@vibesdotdev/storage 0.0.1 → 1.0.0-rc.3

package/dist/interfaces/storage-consumer-fs.d.ts

@@ -1,40 +1,38 @@
 /**
- * Storage Consumer File System Abstraction
+ * Storage Consumer File System
  *
- * Consumer-scoped: provides access to host fs, crypto, and path primitives.
- * Injected at runtime to avoid universal core importing Node.js built-ins.
- *
- * This enables `cli/context.consumer.ts` to operate in consumer hardware scope
- * without polluting the universal core with Node.js imports.
+ * Consumer-scoped: the host files, paths and ids a consumer-side storage
+ * feature needs, over the handed runtime. Files and path mechanics come from
+ * the runtime's `filesystem/adapter` kind through `host-files.ts` (unbound:
+ * absolute host paths); nothing here imports `node:fs`, `node:path` or `node:crypto`, and no
+ * object outlives its runtime (there is no process-wide cache).
  *
  * Usage:
  * ```ts
- * import { getConsumerFs } from './storage-consumer-fs';
+ * import { getConsumerFs } from './storage-consumer-fs.ts';
  *
- * const fs = getConsumerFs();
+ * const fs = await getConsumerFs(runtime);
  * const data = await fs.readFile('/path/to/file', 'utf8');
  * ```
  */
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+import type { FileEncoding, FileSystemWatchCallback } from '@vibesdotdev/filesystem/interfaces/adapter';
+import { type HostFileSystem } from '../host-files.ts';
 export interface ConsumerFileSystem {
-    existsSync(path: string): boolean;
-    mkdirSync(path: string, options?: {
-        recursive: boolean;
-    }): void;
-    watch(dir: string, listener: (eventType: string, filename: string | Buffer | null) => void): {
-        close(): void;
-    } | null;
-    readFile(path: string, encoding: BufferEncoding): Promise<string>;
-    writeFile(path: string, content: string | Uint8Array, options?: BufferEncoding | {
-        encoding?: BufferEncoding;
-        mode?: number;
-        flag?: string;
-    }): Promise<void>;
-    rename(oldPath: string, newPath: string): Promise<void>;
-    dirname(path: string): string;
-    basename(path: string, ext?: string): string;
-    join(...paths: string[]): string;
-    resolve(...paths: string[]): string;
+    exists: HostFileSystem['exists'];
+    mkdir: HostFileSystem['mkdir'];
+    /** Watch `dir`; the adapter reports a watcher failure once as `('error', '', failure)` and refuses typed when it cannot watch. */
+    watch(dir: string, callback: FileSystemWatchCallback): Promise<() => void>;
+    /** A file's text; bytes the adapter answers are decoded as UTF-8. */
+    readFile(path: string, encoding: FileEncoding): Promise<string>;
+    writeFile: HostFileSystem['writeFile'];
+    rename: HostFileSystem['rename'];
+    dirname: HostFileSystem['dirname'];
+    basename: HostFileSystem['basename'];
+    join: HostFileSystem['join'];
+    resolve: HostFileSystem['resolve'];
     randomUUID(): string;
 }
-export declare function getConsumerFs(): Promise<ConsumerFileSystem>;
+/** The consumer file system of `runtime`, or the typed `UNAVAILABLE consumer-fs-unavailable` when it offers no filesystem kind. */
+export declare function getConsumerFs(runtime: RuntimeRef): Promise<ConsumerFileSystem>;
 //# sourceMappingURL=storage-consumer-fs.d.ts.map

package/dist/interfaces/storage-consumer-fs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage-consumer-fs.d.ts","sourceRoot":"","sources":["../../src/interfaces/storage-consumer-fs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,kBAAkB;IAClC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAChE,KAAK,CACJ,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,KAAK,IAAI,GACrE;QAAE,KAAK,IAAI,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,SAAS,CACR,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,OAAO,CAAC,EAAE,cAAc,GAAG;QAAE,QAAQ,CAAC,EAAE,cAAc,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GACpF,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7C,IAAI,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACjC,OAAO,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACpC,UAAU,IAAI,MAAM,CAAC;CACrB;AAID,wBAAsB,aAAa,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAwBjE"}
+{"version":3,"file":"storage-consumer-fs.d.ts","sourceRoot":"","sources":["../../src/interfaces/storage-consumer-fs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACxG,OAAO,EAAoB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEzE,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;IACjC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IAC/B,kIAAkI;IAClI,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IAC3E,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,SAAS,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACnC,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACnC,UAAU,IAAI,MAAM,CAAC;CACrB;AAED,mIAAmI;AACnI,wBAAsB,aAAa,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmBpF"}

package/dist/interfaces/storage-consumer-fs.js

@@ -1,42 +1,41 @@
 /**
- * Storage Consumer File System Abstraction
+ * Storage Consumer File System
  *
- * Consumer-scoped: provides access to host fs, crypto, and path primitives.
- * Injected at runtime to avoid universal core importing Node.js built-ins.
- *
- * This enables `cli/context.consumer.ts` to operate in consumer hardware scope
- * without polluting the universal core with Node.js imports.
+ * Consumer-scoped: the host files, paths and ids a consumer-side storage
+ * feature needs, over the handed runtime. Files and path mechanics come from
+ * the runtime's `filesystem/adapter` kind through `host-files.ts` (unbound:
+ * absolute host paths); nothing here imports `node:fs`, `node:path` or `node:crypto`, and no
+ * object outlives its runtime (there is no process-wide cache).
  *
  * Usage:
  * ```ts
- * import { getConsumerFs } from './storage-consumer-fs.js';
+ * import { getConsumerFs } from './storage-consumer-fs.ts';
  *
- * const fs = getConsumerFs();
+ * const fs = await getConsumerFs(runtime);
  * const data = await fs.readFile('/path/to/file', 'utf8');
  * ```
  */
-let _consumerFs = null;
-export async function getConsumerFs() {
-    if (_consumerFs)
-        return _consumerFs;
-    const [fs, crypto, path] = await Promise.all([
-        import('node:fs'),
-        import('node:crypto'),
-        import('node:path')
-    ]);
-    _consumerFs = {
-        existsSync: fs.existsSync,
-        mkdirSync: fs.mkdirSync,
-        watch: fs.watch.bind(fs),
-        readFile: (path, encoding) => fs.promises.readFile(path, encoding),
-        writeFile: (path, content, options) => fs.promises.writeFile(path, content, options),
-        rename: fs.promises.rename,
-        dirname: path.dirname,
-        basename: path.basename,
-        join: path.join,
-        resolve: path.resolve,
-        randomUUID: crypto.randomUUID
+import { watchChecked } from '@vibesdotdev/filesystem';
+import { hostFileSystemOf } from "../host-files.js";
+/** The consumer file system of `runtime`, or the typed `UNAVAILABLE consumer-fs-unavailable` when it offers no filesystem kind. */
+export async function getConsumerFs(runtime) {
+    const fs = await hostFileSystemOf(runtime, 'consumer-fs-unavailable');
+    return {
+        exists: (path) => fs.exists(path),
+        mkdir: (path, options) => fs.mkdir(path, options),
+        watch: (dir, callback) => watchChecked(fs, dir, callback),
+        readFile: async (path, encoding) => {
+            const content = await fs.readFile(path, encoding);
+            return content instanceof Uint8Array ? new TextDecoder().decode(content) : content;
+        },
+        writeFile: (path, data, options) => fs.writeFile(path, data, options),
+        rename: (oldPath, newPath) => fs.rename(oldPath, newPath),
+        dirname: (path) => fs.dirname(path),
+        basename: (path, ext) => fs.basename(path, ext),
+        join: (...parts) => fs.join(...parts),
+        resolve: (...parts) => fs.resolve(...parts),
+        // A random id, not a hash: the platform's Web Crypto `randomUUID` (no host import).
+        randomUUID: () => globalThis.crypto.randomUUID()
     };
-    return _consumerFs;
 }
 //# sourceMappingURL=storage-consumer-fs.js.map

package/dist/interfaces/storage-consumer-fs.js.map

@@ -1 +1 @@
-{"version":3,"file":"storage-consumer-fs.js","sourceRoot":"","sources":["../../src/interfaces/storage-consumer-fs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAuBH,IAAI,WAAW,GAA8B,IAAI,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,aAAa;IAClC,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,MAAM,CAAC,SAAS,CAAC;QACjB,MAAM,CAAC,aAAa,CAAC;QACrB,MAAM,CAAC,WAAW,CAAC;KACnB,CAAC,CAAC;IAEH,WAAW,GAAG;QACb,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,QAAQ,EAAE,CAAC,IAAY,EAAE,QAAwB,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC1F,SAAS,EAAE,CAAC,IAAY,EAAE,OAA4B,EAAE,OAAsF,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC;QAChM,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM;QAC1B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC7B,CAAC;IAEF,OAAO,WAAW,CAAC;AACpB,CAAC"}
+{"version":3,"file":"storage-consumer-fs.js","sourceRoot":"","sources":["../../src/interfaces/storage-consumer-fs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAuB,MAAM,kBAAkB,CAAC;AAkBzE,mIAAmI;AACnI,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAmB;IACtD,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IACtE,OAAO;QACN,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC;QACjD,KAAK,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC;QACzD,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAClC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClD,OAAO,OAAO,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACpF,CAAC;QACD,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC;QACrE,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC;QACzD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACnC,QAAQ,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;QAC/C,IAAI,EAAE,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACrC,OAAO,EAAE,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QAC3C,oFAAoF;QACpF,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;KAChD,CAAC;AACH,CAAC"}

package/dist/manifest/base.d.ts

@@ -6,11 +6,28 @@
  *
  * Uses runtime query API to resolve the appropriate adapter.
  */
-import type { z } from 'zod/v4';
-import type { KindContext } from '@vibesdotdev/runtime/schemas/kind';
-import type { StorageAdapterInterface } from '../interfaces/adapter';
-import type { StorageManifestDescriptor } from '../schemas/manifest-descriptor';
-import type { Unsubscribe } from '../interfaces/document-store';
+import * as z from 'zod/v4';
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+import type { KindContext } from '@vibesdotdev/kernel/schemas/kind';
+import type { StorageAdapterInterface } from '../interfaces/adapter.ts';
+import { type SelectedDocumentIdentity } from '../schemas/document-identity.ts';
+export { FilesystemDocumentIdentitySchema, LogicalDocumentIdentitySchema, SelectedDocumentIdentitySchema, type FilesystemDocumentIdentity, type LogicalDocumentIdentity, type SelectedDocumentIdentity } from '../schemas/document-identity.ts';
+import type { DocumentRevisionAccess } from '../schemas/document-revision.ts';
+import type { StorageBasePathSemantics } from '../schemas/adapter-descriptor.ts';
+import { type StorageManifestDescriptor } from '../schemas/manifest-descriptor.ts';
+import type { StorageDocumentStoreInterface, StorageLoadOptions, Unsubscribe } from '../interfaces/document-store.ts';
+import { type PathRoots } from '@vibesdotdev/paths';
+/** The adapter configuration a manifest hands its adapter: runtime, paths, and the descriptor's adapter-specific options. */
+import type { StorageAdapterConfig as ManifestAdapterConfig } from '../schemas/adapter-config.ts';
+export type { StorageAdapterConfig as ManifestAdapterConfig } from '../schemas/adapter-config.ts';
+/** A stored layer as written (layered readers merge it, then parse once). */
+import type { StoredLayer } from '../schemas/record/query-values.ts';
+export type { StoredLayer } from '../schemas/record/query-values.ts';
+/** A document of unknown provenance handed to `validate`. */
+import type { UntrustedRecordData as UntrustedDocument } from '../schemas/record/query-values.ts';
+export type { UntrustedRecordData as UntrustedDocument } from '../schemas/record/query-values.ts';
+/** The longest a cloud push after a save may run before the runtime stops waiting for it. */
+export declare const CLOUD_SYNC_PUSH_TIMEOUT_MS = 60000;
 /**
  * Base class for storage manifests.
  *
@@ -27,7 +44,7 @@ import type { Unsubscribe } from '../interfaces/document-store';
  * // The runtime will instantiate this with the descriptor
  *
  * // Manual instantiation by ID
- * const storage = StorageManifest.fromId<AIProvider[]>('ai.providers');
+ * const storage = StorageManifest.fromId<AIProvider[]>('ai.providers', runtime);
  * const providers = await storage.load();
  *
  * // Extended class with custom methods
@@ -43,6 +60,8 @@ export declare class StorageManifest<T> {
     protected descriptor: StorageManifestDescriptor;
     protected context: KindContext;
     private adapterCache;
+    private adapterCacheId;
+    private adapterBasePathSemantics;
     private pendingId;
     private pendingContext;
     private resolved;
@@ -51,15 +70,17 @@ export declare class StorageManifest<T> {
     private subscribers;
     private storeUnsubscribe;
     private subscriptionStarted;
+    /** The runtime this manifest was handed; there is no ambient default. */
     private getRuntime;
     /**
      * Create a storage manifest instance.
      *
      * @param descriptorOrId - Either the full descriptor (for runtime instantiation)
      *                         or the manifest ID string (for manual instantiation)
-     * @param context - Runtime context (optional for manual instantiation, required for runtime)
+     * @param context - The runtime context the manifest reads and writes through
+     *                  (`{ runtime }`); required, there is no ambient runtime.
      */
-    constructor(descriptorOrId: StorageManifestDescriptor | string, context?: KindContext);
+    constructor(descriptorOrId: StorageManifestDescriptor | string, context: KindContext);
     /**
      * Resolve the descriptor from the runtime on first data access.
      * No-op if already resolved or constructed with a direct descriptor.
@@ -67,9 +88,10 @@ export declare class StorageManifest<T> {
     private ensureResolved;
     /**
      * Create a storage manifest by looking up its ID.
-     * Convenience static method for manual instantiation.
+     * Convenience static method for manual instantiation, bound to the runtime
+     * the caller holds (there is no ambient runtime).
      */
-    static fromId<T>(manifestId: string): StorageManifest<T>;
+    static fromId<T>(manifestId: string, runtime: RuntimeRef): StorageManifest<T>;
     /**
      * Get the schema for this manifest.
      */
@@ -78,6 +100,24 @@ export declare class StorageManifest<T> {
      * Get the namespace for this manifest.
      */
     get namespace(): string;
+    /**
+     * Create an isolated document partition while retaining this manifest's
+     * schema, adapter policy, and runtime context. The partition is a distinct
+     * adapter namespace, not a field inside a shared document, so deleting or
+     * recovering one principal cannot erase another principal's value.
+     */
+    partition(partitionId: string): StorageManifest<T>;
+    /** Discover persisted immediate partitions without reading their documents. */
+    listPartitions(): Promise<string[]>;
+    /**
+     * A partition can only be honest when the adapter's document address is the
+     * namespace passed to `documentStore()`. Adapter-specific configuration is
+     * opaque to storage core: an explicit filename, HTTP endpoint, table, object
+     * key, or a future adapter locator can alias every derived namespace back to
+     * the same physical document. Refuse all non-empty config for allowed
+     * adapters rather than maintaining an inevitably incomplete key blacklist.
+     */
+    private assertNamespaceAddressedPartition;
     /**
      * Resolve the adapter for this manifest using runtime query API.
      *
@@ -89,14 +129,14 @@ export declare class StorageManifest<T> {
      * Get adapter configuration based on manifest scope.
      * Override in subclasses for custom configuration.
      */
-    protected getAdapterConfig(adapterId?: string): Record<string, unknown>;
+    protected getAdapterConfig(adapterId?: string, basePathSemantics?: StorageBasePathSemantics): ManifestAdapterConfig;
     private getCloudApiEndpoint;
     private hasCloudEndpointRegistrar;
     /**
      * Get base path for storage based on scope.
      * Uses descriptor's scopePaths if provided, otherwise defaults.
      */
-    protected getBasePath(workspacePath?: string): string;
+    protected getBasePath(roots?: PathRoots, workspacePath?: string): string;
     /**
      * Invalidate the cache, forcing the next load to hit storage.
      */
@@ -110,27 +150,61 @@ export declare class StorageManifest<T> {
      * Check if data is currently cached.
      */
     isCached(): boolean;
+    /**
+     * Resolve the adapter and open a document store for it **atomically**.
+     *
+     * Adapters are runtime singletons carrying mutable per-manifest config — most
+     * importantly the JSON adapter's `basePath`/`filename`. `getAdapter()` applies
+     * this manifest's config, but the `await` boundary before a store is created
+     * lets a sibling manifest loading concurrently call `configure()` on the same
+     * singleton first, redirecting this store's reads to the wrong file. (That race
+     * silently dropped whole config manifests — e.g. `ai.providers` — to `null`
+     * whenever several were loaded in one `Promise.all`.)
+     *
+     * We close the window on both sides: re-apply this manifest's config
+     * **synchronously, immediately before** creating the store (no `await` between,
+     * so no sibling can interleave), and the JSON adapter snapshots its resolved
+     * path at `documentStore()` time so the store is immune to later reconfigures.
+     * Together these make concurrent multi-manifest reads correct.
+     */
+    protected openStore(): Promise<{
+        adapter: StorageAdapterInterface;
+        store: StorageDocumentStoreInterface<T>;
+    }>;
+    /**
+     * The selected document owner's coordination identity: includes `basePath`
+     * only when the selected adapter descriptor declares `basePathSemantics: 'filesystem'`,
+     * so memory and remote adapters never require `paths/roots`.
+     */
+    documentIdentity(): Promise<SelectedDocumentIdentity>;
+    /** Fresh selected-owner metadata and conditional reads bypass this manifest's body cache. */
+    documentRevisions(): Promise<DocumentRevisionAccess<T>>;
     /**
      * Load data from storage.
      *
      * @returns The stored data, or null if not found
      */
-    load(): Promise<T | null>;
+    load(options?: StorageLoadOptions): Promise<T | null>;
     /**
      * Save data to storage.
      *
      * @param data - The data to save
      */
     save(data: T): Promise<void>;
+    /** Start the runtime-resolved cloud push after a local save. */
+    private triggerCloudSync;
     /**
-     * Trigger a non-blocking cloud push after save.
-     * Only fires if the manifest has cloud-api in allowedAdapters.
-     *
-     * Consumer modules are loaded via opaque dynamic import to prevent Vite
-     * from tracing them into the client bundle — they contain Node.js APIs
-     * and must only run server-side.
+     * The cloud push after a save, as lifecycle-owned work: bounded by
+     * {@link CLOUD_SYNC_PUSH_TIMEOUT_MS}, aborted when disposal begins, and a
+     * still-running push is joined by disposal within the finalization budget.
+     * The push records its own outcome in sync state; anything that escapes it
+     * (a module that fails to load, an unreadable sync state) is reported once
+     * on the manifest's logger with its value-free facts, never thrown into
+     * the save that already succeeded. The push is started unawaited, so the
+     * report itself never throws: when Logging refuses it (unprepared, or the
+     * runtime is disposing) the failure goes to the kernel diagnostics port.
      */
-    private triggerCloudSync;
+    private pushToCloudAfterSave;
     /**
      * Check if data exists in storage.
      */
@@ -145,16 +219,24 @@ export declare class StorageManifest<T> {
      * @param defaultValue - Value to return if no data exists
      */
     loadOrDefault(defaultValue: T): Promise<T>;
+    /**
+     * The stored layer as written: validated, with no schema default filled
+     * (`null` when nothing is stored). Layered readers (config composition)
+     * merge this with the layers above it and parse once; ordinary callers use
+     * `load()`. An adapter path without `loadStored` is refused, never
+     * answered with the parsed document (which would carry defaults).
+     */
+    loadStored(options?: StorageLoadOptions): Promise<StoredLayer>;
     /**
      * Update data using a transform function.
      *
      * @param transform - Function that receives current data and returns updated data
      */
-    update(transform: (current: T | null) => T): Promise<void>;
+    update(transform: (current: T | null) => T | Promise<T>): Promise<void>;
     /**
      * Validate data against the manifest's schema.
      */
-    validate(data: unknown): z.ZodSafeParseResult<T>;
+    validate(data: UntrustedDocument): z.ZodSafeParseResult<T>;
     /**
      * Subscribe to changes for this manifest.
      * Returns an unsubscribe function.

package/dist/manifest/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/manifest/base.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAGhC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAErE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,KAAK,EAA0B,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAUxF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBAAa,eAAe,CAAC,CAAC;IAC7B,SAAS,CAAC,UAAU,EAAG,yBAAyB,CAAC;IACjD,SAAS,CAAC,OAAO,EAAG,WAAW,CAAC;IAChC,OAAO,CAAC,YAAY,CAAwC;IAG5D,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,cAAc,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAS;IAGzB,OAAO,CAAC,UAAU,CAAkB;IACpC,OAAO,CAAC,UAAU,CAAS;IAG3B,OAAO,CAAC,WAAW,CAAuC;IAC1D,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,mBAAmB,CAAS;IAEpC,OAAO,CAAC,UAAU;IAIlB;;;;;;OAMG;gBACS,cAAc,EAAE,yBAAyB,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW;IAqBrF;;;OAGG;IACH,OAAO,CAAC,cAAc;IAgCtB;;;OAGG;IACH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC;IAIxD;;OAEG;IACH,IAAI,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAGzB;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,MAAM,CAGtB;IAED;;;;;OAKG;cACa,UAAU,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAwF9D;;;OAGG;IACH,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAuCvE,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,yBAAyB;IAQjC;;;OAGG;IACH,SAAS,CAAC,WAAW,CAAC,aAAa,SAAqC,GAAG,MAAM;IA2BjF;;OAEG;IACH,eAAe,IAAI,IAAI;IAKvB;;;OAGG;IACH,aAAa,IAAI,CAAC,GAAG,SAAS;IAO9B;;OAEG;IACH,QAAQ,IAAI,OAAO;IAMnB;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAsB/B;;;;OAIG;IACG,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBlC;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAoBxB;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAMhC;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAa7B;;;;OAIG;IACG,aAAa,CAAC,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAKhD;;;;OAIG;IACG,MAAM,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAMhE;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAMhD;;;;;;OAMG;IACH,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,KAAK,IAAI,GAAG,WAAW;IAkB1D;;OAEG;YACW,gBAAgB;IAW9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAczB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAQxB;;OAEG;IACH,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAUjD;;OAEG;IACH,kBAAkB,IAAI,MAAM;CAG5B"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/manifest/base.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAEpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAEN,KAAK,wBAAwB,EAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACN,gCAAgC,EAChC,6BAA6B,EAC7B,8BAA8B,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,EAAmC,KAAK,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACpH,OAAO,KAAK,EAEX,6BAA6B,EAC7B,kBAAkB,EAClB,WAAW,EACX,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AA2BlE,6HAA6H;AAC7H,OAAO,KAAK,EAAE,oBAAoB,IAAI,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAClG,YAAY,EAAE,oBAAoB,IAAI,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AASlG,6EAA6E;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AACrE,YAAY,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAErE,6DAA6D;AAC7D,OAAO,KAAK,EAAE,mBAAmB,IAAI,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAClG,YAAY,EAAE,mBAAmB,IAAI,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAqBlG,6FAA6F;AAC7F,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAIjD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBAAa,eAAe,CAAC,CAAC;IAC7B,SAAS,CAAC,UAAU,EAAG,yBAAyB,CAAC;IACjD,SAAS,CAAC,OAAO,EAAG,WAAW,CAAC;IAChC,OAAO,CAAC,YAAY,CAAwC;IAC5D,OAAO,CAAC,cAAc,CAAuB;IAC7C,OAAO,CAAC,wBAAwB,CAAsC;IAGtE,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,cAAc,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAS;IAGzB,OAAO,CAAC,UAAU,CAAkB;IACpC,OAAO,CAAC,UAAU,CAAS;IAG3B,OAAO,CAAC,WAAW,CAAuC;IAC1D,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,mBAAmB,CAAS;IAEpC,yEAAyE;IACzE,OAAO,CAAC,UAAU;IAYlB;;;;;;;OAOG;gBACS,cAAc,EAAE,yBAAyB,GAAG,MAAM,EAAE,OAAO,EAAE,WAAW;IA0BpF;;;OAGG;IACH,OAAO,CAAC,cAAc;IA4BtB;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC;IAI7E;;OAEG;IACH,IAAI,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAWzB;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,MAAM,CAGtB;IAED;;;;;OAKG;IACH,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC;IAclD,+EAA+E;IACzE,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAgDzC;;;;;;;OAOG;IACH,OAAO,CAAC,iCAAiC;IA2BzC;;;;;OAKG;cACa,UAAU,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAuF9D;;;OAGG;IACH,SAAS,CAAC,gBAAgB,CACzB,SAAS,CAAC,EAAE,MAAM,EAClB,iBAAiB,GAAE,wBAAwD,GACzE,qBAAqB;IAuDxB,OAAO,CAAC,mBAAmB;IAK3B,OAAO,CAAC,yBAAyB;IAQjC;;;OAGG;IACH,SAAS,CAAC,WAAW,CACpB,KAAK,GAAE,SAA2C,EAClD,aAAa,SAOZ,GACC,MAAM;IA+BT;;OAEG;IACH,eAAe,IAAI,IAAI;IAKvB;;;OAGG;IACH,aAAa,IAAI,CAAC,GAAG,SAAS;IAO9B;;OAEG;IACH,QAAQ,IAAI,OAAO;IAMnB;;;;;;;;;;;;;;;;OAgBG;cACa,SAAS,IAAI,OAAO,CAAC;QACpC,OAAO,EAAE,uBAAuB,CAAC;QACjC,KAAK,EAAE,6BAA6B,CAAC,CAAC,CAAC,CAAC;KACxC,CAAC;IASF;;;;OAIG;IACG,gBAAgB,IAAI,OAAO,CAAC,wBAAwB,CAAC;IAyB3D,6FAA6F;IACvF,iBAAiB,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAQ7D;;;;OAIG;IACG,IAAI,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAwB3D;;;;OAIG;IACG,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAelC,gEAAgE;IAChE,OAAO,CAAC,gBAAgB;IAUxB;;;;;;;;;;OAUG;YACW,oBAAoB;IAqBlC;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAKhC;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAY7B;;;;OAIG;IACG,aAAa,CAAC,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAKhD;;;;;;OAMG;IACG,UAAU,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC;IA4BpE;;;;OAIG;IACG,MAAM,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB7E;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAM1D;;;;;;OAMG;IACH,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,KAAK,IAAI,GAAG,WAAW;IAkB1D;;OAEG;YACW,gBAAgB;IAU9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAczB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAQxB;;OAEG;IACH,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAIjD;;OAEG;IACH,kBAAkB,IAAI,MAAM;CAG5B"}