT\n  );\n  CREATE INDEX IF NOT EXISTS tag_outbox_obligation_due_idx\n    ON tag_outbox_obligation(status, next_attempt_at, obligation_sequence);\n\n  CREATE TABLE IF NOT EXISTS tag_source_partition_registration (\n    service_id TEXT NOT NULL,\n    partition_tag TEXT NOT NULL,\n    last_obligation_sequence INTEGER NOT NULL,\n    status TEXT NOT NULL CHECK (status IN ('pending', 'registered')),\n    next_attempt_at INTEGER,\n    attempt_count INTEGER NOT NULL DEFAULT 0,\n    last_error TEXT,\n    PRIMARY KEY (service_id, partition_tag)\n  );\n  CREATE INDEX IF NOT EXISTS tag_source_partition_registration_due_idx\n    ON tag_source_partition_registration(status, next_attempt_at, service_id, partition_tag);\n\n  CREATE TABLE IF NOT EXISTS tag_commit_receipt (\n    attempt_id TEXT NOT NULL,\n    epoch INTEGER NOT NULL,\n    committed_at TEXT NOT NULL,\n    committed_event_count INTEGER NOT NULL,\n    head_suid TEXT NOT NULL,\n    reservation_confirmed INTEGER NOT NULL CHECK (reservation_confirmed IN (0, 1)),\n    PRIMARY KEY (attempt_id, epoch)\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_fence (\n    reason TEXT NOT NULL,\n    attempt_id TEXT NOT NULL,\n    epoch INTEGER NOT NULL,\n    PRIMARY KEY (reason, attempt_id)\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_cleared_fence (\n    reason TEXT NOT NULL,\n    attempt_id TEXT NOT NULL,\n    epoch INTEGER NOT NULL,\n    PRIMARY KEY (reason, attempt_id)\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_bootstrap_admission (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    import_id TEXT NOT NULL,\n    lease_epoch INTEGER NOT NULL,\n    manifest_digest TEXT NOT NULL,\n    target_service_id TEXT NOT NULL,\n    closed INTEGER NOT NULL CHECK (closed IN (0, 1)),\n    FOREIGN KEY (singleton) REFERENCES tag_identity(singleton) ON DELETE RESTRICT\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_repair_scope (\n    attempt_id TEXT NOT NULL,\n    event_id TEXT NOT NULL,\n    item_json TEXT NOT NULL,\n    PRIMARY KEY (attempt_id, event_id)\n  );\n";
+export declare const TAG_SQL_SCHEMA_DDL = "\n  PRAGMA foreign_keys = ON;\n\n  CREATE TABLE IF NOT EXISTS tag_identity (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    tag TEXT NOT NULL UNIQUE,\n    created_at TEXT NOT NULL\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_control (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    schema_version INTEGER NOT NULL CHECK (schema_version = 3),\n    head_suid TEXT NOT NULL,\n    clock_offset_ms INTEGER NOT NULL,\n    clock_now_ms INTEGER,\n    version INTEGER NOT NULL,\n    repair_owner TEXT,\n    repair_lease_until INTEGER,\n    highest_repair_epoch INTEGER NOT NULL,\n    repair_scope_version INTEGER NOT NULL,\n    created_at TEXT NOT NULL,\n    updated_at TEXT NOT NULL,\n    FOREIGN KEY (singleton) REFERENCES tag_identity(singleton) ON DELETE RESTRICT\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_reservation (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    attempt_id TEXT NOT NULL,\n    epoch INTEGER NOT NULL,\n    reservation_token TEXT NOT NULL UNIQUE,\n    expected_head TEXT NOT NULL,\n    expires_at INTEGER NOT NULL,\n    alarm_due_at INTEGER NOT NULL,\n    FOREIGN KEY (singleton) REFERENCES tag_identity(singleton) ON DELETE RESTRICT\n  );\n  CREATE INDEX IF NOT EXISTS tag_reservation_due_idx ON tag_reservation(alarm_due_at);\n\n  CREATE TABLE IF NOT EXISTS tag_epoch (\n    attempt_id TEXT PRIMARY KEY,\n    highest_epoch INTEGER NOT NULL,\n    sealed_epoch INTEGER,\n    confirmation_epoch INTEGER\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_tombstone (\n    attempt_id TEXT PRIMARY KEY,\n    epoch INTEGER NOT NULL\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_event (\n    service_id TEXT NOT NULL,\n    event_id TEXT NOT NULL,\n    attempt_id TEXT NOT NULL,\n    suid TEXT NOT NULL,\n    payload TEXT NOT NULL,\n    event_tags_json TEXT NOT NULL,\n    allocator_lineage_id TEXT NOT NULL,\n    event_type TEXT NOT NULL,\n    provenance TEXT NOT NULL CHECK (provenance = 'g32'),\n    timestamp TEXT NOT NULL,\n    event_json TEXT NOT NULL,\n    PRIMARY KEY (service_id, event_id),\n    UNIQUE (suid)\n  );\n  CREATE INDEX IF NOT EXISTS tag_event_suid_idx ON tag_event(suid);\n  CREATE INDEX IF NOT EXISTS tag_event_attempt_idx ON tag_event(attempt_id, event_id);\n\n  CREATE TABLE IF NOT EXISTS tag_head (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    service_id TEXT NOT NULL,\n    head_suid TEXT NOT NULL,\n    FOREIGN KEY (singleton) REFERENCES tag_identity(singleton) ON DELETE RESTRICT\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_committed_membership (\n    service_id TEXT NOT NULL,\n    event_id TEXT NOT NULL,\n    tag TEXT NOT NULL,\n    committed_at TEXT NOT NULL,\n    PRIMARY KEY (service_id, event_id, tag),\n    FOREIGN KEY (service_id, event_id)\n      REFERENCES tag_event(service_id, event_id) ON DELETE RESTRICT,\n    FOREIGN KEY (tag) REFERENCES tag_identity(tag) ON DELETE RESTRICT\n  );\n  CREATE INDEX IF NOT EXISTS tag_committed_membership_tag_idx\n    ON tag_committed_membership(tag, service_id, event_id);\n\n  CREATE TABLE IF NOT EXISTS tag_outbox_obligation (\n    obligation_sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    service_id TEXT NOT NULL,\n    event_id TEXT NOT NULL,\n    attempt_id TEXT NOT NULL,\n    suid TEXT NOT NULL,\n    payload TEXT NOT NULL,\n    allocator_lineage_id TEXT NOT NULL,\n    event_type TEXT NOT NULL,\n    provenance TEXT NOT NULL CHECK (provenance = 'g32'),\n    timestamp TEXT NOT NULL,\n    canonical_bytes BLOB NOT NULL,\n    event_digest TEXT NOT NULL,\n    declared_tag_set_json TEXT NOT NULL,\n    local_committed_membership_json TEXT NOT NULL,\n    status TEXT NOT NULL CHECK (status IN ('pending', 'acknowledged', 'poison')),\n    next_attempt_at INTEGER NOT NULL,\n    attempt_count INTEGER NOT NULL DEFAULT 0,\n    enqueued_at INTEGER,\n    acknowledged_at INTEGER,\n    last_error TEXT,\n    UNIQUE (service_id, event_id, attempt_id),\n    FOREIGN KEY (service_id, event_id)\n      REFERENCES tag_event(service_id, event_id) ON DELETE RESTRICT\n  );\n  CREATE INDEX IF NOT EXISTS tag_outbox_obligation_due_idx\n    ON tag_outbox_obligation(status, next_attempt_at, obligation_sequence);\n\n  CREATE TABLE IF NOT EXISTS tag_source_partition_registration (\n    service_id TEXT NOT NULL,\n    partition_tag TEXT NOT NULL,\n    last_obligation_sequence INTEGER NOT NULL,\n    status TEXT NOT NULL CHECK (status IN ('pending', 'registered')),\n    next_attempt_at INTEGER,\n    attempt_count INTEGER NOT NULL DEFAULT 0,\n    last_error TEXT,\n    PRIMARY KEY (service_id, partition_tag)\n  );\n  CREATE INDEX IF NOT EXISTS tag_source_partition_registration_due_idx\n    ON tag_source_partition_registration(status, next_attempt_at, service_id, partition_tag);\n\n  CREATE TABLE IF NOT EXISTS tag_commit_receipt (\n    attempt_id TEXT NOT NULL,\n    epoch INTEGER NOT NULL,\n    committed_at TEXT NOT NULL,\n    committed_event_count INTEGER NOT NULL,\n    head_suid TEXT NOT NULL,\n    reservation_confirmed INTEGER NOT NULL CHECK (reservation_confirmed IN (0, 1)),\n    written_version INTEGER NOT NULL,\n    PRIMARY KEY (attempt_id, epoch)\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_fence (\n    reason TEXT NOT NULL,\n    attempt_id TEXT NOT NULL,\n    epoch INTEGER NOT NULL,\n    PRIMARY KEY (reason, attempt_id)\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_cleared_fence (\n    reason TEXT NOT NULL,\n    attempt_id TEXT NOT NULL,\n    epoch INTEGER NOT NULL,\n    PRIMARY KEY (reason, attempt_id)\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_bootstrap_admission (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    import_id TEXT NOT NULL,\n    lease_epoch INTEGER NOT NULL,\n    manifest_digest TEXT NOT NULL,\n    target_service_id TEXT NOT NULL,\n    closed INTEGER NOT NULL CHECK (closed IN (0, 1)),\n    FOREIGN KEY (singleton) REFERENCES tag_identity(singleton) ON DELETE RESTRICT\n  );\n\n  CREATE TABLE IF NOT EXISTS tag_repair_scope (\n    attempt_id TEXT NOT NULL,\n    event_id TEXT NOT NULL,\n    item_json TEXT NOT NULL,\n    PRIMARY KEY (attempt_id, event_id)\n  );\n";
 /**
  * Packet-owned AC8 range seam. The query text and index identity are exported
  * so the measurement checker can prove exactly what was explained and what
@@ -23,6 +23,11 @@ export declare const TAG_READ_AFTER_SQL = "\n  SELECT event_json\n  FROM tag_eve
  */
 export declare const TAG_READ_AFTER_THROUGH_SQL = "\n  SELECT event_json\n  FROM tag_event INDEXED BY tag_event_suid_idx\n  WHERE suid > ? AND suid <= ?\n  ORDER BY suid ASC\n  LIMIT ?\n";
 export declare function initializeTagSqlSchema(sql: SqlStorage): void;
+/**
+ * SDT-G36: `CREATE TABLE IF NOT EXISTS` never alters an existing table, so
+ * an idempotent `ADD COLUMN` backfills `written_version` on pre-G36 stores.
+ */
+export declare function ensureTagCommitReceiptWrittenVersion(sql: SqlStorage): void;
 /** A SQL-backed tag object always exposes this capability at runtime. */
 export declare function hasTagSqlStorage(storage: DurableObjectStorage): storage is DurableObjectStorage & {
     sql: SqlStorage;

package/dist/tag/TagSqlSchema.js

@@ -143,6 +143,7 @@ export const TAG_SQL_SCHEMA_DDL = `
     committed_event_count INTEGER NOT NULL,
     head_suid TEXT NOT NULL,
     reservation_confirmed INTEGER NOT NULL CHECK (reservation_confirmed IN (0, 1)),
+    written_version INTEGER NOT NULL,
     PRIMARY KEY (attempt_id, epoch)
   );
 
@@ -204,6 +205,20 @@ export const TAG_READ_AFTER_THROUGH_SQL = `
 `;
 export function initializeTagSqlSchema(sql) {
     sql.exec(TAG_SQL_SCHEMA_DDL);
+    ensureTagCommitReceiptWrittenVersion(sql);
+}
+/**
+ * SDT-G36: `CREATE TABLE IF NOT EXISTS` never alters an existing table, so
+ * an idempotent `ADD COLUMN` backfills `written_version` on pre-G36 stores.
+ */
+export function ensureTagCommitReceiptWrittenVersion(sql) {
+    const columns = sql.exec("SELECT name FROM pragma_table_info('tag_commit_receipt')").toArray();
+    if (columns.some((column) => column.name === "written_version"))
+        return;
+    // Nullable on migrated stores so pre-G36 receipts stay NULL (unknown) and
+    // duplicate replay can fail closed instead of substituting head. Fresh
+    // tables enforce NOT NULL via the DDL above; every new write provides it.
+    sql.exec("ALTER TABLE tag_commit_receipt ADD COLUMN written_version INTEGER");
 }
 /** A SQL-backed tag object always exposes this capability at runtime. */
 export function hasTagSqlStorage(storage) {

package/dist/tag/types.d.ts

@@ -160,6 +160,15 @@ export interface TagRecord {
     version: number;
     createdAt: string;
     updatedAt: string;
+    /**
+     * SDT-G36 non-SQL seam only. Maps `attemptId:epoch` to the write
+     * transaction's own version and updatedAt. Absent on older records.
+     */
+    writeReceipts?: Readonly<Record<string, {
+        readonly version: number;
+        readonly updatedAt: string;
+        readonly headSuid?: string;
+    }>>;
 }
 /**
  * The immutable scalar facts needed by the commit response.  This is

package/dist/trace/CommitTrace.d.ts

@@ -4,7 +4,7 @@ import type { DurableObjectHandlerObservation } from "./ObservationStream";
  * Trace-only commit attribution support.
  *
  * This module deliberately has no dependency on the commit protocol or on
- * Durable Object storage. It turns the host-owned manifest into the runtime
+ * Durable Object storage. It turns the repository-owned manifest into the runtime
  * vocabulary and delegates real parentage to Cloudflare's active async
  * tracing context. The in-memory records are an observation adapter used by
  * unit tests and the B0 evidence tooling; they never cross a public wire.
@@ -330,7 +330,7 @@ export interface NativeCommitSpanInput {
     readonly schema: CommitTraceSchema;
     /** The manifest face governs the complete emitted attribute set. */
     readonly face: CommitTraceFace;
-    /** Exact host-manifest row emitted by this callback boundary. */
+    /** Exact repository manifest row emitted by this callback boundary. */
     readonly rowId: string;
     readonly correlationId: string;
     /** Repair roots may cover more than one attempt. */
@@ -376,7 +376,7 @@ export interface NativeReconcileRootIdentity {
 /**
  * A reconciliation fact becomes available only after durable recovery reads.
  * R00 remains open for the handler's whole callback, so it is the sole span
- * to which the host contract permits this late attribute.
+ * to which the repository contract permits this late attribute.
  */
 export interface NativeReconcileRootFacts {
     setRecoveryKind(kind: string): void;

package/dist/trace/CommitTraceVerifier.js

@@ -106,7 +106,7 @@ function verifyAttributes(span, row) {
     if (expectedPhase !== undefined && span.attributes["phase.ordinal"] !== expectedPhase) {
         failure("transition-phase", `${span.rowId} must carry phase.ordinal=${expectedPhase}`);
     }
-    // The host-owned rowScope is the authority for member attributes.  Do not
+    // The repository-owned rowScope is the authority for member attributes.  Do not
     // duplicate a hand-maintained list here: S14 was omitted from such a list
     // once even though it is a real v1 fan-out member.  The bundle validator
     // proves rowScope is exactly the complete set of member rows; the runtime

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sekiban/dcb-runtime",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "private": false,
   "description": "Cloudflare Durable Object and HTTP runtime for Serialized DCB V1.",
   "license": "Elastic-2.0",
@@ -13,13 +13,7 @@
   "bugs": {
     "url": "https://github.com/J-Tech-Japan/sekiban-dcb-ts/issues"
   },
-  "keywords": [
-    "sekiban",
-    "dcb",
-    "runtime",
-    "cloudflare",
-    "durable-objects"
-  ],
+  "keywords": ["sekiban", "dcb", "runtime", "cloudflare", "durable-objects"],
   "engines": {
     "node": ">=20"
   },
@@ -52,16 +46,13 @@
     }
   },
   "types": "./dist/index.d.ts",
-  "files": [
-    "dist",
-    "README.md",
-    "LICENSE"
-  ],
+  "files": ["dist", "README.md", "LICENSE"],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "dependencies": {
-    "@sekiban/dcb-core": "0.2.0"
+    "@sekiban/dcb-core": "0.2.2"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json && esbuild src/index.ts --bundle --format=esm --platform=neutral --external:postgres --external:cloudflare:workers --outfile=dist/index.js && esbuild src/cosmos.ts --bundle --format=esm --platform=neutral --external:postgres --external:cloudflare:workers --outfile=dist/cosmos.js && esbuild src/d1.ts --bundle --format=esm --platform=neutral --external:postgres --external:cloudflare:workers --outfile=dist/d1.js && esbuild src/d1-mv.ts --bundle --format=esm --platform=neutral --external:postgres --external:cloudflare:workers --outfile=dist/d1-mv.js && esbuild src/cloudflare.ts --bundle --format=esm --platform=neutral --external:cloudflare:workers --outfile=dist/cloudflare.js && esbuild src/mv/index.ts --bundle --format=esm --platform=neutral --external:postgres --external:cloudflare:workers --outfile=dist/mv/index.js",